Table Of Contents

CLI Command Summary By Mode

Chaingroup Configuration Mode Commands     2-287

(config-chaingroup) cert 2-288

Class Map Configuration Mode Commands     2-289

(config-cmap) description 2-290

(config-cmap) match access-list 2-291

(config-cmap) match any 2-292

(config-cmap) match destination-address 2-293

(config-cmap) match port 2-294

(config-cmap) match source-address 2-296

(config-cmap) match virtual-address 2-297

Class Map FTP Inspection Configuration Mode Commands     2-300

(config-cmap-ftp-insp) description 2-301

(config-cmap-ftp-insp) match request-method 2-302

Class Map HTTP Inspection Configuration Mode Commands     2-303

(config-cmap-http-insp) description 2-304

(config-cmap-http-insp) match content 2-305

(config-cmap-http-insp) match content length 2-306

(config-cmap-http-insp) match header 2-307

(config-cmap-http-insp) match header length 2-311

(config-cmap-http-insp) match header mime-type 2-312

(config-cmap-http-insp) match port-misuse 2-314

(config-cmap-http-insp) match request-method 2-316

(config-cmap-http-insp) match transfer-encoding 2-317

(config-cmap-http-insp) match url 2-318

(config-cmap-http-insp) match url length 2-319

Class Map HTTP Load Balancing Configuration Mode Commands     2-321

(config-cmap-http-lb) description 2-322

(config-cmap-http-lb) match class-map 2-323

(config-cmap-http-lb) match http cookie 2-324

(config-cmap-http-lb) match http header 2-325

(config-cmap-http-lb) match http url 2-328

(config-cmap-http-lb) match source-address 2-329

Class Map Management Configuration Mode Commands     2-330

(config-cmap-mgmt) description 2-332

(config-cmap-mgmt) match protocol 2-332

Clear Exec Mode Commands     2-6

clear access-list 2-8

clear accounting log 2-9

clear arp 2-10

clear buffer stats 2-11

clear capture 2-12

clear cde 2-13

clear conn 2-14

clear cores 2-15

clear debug-logfile 2-16

clear fifo stats 2-17

clear ft stats 2-18

clear icmp statistics 2-19

clear interface 2-20

clear ip 2-21

clear line 2-22

clear logging 2-23

clear netio stats 2-24

clear probe 2-25

clear processes log 2-26

clear rserver 2-27

clear rtcache 2-28

clear screen 2-29

clear serverfarm 2-30

clear service-policy 2-31

clear ssh 2-32

clear startup-config 2-33

clear stats 2-34

clear sticky database 2-35

clear tcp statistics 2-36

clear telnet 2-37

clear udp statistics 2-38

clear user 2-39

clear vnet stats 2-40

clear xlate 2-41

Configuration Mode Commands     2-172

(config) aaa accounting default 2-172

(config) aaa authentication login 2-173

(config) aaa group server 2-175

(config) access-group 2-176

(config) access-list ethertype 2-177

(config) access-list extended 2-178

(config) access-list remark 2-184

(config) access-list resequence 2-185

(config) arp 2-186

(config) banner 2-187

(config) boot system 2-189

(config) class-map 2-190

(config) clock summer-time 2-195

(config) clock timezone 2-192

(config) config-register 2-197

(config) context 2-198

(config) crypto chaingroup 2-199

(config) crypto csr-params 2-200

(config) domain 2-201

(config) end 2-202

(config) exit 2-202

(config) ft auto-sync 2-203

(config) ft group 2-204

(config) ft interface vlan 2-205

(config) ft peer 2-206

(config) ft track host 2-207

(config) ft track hsrp 2-208

(config) ft track interface 2-209

(config) hostname 2-202, 2-210

(config) interface 2-211

(config) ip dhcp relay 2-212

(config) ip route 2-213

(config) ldap-server host 2-214

(config) ldap-server port 2-216

(config) ldap-server timeout 2-217

(config) line console 2-218

(config) line vty 2-219

(config) logging buffered 2-221

(config) logging console 2-222

(config) logging device-id 2-223

(config) logging enable 2-224

(config) logging facility 2-225

(config) logging fastpath 2-226

(config) logging history 2-226

(config) logging host 2-228

(config) logging message 2-230

(config) logging monitor 2-231

(config) logging persistent 2-232

(config) logging queue 2-233

