Cisco Network Module Enhanced Application Performance Assurance CLI Command Reference, Rel 2.0.0
CLI Command Reference

Table Of Contents

CLI Command Reference

?

aaa accounting commands

aaa authentication attempts

aaa authentication enable default

aaa authentication login default

application slot replace force completion

attack-detector default

attack-detector

attack-detector <number>

attack-detector TCP-port-list|UDP-port-list

attack-filter

attack-filter dont-filter | force-filter

attack-filter user-notification ports

bandwidth

calendar set

cd

clear arp-cache

clear interface linecard counters

clear interface linecard traffic-counter

clear interface linecard user

clear interface linecard user db counters

clear logger

clear management-agent notifications counters

clear rdr-formatter

clock read-calendar

clock set

clock summertime

clock timezone

clock update-calendar

configure

copy

copy ftp://

copy-passive

copy running-config startup-config

copy source-file ftp://

copy source-file startup-config

copy startup-config destination-file

default user template all

delete

dir

disable

do

enable

enable password

erase startup-config-all

exit

failure-recovery operation-mode

help

history

history size

hostname

interface fastethernet

interface linecard

ip advertising

ip domain-lookup

ip domain-name

ip filter fragment

ip filter monitor

ip ftp password

ip ftp username

ip host

ip name-server

ip radius-client retry limit

ip rpc-adapter

ip rpc-adapter port

ip rpc-adaptor security-level

line vty

link mode

logger add-user-message

logger device

logger device user-file-log max-file-size

logger get support-file

logger get user-log file-name

logout

management-agent sce-api logging

management-agent sce-api timeout

management-agent system

mkdir

more

more user-log

no user

no user anonymous-group

ping

pqi install file

pqi rollback file

pqi uninstall file

pqi upgrade file

pwd

queue

rdr-formatter category number

rdr-formatter destination

rdr-formatter forwarding-mode

rdr-formatter history-size

rdr-formatter rdr-mapping

reload

rename

rmdir

script capture

script print

script run

script stop

service password-encryption

service rdr-formatter

service telnetd

setup

show calendar

show clock

show failure-recovery operation-mode

show hostname

show hosts

show interface fastethernet

show interface linecard

show interface linecard application

show interface linecard attack-detector

show interface linecard attack-filter

show interface linecard counters

show interface linecard duplicate-packets-mode

show interface linecard flow-open-mode

show interface linecard link mode

show interface linecard link-to-port-mappings

show interface linecard shutdown

show interface linecard silent

show interface linecard tos-marking

show interface linecard traffic-counter

show interface linecard traffic-rule

show interface linecard user

show interface linecard user aging

show interface linecard user anonymous

show interface linecard user anonymous-group

show interface linecard user db counters

show interface linecard user mapping

show interface linecard user name

show interface linecard user properties

show interface linecard user templates

show inventory

show ip advertising

show ip filter

show ip radius-client

show ip rpc-adapter

show line vty

show log

show logger device

show pqi file

show pqi last-installed

show rdr-formatter

show rdr-formatter connection-status

show rdr-formatter counters

show rdr-formatter destination

show rdr-formatter enabled

show rdr-formatter forwarding-mode

show rdr-formatter history-size

show rdr-formatter rdr-mapping

show rdr-formatter statistics

show running-config

show snmp

show snmp community

show snmp contact

show snmp enabled

show snmp host

show snmp location

show snmp mib

show snmp traps

show sntp

show startup-config

show system operation-status

show system-uptime

show tacacs

show telnet sessions

show telnet status

show timezone

show users

show version

show version all

show version software

silent

snmp-server

snmp-server community

snmp-server contact

snmp-server enable traps

snmp-server host

snmp-server location

sntp broadcast client

sntp server

sntp update-interval

tacacs-server host

tacacs-server key

tacacs-server timeout

timeout

tracert

traffic-counter

traffic-rule

unzip

user aging

user anonymous-group export csv-file

user anonymous-group import csv-file

user export csv-file

user import csv-file

user name property

user template export csv-file

user template import csv-file

username


CLI Command Reference


This chapter contains all the CLI commands available on the NME-APA module.

Each command description is broken down into the following sub-sections:

Description

Description of what the command does.

Command Syntax

The general format of the command.

Syntax Description

Description of parameters and options for the command.

Default

If relevant, the default setting for the command.

Mode

The mode (command line) from which the command can be invoked.

Usage guidelines

Information about when to invoke the command and additional details.

Authorization

The level of user authorization required for using the command.

Example

An illustration of how the command looks when invoked. Because the interface is straightforward, some of the examples are obvious, but they are included for clarity.

Related Commands

Other commands that might be used in conjunction with the command.


Syntax and Conventions

The CLI commands are written in the following format: command required-parameter [optional-parameter]

no is an optional parameter that may appear before the command name.

When typing commands, you may enclose parameters in double-quote marks, and you must do so when there is a space within a parameter name.

?

Lists all of the commands available for the current command mode. You can also use the ? command to get specific information on a keyword or parameter. To obtain a list of commands that begin with a particular character string, enter the abbreviated command entry immediately followed by a question mark (?). This form of help is called partial help, because it lists only the keywords or arguments that begin with the abbreviation you entered.

?

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings

Command Modes

All

Usage Guidelines

To list a command's associated keywords or arguments, enter a question mark (?) in place of a keyword or parameter on the command line. This form of help is called argument help because it lists the keywords or arguments that apply based on the command, keywords, and arguments you have already entered.

Authorization: User

Examples

The following example shows ways of requesting help using the ? wildcard.

NME-APA(config)#ip ? 
advertising 				Enable IP advertising or set parameters
domain-lookup 				Enables the IP DNS-based host name-to-address translation
domain-name 				Define a default domain name
host 				Add a host to the host table
name-server 				Specify the address of one or more name servers to use for name and address 
resolution
radius-client 				RADIUS-Client settings
rpc-adapter 				Enable PRPC adapter or set attributes 
NME-APA(config)#ip d? 
default-gateway domain-lookup domain-name 
NME-APA(config)#ip de? 
default-gateway 
NME-APA(config)#ip de

aaa accounting commands

Use the no form of the command to disable TACACS+ accounting.

aaa accounting commands level default stop-start group tacacs+

no aaa accounting commands level default

Syntax Description

level

The privilege level for which to enable the TACACS+ accounting

0: User

5: Viewer

10: Admin

15: Root


Defaults

By default, TACACS+ accounting is disabled.

Command Modes

Global Configuration

Usage Guidelines

If TACACS+ accounting is enabled, the NME-APA module sends an accounting message to the TACACS+ server after every command execution. The accounting message is logged in the TACACS+ server for the use of the network administrator.

The start-stop keyword (required) indicates that the accounting message is sent at the beginning and the end (if the command was successfully executed) of the execution of a CLI command.

Authorization: admin

Examples

The following example enables TACACS+ accounting for the admin privilege level (10).

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# aaa accounting commands 10 default stop-start group tacacs+  
NME-APA(config)#

Related Commands

Command
Description

aaa authentication attempts

Sets the maximum number of login attempts that will be permitted before a Telnet session is terminated.

aaa authentication enable default

Specifies which privilege level authentication methods are to be used, and in what order of preference.

aaa authentication login default

Specifies which login authentication methods are to be used, and in what order of preference.

tacacs-server host

Defines a new TACACS+ server host that is available to the NME-APA module TACACS+ client.

tacacs-server key

Defines the global default encryption key for the TACACS+ server hosts.


aaa authentication attempts

aaa authentication attempts login number-of-attempts

Syntax Description

number-of-attempts

the maximum number of login attempts that will be permitted before the telnet session is terminated


Defaults

Default number-of-attempts = 3

Command Modes

Global Configuration

Usage Guidelines

The maximum number of login attempts is relevant only for Telnet sessions. From the local console, the number of re-tries is unlimited.

Authorization: admin

Examples

The following example shows how to set the maximum number of logon attempts to five.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# aaa authentication attempts login 5  
NME-APA(config)#

Related Commands

Command
Description

aaa authentication accounting commands

Enables TACACS+ accounting.

aaa authentication enable default

Specifies which privilege level authentication methods are to be used, and in what order of preference.

aaa authentication login default

Specifies which login authentication methods are to be used, and in what order of preference.


aaa authentication enable default

Specifies which privilege level authentication methods are to be used, and in what order of preference. Use the no form of the command to delete the privilege level authentication methods list.

aaa authentication enable default method1 [method2...]

no aaa authentication enable default

Syntax Description

method

the privilege level authentication methods to be used. You may specify up to four different methods, in the order in which they are to be used.


Defaults

Default privilege level authentication method = enable only

Command Modes

Global Configuration

Usage Guidelines

Use this command to configure "backup" privilege level authentication methods to be used in the event of failure of the primary privilege level authentication method. The following method options are available:

group tacacs+ : Use TACACS+ authentication.

local : Use the local username database for authentication.

enable (default): Use the "enable" password for authentication

none : Use no authentication.

If the privilege level authentication methods list is deleted, the default privilege level authentication method only ( enable password) will be used. TACACS+ authentication will not be used.

Authorization: admin

Examples

This example shows how to configure privilege level authentication methods.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# aaa authentication enable default group tacacs+ enable none  
NME-APA(config)#

Related Commands

Command
Description

aaa authentication login default

 

aaa authentication accounting commands

 

aaa authentication attempts

 

show tacacs

 

aaa authentication login default

Specifies which login authentication methods are to be used, and in what order of preference. Use the no form of the command to delete the login authentication methods list.

aaa authentication login default method1 [method2...]

no aaa authentication login default

Syntax Description

method

the login authentication methods to be used. You may specify up to four different methods, in the order in which they are to be used.


Defaults

Default login authentication method = enable only

Command Modes

Global Configuration

Usage Guidelines

Use this command to configure "backup" login authentication methods to be used in the event of failure of the primary login authentication method.

The following method options are available:

group tacacs+ : Use TACACS+ authentication.

local : Use the local username database for authentication.

enable (default): Use the "enable" password for authentication

none : Use no authentication.

If the login authentication methods list is deleted, the default login authentication method only (enable password) will be used. TACACS+ authentication will not be used.

Authorization: admin

Examples

This example shows how to configure login authentication methods.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# aaa authentication login default group tacacs+ enable none 
NME-APA(config)#

Related Commands

Command
Description

aaa authentication enable default

 

aaa authentication accounting commands

 

aaa authentication attempts

 

show tacacs

 

application slot replace force completion

Forces the current application replace process to complete and immediately start finalization (killing all old flows).

application slot slot-number replace force completion

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example illustrates how to force the application replace operation to complete immediately.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#application slot 0 replace force completion  
NME-APA#

attack-detector default

Defines default thresholds and attack handling action. If a specific attack detector is defined for a particular situation (protocol/attack direction/side), it will override these defaults. Use the no version of this command to delete the user-defined defaults. The system defaults will then be used.

attack-detector default protocol protocol attack-direction attack-direction side side [action action ] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows] [suspected-flows-ratio suspected-flows-ratio] [notify-user | dont-notify-user] [alarm noalarm]

no attack-detector default protocol protocol attack-direction attack-direction side side [action action] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows] [suspected-flows-ratio suspected-flows-ratio]

Syntax Description

protocol

TCP, UDP, IMCP, other

attack-direction

attack-source, attack-destination, both

side

user, network, both

action

report, block (block is not currently supported)

open-flows

Threshold for concurrently open flows (new open flows per second).

ddos-suspected-flows

Threshold for DDoS-suspected flows (new suspected flows per second).

suspected-flows-ratio

Threshold for ratio of suspected flow rate to open flow rate.


Defaults

The default values for the default attack detector are:

Action = Report

Thresholds — Varies according to the attack type

User notification = Disabled

Sending an SNMP trap = Disabled

Command Modes

LineCard Interface Configuration

Usage Guidelines

The following arguments must always be specified:

protocol

attack-direction

side

The following arguments are optional:

action

open-flows

ddos-suspected-flows

suspected-flows-ratio

Use the optional keywords as follows:

Use the notify-user keyword to enable user notification.

Use the dont-notify-user keyword to disable user notification.

Use the alarm keyword to enable sending an SNMP trap.

Use the no-alarm keyword to disable sending an SNMP trap.

Use the attack-detector <number> command to configure a specific attack detector.

Authorization: admin

Examples

The following examples illustrate the use of the attack-detector default command:

EXAMPLE 1

The following example configures a default attack detector for TCP flows from the attack source.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-detector default protocol TCP attack-direction attack-source 
side both action report open-flows 500 ddos-suspected-flows 75 suspected-flows-ratio 50  
NME-APA(config if)#

EXAMPLE 2

The following example enables user notification for the specified default attack detector.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-detector default protocol TCP attack-direction attack-source 
side both notify-user  
NME-APA(config if)#

Related Commands

Command
Description

attack-detector <number>

 

attack-filter user-notification ports

 

show interface LineCard attack-detector

 

attack-detector

Enables the specified attack detector and assigns an access control list (ACL) to it.

attack-detector number

Syntax Description

number

The attack detector number.


Defaults

This command has no default settings.

