-
Cisco GSS Command Reference (Software Version 4.1(0))
-
Preface
-
Using the Command-Line Interface
-
Cisco Global Site Selector CLI Commands
-
Global Configuration Mode Commands
-
DDoS Module Configuration Mode Commands
-
DRP Agent Configuration Mode Commands
-
Interface Configuration Mode Commands
-
Global Server Load-Balancing Configuration Mode Commands
-
Proximity Properties Configuration Mode Commands
-
Rule Configuration Mode Commands
-
Sticky Properties Configuration Mode Commands
-
GeoDB Configuration Mode Commands
-
Index
-
Feedback
Table Of Contents
Cisco Global Site Selector CLI Commands
geodb database lookup ipaddress
geodb database dump file format
geodb database periodic-backup now
proximity database periodic-backup
proximity statistics group-summary dump
show statistics gss-mesh all dns
sticky database periodic-backup
Cisco Global Site Selector CLI Commands
This chapter provides detailed information for the following types of Global Site Selector (GSS) CLI commands:
•
General commands that you can enter after you log in to the GSS in user EXEC and privileged EXEC modes.
•
•
•
•
•
•
•
•
The documentation of each command contains the following information:
•
•
•
•
For more information about accessing a CLI session and using CLI commands, see Chapter 1, Using the Command-Line Interface.
General Commands
The following general commands are available to you immediately after you log in to a GSS. The commands that you can access depend on your permission level.
•
•
?
To display a list of the available commands and syntax options, use the ? command.
?
Syntax Description
This command has no "arguments or keywords".
Command Modes
All command modes
Usage Guidelines
This command displays the commands and syntax options available to you at the point at which you enter the command. For additional background on the use of GSS help, see Chapter 1, Using the Command-Line Interface.
Examples
The following example shows how to display a list of the available commands and syntax options:
gss1.example.com> ?cd Change directorydir Directory listddos DDoS exec commandsdnslookup Resolve hostname (DNS)enable Turn on privileged commandsexit Exit from the EXECftp Open FTP session to hosthelp Description of the interactive help systemlls list files in long infols Directory listping Ping a remote hostpwd Show present working directoryscp SecureCopy files [scp from to]show Show running system informationtail Display last 10 lines of a filetelnet Open telnet session to hosttype View a filehost(config)# show ?access-group Configure access listsaccess-list Configure access listsarp Display system ARP cacheboot-config Display bootable GSS software imagesclock Display system clockddos DDoS exec commandsdisk Display disk informationftp Display ftp statusgslb-config Show configuration for gslb objectsgslb-errors Show errors during most recent script-playinterface Configure interfaceinventory Show inventory informationip Display IP informationlicense Show license informationlogging Configure system logginglogs Display GSS system logmemory Display memory informationntp NTP service controlprocesses Display processes on systemproperties Display system propertiesproximity Display Proximity subsystem informationrunning-config Show running configurationservices Display status of basic servicessnmp Display SNMP informationssh Display SSH statusstartup-config Show startup configurationstatistics Display statisticssticky Display Sticky Database informationsystem-status Report status of GSStacacs Display TACACS+ configurationtech-support Display information useful to Cisco TACtelnet Display telnet statusterminal-length Display terminal-lengthuptime Display system uptimeuser Display user informationusers Display configured usersversion Display system versionRelated Commands
cd
To change the directory, use the cd command.
cd directoryname
Syntax Description
Command Modes
User and privileged EXEC
Usage Guidelines
Use this command to maneuver between directories and for file management. The directory name becomes the default prefix for all relative paths. Relative paths do not begin with a slash (/). Absolute paths begin with a slash (/).
Enter cd .. to move to the directory that is one level higher than the one that you are in.
Examples
The following example shows the relative path:
gss1.example.com> cd local1The following example shows the absolute path:
gss1.example.com> cd /local1Related Commands
clear
To reset GSS statistics for a specific subsystem, use the clear command.
clear statistics {boomerang | ddos [all | attacks | drops | global ] | dns | drpagent | keepalive {all | cra | http-head | icmp | kalap | ns | tcp} | proximity | sticky {mesh} | tacacs}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
Use the clear command to reset global server load-balancing statistics for one or more of your GSS components. Clearing the statistics for a GSS component will erase all record of routing activity and performance for that device.
Examples
The following example shows how to use the clear command:
gss1.example.com# clear statistics boomerangAre you sure? (yes/no) yesgss1.example.com# clear statistics dnsAre you sure? (yes/no) yescra keepalive statistics clearedgss1.example.com# clear statistics keepalive kalapAre you sure? (yes/no) yeskal-ap keepalive statistics clearedgss1.example.com# clear statistics proximityAre you sure? (yes/no) yesproximity statistics cleared
clear ddos-config
To clear the configuration from the Distributed Denial of Service (DDoS) detection and mitigation subsystem, use the clear ddos-config command.
clear ddos-config
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Examples
The following example shows how to clear the configuration from the DDoS detection and mitigation subsystem:
gss1.example.com# clear ddos-configgss1.example.com#clock
To perform the following actions, use the clock command:
•
•
•
•
•
•
•
clock {read-calendar | set hh:mm:ss MONTH DD YYYY | summer-time timezone | timezone timezonename | update-calendar | user-summer-time summer-time name | start time | start day | start week | start month | end time | end day | end week | end month | offset | user-timezone timezone name | hour_offset | minute_offset}
Syntax Description
Note
Command Modes
Privileged EXEC, global configuration, and interface configuration.
Usage Guidelines
If you previously enabled NTP on a GSS using the ntp enable command, the GSS prevents you from using the clock set command and displays an error message. If you want to manually set the clock for the GSS, first disable NTP using the no ntp enable command before setting the clock.
Examples
The following example shows how to set the GSS device time:
gss1.example.com# clock set 13:01:05 sept 15 2004gss1.example.com# clock timezone GMTThe following example shows how to set the GSS time zone:
gss1.example.com# clock timezone europe parisThe following example shows how to set a user-defined time zone on the GSS:
gss1.example.com# clock user-timezone EST -5 0Please restart the GSS (reload) to sync log timestamps to new timezone.The following example shows how to set the user-defined summer time on the GSS:
gss1.example.com# clock user-summertime EDT 2:00 Sunday 1 April 2:00 Sunday 5 October 60Timezone setPlease restart the GSS (reload) to sync log timestamps to new timezone.The following example shows how to update the hardware calendar from the system clock:
gss1.example.com# clock update-calendarThe following example shows how to read the hardware calendar into the system clock:
gss1.example.com# clock read-calendarconfigure
To enter global configuration mode, use the configure command.
configure
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
To exit global configuration mode, use the end or exit commands, or by pressing the Ctrl-Z key sequence.
Examples
The following example shows how to enter global configuration mode:
gss1.example.com# configuregss1.example.com(config)#Related Commands
copy
To copy configuration settings to or from the GSS device, use the copy command.
copy {ddos-config disk filename | disk startup-config filename | gslb-config disk filename | startup-config disk filename | running-config [disk filename | startup-config]}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
When supplying an output filename enter the name only. Do not include path information with the filename.
Examples
The following examples show that the copy command is used to load a new startup configuration to the device from a file and to copy the current running configuration to a file:
gss1.example.com# copy disk startup-config configfilegss1.example.com# copy running config disk runconfigfileRelated Commands
ddos peacetime
Different Domain Name System (DNS) zones may exhibit different behavior. A high traffic rate on one D-proxy may be perfectly normal for another. A peacetime learning process is required on the GSS.
To configure peacetime learning in the GSS, use the ddos peacetime command and its related commands.
ddos peacetime [apply {increment | overwrite} | database erase | save filename | show [filename | status] | start | stop]
apply {increment | overwrite}
See the ddos peacetime apply command for a detailed syntax description.
database erase
See the ddos peacetime database erase command for a detailed syntax description.
save filename
See the ddos peacetime save command for a detailed syntax description.
show [filename | status]
See the ddos peacetime show command for a detailed syntax description.
start
See the ddos peacetime show command for a detailed syntax description.
stop
See the ddos peacetime stop command for a detailed syntax description.
ddos peacetime apply
To apply values learned during the peacetime learning process to the rate-limit database, use the ddos peacetime apply command.
ddos peacetime apply {increment | overwrite}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
This command updates the rate-limit database with the peacetime learned values.
The peacetime database location is specified in the (config-ddos) peacetime database command. If you do not specify this command, the in-memory database is used instead.
Examples
The following example shows how to apply values learned during the peacetime learning process to the rate-limit database:
gssm1.example.com# ddos peacetime apply incrementgssm1.example.com#Related Commands
ddos peacetime database erase
To erase peacetime learning, use the ddos peacetime database erase command.
ddos peacetime database erase
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Examples
The following example shows how to erase peacetime learning:
gssm1.example.com# ddos peacetime database erasegssm1.example.com#Related Commands
ddos peacetime save
To save peacetime learning to the memory or to a file on a disk, use the ddos peacetime save command in privileged EXEC mode.
ddos peacetime save filename
Syntax Description
Command Modes
Privileged EXEC
Examples
The following example shows how to save peacetime learning:
gssm1.example.com# ddos peacetime save samplefilegssm1.example.com#Related Commands
ddos peacetime show
To show values learned during the peacetime learning process or show the peacetime learning status, use the ddos peacetime show command.
ddos peacetime show [filename | status]
Syntax Description
filename
(Optional) Filename of the peacetime learning process that you want do display values.
status
(Optional) Specifies that you want to display the current peacetime learning status.
Command Modes
Privileged EXEC
Examples
The following example shows how to display the peacetime status:
gssm1.example.com# ddos peacetime show statusDDoS Peacetime Learning is running.gssm1.example.com#Related Commands
ddos peacetime start
To start the peacetime learning process, use the ddos peacetime start command.
ddos peacetime start
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
This command incrementally updates the values in the peacetime database.
Examples
The following example shows how to start peacetime learning:
gssm1.example.com# ddos peacetime startgssm1.example.com#Related Commands
ddos peacetime stop
To stop peacetime learning, use the ddos peacetime stop command.
ddos peacetime stop
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Examples
The following example shows how to stop peacetime learning:
gssm1.example.com# ddos peacetime stopgssm1.example.com#Related Commands
ddos restore-defaults
To restore the default rate-limit values in the rate-limit database, use the ddos restore-defaults command.
ddos restore-defaults ipaddress
Syntax Description
ipaddress
D-proxy IP address. Indicates that you want to restore the rate limit of the designated D-proxy to the default rate and the state to Unknown.