(config) logging reject-newconn 2-236

(config) logging standby 2-237

(config) logging supervisor 2-238

(config) logging timestamp 2-239

(config) logging trap 2-240

(config) login timeout 2-220

(config) parameter-map type 2-241

(config) policy-map 2-242

(config) probe 2-245

(config) radius-server attribute nas-ipaddr 2-247

(config) radius-server deadtime 2-248

(config) radius-server host 2-249

(config) radius-server key 2-251

(config) radius-server retransmit 2-252

(config) radius-server timeout 2-253

(config) rate-limit 2-234

(config) resource-class 2-254

(config) role 2-255

(config) rserver 2-256

(config) script file 2-257

(config) serverfarm 2-258

(config) service-policy 2-259

(config) shared-vlan-hostid 2-260

(config) snmp-server community 2-261

(config) snmp-server contact 2-262

(config) snmp-server enable traps 2-263

(config) snmp-server host 2-265

(config) snmp-server location 2-266

(config) snmp-server trap link ietf 2-267

(config) snmp-server trap-source vlan 2-268

(config) snmp-server user 2-269

(config) ssh key 2-271

(config) ssh maxsessions 2-272

(config) ssl-proxy service 2-273

(config) sticky http-cookie 2-274

(config) sticky http-header 2-275

(config) sticky ip-netmask 2-277

(config) tacacs-server deadtime 2-278

(config) tacacs-server host 2-280

(config) tacacs-server key 2-281

(config) tacacs-server timeout 2-282

(config) telnet maxsessions 2-283

(config) timeout xlate 2-284

(config) username 2-285

Console Configuration Mode Commands     2-334

(config-console) databits 2-335

(config-console) parity 2-336

(config-console) speed 2-337

(config-console) stopbits 2-338

Context Configuration Mode Commands     2-339

(config-context) allocate-interface 2-340

(config-context) description 2-341

(config-context) member 2-342

CSR Parameters Configuration Mode Commands     2-343

(config-csr-params) common-name 2-345

(config-csr-params) country-name 2-346

(config-csr-params) email 2-347

(config-csr-params) locality 2-348

(config-csr-params) organization-name 2-349

(config-csr-params) organization-unit 2-350

(config-csr-params) serial-number 2-351

(config-csr-params) state 2-352

Domain Configuration Mode Commands     2-353

(config-domain) add-object 2-354

Exec Mode Commands     2-2

capture 2-2

changeto 2-4

checkpoint 2-5

clear (See Clear Exec Mode Commands) 2-6

configure 2-42

copy capture 2-43

copy core 2-44

copy disk0 2-45

copy ftp 2-47

copy image 2-48

copy licenses 2-49

copy running-config 2-50

copy sftp 2-52

copy startup-config 2-51

copy tftp 2-53

crypto delete 2-54

crypto export 2-55

crypto generate csr 2-56

crypto generate key 2-57

crypto import 2-58

crypto verify 2-60

debug 2-61

delete 2-63

dir 2-64

exit 2-65

format disk0 2-66

ft switchover 2-67

gunzip 2-68

license 2-69

mkdir disk0 2-71

move disk0 2-72

np session 2-73

ping 2-74

reload 2-75

reprogram bootflash 2-76

rmdir disk0 2-77

show (See Show Exec Mode Commands) 2-78

ssh 2-161

system internal 2-162

system watchdog 2-163

tac-pac 2-164

telnet 2-165

terminal 2-166

traceroute 2-167

undebug all 2-168

untar disk0 2-169

write 2-170

xml-show 2-171

FT Group Configuration Mode Commands     2-355

(config-ft-group) associate-context 2-356

(config-ft-group) inservice 2-357

(config-ft-group) peer 2-358

(config-ft-group) peer priority 2-359

(config-ft-group) preempt 2-360

(config-ft-group) priority 2-361

FT Interface Configuration Mode Commands     2-362

(config-ft-intf) ip 2-363

(config-ft-intf) peer ip 2-364

(config-ft-intf) shutdown 2-365

FT Peer Configuration Mode Commands     2-366

(config-ft-peer) ft-interface vlan 2-367

(config-ft-peer) heartbeat 2-368

(config-ft-peer) query-interface 2-369

FT Track Host Configuration Mode Commands     2-370

(config-ft-track-host) peer priority 2-371

(config-ft-track-host) peer probe 2-372

(config-ft-track-host) peer track-host 2-373

(config-ft-track-host) priority 2-374

