Table Of Contents

CLI Command Summary By Mode

Action List Optimization Configuration Mode Commands

(config-actlist-optm) appscope 2-311

(config-actlist-optm) cache 2-312

(config-actlist-optm) delta 2-313

(config-actlist-optm) dynamic etag 2-314

(config-actlist-optm) flashforward 2-315

(config-actlist-optm) flashforward-object 2-315

Chaingroup Configuration Mode Commands     2-317

(config-chaingroup) cert 2-318

Class Map Configuration Mode Commands     2-319

(config-cmap) description 2-320

(config-cmap) match access-list 2-321

(config-cmap) match any 2-322

(config-cmap) match destination-address 2-323

(config-cmap) match port 2-324

(config-cmap) match source-address 2-326

(config-cmap) match virtual-address 2-327

Class Map FTP Inspection Configuration Mode Commands     2-330

(config-cmap-ftp-insp) description 2-331

(config-cmap-ftp-insp) match request-method 2-332

Class Map HTTP Inspection Configuration Mode Commands     2-334

(config-cmap-http-insp) description 2-336

(config-cmap-http-insp) match content 2-337

(config-cmap-http-insp) match content length 2-338

(config-cmap-http-insp) match header 2-340

(config-cmap-http-insp) match header length 2-344

(config-cmap-http-insp) match header mime-type 2-346

(config-cmap-http-insp) match port-misuse 2-348

(config-cmap-http-insp) match request-method 2-350

(config-cmap-http-insp) match transfer-encoding 2-352

(config-cmap-http-insp) match url 2-353

(config-cmap-http-insp) match url length 2-354

Class Map HTTP Load Balancing Configuration Mode Commands     2-356

(config-cmap-http-lb) description 2-358

(config-cmap-http-lb) match class-map 2-359

(config-cmap-http-lb) match http cookie 2-360

(config-cmap-http-lb) match http header 2-362

(config-cmap-http-lb) match http url 2-365

(config-cmap-http-lb) match source-address 2-367

Class Map Management Configuration Mode Commands     2-368

(config-cmap-mgmt) description 2-369

(config-cmap-mgmt) match protocol 2-370

Clear Exec Mode Commands     2-6

clear access-list 2-8

clear accounting log 2-9

clear arp 2-10

clear buffer stats 2-11

clear capture 2-12

clear conn 2-13

clear cores 2-14

clear debug-logfile 2-15

clear fifo stats 2-16

clear ft 2-17

clear icmp statistics 2-18

clear interface 2-19

clear ip 2-20

clear line 2-21

clear logging 2-22

clear netio stats 2-23

clear ntp 2-24

clear probe 2-25

clear processes log 2-26

clear rserver 2-27

clear rtcache 2-28

clear screen 2-29

clear serverfarm 2-30

clear service-policy 2-31

clear ssh 2-32

clear startup-config 2-33

clear stats 2-34

clear sticky database 2-35

clear tcp statistics 2-36

clear telnet 2-37

clear udp statistics 2-38

clear user 2-39

clear vnet stats 2-40

clear xlate 2-41

clock set 2-42

Configuration Mode Commands     2-177

(config) aaa accounting default 2-178

(config) aaa authentication login 2-179

(config) aaa group server 2-181

(config) access-group 2-183

(config) access-list ethertype 2-185

(config) access-list extended 2-186

(config) access-list remark 2-192

(config) access-list resequence 2-193

(config) arp 2-195

(config) banner 2-197

(config) boot system 2-199

(config) class-map 2-200

(config) clock summer-time 2-206

(config) clock timezone 2-203

(config) config-register 2-208

(config) context 2-209

(config) crypto chaingroup 2-210

(config) crypto csr-params 2-211

(config) domain 2-212

(config) end 2-213

(config) exit 2-214

(config) ft auto-sync 2-215

(config) ft group 2-216

(config) ft interface vlan 2-217

(config) ft peer 2-218

(config) ft track host 2-219

(config) ft track interface 2-220

(config) hostname 2-213, 2-214, 2-221

