-
Cisco IOS Configuration Fundamentals and Network Management Command Reference, Release 12.3 T
-
Introduction
-
CFR Commands: absolute through clock timezone
-
CFR Commands: clock update-calendar through escape-character
-
CFR Commands: event application through ip ftp passive
-
CFR Commands: major rising through periodic
-
CFR Commands: ping through service sequence-numbers
-
CFR Commands: service slave-log through show
tee -
CFR Commands: show context through show ip sla monitor total-statistics
-
CFR Commands [12.3T]: 'show kron schedule' through 'show rtr collection-statistics'
-
CFR Commands: show rtr configuration through snmp-server enable informs
-
CFR Commands: snmp-server enable traps through statistics-distribution-interval
-
CFR Commands: stopbits through ttl ip
-
CFR Commands: type dhcp through xsm vdm
-
Appendix: ASCII Character Set and Hex Values (12.3T CF CR)
-
Table Of Contents
memory statistics history table
monitor event-trace cpu-report (EXEC)
monitor event-trace cpu-report (global)
monitor event-trace dump-traces
monitor processes cpu extended
major rising
To set major level threshold values for the buffer, CPU, and memory ROs, use the major rising command in buffer owner configuration mode, CPU owner configuration mode, or memory owner configuration mode. To disable this function, use the no form of this command.
major rising rising-threshold-value [interval interval-value] [falling falling-threshold-value [interval interval-value]] [global]
no major rising
Syntax Description
Command Default
Disabled
Command Modes
Buffer owner configuration mode
CPU owner configuration mode
Memory owner configuration modeCommand History
Usage Guidelines
The interval is the dampening or observation interval time in seconds during which the variations in the rising and falling threshold values are not notified to the ROs or RUs. That is, the interval is the time the system waits to check whether the threshold value stabilizes or not. The interval is set to avoid unnecessary and unwanted threshold notifications. If an interval is not specified, the system takes a default value of 5 seconds.
This command allows you to configure three types of thresholding:
•
System Global Thresholding
•
•
System Global Thresholding
System global thresholding is used when the entire resource reaches a specified value. That is, RUs are notified when the total resource utilization goes above or below a specified threshold value. The notification order is determined by the priority of the RU. The RUs with a lower priority will be notified first, so that these low-priority RUs are expected to reduce the resource utilization. This order prevents the high-priority RUs from getting affected with unwanted notifications.
You can set rising and falling threshold values. For example, if you have set a total CPU utilization threshold value of 70% as the rising major value and 15% as falling major value, then when the total CPU utilization crosses the 70% mark, a major Up notification is sent to all the RUs and when the total CPU utilization falls below 15%, a major Down notification is sent to all the RUs.
Similarly, if you have set a total buffer usage count threshold value of 70% as the rising major value and 15% as falling major value, then when the total buffer usage count crosses the 70% mark, a major Up notification is sent to all the RUs and when the total buffer usage count falls below 15%, a major Down notification is sent to all the RUs.
In the same way, if you have set a total I/O memory usage threshold value of 70% as the rising major value and 15% as falling major value, then when the total memory usage crosses the 70% mark, a major Up notification is sent to all the RUs and when the total memory usage falls below 15%, a major Down notification is sent to all the RUs.
User Local Thresholding
User local thresholding is used when a specified RU exceeds the configured limits. The user local thresholding method prevents a single RU from monopolizing the resources. That is, the specified RU is notified when the resource utilization of the specified RU goes above or below a configured threshold value. For example, if you have set a CPU utilization threshold value of 70% as the rising major value and 15% as falling major value, then when the CPU utilization of the specified RU crosses the 70% mark, a major Up notification is sent to that RU only and when the CPU utilization of the specified RU falls below 15%, a major Down notification is sent to that RU only. The same method applies to buffer and memory ROs also.
Per User Global Thresholding
Per user global thresholding is used when the entire resource reaches a specified value. This value is unique for each RU and notification is sent only to the specified RU. User global thresholding is similar to user local thresholding, except that the global resource usage is compared against the thresholds. That is, only the specified RU is notified when the total resource utilization goes above or below a configured threshold value. For example, if you have set a CPU utilization threshold value of 70% as the rising major value and 15% as falling major value, then when the total CPU utilization crosses the 70% mark, a major Up notification is sent to the specified RU only and when the total CPU utilization falls below 15%, a major Down notification is sent to the specified RU only. The same method applies to buffer and memory ROs also.
Threshold Violations
The Cisco IOS device sends out error messages whenever a threshold is violated. The following examples help you understand the error message pattern when different threshold violations occur in buffer, CPU, and memory ROs:
System Global Threshold Violation in Buffer RO
The threshold violation in buffer RO for a system global threshold shows the following output:
System global threshold-Violation (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:15:11: %SYS-4-GLOBALBUFEXCEED: Buffer usage has gone above global buffer Major thresholdconfigured <value> Current usage :<value>For example:
00:15:11: %SYS-4-GLOBALBUFEXCEED: Buffer usage has gone above global buffer Major thresholdconfigured 100 Current usage :101System global threshold- Recovery (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:17:10: %SYS-5-GLOBALBUFRECOVER: Buffer usage has gone below global buffer Major thresholdconfigured <value> Current usage :<value>For example:
00:17:10: %SYS-5-GLOBALBUFRECOVER: Buffer usage has gone below global buffer Critical thresholdconfigured 70 Current usage :69Per User Global Threshold Violation in Buffer RO
The threshold violation in buffer RO for a user global threshold shows the following output:
User global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:24:04: %SYS-4-RESGLOBALBUFEXCEED: Buffer usage has gone above buffer Major threshold configured by resource user <user-name>configured 100 Current usage :101User global threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:25:08: %SYS-4-RESGLOBALBUFRECOVER: Buffer usage has gone below buffer Major threshold configured by resource user <user-name>configured 76 Current usage :75User Local Threshold Violation in Buffer RO
The threshold violation in buffer RO for a user local threshold shows the following output:
User local threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:31:15: %SYS-4-RESBUFEXCEED: Resource user user_1 has exceeded the buffer Major threshold. configured 108 Current usage :109User local threshold- Recovery (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:31:05: %SYS-5-RESBUFRECOVER: Resource user user_1 has recovered after exceeding the buffer Major threshold. configured 90 Current usage :89System Global Threshold Violation in CPU RO
The threshold violation in CPU RO for a system global threshold shows the following output:
System global threshold- Violation(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly )==========================================================================================00:19:36: %SYS-4-CPURESRISING: System is seeing global cpu util 19% at total level more than the configured major limit 11%System global threshold - Recovery(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly )==========================================================================================00:20:56: %SYS-6-CPURESFALLING: System is no longer seeing global high cpu at total level for the configured major limit 10%, current value 4%Per User Global Threshold Violation in CPU RO
The threshold violation in CPU RO for a user global threshold shows the following output:
User global threshold - Violation(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly )==========================================================================================00:14:21: %SYS-4-CPURESRISING: Resource user <user-name> is seeing global cpu util 11% at total level more than the configured major limit 6%For example:
00:14:21: %SYS-4-CPURESRISING: Resource user Test-proc-14:99s:1w:100n is seeing global cpu util 11% at total level more than the configured major limit 6%User global threshold- Recovery(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly )==========================================================================================00:14:46: %SYS-6-CPURESFALLING: Resource user <user-name> is no longer seeing global high cpu at total level for the configured critical limit 9%, current value 4%For example:
00:14:46: %SYS-6-CPURESFALLING: Resource user Test-proc-14:99s:1w:100n is no longer seeing global high cpu at total level for the configured critical limit 9%, current value 4%User Local Threshold Violation in CPU RO
The threshold violation in CPU RO for a user local threshold shows the following output:
User local threshold - Violation (keywords Critical, Major and Minor will vary accordingly - only process level)==========================================================================================00:12:11: %SYS-4-CPURESRISING: Resource user <user-name> is seeing local cpu util 15% at process level more than the configured minor limit 6 %For example:
00:12:11: %SYS-4-CPURESRISING: Resource user Test-proc-9:85s:15w:100n is seeing local cpu util 15% at process level more than the configured minor limit 6%User local threshold- Recovery (keywords Critical, Major and Minor will vary accordingly - only process level)==========================================================================================00:13:11: %SYS-6-CPURESFALLING: Resource user <user-name> is no longer seeing local high cpu at process level for the configured critical limit 9%, current value 3%System Global Threshold Violation in Memory RO
The threshold violation in memory RO for a system global threshold shows the following output:
System global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)(If violation happens in IO memory pool will be : I/O)==========================================================================================13:53:22: %SYS-5-GLOBALMEMEXCEED: Global Memory has exceeded the Minor thresholdPool: Processor Used: 422703520 Threshold: 373885200For example:
13:54:03: %SYS-5-GLOBALMEMEXCEED: Global Memory has exceeded the Critical thresholdPool: Processor Used: 622701556 Threshold: 467356500System global threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)(If recovery happens in IO memory pool will be : I/O)==========================================================================================%SYS-5-GLOBALMEMRECOVER: Global Memory has recovered after exceeding Minor thresholdPool: Processor Used: 222473448 Threshold: 355190940For example:
13:50:41: %SYS-5-GLOBALMEMRECOVER: Global Memory has recovered after exceeding Critical thresholdPool: Processor Used: 222473152 Threshold: 443988675Per User Global Threshold Violation in Memory RO
The threshold violation in memory RO for a user global threshold shows the following output:
User global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)(If violation happens in IO memory pool will be : I/O)==========================================================================================00:53:14: %SYS-4-RESGLOBALMEMEXCEED: Global Memory has exceeded the Minor threshold configure by resource user <XYZ>Pool: Processor Used: 62273916 Threshold: 62246820User global threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)(If recovery happens in IO memory pool will be : I/O)==========================================================================================00:32:56: %SYS-4-RESGLOBALMEMRECOVER: Global Memory has recovered after exceeding the Critical threshold configure by resource user <XYZ>Pool: Processor Used: 329999508 Threshold: 375865440User Local Threshold Violation in Memory RO
The threshold violation in memory RO for a user local threshold shows the following output:
User local threshold- Violation (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================01:05:42: %SYS-4-RESMEMEXCEED: Resource user <XYZ> has exceeded the Critical memory thresholdPool: Processor Used: 103754740 Threshold: 103744700User local threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:44:43: %SYS-5-RESMEMRECOVER: Resource user <XYZ> has recovered after exceeding the Critical memory thresholdPool: Processor Used: 328892280 Threshold :375865440Examples
Configuring Major Rising Values for System Global Thresholding
The following example shows how to configure the major threshold values for system global thresholding with major rising threshold of 70% at an interval of 12 seconds and major falling threshold of 15% at an interval of 10 seconds:
Router(config-owner-cpu)# major rising 70 interval 12 falling 15 interval 10 globalRouter(config-owner-buffer)# major rising 70 interval 12 falling 15 interval 10 globalRouter(config-owner-memory)# major rising 70 interval 12 falling 15 interval 10 globalConfiguring Major Rising Values for User Local Thresholding
The following example shows how to configure the major threshold values for user local thresholding with major rising threshold of 70% at an interval of 12 seconds and major falling threshold of 15% at an interval of 10 seconds:
Router(config-owner-cpu)# major rising 70 interval 12 falling 15 interval 10Router(config-owner-buffer)# major rising 70 interval 12 falling 15 interval 10Router(config-owner-memory)# major rising 70 interval 12 falling 15 interval 10Configuring Major Rising Values for Per User Global Thresholding
The following example shows how to configure the major threshold values for per user global thresholding with major rising threshold of 70% at an interval of 12 seconds and major falling threshold of 15% at an interval of 10 seconds:
Router(config-owner-cpu)# major rising 70 interval 12 falling 15 interval 10 globalRouter(config-owner-buffer)# major rising 70 interval 12 falling 15 interval 10 globalRouter(config-owner-memory)# major rising 70 interval 12 falling 15 interval 10 globalRelated Commands
maximum
To set the maximum number of archive files of the running configuration to be saved in the Cisco IOS configuration archive, use the maximum command in archive configuration mode. To reset this command to its default, use the no form of this command.
