Security Configuration Guide: Securing
`the Control Plane, Cisco IOS Release
`15.1M&T
`
`Americas Headquarters
`Cisco Systems, Inc.
`170 West Tasman Drive
`San Jose, CA 95134-1706
`USA
`http://www.cisco.com
`Tel: 408 526-4000
`800 553-NETS (6387)
`Fax: 408 527-0883
`
`Exhibit 2029
`IPR2016-00309
`
`

`
`
`
`THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
`STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
`WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
`
`THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
`SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
`OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
`
`The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
`domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
`
`NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
`ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
`LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
`DEALING, USAGE, OR TRADE PRACTICE.
`
`IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
`WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
`OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
`
`CCDE, CCENT, CCSI, Cisco Eos, Cisco Explorer, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase,
`Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco TrustSec, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip
`Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work,
`Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and
`Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the
`Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
`Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the
`IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY,
`PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo are
`registered trademarks of Cisco and/or its affiliates in the United States and certain other countries.
`
`All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
`between Cisco and any other company. (1002R)
`
`Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display
`output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in
`illustrative content is unintentional and coincidental.
`Security Configuration Guide: Securing the Control Plane, Cisco IOS Release 15.1M&T
`© 2010 Cisco Systems, Inc. All rights reserved.
`
`

`
`
`
`About Cisco IOS Software Documentation
`
`Last Updated: March 26, 2010
`
`This document describes the objectives, audience, conventions, and organization used in Cisco IOS
`software documentation. Also included are resources for obtaining technical assistance, additional
`documentation, and other information from Cisco. This document is organized into the following
`sections:
`
` • Documentation Objectives, page i
`
` (cid:129) Audience, page i
`
` (cid:129) Documentation Conventions, page i
`
` (cid:129) Documentation Organization, page iii
`
` (cid:129) Additional Resources and Documentation Feedback, page xi
`
`Documentation Objectives
`
`Cisco IOS documentation describes the tasks and commands available to configure and maintain Cisco
`networking devices.
`
`Audience
`
`The Cisco IOS documentation set is intended for users who configure and maintain Cisco networking
`devices (such as routers and switches) but who may not be familiar with the configuration and
`maintenance tasks, the relationship among tasks, or the Cisco IOS commands necessary to perform
`particular tasks. The Cisco IOS documentation set is also intended for those users experienced with
`Cisco IOS software who need to know about new features, new configuration options, and new software
`characteristics in the current Cisco IOS release.
`
`Documentation Conventions
`
`In Cisco IOS documentation, the term router may be used to refer to various Cisco products; for example,
`routers, access servers, and switches. These and other networking devices that support Cisco IOS
`software are shown interchangeably in examples and are used only for illustrative purposes. An example
`that shows one product does not necessarily mean that other products are not supported.
`
`
`
`i
`
`

`
`Documentation Conventions
`
`About Cisco IOS Software Documentation
`
`
`
`This section contains the following topics:
`
` (cid:129) Typographic Conventions, page ii
`
` (cid:129) Command Syntax Conventions, page ii
`
` (cid:129) Software Conventions, page iii
`
` (cid:129) Reader Alert Conventions, page iii
`
`Typographic Conventions
`
`Cisco IOS documentation uses the following typographic conventions:
`
`Convention
`^ or Ctrl
`
`string
`
`Description
`Both the ^ symbol and Ctrl represent the Control (Ctrl) key on a keyboard. For
`example, the key combination ^D or Ctrl-D means that you hold down the
`Control key while you press the D key. (Keys are indicated in capital letters but
`are not case sensitive.)
`A string is a nonquoted set of characters shown in italics. For example, when
`setting a Simple Network Management Protocol (SNMP) community string to
`public, do not use quotation marks around the string; otherwise, the string will
`include the quotation marks.
`
`Command Syntax Conventions
`
`Cisco IOS documentation uses the following command syntax conventions:
`
`Convention
`bold
`italic
`[x]
`...
`
`|
`
`[x | y]
`
`{x | y}
`
`[x {y | z}]
`
`Description
`Bold text indicates commands and keywords that you enter as shown.
`Italic text indicates arguments for which you supply values.
`Square brackets enclose an optional keyword or argument.
`An ellipsis (three consecutive nonbolded periods without spaces) after a syntax
`element indicates that the element can be repeated.
