Tech Support

Reliable UDP (RUDP): The Next Big Streaming Protocol?

2015-02-26T06:53:00.000+05:30

All too often we shy away from the depths of IP protocols, leaving the application vendors such as Microsoft; Wowza Media Systems, LLC; RealNetworks, Inc.; Adobe Systems, Inc.; and others with more specific skills to deal with the dark art of the network layer for us, while we just type in the server name, hit connect, then hit start.
Those who have had a little experience will probably have heard of TCP (transmission control protocol) and UDP (user datagram protocol). They are transport protocols that run over IP links, and they define two different ways to send data from one point to another over an IP network path. TCP running over IP is written TCP/IP; UDP in the same format is UDP/IP.
TCP has a set of instructions that ensures that each packet of data gets to its recipient. It is comparable to recorded delivery in its most basic form. However, while it seems obvious at first that "making sure the message gets there" is paramount when sending something to someone else, there are a few extra considerations that must be noted. If a network link using TCP/IP notices that a packet has arrived out of sequence, then TCP stops the transmission, discards anything from the out-of-sequence packet forward, sends a "go back to where it went wrong" message, and starts the transmission again.
If you have all the time in the world, this is fine. So for transferring my salary information from my company to me, I frankly don't care if this takes a microsecond or an hour, I want it done right. TCP is fantastic for that.
In a video-centric service model, however, there is simply so much data that if a few packets don't make it over the link there are situations where I would rather skip those packets and carry on with the overall flow of the video than get every detail of the original source. Our brain can imagine the skipped bits of the video for us as long as it's not distracted by jerky audio and stop-motion video. In these circumstances, having an option to just send as much data from one end of the link to the other in a timely fashion, regardless of how much gets through accurately, is clearly desirable. It is for this type of application that UDP is optimal. If a packet seems not to have arrived, then the recipient waits a few moments to see if it does arrive -- potentially right up to the moment when the viewer needs to see that block of video -- and if the buffer gets to the point where the missing packet should be, then it simply carries on, and the application skips the point where the missing data is, carrying on to the next packet and maintaining the time base of the video. You may see a flicker or some artifacting, but the moment passes almost instantly and more than likely your brain will fill the gap.

If this error happens under TCP then it can take TCP upward of 3 seconds to renegotiate for the sequence to restart from the missing point, discarding all the subsequent data, which must be requeued to be sent again. Just one lost packet can cause an entire "window" of TCP data to be re-sent. That can be a considerable amount of data, particularly when the link is known as a Long Fat Network link (LFN or eLeFaNt; it's true -- Google it!).

All this adds overhead to the network and to the operations of both computers using that link, as the CPU and network card's processing units have to manage all the retransmission and sync between the applications and these components.

For this reason HTTP (which is always a TCP transfer) generally introduces startup delays and playback latency, as the media players need to buffer more than 3 seconds of playback to manage any lost packets.
Indeed, TCP is very sensitive to something called window size, and knowing that very few of you ever will have adjusted the window size of your contribution feeds as you set up for your live Flash Streaming encode, I can estimate that all but those same very few have been wasting available capacity in your network links. You may not care. The links you use are good enough to do whatever it is you are trying to do.
In today's disposable culture of "use and discard" and "don't fix and reuse," it's no surprise that most streaming engineers just shrug and assume that the ability to get more bang for your buck out of your internet connection is beyond your control.

For example, did you know that if you set your maximum transmission unit (MTU) -- ultimately your video packet size -- too large then the network has to break it in two in a process called fragmentation? Packet fragmentation has a negative impact on network performance for several reasons. First, a router has to perform the fragmentation -- an expensive operation. Second, all the routers in the path between the router performing the fragmentation and the destination have to carry additional packets with the requisite additional headers.

Also, in the event of a retransmission, larger packets increase the amount of data you need to resend if a retransmission occurs.
Alternatively, if you set the MTU too small then the amount of data you can transfer in any one packet is reduced and relatively increases the amount of signaling overhead (the data about the sending of the data, equivalent to the addresses and parcel tracking services in real post). If you set the MTU as small as you can for an Ethernet connection, you could find that the overhead nears 50% of all traffic.
UDP offers some advantages over TCP. But UDP is not a panacea for all video transmissions.
Where you are trying to do large-video file transfer, UDP should be a great help, but its lossy nature is rarely acceptable for stages in the workflow that require absolute file integrity. Imagine studios transferring master encodes to LOVEFiLM or Netflix for distribution. If that transfer to the LOVEFiLM or Netflix playout lost packets then every single subscriber of those services would have to accept that degraded master copy as the best possible copy. In fact, if UDP was used in these back-end workflows, the content would degrade the user's experience in the same way that historically tape-to-tape and other dubbed and analog replication processes used to. Digital media would lose that perfect replica quality that has been central to its success.
Getting back to the focus on who may want to reduce their network capacity inefficiencies: Studios, playouts, news desks, broadcast centers, and editing suites all want their video content intact/lossless, but naturally they want to manipulate that data between machines as fast as possible. Having video editors drinking coffee while videos transfer from one place to another is inefficient (even if the coffee is good).
Given they cannot operate in a lossy way, are these production facilities stuck with TCP and all the inherent inefficiencies that come with the reliable transfer? Because TCP ensures all the data gets from point to point, it is called a "reliable" protocol. In UDP's case, that reliability is "left to the user," so UDP in its native form is known as an "unreliable" protocol.
The good news is that there are indeed options out there in the form of a variety of "reliable UDP" protocols, and we'll be looking at those in the rest of this article. One thing worth noting at the outset, though, is that if you want to optimize links in your workflow, you can either do it the little-bit-hard way and pay very little, or you can do it the easy way and pay a considerable amount to have a solution fitted for you.
Reliable UDP transports can offer the ideal situation for enterprise workflows -- one that has the benefit of high-capacity throughput, minimal overhead, and the highest possible "goodput" (a rarely used but useful term that refers to the part of the throughput that you can actually use for your application's data, excluding other overheads such as signaling). In the Internet Engineering Task Force (IETF) world, from which the IP standards arise, for nearly 30 years there has been considerable work in developing reliable data transfer protocols. RFC-908, dating from way back in 1984, is a good example.
Essentially, RDP (reliable data protocol) was proposed as a transport layer protocol; it was positioned in the stack as a peer to UDP and TCP. It was proposed as an RFC (request for comment) but did not mature in its own right to become a standard. Indeed, RDP appears to have been eclipsed in the late 1990s by the Reliable UDP Protocol (RUDP), and both Cisco and Microsoft have released RUDP versions of their own within their stacks for specific tasks. Probably because of the "task-specific" nature of RUDP implementations, though, RUDP hasn't become a formal standard, never progressing beyond "draft" status.
One way to think about how RUDP types of transport work is to use a basic model where all the data is sent in UDP format, and each missing packet is indexed. Once the main body of the transfer is done, the recipient sends the sender the index list and the sender resends only those packets on the list. As you can see, because it avoids the retransmission of any windows of data that have already been sent that immediately follow a missed packet, this simple model is much more efficient. However, it couldn't work for live data, and even for archives a protocol must be agreed upon for sending the index. It responds to that rerequest in a structured way (which could result in a lot of random seek disc access, for example, if it was badly done).
There are many reasons the major vendor implementations are task-specific. For example, where one may use UDP to avoid TCP retransmission after errors, if the entire data must be faultlessly delivered to the application, one needs to actually understand the application.
If the application requires control data to be sent, it is important for the application to have all the data required to make that decision at any point. If the RUDP system (for example) only looked for and re-requested all the missing packets every 5 minutes (!) then the logical operations that lacked the data could be held up waiting for that re-request to complete. This could break the key function of the application if the control decision needed to be made sooner than within 5 minutes.
On the other hand, if the data is a large archive of videos being sent overnight for precaching at CDN edges, then it may be that the retransmission requests could be managed during the morning. So the retransmission could be delayed until the entire archive has been sent, following up with just the missing packets on a few iterations until all the data is delivered. So the flow, in this case, has to have some user-determined and application-specific control.
TCP is easy because it works in all cases, but it is less efficient because of that. On the other hand, UDP either needs its applications to be resilient to loss or the application developer needs to write in a system for ensuring that missing/corrupted packets are retransmitted. And such systems are in effect proprietary RUDP protocols.
There is an abundance of these, both free and open source, and I am going to look at several of each option (Table 1). Most of you who use existing streaming servers will be tied to the streaming protocols that your chosen vendor offers in its application. However, for those of you developing your own streaming applications, or bespoke aspects of workflows yourselves, this list should be a good start to some of the protocols you could consider. It will also be useful for those of you who are currently using FTP for nonlinear workflows, since the swap out is likely to be relatively straightforward given than most nonlinear systems do not have the same stage-to-stage interdependence that linear or live streaming infrastructures do.
Let's zip (and I do mean zip) through this list. Note that it is not meant to be a comprehensive selection but purely a sampler.
The first ones to explore in my mind are UDP-Lite and Datagram Congestion Control Protocol. These two have essentially become IETF standards, which means that inter-vendor operation is possible (so you won't get locked into a particular vendor).

Table 1: A Selection of Reliable UDP Transports

DCCP

Let's look at DCCP first. DCCP provides initial code implementations for those inclined. From the point of view of a broadcast video engineer, this is really deeply technical stuff for low-level software coders. However, if you happen to be
(or simply have access to) engineers of this skill level then DCCP is freely available. DCCP is a protocol worth considering if you are using shared network infrastructure (as opposed to private or leased line connectivity) and want to ensure you get as much throughput as UDP can enable, while also ensuring that you "play fair" with other users. It is worth commenting that "just turning on UDP" and filling the wire up with UDP data with no consideration of any other user on the wire can saturate the link and effectively make it unusable for others. This is congestion, but DCCP manages to fill the pipe as much as possible, while still inherently enabling other users to use the wire too.
Some of the key DCCP features include the following:

Adding a reliability layer to UDP
Discovery of the right MTU size is part of the protocol design (so you fill the pipe while avoiding fragmentation)
Congestion control

Indeed, to quote the RFC: "DCCP is intended for applications such as streaming media that can benefit from control over the tradeoffs between delay and reliable in-order delivery."

UDP-Lite

The next of these protocols is UDP-Lite. Also an IETF standard, this nearly-identical-to-UDP protocol differs in one key way: It has a checksum (a number that is the result of a logical operation performed on all the data, which if it differs after a transfer indicates that the data is corrupt) and a checksum coverage range that that checksum applies to, whereas vanilla UDP -- optionally in IPv4, and always in IPv6 -- has just a simple checksum on the whole datagram and if present the checksum covers the entire payload.
Let's simplify that a little: What this means is that in UDP-Lite you can define part of the UDP datagram as something that must arrive with "integrity," i.e., a part that must be error-free. But another part of the datagram, for example the much bigger payload of video data itself, can contain errors (remain unchecked against a checksum) since it could be assumed that the application (for example, the H.264 codec) has error handling or tolerance in it.
This UDP-Lite method is very pragmatic. In a noisy network link, the video data may be subject to errors but could be the larger part of the payload, where the important sequence number may only be a smaller part of the data (statistically less prone to errors). If it fails, the application can use UDP-Lite to request a resend of that packet. Note that it is up to the application to request the resend; the UDP-Lite protocol simply flags the failure up and the software can prioritize a resend request, or it can simply plan to work around a "discard" of the failed data. It is also worth noting that most underlying link layer protocols such as Ethernet or similar MAC-based systems may discard damaged frames of data anyway unless something interfaces with those link layer devices. So to work reliably, UDP-Lite needs to interface with the network drivers to "override" these frame discards. This adds complexity to the deployment strategy and certainly most likely takes the opportunity away from being "free." However, it's fundamentally possible.
So I wanted to see what was available "ready to use" for free, or close to free at least. I went looking for a compiled, user-friendly, simple-to-use application with a user-friendly GUI, thinking of the videographers having to learn all this code and deep packet stuff just to upload a video to the office.

UDPXfer

While it's not really a protocol per se, I found UDPXfer, a really simple application with just a UDP "send" and "listener" mode for file transfer.
I set up the software on my laptop and a machine in Amazon EC2, fiddled with the firewall, and sent a file. I got very excited about the prompt 5MB UDP file transfer taking 2 minutes and 27 seconds, and I then set up an FTP of the same file over the same link but was disappointed that the FTP took 1 minute and 50 seconds -- considerably faster. When I looked deeper, however, the UDPXfer sender had a "packets per second" slider. I then nudged the slider to its highest setting, but it was still only essentially 100Kbps maximum, far slower than the effective TCP. So I wrote to the developer, Richard Stanway, about this ceiling. He sent a new version that allowed me to set a 1300 packets-per-second transmission. He commented that it would saturate the IP link from me to the server, and in a shared network environment a better approach would be to the tune the TCP window's size to implement some congestion control. His software was actually geared to resiliency over noisy network links that cause problems for TCP.
Given that I see this technology being used on private wires, the effective saturation that Stanway was concerned about was less of a concern for my enterprise video workflow tests, so I decided to give the new version a try. As expected, I managed to bring the transfer time down to 1 minute and 7 seconds.
So while the software I was using is not on general release, it is clearly possible to implement simple software-only UDP transfer applications that can balance reliability with speed to find a maximum goodput.

Commercial Solutions

But what of the commercial vendors? Do they differentiate significantly enough from "free" to cause me to reach into my pocket?
I caught up with Aspera, Inc. and Motama GmbH, and I also reached out to ZiXi. All of this software is complex to procure at the best of times, so sadly I haven't had a chance to play practically with these. Also, the vendors do not publish rate cards, so it's difficult to comment on their pricing and value proposition.
Aspera co-presented at a recent Amazon conference with my company, and we had an opportunity to dig into its technology model a bit. Aspera is indeed essentially providing variations on the RUDP theme. It provides protocols and applications that sit on top of those protocols to enable fast file distribution over controlled network links. In Aspera's case, it was selling in behind Amazon Web Services Direct Connect to offer optimal upload speeds. It has a range of similar arrangements in place targeting enterprises that handle high volumes of latency-sensitive data. You can license the software or, through the Amazon model, pay for the service by the hour as a premium AWS service. This is a nice flexible option for occasional users.

Aspera provides variations on the RUDP theme, including fasp 3, which the company introduced at this year's IBC in Amsterdam.
I had a very interesting chat with the CEO of Motama, which has a very appliance-based approach to its products. The RUDP-like protocol (called RelayCaster Streaming Protocol or RCSP) is used internally by the company's appliances to move live video from the TVCaster origination appliances to RelayCaster devices. These then can be hierarchically set up in a traditional hub and spoke or potentially other more complex topologies. The software is available (under license) to run on server platforms of your choice, which is good for data center models. They have also recently started to look at licensing the protocol to a wider range of client devices, and they pride themselves in being available for set-top boxes.

Motama offers an appliance-based" approach to its RUDP-like protocol, which it calls RelayCaster Streaming Protocol and which is available for set-top boxes and CDN licensing.

The last player in the sector I wanted to note was ZiXi. While I briefly spoke with ZiXi representatives while writing this, I didn't manage to communicate properly before my deadline, so here is what I know from the company's literature and a few customer comments: ZiXi offers a platform that optimizes video transfer for OTT, internet, and mobile applications. The platform obviously offers a richer range of features than just UDP-optimized streaming, and it has P2P negotiation and transmuxing so you can flip your video from standards such as RTMP out to MPEG-TS, as you can with servers such as Wowza. Internally, within its own ecosystem, the company uses its own hybrid ZiXi protocol, including features such as forward error correction, combining applications layer software in a product called Broadcaster that looks like a server with several common muxes (RTMP, HLS, etc.) and includes ZiXi. If you have an encoder with ZiXi running, then you can contribute directly to the server using the company's RUDP-type transport.

In addition to UDP-optimized streaming, ZiXi offers P2P negotiation and transmuxing, similar to servers from RealNetworks and Wowza.

Worth the Cost?

I am aware none of these companies licenses their software trivially. The software packages are their core intellectual properties, and defending them is vital to the companies' success. I also realize that some of the problems that they purport to address may "go away" when you deploy their technology, but in all honesty, that may be a little like replacing the engine of your car because a spark plug is misfiring.
I am left wondering where the customer can find the balance between the productivity gains in accelerating his or her workflow with these techniques (free or commercial) against the cost of a private connection plus either the cost of development time to implement one of the open/free standards or the cost of buying a supported solution.
The pricing indication I have from a few undisclosed sources is that you need to be expecting to spend a few thousand on the commercial vendor's licensing, and then more for applications, appliances, and support. This can quickly rise to a significant number.
This increased cost to improve the productivity of your workflow must be at some considerable scale, since I personally think that a little TCP window sizing, and perhaps paying for slightly "fatter" internet access, may resolve most problems -- particularly in archive transfer and so on -- and is unlikely to cost thousands.
However, at scale, where those optimizations start to make a significant productivity difference, it clearly makes a lot of sense to engage with a commercially supported provider to see if its offering can help.
At the end of the day, regardless of the fact that with a good developer you can do most things for free, there are important drivers in large businesses that will force an operator to choose to pay for a supported, tested, and robust option. For many of the same reasons, Red Hat Linux was a premium product, despite Linux itself being free.
I urge you to explore this space. To misquote James Brown: "Get on the goodput!"
This article appears in the October/November, 2012, issue of Streaming Media magazine as "Get on the Goodput."

NTFS or FAT32?

2013-10-16T10:21:00.002+05:30

NTFS is the recommended file system for Windows XP and provides a number of benefits in terms of functionality, security, stability, availability, reliability, and performance. There are very few reasons to persist with FAT32.

If your PC has an earlier version of Windows on it in a dual-boot or multi-boot configuration with Windows XP then do not convert the system/boot partition to NTFS because if you do, the older version of Windows will not boot.

If you are looking for hard disk tools, you will find formatting tools and instructions on formatting hard disks here, data recovery tools here, and manufacturer's disk utilities here.

Page Index

About FAT32

	Limitations of FAT32 - A Microsoft knowledge base article for Windows XP Home Edition, Professional, and 64-Bit Edition. This article discusses the limitations of the FAT32 file system in Windows XP. Description of the FAT32 File System in Windows XP - This article describes the FAT32 file system that is included with Microsoft Windows XP.
	Reasons to Retain FAT32 Dual and Multi-booting: If you want to install Windows 95, 98 or Millennium Edition with Windows XP using NTFS then the boot volume must be formatted as FAT32, not NTFS; this is because the older OSen must be installed on the boot volume. FAT32 is the only file common file system that the older OSen support that will also work with XP using NTFS. Windows 95 OSR2, Windows 98, Windows 2000, and Windows XP support FAT32 volumes. Small Disks: If you have old, low capacity drives of 20GB or less, FAT32 may afford a performance increase. For partitions of 2GB or less, FAT is recommended. Features not needed: If you do not need NTFS security, encryption, NTFS performance enhancements or support for large disks then there is no real reason to use NTFS. If you later decide to use NTFS, you can convert FAT32 to NTFS. The conversion process is discussed later in this article.

	Benefits of NTFS Support for large hard drives in excess of 127GB. Support for large files. NTFS in Windows XP supports a maximum file size up to the capacity of the disk. FAT32 supports a maximum file size of only 4 GB. Simple management of single disk partitions. No reboot is required between creating a new partition and formatting it. Improved performance, optimised for general performance and boot times. The size of the Master File Table (MFT) and its location are optimised based on the hard drive characteristics. DISKPART and FORMAT takes about 90 seconds on a large hard drive. NTFS incorporates advanced file system features such as security, transacted operations, large volumes, and better performance on larger disks. These are not available on either FAT or FAT32 disks. File compression and encryption. Third-party tools are not required. Volume shadow copy backup enable backups to be made without rebooting. A local hard drive can be mounted to a folder on an NTFS volume. NTFS is a journaling file system. It writes a log of changes being made to the files on disk. This offers significant benefits in cases where a system is susceptible to power loss, experiences an unexpected reboot, or a crash. NTFS can quickly return a disk to a consistent state without running CHKDSK, whereas FAT32 always requires CHKDSK to be run effect recovery if a failure occurs. CHKDSK can take a very long time to complete on larger FAT32 drives but is very quick on NTFS.Both FAT and FAT32 have scaling and compatibility limitations that NTFS does not have. An NTFS volume is capable of scaling on very large disk sizes with a single partition and supports software RAID.
	For more technical information on the benefits of NTFS, read the Microsoft Windows Hardware and Driver Central article on NTFS Preinstallation and Windows XP.

	For information on how Windows XP dynamically self-tunes, read the Windows Hardware and Driver Central article about Benchmarking on Windows XP Home Edition and Professional. The article also covers disk efficiency optimisations, boot and application-launch prefetching, as well as idle task scheduling.

NTFS & FAT32 Red Herrings

	If you don't know what a red herring is, read this.
	DOS FDISK Does Not Support NTFS FDISK Can Format NTFS Partitions Both of those statements are false. Uninformed rumours and unfounded statements about Windows 98 or DOS 6 FDISK make up one of the fishiest smelling red herrings about NTFS. The fact of the matter is, FDISK does not format any kind of partition. FDISK is a rudimentary partition manager. Furthermore, FDISK can work with NTFS partitions but it cannot delete NTFS partitions that are logical drives on extended partitions. Read Formatting / Partitioning Hard Disks and Installing XP for more information.
	Windows 98 Cannot Read NTFS This statement is false. It is only true insofar as Windows 98 cannot natively read NTFS disks. If you need to access a NTFS partition via Windows 98, you accomplish this with a third-party driver. Sysinternals once offered a free, read-only driver that allowed Windows 98 to read a NTFS partition. A full read/write access version was also available for purchase, however Sysinternals were absorbed into Microsoft in 2007, who then took over support of the Administrator's Pak, which contained the driver. You may still be able to find both the read-only and full version of the driver here, however Avira, the antivirus company, have made NTFS4DOS available, which enables access to NTFS drives for MS-DOS. The product has been discontinued and is unsupported by Avira but it is still available and free for personal use. You can get NTFS4DOS here.
	I want to Network XP with Windows 98 so I can't use NTFS This statement is false. The file system is independent of the network. If two machines are communicating over a network, the machines will not care about the file system, even if one of them is using clay tablets for mass storage.
	FAT32 Has Better Performance and is More Efficient Than NTFS This statement is false. NTFS is much more efficient than FAT32. Larger disks that are formatted FAT32 require far bigger File Tables. Larger file tables take longer to read. It is this for reason that XP will not allow you to create a FAT32 volume greater than 32GB in size.
	XP Does Not Support FAT32 Drives Larger than 32GB This statement is false. It does not follow that XP does not support FAT32 drives greater than 32GB just because XP will not allow you to create a FAT32 volume greater than 32GB. If a disk is preformatted with FAT32, right up to the theoretical limit for FAT32 disks, XP will support it.
	NTFS Does Not Fragment This statement is false. File fragmentation is a fact of life, irrespective of the underlying file system. Files increase and decrease in size with use, or are created, deleted and recreated over and over. Operating Systems attempt to keep parts of files in their place as new clusters are added as and when they are needed. The allocation of additional clusters cannot be guaranteed to follow on sequentially from where the file currently resides and are almost always allocated from a completely different location on the disk. It is this allocation process that causes fragmentation. If it is true that NTFS does not fragment, why does XP ship with a defragmenter?
	There are Very Few Recovery Tools for NTFS This statement is false. Not only does Windows XP ship with some very extensive system recovery and protection tools, it includes an impressive range of disaster recovery tools, far beyond what earlier versions of Windows ever provided. Plus there are a great number of third-party tools available, a lot of them free, to supplement those that come with XP. Windows XP provides advanced disk and maintenance tools you can use to prevent problems from occurring. Some of the most useful tools are discussed in the Data Corruption and Hard Disk Troubleshooting article on this site. The disk-related tools allow you to view disk information and correct a problem before it becomes a serious issue.

Converting FAT32 to NTFS

Windows XP comes with the tools necessary to convert your FAT16 or FAT32 file system to NTFS, however there are a number of issues that you must consider before taking the conversion route. The problems to contend with range from permissions issues to performance degradation.

	Permissions If you use the convert utility on an existing installation of Windows XP Professional or on Windows XP Home Edition, the default security settings installed on for FAT32 are not appropriate for NTFS. The result is that the All Users folder and all its subfolders have faulty permissions, for example you may notice that your virus scanner locks or gets stuck trying to access System Volume Information: To work around this problem, consult the File security issues after converting FAT32 partitions to the NTFS file system knowledgebase article.
	Performance On volumes that are created (not converted) as NTFS volumes, clusters start at sector zero, therefore every cluster is aligned on what is known as the cluster boundary. If the FAT32 partition was not created by Windows XP or Windows 2000 then the presence of the earlier OS' FAT/FAT32 reserved structures means that a FAT/FAT32 format cannot guarantee that data clusters will be aligned on a cluster boundary. In turn, this causes the conversion tool to use 512k clusters, which can potentially cause serious degradation in disk performance. To put that another way, earlier FAT/FAT32 OSen use a different reserved structure format to win2k and winXP, which means that there is a difference in the offset to the data clusters. To make up for this difference, the conversion tool uses a smaller cluster size. To avoid this problem, you must convert your FAT16/FAT32 disk to 4k aligned clusters. BootIt NG from TeraByte has an "Align for NTFS only" option that will convert your FAT clusters to 4k aligned. BootIt NG has a free trial period and is highly recommended. Caution: You should backup your important files before performing the alignment. Caution: The 4k alignment process may take several hours to complete. Caution: The 4k alignment task is not for the faint-hearted. Consider formatting with NTFS instead. To Use BootIt NG to align the clusters you will need a floppy drive. After extracting the files from the download archive: Run BOOTITNG.EXE to create a boot floppy Don't allow BootIt to install on your hard disk; do this by clicking the "Cancel Install" button, which will take you straight into the Maintenance screen Select "Partition Work" and choose the partition to be aligned Click "Slide" Check "Align for NTFS only" Click "OK" Once the alignment is complete, reboot and defragment the hard disk. How to Defragment Your Disk Drive Volumes in Windows XP This article describes how to defragment your disk drive volumes and describes the limitations of using Disk Defragmenter Microsoft Management Console (MMC) that is included with Windows XP. The Free Space That Is Required to Convert FAT to NTFS Check that you have sufficient free space to perform the conversion. Then do the FAT to NTFS conversion: How To Convert a FAT16 or FAT32 Volume to NTFS in Windows XP kadaitcha.cx recommends that you consider not converting your drive from FAT16/FAT32 to NTFS, and instead consider backing up your important data, do a NTFS format and clean install your OS. "Insufficient Disk Space for Conversion" Error Message When You Convert a Disk from FAT to NTFS in Windows XP File security issues after converting FAT32 partitions to the NTFS file system The "Drive Properties" Dialog Box May Display the Wrong File System Type After a Drive Is Converted to NTFS After you convert a drive to the NTFS file system by using the Convert.exe tool, the file system type may still be displayed as file allocation table (FAT) or FAT32 on the dialog box of the drive.

NTFS Troubleshooting

	"Missing or corrupt Ntfs.sys" error message when you restart Windows XP after you convert your hard disk to the NTFS file system You can use the following command to convert your hard disk from the FAT 32 file system to the NTFS file system: convert drive: /fs:ntfs When you use the command, after the computer completes the conversion and you restart Windows XP, you may receive an error message similar to the following error message: Windows could not start because the following file is missing or corrupt: System32\Drivers\Ntfs.sys
	How to Disable the 8.3 Name Creation on NTFS Partitions The creation of 8.3 filenames and directories for all long filenames and directories on NTFS partitions may decrease directory enumeration performance. This article describes a method of disabling the 8.3 name creation on all NTFS partitions. NOTE: Although disabling 8.3 name creation increases file performance under Windows NT, some 16-bit applications may not be able to find files and directories with long filenames.
	Chkdsk in Read-Only Mode Does Not Detect Corruption on NTFS Volume When you run the Chkdsk utility program in read-only mode on a volume that uses the NTFS file system, Chkdsk may not detect corruption in the disk structure.
	Error Message: "Access Is Denied" When You Try to Open NTFS File System Folders When you install Microsoft Windows XP Home Edition, and then you try to open folders on a different logical drive on your computer, you may receive the following error message: Access is denied.
	Windows Installer Error 1619 When You Install from NTFS-Protected Directories When you install a Setup program that is based on Windows Installer Setup technology, you may receive the following Windows Installer error message: This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package. If you have a verbose log file of the Setup program, the following information also appears at the end of the log file: MSI (c) (6C:54): Package name extracted from package path: 'somesetup.msi' MSI (c) (6C:54): Could not create LFN path for package: 'H:\tmp\apps\coreapps\somesetup\somesetup.msi' This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package. MSI (c) (6C:54): MainEngineThread is returning 1619.
	You cannot delete a file or a folder on an NTFS file system volume This article describes why you may not be able to delete a file or a folder on an NTFS file system volume and how to address the different causes to resolve this issue.
	How to use Xcacls.vbs to modify NTFS permissions There is an updated version of the Extended Change Access Control List tool (Xcacls.exe) that is available as a Microsoft Visual Basic script (Xcacls.vbs) from Microsoft. This step-by-step article describes how to use the Xcacls.vbs script to modify and to view NTFS file system permissions for files or for folders. You can use Xcacls.vbs from the command line to set all the file system security options that are accessible in Microsoft Windows Explorer. Xcacls.vbs displays and modifies the access control lists (ACLs) of files.
	Cannot View NTFS Logical Drive After Using Fdisk If you start Windows XP in a dual-boot environment with Windows 95 or Windows 98, use the Fdisk tool to delete a logical drive using the File Allocation Table (FAT) file system, and then restart Windows XP, you may no longer see logical drives within the Logical Disk Manager in Windows XP. For example, this behavior may occur if you do the following: You configure your computer to dual-boot between Windows XP and Windows 95 with a primary FAT file system partition as drive C. In Windows XP, you configure two logical drives: Drive D using NTFS Drive E using the FAT file system When you run Fdisk, you can view only the logical drive using the FAT file system (which is labeled drive D by Fdisk but is drive E in Windows XP). When you attempt to delete drive D, you delete the NTFS logical drive instead.
	Error message when you try to open files on an NTFS file system volume on a Windows XP-based computer: "Stop 0x0000008E" You have a computer that is running Microsoft Windows XP Service Pack 2. You have one or more NTFS file system volumes on the computer. You have a third-party driver installed on the computer. When you try to open files on a NTFS file system volume, you may experience the following symptoms: Your computer automatically restarts. After you log on, you receive the following error message: Microsoft Windows The system has recovered from a serious error. A log of this error has been created. Please tell Microsoft about this problem. We have created an error report that you can send to help us improve Microsoft Windows. We will treat this report as confidential and anonymous. To see what data this error report contains, click here. If the error message still appears, and if you want to see the data that the error report contains, click the click here link at the bottom of the message box. Then, you see error signature information that may resemble the following: BCCode : 0000008E BCP1 : c0000005 BCP2 : f83ef720 BCP3 : a91e8844 BCP4 : 0 OSVer : 5_1_2600 SP : 2_0 Product : 256_1 You receive the following "Stop" error message: A problem has been detected and Windows has been shut down to prevent damage to your computer Technical information: *** STOP: 0x0000008E (c0000005, f83ef720, a91e8844, 0) KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
	"Windows could not start because the following file is missing: \system32\drivers\ntfs.sys" error message in Windows XP Service Pack 2 If you install the 826939 Update Rollup 1 for Windows XP on a Windows XP SP2-based computer, the computer may not always start. You may receive a message that says that the \System32\Drivers\Ntfs.sys file is missing.
	The Default Cluster Size for the NTFS and FAT File Systems This article describes and lists the default values that Windows XP uses to format a volume. The article lists default values for both the NTFS file system and the file allocation table (FAT) file system.
	The partition size is extended, but the file system remains the original size when you extend an NTFS volume n Microsoft Windows XP and in Windows Server 2003, after you use the Disk Management snap-in or the Diskpart.exe command-line utility to extend a basic or dynamic NTFS file system volume, the partition size is extended, but the file system remains its original size. You do not receive an error message, but when you view the disk information in the Disk Management snap-in, the volume appears as the extended partition size, but the value in the Capacity column still shows the original size. If you view the properties of the volume in My Computer, or if you run the Chkdsk.exe tool against the NTFS volume, both items report the file system size as it was before the extension.
	You receive a "This folder already contains a file named ''" message when you copy an NTFS encrypted file to a new location on a Windows XP Service Pack 2-based computer Consider the following scenario: You have installed file security products on a Microsoft Windows XP Service Pack 2 (SP2)-based computer. You are using drives that are formatted to use the NTFS file system. You copy an NTFS encrypted file to a new location on the computer. In this scenario, you receive the following message: This folder already contains a file named 'filename'. Would you like to replace the existing file filesize modified date and time with this one? filesize modified date and time You receive this message even though you copied the encrypted file to a folder that does not already contain the encrypted file.
	Extending NTFS volume fails but appears to be successful When you try to extend an NTFS file system volume on a basic disk, or when you try to extend a dynamic NTFS volume, the operation is not successful. In Disk Management, the partition appears to be extended and appears to use the additional free space, showing that the volume was successfully spanned across disks. However, the NTFS on that volume is still the original size that it was before the extension. In My Computer, the properties of the volume show that the volume is the same size that it was before the extension. If you run Chkdsk on the NTFS volume, it reports the volume size that existed before you tried to perform the extension. This problem may also occur if you use the unattended parameter extendoempartition=1 during an unattended Windows setup and the boot disk is larger than approximately 200 gigabytes (GB). Setup successfully extends the partition but fails "silently" to increase the NTFS. After Setup has completed, the system volume properties as shown in My Computer show that the volume is the same size as it was before the installation.
	You Can View an NTFS Encrypted File in Thumbnail View If you encrypt a file by using the NTFS file system, and the view is set to Thumbnail, the contents of the file may still be visible. For example, if you encrypt an image file or an HTML file, and then you set it to the Thumbnail view, you will be able to see the image or HTML image on the thumbnail.
	Computer Stops Responding (Hangs) When It Writes Encrypted Data to an NTFS Partition In certain situations, your computer may stop responding, or hang, when it writes files or folders that are encrypted with the Encrypting File System (EFS) to a partition that is formatted with the NTFS file system. When your computer hangs, you cannot access the contents of the partition, and you have to restart your computer to restore functionality. This problem has been reported to occur when your computer restores data to encrypted files by using VERITAS Backup Exec version 8.6 or later or by using NTBackup.exe. This problem may also occur when your computer writes EFS data with other programs.
	Intermittent memory corruption occurs in the binary data that is stored on a compressed NTFS file system drive on a Windows XP-based computer Intermittent memory corruption occurs in the binary data that is stored on a compressed NTFS file system drive on a Windows XP-based computer. The computer cannot run programs that use this binary data.
	How to locate and correct disk space problems on NTFS volumes in Windows XP The NTFS file system supports many volume- and file-level features that may cause free disk space to be either misreported or reported as lost. You may notice this behaviour if an NTFS volume suddenly becomes very full, and you cannot find the cause or locate the folders and files that cause the NTFS volume to become full. This behaviour may occur if a user gains malicious or unauthorized access to an NTFS volume on which either very large files or a high quantity of small files are secretly copied, and then removes or restricts NTFS permissions on these files. This behaviour may also occur after a system malfunction or a power outage that causes volume corruption to occur. This article describes how to check NTFS disk space allocation to either discover offending files and folders or locate volume corruption. This article is intended for users of Windows XP operating systems that support advanced storage features and troubleshooting methods.
	How To Disable the NTFS File System Tracking of Broken Shortcut Links If you disable a shortcut, the NTFS File System in Windows XP and Windows 2000 automatically attempts to locate the shortcut destination by searching all paths that are associated with the shortcut. This step-by-step article describes how to prevent this behaviour from occurring.
	How to create and use NTFS mounted drives in Windows XP and in Windows Server 2003 This article describes how to create a mounted drive by using Disk Management in Microsoft Windows XP and in Microsoft Windows Server 2003. A mounted drive is a drive that is mapped to an empty folder on a volume that uses the NTFS file system. Mounted drives function as any other drives, but they are assigned drive paths instead of drive letters. When you view a mounted drive in Windows Explorer, it appears as a drive icon in the path in which it is mounted. Because mounted drives are not subject to the 26-drive-letter limit for local drives and mapped network connections, use mounted drives when you want to gain access to more than 26 drives on your computer. For example, if you have a CD-ROM drive with the drive letter E, and an NTFS volume with the drive letter F, mount the CD-ROM drive as F:\CD-ROM. You can then free the drive letter E, and gain access to your CD-ROM drive directly by using F:\CD-ROM. You can also use mounted drives when you need additional storage space on a volume. If you map a folder on that volume to another volume with available disk space (for example, 2 gigabytes), you extend the storage space of the volume by 2 gigabytes (GB). With mounted drives, you are not limited by the size of the volume in which the folder is created. Mounted drives make your data more accessible and give you the flexibility to manage data storage based on your work environment and system usage. These are additional examples by which you can use mounted drives: To provide additional disk space for your temporary files, you can make the C:\Temp folder a mounted drive. When space starts to run low on drive C, you can move the My Documents folder to another drive with more available disk space, and then mount it as C:\My Documents. Use the Disk Management snap-in to mount a drive on a folder on a local volume. The folder in which you mount the drive must be empty, and must be located on a basic or dynamic NTFS volume.
	You may receive an error message when you try to rename a folder on an NTFS partition in Windows XP When you try to rename a folder on an NTFS file system partition in Microsoft Windows XP, you may receive an error message that is similar to the following: Cannot rename foldername: Access is denied. Make sure the disk is not full or write-protected and that the file is not currently in use.
	Error message and events are logged in the System log when you try to compress a large file on an NTFS volume in Windows XP, in Windows 2000, or in Windows Server 2003: "Delayed Write Failed" Consider the following scenario. You have a computer that is running Microsoft Windows 2000, Microsoft Windows XP, or Microsoft Windows Server 2003. On this computer, you have a very large file on an NTFS file system volume. You try to compress the file by using NTFS File Compression, or you try to copy the file to an NTFS compressed folder. In this scenario, you may receive the following error message: Delayed Write Failed Note: This article applies to Microsoft Windows XP Home Edition, Microsoft Windows XP Professional (32-bit), and Microsoft Windows XP Professional x64 Edition.

2013-10-16T10:19:00.000+05:30

Creating the first Windows Server 2003 Domain Controller in a domain

Preface:

One of the greatest features of Windows Server 2003 is its ability to be a Domain Controller (DC). The features of a domain extend further than this tutorial ever could, but some of its most well known features are its ability to store user names and passwords on a central computer (the Domain Controller) or computers (several Domain Controllers). In this tutorial we will cover the "promoting" (or creating) of the first DC in a domain. This will include DNS installation, because without DNS the client computers wouldn't know who the DC is. You can host DNS on a different server, but we'll only deal with the basics.

Method:

Click Start -> Run...

Type "dcpromo" and click "OK"

You will see the first window of the wizard. As it suggests, I suggest reading the help associated with Active Directory. After this, click "Next"

Click "Next" on the compatibility window, and in the next window keep the default option of "Domain Controller for a new domain" selected, and click "Next"

In this tutorial we will create a domain in a new forest, because it is the first DC, so keep that option selected

Now we have to think of a name for our domain. If you own a web domain like "visualwin.com", you can use it, but it isn't suggested because computers inside of your domain may not be able to reach the company website. Active Directory domains don't need to be "real" domains like the one above - they can be anything you wish. So here I will create "visualwin.testdomain"

Now in order to keep things simple, we will use the first part of our domain ("visualwin"), which is the default selection, as the NetBIOS name of the domain

The next dialog suggests storing the AD database and log on separate hard disks, and so do I, but for this tutorial I'll just keep the defaults

The SYSVOL folder is a public share, where things like .MSI software packages can be kept when you will distribute packages (as I said, AD has a lot of different features). Once again, I will keep the default selection but it can be changed if you wish to use the space of another drive

Now we will get a message that basically says that you will need a DNS server in order for everything to work the way we want it (i.e., our "visualwin.testdomain" to be reachable). As I mentioned earlier, we will install the DNS server on this machine as well, but it can be installed elsewhere. So keep the default selection of "Install and configure", and click "Next"

Because, after all, this is a Windows Server 2003 tutorial website, we'll assume there are no pre-Windows 2000 servers that will be accessing this domain, so keep the default of "Permissions compatible only with Windows 2000 or Windows Server 2003 operating systems" and click "Next"

The restore mode password is the single password that all administrators hope to never use, however they should also never forget it because this is the single password that might save a failed server. Make sure it's easy to remember but difficult to guess

Now we will see a summary of what will happen. Make sure it's all correct because changing it afterwards can prove to be difficult

After the previous next was clicked, the actual process occurs. This can take several minutes. It's likely that you will be prompted for your Windows Server 2003 CD (for DNS) so have it handy

If your computer has a dynamically assigned address (from DHCP) you will be prompted to give it a static IP address. Click ok, and then in the Local Area Connection properties, click "Internet Protocol (TCP/IP)" and then "Properties"

In the next window select "Use the following IP address" and select the information that you will use for your domain (and 127.0.0.1 for the primary DNS, because your computer will host DNS. I still suggest setting up an alternate as well.) Click "OK" and then "Close" on the next window

And after a while you will see

And we're finished. You may also want to see the other Active Directory tutorials on the main page.

NTFS or FAT32?

2013-10-16T10:18:00.001+05:30

Limitations of FAT32

A Microsoft knowledge base article for Windows XP Home Edition, Professional, and 64-Bit Edition. This article discusses the limitations of the FAT32 file system in Windows XP.

Reasons to Retain FAT32

Dual and Multibooting: If you want to install Windows 95 or 98 with Windows NT 4.0 or Windows 2000, the boot volume must be formatted as FAT, not NTFS, because Windows 95 and Windows 98 must be installed on the boot volume when more than one operating system is installed, and FAT is the only file system those systems support. Windows 95 OSR2, Windows 98, Windows 2000, and Windows XP support FAT32 volumes. (Read TechNet article )

Small Disks: If you have old, low capacity drives of 20GB or less, FAT32 may afford a performance increase. For partitions of 2GB or less, FAT is recommended.

Required for Applications: Only in very rare circumstances do applications require a particular file system. The file system is normally independent of the application. If your application requires FAT or FAT32, you might wish to consider your need to continue using it or try to obtain an upgrade.

Features not needed: If you do not need NTFS security, encryption, its performance enhancements or support for large disks, then there is no real reason to use it. If you later decide to use NTFS, you can convert FAT32 to NTFS. The conversion process is discussed later in this article. You should read that section now even if you decide that you don't want NTFS at the moment.

Benefits of NTFS

Support for large hard drives in excess of 127GB.

Support for large files. NTFS in Windows XP supports a maximum file size up to the capacity of the disk. FAT32 supports a maximum file size of only 4 GB.

Simple management of single disk partitions. No reboot is required between creating a new partition and formatting it.

Improved performance, optimised for general performance and boot times.

The size of the Master File Table (MFT) and its location are optimised based on the hard drive characteristics.

DISKPART and FORMAT takes about 90 seconds on a large hard drive.

NTFS incorporates advanced file system features such as security, transacted operations, large volumes, and better performance on larger disks. These are not available on either FAT or FAT32 disks.

File compression and encryption. Third-party tools are not required.