(config) interface 2-222

(config) ip dhcp relay 2-224

(config) ip route 2-226

(config) ldap-server host 2-227

(config) ldap-server port 2-229

(config) ldap-server timeout 2-230

(config) line vty 2-231

(config) logging buffered 2-233

(config) logging console 2-234

(config) logging device-id 2-235

(config) logging enable 2-236

(config) logging facility 2-237

(config) logging fastpath 2-238

(config) logging history 2-239

(config) logging host 2-240

(config) logging message 2-242

(config) logging monitor 2-244

(config) logging persistent 2-246

(config) logging queue 2-247

(config) logging reject-newconn 2-250

(config) logging standby 2-251

(config) logging timestamp 2-252

(config) logging trap 2-253

(config) login timeout 2-232

(config) ntp 2-254

(config) optimize 2-256

(config) parameter-map type 2-194, 2-257

(config) policy-map 2-259

(config) probe 2-262

(config) radius-server attribute nas-ipaddr 2-264

(config) radius-server deadtime 2-265

(config) radius-server host 2-266

(config) radius-server key 2-269

(config) radius-server retransmit 2-270

(config) radius-server timeout 2-271

(config) rate-limit 2-248

(config) resource-class 2-272

(config) role 2-273

(config) rserver 2-274

(config) script file 2-275

(config) serverfarm 2-276

(config) service-policy 2-277

(config) shared-vlan-hostid 2-279

(config) snmp-server community 2-280

(config) snmp-server contact 2-282

(config) snmp-server enable traps 2-283

(config) snmp-server host 2-285

(config) snmp-server location 2-287

(config) snmp-server trap link ietf 2-288

(config) snmp-server trap-source vlan 2-289

(config) snmp-server user 2-290

(config) ssh key 2-292

(config) ssh maxsessions 2-294

(config) ssl-proxy service 2-295

(config) sticky http-cookie 2-296

(config) sticky http-header 2-297

(config) sticky ip-netmask 2-299

(config) tacacs-server deadtime 2-301

(config) tacacs-server host 2-302

(config) tacacs-server key 2-304

(config) tacacs-server timeout 2-305

(config) telnet maxsessions 2-306

(config) timeout xlate 2-307

(config) username 2-308

Console Configuration Mode Commands     2-372

(config-console) databits 2-373

(config-console) parity 2-374

(config-console) speed 2-375

(config-console) stopbits 2-376

Context Configuration Mode Commands     2-377

(config-context) allocate-interface 2-379

(config-context) description 2-380

(config-context) member 2-381

CSR Parameters Configuration Mode Commands     2-382

(config-csr-params) common-name 2-384

(config-csr-params) country-name 2-385

(config-csr-params) email 2-386

(config-csr-params) locality 2-387

(config-csr-params) organization-name 2-388

(config-csr-params) organization-unit 2-389

(config-csr-params) serial-number 2-390

(config-csr-params) state 2-391

Domain Configuration Mode Commands     2-392

(config-domain) add-object 2-393

Exec Mode Commands     2-2

capture 2-2

changeto 2-4

checkpoint 2-5

clear (See Clear Exec Mode Commands) 2-6

configure 2-43

copy capture 2-44

copy core 2-45

copy disk0 2-46

copy ftp 2-48

copy image 2-49

copy licenses 2-50

copy running-config 2-51

copy sftp 2-53

copy startup-config 2-52

copy tftp 2-54

crypto delete 2-55

crypto export 2-56

crypto generate csr 2-57

crypto generate key 2-58

crypto import 2-59

crypto verify 2-61

debug 2-62

delete 2-64

dir 2-65

exit 2-66

format flash 2-67

ft switchover 2-69

gunzip 2-70

invoke context 2-71

license 2-72

mkdir disk0 2-74

move disk0 2-75

ping 2-76

reload 2-77

rmdir disk0 2-78

setup 2-79

show (See Show Exec Mode Commands) 2-81

ssh 2-165

system internal 2-166

tac-pac 2-167