`A vertical line, called a pipe, that is enclosed within braces or square brackets
`indicates a choice within a set of keywords or arguments.
`Square brackets enclosing keywords or arguments separated by a pipe indicate an
`optional choice.
`Braces enclosing keywords or arguments separated by a pipe indicate a
`required choice.
`Braces and a pipe within square brackets indicate a required choice within an
`optional element.
`
`
`
`ii
`
`

`
`About Cisco IOS Software Documentation
`
`Software Conventions
`
`
`
`Documentation Organization
`
`Cisco IOS software uses the following program code conventions:
`
`Convention
`
`Courier font
`
`Description
`Courier font is used for information that is displayed on a PC or terminal screen.
`Bold Courier font Bold Courier font indicates text that the user must enter.
` < >
`Angle brackets enclose text that is not displayed, such as a password. Angle
`brackets also are used in contexts in which the italic font style is not supported;
`for example, ASCII text.
`An exclamation point at the beginning of a line indicates that the text that follows
`is a comment, not a line of code. An exclamation point is also displayed by
`Cisco IOS software for certain processes.
`Square brackets enclose default responses to system prompts.
`
`!
`
` [ ]
`
`Reader Alert Conventions
`
`Cisco IOS documentation uses the following conventions for reader alerts:
`
`Caution Means reader be careful. In this situation, you might do something that could result in equipment
`damage or loss of data.
`
`Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the
`manual.
`
`Timesaver Means the described action saves time. You can save time by performing the action described in the
`paragraph.
`
`Documentation Organization
`
`This section describes the Cisco IOS documentation set, how it is organized, and how to access it on
`Cisco.com. It also lists the configuration guides, command references, and supplementary references and
`resources that comprise the documentation set. It contains the following topics:
`
` (cid:129) Cisco IOS Documentation Set, page iv
`
` (cid:129) Cisco IOS Documentation on Cisco.com, page iv
`
` (cid:129) Configuration Guides, Command References, and Supplementary Resources, page v
`
`
`
`iii
`
`

`
`Documentation Organization
`
`
`
`Cisco IOS Documentation Set
`
`About Cisco IOS Software Documentation
`
`The Cisco IOS documentation set consists of the following:
`
` (cid:129) Release notes and caveats provide information about platform, technology, and feature support for
`a release and describe severity 1 (catastrophic), severity 2 (severe), and select severity 3 (moderate)
`defects in released Cisco IOS software. Review release notes before other documents to learn
`whether updates have been made to a feature.
`
` (cid:129) Sets of configuration guides and command references organized by technology and published for
`each standard Cisco IOS release.
` – Configuration guides—Compilations of documents that provide conceptual and task-oriented
`descriptions of Cisco IOS features.
` – Command references—Compilations of command pages in alphabetical order that provide
`detailed information about the commands used in the Cisco IOS features and the processes that
`comprise the related configuration guides. For each technology, there is a single command
`reference that supports all Cisco IOS releases and that is updated at each standard release.
`
` (cid:129) Lists of all the commands in a specific release and all commands that are new, modified, removed,
`or replaced in the release.
` (cid:129) Command reference book for debug commands. Command pages are listed in alphabetical order.
`
` (cid:129) Reference book for system messages for all Cisco IOS releases.
`
`Cisco IOS Documentation on Cisco.com
`
`The following sections describe the organization of the Cisco IOS documentation set and how to access
`various document types.
`
`Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS
`software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An
`account on Cisco.com is not required.
`Feature Guides
`Cisco IOS features are documented in feature guides. Feature guides describe one feature or a group of
`related features that are supported on many different software releases and platforms. Your Cisco IOS
`software release or platform may not support all the features documented in a feature guide. See the
`Feature Information table at the end of the feature guide for information about which features in that
`guide are supported in your software release.
`
`Configuration Guides
`Configuration guides are provided by technology and release and comprise a set of individual feature
`guides relevant to the release and technology.
`
`Command References
`Command reference books contain descriptions of Cisco IOS commands that are supported in many
`different software releases and on many different platforms. The books are organized by technology. For
`information about all Cisco IOS commands, use the Command Lookup Tool at
`http://tools.cisco.com/Support/CLILookup or the Cisco IOS Master Command List, All Releases, at
`http://www.cisco.com/en/US/docs/ios/mcl/allreleasemcl/all_book.html.
