Table Of Contents
CLI Command Reference
?
aaa accounting commands
aaa authentication attempts
aaa authentication enable default
aaa authentication login default
application slot replace force completion
attack-detector default
attack-detector
attack-detector <number>
attack-detector TCP-port-list|UDP-port-list
attack-filter
attack-filter dont-filter | force-filter
attack-filter user-notification ports
bandwidth
calendar set
cd
clear arp-cache
clear interface linecard counters
clear interface linecard traffic-counter
clear interface linecard user
clear interface linecard user db counters
clear logger
clear management-agent notifications counters
clear rdr-formatter
clock read-calendar
clock set
clock summertime
clock timezone
clock update-calendar
configure
copy
copy ftp://
copy-passive
copy running-config startup-config
copy source-file ftp://
copy source-file startup-config
copy startup-config destination-file
default user template all
delete
dir
disable
do
enable
enable password
erase startup-config-all
exit
failure-recovery operation-mode
help
history
history size
hostname
interface fastethernet
interface linecard
ip advertising
ip domain-lookup
ip domain-name
ip filter fragment
ip filter monitor
ip ftp password
ip ftp username
ip host
ip name-server
ip radius-client retry limit
ip rpc-adapter
ip rpc-adapter port
ip rpc-adaptor security-level
line vty
link mode
logger add-user-message
logger device
logger device user-file-log max-file-size
logger get support-file
logger get user-log file-name
logout
management-agent sce-api logging
management-agent sce-api timeout
management-agent system
mkdir
more
more user-log
no user
no user anonymous-group
ping
pqi install file
pqi rollback file
pqi uninstall file
pqi upgrade file
pwd
queue
rdr-formatter category number
rdr-formatter destination
rdr-formatter forwarding-mode
rdr-formatter history-size
rdr-formatter rdr-mapping
reload
rename
rmdir
script capture
script print
script run
script stop
service password-encryption
service rdr-formatter
service telnetd
setup
show calendar
show clock
show failure-recovery operation-mode
show hostname
show hosts
show interface fastethernet
show interface linecard
show interface linecard application
show interface linecard attack-detector
show interface linecard attack-filter
show interface linecard counters
show interface linecard duplicate-packets-mode
show interface linecard flow-open-mode
show interface linecard link mode
show interface linecard link-to-port-mappings
show interface linecard shutdown
show interface linecard silent
show interface linecard tos-marking
show interface linecard traffic-counter
show interface linecard traffic-rule
show interface linecard user
show interface linecard user aging
show interface linecard user anonymous
show interface linecard user anonymous-group
show interface linecard user db counters
show interface linecard user mapping
show interface linecard user name
show interface linecard user properties
show interface linecard user templates
show inventory
show ip advertising
show ip filter
show ip radius-client
show ip rpc-adapter
show line vty
show log
show logger device
show pqi file
show pqi last-installed
show rdr-formatter
show rdr-formatter connection-status
show rdr-formatter counters
show rdr-formatter destination
show rdr-formatter enabled
show rdr-formatter forwarding-mode
show rdr-formatter history-size
show rdr-formatter rdr-mapping
show rdr-formatter statistics
show running-config
show snmp
show snmp community
show snmp contact
show snmp enabled
show snmp host
show snmp location
show snmp mib
show snmp traps
show sntp
show startup-config
show system operation-status
show system-uptime
show tacacs
show telnet sessions
show telnet status
show timezone
show users
show version
show version all
show version software
silent
snmp-server
snmp-server community
snmp-server contact
snmp-server enable traps
snmp-server host
snmp-server location
sntp broadcast client
sntp server
sntp update-interval
tacacs-server host
tacacs-server key
tacacs-server timeout
timeout
tracert
traffic-counter
traffic-rule
unzip
user aging
user anonymous-group export csv-file
user anonymous-group import csv-file
user export csv-file
user import csv-file
user name property
user template export csv-file
user template import csv-file
username
CLI Command Reference
This chapter contains all the CLI commands available on the NME-APA module.
Each command description is broken down into the following sub-sections:
Description
|
Description of what the command does.
|
Command Syntax
|
The general format of the command.
|
Syntax Description
|
Description of parameters and options for the command.
|
Default
|
If relevant, the default setting for the command.
|
Mode
|
The mode (command line) from which the command can be invoked.
|
Usage guidelines
|
Information about when to invoke the command and additional details.
|
Authorization
|
The level of user authorization required for using the command.
|
Example
|
An illustration of how the command looks when invoked. Because the interface is straightforward, some of the examples are obvious, but they are included for clarity.
|
Related Commands
|
Other commands that might be used in conjunction with the command.
|
Syntax and Conventions
The CLI commands are written in the following format: command required-parameter [optional-parameter]
no is an optional parameter that may appear before the command name.
When typing commands, you may enclose parameters in double-quote marks, and you must do so when there is a space within a parameter name.
?
Lists all of the commands available for the current command mode. You can also use the ? command to get specific information on a keyword or parameter. To obtain a list of commands that begin with a particular character string, enter the abbreviated command entry immediately followed by a question mark (?). This form of help is called partial help, because it lists only the keywords or arguments that begin with the abbreviation you entered.
?
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings
Command Modes
All
Usage Guidelines
To list a command's associated keywords or arguments, enter a question mark (?) in place of a keyword or parameter on the command line. This form of help is called argument help because it lists the keywords or arguments that apply based on the command, keywords, and arguments you have already entered.
Authorization: User
Examples
The following example shows ways of requesting help using the ? wildcard.
NME-APA(config)#ip ?
advertising Enable IP advertising or set parameters
domain-lookup Enables the IP DNS-based host name-to-address translation
domain-name Define a default domain name
host Add a host to the host table
name-server Specify the address of one or more name servers to use for name and address
resolution
radius-client RADIUS-Client settings
rpc-adapter Enable PRPC adapter or set attributes
NME-APA(config)#ip d?
default-gateway domain-lookup domain-name
NME-APA(config)#ip de?
default-gateway
NME-APA(config)#ip de
aaa accounting commands
Use the no form of the command to disable TACACS+ accounting.
aaa accounting commands level default stop-start group tacacs+
no aaa accounting commands level default
Syntax Description
level
|
The privilege level for which to enable the TACACS+ accounting
0: User
5: Viewer
10: Admin
15: Root
|
Defaults
By default, TACACS+ accounting is disabled.
Command Modes
Global Configuration
Usage Guidelines
If TACACS+ accounting is enabled, the NME-APA module sends an accounting message to the TACACS+ server after every command execution. The accounting message is logged in the TACACS+ server for the use of the network administrator.
The start-stop keyword (required) indicates that the accounting message is sent at the beginning and the end (if the command was successfully executed) of the execution of a CLI command.
Authorization: admin
Examples
The following example enables TACACS+ accounting for the admin privilege level (10).
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# aaa accounting commands 10 default stop-start group tacacs+
NME-APA(config)#
Related Commands
Command
|
Description
|
aaa authentication attempts
|
Sets the maximum number of login attempts that will be permitted before a Telnet session is terminated.
|
aaa authentication enable default
|
Specifies which privilege level authentication methods are to be used, and in what order of preference.
|
aaa authentication login default
|
Specifies which login authentication methods are to be used, and in what order of preference.
|
tacacs-server host
|
Defines a new TACACS+ server host that is available to the NME-APA module TACACS+ client.
|
tacacs-server key
|
Defines the global default encryption key for the TACACS+ server hosts.
|
aaa authentication attempts
aaa authentication attempts login number-of-attempts
Syntax Description
number-of-attempts
|
the maximum number of login attempts that will be permitted before the telnet session is terminated
|
Defaults
Default number-of-attempts = 3
Command Modes
Global Configuration
Usage Guidelines
The maximum number of login attempts is relevant only for Telnet sessions. From the local console, the number of re-tries is unlimited.
Authorization: admin
Examples
The following example shows how to set the maximum number of logon attempts to five.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# aaa authentication attempts login 5
NME-APA(config)#
Related Commands
Command
|
Description
|
aaa authentication accounting commands
|
Enables TACACS+ accounting.
|
aaa authentication enable default
|
Specifies which privilege level authentication methods are to be used, and in what order of preference.
|
aaa authentication login default
|
Specifies which login authentication methods are to be used, and in what order of preference.
|
aaa authentication enable default
Specifies which privilege level authentication methods are to be used, and in what order of preference. Use the no form of the command to delete the privilege level authentication methods list.
aaa authentication enable default method1 [method2...]
no aaa authentication enable default
Syntax Description
method
|
the privilege level authentication methods to be used. You may specify up to four different methods, in the order in which they are to be used.
|
Defaults
Default privilege level authentication method = enable only
Command Modes
Global Configuration
Usage Guidelines
Use this command to configure "backup" privilege level authentication methods to be used in the event of failure of the primary privilege level authentication method. The following method options are available:
•
group tacacs+ : Use TACACS+ authentication.
•
local : Use the local username database for authentication.
•
enable (default): Use the "enable" password for authentication
•
none : Use no authentication.
If the privilege level authentication methods list is deleted, the default privilege level authentication method only ( enable password) will be used. TACACS+ authentication will not be used.
Authorization: admin
Examples
This example shows how to configure privilege level authentication methods.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# aaa authentication enable default group tacacs+ enable none
NME-APA(config)#
Related Commands
Command
|
Description
|
aaa authentication login default
|
|
aaa authentication accounting commands
|
|
aaa authentication attempts
|
|
show tacacs
|
|
aaa authentication login default
Specifies which login authentication methods are to be used, and in what order of preference. Use the no form of the command to delete the login authentication methods list.
aaa authentication login default method1 [method2...]
no aaa authentication login default
Syntax Description
method
|
the login authentication methods to be used. You may specify up to four different methods, in the order in which they are to be used.
|
Defaults
Default login authentication method = enable only
Command Modes
Global Configuration
Usage Guidelines
Use this command to configure "backup" login authentication methods to be used in the event of failure of the primary login authentication method.
The following method options are available:
•
group tacacs+ : Use TACACS+ authentication.
•
local : Use the local username database for authentication.
•
enable (default): Use the "enable" password for authentication
•
none : Use no authentication.
If the login authentication methods list is deleted, the default login authentication method only (enable password) will be used. TACACS+ authentication will not be used.
Authorization: admin
Examples
This example shows how to configure login authentication methods.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# aaa authentication login default group tacacs+ enable none
NME-APA(config)#
Related Commands
Command
|
Description
|
aaa authentication enable default
|
|
aaa authentication accounting commands
|
|
aaa authentication attempts
|
|
show tacacs
|
|
application slot replace force completion
Forces the current application replace process to complete and immediately start finalization (killing all old flows).
application slot slot-number replace force completion
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example illustrates how to force the application replace operation to complete immediately.
NME-APA>enable 10
Password:<cisco>
NME-APA#application slot 0 replace force completion
NME-APA#
attack-detector default
Defines default thresholds and attack handling action. If a specific attack detector is defined for a particular situation (protocol/attack direction/side), it will override these defaults. Use the no version of this command to delete the user-defined defaults. The system defaults will then be used.
attack-detector default protocol protocol attack-direction attack-direction side side
[action action ] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows]
[suspected-flows-ratio suspected-flows-ratio] [notify-user | dont-notify-user]
[alarm | noalarm]
no attack-detector default protocol protocol attack-direction attack-direction side side
[action action] [open-flows open-flows] [ddos-suspected-flows ddos-suspected-flows]
[suspected-flows-ratio suspected-flows-ratio]
Syntax Description
protocol
|
TCP, UDP, IMCP, other
|
attack-direction
|
attack-source, attack-destination, both
|
side
|
user, network, both
|
action
|
report, block (block is not currently supported)
|
open-flows
|
Threshold for concurrently open flows (new open flows per second).
|
ddos-suspected-flows
|
Threshold for DDoS-suspected flows (new suspected flows per second).
|
suspected-flows-ratio
|
Threshold for ratio of suspected flow rate to open flow rate.
|
Defaults
The default values for the default attack detector are:
•
Action = Report
•
Thresholds — Varies according to the attack type
•
User notification = Disabled
•
Sending an SNMP trap = Disabled
Command Modes
LineCard Interface Configuration
Usage Guidelines
The following arguments must always be specified:
•
protocol
•
attack-direction
•
side
The following arguments are optional:
•
action
•
open-flows
•
ddos-suspected-flows
•
suspected-flows-ratio
Use the optional keywords as follows:
•
Use the notify-user keyword to enable user notification.
•
Use the dont-notify-user keyword to disable user notification.
•
Use the alarm keyword to enable sending an SNMP trap.
•
Use the no-alarm keyword to disable sending an SNMP trap.
Use the attack-detector <number> command to configure a specific attack detector.
Authorization: admin
Examples
The following examples illustrate the use of the attack-detector default command:
EXAMPLE 1
The following example configures a default attack detector for TCP flows from the attack source.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-detector default protocol TCP attack-direction attack-source
side both action report open-flows 500 ddos-suspected-flows 75 suspected-flows-ratio 50
NME-APA(config if)#
EXAMPLE 2
The following example enables user notification for the specified default attack detector.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-detector default protocol TCP attack-direction attack-source
side both notify-user
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector <number>
|
|
attack-filter user-notification ports
|
|
show interface LineCard attack-detector
|
|
attack-detector
Enables the specified attack detector and assigns an access control list (ACL) to it.
attack-detector number
Syntax Description
number
|
The attack detector number.
|
Defaults
This command has no default settings.
Command Modes
LineCard Interface Configuration
Usage Guidelines
Use the following commands to define the attack detector:
•
attack-detector <number>
Authorization: admin
Examples
The following example enables attack detector number "2".