(config-ft-track-host) probe 2-375

(config-ft-track-host) track-host 2-376

FT Track HSRP Configuration Mode Commands     2-377

(config-ft-track-hsrp) peer priority 2-378

(config-ft-track-hsrp) peer track-hsrp 2-379

(config-ft-track-hsrp) priority 2-380

(config-ft-track-hsrp) track-hsrp 2-381

FT Track Interface Configuration Mode Commands     2-382

(config-ft-track-interface) peer priority 2-383

(config-ft-track-interface) peer track-interface vlan 2-384

(config-ft-track-interface) priority 2-385

(config-ft-track-interface) track-interface vlan 2-386

Interface Configuration Mode Commands     2-387

(config-if) access-group 2-388

(config-if) alias 2-389

(config-if) arp 2-390

(config-if) bridge-group 2-391

(config-if) description 2-392

(config-if) fragment chain 2-392

(config-if) fragment min-mtu 2-393

(config-if) fragment timeout 2-394

(config-if) icmp-guard 2-395

(config-if) ip address 2-396

(config-if) ip df 2-397

(config-if) ip dhcp relay enable 2-398

(config-if) ip dhcp relay server 2-399

(config-if) ip options 2-400

(config-if) ip ttl minimum 2-401

(config-if) ip verify reverse-path 2-402

(config-if) mac-sticky enable 2-403

(config-if) mtu 2-404

(config-if) nat-pool 2-405

(config-if) normalization 2-406

(config-if) peer ip address 2-407

(config-if) service-policy input 2-408

(config-if) shutdown 2-409

LDAP Configuration Mode Commands     2-410

(config-ldap) attribute user-profile 2-411

(config-ldap) baseDN 2-412

(config-ldap) filter search-user 2-413

(config-ldap) server 2-414

Line Configuration Mode Commands     2-415

(config-line) session-limit 2-416

Parameter Map Connection Configuration Mode Commands     2-417

(config-parammap-conn) exceed-mss 2-418

(config-parammap-conn) nagle 2-419

(config-parammap-conn) random-sequence-number 2-420

(config-parammap-conn) reserved-bits 2-421

(config-parammap-conn) set ip tos 2-422

(config-parammap-conn) set tcp ack-delay 2-423

(config-parammap-conn) set tcp buffer-share 2-424

(config-parammap-conn) set tcp mss min 2-425

(config-parammap-conn) set tcp queue-limit 2-426

(config-parammap-conn) set tcp syn-retry 2-427

(config-parammap-conn) set tcp timeout 2-428

(config-parammap-conn) set tcp window-scale 2-429

(config-parammap-conn) set timeout inactivity 2-430

(config-parammap-conn) slowstart 2-431

(config-parammap-conn) syn-data 2-432

(config-parammap-conn) tcp-options 2-433

(config-parammap-conn) urgent-flag 2-436

Parameter Map HTTP Configuration Mode Commands     2-437

(config-parammap-http) case-insensitive 2-438

(config-parammap-http) length 2-439

(config-parammap-http) persistence-rebalance 2-440

(config-parammap-http) server-conn reuse 2-441

(config-parammap-http) set content-maxparse-length 2-442

(config-parammap-http) set header-maxparse-length 2-443

(config-parammap-http) set secondary-cookie-delimiters 2-444

Parameter Map SSL Configuration Mode Commands     2-445

(config-parammap-ssl) cipher 2-446

(config-parammap-ssl) version 2-448

Policy Map Class Configuration Mode Commands     2-453

(config-pmap-c) appl-parameter http advanced-options 2-453

(config-pmap-c) connection 2-454

(config-pmap-c) inspect 2-455

(config-pmap-c) loadbalance policy 2-457

(config-pmap-c) loadbalance vip advertise 2-458

(config-pmap-c) loadbalance vip icmp-reply 2-459

(config-pmap-c) loadbalance vip inservice 2-460

(config-pmap-c) nat dynamic 2-461

(config-pmap-c) nat static 2-462

(config-pmap-c) ssl-proxy 2-464

Policy Map Configuration Mode Commands     2-449

(config-pmap) class 2-451

(config-pmap) description 2-452

Policy Map FTP Inspection Class Configuration Mode Commands     2-469

(config-pmap-ftp-ins-c) deny 2-469

(config-pmap-ftp-ins-c) mask-reply 2-470

Policy Map FTP Inspection Configuration Mode Commands     2-465

(config-pmap-ftp-ins) class 2-466

(config-pmap-ftp-ins) description 2-467

(config-pmap-ftp-ins) match request-method 2-468

Policy Map FTP Inspection Match Configuration Mode Commands     2-471