telnet 2-168

terminal 2-169

traceroute 2-171

undebug all 2-172

untar disk0 2-173

write 2-174

xml-show 2-175

FT Group Configuration Mode Commands     2-395

(config-ft-group) associate-context 2-396

(config-ft-group) inservice 2-397

(config-ft-group) peer 2-398

(config-ft-group) peer priority 2-399

(config-ft-group) preempt 2-400

(config-ft-group) priority 2-401

FT Interface Configuration Mode Commands     2-402

(config-ft-intf) ip 2-403

(config-ft-intf) peer ip 2-404

(config-ft-intf) shutdown 2-405

FT Peer Configuration Mode Commands     2-406

(config-ft-peer) ft-interface vlan 2-407

(config-ft-peer) heartbeat 2-408

(config-ft-peer) query-interface 2-409

FT Track Host Configuration Mode Commands     2-410

(config-ft-track-host) peer priority 2-411

(config-ft-track-host) peer probe 2-412

(config-ft-track-host) peer track-host 2-413

(config-ft-track-host) priority 2-414

(config-ft-track-host) probe 2-415

(config-ft-track-host) track-host 2-416

FT Track Interface Configuration Mode Commands     2-417

(config-ft-track-interface) peer priority 2-418

(config-ft-track-interface) peer track-interface vlan 2-419

(config-ft-track-interface) priority 2-420

(config-ft-track-interface) track-interface vlan 2-421

Interface Configuration Mode Commands     2-422

(config-if) access-group 2-423

(config-if) alias 2-425

(config-if) arp 2-426

(config-if) bridge-group 2-427

(config-if) channel-group 2-428

(config-if) description 2-429

(config-if) duplex 2-430, 2-453

(config-if) fragment chain 2-431

(config-if) fragment min-mtu 2-432

(config-if) fragment timeout 2-433

(config-if) ft-port 2-434

(config-if) icmp-guard 2-435

(config-if) ip address 2-436

(config-if) ip df 2-437

(config-if) ip dhcp relay enable 2-438

(config-if) ip dhcp relay server 2-439

(config-if) ip options 2-440

(config-if) ip ttl minimum 2-441

(config-if) ip verify reverse-path 2-442

(config-if) mac-sticky enable 2-443

(config-if) mtu 2-444

(config-if) nat-pool 2-445

(config-if) normalization 2-447

(config-if) peer ip address 2-448

(config-if) port-channel load-balance 2-449

(config-if) service-policy input 2-450

(config-if) shutdown 2-451

(config-if) switchport access vlan 2-455

(config-if) switchport trunk allowed vlan 2-456

(config-if) switchport trunk native vlan 2-458

LDAP Configuration Mode Commands     2-459

(config-ldap) attribute user-profile 2-461

(config-ldap) baseDN 2-462

(config-ldap) filter search-user 2-463

(config-ldap) server 2-464

Line Configuration Mode Commands     2-465

(config-line) session-limit 2-466

Optimize Configuration Mode Commands     2-310, 2-468

(config-optimize) appscope-log 2-469

(config-optimize) debug-level 2-470

Parameter Map Connection Configuration Mode Commands     2-472

(config-parammap-conn) exceed-mss 2-473

(config-parammap-conn) nagle 2-474

(config-parammap-conn) random-sequence-number 2-475

(config-parammap-conn) reserved-bits 2-476

(config-parammap-conn) set ip tos 2-477

(config-parammap-conn) set tcp ack-delay 2-478

(config-parammap-conn) set tcp mss min 2-479

(config-parammap-conn) set tcp syn-retry 2-481

(config-parammap-conn) set tcp timeout 2-482

(config-parammap-conn) set tcp wan-optimization 2-483

(config-parammap-conn) set tcp window-scale 2-485

(config-parammap-conn) set timeout inactivity 2-486

(config-parammap-conn) slowstart 2-487

(config-parammap-conn) syn-data 2-488

(config-parammap-conn) tcp-options 2-489

(config-parammap-conn) urgent-flag 2-492

Parameter Map HTTP Configuration Mode Commands     2-493

(config-parammap-http) case-insensitive 2-494

(config-parammap-http) compress 2-495