maximum number
no maximum number
Syntax Description
number
Maximum number of archive files of the running configuration to be saved in the Cisco IOS configuration archive.
Defaults
By default, a maximum of ten archive files of the running configuration are saved in the Cisco IOS configuration archive.
Command Modes
Archive configuration
Command History
12.3(7)T
This command was introduced.
12.2(25)S
This command was integrated into Cisco IOS Release 12.2(25)S.
Usage Guidelines
Note
After the maximum number of files has been saved in the Cisco IOS configuration archive, the oldest file will be automatically deleted when the next, most recent file is saved.
Note
Examples
In the following example, a value of 20 is set as the maximum number of archive files of the running configuration to be saved in the Cisco IOS configuration archive:
Router(config)# archiveRouter(config-archive)# path disk0:myconfigRouter(config-archive)# maximum 20Related Commands
memory free low-watermark
To configure a router to issue system logging message notifications when available memory falls below a specified threshold, use the memory free low-watermark command in global configuration mode. To disable memory threshold notifications, use the no form of this command.
memory free low-watermark {processor threshold | io threshold}
no memory free low-watermark
Syntax Description
Defaults
Memory threshold notifications are disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
Using this command, you can configure a router to issue a system logging message each time available free memory falls below a specified threshold ("low-watermark"). Once available free memory rises to 5 percent above the threshold, another notification message is generated.
Examples
The following example specifies a free processor memory notification threshold of 20000 KB:
Router(config)# memory free low-watermark processor 200000If available free processor memory falls below this threshold, the router sends a notification message like this one:
000029: *Aug 12 22:31:19.559: %SYS-4-FREEMEMLOW: Free Memory has dropped below 20000kPool: Processor Free: 66814056 freemem_lwm: 204800000Once available free processor memory rises to a point 5 percent above the threshold, another notification message like this is sent:
000032: *Aug 12 22:33:29.411: %SYS-5-FREEMEMRECOVER: Free Memory has recovered 20000kPool: Processor Free: 66813960 freemem_lwm: 0Related Commands
memory lite
To enable the memory allocation lite (malloc_lite) feature, use the memory lite command in global configuration mode. To disable this feature, use the no form of this command.
memory lite
no memory lite
Syntax Description
This command has no arguments or keywords.
Defaults
This command is enabled by default.
Command Modes
Global configuration
Command History
Usage Guidelines
The malloc_lite feature was implemented to avoid excessive memory allocation overhead for situations where less than 128 bytes were required. This feature is supported for processor memory pools only.
The malloc_lite feature is enabled by default. If the malloc_lite feature is disabled using the no memory lite command, you can re-enable the feature by entering the memory lite command.
Examples
The following example shows how to disable the malloc_lite feature:
no memory liteRelated Commands
scheduler heapcheck process
Performs a "sanity check" for corruption in memory blocks when a process switch occurs.
memory io
To enter memory owner configuration mode and set threshold values for I/O memory, use the memory io command in resource policy node configuration mode. To disable this function, use the no form of this command.
memory io
no memory io
Syntax Description
This command has no arguments or keywords.
Command Default
Disabled
Command Modes
Resource policy node configuration
Command History
Usage Guidelines
This command allows you to enter the memory owner configuration mode and set rising and falling values for critical, major, and minor thresholds.
Examples
The following example shows how to enter memory owner configuration mode:
Router(config-res-policy-node)# memory ioRelated Commands
memory processor
To enter memory owner configuration mode and set the threshold values for the processor memory, use the memory processor command in resource policy node configuration mode. To disable this function, use the no form of this command.
memory processor
no memory processor
Syntax Description
This command has no arguments or keywords.
Command Default
Disabled
Command Modes
Resource policy node configuration
Command History
Usage Guidelines
This command allows you to enter the memory owner configuration mode and set rising and falling values for critical, major, and minor thresholds.
Examples
The following example shows how to enter memory owner configuration mode:
Router(config-res-policy-node)# memory procesaorRelated Commands
memory reserve critical
To configure the size of the memory region to be used for critical notifications (system logging messages), use the memory reserve critical command in global configuration mode. To disable the reservation of memory for critical notifications, use the no form of this command.
memory reserve critical kilobytes
no memory reserve critical
Syntax Description
Defaults
100 kilobytes of memory is reserved for the logging process.
Command Modes
Global configuration
Command History
Usage Guidelines
This command reserves a region of memory on the router so that, when system resources are overloaded, the router retains enough memory to issue critical system logging messages.
Note
Examples
The following example shows how to reserve 1,000 KB of system memory for logging messages at the next system restart:
Router(config)# memory reserve critical 1000Related Commands
memory free low-watermark
Configures a router to issue syslog notifications when available memory falls below a specified threshold.
memory sanity
To perform a "sanity check" for corruption in buffers and queues, use the memory sanity command in global configuration mode. To disable this feature, use the no form of this command.
memory sanity [buffer | queue | all]
no memory sanity
Syntax Description
buffer
(Optional) Specifies checking all buffers.
queue
(Optional) Specifies checking all queues.
all
(Optional) Specifies checking all buffers and queues.
Defaults
This command is not enabled by default.
If the buffer or queue keyword is not specified, a sanity check will be performed on all buffers and queues.Command Modes
Global configuration
Command History
Usage Guidelines
When the memory sanity buffer command is enabled, a sanity check is performed on buffers when a packet buffer is allocated or when a packet buffer is returned to the buffer pool. This command also time-stamps the buffer, which may be useful when tracking the age of a buffer.
The memory sanity command can be saved in the startup configuration file and, therefore, it is not necessary to reconfigure this command each time the router is reloaded. Like the scheduler heapcheck process memory command, the memory sanity command can check for corruption in the I/O memory block.
Enabling the memory sanity command may result in slight router performance degradation.
Examples
The following example shows how to perform a sanity check for corruption in all buffers and queues:
memory sanity allRelated Commands
scheduler heapcheck process memory
Performs a "sanity check" for corruption in memory blocks when a process switch occurs.
memory scan
To enable the Memory Scan feature, use the memory scan command in global configuration mode. To restore the router configuration to the default, use the no form of this command.
memory scan
no memory scan
Syntax Description
This command has no arguments or keywords.
Defaults
This command is disabled by default.
Command Modes
Global configuration
Command History
12.0(4)XE
This command was introduced.
12.0(7)T
This command was integrated in Cisco IOS Release 12.0 T for the Cisco 7500 series only.
Usage Guidelines
The Memory Scan feature adds a low-priority background process that searches all installed dynamic random-access memory (DRAM) for possible parity errors. If errors are found in memory areas that are not in use, this feature attempts to scrub (remove) the errors. The time to complete one memory scan and scrub cycle can range from 10 minutes to several hours, depending on the amount of installed memory. The impact of the Memory Scan feature on the central processing unit (CPU) is minimal. To view the status of the memory scan feature on your router, use the show memory scan command in EXEC mode.
Examples
The following example enables the Memory Scan feature on a Cisco 7500 series router:
Router(config)# memory scanRelated Commands
memory statistics history table
To change the number of hours for which the memory log is maintained, use the memory statistics history table command in global configuration mode. To return the logging to its default values, use the no form of this command.
memory statistics history table number-of-hours
no memory statistics history table number-of-hours
Syntax Description
number-of-hours
Number of hours of history for which the log is maintained.
Valid values are from 12 to 72 hours. The default value is 24 hours.
Command Default
The memory log is maintained for 24 hours.
Command Modes
Global configuration
Command History
Usage Guidelines
This command allows you to change the number of hours for which the memory log is maintained. You cannot disable this command. The no form of the command only returns the logging to its default value.
Examples
The following example shows how to change the memory log time to 48 hours of history:
Router(config)# memory statistics history table 48Related Commands
show memory statistics history table
Displays the history of memory consumption on the Cisco IOS router over a specified period of time.
memory-size iomem
To reallocate the percentage of DRAM to use for I/O memory and processor memory on Cisco 3600 series routers, use the memory-size iomem command in global configuration mode. To revert to the default memory allocation, use the no form of this command.
memory-size iomem i/o-memory-percentage
no memory-size iomem i/o-memory-percentage
Syntax Description
i/o-memory-percentage
The percentage of DRAM allocated to I/O memory. The values permitted are 10, 15, 20, 25, 30, 40, and 50. A minimum of 4 MB of memory is required for I/O memory.
Defaults
The default memory allocation is 25 percent I/O memory and 75 percent processor memory.
Note
Command Modes
Global configuration
Command History
Usage Guidelines
When you specify the percentage of I/O memory in the command line, processor memory automatically acquires the remaining percentage of DRAM memory.
