Cisco NX-OS

Cisco NX-OS — Nexus 5k/7k/9k data-center switches. Shares Cisco grammar with IOS but has its own command surface for features, image management, and shell escape.

Shorthand expansion

Alias	Canonical
sh, sho, shw	show
p	ping
tr	traceroute

Allowed (head)

• show, ping, ping6, traceroute, traceroute6 — NX-OS has separate IPv6 probe verbs
• dir, more
• terminal length, terminal monitor, terminal no monitor
• where

Blocked (head)

Shell / scripting escapes — full bypass:

• run bash — drops to the underlying Linux shell
• run python
• python — NX-OS embedded Python interpreter (separate entry point)
• source — runs a script from bootflash
• tclsh
• event manager run
• scheduler

NX-OS-specific state mutation:

• feature — turns capabilities on/off (feature bgp, feature ospf)
• no feature
• install — install all is the image upgrade flow
• reload, restart, clear

Privileged-mode + configure:

• enable, disable, configure, conf t

Saves + file mutations:

• write, copy, delete, erase, format, boot

Session control:

• logout, exit, quit, end

Pipe stages

NX-OS pipes are richer than IOS — they include UNIX-style filters (grep, head, sort, uniq, wc).

Allowed: include, exclude, begin, section, count, grep, egrep, head, last, sort, uniq, wc, diff

Blocked:

• redirect, tee, append — file writes
• vsh — NX-OS virtual shell escape, available as a pipe stage rather than a top-level command. Blocked separately because pipe-stage commands are checked on a separate list from top-level ones.
• run-script