Cisco IOS / IOS XE

Catalyst and ISR day-to-day: ports, VLANs, routing, ACLs and rescue.

Cisco Requires SmartCom Revisited 1.0.0 or newer

by Nathan Kirk · 64 downloads · MIT licence · revision 1 · published 14 Aug 2026

This bundle can change or destroy device state

Reboots or reloads the device (5 steps) — Restarts the device. Any session on it drops, and anything not saved is lost.
Shuts down an interface (3 steps) — Administratively disables an interface. If it is the interface you are connected over, you lose the session.
Erases configuration or storage (1 step) — Wipes stored configuration or a filesystem on the device. Usually not recoverable without a backup.
Changes credentials or access (3 steps) — Creates, changes or removes a login. Getting this wrong can lock everyone out of the device.
Writes configuration to persistent storage (2 steps) — Makes the current configuration survive a reboot. Intended, usually — but it is not a read-only button.

Show exactly which steps matched

Shut Down Port — Shuts down an interface (steps[3], sent text)
```
shutdown
```
Bounce Port — Shuts down an interface (steps[3], sent text)
```
shutdown
```
Add Local User — Changes credentials or access (steps[1], sent text)
```
username {{USER}} privilege 15 secret {{PASSWORD}}
```
Set Enable Secret — Changes credentials or access (steps[1], sent text)
```
enable secret {{PASSWORD}}
```
Delete Local User — Changes credentials or access (steps[2], sent text)
```
no username {{USER}}
```
Recover Err-Disabled Port — Shuts down an interface (steps[3], sent text)
```
shutdown
```
Scheduled Reload — Reboots or reloads the device (steps[0], sent text)
```
show reload
```
Save Running Config — Writes configuration to persistent storage (steps[0], sent text)
```
write memory
```
Schedule Rollback Reload — Reboots or reloads the device (steps[0], sent text)
```
reload in {{MINUTES}}
```
Cancel Scheduled Reload — Reboots or reloads the device (steps[0], sent text)
```
reload cancel
```
Reload Device — Reboots or reloads the device (steps[1], sent text)
```
reload
```
Reload at Time — Reboots or reloads the device (steps[1], sent text)
```
reload at {{TIME}}
```
Erase Startup Config — Erases configuration or storage (steps[1], sent text)
```
write erase
```
Set Boot Image — Writes configuration to persistent storage (steps[4], sent text)
```
write memory
```

Flagged automatically by matching command text. It is a prompt to read the script, not a verdict — plenty of legitimate buttons reboot things on purpose.

4 sets, 158 buttons, 291 steps · 209.1 KB

File format version 1 · exported by Smartcom Revisited

Download .buttons.json

SHA-256 4a8a6aab144dad24ffba1616a73800c31adb5727baf9f15876096953019863a9

You get the exact file the uploader submitted, byte for byte — that checksum is what sha256sum will print. Import it from the button panel in SmartCom Revisited.

About this set

Everyday Catalyst and ISR work from one panel: port and VLAN changes, trunking, EtherChannel, OSPF and BGP, ACLs and NAT, plus the show commands you reach for when a link is flapping.

Every button, in full

Exactly what gets sent

This is the complete script of the file below — nothing is summarised or hidden. Read it before you download it, the same way you would read a script someone emailed you.

Cisco IOS - Interfaces & VLANs

42 buttons

Port state, VLANs, trunks, EtherChannel and PoE.

Interface Status

Run: show interfaces status

1 step

Send
```
show interfaces status
```
Sends Enter afterwards.

Interface Brief

Run: show ip interface brief

1 step

Send
```
show ip interface brief
```
Sends Enter afterwards.

Interface Detail

Run: show interfaces {{IFACE}}

1 step · 1 input

Send
```
show interfaces {{IFACE}}
```
Sends Enter afterwards.

Interface Counters

Run: show interfaces {{IFACE}} counters

1 step · 1 input

Send
```
show interfaces {{IFACE}} counters
```
Sends Enter afterwards.

Interface Error Counters

Run: show interfaces counters errors

1 step

Send
```
show interfaces counters errors
```
Sends Enter afterwards.

Interface Description

Run: show interfaces description

1 step

Send
```
show interfaces description
```
Sends Enter afterwards.

Transceiver Detail

Run: show interfaces {{IFACE}} transceiver detail

1 step · 1 input

Send

show interfaces {{IFACE}} transceiver detail

Sends Enter afterwards.