Command Modes
Privileged EXEC
Examples
The following example shows how to restore the defaults in the rate-limit database:
gssm1.example.com# ddos restore-defaults 1.1.1.2gssm1.example.com#Related Commands
del
To delete files from your GSS device, use the del command.
del filename
Syntax Description
Command Modes
Privileged EXEC
Examples
The following example shows how to delete files from your GSS device:
gss1.example.com> enablegss1.example.com# del oldtechrept.tgzgss1.example.com#Related Commands
dir
To view a long list of files in a directory, use the dir command.
dir [directory]
Syntax Description
Command Modes
User and privileged EXEC
Usage Guidelines
Use this command to view a detailed list of files contained within the working directory, including names, sizes, and the time created. The equivalent command is lls.
The current directory is the default directory.
Examples
The following example shows how to view a long list of files in a directory:
gss1.example.com# dirtotal 771884drwxrwxrwx 3 root root 4096 Oct 8 11:09 .drwxrwxrwx 19 root root 4096 Oct 8 11:13 ..drwx------ 2 root root 4096 Jan 23 2006 .ssh-rw-r--r-- 1 root root 135137321 Jan 24 2006 ACR_new.upg-rw-r--r-- 1 root root 135178281 Jan 24 2006 ACR_new1.upg-rw-r--r-- 1 root root 135168041 Jan 24 2006 ACR_new2.upg-rw-r--r-- 1 root root 129597481 Jan 25 2006 gss-1.2.2.2.0-k9.upg-rw-r--r-- 1 root root 127088681 Jan 24 2006 gss-1.3.0.3.0-k9.upg-rw-r--r-- 1 root root 127385641 Oct 8 10:54 gss-1.3.0.4.1-k9.upg-rw-r--r-- 1 root root 2520 Oct 8 11:09 one-rw-r--r-- 1 root root 3634 Oct 8 11:06 proximitySchema.xsd-rw-r--r-- 1 root root 3523 Oct 8 11:07 stickySchema.xsdgss1.example.com#Related Commands
disable
To turn off privileged EXEC mode, use the disable command.
disable
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
The disable command places you in user EXEC mode. To turn privileged EXEC mode back on, use the enable command.
Examples
The following example shows how to turn off privileged EXEC mode:
gss1.example.com# disablegss1.example.com>Related Commands
dnslookup
To resolve a host or domain name to an IP address, use the dnslookup command.
dnslookup {hostname | domainname}
Syntax Description
Command Modes
User and privileged EXEC
Examples
The following examples show how the dnslookup command is used to resolve the hostname example.com to a IPv4 address and IPv6 address to gss.example.com:
gss1.example.com# dnslookup example.comIPv4 lookup:Server: 55.0.0.100Address: 55.0.0.100#53Name: www.example.comAddress: 10.0.0.1IPv6 lookup:Server: 55.0.0.100Address: 55.0.0.100#53www.example.com has AAAA address 2001:55::11:1gss1.example.com#enable
To access privileged EXEC commands, use the enable command.
enable
Syntax Description
This command has no keywords or arguments.
Command Modes
User and privileged EXEC
Usage Guidelines
To access privileged EXEC mode from user EXEC mode, use the enable command. The disable command takes you from privileged EXEC mode to user EXEC mode.
If you are accessing the GSS remotely using Telnet or SSH, the CLI prompts you for the enable password. The default password is default. For more information about the enable password and configuring a new password, see the "enable-passwd" command.
Examples
The following example shows how to access privileged EXEC commands:
gss1.example.com> enablegss1.example.com#Related Commands
enable-passwd
To change the enable command password, use the enable-passwd command.
enable-passwd
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
You can control user access to the privileged Exec mode for users that remotely connect to the GSS using Telnet or SSH. When connecting to the GSS remotely, the CLI prompts you for a password when you enter the enable command to access the privileged Exec mode. The default password is default.
You have to be the admin user to configure the enable password.
When you enter the enable-passwd command, the CLI prompts you for an admin password and then to define and confirm the enable password. The password is alphanumeric, can contain spaces and special characters, and can contain a maximum of 32 characters. Leave the password blank to set the password to the default value, which is default.
Note
Examples
The following example shows how to configure the enable password:
localhost.localdomain# enable-passwdAdmin Password: <admin_password>Set GSS enable Password: <enable_password>Confirm GSS enable Password: <enable_password>Related Commands
end
To exit the EXEC or global configuration command shell, use the end command.
end
Syntax Description
This command has no keywords or arguments.
Command Modes
EXEC and global configuration
Usage Guidelines
Use the end command in any configuration mode to return to EXEC mode. This command is equivalent to pressing Ctrl-Z or using the exit command.
The end command entered in the user-level EXEC shell terminates the console or Telnet session.
Examples
The following example shows how to exit the EXEC or global configuration command shell:
gss1.example.com(config)# endgss1.example.com# endgss1.example.com>Related Commands
exit
To access the EXEC command shell from the global or interface configuration command shells, use the exit command.
exit
Syntax Description
This command has no keywords or arguments.
Command Modes
All command modes
Usage Guidelines
Use the exit command in any configuration mode to return to EXEC mode. This command is equivalent to the end command or pressing Ctrl-Z.
The exit command entered in the user-level EXEC shell terminates the console or Telnet session.
Examples
The following example shows how to access the EXEC command shell from the global or interface configuration command shells:
gss1.example.com(config)# exitgss1.example.com# exitgss1.example.com>Related Commands
ftp
To launch an FTP session on your GSS device, use the ftp command.
ftp ip_or_host
Syntax Description
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
Use the ftp command in EXEC mode to launch the FTP client and transfer a file to and from remote machines.
Examples
The following example shows how to launch an FTP session on your GSS device:
gss1.example.com# ftp 192.168.0.1orgss1.example.com# ftp 2001:DB8:A:B::1Related Commands
geodb database delete
To remove entries from the geoDBdatabase, use the geodb database delete command.
show geodb database delete {all | ip}
Syntax Description
all
Deletes all entries from the cached geoDB database.
ip
Deletes all entries matching source IP and netmask.
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Related Commands
geodb database load filename
To dump geoDB database entries in a binary or Extensible Markup Language (XML) format, use the geodb database load filename command.
geodb database load filename
Syntax Description
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Related Commands
geodb database lookup ipaddress
To look up GeoDB database entries, use the geodb database lookup ipaddress command.
geodb database lookup ipaddress ipaddress
Syntax Description
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Examples
gssm1.example.com#geodb database lookup ip-address 192.168.1.1Latitude Longitude RegionId Contry Code : State Name--------------- --------------- --------------- -------------------------------27 133 155 AU:(GeoIP Database Entry)N/A N/A N/A N/A(GeoIP Static Entry)gssm1.example.com#Related Commands
geodb database dump file format
To load from the cached geoDB database file in GSS memory, use the geodb database dump file format command.
geodb database dump {file name} format {binary| xml} override
Syntax Description
Command Modes
Privileged EXEC
Examples
The following example shows how to load the cached GeoDB database:
gssm1.example.com# geodb database dump dumpfile format binaryStarting geodb Database dump.Geodb Database dump completed. The number of dumped entries: 0.Related Commands
geodb database periodic-backup now
To force an immediate backup of the database residing in GSS memory by using the geodb database periodic-backup now command. The GSS sends the database entries to the system dump file. Upon a reboot or restart, the GSS reads this file and loads the contents to initialize the GeoDB statistics configured for the GSS at boot time. This command has no arguments or syntax.
geodb database periodic-backup now
Syntax Description
This command has no keywords or arguments.
Command Modes
User Exec, Privileged Exec
Examples
This example shows how to take an immediate backup of the database:
gssm1.example.com# geodb database periodic-backup nowStarting geodb Database dump.Geodb Database dump completed. The number of dumped entries: 0.gssm1.example.com#geodb static-entry
Use the geodb static-entry command in the global server load-balancing configuration mode to add static entries to the GeoDB database. This command also enables a graceful migration between GeoIP updates. To remove a static entry, use the no form of the command.
geodb static-entry start-ip ip_address end-ip ip_address latitude number longitude number
no geodb static-entry start-ip ip_address end-ip ip_address latitude number longitude number
Syntax Description
Command Modes
Privileged EXEC
Examples
The following example shows how to add and remove geodb static entry:
gssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# geodb static-entry start-ip 192.168.1.1 end-ip 10.78.18.194 latitude -180.0 longitude 0.0gssm1.example.com(config-gslb)#To remove a static entry, use the no form of the command.
For example, to remove a static entry, enter:gssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no geodb static-entry start-ip 192.168.1.4 end-ip 192.168.1.10 latitude -180.0 longitude 0.0gssm1.example.com(config-gslb)#Examples
gss
To manage your GSS devices, use the gss command.
gss {disable | enable {gssm-primary | gssm-standby {primary_GSSM_hostname | primary_GSSM_IP_address} | gss {primary_GSSM_hostname | primary_GSSM_IP_address} | restart | start | status [verbose] | stop}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
The gss command provides a variety of options for managing your GSSs and GSSMs, including:
•
•
Examples
The following example shows how to manage your GSS devices:
gssm1.example.com# gss statusgssm1.example.com# gss statusCisco GSS - 4.1(0) GSSM - primary [Mon Sep 12 15:48:39 UTC 2011]Normal Operation [runmode = 5]START SERVER04:56 Boomerang04:56 Config Agent (crdirector)04:56 Config Server (crm)04:56 DNS Server04:56 Database04:56 GUI Server (tomcat)04:56 Keepalive Engine04:56 Node Manager04:56 Proximity04:56 Sticky04:56 Web Server (apache)04:56 drpgssm1.example.com#When the DNS server is ready to serve DNS requests, it generates the following subsystem log message and saves it in the system.log file:
Mar 25 10:45:26 gssm1.example.com DNS-5-SELREADYINFO[2073] Selector ready to start serving DNS requestsRelated Commands
gss tech-report
To generate a detailed report for use by Cisco Technical Assistance Center (TAC) representatives in troubleshooting persistent GSS problems, use the gss tech-report command.
gss tech-report filename
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
The file generated is a tar- format archive file with a .tgz extension.
Examples
The following example shows how to generate a detailed report for use by TAC representatives in troubleshooting persistent GSS problems:
gss1.example.com# gss stopgss1.example.com# gss tech-report gss_techrpt1Creating report for Cisco TAC. This may take a few minutes...Created debug package: /home/techrpt1.tgzUse scp/ftp to retrieve.gssm
To manage your primary and standby Global Site Selector Manager (GSSM) and your GSS database, use the gssm command.
gssm backup full filename | database {invalidate | maintain | purge-log-records {count number_records | days number_days} | report | status | validate}| primary-to-standby | restore filename | standby-to-primary
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
Use the gssm database command and keyword to manage the embedded GSS database. The various command options allow you to monitor the status of your database and perform standard maintenance tasks such as backing up and restoring the database, validating the database content, and purging records.
