-
Cisco GSS Administration Guide (Software Version 3.0)
-
Index
-
Preface
-
Managing GSS Devices from the GUI
-
Managing the GSS from the CLI
-
Creating and Managing User Accounts
-
Managing GSS User Accounts Through a TACACS+ Server
-
Configuring Access Lists and Filtering GSS Traffic
-
Configuring SNMP
-
Backing Up and Restoring the GSSM Database
-
Viewing Log Files
-
Monitoring GSS Operation
-
Configuring the GSS Network with Anycast
-
Installing GSS Licenses and CNR
-
Performing GSS Software Upgrades and Downgrades
-
Table Of Contents
Logging in to the CLI and Enabling Privileged EXEC Mode
Using the startup-config and running-config Files
Changing the startup-config and running-config Files
Saving the startup-config and running-config Files
Loading the startup-config from an External File
Displaying the running-config File
Displaying the startup-config File
Displaying the Contents of a File
Displaying Files in a Directory
Specifying the GSS Inactivity Timeout
Configuring the Terminal Screen Line Length
Modifying the Attributes of the Security Certificate on the GSSM
Shutting Down the GSS Software
Performing a Cold Restart of a GSS Device
Restoring GSS Factory-Default Settings
Replacing GSS Devices in Your GSS Network
Replacing the Primary GSSM in the Network
Converting the Standby GSSM to a Primary GSSM
Replacing the Primary GSSM with an Available GSS
Replacing the Standby GSSM in the Network
Replacing a GSS in the Network
Changing the GSSM Role in the GSS Network
Switching the Roles of the Primary and Standby GSSM Devices
Reversing the Roles of the Interim Primary and Standby GSSM Devices
Displaying GSS System Configuration Information
Displaying Software Version Information
Displaying License Information
Managing the GSS from the CLI
This chapter describes how to manage the GSS software from the CLI. It contains the following major sections:
•
Logging in to the CLI and Enabling Privileged EXEC Mode
•
•
•
•
•
•
•
•
•
•
Logging in to the CLI and Enabling Privileged EXEC Mode
To log in to a GSS device and enable privileged EXEC mode at the CLI, perform the following steps:
1.
2.
Otherwise, if you are using a direct serial connection between your terminal and the GSS device, use a terminal emulation program to access the GSS CLI.
Note
3.
localhost.localdomain>4.
localhost.localdomain> enablelocalhost.localdomain#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
The prompt changes from the user-level EXEC right angle bracket (>) prompt to the privileged-level EXEC pound sign (#).
Using the startup-config and running-config Files
When you make device configuration changes, the GSS places those changes in a virtual running configuration file (called running-config). Before you log out or reboot the GSS, you must copy the contents of the running-config file to the startup-configuration file (called startup-config) to save configuration changes. The GSS uses the startup-config file on subsequent reboots.
This section contains the following procedures:
•
•
•
•
•
Changing the startup-config and running-config Files
The network configuration for a GSS device includes the following:
•
•
•
•
•
•
•
•
•
•
•
•
•
Each GSS device tracks the following configurations:
•
•
Typically, the running-config and the startup-config files are identical. Once you modify a configuration parameter, you must reconcile the two configuration files in one of the following ways:
•
•
To change the startup-config file for a GSS device, perform the following steps:
1.
gssm1.example.com> enablegssm1.example.com#gssm1.example.com# configgssm1.example.com(config)#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
gssm1.example.com(config)# hostname new.example.comnew.example.com(config)#3.
new.example.com(config)# copy running-config startup-configSaving the startup-config and running-config Files
To save the running-config file to the startup-config file on the GSS, or to copy the current startup configuration to a file for use on other devices or for backup purposes, use one of the following commands:
•
•
•
To copy the GSS device running-config or startup-config files, perform the following steps:
1.
gss1.example.com> enablegss1.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
gss1.example.com# copy startup-config disk newstartupconfigThe filename argument specifies the name of the file containing the startup configuration settings.
Note
3.
gss1.example.com# copy running-config newrunningconfigThe filename argument specifies the name of the file containing the running configuration settings.
4.
gss1.example.com# copy running-config startup-configThe GSS retains any changes to the network configuration of the device and uses those changes when the GSS is next rebooted.
Loading the startup-config from an External File
In addition to copying your running-config file as a new startup-config file, you can also upload or download GSS device configuration information from an external file using the copy command. Before you attempt to load the startup configuration from a file, make sure that the file has been moved to a local directory on the GSS device.