Command Modes

LineCard Interface Configuration

Usage Guidelines

Use the following commands to define the attack detector:

attack-detector <number>

Authorization: admin

Examples

The following example enables attack detector number "2".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-detector 2 
NME-APA(config if)#

Related Commands

Command
Description

attack-detector <number>

 

show interface LineCard attack-detector

 

attack-detector <number>

Configures a specific attack detector for a particular attack type (protocol/attack direction/side) with the assigned number. Use the default form of this command to configure the default attack detector for the specified attack type. Use the no form of this command to delete the specified attack detector.

attack-detector number protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all) attack-direction attack-direction side side [action action ] [open-flows open-flows ] [ddos-suspected-flows ddos-suspected-flows ] [suspected-flows-ratio suspected-flows-ratio ] [notify-user|dont-notify-user] [alarm|no-alarm]

no attack-detector number

attack-detector default protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all) attack-direction attack-direction side side [action action ] [open-flows open-flows ] [ddos-suspected-flows ddos-suspected-flows ] [suspected-flows-ratio suspected-flows-ratio ] [notify-user|dont-notify-user] [alarm|no-alarm]

no attack-detector default protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all) attack-direction attack-direction side side

default attack-detector {all |all-numbered}

default attack-detector number protocol (((all | IMCP | other | TCP | UDP) [dest-port destination port attack-direction attack-direction side side

Syntax Description

number

Assigned number for attack-detector

protocol

TCP, UDP, IMCP, other

destination port

{TCP and UDP protocols only): Defines whether the default attack detector applies to specific (port-based) or not specific (port-less) detections.

specific, not-specific, both

attack-direction

single-side-destination, single-side-both, dual-sided, all

side

user, network, both

action

report, block

open-flows-rate

Threshold for rate of open flows (new open flows per second).

suspected-flows-rate

Threshold for for rate of suspected DDoS flows (new suspected flows per second)

ssuspected-flows-ratio

Threshold for ratio of suspected flow rate to open flow rate.


Defaults

The default values for the default attack detector are:

Action = Report

Thresholds = Varies according to the attack type

User notification = Disabled

Sending an SNMP trap = Disabled

Command Modes

LineCard Interface Configuration

Usage Guidelines

If a specific attack detector is defined for a particular attack type, it will override the configured default attack detector.

The following arguments must always be specified:

protocol

attack-direction

side

The following arguments are optional:

action

open-flows

ddos-suspected-flows

suspected-flows-ratio

Use the appropriate keyword to enable or disable user notification by default:

notify-user : Enable user notification.

dont-notify-user: Disable user notification.

Use the appropriate keyword to enable or disable sending an SNMP trap by default:

alarm : Enable sending an SNMP trap.

no-alarm : Disable sending an SNMP trap.

If the selected protocol is either TCP or UDP, specify whether the destination port is specific, not specific, or both. If the destination port or ports are specific, the specific destination ports are configured using the attack-detector command.

Use the attack-detector command to enable a configured attack detector.

Use the attack-detector default command to configure a default attack detector.

Authorization: admin

Examples

The following examples illustrate the use of the attack-detector <number> command:

EXAMPLE 1

The following example configures the attack detector number "2".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)# attack-detector 2 protocol UDP dest-port not-specific attack-direction 
single-side-destination side both action block open-flows-rate 500 suspected-flows-rate 
500 suspected-flows-ratio 50 notify-user alarm  
NME-APA(config if)#

EXAMPLE 2

The following example deletes attack detector number "2".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#no attack-detector 2  
NME-APA(config if)#

EXAMPLE 3

The following example disables user notification for attack detector number "2".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-detector 2 protocol UDP dest-port not-specific attack-direction 
single-side-destination side both dont-notify-user  
NME-APA(config if)#

Related Commands

Command
Description

attack-detector

 

attack-detector TCP-port-list|UDP-port-list

 

attack-filter user-notification ports

 

attack-detector default

 

show interface LineCard attack-detector

 

attack-detector TCP-port-list|UDP-port-list

Defines the list of destination ports for specific port detections for TCP or UDP protocols.

attack-detector <number> (tcp-port-list|udp-port-list) (all | (<port1> [<port2>...]) )

Syntax Description

number

Number of the attack detector for which this list of specific ports is relevant

port1, port2

List of up to 15 specific port numbers.


Defaults

This command has no default settings.

Command Modes

LineCard Interface Configuration

Usage Guidelines

TCP and UDP protocols may be configured for specified ports only (port-based). Use this command to configure the list of specified destination ports per protocol.

Up to 15 different TCP port numbers and 15 different UDP port numbers can be specified.

Configuring a TCP/UDP port list for a given attack detector affects only attack types that have the same protocol (TCP/UDP) and are port-based (i.e. detect a specific destination port). Settings for other attack types are not affected by the configured port list(s).

Specify either TCP-port-list or UDP-port-list.

Use the all keyword to include all ports in the list.

Authorization: admin

Examples

This example shows how to configure the destination port list for the TCP protocol for attack detector #10.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-detector 10 TCP-port-list 100 101 102 103  
NME-APA(config if)#

Related Commands

Command
Description

attack-detector <number>

 

attack-filter

 

attack-filter

Enables specific attack detection for a specified protocol and attack direction. Use the no form of the command to disable attack detection.

attack-filter protocol [protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other)] [attack-direction attack-direction]

no attack-filter protocol [protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other) [attack-direction attack-direction]

Syntax Description

protocol

TCP, UDP, IMCP, other

dest-port

{TCP and UDP protocols only): Defines whether the default attack detector applies to specific (port-based) or not specific (port-less) detections.

specific, not-specific, both

attack-direction

single-side-source, single-side-destination, single-side-both, dual-sided, all

side

user, network, both


Defaults

By default, attack-filter is enabled.

Default protocols = all protocols (no protocol specified)

Default attack direction = all directions

Default destination port = both port-based and port-less

Command Modes

LineCard Interface Configuration

Usage Guidelines

Specific attack filtering is configured in two steps:

Enabling specific IP filtering for the particular attack type (using this command).

Configuring an attack detector for the relevant attack type (using the attack-detector <number> command). Each attack detector specifies the thresholds that define an attack and the action to be taken when an attack is detected.

In addition, the user can manually override the configured attack detectors to either force or prevent attack filtering in a particular situation (using the attack-filter dont-filter | force-filter command).

By default, specific-IP detection is enabled for all attack types. You can configure specific IP detection to be enabled or disabled for a specific, defined situation only, depending on the following options:

For a selected protocol only.

For TCP and UDP protocols, for only port-based or only port-less detections.

For a selected attack direction, either for all protocols or for a selected protocol.

If the selected protocol is either TCP or UDP, specify whether the destination port is specific (port-based), not specific (port-less), or both. If the destination port or ports are specific, the specific destination ports are configured using the attack-detector TCP-port-list|UDP-port-list command.

Authorization: admin

Examples

The following examples illustrate the use of this command.

EXAMPLE 1

The following example shows how to enable specific, dual-sided attack detection for TCP protocol only.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#attack-filter protocol TCP dest-port specific attack-direction 
dual-sided  
NME-APA(config if)#

EXAMPLE 2

The following example shows how to enable single-sided attack detection for ICMP protocol only.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)# attack-filter protocol ICMP attack-direction single-side-source  
NME-APA(config if)#

EXAMPLE 3

The following example disables attack detection for all non TCP, UDP, or ICMP protocols.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface LineCard 0 
NME-APA(config if)#no attack-filter protocol other attack-direction all  
NME-APA(config if)#

Related Commands

Command
Description

attack-detector TCP-port-list|UDP-port-list

 

attack-detector <number>

 

show interface LineCard attack-filter

 

attack-filter dont-filter | force-filter

This command prevents attack filtering for a specified IP address or protocol. If filtering is already in process, it is stopped. When attack filtering is stopped, it remains stopped until explicitly restored by another CLI command (either specific or general). Use theno form of this command to restore attack filtering. The force-filter keyword forces attack filtering for a specified IP address or protocol. When attack filtering is forced, it continues until explicitly stopped by another CLI command (either specific or general). Use the no form of this command to stop attack filtering.

attack-filter force-filter action action protocol ((TCP|UDP) [dest-port (port-number | non-specific)] | ICMP | other) attack-direction (((single-side-source | single-side-destination | single-side-both) ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side

attack-filter dont-filter protocol ((TCP|UDP) [dest-port (port-number | non-specific)] | ICMP | other) attack-direction (((single-side-source | single-side-destination | single-side-both) ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side

no attack-filter dont-filter protocol ((TCP|UDP) [dest-port (port-number | non-specific) ] |ICMP | other) attack-direction (((single-side-source | single-side-destination | single-side-both) ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side

no attack-filter force-filter action action protocol ((TCP|UDP) [dest-port (port-number | non-specific)] | ICMP | other) attack-direction (((single-side-source | single-side-destination | single-side-both) ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side

no attack-filter force-filter all

no attack-filter dont-filter all

Syntax Description

action

Defines whether to block the attack or to report it.

block or report

protocol

TCP, UDP, ICMP, or Other

dest-port

(TCP and UDP protocols only): Defines whether specific IP detection is forced or prevented for the specified port number or is port-less (non-specific).

port-number, not-specific

attack-direction

Defines whether specific IP detection is forced or prevented for single-sided or dual-sided attacks.

Single-sided: specify the direction (single-side-source, single-side-destination, single-side-both) and the IP address.

Dual-sided: Specify 'dual-sided' and both the source and the destination IP addresses.

ip-address

IP address from which traffic will not be filtered.

For single-sided filtering, only one IP address is specified.

For dual-sided filtering, both a source IP address and a destination IP address are specified.

side

user, network, both


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

After configuring the attack detectors, the NME-APA module automatically detects attacks and handles them according to the configuration. However, there are scenarios in which a manual intervention is desired, either for debug purposes, or because it is not trivial to reconfigure the NME-APA attack-detectors properly.

The user can use the CLI attack filtering commands to do the following:

Prevent or stop filtering of an attack related to a protocol, direction, and specified IP address

Force filtering of an attack related to a protocol, direction, and specified IP address

Attack filtering can be prevented for a specified IP address or protocol by executing a dont-filter CLI command. If filtering is already in process, it is stopped. When attack filtering has been stopped, it remains stopped until explicitly restored by another CLI command (either force-filter or no dont-filter).

Use the all keyword to restore or stop all filtering.

Authorization: admin

Examples

The following are examples of the attack-filter command:

EXAMPLE 1

The following example prevents attack filtering for the specified conditions.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#attack-filter dont-filter protocol other attack-direction 
single-side-source ip 10.10.10.10 side both 
NME-APA(config if)#

EXAMPLE 2:

The following example restores all attack filtering.

NME-APA>enable 10 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#no attack-filter dont-filter all  
NME-APA(config if)# 
Password:<cisco>

EXAMPLE 3:

The following example forces attack filtering.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#attack-filter force-filter action block protocol TCP dest-port 
not-specific attack-direction dual-sided source-ip 10.10.10.10 destination-ip 20.20.20.20 
side both  
NME-APA(config if)#

EXAMPLE 4:

The following example stops all forced attack filtering.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#no attack-filter force-filter all  
NME-APA#

Related Commands

Command
Description

attack-filter

 

attack-filter user-notification ports

Specifies a port as user notification port. TCP traffic from the user side to this port will never be blocked by the attack filter, leaving it always available for user notification. Use the no form of this command to remove the port from the user notification port list.

attack-filter user-notification ports port

no attack-filter user-notification ports port

Syntax Description

port

Port number. One port can be specified as the user notification port.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Use this command to configure the port to be used for user notification as configured using the attack-filter and attack-detector <number> commands.

Authorization: admin

Examples

The following example specifies port 100 as the user notification port.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#attack-filter user-notification ports 100  
NME-APA(config if)#

Related Commands

Command
Description

attack-detector default

 

attack-detector <number>

 

show interface linecard attack-filter

 

bandwidth

Sets Ethernet shaping for the FastEthernet line interfaces.

bandwidth bandwidth burst-size burstsize

Syntax Description

bandwidth

Bandwidth measured in kbps.

burstsize

Burst size in bytes.


Defaults

bandwidth = 100000K (100 Mbps)

burst-size = 5000 (5K bytes)

Command Modes

FastEthernet Interface Configuration

Usage Guidelines

This command is valid for a specified FastEthernet line interface only. It must be executed explicitly for each interface.

Authorization: admin

Examples

This example sets bandwidth and burst size for a Fast Ethernet line interface (0/1)

NME-APA config 
NME-APA(config)#interface FastEthernet 0/1 
NME-APA(config-if)#bandwidth 100000 burstsize 5000  
NME-APA(config-if)#

Related Commands

Command
Description

interface fastethernet

 

queue

 

calendar set

Sets the system calendar. The calendar is a system clock that continues functioning even when the system shuts down.

calendar set hh:mm:ss day month year

Syntax Description

hh:mm:ss

Current local time in hours in 24-hour format, minutes and seconds (HH:MM:SS).

day

Current day (date) in the month.

month

Current month (by three-letter abbreviated name).

year

Current year using a 4-digit number.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Always coordinate between the calendar and clock by using the clock read-calendar command after setting the calendar.

Authorization: admin

Examples

The following example sets the calendar to 20 minutes past 10 AM, January 13, 2006, synchronizes the real-time clock to the calendar time, and displays the result.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#calendar set 10:20:00 13 jan 2006  
NME-APA#clock read-calendar  
NME-APA#show calendar  
10:20:03 UTC THU January 13 2006 
NME-APA#show clock  
10:20:05 UTC THU January 13 2006 
NME-APA#

Related Commands

Command
Description

clock read-calendar

 

clock set

 

clock update-calendar

 

clock timezone

 

clock summertime

 

show calendar

 

show clock

 

cd

Changes the path of the current working directory.

cd new-path

Syntax Description

new-path

The path name of the new directory. This can be either a full path or a relative path.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The new path should already have been created in the local flash file system.