`
`
`
`iv
`
`

`
`About Cisco IOS Software Documentation
`
`
`
`Documentation Organization
`
`Cisco IOS Supplementary Documents and Resources
`Supplementary documents and resources are listed in Table 2 on page xi.
`
`Configuration Guides, Command References, and Supplementary Resources
`
`Table 1 lists, in alphabetical order, Cisco IOS software configuration guides and command references,
`including brief descriptions of the contents of the documents. The Cisco IOS command references
`contain commands for Cisco IOS software for all releases. The configuration guides and command
`references support many different software releases and platforms. Your Cisco IOS software release or
`platform may not support all these technologies.
`
`Table 2 lists documents and resources that supplement the Cisco IOS software configuration guides and
`command references. These supplementary resources include release notes and caveats; master
`command lists; new, modified, removed, and replaced command lists; system messages; and the debug
`command reference.
`
`For additional information about configuring and operating specific networking devices, and to access
`Cisco IOS documentation, go to the Product/Technologies Support area of Cisco.com at the following
`location:
`
`http://www.cisco.com/go/techdocs
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS AppleTalk Configuration Guide
`
`Features/Protocols/Technologies
`AppleTalk protocol.
`
` (cid:129) Cisco IOS AppleTalk Command Reference
` (cid:129) Cisco IOS Asynchronous Transfer Mode
`Configuration Guide
`
` (cid:129) Cisco IOS Asynchronous Transfer Mode
`Command Reference
` (cid:129) Cisco IOS Bridging and IBM Networking
`Configuration Guide
`
` (cid:129) Cisco IOS Bridging Command Reference
`
` (cid:129) Cisco IOS IBM Networking Command Reference
`
` (cid:129) Cisco IOS Broadband Access Aggregation and DSL
`Configuration Guide
`
` (cid:129) Cisco IOS Broadband Access Aggregation and DSL
`Command Reference
`
`LAN ATM, multiprotocol over ATM (MPoA), and WAN ATM.
`
`Transparent and source-route transparent (SRT) bridging,
`source-route bridging (SRB), Token Ring Inter-Switch Link
`(TRISL), and token ring route switch module (TRRSM).
`
`Data-link switching plus (DLSw+), serial tunnel (STUN), block
`serial tunnel (BSTUN); logical link control, type 2 (LLC2),
`synchronous data link control (SDLC); IBM Network Media
`Translation, including Synchronous Data Logical Link Control
`(SDLLC) and qualified LLC (QLLC); downstream physical unit
`(DSPU), Systems Network Architecture (SNA) service point,
`SNA frame relay access, advanced peer-to-peer networking
`(APPN), native client interface architecture (NCIA)
`client/server topologies, and IBM Channel Attach.
`PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE).
`
`
`
`v
`
`

`
`Documentation Organization
`
`
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References (continued)
`
`About Cisco IOS Software Documentation
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS Carrier Ethernet Configuration Guide
`
` (cid:129) Cisco IOS Carrier Ethernet Command Reference
`
` (cid:129) Cisco IOS Configuration Fundamentals
`Configuration Guide
`
` (cid:129) Cisco IOS Configuration Fundamentals
`Command Reference
` (cid:129) Cisco IOS DECnet Configuration Guide
`
` (cid:129) Cisco IOS DECnet Command Reference
` (cid:129) Cisco IOS Dial Technologies Configuration Guide
`
` (cid:129) Cisco IOS Dial Technologies Command Reference
`
` (cid:129) Cisco IOS Flexible NetFlow Configuration Guide
`
` (cid:129) Cisco IOS Flexible NetFlow Command Reference
` (cid:129) Cisco IOS High Availability Configuration Guide
`
` (cid:129) Cisco IOS High Availability Command Reference
`
` (cid:129) Cisco IOS Intelligent Services Gateway
`Configuration Guide
`
` (cid:129) Cisco IOS Intelligent Services Gateway
`Command Reference
` (cid:129) Cisco IOS Interface and Hardware Component
`Configuration Guide
`
` (cid:129) Cisco IOS Interface and Hardware Component
`Command Reference
` (cid:129) Cisco IOS IP Addressing Services
`Configuration Guide
`
` (cid:129) Cisco IOS IP Addressing Services
`Command Reference
`
`
`
`vi
`
`Features/Protocols/Technologies
`Operations, Administration, and Maintenance (OAM); Ethernet
`connectivity fault management (CFM); ITU-T Y.1731 fault
`management functions; Ethernet Local Management Interface
`(ELMI); MAC address support on service instances, bridge
`domains, and pseudowire; IEEE 802.3ad Link Bundling; Link
`Aggregation Control Protocol (LACP) support for Ethernet and
`Gigabit Ethernet links and EtherChannel bundles; LACP support
`for stateful switchover (SSO), in service software upgrade
`(ISSU), Cisco nonstop forwarding (NSF), and nonstop routing
`(NSR) on Gigabit EtherChannel bundles; and Link Layer
`Discovery Protocol (LLDP) and media endpoint discovery
`(MED).