To load the GSS device startup configuration from an external file, perform the following steps:
1.
gssm1.example.com> enablegssm1.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
gssm1.example.com# copy disk startup-config newstartupconfigThe filename argument specifies the name of the file containing the startup configuration settings.
Displaying the running-config File
You can review the contents of the GSS running-config file to verify the current configuration parameters in use by the GSS device. To display the contents of the GSS running-config file, use the show running-config command. You can use this command with the show startup-config command to compare the configuration memory to the startup-config file used during the bootup process.
Configuration entries within each mode in the running-config file appear in chronological order, based on the order in which you configure the GSS. The GSS does not display default configurations in the running-config file.
To display the current running-config file for the GSS, enter the following command:
gssm1.example.com# show running-configinterface ethernet 0ip address 192.168.1.25 255.255.255.0gss-communicationsgss-tcp-keepaliveshostname gssm1.example.comip default-gateway 10.86.208.1ip name-server 172.16.124.122ssh enableno ssh keysno ssh protocol version 1telnet enableftp enableftp-client enable allntp enablesnmp-server enablesnmp-server location NewYorksnmp-server contact admin@zyx.comsnmp-server community-string public rosnmp-server host 16.1.1.11 public traps version 1 udp-port 162snmp-server enable-traps gslb anssnmp-server enable-traps gslb dnssnmp-server enable-traps gslb kalsnmp-server enable-traps gslb peer-statussnmp-server enable-traps coresnmp-server enable-traps snmp cold-startsnmp-server enable-traps snmp authenticationsnmp-server enable-traps performance cpu-rising-thresholdsnmp-server enable-traps performance cpu-falling-thresholdsnmp-server trap-limit dns-clause-trap 100snmp-server cpu-rising-threshold 65snmp-server trap-source ethernet 0ntp-server 16.1.1.11cnr enabledrpenableauthentication key sample keypath-rttprobeburst_size 5init_ttl 2destination-port 1020max-failure-ttl 5max-ttl 40tcp-rttprobesourceport static 10terminal length 23exec-timeout 150logging disk enablelogging disk priority Notifications(5)no logging host enablelogging host priority Warnings(4)tacacs-server timeout 5tacacs-server keepalive-enableDisplaying the startup-config File
You can review the contents of the GSS startup-config file to display the configuration used during initial bootup. The GSS stores the contents of the startup-config file in a safe partition of the hard disk to prevent loss of data due to power failures.
To display the GSS startup-config file contents, enter the following command:
gssm1.example.com# show startup-configGSS configuration [Saved: Thu Jul 10 16:20:25 UTC 2003]interface ethernet 0ip address 192.168.1.25 255.255.255.0gss-communicationsgss-tcp-keepaliveshostname gssm1.example.comip default-gateway 10.86.208.1ip name-server 172.16.124.122ssh enableno ssh keysno ssh protocol version 1telnet enableftp enableftp-client enable allntp enablesnmp-server enablesnmp-server location NewYorksnmp-server contact admin@zyx.comsnmp-server community-string public rosnmp-server host 16.1.1.11 public traps version 1 udp-port 162snmp-server enable-traps gslb anssnmp-server enable-traps gslb dnssnmp-server enable-traps gslb kalsnmp-server enable-traps gslb peer-statussnmp-server enable-traps coresnmp-server enable-traps snmp cold-startsnmp-server enable-traps snmp authenticationsnmp-server enable-traps performance cpu-rising-thresholdsnmp-server trap-limit dns-clause-trap 100snmp-server cpu-rising-threshold 65snmp-server trap-source ethernet 0ntp-server 16.1.1.11cnr enabledrpenableauthentication key sample keypath-rttprobeburst_size 5init_ttl 2destination-port 1020max-failure-ttl 5max-ttl 40tcp-rttprobesourceport static 10terminal length 23exec-timeout 150logging disk enablelogging disk priority Notifications(5)no logging host enablelogging host priority Warnings(4)tacacs-server timeout 5tacacs-server keepalive-enableManaging GSS Files
This section describes how to manage the files included in a directory or subdirectory on a GSS device. This section contains the following topics:
•
•
Displaying the Contents of a File
You can view the contents of a GSS file and monitor functions such as transaction logging or system logging using the system.log file. Use the tail and type CLI commands to view the contents of a file in a GSS directory as follows:
•
•
The filename argument identifies the name of the file in the GSS file directory. To view the files available in the current directory or subdirectory, use the dir, lls, ls, or pwd commands. See the "Displaying Files in a Directory" section for details.