Examples
The following example allocates 40 percent of the DRAM memory to I/O memory and the remaining 60 percent to processor memory:
Router# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)# memory-size iomem 40Router(config)# exitRouter# copy system:running-config nvram:startup-configBuilding configuration...[OK]Router# reloadrommon 1 > bootprogram load complete, entry point: 0x80008000, size: 0x32ea24Self decompressing the image : ########################################################################################## ########################################################################################## ################################################################## [OK]menu (EXEC)
To display a preconfigured user menu, use the menu command in user EXEC or privileged EXEC mode.
menu menu-name
Syntax Description
Command Modes
User EXEC
Privileged EXECCommand History
Usage Guidelines
A user menu is a type of user interface where text descriptions of actions to be performed are displayed to the user. The user can use the menu to select services and functions without having to know the details of command-line interface (CLI) commands.
Menus can be created for users in global configuration mode, using the commands listed in the "Related Commands" section.
A menu can be invoked at either the user or privileged EXEC level, but if an item in the menu contains a privileged EXEC command, the user must be logged in at the privileged level for the command to succeed.
Examples
The following example invokes a menu named OnRamp:
Router> menu OnRampWelcome to OnRamp Internet ServicesType a number to select an option;Type 9 to exit the menu.1 Read email2 UNIX Internet access3 Resume UNIX connection6 Resume next connection9 Exit menu systemRelated Commands
menu <menu-name> single-space
To display menu items single-spaced rather than double-spaced, use the menu menu-name single-space command in global configuration mode.
menu menu-name single-space
Syntax Description
Defaults
Enabled for menus with more than nine items; disabled for menus with nine or fewer items.
Command Modes
Global configuration
Command History
Usage Guidelines
When more than nine menu items are defined, the menu is displayed single-spaced. To configure the menus with nine or fewer items to display single-spaced, use this command.
Examples
In the following example, single-spaced menu items are displayed for the menu named Access1:
menu Access1 single-spaceRelated Commands
menu clear-screen
To clear the terminal screen before displaying a menu, use the menu clear-screen command in global configuration mode.
menu menu-name clear-screen
Syntax Description
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
This command uses a terminal-independent mechanism based on termcap entries defined in the router and the configured terminal type for the user. This command allows the same menu to be used on multiple types of terminals instead of having terminal-specific strings embedded within menu titles. If the termcap entry does not contain a clear string, the menu system enters 24 new lines, causing all existing text to scroll off the top of the terminal screen.
Examples
In the following example, the terminal screen is cleared before displaying the menu named Access1:
Router(config)# menu Access1 clear-screenRelated Commands
menu command
To specify underlying commands for user menus, use the menu command command in global configuration mode.
menu menu-name command menu-item {command | menu-exit}
Syntax Description
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to assign actions to items in a menu. Use the menu text global configuration command to assign text to items. These commands must use the same menu name and menu selection key.
The menu command command has a special keyword for the command argument, menu-exit, that is available only within menus. It is used to exit a submenu and return to the previous menu level, or to exit the menu altogether and return to the EXEC command prompt.
You can create submenus that are opened by selecting entries in another menu. Use the menu EXEC command as the command for the submenu item.
Note
When a menu allows connections (their normal use), the command for an entry activating the connection should contain a resume command, or the line should be configured to prevent users from escaping their sessions with the escape-char none command. Otherwise, when they escape from a connection and return to the menu, there will be no way to resume the session and it will sit idle until the user logs out.
Specifying the resume command as the action that is performed for a selected menu entry permits a user to resume a named connection or connect using the specified name, if there is no active connection by that name. As an option, you can also supply the connect string needed to connect initially. When you do not supply this connect string, the command uses the specified connection name.
You can also use the resume/next command, which resumes the next connection in the user's list of connections. This function allows you to create a single menu entry that steps through all of the user's connections.
Note
When a particular line should always display a menu, that line can be configured with an autocommand line configuration command. Menus can be run on a per-user basis by defining a similar autocommand command for that local username. For more information about the autocommand command, refer to the Cisco IOS Dial Technologies Configuration Guide.
Examples
In the following example, the commands to be issued when the menu user selects option 1, 2, or 3 are specified for the menu named Access1:
menu Access1 command 1 tn3270 vms.cisco.commenu Access1 command 2 rlogin unix.cisco.commenu Access1 command 3 menu-exitThe following example allows a menu user to exit a menu by entering Exit at the menu prompt:
menu Access1 text Exit Exitmenu Access1 command Exit menu-exitRelated Commands
menu default
To specify the menu item to use as the default, use the menu default command in global configuration mode.
menu menu-name default menu-item
Syntax Description
menu-name
Name of the menu. You can specify a maximum of 20 characters.
menu-item
Number, character, or string key of the item to use as the default.
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to specify which menu entry is used when the user presses Enter without specifying an item. The menu entries are defined by the menu command and menu text global configuration commands.
Examples
In the following example, the menu user exits the menu when pressing Enter without selecting an item:
menu Access1 9 text Exit the menumenu Access1 9 command menu-exitmenu Access1 default 9Related Commands
menu line-mode
To require the user to press Enter after specifying an item, use the menu line-mode command in global configuration mode.
menu menu-name line-mode
Syntax Description
Defaults
Enabled for menus with more than nine items. Disabled for menus with nine or fewer items.
Command Modes
Global configuration
Command History
Usage Guidelines
In a menu of nine or fewer items, you ordinarily select a menu item by entering the item number. In line mode, you select a menu entry by entering the item number and pressing Enter. Line mode allows you to backspace over the selected number and enter another number before pressing Enter to issue the command.
This option is activated automatically when more than nine menu items are defined but also can be configured explicitly for menus of nine or fewer items.
In order to use strings as keys for items, the menu line-mode command must be configured.
Examples
In the following example, the line-mode option is enabled for the menu named Access1:
menu Access1 line-modeRelated Commands
menu options
To set options for items in user menus, use the menu options command in global configuration mode.
menu menu-name options menu-item {login | pause}
Syntax Description
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
Use the menu command and menu text global configuration commands to define a menu entry.
Examples
In the following example, a login is required before issuing the command specified by menu entry 3 of the menu named Access1:
menu Access1 options 3 loginRelated Commands
menu prompt
To specify the prompt for a user menu, use the menu prompt command in global configuration mode.
menu menu-name prompt d prompt d
Syntax Description
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
Press Enter after entering the first delimiter. The router will prompt you for the text of the prompt. Enter the text followed by the delimiter, and press Enter.
Use the menu command and menu text commands to define the menu selections.
Examples
In the following example, the prompt for the menu named Access1 is configured as "Select an item.":
Router(config)# menu Access1 prompt /Enter TEXT message. End with the character '/'.Select an item. /Router(config)#Related Commands
menu status-line
To display a line of status information about the current user at the top of a menu, use the menu <menu-name> status-line command in global configuration mode.
menu menu-name status-line
Syntax Description
Defaults
Disabled
Command Modes
Global configuration
Command History
Usage Guidelines
This command displays the status information at the top of the screen before the menu title is displayed. This status line includes the router's host name, the user's line number, and the current terminal type and keymap type (if any).
Examples
In the following example, status information is enabled for the menu named Access1:
menu Access1 status-lineRelated Commands
menu text
To specify the text of a menu item in a user menu, use the menu text command in global configuration mode.
menu menu-name text menu-item menu-text
Syntax Description
Defaults
No text appears for the menu item.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to assign text to items in a menu. Use the menu command command to assign actions to items. These commands must use the same menu name and menu selection key.
You can specify a maximum of 18 items in a menu.
Examples
In the following example, the descriptive text for the three entries is specified for options 1, 2, and 3 in the menu named Access1:
menu Access1 text 1 IBM Information Systemsmenu Access1 text 2 UNIX Internet Accessmenu Access1 text 3 Exit menu systemRelated Commands
menu title
To create a title (banner) for a user menu, use the menu title command in global configuration mode.
menu menu-name title d menu-title d
Syntax Description
Defaults
The menu does not have a title.
Command Modes
Global configuration
Command History
Usage Guidelines
The menu title command must use the same menu name used with the menu text and menu command commands used to create a menu.
You can position the title of the menu horizontally by preceding the title text with blank characters. You can also add lines of space above and below the title by pressing Enter.
Follow the title keyword with one or more blank characters and a delimiting character of your choice. Then enter one or more lines of text, ending the title with the same delimiting character. You cannot use the delimiting character within the text of the message.
When you are configuring from a terminal and are attempting to include special control characters, such as a screen-clearing string, you must use Ctrl-V before the special control characters so that they are accepted as part of the title string. The string ^[[H^[[J is an escape string used by many VT100-compatible terminals to clear the screen. To use a special string, you must enter Ctrl-V before each escape character.
You also can use the menu clear-screen global configuration command to clear the screen before displaying menus and submenus, instead of embedding a terminal-specific string in the menu title. The menu clear-screen command allows the same menu to be used on different types of terminals.
Examples
In the following example, the title that will be displayed is specified when the menu named Access1 is invoked. Press Enter after the second slash (/) to display the prompt.
Router(config)# menu Access1 title /^[[H^[[JEnter TEXT message. End with the character '/'.Welcome to Access1 Internet ServicesType a number to select an option;Type 9 to exit the menu./Router(config)#Related Commands
microcode (12000)
To load a Cisco IOS software image on a line card from Flash memory or the GRP card on a Cisco 12000 series Gigabit Switch Router (GSR), use the microcode command in global configuration mode. To load the microcode bundled with the GRP system image, use the no form of this command.
microcode {oc12-atm | oc12-pos | oc3-pos4} {flash file-id [slot] | system [slot]}
no microcode {oc12-atm | oc12-pos | oc3-pos4} [flash file-id [slot] | system [slot]]
Syntax Description
Defaults
The default is to load the image from the GRP card (system).
Command Modes
Global configuration
Command History
Usage Guidelines
In addition to the Cisco IOS image that resides on the GRP card, each line card on a Cisco 12000 series has a Cisco IOS image. When the router is reloaded, the specified image is loaded onto the GRP card and then automatically downloaded to all the line cards.
Normally, you want the same Cisco IOS image on the GRP card and all line cards. However, if you want to upgrade a line card with a new version of microcode for testing or to fix a defect, you might need to load a Cisco IOS image that is different from the one on the line card. Additionally, you might need to load a new image on the line card to work around a problem that is affecting only one of the line cards.
To load a Cisco IOS image on a line card, first use the copy tftp command to download the Cisco IOS image to a slot on one of the PCMCIA Flash memory cards. Then use the microcode command to download the image to the line card, followed by the microcode reload command to start the image. Immediately after you enter the microcode reload command and press Return, the system reloads all microcode. Global configuration mode remains enabled. After the reloading is complete, enter the exit command to return to the EXEC system prompt.