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-detector 2
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector <number>
|
|
show interface LineCard attack-detector
|
|
attack-detector <number>
Configures a specific attack detector for a particular attack type (protocol/attack direction/side) with the assigned number. Use the default form of this command to configure the default attack detector for the specified attack type. Use the no form of this command to delete the specified attack detector.
attack-detector number protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all)
attack-direction attack-direction side side [action action ] [open-flows open-flows ]
[ddos-suspected-flows ddos-suspected-flows ] [suspected-flows-ratio suspected-flows-ratio ]
[notify-user|dont-notify-user] [alarm|no-alarm]
no attack-detector number
attack-detector default protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all)
attack-direction attack-direction side side [action action ] [open-flows open-flows ]
[ddos-suspected-flows ddos-suspected-flows ] [suspected-flows-ratio suspected-flows-ratio ]
[notify-user|dont-notify-user] [alarm|no-alarm]
no attack-detector default protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other|all)
attack-direction attack-direction side side
default attack-detector {all |all-numbered}
default attack-detector number protocol (((all | IMCP | other | TCP | UDP) [dest-port
destination port attack-direction attack-direction side side
Syntax Description
number
|
Assigned number for attack-detector
|
protocol
|
TCP, UDP, IMCP, other
|
destination port
|
{TCP and UDP protocols only): Defines whether the default attack detector applies to specific (port-based) or not specific (port-less) detections.
specific, not-specific, both
|
attack-direction
|
single-side-destination, single-side-both, dual-sided, all
|
side
|
user, network, both
|
action
|
report, block
|
open-flows-rate
|
Threshold for rate of open flows (new open flows per second).
|
suspected-flows-rate
|
Threshold for for rate of suspected DDoS flows (new suspected flows per second)
|
ssuspected-flows-ratio
|
Threshold for ratio of suspected flow rate to open flow rate.
|
Defaults
The default values for the default attack detector are:
•
Action = Report
•
Thresholds = Varies according to the attack type
•
User notification = Disabled
•
Sending an SNMP trap = Disabled
Command Modes
LineCard Interface Configuration
Usage Guidelines
If a specific attack detector is defined for a particular attack type, it will override the configured default attack detector.
The following arguments must always be specified:
•
protocol
•
attack-direction
•
side
The following arguments are optional:
•
action
•
open-flows
•
ddos-suspected-flows
•
suspected-flows-ratio
Use the appropriate keyword to enable or disable user notification by default:
•
notify-user : Enable user notification.
•
dont-notify-user: Disable user notification.
Use the appropriate keyword to enable or disable sending an SNMP trap by default:
•
alarm : Enable sending an SNMP trap.
•
no-alarm : Disable sending an SNMP trap.
If the selected protocol is either TCP or UDP, specify whether the destination port is specific, not specific, or both. If the destination port or ports are specific, the specific destination ports are configured using the attack-detector command.
Use the attack-detector command to enable a configured attack detector.
Use the attack-detector default command to configure a default attack detector.
Authorization: admin
Examples
The following examples illustrate the use of the attack-detector <number> command:
EXAMPLE 1
The following example configures the attack detector number "2".
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)# attack-detector 2 protocol UDP dest-port not-specific attack-direction
single-side-destination side both action block open-flows-rate 500 suspected-flows-rate
500 suspected-flows-ratio 50 notify-user alarm
NME-APA(config if)#
EXAMPLE 2
The following example deletes attack detector number "2".
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#no attack-detector 2
NME-APA(config if)#
EXAMPLE 3
The following example disables user notification for attack detector number "2".
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-detector 2 protocol UDP dest-port not-specific attack-direction
single-side-destination side both dont-notify-user
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector
|
|
attack-detector TCP-port-list|UDP-port-list
|
|
attack-filter user-notification ports
|
|
attack-detector default
|
|
show interface LineCard attack-detector
|
|
attack-detector TCP-port-list|UDP-port-list
Defines the list of destination ports for specific port detections for TCP or UDP protocols.
attack-detector <number> (tcp-port-list|udp-port-list) (all | (<port1> [<port2>...]) )
Syntax Description
number
|
Number of the attack detector for which this list of specific ports is relevant
|
port1, port2
|
List of up to 15 specific port numbers.
|
Defaults
This command has no default settings.
Command Modes
LineCard Interface Configuration
Usage Guidelines
TCP and UDP protocols may be configured for specified ports only (port-based). Use this command to configure the list of specified destination ports per protocol.
Up to 15 different TCP port numbers and 15 different UDP port numbers can be specified.
Configuring a TCP/UDP port list for a given attack detector affects only attack types that have the same protocol (TCP/UDP) and are port-based (i.e. detect a specific destination port). Settings for other attack types are not affected by the configured port list(s).
Specify either TCP-port-list or UDP-port-list.
Use the all keyword to include all ports in the list.
Authorization: admin
Examples
This example shows how to configure the destination port list for the TCP protocol for attack detector #10.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-detector 10 TCP-port-list 100 101 102 103
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector <number>
|
|
attack-filter
|
|
attack-filter
Enables specific attack detection for a specified protocol and attack direction. Use the no form of the command to disable attack detection.
attack-filter protocol [protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other)]
[attack-direction attack-direction]
no attack-filter protocol [protocol (((TCP|UDP) [dest-port destination port ])|ICMP|other)
[attack-direction attack-direction]
Syntax Description
protocol
|
TCP, UDP, IMCP, other
|
dest-port
|
{TCP and UDP protocols only): Defines whether the default attack detector applies to specific (port-based) or not specific (port-less) detections.
specific, not-specific, both
|
attack-direction
|
single-side-source, single-side-destination, single-side-both, dual-sided, all
|
side
|
user, network, both
|
Defaults
By default, attack-filter is enabled.
Default protocols = all protocols (no protocol specified)
Default attack direction = all directions
Default destination port = both port-based and port-less
Command Modes
LineCard Interface Configuration
Usage Guidelines
Specific attack filtering is configured in two steps:
•
Enabling specific IP filtering for the particular attack type (using this command).
•
Configuring an attack detector for the relevant attack type (using the attack-detector <number> command). Each attack detector specifies the thresholds that define an attack and the action to be taken when an attack is detected.
In addition, the user can manually override the configured attack detectors to either force or prevent attack filtering in a particular situation (using the attack-filter dont-filter | force-filter command).
By default, specific-IP detection is enabled for all attack types. You can configure specific IP detection to be enabled or disabled for a specific, defined situation only, depending on the following options:
•
For a selected protocol only.
•
For TCP and UDP protocols, for only port-based or only port-less detections.
•
For a selected attack direction, either for all protocols or for a selected protocol.
If the selected protocol is either TCP or UDP, specify whether the destination port is specific (port-based), not specific (port-less), or both. If the destination port or ports are specific, the specific destination ports are configured using the attack-detector TCP-port-list|UDP-port-list command.
Authorization: admin
Examples
The following examples illustrate the use of this command.
EXAMPLE 1
The following example shows how to enable specific, dual-sided attack detection for TCP protocol only.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#attack-filter protocol TCP dest-port specific attack-direction
dual-sided
NME-APA(config if)#
EXAMPLE 2
The following example shows how to enable single-sided attack detection for ICMP protocol only.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)# attack-filter protocol ICMP attack-direction single-side-source
NME-APA(config if)#
EXAMPLE 3
The following example disables attack detection for all non TCP, UDP, or ICMP protocols.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface LineCard 0
NME-APA(config if)#no attack-filter protocol other attack-direction all
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector TCP-port-list|UDP-port-list
|
|
attack-detector <number>
|
|
show interface LineCard attack-filter
|
|
attack-filter dont-filter | force-filter
This command prevents attack filtering for a specified IP address or protocol. If filtering is already in process, it is stopped. When attack filtering is stopped, it remains stopped until explicitly restored by another CLI command (either specific or general). Use theno form of this command to restore attack filtering. The force-filter keyword forces attack filtering for a specified IP address or protocol. When attack filtering is forced, it continues until explicitly stopped by another CLI command (either specific or general). Use the no form of this command to stop attack filtering.
attack-filter force-filter action action protocol ((TCP|UDP)
[dest-port (port-number | non-specific)] | ICMP | other)
attack-direction (((single-side-source | single-side-destination | single-side-both)
ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side
attack-filter dont-filter protocol ((TCP|UDP)
[dest-port (port-number | non-specific)] | ICMP | other)
attack-direction (((single-side-source | single-side-destination | single-side-both)
ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side
no attack-filter dont-filter protocol ((TCP|UDP)
[dest-port (port-number | non-specific) ] |ICMP | other)
attack-direction (((single-side-source | single-side-destination | single-side-both)
ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side
no attack-filter force-filter action action protocol ((TCP|UDP)
[dest-port (port-number | non-specific)] | ICMP | other)
attack-direction (((single-side-source | single-side-destination | single-side-both)
ip ip-address) | (dual-sided source-ip ip-address destination-ip ip-address)) side side
no attack-filter force-filter all
no attack-filter dont-filter all
Syntax Description
action
|
Defines whether to block the attack or to report it.
block or report
|
protocol
|
TCP, UDP, ICMP, or Other
|
dest-port
|
(TCP and UDP protocols only): Defines whether specific IP detection is forced or prevented for the specified port number or is port-less (non-specific).
port-number, not-specific
|
attack-direction
|
Defines whether specific IP detection is forced or prevented for single-sided or dual-sided attacks.
• Single-sided: specify the direction (single-side-source, single-side-destination, single-side-both) and the IP address.
• Dual-sided: Specify 'dual-sided' and both the source and the destination IP addresses.
|
ip-address
|
IP address from which traffic will not be filtered.
• For single-sided filtering, only one IP address is specified.
• For dual-sided filtering, both a source IP address and a destination IP address are specified.
|
side
|
user, network, both
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
After configuring the attack detectors, the NME-APA module automatically detects attacks and handles them according to the configuration. However, there are scenarios in which a manual intervention is desired, either for debug purposes, or because it is not trivial to reconfigure the NME-APA attack-detectors properly.
The user can use the CLI attack filtering commands to do the following:
•
Prevent or stop filtering of an attack related to a protocol, direction, and specified IP address
•
Force filtering of an attack related to a protocol, direction, and specified IP address
Attack filtering can be prevented for a specified IP address or protocol by executing a dont-filter CLI command. If filtering is already in process, it is stopped. When attack filtering has been stopped, it remains stopped until explicitly restored by another CLI command (either force-filter or no dont-filter).
Use the all keyword to restore or stop all filtering.
Authorization: admin
Examples
The following are examples of the attack-filter command:
EXAMPLE 1
The following example prevents attack filtering for the specified conditions.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#attack-filter dont-filter protocol other attack-direction
single-side-source ip 10.10.10.10 side both
NME-APA(config if)#
EXAMPLE 2:
The following example restores all attack filtering.
NME-APA>enable 10
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#no attack-filter dont-filter all
NME-APA(config if)#
Password:<cisco>
EXAMPLE 3:
The following example forces attack filtering.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#attack-filter force-filter action block protocol TCP dest-port
not-specific attack-direction dual-sided source-ip 10.10.10.10 destination-ip 20.20.20.20
side both
NME-APA(config if)#
EXAMPLE 4:
The following example stops all forced attack filtering.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#no attack-filter force-filter all
NME-APA#
Related Commands
Command
|
Description
|
attack-filter
|
|
attack-filter user-notification ports
Specifies a port as user notification port. TCP traffic from the user side to this port will never be blocked by the attack filter, leaving it always available for user notification. Use the no form of this command to remove the port from the user notification port list.
attack-filter user-notification ports port
no attack-filter user-notification ports port
Syntax Description
port
|
Port number. One port can be specified as the user notification port.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Use this command to configure the port to be used for user notification as configured using the attack-filter and attack-detector <number> commands.
Authorization: admin
Examples
The following example specifies port 100 as the user notification port.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#attack-filter user-notification ports 100
NME-APA(config if)#
Related Commands
Command
|
Description
|
attack-detector default
|
|
attack-detector <number>
|
|
show interface linecard attack-filter
|
|
bandwidth
Sets Ethernet shaping for the FastEthernet line interfaces.
bandwidth bandwidth burst-size burstsize
Syntax Description
bandwidth
|
Bandwidth measured in kbps.
|
burstsize
|
Burst size in bytes.
|
Defaults
bandwidth = 100000K (100 Mbps)
burst-size = 5000 (5K bytes)
Command Modes
FastEthernet Interface Configuration
Usage Guidelines
This command is valid for a specified FastEthernet line interface only. It must be executed explicitly for each interface.
Authorization: admin
Examples
This example sets bandwidth and burst size for a Fast Ethernet line interface (0/1)
NME-APA config
NME-APA(config)#interface FastEthernet 0/1
NME-APA(config-if)#bandwidth 100000 burstsize 5000
NME-APA(config-if)#
Related Commands
Command
|
Description
|
interface fastethernet
|
|
queue
|
|
calendar set
Sets the system calendar. The calendar is a system clock that continues functioning even when the system shuts down.
calendar set hh:mm:ss day month year
Syntax Description
hh:mm:ss
|
Current local time in hours in 24-hour format, minutes and seconds (HH:MM:SS).
|
day
|
Current day (date) in the month.
|
month
|
Current month (by three-letter abbreviated name).
|
year
|
Current year using a 4-digit number.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Always coordinate between the calendar and clock by using the clock read-calendar command after setting the calendar.
Authorization: admin
Examples
The following example sets the calendar to 20 minutes past 10 AM, January 13, 2006, synchronizes the real-time clock to the calendar time, and displays the result.
NME-APA>enable 10
Password:<cisco>
NME-APA#calendar set 10:20:00 13 jan 2006
NME-APA#clock read-calendar
NME-APA#show calendar
10:20:03 UTC THU January 13 2006
NME-APA#show clock
10:20:05 UTC THU January 13 2006
NME-APA#
Related Commands
Command
|
Description
|
clock read-calendar
|
|
clock set
|
|
clock update-calendar
|
|
clock timezone
|
|
clock summertime
|
|
show calendar
|
|
show clock
|
|
cd
Changes the path of the current working directory.
cd new-path
Syntax Description
new-path
|
The path name of the new directory. This can be either a full path or a relative path.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The new path should already have been created in the local flash file system.
Authorization: admin
Examples
The following example shows the current directory (root directory) and then changes the directory to the log directory located under the root directory.
NME-APA>enable 10
Password:<cisco>
NME-APA#pwd
tffs0
NME-APA#cd log
NME-APA#pwd
tffs0:log
NME-APA#
Related Commands
Command
|
Description
|
pwd
|
|
mkdir
|
|
clear arp-cache
Deletes all dynamic entries from the ARP cache. The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses to physical addresses. Dynamic entries are automatically added to and deleted from the cache during normal use. Entries that are not reused age and expire within a short period of time. Entries that are reused have a longer cache life.
clear arp-cache
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears the ARP cache.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear arp-cache
NME-APA#
clear interface linecard counters
Clears the linecard Interface counters.
clear interface linecard slot-number counters
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears the Line-Card 0 counters.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear interface linecard 0 counters
NME-APA#
Related Commands
Command
|
Description
|
show interface linecard counters
|
|
clear interface linecard traffic-counter
Clears the specified traffic counter.
clear interface linecard slot-number traffic-counter (name | all)
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
name
|
Name of the traffic counter to be cleared.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use the all keyword to clear all traffic counters.