For example, to display the last 10 lines in the system.log, enter:
gssm1.example.com# tail system.logShowing file system.logSep 15 07:11:40 host-css2 rc: Stopping keytable succeededSep 15 07:11:42 host-css2 inet: inetd shutdown succeededSep 15 07:11:45 host-css2 crond: crond shutdown succeededSep 15 07:11:46 host-css2 dd: 1+0 records inSep 15 07:11:46 host-css2 dd: 1+0 records outSep 15 07:11:46 host-css2 random: Saving random seed succeededSep 15 07:11:48 host-css2 kernel: Kernel logging (proc) stopped.Sep 15 07:11:48 host-css2 kernel: Kernel log daemon terminating.Sep 15 07:11:50 host-css2 syslog: klogd shutdown succeededSep 15 07:11:51 host-css2 exiting on signal 15End of file system.logFor example, to display the contents of the audit.log file, enter:
gssm1.example.com# type /audit.logatcr1.cisco.com>type audit.log# Start logging at Tue July 1 23:59:30 GMT 2003#=== WHEN WHAT_TABLE WHAT_ID HOW ===# Start logging at Wed July 2 00:01:25 GMT 2003#=== WHEN WHAT_TABLE WHAT_ID HOW ===# Start logging at Thu July 3 14:42:40 GMT 2003#=== WHEN WHAT_TABLE WHAT_ID HOW ===...Displaying Files in a Directory
The GSS software directories contain the GSS files, including boot files, backup files, and log files. Use the dir, lls, ls, or pwd commands to view the files available in the current directory or subdirectory on the GSS as follows:
•
•
•
•
To view a detailed list of files contained within the working directory, enter:
gssm1.example.com# dir (or lls)total 97684-rw-r--r-- 1 root root 39 Mar 8 21:04 JVM_EXIT_CODE-rw-r--r-- 1 root root 9 Mar 14 21:23 RUNMODE-rw-r--r-- 1 root root 33427 Mar 14 21:23 gss.logdrwxr-xr-x 2 root root 4096 Mar 7 16:22 admindrwxr-xr-x 3 root root 4096 Mar 7 18:05 apache-rw-r--r-- 1 root root 117 Mar 7 18:05 audit.logsrwxr-xr-x 1 root root 0 Mar 7 15:40 cli_configsrwxr-xr-x 1 root root 0 Mar 7 15:40 cli_execdrwxr-xr-x 14 root root 4096 Mar 7 18:05 core-files-rw-r--r-- 1 root root 61 Mar 14 21:23 datafeed.cfgsrwxrwxrwx 1 root root 0 Mar 7 15:40 dataserver-socket-rw-r--r-- 1 root root 18 Mar 7 15:39 nicinfo.cfg-rw-r--r-- 1 root root 5072 Mar 7 18:05 node.statedrwxrwxrwx 2 root root 4096 Mar 8 21:04 pid-rw-rw-rw- 1 root root 9127 Mar 14 21:23 props.cfg-rw-r--r-- 1 root root 63 Mar 14 21:23 runmode-comment-rw-r--r-- 1 root root 553 Mar 8 21:02 running.cfgdrwxr-xr-x 4 root root 4096 Mar 8 18:34 squid-rw-r--r-- 1 root root 49 Mar 7 18:05 sysMessages.logdrwxr-xr-x 2 root root 4096 Mar 7 15:40 sysmsgdrwxrwxrwx 2 root root 4096 Mar 8 21:02 sysout-rw-r--r-- 1 root root 41652 Mar 14 21:23 system.logTo list the filenames and subdirectories of the current working directory, enter:
gssm1.example.com# lsgss-1.0.2.0.2-k9.upg id_rsa.pub megara.back.1_0.full rpmsgss-1.0.904.0.1-k9.upg gss_sample.full megara.back.1_1.fullTo display the present working directory of the GSS, enter:
gssm1.example.com# pwd
/admin
Renaming GSS Files
The GSS software allows you to rename files located in the current directory or subdirectory, such as backup files and log files. You can rename a GSS file by using the rename command.
The syntax of this command is as follows:
rename source_filename new_filename
The arguments are as follows:
•
•
Quotation marks are not required around filenames. The following special characters are not allowed in the renamed filenames: apostrophe (`), semicolon (;), asterisk (*), and space ( ).
To view the files available in the current directory or subdirectory, use the dir, lls, ls, or pwd commands. See the "Displaying Files in a Directory" section for details.