To verify that the correct image is running on the line card, use the execute-on slot slot show version command.
For additional information on GSR configuration, refer to the documentation specific to your Cisco IOS software release.
Examples
In the following example, the Cisco IOS software image in slot 0 is downloaded to the line card in slot 10. This software image is used when the system is booted, a line card is inserted or removed, or the microcode reload global configuration command is issued.
Router(config)# microcode oc3-POS-4 flash slot0:fip.v141-7 10Router(config)# microcode reload 10In this example, the user would issue the execute-on slot 10 show version command to verify that the correct version is loaded.
Related Commands
microcode (7000/7500)
To specify the location of the microcode that you want to download from Flash memory into the writable control store (WCS) on Cisco 7000 series (including RSP based routers) or Cisco 7500 series routers, use the microcode command in global configuration mode. To load the microcode bundled with the system image, use the no form of this command.
microcode interface-type {flash-filesystem:filename [slot] | rom | system [slot]]}
no microcode interface-type {flash-filesystem:filename [slot] | rom | system [slot]}
Syntax Description
Defaults
The default is to load from the microcode bundled in the system image.
Command Modes
Global configuration
Command History
Usage Guidelines
If you do not use the microcode reload command after using the microcode command, the microcode reload command will be written to the configuration file automatically.
When using Dual RSPs for simple hardware backup, ensure that the master and slave RSP card contain the same microcode image in the same location when the router is to load the interface processor microcode from a Flash file system. Thus, if the slave RSP becomes the master, it will be able to find the microcode image and download it to the interface processor.
Examples
In the following example, all FIP cards will be loaded with the microcode found in Flash memory file fip.v141-7 when the system is booted, when a card is inserted or removed, or when the microcode reload global configuration command is issued. The configuration is then written to the startup configuration file.
Router(config)# microcode fip slot0:fip.v141-7Router(config)# endRouter# copy system:running-config nvram:startup-configRelated Commands
more flh:logfile
Displays the system console output generated during the Flash load helper operation.
microcode (7200)
To configure a default override for the microcode that is downloaded to the hardware on a Cisco 7200 series router, use the microcode command in global configuration mode. To revert to the default microcode for the current running version of the Cisco IOS software, use the no form of this command.
microcode {ecpa | pcpa} location
no microcode {ecpa | pcpa}
Syntax Description
ecpa
ESCON Channel Port Adapter (CPA) interface.
pcpa
Parallel CPA interface.
location
Location of microcode, including the device and filename.
Defaults
If the default or no form of the command is specified, the driver uses the default microcode for the current running version of the Cisco IOS software.
Command Modes
Global configuration
Command History
Usage Guidelines
If there are any default overrides when the configuration is written, then the microcode reload command will be written to the configuration automatically. This action enables the configured microcode to be downloaded at system startup.
The CPA microcode image is preloaded on Flash memory cards for Cisco 7200-series routers for Cisco IOS Release 11.3(3)T and later releases. You may be required to copy a new image to Flash memory when a new microcode image becomes available.
For more information on the CPA configuration and maintenance, refer to the "Configuring Cisco Mainframe Channel Connection Adapters" chapter in the Release 12.2 Cisco IOS Bridging and IBM Networking Configuration Guide.
Examples
The following example instructs the Cisco IOS software to load the microcode from an individual microcode image that is stored as a file on the Flash card inserted in Flash card slot 0:
microcode ecpa slot0:xcpa26-1Related Commands
microcode reload (7200)
Resets and reloads the specified hardware in a Cisco 7200 series router.
show microcode
Displays microcode information.
microcode reload (12000)
To reload the Cisco IOS image from a line card on Cisco 12000 series routers, use the microcode reload command in global configuration mode.
microcode reload [slot-number]
Syntax Description
Command Modes
Global configuration
Command History
Usage Guidelines
In addition to the Cisco IOS image that resides on the GRP card, each line card on Cisco 12000 series routers has a Cisco IOS image. When the router is reloaded, the specified Cisco IOS image is loaded onto the GRP card and automatically downloaded to all the line cards.
Normally, you want the same Cisco IOS image on the GRP card and all line cards. However, if you want to upgrade a line card with a new version of microcode for testing or to fix a defect, you might need to load a different Cisco IOS image. Additionally, you might need to load a new image on the line card to work around a problem affecting only one of the line cards.
To load a Cisco IOS image on a line card, first use the copy tftp command to download the Cisco IOS image to a slot on one of the PCMCIA Flash memory cards. Then use the microcode command to download the image to the line card, followed by the microcode reload command to start the image. To verify that the correct image is running on the line card, use the execute-on slot slot show version command.
For additional information on GSR configuration, refer to the "Observing System Startup and Performing a Basic Configuration" chapter in the Cisco 12000 series installation and configuration guides.
The microcode reload (12000) command allows you to issue another command immediately.
Note
Examples
In the following example, the microcode firmware is reloaded on the line card in slot 10:
Router(config)# microcode reload 10Related Commands
microcode (12000)
Loads a Cisco IOS software image on a line card from Flash memory or the GRP card on a Cisco 12000 series GSR.
microcode reload (7000/7500)
To reload the processor card on the Cisco 7000 series with RSP7000 or Cisco 7500 series routers, use the microcode reload command in global configuration mode.
microcode reload [slot-number]
Syntax Description
Defaults
No default behaviors or values.
Command Modes
Global configuration
Command History
10.3
This command was introduced for Cisco 7500 series routers.
12.3(8)T
The slot-number argument was added for Cisco 7500 series routers.
Usage Guidelines
This command reloads the microcode without rebooting the router. Immediately after you enter the microcode reload command, the system reloads all microcode. Global configuration mode remains enabled.
Note
Examples
In the following example, all controllers are reset, and the microcode specified in the current configuration is loaded:
Router(config)# microcode reloadRelated Commands
microcode (7000/7500)
Specifies the location from where microcode should be loaded when the microcode reload command is processed on RSP-based routers.
microcode reload (7200)
To reload the Cisco IOS microcode image on an ESCON CPA card in the Cisco 7200 series router, use the microcode reload command in privileged EXEC mode.
microcode reload {all | ecpa [slot slot-number] | pcpa [slot slot-number]}
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Hardware types that do not support downloadable microcode are unaffected by the microcode reload all command.
You will be prompted for confirmation before the microcode reload command is executed.
Examples
The following example reloads the ESCON CPA microcode in slot 5 with the currently configured microcode:
Router# microcode reload ecpa slot 5Related Commands
minor rising
To set minor level threshold values for the buffer, CPU, and memory ROs, use the minor rising command in buffer owner configuration mode, CPU owner configuration mode, or memory owner configuration mode. To disable this function, use the no form of this command.
minor rising rising-threshold-value [interval interval-value] [falling falling-threshold-value [interval interval-value]] [global]
no minor rising
Syntax Description
Command Default
Disabled by default.
Command Modes
Buffer owner configuration mode
CPU owner configuration mode
Memory owner configuration modeCommand History
Usage Guidelines
The interval is the dampening or observation interval time in seconds during which the variations in the rising and falling threshold values are not notified to the ROs or RUs. That is, the interval is the time the system waits to check whether the threshold value stabilizes or not. The interval is set to avoid unnecessary and unwanted threshold notifications. If an interval is not specified, the system takes a default value of 5 seconds.
This command allows you to configure three types of thresholding:
•
•
•
System Global Thresholding
System global thresholding is used when the entire resource reaches a specified value. That is, RUs are notified when the total resource utilization goes above or below a specified threshold value. The notification order is determined by the priority of the RU. The RUs with a lower priority will be notified first, so that these low-priority RUs are expected to reduce the resource utilization. This order prevents the high-priority RUs from getting affected with unwanted notifications.
You can set rising and falling threshold values. For example, if you have set a total CPU utilization threshold value of 60% as the rising minor value and 5% as falling minor value, then when the total CPU utilization crosses the 60% mark, a minor Up notification is sent to all the RUs and when the total CPU utilization falls below 5%, a minor Down notification is sent to all the RUs.
Similarly, if you have set a total buffer usage count threshold value of 60% as the rising minor value and 5% as falling minor value, then when the total buffer usage count crosses the 60% mark, a minor Up notification is sent to all the RUs and when the total buffer usage count falls below 5%, a minor Down notification is sent to all the RUs.
In the same way, if you have set a total I/O memory usage threshold value of 60% as the rising minor value and 5% as falling minor value, then when the total memory usage crosses the 60% mark, a minor Up notification is sent to all the RUs and when the total memory usage falls below 5%, a minor Down notification is sent to all the RUs.
User Local Thresholding
User local thresholding is used when a specified RU exceeds the configured limits. The user local thresholding method prevents a single RU from monopolizing the resources. That is, the specified RU is notified when the resource utilization of the specified RU goes above or below a configured threshold value. For example, if you have set a CPU utilization threshold value of 60% as the rising minor value and 5% as falling minor value, then when the CPU utilization of the specified RU crosses the 60% mark, a minor Up notification is sent to that RU only and when the CPU utilization of the specified RU falls below 5%, a minor Down notification is sent to that RU only. The same method applies to buffer and memory ROs also.
Per User Global Thresholding
Per user global thresholding is used when the entire resource reaches a specified value. This value is unique for each RU and notification is sent only to the specified RU. User global thresholding is similar to user local thresholding, except that the global resource usage is compared against the thresholds. That is, only the specified RU is notified when the total resource utilization goes above or below a configured threshold value. For example, if you have set a CPU utilization threshold value of 60% as the rising minor value and 5% as falling minor value, then when the total CPU utilization crosses the 60% mark, a minor Up notification is sent to the specified RU only and when the total CPU utilization falls below 5%, a minor Down notification is sent to the specified RU only. The same method applies to buffer and memory ROs also.