Link Flap History

Run: show logging | include {{IFACE}}

1 step · 1 input

Send
```
show logging | include {{IFACE}}
```
Sends Enter afterwards.

VLAN Brief

Run: show vlan brief

1 step

Send
```
show vlan brief
```
Sends Enter afterwards.

VLAN Detail

Run: show vlan id {{VLAN}}

1 step · 1 input

Send
```
show vlan id {{VLAN}}
```
Sends Enter afterwards.

Trunk Status

Run: show interfaces trunk

1 step

Send
```
show interfaces trunk
```
Sends Enter afterwards.

MAC Address Table

Run: show mac address-table

1 step

Send
```
show mac address-table
```
Sends Enter afterwards.

Find MAC Address

Run: show mac address-table address {{MAC}}

1 step · 1 input

Send
```
show mac address-table address {{MAC}}
```
Sends Enter afterwards.

MAC Table by Interface

Run: show mac address-table interface {{IFACE}}

1 step · 1 input

Send

show mac address-table interface {{IFACE}}

Sends Enter afterwards.

MAC Table Count

Run: show mac address-table count

1 step

Send
```
show mac address-table count
```
Sends Enter afterwards.

Spanning-Tree Summary

Run: show spanning-tree summary

1 step

Send
```
show spanning-tree summary
```
Sends Enter afterwards.

Spanning-Tree for VLAN

Run: show spanning-tree vlan {{VLAN}}

1 step · 1 input

Send
```
show spanning-tree vlan {{VLAN}}
```
Sends Enter afterwards.

Spanning-Tree Root Ports

Run: show spanning-tree root

1 step

Send
```
show spanning-tree root
```
Sends Enter afterwards.

Spanning-Tree Blocked Ports

Run: show spanning-tree blockedports

1 step

Send
```
show spanning-tree blockedports
```
Sends Enter afterwards.

EtherChannel Summary

Run: show etherchannel summary

1 step

Send
```
show etherchannel summary
```
Sends Enter afterwards.

EtherChannel Detail

Run: show etherchannel {{LAG}} detail

1 step · 1 input

Send
```
show etherchannel {{LAG}} detail
```
Sends Enter afterwards.

LLDP Neighbours

Run: show lldp neighbors

1 step

Send
```
show lldp neighbors
```
Sends Enter afterwards.

LLDP Neighbour Detail

Run: show lldp neighbors detail

1 step

Send
```
show lldp neighbors detail
```
Sends Enter afterwards.

CDP Neighbours

Run: show cdp neighbors

1 step

Send
```
show cdp neighbors
```
Sends Enter afterwards.

CDP Neighbour Detail

Run: show cdp neighbors detail

1 step

Send
```
show cdp neighbors detail
```
Sends Enter afterwards.

PoE Power Summary

Run: show power inline

1 step

Send
```
show power inline
```
Sends Enter afterwards.

PoE Port Detail

Run: show power inline {{IFACE}}

1 step · 1 input

Send
```
show power inline {{IFACE}}
```
Sends Enter afterwards.

Set Interface Description

Run: configure terminal ; interface {{IFACE}} ; description {{DESCRIPTION}} ; end

4 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
description {{DESCRIPTION}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Set Access VLAN

Run: configure terminal ; interface {{IFACE}} ; switchport mode access ; switchport access vlan {{VLAN}} ; end

5 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
switchport mode access
```
Sends Enter afterwards.
Send
```
switchport access vlan {{VLAN}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Set Voice VLAN

Run: configure terminal ; interface {{IFACE}} ; switchport voice vlan {{VLAN}} ; end

4 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
switchport voice vlan {{VLAN}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Configure Trunk Port

Run: configure terminal ; interface {{IFACE}} ; switchport trunk encapsulation dot1q ; switchport mode trunk ; switchport trunk allowed vlan {{VLAN_LIST}} ; switchport trunk native vlan {{NATIVE_VLAN}} ; end