Volume shadow copy backup enable backups to be made without rebooting.

A local hard drive can be mounted to a folder on an NTFS volume.

NTFS is a journaling file system. It writes a log of changes being made to the files on disk. This offers significant benefits in cases where a system is susceptible to power loss, experiences an unexpected reboot, or a crash. NTFS can quickly return a disk to a consistent state without running CHKDSK, whereas FAT32 always requires CHKDSK to be run effect recovery if a failure occurs.

CHKDSK can take a very long time to complete on larger FAT32 drives but is very quick on NTFS.

Both FAT and FAT32 have scaling and compatibility limitations that NTFS does not have. An NTFS volume is capable of scaling on very large disk sizes with a single partition and supports software RAID.

For more technical information on the benefits of NTFS, read the Microsoft Windows Hardware and Driver Central article on NTFS Preinstallation and Windows XP.

For information on how Windows XP dynamically self-tunes, read the Windows Hardware and Driver Central article about Benchmarking on Windows XP Home Edition and Professional. The article also covers disk efficiency optimisations, boot and application-launch prefetching, as well as idle task scheduling.

Red Herrings

FAT32 Has Better Performance and is More Efficient Than NTFS

This is completely untrue. NTFS is much more efficient than FAT32. Larger disks that are formatted FAT32 require far bigger File Tables. Larger file tables take longer to read. It is this for reason that XP will not allow you to create a FAT32 volume greater than 32GB in size.

XP Does Not Support FAT32 Drives Larger than 32GB

This is completely untrue. It does not follow that XP does not support FAT32 drives greater than 32GB just because it will not allow you to create a FAT32 volume greater than 32GB. If a disk is preformatted with FAT32, right up to the theoretical limit for FAT32 disks, XP will support it.

Windows 98 Cannot Read NTFS

This is only true insofar as Windows 98 cannot natively read NTFS disks. If you need to access a NTFS partition via Windows 98, you accomplish this with a third-party driver. Sysinternals offer a free, read-only driver that will allow Windows 98 to read a NTFS partition. If you need full read/write access

NTFS Does Not Fragment

This is completely untrue. File fragmentation is a fact of life, irrespective of the underlying file system. Files increase and decrease in size with use, or are created, deleted and recreated over and over. Operating Systems attempt to keep parts of files in their place as new clusters are added as and when they are needed. The allocation of additional clusters cannot be guaranteed to follow on sequentially from where the file currently resides and are almost always allocated from a completely different location on the disk. It is this allocation process that causes fragmentation.

If it were true that NTFS does not fragment, why is Windows XP shipped with a defragmentation tool?

DOS FDISK Does Not Support NTFS or FDISK Can Format NTFS Partitions

Uninformed rumours and unfounded statements about Windows 98 or DOS 6 FDISK make up one of the fishiest smelling red herrings about NTFS. The fact of the matter is, FDISK does not format any kind of partition. FDISK is a rudimentary partition manager. Furthermore, FDISK can work with NTFS partitions but it cannot delete NTFS partitions that are logical drives on extended partitions.

There are Very Few Recovery Tools for NTFS

This is completely untrue. Not only does Windows XP ship with some very extensive system recovery and protection tools, it includes an impressive range of disaster recovery tools, far beyond what earlier versions of Windows ever provided. Plus there are a great munber of third-party tools available, a lot of them free, to supplement those that come with XP.

Windows XP provides advanced disk and maintenance tools you can use to prevent problems from occurring. Some of the most useful tools are discussed in the Dealing with Data Corruption article on this site. The disk-related tools allow you to view disk information and correct a problem before it becomes a serious issue.

Independent Viewpoints

You should make up your own mind about using NTFS or FAT32 and you should not rely on only one source of infomation. Read the two-part article listed below or use this link to visit google and search for more information with relevant keywords.

Choosing FAT or NTFS Part 1: What's the difference?

Choosing FAT or NTFS Part 2: Making the Decision

Converting FAT32 to NTFS

If you decide to stay with FAT32, you can always CONVERT your file system to NTFS, however there are a number of issues that you must consider before taking the conversion route. The problems to contend with range from permissions issues to performance degradation.

Permissions: The convert procedure uses the default security settings specified in a file called "Setup Security.inf". If Windows XP was initially installed on a FAT32 partition, the default security settings are not appropriate for NTFS. A workaround is available from microsoft.com.

Performance: On volumes that are created (not converted) as NTFS volumes, clusters start at sector zero, therefore every cluster is aligned on what is known as the cluster boundary. If the FAT32 partition was not created by Windows XP or Windows 2000, the FAT/FAT32 reserved structures mean that a FAT/FAT32 format cannot guarantee that data clusters will be aligned on a cluster boundary. In turn, this can cause the conversion process to be forced to use 512k clusters, thus causing a potentially serious degradation in disk performance.

Tools are available to convert FAT/FAT32 to 4k aligned clusters, but the process is not recommended for the novice thus a clean install with a NTFS format should be considered in preference to a conversion. Read these Microsoft articles for more information:

HOW TO: Convert a FAT16 or FAT32 Volume to NTFS in Windows XP

How to Use Convert.exe to Convert a Partition to the NTFS File System

Cisco IP Services Commands

2013-10-16T10:14:00.000+05:30

acccess-class
access-list (IP extended)
access-list (IP standard)
clear access-list counters
clear ip accounting
clear ip drp
clear tcp statistics
deny (IP)
dynamic
ip access-group
ip access-list
ip accounting
ip accounting-list
ip accounting-threshold
ip accounting-transits
ip accounting mac-address
ip accounting precedence
ip drp access-group
ip drp authentication key-chain
ip drp server
ip icmp rate-limit unreachable
ip icmp redirect
ip mask-reply
ip mtu
ip redirects
ip source-route
ip tcp chunk-size
ip tcp compression-connections
ip tcp header-compression
ip tcp path-mtu-discovery

ip tcp queuemax
ip tcp selective-ack
ip tcp synwait-time
ip tcp timestamp
ip tcp window-size
ip unreachables
permit (IP)
show access-lists
show interface mac
show interface precedence
show ip access-list
show ip accounting
show ip drp
show ip redirects
show ip sockets
show ip tcp header-compression
show ip traffic
show standby
show tcp statistics
standby authentication
standby ip
standby mac-address
standby mac-refresh
standby priority, standby preempt
standby timers
standby track
standby use-bia
transmit-interface

IP Services Commands

Use the commands in this chapter to configure various IP services. For configuration information
and examples on IP services, refer to the "Configuring IP Services" chapter of the
Network Protocols Configuration Guide, Part 1.

access-class

To restrict incoming and outgoing connections between a particular virtual terminal line
(into a Cisco device) and the addresses in an access list, use the access-class line configuration
command. To remove access restrictions, use the no form of this command.

access-class access-list-number {in | out}

no access-class access-list-number {in | out}

Syntax Description

access-list-number	Number of an IP access list. This is a decimal number from 1 to 199 or from 1300 to 2699.
in	Restricts incoming connections between a particular Cisco device and the addresses in the access list.
out	Restricts outgoing connections between a particular Cisco device and the addresses in the access list.

Defaults

No access lists are defined.

Command Modes

Line configuration

Command History

Release	Modification
10.0	This command was introduced.

Usage Guidelines

Remember to set identical restrictions on all the virtual terminal lines because a user can connect
to any of them.To display the access lists for a particular terminal line, use the show line EXEC
command and specify the line number.

Examples

The following example defines an access list that permits only hosts on network 192.89.55.0 to
connect to the virtual terminal ports on the router:

access-list 12 permit 192.89.55.0  0.0.0.255

 line 1 5

 access-class 12 in

The following example defines an access list that denies connections to networks other than
network 36.0.0.0 on terminal lines 1 through 5:

access-list 10 permit 36.0.0.0 0.255.255.255

 line 1 5

 access-class 10 out

Related Commands

Command	Description
show line	Displays the parameters of a terminal line.

access-list (IP extended)

To define an extended IP access list, use the extended version of the access-list global configuration
command. To remove the access lists, use the no form of this command.

access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
protocol source source-wildcard destination destination-wildcard [precedence precedence]
[tos tos] [log | log-input] [fragments]

no access-list access-list-number

Internet Control Message Protocol (ICMP)

access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
icmp source source-wildcard destination destination-wildcard [icmp-type | [[icmp-type icmp-code]
| [icmp-message]] [precedence precedence] [tos tos] [log | log-input] [fragments]

Internet Group Management Protocol (IGMP)

access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
igmp source source-wildcard destination destination-wildcard [igmp-type] [precedence precedence]
[tos tos] [log | log-input] [fragments]

TCP

access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
tcp source source-wildcard [operator port [port]]
destination destination-wildcard [operator port [port]]
[established] [precedence precedence] [tos tos] [log | log-input] [fragments]

User Datagram Protocol (UDP)

access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit}
udp source source-wildcard [operator port [port]] destination destination-wildcard
[operator port [port]] [precedence precedence] [tos tos] [log | log-input] [fragments]

Caution Enhancements to this command are backward compatible; migrating from releases
prior to Release 11.1 will convert your access lists automatically. However, releases prior to
Release 11.1 are not upwardly compatible with these enhancements. Therefore, if you save
an access list with these images and then use software prior to Release 11.1, the resulting access
list will not be interpreted correctly. This could cause you severe security problems.
Save your old configuration file before booting these images.

Syntax Description

access-list-number	Number of an access list. This is a decimal number from 100 to 199 or from 2000 to 2699.
dynamic dynamic-name	(Optional) Identifies this access list as a dynamic access list. Refer to lock-and-key access documented in the "Configuring Lock-and-Key Security (Dynamic Access Lists)" chapter in the Security Configuration Guide.
timeout minutes	(Optional) Specifies the absolute length of time (in minutes) that a temporary access list entry can remain in a dynamic access list. The default is an infinite length of time and allows an entry to remain permanently. Refer to lock-and-key access documented in the "Configuring Lock-and-Key Security (Dynamic Access Lists)" chapter in the Security Configuration Guide.
deny	Denies access if the conditions are matched.
permit	Permits access if the conditions are matched.
protocol	Name or number of an IP protocol. It can be one of the keywords eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, pim, tcp, or udp, or an integer in the range 0 to 255 representing an IP protocol number. To match any Internet protocol (including ICMP, TCP, and UDP) use the keyword ip. Some protocols allow further qualifiers described below.
source	Number of the network or host from which the packet is being sent. There are three alternative ways to specify the source: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
source-wildcard	Wildcard bits to be applied to source. Each wildcard bit set to zero indicates that the corresponding bit position in the packet's ip address must exactly match the bitvalue in the corresponding bit position in the source. Each wildcard bit set toone indicates that both a zero bit and a one bit in the corresponding position of the packet's ip address will be considered a match to this access list entry. There are three alternative ways to specify the source wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. For example, 0.0.255.255 to require an exact match of only the first 16 bits of the source. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0. Wildcard bits set to one do not need to be contiguous in the source-wildcard. For example, a source-wildcard of 0.255.0.64 would be valid.
destination	Number of the network or host to which the packet is being sent. There are three alternative ways to specify the destination: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for the destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
destination-wildcard	Wildcard bits to be applied to the destination. There are three alternative ways to specify the destination wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
precedence precedence	(Optional) Packets can be filtered by precedence level, as specified by a number from 0 to 7 or by name as listed in the section "Usage Guidelines."
tos tos	(Optional) Packets can be filtered by type of service level, as specified by a number from 0 to 15 or by name as listed in the section "Usage Guidelines."
icmp-type	(Optional) ICMP packets can be filtered by ICMP message type. The type is a number from 0 to 255.
icmp-code	(Optional) ICMP packets that are filtered by ICMP message type can also be filtered by the ICMP message code. The code is a number from 0 to 255.
icmp-message	(Optional) ICMP packets can be filtered by an ICMP message type name or ICMP message type and code name. The possible names are found in the section"Usage Guidelines."
igmp-type	(Optional) IGMP packets can be filtered by IGMP message type or message name. A message type is a number from 0 to 15. IGMP message names are listed in the section "Usage Guidelines."
operator	(Optional) Compares source or destination ports. Possible operands include lt (less than), gt (greater than), eq (equal), neq (not equal), and range (inclusive range). If the operator is positioned after the source and source-wildcard, it must match the source port. If the operator is positioned after the destination and destination-wildcard, it must match the destination port. The range operator requires two port numbers. All other operators require one port number.
port	(Optional) The decimal number or name of a TCP or UDP port. A port number is a number from 0 to 65535. TCP port names are listed in the section "Usage Guidelines. " TCP port names can only be used when filtering TCP. UDP port names are listed in the section "Usage Guidelines. " UDP port names can only be used when filtering UDP. TCP port names can only be used when filtering TCP. UDP port names can only be used when filtering UDP.
established	(Optional) For the TCP protocol only: Indicates an established connection. A match occurs if the TCP datagram has the ACK, FIN, PSH, RST, SYN or URG control bits set. The nonmatching case is that of the initial TCP datagram to form a connection.
log	(Optional) Causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the logging consolecommand.) The message includes the access list number, whether the packet was permitted or denied; the protocol, whether it was TCP, UDP, ICMP or a number; and, if appropriate, the source and destination addresses and source and destination port numbers. The message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval. The logging facility might drop some logging message packets if there are too many to be handled or if there is more than one logging message to be handled in 1 second. This behavior prevents the router from crashing due to too many logging packets. Therefore, the logging facility should not be used as a billing tool or an accurate source of the number of matches to an access list.
log-input	(Optional) Includes the input interface and source MAC address or VC in the logging output.
fragments	(Optional) The access list entry applies to noninitial fragments of packets; the fragment is either permitted or denied accordingly. For more details about the fragments keyword, see the "Access List Processing of Fragments" and "Fragments and Policy Routing" sections in the "Usage Guidelines" section.

Defaults

An extended access list defaults to a list that denies everything. An extended access list is t
erminated by an implicit deny statement.

Command Modes

Global configuration

Command History

Release	Modification
10.0	This command and the UDP form of this command were introduced.
10.3	The ICMP, IGMP, and TCP forms of this command were introduced. The following keywords and arguments were added: •source •source-wildcard •destination •destination-wildcard •precedence precedence •icmp-type •icm-code •icmp-message •igmp-type •operator •port •established
11.1	The following keywords and arguments were added: •dynamic dynamic-name •timeout minutes
11.2	The following keyword was added: •log-input
12.0(11)	The fragments keyword was added.

Usage Guidelines

You can use access lists to control the transmission of packets on an interface,
control virtual terminal line access, and restrict contents of routing updates.
The Cisco IOS software stops checking the extended access list after a match occurs.

Note After an access list is created initially, any subsequent additions
(possibly entered from the terminal) are placed at the end of the list. In other words,
you cannot selectively add or remove access list command lines from a specific access list.

The following is a list of precedence names:

•critical •flash •flash-override •immediate •internet •network •priority •routine The following is a list of type of service (TOS) names: •max-reliability •max-throughput •min-delay •min-monetary-cost •normal The following is a list of ICMP message type names and ICMP message type and code names: •administratively-prohibited •alternate-address •conversion-error •dod-host-prohibited •dod-net-prohibited •echo •echo-reply •general-parameter-problem •host-isolated •host-precedence-unreachable •host-redirect •host-tos-redirect •host-tos-unreachable •host-unknown •host-unreachable •information-reply •information-request
The following is a list of IGMP message names:
•dvmrp •host-query •host-report •pim •trace
The following is a list of TCP port names that can be used instead of port numbers. Refer to the current Assigned Numbers RFC to find a reference to these protocols. Port numbers corresponding to these protocols can also be found by typing a ? in the place of a port number.
•bgp •chargen •daytime •discard •domain •echo •finger •ftp •ftp-data •gopher •hostname •irc •klogin •kshell •lpd •nntp •pop2 •pop3 •smtp •sunrpc •syslog •tacacs-ds •talk •telnet •time •uucp •whois •www
The following is a list of UDP port names that can be used instead of port numbers. Refer to the current Assigned Numbers RFC to find a reference to these protocols. Port numbers corresponding to these protocols can also be found by typing a ? in the place of a port number.
•biff •bootpc •bootps •discard •dns •dnsix •echo •mobile-ip •nameserver •netbios-dgm •netbios-ns •ntp •rip •mask-reply •mask-request •mobile-redirect •net-redirect •net-tos-redirect •net-tos-unreachable •net-unreachable •network-unknown •no-room-for-option •option-missing •packet-too-big •parameter-problem •port-unreachable •precedence-unreachable •protocol-unreachable •reassembly-timeout •redirect •router-advertisement •router-solicitation •source-quench •source-route-failed •time-exceeded •timestamp-reply •timestamp-request •traceroute •ttl-exceeded •snmp •snmptrap •sunrpc •syslog •tacacs-ds •talk •tftp •time •who •xdmcp •unreachable

Access List Processing of Fragments

The behavior of access-list entries regarding the use or lack of the fragments
keyword can be summarized as follows:

If the Access-List Entry has...

Then..

...no fragments keyword
(the default behavior),
and assuming all of
the access-list entry information matches,

For an access-list entry containing only
Layer 3 information:

• The entry is applied to nonfragmented packets,
initial fragments and noninitial fragments.

For an access list entry containing Layer 3 and
Layer 4 information:

• The entry is applied to nonfragmented packets
and initial fragments.

–If the entry is a permit statement, the packet
or fragment is permitted.

–If the entry is a deny statement, the packet
or fragment is denied.

• The entry is also applied to noninitial fragments
in the following manner. Because noninitial
fragments contain only Layer 3 information,
only the Layer 3 portion of an access-list entry
can be applied. If the Layer 3 portion of
the access-list entry matches, and

–If the entry is a permit statement,
the noninitial fragment is permitted.

–If the entry is a deny statement, the next access-list
entry is processed.

Note The deny statements are handled differently
for noninitial fragments versus nonfragmented or
initial fragments.

...the fragments keyword, and
assuming all of the access-list
entry information matches,

The access-list entry is applied only to noninitial fragments.

Note The fragments keyword cannot be configured for
an access-list entry that contains any Layer 4 information.

Be aware that you should not simply add the fragments keyword to every access list entry
because the first fragment of the IP packet is considered a nonfragment and is treated
independently of the subsequent fragments. An initial fragment will not match an access list
permit or deny entry that contains the fragments keyword, the packet is compared to
the next access list entry, and so on, until it is either permitted or denied by an access list entry
that does not contain the fragments keyword. Therefore, you may need two access list entries
for every deny entry. The first deny entry of the pair will not include the fragments keyword,
and applies to the initial fragment. The second deny entry of the pair will include the fragments
keyword and applies to the subsequent fragments. In the cases where there are multiple deny
access list entries for the same host but with different Layer 4 ports, a single deny
access-list entry with the fragments keyword for that host is all that needs to be added.
Thus all the fragments of a packet are handled in the same manner by the access list.

Packet fragments of IP datagrams are considered individual packets and each counts
individually as a packet in access list accounting and access list violation counts.

Note The fragments keyword cannot solve all cases involving access lists and IP fragments.

Fragments and Policy Routing

Fragmentation and the fragment control feature affect policy routing if the policy routing is based
on the match ip address command and the access list had entries that match on Layer 4 through
7 information. It is possible that noninitial fragments pass the access list and are policy routed,
even if the first fragment was not policy routed or the reverse.

By using the fragments keyword in access list entries as described earlier,
a better match between the action taken for initial and noninitial fragments can be made and
. it is more likely policy routing will occur as intended.

Examples

In the following example, serial interface 0 is part of a Class B network with the address 128.88.0.0,
and the mail host's address is 128.88.1.2. The keyword established is used only for
the TCP protocol to indicate an established connection. A match occurs if the TCP datagram
has the ACK or RST bits set, which indicate that the packet belongs to an existing connection.

access-list 102 permit tcp 0.0.0.0 255.255.255.255 128.88.0.0 0.0.255.255 established

access-list 102 permit tcp 0.0.0.0 255.255.255.255 128.88.1.2 0.0.0.0 eq 25

interface serial 0

 ip access-group 102 in

The following example also permit Domain Naming System (DNS) packets and ICMP echo
and echo reply packets:

access-list 102 permit tcp any 128.88.0.0 0.0.255.255 established

access-list 102 permit tcp any host 128.88.1.2 eq smtp

access-list 102 permit tcp any any eq domain

access-list 102 permit udp any any eq domain

access-list 102 permit icmp any any echo

access-list 102 permit icmp any any echo-reply

The following examples show how wildcard bits are used to indicate the bits of the prefix or
mask that are relevant. They are similar to the bitmasks that are used with normal access lists.
Prefix/mask bits corresponding to wildcard bits set to 1 are ignored during comparisons and
prefix/mask bits corresponding to wildcard bits set to 0 are used in comparison.

In the following example, permit 192.108.0.0 255.255.0.0 but deny any more specific routes
of 192.108.0.0 (including 192.108.0.0 255.255.255.0).

access-list 101 permit ip 192.108.0.0 0.0.0.0   255.255.0.0 0.0.0.0

access-list 101 deny ip 192.108.0.0 0.0.255.255  255.255.0.0 0.0.255.255

In the following example, permit 131.108.0/24 but deny 131.108/16 and
all other subnets of 131.108.0.0.

access-list 101 permit ip 131.108.0.0 0.0.0.0     255.255.255.0 0.0.0.0

access-list 101 deny ip 131.108.0.0 0.0.255.255 255.255.0.0   0.0.255.255

Related Commands


Command	Description
access-class	Restricts incoming and outgoing connections between a particular vty (into a Cisco device) and the addresses in an access list.
access-list (IP standard)	Defines a standard IP access list.
clear access-template	Clears a temporary access list entry from a dynamic access list manually.
distribute-list in (IP)	Filters networks received in updates.
distribute-list out (IP)	Suppresses networks from being advertised in updates.
ip access-group	Controls access to an interface.
ip access-list	Defines an IP access list by name.
ip accounting	Enables IP accounting on an interface.
logging console	Limits messages logged to the console based on severity.
show access-lists	Displays the contents of current IP and rate-limit access lists.
show ip access-list	Displays the contents of all current IP access lists.

access-list (IP standard)

To define a standard IP access list, use the standard version of the access-list
global configuration command. To remove a standard access lists, use the no form of this command.

access-list access-list-number {deny | permit} source [source-wildcard] [log]

no access-list access-list-number

Caution Enhancements to this command are backward compatible; migrating from
releases prior to Release 10.3 will convert your access lists automatically. However,
releases prior to Release 10.3 are not upwardly compatible with these enhancements.
Therefore, if you save an access list with these images and then use software prior to
Release 10.3, the resulting access list will not be interpreted correctly.
This could cause you severe security problems.
Save your old configuration file before booting these images.

Syntax Description


access-list-number	Number of an access list. This is a decimal number from1 to 99 or from 1300 to 1999.
deny	Denies access if the conditions are matched.
permit	Permits access if the conditions are matched.
source	Number of the network or host from which the packet is being sent. There are two alternative ways to specify the source: Use a 32-bit quantity in four-part, dotted-decimal format. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255.
source-wildcard	(Optional) Wildcard bits to be applied to source. Each wildcard bit set to zero indicates that the corresponding bit position in the packet's ip address must exactly match the bit value in the corresponding bit position in the source. Each wildcard bit set to one indicates that both a zero bit and a one bit in the corresponding position of the packet's ip address will be considered a match to this access list entry. There are two alternative ways to specify the source wildcard: Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. For example, 0.0.255.255 to require an exact match of only the first 16 bits of the source. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. Wildcard bits set to one do not need to be contiguous in the source-wildcard. For example, a source-wildcard of 0.255.0.64 would be valid.
log	(Optional) Causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the logging console command.) The message includes the access list number, whether the packet was permitted or denied, the source address, and the number of packets. The message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval. The logging facility might drop some logging message packets if there are too many to be handled or if there is more than one logging message to be handled in 1 second. This behavior prevents the router from crashing due to too many logging packets. Therefore, the logging facility should not be used as a billing tool or an accurate source of the number of matches to an access list.

Defaults

The access list defaults to an implicit deny statement for everything.
The access list is always terminated by an implicit deny statement for everything.

Command Modes

Global configuration

Command History


Release	Modification
10.3	This command was introduced.
11.3(3)T	The log keyword was added.

Usage Guidelines

Plan your access conditions carefully and be aware of the implicit deny statement at
the end of the access list.

You can use access lists to control the transmission of packets on an interface,
control virtual terminal line access, and restrict the contents of routing updates.

Use the show access-lists EXEC command to display the contents of all access lists.

Use the show ip access-list EXEC command to display the contents of one access list.

Examples

The following example of a standard access list allows access for only those hosts on
the three specified networks. The wildcard bits apply to the host portions of the network addresses.
Any host with a source address that does not match the access list statements will be rejected.

access-list 1 permit 192.5.34.0  0.0.0.255

access-list 1 permit 128.88.0.0  0.0.255.255

access-list 1 permit 36.0.0.0  0.255.255.255

! (Note: all other access implicitly denied)

The following example of a standard access list allows access for devices with
IP addresses in the range 10.29.2.64 to 10.29.2.127. All packets with a source address
not in this range will be rejected.

access-list 1 permit 10.29.2.64 0.0.0.63

! (Note: all other access implicitly denied)

To specify a large number of individual addresses more easily,
you can omit the wildcard if it is all zeros. Thus,
the following two configuration commands are identical in effect:

access-list 2 permit 36.48.0.3

access-list 2 permit 36.48.0.3  0.0.0.0

Related Commands


Command	Description
access-class	Restricts incoming and outgoing connections between a particular vty (into a Cisco device) and the addresses in an access list.
access-list (IP extended)	Defines an extended IP access list.
distribute-list in (IP)	Filters networks received in updates.
distribute-list out (IP)	Suppresses networks from being advertised in updates.
ip access-group	Controls access to an interface.
show access-lists	Displays the contents of current IP and rate-limit access lists.
show ip access-list	Displays the contents of all current IP access lists.

clear access-list counters

To clear the counters of an access list, use the clear access-list counters EXEC command.

clear access-list counters {access-list-number | name}

Syntax Description


access-list-number	Access list number of the access list for which to clear the counters.
name	Name of an IP access list. The name cannot contain a space or quotation mark, and must begin with an alphabetic character to avoid ambiguity with numbered access lists.

Command Modes

EXEC

Command History


Release	Modification
11.0	This command was introduced.

Usage Guidelines

Some access lists keep counters that count the number of packets that pass each line of an access list.
The show access-lists command displays the counters as a number of matches.
Use the clear access-list counters command to restart the counters for a particular access list to 0.

Examples

The following example clears the counters for access list 101:

clear access-list counters 101

Related Commands


Command	Description
show access-lists	Displays the contents of current IP and rate-limit access lists.

clear ip accounting

To clear the active or checkpointed database when IP accounting is enabled,
use the clear ip accounting EXEC command.

clear ip accounting [checkpoint]

Syntax Description


checkpoint	(Optional) Clears the checkpointed database.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

You can also clear the checkpointed database by issuing the clear ip accounting command
twice in succession.

Examples

The following example clears the active database when IP accounting is enabled:

clear ip accounting

Related Commands

Command	Description
ip accounting	Enables IP accounting on an interface.
ip accounting-list	Defines filters to control the hosts for which IP accounting information is kept.
ip accounting-threshold	Sets the maximum number of accounting entries to be created.
ip accounting-transits	Controls the number of transit records that are stored in the IP accounting database.
show ip accounting	Displays the active accounting or checkpointed database or displays access list violations.

clear ip drp

To clear all statistics being collected on Director Response Protocol (DRP) requests and replies,
use the clear ip drp EXEC command.

clear ip drp

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History


Release	Modification
11.2 F	This command was introduced.

Examples

The following example clears all DRP statistics:

clear ip drp

Related Commands

Command	Description
ip drp access-group	Controls the sources of DRP queries to the DRP Server Agent.
ip drp authentication key-chain	Configures authentication on the DRP Server Agent for DistributedDirector.

clear tcp statistics

To clear TCP statistics, use the clear tcp statistics EXEC command.

clear tcp statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History


Release	Modification
11.3	This command was introduced.

Examples

The following example clears all TCP statistics:

clear tcp statistics

Related Commands

Command	Description
show tcp statistics	Displays TCP statistics.

deny (IP)

To set conditions for a named IP access list, use the deny access-list configuration command.
To remove a deny condition from an access list, use the no form of this command.

deny {source [source-wildcard] | any} [log]

no deny {source [source-wildcard] | any}

deny protocol source source-wildcard destination destination-wildcard [precedence precedence]
[tos tos] [log] [fragments]

no deny protocol source source-wildcard destination destination-wildcard

ICMP

deny icmp source source-wildcard destination destination-wildcard
[icmp-type [icmp-code] | icmp-message]
[precedence precedence] [tos tos] [log] [fragments]

IGMP

deny igmp source source-wildcard destination destination-wildcard [igmp-type]
[precedence precedence] [tos tos] [log] [fragments]

TCP

deny tcp source source-wildcard [operator port [port]] destination destination-wildcard
[operator port [port]] [established] [precedence precedence] [tos tos] [log] [fragments]

UDP

deny udp source source-wildcard [operator port [port]] destination destination-wildcard
[operator port [port]] [precedence precedence] [tos tos] [log] [fragments]

Syntax Description

source	Number of the network or host from which the packet is being sent. There are two alternative ways to specify the source: Use a 32-bit quantity in four-part, dotted-decimal format. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255.
source-wildcard	(Optional) Wildcard bits to be applied to the source. There are two alternative ways to specify the source wildcard: Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255.
protocol	Name or number of an IP protocol. It can be one of the keywords eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, tcp, or udp, or an integer in the range 0 to 255 representing an IP protocol number. To match any Internet protocol (including ICMP, TCP, and UDP), use the keyword ip. Some protocols allow further qualifiers described later.
source	Number of the network or host from which the packet is being sent. There are three alternative ways to specify the source: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
source-wildcard	Wildcard bits to be applied to source. There are three alternative ways to specify the source wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
destination	Number of the network or host to which the packet is being sent. There are three alternative ways to specify the destination: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for the destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
destination-wildcard	Wildcard bits to be applied to the destination. There are three alternative ways to specify the destination wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
precedence precedence	(Optional) Packets can be filtered by precedence level, as specified by a number from 0 to 7 or by name as listed in the section "Usage Guidelines."
tos tos	(Optional) Packets can be filtered by type of service level, as specified by a number from 0 to 15 or by name as listed in the "Usage Guidelines" section of the access-list (IP extended) command.
icmp-type	(Optional) ICMP packets can be filtered by ICMP message type. The type is a number from 0 to 255.
icmp-code	(Optional) ICMP packets which are filtered by ICMP message type can also be filtered by the ICMP message code. The code is a number from 0 to 255.
icmp-message	(Optional) ICMP packets can be filtered by an ICMP message type name or ICMP message type and code name. The possible names are found in the "Usage Guidelines" section of the access-list (IP extended) command.
igmp-type	(Optional) IGMP packets can be filtered by IGMP message type or message name. A message type is a number from 0 to 15. IGMP message names are listed in the "Usage Guidelines" section of the access-list (IP extended) command.
operator	(Optional) Compares source or destination ports. Possible operands include lt (less than), gt (greater than), eq (equal), neq (not equal), and range (inclusive range). If the operator is positioned after the source and source-wildcard, it must match the source port. If the operator is positioned after the destination and destination-wildcard, it must match the destination port. The range operator requires two port numbers. All other operators require one port number.
port	(Optional) The decimal number or name of a TCP or UDP port. A port number is a number from 0 to 65535. TCP and UDP port names are listed in the "Usage Guidelines" section of the access-list (IP extended) command. TCP port names can only be used when filtering TCP. UDP port names can only be used when filtering UDP.
established	(Optional) For the TCP protocol only: Indicates an established connection. A match occurs if the TCP datagram has the ACK or RST bits set. The nonmatching case is that of the initial TCP datagram to form a connection.
log	(Optional) Causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the logging console command.) The message for a standard list includes the access list number, whether the packet was permitted or denied, the source address, and the number of packets. The message for an extended list includes the access list number; whether the packet was permitted or denied; the protocol; whether it was TCP, UDP, ICMP, or a number; and, if appropriate, the source and destination addresses and source and destination port numbers. For both standard and extended lists, the message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval. The logging facility might drop some logging message packets if there are too many to be handled or if there is more than one logging message to be handled in 1 second. This behavior prevents the router from crashing due to too many logging packets. Therefore, the logging facility should not be used as a billing tool or an accurate source of the number of matches to an access list.
fragments	(Optional) The access list entry applies to noninitial fragments of packets; the fragment is either permitted or denied accordingly. For more details about the fragments keyword, see the "Access List Processing of Fragments" and "Fragments and Policy Routing" sections in the "Usage Guidelines" section.

Defaults

There is no specific condition under which a packet is denied passing the named access list.

Command Modes

Access-list configuration

Command History


Release	Modification
11.2	This command was introduced.
11.3(3)T	The log keyword for a standard access was added.
12.0(11)	The fragments keyword was added.

Usage Guidelines

Use this command following the ip access-list command to specify conditions under which
a packet cannot pass the named access list.

Access List Processing of Fragments

The behavior of access-list entries regarding the use or lack of the fragments
keyword can be summarized as follows:

If the Access-List Entry has...

Then..

...no fragments keyword
(the default behavior), and assuming all of the access-list entry information matches,

For an access-list entry containing only Layer 3 information:

•The entry is applied to nonfragmented packets,
initial fragments and noninitial fragments.

For an access list entry containing Layer 3 and Layer 4 information:

•The entry is applied to nonfragmented packets and initial fragments.

–If the entry is a permit statement, the packet or fragment is permitted.

–If the entry is a deny statement, the packet or fragment is denied.

•The entry is also applied to noninitial fragments in the following manner.
Because noninitial fragments contain only Layer 3 information,
only the Layer 3 portion of an access-list entry can be applied. If the Layer 3 portion of the access-list entry matches, and

–If the entry is a permit statement, the noninitial fragment is permitted.

–If the entry is a deny statement, the next access-list entry is processed.

Note The deny statements are handled differently for noninitial fragments versus nonfragmented or initial fragments.

...the fragments keyword, and assuming all of the access-list entry information matches,

Note The access-list entry is applied only to noninitial fragments.
The fragments keyword cannot be configured for an access-list entry that contains any Layer 4 information.

Be aware that you should not simply add the fragments keyword to every access list entry because
the first fragment of the IP packet is considered a nonfragment and is treated independently of
the subsequent fragments. An initial fragment will not match an access list permit or
deny entry that contains the fragments keyword, the packet is compared to the next access list entry,
and so on, until it is either permitted or denied by an access list entry that does not contain
the fragments keyword. Therefore, you may need two access list entries for every deny entry.
The first deny entry of the pair will not include the fragments keyword, and applies to
the initial fragment. The second deny entry of the pair will include the fragments keyword and
applies to the subsequent fragments. In the cases where there are multiple
deny access list entries for the same host but with different Layer 4 ports,
a single deny access-list entry with the fragments keyword for that host is all that needs to be added.
Thus all the fragments of a packet are handled in the same manner by the access list.

Packet fragments of IP datagrams are considered individual packets and each counts individually
as a packet in access list accounting and access list violation counts.

Note The fragments keyword cannot solve all cases involving access lists and IP fragments.

Fragments and Policy Routing

Fragmentation and the fragment control feature affect policy routing if the policy routing is based on the match ip address command and the access list had entries that match on Layer 4 through 7 information. It is possible that noninitial fragments pass the access list and are policy routed, even if the first fragment was not policy routed or the reverse.

By using the fragments keyword in access list entries as described earlier, a better match between the action taken for initial and noninitial fragments can be made and it is more likely policy routing will occur as intended.

Examples

The following example sets a deny condition for a standard access list named Internetfilter:

ip access-list standard Internetfilter

 deny 192.5.34.0  0.0.0.255

 permit 128.88.0.0  0.0.255.255

 permit 36.0.0.0  0.255.255.255

! (Note: all other access implicitly denied)

Related Commands


Command	Description
ip access-group	Controls access to an interface.
ip access-list	Defines an IP access list by name.
logging console	Limits messages logged to the console based on severity.
permit (IP)	Sets conditions for a named IP access list.
show access-lists	Displays the contents of all current IP access lists.

dynamic

To define a named, dynamic, IP access list, use the dynamic access-list configuration command. To remove the access lists, use the no form of this command.

dynamic dynamic-name [timeout minutes] {deny | permit} protocol source source-wildcard destination destination-wildcard [precedence precedence] [tos tos] [log] [fragments]

no dynamic dynamic-name

ICMP

dynamic dynamic-name [timeout minutes] {deny | permit} icmp source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message] [precedence precedence] [tos tos] [log] [fragments]

IGMP

dynamic dynamic-name [timeout minutes] {deny | permit} igmp source source-wildcard destination destination-wildcard [igmp-type] [precedence precedence] [tos tos] [log] [fragments]

TCP

dynamic dynamic-name [timeout minutes] {deny | permit} tcp source source-wildcard [operator port [port]] destination destination-wildcard [operator port [port]] [established] [precedence precedence] [tos tos] [log] [fragments]

UDP

dynamic dynamic-name [timeout minutes] {deny | permit} udp source source-wildcard [operator port [port]] destination destination-wildcard [operator port [port]] [precedence precedence] [tos tos] [log] [fragments]

Caution Named IP access lists will not be recognized by any software release prior to Cisco IOS Release 11.2.

Syntax Description


dynamic-name	Identifies this access list as a dynamic access list. Refer to lock-and-key access documented in the "Configuring Lock-and-Key Security (Dynamic Access Lists)" chapter in the Security Configuration Guide.
timeout minutes	(Optional) Specifies the absolute length of time (in minutes) that a temporary access list entry can remain in a dynamic access list. The default is an infinite length of time and allows an entry to remain permanently. Refer to lock-and-key access documented in the "Configuring Lock-and-Key Security (Dynamic Access Lists)" chapter in the Security Configuration Guide.
deny	Denies access if the conditions are matched.
permit	Permits access if the conditions are matched.
protocol	Name or number of an IP protocol. It can be one of the keywords eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, tcp, or udp, or an integer in the range 0 to 255 representing an IP protocol number. To match any Internet protocol (including ICMP, TCP, and UDP), use the keyword ip. Some protocols allow further qualifiers described later.
source	Number of the network or host from which the packet is being sent. There are three alternative ways to specify the source: Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
source-wildcard	Wildcard bits to be applied to source. There are three alternative ways to specify the source wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
destination	Number of the network or host to which the packet is being sent. There are three alternative ways to specify the destination: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for the destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
destination-wildcard	Wildcard bits to be applied to the destination. There are three alternative ways to specify the destination wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
precedence precedence	(Optional) Packets can be filtered by precedence level, as specified by a number from 0 to 7 or by name as listed in the section "Usage Guidelines."
tos tos	(Optional) Packets can be filtered by type of service level, as specified by a number from 0 to 15 or by name as listed in the section "Usage Guidelines."
icmp-type	(Optional) ICMP packets can be filtered by ICMP message type. The type is a number from 0 to 255.
icmp-code	(Optional) ICMP packets which are filtered by ICMP message type can also be filtered by the ICMP message code. The code is a number from 0 to 255.
icmp-message	(Optional) ICMP packets can be filtered by an ICMP message type name or ICMP message type and code name. The possible names are found in the section "Usage Guidelines."
igmp-type	(Optional) IGMP packets can be filtered by IGMP message type or message name. A message type is a number from 0 to 15. IGMP message names are listed in the section "Usage Guidelines."
operator	(Optional) Compares source or destination ports. Possible operands include lt (less than), gt (greater than), eq (equal), neq (not equal), and range (inclusive range). If the operator is positioned after the source and source-wildcard, it must match the source port. If the operator is positioned after the destination and destination-wildcard, it must match the destination port. The range operator requires two port numbers. All other operators require one port number.
port	(Optional) The decimal number or name of a TCP or UDP port. A port number is a number from 0 to 65535. TCP and UDP port names are listed in the "Usage Guidelines" section of the access-list (IP extended) command. TCP port names can only be used when filtering TCP. UDP port names can only be used when filtering UDP.
established	(Optional) For the TCP protocol only: Indicates an established connection. A match occurs if the TCP datagram has the ACK or RST bits set. The nonmatching case is that of the initial TCP datagram to form a connection.
log	(Optional) Causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the logging console command.) The message includes the access list number, whether the packet was permitted or denied; the protocol, whether it was TCP, UDP, ICMP or a number; and, if appropriate, the source and destination addresses and source and destination port numbers. The message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval. The logging facility might drop some logging message packets if there are too many to be handled or if there is more than one logging message to be handled in 1 second. This behavior prevents the router from crashing due to too many logging packets. Therefore, the logging facility should not be used as a billing tool or an accurate source of the number of matches to an access list.
fragments	(Optional) The access list entry applies to noninitial fragments of packets; the fragment is either permitted or denied accordingly. For more details about the fragments keyword, see the "Access List Processing of Fragments" and "Fragments and Policy Routing" sections in the "Usage Guidelines" section.

Defaults

An extended access list defaults to a list that denies everything. An extended access list is terminated by an implicit deny statement.

Command Modes

Access-list configuration

Command History


Release	Modification
11.2	This command was introduced.
12.0(11)	The fragments keyword was added.

Usage Guidelines

You can use named access lists to control the transmission of packets on an interface and restrict contents of routing updates. The Cisco IOS software stops checking the extended access list after a match occurs.

Fragmented IP packets, other than the initial fragment, are immediately accepted by any extended IP access list. Extended access lists used to control virtual terminal line access or restrict contents of routing updates must not match against the TCP source port, the type of service value, or the packet's precedence.

Note After an access list is created initially, any subsequent additions (possibly entered from the terminal) are placed at the end of the list. In other words, you cannot selectively add or remove access list command lines from a specific access list.

The following is a list of precedence names:

•critical

•flash

•flash-override

•immediate

•internet

•network

•priority

•routine

The following is a list of type of service (TOS) names:

•max-reliability

•max-throughput

•min-delay

•min-monetary-cost

•normal

The following is a list of ICMP message type names and ICMP message type and code names:

•administratively-prohibited

•alternate-address

•conversion-error

•dod-host-prohibited

•dod-net-prohibited

•echo

•echo-reply

•general-parameter-problem

•host-isolated

•host-precedence-unreachable

•host-redirect

•host-tos-redirect

•host-tos-unreachable

•host-unknown

•host-unreachable

•information-reply

•information-request

•mask-reply

•mask-request

•mobile-redirect

•net-redirect

•net-tos-redirect

•net-tos-unreachable

•net-unreachable

•network-unknown

•no-room-for-option

•option-missing

•packet-too-big

•parameter-problem

•port-unreachable

•precedence-unreachable

•protocol-unreachable

•reassembly-timeout

•redirect

•router-advertisement

•router-solicitation

•source-quench

•source-route-failed

•time-exceeded

•timestamp-reply

•timestamp-request

•traceroute

•ttl-exceeded

•unreachable

The following is a list of IGMP message names:

•dvmrp

•host-query

•host-report

•pim

•trace

The following is a list of TCP port names that can be used instead of port numbers. Refer to the current Assigned Numbers RFC to find a reference to these protocols. Port numbers corresponding to these protocols can also be found by typing a ? in the place of a port number.