Threshold Violations
The Cisco IOS device sends out error messages whenever a threshold is violated. The following examples help you understand the error message pattern when different threshold violations occur in buffer, CPU, and memory ROs:
System Global Threshold Violation in Buffer RO
The threshold violation in buffer RO for a system global threshold shows the following output:
System global threshold-Violation (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:15:11: %SYS-4-GLOBALBUFEXCEED: Buffer usage has gone above global buffer Critical thresholdconfigured <value> Current usage :<value>For example:
00:15:11: %SYS-4-GLOBALBUFEXCEED: Buffer usage has gone above global buffer Critical thresholdconfigured 144 Current usage :145System global threshold- Recovery (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:17:10: %SYS-5-GLOBALBUFRECOVER: Buffer usage has gone below global buffer Critical thresholdconfigured <value> Current usage :<value>For example:
00:17:10: %SYS-5-GLOBALBUFRECOVER: Buffer usage has gone below global buffer Critical thresholdconfigured 90 Current usage :89Per User Global Threshold Violation in Buffer RO
The threshold violation in buffer RO for a user global threshold shows the following output:
User global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:24:04: %SYS-4-RESGLOBALBUFEXCEED: Buffer usage has gone above buffer Critical threshold configured by resource user <user-name>configured 144 Current usage :145User global threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)==========================================================================================00:25:08: %SYS-4-RESGLOBALBUFRECOVER: Buffer usage has gone below buffer Critical threshold configured by resource user <user-name>configured 126 Current usage :125User Local Threshold Violation in Buffer RO
The threshold violation in buffer RO for a user local threshold shows the following output:
User local threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:31:15: %SYS-4-RESBUFEXCEED: Resource user user_1 has exceeded the buffer Critical threshold. configured 108 Current usage :109User local threshold- Recovery (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:31:05: %SYS-5-RESBUFRECOVER: Resource user user_1 has recovered after exceeding the buffer Critical threshold. configured 90 Current usage :89System Global Threshold Violation in CPU RO
The threshold violation in CPU RO for a system global threshold shows the following output:
System global threshold- Violation(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly==========================================================================================00:19:36: %SYS-4-CPURESRISING: System is seeing global cpu util 19% at total level more than the configured minor limit 11%System global threshold - Recovery(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly==========================================================================================00:20:56: %SYS-6-CPURESFALLING: System is no longer seeing global high cpu at total level for the configured minor limit 10%, current value 4%Per User Global Threshold Violation in CPU RO
The threshold violation in CPU RO for a user global threshold shows the following output:
User global threshold - Violation(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly==========================================================================================00:14:21: %SYS-4-CPURESRISING: Resource user <user-name> is seeing global cpu util 11% at total level more than the configured minor limit 6 %For example:
00:14:21: %SYS-4-CPURESRISING: Resource user Test-proc-14:99s:1w:100n is seeing global cpu util 11% at total level more than the configured minor limit 6%User global threshold- Recovery(1) keywords Critical, Major and Minor will vary accordingly(2) keywords total, process and interrupt will vary accordingly==========================================================================================00:14:46: %SYS-6-CPURESFALLING: Resource user <user-name> is no longer seeing global high cpu at total level for the configured critical limit 9%, current value 4%For example:
00:14:46: %SYS-6-CPURESFALLING: Resource user Test-proc-14:99s:1w:100n is no longer seeing global high cpu at total level for the configured critical limit 9%, current value 4%User Local Threshold Violation in CPU RO
The threshold violation in CPU RO for a user local threshold shows the following output:
User local threshold - Violation (keywords Critical, Major and Minor will vary accordingly - only process level)==========================================================================================00:12:11: %SYS-4-CPURESRISING: Resource user <user-name> is seeing local cpu util 15% at process level more than the configured minor limit 6%For example:
00:12:11: %SYS-4-CPURESRISING: Resource user Test-proc-9:85s:15w:100n is seeing local cpu util 15% at process level more than the configured minor limit 6%User local threshold- Recovery (keywords Critical, Major and Minor will vary accordingly - only process level)==========================================================================================00:13:11: %SYS-6-CPURESFALLING: Resource user <user-name> is no longer seeing local high cpu at process level for the configured critical limit 9%, current value 3%System Global Threshold Violation in Memory RO
The threshold violation in memory RO for a system global threshold shows the following output:
System global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)(If violation happens in IO memory pool will be : I/O)==========================================================================================13:53:22: %SYS-5-GLOBALMEMEXCEED: Global Memory has exceeded the Minor thresholdPool: Processor Used: 422703520 Threshold: 373885200For example:
13:54:03: %SYS-5-GLOBALMEMEXCEED: Global Memory has exceeded the Critical thresholdPool: Processor Used: 622701556 Threshold: 467356500System global threshold - Recovery ( keywords Critical, Major and Minor alone will vary accordingly )(If recovery happens in IO memory pool will be : I/O)==========================================================================================%SYS-5-GLOBALMEMRECOVER: Global Memory has recovered after exceeding Minor thresholdPool: Processor Used: 222473448 Threshold: 355190940For example:
13:50:41: %SYS-5-GLOBALMEMRECOVER: Global Memory has recovered after exceeding Critical thresholdPool: Processor Used: 222473152 Threshold: 443988675Per User Global Threshold Violation in Memory RO
The threshold violation in memory RO for a user global threshold shows the following output:
User global threshold - Violation (keywords Critical, Major and Minor alone will vary accordingly)(If violation happens in IO memory pool will be : I/O)==========================================================================================00:53:14: %SYS-4-RESGLOBALMEMEXCEED: Global Memory has exceeded the Minor threshold configure by resource user <XYZ>Pool: Processor Used: 62273916 Threshold: 62246820User global threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)(If recovery happens in IO memory pool will be : I/O)==========================================================================================00:32:56: %SYS-4-RESGLOBALMEMRECOVER: Global Memory has recovered after exceeding the Critical threshold configure by resource user <XYZ>Pool: Processor Used: 329999508 Threshold: 375865440User Local Threshold Violation in Memory RO
The threshold violation in memory RO for a user local threshold shows the following output:
User local threshold- Violation (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================01:05:42: %SYS-4-RESMEMEXCEED: Resource user <XYZ> has exceeded the Critical memory thresholdPool: Processor Used: 103754740 Threshold: 103744700User local threshold - Recovery (keywords Critical, Major and Minor alone will vary accordingly)=========================================================================================00:44:43: %SYS-5-RESMEMRECOVER: Resource user <XYZ> has recovered after exceeding the Critical memory thresholdPool: Processor Used: 328892280 Threshold :375865440Examples
Configuring Minor Rising Values for System Global Thresholding
The following example shows how to configure the minor threshold values for the system global thresholding with minor rising threshold of 60% at an interval of 12 seconds and minor falling threshold of 5% at an interval of 10 seconds:
Router(config-owner-cpu)# minor rising 60 interval 12 falling 5 interval 10 globalRouter(config-owner-buffer)# minor rising 60 interval 12 falling 5 interval 10 globalRouter(config-owner-memory)# minor rising 60 interval 12 falling 5 interval 10 globalConfiguring Minor Rising Values for User Local Thresholding
The following example shows how to configure the minor threshold values for user local thresholding with minor rising threshold of 60% at an interval of 12 seconds and minor falling threshold of 5% at an interval of 10 seconds:
Router(config-owner-cpu)# minor rising 60 interval 12 falling 5 interval 10Router(config-owner-buffer)# minor rising 60 interval 12 falling 5 interval 10Router(config-owner-memory)# minor rising 60 interval 12 falling 5 interval 10Configuring Minor Rising Values for Per User Global Thresholding
The following example shows how to configure the minor threshold values for per user global thresholding with minor rising threshold of 60% at an interval of 12 seconds and minor falling threshold of 5% at an interval of 10 seconds:
Router(config-owner-cpu)# minor rising 60 interval 12 falling 5 interval 10 globalRouter(config-owner-buffer)# minor rising 60 interval 12 falling 5 interval 10 globalRouter(config-owner-memory)# minor rising 60 interval 12 falling 5 interval 10 globalRelated Commands
mkdir
To create a new directory in a Class C Flash file system, use the mkdir command in EXEC mode.
mkdir directory
Syntax Description
Command Modes
EXEC
Command History
Usage Guidelines
This command is only valid on Class C Flash file systems.
If you do not specify the directory name in the command line, the router prompts you for it.
Examples
The following example creates a directory named newdir:
Router# mkdir newdirMkdir file name [newdir]?Created dir flash:newdirRouter# dirDirectory of flash:2 drwx 0 Mar 13 1993 13:16:21 newdir8128000 bytes total (8126976 bytes free)Related Commands
dir
Displays a list of files on a file system.
rmdir
Removes an existing directory in a Class C Flash file system.
monitor event-trace (EXEC)
To control the event trace function for a specified Cisco IOS software subsystem component, use the monitor event-trace (EXEC) command in privileged EXEC mode.
monitor event-trace component {clear | disable | dump [pretty] | enable | one-shot}
Syntax Description
Command Modes
Privileged EXEC
Command History
12.0(18)S
This command was introduced.
12.2(8)T
This command was integrated into Cisco IOS Release 12.2(8)T.
Usage Guidelines
Use the monitor event-trace (EXEC) command to control what, when, and how event trace data is collected. Use this command after you have configured the event trace functionality on the networking device using the monitor event-trace (global) command.
Note
The Cisco IOS software allows for the subsystem components to define whether support for event tracing is enabled or disabled at boot time. You can enable or disable event tracing in two ways: using the monitor event-trace (EXEC) command in privileged EXEC mode or using the monitor event-trace (global) command in global configuration mode. To enable event tracing again, you would enter the enable form of either of these commands.
To determine whether a subsystem has enabled or disabled event tracing, use the monitor event-trace ? command to get a list of software components that support event tracing. To determine whether event tracing is enabled by default for the subsystem, use the show monitor event-trace command to view trace messages.
Use the show monitor event-trace command to display trace messages.
Use the monitor event-trace component dump command to save trace message information for a single event. By default, trace information is saved in binary format. If you want to save trace messages in ASCII format, possibly for additional application processing, use the monitor event-trace component dump pretty command.
To write the trace messages for all events currently enabled on a networking device to a file, enter the monitor event-trace dump-traces command.
To configure the file where you want to save trace information, use the monitor event-trace (global) command.
Examples
The following example shows the privileged EXEC commands to stop event tracing, clear the current contents of memory, and re-enable the trace function for the IPC component. This example assumes that the tracing function is configured and enabled on the networking device.
Router# monitor event-trace ipc disableRouter# monitor event-trace ipc clearRouter# monitor event-trace ipc enableThe following example shows how the monitor event-trace one-shot command accomplishes the same function as the previous example except in one command. In this example, once the size of the trace message file has been exceeded, the trace is terminated.
Router# monitor event-trace ipc one-shotThe following example shows the command for writing trace messages for an event in binary format. In this example, the trace messages for the IPC component are written to a file.
Router# monitor event-trace ipc dumpThe following example shows the command for writing trace messages for an event in ASCII format. In this example, the trace messages for the MBUS component are written to a file.