7 steps · asks for confirmation before it runs · 3 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
switchport trunk encapsulation dot1q
```
Sends Enter afterwards.
Send
```
switchport mode trunk
```
Sends Enter afterwards.

Send

switchport trunk allowed vlan {{VLAN_LIST}}

Sends Enter afterwards.

Send

switchport trunk native vlan {{NATIVE_VLAN}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Add VLAN to Trunk

Run: configure terminal ; interface {{IFACE}} ; switchport trunk allowed vlan add {{VLAN}} ; end

4 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.

Send

switchport trunk allowed vlan add {{VLAN}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Create VLAN

Run: configure terminal ; vlan {{VLAN}} ; name {{VLAN_NAME}} ; end

4 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
vlan {{VLAN}}
```
Sends Enter afterwards.
Send
```
name {{VLAN_NAME}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Set Port Speed & Duplex

Run: configure terminal ; interface {{IFACE}} ; speed {{SPEED}} ; duplex {{DUPLEX}} ; end

5 steps · asks for confirmation before it runs · 3 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
speed {{SPEED}}
```
Sends Enter afterwards.
Send
```
duplex {{DUPLEX}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Enable PortFast

Run: configure terminal ; interface {{IFACE}} ; spanning-tree portfast ; spanning-tree bpduguard enable ; end

5 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
spanning-tree portfast
```
Sends Enter afterwards.
Send
```
spanning-tree bpduguard enable
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Enable Port

Run: configure terminal ; interface {{IFACE}} ; no shutdown ; end

4 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
no shutdown
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Shut Down Port

Run: configure terminal ; interface {{IFACE}} ; shutdown ; end

5 steps · asks for confirmation before it runs · 1 input

Shuts down an interface

Confirm

Asks yes or no: “Shut down {{IFACE}}. Anything behind this port loses its link immediately. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
shutdown
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Bounce Port

Run: configure terminal ; interface {{IFACE}} ; shutdown ; no shutdown ; end

6 steps · asks for confirmation before it runs · 1 input

Shuts down an interface

Confirm

Asks yes or no: “Bounce {{IFACE}} — the link drops and comes back. Devices behind it will reconnect. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
shutdown
```
Sends Enter afterwards.
Send
```
no shutdown
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Remove VLAN from Trunk

Run: configure terminal ; interface {{IFACE}} ; switchport trunk allowed vlan remove {{VLAN}} ; end

5 steps · asks for confirmation before it runs · 2 inputs

Confirm

Asks yes or no: “Stop VLAN {{VLAN}} crossing {{IFACE}}. Traffic in that VLAN over this trunk stops. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.

Send

switchport trunk allowed vlan remove {{VLAN}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Delete VLAN

Run: configure terminal ; no vlan {{VLAN}} ; end

4 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Delete VLAN {{VLAN}} from this switch. Ports left in it go dark. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
no vlan {{VLAN}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Clear Interface Counters

Run: clear counters {{IFACE}}

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Reset the counters on {{IFACE}}. The error history you are looking at is lost. Continue?”

Answering no stops the script here.
Send
```
clear counters {{IFACE}}
```
Sends Enter afterwards.

Reset Default Interface Config

Run: configure terminal ; default interface {{IFACE}} ; end

4 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Wipe every setting on {{IFACE}} back to factory default, including its VLAN and description. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
default interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Cisco IOS - Routing & Reachability

42 buttons

Routing table, OSPF, BGP, static routes and path testing.

Routing Table

Run: show ip route

1 step

Send
```
show ip route
```
Sends Enter afterwards.

Route for Prefix

Run: show ip route {{PREFIX}}

1 step · 1 input

Send
```
show ip route {{PREFIX}}
```
Sends Enter afterwards.

Connected Routes

Run: show ip route connected

1 step

Send
```
show ip route connected
```
Sends Enter afterwards.

Static Routes

Run: show ip route static

1 step

Send
```
show ip route static
```
Sends Enter afterwards.

Route Summary

Run: show ip route summary

1 step

Send
```
show ip route summary
