Line Commands

exec-timeout

To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-timeout command in line configuration mode. To remove the timeout definition, use the no form of this command.

exec-timeout minutes [seconds]

no exec-timeout

Syntax Description

minutes

Integer that specifies the number of minutes. The default is 10 minutes.

seconds

(Optional) Additional time intervals in seconds.

Command Default

10 minutes

Command Modes

Line configuration (config-line)

Command History

Release

Modification

Cisco IOS XE Catalyst SD-WAN Release 17.10.1a

This command was introduced.

Usage Guidelines

If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist, the EXEC facility returns the terminal to the idle state and disconnects the incoming session.

To specify no timeout, enter the no form of this command.

The following example shows how to set a time interval of 2 minutes, 30 seconds:


Device(config)# line console 0
Device(config-line)# exec-timeout 2 30

The following example shows how to set a time interval of 10 seconds:


Device(config)# line aux 0
Device(config-line)# exec-timeout 0 10

line

To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode. To remove configuration from a specific line, use the no form of this command.

line { auto-consolidation | aux | con 0 | range | vty line-number }

no line { auto-consolidation aux | con 0 | range | vty line-number }

auto-consolidation

Enable or disable auto-consolidation of terminal lines.

aux

(Optional) Auxiliary EIA/TIA-232 DTE port. Must be addressed as relative line 0. The auxiliary port can be used for modem support and asynchronous connections.

con 0

Console 0 terminal line. The console port is DCE.

vty

Virtual terminal line for remote console access.

range

Range of lines with first line number and last line number.

line-number

Relative number of the virtual terminal line (or the first line in a contiguous group) that you want to configure when the line type is specified. Numbering begins with zero.

You can either configure a single line or a range.

Command Default

There is no default line.

Command Modes

Global configuration

Command History

Release

Modification

Cisco IOS XE Catalyst SD-WAN Release 17.2.1v

Command qualified for use in Cisco vManage CLI templates.

Cisco IOS XE Catalyst SD-WAN Release 17.10.1a

Additional parameters qualified: auto-consolidation , aux and range .

Usage Guidelines

For usage guidelines, see the Cisco IOS line command.

The terminal from which you locally configure the router is attached to the console port. To configure line parameters for the console port, enter the following: 

line console 0

The following example starts configuration for virtual terminal lines 0 to 4:

line vty 0 4

The following example configuration shows how to disable auto-consolidation:

line auto-consolidation

To configure line parameters for the auxiliary port, enter the following:

line aux 0

The following example starts configuration for a range of lines:

line range 1 5

line con transport

To set transport output parameters for line console 0, use the transport command in line console 0 configuration mode. To remove transport parameters for line console 0, use the no form of this command.

transport { output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

no transport { output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

Table 1. Syntax Description
output

Defines the protocols that can be used from outgoing connections line.
aceron

(Optional) Selects the remote console for Application Control Engine (ACE)-based blade.
all

Assigns the device or interface as the designated-gateway for the domain.
lapb-ta

(Optional) Selects the ISDN link access procedure, balanced-terminal adapter protocol.
lat

(Optional) Selects the digital local-area transport (LAT) protocol and specifies both incoming reverse LAT and host-initiated connections.

mop

(Optional) Selects Maintenance Operation Protocol (MOP).
nasi

(Optional) Selects NetWare Access Servers Interface (NASI) as the input transport protocol.
none

Prevents any protocol selection on the line. This makes the port unusable by incoming connections.
pad

(Optional) Selects X.3 packet assembler/disassembler (PAD) incoming connections.
rlogin

(Optional) Selects the UNIX rlogin protocol.
ssh

(Optional) Selects the Secure Shell (SSH) protocol.
telnet

(Optional) Specifies all types of incoming TCP/IP connections.
udptn

(Optional) Specifies the asynchronous data that is sent through UDP Telnet (UDPTN).
v120

(Optional) Selects the v120 protocol for incoming asynchronous connections over ISDN.

Command Default

SSH is enabled for incoming connections by default on VTY lines only.

Command Modes

Line console configuration (config-line).

Command History

Release Modification

Cisco IOS XE Catalyst SD-WAN Release 17.2.1v

Command qualified for use in Cisco SD-WAN Manager CLI templates.

Usage Guidelines

You can specify one protocol, multiple protocols, all protocols, or no protocols. To specify multiple protocols, enter the keyword for each protocol, separated by a space under any line configuration mode.

Examples

The following example shows how to configure the line console 0 to only allow ssh connections from the console 0 interface.

Device(config)# line console 0
Device(config-line)# transport output ssh

line vty transport

To set transport input and output parameters for line vty 0 4, use the transport command in line vty 0 4 configuration mode. To remove transport parameters for line vty 0 4, use the no form of this command.

transport { input [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] | output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

no transport { input [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] | output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

Table 2. Syntax Description
input

Defines the protocols to be used to connect to a specific line of the router.
output

Defines the protocols that can be used for outgoing connections from line.
aceron

(Optional) Selects the remote console for Application Control Engine (ACE)-based blade.
all

Assigns the device or interface as the designated-gateway for the domain.
lapb-ta

(Optional) Selects the ISDN link access procedure, balanced-terminal adapter protocol.
lat

(Optional) Selects the digital local-area transport (LAT) protocol and specifies both incoming reverse LAT and host-initiated connections.

mop

(Optional) Selects Maintenance Operation Protocol (MOP).
nasi

(Optional) Selects NetWare Access Servers Interface (NASI) as the input transport protocol.
none

Prevents any protocol selection on the line. This makes the port unusable by incoming connections.
pad

(Optional) Selects X.3 packet assembler/disassembler (PAD) incoming connections.
rlogin

(Optional) Selects the UNIX rlogin protocol.
ssh

(Optional) Selects the Secure Shell (SSH) protocol.
telnet

(Optional) Specifies all types of incoming TCP/IP connections.
udptn

(Optional) Specifies the asynchronous data that is sent through UDP Telnet (UDPTN).
v120

(Optional) Selects the v120 protocol for incoming asynchronous connections over ISDN.