`Autoinstall, Setup, Cisco IOS command-line interface (CLI),
`Cisco IOS file system (IFS), Cisco IOS web browser user
`interface (UI), basic file transfer services, and file management.
`
`DECnet protocol.
`
`Asynchronous communications, dial backup, dialer technology,
`dial-in terminal services and AppleTalk remote access (ARA),
`dial-on-demand routing, dial-out, ISDN, large scale dial-out,
`modem and resource pooling, Multilink PPP (MLP), PPP, and
`virtual private dialup network (VPDN).
`Flexible NetFlow.
`
`A variety of high availability (HA) features and technologies
`that are available for different network segments (from
`enterprise access to service provider core) to facilitate creation
`of end-to-end highly available networks. Cisco IOS HA features
`and technologies can be categorized in three key areas:
`system-level resiliency, network-level resiliency, and embedded
`management for resiliency.
`Subscriber identification, service and policy determination,
`session creation, session policy enforcement, session life-cycle
`management, accounting for access and service usage, and
`session state monitoring.
`
`LAN interfaces, logical interfaces, serial interfaces, virtual
`interfaces, and interface configuration.
`
`Address Resolution Protocol (ARP), Network Address
`Translation (NAT), Domain Name System (DNS), Dynamic
`Host Configuration Protocol (DHCP), and Next Hop Address
`Resolution Protocol (NHRP).
`
`

`
`About Cisco IOS Software Documentation
`
`
`
`Documentation Organization
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References (continued)
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS IP Application Services
`Configuration Guide
`
` (cid:129) Cisco IOS IP Application Services
`Command Reference
`
` (cid:129) Cisco IOS IP Mobility Configuration Guide
`
` (cid:129) Cisco IOS IP Mobility Command Reference
` (cid:129) Cisco IOS IP Multicast Configuration Guide
`
` (cid:129) Cisco IOS IP Multicast Command Reference
`
` (cid:129) Cisco IOS IP Routing: BFD Configuration Guide
` (cid:129) Cisco IOS IP Routing: BGP Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: BGP Command Reference
` (cid:129) Cisco IOS IP Routing: EIGRP Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: EIGRP Command Reference
` (cid:129) Cisco IOS IP Routing: ISIS Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: ISIS Command Reference
` (cid:129) Cisco IOS IP Routing: ODR Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: ODR Command Reference
` (cid:129) Cisco IOS IP Routing: OSPF Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: OSPF Command Reference
` (cid:129) Cisco IOS IP Routing: Protocol-Independent
`Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: Protocol-Independent
`Command Reference
` (cid:129) Cisco IOS IP Routing: RIP Configuration Guide
`
` (cid:129) Cisco IOS IP Routing: RIP Command Reference
` (cid:129) Cisco IOS IP SLAs Configuration Guide
`
` (cid:129) Cisco IOS IP SLAs Command Reference
` (cid:129) Cisco IOS IP Switching Configuration Guide
`
` (cid:129) Cisco IOS IP Switching Command Reference
` (cid:129) Cisco IOS IPv6 Configuration Guide
`
` (cid:129) Cisco IOS IPv6 Command Reference
` (cid:129) Cisco IOS ISO CLNS Configuration Guide
`
` (cid:129) Cisco IOS ISO CLNS Command Reference
`
`Features/Protocols/Technologies
`Enhanced Object Tracking (EOT), Gateway Load Balancing
`Protocol (GLBP), Hot Standby Router Protocol (HSRP), IP
`Services, Server Load Balancing (SLB), Stream Control
`Transmission Protocol (SCTP), TCP, Web Cache
`Communication Protocol (WCCP), User Datagram Protocol
`(UDP), and Virtual Router Redundancy Protocol (VRRP).