Use the gssm restore command and keyword to restore an earlier version of the GSSM from a full backup image.
Use the gssm standby-to-primary and primary-to-standby command and keywords to switch the role of the selected GSSM in your GSS network. You must make sure that your original primary GSSM is offline before attempting to enable the standby GSSM as the new primary GSSM. Having two primary GSSMs active at the same time may result in the inadvertent loss of configuration changes for your GSS network. If this dual primary GSSM configuration occurs, the two primary GSSMs revert to standby mode and you will need to reconfigure one of the GSSMs as the primary GSSM.
The standby GSSM can temporarily take over the role as the primary GSSM if the the primary GSSM is unavailable (for example, you need to move the primary GSSM or you want to take it offline for repair or maintenance). The switching of roles between the designated primary GSSM and the standby GSSM is intended to be a temporary GSS network configuration until the original primary GSSM is back online. The interim primary GSSM can be used to monitor GSS behavior and make configuration changes if necessary. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network as described in the Cisco Global Site Selector Administration Guide.
Examples
The following examples show that the gssm database command is used to check the running status of the GSSM embedded database, back up the database to a file, purge all database records except for the last 50, and delete the database:
gss1.example.com# gssm database reportGSSM database validation report written to validation.loggss1.example.com# gssm database statusGSSM database is running.gss1.example.com# gssm database validateGSSM database passed validation.gss1.example.com# gssm primary-to-standbyStandby GSSM enabled.gss1.example.com# gssm standby-to-primaryStandby GSSM disabled.Related Commands
help
To obtain online help for the GSS CLI, use the help command.
help
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, and global configuration
Usage Guidelines
You can get help at any point when specifying a CLI command by entering a question mark (?). If nothing matches, the help list will be empty, and you must back up until entering a ? shows the available options.
Two methods of help are provided at the CLI:
•
•
Examples
The following example shows how to obtain online help for the GSS CLI:
gss1.example.com# helpgss1.example.com# help copy ?install
To install a new version of the GSS software on your GSS device, use the install command.
install filename
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
Use this command to install a new image of the GSS software on the Cisco GSS hardware. The upgrade file must be present on the Cisco GSS before you execute this command.
The install command cannot be executed while the Cisco GSS is running (for example, serving Domain Name System [DNS] requests). You must enter the gss stop command before executing the install command.
Examples
The following example shows how to install an updated version of the GSS software:
gss1.example.com# install /gss.upgRelated Commands
license
To install or uninstall a license file on your GSS device, use the license command.
license install filename | uninstall filename
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
For information about obtaining and installing a license file, see the Cisco Global Site Selector Administration Guide.
Examples
The following example shows how to install the Distributed Denial of Service (DDoS) license on the GSS:
gssm1.example.com# license install ddos.licRelated Commands
lls
To view a long list of files in a directory, use the lls command.
lls [directory]
Syntax Description
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
Use this command to view a detailed list of files contained within the working directory, including names, sizes, and the time created. The equivalent command is dir.
The current directory is the default directory.
Examples
The following example shows how to view a long list of files in a directory:
gss1.example.com# llstotal 771884drwxrwxrwx 3 root root 4096 Oct 8 11:09 .drwxrwxrwx 19 root root 4096 Oct 8 11:13 ..drwx------ 2 root root 4096 Jan 23 2006 .ssh-rw-r--r-- 1 root root 135137321 Jan 24 2006 ACR_new.upg-rw-r--r-- 1 root root 135178281 Jan 24 2006 ACR_new1.upg-rw-r--r-- 1 root root 135168041 Jan 24 2006 ACR_new2.upg-rw-r--r-- 1 root root 129597481 Jan 25 2006 gss-1.2.2.2.0-k9.upg-rw-r--r-- 1 root root 127088681 Jan 24 2006 gss-1.3.0.3.0-k9.upg-rw-r--r-- 1 root root 127385641 Oct 8 10:54 gss-1.3.0.4.1-k9.upg-rw-r--r-- 1 root root 2520 Oct 8 11:09 one-rw-r--r-- 1 root root 3634 Oct 8 11:06 proximitySchema.xsd-rw-r--r-- 1 root root 3523 Oct 8 11:07 stickySchema.xsdgss1.example.com#Related Commands
ls
To view a list of files or subdirectory names within a directory, use the ls command.
ls [directory]
Syntax Description
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
To list the filenames and subdirectories within a particular directory, use the ls directory command; to list the filenames and subdirectories of the current working directory, use the ls command. To view the present working directory, use the pwd command.
The current directory is the default directory.
Examples
The following example shows how to view a list of files or subdirectory names within a directory:
gss1.example.com# lsgss-1.0.2.0.2-k9.upg id_rsa.pub megara.back.1_0.full rpmsgss-1.0.904.0.1-k9.upg gss_sample.full megara.back.1_1.fullRelated Commands
lsof
To view a list of all open files on your GSS device, use the lsof command.
lsof
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
To list the names, file properties, and locations of all files that are currently open on your GSS device, use the lsof command.
Examples
The following example shows how to view a list of all open files on your GSS device:
gss1.example.com# lsofCOMMAND PID USER FD TYPE DEVICE SIZE NODE NAMEinit 1 root cwd DIR 8,7 4096 2 /init 1 root rtd DIR 8,7 4096 2 /init 1 root txt REG 8,7 25968 492 /sbin/initinit 1 root mem REG 8,7 341331 29 /lib/ld-2.1.3.soinit 1 root mem REG 8,7 4105868 36 /lib/libc-2.1.3.soinit 1 root 0u unix 0xf7f86f40 5851 socketinit 1 root 10u FIFO 8,8 4098 /rw/dev/initctlkflushd 2 root cwd DIR 8,7 4096 2 /kflushd 2 root rtd DIR 8,7 4096 2 /kflushd 2 root 0u unix 0xf7f86f40 5851 socketkflushd 2 root 10u FIFO 8,8 4098 /rw/dev/initctlkupdate 3 root cwd DIR 8,7 4096 2 /kupdate 3 root rtd DIR 8,7 4096 2 /kupdate 3 root 0u unix 0xf7f86f40 5851 socketkupdate 3 root 10u FIFO 8,8 4098 /rw/dev/initctlkswapd 4 root cwd DIR 8,7 4096 2 /kswapd 4 root rtd DIR 8,7 4096 2 /kswapd 4 root 0u unix 0xf7f86f40 5851 socketkswapd 4 root 10u FIFO 8,8 4098 /rw/dev/initctlkeventd 5 root cwd DIR 8,7 4096 2 /keventd 5 root rtd DIR 8,7 4096 2 /keventd 5 root 0u unix 0xf7f86f40 5851 socketkeventd 5 root 10u FIFO 8,8 4098 /rw/dev/initctl...Related Commands
no
To negate a CLI command or set it to its default settings, use the no command. Some GSS CLI commands do not have a no form.
no command
Syntax Description
Command Modes
Interface configuration, global, and global server load-balancing configuration
Usage Guidelines
Use the no command to disable functions or negate a command. If you need to negate a specific command, such as the default gateway IP address, you must include the specific string in your command, such as no ip default-gateway ip-address.
Examples
The following example shows how to negate a CLI command or set it to its default settings:
gss1.example.com(config)# no ip name-server 10.11.12.14gss1.example.com(config)# no ntp-server 172.16.22.44ping
To send ICMP echo packets for diagnosing basic network connectivity on networks, use the ping command.
ping {hostname | ip-address}
Syntax Description
hostname
Hostname of the system to send an ICMP echo packet.
ip-address
IP address of the system to send an ICMP echo packet. Enter either an IPv4 and IPv6 address.
Command Modes
User and privileged EXEC.
Usage Guidelines
To use this command with the hostname argument, make sure that the Domain Name System (DNS) functionality is configured on your GSS. To force the timeout of a nonresponsive host, or to eliminate a loop cycle, press the Ctrl-C key sequence.
Examples
The following example shows how to send ICMP echo packets for diagnosing basic network connectivity on networks:
gss1.example.com# ping gss.example.comPING 172.16.0.0 (172.16.0.0) from 10.1.13.5 : 56(84) bytes of data.64 bytes from gss.example.com (172.16.0.0): icmp_seq=0 ttl=35 time=57.3 ms64 bytes from gss.example.com (172.16.0.0): icmp_seq=1 ttl=35 time=55.8 ms64 bytes from gss.example.com (172.16.0.0): icmp_seq=2 ttl=35 time=55.5 ms64 bytes from gss.example.com (172.16.0.0): icmp_seq=3 ttl=35 time=57.6 ms64 bytes from gss.example.com (172.16.0.0): icmp_seq=4 ttl=35 time=55.3 msgss1.example.com# ping www.example.comPING www.example.com(2001:51::1:2:61:10) 56 data bytes64 bytes from 2001:DB8::1:2:61:10: icmp_seq=0 ttl=64 time=0.156 ms64 bytes from 2001:DB8:::1:2:61:10: icmp_seq=1 ttl=64 time=0.150 ms64 bytes from 2001:DB8:::1:2:61:10: icmp_seq=2 ttl=64 time=0.149 ms64 bytes from 2001:DB8:::1:2:61:10: icmp_seq=3 ttl=64 time=0.152 ms64 bytes from 2001 1:DB8:::1:2:61:10: icmp_seq=4 ttl=64 time=0.156 msproximity database delete
To remove entries from the proximity database (PDB), use the proximity database delete command.
proximity database delete {all | assigned | group {name} | inactive minutes | ip {ip-address} netmask {netmask} | no-rtt | probed}
Caution
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
You can remove all PDB entries from the GSS memory by using the proximity database delete all CLI command. This command, however, does not delete PDB entries saved as part of an automatic dump to a backup file on a disk, which the GSS loads upon a reboot or restart to initialize the PDB. To ensure that you successfully remove all PDB entries from both the GSS memory and disk, enter the proximity database delete all command followed by the proximity database periodic-backup now command to force an immediate backup of the empty PDB residing in the GSS memory.
The prompt "Are you sure?" appears to confirm the deletion of all PDB entries. Specify y to delete all entries or n to cancel the deletion operation.
Examples
The following example shows how to remove entries from the proximity database:
gss1.example.com# proximity database delete ip 192.168.8.0 255.255.255.0Related Commands
proximity database periodic-backup
proximity database dump
To dump all or selected entries from the proximity database to a named file as a user-initiated backup file, use the proximity database dump command.
proximity database dump {filename} format {binary | xml} [entry-type {all | assigned | probed}] [entry-address {ip-address} netmask {netmask}]
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
The GSS automatically dumps proximity database entries to a backup file on a disk approximately every hour. The GSS uses this backup file to initialize the proximity database upon system restart or reboot to enable the GSS to recover the contents of the database.