For example, to rename the current GSS startup-config file as newstartupconfig, enter:
gssm1.example.com# rename startup-config newstartupconfigSecurely Copying Files
The GSS supports the secure copying of files from the GSS device where you are logged in, or from another device to the GSS device where you are currently logged in.
Note
Use the scp command to securely copy files from the following:
•
scp {source_path [source_filename] user@target_host:target_path}
•
scp {user@source_host:/source_path[source_filename] target_path}
The arguments are as follows:
•
•
•
•
•
After you log in to the CLI of the GSS that you intend to copy files to or from, enter the scp command as previously described. You may be prompted to log in to the remote device before you can navigate to the target directory.
To securely copy files from a GSS device that you are logged in to, enter:
gssm1.example.com# scp /tmp/system.log myusername@192.168.2.3:/dump/homeTo securely copy files from another device to a GSS device that you are currently logged in to, enter:
gssm1.example.com# scp <file-name of the GSS> username@remote-host:target-pathDeleting Files
The GSS allows you to remove a specific file (startup-config, logs, or archive file) stored on hard disk. You may want to remove older files or files that you no longer use from the GSS. You can delete files from your GSS by using the del command.
The syntax of this command is as follows:
del filename
The filename argument identifies the name of the file in the GSS file directory.
For example, to delete the oldtechrept.tgz file, enter:
gssm1.example.com# del oldtechrept.tgzDisplaying Users
You can display the username and permission status for a specific user or for all users of the GSS device as follows:
•
•
To display information for a particular user, enter:
gssm1.example.com# show user paulr-adminUsername permission-------- ----------paulr-admin adminTo display information for all users, enter:
gssm1.example.com# show usersUsername permission-------- ----------lstar adminadmin adminpaulr-admin adminFor details about creating GSS users, see Chapter 3, Creating and Managing User Accounts.
Specifying the GSS Inactivity Timeout
You can modify the length of time that can expire before a GSS automatically logs off an inactive user by using the exec-timeout command. This command specifies the length of time that a user in privileged EXEC mode can be idle before the GSS terminates the session. Users logged on to GSS devices in the global configuration mode are not affected by the exec-timeout command setting. The default inactivity timeout value is 150 minutes.
The syntax of this command is as follows:
exec-timeout minutes
The minutes argument specifies the length of time that a user in privileged EXEC mode can be idle before the GSS terminates the session. Valid entries are 1 to 44,640 minutes. The default is 150 minutes.
For example, to specify a GSS timeout period of 10 minutes, enter:
gssm1.example.com(config)# exec-timeout 10To restore the default timeout value of 150 minutes, use the no form of this command.
Configuring the Terminal Screen Line Length
You can specify the number of screen lines to display on your terminal by using the terminal length command. The maximum number of displayed screen lines is 512. The default is 23 screen lines. When the terminal length command is set to a value of 0, the GSS sends all of its data to the screen at once without pausing to buffer the data. To restore the default terminal length of 23 lines, use the no form of this command.
The syntax of this command is as follows:
terminal-length number
The number argument specifies the number of screen lines to display on your terminal, from 0 and 512. The default is 23 lines.
For example, to set the number of screen lines to 35, enter:
gssm1.example.com(config)# terminal-length 35To reset the number of screen lines to the default of 23, enter:
gssm1.example.com(config)# no terminal-lengthTo display the terminal length setting for your GSS device, use the show terminal-length command.
For example:
gssm1.example.com# show terminal-lengthterminal length 35Modifying the Attributes of the Security Certificate on the GSSM
You can customize the attributes of the security certificate issued by Cisco Systems and installed on the primary GSSM (as described in the "Logging Into the Primary GSSM Graphical User Interface" section in Chapter 1, Managing GSS Devices from the GUI). By using the certificate set-attributes CLI command, you can modify the X.509 fields, extensions, and properties included on the security certificate. The attribute changes that you make affect the fields on the Details tab of the certificate. To return the attributes for the security certificate to the default settings, use the no form of the certificate set-attributes command.
When you enter the certificate set-attributes command, the GSS software displays a series of prompts related to the fields on the certificate. Proceed though all of the prompts and make changes only to those fields that you want to modify. When completed, the software prompts you to save your changes and generate a a new certificate. The next time that you access the primary GSSM GUI, the Security Alert dialog box reappears informing you that the certificate is invalid. At that point, you can either reinstall the updated certificate or close the dialog box and continue with the primary GSSM GUI operation.