```
Sends Enter afterwards.

IPv6 Routing Table

Run: show ipv6 route

1 step

Send
```
show ipv6 route
```
Sends Enter afterwards.

ARP Table

Run: show ip arp

1 step

Send
```
show ip arp
```
Sends Enter afterwards.

ARP for Address

Run: show ip arp {{IP}}

1 step · 1 input

Send
```
show ip arp {{IP}}
```
Sends Enter afterwards.

IPv6 Neighbours

Run: show ipv6 neighbors

1 step

Send
```
show ipv6 neighbors
```
Sends Enter afterwards.

OSPF Neighbours

Run: show ip ospf neighbor

1 step

Send
```
show ip ospf neighbor
```
Sends Enter afterwards.

OSPF Interfaces

Run: show ip ospf interface brief

1 step

Send
```
show ip ospf interface brief
```
Sends Enter afterwards.

OSPF Database

Run: show ip ospf database

1 step

Send
```
show ip ospf database
```
Sends Enter afterwards.

OSPF Process Detail

Run: show ip ospf {{PROCESS_ID}}

1 step · 1 input

Send
```
show ip ospf {{PROCESS_ID}}
```
Sends Enter afterwards.

EIGRP Neighbours

Run: show ip eigrp neighbors

1 step

Send
```
show ip eigrp neighbors
```
Sends Enter afterwards.

EIGRP Topology

Run: show ip eigrp topology

1 step

Send
```
show ip eigrp topology
```
Sends Enter afterwards.

BGP Summary

Run: show ip bgp summary

1 step

Send
```
show ip bgp summary
```
Sends Enter afterwards.

BGP Neighbour Detail

Run: show ip bgp neighbors {{PEER}}

1 step · 1 input

Send
```
show ip bgp neighbors {{PEER}}
```
Sends Enter afterwards.

BGP Routes Received

Run: show ip bgp neighbors {{PEER}} received-routes

1 step · 1 input

Send

show ip bgp neighbors {{PEER}} received-routes

Sends Enter afterwards.

BGP Routes Advertised

Run: show ip bgp neighbors {{PEER}} advertised-routes

1 step · 1 input

Send

show ip bgp neighbors {{PEER}} advertised-routes

Sends Enter afterwards.

BGP Prefix Detail

Run: show ip bgp {{PREFIX}}

1 step · 1 input

Send
```
show ip bgp {{PREFIX}}
```
Sends Enter afterwards.

HSRP Status

Run: show standby brief

1 step

Send
```
show standby brief
```
Sends Enter afterwards.

VRRP Status

Run: show vrrp brief

1 step

Send
```
show vrrp brief
```
Sends Enter afterwards.

VRF List

Run: show vrf

1 step

Send
```
show vrf
```
Sends Enter afterwards.

Routing Table in VRF

Run: show ip route vrf {{VRF}}

1 step · 1 input

Send
```
show ip route vrf {{VRF}}
```
Sends Enter afterwards.

Ping Host

Run: ping {{HOST}}

1 step · 1 input

Send
```
ping {{HOST}}
```
Sends Enter afterwards.

Ping with Count

Run: ping {{HOST}} repeat {{COUNT}}

1 step · 2 inputs

Send
```
ping {{HOST}} repeat {{COUNT}}
```
Sends Enter afterwards.

Ping from Source

Run: ping {{HOST}} source {{IFACE}}

1 step · 2 inputs

Send
```
ping {{HOST}} source {{IFACE}}
```
Sends Enter afterwards.

Ping in VRF

Run: ping vrf {{VRF}} {{HOST}}

1 step · 2 inputs

Send
```
ping vrf {{VRF}} {{HOST}}
```
Sends Enter afterwards.

Traceroute

Run: traceroute {{HOST}}

1 step · 1 input

Send
```
traceroute {{HOST}}
```
Sends Enter afterwards.

Traceroute in VRF

Run: traceroute vrf {{VRF}} {{HOST}}

1 step · 2 inputs

Send
```
traceroute vrf {{VRF}} {{HOST}}
```
Sends Enter afterwards.

Test DNS Resolution

Run: ping {{FQDN}} repeat 2

1 step · 1 input

Send
```
ping {{FQDN}} repeat 2
```
Sends Enter afterwards.

Add Static Route

Run: configure terminal ; ip route {{PREFIX}} {{NEXT_HOP}} ; end

3 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
ip route {{PREFIX}} {{NEXT_HOP}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Add Static Route with Distance

Run: configure terminal ; ip route {{PREFIX}} {{NEXT_HOP}} {{DISTANCE}} ; end

3 steps · asks for confirmation before it runs · 3 inputs

Send
```
configure terminal
```
Sends Enter afterwards.

Send

ip route {{PREFIX}} {{NEXT_HOP}} {{DISTANCE}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Add Default Route

Run: configure terminal ; ip route 0.0.0.0 0.0.0.0 {{GATEWAY}} ; end

3 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
ip route 0.0.0.0 0.0.0.0 {{GATEWAY}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Add SVI

Run: configure terminal ; interface Vlan{{VLAN}} ; ip address {{IP}} {{MASK}} ; no shutdown ; end

5 steps · asks for confirmation before it runs · 3 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface Vlan{{VLAN}}
```
Sends Enter afterwards.
Send
```
ip address {{IP}} {{MASK}}
```
Sends Enter afterwards.
Send
```
no shutdown
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Add OSPF Network

Run: configure terminal ; router ospf {{PROCESS_ID}} ; network {{NETWORK}} {{MASK}} area {{AREA}} ; end

4 steps · asks for confirmation before it runs · 4 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
router ospf {{PROCESS_ID}}
```
Sends Enter afterwards.