You can use the proximity database dump command to dump all or selected entries from the proximity database to a named file as a user-initiated backup file. You can then use the ftp command in privileged EXEC mode to launch the FTP client and transfer the file to and from remote machines.
To view the entire contents of the XML proximity database output file from the GSS, use the type command.
Examples
The following example shows how to dump the dynamic proximity database entries to a file named PDB6_30_04 in binary format:
gss1.example.com# proximity database dump file PDB6_30_04 format binary entry-type probed entry-address 172.23.5.7 netmask 255.255.255.255Related Commands
proximity database periodic-backup
proximity database load
To load and merge proximity database entries from a file into the existing proximity database in GSS memory, use the proximity database load command.
proximity database load filename format binary [override]
Syntax Description
filename
Name of the proximity database file to load and merge with the existing proximity database on the GSS device. The file must be in a binary format to be loaded into the GSS memory (see the proximity database dump command). Use the ftp command in privileged EXEC mode to launch the FTP client and transfer the proximity database file to the GSS from a remote GSS.
format binary
Loads the assigned proximity file in a true binary format. The file must be in a binary format to be loaded into the GSS memory.
override
(Optional) Specifies if the proximity database entries in the file are to override the same entries located in the current GSS proximity database. When you choose the override keyword, static database entries always take priority over dynamic database entries in the database. For the same database entries that exist in both the file and in GSS database memory, the GSS does the following:
•
•
If you do not specify the override keyword, the GSS loads all the most recent entries into the memory, which will replace the older entries of the same type (dynamic or static) in the proximity database. For example, the most recent dynamic entries replace the older dynamic entries in the proximity database.
Command Modes
Privileged EXEC
Usage Guidelines
The proximity database load function supports the migration of proximity database entries from one GSS device into the proximity database of another GSS device. The GSS validates the loaded database entries, checks the software version for compatibility, and then replaces the proximity database in the memory. The file must be in a binary format to be loaded into the GSS memory.
Proximity RTT metrics loaded from the file replace overlapping entries that exist in the database and supplement the nonoverlapping database entries.
Examples
The following example shows how to load and merge the entries from the GSS3PDB file without overriding the existing entries in the GSS proximity database:
gss1.example.com# proximity database load GSS3PDBRelated Commands
proximity database periodic-backup
proximity database periodic-backup
To force an immediate backup of the proximity database residing in the GSS memory, use the proximity database periodic-backup command.
proximity database periodic-backup now
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
You may manually initiate a proximity database dump as a database recovery method to ensure that you store the latest proximity database entries before you shut down the GSS.
The GSS sends the proximity database entries to the system dump file as the proximity database file. Upon a reboot or restart, the GSS reads this file and loads the contents to initialize the proximity database at boot time.
Examples
The following example shows how to force an immediate backup of the proximity database residing in the GSS memory:
gss1.example.com# proximity database periodic backup nowRelated Commands
proximity group-summary dump
To dump the proximity group configuration summary to a specified text file, use the proximity group-summary dump command.
proximity group-summary dump filename
Syntax Description
filename
Name of the text file in which you want the GSS to dump the proximity group configuration summary.
Command Modes
Privileged EXEC
Usage Guidelines
You can view the text file containing the proximity group configuration summary using the type filename command.
Examples
The following example shows how to dump the group configuration summary to a sample file and the display this file using the type command:
gss1.example.com# proximity group-summary dump prox-dump-file.txtgss1.example.com# type prox-dump-file.txt Proximity Groups: Group1: Name: proxa5 Address Block : 11.1.1.36/30 11.1.1.40/30 Group2: Name: proxa6 Address Block : 11.1.1.44/30 11.1.1.48/30Related Commands
proximity play-config
To play the static proximity configuration, use the proximity play-config command. This command is useful if the size of static proximity group configuration is quite large since it is more efficient than the script play-config command.
proximity play-config filename
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
For information about using the proximity play-config command, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Examples
This example shows how to play a static proximity configuration:
gssm1.example.com# proximity play-config prox.txtTue Mar 6 13:10:43 2007 waiting for postmaster to start....done Tue Mar 6 13:10:43 2007 postmaster successfully started proximity group proxa1 ip 11.1.1.4 netmask 255.255.255.252 proximity group proxa1 ip 11.1.1.8 netmask 255.255.255.252 ... proximity group proxa50 ip 11.1.2.140 netmask 255.255.255.252 proximity group proxa50 ip 11.1.2.144 netmask 255.255.255.252########################################### Please use the following Key required while, playing "proximity play-config" on SGSSM. Key: 89l25l5fa7339c1b60a20b60142493328b997b ###########################################Related Commands
(config-gslb) script play-config
proximity probe
To update the PDB with the results of the D-proxy probing.
proximity probe ipaddress zone
Command Modes
Privileged EXEC
Examples
gssm1.example.com# proximity probe ?WORD IPv4/IPv6 address of DProxy to obtain information about.gssm1.example.com## proximity probe 10.0.0.1zone<1-32> Zone index: 1 - 32all Probe all zones for information about IP or DProxy.gssm1.example.com## proximity probe 10.0.0.1zone allproximity start
To locally reenable proximity on a GSS device after locally disabling the function, use the proximity start command.
proximity start
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Examples
The following example shows how to locally reenable proximity on a GSS device after locally disabling the function:
gss1.example.com# proximity startRelated Commands
proximity statistics group-summary dump
To dump the proximity group summary statistics to a specified text file, use the proximity statistics group-summary dump command.
proximity statistics group-summary dump filename
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
You can view the text file containing the proximity group summary statistics using the type filename command.
Examples
The following example shows how to dump the group summary statistics to a sample text file and the display this file using the type command:
gss1.example.com# proximity statistics group-summary dump sampletxtfilegss1.example.com# type sampletxtfileProximity Group Statistics Summary:Group name Target IP Total Entries Total Hits --------- --------- ------------- --------------- proxa1 n/a 2 0 proxa10 n/a 2 0 proxa11 n/a 2 0 proxa12 n/a 2 0 proxa13 n/a 2 0 proxa14 n/a 2 0 Proximity Group Statistics Summary:Related Commands
proximity stop
To locally disable proximity on a GSS device for troubleshooting, use the proximity stop command.
proximity stop
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
You can disable proximity for a single GSS when you need to override the GUI-enabled proximity option. You may need to locally disable proximity on a GSS when you need to troubleshoot or debug the device. The GSS does not store the local-disable setting in its running-config file.
When you enter the proximity stop command, the GSS immediately stops the following operations:
•
•
•
•
•
Use the proximity start command to locally reenable network proximity on the GSS device.
Examples
The following example shows how to locally disable proximity on a GSS device for troubleshooting:
gss1.example.com# proximity stopRelated Commands
pwd
To view the present working directory, use the pwd command.
pwd
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
Use this command to display the present working directory of the GSS.
Examples
The following example shows how to view the present working directory:
gss1.example.com# pwd/adminRelated Commands
refresh-gssmesh-statistics
To force the GSS devices in the mesh to send the primary GSSM their latest DNS rule and answer statistics, use the refresh-gssmesh-statistics command from the primary GSSM.
refresh-gssmesh-statistics
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
By default, the GSS devices send the primary GSSM statistical information every five minutes. Before using the show statistics gss-mesh all dns {answer | rule} command, you can force the GSS devices in the mesh to send the primary GSSM their latest statistics by using the refresh-gssmesh-statistics command from the primary GSSM. This ensures that the primary GSSM displays the latest GSS mesh statistics.
The CLI is unavailable for use for five seconds after using refresh-gssmesh-statistics command to give the primary GSSM enough time to receive and process the information. If network traffic is busy, the primary GSSM may not receive the information within the five seconds. If you use the show statistics gss-mesh all dns {answer | rule} command before the primary GSSM receives the new information, the command output may not contain the latest statistical information.
Note
Examples
The following example shows how to force the GSS devices in the mesh to send the primary GSSM their latest DNS rule and answer statistics:
gss1.example.com# refresh-gssmesh-statistics/adminRelated Commands
show statistics gss-mesh all dns
reload
To halt and perform a cold restart on your GSS device, use the reload command.
reload
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
To reboot the GSS device, use the reload command. Any open connections with the GSS are dropped after you enter the reload command.
If you did not save a startup-configuration to Flash memory, the GSS prompts you to enter configuration parameters upon restart.
Examples
The following example shows how to halt and perform a cold restart on your GSS device:
gss1.example.com# reloadRelated Commands
rename
To rename a current GSS file, use the rename command.
rename source_filename new_filename
Syntax Description
source_filename
Alphanumeric name of the file that you want to rename.
new_filename
Alphanumeric name that you want to assign to the file.
Command Modes
Privileged EXEC
Usage Guidelines
Quotes are not required around filenames. The following special characters are not allowed in the renamed filenames: ` (apostrophe), ; (semicolon), * (asterisk), and a space.
Use the dir, lls, or ls commands to view the files available in the current directory or subdirectory.
Examples
The following example shows how to rename a current GSS file:
gss1.example.com# rename startup-config new_startup-configRelated Commands
reset-gui-admin-password
To restore the default administration password that is used to log in to the primary Global Site Selector Manager (GSSM) GUI, or to change the administration password, use the reset-gui-admin-password command.
reset-gui-admin-password [password text]
Syntax Description
password text
(Optional) Changes the administration password used to log in to the primary GSSM GUI. Enter an unquoted text string with no spaces and a length of 6-16 characters.
Command Modes
Privileged EXEC
Usage Guidelines
The administrative username and password used to access the primary GSSM GUI are stored in a safe partition of the hard disk to prevent data loss due to power failures. If you change the administrative password, and then either lose or forget the password, you can reset the password back to "default" by entering the reset-gui-admin-password command.
You can also change the administrative password using the reset-gui-admin-password command.
This command is available only from the primary GSSM and standby GSSM CLI.
The default administration password is "default."
Examples
The following example shows how to change the administration password:
gss1.example.com# reset-gui-admin-password password mynewpasswordrestore-factory-defaults
To reset your GSS device to its initial state, restoring all factory default settings, use the restore-factory-defaults command.
restore-factory-defaults
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
If your GSS device is improperly configured or is malfunctioning, you can use the restore-factory-defaults command to restore the device to its initial state, allowing you to properly configure it for use on your network.
The restore-factory-defaults command erases your Global Site Selector Manager (GSSM) database and all of its data and resets all network settings, returning your GSS hardware to the same state it was in when it first arrived from the factory. Before you enter the restore-factory-defaults command, ensure that you back up any vital data in the database component of the primary GSSM with its network and device configuration information. Use the gssm backup command to perform a primary GSSM backup. See the Cisco Global Site Selector Administration Guide for details on performing GSS backup.