`Mobile ad hoc networks (MANet) and Cisco mobile networks.
`
`Protocol Independent Multicast (PIM) sparse mode (PIM-SM),
`bidirectional PIM (bidir-PIM), Source Specific Multicast
`(SSM), Multicast Source Discovery Protocol (MSDP), Internet
`Group Management Protocol (IGMP), and Multicast VPN
`(MVPN).
`Bidirectional forwarding detection (BFD).
`Border Gateway Protocol (BGP), multiprotocol BGP,
`multiprotocol BGP extensions for IP multicast.
`
`Enhanced Interior Gateway Routing Protocol (EIGRP).
`
`Intermediate System-to-Intermediate System (IS-IS).
`
`On-Demand Routing (ODR).
`
`Open Shortest Path First (OSPF).
`
`IP routing protocol-independent features and commands.
`Generic policy-based routing (PBR) features and commands are
`included.
`
`Routing Information Protocol (RIP).
`
`Cisco IOS IP Service Level Agreements (IP SLAs).
`
`Cisco Express Forwarding, fast switching, and Multicast
`Distributed Switching (MDS).
`
`For IPv6 features, protocols, and technologies, go to the IPv6
`“Start Here” document.
`
`ISO Connectionless Network Service (CLNS).
`
`
`
`vii
`
`

`
`Documentation Organization
`
`
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References (continued)
`
`About Cisco IOS Software Documentation
`
`Features/Protocols/Technologies
`VLANs, Inter-Switch Link (ISL) encapsulation, IEEE 802.10
`encapsulation, IEEE 802.1Q encapsulation, and multilayer
`switching (MLS).
`Cisco IOS Gateway GPRS Support Node (GGSN) in a
`2.5-generation general packet radio service (GPRS) and
`3-generation universal mobile telecommunication system (UMTS)
`network.
`
`Cisco Mobile Wireless Home Agent, an anchor point for mobile
`terminals for which mobile IP or proxy mobile IP services are
`provided.
`
`Cisco Packet Data Serving Node (PDSN), a wireless gateway that
`is between the mobile infrastructure and standard IP networks and
`that enables packet data services in a code division multiple access
`(CDMA) environment.
`
`Cisco IOS radio access network products.
`
`MPLS Label Distribution Protocol (LDP), MPLS Layer 2 VPNs,
`MPLS Layer 3 VPNs, MPLS traffic engineering (TE), and
`MPLS Embedded Management (EM) and MIBs.
`
`Unicast and multicast topology configurations, traffic
`classification, routing protocol support, and network
`management support.
`
`Network traffic data analysis, aggregation caches, and export
`features.
`
`Basic system management; system monitoring and logging;
`troubleshooting, logging, and fault management;
`Cisco Discovery Protocol; Cisco IOS Scripting with Tool
`Control Language (Tcl); Cisco networking services (CNS);
`DistributedDirector; Embedded Event Manager (EEM);
`Embedded Resource Manager (ERM); Embedded Syslog
`Manager (ESM); HTTP; Remote Monitoring (RMON); SNMP;
`and VPN Device Manager Client for Cisco IOS software
`(XSM Configuration).
`Novell Internetwork Packet Exchange (IPX) protocol.