Authorization: admin

Examples

The following example shows the current directory (root directory) and then changes the directory to the log directory located under the root directory.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#pwd  
tffs0 
NME-APA#cd log  
NME-APA#pwd  
tffs0:log 
NME-APA#

Related Commands

Command
Description

pwd

 

mkdir

 

clear arp-cache

Deletes all dynamic entries from the ARP cache. The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses to physical addresses. Dynamic entries are automatically added to and deleted from the cache during normal use. Entries that are not reused age and expire within a short period of time. Entries that are reused have a longer cache life.

clear arp-cache

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears the ARP cache.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear arp-cache  
NME-APA#

clear interface linecard counters

Clears the linecard Interface counters.

clear interface linecard slot-number counters

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears the Line-Card 0 counters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear interface linecard 0 counters  
NME-APA#

Related Commands

Command
Description

show interface linecard counters

 

clear interface linecard traffic-counter

Clears the specified traffic counter.

clear interface linecard slot-number traffic-counter (name | all)

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.

name

Name of the traffic counter to be cleared.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use the all keyword to clear all traffic counters.

Authorization: admin

Examples

The following example clears the traffic counter name counter1.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear interface linecard 0 traffic-counter name counter1  
NME-APA#

Related Commands

Command
Description

traffic-counter

 

show interface linecard traffic-counter

 

clear interface linecard user

Clears all anonymous users in the system.

clear interface linecard slot-number user anonymous all

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears all anonymous users.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear interface linecard 0 user anonymous all  
NME-APA#

Related Commands

Command
Description

no user

 

no user anonymous-group

 

show interface linecard user anonymous

 

clear interface linecard user db counters

Clears the "total" and "maximum" users database counters.

clear interface linecard slot-number user db counters

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears all anonymous users.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear interface linecard 0 user db counters  
NME-APA#

Related Commands

Command
Description

show interface linecard user db counters

 

clear logger

Clears NME-APA module logger (user log files). This erases the information stored in the user log files.

clear logger [device user-file-log|line-attack-file-log ] [counters|nv-counters]

Syntax Description

device

The device name to be cleared, either user-file-log or line-attack-file-log


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The user log files have a size limit, with new entries overwriting the oldest entries. Therefore, there is no need to regularly clear the log files. Use this operation when you are certain that the information contained in the logs is irrelevant and might be confusing (for example, when re-installing the system at a new site, whose administrators should not be confused with old information).

Use the counters keyword to clear the counters of the NME-APA module logger (user log files). These counters keep track of the number of info, warning, error and fatal messages.

Use the nv-counters keyword to clear the non-volatile counters for the entire log or only the specified NME-APA module. These counters are not cleared during bootup, and must be cleared explicitly by using this command.

Authorization: admin

Examples

EXAMPLE 1:

The following example clears the NME-APA module user log file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear logger device User-File-Log  
Are you sure?Y  
NME-APA#

EXAMPLE 2:

The following example clears the NME-APA module user log file counters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear logger device User-File-Log counters  
Are you sure?Y 
NME-APA#

EXAMPLE 3:

The following example clears the user log file non-volatile counters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear logger device user-file-log nv-counters  
Are you sure?Y 
NME-APA#

Related Commands

Command
Description

show logger device

 

show log

 

clear management-agent notifications counters

Clears the counters for the number of notifications sent to the management agent

clear management-agent notifications counters

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears the management agent notifications counters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear management-agent notifications counters  
NME-APA#

Related Commands

Command
Description

clear rdr-formatter

Clears the RDR formatter counters and statistics.

clear rdr-formatter

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example clears the RDR-formatter counters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clear rdr-formatter  
NME-APA#

Related Commands

Command
Description

show rdr-formatter counters

 

clock read-calendar

Synchronizes clocks by setting the system clock from the calendar.

clock read-calendar

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example updates the system clock from the calendar.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clock read-calendar  
NME-APA#

Related Commands

Command
Description

calendar set

 

clock update-calendar

 

show calendar

 

show clock

 

clock set

Manually sets the system clock.

clock set hh:mm:ss day month year

Syntax Description

hh:mm:ss

Current local time in hours in 24-hour format, minutes and seconds (HH:MM:SS).

day

Current day (date) in the month.

month

Current month (by three-letter abbreviated name).

year

Current year using a 4-digit number.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Always coordinate between the calendar and clock by using the clock update-calendar command after setting the clock.

Authorization: admin

Examples

The following example sets the clock to 20 minutes past 10 PM, January 13, 2006.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clock set 22:20:00 13 jan 2006  
NME-APA#clock update-calendar  
NME-APA#show clock  
22:21:10 UTC THU January 13 2006 
NME-APA#show calendar  
22:21:18 UTC THU January 13 2006 
NME-APA#

Related Commands

Command
Description

clock update-calendar

 

show calendar

 

show clock

 

clock summertime

Configures the NME-APA module to automatically switch to daylight savings time on a specified date, and also to switch back to standard time. In addition, the time zone code can be configured to vary with daylight savings time if required. (For instance, in the eastern United States, standard time is designated EST, and daylight savings time is designated EDT). Use the no form of this command to cancel the daylight savings time transitions configuration.

clock summertime

no clock summertime

Syntax Description

zone

The code for the time zone for daylight savings.

week1/week2

The week of the month on which daylight savings begins (week1) and ends (week2). A day of the week, such as Monday, must also be specified. The week/day of the week is defined for a recurring configuration only.

Default: Not used

day1/day2

The day of the week on which daylight savings begins (day1) and ends (day2).

For recurrent configuration: day is a day of the week, such as Sunday.

Use the keywords first/last to specify the occurrence of a day of the week in a specified month. For example: last Sunday March.

For non-recurrent configuration: day is a day in the month, such as 28.

Default: day1 = second Sunday, day2 = first Sunday

month1/month2

The month in which daylight savings begins (month1) and ends (ends2).

Default: month1 = March, month2 = November

year1/year2

The year in which daylight savings begins (month1) and ends (ends2).

For non -recurring configuration only.

Default = not used

time1/time2

The time of day (24-hour clock) at which daylight savings begins (time1) and ends (time2).

Required for all configurations. Default: time1/time2 = 2:00

offset

The difference in minutes between standard time and daylight savings time.

Default = 60


Defaults

recurring, offset = 60 minutes

By default, the following recurrent time changes are configured:

Daylight savings time begins: 2:00 (AM) on the second Sunday of March.

Daylight savings time ends: 2:00 (AM) on the first Sunday of November.

Command Modes

Global Configuration

Usage Guidelines

The format of the command varies somewhat, depending on how the dates for the beginning and end of daylight savings time are determined for the particular location:

recurring: If daylight savings time always begins and ends on the same day every year, (as in the United States):

Use the clock summer-time recurring command.

The year parameter is not used.

not recurring: If the start and end of daylight savings time is different every year, (as in Israel):

Use the clock summer-time command.

The year parameter must be specified.

General guidelines for configuring daylight savings time transitions:

Specify the time zone code for daylight savings time.

recurring: specify a day of the month (week#|first|last/day of the week/month).

not recurring: specify a date (month/day of the month/year).

Define two days:

Day1 = beginning of daylight savings time.

Day2 = end of daylight savings time.

In the Southern hemisphere, month2 must be before month1, as daylight savings time begins in the fall and ends in the spring.

Specify the exact time that the transition should occur (24 hour clock).

Time of transition into daylight savings time: according to local standard time.

Time of transition out of daylight savings time: according to local daylight savings time.

For the clock summer-time recurring command, the default values are the United States transition rules:

Daylight savings time begins: 2:00 (AM) on the second Sunday of March.

Daylight savings time ends: 2:00 (AM) on the first Sunday of November.

Use the recurring keyword if daylight savings time always begins and ends on the same day every year.

Use the first/last keywords to specify the occurrence of a day of the week in a specified month: For example: last Sunday March.

Use a specific date including the year for a not recurring configuration. For example: March 29, 2004.

Use week/day of the week/month (no year) for a recurring configuration:

Use first/last occurrence of a day of the week in a specified month. For example: last, Sunday, March (the last Sunday in March).

Use the day of the week in a specific week in a specified month. For example: 4,Sunday, March (the fourth Sunday in March). This would be different from the last Sunday of the month whenever there were five Sundays in the month.

Authorization: admin

Examples

The following examples illustrate the use of this command.

EXAMPLE 1

The following example shows how to configure recurring daylight savings time for a time zone designated "DST" as follows:

Daylight savings time begins: 0:00 on the last Sunday of March.

Daylight savings time ends: 23:59 on the Saturday of fourth week of November.

Offset = 1 hour (default)

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#clock summer-time DST  
recurring last Sunday March 00:00 4 Saturday November 23:59  
NME-APA(config)#

EXAMPLE 2

The following example shows how to configure non-recurring daylight savings time for a time zone designated "DST" as follows:

Daylight savings time begins: 0:00 on April 16, 2007.

Daylight savings time ends: 23:59 October 23, 2007.

Offset = 1 hour (default)

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#clock summer-time DST April 16 2005 00:00 October 23 2005 23:59  
NME-APA(config)#

EXAMPLE 3

The following example shows how to cancel the daylight savings configuration.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no clock summer-time 
NME-APA(config)#

Related Commands

Command
Description

clock set

 

calendar set

 

show calendar

 

show clock

 

clock timezone

Sets the time zone. Use the no version of this command to remove current time zone setting. The purpose of setting the time zone is so that the system can correctly interpret time stamps data coming from systems located in other time zones.

clock timezone zone hours [minutes]

no clock timezone

Syntax Description

zone

The name of the time zone to be displayed.

hours

The hours offset from UTC. This must be an integer in the range -23 to 23.

minutes

The minutes offset from UTC. This must be an integer in the range of 0 to 59. Use this parameter to specify an additional offset in minutes when the offset is not measured in whole hours.


Defaults

UTC (hours = 0)

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example sets the time zone to Pacific Standard Time with an offset of 10 hours behind UTC.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#clock timezone PST -10  
NME-APA(config)#

Related Commands

Command
Description

calendar set

 

clock set

 

show calendar

 

clock update-calendar

Synchronizes clocks by setting the calendar from the system clock.

clock update-calendar

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example updates the calendar according to the clock.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#clock update-calendar  
NME-APA#

Related Commands

Command
Description

clock set

 

calendar set

 

clock read-calendar

 

show calendar

 

show clock

 

configure

Enables the user to move from Privileged Exec Mode to Configuration Mode.

configure

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

After the user enters the configure command, the system prompt changes from <host-name># to <host-name>(config)#, indicating that the system is in Global Configuration Mode. To leave Global Configuration Mode and return to the Privileged Exec Mode prompt, use the exit command.

Authorization: admin

Examples

The following example enters the Global Configuration Mode.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#configure  
NME-APA(config)#

Related Commands

Command
Description

exit

 

copy

Copies any file from a source directory to a destination directory on the local flash file system.

copysource-file destination-file

Syntax Description

source-file

The name of the original file.

destination-file

The name of the new destination file.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Both file names should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.

Authorization: admin

Examples

The following example copies the local analysis.sli file located in the root directory to the applications directory.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy analysis.sli applications/analysis.sli  
NME-APA#

Related Commands

Command
Description

copy ftp://

 

copy-passive

 

copy ftp://

Downloads a file from a remote station to the local flash file system, using FTP.

copy ftp://username[:password]@server-address[:port]/path/source-file destination-file

Syntax Description

username

The username known by the FTP server.

password

The password of the given username.

server-address

The dotted decimal IP address of the FTP server.

port

Optional port number on the FTP server.

source-file

The name of the source file located in the on the server.

destination-file

The name of the file to be saved in the local flash file system. The file should be in 8.3 format, that is eight characters, dot, then three characters.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use the following syntax for remote upload/download using FTP:

ftp://username[:password]@server-address[:port]/path/file

You can configure keyword shortcuts for the copy command using the following commands:

ip ftp password to configure a password shortcut.

ip ftp username to configure a username shortcut.

Authorization: admin

Examples

The following example downloads the ftp.sli file from the host 10.10.10.10 with user name "user" and password "a1234".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy ftp://user:a1234@10.10.10.10/p:/applications/ftp.sli  
NME-APA#

Related Commands

Command
Description

copy-passive

 

ip ftp password

 

ip ftp username

 

copy-passive

Uploads or downloads a file using passive FTP.

copy-passive source-file ftp://username[:password]@server-address[:port]/path/destination-file [overwrite]

Syntax Description

source-file

The name of the source file located in the local flash file system.

username

The username known by the FTP server.

password

The password of the given username.

server-address

The password of the given username.

port

Optional port number on the FTP server.

destination-file

The name of the file to be created in the FTP server.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use the following format for remote upload/download using FTP: ftp://username[:password]@serveraddress[:port]/path/file

Use the overwrite keyword to permit the command to overwrite an existing file.

You can configure keyword shortcuts for the copy command using the following commands:

ip ftp password to configure a password shortcut.

ip ftp username to configure a username shortcut.

Authorization: admin

Examples

The following example performs the same operation as the previous copy ftp example using passive FTP.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy-passive appl/analysis.sli 
ftp://myname:mypw@10.1.1.105/p:/applications/analysis.sli  
NME-APA#

Related Commands

Command
Description

copy ftp://

 

ip ftp password

 

ip ftp username

 

copy running-config startup-config

Builds a configuration file with general configuration commands called config.txt, which is used in successive boots.

copy running-config startup-config

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

This command must be entered to save newly configured parameters, so that they will be effective after a reboot. You can view the running configuration before saving it using the more running-config command.

The old configuration file is automatically saved in the tffs0:system/prevconf directory.

Authorization: admin

Examples

The following example saves the current configuration for successive boots.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy running-config startup-config  
Backing-up configuration file... 
Writing configuration file... 
NME-APA#

Related Commands

Command
Description

more

 

show running-config

 

copy source-file ftp://

Uploads a file to a remote station, using FTP.

copy source-file ftp://username[:password]@server-address[:port]/path/destination-file

Syntax Description

source-file

The name of the source file located in the local flash file system.

username

The username known by the FTP server.

password

The password of the given username.

server-address

The dotted decimal IP address.

port

Optional port number on the FTP server.

destination-file

The name of the file to be created in the FTP server.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use the following format for remote upload/download using FTP: ftp://username[:password]@serveraddress[:port]/path/file

You can configure keyword shortcuts for the copy command using the following commands:

ip ftp password to configure a password shortcut.

ip ftp username to configure a username shortcut.