Router# monitor event-trace mbus dump prettyRelated Commands
monitor event-trace (global)
To configure event tracing for a specified Cisco IOS software subsystem component, use the monitor event-trace (global) command in global configuration mode. To change the default setting to enable or disable event tracing, refer to the "Usage Guidelines" section for this command.
monitor event-trace component {disable | dump-file filename | enable | size number}
Syntax Description
Defaults
Enabled or disabled depending on the software component.
Command Modes
Global configuration
Command History
12.0(18)S
This command was introduced.
12.2(8)T
This command was integrated into Cisco IOS Release 12.2(8)T.
Usage Guidelines
Use the monitor event-trace (global) command to enable or disable event tracing and to configure event trace parameters for Cisco IOS software subsystem components.
Note
The Cisco IOS software allows the subsystem components to define whether support for event tracing is enabled or disabled by default. The command interface for event tracing allows users to change the default two ways: using the monitor event-trace (EXEC) command in privileged EXEC mode or using the monitor event-trace (global) command in global configuration mode.
Additionally, default settings do not show up in the configuration file. If the subsystem software enables event tracing by default, the monitor event-trace component enable command will not show up in the configuration file of the networking device; however, disabling event tracing that has been enabled by default by the subsystem will create a line in the configuration file.
Note
To determine whether a subsystem has enabled or disabled event tracing, use the monitor event-trace ? command to get a list of software components that support event tracing.
To determine whether event tracing is enabled by default for the subsystem, use the show monitor event-trace command to view trace messages.
Examples
The following example shows how to enable event tracing for the IPC subsystem component in Cisco IOS software and configure the size to 4096 messages. The trace messages file is set to ipc-dump in slot0 (flash memory).
monitor event-trace ipc enablemonitor event-trace ipc dump-file slot0:ipc-dumpmonitor event-trace ipc size 4096Related Commands
monitor event-trace cpu-report (EXEC)
To monitor the event tracing of the CPU reports, use the monitor event-trace cpu-report command in user EXEC or privileged EXEC mode.
monitor event-trace cpu-report {clear | continuous [cancel] | disable | dump [pretty] | enable | one-shot}
Syntax Description
Command Default
Disabled
Command Modes
User EXEC
Privileged EXECCommand History
Examples
The following example shows how to enable event tracing of the CPU reports:
Router# monitor event-trace cpu-report enableThe following example shows how to enable continuous event tracing of the CPU reports:
Router# monitor event-trace cpu-report continuousThe following example shows how to dump the event tracing information into a file in ASCII format:
Router# monitor event-trace cpu-report dump prettyThe following example shows how to clear the event tracing information:
Router# monitor event-trace cpu-report clearRelated Commands
show monitor event-trace cpu-report
Displays the CPU report details for event tracing on a networking device.
monitor event-trace cpu-report (global)
To monitor the collection of CPU report traces, use the monitor event-trace cpu-report command in global configuration mode.
monitor event-trace cpu-report {disable | dump-file location | enable | size | stacktrace}
Syntax Description
Command Default
Disabled
Command Modes
Global configuration
Command History
Examples
The following example shows how to enable event tracing of the CPU reports:
Router(config)# monitor event-trace cpu-report enableThe following example shows how to dump the event tracing information into a file at \\http:\\www.cisco.com location:
Router# monitor event-trace cpu-report dump-file http:\\www.cisco.comThe following example shows how to disable the event tracing information:
Router# monitor event-trace cpu-report disableThe following example shows how to first clear the event tracing and then trace the call stacks at the tracepoints 4:
Router# monitor event-trace cpu-report stacktrace 4Related Commands
show monitor event-trace cpu-report
Displays the CPU report details for event tracing on a networking device.
monitor event-trace dump-traces
To save trace messages for all event traces currently enabled on the networking device, use the monitor event-trace dump-traces command in privileged EXEC mode.
monitor event-trace dump-traces [pretty]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.0(18)S
This command was introduced.
12.2(8)T
This command was integrated into Cisco IOS Release 12.2(8)T.
Usage Guidelines
Use the monitor event-trace dump-traces command to save trace message information for all event traces currently enabled on a networking device. By default, trace information is saved in binary format. If you want to save trace messages in ASCII format, possibly for additional application processing, use the monitor event-trace dump-traces pretty command.
To write the trace messages for an individual trace event to a file, enter the monitor event-trace (EXEC) command.
To configure the file where you want to save messages, use the monitor event-trace (global) command.
Examples
The following example shows how to save the trace messages in binary format for all event traces enabled on the networking device.
monitor event-trace dump-tracesThe following example shows how to save the trace messages in ASCII format for all event traces enabled on the networking device.
monitor event-trace dump-traces prettyRelated Commands
monitor processes cpu extended
To configure a process or processes to be included in the extended load monitor report, use the monitor processes cpu extended command in user EXEC or privileged EXEC mode. To disable this function, use the no form of this command.
monitor processes cpu extended process-id-list
no monitor processes cpu extended process-id-list
Syntax Description
process-id-list
Specifies the list of process identifiers (PIDs). You can specify a maximum of eight processes. Valid value ranges from 1 to 2147483647.
Command Default
Disabled by default.
Command Modes
User EXEC
Privileged EXECCommand History
Usage Guidelines
This command marks a process or processes to be monitored for extended CPU load. You can specify a maximum of eight processes to be monitored using this command. This command is used to forcibly put a process in the latency report generated by the extended load monitor.
Examples
The following example shows how to enable extended CPU load monitor for the process with PID 2:
Router# monitor processes cpu extended 2Related Commands
mop device-code
To identify the type of device sending Maintenance Operation Protocol (MOP) System Identification (sysid) messages and request program messages, use the mop device-code command in global configuration mode. To set the identity to the default value, use the no form of this command.
mop device-code {cisco | ds200}
no mop device-code {cisco | ds200}
Syntax Description
Defaults
Cisco device code
Command Modes
Global configuration
Command History
Usage Guidelines
The sysid messages and request program messages use the identity information indicated by this command.
Examples
The following example identifies a DECserver 200 device as sending MOP sysid and request program messages:
mop device-code ds200Related Commands
mop sysid
Enables an interface to send out periodic MOP system identification messages.
mop retransmit-timer
To configure the length of time that the Cisco IOS software waits before resending boot requests to a Maintenance Operation Protocol (MOP) server, use the mop retransmit-timer command in global configuration mode. To reinstate the default value, use the no form of this command.
mop retransmit-timer seconds
no mop retransmit-timer
Syntax Description
seconds
Sets the length of time (in seconds) that the software waits before resending a message. The value is a number from 1 to 20.
Defaults
4 seconds
Command Modes
Global configuration
Command History
Usage Guidelines
By default, when the software sends a request that requires a response from a MOP boot server and the server does not respond, the message is re-sent after 4 seconds. If the MOP boot server and router are separated by a slow serial link, it might take longer than 4 seconds for the software to receive a response to its message. Therefore, you might want to configure the software to wait longer than 4 seconds before resending the message if you are using such a link.
Examples
In the following example, if the MOP boot server does not respond within 10 seconds after the router sends a message, the server will resend the message:
mop retransmit-timer 10Related Commands
mop device-code
Identifies the type of device sending MOP sysid messages and requests program messages.
mop enabled
Enables an interface to support the MOP.
mop retries
To configure the number of times the Cisco IOS software will resend boot requests to a Maintenance Operation Protocol (MOP) server, use the mop retries command in global configuration mode. To reinstate the default value, use the no form of this command.
mop retries count
no mop retries
Syntax Description
count
Indicates the number of times the software will resend a MOP boot request. The value is a number from 3 to 24. The default is 8.
Defaults
8 times
Command Modes
Global configuration
Command History
Examples
In the following example, the software will attempt to resend a message to an unresponsive host 11 times before declaring a failure:
Router(config)# mop retries 11Related Commands
more
To display the contents of a file, use the more command in EXEC mode.
more [/ascii | /binary | /ebcdic] url
Syntax Description
Command Modes
EXEC
Command History
Usage Guidelines
The more system:running-config command displays the same output as the show running-config command. The more nvram:startup-config command is recommended as a replacement for the show startup-config command and the show configuration command.
You can use this command to display configuration files, as follows:
•
•
These commands show the version number of the software used when you last changed the configuration file.
You can also display the contents of files on remote systems using the more command. For example, you could display a saved running configuration file on an FTP server using
more ftp://username:password@ftp-host1/mydirectory/7200-basic-running-config. See the description of the copy command for more information on file-system prefixes available in the Cisco IOS CLI.Options for filtering and redirecting the output of this command are available by appending a pipe character (|). See the Related Commands table for a list of more <url> command extensions.
Examples
The following partial sample output displays the configuration file named startup-config in NVRAM:
Router# more nvram:startup-config!! No configuration change since last restart! NVRAM config last updated at 02:03:26 PDT Thu Oct 2 1997!version 12.1service timestamps debug uptimeservice timestamps log uptimeservice password-encryptionservice udp-small-serversservice tcp-small-servers...endThe following is partial sample output from the more nvram:startup-config command when the configuration file has been compressed:
Router# more nvram:startup-configUsing 21542 out of 65536 bytes, uncompressed size = 142085 bytes!version 12.1service compress-config!hostname rose!...The following partial sample output displays the running configuration:
Router2# more system:running-configBuilding configuration...Current configuration:!version 12.1no service udp-small-serversno service tcp-small-servers!hostname Router2!...!endRelated Commands
more <url> begin
To search the output of any more command, use the more url | begin command in EXEC mode. This command begins unfiltered output of the more command with the first line that contains the regular expression you specify.
more url | begin regular-expression
Syntax Description
Command Modes
User EXEC
Privileged EXEC
Command History
11.3 AA
The more command was introduced.
12.0(1)T
This extension of the more command was introduced.
Usage Guidelines
The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at every --More-- prompt.
To search the remaining output of the more command, use the following command at the --More-- prompt:
/regular-expression
To filter the remaining output of the more command, use one of the following commands at the --More-- prompt:
-regular-expression
+regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Note
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples
The following is partial sample output of the more nvram:startup-config | begin command that begins unfiltered output with the first line that contain the regular expression "ip." At the --More-- prompt, the user specifies a filter to exclude output lines that contain the regular expression "ip."
router# more nvram:startup-config | begin ipip subnet-zeroip domain-name cisco.comip name-server 198.92.30.32ip name-server 171.69.2.132!isdn switch-type primary-5ess...interface Ethernet1ip address 5.5.5.99 255.255.255.0--More---ipfiltering...media-type 10BaseT!interface Serial0:23encapsulation frame-relayno keepalivedialer string 4001dialer-group 1isdn switch-type primary-5essno fair-queueRelated Commands
more <url> exclude
To filter more command output so that it excludes lines that contain a particular regular expression, use the more exclude command in EXEC mode.
more url | exclude regular-expression
Syntax Description
Command Modes
EXEC
Command History
11.3 AA
The more command was introduced.