To modify the attributes of a security certificate on the primary GSSM, perform the following steps:
1.
gssm1.example.com> enablegssm1.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
gssm1.example.com# gss stop3.
gssm1.example.com# configgssm1.example.com(config)#4.
gssm1.example.com(config)# certificate set-attributesCountry code (2 chars) [US]:State [California]: MACity [San Jose]: BostonOrganization [Cisco Systems, Inc.]: New OrganizationOrganization Unit [ISBU]:e-Mail Address [tac@cisco.com]: company@mycompany.comUSMABostonNew OrganizationISBUcompany@mycompany.com5.
Save these values? (y/n): y6.
gssm1.example.com(config)# exitgssm1.example.com# gss startStopping the GSS Software
You must stop the GSS software before you perform the following tasks:
•
•
•
•
•
Use the gss stop command to stop the GSS software. For example, enter:
gssm1.example.com# gss stopThe following message appears when you stop the GSS software from the CLI:
Server is Shutting DownUse the gss start command to restart the GSS software on the selected device after it has been stopped. For example, enter:
gssm1.example.com# gss startShutting Down the GSS Software
If you intend to power down a GSS device, we recommend that you use the shutdown command to first shut down the GSS software. You should also shut down the GSS software before you disable a GSS (see the "Disabling the GSS Software" section).
To shut down the GSS software, enter:
gssm1.example.com# shutdownRestarting the GSS Software
You can perform a warm restart of the GSS software by using the gss restart command.
The syntax of this command is as follows:
gss restart
Before you perform a warm restart of the GSS software, save your recent GSS configuration changes to memory. Use the copy running-config startup-config CLI command to save your configuration changes. If you fail to save your configuration changes, the GSS device reverts to its previous settings upon a reboot.
To perform a warm restart of the GSS, enter:
gssm1.example.com# gss restartAs the GSS reboots, the output appears on the console terminal.Performing a Cold Restart of a GSS Device
You can halt GSS operation and perform a cold restart of your GSS device by using the reload command. The reload command reboots the GSS device and performs a full power cycle of both the GSS hardware and software. Any open connections with the GSS are dropped after you enter the reload command.
The syntax of this command is as follows:
reload
Before you perform a cold restart of the GSS, save your recent GSS configuration changes to memory. Use the copy running-config startup-config CLI command to save your configuration changes. If you fail to save your configuration changes, the GSS device reverts to its previous settings upon restart.
To halt and perform a cold restart of the GSS, enter:
gssm1.example.com# reloadAs the GSS boots, the output appears on the console terminal.Disabling the GSS Software
Disabling a GSS device is necessary when you need to perform the following tasks:
•
•
•
You can disable a selected GSSM or GSS by using the gss disable command. This command removes the existing configuration and returns the GSS device to its initial state, which includes deleting the GSSM database from the GSS device and removing all configured DNS rules and keepalives. The gss disable command also removes any certificate attributes specified using the certificate set-attributes command.
The syntax of this command is as follows:
gss disable
To disable a GSS device, enter:
gssm1.example.com# gss disablegssm1.example.com# shutdownTo reenable the GSS device as a primary GSSM, standby GSSM, or a GSS, see the Cisco Global Site Selector Getting Started Guide.
Restoring GSS Factory-Default Settings
The restore-factory-defaults command erases your GSSM database and all of its data and resets all network settings, returning your GSS hardware to the same state it was in when it first arrived from the factory. If your GSS device is improperly configured, use the restore-factory-defaults command to restore the device to its initial state and allow you to properly configure the GSS device for use on your network.
The syntax for this command is as follows:
restore-factory-defaults
Before you enter the restore-factory-defaults command, ensure that you back up any vital data in the database component of the primary GSSM, along with its network and device configuration information. Use the gssm backup command to perform a primary GSSM backup. See Chapter 7, Backing Up and Restoring the GSSM Database for details.
Caution
Enter the gss stop command before you execute the restore-factory-defaults command to stop the GSS software and avoid disrupting in-process activities (for example, serving DNS requests or sending keepalives).
To restore GSS factory default settings, enter:
gssm1.example.com# gss stopgssm1.example.com# restore-factory-defaultsReplacing GSS Devices in Your GSS Network
If you encounter problems with one of the GSS devices in your network, determine which GSS device contains the problem (primary GSSM, standby GSSM, or GSS) and configure a replacement GSS device for your network. Figure 2-1 summarizes the decision-making process to follow when replacing a malfunctioning GSS device.