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS LAN Switching Configuration Guide
`
` (cid:129) Cisco IOS LAN Switching Command Reference
`
` (cid:129) Cisco IOS Mobile Wireless Gateway GPRS Support
`Node Configuration Guide
`
` (cid:129) Cisco IOS Mobile Wireless Gateway GPRS Support
`Node Command Reference
` (cid:129) Cisco IOS Mobile Wireless Home Agent
`Configuration Guide
`
` (cid:129) Cisco IOS Mobile Wireless Home Agent
`Command Reference
` (cid:129) Cisco IOS Mobile Wireless Packet Data Serving Node
`Configuration Guide
`
` (cid:129) Cisco IOS Mobile Wireless Packet Data Serving Node
`Command Reference
` (cid:129) Cisco IOS Mobile Wireless Radio Access Networking
`Configuration Guide
`
` (cid:129) Cisco IOS Mobile Wireless Radio Access Networking
`Command Reference
` (cid:129) Cisco IOS Multiprotocol Label Switching
`Configuration Guide
`
` (cid:129) Cisco IOS Multiprotocol Label Switching
`Command Reference
` (cid:129) Cisco IOS Multi-Topology Routing
`Configuration Guide
`
` (cid:129) Cisco IOS Multi-Topology Routing
`Command Reference
` (cid:129) Cisco IOS NetFlow Configuration Guide
`
` (cid:129) Cisco IOS NetFlow Command Reference
` (cid:129) Cisco IOS Network Management Configuration Guide
`
` (cid:129) Cisco IOS Network Management Command Reference
`
` (cid:129) Cisco IOS Novell IPX Configuration Guide
`
` (cid:129) Cisco IOS Novell IPX Command Reference
`
`
`
`viii
`
`

`
`About Cisco IOS Software Documentation
`
`
`
`Documentation Organization
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References (continued)
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS Optimized Edge Routing
`Command Reference
`
`Features/Protocols/Technologies
`Optimized edge routing (OER) monitoring and automatic route
`optimization and load distribution for multiple connections
`between networks.
` (cid:129) Cisco IOS Performance Routing Configuration Guide Performance Routing (PfR) provides additional intelligence to
`classic routing technologies to track the performance of, or
`verify the quality of, a path between two devices over a WAN
`infrastructure in order to determine the best egress or ingress
`path for application traffic.
`Traffic queueing, traffic policing, traffic shaping, Modular QoS
`CLI (MQC), Network-Based Application Recognition (NBAR),
`Multilink PPP (MLP) for QoS, header compression, AutoQoS,
`Resource Reservation Protocol (RSVP), and weighted random
`early detection (WRED).
`Access control lists (ACLs); authentication, authorization, and
`accounting (AAA); firewalls; IP security and encryption;
`neighbor router authentication; network access security;
`network data encryption with router authentication; public key
`infrastructure (PKI); RADIUS; TACACS+; terminal access
`security; and traffic filters.
`Access Control Lists (ACLs); Firewalls: Context-Based Access
`Control (CBAC) and Zone-Based Firewall; Cisco IOS Intrusion
`Prevention System (IPS); Flexible Packet Matching; Unicast
`Reverse Path Forwarding (uRPF); Threat Information
`Distribution Protocol (TIDP) and TMS.
`Control Plane Policing, Neighborhood Router Authentication.
`
` (cid:129) Cisco IOS Quality of Service Solutions
`Configuration Guide
`
` (cid:129) Cisco IOS Quality of Service Solutions
`Command Reference
`
` (cid:129) Cisco IOS Security Command Reference
`
` (cid:129) Cisco IOS Security Configuration Guide: Securing the
`Data Plane
`
` (cid:129) Cisco IOS Security Configuration Guide: Securing the
`Control Plane
` (cid:129) Cisco IOS Security Configuration Guide: Securing
`User Services
`
` (cid:129) Cisco IOS Security Configuration Guide: Secure
`Connectivity
`
` (cid:129) Cisco IOS Service Advertisement Framework
`Configuration Guide
`
` (cid:129) Cisco IOS Service Advertisement Framework
`Command Reference
` (cid:129) Cisco IOS Service Selection Gateway
`Configuration Guide
`
` (cid:129) Cisco IOS Service Selection Gateway
`Command Reference
`
`AAA (includes 802.1x authentication and Network Admission
`Control [NAC]); Security Server Protocols (RADIUS and
`TACACS+); Secure Shell (SSH); Secure Access for Networking
`Devices (includes Autosecure and Role-Based CLI access);
`Lawful Intercept.
`Internet Key Exchange (IKE) for IPsec VPNs; IPsec Data Plane
`features; IPsec Management features; Public Key Infrastructure
`(PKI); Dynamic Multipoint VPN (DMVPN); Easy VPN; Cisco
`Group Encrypted Transport VPN (GETVPN); SSL VPN.
`Cisco Service Advertisement Framework.
`
`Subscriber authentication, service access, and accounting.