12.0(1)T
This extension of the more command was introduced.
Usage Guidelines
The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at any --More-- prompt. To search the remaining output of the more command, use the following command at the --More-- prompt:
/regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples
The following is partial sample output of the more nvram:startup-config | exclude command. The use of | exclude service in the command specifies a filter that excludes lines that contain the regular expression "service." At the --More-- prompt, the user searches for the regular expression "Dialer1," which continues filtered output with the first line that contains "Dialer1."
router# more nvram:startup-config | exclude service!version 12.0!hostname router!boot system flashno logging buffered!ip subnet-zeroip domain-name cisco.com...--More--/Dialer1filtering...interface Dialer1no ip addressno ip directed-broadcastdialer in-bandno cdp enableRelated Commands
more <url> include
To filter more command output so that it displays only lines that contain a particular regular expression, use the more include command in EXEC mode.
more url | include regular-expression
Syntax Description
Command Modes
EXEC
Command History
11.3 AA
The more command was introduced.
12.0(1)T
This extension of the more command was introduced.
Usage Guidelines
The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at any --More-- prompt. To search the remaining output of the more command, use the following syntax at the --More-- prompt:
/regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples
The following is partial sample output of the more nvram:startup-config | include command. It only displays lines that contain the regular expression "ip."
router# more nvram:startup-config | include ipip subnet-zeroip domain-name cisco.comip name-server 198.92.30.32ip name-server 171.69.2.132description ip address 172.21.53.199 255.255.255.0ip address 172.21.53.199 255.255.255.0Related Commands
motd-banner
To enable the display of message-of-the-day (MOTD) banners on the specified line or lines, use the motd-banner command in line configuration mode. To suppress the MOTD banners on the specified line or lines, use the no form of this command.
motd-banner
no motd-banner
Syntax Description
This command has no arguments or keywords.
Defaults
Enabled on all lines.
Command Modes
Line configuration
Command History
Usage Guidelines
This command determines whether the router will display the MOTD banner when an EXEC session is created on the specified line or lines. The MOTD banner is defined with the banner motd global configuration command. By default, the MOTD banner is enabled on all lines. Disable the MOTD banner on specific lines using the no motd-banner line configuration command.
The MOTD banners can also be disabled by the no exec-banner line configuration command, which disables both MOTD banners and EXEC banners on a line. If the no exec-banner command is configured on a line, the MOTD banner will be disabled regardless of whether the motd-banner command is enabled or disabled. Table 48 summarizes the effects of the exec-banner command and the motd-banner command.
Table 48 Banners Displayed Based On exec-banner and motd-banner Combinations
MOTD banner
EXEC banner
None
EXEC banner
None
For reverse Telnet connections, the EXEC banner is never displayed. Instead, the incoming banner is displayed. The MOTD banner is displayed by default, but it is disabled if either the no exec-banner command or no motd-banner command is configured. Table 49 summarizes the effects of the exec-banner command and the motd-banner command for reverse Telnet connections.
Examples
The following example suppresses the MOTD banner on vty lines 0 through 4:
line vty 0 4no motd-bannerRelated Commands
name-connection
To assign a logical name to a connection, use the name-connection command in user EXEC mode.
name-connection
Syntax Description
This command has no arguments or keywords.
Defaults
No logical name is defined.
Command Modes
User EXEC
Command History
Usage Guidelines
This command can be useful for keeping track of multiple connections.
You are prompted for the connection number and name to assign. The where command displays a list of the assigned logical connection names.
Examples
The following example assigns the logical name blue to the connection:
Router> whereConn Host Address Byte Idle Conn Name* 1 doc-2509 172.30.162.131 0 0 doc-2509Router> name-connectionConnection number: 1Enter logical name: blueConnection 1 to doc-2509 will be named "BLUE" [confirm]Related Commands
no menu
To delete a user menu from the configuration file, use the no menu command in global configuration mode.
no menu menu-name
Syntax Description
Defaults
No default behavior or values.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to remove any menu commands for a particular menu from the configuration file.
As with all global configuration commands, this command will only effect the startup configuration file when you save the running configuration using the copy running-config startup-config EXEC command.
Examples
The following example deletes the menu named Access1:
no menu Access1Related Commands
no snmp-server
To disable Simple Network Management Protocol (SNMP) agent operation, use the no snmp-server command in global configuration mode.
no snmp-server
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
Global configuration
Command History
Usage Guidelines
This command disables all running versions of SNMP (SNMPv1, SNMPv2C, and SNMPv3) on the device.
Examples
The following example disables the current running version of SNMP:
Router(config)# no snmp-servernotify
To enable terminal notification about pending output from other Telnet connections, use the notify command in line configuration mode. To disable notifications, use the no form of this command.
notify
no notify
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Line configuration
Command History
Usage Guidelines
This command sets a line to inform a user that has multiple, concurrent Telnet connections when output is pending on a connection other than the current one.
Examples
In the following example, notification of pending output from connections is enabled on virtual terminal lines 0 to 4:
Router(config)# line vty 0 4Router(config-line)# notifyRelated Commands
terminal notify
Configures a line to inform a user that has multiple, concurrent Telnet connections when output is pending on a connection other than the current one.
notify syslog
To enable the sending of notifications of configuration changes to a remote syslog, use the notify syslog command in configuration change logger configuration mode. To disable the sending of notifications of configuration changes to the syslog, use the no form of this command.
notify syslog
no notify syslog
Syntax Description
This command has no arguments or keywords.
Defaults
Notifications are not sent to the syslog.
Command Modes
Configuration change logger configuration
Command History
12.3(4)T
This command was introduced.
12.2(25)S
This command was integrated into Cisco IOS Release 12.2(25)S.
Usage Guidelines
Enable the notify syslog command if you use the syslog to monitor your router. Syslog monitoring prevents the need to gather configuration log information manually.
Examples
The following example shows how to enable the router to send notifications to the syslog:
Router(config)# archive
Router(config-archive)# log config
Router(config-archive-log-config)# notify syslog
Related Commands
ntp access-group
To control access to the Network Time Protocol (NTP) services on the system, use the ntp access-group command in global configuration mode. To remove access control to the NTP services, use the no form of this command.
ntp access-group {query-only | serve-only | serve | peer} access-list-number
no ntp [access-group {query-only | serve-only | serve | peer}
Syntax Description
Defaults
No access control (full access granted to all systems)
Command Modes
Global configuration
Command History
Usage Guidelines
The access group options are scanned in the following order from least restrictive to most restrictive:
1.
2.
3.
4.
Access is granted for the first match that is found. If no access groups are specified, all access is granted to all sources. If any access groups are specified, only the specified access is granted. This facility provides minimal security for the time services of the system. However, it can be circumvented by a determined programmer. If tighter security is desired, use the NTP authentication facility.
The NTP service can be activated by entering any ntp command. When you use the ntp access-group command, the NTP service is activated (if it has not already been activated) and access control to NTP services is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp access-control command, only access control to NTP services is removed. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp access-group command and you now want to remove not only the access group, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure a system to allow itself to be synchronized by a peer from access list 99. However, the system restricts access to allow only time requests from access list 42.
Router(config)# ntp access-group peer 99Router(config)# ntp access-group serve-only 42The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
access-list
Configures the access list mechanism for filtering frames by protocol type or vendor code.
ntp authenticate
To enable Network Time Protocol (NTP) authentication, use the ntp authenticate command in global configuration mode. To disable the function, use the no form of this command.
ntp authenticate
no ntp [authenticate]
Syntax Description
This command has no arguments or keywords.
Defaults
No authentication
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command if you want authentication. If this command is specified, the system will not synchronize to a system unless it carries one of the authentication keys specified in the ntp trusted-key global configuration command.
The NTP service can be activated by entering any ntp command. When you use the ntp authenticate command, the NTP service is activated (if it has not already been activated) and NTP authentication is enabled simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp authenticate command, only the NTP authentication is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp authenticate command and you now want to disable not only the authentication, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure the system to synchronize only to systems that provide authentication key 42 in their NTP packets:
Router(config)# ntp authenticateRouter(config)# ntp authentication-key 42 md5 aNiceKeyRouter(config)# ntp trusted-key 42The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp authentication-key
Defines an authentication key for NTP.
ntp trusted-key
Authenticates the identity of a system to which NTP will synchronize.
ntp authentication-key
To define an authentication key for Network Time Protocol (NTP), use the ntp authentication-key command in global configuration mode. To remove the authentication key for NTP, use the no form of this command.
ntp authentication-key number md5 value
no ntp [authentication-key]
Syntax Description
Defaults
No authentication key is defined for NTP.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to define authentication keys for use with other NTP commands in order to provide a higher degree of security.
Note
The NTP service can be activated by entering any ntp command. When you use the ntp authentication-key command, the NTP service is activated (if it has not already been activated) and the NTP authentication key is defined simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp authentication-key command, only the NTP authentication key is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp authentication-key command and you now want to remove not only the authentication key, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure the system to synchronize only to systems providing authentication key 42 in their NTP packets:
Router(config)# ntp authenticateRouter(config)# ntp authentication-key 42 md5 aNiceKeyRouter(config)# ntp trusted-key 42The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp broadcast client
To configure a device to receive Network Time Protocol (NTP) broadcast messages on a specified interface, use the ntp broadcast client command in interface configuration mode. To disable this capability, use the no form of this command.
ntp broadcast client
no ntp broadcast [client]
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Interface configuration
Command History
Usage Guidelines
Use this command to allow the system to listen to broadcast packets on an interface-by-interface basis.