Note
You cannot enter the restore-factory-defaults command while the GSS is running (for example, serving DNS requests). You must first enter the gss stop command.
Examples
The following example shows how to reset the GSS device to its initial state:
gss1.example.com# restore-factory-defaultsRelated Commands
rotate-logs
To force the GSS device to restart its log files and save archive copies of all existing log files, use the rotate-logs command.
rotate-logs [delete-rotated-logs]
Syntax Description
delete-rotated-logs
(Optional) Deletes all rotated log files from the / directory and its subdirectories on the GSS disk. The GSS does not delete active log files.
Command Modes
Privileged EXEC
Usage Guidelines
This command forces the GSS device to save archive copies of all existing log files in the / directory and its subdirectories and replaces them with fresh log files. Existing log files are archived locally using the following naming convention:
logfile_name.log.number
where
•
•
The delete-rotated-logs keyword clears all rotated log files in the / directory and its subdirectories except for the active log files.
Examples
The following example shows how to force the GSS device to restart its log files and save archive copies of all existing files:
gss1.example.com# rotate-logsRelated Commands
scp
To securely copy files from a GSS device where you are logged in, use the scp command.
scp {source_path [source_filename] user@target_host:target_path}
To securely copy files from another device to a GSS device where you are logged in, use the scp command.
scp {user@source_host:/source_path[source_filename] target_path}
Syntax Description
Command Modes
User EXEC and privileged EXEC.
Usage Guidelines
The GSS supports one-way communication only in SCP. You can copy GSS files from the GSS where you are logged in to an external device. You can also copy files from an external device to the GSS. However, from an external device, you cannot execute the scp command and get files from the GSS. You can only use scp from the GSS.
After logging in to the CLI for the device that you intend to copy files to or from, enter the scp command following the syntax description provided above. You may be prompted to log in to the remote device before you are allowed to navigate to the target directory.
You can use either an IPv4 or an IPv6 address for the hostname.
Examples
The following example shows how to securely copy files from a GSS device to which you are logged on:
gss1.example.com# scp /tmp/system.log myusername@192.168.2.3:/homegss1.example.com# scp myusername@192.168.0.0:/home/mygssmfile.log /homeRelated Commands
setup
To initiate a special setup script that guides you through the basic process of configuring the GSS, use the setup command.
setup
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC and global configuration
Usage Guidelines
The setup command configures basic configuration information from the CLI. Use this command when the GSS boots without a startup-configuration file (for example, when the GSS is new and the system was not configured upon initial startup). When you enter the setup command, the GSS software displays a series of prompts. You must go though all of the prompts and make changes only to those fields that you want to modify. When completed, the software prompts you to perform one of the following:
•
•
•
Once configuration setup is complete, the GSS software prompts you to log in to the primary GSSM GUI and finish the device setup.
The setup command cannot be executed while the GSS is running. You must enter the gss stop command before executing the setup command.
Examples
The following example shows how to initiate a special setup script that guides you through the basic process of configuring the GSS:
gss1.example.com# setup################################ GSS Initial Setup Script ################################This setup utility will help guide you through the basic configurationnecessary to get a GSS up and running. The script will not make anymodifications on the running system. At the end you will be able toreview and edit the new configuration and before applying it to therunning system.Typing CTRL-C at any prompt quits the script immediately.The values in brackets '[]' are the defaults, and can be selectedby simply hitting <CR>.This setup script will help with only the basic GSS and GSSM configuration.To configure DNS rules, it will be necessary to log into the Primary GSSMAdmin Webpage.Do you want to continue? (y/n) [no]: yEnter the Hostname of this device [gss1.example.com]:* Interface eth0 (Active - IP: 51.0.0.123 Mask: 255.255.0.0)Do you want to change this? (y/n) [n]: yDo you want to activate this interface? (y/n) [y]:Do you want to configure IPv4 address for eth0? (y/n) [n]:Do you want to configure IPv6 global unicast address for eth0? (y/n) [n]: yEnter the IPv6 global unicast address: 2001:DB1:1::1:128Enter the Prefix Length: 64Do you want to configure IPv6 unique local address for eth0? (y/n) [n]:Do you want to configure IPv6 link local address for eth0? (y/n) [n]:* Interface eth1 (Active - IP: 192.169.1.225 Mask: 255.255.255.128)Do you want to change this? (y/n) [n]:(Active IPv4 Gateway: 192.168.2.1Do you want to configure a default IPv4 gateway? (y/n) [y]:Enter the IPv4 gateway [192.168.2.1]:Do you want to configure a default IPv6 gateway? (y/n) [n]: yEnter the IPv6 gateway: 2001:DB1:1::1:128Enter the IP addresses for up to 8 Name Servers.Enter a dash ('-') at a blank entry to stop entering Name Servers.At least one Name Server is required for this setup script.Enter Name Server 1 [192.168.2.10]:Enter Name Server 2 [192.168.2s.13]:Enter Name Server 3 [192.168.2.230]:Enter Name Server 4: -* Remote AccessDo you want to enable FTP access? (y/n) [y]:Do you want to enable SSH access? (y/n) [y]:Do you want to enable Telnet access? (y/n) [y]:Do you want to configure this GSS as a Manager (gssm)? (y/n): yDo you want to configure this GSSM as the Primary? (y/n): yThe following configuration command script was created:-interface ethernet 0ip address 192.168.2.1 255.255.0.0interface ethernet 1ip address 10.78.18.225 255.255.255.128-hostname gss1.example.comip default-gateway 192.168.2.129ip default-gateway 2001:DB1:1::128ip name-server 192.168.2.10ip name-server 192.168.2.13ip name-server 192.168.2..230---ssh enableno ssh keysno ssh protocol version 1telnet enableftp enablesnmp-server trap-source ethernet 0-no cnr enabledrpno enable-gss enable gssm-primary-What would you like to do?1) Apply as the Running Configuration2) Edit this configuration3) Discard Configuration and Quit SetupChoice: 1show access-group
To display a list of the access lists associated with your GSS interfaces Ethernet 0 and Ethernet 1, use the show access-group command.
show access-group
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show access-group command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show access-list
To display a list of the access lists configured on your GSS device, use the show access-list command.
show access-list
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
The show access-list command displays a list of access lists on your GSS device, regardless of whether they are being used. Access lists must be applied to a particular GSS interface before they can be used to filter GSS traffic.
For information about the fields in the show access-list command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show arp
To display ARP information, use the show arp command.
show arp
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
The show arp command displays the complete ARP resolution table with IP addresses, MAC addresses, and resolution type.
For information about the fields in the show arp command output, see the Cisco Global Site Selector Administration Guide.
Examples
The following is a sample output from the show arp command:
gss1.example.com# show arp
Address HWtype HWaddress Flags Mask Iface10.78.18.230 ether 00:25:64:3B:2E:CF C eth110.78.18.129 ether 00:00:0C:07:AC:28 C eth151.0.0.10 ether 00:1C:23:E2:47:7B C eth051.0.0.13 ether 00:19:B9:F8:72:FE C eth051.0.0.1 ether 00:1E:7A:F6:1F:44 C eth0Entries: 5 Skipped: 0 Found: 5show boot-config
To display information about the GSS software, such as the current boot image and boot device information, use the show boot-config command.
show boot-config
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
For information about the fields in the show boot-config command output, see the Cisco Global Site Selector Administration Guide.
Examples
The following is a sample output from the show boot-config command:
gss1.example.com# show boot-config
Boot Device = /dev/sdaTimeout = 5 secondsCurrent Boot Image:Label = GSS-4.1.0GSS Software Version = 4.1.0Root Partition = /dev/sda7Linux Kernel = 2.6.9-100.ELsmpDefault Boot Imageshow clock
To display the system clock, use the show clock command. This command displays date and time information, such as the day of the week, the month, the time (hh:mm:ss), and the year in Greenwich mean time (GMT).
show clock
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show clock command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
Examples
The following is a sample output from the show clock command:
gss1.example.com# show clock
System time: Mon Sep 19 01:53:19 UTC 2011show ddos
To display Distributed Denial of Service (DDoS) detection and mitigation statistics on a GSS, use the show ddos and its related commands.
show ddos [attacks | dproxy [ipaddress | spoofed | trusted] | failed-dns [failed-domains | global-domain-rules | gslb-rules] | rate-limit [ipaddress | global] | config | status]
attacks
See the show ddos attacks command for a detailed syntax description.
dproxy [ipaddress | spoofed | trusted]
See the show ddos dproxy command for a detailed syntax description.
failed-dns [failed-domains | global-domain-rules | gslb-rules]
See the show ddos failed-dns command for a detailed syntax description.
rate-limit [ipaddress | global]
See the show ddos rate-limit command for a detailed syntax description.
config
See the show ddos-config command for a detailed syntax description.
status
See the show ddos status command for a detailed syntax description.
show ddos attacks
To display Domain Name System (DNS) attacks detected by the GSS, use the show ddos attacks command.
show ddos attacks
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show ddos attacks command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show ddos dproxy
To show spoofed and nonspoofed D-proxies on the GSS, use the show ddos dproxy command.
show ddos dproxy [ipaddress | spoofed | trusted]
Syntax Description
ipaddress
D-proxy IP address.
spoofed
Specifies the spoofed D-proxies.
trusted
Specifies the trusted D-proxies.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show ddos dproxy command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show ddos failed-dns
To show the last x number of domain names that caused failed Domain Name System (DNS) queries at the GSS or the number of failed DNS queries per D-proxy, use the show ddos failed-dns command.
show ddos failed-dns [failed-domains | global-domain-rules | gslb-rules]
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
Note
For information about the fields in the show ddos failed-dns command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show ddos-config
To display the contents of the Distributed Denial of Service (DDoS) running configuration file, use the show ddos-config command.
show ddos-config
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show ddos-config command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show ddos rate-limit
To show the rate limits per D-proxy and the number of packets dropped per source, use the show ddos rate-limit command.
show ddos rate-limit [ipaddress | global]
Syntax Description
ipaddress
(Optional) IP address of the D-proxy.
global
(Optional) Specifies the global rate limit on the GSS.