•bgp

•chargen

•daytime

•discard

•domain

•echo

•finger

•ftp

•ftp-data

•gopher

•hostname

•irc

•klogin

•kshell

•lpd

•nntp

•pop2

•pop3

•smtp

•sunrpc

•syslog

•tacacs-ds

•talk

•telnet

•time

•uucp

•whois

•www

The following is a list of UDP port names that can be used instead of port numbers. Refer to the current Assigned Numbers RFC to find a reference to these protocols. Port numbers corresponding to these protocols can also be found by typing a ? in the place of a port number.

•biff

•bootpc

•bootps

•discard

•dns

•dnsix

•echo

•mobile-ip

•nameserver

•netbios-dgm

•netbios-ns

•ntp

•rip

•snmp

•snmptrap

•sunrpc

•syslog

•tacacs-ds

•talk

•tftp

•time

•who

•xdmcp

Access List Processing of Fragments

The behavior of access-list entries regarding the use or lack of the fragments keyword can be summarized as follows:


If the Access-List Entry has...	Then..
...no fragments keyword (the default behavior), and assuming all of the access-list entry information matches,	For an access-list entry containing only Layer 3 information: •The entry is applied to nonfragmented packets, initial fragments and noninitial fragments. For an access list entry containing Layer 3 and Layer 4 information: •The entry is applied to nonfragmented packets and initial fragments. –If the entry is a permit statement, the packet or fragment is permitted. –If the entry is a deny statement, the packet or fragment is denied. •The entry is also applied to noninitial fragments in the following manner. Because noninitial fragments contain only Layer 3 information, only the Layer 3 portion of an access-list entry can be applied. If the Layer 3 portion of the access-list entry matches, and –If the entry is a permit statement, the noninitial fragment is permitted. –If the entry is a deny statement, the next access-list entry is processed. Note The deny statements are handled differently for noninitial fragments versus nonfragmented or initial fragments.
...the fragments keyword, and assuming all of the access-list entry information matches,	Note The access-list entry is applied only to noninitial fragments.The fragments keyword cannot be configured for an access-list entry that contains any Layer 4 information.

Be aware that you should not simply add the fragments keyword to every access list entry because the first fragment of the IP packet is considered a nonfragment and is treated independently of the subsequent fragments. An initial fragment will not match an access list permit or deny entry that contains the fragments keyword, the packet is compared to the next access list entry, and so on, until it is either permitted or denied by an access list entry that does not contain the fragments keyword. Therefore, you may need two access list entries for every deny entry. The first deny entry of the pair will not include the fragments keyword, and applies to the initial fragment. The second deny entry of the pair will include the fragments keyword and applies to the subsequent fragments. In the cases where there are multiple deny access list entries for the same host but with different Layer 4 ports, a single deny access-list entry with the fragments keyword for that host is all that needs to be added. Thus all the fragments of a packet are handled in the same manner by the access list.

Packet fragments of IP datagrams are considered individual packets and each counts individually as a packet in access list accounting and access list violation counts.

Note The fragments keyword cannot solve all cases involving access lists and IP fragments.

Fragments and Policy Routing

Fragmentation and the fragment control feature affect policy routing if the policy routing is based on the match ip address command and the access list had entries that match on Layer 4 through 7 information. It is possible that noninitial fragments pass the access list and are policy routed, even if the first fragment was not policy routed or the reverse.

Examples

The following example defines a dynamic access list named washington:

ip access-group washington in

ip access-list extended washington

 dynamic testlist timeout 5

 permit ip any any

 permit tcp any host 185.302.21.2 eq 23

Related Commands


Command	Description
clear access-template	Clears a temporary access list entry from a dynamic access list manually.
distribute-list in (IP)	Filters networks received in updates.
distribute-list out (IP)	Suppresses networks from being advertised in updates.
ip access-group	Controls access to an interface.
ip access-list	Defines an IP access list by name.
logging console	Limits messages logged to the console based on severity.
show access-lists	Displays the contents of current IP and rate-limit access lists.
show ip access-list	Displays the contents of all current IP access lists.

ip access-group

To control access to an interface, use the ip access-group interface configuration command. To remove the specified access group, use the no form of this command.

ip access-group {access-list-number | name}{in | out}

no ip access-group {access-list-number | name}{in | out}

Syntax Description


access-list-number	Number of an access list. This is a decimal number from 1 to 199 or from 1300 to 2699.
name	Name of an IP access list as specified by an ip access-list command.
in	Filters on inbound packets.
out	Filters on outbound packets.

Defaults

No access list is applied to the interface.

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.
11.2	The name argument was added.

Usage Guidelines

Access lists are applied on either outbound or inbound interfaces. For standard inbound access lists, after receiving a packet, the Cisco IOS software checks the source address of the packet against the access list. For extended access lists, the router also checks the destination access list. If the access list permits the address, the software continues to process the packet. If the access list rejects the address, the software discards the packet and returns an ICMP Host Unreachable message.

For standard outbound access lists, after receiving and routing a packet to a controlled interface, the software checks the source address of the packet against the access list. For extended access lists, the router also checks the destination access list. If the access list permits the address, the software transmits the packet. If the access list rejects the address, the software discards the packet and returns an ICMP Host Unreachable message.

If the specified access list does not exist, all packets are passed.

When you enable outbound access lists, you automatically disable autonomous switching for that interface.When you enable input access lists on any cBus or CxBus interface, you automatically disable autonomous switching for all interfaces (with one exception—an SSE configured with simple access lists can still switch packets, on output only).

Examples

The following example applies list 101 on packets outbound from Ethernet interface 0:

interface ethernet 0

 ip access-group 101 out

Related Commands


Command	Description
access-list (IP extended)	Defines an extended IP access list.
access-list (IP standard)	Defines a standard IP access list.
ip access-list	Defines an IP access list by name.
show access-lists	Displays the contents of current IP and rate-limit access lists.

ip access-list

To define an IP access list by name, use the ip access-list global configuration command. To remove a named IP access lists, use the no form of this command.

ip access-list {standard | extended} name

no ip access-list {standard | extended} name

Caution Named access lists will not be recognized by any software release prior to Cisco IOS Release 11.2.

Syntax Description


standard	Specifies a standard IP access list.
extended	Specifies an extended IP access list.
name	Name of the access list. Names cannot contain a space or quotation mark, and must begin with an alphabetic character to prevent ambiguity with numbered access lists.

Defaults

No named IP access list is defined.

Command Modes

Global configuration

Command History


Release	Modification
11.2	This command was introduced.

Usage Guidelines

Use this command to configure a named IP access list as opposed to a numbered IP access list. This command will take you into access-list configuration mode, where you must define the denied or permitted access conditions with the deny and permit commands.

Specifying standard or extended with the ip access-list command determines the prompt you get when you enter access-list configuration mode.

Use the ip access-group command to apply the access-list to an interface.

Named access lists are not compatible with Cisco IOS releases prior to Release 11.2.

Examples

The following example defines a standard access list named Internetfilter:

ip access-list standard Internetfilter

 permit 192.5.34.0  0.0.0.255

 permit 128.88.0.0  0.0.255.255

 permit 36.0.0.0  0.255.255.255

! (Note: all other access implicitly denied)

Related Commands


Command	Description
deny (IP)	Sets conditions for a named IP access list.
ip access-group	Controls access to an interface.
permit (IP)	Sets conditions for a named IP access list.
show access-lists	Displays the contents of all current IP access lists.

ip accounting

To enable IP accounting on an interface, use the ip accounting interface configuration command. To disable IP accounting, use the no form of this command.

ip accounting [access-violations] [output-packets]

no ip accounting [access-violations] [output-packets]

Syntax Description


access-violations	(Optional) Enables IP accounting with the ability to identify IP traffic that fails IP access lists.
output-packets	(Optional) Enables IP accounting based on the IP packets output on the interface.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.
10.3	The access-violations keyword was added.

Usage Guidelines

The ip accounting command records the number of bytes (IP header and data) and packets switched through the system on a source and destination IP address basis. Only transit IP traffic is measured and only on an outbound basis; traffic generated by the router access server or terminating in this device is not included in the accounting statistics. Use the show ip accounting command to display the active accounting database, and traffic coming from a remote site and transiting through a router.

If you specify the access-violations keyword, ip accounting provides information identifying IP traffic that fails IP access lists. Identifying IP source addresses that violate IP access lists alerts you to possible attempts to breach security. The data might also indicate that you should verify IP access list configurations.

To receive a logging message on the console when an extended access list entry denies a packet access (to log violations), you must include the log keyword in the access-list (IP extended) or access-list (IP standard) command.

Statistics are accurate even if IP fast switching or IP access lists are being used on the interface.

IP accounting disables autonomous switching, SSE switching, and distributed switching (dCEF) on the interface. IP accounting will cause packets to be switched on the Route Switch Processor (RSP) instead of the Versatile Interface Processor (VIP), which can cause performance degradation.

Examples

The following example enables IP accounting on Ethernet interface 0:

interface ethernet 0

 ip accounting

Related Commands


Command	Description
access-list (IP extended)	Defines an extended IP access list.
access-list (IP standard)	Defines a standard IP access list.
clear ip accounting	Clears the active or checkpointed database when IP accounting is enabled.
ip accounting-list	Defines filters to control the hosts for which IP accounting information is kept.
ip accounting-threshold	Sets the maximum number of accounting entries to be created.
ip accounting-transits	Controls the number of transit records that are stored in the IP accounting database.
show ip accounting	Displays the active accounting or checkpointed database or displays access list violations.

ip accounting-list

To define filters to control the hosts for which IP accounting information is kept, use the ip accounting-list global configuration command. To remove a filter definition, use the no form of this command.

ip accounting-list ip-address wildcard

no ip accounting-list ip-address wildcard

Syntax Description


ip-address	IP address in dotted-decimal format.
wildcard	Wildcard bits to be applied to ip-address.

Defaults

No filters are defined.

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

The source and destination address of each IP datagram is logically ANDed with the wildcard bits and compared with the ip-address. If there is a match, the information about the IP datagram will be entered into the accounting database. If there is no match, the IP datagram is considered a transit datagram and will be counted according to the setting of the ip accounting-transits global configuration command.

Examples

The following example adds all hosts with IP addresses beginning with 192.31 to the list of hosts for which accounting information will be kept:

ip accounting-list 192.31.0.0 0.0.255.255

Related Commands


Command	Description
clear ip accounting	Clears the active or checkpointed database when IP accounting is enabled.
ip accounting	Enables IP accounting on an interface.
ip accounting-threshold	Sets the maximum number of accounting entries to be created.
ip accounting-transits	Controls the number of transit records that are stored in the IP accounting database.
show ip accounting	Displays the active accounting or checkpointed database or displays access list violations.

ip accounting-threshold

To set the maximum number of accounting entries to be created, use the ip accounting-threshold global configuration command. To restore the default number of entries, use the no form of this command.

ip accounting-threshold threshold

no ip accounting-threshold threshold

Syntax Description


threshold	Maximum number of entries (source and destination address pairs) that the Cisco IOS software accumulates.

Defaults

512 entries

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

The accounting threshold defines the maximum number of entries (source and destination address pairs) that the software accumulates, preventing IP accounting from possibly consuming all available free memory. This level of memory consumption could occur in a router that is switching traffic for many hosts. Overflows will be recorded; see the monitoring commands for display formats.

The default accounting threshold of 512 entries results in a maximum table size of 12,928 bytes. Active and checkpointed tables can reach this size independently.

Examples

The following example sets the IP accounting threshold to only 500 entries:

ip accounting-threshold 500

Related Commands


Command	Description
clear ip accounting	Clears the active or checkpointed database when IP accounting is enabled.
ip accounting	Enables IP accounting on an interface.
ip accounting-list	Defines filters to control the hosts for which IP accounting information is kept.
ip accounting-transits	Controls the number of transit records that are stored in the IP accounting database.
show ip accounting	Displays the active accounting or checkpointed database or displays access list violations.

ip accounting-transits

To control the number of transit records that are stored in the IP accounting database, use the ip accounting-transits global configuration command. To return to the default number of records, use the no form of this command.

ip accounting-transits count

no ip accounting-transits

Syntax Description


count	Number of transit records to store in the IP accounting database.

Defaults

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

Transit entries are those that do not match any of the filters specified by ip accounting-list global configuration commands. If no filters are defined, no transit entries are possible.

To maintain accurate accounting totals, the Cisco IOS software maintains two accounting databases: an active and a checkpointed database.

Examples

The following example specifies that no more than 100 transit records are stored:

ip accounting-transits 100

Related Commands


Command	Description
clear ip accounting	Clears the active or checkpointed database when IP accounting is enabled.
ip accounting	Enables IP accounting on an interface.
ip accounting-list	Defines filters to control the hosts for which IP accounting information is kept.
ip accounting-threshold	Sets the maximum number of accounting entries to be created.
show ip accounting	Displays the active accounting or checkpointed database or displays access list violations.

ip accounting mac-address

To enable IP accounting on a LAN interface based on the source and destination MAC address, use the ip accounting mac-address interface configuration command. To disable IP accounting based on the source and destination MAC address, use the no form of this command.

ip accounting mac-address {input | output]

no ip accounting mac-address {input | output]

Syntax Description


input	Performs accounting based on the source MAC address on received packets.
output	Performs accounting based on the destination MAC address on transmitted packets.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
11.1CC	This command was introduced.

Usage Guidelines

This feature is supported on Ethernet, FastEthernet, and FDDI interfaces.

To display the MAC accounting information, use the show interface mac EXEC command.

MAC address accounting provides accounting information for IP traffic based on the source and destination MAC address on LAN interfaces. This calculates the total packet and byte counts for a LAN interface that receives or sends IP packets to or from a unique MAC address. It also records a timestamp for the last packet received or sent. With MAC address accounting, you can determine how much traffic is being sent to and/or received from various peers at NAPS/peering points.

Examples

The following example enables IP accounting based on the source and destination MAC address for received and transmitted packets:

interface ethernet 4/0/0

  ip accounting mac-address input

  ip accounting mac-address output

Related Commands


Command	Description
show interface mac	Displays MAC accounting information for interfaces configured for MAC accounting.

ip accounting precedence

To enable IP accounting on any interface based on IP precedence, use the ip accounting precedence interface configuration command. To disable IP accounting based on IP precedence, use the no form of this command.

ip accounting precedence {input | output]

no ip accounting precedence {input | output]

Syntax Description


input	Performs accounting based on IP precedence on received packets.
output	Performs accounting based on IP precedence on transmitted packets.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
11.1CC	This command was introduced.

Usage Guidelines

To display IP precedence accounting information, use the show interface precedence EXEC command.

The precedence accounting feature provides accounting information for IP traffic, summarized by IP precedence value(s). This feature calculates the total packet and byte counts for an interface that receives or sends IP packets and sorts the results based on IP precedence. This feature is supported on all interfaces and subinterfaces and supports CEF, dCEF, flow, and optimum switching.

Examples

The following example enables IP accounting based on IP precedence for received and transmitted packets:

interface ethernet 4/0/0

  ip accounting precedence input

  ip accounting precedence output

Related Commands


Command	Description
show interface precedence	Displays precedence accounting information for an interface configured for precedence accounting.

ip drp access-group

To control the sources of Director Response Protocol (DRP) queries to the DRP Server Agent, use the ip drp access-group global configuration command. To remove the access list, use the no form of this command.

ip drp access-group access-list-number

no ip drp access-group access-list-number

Syntax Description


access-list-number	Number of a standard IP access list in the range 1 to 99 or from 1300 to 1999.

Defaults

The DRP Server Agent will answer all queries.

Command Modes

Global configuration

Command History


Release	Modification
11.2 F	This command was introduced.

Usage Guidelines

This command applies an access list to the interface, thereby controlling who can send queries to the DRP Server Agent.

If both an authentication key chain and an access group have been specified, both security measures must permit access before a request is processed.

Examples

The following example configures access list 1, which permits only queries from the host at 33.45.12.4:

access-list 1 permit 33.45.12.4

ip drp access-group 1

Related Commands


Command	Description
ip drp authentication key-chain	Configures authentication on the DRP Server Agent for DistributedDirector.
show ip drp	Displays information about the DRP Server Agent for DistributedDirector.

ip drp authentication key-chain

To configure authentication on the DRP Server Agent for DistributedDirector, use the ip drp authentication key-chain global configuration command. To remove the key chain, use the no form of this command.

ip drp authentication key-chain name-of-chain

no ip drp authentication key-chain name-of-chain

Syntax Description


name-of-chain	Name of the key chain containing one or more authentication keys.

Defaults

No authentication is configured for the DRP Server Agent.

Command Modes

Global configuration

Command History


Release	Modification
11.2 F	This command was introduced.

Usage Guidelines

When a key chain and key are configured, the key is used to authenticate all Director Response Protocol requests and responses. The active key on the DRP Server Agent must match the active key on the primary agent. Use the key and key-string commands to configure the key.

Examples

The following example configures a key chain named ddchain:

ip drp authentication key-chain ddchain

Related Commands


Command	Description
accept-lifetime	Sets the time period during which the authentication key on a key chain is received as valid.
ip drp access-group	Controls the sources of DRP queries to the DRP Server Agent.
key	Identifies an authentication key on a key chain.
key chain	Enables authentication for routing protocols.
key-string (authentication)	Specifies the authentication string for a key.
send-lifetime	Sets the time period during which an authentication key on a key chain is valid to be sent.
show ip drp	Displays information about the DRP Server Agent for DistributedDirector.
show key chain	Displays authentication key information.

ip drp server

To enable the Director Response Protocol (DRP) Server Agent that works with DistributedDirector, use the ip drp server global configuration command. To disable the DRP Server Agent, use the no form of this command.

ip drp server

no ip drp server

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration

Command History


Release	Modification
11.2 F	This command was introduced.

Examples

The following example enables the DRP Server Agent:

ip drp server

Related Commands


Command	Description
ip drp access-group	Controls the sources of DRP queries to the DRP Server Agent.
ip drp authentication key-chain	Configures authentication on the DRP Server Agent for DistributedDirector.
show ip drp	Displays information about the DRP Server Agent for DistributedDirector.

ip icmp rate-limit unreachable

To have the Cisco IOS software limit the rate that Internet Control Message Protocol (ICMP) destination unreachable messages are generated, use the ip icmp rate-limit unreachable global configuration command. To remove the rate limit, use the no form of this command.

ip icmp rate-limit unreachable [df] milliseconds

no ip icmp rate-limit unreachable [df]

Syntax Description


df	(Optional) Limits the rate ICMP destination unreachable messages are sent when code 4, fragmentation is needed and DF set, is specified in the IP header of the ICMP destination unreachable message.
milliseconds	Time limit (in milliseconds) in which one ICMP destination unreachable message is sent. The range is 1 millisecond to 4294967295 milliseconds.

Defaults

The default value is one ICMP destination unreachable message per 500 milliseconds.

Command Modes

Global configuration

Command History


Release	Modification
12.0	This command was introduced.

Usage Guidelines

The no ip icmp rate-limit unreachable command turns off the previously configured rate limit. To re-set the rate limit to its default value, use the default ip icmp rate-limit unreachable command.

The Cisco IOS software maintains two timers: one for general destination unreachable messages and one for DF destination unreachable messages. Both share the same time limits and defaults. If the df option is not configured, the ip icmp rate-limit unreachable command sets the time values for DF destination unreachable messages. If the df option is configured, its time values remain independent from those of general destination unreachable messages.

Examples

The following example sets the rate of the ICMP destination unreachable message to one message every 10 milliseconds:

ip icmp rate-limit unreachable 10

The following example turns off the previously configured rate limit:

no ip icmp rate-limit unreachable

The following example sets the rate limit back to the default:

default ip icmp rate-limit unreachable

ip icmp redirect

To control the type of Internet Control Message Protocol (ICMP) redirect message that is sent by the Cisco IOS software, use the ip icmp redirect command in global configuration mode. To set the value back to the default, use the no form of this command.

ip icmp redirect [host | subnet]

no ip icmp redirect [host | subnet]

Syntax Description


host	(Optional) Sends ICMP host redirects.
subnet	(Optional) Sends ICMP subnet redirects.

Defaults

The router will send ICMP subnet redirect messages.

Because the ip icmp redirect subnet command is the default, the command will not be displayed in the configuration.

Command Modes

Global configuration

Command History


Release	Modification
12.0	This command was introduced.

Usage Guidelines

An ICMP redirect message can be generated by a router when a packet is received and transmitted on the same interface. In this situation, the router will forward the original packet and send a ICMP redirect message back to the sender of the original packet. This behavior allows the sender to bypass the router and forward future packets directly to the destination (or a router closer to the destination).

There are two types of ICMP redirect messages: redirect for a host address or redirect for an entire subnet.

The ip icmp redirect command determines the type of ICMP redirects sent by the system and is configured on a per system basis. Some hosts do not understand ICMP subnet redirects and need the router to send out ICMP host redirects. Use the ip icmp redirect host command to have the router send out ICMP host redirects. Use the ip icmp redirect subnet command to set the value back to the default, which is to send subnet redirects.

To prevent the router from sending ICMP redirects, use the no ip redirects interface configuration command.

Examples

The following example enables the router to send out ICMP host redirects:

ip icmp redirect hosts

The following example sets the value back to the default, which is subnet redirects:

ip icmp redirect subnet

Related Commands


Command	Description
ip redirects	Enables the sending of ICMP redirect messages.

ip mask-reply

To have the Cisco IOS software respond to Internet Control Message Protocol (ICMP) mask requests by sending ICMP Mask Reply messages, use the ip mask-reply interface configuration command. To disable this function, use the no form of this command.

ip mask-reply

no ip mask-reply

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Examples

The following example enables the sending of ICMP Mask Reply messages on Ethernet interface 0:

interface ethernet 0

 ip address 131.108.1.0 255.255.255.0

 ip mask-reply

ip mtu

To set the maximum transmission unit (MTU) size of IP packets sent on an interface, use the ip mtu interface configuration command. To restore the default MTU size, use the no form of this command.

ip mtu bytes

no ip mtu

Syntax Description


bytes	MTU in bytes.

Defaults

Minimum is 128 bytes; maximum depends on interface medium.

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

If an IP packet exceeds the MTU set for the interface, the Cisco IOS software will fragment it.

All devices on a physical medium must have the same protocol MTU in order to operate.

Note Changing the MTU value (with the mtu interface configuration command) can affect the IP MTU value. If the current IP MTU value is the same as the MTU value, and you change the MTU value, the IP MTU value will be modified automatically to match the new MTU. However, the reverse is not true; changing the IP MTU value has no effect on the value for the mtu command.

Examples

The following example sets the maximum IP packet size for the first serial interface to 300 bytes:

interface serial 0

 ip mtu 300

Related Commands


Command	Description
mtu	Adjusts the maximum packet size or MTU size.

ip redirects

To enable the sending of ICMP Redirect messages if the Cisco IOS software is forced to resend a packet through the same interface on which it was received, use the ip redirects interface configuration command. To disable the sending of redirect messages, use the no form of this command.

ip redirects

no ip redirects

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled, unless Hot Standby Router Protocol is configured

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

If the Hot Standby Router Protocol is configured on an interface, ICMP Redirect messages are disabled by default for the interface.

Examples

The following example enables the sending of ICMP Redirect messages on Ethernet interface 0:

interface ethernet 0

 ip redirects

Related Commands


Command	Description
ip default-gateway	Defines a default gateway (router) when IP routing is disabled.
show ip redirects	Displays the address of a default gateway (router) and the address of hosts for which an ICMP Redirect message has been received.

ip source-route

To allow the Cisco IOS software to handle IP datagrams with source routing header options, use the ip source-route global configuration command. To have the software discard any IP datagram containing a source-route option, use the no form of this command.

ip source-route

no ip source-route

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Examples

The following example enables the handling of IP datagrams with source routing header options:

ip source-route

Related Commands


Command	Description
ping (privileged)	Diagnoses basic network connectivity on Apollo, AppleTalk, Connectionless Network Service (CLNS), DECnet, IP, Novell IPX, VINES, or XNS networks.
ping (user)	Diagnoses basic network connectivity on AppleTalk, CLNS, IP, Novell, Apollo, VINES, DECnet, or XNS networks.

ip tcp chunk-size

To alter the TCP maximum read size for Telnet or rlogin, use the ip tcp chunk-size global configuration command. To restore the default value, use the no form of this command.

ip tcp chunk-size characters

no ip tcp chunk-size

Syntax Description


characters	Maximum number of characters that Telnet or rlogin can read in one read instruction. The default value is 0, which Telnet and rlogin interpret as the largest possible 32-bit positive number.

Defaults

0, which Telnet and rlogin interpret as the largest possible 32-bit positive number.

Command Modes

Global configuration

Command History


Release	Modification
9.1	This command was introduced.

Usage Guidelines

It is unlikely you will need to change the default value.

Examples

The following example sets the maximum TCP read size to 64000 bytes:

ip tcp chunk-size 64000

ip tcp compression-connections

To specify the total number of header compression connections that can exist on an interface, use the ip tcp compression-connections interface configuration command. To restore the default, use the no form of this command.

ip tcp compression-connections number

no ip tcp compression-connections number

Syntax Description


number	Number of connections the cache supports. It can be a number from 3 to 256.

Defaults

16 connections

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

You should configure one connection for each TCP connection through the specified interface.

Each connection sets up a compression cache entry, so you are in effect specifying the maximum number of cache entries and the size of the cache. Too few cache entries for the specified interface can lead to degraded performance, while too many cache entries can lead to wasted memory.

Note Both ends of the serial connection must use the same number of cache entries.

Examples

The following example sets the first serial interface for header compression with a maximum of ten cache entries:

interface serial 0

 ip tcp header-compression

 ip tcp compression-connections 10

Related Commands


Command	Description
ip tcp header-compression	Enables TCP header compression.
show ip tcp header-compression	Displays statistics about TCP header compression.

ip tcp header-compression

To enable TCP header compression, use the ip tcp header-compression interface configuration command. To disable compression, use the no form of this command.

ip tcp header-compression [passive]

no ip tcp header-compression [passive]

Syntax Description


passive	(Optional) Compresses outgoing TCP packets only if incoming TCP packets on the same interface are compressed. If you do not specify the passive keyword, the Cisco IOS software compresses all traffic.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

You can compress the headers of your TCP/IP packets in order to reduce the size of your packets. TCP header compression is supported on serial lines using Frame Relay, HDLC or Point-to-Point (PPP) encapsulation. You must enable compression on both ends of a serial connection. RFC 1144 specifies the compression process. Compressing the TCP header can speed up Telnet connections dramatically. In general, TCP header compression is advantageous when your traffic consists of many small packets, not for traffic that consists of large packets. Transaction processing (usually using terminals) tends to use small packets while file transfers use large packets. This feature only compresses the TCP header, so it has no effect on UDP packets or other protocol headers.

When compression is enabled, fast switching is disabled. This means that fast interfaces like T1 can overload the router. Consider your network's traffic characteristics before using this command.

Examples

The following example sets the first serial interface for header compression with a maximum of ten cache entries:

interface serial 0

 ip tcp header-compression

 ip tcp compression-connections 10

Related Commands


Command	Description
ip tcp compression-connections	Specifies the total number of header compression connections that can exist on an interface.

ip tcp path-mtu-discovery

To enable Path MTU Discovery for all new TCP connections from the router, use the ip tcp path-mtu-discovery global configuration command. To disable the function, use the no form of this command.

ip tcp path-mtu-discovery [age-timer {minutes | infinite}]

no ip tcp path-mtu-discovery [age-timer {minutes | infinite}]

Syntax Description


age-timer minutes	(Optional) Time interval (in minutes) after which TCP re-estimates the Path MTU with a larger maximum segment size (MSS). The maximum is 30 minutes; the default is 10 minutes.
age-timer infinite	(Optional) Turns off the age-timer.

Defaults

Disabled. If enabled, default minutes is 10 minutes.

Command Modes

Global configuration

Command History


Release	Modification
10.3	This command was introduced.
11.2	The following keywords were added: •age-timer •infinite

Usage Guidelines

Path MTU Discovery is a method for maximizing the use of available bandwidth in the network between the end points of a TCP connection. It is described in RFC 1191. Existing connections are not affected when this feature is turned on or off.

Customers using TCP connections to move bulk data between systems on distinct subnets would benefit most by enabling this feature. This might include customers using RSRB with TCP encapsulation, STUN, X.25 Remote Switching (also known as XOT, or X.25 over TCP), and some protocol translation configurations.

The age timer is a time interval for how often TCP re-estimates the Path MTU with a larger MSS. By using the age timer, TCP Path MTU becomes a dynamic process. If MSS used for the connection is smaller than what the peer connection can handle, a larger MSS is tried every time the age timer expires. The discovery process is stopped when either the send MSS is as large as the peer negotiated, or the user has disabled the timer on the router. You can turn off the age-timer by setting it to infinite.

Examples

The following example enables Path MTU Discovery:

ip tcp path-mtu-discovery

ip tcp queuemax

To alter the maximum TCP outgoing queue per connection, use the ip tcp queuemax global configuration command. To restore the default value, use the no form of this command.

ip tcp queuemax packets

no ip tcp queuemax

Syntax Description


packets	Outgoing queue size of TCP packets. The default value is 5 segments if the connection has a TTY associated with it. If there is no TTY associated with it, the default value is 20 segments.

Defaults

The default value is 5 segments if the connection has a TTY associated with it. If there is no TTY associated with it, the default value is 20 segments.

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

Changing the default value changes the 5 segments, not the 20 segments.

Examples

The following example sets the maximum TCP outgoing queue to 10 packets:

ip tcp queuemax 10

ip tcp selective-ack

To enable TCP selective acknowledgment, use the ip tcp selective-ack global configuration command. To disable TCP selective acknowledgment, use the no form of this command.

ip tcp selective-ack

no ip tcp selective-ack

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration

Command History


Release	Modification
11.2 F	This command was introduced.

Usage Guidelines

TCP might not experience optimal performance if multiple packets are lost from one window of data. With the limited information available from cumulative acknowledgments, a TCP sender can learn about only one lost packet per round trip time. An aggressive sender could retransmit packets early, but such retransmitted segments might have already been successfully received.

The TCP selective acknowledgment mechanism helps overcome these limitations. The receiving TCP returns selective acknowledgment packets to the sender, informing the sender about data that has been received. The sender can then retransmit only the missing data segments.

TCP selective acknowledgment improves overall performance. The feature is used only when multiple packets drop from a TCP window. There is no performance impact when the feature is enabled but not used.

This command becomes effective only on new TCP connections opened after the feature is enabled.

This feature must be disabled if you want TCP header compression. You might disable this feature if you have severe TCP problems.

Refer to RFC 2018 for more detailed information on TCP selective acknowledgment.

Examples

The following example enables the router to send and receive TCP selective acknowledgments:

ip tcp selective-ack

Related Commands


Command	Description
ip tcp header-compression	Enables TCP header compression.

ip tcp synwait-time

To set a period of time the Cisco IOS software waits while attempting to establish a TCP connection before it times out, use the ip tcp synwait-time global configuration command. To restore the default time, use the no form of this command.

ip tcp synwait-time seconds

no ip tcp synwait-time seconds

Syntax Description


seconds	Time in seconds the software waits while attempting to establish a TCP connection. It can be an integer from 5 to 300 seconds. The default is 30 seconds.

Defaults

30 seconds

Command Modes

Global configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

In versions previous to Cisco IOS software 10.0, the system would wait a fixed 30 seconds when attempting to establish a TCP connection. If your network contains Public Switched Telephone Network (PSTN) dial-on-demand routing (DDR), the call setup time may exceed 30 seconds. This amount of time is not sufficient in networks that have dial-up asynchronous connections because it will affect your ability to Telnet over the link (from the router) if the link must be brought up. If you have this type of network, you might want to set this value to the UNIX value of 75.

Because this is a host parameter, it does not pertain to traffic going through the router, just for traffic originated at this device. Because UNIX has a fixed 75-second timeout, hosts are unlikely to see this problem.

Examples

The following example configures the Cisco IOS software to continue attempting to establish a TCP connection for 180 seconds:

ip tcp synwait-time 180

ip tcp timestamp

To enable TCP timestamp, use the ip tcp timestamp global configuration command. To disable TCP timestamp, use the no form of this command.

ip tcp timestamp

no ip tcp timestamp

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration

Command History


Release	Modification
11.2 F	This command was introduced.

Usage Guidelines

TCP timestamp improves round-trip time estimates. Refer to RFC 1323 for more detailed information on TCP timestamp.

This feature must be disabled if you want to use TCP header compression.

Examples

The following example enables the router to send TCP timestamps:

ip tcp timestamp

Related Commands


Command	Description
ip tcp header-compression	Enables TCP header compression.

ip tcp window-size

To alter the TCP window size, use the ip tcp window-size global configuration command. To restore the default value, use the no form of this command.

ip tcp window-size bytes

no ip tcp window-size

Syntax Description


bytes	Window size in bytes. The maximum is 65535 bytes. The default value is 2144 bytes.

Defaults

2144 bytes

Command Modes

Global configuration

Command History


Release	Modification
9.1	This command was introduced.

Usage Guidelines

Do not use this command unless you clearly understand why you want to change the default value.

If your TCP window size is set to 1000 bytes, for example, you could have 1 packet of 1000 bytes or 2 packets of 500 bytes, and so on. However, there is also a limit on the number of packets allowed in the window. There can be a maximum of 5 packets if the connection has TTY; otherwise there can be 20 packets.

Examples

The following example sets the TCP window size to 1000 bytes:

ip tcp window-size 1000

ip unreachables

To enable the generation of ICMP Unreachable messages, use the ip unreachables interface configuration command. To disable this function, use the no form of this command.

ip unreachables

no ip unreachables

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

If the Cisco IOS software receives a nonbroadcast packet destined for itself that uses a protocol it does not recognize, it sends an ICMP Protocol Unreachable message to the source.

If the software receives a datagram that it cannot deliver to its ultimate destination because it knows of no route to the destination address, it replies to the originator of that datagram with an ICMP Host Unreachable message.

This command affects all kinds of ICMP unreachable messages.

Examples

The following example enables the generation of ICMP Unreachable messages, as appropriate, on an interface:

interface ethernet 0

 ip unreachables

permit (IP)

To set conditions for a named IP access list, use the permit access-list configuration command. To remove a condition from an access list, use the no form of this command.

permit {source [source-wildcard] | any} [log]

no permit {source [source-wildcard] | any}

permit protocol source source-wildcard destination destination-wildcard [precedence precedence] [tos tos] [log]

no permit protocol source source-wildcard destination destination-wildcard [precedence precedence] [tos tos] [log] [fragments]

ICMP

permit icmp source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message] [precedence precedence] [tos tos] [log] [fragments]

IGMP

permit igmp source source-wildcard destination destination-wildcard [igmp-type] [precedence precedence] [tos tos] [log] [fragments]

TCP

permit tcp source source-wildcard [operator port [port]] destination destination-wildcard [operator port [port]] [established] [precedence precedence] [tos tos] [log] [fragments]

UDP

permit udp source source-wildcard [operator port [port]] destination destination-wildcard [operator port [port]] [precedence precedence] [tos tos] [log] [fragments]

Syntax Description


source	Number of the network or host from which the packet is being sent. There are two alternative ways to specify the source: Use a 32-bit quantity in four-part, dotted-decimal format. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255.
source-wildcard	(Optional) Wildcard bits to be applied to the source. There are two alternative ways to specify the source wildcard: Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255.
protocol	Name or number of an IP protocol. It can be one of the keywords eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, tcp, or udp, or an integer in the range 0 to 255 representing an IP protocol number. To match any Internet protocol (including ICMP, TCP, and UDP), use the keyword ip. Some protocols allow further qualifiers described later.
source	Number of the network or host from which the packet is being sent. There are three alternative ways to specify the source: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
source-wildcard	Wildcard bits to be applied to source. There are three alternative ways to specify the source wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a source and source-wildcard of 0.0.0.0 255.255.255.255. •Use host source as an abbreviation for a source and source-wildcard of source 0.0.0.0.
destination	Number of the network or host to which the packet is being sent. There are three alternative ways to specify the destination: •Use a 32-bit quantity in four-part, dotted-decimal format. •Use the keyword any as an abbreviation for the destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
destination-wildcard	Wildcard bits to be applied to the destination. There are three alternative ways to specify the destination wildcard: •Use a 32-bit quantity in four-part, dotted-decimal format. Place ones in the bit positions you want to ignore. •Use the keyword any as an abbreviation for a destination and destination-wildcard of 0.0.0.0 255.255.255.255. •Use host destination as an abbreviation for a destination and destination-wildcard of destination 0.0.0.0.
precedence precedence	(Optional) Packets can be filtered by precedence level, as specified by a number from 0 to 7 or by name as listed in the section "Usage Guidelines."
tos tos	(Optional) Packets can be filtered by type of service level, as specified by a number from 0 to 15 or by name as listed in the "Usage Guidelines" section of the access-list (IP extended) command.
icmp-type	(Optional) ICMP packets can be filtered by ICMP message type. The type is a number from 0 to 255.
icmp-code	(Optional) ICMP packets which are filtered by ICMP message type can also be filtered by the ICMP message code. The code is a number from 0 to 255.
icmp-message	(Optional) ICMP packets can be filtered by an ICMP message type name or ICMP message type and code name. The possible names are found in the "Usage Guidelines" section of the access-list (IP extended) command.
igmp-type	(Optional) IGMP packets can be filtered by IGMP message type or message name. A message type is a number from 0 to 15. IGMP message names are listed in the "Usage Guidelines" section of the access-list (IP extended) command.
operator	(Optional) Compares source or destination ports. Possible operands include lt (less than), gt (greater than), eq (equal), neq (not equal), and range (inclusive range). If the operator is positioned after the source and source-wildcard, it must match the source port. If the operator is positioned after the destination and destination-wildcard, it must match the destination port. The range operator requires two port numbers. All other operators require one port number.
port	(Optional) The decimal number or name of a TCP or UDP port. A port number is a number from 0 to 65535. TCP and UDP port names are listed in the "Usage Guidelines" section of the access-list (IP extended) command. TCP port names can only be used when filtering TCP. UDP port names can only be used when filtering UDP.
established	(Optional) For the TCP protocol only: Indicates an established connection. A match occurs if the TCP datagram has the ACK or RST bits set. The nonmatching case is that of the initial TCP datagram to form a connection.
log	(Optional) Causes an informational logging message about the packet that matches the entry to be sent to the console. (The level of messages logged to the console is controlled by the logging console command.) The message for a standard list includes the access list number, whether the packet was permitted or denied, the source address, and the number of packets. The message for an extended list includes the access list number; whether the packet was permitted or denied; the protocol; whether it was TCP, UDP, ICMP, or a number; and, if appropriate, the source and destination addresses and source and destination port numbers. For both standard and extended lists, the message is generated for the first packet that matches, and then at 5-minute intervals, including the number of packets permitted or denied in the prior 5-minute interval. The logging facility might drop some logging message packets if there are too many to be handled or if there is more than one logging message to be handled in 1 second. This behavior prevents the router from crashing due to too many logging packets. Therefore, the logging facility should not be used as a billing tool or an accurate source of the number of matches to an access list.
fragments	(Optional) The access list entry applies to noninitial fragments of packets; the fragment is either permitted or denied accordingly. For more details about the fragments keyword, see the "Access List Processing of Fragments" and "Fragments and Policy Routing" sections in the "Usage Guidelines" section.

Defaults

There are no specific conditions under which a packet passes the named access list.

Command Modes

Access-list configuration

Command History


Release	Modification
11.2	This command was introduced.
11.3(3)T	The log keyword for a standard access list was added.
12.0(11)	The fragments keyword was added.

Usage Guidelines

Use this command following the ip access-list command to define the conditions under which a packet passes the access list.

Access List Processing of Fragments

The behavior of access-list entries regarding the use or lack of the fragments keyword can be summarized as follows:


If the Access-List Entry has...	Then..
...no fragments keyword (the default behavior), and assuming all of the access-list entry information matches,	For an access-list entry containing only Layer 3 information: •The entry is applied to nonfragmented packets, initial fragments and noninitial fragments. For an access list entry containing Layer 3 and Layer 4 information: •The entry is applied to nonfragmented packets and initial fragments. –If the entry is a permit statement, the packet or fragment is permitted. –If the entry is a deny statement, the packet or fragment is denied. •The entry is also applied to noninitial fragments in the following manner. Because noninitial fragments contain only Layer 3 information, only the Layer 3 portion of an access-list entry can be applied. If the Layer 3 portion of the access-list entry matches, and –If the entry is a permit statement, the noninitial fragment is permitted. –If the entry is a deny statement, the next access-list entry is processed. Note The deny statements are handled differently for noninitial fragments versus nonfragmented or initial fragments.
...the fragments keyword, and assuming all of the access-list entry information matches,	The access-list entry is applied only to noninitial fragments. Note The fragments keyword cannot be configured for an access-list entry that contains any Layer 4 information.

Be aware that you should not simply add the fragments keyword to every access list entry because the first fragment of the IP packet is considered a nonfragment and is treated independently of the subsequent fragments. An initial fragment will not match an access list permit or deny entry that contains the fragments keyword, the packet is compared to the next access list entry, and so on, until it is either permitted or denied by an access list entry that does not contain the fragments keyword. Therefore, you may need two access list entries for every deny entry. The first deny entry of the pair will not include the fragments keyword, and applies to the initial fragment. The second deny entry of the pair will include the fragments keyword and applies to the subsequent fragments. In the cases where there are multiple deny access list entries for the same host but with different Layer 4 ports, a single deny access-list entry with the fragments keyword for that host is all that needs to be added. Thus all the fragments of a packet are handled in the same manner by the access list.

Packet fragments of IP datagrams are considered individual packets and each counts individually as a packet in access list accounting and access list violation counts.

Note The fragments keyword cannot solve all cases involving access lists and IP fragments.

Fragments and Policy Routing

Fragmentation and the fragment control feature affect policy routing if the policy routing is based on the match ip address command and the access list had entries that match on Layer 4 through 7 information. It is possible that noninitial fragments pass the access list and are policy routed, even if the first fragment was not policy routed or the reverse.

Examples

The following example sets conditions for a standard access list named Internetfilter:

ip access-list standard Internetfilter

 deny 192.5.34.0  0.0.0.255

 permit 128.88.0.0  0.0.255.255

 permit 36.0.0.0  0.255.255.255

! (Note: all other access implicitly denied)

Related Commands


Command	Description
deny (IP)	Sets conditions for a named IP access list.
ip access-group	Controls access to an interface.
ip access-list	Defines an IP access list by name.
show access-lists	Displays the contents of all current IP access lists.

show access-lists

To display the contents of current access lists, use the show access-lists privileged EXEC command.

show access-lists [access-list-number | name]

Syntax Description


access-list-number	(Optional) Number of the access list to display. The system displays all access lists by default.
name	(Optional) Name of the IP access list to display.

Defaults

The system displays all access lists.