Send

network {{NETWORK}} {{MASK}} area {{AREA}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Add BGP Neighbour

Run: configure terminal ; router bgp {{ASN}} ; neighbor {{PEER}} remote-as {{PEER_AS}} ; neighbor {{PEER}} description {{DESCRIPTION}} ; end

5 steps · asks for confirmation before it runs · 4 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
router bgp {{ASN}}
```
Sends Enter afterwards.
Send
```
neighbor {{PEER}} remote-as {{PEER_AS}}
```
Sends Enter afterwards.

Send

neighbor {{PEER}} description {{DESCRIPTION}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Remove Static Route

Run: configure terminal ; no ip route {{PREFIX}} {{NEXT_HOP}} ; end

4 steps · asks for confirmation before it runs · 2 inputs

Confirm

Asks yes or no: “Remove the route to {{PREFIX}} via {{NEXT_HOP}}. Traffic for that prefix follows whatever is left, or nothing. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
no ip route {{PREFIX}} {{NEXT_HOP}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Clear ARP Cache

Run: clear ip arp

2 steps · asks for confirmation before it runs

Confirm

Asks yes or no: “Flush the whole ARP cache. Expect a burst of re-resolution and a brief pause on active flows. Continue?”

Answering no stops the script here.
Send
```
clear ip arp
```
Sends Enter afterwards.

Soft-Clear BGP Neighbour

Run: clear ip bgp {{PEER}} soft

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Re-send and re-request the full table with {{PEER}}. Prefixes may churn while it converges. Continue?”

Answering no stops the script here.
Send
```
clear ip bgp {{PEER}} soft
```
Sends Enter afterwards.

Hard-Clear BGP Neighbour

Run: clear ip bgp {{PEER}}

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Tear the BGP session with {{PEER}} down and rebuild it. Every prefix learned from that peer is withdrawn until it comes back. Continue?”

Answering no stops the script here.
Send
```
clear ip bgp {{PEER}}
```
Sends Enter afterwards.

Clear OSPF Process

Run: clear ip ospf {{PROCESS_ID}} process

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Restart OSPF process {{PROCESS_ID}}. Adjacencies drop and routes are withdrawn while it reconverges. Continue?”

Answering no stops the script here.
Send
```
clear ip ospf {{PROCESS_ID}} process
```
Sends Enter afterwards.

Cisco IOS - Security & NAT

32 buttons

ACLs, NAT translations, AAA, port security and SSH access.

All Access Lists

Run: show access-lists

1 step

Send
```
show access-lists
```
Sends Enter afterwards.

Named Access List

Run: show access-lists {{ACL}}

1 step · 1 input

Send
```
show access-lists {{ACL}}
```
Sends Enter afterwards.

ACLs on Interfaces

Run: show ip interface | include line protocol|access list

1 step

Send

show ip interface | include line protocol|access list

Sends Enter afterwards.

NAT Translations

Run: show ip nat translations

1 step

Send
```
show ip nat translations
```
Sends Enter afterwards.

NAT Statistics

Run: show ip nat statistics

1 step

Send
```
show ip nat statistics
```
Sends Enter afterwards.

Port Security Summary

Run: show port-security

1 step

Send
```
show port-security
```
Sends Enter afterwards.

Port Security on Interface

Run: show port-security interface {{IFACE}}

1 step · 1 input

Send
```
show port-security interface {{IFACE}}
```
Sends Enter afterwards.

Err-Disabled Ports

Run: show interfaces status err-disabled

1 step

Send
```
show interfaces status err-disabled
```
Sends Enter afterwards.

Err-Disable Recovery

Run: show errdisable recovery

1 step

Send
```
show errdisable recovery
```
Sends Enter afterwards.

DHCP Snooping Bindings

Run: show ip dhcp snooping binding

1 step

Send
```
show ip dhcp snooping binding
```
Sends Enter afterwards.

DHCP Snooping Status

Run: show ip dhcp snooping

1 step

Send
```
show ip dhcp snooping
```
Sends Enter afterwards.

Local Users

Run: show running-config | include ^username

1 step

Send
```
show running-config | include ^username
```
Sends Enter afterwards.

AAA Sessions

Run: show aaa sessions

1 step

Send
```
show aaa sessions
```
Sends Enter afterwards.

Authenticated Sessions

Run: show authentication sessions

1 step

Send
```
show authentication sessions
```
Sends Enter afterwards.

SSH Sessions

Run: show ssh

1 step

Send
```
show ssh
```
Sends Enter afterwards.

Active Logins

Run: show users

1 step

Send
```
show users
```
Sends Enter afterwards.

Line Configuration

Run: show running-config | section line vty

1 step

Send
```
show running-config | section line vty
```
Sends Enter afterwards.

Crypto Key Status

Run: show crypto key mypubkey rsa

1 step

Send
```
show crypto key mypubkey rsa
```
Sends Enter afterwards.

IPsec SA Status

Run: show crypto ipsec sa

1 step

Send
```
show crypto ipsec sa
```
Sends Enter afterwards.

IKE SA Status

Run: show crypto isakmp sa

1 step

Send
```
show crypto isakmp sa
```
Sends Enter afterwards.

Add Permit Rule to ACL

Run: configure terminal ; ip access-list extended {{ACL}} ; permit {{PROTOCOL}} {{SRC}} {{DST}} eq {{PORT}} ; end

4 steps · asks for confirmation before it runs · 5 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
ip access-list extended {{ACL}}
```
Sends Enter afterwards.