Usage Guidelines
For information about the fields in the show ddos rate-limit command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show ddos status
To display the status of the Distributed Denial of Service (DDoS) detection and mitigation module on the GSS, use the show ddos status command.
show ddos status
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show ddos status command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show disk
To display information about the GSS hard disk, use the show disk command. The information includes the available user space on the disk, the size of the database, and the space available.
show disk
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show disk command output, see the Cisco Global Site Selector Administration Guide.
show ftp
To display the operating status of the File Transfer Protocol (FTP) for your GSS device, use the show ftp command.
show ftp
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show access-list command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show gslb-config
To display GSS global server load-balancing configuration information, use the show gslb-config command.
show gslb-config [answer-group [name] | answer [ip_address {type} | name] | dns rule [name] | domain-lists [name] | keepalive-properties | locations [name] | owners [name] | proximity-properties | region [name] | shared-keepalives [ip_address] | source-address-lists [name] | static-proximity [name] | sticky-groups [name] | sticky-properties | zones [name]]
Syntax Description
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing
Examples
The following example shows how to display all currently configured keepalive properties:
gss1.example.com#sh gslb-config keepalive-properties/cisco/merlot/bin/spen cfg_gslb_show_config --kal-prop=keepalive-properties scripted-kal standard min-interval 40keepalive-properties icmp standard min-interval 40keepalive-properties tcp standard min-interval 40 port 80 termination reset timeout 20keepalive-properties http-head standard min-interval 40 port 80 termination reset timeout 20 path /keepalive-properties https-head standard min-interval 40 port 443 SSL-Version TLSV1 timeout 20 path /keepalive-properties kalap standard min-interval 40 capp-key hash-not-set circuit-retry-count 1keepalive-properties cra timing-decay 2 min-interval 10keepalive-properties ns query-domain . min-interval 40keepalive-properties global vip-keepalive enablekeepalive-properties global cra-keepalive enablekeepalive-properties global ns-keepalive enableRelated Commands
show gslb-errors
To display any errors that occurred after executing the (config-gslb) script play-config command, use the show gslb-errors command.
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Related Commands
(config-gslb) script play-config
show geodb
To display GSS GeoDB manager status, use the show geodb command.
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Examples
The following example shows the display of the GeoDB database configuration in the GSS:
gss1.example.com# show geodbGeodb Manager status: ReadyDatabase entry count: 0Dump interval: 60 minutesTimeout interval: 15 minutesImport Status: CompletedDataBase Version: v001(2011-08-16)gss1.example.com#Related Commands
show geodb database
To display GSS global GeoIP database (GeoDB) proximity configuration information, use the show geodb command.
show geodb database {all | inactive | ip | no-dist}
Syntax Description
Command Modes
User EXEC, privileged EXEC, global configuration, and global server load-balancing.
Related Commands
show interface
To display GSS hardware interface information, use the show interface command.
show interface {eth0 | eth1}
Syntax Description
eth0
Specifies the first Ethernet interface (eth0) on your GSS device.
eth1
Specifies the second Ethernet interface (eth1) on your GSS device.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show interface command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show inventory
To display GSS Unique Device Identifier (UDI) data, use the show inventory command.
show inventory
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show inventory command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show ip routes
To display the IP routing table for the GSS, use the show ip routes command.
show ip routes
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show ip routes command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show license
To display system license data, use the show license command.
show license active | file-name [list | filename] | installed | gss-all
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
For information about the show license command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show logging
To display the system message log configuration, use the show logging command.
show logging
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show logging command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show logs
To send the log activity to your current session, use the show log command.
show logs {follow | tail}
Syntax Description
follow
Displays the log file as data that is appended to it.
tail
Displays only the last 10 lines of the log file.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Use the show logs command to send the log activity to your current session. The show logs command displays the contents of the gss.log file, which contains information about the GSS activity that is most useful to GSS administrators.
For information about the fields in the show logs command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show memory
To display memory blocks and statistics, use the show memory command.
show memory
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show memory command output, see the Cisco Global Site Selector Administration Guide.
show ntp
To display the Network Time Protocol (NTP) configuration, use the show ntp command.
show ntp
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show ntp command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show processes
To display a list of internal GSS device processes, use the show processes command.
show processes
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show processes command output, see the Cisco Global Site Selector Administration Guide.
show properties
To display a list of configuration property settings for the GSS device, use the show properties command.
show properties
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Examples
The following example shows how to display the configuration property settings for the GSS:
gss1.example.com# show properties...ServerConfig.dnsserver.returnError: 0...
Related Commands
show proximity
To display general status information about the proximity subsystem, use the show proximity command.
show proximity
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show proximity command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show proximity database
To display the proximity database (PDB) entries by specifying one or more entry matching criteria, use the show proximity database command.
show proximity database {all | assigned | group {name} | inactive minutes | ip {ip-address} netmask {netmask} | no-rtt | probed}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show proximity database command, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
The range of prefix-length is 1 to 128.
Examples
The following example shows how to display entries related to the proximity database which are configured in the GSS:
gss1.example.com# show proximity database allKey/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- --------------------1 Static 2001:DB8::1.1 ICMP 0 0192.168.1.1 Dynamic 192.168.1.1 ICMP 1 12001:DB8::1.1 Dynamic 2001:DB8::1.1 ICMP 1 1Total 3 database entries displayed.gss1.example.com#gss1.example.com# show proximity database assignedKey/ID Type Probe Target Method RTTs Hits--------------------------------------- -------------1 Static 2001:DB8::1.1 ICMP 0 0Total 1 database entries displayed.gss1.example.com#gss1.example.com# show proximity database groupWORD Name of the groupgss1.example.com# show proximity database group g1Key/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- ---------------------------1 Static 2001:DB8::1.1 ICMP 0 0Total 1 database entries displayed.gss1.example.com#gss1.example.com# show proximity database inactive<0-43200> Minimum time in minutesgss1.example.com# show proximity database inactive 200Key/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- ------------------1 Static 2001:DB8::1.1 ICMP 0 0Total 1 database entries displayed.gss1.example.com#gss1.example.com# show proximity database ipWORD Source IPv4/IPv6 addressgss1.example.com# show proximity database ip 2001:DB8::1:1 netmask 128Key/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- --Total 0 database entries displayed.gss1.example.com# show proximity database ip 2001:DB8::1:1 netmask 64Key/ID Type Probe Target Method RTTs Hits--------------------------------------- --------Total 0 database entries displayed.gss1.example.com# show proximity database no-rttKey/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- -1 Static 2001::55:19:1 ICMP 0 0Total 1 database entries displayed.gss1.example.com#gss1.example.com# show proximity database probedKey/ID Type Probe Target Method RTTs Hits--------------------------------------- -------- ----192.168.1.1 Dynamic 192.168.1.1 ICMP 1 12001:DB8::1.1 Dynamic 2001:DB8::1.1 ICMP 1 1Total 2 database entries displayed.gss1.example.com# show proximity database no-rttKey/ID Type Probe Target Method RTTs Hits--------------------------------------- --------1 Static 2001:DB8::1.1 ICMP 0 0Total 1 database entries displayed.gss1.example.com#Related Commands
show proximity group-name
To display statistics for a specific proximity group, use the show proximity group-name command.
show proximity group-name groupname
Syntax Description
groupname
Name of a proximity group. Enter the exact name to display all proximity database entries related to that group.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show proximity group-name command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show proximity group-summary
To display a summary of statistics for all configured proximity groups, use the show proximity group-summary command.
show proximity group-summary
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
This command displays the configuration output to the console only if the number of proximity elements, or IP blocks, is less than 1000. (This value is not configurable). If the number of proximity elements is more than 1000, an error message displays asking you to execute the proximity group-summary dump filename command.
For information about the fields in the show proximity group-summary command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show running-config
To display the current running configuration of the GSS device, use the show running-config command.
show running-config
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, interface, and global server load-balancing
Usage Guidelines
Use this command with the show startup-config command to compare the information in the running memory to the startup-configuration file used during the bootup process.
For information about the show running-config command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show services
To display the current state of the GSS services, such as the File Transfer Protocol (FTP), Network Time Protocol (NTP), Secure Shell (SSH), Terminal Access Controller Access Control System Plus (TACACS+), Telnet, and Simple Network Management Protocol (SNMP), use the show services command.
show services
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show services command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show snmp
To display the Simple Network Management Protocol (SNMP) operating status, use the show snmp command.
show snmp
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show snmp command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show ssh
To display Secure Shell (SSH) status and configuration information, use the show ssh command.
show ssh
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show ssh command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show startup-config
To display the startup configuration, use the show startup-config command.
show startup-config
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Use this command to display the configuration used during an initial bootup that is stored in a safe partition of the hard disk to prevent the loss of data due to power failures.
For information about the show startup-config command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show statistics
To display GSS load-balancing statistics, use the show statistics command. The options for this command are as follows:
•
•
•
•
•
•
•
•
•
Each GSS device includes a comprehensive set of show statistics CLI commands to display content routing and load-balancing statistics for each major component involved in the GSS global server load-balancing operation. The GSS global server load-balancing components include boomerang (CRAs), DNS, and VIP keepalives. You can also monitor advanced traffic management functions, such as Domain Name System (DNS) sticky and network proximity, for the GSS device.
For example, you can use the show statistics dns command to view the traffic handled by a particular DNS rule, which matches a D-proxy to an answer, or to analyze the traffic to a particular hosted domain that is managed by a GSS.
Note
For more information about these keywords and associated arguments, see the following commands.
show statistics boomerang
To display statistics related to the boomerang server component of the GSS, use the show statistics boomerang command.
show statistics boomerang {domain domain_name | global}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show statistics boomerang command output, see the Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics dns
To display statistics from the Domain Name System (DNS) component of the GSS, use the show statistics dns command.
show statistics dns {answer [list | verbose | answer_name] | answer-group [list | group_name [verbose]] | domain [list | domain_name] | domain-list [list | domain_list_name [verbose]] | geo-region list | geodb [rule rule_name] global | proximity rule | rule [list | rule_name [verbose]] | source-address [list | sa_name] | source-address-list [list | sa_list_name [verbose]] | sticky rule}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show statistics dns command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics ddos
To display Distributed Denial of Service (DDoS) global or attack statistics, use the show statistics ddos command.
show statistics ddos [attacks | global]
Syntax Description
attacks
(Optional) Displays DDoS attack statistics.
global
(Optional) Displays DDoS global statistics.
Command Modes
Privileged EXEC
Usage Guidelines
For information about the fields in the show statistics ddos command output, see the Cisco Global Site Selector CLI-Based Global Server Load Balancing Configuration Guide.
Related Commands
show statistics drpagent
To display statistics on the Director Response Protocol (DRP) agent, use the show statistics drpagent command.
show statistics drpagent
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and drp
Usage Guidelines
For information about the fields in the show statistics drpagent command output, see the Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics gss-mesh all dns
To display statistics from the Domain Name System (DNS) component of each GSS in the GSS mesh, use the show statistics gss-mesh all dsn command from the primary GSSM
show statistics gss-mesh all dns {answer [type {cra | ns | vip}] [ip_address] | rule [rule_name]}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show statistics gss-mesh all dns command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics keepalive
To display statistics about the keepalive component of the GSS software, use the show statistics keepalive command.
show statistics keepalive {cra {ip_address | all | list} | global | http-head {ip_address | all | list}| https-head {ip_address | all | list} | icmp {ip_address | all | list} | kalap {ip_address | all | list} | scripted-kal {name | all | list} | ns {ip_address | all | list} | tcp {ip_address | all | list}}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the fields in the show statistics keepalive command output, see the Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide.