Authorization: admin

Examples

The following example uploads the analysis.sli file located on the local flash file system to the host 10.1.1.105.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy /appl/analysis.sli ftp://myname:mypw@10.1.1.105/p:/applications/analysis.sli  
NME-APA#

Related Commands

Command
Description

copy ftp://

 

copy source-file startup-config

Copies the specified source file to the startup-config file. Use this command to upload a backup configuration file created using the copy startup-config destination-file command. This is useful in a cascaded solution for copying the configuration from one NME-APA module to the other.

copy source-file startup-config

Syntax Description

source-file

The name of the backup configuration file.

ftp://user:pass@host/drive:/dir/bckupcfg.txt

/tffs0


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The source file name should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.

Authorization: admin

Examples

The following example shows how to upload a backup configuration file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy ftp://user:pass@host/drive:/dir/bakupcfg.txt startup-config  
NME-APA#

Related Commands

Command
Description

copy startup-config destination-file

 

copy startup-config destination-file

Copies the startup-config file to the specified destination file. Use this command to create a backup configuration file. This is useful in a cascaded solution for copying the configuration from one NME-APA module to the other. The file created by this command can then be uploaded to the second NME-APA module using the copy source-file startup-config command.

copy startup-config destination-file

Syntax Description

destination-file

The name of the file to which the configuration is copied.

ftp://user:pass@host/drive:/dir/bckupcfg.txt

/tffs0


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The destination file name should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.

Authorization: admin

Examples

The following example shows how to create a backup configuration file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy startup-config ftp://user:pass@host/drive:/dir/bckupcfg.txt  
NME-APA#

Related Commands

Command
Description

copy source-file startup-config

 

default user template all

Removes all user-defined user templates from the system. The default template only remains.

default user template all

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Authorization: admin

Examples

The following example removes all user-defined user templates.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)# default user template all  
NME-APA(config if)#

Related Commands

Command
Description

user template import csv-file

 

show interface linecard user templates

 

party template

 

delete

Deletes a file from the local flash file system. Use the recursive switch to delete a complete directory and its contents. When used with the recursive switch, the filename argument specifies a directory rather than a file.

delete file-name [/recursive]

Syntax Description

file-name

The name of the file or directory to be deleted.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate how to use this command:

EXAMPLE 1:

The following example deletes the oldlog.txt file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#delete oldlog.txt  
NME-APA#

EXAMPLE 2:

The following example deletes the oldlogs directory.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#delete oldlogs /recursive  
3 files and 1 directories will be deleted. 
Are you sure? y  
3 files and 1 directories have been deleted. 
NME-APA#

Related Commands

Command
Description

dir

 

rmdir

 

dir

Displays the files in the current directory.

dir [applications] [-r]

Syntax Description

applications

Filters the list of files to display only the application files in the current directory.

-r

Includes all files in the subdirectories of the current directory as well as the files in the current directory.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example displays the files in the current directory (root).

NME-APA>enable 10 
Password:<cisco> 
NME-APA#dir  
File list for /tffs0/ 
512TUE JAN 01 00:00:00 1980LOGDBG DIR 
512TUE JAN 01 00:00:00 1980LOG DIR 
7653 TUE JAN 01 00:00:00 1980FTP.SLI 
29 TUE JAN 01 00:00:00 1980SCRIPT.TXT 
512 TUE JAN 01 00:00:00 1980SYSTEM DIR 
NME-APA#

Related Commands

Command
Description

pwd

 

cd

 

disable

Moves the user from a higher level of authorization to a lower user level.

disable [level ]

Syntax Description

level

User authorization level (0, 5, 10, 15) as specified in CLI Authorization Levels.


Defaults

This command has no default settings.

Command Modes

Privileged Exec and Viewer

Usage Guidelines

Use this command with the level option to lower the user privilege level, as illustrated in the following figure. If a level is not specified, it defaults to User mode.

Figure 1 Disable Command

157243.JPG

Note that you must exit to the Privileged Exec command mode to use this command.

Authorization: user

Examples

The following example shows how to change from root to admin mode:

NME-APA>enable 15 
Password:<cisco> 
NME-APA#>disable 10  
NME-APA#

Related Commands

Command
Description

enable

 

do

Use the do command to execute an EXEC mode command (such as a show command) or a privileged EXEC command (such as show running-config) without exiting to the relevant command mode.

do command

Syntax Description

command

Command to be executed.


Defaults

This command has no default settings.

Command Modes

All configuration modes

Usage Guidelines

Use this command when in any configuration command mode (global configuration, linecard configuration, or any interface configuration) to execute a user exec or privileged exec command.

Enter the entire command with all parameters and keywords as you would if you were in the relevant command mode.

Authorization: admin

Examples

The following example assumes that the user has navigated to the interface configuration mode to perform some configuration tasks. The do command is used to avoid having to exit to the user exec mode.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#do show system-uptime 
NME-APA uptime is 20 hours, 43 minutes, 37 seconds 
NME-APA(config if)#

Related Commands

Command
Description

enable

Enables the user to access a higher authorization level.

enable [level]

Syntax Description

level

User authorization level (0, 5, 10, 15) as specified in "CLI Authorization Levels".


Defaults

level = admin

Command Modes

User Exec

Usage Guidelines

Authorization levels are illustrated in the following figure

Figure 2 Enable Command

157244.JPG

If a level is not specified, the level defaults to admin authorization, level 10.

Note that you cannot use the enable command from the Privileged Exec or any of the configuration command modes.

Authorization: User

Examples

The following example accesses the administrator authorization level. Note that the prompt changes from NME-APA> to NME-APA#, indicating that the level is the administrator privilege level.

NME-APA>enable 
Password:<cisco> 
NME-APA#

Related Commands

Command
Description

disable

 

enable password

 

enable password

Configures a password for the specified authorization level, thus preventing unauthorized users from accessing the NME-APA module. Use theno form of the command to disable the password for the specified authorization level.

enable password [level level] [encryption-type] password

no enable password [level level]

Syntax Description

level

User authorization level (0, 5, 10, 15) as specified in "CLI Authorization Levels". If no level is specified, the default is Admin (10).

encryption-type

If you want to enter the encrypted version of the password, set the encryption type to 5, to specify the algorithm used to encrypt the password.

password

A regular or encrypted password set for the access level. If you specify encryption-type, you must supply an encrypted password.


Defaults

password = cisco

Command Modes

Global Configuration

Usage Guidelines

After the command is entered, any user executing the enable command must supply the specified password.

Passwords must be at least 4 and no more than 100 characters long.

Passwords can contain any printable characters.

Passwords must begin with a letter.

Passwords cannot contain spaces.

Passwords are case-sensitive.

Authorization: admin

Examples

The following example sets a level 10 password as a123*man.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#enable password level 10 a123*man  
NME-APA(config)#

Related Commands

Command
Description

enable

 

service password-encryption

 

erase startup-config-all

Removes all current configuration by removing all configuration files.

erase startup-config-all

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The following data is deleted by this command:

General configuration files

Application configuration files

Static party DB files

Management agent installed MBeans

After using this command, the NME-APA module should be reloaded immediately to ensure that it returns to the 'factory default' state.

You can use the copy startup-config destination-file command to create a backup of the current configuration before it is deleted.

Authorization: admin

Examples

The following example shows how to erase the startup configuration.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#erase startup-config-all  

Related Commands

Command
Description

reload

 

copy startup-config destination-file

 

exit

Exits from the current mode to the next "lower" mode.

exit

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

All

Usage Guidelines

Use this command each time you want to exit a mode, as illustrated in the following figure. The system prompt changes to reflect the lower-level mode.

Figure 3 Exit Command

157245.JPG

Authorization: admin

Examples

The following example exits from the Linecard Interface Configuration Mode to Global Configuration Mode and then to Privileged Exec and Viewer Modes.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#exit  
NME-APA(config)#exit  
NME-APA#

Related Commands

Command
Description

configure

 

interface fastethernet

 

interface linecard

 

line vty

 

failure-recovery operation-mode

Specifies the operation mode to be applied after boot resulting from failure. When using the default switch, you do not have to specify the mode.

failure-recovery operation-mode mode

default failure-recovery operation-mode

Syntax Description

mode

operational or non-operational. Indicates whether or not the system will boot as operational following a failure.


Defaults

mode = operational

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example sets the system to boot as operational after a failure

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#failure-recovery operation-mode operational  
NME-APA(config)#

Related Commands

Command
Description

show failure-recovery operation-mode

 

help

Displays information relating to all available CLI commands.

help bindings|tree

Syntax Description

This command has no arguments.

Defaults

This command has no default settings.

Command Modes

Exec

Usage Guidelines

Use the bindings keyword to print a list of keyboard bindings (shortcut commands).

Use the tree keyword to display the entire tree of all available CLI commands.

Authorization: User

Examples

The following example shows the partial output of the help bindings command.

NME-APA>help bindings  
Line Cursor Movements 
--------------------- 
Ctrl-F /->Moves cursor one character to the right. 
Ctrl-B /<-Moves cursor one character to the left. 
Esc-FMoves cursor one word to the right. 
Esc-BMoves cursor one word to the left. 
Ctrl-AMoves cursor to the start of the line. 
Ctrl-EMoves cursor to the end of the line. 
Esc F Moves cursor forward one word. 
Esc BMoves cursor backward one word. 
Editing 
------- 
Ctrl-DDeletes the character where the cursor is located. 
Esc-DDeletes from the cursor position to the end of the word. 
BackspaceDeletes the character before the current location of the cursor. 
Ctrl-H Deletes the character before the current location of the cursor. 
Ctrl-KDeletes from the cursor position to the end of the line. 
Ctrl-UDeletes all characters from the cursor to the beginning of the line. 
Ctrl-XDeletes all characters from the cursor to the beginning of the line. 
Ctrl-WDeletes the word to the left of the cursor. 
Ctrl-YRecall the last item deleted. 
Help and Operation Features 
---------------------------- 
? Argument help. 
<Tab>Toggles between possible endings for the typed prefix. 
<Esc><Tab>Displays all the possible arguments backwards. 
Ctrl-I <TAB> 
NME-APA>

Related Commands

Command
Description

history

Enables the history feature, that is, a record of the last command lines that executed. Use the no form of this command to disable history.

history

no history

Syntax Description

This command has no arguments or keywords.

Defaults

History is enabled.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate how to use this command.

EXAMPLE 1

The following example enables the history feature.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#history 
NME-APA#

EXAMPLE 2

The following example disables the history feature.

NME-APA>enable 10  
Password:<cisco> 
NME-APA#no history  
NME-APA#

Related Commands

Command
Description

history size

 

history size

Sets the number of command lines that the system records in the history.

history size size

no history size

Syntax Description

size

The number of command lines stored in the history of commands for quick recall.


Defaults

size = 10 lines

Command Modes

Privileged EXEC

Usage Guidelines

The size of the history buffer can be any number from 0-50. Use the no form of this command to restore the default size.

Authorization: admin

Examples

The following example sets the history buffer size to 50 command lines.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#history size 50  
NME-APA#

Related Commands

Command
Description

history

 

hostname

Modifies the name of the NME-APA module. The host name is part of the displayed prompt.

hostname host-name

Syntax Description

host-name

The new host name. Maximum length is 20 characters.


Defaults

host-name = NME-APA

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example changes the host name to MyHost.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#>hostname MyHost  
MyHost(config)#>

Related Commands

Command
Description

show hostname

 

interface fastethernet

Enters FastEthernet Interface Configuration mode to configure a specified Fast Ethernet line interface.

interface fastethernet slot-number/interface-number

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.

interface-number

The FastEthernet interface number. Enter a value between 1 and 2 to configure one of the line ports for an NME-APA module.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

This command is used to configure the line ports.

To return to the Global Configuration Mode, use the exit command.

The system prompt changes to reflect the Fast Ethernet Interface Configuration mode.

Authorization: admin

Examples

The following example enters into FastEthernet Configuration Interface Mode for line port #1.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface fastethernet 0/1 
NME-APA(config if)#

Related Commands

Command
Description

exit

 

show interface fastethernet

 

interface fastethernet

 

interface linecard

Enters Linecard Interface Configuration Mode.

interface linecard slot-number

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

The system prompt is changed to reflect the Line Card Configuration mode. To return to the Global Configuration Mode, use the exit command.

Authorization: admin

Examples

The following example enters LineCard Interface Configuration Mode.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0  
NME-APA(config if)#

Related Commands

Command
Description

exit

 

ip advertising

Enables IP advertising. If the destination and/or interval is not configured, the default values are assumed. Use the no version of the command to disable IP advertising. Use the default version of the command to restore IP advertising destination or interval to the default values.

ip advertising [destination destination] | [interval interval]

no ip advertising

default ip advertising [destination | interval]

Syntax Description

destination

The IP address of the destination for the ping requests

interval

The frequency of the ping requests in seconds


Defaults

By default, IP advertising is disabled

destination = 127.0.0.1

interval = 300 seconds

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of this command.

EXAMPLE 1:

The following example enables IP advertising, specifying 10.1.1.1 as the destination.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip advertising destination 10.1.1.1 interval 240  
NME-APA(config)#

EXAMPLE 2:

The following example enables IP advertising, specifying an interval of 240 seconds.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip advertising interval 240  
NME-APA(config)#

EXAMPLE 3:

The following example restores the IP advertising destination to the default value.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#default ip advertising destination  
NME-APA(config)#

Related Commands

Command
Description

show ip advertising

 

ip domain-lookup

Enables or disables the domain name lookups. Use the no form of the command to disable the domain name lookup.

ip domain-lookup

no ip domain-lookup

Syntax Description

This command has no arguments or keywords.