Command Default

SSH is enabled for incoming connections on VTY lines.

Command Modes

Line VTY configuration (config-line).

Command History

Release Modification

Cisco IOS XE Catalyst SD-WAN Release 17.2.1v

Command qualified for use in Cisco SD-WAN Manager CLI templates.

Usage Guidelines

You can specify one protocol, multiple protocols, all protocols, or no protocols. To specify multiple protocols, enter the keyword for each protocol, separated by a space under any line configuration mode.

Examples

The following example shows how to configure the line vty 0 4 to only allow ssh connections.

Device(config)#line vty 0 4
Device(config-line)#transport input ssh

line aux transport

To define which protocols to use to connect to a specific line of the router, use the transport input command in line configuration mode. To change or remove the protocol, use the no form of this command.

transport { input [ aceron | all | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] | output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

no transport { input [ aceron | all | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] | output [ aceron | all | lapb-ta | lat | mop | nasi | none | pad | rlogin | ssh | telnet | udptn | v120 ] }

Table 3. Syntax Description
input

Defines the protocols to be used to connect to a specific line of the router.
output

Defines the protocols that can be used for outgoing connections from line.
aceron

(Optional) Selects the remote console for Application Control Engine (ACE)-based blade.
all

Assigns the device or interface as the designated-gateway for the domain.
lat

(Optional) Selects the digital local-area transport (LAT) protocol and specifies both incoming reverse LAT and host-initiated connections.

mop

(Optional) Selects Maintenance Operation Protocol (MOP).
nasi

(Optional) Selects NetWare Access Servers Interface (NASI) as the input transport protocol.
none

Prevents any protocol selection on the line. This makes the port unusable by incoming connections.
pad

(Optional) Selects X.3 packet assembler/disassembler (PAD) incoming connections.
rlogin

(Optional) Selects the UNIX rlogin protocol.
ssh

(Optional) Selects the Secure Shell (SSH) protocol.
telnet

(Optional) Specifies all types of incoming TCP/IP connections.
udptn

(Optional) Specifies the asynchronous data that is sent through UDP Telnet (UDPTN).
v120

(Optional) Selects the v120 protocol for incoming asynchronous connections over ISDN.

Command Default

No protocols are allowed on the auxiliary (AUX) lines.

Command Modes

Line configuration (config-line)

Command History

Release

Modification

Cisco IOS XE Catalyst SD-WAN Release 17.10.1a

This command was introduced.

Usage Guidelines

You can specify one protocol, multiple protocols, all protocols, or no protocols. To specify multiple protocols, enter the keyword for each protocol, separated by a space under any line configuration mode.

The following example shows how to set the incoming protocol for the aux line 0 to Telnet:

Device(config)# line aux 0
Device(config-line)# exec-timeout 0 10
Device(config-line)# transport input

password (line configuration)

To specify a password on a line, use the password command in line configuration mode. To remove the password, use the no form of this command.

password password

no password

Syntax Description

password

Character string that specifies the line password. The first character cannot be a number. The string can contain any alphanumeric characters, including spaces, up to 80 characters. You cannot specify the password in the format number-space-anything. The space after the number causes problems. For example, hello 21 is a legal password, but 21 hello is not. The password checking is case sensitive. For example, the password Secret is different than the password secret.

Command Default

No password is specified.

Command Modes

Line configuration (config-line)

Command History

Release

Modification

Cisco IOS XE Catalyst SD-WAN Release 17.10.1a

This command was introduced.

Usage Guidelines

For usage guidelines, see the Cisco IOS XE password command.

The following example removes the password from virtual terminal lines 1 to 4:

Device(config)# line vty 1 4
Device(config-line)# no password

The following example removes the password from aux line 0:

Device(config)# line aux 0
Device(config-line)# no password

privilege level

To set the default privilege level for a line, use the privilege level command in line configuration mode. To restore the default user privilege level to the line, use the no form of this command.

privilege level level

no privilege level

Syntax Description

level

Privilege level associated with the specified line.

Command Default

Level 15 is the level of access permitted by the enable password.

Level 1 is normal EXEC-mode user privileges.

Command Modes

Line configuration (config-line)

Command History

Release

Modification

Cisco IOS XE Catalyst SD-WAN Release 17.10.1a

This command was introduced.

Usage Guidelines

For usage guidelines, see the Cisco IOS XE privilege level command.

The following example shows how to configure the auxiliary line for privilege level 5. Anyone using the auxiliary line has privilege level 5 by default: 


Device(config)# line aux 0
Device(config-line)# privilege level 5