Figure 2-1 Flow Chart for Replacing a Malfunctioning GSS Device
This section contains the following topics:
•
•
•
Replacing the Primary GSSM in the Network
To replace a malfunctioning primary GSSM in your GSS network to regain GUI management, determine if there is a standby GSSM available in your network:
•
•
Converting the Standby GSSM to a Primary GSSM
Note
To convert the standby GSSM to a primary GSSM, perform the following steps:
1.
2.
gssm2.example.com> enablegssm2.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
3.
gssm2.example.com# gssm standby-to-primary
Note
Configuration changes do not take effect immediately. It may take up to 10 minutes before the other GSS devices in the network learn about the new primary GSSM.
4.
gssm2.example.com# gssm database validate5.
6.
gssm2.example.com# gssm primary-to-standbyThis command allows the current interim primary GSSM to resume its role in the GSS network as the standby GSSM.
7.
8.
gssm1.example.com> enablegssm1.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
9.
10.
gssm1.example.com# copy running-config startup-config11.
gssm1.example.com# gss enable gssm-primary
Note
Configuration changes do not take effect immediately. It may take up to 10 minutes before the other GSS devices in the network learn about the new primary GSSM.
12.
•
•
–
–
13.
a.
b.
c.
gssm2.example.com# gss disabled.
gssm2.example.com# gss enable gssm-standby gssm1.example.come.
Note
gss3.example.com# gss enable gss gssm1.example.comf.
You can now use the replacement primary GSSM in your GSS network.
Replacing the Primary GSSM with an Available GSS
To replace a malfunctioning primary GSSM with an available GSS, perform the following steps:
1.
•
•
2.
3.
gss3.example.com> enablegss3.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
4.
gss3.example.com# gss stop5.
gss3.example.com# gss disable6.
7.
gssm1.example.com# copy running-config startup-config8.
gssm1.example.com# gss enable gssm-primary9.
•
•
10.
a.
b.
c.
gssm2.example.com# gss disabled.
gss1.example.com# gss enable gssm-standby gssm1.example.come.
Note
gss3.example.com# gss enable gss gssm1.example.comf.
You can now use the replacement primary GSSM in your GSS network.
Replacing the Standby GSSM in the Network
To replace a malfunctioning standby GSSM in your GSS network, perform the following steps:
1.
•
•
2.
gss3.example.com> enablegss3.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
3.
gss3.example.com# gss stop4.
gss3.example.com# gss disableThis command removes all previously configured DNS rules and keepalives.
5.
6.
gss3.example.com# copy running-config startup-config7.
8.
•
•
9.
gss3.example.com# copy running-config startup-config10.
The syntax of this command is as follows:
gss enable gssm-standby primary_GSSM_hostname | primary_GSSM_IP_address
The arguments are as follows:
–
–
For example, to enable gss3.example.com as the standby GSSM and direct it to the primary GSSM, gssm1.example.com, enter:
gss3.example.com# gss enable gssm-standby gssm1.example.com11.
You can now use the replacement standby GSSM in your GSS network.
Replacing a GSS in the Network
To replace a malfunctioning GSS in your GSS network, perform the following steps:
1.
2.
•
•
3.
4.
The syntax of this command is as follows:
gss enable gss primary_GSSM_hostname | primary_GSSM_IP_address
The arguments are as follows:
–
–
For example, to enable gss3.example.com as a GSS and direct it to the primary GSSM, gssm1.example.com, enter:
gss3.example.com# gss enable gss gssm1.example.com5.
gss3.example.com# copy running-config startup-config6.
You can now use the replacement GSS in your GSS network.
Changing the GSSM Role in the GSS Network
The GSS software supports two GSSM devices in a single GSS network, with one GSSM acting as the primary GSSM and the second GSSM acting as a standby device. The standby GSSM can temporarily take over the role of the primary GSSM if the primary GSSM is unavailable (for example, you need to move the primary GSSM or you want to take it offline for repair or maintenance).
Using the CLI, you can manually switch the roles of your primary and standby GSSM devices at any time.
Before switching GSSM roles, follow these guidelines:
•
•
Although DNS request routing continues to function in such a situation, GUI configuration changes made on one or both primary GSSM devices may be lost or overwritten and are not communicated to the GSS devices. If this dual primary GSSM configuration occurs, the two primary GSSM devices change to standby mode. You must then reconfigure the original deployed primary GSSM as the primary GSSM.