Defaults

By default, domain name lookup is enabled.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate how to use this command.

EXAMPLE 1:

The following example enables the domain lookup.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip domain-lookup  
NME-APA(config)#

EXAMPLE 2:

The following example disables the domain lookup

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no ip domain-lookup  
NME-APA(config)#

Related Commands

Command
Description

ip domain-name

 

ip name-server

 

show hosts

 

ip domain-name

Defines a default domain name. Use the no parameter of this command to remove the current default domain name. When using the no parameter, you do not have to specify the domain name.

ip domain-name domain-name

no ip domain-name

Syntax Description

domain-name

The default domain name used to complete host names that do not specify a domain. Do not include the initial period that separates an unqualified name from the domain name.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of this command.

EXAMPLE 1:

The following example configures a domain name

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip domain-name cisco.com  
NME-APA(config)#

EXAMPLE 2:

The following example removes the configured domain name.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no ip domain-name  
NME-APA(config)#

Related Commands

Command
Description

ip domain-lookup

 

ip name-server

 

show hosts

 

ip filter fragment

Use this command to enable the filtering out of IP fragments.

ip filter fragment enable

ip filter fragment disable

Syntax Description

This command has no arguments or keywords.

Defaults

By default, IP fragment filtering is disabled.

Command Modes

Global Configuration

Usage Guidelines

Management security is defined as the capability of the NME-APA module to cope with malicious management conditions that might lead to global service failure.

There are two parallel security mechanisms:

Automatic security mechanism — monitors the TCP/IP stack rate at 200 msec intervals and throttles the rate from the device if necessary.

User-configurable security mechanism — accomplished via two IP filters at user-configurable intervals:

IP fragment filter: Drops all IP fragment packets

This command enables the IP fragment filter.

IP filter monitor: Measures the rate of accepted and dropped packets for both permitted and not-permitted IP addresses.

Use the ip filter moniter command to configure the IP filter monitor.

Use the enable keyword to enable IP fragment filtering.

Use the disable keyword to disable IP fragment filtering.

Authorization: admin

Examples

The following example shows how to enable IP fragment filtering.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip filter fragment enable  
NME-APA(config)#

Related Commands

Command
Description

ip filter moniter

 

show ip filter

 

ip filter monitor

Configures the limits for permitted and not-permitted IP address transmission rates.

ip filter monitor [ip_permitted | ip_denied] low_rate low_rate high_rate high_rate burst burst size

Syntax Description

low_rate

Lower threshold; the rate in Mbps that indicates the attack is no longer present

high_rate

Upper threshold; the rate in Mbps that indicates the presence of an attack

burst size

Duration of the interval in seconds that the high and low rates must be detected in order for the threshold rate to be considered to have been reached


Defaults

low rate = 20 Mbps

high rate = 20 Mbps

burst size = 10 seconds

Command Modes

Global Configuration

Usage Guidelines

Management security is defined as the capability of the NME-APA module to cope with malicious management conditions that might lead to global service failure.

There are two parallel security mechanisms:

Automatic security mechanism—Monitors the TCP/IP stack rate at 200 msec intervals and throttles the rate from the device if necessary.

User-configurable security mechanism—Accomplished using two IP filters at user-configurable intervals:

IP fragment filter: Drops all IP fragment packets

Use the ip filter fragment command to enable the IP fragment filter.

IP filter monitor: Measures the rate of accepted and dropped packets for both permitted and not-permitted IP addresses.

This command configures the IP filter monitor.

Use the ip_permitted keyword to apply configured limits to permitted IP addresses.

Use the ip_denied keyword to apply configured limits to not-permitted IP addresses.

If neither keyword is used, it is assumed that the configured limits apply to both permitted and not-permitted IP addresses.

Authorization: admin

Examples

The following example shows how to configure the rates for permitted IP addresses.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# ip filter monitor ip_permitted low_rate 25 high_rate 30 burst 15  
NME-APA(config)#

Related Commands

Command
Description

ip filter fragment

 

show ip filter

 

ip ftp password

Specifies the password to be used for FTP connections for the current session. The system will use this password if no password is given in the copy FTP command.

ip ftp password password

Syntax Description

password

The password for FTP connections.


Defaults

Default password is admin

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example sets the password to be used in the FTP connection to mypw.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#ip ftp password mypw  
NME-APA#

Related Commands

Command
Description

copy ftp://

 

copy-passive

 

ip ftp username

 

ip ftp username

Configures the username for FTP connections for the current session. This username will be used if no username is given in the copy FTP command.

ip ftp username user-name

Syntax Description

user-name

The username for FTP connections.


Defaults

Default username is anonymous

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example sets myname as the username for FTP connections.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#ip ftp username myname  
NME-APA#

Related Commands

Command
Description

copy ftp://

 

copy-passive

 

ip ftp password

 

ip host

Adds a host name and address to the host table. Use the no form of the command to remove a host name and address from the host table.

ip host hostname ip-address

no ip host hostname [ip-address]

Syntax Description

hostname

The host name to be added or removed.

ip-address

The host IP address in x.x.x.x format.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example adds a host to the host table.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip host PC85 10.1.1.1  
NME-APA(config)#

Related Commands

Command
Description

show hosts

 

ip name-server

Specifies the address of 1-3 servers to use for name and address resolution. The system maintains a list of up to 3 name servers. If the current list is not empty, this command adds the specified servers to the list. The no option of this command removes specified servers from the current list.

ip name-server server-address1 [server-address2] [server-address3]

no ip name-server

Syntax Description

server-address1

The IP address of the name server.

server-address2

The IP address of an additional name server.

server-address3

The IP address of an additional name server.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example adds the DNS 10.1.1.1 and 10.1.1.2 to the configured servers list.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip name-server 10.1.1.1 10.1.1.2  
NME-APA(config)#

Related Commands

Command
Description

ip domain-lookup

 

show hosts

 

ip radius-client retry limit

Configures the parameters for retransmitting unacknowledged RADIUS client messages.

ip radius-client retry limit times [timeout timeout]

Syntax Description

times

The maximum number of times the RADIUS client can try unsuccessfully to send a message.

timeout

Timeout interval for retransmitting a message, in seconds


Defaults

times = 3

timeout = 5 second

Command Modes

Global Configuration

Usage Guidelines

Due to the unreliable nature of UDP, the RADIUS client retransmits requests to the SCMP peer device if they were not acknowledged within the configured number of seconds. Messages that were not acknowledged can be retransmitted up to the configured maximum number of retries.

The optional timeout parameter limits the time interval for retransmitting a message.

Authorization: admin

Examples

The following example illustrates how to configure the retransmission parameters.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# ip radius-client retry limit 5 timeout 5  
NME-APA(config)#

Related Commands

Command
Description

show ip radius-client

 

ip rpc-adapter

Enables the RPC adapter. Use the no option of this command to disable the RPC adapter.

ip rpc-adapter

no ip rpc-adapter

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of this command.

EXAMPLE 1:

The following example enables the RPC adapter.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip rpc-adapter  
NME-APA(config)#

EXAMPLE 2:

The following example disables the RPC adapter.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no ip rpc-adapter  
NME-APA(config)#

Related Commands

Command
Description

ip rpc-adapter port

 

show ip rpc-adapter

 

ip rpc-adaptor security-level

 

ip rpc-adapter port

Defines the RPC adapter port. Use the default option to reset the RPC adapter port assignment to the default port of 14374.

ip rpc-adapter port port-number

default ip rpc-adapter port

Syntax Description

port-number

The number of the port assigned to the RPC adapter.


Defaults

port number = 14374

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of this command:

EXAMPLE 1:

The following example shows how to configure the RPC interface, specifying 1444 as the RPC adapter port.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#ip rpc-adapter  
NME-APA(config)#ip rpc-adapter port 1444 

EXAMPLE 2:

The following example shows how reset the RPC adapter port.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#default ip rpc-adapter port 

Related Commands

Command
Description

ip rpc-adapter

 

show ip rpc-adapter

 

ip rpc-adaptor security-level

Sets the PRPC server security level.

ip rpc-adaptor security-level {full|semi|none}

Syntax Description

 

full, semi, none


Defaults

default = semi

Command Modes

Global Configuration

Usage Guidelines

Specify the desired PRPC server security level:

full : all PRPC connections require authentication

semi : PRPC connections that supply a user-name and password during connection establishment are authenticated. Connections that do not supply a user-name and password are accepted with no authentication

none : no authentication is performed

Authorization: admin

Examples

The following example illustrates how to set the PRPC server security level.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#configure 
NME-APA(config)#ip rpc-adaptor security-level full  
NME-APA>

Related Commands

Command
Description

ip rpc-adapter

 

show ip rpc-adapter

 

line vty

Enters Line Configuration Mode for Telnet lines, configuring all Telnet lines.

line vty start-number [end-number]

Syntax Description

start-number

A number in the range 0-4. The actual number supplied does not matter. All telnet lines will be configured by this command.

end-number

A number in the range 0-4. The actual number supplied does not matter. All telnet lines will be configured by this command.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

The system prompt changes to reflect the Line Configuration mode. To return to Global Configuration Mode, use the exit command.

Authorization: admin

Examples

The following example enters the Line Configuration Mode for all lines.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#line vty 0  
NME-APA(config-line)#

Related Commands

Command
Description

show line vty

 

exit

 

link mode

Configures the link mode. The link mode allows the user to force the specified behavior on the link. This may be useful during installation and for debugging the network.

link mode link mode

Syntax Description

link

FE:

port1

port2

port1-port2

mode

Forwarding

Bypass

Cutoff


Defaults

Command Modes

Linecard Interface Configuration

Usage Guidelines

Use the port1-port2 keyword to configure the link mode for all links.

Authorization: admin

Examples

The following examples illustrate the use of the link mode command:

EXAMPLE 1:

The following example configures "bypass" as the link mode on the first link for the NME-APA module.

NME-APA Module>enable 10 
Password:<cisco> 
NME-APA Module#config 
NME-APA Module(config)#interface linecard 0 
NME-APA Module(config if)#link mode port1 bypass  
NME-APA Module(config if)#

EXAMPLE 2:

The following example configures "forwarding" as the link mode for the NME-APA module.

NME-APA Module>enable 10 
Password:<cisco> 
NME-APA Module#config 
NME-APA Module(config)#interface linecard 0 
NME-APA Module(config if)#link mode forwarding  
NME-APA Module(config if)#

EXAMPLE 3:

The following example configures "cutoff" as the link mode for the NME-APA module.

NME-APA Module>enable 10 
Password:<cisco> 
NME-APA Module#config 
NME-APA Module(config)#interface linecard 0 
NME-APA Module(config if)#link mode cutoff  
NME-APA Module(config if)#

Related Commands

Command
Description

show interface linecard link mode

 

logger add-user-message

Adds a message string to the user log files.

logger add-user-message message-text

Syntax Description

message-text

The message string you wish to add.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example adds "testing 123" as the message to the user log files:

NME-APA>enable 10 
Password:<cisco> 
NME-APA#logger add-user-message testing 123  
NME-APA#

logger device

Disables or enables the specified logger device.

logger device {line-attack-file-log | statistics-file-log | user-file-log} status

Syntax Description

status

enabled or disabled, indicating whether to turn on or off logging.


Defaults

By default, the log devices are enabled.

Command Modes

Global Configuration

Usage Guidelines

Available logger devices are:

Line-Attack-File-Log

Statistics-Archive-File-Log

User-File-Log

Authorization: admin

Examples

The following example disables the User-File-Log device.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#logger device user-file-log disabled  
NME-APA(config)#

Related Commands

Command
Description

logger device user-file-log max-file-size

 

show logger device

 

logger get user-log file-name

 

clear logger

 

logger device user-file-log max-file-size

Sets the maximum log file size.

logger device User-File-Log max-file-size size

Syntax Description

size

The maximum size for the user log (in bytes).


Defaults

size = 1,000,000 bytes

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example configures the maximum size of the User-File-Log device to 65000 bytes.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#logger device user-file-log max-file-size 65000  
NME-APA(config)#

Related Commands

Command
Description

logger device

 

show logger device

 

logger get support-file

Generates a log file for technical support using FTP. Note that this operation may take some time.

logger get support-file filename

Syntax Description

filename

Name of the generated log file. The specified file must be located on an FTP site, not on the local file system.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example generates a technical support log file (using FTP) named support.zip.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#logger get support-file ftp://user:1234@10.10.10.10/c:/support.zip  
NME-APA#

Related Commands

Command
Description

logger get user-log file-name

Outputs the current user log to a target file. The output file name can be a local path, full path, or full FTP path file name.

logger get user-log file-name target-file

Syntax Description

target-file

The name of the output file to which the system will write the log file information.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example retrieves the current user log files.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#logger get user-log file-name ftp://myname:mypw@10.1.1.205/d:/log.txt  
NME-APA#

Related Commands

Command
Description

logger get support-file

 

logout

Logs out of the Command-Line Interface of the NME-APA module.

logout

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Exec

Usage Guidelines

The system prompts for confirmation of the logout command with 'N'. Type 'Y' to confirm the logout.

Examples

The following example shows how the user logs out (and confirms the logout).