Command Modes

Privileged EXEC

Examples

The following is sample output from the show access-lists command when access list 101 is specified:

Router# show access-lists 101

Extended IP access list 101

    permit tcp host 198.92.32.130 any established (4304 matches)

    permit udp host 198.92.32.130 any eq domain (129 matches)

    permit icmp host 198.92.32.130 any

    permit tcp host 198.92.32.130 host 171.69.2.141 gt 1023

    permit tcp host 198.92.32.130 host 171.69.2.135 eq smtp (2 matches)

    permit tcp host 198.92.32.130 host 198.92.30.32 eq smtp

    permit tcp host 198.92.32.130 host 171.69.108.33 eq smtp

    permit udp host 198.92.32.130 host 171.68.225.190 eq syslog

    permit udp host 198.92.32.130 host 171.68.225.126 eq syslog

    deny   ip 150.136.0.0 0.0.255.255 224.0.0.0 15.255.255.255

    deny   ip 171.68.0.0 0.1.255.255 224.0.0.0 15.255.255.255 (2 matches)

    deny   ip 172.24.24.0 0.0.1.255 224.0.0.0 15.255.255.255

    deny   ip 192.82.152.0 0.0.0.255 224.0.0.0 15.255.255.255

    deny   ip 192.122.173.0 0.0.0.255 224.0.0.0 15.255.255.255

    deny   ip 192.122.174.0 0.0.0.255 224.0.0.0 15.255.255.255

    deny   ip 192.135.239.0 0.0.0.255 224.0.0.0 15.255.255.255

    deny   ip 192.135.240.0 0.0.7.255 224.0.0.0 15.255.255.255

    deny   ip 192.135.248.0 0.0.3.255 224.0.0.0 15.255.255.255

    deny   ip 192.150.42.0 0.0.0.255 224.0.0.0 15.255.255.255

An access list counter counts how many packets are allowed by each line of the access list. This number is displayed as the number of matches.

For information on how to configure access lists, refer to the "Configuring IP Services" chapter of the Network Protocols Configuration Guide, Part 1.

For information on how to configure dynamic access lists, refer to the "Traffic Filtering and Firewalls" chapter of the Security Configuration Guide.

Related Commands

Command	Description
access-list (IP extended)	Defines an extended IP access list.
access-list (IP standard)	Defines a standard IP access list.
clear access-list counters	Clears the counters of an access list.
clear access-template	Clears a temporary access list entry from a dynamic access list manually.
ip access-list	Defines an IP access list by name.
show access-lists	Displays the contents of all current IP access lists.

show interface mac

To display MAC accounting information for interfaces configured for MAC accounting, use the show interface mac EXEC command.

show interface [type number] mac

Syntax Description


type	(Optional) Interface type supported on your router.
number	(Optional) Port number of the interface. The syntax varies depending on the type router. For example, on a Cisco 7500 series router the syntax is 0/0/0, where 0 represents the slot, port adapter, and port number (the slash is required). Refer to the appropriate hardware manual for numbering information.

Command Modes

EXEC

Command History

Release	Modification
11.1 CC	This command was introduced.

Usage Guidelines

The show interface mac command displays information for all interfaces configured for MAC accounting. To display information for a single interface, use the show interface type number mac command.

For incoming packets on the interface, the accounting statistics are gathered before the CAR/DCAR feature is performed on the packet. For outgoing packets on the interface, the accounting statistics are gathered after output CAR, before output DCAR or DWRED or DWFQ feature is performed on the packet. Therefore, if a you are using DCAR or DWRED on the interface and packets are dropped, the dropped packets are still counted in the show interface mac command because the calculations are done prior to the features.

The maximum number of MAC addresses that can be stored for the input address is 512 and the maximum number of MAC address that can be stored for the output address is 512. After the maximum is reached, subsequent MAC addresses are ignored.

To clear the accounting statistics, use the clear counter EXEC command.To configure an interface for IP accounting based on the MAC address, use the ip accounting mac-address interface configuration command.

Examples

The following is sample output from the show interface mac command. This feature calculates the total packet and byte counts for the interface that receives (input) or sends (output) IP packets to or from a unique MAC address. It also records a timestamp for the last packet received or sent.

Router# show interface ethernet 0/1/1 mac

Ethernet0/1/1

  Input  (511 free)

    0007.f618.4449(228):  4 packets, 456 bytes, last: 2684ms ago

                  Total:  4 packets, 456 bytes

  Output  (511 free)

    0007.f618.4449(228):  4 packets, 456 bytes, last: 2692ms ago

                  Total:  4 packets, 456 bytes

Related Commands

Command	Description
ip accounting mac-address	Enables IP accounting on any interface based on the source and destination MAC address.

show interface precedence

To display precedence accounting information for interfaces configured for precedence accounting, use the show interface mac EXEC command.

show interface [type number] precedence

Syntax Description


type	(Optional) Interface type supported on your router.
number	(Optional) Port number of the interface. The syntax varies depending on the type router. For example, on a Cisco 7500 series router the syntax is 0/0/0, where 0 represents the slot, port adapter, and port number (the slash is required). Refer to the appropriate hardware manual for numbering information.

Command Modes

EXEC

Command History

Release	Modification
11.1 CC	This command was introduced.

Usage Guidelines

The show interface precedence command displays information for all interfaces configured for IP precedence accounting. To display information for a single interface, use the show interface type number precedence command.

For incoming packets on the interface, the accounting statistics are gathered before input CAR/DCAR is performed on the packet. Therefore, if CAR/DCAR changes the precedence on the packet, it is counted based on the old precedence setting with the show interface precedence command.

For outgoing packets on the interface, the accounting statistics are gathered after output DCAR or DWRED or DWFQ feature is performed on the packet.

To clear the accounting statistics, use the clear counter EXEC command.

To configure an interface for IP accounting based on IP precedence, use the ip accounting precedence interface configuration command.

Examples

The following is sample output from the show interface precedence command. This feature calculates the total packet and byte counts for the interface that receives (input) or sends (output) IP packets and sorts the results based on IP precedence.

Router# show interface ethernet 0/1/1 precedence

Ethernet0/1/1

  Input

    Precedence 0:  4 packets, 456 bytes

  Output

    Precedence 0:  4 packets, 456 bytes

Related Commands

Command	Description
ip accounting precedence	Enables IP accounting on any interface based on IP precedence.

show ip access-list

To display the contents of all current IP access lists, use the show ip access-list EXEC command.

show ip access-list [access-list-number | name]

Syntax Description


access-list-number	(Optional) Number of the IP access list to display.
name	(Optional) Name of the IP access list to display.

Defaults

Displays all standard and extended IP access lists.

Command Modes

EXEC

Command History


Release	Modification
10.3	This command was introduced.

Usage Guidelines

The show ip access-list command provides output identical to the show access-lists command, except that it is IP-specific and allows you to specify a particular access list.

Examples

The following is sample output from the show ip access-list command when all are requested:

Router# show ip access-list

Extended IP access list 101

          deny udp any any eq ntp

          permit tcp any any

          permit udp any any eq tftp

          permit icmp any any

          permit udp any any eq domain

The following is sample output from the show ip access-list command when the name of a specific access list is requested:

Router# show ip access-list Internetfilter

Extended IP access list Internetfilter

    permit tcp any 171.69.0.0 0.0.255.255 eq telnet

    deny tcp any any

    deny udp any 171.69.0.0 0.0.255.255 lt 1024

    deny ip any any log

show ip accounting

To display the active accounting or checkpointed database or to display access list violations, use the show ip accounting EXEC command.

show ip accounting [checkpoint] [output-packets | access-violations]

Syntax Description


checkpoint	(Optional) Indicates that the checkpointed database should be displayed.
output-packets	(Optional) Indicates that information pertaining to packets that passed access control and were successfully routed should be displayed. If neither the output-packets nor access-violations keyword is specified, output-packets is the default.
access-violations	(Optional) Indicates that information pertaining to packets that failed access lists and were not routed should be displayed. If neither the output-packets nor access-violations keyword is specified, output-packets is the default.

Defaults

If neither the output-packets nor access-violations keyword is specified, show ip accounting displays information pertaining to packets that passed access control and were successfully routed.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.
10.3	The following keywords were added: •output-packets •access-violations

Usage Guidelines

If you do not specify any keywords, the show ip accounting command displays information about the active accounting database, and traffic coming from a remote site and transiting through a router.

To display IP access violations, you must give the access-violations keyword on the command. If you do not specify the keyword, the command defaults to displaying the number of packets that have passed access lists and were routed.

To use this command, you must first enable IP accounting on a per-interface basis.

Examples

The following is sample output from the show ip accounting command:

Router# show ip accounting

   Source           Destination              Packets               Bytes

 131.108.19.40    192.67.67.20                     7                 306

 131.108.13.55    192.67.67.20                    67                2749

 131.108.2.50     192.12.33.51                    17                1111

 131.108.2.50     130.93.2.1                       5                 319

 131.108.2.50     130.93.1.2                     463               30991

 131.108.19.40    130.93.2.1                       4                 262

 131.108.19.40    130.93.1.2                      28                2552

 131.108.20.2     128.18.6.100                    39                2184

 131.108.13.55    130.93.1.2                      35                3020

 131.108.19.40    192.12.33.51                  1986               95091

 131.108.2.50     192.67.67.20                   233               14908

 131.108.13.28    192.67.67.53                   390               24817

 131.108.13.55    192.12.33.51                214669             9806659

 131.108.13.111   128.18.6.23                  27739             1126607

 131.108.13.44    192.12.33.51                 35412             1523980

 192.31.7.21      130.93.1.2                      11                 824

 131.108.13.28    192.12.33.2                     21                1762

 131.108.2.166    192.31.7.130                   797              141054

 131.108.3.11     192.67.67.53                     4                 246

 192.31.7.21      192.12.33.51                 15696              695635

 192.31.7.24      192.67.67.20                    21                 916

 131.108.13.111   128.18.10.1                     16                1137

 accounting threshold exceeded for 7 packets and 433 bytes

The following is sample output from the show ip accounting access-violations command. The output pertains to packets that failed access lists and were not routed:

Router# show ip accounting access-violations

   Source           Destination      Packets        Bytes        ACL

131.108.19.40    192.67.67.20              7          306         77

131.108.13.55    192.67.67.20             67         2749        185

131.108.2.50     192.12.33.51             17         1111        140

131.108.2.50     130.93.2.1                5          319        140

131.108.19.40    130.93.2.1                4          262         77

Accounting data age is 41

The following is sample output from the show ip accounting command. The output shows the original source and destination addresses that are separated by three routers:

Router3# show ip accounting

Source                  Destination                  Packets                  Bytes

10.225.231.154          172.16.10.2                  44                       28160

10.76.97.34             172.16.10.2                  44                       28160

10.10.11.1              172.16.10.2                  507                      324480

10.10.10.1              172.16.10.2                  507                      318396

10.100.45.1             172.16.10.2                  508                      325120

10.98.32.5              172.16.10.2                  44                       28160

Accounting data age is 2

Table 11 describes the fields shown in the displays.

Table 11 show ip accounting (and access-violation) Field Descriptions
Field	Description
Source	Source address of the packet.
Destination	Destination address of the packet.
Packets	Number of packets transmitted from the source address to the destination address. With the access-violations keyword, the number of packets transmitted from the source address to the destination address that violated an access control list.
Bytes	Sum of the total number of bytes (IP header and data) of all IP packets transmitted from the source address to the destination address. With the access-violations keyword, the total number of bytes transmitted from the source address to the destination address that violated an access-control list.
ACL	Number of the access list of the last packet transmitted from the source to the destination that failed an access list filter.
accounting threshold exceeded...	Data for all packets that could not be entered into the accounting table when the accounting table is full. This data is combined into a single entry.

Related Commands


Command	Description
clear ip accounting	Clears the active or checkpointed database when IP accounting is enabled.
ip accounting	Enables IP accounting on an interface.
ip accounting-list	Defines filters to control the hosts for which IP accounting information is kept.
ip accounting-threshold	Sets the maximum number of accounting entries to be created.
ip accounting-transits	Controls the number of transit records that are stored in the IP accounting database.

show ip drp

To display information about the DRP Server Agent for DistributedDirector, use the show ip drp EXEC command.

show ip drp

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History


Release	Modification
11.2 F	This command was introduced.

Examples

The following is sample output from the show ip drp command:

Router# show ip drp

Director Responder Protocol Agent is enabled

717 director requests, 712 successful lookups, 5 failures, 0 no route

Authentication is enabled, using "test" key-chain

Table 12 describes the significant fields in the display.

Table 12 show ip drp Field Descriptions
Field	Description
director requests	Number of DRP requests that have been received (including any using authentication key-chain encryption that failed).
successful lookups	Number of successful DRP lookups that produced responses.
failures	Number of DRP failures (for various reasons including authentication key-chain encryption failures).

Related Commands


Command	Description
ip drp access-group	Controls the sources of DRP queries to the DRP Server Agent.
ip drp authentication key-chain	Configures authentication on the DRP Server Agent for DistributedDirector.

show ip redirects

To display the address of a default gateway (router) and the address of hosts for which an ICMP Redirect messages has been received, use the show ip redirects EXEC command.

show ip redirects

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

This command displays the default router (gateway) as configured by the ip default-gateway command.

The ip redirects command enables the router to send ICMP Redirect messages.

Examples

The following is sample output from the show ip redirects command:

Router# show ip redirects

Default gateway is 160.89.80.29

Host               Gateway           Last Use    Total Uses  Interface

131.108.1.111      160.89.80.240         0:00             9  Ethernet0

128.95.1.4         160.89.80.240         0:00             4  Ethernet0

Router#

Related Commands


Command	Description
ip default-gateway	Defines a default gateway (router) when IP routing is disabled.
ip redirects	Enables the sending of ICMP Redirect messages if the Cisco IOS software is forced to resend a packet through the same interface on which it was received.

show ip sockets

To display IP socket information, use the show ip sockets command in privileged EXEC mode or user EXEC mode.

show ip sockets

Syntax Description

This command has no keywords or arguments.

Defaults

No default behavior or values.

Command Modes

Privileged EXEC
User EXEC

Command History


Release	Modification
10.0 T	This command was introduced.

Usage Guidelines

Use this command to verify that the socket being used is opening correctly. If there is a local and remote endpoint, a connection is established with the ports indicated.

Examples

The following is sample output from the show ip sockets command:

Router# show ip sockets

Proto    Remote      Port      Local         Port  In Out Stat TTY OutputIF

 17      0.0.0.0        0    171.68.186.193    67   0   0    1   0

 17   171.68.191.135  514    171.68.191.129  1811   0   0    0   0

 17   172.16.135.20   514    171.68.191.1    4125   0   0    0   0

 17   171.68.207.163   49    171.68.186.193    49   0   0    9   0

 17      0.0.0.0      123    171.68.186.193   123   0   0    1   0

 88      0.0.0.0        0    171.68.186.193   202   0   0    0   0

 17   172.16.96.59  32856    171.68.191.1     161   0   0    1   0

 17     --listen--             --any--        496   0   0    1   0

Table 13 describes the significant fields shown in the display.

Table 13 show ip sockets Field Descriptions
Field	Description
Proto	Protocol type, for example, User Datagram Protocol (UDP) or TCP.
Remote	Remote address connected to this networking device. If the remote address is considered illegal, "--listen--" is displayed.
Port	Remote port. If the remote address is considered illegal, "--listen--" is displayed.
Local	Local address. If the local address is considered illegal or is the address 0.0.0.0, "--any--" displays.
Port	Local port.
In	Input queue size.
Out	Output queue size.
Stat	Various statistics for a socket.
TTY	The tty number for the creator of this socket.
OutputIF	Output IF string, if one exists.

show ip tcp header-compression

To display statistics about TCP header compression, use the show ip tcp header-compression EXEC command.

show ip tcp header-compression

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.

Examples

The following is sample output from the show ip tcp header-compression command:

Router# show ip tcp header-compression

TCP/IP header compression statistics:

  Interface Serial1: (passive, compressing)

    Rcvd:    4060 total, 2891 compressed, 0 errors

             0 dropped, 1 buffer copies, 0 buffer failures

    Sent:    4284 total, 3224 compressed,

             105295 bytes saved, 661973 bytes sent

             1.15 efficiency improvement factor

    Connect:  16 slots, 1543 long searches, 2 misses, 99% hit ratio

             Five minute miss rate 0 misses/sec, 0 max misses/sec

Table 14 describes significant fields shown in the display.

Table 14 show ip tcp header-compression Field Descriptions
Field	Description
Rcvd:
total	Total number of TCP packets received.
compressed	Total number of TCP packets compressed.
errors	Unknown packets.
dropped	Number of packets dropped due to invalid compression.
buffer copies	Number of packets that had to be copied into bigger buffers for decompression.
buffer failures	Number of packets dropped due to a lack of buffers.
Sent:
total	Total number of TCP packets sent.
compressed	Total number of TCP packets compressed.
bytes saved	Number of bytes reduced.
bytes sent	Number of bytes sent.
efficiency improvement factor	Improvement in line efficiency because of TCP header compression.
Connect:
slots	Size of the cache.
long searches	Indicates the number of times the software had to look to find a match.
misses	Indicates the number of times a match could not be made. If your output shows a large miss rate, then the number of allowable simultaneous compression connections may be too small.
hit ratio	Percentage of times the software found a match and was able to compress the header.
Five minute miss rate	Calculates the miss rate over the previous 5 minutes for a longer-term (and more accurate) look at miss rate trends.
max misses/sec	Maximum value of the previous field.

Related Commands


Command	Description
ip tcp header-compression	Enables TCP header compression.

show ip traffic

To display statistics about IP traffic, use the show ip traffic EXEC command.

show ip traffic

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.

Examples

The following is sample output from the show ip traffic command:

Router# show ip traffic

IP statistics:

   Rcvd:  98 total, 98 local destination

          0 format errors, 0 checksum errors, 0 bad hop count

          0 unknown protocol, 0 not a gateway

          0 security failures, 0 bad options

    Frags: 0 reassembled, 0 timeouts, 0 too big

          0 fragmented, 0 couldn't fragment

   Bcast: 38 received, 52 sent

   Sent: 44 generated, 0 forwarded

          0 encapsulation failed, 0 no route

 ICMP statistics:

   Rcvd:  0 format errors, 0 checksum errors, 0 redirects, 0 unreachable

          0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench

          0 parameter, 0 timestamp, 0 info request, 0 other

   Sent:  0 redirects, 3 unreachable, 0 echo, 0 echo reply

          0 mask requests, 0 mask replies, 0 quench, 0 timestamp

          0 info reply, 0 time exceeded, 0 parameter problem

 UDP statistics:

   Rcvd:  56 total, 0 checksum errors, 55 no port

   Sent:  18 total, 0 forwarded broadcasts

 TCP statistics:

   Rcvd:  0 total, 0 checksum errors, 0 no port

   Sent:  0 total

 EGP statistics:

   Rcvd:  0 total, 0 format errors, 0 checksum errors, 0 no listener

   Sent:  0 total

 IGRP statistics:

   Rcvd:  73 total, 0 checksum errors

   Sent:  26 total

 HELLO statistics:

   Rcvd:  0 total, 0 checksum errors

   Sent:  0 total

 ARP statistics:

   Rcvd:  20 requests, 17 replies, 0 reverse, 0 other

   Sent:  0 requests, 9 replies (0 proxy), 0 reverse

 Probe statistics:

   Rcvd:  6 address requests, 0 address replies

 0 proxy name requests, 0 other

   Sent:  0 address requests, 4 address replies (0 proxy)

          0 proxy name replies

Table 15 describes significant fields shown in the display.

Table 15 show ip traffic Field Descriptions
Field	Description
format errors	A gross error in the packet format, such as an impossible Internet header length.
bad hop count	Occurs when a packet is discarded because its time-to-live (TTL) field was decremented to zero.
encapsulation failed	Usually indicates that the router had no ARP request entry and therefore did not send a datagram.
no route	Counted when the Cisco IOS software discards a datagram it did not know how to route.
proxy name reply	Counted when the Cisco IOS software sends an ARP or Probe Reply on behalf of another host. The display shows the number of probe proxy requests that have been received and the number of responses that have been sent.

show standby

To display Hot Standby Router Protocol (HSRP) information, use the show standby EXEC command.

show standby [type number [group]] [brief]

Syntax Description


type number	(Optional) Interface type and number for which output is displayed.
group	(Optional) Group number on the interface for which output is displayed.
brief	(Optional) A single line of output summarizes each standby group.

Command Modes

EXEC

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

If you want to specify a group, you must also specify an interface type and number.

Examples

The following is sample output from the show standby command:

Router# show standby

Ethernet0 - Group 0

  Local state is Active, priority 100, may preempt

  Hellotime 3 holdtime 10

  Next hello sent in 0:00:00

  Hot standby IP address is 198.92.72.29 configured

  Active router is local

  Standby router is 198.92.72.21 expires in 0:00:07

  Tracking interface states for 2 interfaces, 2 up:

    Up    Ethernet0

    Up    Serial0

The following is sample output from the show standby command with a specific interface and the brief keyword:

Router# show standby ethernet0 brief

Interface   Grp Prio P State    Active addr     Standby addr    Group addr

Et0         0   100    Standby  171.69.232.33   local           172.19.48.254

Table 16 describes the fields in the display.

Table 16 show standby Field Descriptions
Field	Description
Ethernet0 - Group 0	Interface type and number and Hot Standby group number for the interface.
Local state is ...	State of local router; can be one of the following: •Active—Current Hot Standby router •Standby—Router next in line to be the Hot Standby router
priority	Priority value of the router based on the standby priority, standby preempt command.
may preempt (indicated by P in the brief output)	Indicates that the router will attempt to assume control as the active router if its priority is greater than the current active router.
Hellotime	Time between hello packets (in seconds), based on the standby timers command.
holdtime	Time (in seconds) before other routers declare the active or standby router to be down, based on the standby timers command.
Next hello sent in ...	Time in which the Cisco IOS software will send the next hello packet (in hours:minutes:seconds).
Hot Standby IP address is ... configured	IP address of the current Hot Standby router. The word "configured" indicates that this address is known through the standby ip command. Otherwise, the address was learned dynamically through HSRP hello packets from other routers that do have the HSRP IP address configured.
Active router is ...	Value can be "local" or an IP address. Address of the current active Hot Standby router.
Standby router is ...	Value can be "local" or an IP address. Address of the "standby" router (the router that is next in line to be the Hot Standby router).
expires in	Time (in hours:minutes:seconds) in which the standby router will no longer be the standby router if the local router receives no hello packets from it.
Tracking interface states for ...	List of interfaces that are being tracked and their corresponding states. Based on the standby track command.

Related Commands


Command	Description
standby authentication	Configures an authentication string for the HSRP.
standby ip	Activates the HSRP.
standby priority, standby preempt	Configures HSRP priority, preemption, and preemption delay.
standby timers	Configures the time between hellos and the time before other routers declare the active Hot Standby or standby router to be down.
standby track	Configures an interface so that the Hot Standby priority changes based on the availability of other interfaces.
standby use-bia	Configures HSRP to use the burned-in address of the interface as its virtual MAC address, instead of the preassigned MAC address (on Ethernet and FDDI) or the functional address (on Token Ring).

show tcp statistics

To display TCP statistics, use the show tcp statistics EXEC command.

show tcp statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History

Release	Modification
11.3	This command was introduced.

Examples

The following is sample output from the show tcp statistics command:

Router# show tcp statistics

Rcvd: 210 Total, 0 no port

      0 checksum error, 0 bad offset, 0 too short

      132 packets (26640 bytes) in sequence

      5 dup packets (502 bytes)

      0 partially dup packets (0 bytes)

      0 out-of-order packets (0 bytes)

      0 packets (0 bytes) with data after window

      0 packets after close

      0 window probe packets, 0 window update packets

      0 dup ack packets, 0 ack packets with unsend data

      69 ack packets (3044 bytes)

Sent: 175 Total, 0 urgent packets

      16 control packets (including 1 retransmitted)

      69 data packets (3029 bytes)

      0 data packets (0 bytes) retransmitted

      73 ack only packets (49 delayed)

      0 window probe packets, 17 window update packets

7 Connections initiated, 1 connections accepted, 8 connections established

8 Connections closed (including 0 dropped, 0 embryonic dropped)

1 Total rxmt timeout, 0 connections dropped in rxmt timeout

0 Keepalive timeout, 0 keepalive probe, 0 Connections dropped in keepalive

Table 17 describes significant fields shown in the display.

Table 17 show tcp statistics Field Descriptions
Field	Description
Rcvd:	Statistics in this section refer to packets received by the router.
Total	Total packets received.
no port	Number of packets received with no port.
checksum error	Number of packets received with checksum error.
bad offset	Number of packets received with bad offset to data.
too short	Number of packets received that were too short.
packets in sequence	Number of data packets received in sequence.
dup packets	Number of duplicate packets received.
partially dup packets	Number of packets received with partially duplicated data.
out-of-order packets	Number of packets received out of order.
packets with data after window	Number of packets received with data that exceeded the receiver's window size.
packets after close	Number of packets received after the connection has been closed.
window probe packets	Number of window probe packets received.
window update packets	Number of window update packets received.
dup ack packets	Number of duplicate acknowledgment packets received.
ack packets with unsent data	Number of acknowledgment packets with unsent data received.
ack packets	Number of acknowledgment packets received.
Sent:	Statistics in this section refer to packets sent by the router.
Total	Total number of packets sent.
urgent packets	Number of urgent packets sent.
control packets	Number of control packets (SYN, FIN, or RST) sent.
data packets	Number of data packets sent.
data packets retransmitted	Number of data packets retransmitted.
ack only packets	Number of packets sent that are acknowledgments only.
window probe packets	Number of window probe packets sent.
window update packets	Number of window update packets sent.
Connections initiated	Number of connections initiated.
connections accepted	Number of connections accepted.
connections established	Number of connections established.
Connections closed	Number of connections closed.
Total rxmt timeout	Number of times the router tried to retransmit, but timed out.
Connections dropped in rxmit timeout	Number of connections dropped in retransmit timeout.
Keepalive timeout	Number of keepalive packets in timeout.
keepalive probe	Number of keepalive probes.
Connections dropped in keepalive	Number of connections dropped in keepalive.

Related Commands

Command	Description
clear tcp statistics	Clears TCP statistics.

standby authentication

To configure an authentication string for the Hot Standby Router Protocol (HSRP), use the standby authentication interface configuration command. To delete an authentication string, use the no form of this command.

standby [group-number] authentication string

no standby [group-number] authentication string

Syntax Description

group-number	(Optional) Group number on the interface to which this authentication string applies.
string	Authentication string. It can be up to eight characters in length. The default string is cisco.

Defaults

group-number: 0
string: cisco

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

The authentication string is transmitted unencrypted in all HSRP messages. The same authentication string must be configured on all routers and access servers on a cable to ensure interoperation. Authentication mismatch prevents a device from learning the designated Hot Standby IP address and the Hot Standby timer values from other routers configured with HSRP. Authentication mismatch does not prevent protocol events such as one router taking over as the designated router.

When group number 0 is used, no group number is written to NVRAM, providing backward compatibility.

Examples

The following example configures "word" as the authentication string required to allow Hot Standby routers in group 1 to interoperate:

interface ethernet 0

 standby 1 authentication word

standby ip

To activate the Hot Standby Router Protocol (HSRP), use the standby ip interface configuration command. To disable HSRP, use the no form of this command.

standby [group-number] ip [ip-address [secondary]]

no standby [group-number] ip [ip-address]

Syntax Description


group-number	(Optional) Group number on the interface for which HSRP is being activated. Default is 0.
ip-address	(Optional) IP address of the Hot Standby Router interface.
secondary	(Optional) Indicates the IP address is a secondary Hot Standby Router interface. Useful on interfaces with primary and secondary addresses; you can configure primary and secondary HSRP addresses.

Defaults

group-number: 0

HSRP is disabled.

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.
10.3	The group-numer argument was added.
11.1	The secondary keyword was added.

Usage Guidelines

The standby ip command activates HSRP on the configured interface. If an IP address is specified, that address is used as the designated address for the Hot Standby group. If no IP address is specified, the designated address is learned through the standby function. For HSRP to elect a designated router, at least one router on the cable must have been configured with, or learned, the designated address. Configuring the designated address on the active router always overrides a designated address that is currently in use.

When the standby ip command is enabled on an interface, the handling of proxy ARP requests is changed (unless proxy ARP was disabled). If the interface's Hot Standby state is active, proxy ARP requests are answered using the Hot Standby group's MAC address. If the interface is in a different state, proxy ARP responses are suppressed.

When group number 0 is used, no group number is written to NVRAM, providing backward compatibility.

Examples

The following example activates HSRP for group 1 on Ethernet interface 0. The IP address used by the Hot Standby group will be learned using HSRP.

interface ethernet 0

 standby 1 ip

In the following example, all three virtual IP addresses appear in the ARP table using the same (single) virtual MAC address. All three virtual IP addresses are using the same HSRP group (group 0).

ip address 1.1.1.1. 255.255.255.0

ip address 1.2.2.2. 255.255.255.0 secondary

ip address 1.3.3.3. 255.255.255.0 secondary

ip address 1.4.4.4. 255.255.255.0 secondary

standby ip 1.1.1.254

standby ip 1.2.2.254 secondary

standby ip 1.3.3.254 secondary

standby mac-address

To specify a virtual MAC address for Hot Standby Router Protocol (HSRP), use the standby mac-address interface configuration command. To revert to the standard virtual MAC address (0000.0C07.ACxy), use the no form of this command.

standby [group-number] mac-address macaddress

no standby [group-number] mac-address

Syntax Description


group-number	(Optional) Group number on the interface for which HSRP is being activated. The default is 0.
macaddress	Media Access Control (MAC) address.

Defaults

If this command is not configured, and the standby use-bia command is not configured, the standard virtual MAC address is used: 0000.0C07.ACxy, where xy is the group number in hexadecimal. This address is specified in RFC 2281, Cisco Hot Standby Router Protocol (HSRP).

Command Modes

Interface configuration

Command History


Release	Modification
11.2	This command was introduced.

Usage Guidelines

This command can not be used on a Token Ring Interface.

HSRP is used to help endstations locate the first hop gateway for IP routing. The endstations are configured with a default gateway. However, HSRP can provide first-hop redundancy for other protocols. Some protocols, such as APPN, use the MAC address to identify the first hop for routing purposes. In this case, it is often necessary to be able to specify the virtual MAC address; the virtual IP address is unimportant for these protocols. Use the standby mac-address command to specify the virtual MAC address.

The MAC address specified is used as the virtual MAC address when the router is active.

This command is intended for certain APPN configurations. The parallel terms are as follows:

APPN IP
end node host
network node router or gateway

In an APPN network, an end node is typically configured with the MAC address of the adjacent network node. Use the standby mac-address command in the routers to set the virtual MAC address to the value used in the end nodes.

Examples

If the end nodes are configured to use 4000.1000.1060 as the MAC address of the network node, the command to configure HSRP group 1 with the virtual MAC address is as follows:

 standby 1 mac-address 4000.1000.1060

Related Commands


Command	Description
show standby	Displays HSRP information.
standby use-bia	Configures HSRP to use the burned-in address of the interface as its virtual MAC address.

standby mac-refresh

To change the interval at which packets are sent to refresh the MAC cache when Hot Standby Router Protocol (HSRP) is running over FDDI, use the standby mac-refresh interface configuration command. To restore the default value, use the no form of this command.

standby mac-refresh seconds

no standby mac-refresh

Syntax Description


seconds	Number of seconds in the interval at which a packet is sent to refresh the MAC cache. The maximum value is 255 seconds. The default is 10 seconds.

Defaults

10 seconds

Command Modes

Interface configuration

Command History


Release	Modification
12.0	This command was introduced.

Usage Guidelines

This command applies to HSRP running over FDDI only. Packets are sent every 10 seconds to refresh the MAC cache on learning bridges or switches. By default, the MAC cache entries age out in 300 seconds (5 minutes).

All other routers participating in HSRP on the FDDI ring receive the refresh packets, although the packets are intended only for the learning bridge or switch. Use this command to change the interval. Set the interval to 0 if you want to prevent refresh packets (if you have FDDI but do not have a learning bridge or switch).

Examples

The following example changes the MAC refresh interval to 100 seconds. Therefore, a learning bridge would have to miss three packets before the entry ages out.

standby mac-refresh 100

standby priority, standby preempt

To configure Hot Standby Router Protocol (HSRP) priority, preemption, and preemption delay, use the standby interface configuration command. To restore the default values, use the no form of this command.

standby [group-number] priority priority [preempt [delay delay]]

standby [group-number] [priority priority] preempt [delay delay]

no standby [group-number] priority priority [preempt [delay delay]]

no standby [group-number] [priority priority] preempt [delay delay]

Syntax Description


group-number	(Optional) Group number on the interface to which the other arguments in this command apply.
priority priority	(Optional) Priority value that prioritizes a potential Hot Standby router. The range is 1 to 255, where 1 denotes the lowest priority and 255 denotes the highest priority. The default priority value is 100. The router in the HSRP group with the highest priority value becomes the active router.
preempt	(Optional) The router is configured to preempt, which means that when the local router has a Hot Standby priority higher than the current active router, the local router should attempt to assume control as the active router. If preempt is not configured, the local router assumes control as the active router only if it receives information indicating that there is no router currently in the active state (acting as the designated router).
delay delay	(Optional) Time in seconds. The delay argument causes the local router to postpone taking over the active role for delay seconds since that router was last restarted. The range is 0 to 3600 seconds (1 hour). The default is 0 seconds (no delay).

Defaults

group-number: 0

priority: 100

delay: 0 seconds; if the router wants to preempt, it will do so immediately.

Command Modes

Interface configuration

Command History


Release	Modification
11.3	This command was introduced.

Usage Guidelines

When using this command, you must specify at least one keyword (priority or preempt), or you can specify both.

When group number 0 is used, no group number is written to NVRAM, providing backward compatibility.

The assigned priority is used to help select the active and standby routers. Assuming preemption is enabled, the router with the highest priority becomes the designated active router. In case of ties, the primary IP addresses are compared, and the higher IP address has priority.

Note that the device's priority can change dynamically if an interface is configured with the standby track command and another interface on the router goes down.

When a router first comes up, it does not have a complete routing table. If it is configured to preempt, it will become the active router, yet it is unable to provide adequate routing services. This problem is solved by configuring a delay before the preempting router actually preempts the currently active router.

Examples

In the following example, the router has a priority of 120 (higher than the default value) and will wait for 300 seconds (5 minutes) before attempting to become the active router:

interface ethernet 0   standby ip 172.19.108.254

 standby priority 120 preempt delay 300

Related Commands


Command	Description
standby track	Configures an interface so that the Hot Standby priority changes based on the availability of other interfaces.

standby timers

To configure the time between hellos and the time before other routers declare the active Hot Standby or standby router to be down, use the standby timers interface configuration command. To restore the timers to their default values, use the no form of this command.

standby [group-number] timers [msec] hellotime [msec] holdtime

no standby [group-number] timers [msec] hellotime [msec] holdtime

Syntax Description


group-number	(Optional) Group number on the interface to which the timers apply. The default is 0.
msec	(Optional) Interval in milliseconds. Millisecond timers allow for faster failover.
hellotime	Hello interval in seconds.This is an integer from 1 to 255. The default is 3 seconds. If the msec option is specified, hello interval is in milliseconds. This is an integer from 20 to 999.
holdtime	Time in seconds before the active or standby router is declared to be down. This is an integer from 1 to 255. The default is 10 seconds. If the msec option is specified, holdtime is in milliseconds. This is an integer from 20 to 999.

Defaults

group-number: 0
hellotime: 3 seconds
holdtime: 10 seconds

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.
11.2	The msec keyword was added.

Usage Guidelines

The standby timers command configures the time between standby hellos and the time before other routers declare the active or standby router to be down. Routers or access servers on which timer values are not configured can learn timer values from the active or standby router. The timers configured on the active router always override any other timer settings. All routers in a Hot Standby group should use the same timer values. Normally, holdtime is greater than or equal to 3 times the value of hellotime, (holdtime > 3 * hellotime).

The value of the standby timer will not be learned through HSRP hellos if it is less than 1 second.

When group number 0 is used, no group number is written to NVRAM, providing backward compatibility.

Examples

The following example sets, for group number 1 on Ethernet interface 0, the time between hello packets to 5 seconds, and the time after which a router is considered to be down to 15 seconds:

interface ethernet 0

 standby 1 ip

 standby 1 timers 5 15

The following example sets, for the Hot Router interface located at 172.19.10.1 on Ethernet interface 0, the time between hello packets to 300 milliseconds, and the time after which a router is considered to be down to 900 milliseconds.

interface ethernet 0

 standby ip 172.19.10.1

 standby timers msec 300 msec 900

standby track

To configure an interface so that the Hot Standby priority changes based on the availability of other interfaces, use the standby track interface configuration command. To remove the tracking, use the no form of this command.

standby [group-number] track type number [interface-priority]

no standby [group-number] track type number [interface-priority]

Syntax Description


group-number	(Optional) Group number on the interface to which the tracking applies.
type	Interface type (combined with interface number) that will be tracked.
number	Interface number (combined with interface type) that will be tracked.
interface-priority	(Optional) Amount by which the Hot Standby priority for the router is decremented (or incremented) when the interface goes down (or comes back up). The default value is 10.

Defaults

group-number: 0

interface-priority: 10

Command Modes

Interface configuration

Command History


Release	Modification
10.3	This command was introduced.

Usage Guidelines

This command ties the router's Hot Standby priority to the availability of its interfaces. It is useful for tracking interfaces that are not configured for the Hot Standby Router Protocol.

When a tracked interface goes down, the Hot Standby priority decreases by 10. If an interface is not tracked, its state changes do not affect the Hot Standby priority. For each interface configured for Hot Standby, you can configure a separate list of interfaces to be tracked.

The optional argument interface-priority specifies how much to decrement the Hot Standby priority by when a tracked interface goes down. When the tracked interface comes back up, the priority is incremented by the same amount.

When multiple tracked interfaces are down and interface-priority values have been configured, these configured priority decrements are cumulative. If tracked interfaces are down, but none of them were configured with priority decrements, the default decrement is 10 and it is noncumulative.

When group number 0 is used, no group number is written to NVRAM, providing backward compatibility.

Examples

In the following example, Ethernet interface 1 tracks Ethernet interface 0 and serial interface 0. If one or both of these two interfaces go down, the Hot Standby priority of the router decreases by 10. Because the default Hot Standby priority is 100, the priority becomes 90 when one or both of the tracked interfaces go down.

interface ethernet 1

 ip address 198.92.72.37 255.255.255.240

 no ip redirects

 standby track ethernet 0

 standby track serial 0

 standby preempt

 standby ip 198.92.72.46

Related Commands


Command	Description
standby priority, standby preempt	Configures HSRP priority, preemption, and preemption delay.

standby use-bia

To configure Hot Standby Router Protocol (HSRP) to use the interface's burned-in address as its virtual MAC address, instead of the preassigned MAC address (on Ethernet and FDDI) or the functional address (on Token Ring), use the standby use-bia interface configuration command. To restore the default virtual MAC address, use the no form of this command.

standby use-bia

no standby use-bia

Syntax Description

This command has no arguments or keywords.

Defaults

HSRP uses the preassigned MAC address on Ethernet and FDDI, or the functional address on Token Ring.

Command Modes

Interface configuration

Command History


Release	Modification
11.2	This command was introduced.

Usage Guidelines

For an interface with this command configured, only one standby group can be configured. Multiple groups need to be removed before this command is configured. Hosts on the interface need to have a default gateway configured. It is recommended you set the no ip proxy-arp command on the interface. It is desirable to configure the standby use-bia command on a Token Ring interface if there are devices that reject ARP replies with source hardware addresses set to a functional address.

When HSRP runs on a multiple-ring, source-routed bridging environment and the HRSP routers reside on different rings, configuring the standby use-bia command can prevent RIF confusion.

Examples

In the following example, the burned-in address of Token Ring interface 4/0 will be the virtual MAC address mapped to the virtual IP address:

interface token4/0

 standby use-bia

transmit-interface

To assign a transmit interface to a receive-only interface, use the transmit-interface interface configuration command. To return to normal duplex Ethernet interfaces, use the no form of this command.

transmit-interface type number

no transmit-interface

Syntax Description


type	Transmit interface type to be linked with the (current) receive-only interface.
number	Transmit interface number to be linked with the (current) receive-only interface.

Defaults

Disabled

Command Modes

Interface configuration

Command History


Release	Modification
10.0	This command was introduced.

Usage Guidelines

Receive-only interfaces are used commonly with microwave Ethernet links.

Examples

The following example specifies Ethernet interface 0 as a simplex Ethernet interface:

interface ethernet 1

 ip address 128.9.1.2

 transmit-interface ethernet 0

What should I do now? | What to do now?

2011-04-05T17:27:00.003+05:30

What should I do now? What to do now?
The moment is really important. What should I do now situation arise in many conditions. When someone asks you what should I do now, when they did a completely silly thing that they should have not done, one should act immediately, according to the situation. Acting sensibly, giving a valid advise also is important.

Even in case of a situation when one tries to commit suicide, if the moment is passed, the urge to end their life would be something of their past and they could be gotten out of the situation. Momentary thought (yet valid or genuine action) always wins in a situation of “ What should I do now?”

Occasions/ Situation of “What should I do now?”

Friends break up with his/ her girlfriend/ boy friend and feels “what should I do now?. At that point of time, friends should give a sharing thought or a shoulder to lean on to. Or at least lend a tissue or a kerchief to let them cry out loud.

Teenagers fights with their never understanding parents and blink, as to what should I do now?
When parents get divorced, children wonder, what should I do now? When stealing some money from your dad's pocket and you get caught, you go, “what should I do no?”

After partying, you get drunk and enter home late in the night, and you get caught red handed by your parents ( if you are a teenager) or by your spouse ( if you are married) or by you girl/ boy friend ( if you are in a live-in relationship), you would be in a situation, “oh oh, what should I do now?”

I member a joke I once heard in this situation, which I would like to share. A guy who drank in full josh, reached home very late in the night and rings the door bell. He found his wife, who opens the door with a broomstick in hand and the guy goes “Oh sweet heart, darling, are still doing house hold chores!” Instead of thinking “what should I do now?”, the guy smartly handled the situation, way to go! But guys who over is reading this DO NOT TRY THIS AT HOME! Women do get angry with this kind of smartly handled situations.

Teenagers, when get caught by their parents/ friends or relatives for being seen with their lover/ boy friend/ girl friend, wonder, “what should I do now?”

Teens when they get pregnant, wonder why “what should I do now that I am pregnant?”. Teens who get in to the habit of drugs, smoking and couldn't get themselves out of the practice, wonder “what should I do now that i'm pregnant?”

What should I do now, that I am 18 year old, is the most prevalent question for a teen. A teen gets license to do many things with attaining the age of 18. License to drive a car or bike, license to enter a pub, license to vote in India).

If your friends sees you with his / her girl friend or boy friend, you would think of 1001 ways to escape from the embarrassing situation and say loud” what should I do now”

At school or college, when teachers/ lecturers circulate answer papers or mark sheets, students will wonder, “what should I do now?”

When you are going through the list of students who had passed or rank holders in the examination conducted, from the college notice board, and wonder, “what should I do now”, when your best friend fails.

When you and your friends have bunked all classes, and studied only the night before the exam and wish to get just pass mark (which in itself is a miracle to happen), but all of a sudden, unexpectedly, to everyone's astonishment, when one among your gang of friends get first rank, you wonder, “what should I do now?”

