Cisco NX-OS

Cisco NX-OS — Nexus 5k/7k/9k data-center switches. Shares Cisco grammar with IOS but has its own command surface for features, image management, and shell escape.

Shorthand expansion

Alias	Canonical
`sh`, `sho`, `shw`	`show`
`p`	`ping`
`tr`	`traceroute`

Allowed (head)

show, ping, ping6, traceroute, traceroute6 — NX-OS has separate IPv6 probe verbs
dir, more
terminal length, terminal monitor, terminal no monitor
where

Blocked (head)

Shell / scripting escapes — full bypass:

run bash — drops to the underlying Linux shell
run python
python — NX-OS embedded Python interpreter (separate entry point)
source — runs a script from bootflash
tclsh
event manager run
scheduler

NX-OS-specific state mutation:

feature — turns capabilities on/off (feature bgp, feature ospf)
no feature
install — install all is the image upgrade flow
reload, restart, clear

Privileged-mode + configure:

enable, disable, configure, conf t

Saves + file mutations:

write, copy, delete, erase, format, boot

Session control:

logout, exit, quit, end

Pipe stages

NX-OS pipes are richer than IOS — they include UNIX-style filters (grep, head, sort, uniq, wc).

Allowed: include, exclude, begin, section, count, grep, egrep, head, last, sort, uniq, wc, diff

Blocked:

redirect, tee, append — file writes
vsh — NX-OS virtual shell escape, available as a pipe stage rather than a top-level command. Blocked separately because pipe-stage commands are checked on a separate list from top-level ones.
run-script