(config-pmap-ftp-ins-m) deny 2-471

(config-pmap-ftp-ins-m) mask-reply 2-472

Policy Map Inspection HTTP Class Configuration Mode Commands     2-494

(config-pmap-ins-http-c) permit 2-494

(config-pmap-ins-http-c) reset 2-495

Policy Map Inspection HTTP Configuration Mode Commands     2-473

(config-pmap-ins-http) class 2-474

(config-pmap-ins-http) description 2-475

(config-pmap-ins-http) match content 2-476

(config-pmap-ins-http) match content length 2-478

(config-pmap-ins-http) match content-type-verification 2-479

(config-pmap-ins-http) match header 2-480

(config-pmap-ins-http) match header length 2-483

(config-pmap-ins-http) match header mime-type 2-484

(config-pmap-ins-http) match port-misuse 2-487

(config-pmap-ins-http) match request-method 2-488

(config-pmap-ins-http) match strict-http 2-489

(config-pmap-ins-http) match transfer-encoding 2-490

(config-pmap-ins-http) match url 2-492

(config-pmap-ins-http) match url length 2-493

(config-pmap-lb) description 2-500

(config-pmap-mgmt) description 2-524

Policy Map Inspection HTTP Match Configuration Mode Commands     2-496

(config-pmap-ins-http-m) permit 2-496

(config-pmap-ins-http-m) reset 2-497

Policy Map Load Balancing Class Configuration Mode Commands     2-508

(config-pmap-lb-c) drop 2-508

(config-pmap-lb-c) forward 2-509

(config-pmap-lb-c) insert-http 2-510

(config-pmap-lb-c) serverfarm 2-511

(config-pmap-lb-c) set ip tos 2-512

(config-pmap-lb-c) ssl-proxy client 2-513

(config-pmap-lb-c) sticky-serverfarm 2-514

Policy Map Load Balancing Configuration Mode Commands     2-498

(config-pmap-lb) class 2-499

(config-pmap-lb) match http cookie 2-501

(config-pmap-lb) match http header 2-502

(config-pmap-lb) match http url 2-505

(config-pmap-lb) match source-address 2-507

Policy Map Load Balancing Match Configuration Mode Commands     2-515

(config-pmap-lb-m) drop 2-515

(config-pmap-lb-m) forward 2-516

(config-pmap-lb-m) insert-http 2-517

(config-pmap-lb-m) serverfarm 2-518

(config-pmap-lb-m) set ip tos 2-519

(config-pmap-lb-m) ssl-proxy client 2-520

(config-pmap-lb-m) sticky-serverfarm 2-521

Policy Map Management Class Configuration Mode Commands     2-525

(config-pmap-mgmt-c) deny 2-525

(config-pmap-mgmt-c) permit 2-526

Policy Map Management Configuration Mode Commands     2-522

(config-pmap-mgmt) class 2-523

Probe Configuration Mode Commands     1-528

(config-probe-probe_type) connection term 1-530

(config-probe-probe_type) credentials 1-531

(config-probe-probe_type) description 1-532

(config-probe-probe_type) domain 1-533

(config-probe-probe_type) expect address 1-534

(config-probe-probe_type) expect regex 1-535

(config-probe-probe_type) expect status 1-536

(config-probe-probe_type) faildetect 1-537

(config-probe-probe_type) hash 1-538

(config-probe-probe_type) header 1-539

(config-probe-probe_type) interval 1-540

(config-probe-probe_type) ip address 1-541

(config-probe-probe_type) nas ip address 1-541

(config-probe-probe_type) open 1-542

(config-probe-probe_type) passdetect 1-543

(config-probe-probe_type) port 1-544

(config-probe-probe_type) receive 1-545

(config-probe-probe_type) request method 1-546

(config-probe-probe_type) request method get | head 1-547

(config-probe-probe_type) script 1-548

(config-probe-probe_type) send-data 1-549

(config-probe-probe_type) ssl cipher 1-549

(config-probe-probe_type) ssl version 1-551

Radius Configuration Mode Commands     2-552

(config-radius) deadtime 2-553

(config-radius) server 2-554

Real Server Host Configuration Mode Commands     2-555

(config-rserver-host) conn-limit 2-556

(config-rserver-host) description 2-557

(config-rserver-host) inservice 2-557

(config-rserver-host) ip address 2-558

(config-rserver-host) probe 2-559

(config-rserver-host) weight 2-560

Real Server Redirect Configuration Mode Commands     2-561

(config-rserver-redir) conn-limit 2-562

(config-rserver-redir) description 2-563

(config-rserver-redir) inservice 2-563