`
`
`
`ix
`
`

`
`Documentation Organization
`
`
`
`Table 1
`
`Cisco IOS Configuration Guides and Command References (continued)
`
`About Cisco IOS Software Documentation
`
`Configuration Guide and Command Reference Titles
` (cid:129) Cisco IOS Software Activation Configuration Guide
`
` (cid:129) Cisco IOS Software Activation Command Reference
`
` (cid:129) Cisco IOS Software Modularity Installation and
`Configuration Guide
`
` (cid:129) Cisco IOS Software Modularity Command Reference
`
` (cid:129) Cisco IOS Terminal Services Configuration Guide
`
` (cid:129) Cisco IOS Terminal Services Command Reference
` (cid:129) Cisco IOS Virtual Switch Command Reference
`
` (cid:129) Cisco IOS Voice Configuration Library
`
` (cid:129) Cisco IOS Voice Command Reference
`
` (cid:129) Cisco IOS VPDN Configuration Guide
`
` (cid:129) Cisco IOS VPDN Command Reference
`
` (cid:129) Cisco IOS Wide-Area Networking
`Configuration Guide
`
` (cid:129) Cisco IOS Wide-Area Networking
`Command Reference
` (cid:129) Cisco IOS Wireless LAN Configuration Guide
`
` (cid:129) Cisco IOS Wireless LAN Command Reference
`
`Features/Protocols/Technologies
`An orchestrated collection of processes and components to
`activate Cisco IOS software feature sets by obtaining and
`validating Cisco software licenses.
`Installation and basic configuration of software modularity
`images, including installations on single and dual route
`processors, installation rollbacks, software modularity binding,
`software modularity processes, and patches.
`DEC, local-area transport (LAT), and X.25 packet
`assembler/disassembler (PAD).
`
`Virtual switch redundancy, high availability, and packet handling;
`converting between standalone and virtual switch modes; virtual
`switch link (VSL); Virtual Switch Link Protocol (VSLP).
`
`Note
`
`For information about virtual switch configuration, see
`the product-specific software configuration information
`for the Cisco Catalyst 6500 series switch or for the
`Metro Ethernet 6500 series switch.
`Cisco IOS support for voice call control protocols, interoperability,
`physical and virtual interface management, and troubleshooting.
`The library includes documentation for IP telephony applications.
`Layer 2 Tunneling Protocol (L2TP) dial-out load balancing and
`redundancy; L2TP extended failover; L2TP security VPDN;
`multihop by Dialed Number Identification Service (DNIS);
`timer and retry enhancements for L2TP and Layer 2 Forwarding
`(L2F); RADIUS Attribute 82 (tunnel assignment ID);
`shell-based authentication of VPDN users; tunnel authentication
`via RADIUS on tunnel terminator.
`Frame Relay; Layer 2 Tunnel Protocol Version 3 (L2TPv3);
`L2VPN Pseudowire Redundancy; L2VPN Interworking; Layer 2
`Local Switching; Link Access Procedure, Balanced (LAPB);
`and X.25.
`
`Broadcast key rotation, IEEE 802.11x support, IEEE 802.1x
`authenticator, IEEE 802.1x local authentication service for
`Extensible Authentication Protocol-Flexible Authentication via
`Secure Tunneling (EAP-FAST), Multiple Basic Service Set ID
`(BSSID), Wi-Fi Multimedia (WMM) required elements, and
`Wi-Fi Protected Access (WPA).
`
`
`
`x
`
`

`
`About Cisco IOS Software Documentation
`
`Additional Resources and Documentation Feedback
`
`
`
`Table 2 lists documents and resources that supplement the Cisco IOS software configuration guides and
`command references.
`
`Table 2
`
`Cisco IOS Supplementary Documents and Resources
`
`Document Title or Resource
`Cisco IOS Master Command List, All Releases
`
`Cisco IOS New, Modified, Removed, and
`Replaced Commands
`
`Cisco IOS System Message Guide
`
`Cisco IOS Debug Command Reference
`
`Release Notes and Caveats
`
`MIBs
`
`RFCs
`
`Description
`Alphabetical list of all the commands documented in all
`Cisco IOS releases.
`List of all the new, modified, removed, and replaced commands
`for a Cisco IOS release.
`List of Cisco IOS system messages and descriptions. System
`messages may indicate problems with your system, may be
`informational only, or may help diagnose problems with
`communications lines, internal hardware, or system software.
`Alphabetical list of debug commands including brief
`descriptions of use, command syntax, and usage guidelines.
`Information about new and changed features, system
`requirements, and other useful information about specific
`software releases; information about defects in specific
`Cisco IOS s