When the person who gave money asks for it back, when you don't have a single penny, to escape from the situation, one will imagine for an idea, as to what should I do now?

College students,when they bunk college and don't have a place to go, they gaze wondering “what should I do now?”. When friends as a gang go out to eat in a restaurant, and they find that they don't have money with any one of them, they wonder, “what should I do now?”

When an extremely attractive girl who pass by you winks at you, and proposes to you and smooches, you blink in bewilderment, whats should I do now?”

Guys always have the habit of going around with a gang of friends, only if they are not dating a girl. Guys raise a question, “what should I do now that I am single?”. They go around a girl for few dates, then if they get broken up with their girl friend, they get a few shots drunk and get back to square one with the idea “so what should do now, that I am single?”

Many guys with the idea of what should do now, that I am single, tries to break down their emotions of being ditched by their girl friends by drinking, by being in sweat pans for days together, and then final phase is by watching a strip tease.

Many break down to the almighty God, when they are in deep depression, by asking, what should I do now God?

Another option, which is like a trend that's followed by many is by asking the mystery Google their questions and gets answers and solutions to their queries. People literally type down, “What should I do now mystery Google?” to find search results. You as a user would also have turned to Google to hit my page article, from the list of search results.

What should I do now, will be the immediate question that arise in many people's mind, when a immediate result or suggestion or an idea is asked or enquired by someone or when someone becomes perplexed in a situation not knowing what to do or not knowing the reaction to the things that they have done.

One of the best solution is not to get worried and being calm and composed before handling the situation of “what to do now?” is the best advise one could give for such a situation.

What should I know? What should you know before you die? What you should know in life?

What should I know or what you should know before death, while living a life is an extremely challenging question one need to ask your inner self?

Everybody in the world, wonders what one can learn or what one should know and enjoy life to the full swing, and live life with zest & energy.

What should I know? - to learn simple fundas in life.
What should I know? - to learn to forgive, to understand human emotions, to accept the truth and follow the instinct.
What should I know? - to learn to cook, cook delicious spicy food, which others can relish and eat, when you serve it hot.
What should I know? - To learn to make crispy crunchy cookies, crusted pizzas, to make lip smacking, mouth watering desserts, cakes, pastries.
What should I know? - to learn to not to hurt people, animals.
What should I know?- to learn to dance , or sing, or draw simple sketches, to learn a musical instrument, to learn a new language.
What should I know?- to enjoy being in company, to spend time with your self, to be in solitude.
What should I know? - to learn through mistakes, trial and errors. To admit mistakes, to be responsible, to be able to take decisions.
What should I know? - to learn and understand and value relationships, respect friends, motherhood and most importantly one's motherland your country.
What should I know? As a person, or rather Human being, - learn to cry, learn to be silent, learn to emote, learn to speak, learn to question, lean to raise doubt, earn to eat, learn to sleep like a child with innocence.
What should I know? From life – life is a miracle, life is a gift, life is unpredictable, life is a journey, life is mystery, it gets unraveled as we reach towards the destination.

Different people, various situation of “What should I know?”
Disputes between relationships argue each other with what should I know? Before entering in to a relationship, you ask your spouse on the first meeting, “what should I know” about you.

A real estate agent, or a person who looks for a land or house to buy, the question that comes on top of his mind is "What should i know before buying a house?" or "What should i know about buying a house?"

A teacher or a lecturer who turns in to a new class for teaching fears of facing the huge crowd of people, and wonders. "what should i know about my students?". The prefessor makes a primary research about the students and the clas,s more than researching notes for the subject taught, as students are of most importance these days who ar eimpossible to control.

Police officials, cops on investigating criminals, to get vital information, ask what should I know?Doctors, and Lawyers, ask “what should I know?” from you, before they check you or take up a case for you.

Many people who has to go thorugh various verification of documents and procedures, are fed up and they raise the question of "what should i know for my driving test?"

Today's youngsters, who throng these social networking sites to get signed up to chat, and develop network online, are a bit afraid of the privacy problems faced by many users. Youngsters before venturing in to these sites, question as to "what should i know about Facebook" and are now giving a through search on these sites,

What should I know also depends on the IQ level of the person and the age factor. When a kid asks a question about something beyond their age, parents or elders says, it is not something that you should know at this age. Then what is it, that should in know, wonders the kid.

"What should i know today" is one of the top question that arise in every person's mind when one gets up from the bed. Put up a list of things like, things to do, things to know and follow it as the day progresses and keep ticking it. Its as smple that one could easily follow. Learning a thing a day makes us gain knowledge on a particular topic, also makes us happy!

What will make me happy? What makes me happy? What all things will make me happy?

What will make me happy? - Seeing things, seeing good things, will make me happy. Seeing a child play, watching rain pouring heavily outside, will make me happy. Seeing simple things in life makes me happy.

If I am a college student, and is broke with no money in hand What will make me happy? Seeing a 100 rupee note in an old jean/ shirt pocket makes me feel happy, when you are completely broke. Seeing someone smile, makes me happy. When someone gives me a treat makes me happy. When an old friend calls out for a free dink at a friend's party place,, make me jump with excitement and joy, that makes me feel happy.

If I am a student, What will make me happy? Hearing good news of passing a examination, either in luck, fluke or getting a first rank or becoming school first, college first, university rank holder makes a student happy.

If I am a employee or a business man, what will make me happy? Hearing good things like getting a promotion or winning a lottery.

If I am a army man, what will make me happy? Country being a democratic, independent nation.

Simplicity is what will make me happy. Living a simple life, with not much of expectation, leads to no worries, and thus this is the best way that I would suggest is what will make me happy.

If am a traveler, what will make me happy? - Going on a tour around the world, visiting lots of exciting unexplored places, discovering new people, culture, habits, food makes traveler happy.

If am a photographer, what will make me happy? Capturing moments that makes someone cherish and feel happy about, every time they look at the picture, makes a photographer feel elated about.

If I am explorer, what will make me happy? Going on an expedition to the top of the highest mountains of the world and give a sigh of relief of achieving something, will make the explorer proud.

Cisco IP Services Commands

2010-10-18T11:46:00.000+05:30

Cisco IP Addressing Commands

2010-10-18T11:45:00.000+05:30

IP Addressing Commands:

arp (global)
arp (interface)
arp timeout
clear arp-cache
clear host
clear ip nat translation
clear ip nhrp
clear ip route
ip address
ip broadcast-address
ip classless
ip default-gateway
ip directed-broadcast
ip domain-list
ip domain-lookup
ip domain-lookup nsap
ip domain-name
ip forward-protocol
ip forward-protocol any-local-broadcast
ip forward-protocol spanning-tree
ip forward-protocol turbo-flood
ip helper-address
ip host
ip hp-host
ip irdp
ip mobile arp
ip name-server
ip nat
ip nat inside destination
ip nat inside source
ip nat outside source
ip nat pool
ip nat translation
ip netmask-format

ip nhrp authentication
ip nhrp holdtime
ip nhrp interest
ip nhrp map
ip nhrp map multicast
ip nhrp max-send
ip nhrp network-id
ip nhrp nhs
ip nhrp record
ip nhrp responder
ip nhrp use
ip probe proxy
ip proxy-arp
ip redirects
ip routing
ip subnet-zero
ip unnumbered
ping (privileged)
ping (user)
show arp
show hosts
show ip aliases
show ip arp
show ip interface
show ip irdp
show ip masks
show ip nat statistics
show ip nat translations
show ip nhrp
show ip nhrp traffic
show ip redirects
term ip netmask-format
trace (privileged)
trace (user)
tunnel mode

IP Addressing Commands

This chapter describes the function and displays the syntax for IP addressing commands. For more information about defaults and usage guidelines, see the corresponding chapter of the Network Protocols Command Reference, Part 1.

arp (global)

To add a permanent entry in the Address Resolution Protocol (ARP) cache, use the arp global configuration command. To remove an entry from the ARP cache, use the no form of this command.

arp ip-address hardware-address type [alias]
no arp ip-address hardware-address type [alias]

ip-address	IP address in four-part dotted-decimal format corresponding to the local data link address.
hardware-address	Local data link address (a 48-bit address).
type	Encapsulation description. For Ethernet interfaces, this is typically the arpa keyword. For Fiber Distributed Data Interface (FDDI) and Token Ring interfaces, this is always snap.
alias	(Optional) Indicates that the Cisco IOS software should respond to ARP requests as if it were the owner of the specified address.

arp (interface)

To control the interface-specific handling of IP address resolution into 48-bit Ethernet, FDDI, and Token Ring hardware addresses, use the arp interface configuration command. To disable an encapsulation type, use the no form of this command.

arp {arp a | probe | snap}
no arp {arpa | probe | snap}

arpa	Standard Ethernet-style ARP (RFC 826).
probe	HP Probe protocol for IEEE-802.3 networks.
snap	ARP packets conforming to RFC 1042.

arp timeout

To configure how long an entry remains in the ARP cache, use the arp timeout interface configuration command. To restore the default value, use the no form of this command.

arp timeout seconds
no arp timeout seconds

seconds

Time (in seconds) that an entry remains in the ARP cache. A value of zero means that entries are never cleared from the cache.

clear arp-cache

To delete all dynamic entries from the ARP cache, to clear the fast-switching cache, and to clear the IP route cache, use the clear arp-cache EXEC command.

clear arp-cache

clear host

To delete entries from the host-name-and-address cache, use the clear host EXEC command.

clear host {name | *}

name	Particular host entry to remove.
*	Removes all entries.

clear ip nat translation

To clear dynamic Network Address Translation (NAT) translations from the translation table, use the clear ip nat translation EXEC command.

clear ip nat translation {* | [inside global-ip local-ip] [outside local-ip global-ip]}
clear ip nat translation protocol inside global-ip global-port local-ip local-port [outside
local-ip global-ip]

*	Clears all dynamic translations.
inside	Clears the inside translations containing the specified global-ip and local-ip addresses.
global-ip	When used without the arguments protocol, global-port, and local-port, clears a simple translation that also contains the specified local-ip address. When used with the arguments protocol, global-port, and local-port, clears an extended translation.
local-ip	(Optional) Clears an entry that contains this local IP address and the specified global-ip address.
outside	Clears the outside translations containing the specified global-ip and local-ip addresses.
protocol	(Optional) Clears an entry that contains this protocol and the specified global-ip address, local-ip address, global-port, and local-port.
global-port	(Optional) Clears an entry that contains this global-port and the specified protocol, global-ip address, local-ip address, and local-port.
local-port	(Optional) Clears an entry that contains this local-port and the specified protocol, global-ip address, local-ip address, and global-port.

clear ip nhrp

To clear all dynamic entries from the Next Hop Resolution Protocol (NHRP) cache, use the clear ip nhrp EXEC command.

clear ip nhrp

clear ip route

To delete routes from the IP routing table, use the clear ip route EXEC command.

clear ip route {network [mask] | *}

network	Network or subnet address to remove.
mask	(Optional) Subnet address to remove.
*	Removes all routing table entries.

ip address

To set a primary or secondary IP address for an interface, use the ip address interface configuration command. To remove an IP address or disable IP processing, use the no form of this command.

ip address ip-address mask [secondary]
no ip address ip-address mask [secondary]

ip-address	IP address.
mask	Mask for the associated IP subnet.
secondary	(Optional) Specifies that the configured address is a secondary IP address. If this keyword is omitted, the configured address is the primary IP address.

ip broadcast-address

To define a broadcast address for an interface, use the ip broadcast-address interface configuration command. To restore the default IP broadcast address, use the no form of this command.

ip broadcast-address [ip-address]
no ip broadcast-address [ip-address]

ip-address

(Optional) IP broadcast address for a network.

ip classless

At times the router might receive packets destined for a subnet of a network that has no network default route. To have the Cisco IOS software forward such packets to the best supernet route possible, use the ip classless global configuration command. To disable this feature, use the no form of this command.

ip classless
no ip classless

ip default-gateway

To define a default gateway (router) when IP routing is disabled, use the ip default-gateway global configuration command. To disable this function, use the no form of this command.

ip default-gateway ip-address
no ip default-gateway ip-address

ip-address

IP address of the router.

ip directed-broadcast

To enable the translation of directed broadcast to physical broadcasts, use the ip directed-broadcast interface configuration command. To disable this function, use the no form of this command.

ip directed-broadcast [access-list-number]
no ip directed-broadcast [access-list-number]

access-list-number

(Optional) Number of the access list. If specified, a broadcast must pass the access list to be forwarded. If not specified, all broadcasts are forwarded.

ip domain-list

To define a list of default domain names to complete unqualified host names, use the ip domain-list global configuration command. To delete a name from a list, use the no form of this command.

ip domain-list name
no ip domain-list name

name

Domain name. Do not include the initial period that separates an unqualified name from the domain name.

ip domain-lookup

To enable the IP Domain Naming System (DNS)-based host name-to-address translation, use the ip domain-lookup global configuration command. To disable the DNS, use the no form of this command.

ip domain-lookup
no ip domain-lookup

ip domain-lookup nsap

To allow DNS queries for Connectionless Network System (CLNS) addresses, use the ip domain-lookup nsap global configuration command. To disable this feature, use the no form of this command.

ip domain-lookup nsap
no ip domain-lookup nsap

ip domain-name

To define a default domain name that the Cisco IOS software uses to complete unqualified host names (names without a dotted-decimal domain name), use the ip domain-name global configuration command. To disable use of the DNS, use the no form of this command.

ip domain-name name
no ip domain-name

name

Default domain name used to complete unqualified host names. Do not include the initial period that separates an unqualified name from the domain name.

ip forward-protocol

To specify which protocols and ports the router forwards when forwarding broadcast packets, use the ip forward-protocol global configuration command. To remove a protocol or port, use the no form of this command.

ip forward-protocol {udp [port] | nd | sdns}
no ip forward-protocol {udp [port] | nd | sdns}

udp	Forward User Datagram Protocol (UDP) datagrams. See the "Default" section below for a list of port numbers forwarded by default.
port	(Optional) Destination port that controls which UDP services are forwarded.
nd	Forward Network Disk (ND) datagrams. This protocol is used by older diskless Sun workstations.
sdns	Secure Data Network Service.

ip forward-protocol any-local-broadcast

To forward any broadcasts including local subnet broadcasts, use the ip forward-protocol any-local-broadcast global configuration command. To disable this type of forwarding, use the no form of this command.

ip forward-protocol any-local-broadcast
no ip forward-protocol any-local-broadcast

ip forward-protocol spanning-tree

To permit IP broadcasts to be flooded throughout the internetwork in a controlled fashion, use the ip forward-protocol spanning-tree global configuration command. To disable the flooding of IP broadcasts, use the no form of this command.

ip forward-protocol spanning-tree
no ip forward-protocol spanning-tree

ip forward-protocol turbo-flood

To speed up flooding of User Datagram Protocol (UDP) datagrams using the spanning-tree algorithm, use the ip forward-protocol turbo-flood global configuration command. To disable this feature, use the no form of this command.

ip forward-protocol turbo-flood
no ip forward-protocol turbo-flood

ip helper-address

To have the Cisco IOS software forward User Datagram Protocol (UDP) broadcasts, including BOOTP, received on an interface, use the ip helper-address interface configuration command. To disable the forwarding of broadcast packets to specific addresses, use the no form of this command.

ip helper-address address
no ip helper-address address

address

Destination broadcast or host address to be used when forwarding UDP broadcasts. There can be more than one helper address per interface.

ip host

To define a static host name-to-address mapping in the host cache, use the ip host global configuration command. To remove the name-to-address mapping, use the no form of this command.

ip host name [tcp-port-number] address1 [address2...address8]
no ip host name address1

name	Name of the host. The first character can be either a letter or a number. If you use a number, the operations you can perform are limited.
tcp-port-number	(Optional) TCP port number to connect to when using the defined host name in conjunction with an EXEC connect or Telnet command. The default is Telnet (port 23).
address1	Associated IP address.
address2...address8	(Optional) Additional associated IP address. You can bind up to eight addresses to a host name.

ip hp-host

To enter into the host table the host name of an HP host to be used for HP Probe Proxy service, use the ip hp-host global configuration command. To remove a host name, use the no form of this command.

ip hp-host hostname ip-address
no ip hp-host hostname ip-address

hostname	Name of the host.
ip-address	IP address of the host.

ip irdp

To enable ICMP Router Discovery Protocol (IRDP) processing on an interface, use the ip irdp interface configuration command. To disable IRDP routing, use the no form of this command.

multicast	(Optional) Use the multicast address (224.0.0.1) instead of IP broadcasts.
holdtime seconds	(Optional) Length of time in seconds advertisements are held valid. Default is three times the maxadvertinterval value. Must be greater than maxadvertinterval and cannot be greater than 9000 seconds.
maxadvertinterval seconds	(Optional) Maximum interval in seconds between advertisements. The default is 600 seconds.
minadvertinterval seconds	(Optional) Minimum interval in seconds between advertisements. The default is 0.75 times the maxadvertinterval. If you change the maxadvertinterval value, this value defaults to three-quarters of the new value.
preference number	(Optional) Preference value. The allowed range is -2³¹ to 2³¹. The default is 0. A higher value increases the router's preference level. You can modify a particular router so that it will be the preferred router to which others home.
address address [number]	(Optional) IP address (address) to proxy-advertise, and optionally, its preference value (number).

ip mobile arp

To enable local-area mobility, use the ip mobile arp interface configuration command. To disable local-area mobility, use the no form of this command.

ip mobile arp [timers keepalive hold-time] [access-group access-list-number | name]
no ip mobile arp [timers keepalive hold-time] [access-group access-list-number | name]

timers	(Optional) Indicates that you are setting local-area mobility timers.
keepalive	(Optional) Frequency, in seconds, at which the Cisco IOS software sends unicast ARP messages to a relocated host to verify that the host is present and has not moved. The default keepalive time is 300 seconds (5 minutes).
hold-time	(Optional) Hold time, in seconds. This is the length of time the software considers that a relocated host is present without receiving some type of ARP broadcast or unicast from the host. Normally, the hold time should be at least three times greater than the keepalive time. The default hold time is 900 seconds (15 minutes).
access-group	(Optional) Indicates that you are applying an access list. This access list applies only to local-area mobility.
access-list-number	(Optional) Number of a standard IP access list. It is a decimal number from 1 to 99. Only hosts with addresses permitted by this access list are accepted for local-area mobility.
name	(Optional) Name of an IP access list. The name cannot contain a space or quotation mark, and must begin with an alphabetic character to avoid ambiguity with numbered access lists.

ip name-server

To specify the address of one or more name servers to use for name and address resolution, use the ip name-server global configuration command. To remove the addresses specified, use the no form of this command.

ip name-server server-address1 [[server-address2]...server-address6]
no ip name-server server-address1 [[server-address2]...server-address6]

server-address1	IP addresses of name server.
server-address2...server-address6	(Optional) IP addresses of additional name servers (a maximum of six name servers).

ip nat

To designate that traffic originating from or destined for the interface is subject to Network Address Translation (NAT), use the ip nat interface configuration command. To prevent the interface from being able to translate, use the no form of this command.

ip nat {inside | outside}
no ip nat {inside | outside}

inside	Indicates the interface is connected to the inside network (the network subject to NAT translation).
outside	Indicates the interface is connected to the outside network.

ip nat inside destination

To enable Network Address Translation (NAT) of the inside destination address, use the ip nat inside destination global configuration command. To remove the dynamic association to a pool, use the no form of this command.

ip nat inside destination list {access-list-number | name} pool name
no ip nat inside destination list {access-list-number | name}

list access-list-number	Standard IP access list number. Packets with destination addresses that pass the access list are translated using global addresses from the named pool.
list name	Name of a standard IP access list. Packets with destination addresses that pass the access list are translated using global addresses from the named pool.
pool name	Name of the pool from which global IP addresses are allocated during dynamic translation.

ip nat inside source

To enable Network Address Translation (NAT) of the inside source address, use the ip nat inside source global configuration command. To remove the static translation or remove the dynamic association to a pool, use the no form of this command.

ip nat inside source {list {access-list-number | name} pool name [overload] | static local-ip
global-ip}
no ip nat inside source {list {access-list-number | name} pool name [overload] | static local-ip
global-ip}

list access-list-number	Standard IP access list number. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.
list name	Name of a standard IP access list. Packets with source addresses that pass the access list are dynamically translated using global addresses from the named pool.
pool name	Name of the pool from which global IP addresses are allocated dynamically.
overload	(Optional) Enables the router to use one global address for many local addresses. When overloading is configured, each inside host's TCP or UDP port number distinguishes between the multiple conversations using the same local IP address.
static local-ip	Sets up a single static translation; this argument establishes the local IP address assigned to a host on the inside network. The address could be randomly chosen, allocated from RFC 1918, or obsolete.
global-ip	Sets up a single static translation; this argument establishes the globally unique IP address of an inside host as it appears to the outside world.

ip nat outside source

To enable Network Address Translation (NAT) of the outside source address, use the ip nat outside source global configuration command. To remove the static entry or the dynamic association, use the no form of this command.

ip nat outside source {list {access-list-number | name} pool name | static global-ip local-ip}
no ip nat outside source {list {access-list-number | name} pool name | static global-ip local-ip}

list access-list-number	Standard IP access list number. Packets with source addresses that pass the access list are translated using global addresses from the named pool.
list name	Name of a standard IP access list. Packets with source addresses that pass the access list are translated using global addresses from the named pool.
pool name	Name of the pool from which global IP addresses are allocated.
static global-ip	Sets up a single static translation. This argument establishes the globally unique IP address assigned to a host on the outside network by its owner. It was allocated from globally routable network space.
local-ip	Sets up a single static translation. This argument establishes the local IP address of an outside host as it appears to the inside world. The address was allocated from address space routable on the inside (RFC 1918, perhaps).

ip nat pool

To define a pool of IP addresses for Network Address Translation (NAT), use the ip nat pool global configuration command. To remove one or more addresses from the pool, use the no form of this command.

ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length}
[type rotary]
no ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length}
[type rotary]

name	Name of the pool.
start-ip	Starting IP address that defines the range of addresses in the address pool.
end-ip	Ending IP address that defines the range of addresses in the address pool.
netmask netmask	Network mask that indicates which address bits belong to the network and subnetwork fields and which bits belong to the host field. Specify the netmask of the network to which the pool addresses belong.
prefix-length prefix-length	Number that indicates how many bits of the netmask are ones (how many bits of the address indicate network). Specify the netmask of the network to which the pool addresses belong.
type rotary	(Optional) Indicates that the range of address in the address pool identify real, inside hosts among which TCP load distribution will occur.

ip nat translation

To change the amount of time after which Network Address Translation (NAT) translations time out, use the ip nat translation global configuration command. To disable the timeout, use the no form of this command.

ip nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout}
seconds
no ip nat translation {timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout}

timeout	Specifies that the timeout value applies to dynamic translations except for overload translations. Default is 86400 seconds (24 hours).
udp-timeout	Specifies that the timeout value applies to the UDP port. Default is 300 seconds (5 minutes).
dns-timeout	Specifies that the timeout value applies to connections to the Domain Naming System (DNS). Default is 60 seconds.
tcp-timeout	Specifies that the timeout value applies to the TCP port. Default is 86400 seconds (24 hours).
finrst-timeout	Specifies that the timeout value applies to Finish and Reset TCP packets, which terminate a connection. Default is 60 seconds.
seconds	Number of seconds after which the specified port translation times out. Default values are listed in the Default section.

ip netmask-format

To specify the format in which netmasks are displayed in show command output, use the ip netmask-format line configuration command. To restore the default display format, use the no form of this command.

ip netmask-format {bitcount | decimal | hexadecimal}
no ip netmask-format [bitcount | decimal | hexadecimal]

bitcount	Addresses are followed by a slash and the total number of bits in the netmask. For example, 131.108.11.0/24 indicates that the netmask is 24 bits.
decimal	Network masks are displayed in dotted decimal notation (for example, 255.255.255.0).
hexadecimal	Network masks are displayed in hexadecimal format, as indicated by the leading 0X (for example, 0XFFFFFF00).

ip nhrp authentication

To configure the authentication string for an interface using Next Hop Resolution Protocol (NHRP), use the ip nhrp authentication interface configuration command. To remove the authentication string, use the no form of this command.

ip nhrp authentication string
no ip nhrp authentication [string]

string

Authentication string configured for the source and destination stations that controls whether NHRP stations allow intercommunication. The string can be up to 8 characters long.

ip nhrp holdtime

To change the number of seconds that NHRP nonbroadcast, multiaccess (NBMA) addresses are advertised as valid in authoritative NHRP responses, use the ip nhrp holdtime interface configuration command. To restore the default value, use the no form of this command.

ip nhrp holdtime seconds-positive [seconds-negative]
no ip nhrp holdtime [seconds-positive [seconds-negative]]

seconds-positive	Time in seconds that NBMA addresses are advertised as valid in positive authoritative NHRP responses.
seconds-negative	(Optional) Time in seconds that NBMA addresses are advertised as valid in negative authoritative NHRP responses.

ip nhrp interest

To control which IP packets can trigger sending a Next Hop Resolution Protocol (NHRP) Request, use the ip nhrp interest interface configuration command. To restore the default value, use the no form of this command.

ip nhrp interest access-list-number
no ip nhrp interest [access-list-number]

access-list-number

Standard or extended IP access list number in the range 1 to 199.

ip nhrp map

To statically configure the IP-to-NBMA address mapping of IP destinations connected to a nonbroadcast, multiaccess (NBMA) network, use the ip nhrp map interface configuration command. To remove the static entry from NHRP cache, use the no form of this command.

ip nhrp map ip-address nbma-address
no ip nhrp map ip-address nbma-address

ip-address	IP address of the destinations reachable through the NBMA network. This address is mapped to the NBMA address.
nbma-address	NBMA address that is directly reachable through the NBMA network. The address format varies depending on the medium you are using. For example, ATM has an NSAP address, Ethernet has a MAC address, and SMDS has an E.164 address. This address is mapped to the IP address.

ip nhrp map multicast

To configure NBMA addresses used as destinations for broadcast or multicast packets to be sent over a tunnel network, use the ip nhrp map multicast interface configuration command. To remove the destinations, use the no form of this command.

ip nhrp map multicast nbma-address
no ip nhrp map multicast nbma-address

nbma-address

Nonbroadcast, multiaccess (NBMA) address which is directly reachable through the NBMA network. The address format varies depending on the medium you are using.

ip nhrp max-send

To change the maximum frequency at which NHRP packets can be sent, use the ip nhrp max-send interface configuration command. To restore this frequency to the default value, use the no form of this command.

ip nhrp max-send pkt-count every interval
no ip nhrp max-send

pkt-count	Number of packets which can be transmitted in the range from 1 to 65535. Default is 5 packets.
every interval	Time (in seconds) in the range from 10 to 65535. Default is 10 seconds.

ip nhrp network-id

To enable the Next Hop Resolution Protocol (NHRP) on an interface, use the ip nhrp network-id interface configuration command. To disable NHRP on the interface, use the no form of this command.

ip nhrp network-id number
no ip nhrp network-id [number]

number

Globally unique, 32-bit network identifier for a nonbroadcast, multiaccess (NBMA) network. The range is 1 to 4294967295.

ip nhrp nhs

To specify the address of one or more NHRP Next Hop Servers, use the ip nhrp nhs interface configuration command. To remove the address, use the no form of this command.

ip nhrp nhs nhs-address [net-address [netmask]]
no ip nhrp nhs nhs-address [net-address [netmask]]

nhs-address	Address of the Next Hop Server being specified.
net-address	(Optional) IP address of a network served by the Next Hop Server.
netmask	(Optional) IP network mask to be associated with the net IP address. The net IP address is logically ANDed with the mask.

ip nhrp record

To re-enable the use of forward record and reverse record options in NHRP Request and Reply packets, use the ip nhrp record interface configuration command. To suppress the use of such options, use the no form of this command.

ip nhrp record
no ip nhrp record

ip nhrp responder

To designate which interface's primary IP address the Next Hop Server will use in NHRP Reply packets when the NHRP requestor uses the Responder Address option, use the ip nhrp responder interface configuration command. To remove the designation, use the no form of this command.

ip nhrp responder type number
no ip nhrp responder [type] [number]

type	Interface type whose primary IP address is used when a Next Hop Server complies with a Responder Address option (for example, serial, tunnel).
number	Interface number whose primary IP address is used when a Next Hop Server complies with a Responder Address option.

ip nhrp use

To configure the software so that NHRP is deferred until the system has attempted to send data traffic to a particular destination multiple times, use the ip nhrp use interface configuration command. To restore the default value, use the no form of this command.

ip nhrp use usage-count
no ip nhrp use usage-count

usage-count

Packet count in the range from 1 to 65535. Default is 1.

ip probe proxy

To enable the HP Probe Proxy support, which allows the Cisco IOS software to respond to HP Probe Proxy Name requests, use the ip probe proxy interface configuration command. To disable HP Probe Proxy, use the no form of this command.

ip probe proxy
no ip probe proxy

ip proxy-arp

To enable proxy ARP on an interface, use the ip proxy-arp interface configuration command. To disable proxy ARP on the interface, use the no form of this command.

ip proxy-arp
no ip proxy-arp

ip redirects

To enable the sending of redirect messages if the Cisco IOS software is forced to resend a packet through the same interface on which it was received, use the ip redirects interface configuration command. To disable the sending of redirect messages, use the no form of this command.

ip redirects
no ip redirects

ip routing

To enable IP routing, use the ip routing global configuration command. To disable IP routing, use the no form of this command.

ip routing
no ip routing

ip subnet-zero

To enable the use of subnet zero for interface addresses and routing updates, use the ip subnet-zero global configuration command. To restore the default, use the no form of this command.

ip subnet-zero
no ip subnet-zero

ip unnumbered

To enable IP processing on a serial interface without assigning an explicit IP address to the interface, use the ip unnumbered interface configuration command. To disable the IP processing on the interface, use the no form of this command.

ip unnumbered type number
no ip unnumbered type number

type number

Type and number of another interface on which the router has an assigned IP address. It cannot be another unnumbered interface.

ping (privileged)

To check host reachability and network connectivity, use the ping (IP packet internet groper function) privileged EXEC command.

ping [protocol] {host | address}

protocol	(Optional) Protocol keyword. The default is IP.
host	Host name of system to ping.
address	IP address of system to ping.

ping (user)

To check host reachability and network connectivity, use the ping (IP packet internet groper function) user EXEC command.

ping [protocol] {host | address}

protocol	(Optional) Protocol keyword. The default is IP.
host	Host name of system to ping.
address	IP address of system to ping.

show arp

To display the entries in the ARP table, use the show arp privileged EXEC command.

show arp

show hosts

To display the default domain name, the style of name lookup service, a list of name server hosts, and the cached list of host names and addresses, use the show hosts EXEC command.

show hosts

show ip aliases

To display the IP addresses mapped to TCP ports (aliases) and SLIP addresses, which are treated similarly to aliases, use the show ip aliases EXEC command.

show ip aliases

show ip arp

To display the Address Resolution Protocol (ARP) cache, where SLIP addresses appear as permanent ARP table entries, use the show ip arp EXEC command.

show ip arp [ip-address] [hostname] [mac-address] [type number]

ip-address	(Optional) ARP entries matching this IP address are displayed.
hostname	(Optional) Host name.
mac-address	(Optional) 48-bit MAC address.
type number	(Optional) ARP entries learned via this interface type and number are displayed.

show ip interface

To display the usability status of interfaces configured for IP, use the show ip interface EXEC command.

show ip interface [type number]

type	(Optional) Interface type.
number	(Optional) Interface number.

show ip irdp

To display IRDP values, use the show ip irdp EXEC command.

show ip irdp

show ip masks

To display the masks used for network addresses and the number of subnets using each mask, use the show ip masks EXEC command.

show ip masks address

address

Network address for which a mask is required.

show ip nat statistics

To display Network Address Translation (NAT) statistics, use the show ip nat statistics EXEC command.

show ip nat statistics

show ip nat translations

To display active Network Address Translation (NAT) translations, use the show ip nat translations EXEC command.

show ip nat translations [verbose]

verbose

(Optional) Displays additional information for each translation table entry, including how long ago the entry was created and used.

show ip nhrp

To display the Next Hop Resolution Protocol (NHRP) cache, use the show ip nhrp EXEC command.

show ip nhrp [dynamic | static] [type number]

dynamic	(Optional) Displays only the dynamic (learned) IP-to-NBMA address cache entries.
static	(Optional) Displays only the static IP-to-NBMA address entries in the cache (configured through the ip nhrp map command).
type	(Optional) Interface type about which to display the NHRP cache (for example, atm, tunnel).
number	(Optional) Interface number about which to display the NHRP cache.

show ip nhrp traffic

To display Next Hop Resolution Protocol (NHRP) traffic statistics, use the show ip nhrp traffic EXEC command.

show ip nhrp traffic

show ip redirects

To display the address of a default gateway (router) and the address of hosts for which a redirect has been received, use the show ip redirects EXEC command.

show ip redirects

term ip netmask-format

To specify the format in which netmasks are displayed in show command output, use the term ip netmask-format EXEC command. To restore the default display format, use the no form of this command.

term ip netmask-format {bitcount | decimal | hexadecimal}
term no ip netmask-format [bitcount | decimal | hexadecimal]

bitcount	Addresses are followed by a slash and the total number of bits in the netmask. For example, 131.108.11.55/24 indicates that the netmask is 24 bits.
decimal	Netmasks are displayed in dotted decimal notation (for example, 255.255.255.0).
hexadecimal	Netmasks are displayed in hexadecimal format, as indicated by the leading 0X (for example, 0XFFFFFF00).

trace (privileged)

To discover the routes the packets follow when traveling to their destination from the router, use the trace privileged EXEC command.

trace [destination]

destination

(Optional) Destination address or host name on the command line. The default parameters for the appropriate protocol are assumed and the tracing action begins.

trace (user)

To discover the routes the router packets follow when traveling to their destination, use the trace user EXEC command.

trace ip destination

destination

Destination address or host name on the command line. The default parameters for the appropriate protocol are assumed and the tracing action begins.

tunnel mode

To set the encapsulation mode for the tunnel interface, use the tunnel mode interface configuration command. To set to the default, use the no form of this command.

tunnel mode {aurp | cayman | dvmrp | eon | gre ip [multipoint] | nos}
no tunnel mode

aurp	AppleTalk Update-Based Routing Protocol (AURP).
cayman	Cayman TunnelTalk AppleTalk encapsulation.
dvmrp	Distance Vector Multicast Routing Protocol.
eon	EON compatible CLNS tunnel.
gre ip	Generic routing encapsulation (GRE) protocol over IP.
multipoint	(Optional) Enables a GRE tunnel to be used in a multipoint fashion. Can be used with the gre ip keyword only, and requires the use of the tunnel key command.
nos	KA9Q/NOS compatible IP over IP.

Routing with Cisco 2500 and 1000 Series for LAN-ISDN Service

2010-10-18T11:44:00.000+05:30

Commands - General

There are 3 different modes of operation within the Cisco IOS.

Disabled mode
Enabled mode
Configuration mode

In the Disabled mode you can use a limited number of commands. This is used primarily to monitor the router.

The Enabled mode is used to show configuration information, enter the configuration mode, and make changes to the configuration.

The Configuration mode is used to enter and update the runtime configuration.

To get a list of the commands for the cisco type '?' at the prompt. To get further information about any command, type the command followed by a '?'.

clear	Reset functions
clock	Manage the system clock
configure	Enter configuration mode
debug	Debugging functions (see also 'undebug')
disable	Turn off privileged commands
enable	Turn on privileged commands
erase	Erase flash or configuration memory
exit	Exit from the EXEC
help	Description of the interactive help system
login	Log in as a particular user
logout	Exit from the EXEC
no	Disable debugging functions
ping	Send echo messages
reload	Halt and perform a cold restart
setup	Run the SETUP command facility
show	Show running system information
telnet	Open a telnet connection
terminal	Set terminal line parameters
test	Test subsystems, memory, and interfaces
traceroute	Trace route to destination
tunnel	Open a tunnel connection
undebug	Disable debugging functions (see also 'debug')
verify	Verify checksum of a Flash file
write	Write running configuration to memory, network, or terminal

show
access-lists	List access lists
arp	ARP table
buffers	Buffer pool statistics
configuration	Contents of Non-Volatile memory
controllers	Interface controller status
debugging	State of each debugging option
dialer	Dialer parameters and statistics
extended	Extended Interface Information
flash	System Flash information
flh-log	Flash Load Helper log buffer
history	Display the session command history
hosts	IP domain-name, lookup style, name servers, and host table
interfaces	Interface status and configuration
ip	IP information
isdn	ISDN information
line	TTY line information
logging	Show the contents of logging buffers
memory	Memory statistics
privilege	Show current privilege level
processes	Active process statistics
protocols	Active network routing protocols
queue	Show queue contents
queueing	Show queueing configuration
reload	Scheduled reload information
route-map	route-map information
running-config	Current operating configuration
sessions	Information about Telnet connections
smf	Software MAC filter
stacks	Process stack utilization
startup-config	Contents of startup configuration
subsys	Show subsystem information
tcp	Status of TCP connections
terminal	Display terminal configuration parameters
users	Display information about terminal lines
version	System hardware and software status

Other Useful Commands

View the Software Version
View the Ethernet IP
View the Serial IP
View the Default Route
View the Filters
View the Bandwidth
Add a Static Route
Change the Dial Number
Turn Filters On and Off
Ping from the Router
Traceroute from the Router

View the Software Version

Cisco>en Cisco#wr term    <--- Shows the running configuration     Building configuration... Current configuration: ! version 11.2 no service udp-small-servers no service tcp-small-servers ! hostname Cisco ! interface Ethernet0  ip address 192.168.1.1 255.255.255.0 ! interface Serial0  ip address 192.168.6.1 255.255.255.0  encapsulation frame-relay  frame-relay lmi-type ansi ! interface Serial1  ip address 192.168.4.2 255.255.255.0  encapsulation frame-relay  bandwidth 1536  keepalive 5  frame-relay map ip 192.168.4.1 101 IETF ! router rip  version 2  network 192.168.4.0  network 192.168.6.0  neighbor 192.168.6.2  neighbor 192.168.4.1 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.6.2 ip route 0.0.0.0 0.0.0.0 192.168.4.1 ! line con 0 line aux 0 line vty 0 4 login ! end

View the Ethernet IP

Router#wr term

This will show the running configuration. Within the configuration, you will see an interface ethernet 0 section:
interface Ethernet0 ip address 38.150.93.1 255.255.255.0 no ip directed-broadcast

View the Serial IP

Router#wr term
Within the configuration, you will see an interface serial 0 section:
interface Serial0 ip address 38.21.10.100 255.255.255.0 ip broadcast-address 38.21.10.255 ip access-group 106 in encapsulation frame-relay bandwidth 56 no fair-queue frame-relay map ip 38.21.10.1 500 IETF

View the Default Route

Router#wr term
Within the configuration, you will see an ip route section. 
In the ip route section, look for a route: ip route 0.0.0.0 0.0.0.0 38.167.29.1 The last ip address is the POP ip.

View the Filters

Router#wr term
Under interface serial 0, look for:
ip access-group 104 in ip access-group 105 out
This means that access-group 104 is the inbound filter set and access-group 105 is the outbound filter set. Then, continue to look in the configuration for the access-list statements:
(Example access-list statements) access-list 104 deny   ip 38.166.101.0 0.0.0.255 any access-list 104 permit tcp any any established access-list 104 permit tcp any eq ftp-data any gt 1023 access-list 104 permit udp any eq domain any gt 1023 access-list 104 permit udp any eq domain any eq domain access-list 104 permit icmp any any access-list 104 permit udp any eq snmp any gt 1023 access-list 105 deny   ip any 38.166.101.0 0.0.0.255 access-list 105 permit tcp any any established access-list 105 permit tcp any any eq ftp access-list 105 deny   udp any eq netbios-ns any access-list 105 deny   udp any eq netbios-dgm any access-list 105 permit ip any any

View the Bandwidth

Router#wr term
Within the config, you will see an interface serial 0 section:
interface Serial0 ip address 38.21.10.100 255.255.255.0 ip broadcast-address 38.21.10.255 ip access-group 106 in encapsulation frame-relay bandwidth 56 no fair-queue frame-relay map ip 38.21.10.1 500 IETF

Add a Static Route

Cisco#config t Enter configuration commands, one per line.  End with CNTL/Z. Cisco(config)#ip route DEST.DEST.DEST.DEST MASK.MASK.MASK.MASK GATE.GATE.GATE.GATE where: DEST.DEST.DEST.DEST = The destination network the static route is for        MASK.MASK.MASK.MASK = The subnet mask of the destination network        GATE.GATE.GATE.GATE = The gateway of the static route Example route statement: ip route 38.222.75.0 255.255.255.0 38.20.5.1 Cisco(config)#^Z (hit  z)
Write the entry to memory:
Cisco#wr mem Building configuration... [OK]

Change the Dial Number

Type en to put the router in enable mode:

test.com>en

The password should be the same as the one used to telnet in.
Password:
To view the router's configuration, type:
test.com#show config
There will be a line in the configuration that says:
dialer map IP 38.1.1.1 speed 64 name LD3330 2707000
The 2707000 is the dial number.

NOTE: Record what interface the dialer map IP line is under because you will need to  use that interface when changing the number. 
Type config t to configure from terminal.
test.com#config t
Enter configuration commands, one per line.  End with CNTL/Z. Enter the interface that the dialer map IP line is under:

test.com(config)#interface BRI0

Add in the new dialer map IP line with the new phone number:
test.com(config)#dialer map IP 38.1.1.1 speed 64 name LD3330 [new number]

Now, remove the old dialer map IP line. To remove a line, type no and then the line. For example, to remove the old dialer map IP, type:

test.com(config)#no dialer map IP 38.1.1.1 speed 64 name LD3330 2707020
Now leave config mode:

test.com(config)# [control] z

Save changes:
test.com# write mem Building configuration... [OK]
Verify the new number is in the config:
test.com#show config
The new number should be in the dialer map IP line.

Turn Filters On and Off

To turn the filters off: 
Router#configure terminal Router(config)#interface Serial0 Router(config-if)#no ip access-group 104 in Router(config-if)#no ip access-group 105 out Router(config-if)# Hit CTRL-Z Router#wr mem Building configuration... [OK] Router#
To turn the filters on: 

Router#configure terminal Router(config)#interface Serial0 Router(config-if)#ip access-group 104 in Router(config-if)#ip access-group 105 out Router(config-if)# Hit CTRL-Z Router#wr mem Building configuration... [OK] Router#

Ping from the Router

Cisco#ping  Example: Cisco#ping 38.8.14.2

2010-10-09T10:49:00.002+05:30

Possible?

Let's look at some assumptions and facts.

1.) Assumption - It is possible to install Windows 98 on an NTFS partition.

2.) Assumption - Microsoft knows it is possible...(After all...Windows 98 and NTFS have both been around for a long enough time to figure out these anomalies, and if someone is going to figure it out first...they are the most likely candidate.)

***Fact*** Microsoft states on its knowledge base that this is impossible.

3.) Assumption - Microsoft is concealing the truth for a particular advantage.