•
This section contains the following topics:
•
•
Switching the Roles of the Primary and Standby GSSM Devices
This procedure assumes that your primary GSSM is online and functional when you are switching GSSM roles. If the primary GSSM is not functional, proceed to Step 6.
To change the role of your primary and standby GSSM devices, perform the following steps:
1.
gssm1.example.com> enablegssm1.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
3.
gssm1.example.com# gssm primary-to-standby4.
gssm1.example.com# shutdown5.
6.
gssm2.example.com> enableIf you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
7.
gssm2.example.com# gssm standby-to-primary
Note
Configuration changes do not take effect immediately. It may take up to 10 minutes before the other GSS devices in the network learn about the new primary GSSM.
8.
gssm2.example.com# gssm database validate9.
Reversing the Roles of the Interim Primary and Standby GSSM Devices
When the original primary GSSM is available for use in the network, reverse the roles of the two GSSM devices back to the original GSS network deployment.
Note
To reverse the roles of the interim primary and standby GSSM devices, perform the following steps:
1.
gssm2.example.com> enablegssm2.example.com#If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the Cisco Global Site Selector Getting Started Guide.
2.
3.
gssm2.example.com# gssm primary-to-standbyEnsure that a minimum of five minutes have passed since the last GUI configuration change before you enter the gssm primary-to-standby command to convert the interim primary GSSM back to its role as standby GSSM.
4.
5.
6.
gssm1.example.com> enable7.
gssm1.example.com# gssm standby-to-primary
Note
Configuration changes do not take effect immediately. It may take up to 10 minutes before the other GSS devices in the network learn about the new primary GSSM.
You can now use the primary GSSM as in the original GSS network deployment.
Displaying GSS System Configuration Information
The GSS CLI provides a comprehensive set of show commands that display GSS configuration information. The show commands are available in all CLI modes.
This section contains the following topics:
•
•
•
•
Displaying Software Version Information
You can display the software version information about the GSS software by using the show version command.
The syntax of this command is as follows:
show version [verbose]
Specify the verbose optional keyword if you want to view detailed GSS software version information.
To display general GSS software version information, enter:
gssm1.example.com# show versionGlobal Site Selector (GSS)Model Number: GSS-4492-K9Copyright (c) 1999-2007 by Cisco Systems, Inc.Version 2.0 (1.0.0)Uptime: 4 Hours 0 Minutes and 19 secondsTo display detailed GSS software version information, enter:
gssm1.example.com# show version verboseGlobal Site Selector (GSS)Model Number: GSS-4490-K9Copyright (c) 1999-2003 by Cisco Systems, Inc.Version 1.3(1)Uptime: 23 Hours 57 Minutes and 53 secondsFull Version: 1.3(1.0.0)Compiled on Wed Feb 15 05:51:07 2006 by ralexand from gss-builder - changeset 26190Processor 0: Pentium III (Coppermine) GenuineIntelBridge: Intel Corporation 82371AB PIIX4 ACPI (rev 02)Ethernet controller: Intel Corporation 82557 [Ethernet Pro 100] (rev 08)Ethernet controller: Intel Corporation 82557 [Ethernet Pro 100] (rev 08)IDE interface: Intel Corporation 82371AB PIIX4 IDE (rev 01)ISA bridge: Intel Corporation 82371AB PIIX4 ISA (rev 02)PCI bridge: Intel Corporation 440BX/ZX - 82443BX/ZX AGP bridge (rev 03)SCSI storage controller: Symbios Logic Inc. (formerly NCR) 53c895 (rev 02)USB Controller: Intel Corporation 82371AB PIIX4 USB (rev 01)VGA compatible controller: Chips and Technologies F69000 HiQVideo (rev 64)0000-001f : dma1 | 0020-003f : pic10040-005f : timer | 0060-006f : keyboard0070-007f : rtc | 0080-008f : dma page reg00a0-00bf : pic2 | 00c0-00df : dma200f0-00ff : fpu | 02f8-02ff : serial(auto)03d4-03d5 : cga | 03f8-03ff : serial(auto)6c00-6c7f : ncr53c8xx | 7000-701f : Intel Speedo3 Ethernet7400-741f : Intel Speedo3 Ethernet | fc00-fc07 : ide0fc08-fc0f : ide1 |gssm1.example.com: scsi0 Channel: 00 Id: 00 Lun: 00Vendor: IBM Model: IC35L018UCD210-0 Rev: S5BSType: Direct-Access ANSI SCSI revision: 03Displaying License Information
You can display information about installed GSS licenses by using the show license command and its options.