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#exit 
NME-APA>logout  
Are you sure? Y 

Related Commands

Command
Description

management-agent sce-api logging

Enables the SCE user API troubleshooting logging, which is written to the user-log. Use the no form of this command to disable SCE user API troubleshooting logging.

management-agent sce-api logging

no management-agent sce-api logging

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the SCE user API troubleshooting logging is disabled.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example enables SCE user API troubleshooting logging.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# management-agent sce-api logging  
NME-APA(config)#

Related Commands

Command
Description

management-agent sce-api timeout

Defines the timeout interval for disconnection of an SCE user API client, after which the resources allocated for this client would be released.

management-agent sce-api timeout timeout-interval

Syntax Description

timeout-interval

Default time in seconds that the client waits before timing out.


Defaults

Default = 300 seconds

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

This example shows how to configure a timeout interval of 10 seconds.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)# management-agent sce-api timeout 10 

Related Commands

Command
Description

management-agent system

Specifies a new package file to install for the management agent. The NME-APA module extracts the actual image file(s) from the specified package file only during the copy running-config startup-config command. When using the no version of this command, you do not have to specify the package-file-name.

management-agent system package-file-name

no management-agent system

Syntax Description

package-file-name

The name of a package file that contains the new management agent software. The filename should end with the.pkg extension.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Use this command to upgrade the NME-APA module management agent. The package file is verified for the system and checked that it is not corrupted. The actual upgrade takes place only after executing the copy running-config startup-config command and rebooting the NME-APA module.

Authorization: admin

Examples

The following example upgrades the system with the mng45.pkg package.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#management-agent system mng45.pkg  
Verifying package file... 
Package file verified OK. 
NME-APA(config)#do copy running-config startup-config 
Backing -up configuration file... 
Writing configuration file... 
Extracting new management agent... 
Extracted OK.

Related Commands

Command
Description

copy running-config startup-config

 

mkdir

Creates a new directory.

mkdir directory-name

Syntax Description

directory-name

The name of the directory to be created.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example creates a new directory named mydir.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#mkdir mydir  
NME-APA#

Related Commands

Command
Description

dir

 

more

Displays the contents of a file.

more {file-name | running-config [all-data] | startup-config}

Syntax Description

file-name

The name of the file to be displayed.

all data

Displays defaults as well as non-default settings (running-config option only)


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

The running-config option displays the running configuration file. You can use the all data switch with this option to see sample usage for many CLI configuration commands.

The startup-config option displays the startup configuration file.

Authorization: admin

Examples

The following sample output displays the contents of the running configuration file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#more running-config  
#This is a general configuration file (running-config). 
#Created on 16:48:11 UTC WED June 13 2001 
cli-type 1 
#version 1 
service logger 
no service password-encryption 
enable password level 10 0 "cisco" 
enable password level 15 0 "cisco" 
service RDR-formatter 
no RDR-formatter destination all 
RDR-formatter history-size 0 
clock timezone UTC 0 
ip domain-lookup 
no ip domain-name 
no ip name-server 
service telnetd 
FastEthernet 0/0 
ip address 10.1.5.120 255.255.0.0 
exit 
ip default-gateway 10.1.1.1 
no ip route all 
line vty 0 4 
no access-class in 
timeout 30 
exit 
NME-APA#

Related Commands

Command
Description

show running-config

 

show startup-config

 

more user-log

Displays the user log on the CLI console screen.

more user-log

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example displays the user log on the CLI console screen.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#more user-log  
<INFO>| 01/28/97 22:29:22 | CPU #000 | Logger: Task Initialized successfully

Related Commands

Command
Description

logger get user-log file-name

 

show log

 

no user

Removes a specified user from the system. Use the all option to remove all introduced users.

no user name user-name

no user scmp name scmp-name all

Syntax Description

user-name

The specific user name to be removed from the system.

scmp-name

Name of an SCMP peer device.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Use the scmp name all option to remove all users managed by the specified SCMP peer device.

Authorization: admin

Examples

The following example removes all users.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)# no user all  
NME-APA(config if)#

Related Commands

Command
Description

show interface linecard user

 

no user anonymous-group

Removes a specified anonymous user group from the system. Use the `all' form to remove all anonymous user groups.

no user anonymous-group name group-name

no user anonymous-group all

Syntax Description

group-name

The anonymous user group to be removed from the system.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Authorization: admin

Examples

The following example removes all anonymous user groups.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)# no user anonymous-group all

Related Commands

Command
Description

show interface linecard user anonymous-group

 

no user

 

ping

Pings the given host to test for connectivity. The ping program sends a test message (packet) to an address and then awaits a reply. Ping output can help you evaluate path-to-host reliability, delays over the path, and whether the host can be reached or is functioning.

ping host

Syntax Description

host

The host name or IP address of a remote station to ping.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example pings the host 10.1.1.201.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#ping 10.1.1.201  
pinging 10.1.1.201... 
PING 10.1.1.201: 56 data bytes 
64 bytes from host (10.1.1.201): icmp_seq=0. time=0. ms 
64 bytes from host (10.1.1.201): icmp_seq=1. time=0. ms 
64 bytes from host (10.1.1.201): icmp_seq=2. time=0. ms 
64 bytes from host (10.1.1.201): icmp_seq=3. time=0. ms 
----10.1.1.201 PING Statistics---- 
4 packets transmitted, 4 packets received, 0% packet loss 
round-trip (ms) min/avg/max = 0/0/0 
NME-APA#

Related Commands

Command
Description

pqi install file

Installs the specified pqi file using the installation options specified (if any). This may take up to 5 minutes.

pqi install file filename [options options]

Syntax Description

filename

The filename of the pqi application file to be installed.

options

The desired installation options. Use the show pqi file command to display the available installation options.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Always run the pqi uninstall file command before installing a new pqi file to prevent accumulation of old files on the disk.

Authorization: admin

Examples

The following example installs the application stf30519.pqi file. No options are specified.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#pqi install file stf30519.pqi  
NME-APA(config if)#

Related Commands

Command
Description

show pqi file

 

pqi uninstall file

 

pqi rollback file

Reverses an upgrade of the specified pqi file. This may take up to 5 minutes.

pqi rollback file filename

Syntax Description

filename

The filename of the pqi application file to be rolled-back. It must be the pqi file that was last upgraded.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Always specify the last pqi file that was upgraded. Use the show pqi last-installed command.

Authorization: admin

Examples

The following example reverses the upgrade for the application using the anr100155.pqi file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#pqi rollback file anr100155.pqi  
NME-APA(config if)#

Related Commands

Command
Description

show pqi last-installed

 

pqi uninstall file

Uninstalls the specified pqi file. This may take up to 5 minutes.

pqi uninstall file filename

Syntax Description

filename

The filename of the pqi application file to be uninstalled. It must be the pqi file that was installed last.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

Always specify the last pqi file that was installed. Use the show pqi last-installed command.

Always run the pqi uninstall command before installing a new pqi file to prevent accumulation of old files on the disk.

Authorization: admin

Examples

The following example uninstalls the application stf30519.pqi file.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#pqi uninstall file stf30519.pqi  
NME-APA(config if)#

Related Commands

Command
Description

show pqi last-installed

 

pqi install file

 

pqi upgrade file

Upgrades the application using the specified pqi file and the upgrade options specified (if any). This may take up to 5 minutes.

pqi upgrade file filename [options options]

Syntax Description

filename

The filename of the pqi application file to be used for the upgrade.

options

The desired upgrade options. Use the show pqi file command to display the available options.


Defaults

This command has no default settings.

Command Modes

Linecard Interface Configuration

Usage Guidelines

A given pqi upgrade file is suitable for upgrading only from specific previously installed pqi files. The upgrade procedure checks that an upgrade is possible from the currently installed pqi file. The upgrade procedure is stopped with an error message if the upgrade is not possible.

Authorization: admin

Examples

The following example upgrades the application using the stf30519.pqi file. No options are specified.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#pqi upgrade file stf30519.pqi  
NME-APA(config if)#

Related Commands

Command
Description

show pqi file

 

pwd

Displays the current working directory.

pwd

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example shows the current working directory as tffs0.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#pwd  
tffs0: 
NME-APA#

Related Commands

Command
Description

cd

 

queue

Sets the queue shaping.

queue queue-number bandwidth bandwidth burst-size burstsize

Syntax Description

queue-number

Queue-number from 1-4, where 4 is the highest priority (fastest).

1=BE. BE is the best effort queue, that is the lowest priority.

2, 3=AF. The AF (Assured Forwarding) queues are middle-priority, with 3 being a higher priority queue, that is, packets from queue 3 are transferred faster than those in queue 2.

4=EF. EF is the Expedited Forwarding queue, that is the highest priority forwarding

bandwidth

Bandwidth measured in kbps. The maximum bandwidth is determined by the line rate.

0 disables packet transmission from the queue.

Bandwidth is set in resolutions of ~140Kbps, that is rounded to the nearest multiple of approximately 140 Kbps.

burstsize

Burst size in bytes, from 0-16000000.


Defaults

Bandwidth = 100000K (100 Mbps)

Burst size = 8000 (8K bytes)

Command Modes

FastEthernet Interface Configuration

Usage Guidelines

This command is valid for a specified FastEthernet line interface only. It must be executed explicitly for each interface.

Use the interface fastethernet command to access the configuration mode for the desired interface.

Authorization: admin

Examples

The following example configures queue shaping for queue 1 for FE port #1.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#interface fastethernet 0/2 
NME-APA(config if)#queue 1 bandwidth 20000 burstsize 1000  
NME-APA(config if)#

Related Commands

Command
Description

bandwidth

 

interface fastethernet

 

rdr-formatter category number

Assigns a meaningful name to a category. This category name can then be used in any rdr-formatter command instead of the category number. Use the no option of this command to disassociate the name from the category. The name will then not be recognized by any CLI commands.

rdr-formatter category number [1-4] name category name

no rdr-formatter category number [1-4] name category name

Syntax Description

category name

The user-defined name to be assigned to the category.


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following example assigns the name "prepaid" to Category 1.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#rdr-formatter category number 1 name prepaid  
NME-APA(config)#

Related Commands

Command
Description

show rdr-formatter

 

service rdr-formatter

 

rdr-formatter destination


Note Configuring an RDR destination entry is only for debugging purposes.


Configures an RDR destination entry. Up to four entries can be configured. Each entry must have a different priority. The entry with the highest priority is used by the RDR formatter, provided that a connection with this destination can be established. This is where the RDR-formatter sends the RDRs it produces.

Use the no form of the command to remove the mappings of an RDR formatter destination to categories. When all categories for a destination are removed, the entire destination is removed.

rdr-formatter destination ip-address port port-number [category {name category-name } {number [1-4] }] [priority priority-value] protocol {RdrV1 | NetflowV9} transport {udp | tcp}

no rdr-formatter destination ip-address port port-number [category {name category-name }| {number [1-4 ]}]

no rdr-formatter destination all

Syntax Description

ip-address

The destination IP address.

port-number

The destination port number.

category

(Optional) Use this parameter to assign a priority to a particular category for this destination.

category-name

(Optional) User-defined name that identifies the category

number

(Optional) Use this parameter to identify the category by number (1 to 4).

priority-value

(Optional) The priority of the destination. The priority value may be any number between 1 (lowest) to 100 (highest).

protocol

The protocol of the destination. The protocol can be NetflowV9 or RDRv1

transport

The transport type configured for this destination. Specify either of the following:

UDP when protocol = Netflow

TCP when protocol = RDRv1.


Defaults

Default protocol = RDRv1

Command Modes

Global Configuration

Usage Guidelines

The category may be identified by either name or number.

Assign a high priority to send RDRs from the specified category to this destination. Assign a low priority if RDRs from the specified category should not be sent to this destination.

For the first entry, if no priority is set, the highest priority is automatically assigned.

For all subsequent entries, the priority must be explicitly defined.

It is also possible to assign a different priority to each category for each destination. If no category is specified, the same priority is assigned to all categories for that destination.

Use the all keyword with the no form of the command to remove all of the configured RDR-formatter categories from the specified destination, thus removing the destination itself.

Authorization: admin

Examples

The following examples illustrate the use of the RDR-formatter destination command:

EXAMPLE 1:

The following example configures a Netflow destination with the default priority (highest) to be used by all categories.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#rdr-formatter destination 10.1.1.205 port 33000 protocol NetflowV9 
transport udp 
NME-APA(config)#

EXAMPLE 2:

The following example configures an RDR formatter destination for two categories with a different priority for each category. This configuration sends RDRs from category 2 to this destination, but generally not RDRs from category 1.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#rdr-formatter destination 10.1.1.206 port 34000 category number 1 priority 
10 category number 2 priority 90 protocol RrdrV1 
NME-APA(config)#

Related Commands

Command
Description

show rdr-formatter destination

 

service rdr-formatter

 

rdr-formatter forwarding-mode

Defines the mode in which the RDR formatter will send the RDRs to the destinations.

rdr-formatter forwarding-mode mode

Syntax Description

mode

Settings: redundancy, multicast, simple-load-balancing as described in the Valid Mode Settings table in the Usage Guidelines.


Defaults

Default mode = redundancy

Command Modes

Global Configuration

Usage Guidelines

Table 1 Valid Mode Settings 

redundancy

All RDRs are sent only to the primary (active) connection.

multicast

All RDRs are sent to all destinations.

simple-load-balancing

Each successive record is sent to a different destination, one destination after the other, in a round robin manner.


Authorization: admin

Examples

The following example sets the RDR formatter mode to "redundancy".

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#rdr-formatter forwarding-mode redundancy  
NME-APA(config)#

Related Commands

Command
Description

show rdr-formatter forwarding-mode

 

rdr-formatter history-size

Configures the size of the history buffer. This command is currently not supported.

rdr-formatter history-size size

Syntax Description

size

Size of the history buffer in bytes. Must be = 0 only (default)


Defaults

Default size = 0

Command Modes

Global Configuration

Usage Guidelines

Do not change the size of the history buffer from the default value.