***Fact*** No such advantage exists (The use of NTFS over FAT32 has never been a decisive factor in someone upgrading to Windows 2000 or XP.)

***Fact*** 99% of good techs state that doing this is also impossible, or the way to do this has not been figured out by them.

4.) Assumption - The tech that claims to have figured this out is smarter than we are...probably also taller and better in bed.

So I hope this gets you thinking on where this tech was actually going with this...either he simply wanted to fake technical superiority hoping someone would buy into it without calling him on the specifics...or he just simply misunderstood something he read on the web.

There's my 2 cents...

__________________

Creating the first Windows Server 2003 Domain Controller in a domain

2010-09-09T00:00:00.001+05:30

Creating the first Windows Server 2003 Domain Controller in a domain

Preface:

Method:

Click Start -> Run...

Type "dcpromo" and click "OK"

You will see the first window of the wizard. As it suggests, I suggest reading the help associated with Active Directory. After this, click "Next"

Click "Next" on the compatibility window, and in the next window keep the default option of "Domain Controller for a new domain" selected, and click "Next"

In this tutorial we will create a domain in a new forest, because it is the first DC, so keep that option selected

Now in order to keep things simple, we will use the first part of our domain ("visualwin"), which is the default selection, as the NetBIOS name of the domain

The next dialog suggests storing the AD database and log on separate hard disks, and so do I, but for this tutorial I'll just keep the defaults

Now we will see a summary of what will happen. Make sure it's all correct because changing it afterwards can prove to be difficult

After the previous next was clicked, the actual process occurs. This can take several minutes. It's likely that you will be prompted for your Windows Server 2003 CD (for DNS) so have it handy

And after a while you will see

http://www.pcwintech.com/default-router-modem-passwords

2010-03-12T11:31:00.000+05:30

http://www.pcwintech.com/default-router-modem-passwords

Default Router & Modem Passwords

2010-03-12T11:20:00.001+05:30

If your router is not listed on this site or in the programs I can add them!By adding your router I can create all the guides, screenshot databases and have your router work in my programs.All you need to do is use my easy to use router screen capture program. This will make getting me the data easy and simple.For more info click here.Router Screen Capture
Below you will find every router that has been added to the site and programs.These are the default usernames and passwords as they where submitted to me. If a router wasn't using the defaults I looked up the default username and password on the manufactures website.

Default Routers/Modem Passwords:If the Username or Password is empty that means it is blank.

Routersername
Password
(All Routers With DD-WRT v23 & v24 Firmware)
root
admin
(All Routers With Routertech v2.8 Firmware)
Admin
Admin
(All Routers With Tomato v1 Firmware)
admin
admin
2Wire - 1000HG (2Wire Firmware)

2Wire - 2071 (Prodigy Firmware)

2Wire - 2700HG-S (2Wire Firmware)

2Wire - 2700HGV-B2 (Sasktel Firmware)

2Wire - 2701-A (BigPond Firmware)

2Wire - 2701HG-B (AT&T Firmware)

2Wire - 2701HG-B (SBC Firmware)

2Wire - 2701HG-D (Qwest Firmware)

2Wire - 2701HG-G (Bell Firmware)

2Wire - 2701HG-G (Bell French Firmware)

2Wire - 2701HG-S (Embarq Firmware)

2Wire - 2701HG-T (Prodigy Firmware)

2Wire - 2701HGV-W (BigPond Firmware)

2Wire - 3800HGV-B (AT&T Firmware)

3COM - 3C510 (3COM Firmware)

admin
3COM - 3CRWDR100A-72 (3COM Firmware)

admin
3COM - 3CRWDR101A-75 (3COM Firmware)

admin
3COM - 3CRWDR200A-75 (3COM Firmware)
admin
admin
3COM - 3CRWE554G72T (3COM Firmware)

admin
3COM - 3CRWER100-75 (3COM Firmware)

admin
3COM - 3CRWER200-75 (3COM Firmware)

admin
3com - Superstack 2 3C16980 (Canopy Firmware)

Abbatec - TX3 (Abbatec Firmware)
admin
admin
Abocom - WAP-354NB (Abocom Firmware)

Abocom - WR254 (Abocom Firmware)
admin

Accton - CheetahAccess AC-IG1004 (Accton Firmware)

Acorp - LAN410 (Acorp Firmware)
admin
admin
Actiontec - GT701 (Actiontec Firmware)

Actiontec - GT701 v2 (Qwest Firmware)

Actiontec - GT701WG v2 (Qwest Firmware)

Actiontec - GT701-WRU (Actiontec Firmware)

Actiontec - GT704-WG (Actiontec v3.0 Firmware)

Actiontec - GT704WG (Actiontec v3.20 Firmware)
admin
password
Actiontec - GT704WG (Qwest Firmware)

Actiontec - GT704WG (Verizon Firmware)
admin
password
Actiontec - GT724WGR (Actiontec Firmware)

Actiontec - M1000 (Qwest v1 Firmware)

Actiontec - M1000 (Qwest v2 Firmware)

Actiontec - MI424WR (Verizon Firmware)
admin
password1
Actiontec - MI424WR-GEN2 (Verizon Firmware)
admin
password1
Actiontec - PK5000 (Qwest Firmware)

Actiontec - Q1000 (Qwest Firmware)

Actiontec - R1520SU (Qwest Firmware)

Actiontec - RI408 (Actiontec Firmware)
admin
password1
Addon - GWAR3000 (Addon Firmware)
Admin
Admin
Addon - GWAR3500 (Addon Firmware)
admin
admin
Advantek Networks - AWR-854G (Advantek Networks Firmware)
admin
admin
Aethra - EB1060 (Aethra Firmware)
admin
password
Aethra - FS4104-AW (Aethra Firmware)
admin

Aethra - SV1042 (Aethra Firmware)
admin

AGK Nordic - WA-4054 (AGK Nordic Firmware)

admin
AirLink - AR430W (AirLink Firmware)
admin
admin
AirLink - AR525W (AirLink Firmware)
admin
admin
AirLink - AR670W (AirLink Firmware)
admin
admin
Airlive - Ovislink IP-1000R (Airlive Firmware)
admin
airlive
Airlive - WL-8064ARM (Airlive Firmware)
admin
airlive
Airlive - WT-2000ARM (Airlive Firmware)
admin
airlive
Airlive - WT-2000R (Airlive Firmware)
admin
ecom
Airties - RT-101 (Airties Turkish Firmware)

Airties - RT-104 (Airties Turkish Firmware)

Airties - RT-204 (Airties Firmware)

Airties - RT-205 (Airties Turkish Firmware)

Airties - RT-211 (Airties EN, GR & TR Firmware)

Airties - Wav-180 (Airties Turkish Firmware)

Alice - AH4021 v2 (Alice French Firmware)
alice
alice
Alice - Gate 2 Plus (Telecom Italia Firmware)

Alice - Gate Voip 2 Plus Wi-Fi (Alice Italian Firmware)

Alice - Gate W2+ (Telecom Italia Firmware)

Alice - IAD WLAN 3231 (Alice German Firmware)

A-Link - RoadRunner 24AP (A-Link Firmware)
admin
password
A-Link - RR24 (A-Link Firmware)
admin
password
A-Link - WL54AP3 (A-Link Firmware)

Allied Data - Copperjet 1616P2 (Allied Data Firmware)
user
user
Allied Telesyn - AT-ARW256E (Allied Telesyn Firmware)
manager
friend
Allnet - ALL1296 (Allnet Firmware)

Alpha Networks Inc - IGD (Alpha Networks Firmware)
admin

Alvarion - BreezeMax (Alvarion Firmware)
admin
admin
Ambit - U10C019 (Ambit Firmware)
admin
cableroot
Ambit - U10C022 (Ambit Firmware)
admin
cableroot
Aolynk - DR814Q (Aolynk Firmware)
admin
admin
AOpen - AOI-908 (Aopen Firmware)

admin
AOpen - AOR-401 (AOpen Firmware)
admin
1234
Arcor - DSL-Easybox 602 (Vodafone German Firmware)
root
123456
Arlotto - RB14S (Arlotto Firmware)
admin
0000
Arris - WTM552 (Arris Firmware)

Articonet - ACN - 110R (Articonet Firmware)
admin
admin
Asus - AAM6020BI (Asus Firmware)
admin
admin
Asus - AAM6020VI-T4 (Asus Firmware)
admin
admin
Asus - AM602 (Asus Firmware)
admin
admin
Asus - AM604 (Asus Firmware)
admin
admin
Asus - AR7WRD (Asus Firmware)
admin
1234
Asus - DSL-N13 (Asus Firmware)
admin
admin
Asus - RT-G32 (Asus Firmware)
admin
admin
Asus - RT-N15 (Asus Firmware)
admin
admin
Asus - RX3041 (Asus Firmware)
admin
admin
Asus - WL-500G (Asus Firmware)
admin
admin
Asus - WL-500GP V2 (Asus Firmware)
admin
admin
Asus - WL-500W (Asus Firmware)
admin
admin
Asus - WL-520G (Asus Firmware)
admin
admin
Asus - WL-520GC (Asus Firmware)
admin
admin
Asus - WL-520GU (Asus Firmware)
admin
admin
Asus - WL-530G (Asus Firmware)
admin
admin
Asus - WL-566gM (Asus Firmware)
admin
admin
Asus - WL-600G (Asus Firmware)
admin
admin
Asus - WL-700GE (Asus Firmware)
admin
admin
Asus - WL-AM604G (Asus Firmware)
admin
admin
Ativa - 54G (Ativa Firmware)

Atlantis Land - A02RBW54 (Atlantis Land Firmware)
admin
admin
Atlantis Land - VoIPMaster 260W (Atlantis Land Firmware)
admin
atlantis
Atlantis Land - Webshare 141W (Atlantis Land Firmware)
admin
admin
Atlantis Land - WebShare 242W (Atlantis Land Firmware)
admin
admin
AusLinx - AL-2007 (Conexant Firmware)

Axesstel - CDMA 1xEV-D0 (Axesstel Firmware)
admin
admin
Axesstel - MV400i (Axesstel Firmware)
admin
admin
Axesstel - MV430i (Axesstel Firmware)
admin
admin
Aztech - DSL1015EN (Aztech Firmware)
admin
admin
Aztech - DSL305EU (Aztech Firmware)

Aztech - DSL605ER (Aztech Firmware)
admin
admin
Aztech - DSL605EW (Aztech Firmware)
admin
admin
AzureWave - AW-NR580 (AzureWave Firmware)

Bandluxe - R100 (Bandluxe Firmware)
admin
hsparouter
Bandridge - CWN7007G (Bandridge Firmware)

BaudTec - T263R1U (BaudTec Firmware)
admin
1234
BaudTec - TW263R4-A0 (BaudTec Firmware)
admin
1234
BEC - 7402TM (BEC Firmware)
admin
admin
Beetel - 110BX1 (Beetel Firmware)
admin
password
Beetel - 110TC1 (Beetel Firmware)
admin
password
Beetel - 220BX (Beetel Firmware)
admin
password
Beetel - 220BXI (Beetel Firmware)
admin
password
Beetel - 450BXI (Beetel Firmware)
admin
password
Beetel - 450TC1 (Beetel Firmware)
admin
1234
Belgacom - B-Box 2 (Belgacom Firmware)

admin
Belgacom - BBOX 6726 (Belgacom Firmware)

admin
Belkin - F1PI241EGau (iinet.net.au Firmware)

admin
Belkin - F1PI242EGau (iinet.net.au Firmware)

admin
Belkin - F5D5231-4 (Belkin Firmware)

Belkin - F5D6321-4 (Belkin Firmware)

Belkin - F5D7230-4 v1 (Belkin Firmware)

Belkin - F5D7230-4 v2 (Belkin Firmware)

Belkin - F5D7230-4 v6 (Belkin Firmware)

Belkin - F5D7230-4 v7 (Belkin Firmware)

Belkin - F5D7230-4 v8 (Belkin Firmware)

Belkin - F5D7230-4 v9 (Belkin Firmware)

Belkin - F5D7231-4 (Belkin Firmware)

Belkin - F5D7231-4 v2 (Belkin Firmware)

Belkin - F5D7231-4P v1 (Belkin Firmware)

Belkin - F5D7234-4 v1 (Belkin Firmware)

Belkin - F5D7234-4 v3 (Belkin Firmware)

Belkin - F5D7234-4 v3 (Belkin v3.00.03 Firmware)

Belkin - F5D7234-4 v4 (Belkin Firmware)

Belkin - F5D7234-4 v5 (Belkin Firmware)

Belkin - F5D7630-4 (Belkin Firmware)

Belkin - F5D7632-4 v1 (Belkin Firmware)

Belkin - F5D7633-4 UK (Belkin Firmware)

Belkin - F5D7634-4 (Belkin Firmware)

Belkin - F5D8230-4 (Belkin Firmware)

Belkin - F5D8231-4 v2 (Belkin Firmware)

Belkin - F5D8231-4 v5 (Belkin Firmware)

Belkin - F5D8232-4 v1 (Belkin Firmware)

Belkin - F5D8233-4 v1 (Belkin Firmware)

Belkin - F5D8233-4 v3 (Belkin Firmware)

Belkin - F5D8233-4 v4 (Belkin Firmware)

Belkin - F5D8235-4 v1 (Belkin Firmware)

Belkin - F5D8235-4 v2 (Belkin Firmware)

Belkin - F5D8236-4 v1 (Belkin Firmware)

Belkin - F5D8236-4 v2 (Belkin Firmware)

Belkin - F5D8236-4 v3 (Belkin Firmware)

Belkin - F5D8631-4 v2 (Belkin Firmware)

Belkin - F5D8631-4 v3 (Belkin Español Firmware)

Belkin - F5D8631-4 v3 (Belkin Firmware)

Belkin - F5D8632-4 v1 (Belkin Firmware)

Belkin - F5D8633-4 v1 (Belkin Firmware)

Belkin - F5D8635-4 v1 (Belkin Firmware)

Belkin - F5D8636-4 v1 (Belkin Firmware)

Belkin - F5D8636-4 v2 (Belkin Firmware)

Belkin - F5D9230-4 v5 (Belkin Firmware)

Belkin - F5D9231-4 v1 (Belkin Firmware)

Belkin - F5D9630-4 (Belkin Firmware)

Belkin - F5D9630-4 UK (Belkin Firmware)

Belkin - F6D4230-4 v3 (Belkin Firmware)

Belkin - F6D4320-4 v1 (Belkin Firmware)

Belkin - F6D4630-4 v1 (Belkin Firmware)

BestData - EA142 (Conexant Firmware)
root
root
Bewan - 600 G (Bewan French Firmware)
bewan
bewan
Billion - BiPac 5100A (Billion Firmware)
admin
admin
Billion - BiPac 5102S (Billion Firmware)
admin
admin
Billion - BiPac 5112S (Billion Firmware)
admin
password
Billion - BiPac 5200G (Billion Firmware)
admin
admin
Billion - BiPac 5200N (Billion Firmware)
admin
admin
Billion - BiPac 5210S (Billion Firmware)
admin
admin
Billion - BiPac 7300G (Billion Firmware)
admin
admin
Billion - BiPac 7300RA (Billion Firmware)
admin
admin
Billion - BiPac 7402GXL (Billion Firmware)
admin
admin
Billion - BiPac 7404VNPX (Billion Firmware)
admin
admin
Billion - BiPac 7500G (Billion Firmware)
admin
password
Black Copper - BCWR54G (Black Copper Firmware)
guest
guest
BLUE COM - BCOM-5330 (BLUE COM Firmware)
admin
admin
BLUE COM - BCOM-5390 (BLUE COM Firmware)
Admin
Admin
Bountiful - BWRG500 (Bountiful Firmware)
admin
admin
BSNL - DNA-A211-1 (BSNL Firmware)
admin
admin
BT - HOME HUB 1.0 (BT Firmware)

BT - HOME HUB 2.0 (BT Firmware)
admin
admin
BT - Voyager 2100 (BT Firmware)
admin
admin
BT - Voyager 2110 (BT Firmware)
admin
admin
BT - Voyager 220v (BT Firmware)
admin
admin
BT - Voyager 2500v (BT Firmware)
admin
admin
Buffalo - WHR-G (Buffalo Japanese Firmware)
root

Buffalo - WHR-G54S (Buffalo Firmware)
root

Buffalo - WHR-G54S (Buffalo Firmware)
admin
admin
Buffalo - WZR2-G300N (Buffalo Firmware)
root

Buffalo - WZR2-G300N (Buffalo Japanese Firmware)
root

Buffalo - WZR-HP-G300NH (Buffalo Firmware)
root

Canyon - CN-BR1 (Canyon Firmware)
admin
admin
Canyon - CN-WF514 (Canyon Firmware)
admin
1234
Caremo - X8268R (Caremo Firmware)
admin
admin
Cerberus - ADSL Wifi 802.11g (Cerberus Firmware)
Admin
Admin
Cisco - EPC2325 (Cisco Firmware)

admin
Cisco - EPC2425 (Cisco Firmware)

admin
CNET - CAR-845 (Texas Instruments Firmware)
Admin
Admin
CNet - CNAD804-NF (Conexant Firmware)
admin
epicrouter
CNet - CWR-854V (CNet Firmware)
root
1234
Comstar - WA-6202-V2 (Comstar Firmware)

Comtrend - AR-5321U (Comtrend Firmware)
admin
admin
Comtrend - CT-5072S (Comtrend Firmware)
root
1234
Comtrend - CT-536+ (Comtrend Firmware)
1234
1234
Comtrend - CT-5361 (Comtrend Firmware)
admin
admin
Comtrend - CT-5361T (Comtrend Firmware)
root
12345
Comtrend - CT-5367 (Comtrend Firmware)
admin
admin
Comtrend - CT-5611 (Comtrend Firmware)
root
1234
Comtrend - CT-5621 (Comtrend Firmware)
root
1234
Comtrend - CT-6383 (Comtrend Firmware)
user
pass
Conceptronic - C54APRA (Conceptronic Firmware)
admin
admin
Conceptronic - C54BRS4 (Conceptronic Firmware)
admin
1234
Conceptronic - C54BRS4A (Conceptronic Firmware)
admin
admin
Conitech - CN405APRT54 (Conitech Firmware)
admin
admin
Conitech - CN416EU (Conitech Firmware)
admin
admin
Conitech - CNKITADSLWL54 (Conitech Firmware)
admin
admin
Connection N&C RBW54 (Connection N&C Firmware)
admin
admin
Cradlepoint - MBR1000 (Cradlepoint Firmware)

Creative - Wireless ADSL 8426 (Creative Firmware)
admin
admin
Darelink - DSL136E (Darelink Firmware)

Davolink - DV-201AM (Davolink Firmware)
user
user
Davolink - DV-201AMR (Davolink Firmware)
user
user
Davolink - DV-2020 (Davolink Firmware)
user
user
Dell - 2350 (Dell Firmware)
admin
password
Deltaco - WLAN-104 (Deltaco Firmware)

Digicom - 8E4411 (Digicom Firmware)
admin
admin
Digicom - Adsl2 Combo (Digicom Firmware)
admin
admin
Digicom - DDSL-101R (Digicom Firmware)
admin
admin
Digicom - Michelangelo LAN TX II (Digicom Firmware)
admin
admin
Digicom - Michelangelo Wave (Digicom Firmware)
admin
admin
Digicom - Michelangelo Wave 108 (Digicom Firmware)

admin
Digiconnect - WIC328 (Digiconnect Firmware)
admin
1234
D-Link - DGL-4100 (D-Link Firmware)
admin

D-Link - DGL-4300 (D-Link Firmware)
admin

D-Link - DGL-4500 (D-Link Firmware)
admin

D-Link - DI-524 (D-Link v2 Firmware)
admin

D-Link - DI-524 (D-Link v3 Firmware)
admin

D-Link - DI-524 (D-Link v5 Firmware)
admin

D-Link - DI-524UP (D-Link Firmware)
admin

D-Link - DI-604 (D-Link Firmware)
admin

D-Link - DI-604 (D-Link Russian Firmware)
admin

D-Link - DI-604+ (D-Link Chinese Firmware)
admin

D-Link - DI-614+ (D-Link Firmware)
admin

D-Link - DI-624 (D-Link v4 Firmware)
admin

D-Link - DI-624 (D-Link v5 Firmware)
admin

D-Link - DI-624S (D-Link Firmware)
admin
admin
D-Link - DI-634M (D-Link Firmware)
admin

D-Link - DI-704P (D-Link Firmware)
admin

D-Link - DI-704UP (D-Link Firmware)
admin

D-Link - DI-808HV (D-Link Firmware)
admin

D-Link - DI-824VUP (D-Link Firmware)
admin

D-Link - DI-LB604 (D-Link Firmware)
admin

D-Link - DIR-100 (D-Link Firmware)
admin

D-Link - DIR-280 (D-Link Firmware)
admin

D-Link - DIR-300 (D-Link Firmware)
admin

D-Link - DIR-301 (D-Link Firmware)
admin

D-Link - DIR-400 (D-Link v1 Firmware)
admin

D-Link - DIR-600 (D-Link Firmware)
admin

D-Link - DIR-615 (D-Link v1 Firmware)
admin

D-Link - DIR-615 (D-Link v2 Firmware)
admin

D-Link - DIR-615 (D-Link v3 Firmware)
admin

D-Link - DIR-615 (D-Link v4 Firmware)
admin

D-Link - DIR-625 (D-Link v1 Firmware)
admin

D-Link - DIR-625 (D-Link v3 Firmware)
admin

D-Link - DIR-628 (D-Link Firmware)
admin

D-Link - DIR-635 (D-Link Firmware)
admin

D-Link - DIR-655 (D-Link Firmware)
admin

D-Link - DIR-825 (D-Link Firmware)
admin

D-Link - DIR-855 (D-Link Firmware)
admin

D-Link - DSL-2500U (D-Link Firmware)
admin
admin
D-Link - DSL-2520U (D-Link Firmware)
admin
admin
D-Link - DSL-2540B (D-Link Firmware)
admin
admin
D-Link - DSL-2540T (D-Link Firmware)
admin
admin
D-Link - DSL-2540U (D-Link Firmware)
admin
admin
D-Link - DSL-2542B (D-Link Firmware)
admin
admin
D-Link - DSL-2600U (D-Link Firmware)
admin
admin
D-Link - DSL-2640B (D-Link Firmware)
admin
admin
D-Link - DSL-2640R (D-Link Firmware)
admin
admin
D-Link - DSL-2640T (D-Link Firmware)
admin
admin
D-Link - DSL-2640U (D-Link Firmware)
admin
admin
D-Link - DSL-2641B (D-Link Firmware)
admin
admin
D-Link - DSL-2740B (D-Link Firmware)
admin
admin
D-Link - DSL-2740R (D-Link Firmware)
admin
admin
D-Link - DSL-2741B (D-Link Firmware)
admin
admin
D-Link - DSL-302G (D-Link Firmware)
admin
admin
D-Link - DSL-500B (D-Link Firmware)
admin
admin
D-Link - DSL-500G (D-Link Firmware)
admin

D-Link - DSL-500G Generation II (D-Link Firmware)
admin
admin
D-Link - DSL-500T (D-Link Firmware)
admin
admin
D-Link - DSL-502G (D-Link Firmware)
admin
admin
D-Link - DSL-502T (D-Link Firmware)
admin
admin
D-Link - DSL-504G (D-Link Firmware)
admin
admin
D-Link - DSL-504T (D-Link Firmware)
admin
admin
D-Link - DSL-520B (D-Link Firmware)
admin
admin
D-Link - DSL-520T (D-Link Firmware)
admin
admin
D-Link - DSL-522T (D-Link Firmware)
admin
admin
D-Link - DSL-524B (D-Link Firmware)
admin
admin
D-Link - DSL-524T (D-Link Firmware)
admin
admin
D-Link - DSL-584T (D-Link Firmware)
admin
admin
D-Link - DSL-G604T (D-Link Firmware)
admin
admin
D-Link - DSL-G624M (D-Link Firmware)
admin
admin
D-Link - DSL-G624T (D-Link v3.0 Firmware)
admin
admin
D-Link - DSL-G624T (D-Link v3.1 Firmware)
admin
admin
D-Link - DSL-G804V (D-Link Firmware)
admin
admin
D-Link - DVA-G3170i (D-Link Firmware)
admin
admin
D-Link - DVA-G3340S (D-Link Firmware)
admin
admin
D-Link - DVA-G3670B (D-Link Firmware)
admin
admin
D-Link - DVA-G3810BN (Telus Firmware)
admin
telus
D-Link - DVA-G3810BNTL (Telus Firmware)
admin
telus
D-Link - EBR-2310 (D-Link v1 Firmware)
admin

D-Link - EBR-2310 (D-Link v2 Firmware)
admin

D-Link - GLB-502C (D-Link Firmware)
admin
admin
D-Link - GLB-502T (D-Link Firmware)
admin
admin
D-Link - GLB-802C (D-Link Firmware)

D-Link - VWR (Vontage Firmware)
user
user
D-Link - WBR-1310 (D-Link v2 Firmware)
admin

D-Link - WBR-1310 (D-Link v4 Firmware)
admin

D-Link - WBR-2310 (D-Link Firmware)
admin

Dovado - UMR (Dovado Firmware)
admin
0000
Draytek - Vigor2200E-Plus (Draytek Firmware)
admin
admin
Draytek - Vigor2500 (Draytek Firmware)
admin
admin
Draytek - Vigor2700 (Draytek Firmware)
user
user
Draytek - Vigor2700e (Draytek Firmware)
admin
admin
Draytek - Vigor2800vg (Draytek Firmware)
admin
admin
Draytek - Vigor2820 (Draytek Firmware)
user
user
Draytek - Vigor2910 (Draytek Firmware)
admin
admin
Draytek - Vigor2930 (Draytek Firmware)
user
user
DSE - XH9948 (DSE Firmware)
admin
password
DSE - XH9950 (DSE Firmware)
admin
password
DSLink - 260E (DSLink Firmware)
root
root
Dynalink - RTA1025W (Dynalink Firmware)
admin
admin
Dynalink - RTA1320 (Dynalink Firmware)
admin
admin
Dynalink - RTA220 (Dynalink Firmware)

admin
Dynamode - BR-6004 W-G1 (Dynamode Firmware)
guest
guest
Dynamode - R-ADSL-C4W-EG (Dynamode Firmware)
admin
password
Dynex - DX-E401 (Dynex Firmware)
admin

Dynex - DX-E402 (Dynex Firmware)
admin
password
Dynex - DX-WEGRTR v1 (Dynex Firmware)

Eci - B-FOCuS 342+ WTR (Eci Firmware)
admin
password
Ecom - EW125TGAR (Ecom Firmware)
admin
ecom
Edimax - 3G-6200WG (Edimax Firmware)
admin
1234
Edimax - AR-7024Wg (Edimax Firmware)
admin
epicrouter
Edimax - AR-7064 A (Edimax Firmware)
admin
admin
Edimax - AR-7084G A (Edimax Firmware)
admin
1234
Edimax - BR-6104K (Edimax Firmware)
admin
1234
Edimax - BR-6104KP (Edimax Firmware)

Edimax - BR-6204WG (Edimax Firmware)
admin
1234
Edimax - BR-6204WLG (Edimax Firmware)
admin
1234
Edimax - BR-6216Mg (Edimax Firmware)
admin
1234
Edimax - BR-6504N (Edimax Firmware)
admin
1234
Edimax - BR-6624 (Edimax Firmware)
admin

Eminent - EM3032 (Eminent Firmware)

admin
Eminent - EM4012 (Eminent Firmware)

admin
Eminent - EM4013 (Eminent Firmware)

admin
Eminent - EM4040 nShare (Eminent Firmware)

admin
Eminent - EM4204 (Eminent Firmware)
Admin
Admin
Eminent - EM4218 (Eminent Firmware)
admin
admin
Eminent - EM4420 (Eminent Firmware)
admin
admin
Eminent - EM4422 nShare (Eminent Firmware)

admin
Eminent - EM4551 wLINK 300 Pro (Eminent Firmware)
admin
admin
Encore - ENDSL-A2+WIGX2 v1 (ENCORE Firmware)
admin
trendchip
Encore - ENDSL-AR4 (Conexant Firmware)
admin
conexant
Encore - ENHWI-G IEEE 802.11g (Encore Firmware)
admin
admin
Encore - ENHWI-G2 (Encore Firmware)
admin
admin
Encore - ENHWI-G3 (Encore Firmware)
admin
admin
Encore - ENHWI-N (Encore Firmware)
admin
admin
Encore - ENHWI-SG (Encore Firmware)
admin
admin
Encore - ENRTR-104 (Encore Firmware)

admin
Engenius - ESR-9750G (Engenius Firmware)
admin
admin
Engenius - ESR-9850 (Engenius Firmware)
admin
admin
Ericsson - HN294dp (Ericsson Firmware)
admin
admin
Ericsson - W25 (Ericsson Firmware)
admin
admin
E-tech - RTBR01 (E-tech Firmware)

admin
E-tech - RTBR03 (E-tech Firmware)

admin
E-tech - WGRT04 (E-tech Firmware)
admin
admin
E-tech - WLRT03 (E-tech Firmware)

admin
Etisalat - e960 (Etisalat Firmware)

Eumex - 300IP (Eumex German Firmware)

Exper - ECM-01 (Exper Turkish Firmware)
admin
ttnet
Fritz!Box - Fon WLAN 7050 (Fritz!Box German Firmware)

Fritz!Box - Fon WLAN 7141 (Fritz!Box German Firmware)

Fritz!Box - Fon WLAN 7170 (Fritz!Box Firmware)

Fritz!Box - Fon WLAN 7240 (Fritz!Box Firmware)

Fujitel - FCC-W541R (Fujitel Firmware)
admin
admin
Generic - 4-Port 802.11g 54Mbps (Check Router Pic)
admin
admin
Gigabyte - GN-B41G (Gigabyte Firmware)
admin
admin
GlobalTronic - GTR 2401KP (GlobalTronic Firmware)
admin
admin
Gnet - IP0006 (Gnet Firmware)

admin
GTS - Telecom (GTS Firmware)
admin
admin
Haltel - HTN-5200 (Haltel Firmware)
admin
admin
Hamlet - HNWS254 (Hamlet Firmware)
admin

Hamlet - HRDSL512W_R (Hamlet Firmware)
admin
hamlet
Hamlet - HRDSL5400W (Hamlet Firmware)
admin
hamlet
Hatari - HW-AA101 (TrendChip Firmware)
admin
1234
Hawking - HWR54G (Hawking Firmware)
admin

Hayes - 15810 (Hayes Firmware)
admin
hayesadsl
Hfcl - ADSL (Hfcl Firmware)
admin
password
Huawei - B933 (Smart Bro Firmware)

Huawei - E960 (Etisalat Firmware)

Huawei - E960 (STC Firmware)
admin
admin
Huawei - Echolife HG510 (Huawei Firmware)
admin
admin
Huawei - Echolife HG510 (Romania Tel Firmware)
admin
admin
Huawei - Echolife HG510 (Serbian Telekom Firmware)
admin
admin
Huawei - EchoLife HG520b (Huawei Firmware)
admin
admin
Huawei - EchoLife HG520b (TT Firmware)
admin
admin
Huawei - EchoLife HG520i (To2Proxy Firmware)
admin
admin
Huawei - EchoLife HG520s (Saudi Telecom Firmware)
Afaq_shamel
stccpe_2007
Huawei - EchoLife HG520s (TT Firmware)
admin
admin
Huawei - Echolife HG553 (Vodafone Italian Firmware)

Huawei - GlobeSurfer II (Virgin Broadband Firmware)
virgin
password
Huawei - Quidway WA1003A (Huawei Firmware)
admin
admin
Huawei - SmartAX MT841 (Huawei Firmware)
admin
admin
Huawei - SmartAX MT880 (Huawei Firmware)
admin
admin
Huawei - SmartAX MT880 (Triple-T Firmware)
admin
admin
Huawei - SmartAX MT880 (Version E.37 Firmware)
admin
admin
Huawei - SmartAX MT882 (CanTV Firmware)
admin
admin
Huawei - SmartAX MT882 (JazzTel Firmware)
admin
admin
Huawei - SmartAX MT882 (Opal Firmware)
admin
admin
Huawei - SmartAX MT882 (SrpskeTel Firmware)
admin
admin
Huawei - SmartAX MT882a (FAWRI Firmware)
admin
admin
Huawei - SmartAX MT882a (Huawei Firmware)
admin
admin
Huawei - SmartAX MT882a (Viettel Firmware)
admin
admin
Icidu - NI-707513 (Icidu Firmware)
admin
password
Inexq - ISO50T (Inexq Firmware)
admin
1234
Intelbras - GKM 1200 E (Intelbras Firmware)
admin
admin
Intelbras - GKM 1210 Q (Intelbras Portuguese Firmware)
admin
admin
Intelbras - WRG 240 E (Intelbras Portuguese Firmware)
admin
admin
Intellinet - 523431 (Intellinet Firmware)
root

Intellinet - 523455 (Intellinet Firmware)
admin
admin
Inteno - EG101 (Inteno Firmware)
admin
admin
Intercross - xDSL 5633 E (Uhtepkpocc Firmware)
admin
admin
Intracom - JetSpeed IAD-Wp2 (Intracom Firmware)
telekom
telekom
Intracom - NetFasteR IAD (Intracom Firmware)
admin
admin
Intracom - NetFasteR IAD 2 (Intracom Firmware)
admin
admin
Inventel - DV4210-WA (Livebox French Firmware)
admin
admin
Inventel - DV4210-WS (Livebox Firmware)
admin
admin
IP-Com - R402+ (IP-Com Chinese Firmware)
admin
admin
ipTime - IP0803 (ipTime Firmware)
root

ipTime - N604M (ipTime Korean Firmware)

Iskratel - SI2000 Callisto821+ (Iskratel Firmware)
admin
admin
Jensen Scandinavia - Air:link 2954 (Jensen Scandinavia Firmware)
admin
admin
Jensen Scandinavia - Air:link 59300 (Jensen Scandinavia Firmware)
admin
1234
Jensen Scandinavia - Air:link 89300 (Jensen Scandinavia Firmware)
admin
1234
Jnet - JN-DS5400 (Jnet Firmware)
admin
password
Kaiomy - 550B-4P (Kaiomy Firmware)
admin
epicrouter
Kaiomy - 550B-4P2 (Kaiomy Firmware)
admin
admin
Kaiomy - APR-4P (Kaiomy Firmware)
guest
guest
Kasda - KD318MUI (Kasda Firmware)
admin
adslroot
Kasda - V2Plus (Kasda Firmware)
admin
adslroot
KCORP - KLG-575 (KCORP Firmware)
admin
admin
KCORP - KLS-575 (KCORP Firmware)

KCORP - KLS-5810 (KCORP Firmware)
admin
password
Keyteck - NET-25GSU (Keyteck Firmware)
admin
admin
Kobishi - 8K (Kobishi Firmware)

Konig - CMP-WNROUT10 (Konig Firmware)
admin
admin
Konig - CMP-WNROUT30 (Konig Firmware)
admin
1234
Kozumi - K-5400GR (Kozumi Firmware)
guest
guest
Kozumi - KM-410WG (Kozumi Firmware)
admin
admin
Kraun - Kr.1W (Kraun Firmware)
admin
admin
Kraun - Kr.XL (Kraun Firmware)
admin
admin
Kyocera - KR2 (Kyocera Firmware)

admin
Lantech - AR-2000 (Conexant Firmware)
root
root
Levelone - FBR-1161A (Levelone Firmware)
admin
admin
Levelone - WBR-3406TX (Levelone Firmware)
admin
admin
Levelone - WBR-3408 (Levelone Firmware)
admin

Levelone - WBR-3800 (Levelone Firmware)

password
Levelone - WBR-6001 (Levelone Firmware)

password
Leviton - GB4 (Leviton Firmware)
admin
admin
Linkpro - A2WR-430A (Linkpro Firmware)
admin
admin
Linkskey - LKR-604 (Linkskey Firmware)
admin

Linksys - AG241 (Linksys Firmware)
admin
admin
Linksys - AM200 (Linksys Firmware)
admin
admin
Linksys - AM300 (Linksys Firmware)
admin
admin
Linksys - BEFSR11 (Linksys Firmware)

admin
Linksys - BEFSR41 (Linksys v1 Firmware)

admin
Linksys - BEFSR41 (Linksys v2 Firmware)

admin
Linksys - BEFSR41v4 (Linksys Firmware)

admin
Linksys - BEFSR81 (Linksys Firmware)

admin
Linksys - BEFSRU31 (Linksys Firmware)

admin
Linksys - BEFSX41 (Linksys Firmware)

admin
Linksys - BEFW11S4 (Linksys Firmware)

admin
Linksys - NR041 (Network Everywhere Firmware)

admin
Linksys - RT31P2 (Linksys Firmware)

admin
Linksys - RTP300 (Linksys Firmware)
admin
admin
Linksys - RV042 (Linksys Firmware)
admin
admin
Linksys - RVS 4000 (Linksys Firmware)
admin
admin
Linksys - SPA-2100 (Linksys Firmware)

admin
Linksys - SPA-2102 (Linksys Firmware)

admin
Linksys - SPA-3102 (Linksys Firmware)

admin
Linksys - WAG160N (Linksys Italian Firmware)

admin
Linksys - WAG200G (Linksys Portuguese Firmware)

admin
Linksys - WAG300N (Linksys Portuguese Firmware)
admin
admin
Linksys - WAG325N (Linksys Firmware)
admin
admin
Linksys - WAG354G (Linksys Firmware)

admin
Linksys - WAG54G2 (Linksys Firmware)
admin
admin
Linksys - WAG54GS (Linksys Firmware)
admin
admin
Linksys - WCG200 ver.2 (Linksys Firmware)

admin
Linksys - WCG200-CC (Comcast Firmware)
comcast
1234
Linksys - WRH54G (Linksys Firmware)

admin
Linksys - WRK54G (Linksys Firmware)

admin
Linksys - WRT100 (Linksys Firmware)

admin
Linksys - WRT110 (Linksys Firmware)

admin
Linksys - WRT120N (Linksys Firmware)
admin
admin
Linksys - WRT150N (Linksys Firmware)

admin
Linksys - WRT160N (Linksys Firmware)

admin
Linksys - WRT160N v2 (Linksys Firmware)

admin
Linksys - WRT160N v3 (Linksys Firmware)

admin
Linksys - WRT300N (Linksys Firmware)

admin
Linksys - WRT300N v1.1 (Linksys Firmware)
admin
admin
Linksys - WRT310N (Linksys Firmware)

admin
Linksys - WRT320N (Linksys Firmware)

admin
Linksys - WRT350N (Linksys Firmware)

admin
Linksys - WRT400N (Linksys Firmware)

admin
Linksys - WRT54G (Hyperlite Firmware)

admin
Linksys - WRT54G (Linksys Firmware)

admin
Linksys - WRT54G (Linksys v2 Firmware)

admin
Linksys - WRT54G (Linksys v4 Firmware)

admin
Linksys - WRT54G (Linksys v8 Firmware)

admin
Linksys - WRT54G (Satori-4.0 Firmware By Sveasoft)

admin
Linksys - WRT54G (Talisman Firmware)
admin
admin
Linksys - WRT54G2 (Linksys v1.0 Firmware)

admin
Linksys - WRT54G2 (Linksys v1.5 Firmware)

admin
Linksys - WRT54G3G (Linksys Italian Firmware)
admin
admin
Linksys - WRT54GC (Linksys Firmware)

admin
Linksys - WRT54GC (Linksys Italian Firmware)

admin
Linksys - WRT54GH (Linksys Firmware)
admin
admin
Linksys - WRT54GL (Linksys Firmware)

admin
Linksys - WRT54GP2A-AT (Linksys Firmware)

admin
Linksys - WRT54GS (Linksys Firmware)

admin
Linksys - WRT54GS (Linksys v7 Firmware)

admin
Linksys - WRT54GS2 (Linksys Firmware)

admin
Linksys - WRT54G-TM (Linksys Firmware)

admin
Linksys - WRT54GX2 (Linksys Firmware)

admin
Linksys - WRT54GX4 (Linksys Firmware)

admin
Linksys - WRT55AG (Linksys Firmware)

admin
Linksys - WRT600N (Linksys Firmware)

admin
Linksys - WRT610N (Linksys Firmware)

admin
Linksys - WRTP54G (Linksys Firmware)
admin
admin
Linksys - WRTU54G-TM (Linksys Firmware)
admin
admin
Linksys - WRV200 (Linksys Firmware)

admin
Linksys - WRVS4400N (Linksys Firmware)
admin
admin
Mecer - WAR25TC (Addon Firmware)
admin
admin
Meetus - AMT1004 (Meetus Firmware)
admin
adslnadam
Mercury - MW54R (Mercury Chinese Firmware)
admin
admin
Microcom - AD 2656 (Microcom Firmware)
admin
epicrouter
Micronet - SP3361 (Micronet Firmware)
admin
trendchip
Micronet - SP888B (Micronet Firmware)
admin
admin
Micronet - SP916GK (Micronet Firmware)
admin
1234
Microsoft - MN-100 (Microsoft Firmware)

admin
Microsoft - MN-500 (Microsoft Firmware)

admin
Microsoft - MN-700 (Microsoft Firmware)

admin
Motorola - CPEo 450 (Motorola Firmware)

Motorola - Netopia 2210-02 (AT&T Firmware)

Motorola - Netopia 2241N-VGX (Bell Shouth Firmware)

Motorola - Netopia 2241N-VGX (Netopia Firmware)

Motorola - Netopia 2247-02 (Eircom Firmware)

Motorola - Netopia 3346N-VGx (Motorola Italian Firmware)

Motorola - Netopia 3347-02 (Qwest Firmware)

Motorola - Netopia 3347NWG-006 (Netopia Firmware)

Motorola - Netopia Cayman 3346-006 (Netopia Firmware)
admin
1234
Motorola - SBG900 (Motorola Firmware)
admin
motorola
Motorola - SVG2500 (Motorola Firmware)
admin
motorola
Motorola - VT2142 (Motorola Firmware)
router
router
Motorola - VT2442 (Motorola Firmware)
router
router
Motorola - VT2542 (Motorola Firmware)
router
router
Motorola - WR850G (Motorola Firmware)
admin
motorola
MSI - RG54SE II (MSI Firmware)
admin
admin
MSI - RG60G (MSI Firmware)
admin
admin
MTNL - MT882 (MTNL Firmware)
Admin
Admin
My Essentials - ME 1004-R (My Essentials Firmware)

Mymax - Access Point 54mbps (Mymax Firmware)
admin
password
Myungmin - MWC-2500PW (Myungmin Firmware)