Authorization: admin
Examples
The following example clears the traffic counter name counter1.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear interface linecard 0 traffic-counter name counter1
NME-APA#
Related Commands
Command
|
Description
|
traffic-counter
|
|
show interface linecard traffic-counter
|
|
clear interface linecard user
Clears all anonymous users in the system.
clear interface linecard slot-number user anonymous all
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears all anonymous users.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear interface linecard 0 user anonymous all
NME-APA#
Related Commands
Command
|
Description
|
no user
|
|
no user anonymous-group
|
|
show interface linecard user anonymous
|
|
clear interface linecard user db counters
Clears the "total" and "maximum" users database counters.
clear interface linecard slot-number user db counters
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears all anonymous users.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear interface linecard 0 user db counters
NME-APA#
Related Commands
Command
|
Description
|
show interface linecard user db counters
|
|
clear logger
Clears NME-APA module logger (user log files). This erases the information stored in the user log files.
clear logger [device user-file-log|line-attack-file-log ] [counters|nv-counters]
Syntax Description
device
|
The device name to be cleared, either user-file-log or line-attack-file-log
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The user log files have a size limit, with new entries overwriting the oldest entries. Therefore, there is no need to regularly clear the log files. Use this operation when you are certain that the information contained in the logs is irrelevant and might be confusing (for example, when re-installing the system at a new site, whose administrators should not be confused with old information).
•
Use the counters keyword to clear the counters of the NME-APA module logger (user log files). These counters keep track of the number of info, warning, error and fatal messages.
•
Use the nv-counters keyword to clear the non-volatile counters for the entire log or only the specified NME-APA module. These counters are not cleared during bootup, and must be cleared explicitly by using this command.
Authorization: admin
Examples
EXAMPLE 1:
The following example clears the NME-APA module user log file.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear logger device User-File-Log
Are you sure?Y
NME-APA#
EXAMPLE 2:
The following example clears the NME-APA module user log file counters.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear logger device User-File-Log counters
Are you sure?Y
NME-APA#
EXAMPLE 3:
The following example clears the user log file non-volatile counters.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear logger device user-file-log nv-counters
Are you sure?Y
NME-APA#
Related Commands
Command
|
Description
|
show logger device
|
|
show log
|
|
clear management-agent notifications counters
Clears the counters for the number of notifications sent to the management agent
clear management-agent notifications counters
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears the management agent notifications counters.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear management-agent notifications counters
NME-APA#
Related Commands
clear rdr-formatter
Clears the RDR formatter counters and statistics.
clear rdr-formatter
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example clears the RDR-formatter counters.
NME-APA>enable 10
Password:<cisco>
NME-APA#clear rdr-formatter
NME-APA#
Related Commands
Command
|
Description
|
show rdr-formatter counters
|
|
clock read-calendar
Synchronizes clocks by setting the system clock from the calendar.
clock read-calendar
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example updates the system clock from the calendar.
NME-APA>enable 10
Password:<cisco>
NME-APA#clock read-calendar
NME-APA#
Related Commands
Command
|
Description
|
calendar set
|
|
clock update-calendar
|
|
show calendar
|
|
show clock
|
|
clock set
Manually sets the system clock.
clock set hh:mm:ss day month year
Syntax Description
hh:mm:ss
|
Current local time in hours in 24-hour format, minutes and seconds (HH:MM:SS).
|
day
|
Current day (date) in the month.
|
month
|
Current month (by three-letter abbreviated name).
|
year
|
Current year using a 4-digit number.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Always coordinate between the calendar and clock by using the clock update-calendar command after setting the clock.
Authorization: admin
Examples
The following example sets the clock to 20 minutes past 10 PM, January 13, 2006.
NME-APA>enable 10
Password:<cisco>
NME-APA#clock set 22:20:00 13 jan 2006
NME-APA#clock update-calendar
NME-APA#show clock
22:21:10 UTC THU January 13 2006
NME-APA#show calendar
22:21:18 UTC THU January 13 2006
NME-APA#
Related Commands
Command
|
Description
|
clock update-calendar
|
|
show calendar
|
|
show clock
|
|
clock summertime
Configures the NME-APA module to automatically switch to daylight savings time on a specified date, and also to switch back to standard time. In addition, the time zone code can be configured to vary with daylight savings time if required. (For instance, in the eastern United States, standard time is designated EST, and daylight savings time is designated EDT). Use the no form of this command to cancel the daylight savings time transitions configuration.
clock summertime
no clock summertime
Syntax Description
zone
|
The code for the time zone for daylight savings.
|
week1/week2
|
The week of the month on which daylight savings begins (week1) and ends (week2). A day of the week, such as Monday, must also be specified. The week/day of the week is defined for a recurring configuration only.
Default: Not used
|
day1/day2
|
The day of the week on which daylight savings begins (day1) and ends (day2).
For recurrent configuration: day is a day of the week, such as Sunday.
Use the keywords first/last to specify the occurrence of a day of the week in a specified month. For example: last Sunday March.
For non-recurrent configuration: day is a day in the month, such as 28.
Default: day1 = second Sunday, day2 = first Sunday
|
month1/month2
|
The month in which daylight savings begins (month1) and ends (ends2).
Default: month1 = March, month2 = November
|
year1/year2
|
The year in which daylight savings begins (month1) and ends (ends2).
For non -recurring configuration only.
Default = not used
|
time1/time2
|
The time of day (24-hour clock) at which daylight savings begins (time1) and ends (time2).
Required for all configurations. Default: time1/time2 = 2:00
|
offset
|
The difference in minutes between standard time and daylight savings time.
Default = 60
|
Defaults
recurring, offset = 60 minutes
By default, the following recurrent time changes are configured:
•
Daylight savings time begins: 2:00 (AM) on the second Sunday of March.
•
Daylight savings time ends: 2:00 (AM) on the first Sunday of November.
Command Modes
Global Configuration
Usage Guidelines
The format of the command varies somewhat, depending on how the dates for the beginning and end of daylight savings time are determined for the particular location:
•
recurring: If daylight savings time always begins and ends on the same day every year, (as in the United States):
–
Use the clock summer-time recurring command.
–
The year parameter is not used.
•
not recurring: If the start and end of daylight savings time is different every year, (as in Israel):
–
Use the clock summer-time command.
–
The year parameter must be specified.
General guidelines for configuring daylight savings time transitions:
•
Specify the time zone code for daylight savings time.
•
recurring: specify a day of the month (week#|first|last/day of the week/month).
•
not recurring: specify a date (month/day of the month/year).
•
Define two days:
–
Day1 = beginning of daylight savings time.
–
Day2 = end of daylight savings time.
In the Southern hemisphere, month2 must be before month1, as daylight savings time begins in the fall and ends in the spring.
•
Specify the exact time that the transition should occur (24 hour clock).
–
Time of transition into daylight savings time: according to local standard time.
–
Time of transition out of daylight savings time: according to local daylight savings time.
For the clock summer-time recurring command, the default values are the United States transition rules:
•
Daylight savings time begins: 2:00 (AM) on the second Sunday of March.
•
Daylight savings time ends: 2:00 (AM) on the first Sunday of November.
Use the recurring keyword if daylight savings time always begins and ends on the same day every year.
Use the first/last keywords to specify the occurrence of a day of the week in a specified month: For example: last Sunday March.
Use a specific date including the year for a not recurring configuration. For example: March 29, 2004.
Use week/day of the week/month (no year) for a recurring configuration:
•
Use first/last occurrence of a day of the week in a specified month. For example: last, Sunday, March (the last Sunday in March).
•
Use the day of the week in a specific week in a specified month. For example: 4,Sunday, March (the fourth Sunday in March). This would be different from the last Sunday of the month whenever there were five Sundays in the month.
Authorization: admin
Examples
The following examples illustrate the use of this command.
EXAMPLE 1
The following example shows how to configure recurring daylight savings time for a time zone designated "DST" as follows:
•
Daylight savings time begins: 0:00 on the last Sunday of March.
•
Daylight savings time ends: 23:59 on the Saturday of fourth week of November.
•
Offset = 1 hour (default)
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#clock summer-time DST
recurring last Sunday March 00:00 4 Saturday November 23:59
NME-APA(config)#
EXAMPLE 2
The following example shows how to configure non-recurring daylight savings time for a time zone designated "DST" as follows:
•
Daylight savings time begins: 0:00 on April 16, 2007.
•
Daylight savings time ends: 23:59 October 23, 2007.
•
Offset = 1 hour (default)
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#clock summer-time DST April 16 2005 00:00 October 23 2005 23:59
NME-APA(config)#
EXAMPLE 3
The following example shows how to cancel the daylight savings configuration.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no clock summer-time
NME-APA(config)#
Related Commands
Command
|
Description
|
clock set
|
|
calendar set
|
|
show calendar
|
|
show clock
|
|
clock timezone
Sets the time zone. Use the no version of this command to remove current time zone setting. The purpose of setting the time zone is so that the system can correctly interpret time stamps data coming from systems located in other time zones.
clock timezone zone hours [minutes]
no clock timezone
Syntax Description
zone
|
The name of the time zone to be displayed.
|
hours
|
The hours offset from UTC. This must be an integer in the range -23 to 23.
|
minutes
|
The minutes offset from UTC. This must be an integer in the range of 0 to 59. Use this parameter to specify an additional offset in minutes when the offset is not measured in whole hours.
|
Defaults
UTC (hours = 0)
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example sets the time zone to Pacific Standard Time with an offset of 10 hours behind UTC.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#clock timezone PST -10
NME-APA(config)#
Related Commands
Command
|
Description
|
calendar set
|
|
clock set
|
|
show calendar
|
|
clock update-calendar
Synchronizes clocks by setting the calendar from the system clock.
clock update-calendar
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example updates the calendar according to the clock.
NME-APA>enable 10
Password:<cisco>
NME-APA#clock update-calendar
NME-APA#
Related Commands
Command
|
Description
|
clock set
|
|
calendar set
|
|
clock read-calendar
|
|
show calendar
|
|
show clock
|
|
configure
Enables the user to move from Privileged Exec Mode to Configuration Mode.
configure
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
After the user enters the configure command, the system prompt changes from <host-name># to <host-name>(config)#, indicating that the system is in Global Configuration Mode. To leave Global Configuration Mode and return to the Privileged Exec Mode prompt, use the exit command.
Authorization: admin
Examples
The following example enters the Global Configuration Mode.
NME-APA>enable 10
Password:<cisco>
NME-APA#configure
NME-APA(config)#
Related Commands
copy
Copies any file from a source directory to a destination directory on the local flash file system.
copysource-file destination-file
Syntax Description
source-file
|
The name of the original file.
|
destination-file
|
The name of the new destination file.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Both file names should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.
Authorization: admin
Examples
The following example copies the local analysis.sli file located in the root directory to the applications directory.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy analysis.sli applications/analysis.sli
NME-APA#
Related Commands
Command
|
Description
|
copy ftp://
|
|
copy-passive
|
|
copy ftp://
Downloads a file from a remote station to the local flash file system, using FTP.
copy ftp://username[:password]@server-address[:port]/path/source-file destination-file
Syntax Description
username
|
The username known by the FTP server.
|
password
|
The password of the given username.
|
server-address
|
The dotted decimal IP address of the FTP server.
|
port
|
Optional port number on the FTP server.
|
source-file
|
The name of the source file located in the on the server.
|
destination-file
|
The name of the file to be saved in the local flash file system. The file should be in 8.3 format, that is eight characters, dot, then three characters.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use the following syntax for remote upload/download using FTP:
ftp://username[:password]@server-address[:port]/path/file
You can configure keyword shortcuts for the copy command using the following commands:
•
ip ftp password to configure a password shortcut.
•
ip ftp username to configure a username shortcut.
Authorization: admin
Examples
The following example downloads the ftp.sli file from the host 10.10.10.10 with user name "user" and password "a1234".
NME-APA>enable 10
Password:<cisco>
NME-APA#copy ftp://user:a1234@10.10.10.10/p:/applications/ftp.sli
NME-APA#
Related Commands
Command
|
Description
|
copy-passive
|
|
ip ftp password
|
|
ip ftp username
|
|
copy-passive
Uploads or downloads a file using passive FTP.
copy-passive source-file ftp://username[:password]@server-address[:port]/path/destination-file
[overwrite]
Syntax Description
source-file
|
The name of the source file located in the local flash file system.
|
username
|
The username known by the FTP server.
|
password
|
The password of the given username.
|
server-address
|
The password of the given username.
|
port
|
Optional port number on the FTP server.
|
destination-file
|
The name of the file to be created in the FTP server.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use the following format for remote upload/download using FTP: ftp://username[:password]@serveraddress[:port]/path/file
Use the overwrite keyword to permit the command to overwrite an existing file.
You can configure keyword shortcuts for the copy command using the following commands:
•
ip ftp password to configure a password shortcut.
•
ip ftp username to configure a username shortcut.
Authorization: admin
Examples
The following example performs the same operation as the previous copy ftp example using passive FTP.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy-passive appl/analysis.sli
ftp://myname:mypw@10.1.1.105/p:/applications/analysis.sli
NME-APA#
Related Commands
Command
|
Description
|
copy ftp://
|
|
ip ftp password
|
|
ip ftp username
|
|
copy running-config startup-config
Builds a configuration file with general configuration commands called config.txt, which is used in successive boots.
copy running-config startup-config
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
This command must be entered to save newly configured parameters, so that they will be effective after a reboot. You can view the running configuration before saving it using the more running-config command.
The old configuration file is automatically saved in the tffs0:system/prevconf directory.
Authorization: admin
Examples
The following example saves the current configuration for successive boots.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy running-config startup-config
Backing-up configuration file...
Writing configuration file...