Send

permit {{PROTOCOL}} {{SRC}} {{DST}} eq {{PORT}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Add Local User

Run: configure terminal ; username {{USER}} privilege 15 secret {{PASSWORD}} ; end

3 steps · asks for confirmation before it runs · 2 inputs

Changes credentials or access

Send
```
configure terminal
```
Sends Enter afterwards.

Send

username {{USER}} privilege 15 secret {{PASSWORD}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Add Static NAT Entry

Run: configure terminal ; ip nat inside source static {{LOCAL_IP}} {{GLOBAL_IP}} ; end

3 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.

Send

ip nat inside source static {{LOCAL_IP}} {{GLOBAL_IP}}

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Enable Port Security

Run: configure terminal ; interface {{IFACE}} ; switchport port-security ; switchport port-security maximum {{COUNT}} ; switchport port-security violation restrict ; end

6 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
switchport port-security
```
Sends Enter afterwards.

Send

switchport port-security maximum {{COUNT}}

Sends Enter afterwards.

Send

switchport port-security violation restrict

Sends Enter afterwards.

Send
```
end
```
Sends Enter afterwards.

Set Enable Secret

Run: configure terminal ; enable secret {{PASSWORD}} ; end

3 steps · asks for confirmation before it runs · 1 input

Changes credentials or access

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
enable secret {{PASSWORD}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Restrict VTY to ACL

Run: configure terminal ; line vty 0 15 ; access-class {{ACL}} in ; transport input ssh ; end

5 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
line vty 0 15
```
Sends Enter afterwards.
Send
```
access-class {{ACL}} in
```
Sends Enter afterwards.
Send
```
transport input ssh
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Add Deny Rule to ACL

Run: configure terminal ; ip access-list extended {{ACL}} ; deny {{PROTOCOL}} {{SRC}} {{DST}} ; end

5 steps · asks for confirmation before it runs · 4 inputs

Confirm

Asks yes or no: “Add a deny to {{ACL}}. If this list is applied to the interface you are connected through, you can lock yourself out. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
ip access-list extended {{ACL}}
```
Sends Enter afterwards.
Send
```
deny {{PROTOCOL}} {{SRC}} {{DST}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Delete Access List

Run: configure terminal ; no ip access-list extended {{ACL}} ; end

4 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Delete {{ACL}} entirely. Anything relying on it stops being filtered, or stops passing. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
no ip access-list extended {{ACL}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Clear NAT Translations

Run: clear ip nat translation *

2 steps · asks for confirmation before it runs

Confirm

Asks yes or no: “Drop every NAT translation. Established sessions through this router break and have to be re-opened. Continue?”

Answering no stops the script here.
Send
```
clear ip nat translation *
```
Sends Enter afterwards.

Delete Local User

Run: configure terminal ; no username {{USER}} ; end

4 steps · asks for confirmation before it runs · 1 input

Changes credentials or access

Confirm

Asks yes or no: “Delete account {{USER}}. If this is the account you are logged in with, you may not get back in. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
no username {{USER}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Recover Err-Disabled Port

Run: configure terminal ; interface {{IFACE}} ; shutdown ; no shutdown ; end

6 steps · asks for confirmation before it runs · 1 input

Shuts down an interface

Confirm

Asks yes or no: “Bounce {{IFACE}} to clear err-disable. If the cause is still there the port will disable again. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
interface {{IFACE}}
```
Sends Enter afterwards.
Send
```
shutdown
```
Sends Enter afterwards.
Send
```
no shutdown
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Clear Port Security Violation

Run: clear port-security sticky interface {{IFACE}}