(config-parammap-http) length 2-496

(config-parammap-http) persistence-rebalance 2-497

(config-parammap-http) server-conn reuse 2-498

(config-parammap-http) set content-maxparse-length 2-499

(config-parammap-http) set header-maxparse-length 2-500

(config-parammap-http) set secondary-cookie-delimiters 2-501

Parameter Map Optimization HTTP Configuration Mode Commands     2-502

(config-parammap-optmz) appscope optimize-rate-percent 2-503

(config-parammap-optmz) basefile anonymous-level 2-504

(config-parammap-optmz) cache key-modifier 2-505

(config-parammap-optmz) cache parameter 2-508

(config-parammap-optmz) cache-policy request 2-511

(config-parammap-optmz) cache-policy response 2-512

(config-parammap-optmz) cache ttl 2-510

(config-parammap-optmz) canonical-url 2-513

(config-parammap-optmz) clientscript-default 2-514

(config-parammap-optmz) delta 2-515

(config-parammap-optmz) expires-setting 2-518

(config-parammap-optmz) extract meta 2-519

(config-parammap-optmz) flashforward refresh-policy 2-520

(config-parammap-optmz) ignore-server-content 2-521

(config-parammap-optmz) parameter-summary parameter-value-limit 2-522

(config-parammap-optmz) post-content-buffer-limit 2-523

(config-parammap-optmz) rebase 2-524

(config-parammap-optmz) request-grouping-string 2-525

(config-parammap-optmz) server-header 2-526

(config-parammap-optmz) server-load 2-527

(config-parammap-optmz) utf8 threshold 2-529

Parameter Map SSL Configuration Mode Commands     2-530

(config-parammap-ssl) cipher 2-531

(config-parammap-ssl) version 2-533

Policy Map Class Configuration Mode Commands     2-538

(config-pmap-c) appl-parameter http advanced-options 2-538

(config-pmap-c) connection 2-539

(config-pmap-c) inspect 2-540

(config-pmap-c) loadbalance policy 2-543

(config-pmap-c) loadbalance vip icmp-reply 2-544

(config-pmap-c) loadbalance vip inservice 2-545

(config-pmap-c) nat dynamic 2-546

(config-pmap-c) nat static 2-547

(config-pmap-c) ssl-proxy 2-549

Policy Map Configuration Mode Commands     2-534

(config-pmap) class 2-536

(config-pmap) description 2-537

Policy Map FTP Inspection Class Configuration Mode Commands     2-555

(config-pmap-ftp-ins-c) deny 2-555

(config-pmap-ftp-ins-c) mask-reply 2-556

Policy Map FTP Inspection Configuration Mode Commands     2-550

(config-pmap-ftp-ins) class 2-551

(config-pmap-ftp-ins) description 2-552

(config-pmap-ftp-ins) match request-method 2-553

Policy Map FTP Inspection Match Configuration Mode Commands     2-557

(config-pmap-ftp-ins-m) deny 2-557

(config-pmap-ftp-ins-m) mask-reply 2-559

Policy Map Inspection HTTP Class Configuration Mode Commands     2-588

(config-pmap-ins-http-c) permit 2-588

(config-pmap-ins-http-c) reset 2-590

Policy Map Inspection HTTP Configuration Mode Commands     2-560

(config-pmap-ins-http) class 2-561

(config-pmap-ins-http) description 2-563

(config-pmap-ins-http) match content 2-564

(config-pmap-ins-http) match content length 2-566

(config-pmap-ins-http) match content-type-verification 2-568

(config-pmap-ins-http) match header 2-569

(config-pmap-ins-http) match header length 2-572

(config-pmap-ins-http) match header mime-type 2-573

(config-pmap-ins-http) match port-misuse 2-577

(config-pmap-ins-http) match request-method 2-579

(config-pmap-ins-http) match strict-http 2-581

(config-pmap-ins-http) match transfer-encoding 2-582

(config-pmap-ins-http) match url 2-584

(config-pmap-ins-http) match url length 2-586

(config-pmap-lb) description 2-596

(config-pmap-mgmt) description 2-625

Policy Map Inspection HTTP Match Configuration Mode Commands     2-591