NME-APA#
Related Commands
Command
|
Description
|
more
|
|
show running-config
|
|
copy source-file ftp://
Uploads a file to a remote station, using FTP.
copy source-file ftp://username[:password]@server-address[:port]/path/destination-file
Syntax Description
source-file
|
The name of the source file located in the local flash file system.
|
username
|
The username known by the FTP server.
|
password
|
The password of the given username.
|
server-address
|
The dotted decimal IP address.
|
port
|
Optional port number on the FTP server.
|
destination-file
|
The name of the file to be created in the FTP server.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use the following format for remote upload/download using FTP: ftp://username[:password]@serveraddress[:port]/path/file
You can configure keyword shortcuts for the copy command using the following commands:
•
ip ftp password to configure a password shortcut.
•
ip ftp username to configure a username shortcut.
Authorization: admin
Examples
The following example uploads the analysis.sli file located on the local flash file system to the host 10.1.1.105.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy /appl/analysis.sli ftp://myname:mypw@10.1.1.105/p:/applications/analysis.sli
NME-APA#
Related Commands
Command
|
Description
|
copy ftp://
|
|
copy source-file startup-config
Copies the specified source file to the startup-config file. Use this command to upload a backup configuration file created using the copy startup-config destination-file command. This is useful in a cascaded solution for copying the configuration from one NME-APA module to the other.
copy source-file startup-config
Syntax Description
source-file
|
The name of the backup configuration file.
• ftp://user:pass@host/drive:/dir/bckupcfg.txt
• /tffs0
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The source file name should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.
Authorization: admin
Examples
The following example shows how to upload a backup configuration file.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy ftp://user:pass@host/drive:/dir/bakupcfg.txt startup-config
NME-APA#
Related Commands
Command
|
Description
|
copy startup-config destination-file
|
|
copy startup-config destination-file
Copies the startup-config file to the specified destination file. Use this command to create a backup configuration file. This is useful in a cascaded solution for copying the configuration from one NME-APA module to the other. The file created by this command can then be uploaded to the second NME-APA module using the copy source-file startup-config command.
copy startup-config destination-file
Syntax Description
destination-file
|
The name of the file to which the configuration is copied.
• ftp://user:pass@host/drive:/dir/bckupcfg.txt
• /tffs0
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The destination file name should be in 8.3 format, that is, there are a maximum of 8 characters before the period and three characters following it.
Authorization: admin
Examples
The following example shows how to create a backup configuration file.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy startup-config ftp://user:pass@host/drive:/dir/bckupcfg.txt
NME-APA#
Related Commands
Command
|
Description
|
copy source-file startup-config
|
|
default user template all
Removes all user-defined user templates from the system. The default template only remains.
default user template all
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Authorization: admin
Examples
The following example removes all user-defined user templates.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)# default user template all
NME-APA(config if)#
Related Commands
Command
|
Description
|
user template import csv-file
|
|
show interface linecard user templates
|
|
party template
|
|
delete
Deletes a file from the local flash file system. Use the recursive switch to delete a complete directory and its contents. When used with the recursive switch, the filename argument specifies a directory rather than a file.
delete file-name [/recursive]
Syntax Description
file-name
|
The name of the file or directory to be deleted.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate how to use this command:
EXAMPLE 1:
The following example deletes the oldlog.txt file.
NME-APA>enable 10
Password:<cisco>
NME-APA#delete oldlog.txt
NME-APA#
EXAMPLE 2:
The following example deletes the oldlogs directory.
NME-APA>enable 10
Password:<cisco>
NME-APA#delete oldlogs /recursive
3 files and 1 directories will be deleted.
Are you sure? y
3 files and 1 directories have been deleted.
NME-APA#
Related Commands
Command
|
Description
|
dir
|
|
rmdir
|
|
dir
Displays the files in the current directory.
dir [applications] [-r]
Syntax Description
applications
|
Filters the list of files to display only the application files in the current directory.
|
-r
|
Includes all files in the subdirectories of the current directory as well as the files in the current directory.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example displays the files in the current directory (root).
NME-APA>enable 10
Password:<cisco>
NME-APA#dir
File list for /tffs0/
512TUE JAN 01 00:00:00 1980LOGDBG DIR
512TUE JAN 01 00:00:00 1980LOG DIR
7653 TUE JAN 01 00:00:00 1980FTP.SLI
29 TUE JAN 01 00:00:00 1980SCRIPT.TXT
512 TUE JAN 01 00:00:00 1980SYSTEM DIR
NME-APA#
Related Commands
Command
|
Description
|
pwd
|
|
cd
|
|
disable
Moves the user from a higher level of authorization to a lower user level.
disable [level ]
Syntax Description
level
|
User authorization level (0, 5, 10, 15) as specified in CLI Authorization Levels.
|
Defaults
This command has no default settings.
Command Modes
Privileged Exec and Viewer
Usage Guidelines
Use this command with the level option to lower the user privilege level, as illustrated in the following figure. If a level is not specified, it defaults to User mode.
Figure 1 Disable Command
Note that you must exit to the Privileged Exec command mode to use this command.
Authorization: user
Examples
The following example shows how to change from root to admin mode:
NME-APA>enable 15
Password:<cisco>
NME-APA#>disable 10
NME-APA#
Related Commands
Command
|
Description
|
enable
|
|
do
Use the do command to execute an EXEC mode command (such as a show command) or a privileged EXEC command (such as show running-config) without exiting to the relevant command mode.
do command
Syntax Description
command
|
Command to be executed.
|
Defaults
This command has no default settings.
Command Modes
All configuration modes
Usage Guidelines
Use this command when in any configuration command mode (global configuration, linecard configuration, or any interface configuration) to execute a user exec or privileged exec command.
Enter the entire command with all parameters and keywords as you would if you were in the relevant command mode.
Authorization: admin
Examples
The following example assumes that the user has navigated to the interface configuration mode to perform some configuration tasks. The do command is used to avoid having to exit to the user exec mode.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#do show system-uptime
NME-APA uptime is 20 hours, 43 minutes, 37 seconds
NME-APA(config if)#
Related Commands
enable
Enables the user to access a higher authorization level.
enable [level]
Syntax Description
level
|
User authorization level (0, 5, 10, 15) as specified in "CLI Authorization Levels".
|
Defaults
level = admin
Command Modes
User Exec
Usage Guidelines
Authorization levels are illustrated in the following figure
Figure 2 Enable Command
If a level is not specified, the level defaults to admin authorization, level 10.
Note that you cannot use the enable command from the Privileged Exec or any of the configuration command modes.
Authorization: User
Examples
The following example accesses the administrator authorization level. Note that the prompt changes from NME-APA> to NME-APA#, indicating that the level is the administrator privilege level.
NME-APA>enable
Password:<cisco>
NME-APA#
Related Commands
Command
|
Description
|
disable
|
|
enable password
|
|
enable password
Configures a password for the specified authorization level, thus preventing unauthorized users from accessing the NME-APA module. Use theno form of the command to disable the password for the specified authorization level.
enable password [level level] [encryption-type] password
no enable password [level level]
Syntax Description
level
|
User authorization level (0, 5, 10, 15) as specified in "CLI Authorization Levels". If no level is specified, the default is Admin (10).
|
encryption-type
|
If you want to enter the encrypted version of the password, set the encryption type to 5, to specify the algorithm used to encrypt the password.
|
password
|
A regular or encrypted password set for the access level. If you specify encryption-type, you must supply an encrypted password.
|
Defaults
password = cisco
Command Modes
Global Configuration
Usage Guidelines
After the command is entered, any user executing the enable command must supply the specified password.
•
Passwords must be at least 4 and no more than 100 characters long.
•
Passwords can contain any printable characters.
•
Passwords must begin with a letter.
•
Passwords cannot contain spaces.
•
Passwords are case-sensitive.
Authorization: admin
Examples
The following example sets a level 10 password as a123*man.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#enable password level 10 a123*man
NME-APA(config)#
Related Commands
Command
|
Description
|
enable
|
|
service password-encryption
|
|
erase startup-config-all
Removes all current configuration by removing all configuration files.
erase startup-config-all
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The following data is deleted by this command:
•
General configuration files
•
Application configuration files
•
Static party DB files
•
Management agent installed MBeans
After using this command, the NME-APA module should be reloaded immediately to ensure that it returns to the 'factory default' state.
You can use the copy startup-config destination-file command to create a backup of the current configuration before it is deleted.
Authorization: admin
Examples
The following example shows how to erase the startup configuration.
NME-APA>enable 10
Password:<cisco>
NME-APA#erase startup-config-all
Related Commands
Command
|
Description
|
reload
|
|
copy startup-config destination-file
|
|
exit
Exits from the current mode to the next "lower" mode.
exit
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
All
Usage Guidelines
Use this command each time you want to exit a mode, as illustrated in the following figure. The system prompt changes to reflect the lower-level mode.
Figure 3 Exit Command
Authorization: admin
Examples
The following example exits from the Linecard Interface Configuration Mode to Global Configuration Mode and then to Privileged Exec and Viewer Modes.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#exit
NME-APA(config)#exit
NME-APA#
Related Commands
Command
|
Description
|
configure
|
|
interface fastethernet
|
|
interface linecard
|
|
line vty
|
|
failure-recovery operation-mode
Specifies the operation mode to be applied after boot resulting from failure. When using the default switch, you do not have to specify the mode.
failure-recovery operation-mode mode
default failure-recovery operation-mode
Syntax Description
mode
|
operational or non-operational. Indicates whether or not the system will boot as operational following a failure.
|
Defaults
mode = operational
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example sets the system to boot as operational after a failure
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#failure-recovery operation-mode operational
NME-APA(config)#
Related Commands
Command
|
Description
|
show failure-recovery operation-mode
|
|
help
Displays information relating to all available CLI commands.
help bindings|tree
Syntax Description
This command has no arguments.
Defaults
This command has no default settings.
Command Modes
Exec
Usage Guidelines
Use the bindings keyword to print a list of keyboard bindings (shortcut commands).
Use the tree keyword to display the entire tree of all available CLI commands.
Authorization: User
Examples
The following example shows the partial output of the help bindings command.
NME-APA>help bindings
Line Cursor Movements
---------------------
Ctrl-F /->Moves cursor one character to the right.
Ctrl-B /<-Moves cursor one character to the left.
Esc-FMoves cursor one word to the right.
Esc-BMoves cursor one word to the left.
Ctrl-AMoves cursor to the start of the line.
Ctrl-EMoves cursor to the end of the line.
Esc F Moves cursor forward one word.
Esc BMoves cursor backward one word.
Editing
-------
Ctrl-DDeletes the character where the cursor is located.
Esc-DDeletes from the cursor position to the end of the word.
BackspaceDeletes the character before the current location of the cursor.
Ctrl-H Deletes the character before the current location of the cursor.
Ctrl-KDeletes from the cursor position to the end of the line.
Ctrl-UDeletes all characters from the cursor to the beginning of the line.
Ctrl-XDeletes all characters from the cursor to the beginning of the line.
Ctrl-WDeletes the word to the left of the cursor.
Ctrl-YRecall the last item deleted.
Help and Operation Features
----------------------------
? Argument help.
<Tab>Toggles between possible endings for the typed prefix.
<Esc><Tab>Displays all the possible arguments backwards.
Ctrl-I <TAB>
NME-APA>
Related Commands
history
Enables the history feature, that is, a record of the last command lines that executed. Use the no form of this command to disable history.
history
no history
Syntax Description
This command has no arguments or keywords.
Defaults
History is enabled.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate how to use this command.
EXAMPLE 1
The following example enables the history feature.
NME-APA>enable 10
Password:<cisco>
NME-APA#history
NME-APA#
EXAMPLE 2
The following example disables the history feature.
NME-APA>enable 10
Password:<cisco>
NME-APA#no history
NME-APA#
Related Commands
Command
|
Description
|
history size
|
|
history size
Sets the number of command lines that the system records in the history.
history size size
no history size
Syntax Description
size
|
The number of command lines stored in the history of commands for quick recall.
|
Defaults
size = 10 lines
Command Modes
Privileged EXEC
Usage Guidelines
The size of the history buffer can be any number from 0-50. Use the no form of this command to restore the default size.
Authorization: admin
Examples
The following example sets the history buffer size to 50 command lines.
NME-APA>enable 10
Password:<cisco>
NME-APA#history size 50
NME-APA#
Related Commands
Command
|
Description
|
history
|
|
hostname
Modifies the name of the NME-APA module. The host name is part of the displayed prompt.
hostname host-name
Syntax Description
host-name
|
The new host name. Maximum length is 20 characters.
|
Defaults
host-name = NME-APA
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example changes the host name to MyHost.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#>hostname MyHost
MyHost(config)#>
Related Commands
Command
|
Description
|
show hostname
|
|
interface fastethernet
Enters FastEthernet Interface Configuration mode to configure a specified Fast Ethernet line interface.
interface fastethernet slot-number/interface-number
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
interface-number
|
The FastEthernet interface number. Enter a value between 1 and 2 to configure one of the line ports for an NME-APA module.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
This command is used to configure the line ports.
To return to the Global Configuration Mode, use the exit command.
The system prompt changes to reflect the Fast Ethernet Interface Configuration mode.
Authorization: admin
Examples
The following example enters into FastEthernet Configuration Interface Mode for line port #1.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface fastethernet 0/1
NME-APA(config if)#
Related Commands
Command
|
Description
|
exit
|
|
show interface fastethernet
|
|
interface fastethernet
|
|
interface linecard
Enters Linecard Interface Configuration Mode.
interface linecard slot-number
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
The system prompt is changed to reflect the Line Card Configuration mode. To return to the Global Configuration Mode, use the exit command.
Authorization: admin
Examples
The following example enters LineCard Interface Configuration Mode.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#
Related Commands
ip advertising
Enables IP advertising. If the destination and/or interval is not configured, the default values are assumed. Use the no version of the command to disable IP advertising. Use the default version of the command to restore IP advertising destination or interval to the default values.
ip advertising [destination destination] | [interval interval]
no ip advertising
default ip advertising [destination | interval]
Syntax Description
destination
|
The IP address of the destination for the ping requests
|
interval
|
The frequency of the ping requests in seconds
|
Defaults
By default, IP advertising is disabled
destination = 127.0.0.1
interval = 300 seconds
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of this command.