Examples
gss1.example.com# show statistics keepalive answer type vip allIP: 192.1.1.10Name: vip-1Status: ONLINENo of Keepalives Configured: 1Keepalive => 10.0.0.2Status: ONLINEKeepalive Type: icmp, StandardPackets Sent: 4Packets Received: 4Positive Probe: 4Negative Probe: 0Transitions: 1VIP GID: 42301 LID: 1Keepalive GID: 42302IP: 2000:db8::1428:57abName: vip-2Status: ONLINENo of Keepalives Configured: 1Keepalive => fe80::21c:23ff:fee2:515fStatus: ONLINEKeepalive Type: icmp, StandardPackets Sent: 1Packets Received: 1Positive Probe: 1Negative Probe: 0Transitions: 1VIP GID: 42305 LID: 2Keepalive GID: 42306gss1.example.com# sh statistics keepalive answer type vip listIP/Name State192.1.1.10 ONLINE2000:db8::1428:57ab ONLINERelated Commands
show statistics proximity
To display statistics about the network proximity operation of your GSS device, use the show statistics proximity command.
show statistics proximity {database | group-name {name} | group-summary | lookup | probes {detailed}}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Network proximity statistics include information about the proximity database on the GSS device, individual zones, probing requests, and round-trip time (RTT) coverage.
For information about the fields in the show statistics proximity command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics sticky
To display general statistics about the sticky database, use the show sticky statistics command.
show statistics sticky {global | group-name {name} | group-summary | mesh}
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Sticky statistics include the total number of hits and misses in the sticky database, number of entries in the sticky database, and total number of lookups.
For information about the fields in the show statistics sticky command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show statistics tacacs
To display the current Terminal Access Controller Access Control System Plus (TACACS+) statistics, use the show statistics tacacs command.
show statistics tacacs
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Each server is identified by the IP address and port. There is a Pass, Fail, and Error counter for each authentication, authorization, and accounting service.
For information about the fields in the show statistics tacacs command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show sticky
To display general status information about the sticky subsystem, use the show sticky command.
show sticky
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show sticky database
To display sticky database entries by specifying one or more entry matching criteria, use the show sticky database command.
show sticky database {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip_address} region regionid netmask {netmask} | rule {rule_name}}
Syntax Descriptionr
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky database command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show sticky global
To display the global sticky operating status and statistics about each GSS peer in the mesh, use the show sticky global command.
show sticky global [verbose]
Syntax Description
verbose
(Optional) Displays detailed global sticky status and statistics information for each GSS peer.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky global command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show sticky group-name
To display statistics for a specific sticky group, use the show sticky group-name command.
show sticky group-name groupname
Syntax Description
groupname
Name of a sticky group. Enter the exact name to display all sticky database entries related to that group.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky group-name command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show sticky group-summary
To display a summary of statistics for all configured sticky groups, use the show sticky group-summary command.
show sticky group-summary
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky group-summary command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show sticky mesh
To display global sticky operating status and statistics about each GSS peer in the mesh, use the show sticky mesh command.
show sticky mesh {session {session_id} [verbose]} | [verbose]
Syntax Description
Command Modes
Privileged EXEC, global configuration, and global server load-balancing configuration modes
Usage Guidelines
For information about the fields in the show sticky mesh command output, see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.
Related Commands
show supportpass-status
To see if the GSS support password has been set, use the show supportpass-status command.
show supportpass-status
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC mode
Usage Guidelines
For information about using the show supportpass-status command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show system-status
To display a report on the current operating status of your GSS device, including the online status, current software version, and start date or time for the various components, use the show system-status command.
show system-status
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
Use this command to display detailed information about the current operating state of the GSS device including the online status, the software version, and the start date or time for the various components. The equivalent command is the gss status command.
For information about the fields in the show system-status command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show tacacs
To display the Terminal Access Controller Access Control System (TACACS) configuration on your GSS device, use the show tacacs command.
show tacacs
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show tacacs command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show tech-support
To display a report on the current operating configuration of your GSS device that can be used by Cisco technical support representatives to help troubleshoot problems on your GSS network, use the show tech-support command.
show tech-support [config | core-files]
Syntax Description
Command Modes
Privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show tech-support command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show telnet
To display the status of the Telnet option on your GSS device, use the show telnet command.
show telnet
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
This command only displays the operating status of Telnet and cannot be used to connect to remote devices.
For information about the show telnet command output, see the Cisco Global Site Selector Getting Started Guide.
Related Commands
show terminal-length
To display the terminal length setting for your GSS device, use the show terminal-length command.
show terminal-length
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
This command displays the maximum number of rows of data that are output at once during a terminal session.
For information about the show terminal-length command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show uptime
To find out how long the GSS device has been operational, use the show uptime command.
show uptime
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show uptime command output, see the Cisco Global Site Selector Administration Guide.
show user
To display user information for a particular user, use the show user command.
show user username
Syntax Description
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show user command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show users
To display users, use the show users command.
show users
Syntax Description
This command has no keywords or arguments.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show users command output, see the Cisco Global Site Selector Administration Guide.
Related Commands
show version
To display version information about the GSS software, use the show version command.
show version [verbose]
Syntax Description
.
Command Modes
User EXEC, privileged EXEC, global configuration, and interface
Usage Guidelines
For information about the show version command output, see the Cisco Global Site Selector Administration Guide.
shutdown
To shut down the operating system on the GSS device, use the shutdown command. To shut down a particular Ethernet interface on the GSS device, use the shutdown command in interface configuration mode.
shutdown
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC, interface configuration
Usage Guidelines
The shutdown command performs a shutdown of the GSS operating system or interface. In some cases, the GSS device will also be powered down following a shutdown.
Examples
The following example shows how to shut down the operating system on the GSS device:
gss1.example.com# shutdowngss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# shutdownsticky database delete
To remove entries from the sticky database, use the sticky database delete command.
sticky database delete {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip_address} netmask {netmask} | rule {rule_name}}
Caution
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
When operating in a GSS global DNS sticky configuration, the result of the sticky database delete command propagates throughout the GSS mesh to maintain synchronization between the peers in the GSS network.
To view the entries in the sticky database to identify the sticky entries that you want to delete, use the show sticky database command.
Examples
The following example shows how to remove the D-proxy IP address 192.168.8.0 and subnet mask of 255.255.255.0:
gss1.example.com# sticky database delete ip 192.168.8.0 netmask 255.255.255.0The following example shows how to remove the D-proxy IP address 192.168.8.0 and subnet mask 255.255.255.0:
gss1.example.com# sticky database delete ip 192.168.8.0 netmask 255.255.255.0Related Commands
sticky database dump
To dump all or selected entries from the sticky database to a named file as a user-initiated backup file, use the sticky database dump command.
sticky database dump {filename} format {binary | xml} entry-type {all | group | ip}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
The GSS automatically dumps sticky database entries to a backup file on a disk in a binary file format approximately every 20 minutes. The GSS uses this backup file to initialize the sticky database upon system restart or reboot to enable the GSS to recover the contents of the database. When global sticky is enabled, the GSS uses the database dump file at reboot if there is no peer in the mesh that can provide a full sticky database.
You can dump all or selected entries from the sticky database to a named file as a user-initiated backup file. You can then use the ftp command in privileged EXEC mode to launch the FTP client and transfer the file to and from remote machines.
To view the entire contents of the XML sticky database output file from the GSS, use the type command.
Examples
The following example shows how to dump the D-proxy source IP addresses from the sticky database to the sdb2004_06_30 file in an XML format:
gss1.example.com# sticky database dump sdb2004_06_30 format xml typesourceRelated Commands
sticky database periodic-backup
sticky database load
To load and merge a sticky database from a disk into the existing sticky database in GSS memory, use the sticky database load command.
sticky database load filename
Syntax Description
filename
Name of the sticky database file to load and merge with the existing sticky database on the GSS device. The file must be in a binary format for loading into the GSS memory (see the sticky database dump command). Use the ftp command in privileged EXEC mode to launch the FTP client and transfer the sticky database file to the GSS from a remote GSS.
Command Modes
Privileged EXEC
Usage Guidelines
The GSS allows you to load and merge sticky database entries from a file into the existing sticky database in the GSS memory. The sticky database merge capability supports the addition of entries from one GSS into another GSS. The file must be in a binary format for loading into the GSS memory.
The GSS validates the database loaded, checks the software version for compatibility, and then adds the sticky database entries in the memory. The GSS does not overwrite duplicate entries in the sticky database.
If you prefer to load and replace all sticky database entries from a GSS instead of merging the entries with the existing sticky database, enter the sticky database delete all command to remove all entries from the sticky database memory before you enter the sticky database load command.
Examples
The following example shows how to load and merge the entries from the GSS3SDB file with the existing entries in the GSS sticky database:
gss1.example.com# sticky database load GSS3SDBRelated Commands
sticky database periodic-backup
To force an immediate backup of the sticky database residing in the GSS memory, use the sticky database periodic-backup command.
sticky database periodic-backup now
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
You may manually initiate a sticky database dump as a database recovery method to ensure that you store the latest sticky database entries before shutting down the GSS.
The GSS sends the sticky database entries to the system dump file as the sticky database file. Upon a reboot or restart, the GSS reads this file and loads the contents to initialize the sticky database at boot time.
Examples
The following example shows how to force an immediate backup of the sticky database residing in the GSS memory:
gss1.example.com# sticky database periodic-backup nowRelated Commands
sticky start
To locally reenable Domain Name System (DNS) sticky on a GSS device after locally disabling the function, use the sticky start command.
sticky start
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
When you restart the GSS, and sticky has been globally enabled at the primary GSSM GUI, the GSS reenables the local DNS sticky function.
Examples
The following example shows how to locally reenable DNS sticky on a GSS device after locally disabling the function:
gss1.example.com# sticky startRelated Commands
sticky stop
To locally disable Domain Name System (DNS) sticky on a GSS device for troubleshooting, use the sticky stop command.
sticky stop
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
You can disable DNS sticky for a single GSS when you need to override the GUI-enabled sticky option. You may need to locally disable sticky on a GSS when you need to troubleshoot or debug the device. The GSS does not store the local-disable setting in its running-config file. When you restart the device, and sticky has been globally enabled, the GSS reenables DNS sticky.