(config-pmap-ins-http-m) permit 2-592

(config-pmap-ins-http-m) reset 2-593

Policy Map Load Balancing Class Configuration Mode Commands     2-605

(config-pmap-lb-c) compress 2-605

(config-pmap-lb-c) drop 2-606

(config-pmap-lb-c) forward 2-607

(config-pmap-lb-c) insert-http 2-608

(config-pmap-lb-c) serverfarm 2-609

(config-pmap-lb-c) set ip tos 2-611

(config-pmap-lb-c) ssl-proxy client 2-612

(config-pmap-lb-c) sticky-serverfarm 2-613

Policy Map Load Balancing Configuration Mode Commands     2-594

(config-pmap-lb) class 2-595

(config-pmap-lb) match http cookie 2-597

(config-pmap-lb) match http header 2-599

(config-pmap-lb) match http url 2-602

(config-pmap-lb) match source-address 2-604

Policy Map Load Balancing Match Configuration Mode Commands     2-614

(config-pmap-lb-m) drop 2-614

(config-pmap-lb-m) forward 2-615

(config-pmap-lb-m) insert-http 2-616

(config-pmap-lb-m) serverfarm 2-618

(config-pmap-lb-m) set ip tos 2-620

(config-pmap-lb-m) ssl-proxy client 2-621

(config-pmap-lb-m) sticky-serverfarm 2-622

Policy Map Management Class Configuration Mode Commands     2-626

(config-pmap-mgmt-c) deny 2-626

(config-pmap-mgmt-c) permit 2-627

Policy Map Management Configuration Mode Commands     2-623

(config-pmap-mgmt) class 2-624

Policy Map Optimization Class Configuration Mode Commands     2-637

(config-pmap-optmz-c) action 2-637

Policy Map Optimization Configuration Mode Commands     2-628

(config-pmap-optmz) class 2-629

(config-pmap-optmz) description 2-630

(config-pmap-optmz) match http cookie 2-631

(config-pmap-optmz) match http header 2-632

(config-pmap-optmz) match http url 2-635

Policy Map Optimization Match Configuration Mode Commands     2-639

(config-pmap-optmz-m) action 2-639

Probe Configuration Mode Commands     2-642

(config-probe-probe_type) connection term 2-645

(config-probe-probe_type) credentials 2-646

(config-probe-probe_type) description 2-648

(config-probe-probe_type) domain 2-649

(config-probe-probe_type) expect address 2-650

(config-probe-probe_type) expect regex 2-651

(config-probe-probe_type) expect status 2-653

(config-probe-probe_type) faildetect 2-655

(config-probe-probe_type) hash 2-656

(config-probe-probe_type) header 2-658

(config-probe-probe_type) interval 2-660

(config-probe-probe_type) ip address 2-661

(config-probe-probe_type) nas ip address 2-662

(config-probe-probe_type) open 2-663

(config-probe-probe_type) passdetect 2-664

(config-probe-probe_type) port 2-665

(config-probe-probe_type) receive 2-667

(config-probe-probe_type) request method get | head 2-669

(config-probe-probe_type) script 2-670

(config-probe-probe_type) send-data 2-671

(config-probe-probe_type) ssl cipher 2-672

(config-probe-probe_type) ssl version 2-674

Radius Configuration Mode Commands     2-675

(config-radius) deadtime 2-676

(config-radius) server 2-677

Real Server Host Configuration Mode Commands     2-678

(config-rserver-host) conn-limit 2-679

(config-rserver-host) description 2-680

(config-rserver-host) inservice 2-681

(config-rserver-host) ip address 2-682

(config-rserver-host) probe 2-683

(config-rserver-host) weight 2-684

Real Server Redirect Configuration Mode Commands     2-685

(config-rserver-redir) conn-limit 2-686

(config-rserver-redir) description 2-687

(config-rserver-redir) inservice 2-688

(config-rserver-redir) webhost-redirection 2-689

Resource Configuration Mode Commands     2-691

(config-resource) limit-resource 2-692

Role Configuration Mode Commands     2-694

(config-role) description 2-695

(config-role) rule 2-696

Serverfarm Host Configuration Mode Commands     2-698