EXAMPLE 1:
The following example enables IP advertising, specifying 10.1.1.1 as the destination.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip advertising destination 10.1.1.1 interval 240
NME-APA(config)#
EXAMPLE 2:
The following example enables IP advertising, specifying an interval of 240 seconds.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip advertising interval 240
NME-APA(config)#
EXAMPLE 3:
The following example restores the IP advertising destination to the default value.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#default ip advertising destination
NME-APA(config)#
Related Commands
Command
|
Description
|
show ip advertising
|
|
ip domain-lookup
Enables or disables the domain name lookups. Use the no form of the command to disable the domain name lookup.
ip domain-lookup
no ip domain-lookup
Syntax Description
This command has no arguments or keywords.
Defaults
By default, domain name lookup is enabled.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate how to use this command.
EXAMPLE 1:
The following example enables the domain lookup.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip domain-lookup
NME-APA(config)#
EXAMPLE 2:
The following example disables the domain lookup
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no ip domain-lookup
NME-APA(config)#
Related Commands
Command
|
Description
|
ip domain-name
|
|
ip name-server
|
|
show hosts
|
|
ip domain-name
Defines a default domain name. Use the no parameter of this command to remove the current default domain name. When using the no parameter, you do not have to specify the domain name.
ip domain-name domain-name
no ip domain-name
Syntax Description
domain-name
|
The default domain name used to complete host names that do not specify a domain. Do not include the initial period that separates an unqualified name from the domain name.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of this command.
EXAMPLE 1:
The following example configures a domain name
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip domain-name cisco.com
NME-APA(config)#
EXAMPLE 2:
The following example removes the configured domain name.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no ip domain-name
NME-APA(config)#
Related Commands
Command
|
Description
|
ip domain-lookup
|
|
ip name-server
|
|
show hosts
|
|
ip filter fragment
Use this command to enable the filtering out of IP fragments.
ip filter fragment enable
ip filter fragment disable
Syntax Description
This command has no arguments or keywords.
Defaults
By default, IP fragment filtering is disabled.
Command Modes
Global Configuration
Usage Guidelines
Management security is defined as the capability of the NME-APA module to cope with malicious management conditions that might lead to global service failure.
There are two parallel security mechanisms:
•
Automatic security mechanism — monitors the TCP/IP stack rate at 200 msec intervals and throttles the rate from the device if necessary.
•
User-configurable security mechanism — accomplished via two IP filters at user-configurable intervals:
–
IP fragment filter: Drops all IP fragment packets
This command enables the IP fragment filter.
–
IP filter monitor: Measures the rate of accepted and dropped packets for both permitted and not-permitted IP addresses.
Use the ip filter moniter command to configure the IP filter monitor.
Use the enable keyword to enable IP fragment filtering.
Use the disable keyword to disable IP fragment filtering.
Authorization: admin
Examples
The following example shows how to enable IP fragment filtering.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip filter fragment enable
NME-APA(config)#
Related Commands
Command
|
Description
|
ip filter moniter
|
|
show ip filter
|
|
ip filter monitor
Configures the limits for permitted and not-permitted IP address transmission rates.
ip filter monitor [ip_permitted | ip_denied] low_rate low_rate high_rate high_rate burst burst
size
Syntax Description
low_rate
|
Lower threshold; the rate in Mbps that indicates the attack is no longer present
|
high_rate
|
Upper threshold; the rate in Mbps that indicates the presence of an attack
|
burst size
|
Duration of the interval in seconds that the high and low rates must be detected in order for the threshold rate to be considered to have been reached
|
Defaults
low rate = 20 Mbps
high rate = 20 Mbps
burst size = 10 seconds
Command Modes
Global Configuration
Usage Guidelines
Management security is defined as the capability of the NME-APA module to cope with malicious management conditions that might lead to global service failure.
There are two parallel security mechanisms:
•
Automatic security mechanism—Monitors the TCP/IP stack rate at 200 msec intervals and throttles the rate from the device if necessary.
•
User-configurable security mechanism—Accomplished using two IP filters at user-configurable intervals:
–
IP fragment filter: Drops all IP fragment packets
Use the ip filter fragment command to enable the IP fragment filter.
–
IP filter monitor: Measures the rate of accepted and dropped packets for both permitted and not-permitted IP addresses.
This command configures the IP filter monitor.
Use the ip_permitted keyword to apply configured limits to permitted IP addresses.
Use the ip_denied keyword to apply configured limits to not-permitted IP addresses.
If neither keyword is used, it is assumed that the configured limits apply to both permitted and not-permitted IP addresses.
Authorization: admin
Examples
The following example shows how to configure the rates for permitted IP addresses.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# ip filter monitor ip_permitted low_rate 25 high_rate 30 burst 15
NME-APA(config)#
Related Commands
Command
|
Description
|
ip filter fragment
|
|
show ip filter
|
|
ip ftp password
Specifies the password to be used for FTP connections for the current session. The system will use this password if no password is given in the copy FTP command.
ip ftp password password
Syntax Description
password
|
The password for FTP connections.
|
Defaults
Default password is admin
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example sets the password to be used in the FTP connection to mypw.
NME-APA>enable 10
Password:<cisco>
NME-APA#ip ftp password mypw
NME-APA#
Related Commands
Command
|
Description
|
copy ftp://
|
|
copy-passive
|
|
ip ftp username
|
|
ip ftp username
Configures the username for FTP connections for the current session. This username will be used if no username is given in the copy FTP command.
ip ftp username user-name
Syntax Description
user-name
|
The username for FTP connections.
|
Defaults
Default username is anonymous
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example sets myname as the username for FTP connections.
NME-APA>enable 10
Password:<cisco>
NME-APA#ip ftp username myname
NME-APA#
Related Commands
Command
|
Description
|
copy ftp://
|
|
copy-passive
|
|
ip ftp password
|
|
ip host
Adds a host name and address to the host table. Use the no form of the command to remove a host name and address from the host table.
ip host hostname ip-address
no ip host hostname [ip-address]
Syntax Description
hostname
|
The host name to be added or removed.
|
ip-address
|
The host IP address in x.x.x.x format.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example adds a host to the host table.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip host PC85 10.1.1.1
NME-APA(config)#
Related Commands
Command
|
Description
|
show hosts
|
|
ip name-server
Specifies the address of 1-3 servers to use for name and address resolution. The system maintains a list of up to 3 name servers. If the current list is not empty, this command adds the specified servers to the list. The no option of this command removes specified servers from the current list.
ip name-server server-address1 [server-address2] [server-address3]
no ip name-server
Syntax Description
server-address1
|
The IP address of the name server.
|
server-address2
|
The IP address of an additional name server.
|
server-address3
|
The IP address of an additional name server.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example adds the DNS 10.1.1.1 and 10.1.1.2 to the configured servers list.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip name-server 10.1.1.1 10.1.1.2
NME-APA(config)#
Related Commands
Command
|
Description
|
ip domain-lookup
|
|
show hosts
|
|
ip radius-client retry limit
Configures the parameters for retransmitting unacknowledged RADIUS client messages.
ip radius-client retry limit times [timeout timeout]
Syntax Description
times
|
The maximum number of times the RADIUS client can try unsuccessfully to send a message.
|
timeout
|
Timeout interval for retransmitting a message, in seconds
|
Defaults
times = 3
timeout = 5 second
Command Modes
Global Configuration
Usage Guidelines
Due to the unreliable nature of UDP, the RADIUS client retransmits requests to the SCMP peer device if they were not acknowledged within the configured number of seconds. Messages that were not acknowledged can be retransmitted up to the configured maximum number of retries.
The optional timeout parameter limits the time interval for retransmitting a message.
Authorization: admin
Examples
The following example illustrates how to configure the retransmission parameters.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# ip radius-client retry limit 5 timeout 5
NME-APA(config)#
Related Commands
Command
|
Description
|
show ip radius-client
|
|
ip rpc-adapter
Enables the RPC adapter. Use the no option of this command to disable the RPC adapter.
ip rpc-adapter
no ip rpc-adapter
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of this command.
EXAMPLE 1:
The following example enables the RPC adapter.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip rpc-adapter
NME-APA(config)#
EXAMPLE 2:
The following example disables the RPC adapter.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no ip rpc-adapter
NME-APA(config)#
Related Commands
Command
|
Description
|
ip rpc-adapter port
|
|
show ip rpc-adapter
|
|
ip rpc-adaptor security-level
|
|
ip rpc-adapter port
Defines the RPC adapter port. Use the default option to reset the RPC adapter port assignment to the default port of 14374.
ip rpc-adapter port port-number
default ip rpc-adapter port
Syntax Description
port-number
|
The number of the port assigned to the RPC adapter.
|
Defaults
port number = 14374
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of this command:
EXAMPLE 1:
The following example shows how to configure the RPC interface, specifying 1444 as the RPC adapter port.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#ip rpc-adapter
NME-APA(config)#ip rpc-adapter port 1444
EXAMPLE 2:
The following example shows how reset the RPC adapter port.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#default ip rpc-adapter port
Related Commands
Command
|
Description
|
ip rpc-adapter
|
|
show ip rpc-adapter
|
|
ip rpc-adaptor security-level
Sets the PRPC server security level.
ip rpc-adaptor security-level {full|semi|none}
Syntax Description
Defaults
default = semi
Command Modes
Global Configuration
Usage Guidelines
Specify the desired PRPC server security level:
•
full : all PRPC connections require authentication
•
semi : PRPC connections that supply a user-name and password during connection establishment are authenticated. Connections that do not supply a user-name and password are accepted with no authentication
•
none : no authentication is performed
Authorization: admin
Examples
The following example illustrates how to set the PRPC server security level.
NME-APA>enable 10
Password:<cisco>
NME-APA#configure
NME-APA(config)#ip rpc-adaptor security-level full
NME-APA>
Related Commands
Command
|
Description
|
ip rpc-adapter
|
|
show ip rpc-adapter
|
|
line vty
Enters Line Configuration Mode for Telnet lines, configuring all Telnet lines.
line vty start-number [end-number]
Syntax Description
start-number
|
A number in the range 0-4. The actual number supplied does not matter. All telnet lines will be configured by this command.
|
end-number
|
A number in the range 0-4. The actual number supplied does not matter. All telnet lines will be configured by this command.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
The system prompt changes to reflect the Line Configuration mode. To return to Global Configuration Mode, use the exit command.
Authorization: admin
Examples
The following example enters the Line Configuration Mode for all lines.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#line vty 0
NME-APA(config-line)#
Related Commands
Command
|
Description
|
show line vty
|
|
exit
|
|
link mode
Configures the link mode. The link mode allows the user to force the specified behavior on the link. This may be useful during installation and for debugging the network.
link mode link mode
Syntax Description
link
|
FE:
• port1
• port2
port1-port2
|
mode
|
• Forwarding
• Bypass
• Cutoff
|
Defaults
Command Modes
Linecard Interface Configuration
Usage Guidelines
Use the port1-port2 keyword to configure the link mode for all links.
Authorization: admin
Examples
The following examples illustrate the use of the link mode command:
EXAMPLE 1:
The following example configures "bypass" as the link mode on the first link for the NME-APA module.
NME-APA Module>enable 10
Password:<cisco>
NME-APA Module#config
NME-APA Module(config)#interface linecard 0
NME-APA Module(config if)#link mode port1 bypass
NME-APA Module(config if)#
EXAMPLE 2:
The following example configures "forwarding" as the link mode for the NME-APA module.
NME-APA Module>enable 10
Password:<cisco>
NME-APA Module#config
NME-APA Module(config)#interface linecard 0
NME-APA Module(config if)#link mode forwarding
NME-APA Module(config if)#
EXAMPLE 3:
The following example configures "cutoff" as the link mode for the NME-APA module.
NME-APA Module>enable 10
Password:<cisco>
NME-APA Module#config
NME-APA Module(config)#interface linecard 0
NME-APA Module(config if)#link mode cutoff
NME-APA Module(config if)#
Related Commands
Command
|
Description
|
show interface linecard link mode
|
|
logger add-user-message
Adds a message string to the user log files.
logger add-user-message message-text
Syntax Description
message-text
|
The message string you wish to add.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example adds "testing 123" as the message to the user log files:
NME-APA>enable 10
Password:<cisco>
NME-APA#logger add-user-message testing 123
NME-APA#
logger device
Disables or enables the specified logger device.
logger device {line-attack-file-log | statistics-file-log | user-file-log} status
Syntax Description
status
|
enabled or disabled, indicating whether to turn on or off logging.
|
Defaults
By default, the log devices are enabled.
Command Modes
Global Configuration
Usage Guidelines
Available logger devices are:
•
Line-Attack-File-Log
•
Statistics-Archive-File-Log
•
User-File-Log
Authorization: admin
Examples
The following example disables the User-File-Log device.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#logger device user-file-log disabled
NME-APA(config)#
Related Commands
Command
|
Description
|
logger device user-file-log max-file-size
|
|
show logger device
|
|
logger get user-log file-name
|
|
clear logger
|
|
logger device user-file-log max-file-size
Sets the maximum log file size.
logger device User-File-Log max-file-size size
Syntax Description
size
|
The maximum size for the user log (in bytes).
|
Defaults
size = 1,000,000 bytes
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example configures the maximum size of the User-File-Log device to 65000 bytes.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#logger device user-file-log max-file-size 65000
NME-APA(config)#
Related Commands
Command
|
Description
|
logger device
|
|
show logger device
|
|
logger get support-file
Generates a log file for technical support using FTP. Note that this operation may take some time.
logger get support-file filename
Syntax Description
filename
|
Name of the generated log file. The specified file must be located on an FTP site, not on the local file system.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example generates a technical support log file (using FTP) named support.zip.
NME-APA>enable 10
Password:<cisco>
NME-APA#logger get support-file ftp://user:1234@10.10.10.10/c:/support.zip
NME-APA#
Related Commands
logger get user-log file-name
Outputs the current user log to a target file. The output file name can be a local path, full path, or full FTP path file name.
logger get user-log file-name target-file
Syntax Description
target-file
|
The name of the output file to which the system will write the log file information.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example retrieves the current user log files.
NME-APA>enable 10
Password:<cisco>
NME-APA#logger get user-log file-name ftp://myname:mypw@10.1.1.205/d:/log.txt
NME-APA#
Related Commands
Command
|
Description
|
logger get support-file
|
|
logout
Logs out of the Command-Line Interface of the NME-APA module.
logout
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Exec
Usage Guidelines
The system prompts for confirmation of the logout command with 'N'. Type 'Y' to confirm the logout.