Netcomm - NB1300 Plus 4 (Netcomm Firmware)
admin
password
Netcomm - NB5 (Netcomm Firmware)
admin
admin
Netcomm - NB5Plus4 (Netcomm Firmware)
admin
admin
Netcomm - NB6PLUS4W (Netcomm Firmware)
admin
admin
Netcomm - NB9WMAXX (Netcomm Firmware)
admin
admin
Netcomm - V210P (Netcomm Firmware)
admin
admin
Netcore - 2005NR (Netcore Chinese Firmware)
guest
guest
NetGear - CBVG834G (Darty Box French Firmware)
admin
password
NetGear - CBVG834G (Netgear Firmware)
admin
password
NetGear - CG3100 (Netgear Firmware)
admin
password
NetGear - CG814GCMR (Netgear Firmware)
admin
password
NetGear - CG814WG (Comcast Firmware)
comcast
1234
NetGear - CG814WG (Optus Firmware)
admin
password
NetGear - CG814WG v2 (Netgear Firmware)
admin
password
NetGear - CVG824G (Netgear Firmware)
admin
password
NetGear - CVG834G (NetGear Firmware)
admin
password
NetGear - DG632 (NetGear Firmware)
admin
password
NetGear - DG824M (NetGear Firmware)
admin
password
NetGear - DG834 v3 (NetGear Firmware)
admin
password
NetGear - DG834 v4 (NetGear Firmware)
admin
password
NetGear - DG834G v2 (NetGear Firmware)
admin
password
NetGear - DG834G v3 (NetGear Firmware)
admin
password
NetGear - DG834G v4 (NetGear Firmware)
admin
password
NetGear - DG834G v5 (NetGear Firmware)
admin
password
NetGear - DG834G v5 (NetGear Italian Firmware)
admin
password
NetGear - DG834GT (DGTeam v1 Italian Firmware)
admin
password
NetGear - DG834GT (NetGear Firmware)
admin
password
NetGear - DG834GU v5 (Optus Firmware)
admin
password
NetGear - DG834N v2 (NetGear Firmware)
admin
password
NetGear - DG834PN (NetGear Firmware)
admin
password
NetGear - DG934G (Sky Firmware)
admin
sky
NetGear - DGN2000 (NetGear Firmware)
admin
password
NetGear - DGND3300 (NetGear Firmware)
admin
password
NetGear - FVG318 (NetGear Firmware)
admin
password
NetGear - FVL328 (NetGear Firmware)
admin
password
NetGear - FVS124G (NetGear Firmware)
admin
password
NetGear - FVS318v3 (NetGear Firmware)
admin
password
NetGear - FVS338 (NetGear Firmware)
admin
password
NetGear - FWG114P (NetGear Firmware)
admin
password
NetGear - MR814 v2 (NetGear Firmware)
admin
password
NetGear - MR814 v3 (NetGear Firmware)
admin
password
NetGear - R0318 (NetGear Firmware)
admin
1234
NetGear - RP614 v2 (NetGear Firmware)
admin
password
NetGear - RP614 v3 (NetGear Firmware)
admin
password
NetGear - RP614 v4 (NetGear Firmware)
admin
password
NetGear - RP614 v4 (NetGear German Firmware)
admin
password
NetGear - RT314 (NetGear Firmware)
admin
1234
NetGear - WGR614 v5 (NetGear Firmware)
admin
password
NetGear - WGR614 v6 (NetGear Firmware)
admin
password
NetGear - WGR614 v7 (NetGear Firmware)
admin
password
NetGear - WGR614 v8 (NetGear Firmware)
admin
password
NetGear - WGR614 v9 (NetGear Firmware)
admin
password
NetGear - WGT624 (NetGear Firmware)
admin
password
NetGear - WGT624 v2 (NetGear Firmware)
admin
password
NetGear - WGT624 v3 (NetGear Firmware)
admin
password
NetGear - WGT624 v4 (NetGear Firmware)
admin
password
NetGear - WGT634U (NetGear Firmware)
admin
password
NetGear - WNDR3300 (NetGear Firmware)
admin
password
NetGear - WNDR3700 (NetGear Firmware)
admin
password
NetGear - WNR1000v2 (NetGear Firmware)
admin
password
NetGear - WNR2000 (NetGear Firmware)
admin
password
NetGear - WNR2000v2 (NetGear Firmware)
admin
password
NetGear - WNR3500 v2 (NetGear Firmware)
admin
password
NetGear - WNR3500L (NetGear Firmware)
admin
password
NetGear - WNR834B v2 (NetGear Firmware)
admin
password
NetGear - WNR854T (NetGear Firmware)
admin
password
NetGear - WPN824 v1 (NetGear Firmware)
admin
password
NetGear - WPN824 v2 (NetGear Firmware)
admin
password
NetGear - WPN824 v3 (NetGear Firmware)
admin
password
NetGear - WPNT834 (NetGear Firmware)
admin
password
Netopia - 2210-02 (AT&T Firmware)

Netopia - 2241N-VGX (Bell Shouth Firmware)

Netopia - 2241N-VGX (Netopia Firmware)

Netopia - 2247-02 (Eircom Firmware)

Netopia - 3346N-VGx (Motorola Italian Firmware)

Netopia - 3347-02 (Qwest Firmware)

Netopia - 3347NWG-006 (Netopia Firmware)

Netopia - Cayman 3346-006 (Netopia Firmware)
admin
1234
Network Everywhere - NWR11B (Network Everywhere Firmware)

admin
Nexxt Solutions - NW230NXT14 (Nexxt Firmware)
guest
guest
Nilox - 16NX080112001 (Nilox Firmware)
admin
admin
Noganet - TEI-6608 (Noganet Firmware)
admin
admin
Nokia Siemens Networks - 1600 (BSNL Firmware)
admin
admin
Oiwtech - oiw-2401apg (Oiwtech Portuguese Firmware)
root
admin
Olidata - Modem ADSL Router (GlobespanVirata Firmware)

Onda - EM4218 (DN7000 Firmware)
admin
123456
OPEN - iConnect 625W (OPEN Firmware)
root
0P3N
OPEN - iConnect Access 611 (OPEN Firmware)
root
0P3N
OPEN - iConnect Access 621 (OPEN Firmware)
root
0P3N
OPEN - iConnect Access 624 (OPEN Firmware)
root
0P3N
Orient - WR514V1 (Orient Firmware)
admin
1234
Origo - ASR-8400 (Origo Firmware)
admin
epicrouter
OvisLink - EVO-W300AR (OvisLink Firmware)
admin
admin
OvisLink - EVO-W54ARv2 (OvisLink Firmware)
admin
admin
ParkerVision - WR1500 (ParkerVision Firmware)

1234
Parks - AltaVia 671 (Parks Firmware)
root
1234
Pentagram Cerberus P 6331-42 (Pentagram Firmware)
admin
admin
Pepwave - Surf-200 (Pepwave Firmware)

admin
Philips - CGA5722 (Philips Firmware)

Philips - CPWBS154 (Philips Firmware)

Philips - p2 (Philips Firmware)

Philips - SNA6500 (Philips Firmware)

Philips - SNA6600-18 (Philips Firmware)

Philips - SNB5600 (Philips Firmware)

Pikatel - Airmax 101 (Pikatel Turkish Firmware)
admin
ttnet
Pirelli - Alice Gate 2 Plus Wi-Fi (Telecom Italia Firmware)

Pirelli - DRG-A112 (Pirelli Firmware)
admin
admin
Pirelli - DRG-A124G (Pirelli Firmware)
admin
admin
Pirelli - DRG-A125G (Pirelli Firmware)
admin
admin
Pirelli - DRG-A125G (Telecom Spanish Firmware)
user
user
Pirelli - DRG-A225G (Pirelli Firmware)
user
user
Pirelli - DRG-A266G (Pirelli Firmware)
admin
admin
Pirelli - Netgate voip v2 (Pirelli Firmware)
user
user
Planet - ADE-3100 (Planet Firmware)
admin
epicrouter
Planet - ADE-3400 (Planet Firmware)
admin
epicrouter
Planet - ADE-3410 (Planet Firmware)
admin
admin
Planet - ADE-3411 (Planet Firmware)
admin
admin
Planet - ADE-4100A (Planet Firmware)
admin
epicrouter
Planet - ADE-4400 (Planet Firmware)
admin
admin
Planet - ADW-4401 (Planet Firmware)
admin
admin
Planet - WRT-414 (Planet Firmware)
admin
admin
Planet - WRT-416 (Planet Firmware)
admin
admin
Planet - XRT-401D (Planet Firmware)
admin
1234
Planet - XRT-401E (Planet Firmware)
admin
admin
Pluscom - WR-AR2317 (Pluscom Firmware)
admin
admin
Postef - 8820U (Postef Firmware)
admin
admin
Prolink - H5201 (Prolink Firmware)
admin
password
Prolink - H9000 (Prolink Firmware)
admin
password
Prolink - Hurricane 5200 (Prolink Firmware)
admin
password
Prolink - Hurricane 9200AR (Prolink Firmware)
admin
password
Prolink - Hurricane 9200P (Prolink Firmware)
admin
password
Prolink - Hurricane H5305G (Prolink Firmware)
admin
password
Prolink - WGR1004 (Prolink Firmware)
admin
password
QPCOM - QP-WR254G (QPCOM Firmware)
admin
1234
Repotec - RP-IP2404A (Repotec Firmware)
admin
admin
Repotec - RP-IP509 (Repotec Firmware)
admin
admin
Riger - DB102 (Riger Firmware)
tmadmin
tmadmin
Riger - DB108-WL (Streamyx Firmware)
tmadmin
tmadmin
Rosewill - RNX-EasyN4 (Rosewill Firmware)
admin
admin
Rosewill - RNX-N4PS (Rosewill Firmware)
admin
admin
RPC - I35 (RPC Firmware)

Safecom - GWART2-54125 (Safecom Firmware)
admin
admin
Safecom - SWBR-5400 (Safecom Firmware)

admin
Sagem - F@st 1201 (Sagem Firmware)
admin
admin
Sagem - F@st 2404 (Sagem Firmware)
admin
admin
Sagem - F@st 2504 (Sky Firmware)
admin
sky
Sagem - F@st 2604 (JaWeb French Firmware)
admin
admin
Sagem - F@st 3102 (Sagem Firmware)
user
user
Sagem - F@st 3202 (Livebox English Firmware)
admin
admin
Sagem - F@st 3202 (Livebox French Firmware)
admin
admin
Sagem - Livebox 4305 (Livebox Firmware)
admin
password1
Sanex - SA-5100 (Sanex Firmware)
admin
admin
Sanex - SA-C5210 (Sanex Firmware)
admin
admin
Scientific Atlanta - DPR2320R2 (Scientific Atlanta Firmware)

admin
Scientific Atlanta - EPC2434 (Scientific Atlanta Firmware)

admin
Scientific Atlanta - EPR2320R2 (Scientific Atlanta Firmware)

admin
SemIndia - DNA-A201SM (MTNL Firmware)
admin
admin
SemIndia - DNA-A212 (MTNL Firmware)
admin
admin
Serioux - SSR4100 (Serioux Firmware)
admin
admin
Shiro - DSL805E (Shiro Firmware)
admin
admin
Siemens - C2110 (Siemens Firmware)
admin
admin
Siemens - Giga762SX (Siemens Firmware)

admin
Siemens - Gigaset 504 AGU (Siemens Firmware)

admin
Siemens - Gigaset SE260 (Siemens E9 Firmware)
user
user
Siemens - Gigaset SE260 DSL (Siemens Firmware)
admin
admin
Siemens - Gigaset SE261 (VNPT Firmware)
admin
password
Siemens - Gigaset SE261 DSL (Siemens Firmware)
admin
admin
Siemens - Gigaset SE361 (Siemens Firmware)

admin
Siemens - Gigaset SE471 WiMax (Siemens Firmware)
root
a6a7wimax
Siemens - Gigaset SE551 (Siemens German Firmware)

admin
Siemens - Gigaset SE560 (Siemens Firmware)
admin
admin
Siemens - Gigaset SE567 (Telus Firmware)
admin
telus177
Siemens - Gigaset SE587 (Tiscali Firmware)
admin
admin
Siemens - Gigaset SX551 (Siemens Dutch Firmware)

admin
Siemens - Gigaset SX551 (Siemens Firmware)

admin
Siemens - Gigaset SX552 (Siemens Firmware)

admin
Siemens - SL2-141 (Siemens Firmware)
Admin
Admin
Siemens - Speedstream 4101 (Tiscali Firmware)
admin
admin
Siemens - Speedstream 4200 (Siemens Firmware)
admin
admin
Siemens - Speedstream 6520 (Bell Firmware)
admin

Siemens - SpeedStream SE565 (Siemens Firmware)
admin
admin
Sitecom - DC-202 v3 (Sitecom Firmware)
admin
admin
Sitecom - DC-202 v5 (Sitecom Firmware)
admin
admin
Sitecom - DC-202 v6 (Sitecom Firmware)
admin
admin
Sitecom - DC-210 (Sitecom Firmware)
admin
admin
Sitecom - DC-226 (Sitecom Firmware)
admin
admin
Sitecom - DC-227 (Sitecom Firmware)
admin
admin
Sitecom - WL-108 (Sitecom Firmware)
admin
sitecom46
Sitecom - WL-114 (Sitecom Firmware)
admin
admin
Sitecom - WL-118 (Sitecom Firmware)
admin
admin
Sitecom - WL-122 (Sitecom Firmware)
admin
admin
Sitecom - WL-127 (Sitecom Firmware)
admin
admin
Sitecom - WL-153 (Sitecom Firmware)
admin
admin
Sitecom - WL-154 (Sitecom Firmware)
admin
admin
Sitecom - WL-160 (Sitecom Firmware)
admin
admin
Sitecom - WL-173 (Sitecom Firmware)
admin
admin
Sitecom - WL-174 (Sitecom Firmware)
admin
admin
Sitecom - WL-176 (Sitecom Firmware)
admin
admin
Sitecom - WL-183 (Sitecom Firmware)
admin
admin
Sitecom - WL-303 (Sitecom Firmware)
admin
admin
Sitecom - WL-304 (Sitecom Firmware)
admin
admin
Sitecom - WL-306 (Sitecom Firmware)
admin
admin
Sitecom - WL-308 (Sitecom Firmware)
admin
admin
Sitecom - WL-312 (Sitecom Firmware)
admin
admin
Sitecom - WL-322 (Sitecom Firmware)
admin
admin
Sitecom - WL-340 (Sitecom Firmware)
admin
admin
Sitecom - WL-341 (Sitecom Firmware)
admin
admin
Sitecom - WL-342 (Sitecom Dutch Firmware)
admin
admin
Sitecom - WL-346 (Sitecom Spanish Firmware)
admin
admin
Sitecom - WL-354 (Sitecom Firmware)
admin
admin
Sitecom - WL-527 (Sitecom Firmware)
admin
admin
Sitecom - WL-575 (Sitecom Firmware)
admin
admin
Sitecom - WL-577 (Sitecom Firmware)
admin
admin
Sitecom - WL-601 (Sitecom Firmware)
admin
admin
Sitecom - WL-606 (Sitecom Firmware)
admin
admin
Sitecom - WL-606 (Sitecom Italian Firmware)
admin
admin
Sitecom - WL-607 (Sitecom Firmware)
admin
admin
Sitecom - WL-611 (Sitecom Firmware)
admin
admin
Sitecom - WL-612 (Sitecom Firmware)
admin
admin
Sitecom - WL-614 (Sitecom Firmware)
admin
admin
SmartLink - SM-4100 (SmartLink Firmware)
admin

Smartnet - PRO-W (Smartnet Turkish Firmware)
admin
1234
SMC - SMC2804WBR (SMC Firmware)

smcadmin
SMC - SMC7004BR (SMC Firmware)

smcadmin
SMC - SMC7004VBR (SMC Firmware)

smcadmin
SMC - SMC7004VBR EU (SMC Firmware)

SMC - SMC7004VWBR (SMC Firmware)

smcadmin
SMC - SMC7204BRA (SMC Firmware)

SMC - SMC7901BRA (SMC Firmware)

smcadmin
SMC - SMC7901WBRA2 (SMC Firmware)
admin
smcadmin
SMC - SMC7904BRA (SMC Firmware)

smcadmin
SMC - SMC7904WBRA (SMC Firmware)

admin
SMC - SMC7904WBRA4 (SMC Firmware)
admin
smcadmin
SMC - SMC7908A-ISP (SMC Firmware)

smcadmin
SMC - SMC8013WG-CCR (SMC Firmware)
cusadmin
highspeed
SMC - SMC8014W-G (SMC Firmware)
cusadmin
password
SMC - SMCD3GN (SMC Firmware)
cusadmin
highspeed
SMC - SMCWBR14-3GN (SMC Firmware)
admin
smcadmin
SMC - SMCWBR14-G (SMC Firmware)

smcadmin
SMC - SMCWBR14-G2 EU (SMC Firmware)

smcadmin
SMC - SMCWBR14-GM (SMC Firmware)

smcadmin
SMC - SMCWBR14-N2 (SMC Firmware)
Admin
smcadmin
SMC - SMCWBR14S-N2 (SMC Firmware)

smcadmin
SMC - SMCWBR14S-N3 (SMC Firmware)
admin
smcadmin
SMC - SMCWBR14T-G (SMC Firmware)

smcadmin
SMC- Arcor Easybox 400 (Arcor Firmware)

SonicWALL - Pro 230 (SonicWALL Firmware)
Admin
Password
SonicWALL - TZ 150 Standard (SonicWALL Firmware)
Admin
Password
Sparklan - WX-6615GT (Sparklan Firmware)

admin
Sphairon - Turbolink-AR860 (Sphairon Firmware)
admin
admin
Sterlite - SAM300-AX (Sterlite Firmware)
admin
admin
Surecom - 9611SX-GU (Surecom Firmware)
admin
admin
Surecom - EP-4704SX-A (Conexant Firmware)
admin
epicrouter
Sweex - LB000020 (Sweex Firmware)

mysweex
Sweex - LB000021 (Sweex Firmware)

mysweex
Sweex - LC000070 (Sweex Firmware)

admin
Sweex - LW050v2 (Sweex Firmware)
sweex
mysweex
Sweex - LW150 (Sweex Firmware)
sweex
mysweex
Sweex - LW300 (Sweex Firmware)

mysweex
Sweex - NI-707513 (Sweex Firmware)
sweex
mysweex
Sweex - RO001 (Sweex Firmware)

mysweex
Sweex -LW055 (Sweex Firmware)
sweex
mysweex
Sweex -MO200 (Sweex Firmware)
admin
admin
Sweex -MO201 (Sweex Firmware)
admin
admin
Symantec - Gateway 320 (Symantec Firmware)

TCL - A1100E-D3 (TCL Firmware)
admin
admin
T-Com - Speedport 500v (T-Com German Firmware)

T-Com - Speedport 501v (T-Com German Firmware)

T-Com - Speedport W503V (T-Com German Firmware)

T-Com - Speedport W700V (T-Com German Firmware)

T-Com - Speedport W701V (T-Com German Firmware)

T-Com - Speedport W721V (T-Com German Firmware)

0000
Tecom - AR1061 (Tecom Firmware)
1234
1234
Tele2 - CPVA502+ (Tele2 Firmware)
admin
admin
Telefonica - Xavi - 7768r (Telefonica Firmware)
1234
1234
Telenet - TNDSL 2120 (Telenet Firmware)
admin
admin
Telewell - TW-EA501 v3 (Telewell Firmware)
admin
admin
Telewell - TW-EA510 v3 (Telewell Firmware)
admin
admin
Telit - AR520 (Libero Firmware)
admin
password
Telkom - 5102G (Telkom Firmware)
admin
admin
Telkom - Billion 400G (Billion Firmware)
admin
admin
Telkom - MEGA 105WR (Telkom Firmware)
admin
admin
Telkom Marconi - Premium Combo ADSL Router 2 (Telkom Marconi Firmware)
admin
administrator
Telsey - CPVA202+ (Telsey Firmware)
admin
admin
Telsey - CPVA502+ (Telsey Firmware)
admin
admin
Tenda - TWL 108R (Tenda Firmware)
admin
admin
Tenda - W306R (Tenda Firmware)
admin
admin
Tenda - W311R (Tenda Firmware)
admin
admin
Tenda - W548D (Tenda Firmware)
admin
admin
Thomson - Speedtouch 510 (Thomson v4 Firmware)

Thomson - Speedtouch 510 (Thomson v6 Firmware)
admin
admin
Thomson - Speedtouch 516 (Thomson v5 Firmware)

Thomson - Speedtouch 516v6 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 530 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 530v6 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 546 (Thomson v5 Firmware)

Thomson - Speedtouch 546 (Thomson v6 Firmware)
admin
admin
Thomson - Speedtouch 580 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 585 (O2 Firmware)
admin
admin
Thomson - Speedtouch 585 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 585 (Thomson v6 Firmware)
admin
admin
Thomson - Speedtouch 5x6 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 706 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 716 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 780 (T-Com Firmware)
admin
admin
Thomson - Speedtouch 780 (Thomson Firmware)
admin
admin
Thomson - Speedtouch 780WL (Thomson Firmware)
admin
admin
Thomson - TCW710 (Thomson Firmware)

admin
Thomson - TG585 (Thomson Firmware)
Adminstrator

Thomson - TG585 v7 (Thomson Firmware)

Thomson - TG712 (Thomson Firmware)

Thomson - TG782 (Thomson Firmware)

Thomson - TG784 (Thomson Firmware)

Thomson - TG787 (Thomson Firmware)

Thomson - TG787v (Thomson Firmware)

Thomson - TWC710 (Thomson Firmware)

admin
Thomson - TWG850-4U (Thomson Firmware)

admin
Tilgin - HG1311 (Tilgin Firmware)
admin
admin
Tilgin - Vood 342 (Tilgin Swedish Firmware)
Conf
admin
Tilgin - Vood 452W (Tilgin Firmware)
Conf
admin
Tilgin - Vood 453W (Tilgin German Firmware)
admin
admin
Topcom - Skyr@cer WBR 254G (Topcom Firmware)
admin
admin
Topcom - Skyr@cer WBR 7201n (Topcom Firmware)
admin
1234
TP-LINK - TD-8810 (TP-LINK Firmware)
admin
admin
TP-LINK - TD-8811 (TP-LINK Firmware)
admin
admin
TP-LINK - TD-8816 (TP-LINK Firmware)
admin
admin
TP-LINK - TD-8817 (TP-LINK Firmware)
admin
admin
TP-LINK - TD-8840 (TP-LINK Firmware)
admin
admin
TP-LINK - TD-8841 (TP-Link Firmware)
admin
admin
TP-LINK - TD-W8101G (TP-LINK Firmware)
admin
admin
TP-LINK - TD-W8901G (TP-LINK Firmware)
admin
admin
TP-LINK - TD-W8910G (TP-Link Firmware)
admin
admin
TP-LINK - TD-W8920G (TP-Link Firmware)
admin
admin
TP-LINK - TL-R402M (TP-LINK Firmware)
admin
admin
TP-LINK - TL-R460 (TP-LINK Firmware)
admin
admin
TP-LINK - TL-R860 (TP-LINK Firmware)
admin
admin
TP-LINK - TL-WR340G (TP-LINK v3 Firmware)
admin
admin
TP-LINK - TL-WR340G (TP-LINK v4 Firmware)
admin
admin
TP-LINK - TL-WR340GD (TP-LINK v3 Firmware)
admin
admin
TP-LINK - TL-WR340GD (TP-LINK v4 Firmware)
admin
admin
TP-LINK - TL-WR541G (TP-LINK Firmware)
admin
admin
TP-LINK - TL-WR641G (TP-LINK Firmware)
admin
admin
TP-LINK - TL-WR642G (TP-LINK Firmware)
admin
admin
TP-LINK - TL-WR740N (TP-LINK Firmware)
admin
admin
TP-LINK - TL-WR941ND (TP-LINK Firmware)
admin
admin
Trellis - WG-APR (Trellis Firmware)
guest
guest
Trendchip - HG510 (Trendchip Firmware)
admin
admin
Trendchip - HG520 (Trendchip Firmware)
admin
admin
Trendnet - TEW-431BRP (Trendnet Firmware)
admin
admin
Trendnet - TEW-432BRP (Trendnet Firmware)
admin
admin
Trendnet - TEW-435BRM (Trendnet Firmware)
admin
admin
Trendnet - TEW-452BRP (Trendnet Firmware)
admin
admin
Trendnet - TEW-631BRP (Trendnet Firmware)
admin

Trendnet - TEW-632BRP (Trendnet Firmware)
admin
admin
Trendnet - TEW-633GR (Trendnet Firmware)
admin

Trendnet - TEW-639GR (Trendnet Firmware)
admin

Trendnet - TEW-652BRP (Trendnet Firmware)
admin
admin
Trendnet - TW100-BRV204 (Trendnet Firmware)
admin
admin
Trendnet - TW100-S4W1CA (Trendnet Firmware)
admin
admin
Trust - MD-4050 (Trust Firmware)
admin
admin
Trust - MD-5600 (Trust Firmware)
admin
admin
Trust - MD-5700 (Trust Firmware)
admin
admin
Tvisto - TVT-RWROW54 (Tvisto Firmware)
admin
admin
U.S. Robotics - USR5461 (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR5462 (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR5463 (U.S. Robotics Firmware)

admin
U.S. Robotics - USR5466 (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR8000 (U.S. Robotics Firmware)
admin

U.S. Robotics - USR8054 (U.S. Robotics Firmware)
admin

U.S. Robotics - USR9106 (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR9108 (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR9108A (U.S. Robotics Firmware)
admin
admin
U.S. Robotics - USR9110 (U.S. Robotics Firmware)

admin
U.S. Robotics - USR9111 (U.S. Robotics Firmware)

admin
U.S. Robotics - USR9112 (U.S. Robotics Firmware)

admin
U.S. Robotics - USR9113 (U.S. Robotics Firmware)
admin
admin
Ubee - U10C019 (Ambit Firmware)
user
user
Ubiquiti - Nanostation 5 (Ubiquiti Firmware)
root
admin
Unicom - WEP-72104G-1 (Unicom Firmware)
admin
admin
Utstarcom - UT300R (Dataone Firmware)
admin
utstar
Utstarcom - UT300R2U (Dataone Firmware)
admin
admin
Utstarcom - WA3002G1 (Utstarcom Firmware)
admin
admin
Utstarcom - WA3002G4 (Dataone Firmware)
admin
admin
Viettel VT-AD02 (Viettel Firmware)
admin
admin
Vonage - VDV21-VD (Vonage Firmware)
router
router
Vood - 322 (Vood Firmware)
Conf
admin
VTech - IP8100-2 (VTech Firmware)

Wanadoo Livebox (Livebox Dutch Firmware)
admin
admin
Webstar - DPR2325 (Scientific Atlanta Firmware)

admin
Well - PTI-845 (Texas Instruments Firmware)
Admin
Admin
Westell - 2100 (Westell Firmware)
admin
admin
Westell - 327W (Bellsouth Firmware)
admin
admin
Westell - 327w (Verizon Firmware)
admin
password
Westell - 327w (Westell Firmware)
admin
admin
Westell - 6100 (Verizon Firmware)
admin
admin
Westell - 6100 (Westell Firmware)
admin
admin
Westell - 7500 (Verizon Firmware)
admin
admin
Westell - 9100 (Verizon Firmware)
admin
password
XAVi - 7968 (XAVi Firmware)
1234
1234
XAVi - X7868R (XAVi Firmware)
1234
1234
XAVi - X8821R (XAVi Firmware)
1234
1234
XAVi - X8824M (XAVi Firmware)

Zhone - 6211 (Paradyne Firmware)
admin
admin
Zhone - 6211-I2-xxx (Paradyne Firmware)
admin
admin
Zhone - 6211-I2-xxx (Zhone Firmware)
admin
admin
Zhone - 6218 (Paradyne Firmware)
admin
cciadmin
Zinwell - G220 (Zinwell Firmware)
admin
admin
Zonet - ZSR1134 (Zonet Firmware)
guest
guest
Zoom - X3 Model 5660A (Zoom Firmware)
admin
zoomadsl
Zoom - X4 Model 5551 (Zoom Firmware)
admin
zoomadsl
Zoom - X5 Model 5554 (Zoom Firmware)
admin
zoomadsl
Zoom - X5 Model 5565 (Zoom Firmware)
admin
zoomadsl
Zoom - X6 Model 5590C (Zoom Firmware)
admin
zoomadsl
ZTE - I600 WiMax (ZTE Firmware)

ZTE - ZXDSL 531B (ZTE Firmware)
admin
admin
ZTE - ZXDSL 831 (ZTE Firmware)
admin
admin
ZTE - ZXDSL 831C11 (PTCL Firmware)
admin
admin
ZTE - ZXDSL 831II (ZTE Firmware)
admin
admin
ZTE - ZXV10 W300 (ZTE Firmware)

ZyXEL - EQ-660R (ZyXEL Firmware)

1234
ZyXEL - MAX-210M1 (ZyXEL Firmware)

1234
ZyXEL - NBG318S (ZyXEL Firmware)

1234
ZyXEL - NBG334W (ZyXEL Spanish Firmware)

1234
ZyXEL - NBG419N (ZyXEL Firmware)

1234
ZyXEL - NBG420N (ZyXEL Firmware)

1234
ZyXEL - NBG460N (ZyXEL Firmware)

1234
ZyXEL - P-2302HWUDL-P1 (ZyXEL Firmware)

1234
ZyXEL - P-2602H-D1A (ZyXEL Firmware)

1234
ZyXEL - P-2602HW-D1A (ZyXEL Firmware)

1234
ZyXEL - P-2602HWT-F3 (ZyXEL Firmware)
admin

ZyXEL - P-2602R-D1A (ZyXEL Firmware)

1234
ZyXEL - P-320W (ZyXEL Firmware)

1234
ZyXEL - P-330W EE (ZyXEL Firmware)
admin
1234
ZyXEL - P-334U (ZyXEL Firmware)

1234
ZyXEL - P-335 (ZyXEL Firmware)

1234
ZyXEL - P-660H-D1 (ZyXEL Firmware)

1234
ZyXEL - P-660HN-F1Z (ZyXEL Firmware)

1234
ZyXEL - P-660H-T1 v2 (ZyXEL Firmware)

1234
ZyXEL - P660HT2 EE (ZyXEL Firmware)

1234
ZyXEL - P660HTW2 (ZyXEL Firmware)

1234
ZyXEL - P-660HW-D1 (ZyXEL Firmware)

1234
ZyXEL - P-660HW-D1 v2 (ZyXEL Firmware)

1234
ZyXEL - P-660HW-T1 (ZyXEL Firmware)

1234
ZyXEL - P-660HW-T1 v2 (ZyXEL Firmware)

1234
ZyXEL - P-660HW-T1 v3 (ZyXEL Firmware)

1234
ZyXEL - P660HW-T3 v2 (ZyXEL Firmware)

1234
ZyXEL - P-660R-61C (ZyXEL Firmware)

1234
ZyXEL - P-660R-D1 (ZyXEL Firmware)

1234
ZyXEL - P-660R-T1 (ZyXEL Firmware)

1234
ZyXEL - P-660R-T1 v2 (ZyXEL Firmware)

1234
ZyXEL - P-660R-T1 v3 (ZyXEL Firmware)
admin
1234
ZyXEL - P660RT2 (ZyXEL Firmware)

1234
ZyXEL - P-660W-T1 v2 (ZyXEL Firmware)

1234
ZyXEL - P-662HW-D1 (ZyXEL Firmware)

1234
ZyXEL - Prestige 2602H-61 (ZyXEL Firmware)

1234
ZyXEL - Prestige 2602HW-61 (ZyXEL Firmware)

1234
ZyXEL - Prestige 2602R-61 (ZyXEL Firmware)

1234
ZyXEL - Prestige 334W (ZyXEL Firmware)

1234
ZyXEL - Prestige 623ME-T1 (ZyXEL Firmware)
admin
1234
ZyXEL - Prestige 650H-E1 (ZyXEL Firmware)
admin
1234
ZyXEL - Prestige 650HW-31 (ZyXEL Firmware)
admin
1234
ZyXEL - Prestige 650R-33 (ZyXEL Firmware)
admin
1234
ZyXEL - Prestige 660H-61 (ZyXEL Firmware)
admin
1234
ZyXEL - Prestige 660RU-T1 (ZyXEL Firmware)

1234
ZyXEL - SP-660 (ZyXEL Firmware)

1234
ZyXEL - ZyWALL 10W (ZyXEL Firmware)

1234
ZyXEL - ZyWALL 2WG (ZyXEL Firmware)

1234

ALL GOVERNMENT OFFICE RELATED LINKS

2010-03-10T08:44:00.001+05:30

Obtain:

Birth Certificate

Caste Certificate

Tribe Certificate

Domicile Certificate

Driving Licence

Marriage Certificate

Death Certificate

Search More - How do I

Apply for:

PAN Card

TAN Card

Ration Card

Passport

Inclusion of name in the Electoral Rolls

Search More - How do I

Register:

Land/Property

Vehicle

With State Employment Exchange

As Employer

Company

.IN Domain

GOV.IN Domain

Search More - How do I

Check/Track:

Waiting list status for Central Government Housing

Status of Stolen Vehicles

Land Records

Cause list of Indian Courts

Court Judgments (JUDIS )

Daily Court Orders/Case Status

Acts of Indian Parliament

Exam Results

Speed Post Status

Agricultural Market Prices Online

Search More - How do I

Book/File/Lodge:

Train Tickets Online

Air Tickets Online

Income Tax Returns

Complaint with Central Vigilance Commission (CVC)

Search More - How do I

Contribute to:

Prime Minister's Relief Fund

Search More - How do I

Others:

Send Letters Electronically

Search More - How do I

Search for Available Services

Select from the menu to know the available Services contributed by Central Government Ministries/Departme nts, State Government, UT.

Advance Search

Recently Added Online Services

Tamil Nadu: Online application of marriage certificate for persons having registered their marriages

Tamil Nadu: Online District wise soil Details of Tamil Nadu

Tamil Nadu: View Water shed Atlas of Tamil Nadu

Tamil Nadu: E-Pension District Treasury Tirunelveli

Meghalaya: Search Electoral Roll Online by Name (2008)

Meghalaya: Search Electoral Roll Online by EPIC number (2008)

Meghalaya: Search Electoral Roll Online by House number (2008)

Himachal Pradesh: Revised Pay and Arrears Calculator-Fifth Pay

Meghalaya: Search Electoral Roll Online by Part number (2008)

Andhra Pradesh: Online Motor Driving School Information

Global Navigation

Citizens

Business (External website that opens in a new window)

Overseas

Government

Know India

Sectors

Directories

Documents

Forms

Acts

Rules

Schemes

Tenders

Home

About the Portal

Site Map

Link to Us

Suggest to a Friend

Help

Terms of Use

Feedback

Contact Us

An A-Z Index of the Apple OS X command line

2009-10-26T10:14:00.000+05:30

  alias     Create an alias •
 alloc     List used and free memory
 awk       Find and Replace text within file(s)
b
 basename  Convert a full pathname to just a folder path
 bash      Bourne-Again SHell
 bg        Send to background •
 bind      Display readline key and function bindings •
 bless     Set volume bootability and startup disk options.
 break     Exit from a For, While, Until or Select loop •
 builtin   Execute a shell builtin •
 bzip      Compress or decompress files
c
 cal       Display a calendar
 caller    Return the context of a subroutine call •
 case      Conditionally perform a command •
 cat       Display the contents of a file
 cd        Change Directory •
 chflags   Change a file or folder's flags
 chgrp     Change group ownership
 chmod     Change access permissions
 chown     Change file owner and group
 chroot    Run a command with a different root directory
 cksum     Print CRC checksum and byte counts
 clear     Clear terminal screen
 cmp       Compare two files
 comm      Compare two sorted files line by line
 command   Run a command (not a function) •
 complete  Edit a command completion [word/pattern/list] •
 continue  Resume the next iteration of a loop •
 cp        Copy one or more files to another location
 cron      Daemon to execute scheduled commands
 crontab   Schedule a command to run at a later date/time
 cut       Divide a file into several parts
d
 date      Display or change the date & time
 dc        Desk Calculator
 dd        Data Dump - Convert and copy a file
 declare   Declare variable & set attributes •
 defaults  Set preferences, show hidden files
 df        Display free disk space
 diff      Display the differences between two files
 diff3     Show differences among three files
 dig       DNS lookup
 dirname   Convert a full pathname to just a path
 dirs      Display list of remembered directories •
 diskutil  Disk utilities - Format, Verify, Repair
 disown    Unbind a job from the current login session •
 ditto     Copy files and folders
 dot_clean Remove dot-underscore files
 drutil    Interact with CD/DVD burners
 dscacheutil Query or flush the Directory Service/DNS cache
 dscl      Directory Service command line utility
 du        Estimate file space usage
e
 echo      Display message on screen •
 ed        A line-oriented text editor (edlin)
 enable    Enable and disable builtin shell commands •
 env       Set environment and run a utility
 eval      Evaluate several commands/arguments •
 exec      Execute a command •
 exit      Exit the shell •
 expand    Convert tabs to spaces
 expect    Programmed dialogue with interactive programs
           Also see AppleScript
 export    Set an environment variable •
 expr      Evaluate expressions
f
 false     Do nothing, unsuccessfully
 fc        Fix command (history)
 fdisk     Partition table manipulator for Darwin UFS/HFS/DOS
 fg        Send job to foreground •
 file      Determine file type
 find      Search for files that meet a desired criteria
 fmt       Reformat paragraph text
 fold      Wrap text to fit a specified width
 for       Loop command •
 fsck      Filesystem consistency check and repair
 fsaclctl  Filesystem enable/disable ACL support
 fs_usage  Filesystem usage (process/pathname)
 ftp       Internet file transfer program
g
 GetFileInfo Get attributes of HFS+ files
 getopt    Parse positional parameters
 getopts   Parse positional parameters •
 goto      Jump to label and continue execution
 grep      Search file(s) for lines that match a given pattern
 groups    Print group names a user is in
 gzip      Compress or decompress files
h
 hash      Refresh the cached/remembered location of commands •
 head      Display the first lines of a file
 hdiutil   Manipulate iso disk images
 history   Command History •
 hostname  Print or set system name
i
 id        Print user and group names/id's
 if        Conditionally perform a command •
 info      Help info
 install   Copy files and set attributes
j
 jobs      List active jobs •
 join      Join lines on a common field
k
 kextfind  List kernel extensions
 kickstart Configure Apple Remote Desktop
 kill      Stop a process from running
l
 l         List files in long format (ls -l)
 last      Indicate last logins of users and ttys
 launchctl Load or unload daemons/agents
 ll        List files in long format, showing invisible files (ls -la)
 less      Display output one screen at a time
 let       Evaluate expression •
 lipo      Convert a universal binary
 ln        Make links between files (hard links, symbolic links)
 local     Set a local (function) variable •
 locate    Find files
 logname   Print current login name
 login     log into the computer
 logout    Exit a login shell (bye) •
 lpr       Print files
 lprm      Remove jobs from the print queue
 lpstat    Printer status information
 ls        List information about file(s)
 lsregister Reset the Launch Services database
 lsbom     List a bill of materials file
 lsof      List open files
m
 man       Help manual
 mdfind    Spotlight search
 mdutil    Manage Spotlight metadata store
 mkdir     Create new folder(s)
 mkfifo    Make FIFOs (named pipes)
 more      Display output one screen at a time
 mount     Mount a file system
 mv        Move or rename files or directories
n
 net       Manage network resources
 netstat   Show network status
 networksetup Network and System Preferences
 nice      Set the priority of a command
 nohup     Run a command immune to hangups
 ntfs.util NTFS file system utility
o
 onintr    Control the action of a shell interrupt
 open      Open a file/folder/URL/Application
 osacompile Compile Applescript
 osascript Execute AppleScript
p
 passwd    Modify a user password
 paste     Merge lines of files
 pbcopy    Copy data to the clipboard
 pbpaste   Paste data from the Clipboard
 pico      Simple text editor
 ping      Test a network connection
 pkgutil   Query and manipulate installed packages
 plutil    Property list utility
 pmset     Power Management settings
 popd      Restore the previous value of the current directory •
 pr        Convert text files for printing
 printenv  Print environment variables
 printf    Format and print data •
 ps        Process status
 pushd     Save and then change the current directory
 pwd       Print Working Directory •
q
 quota     Display disk usage and limits
r
 rcp       Copy files between machines
 read      Read one line from standard input •
 readonly  Mark a variable or function as read-only •
 reboot    Stop and restart the system
 return    Exit a function •
 rev       Reverse lines of a file
 rm        Remove files
 rmdir     Remove folder(s)
 rpm       Remote Package Manager
 rsync     Remote file copy - Sync file tree (also RsyncX)
s
 say       Convert text to audible speech
 screen    Multiplex terminal, run remote shells via ssh
 screencapture Capture screen image to file or disk
 sdiff     Merge two files interactively
 security  Administer Keychains, keys, certificates and the Security framework
 sed       Stream Editor
 select    Generate a list of items •
 set       Set a shell variable = value •
 setfile   Set attributes of HFS+ files
 shift     Shift positional parameters •
 shopt     Set shell options •
 shutdown  Shutdown or restart OS X
 sleep     Delay for a specified time
 softwareupdate System software update tool
 sort      Sort text files
 source    Execute commands from a file •
 split     Split a file into fixed-size pieces
 stop      Stop a job or process
 su        Substitute user identity
 sudo      Execute a command as another user
 sum       Print a checksum for a file
 suspend   Suspend execution of this shell •
 sw_vers   Print Mac OS X operating system version
 system_profiler  Report system configuration
 systemsetup Computer and display system settings
t
 tail      Output the last part of files
 tar       Tape ARchiver
 tee       Redirect output to multiple files
 test      Condition evaluation •
 textutil  Manipulate text files in various formats (Doc,html,rtf)
 time      Measure Program Resource Use
 times     Print shell & shell process times •
 touch     Change file timestamps
 tr        Translate, squeeze, and/or delete characters
 trap      Execute a command when the shell receives a signal •
 traceroute Trace Route to Host
 true      Do nothing, successfully
 tty       Print filename of terminal on stdin
 type      Describe a command •
u
 ufs.util  Mount/unmount UFS file system
 ulimit    limit the use of system-wide resources •
 umask     Users file creation mask
 umount    Unmount a device
 unalias   Remove an alias •
 uname     Print system information
 unexpand  Convert spaces to tabs
 uniq      Uniquify files
 units     Convert units from one scale to another
 unset     Remove variable or function names •
 until     Loop command •
 users     Print login names of users currently logged in
 uuencode  Encode a binary file
 uudecode  Decode a file created by uuencode
 uuidgen   Generate a Unique ID (UUID/GUID)
 uucp      Unix to Unix copy
v
 vi        Text Editor
w
 wait      Wait for a process to complete •
 wc        Print byte, word, and line counts
 where     Report all known instances of a command
 which     Locate a program file in the user's path
 while     Loop command •
 who       Print all usernames currently logged on
 whoami    Print the current user id and name (`id -un')
 write     Send a message to another user
x
 xargs     Execute utility - passing arguments
 yes       Print a string until interrupted