The syntax of this command is as follows:
show license {active | file-name {list | filename} | gss-all | installed}
The keywords and arguments are as follows:
•
•
•
•
•
•
To obtain a listing of the currently-active license modules, enter:
gssm1.example.com# show license activeEnabled modules areDDoSTo see which license files are installed, enter:
gssm1.example.com# show license installedLicense modules areDDoSCNRTo obtain a complete listing of the license files, enter:
gssm1.example.com# show license file-name listddos_new.licTo obtain specific license file details, enter:
gssm1.example.com# show license file-name ddos_new.licFEATURE ddos cisco 1 permanent uncounted HOSTID=ANY \ NOTICE="<LicFileID>ddos_new.lic</LicFileID><LicLineID>0</LicLineID> \<PAK>1XIOS2C84AB</PAK>" SIGN=CFF95D462F42To obtain a complete picture of the licenses installed in the GSS network from the primary GSS, enter:
gssm1.example.com# show license gss-allOwn (Primary GSS) info :Pak number is :1XIOS2C81ABDDoS Installed, ActiveCNR Installed, ActiveOther GSS info :Address : 2.7.0.2Pak number are :1XIOS2C87ABDDoS Installed, ActiveCNR Installed, ActiveAddress : 2.3.0.2Pak number is:1XIOS2C83ABDDoS Installed, ActiveCNR Installed, ActiveDisplaying Memory Information
You can display information about the GSS memory blocks and statistics by using the show memory command.
The syntax of this command is as follows:
show memory
For example, enter:
gssm1.example.com# show memoryTable 2-1 describes the fields in the show memory output.
Displaying Boot Configuration
You can display information about the GSS software, such as the current boot image and boot device information by using the show boot-config command.
The syntax of this command is as follows:
show boot-config
For example, enter:
gssm1.example.com# show boot-configTable 2-2 describes the fields in the show boot-config output.
Displaying GSS Processes
You can display a list of internal GSS device processes by using the show processes command.
The syntax of this command is as follows:
show processes
For example, enter:
gssm1.example.com# show processesTable 2-3 describes the fields in the show processes output.
Displaying System Uptime
You can display the length of time that the GSS has been running by using the show uptime command.
The syntax of this command is as follows:
show uptime
For example, enter:
gssm1.example.com# show uptimeUptime: 12 Days 18 Hours 5 Minutes and 12 secondsDisplaying Disk Information
You can view general information about the GSS hard disk by using the show disk command. The general hard disk information includes the available user space on the disk, the size of the database, and the free space available on the disk.
The syntax of this command is as follows:
show disk
For example, enter:
gssm1.example.com# show diskTable 2-4 describes the fields in the show disk output.
Displaying UDI Data
You can display GSS Unique Device Identifier (UDI) data by using the show inventory command.
The syntax of this command is as follows:
show inventory
For example, enter:
gssm1.example.com# show inventoryNAME: Chassis, DESCR: Global Site Selector 4492PID: GSS-4491-K9 , VID: V01, SN: QTFNZD606000011The UDI provides a hardware product identification standard that is a consistent feature across Cisco products, allowing customers to uniquely identify and track Cisco products through their business and network operations. The UDI is composed of three separate data elements which are physically attached to each part:
•
•
•
The name of the device and a device description are also included in the output of the show inventory command.
Displaying System Status
You can display a report on the current operating status of your GSS device, including the online status, current software version, and start date or time for the various components by using the show system-status command.
The syntax of this command is as follows:
show system-status
Note
For example, enter:
gssm1.example.com# show system-statusCisco GSS - 1.3(1) GSS Manager - primary [Wed Feb 15 16 16:37:37 UTC 2006]Normal Operation [runmode = 5]START SERVERAug06 BoomerangAug06 Config Agent (crdirector)Aug06 Config Server (crm)Aug06 DNS ServerAug06 DatabaseAug06 GUI Server (tomcat)Aug06 Keepalive EngineAug06 Node ManagerAug06 ProximityAug06 StickyAug06 Web Server (apache)Displaying GSS Services
You can display the current state of the GSS services, such as FTP, NTP, SSH, TACACS+, Telnet, and SNMP by using the show services command.
The syntax of this command is as follows:
show services
For example, enter:
gssm1.example.com(config)# show servicesSTART SERVICEJul23 FtpJul23 Ntp11:08 Snmp14:47 SshJul23 SyslogJul23 Tacacs StatsJul23 Telnet