Examples
The following example shows how the user logs out (and confirms the logout).
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#exit
NME-APA>logout
Are you sure? Y
Related Commands
management-agent sce-api logging
Enables the SCE user API troubleshooting logging, which is written to the user-log. Use the no form of this command to disable SCE user API troubleshooting logging.
management-agent sce-api logging
no management-agent sce-api logging
Syntax Description
This command has no arguments or keywords.
Defaults
By default, the SCE user API troubleshooting logging is disabled.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example enables SCE user API troubleshooting logging.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# management-agent sce-api logging
NME-APA(config)#
Related Commands
management-agent sce-api timeout
Defines the timeout interval for disconnection of an SCE user API client, after which the resources allocated for this client would be released.
management-agent sce-api timeout timeout-interval
Syntax Description
timeout-interval
|
Default time in seconds that the client waits before timing out.
|
Defaults
Default = 300 seconds
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
This example shows how to configure a timeout interval of 10 seconds.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)# management-agent sce-api timeout 10
Related Commands
management-agent system
Specifies a new package file to install for the management agent. The NME-APA module extracts the actual image file(s) from the specified package file only during the copy running-config startup-config command. When using the no version of this command, you do not have to specify the package-file-name.
management-agent system package-file-name
no management-agent system
Syntax Description
package-file-name
|
The name of a package file that contains the new management agent software. The filename should end with the.pkg extension.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Use this command to upgrade the NME-APA module management agent. The package file is verified for the system and checked that it is not corrupted. The actual upgrade takes place only after executing the copy running-config startup-config command and rebooting the NME-APA module.
Authorization: admin
Examples
The following example upgrades the system with the mng45.pkg package.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#management-agent system mng45.pkg
Verifying package file...
Package file verified OK.
NME-APA(config)#do copy running-config startup-config
Backing -up configuration file...
Writing configuration file...
Extracting new management agent...
Extracted OK.
Related Commands
Command
|
Description
|
copy running-config startup-config
|
|
mkdir
Creates a new directory.
mkdir directory-name
Syntax Description
directory-name
|
The name of the directory to be created.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example creates a new directory named mydir.
NME-APA>enable 10
Password:<cisco>
NME-APA#mkdir mydir
NME-APA#
Related Commands
more
Displays the contents of a file.
more {file-name | running-config [all-data] | startup-config}
Syntax Description
file-name
|
The name of the file to be displayed.
|
all data
|
Displays defaults as well as non-default settings (running-config option only)
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
The running-config option displays the running configuration file. You can use the all data switch with this option to see sample usage for many CLI configuration commands.
The startup-config option displays the startup configuration file.
Authorization: admin
Examples
The following sample output displays the contents of the running configuration file.
NME-APA>enable 10
Password:<cisco>
NME-APA#more running-config
#This is a general configuration file (running-config).
#Created on 16:48:11 UTC WED June 13 2001
cli-type 1
#version 1
service logger
no service password-encryption
enable password level 10 0 "cisco"
enable password level 15 0 "cisco"
service RDR-formatter
no RDR-formatter destination all
RDR-formatter history-size 0
clock timezone UTC 0
ip domain-lookup
no ip domain-name
no ip name-server
service telnetd
FastEthernet 0/0
ip address 10.1.5.120 255.255.0.0
exit
ip default-gateway 10.1.1.1
no ip route all
line vty 0 4
no access-class in
timeout 30
exit
NME-APA#
Related Commands
Command
|
Description
|
show running-config
|
|
show startup-config
|
|
more user-log
Displays the user log on the CLI console screen.
more user-log
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example displays the user log on the CLI console screen.
NME-APA>enable 10
Password:<cisco>
NME-APA#more user-log
<INFO>| 01/28/97 22:29:22 | CPU #000 | Logger: Task Initialized successfully
Related Commands
Command
|
Description
|
logger get user-log file-name
|
|
show log
|
|
no user
Removes a specified user from the system. Use the all option to remove all introduced users.
no user name user-name
no user scmp name scmp-name all
Syntax Description
user-name
|
The specific user name to be removed from the system.
|
scmp-name
|
Name of an SCMP peer device.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Use the scmp name all option to remove all users managed by the specified SCMP peer device.
Authorization: admin
Examples
The following example removes all users.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)# no user all
NME-APA(config if)#
Related Commands
Command
|
Description
|
show interface linecard user
|
|
no user anonymous-group
Removes a specified anonymous user group from the system. Use the `all' form to remove all anonymous user groups.
no user anonymous-group name group-name
no user anonymous-group all
Syntax Description
group-name
|
The anonymous user group to be removed from the system.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Authorization: admin
Examples
The following example removes all anonymous user groups.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)# no user anonymous-group all
Related Commands
Command
|
Description
|
show interface linecard user anonymous-group
|
|
no user
|
|
ping
Pings the given host to test for connectivity. The ping program sends a test message (packet) to an address and then awaits a reply. Ping output can help you evaluate path-to-host reliability, delays over the path, and whether the host can be reached or is functioning.
ping host
Syntax Description
host
|
The host name or IP address of a remote station to ping.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example pings the host 10.1.1.201.
NME-APA>enable 10
Password:<cisco>
NME-APA#ping 10.1.1.201
pinging 10.1.1.201...
PING 10.1.1.201: 56 data bytes
64 bytes from host (10.1.1.201): icmp_seq=0. time=0. ms
64 bytes from host (10.1.1.201): icmp_seq=1. time=0. ms
64 bytes from host (10.1.1.201): icmp_seq=2. time=0. ms
64 bytes from host (10.1.1.201): icmp_seq=3. time=0. ms
----10.1.1.201 PING Statistics----
4 packets transmitted, 4 packets received, 0% packet loss
round-trip (ms) min/avg/max = 0/0/0
NME-APA#
Related Commands
pqi install file
Installs the specified pqi file using the installation options specified (if any). This may take up to 5 minutes.
pqi install file filename [options options]
Syntax Description
filename
|
The filename of the pqi application file to be installed.
|
options
|
The desired installation options. Use the show pqi file command to display the available installation options.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Always run the pqi uninstall file command before installing a new pqi file to prevent accumulation of old files on the disk.
Authorization: admin
Examples
The following example installs the application stf30519.pqi file. No options are specified.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#pqi install file stf30519.pqi
NME-APA(config if)#
Related Commands
Command
|
Description
|
show pqi file
|
|
pqi uninstall file
|
|
pqi rollback file
Reverses an upgrade of the specified pqi file. This may take up to 5 minutes.
pqi rollback file filename
Syntax Description
filename
|
The filename of the pqi application file to be rolled-back. It must be the pqi file that was last upgraded.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Always specify the last pqi file that was upgraded. Use the show pqi last-installed command.
Authorization: admin
Examples
The following example reverses the upgrade for the application using the anr100155.pqi file.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#pqi rollback file anr100155.pqi
NME-APA(config if)#
Related Commands
Command
|
Description
|
show pqi last-installed
|
|
pqi uninstall file
Uninstalls the specified pqi file. This may take up to 5 minutes.
pqi uninstall file filename
Syntax Description
filename
|
The filename of the pqi application file to be uninstalled. It must be the pqi file that was installed last.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
Always specify the last pqi file that was installed. Use the show pqi last-installed command.
Always run the pqi uninstall command before installing a new pqi file to prevent accumulation of old files on the disk.
Authorization: admin
Examples
The following example uninstalls the application stf30519.pqi file.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#pqi uninstall file stf30519.pqi
NME-APA(config if)#
Related Commands
Command
|
Description
|
show pqi last-installed
|
|
pqi install file
|
|
pqi upgrade file
Upgrades the application using the specified pqi file and the upgrade options specified (if any). This may take up to 5 minutes.
pqi upgrade file filename [options options]
Syntax Description
filename
|
The filename of the pqi application file to be used for the upgrade.
|
options
|
The desired upgrade options. Use the show pqi file command to display the available options.
|
Defaults
This command has no default settings.
Command Modes
Linecard Interface Configuration
Usage Guidelines
A given pqi upgrade file is suitable for upgrading only from specific previously installed pqi files. The upgrade procedure checks that an upgrade is possible from the currently installed pqi file. The upgrade procedure is stopped with an error message if the upgrade is not possible.
Authorization: admin
Examples
The following example upgrades the application using the stf30519.pqi file. No options are specified.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface linecard 0
NME-APA(config if)#pqi upgrade file stf30519.pqi
NME-APA(config if)#
Related Commands
Command
|
Description
|
show pqi file
|
|
pwd
Displays the current working directory.
pwd
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example shows the current working directory as tffs0.
NME-APA>enable 10
Password:<cisco>
NME-APA#pwd
tffs0:
NME-APA#
Related Commands
queue
Sets the queue shaping.
queue queue-number bandwidth bandwidth burst-size burstsize
Syntax Description
queue-number
|
Queue-number from 1-4, where 4 is the highest priority (fastest).
• 1=BE. BE is the best effort queue, that is the lowest priority.
• 2, 3=AF. The AF (Assured Forwarding) queues are middle-priority, with 3 being a higher priority queue, that is, packets from queue 3 are transferred faster than those in queue 2.
• 4=EF. EF is the Expedited Forwarding queue, that is the highest priority forwarding
|
bandwidth
|
Bandwidth measured in kbps. The maximum bandwidth is determined by the line rate.
0 disables packet transmission from the queue.
Bandwidth is set in resolutions of ~140Kbps, that is rounded to the nearest multiple of approximately 140 Kbps.
|
burstsize
|
Burst size in bytes, from 0-16000000.
|
Defaults
Bandwidth = 100000K (100 Mbps)
Burst size = 8000 (8K bytes)
Command Modes
FastEthernet Interface Configuration
Usage Guidelines
This command is valid for a specified FastEthernet line interface only. It must be executed explicitly for each interface.
Use the interface fastethernet command to access the configuration mode for the desired interface.
Authorization: admin
Examples
The following example configures queue shaping for queue 1 for FE port #1.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#interface fastethernet 0/2
NME-APA(config if)#queue 1 bandwidth 20000 burstsize 1000
NME-APA(config if)#
Related Commands
Command
|
Description
|
bandwidth
|
|
interface fastethernet
|
|
rdr-formatter category number
Assigns a meaningful name to a category. This category name can then be used in any rdr-formatter command instead of the category number. Use the no option of this command to disassociate the name from the category. The name will then not be recognized by any CLI commands.
rdr-formatter category number [1-4] name category name
no rdr-formatter category number [1-4] name category name
Syntax Description
category name
|
The user-defined name to be assigned to the category.
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following example assigns the name "prepaid" to Category 1.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#rdr-formatter category number 1 name prepaid
NME-APA(config)#
Related Commands
Command
|
Description
|
show rdr-formatter
|
|
service rdr-formatter
|
|
rdr-formatter destination
Note
Configuring an RDR destination entry is only for debugging purposes.
Configures an RDR destination entry. Up to four entries can be configured. Each entry must have a different priority. The entry with the highest priority is used by the RDR formatter, provided that a connection with this destination can be established. This is where the RDR-formatter sends the RDRs it produces.
Use the no form of the command to remove the mappings of an RDR formatter destination to categories. When all categories for a destination are removed, the entire destination is removed.
rdr-formatter destination ip-address port port-number [category {name category-name }
{number [1-4] }] [priority priority-value] protocol {RdrV1 | NetflowV9}
transport {udp | tcp}
no rdr-formatter destination ip-address port port-number [category {name category-name }|
{number [1-4 ]}]
no rdr-formatter destination all
Syntax Description
ip-address
|
The destination IP address.
|
port-number
|
The destination port number.
|
category
|
(Optional) Use this parameter to assign a priority to a particular category for this destination.
|
category-name
|
(Optional) User-defined name that identifies the category
|
number
|
(Optional) Use this parameter to identify the category by number (1 to 4).
|
priority-value
|
(Optional) The priority of the destination. The priority value may be any number between 1 (lowest) to 100 (highest).
|
protocol
|
The protocol of the destination. The protocol can be NetflowV9 or RDRv1
|
transport
|
The transport type configured for this destination. Specify either of the following:
• UDP when protocol = Netflow
• TCP when protocol = RDRv1.
|
Defaults
Default protocol = RDRv1
Command Modes
Global Configuration
Usage Guidelines
The category may be identified by either name or number.
Assign a high priority to send RDRs from the specified category to this destination. Assign a low priority if RDRs from the specified category should not be sent to this destination.
For the first entry, if no priority is set, the highest priority is automatically assigned.
For all subsequent entries, the priority must be explicitly defined.
It is also possible to assign a different priority to each category for each destination. If no category is specified, the same priority is assigned to all categories for that destination.
Use the all keyword with the no form of the command to remove all of the configured RDR-formatter categories from the specified destination, thus removing the destination itself.
Authorization: admin
Examples
The following examples illustrate the use of the RDR-formatter destination command:
EXAMPLE 1:
The following example configures a Netflow destination with the default priority (highest) to be used by all categories.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#rdr-formatter destination 10.1.1.205 port 33000 protocol NetflowV9
transport udp
NME-APA(config)#
EXAMPLE 2:
The following example configures an RDR formatter destination for two categories with a different priority for each category. This configuration sends RDRs from category 2 to this destination, but generally not RDRs from category 1.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#rdr-formatter destination 10.1.1.206 port 34000 category number 1 priority
10 category number 2 priority 90 protocol RrdrV1
NME-APA(config)#
Related Commands
Command
|
Description
|
show rdr-formatter destination
|
|
service rdr-formatter
|
|
rdr-formatter forwarding-mode
Defines the mode in which the RDR formatter will send the RDRs to the destinations.
rdr-formatter forwarding-mode mode
Syntax Description
mode
|
Settings: redundancy, multicast, simple-load-balancing as described in the Valid Mode Settings table in the Usage Guidelines.
|
Defaults
Default mode = redundancy
Command Modes
Global Configuration
Usage Guidelines
Table 1 Valid Mode Settings
redundancy
|
All RDRs are sent only to the primary (active) connection.
|
multicast
|
All RDRs are sent to all destinations.
|
simple-load-balancing
|
Each successive record is sent to a different destination, one destination after the other, in a round robin manner.
|
Authorization: admin
Examples
The following example sets the RDR formatter mode to "redundancy".