Since currently only RDRv1 is supported, the size of the history buffer must be zero bytes, even though the system will accept a command specifying a larger size.

Authorization: admin

Examples

Related Commands

Command
Description

show rdr-formatter history-size

 

rdr-formatter rdr-mapping

Adds a dynamic RDR mapping to a category or removes one from a category. Use the no form of this command to remove an existing mapping.

rdr-formatter rdr-mapping (tag-id tag number category-number category number)

no rdr-formatter rdr-mapping (tag-id tag number category-number category number)

Syntax Description

tag number

The complete 32 bit value given as an hexadecimal number. The RDR tag must be already configured in the Formatter by the application.

category number

Number of the category (1-4) to which to map the RDR tag


Defaults

This command has no default settings.

Command Modes

Global Configuration

Usage Guidelines

The configuration of categories to RDR tags is done by adding and removing mappings. You can add a mapping of RDR tag to a category and remove a mapping, including the default mapping. If the table already contains a mapping with the same tag and category number, an error is issued and nothing is done.

If all categories are removed from a tag, this tag is ignored and is not formatted and sent - this is `ignore mapping'.

Authorization: admin

Examples

The following examples illustrate how to use this command.

EXAMPLE 1

This example shows how to add a mapping to a category.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#rdr-formatter rdr-mapping tag-id 0xf0f0f000 category-number 1  
NME-APA(config)#

EXAMPLE 2

This example shows how to restore the default mapping for a specified RDR tag.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#default rdr-formatter rdr-mapping tag-id 0xf0f0f000  
NME-APA(config)#

Related Commands

Command
Description

show rdr-formatter rdr-mapping

 

reload


Note In order not to lose the current configuration, use the copy running-config-all startup-config-all command before using the reload command.


Reboots the NME-APA module.

reload

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example shows backing up of the configuration and performing a system reboot.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#copy running-config-all startup-config-all  
NME-APA#reload  
Are you sure? Y  
The system is about to reboot, this will end your CLI session

Related Commands

Command
Description

copy running-config startup-config

 

rename

Changes the file name to the specified name.

rename existing-file-name new-file-name

Syntax Description

existing-file-name

The original name of the file.

new-file-name

The new name of the file.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example changes the name of file test1.pkg to test3.pkg.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#rename test1.pkg test3.pkg  
NME-APA#

Related Commands

Command
Description

rmdir

Removes an empty directory. To remove a directory that is not empty, use the delete command with the recursive switch.

rmdir directory-name

Syntax Description

directory-name

The name of the directory to be removed.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

You can only remove an empty directory. Use the dir command to verify that no files are listed in this directory.

Authorization: admin

Examples

The following example deletes the code directory.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#rmdir code  
NME-APA#

Related Commands

Command
Description

dir

 

delete

 

script capture

Begins the recording of a script. It tracks all commands typed until the script stop command is used.

script capture script-file-name

Syntax Description

script-file-name

The name of the output file where the script is stored.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use this command to capture a sequence of repeated commands into a file for the purpose of executing the commands again.

Use the script stop command to stop capturing the script.

Authorization: admin

Examples

The following example shows the script capture for the script1.txt.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#script capture script1.txt  
NME-APA#cd log  
NME-APA#cd.. 
NME-APA#pwd  
NME-APA#script stop 

Related Commands

Command
Description

script stop

 

script print

Displays a script file.

script print script-file-name

Syntax Description

script-file-name

The name of the file containing the script.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example prints the commands captured in script1.txt.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#script print script1.txt cd log 
cd.. 
pwd 
script stop 
NME-APA#

Related Commands

Command
Description

script capture

 

script run

 

script run

Runs a script. The script may be created using the script capture command, or it may be created as a text file containing the appropriate commands.

script run script-file-name [halt]

Syntax Description

script-file-name

The name of the file containing the script.


Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Use this command to run a script that you have previously created using the script capture command.

Use the halt keyword to break script on errors.

Authorization: admin

Examples

The following example runs the script named monitor.txt, which contains commands to enable the generation of the real-time user usage RDRs for the specified users.

Following is the contents of the file:

configure 
interface linecard 0 
user name Jerry property monitor value 1  
user name George property monitor value 1  
user name Elaine property monitor value 1  
user name Kramer property monitor value 1 

The following shows how to run the script:

NME-APA>enable 10 
Password:<cisco> 
NME-APA#script run monitor.txt  
NME-APA#configure 
NME-APA(config)#interface linecard 0 
NME-APA(config if)#user name Jerry property monitor value 1 
NME-APA(config if)#user name George property monitor value 1 
NME-APA(config if)#user name Elaine property monitor value 1 
NME-APA(config if)#user name Kramer property monitor value 1 
NME-APA(config if)#

Related Commands

Command
Description

script capture

 

script print

 

script stop

Stops script capture. Used in conjunction with the script capture command, it marks the end of a script being recorded.

script stop

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

Privileged EXEC

Usage Guidelines

Authorization: admin

Examples

The following example stops the capturing of a script.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#script capture script1.txt  
NME-APA#cd log  
NME-APA#cd..  
NME-APA#pwd  
NME-APA#script stop  
NME-APA#

Related Commands

Command
Description

script capture

 

service password-encryption

Enables password encryption, so that the password remains secret when the configuration file is displayed. Use the no form of this command to disable password encryption.

service password-encryption

no service password-encryption

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled (no encryption)

Command Modes

Global Configuration

Usage Guidelines

Passwords that were configured in an encrypted format are not deciphered when password encryption is disabled.

Authorization: admin

Examples

The following example shows the effect of enabling password encryption.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#enable password abcd  
NME-APA(config)#do more running-config  
#This is a general configuration file (running-config). 
#Created on 10:20:57 ISR TUE July 3 2001 
... 
enable password level 10 0 "abcd" 
... 
NME-APA(config)#service password-encryption  
NME-APA(config)#do more running-config  
#This is a general configuration file (running-config). 
#Created on 10:21:12 ISR TUE July 3 2001 
... 
service password-encryption 
enable password level 10 0 "e2fc714c4727ee9395f324cd2e7f331f" 
... 
NME-APA(config)#

Related Commands

Command
Description

enable password

 

service rdr-formatter

Enables/disables the RDR-formatter. The RDR-formatter is the element that formats the reports of events produced by the linecard and sends them to an external data collector. Use the no keyword of this command to disable the RDR-formatter.

service rdr-formatter

no service rdr-formatter

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of the service rdr-formatter command:

EXAMPLE 1:

The following example enables the RDR-formatter.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#service rdr-formatter  
NME-APA(config)#

EXAMPLE 2:

The following example disables the RDR-formatter.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no service rdr-formatter  
NME-APA(config)#

Related Commands

Command
Description

show rdr-formatter enabled

 

rdr-formatter category number

 

rdr-formatter destination

 

service telnetd

Enables the Telnet daemon. Use the no form of this command to disable the daemon preventing new users from accessing the NME-APA module via Telnet.

service telnetd

no service telnetd

Syntax Description

This command has no arguments or keywords.

Defaults

Telnet daemon enabled

Command Modes

Global Configuration

Usage Guidelines

Authorization: admin

Examples

The following examples illustrate the use of the service telnetd command:

EXAMPLE 1:

The following example enables the Telnet daemon.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#service telnetd  
NME-APA(config)#

EXAMPLE 2:

The following example disables the Telnet daemon.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#config 
NME-APA(config)#no service telnetd  
NME-APA(config)#

Related Commands

Command
Description

show telnet status

 

setup

Invokes the setup utility, which is a dialog, or series of questions, that guides the user through the basic configuration process. This utility runs automatically upon initial connection to the local terminal. The utility may also be invoked explicitly to make changes to the system configuration.

setup

Syntax Description

The setup command does not include parameters in the usual sense of the word. However, the setup utility questions prompt for many global configuration parameters. Following is a table listing all the parameter values that are necessary to complete the initial configuration. It is recommended that you obtain all these values before beginning the setup.

Parameter

Description

hostname

Character string used to identify the NME-APA module. Maximum length is 20 characters.

admin password

Admin level password.

Character string from 4-100 characters beginning with an alpha character.

root password

Root level password.

Character string from 4-100 characters beginning with an alpha character.

password encryption status

Enable or disable password encryption?

User Anonymous Group Settings

user anonymous group name

Character string used to identify the anonymous users group.

user anonymous group IP range

IP range of the anonymous users group in the format A.B.C.D/E

Time Settings

time zone name and offset

Standard time zone abbreviation and minutes offset from UTC.

local time and date

Current local time and date.

Use the format: 00:00:00 1 January 2007

SNTP Configuration

broadcast client status

Set the status of the SNTP broadcast client.

If enabled, the NME-APA synchronizes its local time with updates received from SNTP broadcast servers.

unicast query interval

Interval in seconds between unicast requests for update (64 - 1024).

unicast server IP address

IP address of the SNTP unicast server.

SNMP Configuration

SNMP agent status

Enable or disable SNMP management.

GET community names

Community strings to allow GET access and associated ACLs (maximum 20).

SET community names

Community strings to allow SET access and associated ACLs (maximum 20).

trap managers

Trap manager IP address, community string, and SNMP version (maximum 20).

Authentication Failure trap status

Sets the status of the Authentication Failure traps.

enterprise traps status

Sets the status of the enterprise traps.

system administrator

Name of the system administrator.


Command Modes

Privileged EXEC

Usage Guidelines

Following is a brief list of the parameters configured via the setup command:

Host ID parameters: hostname

Passwords: admin and root password, password encryption

Anonymous User Groups: anonymous user group name, anonymous user group IP range

Time settings: time zone, offset from UTC, local time and date

SNTP configuration: multicast client, unicast server, unicast query interval

SNMP configuration: Define the following:

GET community names (up to 20)

SET community names (up to 20)

trap managers (up to 20): IP address, community string, version

name of system manager

For a complete description of the command, see the Cisco Network Module Enhanced Application Performance Assurance User Guide.

Authorization: admin

Examples

The following example runs the setup utility.

NME-APA>enable 10 
Password:<cisco> 
NME-APA#setup  
--- System Configuration Dialog ---
At any point you may enter a question mark `?' followed by
`Enter' for help.
Use ctrl-C to abort configuration dialog at any prompt.
Use ctrl-Z to jump to the end of the configuration dialog at any
prompt.
Default settings are in square brackets `[]'.
Would you like to continue with the System Configuration Dialog?
[yes/no]: y 

show calendar

Displays the time maintained by the real-time system calendar clock.

show calendar

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the current system calendar.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show calendar  
12:50:03 GMT MON November 13 2005 
NME-APA>

Related Commands

Command
Description

calendar set

 

show clock

Displays the time maintained by the system clock.

show clock

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the current system clock.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show clock 
12:50:03 GMT MON November 13 2005 
NME-APA>

Related Commands

Command
Description

clock set

 

show failure-recovery operation-mode

Displays the operation mode to apply after boot resulted from failure.

show failure-recovery operation-mode

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example displays the failure recovery operation mode:

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show failure-recovery operation-mode  
System Operation mode on failure recovery is: operational 
NME-APA>

Related Commands

Command
Description

failure-recovery operation-mode

 

show hostname

Displays the currently configured hostname.

show hostname

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows that NME-APA1 is the current hostname.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show hostname  
NME-APA1 
NME-APA>

Related Commands

Command
Description

hostname

 

show hosts

Displays the default domain name, the address of the name server, and the content of the host table.

show hosts

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the domain and hosts configured.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show hosts  
Default domain is cisco.com 
Name/address lookup uses domain service 
Name servers are 10.1.1.60, 10.1.1.61 
Host   Address 
----   ------- 
PC85   10.1.1.61 
NME-APA>

Related Commands

Command
Description

hostname

 

ip domain-name

 

ip name-server

 

show interface fastethernet

Displays the details of a FastEthernet Interface.

show interface fastethernet slot-number/interface-number [counters [direction ]|duplex|speed|queue queue-number]

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.

interface-number

The FastEthernet interface number.

direction

Optional direction specification, to show only counters of a specific direction. Use in or out.

queue-number

Number of queue, in the range 0-3.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

The following keywords are relevant to the line interfaces (1 - 2) of the NME-APA module:

The duplex keyword displays the configured and actual duplex mode of the specified interface.

The speed keyword displays the configured and actual speed of the specified interface.

The counters keyword displays the values of counters for the specified line interface.

The queue keyword displays the bandwidth and burst size of the specified queue in the specified line interface.

Counter Definitions

Following are definitions of the counters displayed in the output of this command.

In total octets: Total number of inbound octets

In good unicast packets: Total number good inbound unicast packets

In good multicast packets: Total number of good inbound multicast packets

In good broadcast packets: Total number of good inbound broadcast packets

In packets discarded: Total number of inbound discarded packets

In packets with CRC/Alignment error: Total number of inbound packets with CRC or alignment errors

In undersized packets: Total number of inbound undersized packets

In oversized packets: Total number of inbound oversized packets

Out unicast packets: Total number of outbound unicast packets

Out non unicast packets: Total number of outbound non-unicast packets

Out packets discarded: Total number of outbound discarded packets

Authorization: viewer

Examples

The following examples illustrate the use of the show interface FastEthernet command:

EXAMPLE 1:

The following example shows the FastEthernet details for a line interface.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface fastethernet 0/1  
Configured speed: auto, configured duplex: auto 
AutoNegotiation is On, link is Up, actual speed: 100Mb/s, actual duplex: full 
Bandwidth: 100000 Kbps, Burst-size: 5000 bytes 
NME-APA>

EXAMPLE 2:

The following example shows the FastEthernet interface counters.