(config-rserver-redir) webhost-redirection 2-564

Resource Configuration Mode Commands     2-566

(config-resource) limit-resource 2-567

Role Configuration Mode Commands     2-569

(config-role) description 2-570

(config-role) rule 2-570

Serverfarm Host Configuration Mode Commands     2-574

(config-sfarm-host) description 2-575

(config-sfarm-host) failaction 2-575

(config-sfarm-host) predictor 2-577

(config-sfarm-host) probe 2-579

(config-sfarm-host) retcode 2-580

(config-sfarm-host) rserver 2-581

(config-sfarm-host) transparent 2-582

Serverfarm Host Real Server Configuration Mode Commands     2-583

(config-sfarm-host-rs) backup-rserver 2-584

(config-sfarm-host-rs) conn-limit 2-585

(config-sfarm-host-rs) inservice 2-586

(config-sfarm-host-rs) probe 2-587

(config-sfarm-host-rs) weight 2-588

Serverfarm Redirect Configuration Mode Commands     2-589

(config-sfarm-redirect) description 2-590

(config-sfarm-redirect) failaction 2-590

(config-sfarm-redirect) predictor 2-592

(config-sfarm-redirect) rserver 2-595

Serverfarm Redirect Real Server Configuration Mode Commands     2-596

(config-sfarm-redirect-rs) backup-rserver 2-597

(config-sfarm-redirect-rs) conn-limit 2-598

(config-sfarm-redirect-rs) inservice 2-599

(config-sfarm-redirect-rs) weight 2-600

Show Exec Mode Commands     2-78

show aaa 2-82

show access-list 2-83

show accounting log 2-84

show acl-merge 2-85

show arp 2-86

show banner motd 2-87

show bootvar 2-88

show buffer 2-89

show capture 2-90

show cde 2-91

show checkpoint 2-92

show clock 2-93

show conn 2-94

show context 2-95

show copyright 2-96

show crypto 2-97

show debug 2-98

show domain 2-100

show environment 2-101

show fifo 2-102

show file 2-103

show fragment 2-104

show ft 2-105

show hardware 2-106

show hyp 2-107

show icmp statistics 2-108

show interface 2-109

show inventory 2-110

show ip 2-111

show lcp event-history 2-112

show ldap-server 2-113

show license 2-114

show line 2-115

show logging 2-116

show login timeout 2-118

show nat-fabric 2-119

show netio 2-120

show np 2-121

show parameter-map 2-123

show probe 2-124

show processes 2-125

show pvlans 2-126

show radius-server 2-127

show resource allocation 2-128

show resource usage 2-129

show role 2-131

show rserver 2-132

show running-config 2-133

show scp 2-135

show script 2-136

show security internal event-history 2-137

show serverfarm 2-138

show service-policy 2-139

show snmp 2-140

show ssh 2-141

show startup-config 2-142

show stats 2-143

show sticky database 2-145

show system 2-147

show tacacs-server 2-148

show tcp statistics 2-149

show tech-support 2-150

show telnet 2-152

show terminal 2-153

show udp statistics 2-154

show user-account 2-155

show users 2-156

show version 2-157

show vlans 2-158

show vnet 2-159

show xlate 2-160

SSL Proxy Configuration Mode Commands     2-601

(config-ssl-proxy) cert 2-602

(config-ssl-proxy) chaingroup 2-603

(config-ssl-proxy) key 2-604

(config-ssl-proxy) ssl advanced-options 2-605

Sticky Cookie Configuration Mode Commands     2-606

(config-sticky-cookie) cookie insert 2-607

(config-sticky-cookie) cookie offset 2-608

(config-sticky-cookie) cookie secondary 2-609

(config-sticky-cookie) replicate sticky 2-610

(config-sticky-cookie) serverfarm 2-611

(config-sticky-cookie) static cookie value 2-612

(config-sticky-cookie) timeout 2-613

Sticky Header Configuration Mode Commands     2-614

(config-sticky-header) header offset 2-616

(config-sticky-header) replicate sticky 2-617

(config-sticky-header) serverfarm 2-618

(config-sticky-header) sticky header value 2-619

(config-sticky-header) timeout 2-620

Sticky IP Configuration Mode Commands     2-621

(config-sticky-ip) replicate sticky 2-622

(config-sticky-ip) serverfarm 2-623

(config-sticky-ip) static client source 2-625

(config-sticky-ip) timeout 2-626

TACACS+ Configuration Mode Commands     2-628

(config-tacacs+) deadtime 2-629

(config-tacacs+) server 2-630