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Clear learned sticky MACs on {{IFACE}}. The port relearns whatever is plugged in now. Continue?”

Answering no stops the script here.

Send

clear port-security sticky interface {{IFACE}}

Sends Enter afterwards.

Cisco IOS - System, Config & Rescue

42 buttons

Config save and backup, IOS images, logging and reloads.

Version & Uptime

Run: show version

1 step

Send
```
show version
```
Sends Enter afterwards.

Running Config

Run: show running-config

1 step

Send
```
show running-config
```
Sends Enter afterwards.

Running Config Section

Run: show running-config | section {{PATTERN}}

1 step · 1 input

Send

show running-config | section {{PATTERN}}

Sends Enter afterwards.

Startup Config

Run: show startup-config

1 step

Send
```
show startup-config
```
Sends Enter afterwards.

Config Differences

Run: show archive config differences

1 step

Send
```
show archive config differences
```
Sends Enter afterwards.

Last Config Change

Run: show running-config | include Last configuration

1 step

Send

show running-config | include Last configuration

Sends Enter afterwards.

Inventory

Run: show inventory

1 step

Send
```
show inventory
```
Sends Enter afterwards.

Environment

Run: show environment all

1 step

Send
```
show environment all
```
Sends Enter afterwards.

CPU Usage

Run: show processes cpu sorted

1 step

Send
```
show processes cpu sorted
```
Sends Enter afterwards.

Top CPU Processes

Run: show processes cpu sorted | exclude 0.00%__0.00%__0.00%

1 step

Send

show processes cpu sorted | exclude 0.00%__0.00%__0.00%

Sends Enter afterwards.

Memory Usage

Run: show memory statistics

1 step

Send
```
show memory statistics
```
Sends Enter afterwards.

Flash Contents

Run: show flash:

1 step

Send
```
show flash:
```
Sends Enter afterwards.

Filesystem Usage

Run: dir

1 step

Send
```
dir
```
Sends Enter afterwards.

Boot Variable

Run: show boot

1 step

Send
```
show boot
```
Sends Enter afterwards.

Licence Status

Run: show license summary

1 step

Send
```
show license summary
```
Sends Enter afterwards.

Recent Log

Run: show logging | last {{LINES}}

1 step · 1 input

Send
```
show logging | last {{LINES}}
```
Sends Enter afterwards.

Search Log

Run: show logging | include {{PATTERN}}

1 step · 1 input

Send
```
show logging | include {{PATTERN}}
```
Sends Enter afterwards.

Log Buffer Config

Run: show logging | begin Log Buffer

1 step

Send
```
show logging | begin Log Buffer
```
Sends Enter afterwards.

Clock

Run: show clock detail

1 step

Send
```
show clock detail
```
Sends Enter afterwards.

NTP Status

Run: show ntp status

1 step

Send
```
show ntp status
```
Sends Enter afterwards.

NTP Associations

Run: show ntp associations

1 step

Send
```
show ntp associations
```
Sends Enter afterwards.

SNMP Config

Run: show running-config | include snmp-server

1 step

Send

show running-config | include snmp-server

Sends Enter afterwards.

Stack Members

Run: show switch detail

1 step

Send
```
show switch detail
```
Sends Enter afterwards.

Redundancy State

Run: show redundancy

1 step

Send
```
show redundancy
```
Sends Enter afterwards.

Scheduled Reload

Run: show reload

1 step

Reboots or reloads the device

Send
```
show reload
```
Sends Enter afterwards.

Tech Support Summary

Run: show tech-support | redirect flash:tech-support.txt

1 step

Send

show tech-support | redirect flash:tech-support.txt

Sends Enter afterwards.

Save Running Config

Run: write memory

1 step · asks for confirmation before it runs

Writes configuration to persistent storage

Send
```
write memory
```
Sends Enter afterwards.

Set Hostname

Run: configure terminal ; hostname {{HOSTNAME}} ; end

3 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
hostname {{HOSTNAME}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Set Timezone

Run: configure terminal ; clock timezone {{TZ}} {{TZ_OFFSET}} ; end

3 steps · asks for confirmation before it runs · 2 inputs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
clock timezone {{TZ}} {{TZ_OFFSET}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Add NTP Server