When you enter the sticky stop command, the GSS immediately stops the following operations:
•
•
•
•
The GSS continues to answer DNS requests according to the DNS rules and keepalive status.
When you disable DNS sticky, the GSS remains locally disabled until you perform one of the following actions:
•
•
•
If you are using global DNS sticky in your network, upon reentry of the GSS device into the peer mesh, the GSS attempts to synchronize the database entries with the other peers in the mesh. The GSS queries each peer to find the closest up-to-date sticky database. If no update is available from a peer, the GSS initializes the sticky database entries from the previously saved database on the disk if a file is present and valid. Otherwise, the GSS starts with an empty sticky database.
Examples
The following example shows how to locally disable DNS sticky on a GSS device for troubleshooting:
gss1.example.com# sticky stopRelated Commands
supportpass
For debugging purposes, a Cisco Technical Assistance Center (TAC) representative may ask you to set the GSS support password using supportpass command and then communicate that password to the support engineer. The support engineer can then access the engineering mode using the support password that you provide.
supportpass
Syntax Description
This command has no keywords or arguments.
Command Modes
Privileged EXEC
Usage Guidelines
After you enter the command, the CLI prompts you for the Admin password, which is required to set the support password. The CLI then prompts you for the support password. Enter an alphanumeric string that can contain spaces and special characters. Though the password can be an unlimited number of characters, we recommend that you limit the number of characters to 10 or less.
To delete the support password, enter a null value for the password by pressing Enter without entering a support password.
To change the support password, enter the command again and define the new password.
Examples
The following example shows how set the support password:
gss1.example.com# supportpassAdmin Password:Related Commands
tail
To display the last 10 lines of a file, use the tail command.
tail filename
Syntax Description
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
Use this command to display the end of a file within any GSS file directory. This command may be used to monitor features such as transaction logging or system logging (syslog).
Use the dir, lls, or ls commands to view the files available in the current directory or subdirectory.
Examples
The following example shows how to display the last 10 lines of a file:
gss1.example.com# tail system.logShowing file system.logSep 15 07:11:40 host-css2 rc: Stopping keytable succeededSep 15 07:11:42 host-css2 inet: inetd shutdown succeededSep 15 07:11:45 host-css2 crond: crond shutdown succeededSep 15 07:11:46 host-css2 dd: 1+0 records inSep 15 07:11:46 host-css2 dd: 1+0 records outSep 15 07:11:46 host-css2 random: Saving random seed succeededSep 15 07:11:48 host-css2 kernel: Kernel logging (proc) stopped.Sep 15 07:11:48 host-css2 kernel: Kernel log daemon terminating.Sep 15 07:11:50 host-css2 syslog: klogd shutdown succeededSep 15 07:11:51 host-css2 exiting on signal 15End of file system.log...Related Commands
tcpdump
To output all traffic to and from either the default configured Ethernet interface or a specific Ethernet interface, use the tcpdump command.
tcpdump interface {any | eth0 | eth1} ipproto {any | ipv4 | ipv6 } protocol {any | icmp | tcp | udp} | host {any | ip_or_host} | port {any | port} | network {any | ip-address ip-subnet} | file {filename}
Syntax Description
Command Modes
Privileged EXEC
Usage Guidelines
The tcpdump interface command displays a record of all TCP traffic to and from an Ethernet interface to the screen. The command also displays all traffic to and from interface Ethernet 0, the first network interface on the GSS. If Ethernet 0 is not active, the GSS listens to traffic on Ethernet 1.
If you enter the tcpdump command without any specified options, no filtering is performed. If you want to use the defaults for the remaining tcpdump command parameters, press Enter at each option. No further filtering is performed by the GSS, other than what has been specified. For example, if you enter tcpdump interface eth0 protocol tcp, the GSS performs only IP protocol filtering and does not perform host, port, or network filtering.
This command continuously displays output until you cancel the operation by pressing Ctrl-C.
Examples
The following example shows the tcpdump interface command and its output:
gss1.example.com# tcpdump interface eth0Kernel filter, protocol ALL, datagram packet sockettcpdump: listening on eth019:20:45.678641 > gssm.example.com.ssh > 10.1.2.3.1178: P 2126255246:2126255346(100) ack 4828790 win 32680 (DF) [tos 0x10]19:20:45.680534 > gssm.example.com.49165 > gss.example.com.domain: 9217+ PTR? 187.0.1.2.in-addr.arpa. (43)19:20:45.681090 < gss.example.com.domain > gssm.example.com.49165: 9217 NXDomain* 0/1/0 (111)19:20:45.681421 > gssm.example.com.49165 > gss.example.com.domain: 9218+ PTR? 172.13.89.10.in-addr.arpa. (42)19:20:45.681984 < gss.example.com.domain > gssm.example.com.49165: 9218* 1/2/2 PTR gssm.example.com. (145)19:20:45.682396 > gssm.example.com.49165 > gss.example.com.domain: 9219+ PTR? 172.5.89.10.in-addr.arpa. (41)19:20:45.682950 < gss.example.com.domain > gssm.example.com.49165: 9219* 1/2/2 PTR gss.example.com. (142)19:20:45.683218 > gssm.example.com.ssh > 10.1.2.3.1178: P 100:376(276) ack 1 win 32680 (DF) [tos 0x10]19:20:45.683568 > gssm.example.com.ssh > 10.1.2.3.1178: P 376:748(372) ack 1 win 32680 (DF) [tos 0x10]19:20:45.683902 > gssm.example.com.ssh > 10.1.2.3.1178: P 748:1120(372) ack 1 win 32680 (DF) [tos 0x10]19:20:45.688517 > gssm.example.com.ssh > 10.1.2.3.1178: P 1120:1372(252) ack 1 win 32680 (DF) [tos 0x10]19:20:45.696298 B arp who-has 192.168.1.1 tell 192.168.1.219:20:45.696506 > gssm.example.com.49165 > gss.example.com.domain: 9220+ PTR? 10.128.1.2.in-addr.arpa. (44)19:20:45.697003 < gss.example.com.domain > gssm.example.com.49165: 9220 NXDomain 0/1/0 (109)19:20:45.697173 > gssm.example.com.49165 > gss.example.com.domain: 9221+ PTR? 22.128.168.192.in-addr.arpa. (45)19:20:45.697471 < 10.1.2.3.1178 > gssm.example.com.ssh: . 1:1(0) ack 0 win 8600 (DF)19:20:45.697649 < gss.example.com.domain > gssm.example.com.49165: 9221 NXDomain 0/1/0 (110)19:20:45.697922 > gssm.example.com.ssh > 10.1.2.3.1178: P 1372:1696(324) ack 1 win 32680 (DF) [tos 0x10]The following example shows the tcpdump interface command for capturingIPv6 packets:
gss1.example.com# tcpdump interface eth1 ipproto ipv6 protocol anytcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 512 bytes23:30:28.979140 2001:55::11:2 > 2001:55::6:113: [icmp6 sum ok] icmp6: echo request seq 0 (len 64, hlim 64)23:30:28.979671 2001:55::6:113 > 2001:55::11:2: [icmp6 sum ok] icmp6: echo reply seq 0 (len 64, hlim 64)23:30:29.998849 2001:55::11:2 > 2001:55::6:113: [icmp6 sum ok] icmp6: echo request seq 1 (len 64, hlim 64)23:30:29.998873 2001:55::6:113 > 2001:55::11:2: [icmp6 sum ok] icmp6: echo reply seq 1 (len 64, hlim 64)23:30:31.019160 2001:55::11:2 > 2001:55::6:113: [icmp6 sum ok] icmp6: echo request seq 2 (len 64, hlim 64)23:30:31.019172 2001:55::6:113 > 2001:55::11:2: [icmp6 sum ok] icmp6: echo reply seq 2 (len 64, hlim 64)6 packets captured6 packets received by filter0 packets dropped by kernelgss1.example.com#telnet
To enable Telnet on the selected GSS device or establish a Telnet connection, use the telnet command. To disable Telnet on your GSS device, use the no form of this command.
telnet {enable | {ip_or_host} | [port]
no telnet enable
Syntax Description
Command Modes
User EXEC, privileged EXEC, and global configuration.
Usage Guidelines
Use the telnet enable command in global configuration mode to enable Telnet on the selected device. Use the telnet command in EXEC or global configuration mode to establish a Telnet connection. SSH and Telnet can run concurrently.
Examples
The following example shows how to enable Telnet on the selected GSS device or establish a Telnet connection:
gss1.example.com(config)#gss1.example.com(config)#telnet 2001:55::11:2Trying 2001:55::11:2...Connected to 2001:55::11:2.Escape character is '^]'.Red Hat Enterprise Linux Server release 5.4 (Tikanga)Kernel 2.6.18-164.el5 on an i686login:gss1.example.com(config)#Related Commands
traceroute
To display the route a packet took to reach the host destination, use the traceroute command.
traceroute {ip_or_host}
Syntax Description
Command Modes
Privileged EXEC
Examples
The following example shows how to display the route a packet took to reach the host destination:
gss1.example.com> traceroute www.example.comtraceroute to 55.11.1.2 (55.11.1.2), 30 hops max, 38 byte packets1 55.11.1.2 (55.11.1.2) 0.656 ms 0.375 ms 0.236 msgss1.example(config)#gss1.example#(config)gss1.example#traceroute 2001:55::11:2traceroute to 2001:55::11:2 (2001:55::11:2) from fd93:155b:3328:ca32:223:8bff:fe03:6f59, 30 hops max, 16 byte packets1 2001:55::11:2 (2001:55::11:2) 1.672 ms 0.405 ms 0.253 msgss1.example(config)#type
To display the contents of a file within any GSS file directory, use the type command.
type filename
Syntax Description
Command Modes
User EXEC and privileged EXEC
Usage Guidelines
Use this command to display the contents of a file within any GSS file directory. This command may be used to monitor features such as transaction logging or system logging (syslog).
Use the dir, lls, or ls commands to view the files available in the current directory or subdirectory.
Examples
The following example shows how to display the contents of a file within any GSS file directory:
gss1.example.com# type /audit.logatcr1.example.com>type audit.log# Start logging at Thu July 1 23:59:30 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===# Start logging at Fri July 2 00:01:25 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===# Start logging at Sat July 3 14:42:40 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===...Related Commands
write
To save the current running configuration of the GSS as its startup configuration, use the write command.
write memory
Syntax Description
memory
Saves recent configuration changes to the GSS that are stored in the memory as the startup configuration.
Command Modes
Privileged EXEC and global configuration
Usage Guidelines
Use the write command to save changes to the running configuration of the GSS device as the new startup configuration for the device.
Examples
The following example shows how to save the current running configuration of the GSS as its startup configuration:
gss1.example.com# write memoryRelated Commands