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#rdr-formatter forwarding-mode redundancy
NME-APA(config)#
Related Commands
Command
|
Description
|
show rdr-formatter forwarding-mode
|
|
rdr-formatter history-size
Configures the size of the history buffer. This command is currently not supported.
rdr-formatter history-size size
Syntax Description
size
|
Size of the history buffer in bytes. Must be = 0 only (default)
|
Defaults
Default size = 0
Command Modes
Global Configuration
Usage Guidelines
Do not change the size of the history buffer from the default value.
Since currently only RDRv1 is supported, the size of the history buffer must be zero bytes, even though the system will accept a command specifying a larger size.
Authorization: admin
Examples
Related Commands
Command
|
Description
|
show rdr-formatter history-size
|
|
rdr-formatter rdr-mapping
Adds a dynamic RDR mapping to a category or removes one from a category. Use the no form of this command to remove an existing mapping.
rdr-formatter rdr-mapping (tag-id tag number category-number category number)
no rdr-formatter rdr-mapping (tag-id tag number category-number category number)
Syntax Description
tag number
|
The complete 32 bit value given as an hexadecimal number. The RDR tag must be already configured in the Formatter by the application.
|
category number
|
Number of the category (1-4) to which to map the RDR tag
|
Defaults
This command has no default settings.
Command Modes
Global Configuration
Usage Guidelines
The configuration of categories to RDR tags is done by adding and removing mappings. You can add a mapping of RDR tag to a category and remove a mapping, including the default mapping. If the table already contains a mapping with the same tag and category number, an error is issued and nothing is done.
If all categories are removed from a tag, this tag is ignored and is not formatted and sent - this is `ignore mapping'.
Authorization: admin
Examples
The following examples illustrate how to use this command.
EXAMPLE 1
This example shows how to add a mapping to a category.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#rdr-formatter rdr-mapping tag-id 0xf0f0f000 category-number 1
NME-APA(config)#
EXAMPLE 2
This example shows how to restore the default mapping for a specified RDR tag.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#default rdr-formatter rdr-mapping tag-id 0xf0f0f000
NME-APA(config)#
Related Commands
Command
|
Description
|
show rdr-formatter rdr-mapping
|
|
reload
Note
In order not to lose the current configuration, use the copy running-config-all startup-config-all command before using the reload command.
Reboots the NME-APA module.
reload
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example shows backing up of the configuration and performing a system reboot.
NME-APA>enable 10
Password:<cisco>
NME-APA#copy running-config-all startup-config-all
NME-APA#reload
Are you sure? Y
The system is about to reboot, this will end your CLI session
Related Commands
Command
|
Description
|
copy running-config startup-config
|
|
rename
Changes the file name to the specified name.
rename existing-file-name new-file-name
Syntax Description
existing-file-name
|
The original name of the file.
|
new-file-name
|
The new name of the file.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example changes the name of file test1.pkg to test3.pkg.
NME-APA>enable 10
Password:<cisco>
NME-APA#rename test1.pkg test3.pkg
NME-APA#
Related Commands
rmdir
Removes an empty directory. To remove a directory that is not empty, use the delete command with the recursive switch.
rmdir directory-name
Syntax Description
directory-name
|
The name of the directory to be removed.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
You can only remove an empty directory. Use the dir command to verify that no files are listed in this directory.
Authorization: admin
Examples
The following example deletes the code directory.
NME-APA>enable 10
Password:<cisco>
NME-APA#rmdir code
NME-APA#
Related Commands
Command
|
Description
|
dir
|
|
delete
|
|
script capture
Begins the recording of a script. It tracks all commands typed until the script stop command is used.
script capture script-file-name
Syntax Description
script-file-name
|
The name of the output file where the script is stored.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use this command to capture a sequence of repeated commands into a file for the purpose of executing the commands again.
Use the script stop command to stop capturing the script.
Authorization: admin
Examples
The following example shows the script capture for the script1.txt.
NME-APA>enable 10
Password:<cisco>
NME-APA#script capture script1.txt
NME-APA#cd log
NME-APA#cd..
NME-APA#pwd
NME-APA#script stop
Related Commands
Command
|
Description
|
script stop
|
|
script print
Displays a script file.
script print script-file-name
Syntax Description
script-file-name
|
The name of the file containing the script.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example prints the commands captured in script1.txt.
NME-APA>enable 10
Password:<cisco>
NME-APA#script print script1.txt cd log
cd..
pwd
script stop
NME-APA#
Related Commands
Command
|
Description
|
script capture
|
|
script run
|
|
script run
Runs a script. The script may be created using the script capture command, or it may be created as a text file containing the appropriate commands.
script run script-file-name [halt]
Syntax Description
script-file-name
|
The name of the file containing the script.
|
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Use this command to run a script that you have previously created using the script capture command.
Use the halt keyword to break script on errors.
Authorization: admin
Examples
The following example runs the script named monitor.txt, which contains commands to enable the generation of the real-time user usage RDRs for the specified users.
Following is the contents of the file:
configure
interface linecard 0
user name Jerry property monitor value 1
user name George property monitor value 1
user name Elaine property monitor value 1
user name Kramer property monitor value 1
The following shows how to run the script:
NME-APA>enable 10
Password:<cisco>
NME-APA#script run monitor.txt
NME-APA#configure
NME-APA(config)#interface linecard 0
NME-APA(config if)#user name Jerry property monitor value 1
NME-APA(config if)#user name George property monitor value 1
NME-APA(config if)#user name Elaine property monitor value 1
NME-APA(config if)#user name Kramer property monitor value 1
NME-APA(config if)#
Related Commands
Command
|
Description
|
script capture
|
|
script print
|
|
script stop
Stops script capture. Used in conjunction with the script capture command, it marks the end of a script being recorded.
script stop
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
Privileged EXEC
Usage Guidelines
Authorization: admin
Examples
The following example stops the capturing of a script.
NME-APA>enable 10
Password:<cisco>
NME-APA#script capture script1.txt
NME-APA#cd log
NME-APA#cd..
NME-APA#pwd
NME-APA#script stop
NME-APA#
Related Commands
Command
|
Description
|
script capture
|
|
service password-encryption
Enables password encryption, so that the password remains secret when the configuration file is displayed. Use the no form of this command to disable password encryption.
service password-encryption
no service password-encryption
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled (no encryption)
Command Modes
Global Configuration
Usage Guidelines
Passwords that were configured in an encrypted format are not deciphered when password encryption is disabled.
Authorization: admin
Examples
The following example shows the effect of enabling password encryption.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#enable password abcd
NME-APA(config)#do more running-config
#This is a general configuration file (running-config).
#Created on 10:20:57 ISR TUE July 3 2001
...
enable password level 10 0 "abcd"
...
NME-APA(config)#service password-encryption
NME-APA(config)#do more running-config
#This is a general configuration file (running-config).
#Created on 10:21:12 ISR TUE July 3 2001
...
service password-encryption
enable password level 10 0 "e2fc714c4727ee9395f324cd2e7f331f"
...
NME-APA(config)#
Related Commands
Command
|
Description
|
enable password
|
|
service rdr-formatter
Enables/disables the RDR-formatter. The RDR-formatter is the element that formats the reports of events produced by the linecard and sends them to an external data collector. Use the no keyword of this command to disable the RDR-formatter.
service rdr-formatter
no service rdr-formatter
Syntax Description
This command has no arguments or keywords.
Defaults
Enabled
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of the service rdr-formatter command:
EXAMPLE 1:
The following example enables the RDR-formatter.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#service rdr-formatter
NME-APA(config)#
EXAMPLE 2:
The following example disables the RDR-formatter.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no service rdr-formatter
NME-APA(config)#
Related Commands
Command
|
Description
|
show rdr-formatter enabled
|
|
rdr-formatter category number
|
|
rdr-formatter destination
|
|
service telnetd
Enables the Telnet daemon. Use the no form of this command to disable the daemon preventing new users from accessing the NME-APA module via Telnet.
service telnetd
no service telnetd
Syntax Description
This command has no arguments or keywords.
Defaults
Telnet daemon enabled
Command Modes
Global Configuration
Usage Guidelines
Authorization: admin
Examples
The following examples illustrate the use of the service telnetd command:
EXAMPLE 1:
The following example enables the Telnet daemon.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#service telnetd
NME-APA(config)#
EXAMPLE 2:
The following example disables the Telnet daemon.
NME-APA>enable 10
Password:<cisco>
NME-APA#config
NME-APA(config)#no service telnetd
NME-APA(config)#
Related Commands
Command
|
Description
|
show telnet status
|
|
setup
Invokes the setup utility, which is a dialog, or series of questions, that guides the user through the basic configuration process. This utility runs automatically upon initial connection to the local terminal. The utility may also be invoked explicitly to make changes to the system configuration.
setup
Syntax Description
The setup command does not include parameters in the usual sense of the word. However, the setup utility questions prompt for many global configuration parameters. Following is a table listing all the parameter values that are necessary to complete the initial configuration. It is recommended that you obtain all these values before beginning the setup.
Parameter
|
Description
|
hostname
|
Character string used to identify the NME-APA module. Maximum length is 20 characters.
|
admin password
|
Admin level password.
Character string from 4-100 characters beginning with an alpha character.
|
root password
|
Root level password.
Character string from 4-100 characters beginning with an alpha character.
|
password encryption status
|
Enable or disable password encryption?
|
User Anonymous Group Settings
|
user anonymous group name
|
Character string used to identify the anonymous users group.
|
user anonymous group IP range
|
IP range of the anonymous users group in the format A.B.C.D/E
|
Time Settings
|
time zone name and offset
|
Standard time zone abbreviation and minutes offset from UTC.
|
local time and date
|
Current local time and date.
Use the format: 00:00:00 1 January 2007
|
SNTP Configuration
|
broadcast client status
|
Set the status of the SNTP broadcast client.
If enabled, the NME-APA synchronizes its local time with updates received from SNTP broadcast servers.
|
unicast query interval
|
Interval in seconds between unicast requests for update (64 - 1024).
|
unicast server IP address
|
IP address of the SNTP unicast server.
|
SNMP Configuration
|
SNMP agent status
|
Enable or disable SNMP management.
|
GET community names
|
Community strings to allow GET access and associated ACLs (maximum 20).
|
SET community names
|
Community strings to allow SET access and associated ACLs (maximum 20).
|
trap managers
|
Trap manager IP address, community string, and SNMP version (maximum 20).
|
Authentication Failure trap status
|
Sets the status of the Authentication Failure traps.
|
enterprise traps status
|
Sets the status of the enterprise traps.
|
system administrator
|
Name of the system administrator.
|
Command Modes
Privileged EXEC
Usage Guidelines
Following is a brief list of the parameters configured via the setup command:
•
Host ID parameters: hostname
•
Passwords: admin and root password, password encryption
•
Anonymous User Groups: anonymous user group name, anonymous user group IP range
•
Time settings: time zone, offset from UTC, local time and date
•
SNTP configuration: multicast client, unicast server, unicast query interval
•
SNMP configuration: Define the following:
–
GET community names (up to 20)
–
SET community names (up to 20)
–
trap managers (up to 20): IP address, community string, version
–
name of system manager
For a complete description of the command, see the Cisco Network Module Enhanced Application Performance Assurance User Guide.
Authorization: admin
Examples
The following example runs the setup utility.
NME-APA>enable 10
Password:<cisco>
NME-APA#setup
--- System Configuration Dialog ---
At any point you may enter a question mark `?' followed by
Use ctrl-C to abort configuration dialog at any prompt.
Use ctrl-Z to jump to the end of the configuration dialog at any
Default settings are in square brackets `[]'.
Would you like to continue with the System Configuration Dialog?
show calendar
Displays the time maintained by the real-time system calendar clock.
show calendar
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the current system calendar.
NME-APA>enable 5
Password:<cisco>
NME-APA>show calendar
12:50:03 GMT MON November 13 2005
NME-APA>
Related Commands
Command
|
Description
|
calendar set
|
|
show clock
Displays the time maintained by the system clock.
show clock
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the current system clock.
NME-APA>enable 5
Password:<cisco>
NME-APA>show clock
12:50:03 GMT MON November 13 2005
NME-APA>
Related Commands
Command
|
Description
|
clock set
|
|
show failure-recovery operation-mode
Displays the operation mode to apply after boot resulted from failure.
show failure-recovery operation-mode
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example displays the failure recovery operation mode:
NME-APA>enable 5
Password:<cisco>
NME-APA>show failure-recovery operation-mode
System Operation mode on failure recovery is: operational
NME-APA>
Related Commands
Command
|
Description
|
failure-recovery operation-mode
|
|
show hostname
Displays the currently configured hostname.
show hostname
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows that NME-APA1 is the current hostname.
NME-APA>enable 5
Password:<cisco>
NME-APA>show hostname
NME-APA1
NME-APA>
Related Commands
Command
|
Description
|
hostname
|
|
show hosts
Displays the default domain name, the address of the name server, and the content of the host table.
show hosts
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the domain and hosts configured.
NME-APA>enable 5
Password:<cisco>
NME-APA>show hosts
Default domain is cisco.com
Name/address lookup uses domain service
Name servers are 10.1.1.60, 10.1.1.61
Host Address
---- -------
PC85 10.1.1.61
NME-APA>
Related Commands
Command
|
Description
|
hostname
|
|
ip domain-name
|
|
ip name-server
|
|
show interface fastethernet
Displays the details of a FastEthernet Interface.
show interface fastethernet slot-number/interface-number [counters [direction
]|duplex|speed|queue queue-number]
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
interface-number
|
The FastEthernet interface number.
|
direction
|
Optional direction specification, to show only counters of a specific direction. Use in or out.
|
queue-number
|
Number of queue, in the range 0-3.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
The following keywords are relevant to the line interfaces (1 - 2) of the NME-APA module:
The duplex keyword displays the configured and actual duplex mode of the specified interface.
The speed keyword displays the configured and actual speed of the specified interface.
The counters keyword displays the values of counters for the specified line interface.
The queue keyword displays the bandwidth and burst size of the specified queue in the specified line interface.
Counter Definitions
Following are definitions of the counters displayed in the output of this command.