NME-APA>show interface fastethernet 0/1 counters  
In total octets: 191520 
In good unicast packets: 560 
In good multicast packets: 0 
In good broadcast packets: 0 
In packets discarded: 0 
In packets with CRC/Alignment error: 0 
In undersized packets: 0 
In oversized packets: 0 
Out total octets: 0 
Out unicast packets: 0 
Out non unicast packets: 0 
Out packets discarded: 0 
NME-APA>

EXAMPLE 3:

The following example shows the FastEthernet interface duplex mode configuration and status.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface fastethernet 0/1 duplex  
Configured duplex: auto 
AutoNegotiation is On, link is Up, actual duplex: half 
NME-APA>

EXAMPLE 4:

The following example shows the FastEthernet interface speed configuration and status.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface fastethernet 0/1 speed  
Configured speed: auto 
AutoNegotiation is On, link is Up, actual speed: 100 
NME-APA>

EXAMPLE 5:

The following example shows the FastEthernet interface queue number 1.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface fastethernet 0/1 queue 1 
Bandwidth: 100000 Kbps, Burst-size: 8000 bytes 
NME-APA>

Related Commands

Command
Description

interface fastethernet

 

show interface linecard

Displays information for a specific linecard Interface.

show interface linecard slot-number

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows how to use this command.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0  
The application assigned to slot 0 is /tffs0/app/eng30102.sli 
Silent is off 
Configured shutdown is off 
Shutdown due to sm-connection-failure is off 
Resulting current shutdown state is off 
NME-APA>

Related Commands

Command
Description

interface linecard

 

show interface linecard application

Displays the name of the application loaded on the Linecard Interface.

show interface linecard slot-number application

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the currently loaded application.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 application 
/tffs0/app/eng30102.sli 
NME-APA>

Related Commands

Command
Description

show interface linecard attack-detector

Displays the configuration of the specified attack detector.

show interface linecard slot-number attack-detector [default|all]

show interface linecard slot-number attack-detector attack-detector

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.

attack-detector

The number of the specific attack detector to be displayed.

all

Displays the configuration of all existing attack detectors

default

Displays the default attack detector configuration.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Use the all keyword to display the configuration of all existing attack detectors.

Use the default keyword to display default attack detector configuration.

The following information is displayed:

Protocol Side — Whether the attack detector applies to attacks originating at the user or network side.

Direction — Whether the attack detector applies to single sided or dual sided attacks.

Action to take if an attack is detected.

Thresholds:

open-flows-rate — Default threshold for rate of open flows (new open flows per second).

suspected-flows-rate — Default threshold for rate of suspected DDoS flows (new suspected flows per second).

suspected-flows-ratio — Default threshold for ratio of suspected flow rate to open flow rate.

User notification — enabled or disabled.

Alarm — sending an SNMP trap enabled or disabled.

Authorization: viewer

Examples

The following examples illustrate the show interface linecard attack-detector command:

EXAMPLE 1:

The following example displays the configuration of attack detector number 3.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 attack-detector 3  
Detector #3: 
Comment: 'Sample' 
Access-list: 1 
Effective only for TCP port(s) 21,23,80 
Effective for all UDP ports 
Protocol|Side|Direction ||Action| Thresholds  |Sub- |Alarm 
| |  || |Open flows|Ddos-Suspected flows|notif| 
| |  || |rate |rate |ratio | | 
--------|----|-----------||------|----------|------------|-------|-----|----- 
TCP |net.|source-only|| |  |  | | | 
TCP |net.|dest-only || |  |  | | | 
TCP |sub.|source-only|| |  |  | | | 
TCP |sub.|dest-only || |  |  | | | 
TCP |net.|source+dest|| |  |  | | | 
TCP |sub.|source+dest|| |  |  | | | 
TCP+port|net.|source-only||Block |  |  | | |Yes 
TCP+port|net.|dest-only || |  |  | | | 
TCP+port|sub.|source-only||Block |  |  | | |Yes 
TCP+port|sub.|dest-only || |  |  | | | 
TCP+port|net.|source+dest|| |  |  | | | 
TCP+port|sub.|source+dest|| |  |  | | | 
UDP |net.|source-only|| |  |  | | | 
UDP |net.|dest-only || |  |  | | | 
UDP |sub.|source-only|| |  |  | | | 
UDP |sub.|dest-only || |  |  | | | 
UDP |net.|source+dest|| |  |  | | | 
UDP |sub.|source+dest|| |  |  | | | 
UDP+port|net.|source-only|| |  |  | | | 
UDP+port|net.|dest-only || |  |  | | | 
UDP+port|sub.|source-only|| |  |  | | | 
UDP+port|sub.|dest-only || |  |  | | | 
UDP+port|net.|source+dest|| |  |  | | | 
UDP+port|sub.|source+dest|| |  |  | | | 
ICMP |net.|source-only|| |  |  | | | 
ICMP |net.|dest-only || |  |  | | | 
ICMP |sub.|source-only|| |  |  | |Yes | 
ICMP |sub.|dest-only || |  |  | | | 
other |net.|source-only|| |  |  | | | 
other |net.|dest-only || |  |  | | | 
other |sub.|source-only|| |  |  | | | 
other |sub.|dest-only || |  |  | | | 
Empty fields indicate that no value is set and configuration from 
the default attack detector is used. 
NME-APA>

EXAMPLE 2:

The following example displays the configuration of the default attack detector.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 attack-detector default  
Protocol|Side|Direction ||Action| Thresholds  |Sub- |Alarm 
| |  || |Open flows|Ddos-Suspected Flows|notif|  
| |  || |rate |rate |ratio | |  
--------|----|-----------||------|----------|------------|-------|-----|----- 
TCP |net.|source-only||Report| 1000|  500|50 |No |No  
TCP |net.|dest.-only ||Report| 1000|  500|50 |No |No  
TCP |sub.|source-only||Report| 1000|  500|50 |No |No  
TCP |sub.|dest.-only ||Report| 1000|  500|50 |No |No  
TCP |net.|source+dest||Report| 100|  50|50 |No |No  
TCP |sub.|source+dest||Report| 100|  50|50 |No |No  
TCP+port|net.|source-only||Report| 1000|  500|50 |No |No  
TCP+port|net.|dest.-only ||Report| 1000|  500|50 |No |No  
TCP+port|sub.|source-only||Report| 1000|  500|50 |No |No  
TCP+port|sub.|dest.-only ||Report| 1000|  500|50 |No |No  
TCP+port|net.|source+dest||Report| 100|  50|50 |No |No  
TCP+port|sub.|source+dest||Report| 100|  50|50 |No |No  
UDP |net.|source-only||Report| 1000|  500|50 |No |No  
UDP |net.|dest.-only ||Report| 1000|  500|50 |No |No  
UDP |sub.|source-only||Report| 1000|  500|50 |No |No  
UDP |sub.|dest.-only ||Report| 1000|  500|50 |No |No  
UDP |net.|source+dest||Report| 100|  50|50 |No |No  
UDP |sub.|source+dest||Report| 100|  50|50 |No |No  
UDP+port|net.|source-only||Report| 1000|  500|50 |No |No  
UDP+port|net.|dest.-only ||Report| 1000|  500|50 |No |No  
UDP+port|sub.|source-only||Report| 1000|  500|50 |No |No  
UDP+port|sub.|dest.-only ||Report| 1000|  500|50 |No |No  
UDP+port|net.|source+dest||Report| 100|  50|50 |No |No  
UDP+port|sub.|source+dest||Report| 100|  50|50 |No |No  
ICMP |net.|source-only||Report| 500|  250|50 |No |No  
ICMP |net.|dest.-only ||Report| 500|  250|50 |No |No  
ICMP |sub.|source-only||Report| 500|  250|50 |No |No  
ICMP |sub.|dest.-only ||Report| 500|  250|50 |No |No  
other |net.|source-only||Report| 500|  250|50 |No |No  
other |net.|dest.-only ||Report| 500|  250|50 |No |No  
other |sub.|source-only||Report| 500|  250|50 |No |No  
other |sub.|dest.-only ||Report| 500|  250|50 |No |No  
NME-APA>

Related Commands

Command
Description

attack-detector

 

attack-detector default

 

attack-detector <number>

 

show interface linecard attack-filter

Displays the attack filtering configuration.

show interface linecard slot-number attack-filter [option]

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.

option

See Usage Guidelines for the list of options.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Following is a list of options that may be displayed:

query IP configured : displays the configured threshold values and action as follows:

query single-sided IP ip-address configured: displays the configured threshold values and action for attack detection for a specified IP address (single-sided detection)

query dual-sided source-IP ip-address1 dest ip-address2 configured: displays the configured threshold values and action for attack detection between two specified IP addresses (dual-sided detection)

dest-port port#: displays the configured threshold values and action for the specified port. You can include this argument with both single-sided and dual-sided queries.

query IP current: displays the current counters for a specified attack detector for all protocols and attack directions as follows:

query single-sided IP ip-address current: displays the current counters for attack detection for a specified IP address (single-sided detection)

query dual-sided source-IP ip-address1 dest ip-address2 current: displays the current counters for attack detection between two specified IP addresses (dual-sided detection)

dest-port port #: displays the configured threshold values and action for the specified port. You can include this argument with both single-sided and dual-sided queries.

current-attacks: displays all currently handled attacks

counters: displays all attack detection counterd

dont-filter: displays all existing stopped attack filters

force-filter: displays all existing forced attack filters

user-notification ports: displays the list of user-notification ports

user-notification redirect: displays the configuration of user-notification redirection, such as the configured destination and dismissal URLs, and allowed hosts.

Authorization: viewer

Examples

The following examples illustrate the use of this command.

EXAMPLE 1:

The following example displays the configuration of attack detection between two specified IP addresses (dual-sided) for destination port 101.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 attack-filter 
query dual-sided source-IP 10.10.10.10 dest 10.10.10.145 dest-port 101 configured  
NME-APA>

EXAMPLE 2:

The following example displays all existing forced attack filters.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 attack-filter  
force-filter No force-filter commands are set for slot 0  
NME-APA>

EXAMPLE 3:

The following example displays the user notification ports.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 attack-filter 
user-notification ports  
Configured User notification ports: 100 
NME-APA>

Related Commands

Command
Description

attack-filter

 

show interface linecard counters

Displays the Linecard Interface counters.

show interface linecard slot-number counters [bandwidth] [cpu-utilization] [cpu-history] [all-active-users]

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Specify any of the optional keywords to display only the desired counters.

Authorization: viewer

Examples

The following example shows the hardware counters for the Linecard Interface.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 counters 
DP packets in: 100
DP packets out: 100
DP IP packets in: 90
DP Non-IP packets: 10
DP IP packets with CRC error: 0
DP IP packets with length error: 0
DP IP broadcast packets: 10
DP IP fragmented packets: 0
DP IP packets with TTL=0 error: 0
DP Non TCP/UDP packets: 10
DP TCP/UDP packets with CRC error: 0
FF counter #0: 0
FF counter #1: 0
FF counter #2: 0
FF counter #3: 0
... 
NME-APA>

Related Commands

Command
Description

clear interface linecard

 

show interface linecard duplicate-packets-mode

Displays the currently configured duplicate packets mode.

show interface linecard slot-number duplicate-packets-mode

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example illustrates the use of this command:

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 duplicate-packets-mode 
Packet duplication of flows due to Delay Sensitive <bundles>is enabled 
Packet duplication of flows due to No-Online-Control <set-flow>is enabled 
Packet duplication of flows due to No-Online-Control <set-flow>ratio percent is 70 
Packet duplication in case of shortage is enabled 
NME-APA>

Related Commands

Command
Description

show interface linecard flow-open-mode

Displays the currently configured flow open mode.

show interface linecard slot-number flow-open-mode

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example illustrates the use of this command.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 flow-open-mode 
Enhanced flow open mode is disabled 
NME-APA>

Related Commands

Command
Description

show interface linecard link mode

Displays the configured Linecard Interface link mode.

show interface linecard slot-number link mode

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the configured link mode for the Linecard Interface.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 link mode  
Link mode on port1-port2 
Current link mode is  :forwarding 
Actual link mode on active is :forwarding 
Actual link mode on failure is :monopath-bypass 
NME-APA>

Related Commands

Command
Description

link mode

 

show interface linecard link-to-port-mappings

Displays the link ID to port ID mappings.

show interface linecard slot-number link-to-port-mappings

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the link ID to port ID mapping for the Linecard Interface.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 link-to-port-mappings 
Link Id | Upstream Port <Out>| Downstream Port <Out> 
----------------------------------------------------------- 
0  | 0/2  | 0/1   
NME-APA>

Related Commands

Command
Description

show interface linecard shutdown

Displays the current shutdown state.

show interface linecard slot-number shutdown

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the linecard Interface silent mode.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 shutdown 
off 
NME-APA>

Related Commands

Command
Description

show interface linecard silent

Displays the current Linecard Interface silent state. When the silent state is Off, the linecard events reporting function is enabled.

show interface linecard slot-number silent

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the Linecard Interface silent mode.

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 silent  
off 
NME-APA>

Related Commands

Command
Description

silent

 

show interface linecard tos-marking

Displays the current linecard TOS marking table.

show interface linecard slot-number tos-marking

Syntax Description

slot-number

The number of the identified slot. Enter a value of 0.


Defaults

This command has no default settings.

Command Modes

User Exec

Usage Guidelines

Authorization: viewer

Examples

The following example shows the ToS marking table:

NME-APA>enable 5 
Password:<cisco> 
NME-APA>show interface linecard 0 tos-marking 
			BE	 AF1 	 AF2 	 AF3 	 AF4 	 FE 
green 		0x0 	0xa	 0x12	 0x1a	 0x22	 0x2e 
yellow		0x0 	0xc	 0x14	 0x1c	 0x24	 0x2e 
red 		0x0 	0xe	 0x16	 0x1e	 0x24	 0x2e 
NME-APA>

Related Commands

Command
Description

</