(config-sfarm-host) description 2-699

(config-sfarm-host) failaction 2-700

(config-sfarm-host) predictor 2-701

(config-sfarm-host) probe 2-704

(config-sfarm-host) retcode 2-705

(config-sfarm-host) rserver 2-706

(config-sfarm-host) transparent 2-707

Serverfarm Host Real Server Configuration Mode Commands     2-708

(config-sfarm-host-rs) backup-rserver 2-709

(config-sfarm-host-rs) conn-limit 2-710

(config-sfarm-host-rs) inservice 2-711

(config-sfarm-host-rs) probe 2-712

(config-sfarm-host-rs) weight 2-713

Serverfarm Redirect Configuration Mode Commands     2-714

(config-sfarm-redirect) description 2-715

(config-sfarm-redirect) failaction 2-716

(config-sfarm-redirect) predictor 2-717

(config-sfarm-redirect) rserver 2-720

Serverfarm Redirect Real Server Configuration Mode Commands     2-721

(config-sfarm-redirect-rs) backup-rserver 2-722

(config-sfarm-redirect-rs) conn-limit 2-723

(config-sfarm-redirect-rs) inservice 2-724

(config-sfarm-redirect-rs) weight 2-725

Show Exec Mode Commands     2-81

show aaa 2-85

show access-list 2-86

show accounting log 2-87

show acl-merge 2-88

show action-list 2-89

show arp 2-90

show banner motd 2-91

show bootvar 2-92

show buffer 2-93

show capture 2-94

show checkpoint 2-95

show clock 2-96

show conn 2-97

show context 2-98

show copyright 2-99

show crypto 2-100

show debug 2-101

show domain 2-103

show fifo 2-104

show file 2-105

show fragment 2-106

show ft 2-107

show hardware 2-109

show icmp statistics 2-110

show interface 2-111

show inventory 2-112

show ip 2-113

show ipcp 2-115

show ldap-server 2-116

show license 2-117

show line 2-118

show logging 2-119

show login timeout 2-121

show nat-fabric 2-122

show netio 2-123

show np 2-124

show ntp 2-127

show optimization-global 2-128

show parameter-map 2-129

show probe 2-130

show processes 2-131

show radius-server 2-132

show resource allocation 2-133

show resource usage 2-134

show role 2-136

show rserver 2-137

show running-config 2-138

show script 2-140

show security internal event-history 2-141

show serverfarm 2-142

show service-policy 2-143

show snmp 2-144

show ssh 2-145

show startup-config 2-147

show stats 2-148

show sticky database 2-149

show system 2-151

show tacacs-server 2-152

show tcp statistics 2-153

show tech-support 2-154

show telnet 2-156

show terminal 2-157

show udp statistics 2-158

show user-account 2-159

show users 2-160

show version 2-161

show vlans 2-162

show vnet 2-163

show xlate 2-164

SSL Proxy Configuration Mode Commands     2-726

(config-ssl-proxy) cert 2-728

(config-ssl-proxy) chaingroup 2-729

(config-ssl-proxy) key 2-730

(config-ssl-proxy) ssl advanced-options 2-731

Sticky Cookie Configuration Mode Commands     2-732

(config-sticky-cookie) cookie insert 2-733

(config-sticky-cookie) cookie offset 2-734

(config-sticky-cookie) cookie secondary 2-735

(config-sticky-cookie) replicate sticky 2-736

(config-sticky-cookie) serverfarm 2-737

(config-sticky-cookie) static cookie-value 2-738

(config-sticky-cookie) timeout 2-739

Sticky Header Configuration Mode Commands     2-740

(config-sticky-header) header offset 2-742

(config-sticky-header) replicate sticky 2-743

(config-sticky-header) serverfarm 2-744

(config-sticky-header) sticky header-value 2-745

(config-sticky-header) timeout 2-746

Sticky IP Configuration Mode Commands     2-748

(config-sticky-ip) replicate sticky 2-749

(config-sticky-ip) serverfarm 2-750

(config-sticky-ip) static client source 2-751

(config-sticky-ip) timeout 2-752

TACACS+ Configuration Mode Commands     2-754

(config-tacacs+) deadtime 2-756

(config-tacacs+) server 2-757