In total octets: Total number of inbound octets
In good unicast packets: Total number good inbound unicast packets
In good multicast packets: Total number of good inbound multicast packets
In good broadcast packets: Total number of good inbound broadcast packets
In packets discarded: Total number of inbound discarded packets
In packets with CRC/Alignment error: Total number of inbound packets with CRC or alignment errors
In undersized packets: Total number of inbound undersized packets
In oversized packets: Total number of inbound oversized packets
Out unicast packets: Total number of outbound unicast packets
Out non unicast packets: Total number of outbound non-unicast packets
Out packets discarded: Total number of outbound discarded packets
Authorization: viewer
Examples
The following examples illustrate the use of the show interface FastEthernet command:
EXAMPLE 1:
The following example shows the FastEthernet details for a line interface.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface fastethernet 0/1
Configured speed: auto, configured duplex: auto
AutoNegotiation is On, link is Up, actual speed: 100Mb/s, actual duplex: full
Bandwidth: 100000 Kbps, Burst-size: 5000 bytes
NME-APA>
EXAMPLE 2:
The following example shows the FastEthernet interface counters.
NME-APA>show interface fastethernet 0/1 counters
In total octets: 191520
In good unicast packets: 560
In good multicast packets: 0
In good broadcast packets: 0
In packets discarded: 0
In packets with CRC/Alignment error: 0
In undersized packets: 0
In oversized packets: 0
Out total octets: 0
Out unicast packets: 0
Out non unicast packets: 0
Out packets discarded: 0
NME-APA>
EXAMPLE 3:
The following example shows the FastEthernet interface duplex mode configuration and status.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface fastethernet 0/1 duplex
Configured duplex: auto
AutoNegotiation is On, link is Up, actual duplex: half
NME-APA>
EXAMPLE 4:
The following example shows the FastEthernet interface speed configuration and status.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface fastethernet 0/1 speed
Configured speed: auto
AutoNegotiation is On, link is Up, actual speed: 100
NME-APA>
EXAMPLE 5:
The following example shows the FastEthernet interface queue number 1.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface fastethernet 0/1 queue 1
Bandwidth: 100000 Kbps, Burst-size: 8000 bytes
NME-APA>
Related Commands
Command
|
Description
|
interface fastethernet
|
|
show interface linecard
Displays information for a specific linecard Interface.
show interface linecard slot-number
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows how to use this command.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0
The application assigned to slot 0 is /tffs0/app/eng30102.sli
Silent is off
Configured shutdown is off
Shutdown due to sm-connection-failure is off
Resulting current shutdown state is off
NME-APA>
Related Commands
Command
|
Description
|
interface linecard
|
|
show interface linecard application
Displays the name of the application loaded on the Linecard Interface.
show interface linecard slot-number application
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the currently loaded application.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 application
/tffs0/app/eng30102.sli
NME-APA>
Related Commands
show interface linecard attack-detector
Displays the configuration of the specified attack detector.
show interface linecard slot-number attack-detector [default|all]
show interface linecard slot-number attack-detector attack-detector
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
attack-detector
|
The number of the specific attack detector to be displayed.
|
all
|
Displays the configuration of all existing attack detectors
|
default
|
Displays the default attack detector configuration.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Use the all keyword to display the configuration of all existing attack detectors.
Use the default keyword to display default attack detector configuration.
The following information is displayed:
•
Protocol Side — Whether the attack detector applies to attacks originating at the user or network side.
•
Direction — Whether the attack detector applies to single sided or dual sided attacks.
•
Action to take if an attack is detected.
•
Thresholds:
–
open-flows-rate — Default threshold for rate of open flows (new open flows per second).
–
suspected-flows-rate — Default threshold for rate of suspected DDoS flows (new suspected flows per second).
–
suspected-flows-ratio — Default threshold for ratio of suspected flow rate to open flow rate.
•
User notification — enabled or disabled.
•
Alarm — sending an SNMP trap enabled or disabled.
Authorization: viewer
Examples
The following examples illustrate the show interface linecard attack-detector command:
EXAMPLE 1:
The following example displays the configuration of attack detector number 3.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 attack-detector 3
Detector #3:
Comment: 'Sample'
Access-list: 1
Effective only for TCP port(s) 21,23,80
Effective for all UDP ports
Protocol|Side|Direction ||Action| Thresholds |Sub- |Alarm
| | || |Open flows|Ddos-Suspected flows|notif|
| | || |rate |rate |ratio | |
--------|----|-----------||------|----------|------------|-------|-----|-----
TCP |net.|source-only|| | | | | |
TCP |net.|dest-only || | | | | |
TCP |sub.|source-only|| | | | | |
TCP |sub.|dest-only || | | | | |
TCP |net.|source+dest|| | | | | |
TCP |sub.|source+dest|| | | | | |
TCP+port|net.|source-only||Block | | | | |Yes
TCP+port|net.|dest-only || | | | | |
TCP+port|sub.|source-only||Block | | | | |Yes
TCP+port|sub.|dest-only || | | | | |
TCP+port|net.|source+dest|| | | | | |
TCP+port|sub.|source+dest|| | | | | |
UDP |net.|source-only|| | | | | |
UDP |net.|dest-only || | | | | |
UDP |sub.|source-only|| | | | | |
UDP |sub.|dest-only || | | | | |
UDP |net.|source+dest|| | | | | |
UDP |sub.|source+dest|| | | | | |
UDP+port|net.|source-only|| | | | | |
UDP+port|net.|dest-only || | | | | |
UDP+port|sub.|source-only|| | | | | |
UDP+port|sub.|dest-only || | | | | |
UDP+port|net.|source+dest|| | | | | |
UDP+port|sub.|source+dest|| | | | | |
ICMP |net.|source-only|| | | | | |
ICMP |net.|dest-only || | | | | |
ICMP |sub.|source-only|| | | | |Yes |
ICMP |sub.|dest-only || | | | | |
other |net.|source-only|| | | | | |
other |net.|dest-only || | | | | |
other |sub.|source-only|| | | | | |
other |sub.|dest-only || | | | | |
Empty fields indicate that no value is set and configuration from
the default attack detector is used.
NME-APA>
EXAMPLE 2:
The following example displays the configuration of the default attack detector.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 attack-detector default
Protocol|Side|Direction ||Action| Thresholds |Sub- |Alarm
| | || |Open flows|Ddos-Suspected Flows|notif|
| | || |rate |rate |ratio | |
--------|----|-----------||------|----------|------------|-------|-----|-----
TCP |net.|source-only||Report| 1000| 500|50 |No |No
TCP |net.|dest.-only ||Report| 1000| 500|50 |No |No
TCP |sub.|source-only||Report| 1000| 500|50 |No |No
TCP |sub.|dest.-only ||Report| 1000| 500|50 |No |No
TCP |net.|source+dest||Report| 100| 50|50 |No |No
TCP |sub.|source+dest||Report| 100| 50|50 |No |No
TCP+port|net.|source-only||Report| 1000| 500|50 |No |No
TCP+port|net.|dest.-only ||Report| 1000| 500|50 |No |No
TCP+port|sub.|source-only||Report| 1000| 500|50 |No |No
TCP+port|sub.|dest.-only ||Report| 1000| 500|50 |No |No
TCP+port|net.|source+dest||Report| 100| 50|50 |No |No
TCP+port|sub.|source+dest||Report| 100| 50|50 |No |No
UDP |net.|source-only||Report| 1000| 500|50 |No |No
UDP |net.|dest.-only ||Report| 1000| 500|50 |No |No
UDP |sub.|source-only||Report| 1000| 500|50 |No |No
UDP |sub.|dest.-only ||Report| 1000| 500|50 |No |No
UDP |net.|source+dest||Report| 100| 50|50 |No |No
UDP |sub.|source+dest||Report| 100| 50|50 |No |No
UDP+port|net.|source-only||Report| 1000| 500|50 |No |No
UDP+port|net.|dest.-only ||Report| 1000| 500|50 |No |No
UDP+port|sub.|source-only||Report| 1000| 500|50 |No |No
UDP+port|sub.|dest.-only ||Report| 1000| 500|50 |No |No
UDP+port|net.|source+dest||Report| 100| 50|50 |No |No
UDP+port|sub.|source+dest||Report| 100| 50|50 |No |No
ICMP |net.|source-only||Report| 500| 250|50 |No |No
ICMP |net.|dest.-only ||Report| 500| 250|50 |No |No
ICMP |sub.|source-only||Report| 500| 250|50 |No |No
ICMP |sub.|dest.-only ||Report| 500| 250|50 |No |No
other |net.|source-only||Report| 500| 250|50 |No |No
other |net.|dest.-only ||Report| 500| 250|50 |No |No
other |sub.|source-only||Report| 500| 250|50 |No |No
other |sub.|dest.-only ||Report| 500| 250|50 |No |No
NME-APA>
Related Commands
Command
|
Description
|
attack-detector
|
|
attack-detector default
|
|
attack-detector <number>
|
|
show interface linecard attack-filter
Displays the attack filtering configuration.
show interface linecard slot-number attack-filter [option]
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
option
|
See Usage Guidelines for the list of options.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Following is a list of options that may be displayed:
•
query IP configured : displays the configured threshold values and action as follows:
–
query single-sided IP ip-address configured: displays the configured threshold values and action for attack detection for a specified IP address (single-sided detection)
–
query dual-sided source-IP ip-address1 dest ip-address2 configured: displays the configured threshold values and action for attack detection between two specified IP addresses (dual-sided detection)
–
dest-port port#: displays the configured threshold values and action for the specified port. You can include this argument with both single-sided and dual-sided queries.
•
query IP current: displays the current counters for a specified attack detector for all protocols and attack directions as follows:
–
query single-sided IP ip-address current: displays the current counters for attack detection for a specified IP address (single-sided detection)
–
query dual-sided source-IP ip-address1 dest ip-address2 current: displays the current counters for attack detection between two specified IP addresses (dual-sided detection)
–
dest-port port #: displays the configured threshold values and action for the specified port. You can include this argument with both single-sided and dual-sided queries.
•
current-attacks: displays all currently handled attacks
•
counters: displays all attack detection counterd
•
dont-filter: displays all existing stopped attack filters
•
force-filter: displays all existing forced attack filters
•
user-notification ports: displays the list of user-notification ports
•
user-notification redirect: displays the configuration of user-notification redirection, such as the configured destination and dismissal URLs, and allowed hosts.
Authorization: viewer
Examples
The following examples illustrate the use of this command.
EXAMPLE 1:
The following example displays the configuration of attack detection between two specified IP addresses (dual-sided) for destination port 101.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 attack-filter
query dual-sided source-IP 10.10.10.10 dest 10.10.10.145 dest-port 101 configured
NME-APA>
EXAMPLE 2:
The following example displays all existing forced attack filters.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 attack-filter
force-filter No force-filter commands are set for slot 0
NME-APA>
EXAMPLE 3:
The following example displays the user notification ports.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 attack-filter
user-notification ports
Configured User notification ports: 100
NME-APA>
Related Commands
Command
|
Description
|
attack-filter
|
|
show interface linecard counters
Displays the Linecard Interface counters.
show interface linecard slot-number counters [bandwidth] [cpu-utilization] [cpu-history]
[all-active-users]
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Specify any of the optional keywords to display only the desired counters.
Authorization: viewer
Examples
The following example shows the hardware counters for the Linecard Interface.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 counters
DP IP packets with CRC error: 0
DP IP packets with length error: 0
DP IP broadcast packets: 10
DP IP fragmented packets: 0
DP IP packets with TTL=0 error: 0
DP Non TCP/UDP packets: 10
DP TCP/UDP packets with CRC error: 0
Related Commands
Command
|
Description
|
clear interface linecard
|
|
show interface linecard duplicate-packets-mode
Displays the currently configured duplicate packets mode.
show interface linecard slot-number duplicate-packets-mode
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example illustrates the use of this command:
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 duplicate-packets-mode
Packet duplication of flows due to Delay Sensitive <bundles>is enabled
Packet duplication of flows due to No-Online-Control <set-flow>is enabled
Packet duplication of flows due to No-Online-Control <set-flow>ratio percent is 70
Packet duplication in case of shortage is enabled
NME-APA>
Related Commands
show interface linecard flow-open-mode
Displays the currently configured flow open mode.
show interface linecard slot-number flow-open-mode
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example illustrates the use of this command.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 flow-open-mode
Enhanced flow open mode is disabled
NME-APA>
Related Commands
show interface linecard link mode
Displays the configured Linecard Interface link mode.
show interface linecard slot-number link mode
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the configured link mode for the Linecard Interface.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 link mode
Link mode on port1-port2
Current link mode is :forwarding
Actual link mode on active is :forwarding
Actual link mode on failure is :monopath-bypass
NME-APA>
Related Commands
Command
|
Description
|
link mode
|
|
show interface linecard link-to-port-mappings
Displays the link ID to port ID mappings.
show interface linecard slot-number link-to-port-mappings
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the link ID to port ID mapping for the Linecard Interface.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 link-to-port-mappings
Link Id | Upstream Port <Out>| Downstream Port <Out>
-----------------------------------------------------------
0 | 0/2 | 0/1
NME-APA>
Related Commands
show interface linecard shutdown
Displays the current shutdown state.
show interface linecard slot-number shutdown
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the linecard Interface silent mode.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 shutdown
off
NME-APA>
Related Commands
show interface linecard silent
Displays the current Linecard Interface silent state. When the silent state is Off, the linecard events reporting function is enabled.
show interface linecard slot-number silent
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the Linecard Interface silent mode.
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 silent
off
NME-APA>
Related Commands
Command
|
Description
|
silent
|
|
show interface linecard tos-marking
Displays the current linecard TOS marking table.
show interface linecard slot-number tos-marking
Syntax Description
slot-number
|
The number of the identified slot. Enter a value of 0.
|
Defaults
This command has no default settings.
Command Modes
User Exec
Usage Guidelines
Authorization: viewer
Examples
The following example shows the ToS marking table:
NME-APA>enable 5
Password:<cisco>
NME-APA>show interface linecard 0 tos-marking
BE AF1 AF2 AF3 AF4 FE
green 0x0 0xa 0x12 0x1a 0x22 0x2e
yellow 0x0 0xc 0x14 0x1c 0x24 0x2e
red 0x0 0xe 0x16 0x1e 0x24 0x2e
NME-APA>
Related Commands