An A-Z Index of the Bash command line for Linux

2009-10-26T10:11:00.001+05:30

  alias    Create an alias
 apropos  Search Help manual pages (man -k)
 apt-get  Search for and install software packages (Debian)
 aspell   Spell Checker
 awk      Find and Replace text, database sort/validate/index
b
 bash     GNU Bourne-Again SHell
 bc       Arbitrary precision calculator language
 bg       Send to background
 break    Exit from a loop
 builtin  Run a shell builtin
 bzip2    Compress or decompress named file(s)
c
 cal      Display a calendar
 case     Conditionally perform a command
 cat      Display the contents of a file
 cd       Change Directory
 cfdisk   Partition table manipulator for Linux
 chgrp    Change group ownership
 chmod    Change access permissions
 chown    Change file owner and group
 chroot   Run a command with a different root directory
 chkconfig System services (runlevel)
 cksum    Print CRC checksum and byte counts
 clear    Clear terminal screen
 cmp      Compare two files
 comm     Compare two sorted files line by line
 command  Run a command - ignoring shell functions
 continue Resume the next iteration of a loop
 cp       Copy one or more files to another location
 cron     Daemon to execute scheduled commands
 crontab  Schedule a command to run at a later time
 csplit   Split a file into context-determined pieces
 cut      Divide a file into several parts
d
 date     Display or change the date & time
 dc       Desk Calculator
 dd       Convert and copy a file, write disk headers, boot records
 ddrescue Data recovery tool
 declare  Declare variables and give them attributes
 df       Display free disk space
 diff     Display the differences between two files
 diff3    Show differences among three files
 dig      DNS lookup
 dir      Briefly list directory contents
 dircolors Colour setup for `ls'
 dirname  Convert a full pathname to just a path
 dirs     Display list of remembered directories
 dmesg    Print kernel & driver messages
 du       Estimate file space usage
e
 echo     Display message on screen
 egrep    Search file(s) for lines that match an extended expression
 eject    Eject removable media
 enable   Enable and disable builtin shell commands
 env      Environment variables
 ethtool  Ethernet card settings
 eval     Evaluate several commands/arguments
 exec     Execute a command
 exit     Exit the shell
 expect   Automate arbitrary applications accessed over a terminal
 expand   Convert tabs to spaces
 export   Set an environment variable
 expr     Evaluate expressions
f
 false    Do nothing, unsuccessfully
 fdformat Low-level format a floppy disk
 fdisk    Partition table manipulator for Linux
 fg       Send job to foreground
 fgrep    Search file(s) for lines that match a fixed string
 file     Determine file type
 find     Search for files that meet a desired criteria
 fmt      Reformat paragraph text
 fold     Wrap text to fit a specified width.
 for      Expand words, and execute commands
 format   Format disks or tapes
 free     Display memory usage
 fsck     File system consistency check and repair
 ftp      File Transfer Protocol
 function Define Function Macros
 fuser    Identify/kill the process that is accessing a file
g
 gawk     Find and Replace text within file(s)
 getopts  Parse positional parameters
 grep     Search file(s) for lines that match a given pattern
 groups   Print group names a user is in
 gzip     Compress or decompress named file(s)
h
 hash     Remember the full pathname of a name argument
 head     Output the first part of file(s)
 history  Command History
 hostname Print or set system name
i
 id       Print user and group id's
 if       Conditionally perform a command
 ifconfig Configure a network interface
 ifdown   Stop a network interface
 ifup     Start a network interface up
 import   Capture an X server screen and save the image to file
 install  Copy files and set attributes
j
 join     Join lines on a common field
k
 kill     Stop a process from running
 killall  Kill processes by name
l
 less     Display output one screen at a time
 let      Perform arithmetic on shell variables
 ln       Make links between files
 local    Create variables
 locate   Find files
 logname  Print current login name
 logout   Exit a login shell
 look     Display lines beginning with a given string
 lpc      Line printer control program
 lpr      Off line print
 lprint   Print a file
 lprintd  Abort a print job
 lprintq  List the print queue
 lprm     Remove jobs from the print queue
 ls       List information about file(s)
 lsof     List open files
m
 make     Recompile a group of programs
 man      Help manual
 mkdir    Create new folder(s)
 mkfifo   Make FIFOs (named pipes)
 mkisofs  Create an hybrid ISO9660/JOLIET/HFS filesystem
 mknod    Make block or character special files
 more     Display output one screen at a time
 mount    Mount a file system
 mtools   Manipulate MS-DOS files
 mv       Move or rename files or directories
 mmv      Mass Move and rename (files)
n
 netstat  Networking information
 nice     Set the priority of a command or job
 nl       Number lines and write files
 nohup    Run a command immune to hangups
 nslookup Query Internet name servers interactively
o
 open     Open a file in its default application
 op       Operator access
p
 passwd   Modify a user password
 paste    Merge lines of files
 pathchk  Check file name portability
 ping     Test a network connection
 pkill    Stop processes from running
 popd     Restore the previous value of the current directory
 pr       Prepare files for printing
 printcap Printer capability database
 printenv Print environment variables
 printf   Format and print data
 ps       Process status
 pushd    Save and then change the current directory
 pwd      Print Working Directory
q
 quota    Display disk usage and limits
 quotacheck Scan a file system for disk usage
 quotactl Set disk quotas
r
 ram      ram disk device
 rcp      Copy files between two machines
 read     read a line from standard input
 readonly Mark variables/functions as readonly
 reboot   Reboot the system
 renice   Alter priority of running processes
 remsync  Synchronize remote files via email
 return   Exit a shell function
 rev      Reverse lines of a file
 rm       Remove files
 rmdir    Remove folder(s)
 rsync    Remote file copy (Synchronize file trees)
s
 screen   Multiplex terminal, run remote shells via ssh
 scp      Secure copy (remote file copy)
 sdiff    Merge two files interactively
 sed      Stream Editor
 select   Accept keyboard input
 seq      Print numeric sequences
 set      Manipulate shell variables and functions
 sftp     Secure File Transfer Program
 shift    Shift positional parameters
 shopt    Shell Options
 shutdown Shutdown or restart linux
 sleep    Delay for a specified time
 slocate  Find files
 sort     Sort text files
 source   Run commands from a file `.'
 split    Split a file into fixed-size pieces
 ssh      Secure Shell client (remote login program)
 strace   Trace system calls and signals
 su       Substitute user identity
 sudo     Execute a command as another user
 sum      Print a checksum for a file
 symlink  Make a new name for a file
 sync     Synchronize data on disk with memory
t
 tail     Output the last part of files
 tar      Tape ARchiver
 tee      Redirect output to multiple files
 test     Evaluate a conditional expression
 time     Measure Program running time
 times    User and system times
 touch    Change file timestamps
 top      List processes running on the system
 traceroute Trace Route to Host
 trap     Run a command when a signal is set(bourne)
 tr       Translate, squeeze, and/or delete characters
 true     Do nothing, successfully
 tsort    Topological sort
 tty      Print filename of terminal on stdin
 type     Describe a command
u
 ulimit   Limit user resources
 umask    Users file creation mask
 umount   Unmount a device
 unalias  Remove an alias
 uname    Print system information
 unexpand Convert spaces to tabs
 uniq     Uniquify files
 units    Convert units from one scale to another
 unset    Remove variable or function names
 unshar   Unpack shell archive scripts
 until    Execute commands (until error)
 useradd  Create new user account
 usermod  Modify user account
 users    List users currently logged in
 uuencode Encode a binary file
 uudecode Decode a file created by uuencode
v
 v        Verbosely list directory contents (`ls -l -b')
 vdir     Verbosely list directory contents (`ls -l -b')
 vi       Text Editor
 vmstat   Report virtual memory statistics
w
 watch    Execute/display a program periodically
 wc       Print byte, word, and line counts
 whereis  Report all known instances of a command   
 which    Locate a program file in the user's path.
 while    Execute commands
 who      Print all usernames currently logged in
 whoami   Print the current user id and name (`id -un')
 Wget     Retrieve web pages or files via HTTP, HTTPS or FTP
 write    Send a message to another user
x
 xargs    Execute utility, passing constructed argument list(s)
 yes      Print a string until interrupted
 .        Run a command script in the current shell
 ###      Comment / Remark

Top 50 Terminal Commands

2009-10-26T10:09:00.002+05:30

Terminal

Hey

Terminal is Mac OS X way into the command line world. It is designed for you to typing in specific commands that you would not be able to do otherwise. This is great for customizing your Mac and unveiling hidden features. It is also a good way to destroy you system because you screwed something up.

What I have done is crawl the web look of the Top 50 Terminal commands. These commands are designed to make you make look cooler, act quicker or be generally useful. I have tried to keep commands down to one line, so they are simple and effective to use. Each item will include a description of what it does as well as an appropriate picture is necessary. Many of these commands appear as seperate posts all over the web, but never in one big list. I have tried to keep the amount of sudo commands down to a minimum as this can easily destroy your system. Especially if you go sudoing every thing. I have tried to give the best description I can, if you have a problem leave a comment and I will see if I can solve it. The list is in no particular order. Most of the commands can be reverted by replacing YES with NO and 1 with 0, the opposite. Most of these commands are Leopard compatible and many may not work on Tiger. Try them and see what happens.

1) 2D Dock

This quite a popular hack for the people running Leopard and don’t like the 3D feel. It changes the 3D dock to a flat 2D version. To enter copy and past the following code.

defaults write com.apple.dock no-glass -boolean YES killall Dock

2) Gradient Behind A Stack Item

One of my favourite hacks that enables you to put a small gradient behind an icon. I think this should be enabled by default.

defaults write com.apple.dock mouse-over-hilte-stack -boolean YES killall Dock

3) Add A Message To The Login Window

This little Terminal command enables you to add a message of your choice to the Login window. Pretty cool and deserved a screenshot if I new how to take on while not logged in. Warning it’s a sudo command which can be dangerous.

sudo defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Your Message"

Replace “Your Message” with the message of your choice, don’t make it to long. If you want to revert it do the following.

sudo defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText ""

4) Add An Exposè Button To The Desktop

If you have reconfigured the F9 and F10 keys to something different you may want to use exposè. This hack adds a bigish blue button onto the desktop to enable you to use exposè. Clicking on it shows all the windows from one application (F10 default), option clicking it shows all windows (F9 default).

defaults write com.apple.dock wvous-floater -bool YES killall Dock
5) Address Book Debug Menu

If you have some trouble with Address Book it may be useful to open up the debug menu as well as this use some of the hidden features. Make sure address book is closed first before applying the code. If you want to revert it remove YES in the string.

defaults write com.apple.addressbook ABShowDebugMenu -bool YES
6) Increase Dock Magnification Size

This little hack lets you increase the size of the magnification of the dock icons. Don’t go past 512.

defaults write com.apple.dock largesize -int 512

7) Increase Desktop Icon Size

If you want massive icons on you desktop this little hack lets you increase the icons to 512 pixels x 512 pixels. This is massive, may slow down on older machines. I don’t think it goes larger than 512.

defaults write com.apple.finder DesktopViewOptions -dict IconSize -integer 512 killall Finder

8) Changing the Format Of Screen Shots

If you use the screen shot function, you may want to change the format of the images, this is not easily done normally. Where jpg is in the code you can change this to the format your want, png bmp gif etc. You need to log out and back in again, or restart for the changes to take effect.

defaults write com.apple.screencapture type jpg

9) Change The Login Picture

If you get a bored of the space picture used on the login screen, you can change it with this little bit of code. Change the file location in the second half of the string to the exact file location of your chosen picture.

defaults write /Library/Preferences/com.apple.loginwindow DesktopPicture "/System/Library/CoreServices/Finder.app/Contents/Resources/vortex.png"

10) Change The Loading Bar In Safari To A Pie Chart

This is a Safari 3 hack, so it might not work. This changes the blue bar that goes across the address bar into a small blue pie chart. Insert false instead of true to reverse.

defaults write com.apple.Safari DebugUsePieProgressIndicator -bool true
11) Clear The Open With Menu

If you right click on a file you can open it with many applications. Sometimes your OS can get a little confused and list many applications. This is to clear this list and start again. The code below is all on one line.

/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ LaunchServices.framework/Versions/A/Support/lsregister -kill -r -domain local -domain system -domain user

12) Change The Delay When Dragging Windows In Spaces

This simple hack changes the delay time it takes to drag windows around in spaces, its currently set to 0.75

defaults write com.apple.dock workspaces-edge-delay -float 0.5

13) Disable Dashboard

If you don’t want or like the dashboard running you can disable it. Change YES to NO to enable it again.

defaults write com.apple.dashboard mcx-disabled -boolean YES killall Dock

14) Enable Double Scroll Arrows

This little hack enables the double arrow set for up and down, left or right, to be at both ends of the scroll bar. Handy if you like the double arrows. Use System Preferences to reset.

defaults write “Apple Global Domain” AppleScrollBarVariant DoubleBoth

15) Disable Tooltips In Safari

This quick little hack for Safari that removes the tooltips you get when you hover over certain elements.

defaults write com.apple.Safari WebKitShowsURLsInToolTips 0

16) Increase The Dock Size

Command #6 enables you to change the magnification. This command enables you to change the size of the dock. Use the sliders in System Preferences to reduce this size. Don’t go larger 256.

defaults write com.apple.dock tilesize -int 256

17) Disable the Crash Dialog Box

This disables the quit dialog box when an application crashes. Type prompt to enable again.

defaults write com.apple.CrashReporter DialogType none

18)Drag A Widget Onto The Desktop

Probably one of the coolest hacks. This command enables widgets to be placed onto the desktop. Drag a widget around and press F12 to drag it onto the desktop. Repeat the process again to drag a widget back onto the dashboard. This may need you to log off or restart for it to take effect.

defaults write com.apple.dashboard devmode YES

19) Enable Debug Menu In Safari

Adding debug menus to programs is great as you can access a whole range of features. This one is for Safari.

defaults write com.apple.Safari IncludeDebugMenu 1

20) Enable The Path View In Finder

One of may favourite hacks as it lets you see the current path of the Finder window you are in. Its great if you work with a lot of windows.

defaults write com.apple.finder _FXShowPosixPathInTitle -bool YES

21)Enable Time Machine On Unsupported Drives

Another favourite hack of mine, simply because it enable Time Machine to work on unsupported drives such as a NAS. Use with caution as it is unsupported.

defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1

22) Enable Web Inspector

This is a very detailed web inspector that enables you to find out specific information about a page. It is accessible through the debug menu but this enables you to use it without. You can quickly access it through right-click.

defaults write com.apple.Safari WebKitDeveloperExtras -bool true

23) Enable Debug in iCal

Another debug menu (I like debug menus) this time its for iCal. You need to restart iCal for the changes to take effect.

defaults write com.apple.iCal IncludeDebugMenu YES

24) Enable Quit In Finder

This is a very useful command for anyone who does a lot of fiddling and needs to quit Finder.

defaults write com.apple.finder QuitMenuItem -bool YES killall Finder

25) Force Mail To Display In Plain Text

If you have problems with HTML emails or you just want emails to be displayed in plain text use the following command. You need to restart Mail for the changes to take effect. Replace with false to revert.

defaults write com.apple.mail PreferPlainText -bool TRUE

26) Increase Time Machine Backups

If you do a lot of work on you Mac, and you want time machine to back up more frequently you need to change the value. It is in seconds. The default is set to an hour which is 3600. Change this value to suit, half and hour is 1800 seconds.

sudo defaults write /System/Library/LaunchDaemons/com.apple.backupd-auto StartInterval -int 1800

27) Kill A Process

Sometimes you just need a process to stop running. If you want to kill it in Terminal with out using Activity Monitor, find the process ID (In Activity Monitor) and then use the following command. Only really useful if you don’t like much clicking or are writing a program.

kill PID 478

28) Let Terminal Talk

If you are bored one day you can get Terminal to quickly talk anything back to you using the voice engine. Replace hello with anything you want.

say hello

29) Make Hidden Applications Icons Transparent

If you hide a lot of applications you can make there icons transparent in the dock. A very good visual clue.

defaults write com.apple.Dock showhidden -bool YES killall Dock

30) Make The Dock Spring Loaded

Makes the dock spring loaded so you can open files or windows from within the dock.

defaults write com.apple.dock enable-spring-load-actions-on-all-items -boolean YES

31) Recent Applications Stack

This command creates a new stack in your dock so you can view the recently used Applications.

defaults write com.apple.dock persistent-others -array-add '{ "tile-data" = { "list-type" = 1; }; "tile-type" = "recents-tile"; }'

32) Change The Arrows In iTunes

Normally the arrows in iTunes link to the music store, adding this command enables you to search your library. You need to click on the song first for the arrows to appear.

defaults write com.apple.iTunes invertStoreLinks -bool YES

33) Pin The Dock To The Left

This command pins the dock to the left hand side of the screen. I’m not sure what happens if you have the dock on the left or right edge. Replace start with middle to revert.

defaults write com.apple.dock pinning -string start

34) Pin The Dock To The Right

Exactly the same as above except it pins the dock to the right hand side of the screen.

defaults write com.apple.dock pinning -string end

35) Play Star Wars Episode IV

Using a simple telnet address you Terminal will connect in and play Star Wars Episode IV in its ASCII glory.

telnet towel.blinkenlights.nl

36) Quicklook A File

Quicklook is a great little application in Leopard. The command lets you quicklook a file right in Terminal. First you need to change the folder by using the “cd” command and then the folder you want. To enable this command to work you need to type the file name exactly.

qlmanage -p "Jaguar Aqua Graphite.jpg"

37) Disable The Spotlight Icon

This command removes the spotlight icon. Type 755 to re-enable it, instead of 0.

sudo chmod 0 /System/Library/CoreServices/Spotlight.app killall Spotlight
38) Remove The Stripes In List View

A simple hack that removes the alternating stripes in list view in finder.

defaults write com.apple.finder FXListViewStripes -bool FALSE killall Finder

39) Turn The Menu Bar White

If you don’t like the menu bar in its cool transparent glory you can change it so it appears white. This requires a password and you will need to restart you mac.

sudo defaults write /System/Library/LaunchDaemons/com.apple.WindowServer 'EnvironmentVariables' -dict 'CI_NO_BACKGROUND_IMAGE' 1

40) Turn The Menu Bar Grey

If you don’t like the white version of the menu bar you can change it so it appears gret.

sudo defaults write /System/Library/LaunchDaemons/com.apple.WindowServer 'EnvironmentVariables' -dict 'CI_NO_BACKGROUND_IMAGE' 0

41) Revert The Menu Bar Back To Default

If you prefer the transparent menu bar and you want it back type the following into Terminal.

sudo defaults delete /System/Library/LaunchDaemons/com.apple.WindowServer 'EnvironmentVariables'

42) Set The Expanded Print Dialogue As Default

If you want access to a lot of the extra print menus on by default you can use the following command to enable you to do this. Requires restart.

defaults write -g PMPrintingExpandedStateForPrint -bool TRUE

43) Set The Expanded Save Dialogue As Default

Similar as the print dialogue this sets the save dialogue to the expanded view as default. Requires restart.

defaults write -g NSNavPanelExpandedStateForSaveMode -bool TRUE

44) Set The Screen Saver As The Wallpaper

This command sets the currently selected screen saver as the desktop background. Use command + c or . to stop while in Terminal. Alternatively you can use wallsaver.

/System/Library/Frameworks/ScreenSaver.framework/Resources/ScreenSaverEngine.app/Contents/MacOS/ScreenSaverEngine -background

45) Set The History Limit In Safari To A Number Of Items

If you don’t want a massive history you can set it to a limited number of items. Change the number to suit.

defaults write com.apple.Safari WebKitHistoryItemLimit 2000

46) Set The History Limit In Safari To A Number Of Days

Similar to the hack above you can set the number of days Safari keeps its history.

defaults write com.apple.Safari WebKitHistoryAgeInDaysLimit 30

47) Show Hidden Files In Finder

A lot of the files in Finder are hidden. This is probably a wise choice by Apple as there are countless things you can screw up. But if you want to take a look at how many there are and what they are you can show them within Finder. Be careful as these files are needed by the system, if you screw something up don’t come complaining. Repeat the command with false to revert. The image above, click for larger version, show the amount of files there actually is, with these hidden there is only 4 shown normally.

defaults write com.apple.finder AppleShowAllFiles TRUE

48) Skip Disk Image Verification

If you want to save some time you can skip the disk image verification for a disk image. Potentially risky as a whole load of things could go wrong without you knowing.

com.apple.frameworks.diskimages skip-verify TRUE

49) Show SubFolders In Graphical Format In Terminal

This is a very cool little hack that enables you to show an ASCII graphical view of sub folders. Use the cd command to change to a directory other wise the command will list every folder. For more information look here.

ls -R | grep ":$" | sed -e 's/:$//' -e 's/[^-][^\/]*\//--/g' -e 's/^/ /' -e 's/-/|/'

50) Speed Up Dialogue Boxes

Most dialogue boxes have a cool animation effect that looks cool. If you want to speed this up you can change the speed at which is renders so it appears almost instantly. The default is 0.2.

defaults write NSGlobalDomain NSWindowResizeTime 0.01

2009-09-03T13:49:00.000+05:30

Hyderabad, September 03: A powerful Indian politician and four other people were killed when their helicopter crashed in the dense jungles of southern India during a pounding rainstorm, media reported.

The helicopter carrying Andhra Pradesh state Chief Minister Y.S.R. Reddy, 60, lost contact with air traffic controllers Wednesday morning as heavy rains pelted the region, setting off a frantic 24-hour search operation involving the army, air force and police in an area infested with Maoist rebels.

On Thursday morning, commandoes and police finally reached the site of the crash after hacking through the jungles and found the bodies of all five people who had been on the aircraft, including Reddy, Press Trust of India reported, quoting officials from the ruling Congress Party.

Television also reported that five bodies had been found at the site about 170 miles (275 kilometers) south of the state capital, Hyderabad. There was no immediate official confirmation of Reddy’s death.

On Thursday, rescue teams crossing dense jungle and hilly terrain on foot reached the site, 8 kilometers (5 miles) from the nearest village, Rudrakodur.

There was no immediate indication that the helicopter was shot down.

The privately owned helicopter took off from Hyderabad and lost contact with air traffic controllers about 45 minutes into the flight.

Reddy, who was on an inspection tour of various rural social welfare programs, was accompanied by a bodyguard, two officials and a photographer.

Reddy, who belongs to Prime Minister Manmohan Singh’s ruling Congress Party, had won a second term in office in elections held this year.

The rebels, who say they are inspired by Chinese revolutionary leader Mao Zedong, have been fighting for more than three decades in several Indian states, including Andhra Pradesh, demanding land and jobs for agricultural laborers and the poor.

While the militants have a great deal of power in parts of rural India, they have little day-to-day control outside of isolated forests and villages.

More than 6,500 people have been killed in the violence.

From Wednesday till now -

- The chopper took off at 8.45 am for Chittoor and was scheduled to arrive at 10.45 am. Earlier reports suggested that the chopper had landed in the middle of thick forest, said to be affected by the Maoist activities.

- Air Traffic Control (ATC) sources said the chopper went off the radar due to heavy rains. The helicopter lost contact with Air Traffic Controller at the Begumpet Airport in Hyderabad and since then there has not been any contact with the Chief Minister.

- There has been no contact with the Andhra Pradesh Chief Minister, whose helicopter has been missing since 9:30 am after he took off from Hyderabad Wednesday monring, Home Ministry sources said earlier. "There has been no contact established with the helicopter," sources in the ministry said. Helicopters involved in the search had been called back due to bad weather but foot search will continue. 600 CRPF jawans were deployed for the search operation.

- Massive search operations were launched with seven Air Force helicopters and 5000 CRPF personnel pressed to find the Chief Minister and others aboard the chopper.

- Search operations were aborted because of bad weather in the area, which in any case is a challenge due to dense forest. The area is said to be infested with Naxals and Tigers.

- The air-search operations began at 6.00 to 6.30 on Thursday morning and there are reports of YSR's chopper being located. There is no news of survivors yet.

Removing Entries from Right-Click Menu

2009-08-24T22:28:00.001+05:30

Sometimes, instead of adding entries, maybe your right-click menu has become too big. Eventually right-click menu’s (like mine) can take forever to load. If you would like to, you can definitely remove some of those useless options. Ready for a faster right-click menu? Let’s do it!

Step 1: Go to “Start,” “Run,” and type regedit.

Step 2: Navigate to HKEY_CLASSES_ROOT\*\shellexe\ContextMenuHandlers

Step 3: Find the folder that indicates the entry in the start menu and right-click. Select “Remove.”

Remove Entries for Certain File Types

Maybe your right-click menu has become way too long, and takes forever to load (like mine). If you would like to only remove entries for certain file types, simply go to the Folder Options menu like we did before and you may do the following:

Step 1: Go to “My Computer.” Click “Tools” and then click “Folder Options.”

Step 2: Click on the tab labeled “File Types.”

Step 3: Find a file type and select it.

Step 4: Find one of the entries and select “Remove.”

Now go out there and tweak!

More tweaks next time in WinHacks!

Adding Entries for Certain File Types in Right-Click Menu

2009-08-24T22:25:00.000+05:30

Sometimes you may have a certain file type, e.g. .doc (Word document) that you would like to do something special with, e.g. open .doc as an email attachment. Today we will be looking at how to do just that. In other words, show you how to add additional options to right click menu when used on certain files. So let’s get started!

Step 1: Go to “My Computer.” Click “Tools” and then click “Folder Options.”

Step 2: Click on the tab labeled “File Types.”

Step 3: Find a file type and select it. Then click “Advanced.”

Step 4: Click “New.” In the Action field type the name that you would like to appear.

Step 5: In the Application used to perform action textbox enter the path of the application you would like the file to load in (with quotes). E.g. “C:\Program Files\Mozilla Firefox\firefox.exe”.

Step 6: Click “OK” and you have your own customized right-click menu!

Disable the "Turn Off Computer" in windows XP?

2009-07-14T15:26:00.001+05:30

this is a great idea for those Admin users who want to restrict the common users to shutdown public computer in common areas. You can disable the "Turn off Computer" option on the start menu and a common user will not "Turn Off, Restart and Stand By" a computer.

so here we go

You will need to be logged into your computer with administrative rights.

LOcate HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer in your registry editor.

On right side panel, right click to create a new DWORD value with the name NoClose.
Done restart your computer and see the changes.

Note( if you want to enable "Turn Off Computer" option in start menu simply change the value of data box to 0 or delete NoClose DWORD item.)

Youtube URL tricks

2009-07-14T15:24:00.001+05:30

Instead of just searching and playing on youtube, here are some top Youtube URL tricks that you should know about :

View high quality videos

Youtube gives you the option to switch to high quality videos for some of the videos, however you can check if a video is available in high quality format by appending ‘&fmt=18′(stereo, 480 x 270 resolution) or ‘&fmt=22′(stereo, 1280 x 720 resolution) for even higher quality.

Embed Higher Quality Videos

While the above trick works for playback, if however you want to embed hig quality videos you need to append “&ap=%2526fmt%3D18″ and “&ap=%2526fmt%3D22″ to the embed url.

Cut the chase and link to the interesting part

Linking to a video where the real action starts at 3 minutes 22 seconds, wondered if you could make it start at 03:22? You are in luck. All you have to do is add #t=03m22s (#t=XXmYYs for XX mins and YY seconds) to the end of the URL.

Hide the search box

The search box appears when you hover over an embedded video. To hide the search box add ‘&showsearch=0′ to the embed url.

Embed only a part of Video

Just append ‘&start=30′ to skip first 30s of the video. In general you can modify the value after start= to the number of seconds you want to skip the video for.

TCP/IP Addressing

2009-07-13T12:27:00.000+05:30

This article goes in depth on TCP/IP addressing with the use of subnet masks. Before you continue, be sure you have a good grip on counting with binary, we have provided a quick binary primer if you need a refresher.

MAC Address - Review

A MAC address (Media Access Control) is a unique address given to each network host (this includes computers, PLCs - programmable logic controllers, routers, switches, and wireless devices. This does not include hubs). In other words anything that makes a decision about the flow of network traffic or talks on the network itself. For more information, read our article on MAC addresses.

Clue: Think of a MAC address like a person's diver's license number, it is just a number that is unique from anyone else's. Now think of an IP address like a person's mailing address. The mailing address group people into zones by using the zip code, city, state, and street identifiers.

Enter the IP address

The IP address provides the grouping capability that MAC addresses do not. An IP address not only provides a grouping hierarchy but can be freely assigned and moved from one host to another. This grouping capability allows a host to differentiate local computers and distant ones so that communication to a host that is local could be direct and communication to a distant host could be efficiently routed.

Big Picture

Ok that is a quick discussion of why you need TCP/IP and its routing capabilities. Here is the real meat: TCP/IP addressing is actually in binary; even though everyone is used to seeing TCP/IP addresses using four numbers ranging from 0 to 255 the reality is, the address is binary but for us humans it is displayed in decimal format. If you convert an IP address from decimal numbers to binary, you will get four 8-bit binary numbers for a total of 32 bits.

I highly recommend that you brush up on binary before going any further. Make sure you can convert between decimal and binary numbers. Once again, refer to our tutorial on binary.

The Internet before subnet masks

Early on, to get IP address space on the Internet you were assigned a class A, B, or C block of addresses. A class A block was an address similar to: 124.xxx.xxx.xxx Where the Xs are address numbers between 0 and 255.

Since each segment of an IP address is 8 bits long, and there are 4 segments, it takes 32 bits to make up a whole IP address. From the example above, we can calculate the total number of hosts available on a class A address block. Since the last 3 segments are free to assign to the hosts in the address block, the total number is 2 to the power of 24 (32 bits in total address length, minus 8 bits used up for the network block address that was assigned; 124.XXX.XXX.XXX it is the 124 in this case). That is almost 16.8 million IP addresses! Class B address blocks were: 212.156.XXX.XXX (2 to the 16th power) 65.5 thousand addresses and a Class C network would give you 256 addresses. Below is a table of how each class network was divided.

Class	Address Range	Total Hosts	Number of blocks
A	0-127.XXX.XXX.XXX	16.7 Million	128
B	128.0.0.0- 191.255.255.255	65.5 Thousand	16,384
C	192.0.0.0- 223.255.255.255	256	2 million
D & E	224.0.0.0- 255.255.255.255	N/A	N/A

I also listed the Classes D & E which are out of the scope of this article. Class D networks are for multicast and class E have been reserved.

There is something significant about the addresses for a Class A, B, and C Block. If you were to convert the decimal value of each class to binary you can see that there is a pattern in the most significant bits. See table below:

Class	First 4 bits
A	0XX
B	10X
C	110

Although this pattern made it immediately obvious to routers what type of address block they were dealing with, it was also very innefficient with the address space.

Enter the Subnet Mask

Similar to the first 3 bits of an IP address that make a class, the subnet mask is now used instead to determine the size of an address block. Most people are familiar with an address followed by a subnet mask of 255.255.255.0 Calculated out, this subnet mask allows for up to 254 hosts. So if the address of a computer is 63.26.15.5 and the subnet mask is 255.255.255.0 there are 253 other addresses on this network block ranging from 63.26.15.1 - 63.26.15.254 (the .0 and .255 addresses are reserved and cannot be asigned to a network host).

From this a newbie can easily surmise that an address of 45.52.75.10 with a subnet mask of 255.255.0.0 allows for 256 times 256 minus 2 addresses (65,534 addresses). These addresses range from 45.52.0.1 to 45.52.255.254 Again we subtract two from the total number because of those two reserved addresses that are at the beginning and end of the block.

Clue: Determining the number of hosts in your subnet is always done by caculating the number of bits used for the host address (there are 8 bits for a mask of 255.255.255.0 for example). Set 2 to the Nth power where N is the total number of host addrress bits, then subtract 2.
In other words (2^8) - 2=254.

Clue: All address blocks (subnets) will be 2 less of each power of 2: 6, 14, 30, 62, 126, 254..... That is because in each address block we must reserve space for a broadcast and a network ID. The network ID is the first address (such as 192.168.0.0) and the broadcast is the last address (192.168.0.255)

Unfortunately if you leave yourself with only the ability to declare subnet masks using the number 255 or 0 you have very few options. The smallest subnet you know how to make is 254 hosts. The next article is where the real lesson begins!

However, if you are not up to learning how to calculate your own masks, we have also provided a subnet mask reference table. Just be warned that we will take to responsibility for your sleepless nights as you ponder how a subnet mask actually works.

Calculating Subnet Masks

2009-07-13T10:33:00.000+05:30

Subnet Masks in Binary

The easiest way to explain a subnet mask is by looking at the IP address and subnet mask in its binary format. Before you continue, be sure you have a good grip on counting with binary, we have provided a quick binary primer if you need a refresher. If you do not care for the intricasies of calculating a subnet mask and just need to know the correct mask for your situation, we have provided a reference table.

Not to mention you should already be familiar with the IP address. This article explains the basic use of an IP address and why we need a subnet mask.

A regular IP address when converted to binary is 32 bits in length, each segment being 8 bits long. Refer to our first address example of 63.26.15.5 with a subnet mask of 255.255.255.0 in binary.

Network and Host Addresses

In this example, it is only the last segment that changes from one host to another; this last segment is known as the host address; the first 3 segments, for this example, make up the network address. If we were to use an address with a subnet mask of 255.255.0.0 then the first 2 segments would make up the network address and the last two would be the host address. This is the kind of effect the subnet mask has on your IP address. It determines how big your network group is.

With that said, to go into any deeper detail we must look at the addressing in binary. Since we are just dealing with 32 binary bits we can stop grouping them in sets of 8 bits per segment and deal with them as a 32 bit string. Now when you create a mask, it does not have to be limited to groups of 8 bits (and it can have man more values than 255 or 0). These are called Variable Length Subnet Masks (VLSMs). By calculating out your VLSM you can create any block of IP addresses in sizes of powers of 2 minus 2.

For example, We can create a mask that only allows for 14 hosts (remember 14 hosts is 2 to the power of 4 then we subtract 2). Knowing that it is 2 to the power of 4, we know that we have an address block (subnet) with 4 bits for the hosts. That leaves a remaining 28 bits for the network address, also known as a /28. Now that we know the size of the network block we want (14 hosts) let's calculate the subnet mask that we would use for a /28 network.

CLUE: A block of IP addresses is referred to as a subnet. Because of this that is how subnet masks got their name,they are key into declaring how large a subnet actually is.

First map out your binary numbers again and keep them in groups of 8 bits each. That makes it easy to get the decimal number for each segment. Since our network size is 28 bits long we represent that with a string of 28 1s and the remainings 4 bits as 0s. So the first 3 segments (of 8 bits each) are all 1s. The decimal equivalent of an 8 bit segment of all 1s is 255. So the first 3 segments are 255. That leaves us with 4 bits left in the mask for the last segment. It will look something like this:

128 64 32 16 8 4 2 1
 1  1  1  1 0 0 0 0

To make it easy, we have included a subnet mask calculator. This calculator converts decimal IP addresses and Subnet Masks. You can also optionally enter a destination IP address to see the results.

Add up the bits that are flagged with a one and we see that the last segment of the subnet mask with 14 hosts ( 16 - 2 ) is 240. For a subnet mask of 255.255.255.240 That is pretty much it with creating subnet masks, but now you need to learn a new rule about addressing.

IP Addresses with VLSMs

When you use a subnet mask of 255.255.255.192 what you have essentially done is divided up your last segment into 4 blocks (subnets). Using the binary of the last segment we can see our subnet mask only uses the first 2 most significant bits. Recall that the network address is made up from all the bits that line up with the 1s in the subnet mask. So in this case the network address 'overflows' into the last segment because it has two bits available in the last segment. The host address has the last 6 bits in the last segment. Let's see what this subnet masks looks like:

128 64 32 16 8 4 2 1
 1  1  0  0 0 0 0 0

First lets say we have a network subnet of 10.10.10.X and we are using the same subnet mask 255.255.255.192 Our network host (HOST1) is currently using the address 10.10.10.75 Now lets display the binary of the last segment for both the subnet mask and the address of our host.

            |
     128 64|32 16 8 4 2 1
SM      1  1| 0  0 0 0 0 0
HOST1   0  1| 0  0 1 0 1 1
           |
Network       Host

Notice the bar I drew in that divides the bits of the last segment. The last 6 bits on right are the host bits, we know this because it matches up with all the 0s in the subnet masks. Fromt he same logic we know about all the bits for the entwork masks because of the same reason, the network address matches up with all the 1s in the subnet mask.

So let's calculate the first and last addresses that can exist on the subnet of HOST1. To do this, that the ful address of the host and make the host side all 0s and do it again with all 1s. Look at the example:

            |
     128 64|32 16 8 4 2 1
SM      1  1| 0  0 0 0 0 0=192
HOST1   0  1| 0  0 1 0 1 1=75
0s      0  1| 0  0 0 0 0 0=64
1s      0  1| 1  1 1 1 1 1=127
           |
Network       Host

The valid host addresses in the same subnet as our sample host are in the range of 10.10.10.64 - 10.10.10.127
Notice how there is specific requirements of the available addresses in the subnet.

So why doesn't a host with the IP address of 10.10.10.33 and SM 255.255.255.192 (HOST2) see HOST1 as a local computer?
Let's display all the data in binary:

            |
     128 64|32 16 8 4 2 1
SM      1  1| 0  0 0 0 0 0=192
HOST1   0  1| 0  0 1 0 1 1=75
HOST2   0  0| 1  0 0 0 0 1=33
           |
Network       Host

Look at the first 2 bits in the network section of the each host. HOST1 and HOST2 have DIFFERENT network addresses! So a subnet mask plays a much more complicated role than just declaring the size of a subnet. It also limits that addresses you can use in a subnet. In our last example we noticed that a subnet mask of 255.255.255.192 will create a subnet of 64 addresses (for 62 hosts). But if you tried to start the addressing at 10.10.10.32 - 10.10.10.95 what actually happens is that your subnet overlapps into two separate subnets. Just do the calculations and you will see (just as I displayed above) that the network addresses of the first 32 hosts in the invalid subnet will have a different network address than the last 32 hosts in the invalid subnet.

Application

Learing how to create and declare subnet masks is not only useful for the technicians of ISPs who are assigning subnets to their customers. Using subnet masks is also key for firewalls and access lists. If you group IP addresses together based on host type (such as assigning all the workstations the addresses 10.10.10.128 - 10.10.10.254 and the servers the addresses 10.10.10.1 - 10.10.10.127) but use the subnet mask 255.255.255.0 (so that the hosts will communicate directly) you can then use masking as a way to apply different access rules with your firewall without having to specify each IP address individually.

Windows XP/2000 Commands & Tools

2009-07-13T10:32:00.001+05:30

Here's the ultimate Windows XP/2000 command list that will make any Linux user feel at home at the command prompt. A lot of these commands are intended for administrating a network, but they are great for savvy home users as well. We even listed which OS you need for these commands.

at (windows XP/2000)
Scheduling utility.
bootcfg (XP only)
This utility allows you to set up your boot options, such as your default OS and other loading options.
cacls (XP, 2000, & NT4.0)
Changes the ACLs (security Settings) of files and folders. Very similar to chmod in Linux.

comp (XP & 2000)
This utility is very similar to diff in Linux. Use the /? switch to get examples of command usage.

contig (works with NT4.0 and newer)
A great defrag utility for NTFS partitions.

control (XP only) - unpublished!
Allows you to launch control panel applets from the command line.

control userpasswords2

, for example will launch a helpful local user admin utility.

defrag (XP only - NT4.0 and Win2k use contig)
Yes, XP comes with a command line disk defrag utility. If you are running Win2k or NT4.0 there is still hope. Contig is a free defrag program that I describe on the defrag page.

diskpart (XP only)
Use this command to manage your disk partitions. This is the text version for the GUI Disk Manager.

driverquery (XP only)
Produces a list of drivers, their properties, and their versions. Great for computer documentation.

eudcedit (XP only) -

unpublished!

Private Character editor. Yes with this program built into Windows XP you can create your own font!

findstr
Find String - similar to Linux's Grep.

fsutil (XP only) - unpublished!
This is a utility with a lot of capability. Come back soon for great examples.

getmac (XP & 2000)
This command gets the Media Access Control (MAC) address of your network cards.

gpresult (XP & 2000)
This generates a summary of the user settings and computer group policy settings.

gpupdate (XP only)
Use this utility to manually apply computer and user policy from your windows 2000 (or newer) domain.

ipconfig (XP, 2000 & NT4.0)
This handy tool displays IP settings of the current computer and much more.

MMC (XP, 2000 & NT4.0) - Microsoft Management Console
This is the master tool for Windows, it is the main interface in which all other tools use starting primarily in Windows 2000 and newer systems.

more
Utility used to display text output one screen at a time. Ex. more c:\windows\win.ini

msconfig (XP only)
The ultimate tool to change the services and utilities that start when your Windows machine boots up. You can also copy the executable from XP and use it in Win2k.

msinfo32 (XP &smp; 2000)
An awesome diagnostic tool. With it you can get a list of running processes, including the residing path of the executable (great for manually removing malware) and get detailed information about hardware and system diagnostics.

narrator (XP only)
Turns on the system narrator (can also be found in accessibility options in control panel). Will will allow your computer to dictate text to you.

netsh (XP & 2000)
A network configuration tool console. At the 'netsh>' prompt, use the '?' to list the available commands and type "exit" to get back to a command prompt.

netstat (XP)
A local network port tool - try netstat -ano.

nslookup (all)
A DNS name resolution tool.

openfiles (XP Only)
Allows an administrator to display or disconnect open files in XP professional. Type "openfiles /?" for a list of possible parameters.

Pathping (XP & 2000)
A cross between the ping and traceroute utilities. Who needs Neotrace when you can use this? Type "pathping <ip address>" and watch it go.

recover (XP & 2000)
This command can recover readable information from a damaged disk and is very easy to use.

reg (XP & 2000)
A console registry tool, great for scripting Registry edits.

sc (XP & 2000)
A command line utility called the Service Controller. A power tool to make service changes via a logon/logoff or startup/shutdown script.

schtasks (XP only)
A newer version of the AT command. This allows an administrator to schedule and manage scheduled tasks on a local and remote machines.

secedit (XP & 2000)
Use this utility to manually apply computer and user policy from your windows 2000 (or newer) domain. Example to update the machine policy: secedit /refreshpolicy machine_policy /enforce
To view help on this, just type secedit.
NOTE: In Windows XP SP1 and news, this command is superceded by: gpupdate /force

sfc (XP & 2000)
The system file checker scans important system files and replaces the ones you (or your applications) hacked beyond repair with the real, official Microsoft versions.

shutdown (XP & 2000)
With this tool, You can shut down or restart your own computer, or an administrator can shut down or restart a remote computer.

sigverif (XP only)
Microsoft has created driver signatures. A signed driver is Microsoft tested and approved. With the sigverif tool you can have all driver files analyzed to verify that they are digitally signed. Just type 'sigverif' at the command prompt.

systeminfo (XP only)
Basic system configuration information, such as the system type, the processor type, time zone, virtual memory settings, system uptime, and much more. This program is great for creating an inventory of computers on your network.

sysedit (XP/2000)
System Configuration File Editor. An old tool that was very handy for the Windows 9X days. msconfig is what you want to use now.

tasklist (XP pro only)
Tasklist is the command console equivalent to the task manager in windows. It is a must have when fighting scumware and viruses. Try the command:
tasklist /svc
to view the memory resources your services take up.

taskkill (XP only)
Taskkill contains the rest of the task manager functionality. It allows you to kill those unneeded or locked up applications.

tree (XP & 2000)
An amazing experience everyone should try! This command will provide a 'family tree' style display of the drive/folder you specify.

WMIC (XP & 2000)
Windows Management Instrumentation Command tool. This allows you to pull an amazing amount of low-level system information from a command line scripting interface.