Run: configure terminal ; ntp server {{NTP}} ; end

3 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
ntp server {{NTP}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Set Logging Host

Run: configure terminal ; logging host {{SERVER}} ; end

3 steps · asks for confirmation before it runs · 1 input

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
logging host {{SERVER}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Enable Archive on Save

Run: configure terminal ; archive ; path flash:archive-config ; write-memory ; end

5 steps · asks for confirmation before it runs

Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
archive
```
Sends Enter afterwards.
Send
```
path flash:archive-config
```
Sends Enter afterwards.
Send
```
write-memory
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.

Back Up Config to TFTP

Run: copy running-config tftp://{{SERVER}}/{{FILE}}

1 step · asks for confirmation before it runs · 2 inputs

Send

copy running-config tftp://{{SERVER}}/{{FILE}}

Sends Enter afterwards.

Back Up Config to Flash

Run: copy running-config flash:{{FILE}}

1 step · asks for confirmation before it runs · 1 input

Send
```
copy running-config flash:{{FILE}}
```
Sends Enter afterwards.

Schedule Rollback Reload

Safety net before a risky change: the switch reloads to the saved config unless you cancel it.

1 step · asks for confirmation before it runs · 1 input

Reboots or reloads the device

Send
```
reload in {{MINUTES}}
```
Sends Enter afterwards.

Cancel Scheduled Reload

Run: reload cancel

1 step · asks for confirmation before it runs

Reboots or reloads the device

Send
```
reload cancel
```
Sends Enter afterwards.

Reload Device

Run: reload

2 steps · asks for confirmation before it runs

Reboots or reloads the device

Confirm

Asks yes or no: “Reload this device now. Every session through it drops for the length of the boot. Make sure the running config is saved first. Continue?”

Answering no stops the script here.
Send
```
reload
```
Sends Enter afterwards.

Reload at Time

Run: reload at {{TIME}}

2 steps · asks for confirmation before it runs · 1 input

Reboots or reloads the device

Confirm

Asks yes or no: “Schedule a reload at {{TIME}}. The device will drop every session when it fires. Continue?”

Answering no stops the script here.
Send
```
reload at {{TIME}}
```
Sends Enter afterwards.

Restore Config from Flash

Run: configure replace flash:{{FILE}}

2 steps · asks for confirmation before it runs · 1 input

Confirm

Asks yes or no: “Replace the running config with {{FILE}}. Anything not in that file is removed, including the access you are using now. Continue?”

Answering no stops the script here.
Send
```
configure replace flash:{{FILE}}
```
Sends Enter afterwards.

Erase Startup Config

Run: write erase

2 steps · asks for confirmation before it runs

Erases configuration or storage

Confirm

Asks yes or no: “Erase the startup config. On the next reload this device comes up unconfigured, with no management access at all. Continue?”

Answering no stops the script here.
Send
```
write erase
```
Sends Enter afterwards.

Clear Log Buffer

Run: clear logging

2 steps · asks for confirmation before it runs

Confirm

Asks yes or no: “Discard the buffered log. Whatever explains the current problem goes with it — copy anything you need first. Continue?”

Answering no stops the script here.
Send
```
clear logging
```
Sends Enter afterwards.

Set Boot Image

Run: configure terminal ; boot system flash:{{IMAGE}} ; end ; write memory

5 steps · asks for confirmation before it runs · 1 input

Writes configuration to persistent storage

Confirm

Asks yes or no: “Boot from {{IMAGE}} at the next reload. A wrong or missing image leaves the device in ROMmon and needs console access to fix. Continue?”

Answering no stops the script here.
Send
```
configure terminal
```
Sends Enter afterwards.
Send
```
boot system flash:{{IMAGE}}
```
Sends Enter afterwards.
Send
```
end
```
Sends Enter afterwards.
Send
```
write memory
```
Sends Enter afterwards.

Version history

Revision 1 current

First published version.

14 Aug 2026 · 209.1 KB · needs 1.0.0+ · 4a8a6aab144dad24…

View Download