Manual export
Export a Cisco switch by hand
One SSH transcript for IOS, IOS-XE or NX-OS, with identity and neighbors.
On this page
IOS and IOS-XE
enable
terminal length 0
terminal width 511
show version
show inventory
show running-config
show cdp neighbors detail
show lldp neighbors detail
show vlan brief
show ip route
show ip route vrf *
show ipv6 route
show ip bgp summary
show ip ospf neighbor
show interfaces
show interfaces status
show interfaces transceiver
show interfaces trunk
show bgp vrf all all summary
show ip eigrp neighbors
show bfd neighbors
show standby brief
show vrrp brief
show crypto pki certificates
show crypto pki trustpoints status
show crypto session
show policy-map interface
show environment all
show platform resources
show processes cpu
show license summary
show switch
show power inline
show etherchannel summary
show spanning-tree summary
show vtp status
show mac address-table count
show access-session
show ntp associations
show clock
show access-lists
show ipv6 access-listIOS / IOS XE router
enable
terminal length 0
terminal width 511
show version
show inventory
show running-config
show cdp neighbors detail
show lldp neighbors detail
show ip route
show ip route vrf *
show ipv6 route
show ip bgp summary
show ip ospf neighbor
show interfaces
show bgp vrf all all summary
show ip eigrp neighbors
show bfd neighbors
show standby brief
show vrrp brief
show crypto pki certificates
show crypto pki trustpoints status
show crypto session
show policy-map interface
show environment all
show platform resources
show processes cpu
show license summary
show ntp associations
show clock
show access-lists
show ipv6 access-list
show ip nat statistics
show ip nat translationsVoice Router (CUBE)
enable
terminal length 0
terminal width 511
show version
show inventory
show running-config
show cdp neighbors detail
show lldp neighbors detail
show ip route
show ip route vrf *
show ipv6 route
show ip bgp summary
show ip ospf neighbor
show interfaces
show bgp vrf all all summary
show ip eigrp neighbors
show bfd neighbors
show standby brief
show vrrp brief
show crypto pki certificates
show crypto pki trustpoints status
show crypto session
show policy-map interface
show environment all
show platform resources
show processes cpu
show license summary
show ntp associations
show clock
show access-lists
show ipv6 access-list
show ip nat statistics
show ip nat translations
show sip-ua register status
show sip-ua status
show dial-peer voice summary
show voice class sip-options-keepalive
show voice dsp group allNX-OS
terminal length 0
terminal width 511
show version
show inventory
show running-config
show cdp neighbors detail
show lldp neighbors detail
show vlan brief
show ip route vrf all
show ipv6 route vrf all
show bgp vrf all all summary
show ip ospf neighbors vrf all
show interface
show interface transceiver details
show bfd neighbors
show hsrp brief
show vrrp
show crypto ca certificates
show policy-map interface
show environment
show system resources
show license usage
show port-channel summary
show spanning-tree summary
show vpc brief
show mac address-table count
show ntp peer-status
show clock
show ip eigrp neighbors vrf all
show ip access-lists
show ipv6 access-listsSave the transcript
- Save the whole session as one
.txtfile and keep the prompt lines (sw1#). Without prompt lines the whole file is read as the running configuration. - Use the detailed CDP and LLDP commands for link neighbors. Keep the final switch prompt after the OSPF or BGP answer.
What the upload is read for
| Output | Read for |
|---|---|
show running-config | The configuration |
show version | Release, model and serial |
show inventory | Model and serial |
show cdp neighbors detail, show lldp neighbors detail | Neighbor links: local port, neighbor name and port, platform and address |
Through the Relay
| Reading | Command |
|---|---|
| Routing table, IOS and IOS-XE | show ip route, show ip route vrf *, show ipv6 route |
| Routing table, NX-OS | show ip route vrf all, show ipv6 route vrf all |
Routes pasted with a running configuration appear under Routes in terminal output on the Routing tab.
Upload
Open New analysis
Choose File upload and select the file, or choose Paste, paste the output and select Upload and parse.
It is sent at once
One file per upload. ConfigProof reads the vendor and export type from the content, not the file name, then asks the client, project and name. If your role is limited to certain clients, choose the client first.
Answer the picker if asked
A file that holds several VDOMs, contexts, virtual systems or gateways opens a picker. Each one you choose is its own analysis.
Operational CLI commands
For CLI inspection. Switch ACL hit counters are not imported into the report.
show access-lists
show ipv6 access-listshow ip nat statistics
show ip nat translationsCounters depend on ACL statistics being enabled. Switch ACL hit counters are not imported into the report.
show ip access-lists
show ipv6 access-listsshow ip nat statistics
show ip nat translationsReport evidence and rule hit counts
IOS / IOS-XE. Available sources across collection methods
Hit counters without a supported source: ipv4 acl, ipv6 acl, mac acl, vacl, pacl.
- Supported checks
- Active routes, Route decisions, CDP / LLDP, Configuration history
- Checks not yet supported
- Tunnel, BGP and interface state, HA state, Lifecycle dates, Recommended release, Change attribution, Pending changes
- Outside this device’s role
- VPN and NAT, Remote access, Reachability, Rule dependencies
NX-OS
NX-OS. Available sources across collection methods
Hit counters without a supported source: ipv4 acl, ipv6 acl, mac acl, vacl, pacl.
- Supported checks
- Active routes, Route decisions, CDP / LLDP, Lifecycle dates, Configuration history
- Checks not yet supported
- Tunnel, BGP and interface state, HA state, Recommended release, Change attribution, Pending changes
- Outside this device’s role
- VPN and NAT, Remote access, Reachability, Rule dependencies