The NTP service can be activated by entering any ntp command. When you use the ntp broadcast client command, the NTP service is activated (if it has not already been activated) and the device is configured to receive NTP broadcast packets on a specified interface simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp broadcast client command, only the broadcast client configuration is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp broadcast client command and you now want to remove not only the broadcast client capability, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
In the following example, the system is configured to receive (listen to) NTP broadcasts on Ethernet interface 1:
Router(config)# interface ethernet 1Router(config-if)# ntp broadcast clientThe following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp broadcast
To configure the options for broadcasting Network Time Protocol (NTP) traffic, use the ntp broadcast command in interface configuration mode. To disable this capability, use the no form of this command.
ntp broadcast [client] [destination {ip-address | hostname}] [key broadcast-key] [version number]
no ntp [broadcast]
Syntax Description
Defaults
Disabled
Command Modes
Interface configuration
Command History
Usage Guidelines
The NTP service can be activated by entering any ntp command. When you use the ntp broadcast command, the NTP service is activated (if it has not already been activated) and the options are configured for sending NTP traffic simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp broadcast command, only the configuration to send NTP broadcast packets on a specified interface is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp broadcast command and you now want to remove not only the broadcast capability, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configures Ethernet interface 0 to send NTP version 2 broadcasts:
Router(config)# interface ethernet 0Router(config-if)# ntp broadcast version 2The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp broadcastdelay
To set the estimated round-trip delay between the Cisco IOS software and a Network Time Protocol (NTP) broadcast server, use the ntp broadcastdelay command in global configuration mode. To revert to the default value, use the no form of this command.
ntp broadcastdelay microseconds
no ntp [broadcastdelay]
Syntax Description
microseconds
Estimated round-trip time (in microseconds) for NTP broadcasts. The range is from 1 to 999999.
Defaults
3000 microseconds
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command when the router is configured as a broadcast client and the round-trip delay on the network is other than 3000 microseconds.
The NTP service can be activated by entering any ntp command. When you use the ntp broadcastdelay command, the NTP service is activated (if it has not already been activated) and the estimated round-trip delay between the Cisco IOS software and an NTP broadcast server is set simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp broadcastdelay command, only the estimated round-trip delay between the Cisco IOS software and an NTP broadcast server is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp broadcastdelay command and you now want to remove not only the delay setting, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to set the estimated round-trip delay between a router and the broadcast client to 5000 microseconds:
Router(config)# ntp broadcastdelay 5000The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp broadcast
Configures the specified interface to send NTP broadcast packets.
ntp broadcast client
Configures the specified interface to receive NTP broadcast packets.
ntp clock-period
Caution
As NTP compensates for the error in the software clock, it keeps track of the correction factor for this error. When the value for the clock period needs to be adjusted, the system automatically enters the correct value into the running configuration. To remove the automatically generated value for the clock period, use the no form of this command.
ntp clock-period value
no ntp [clock-period value]
Syntax Description
value
Amount of time to add to the software clock for each clock hardware tick (this value is multiplied by 2-32).
Defaults
17179869 2-32 seconds (4 milliseconds)
Command Modes
Global configuration
Command History
Usage Guidelines
Do not manually set a value for the NTP clock-period.
If the system has automatically entered a value for the clock period into the running configuration, NTP synchronizes faster after the system is restarted when the copy running-config startup-config command has been entered to save the configuration to NVRAM.
The NTP service can be activated by entering any ntp command. When you use the ntp clock-period command, the NTP service is activated (if it has not already been activated) and the system automatically saves the correct value into the running configuration simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp clock-period command, only the automatically generated value is removed. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you want to remove not only the clock period, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows a typical difference between the values of the NTP clock-period setting in the running configuration and in the startup configuration:
Router# show startup-config | include clock-periodntp clock-period 17180239Router# show running-config | include clock-periodntp clock-period 17180255The following example shows how to remove the automatically generated value for the clock period from the running configuration:
Router(config)# no ntp clock-periodThe following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpntp disable
To prevent an interface from receiving Network Time Protocol (NTP) packets, use the ntp disable command in interface configuration mode. To enable receipt of NTP packets on an interface, use the no form of this command.
ntp disable
no ntp [disable]
Syntax Description
This command has no arguments or keywords.
Defaults
Enabled
Command Modes
Interface configuration
Command History
Usage Guidelines
This command provides a simple method of access control.
The NTP service can be activated by entering any ntp command. When you use the ntp disable command, the NTP service is activated (if it has not already been activated) and the interface is configured to reject NTP packets simultaneously.
In the no form of any ntp command, all the keywords are optional. However, you must remove all NTP commands from the interface before you can enter the ntp disable command on that interface.
When you enter the no ntp disable command, the interface that was configured to reject NTP packets is enabled to receive NTP packets. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp disable command and you now want to remove not only this restriction, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to prevent Ethernet interface 0 from receiving NTP packets:
Router(config)# interface ethernet 0Router(config-if)# ntp disableThe following example shows the display after trying to execute ntp disable on an interface with other NTP commands configured on it:
Router(config-if)# ntp disable%NTP: Unconfigure other NTP commands on this interface before executing `ntp disable'Router(config-if)#The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpntp logging
To enable Network Time Protocol (NTP) message logging, use the ntp logging command in global configuration mode. To disable NTP logging, use the no form of this command.
ntp logging
no ntp [logging]
Syntax Description
This command has no arguments or keywords.
Defaults
NTP message logging is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
Use the ntp logging command to control the display of NTP logging messages.
The NTP service can be activated by entering any ntp command. When you use the ntp logging command, the NTP service is activated (if it has not already been activated) and message logging is enabled simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp logging command, only the message logging is disabled in the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp logging command and you now want to disable not only the message logging, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to enable NTP message logging and verify that it is enabled:
Router# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)# ntp loggingRouter(config)# endRouter# show running-config | include ntpntp loggingntp clock-period 17180152ntp peer 10.0.0.1ntp server 192.168.166.3In the preceding example, the "ntp logging" entry in the configuration file verifies that NTP message logging is enabled.
The following example shows how to disable NTP message logging and verify that it is disabled:
Router# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)# no ntp loggingRouter# endRouter(config)# show running-config | include ntpntp clock-period 17180152ntp peer 18.0.0.1ntp server 128.107.166.3The "ntp logging" entry no longer appears in the configuration file, which verifies that NTP message logging is disabled.
The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntp
Related Commands
ntp peer
Configures the software clock to synchronize a peer or to be synchronized by a peer.
ntp server
Allows the software clock to be synchronized by an NTP time server.
ntp master
To configure the Cisco IOS software as a Network Time Protocol (NTP) master clock to which peers synchronize themselves when an external NTP source is not available, use the ntp master command in global configuration mode. To disable the master clock function, use the no form of this command.
ntp master [stratum]
no ntp [master]
Caution
Syntax Description
stratum
(Optional) Number from 1 to 15. Indicates the NTP stratum number that the system will claim.
Defaults
By default, the master clock function is disabled. When enabled, the default stratum is 8.
Command Modes
Global configuration
Command History
Usage Guidelines
Because the Cisco implementation of NTP does not support directly attached radio or atomic clocks, the router is normally synchronized, directly or indirectly, to an external system that has such a clock. In a network without Internet connectivity, such a time source may not be available. The ntp master command is used in such cases.
If the system has ntp master configured, and it cannot reach any clock with a lower stratum number, the system will claim to be synchronized at the configured stratum number, and other systems will be willing to synchronize to it via NTP.
Note
The NTP service can be activated by entering any ntp command. When you use the ntp master command, the NTP service is activated (if it has not already been activated) and the Cisco IOS software is configured as an NTP master clock simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp master command, only the NTP master clock configuration is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp master command and you now want to remove not only the master clock function, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure a router as an NTP master clock to which peers may synchronize:
Router(config)# ntp master 10The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
clock calendar-valid
Configures the system hardware clock an authoritative time source for the network.
ntp max-associations
To configure the maximum number of Network Time Protocol (NTP) peers and clients for a routing device, use the ntp max-associations command in global configuration mode. To return the maximum associations value to the default, use the no form of this command.
ntp max-associations number
no ntp [max-associations]
Syntax Description
Defaults
100 maximum associations.
Command Modes
Global configuration
Command History
Usage Guidelines
The router can be configured to define the maximum number of NTP peer and client associations that the router will serve. The ntp max-associations command is used to set this limit.
For a router, this command is useful for ensuring that the router is not overwhelmed by NTP synchronization requests. For an NTP master server, this command is useful for allowing numerous devices to synchronize to a router.
The NTP service can be activated by entering any ntp command. When you use the ntp max-associations command, the NTP service is activated (if it has not already been activated) and the maximum number of NTP peers and clients is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp max-associations command, only the maximum number value is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp max-associations command and you now want to remove not only that maximum value, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
In the following example, the router is configured to act as an NTP server to 200 clients:
Router(config)# ntp max-associations 200The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp multicast client
To configure the system to receive Network Time Protocol (NTP) multicast packets on a specified interface, use the ntp multicast client interface configuration command. To disable this capability, use the no form of this command.
ntp multicast client [ip-address]
no ntp [multicast client [ip-address]]
Syntax Description
Defaults
Disabled
Command Modes
Interface configuration
Command History
Usage Guidelines
Use this command to allow the system to listen to multicast packets on an interface-by-interface basis.
The NTP service can be activated by entering any ntp command. When you use the ntp multicast client command, the NTP service is activated (if it has not already been activated) and the interface on which to receive multicast packets is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp multicast client command, only the multicast client capability is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp multicast client command and you now want to remove not only the multicast client capability, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
In the following example, the system is configured to receive (listen to) NTP multicast packets on Ethernet interface 1:
Router(config)# interface ethernet 1Router(config-if)# ntp multicast clientThe following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp multicast
To configure a system to send Network Time Protocol (NTP) multicast packets on a specified interface, use the ntp multicast interface configuration command. To disable this capability, use the no form of this command.
ntp multicast [ip-address] [key key-id] [ttl value] [version number]
no ntp [multicast]
Syntax Description
Defaults
Disabled
Command Modes
Interface configuration
Command History
Usage Guidelines
The TTL value is used to limit the scope of an audience for multicast routing.
The NTP service can be activated by entering any ntp command. When you use the ntp multicast command, the NTP service is activated (if it has not already been activated) and the interface on which to send multicast packets is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp multicast command, only the multicast capability is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp multicast command and you now want to remove not only the multicast capability, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure Ethernet interface 0 to send NTP version 2 broadcasts:
Router(config)# interface ethernet 0Router(config-if)# ntp multicast version 2The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp authentication-key
Defines an authentication key for NTP.
ntp multicast client
Allows the system to receive NTP multicast packets on an interface.
ntp peer
To configure the software clock to synchronize a peer or to be synchronized by a peer, use the ntp peer command in global configuration mode. To disable this capability, use the no form of this command.
ntp peer {{[vrf vrf-name] ip-address | hostname}[normal-sync][version number] [key key-id] [source interface] [prefer]}
no ntp {[vrf vrf-name] ip-address | hostname}
Syntax Description
Command Default
No peers are configured.
Command Modes
Global configuration
Command History
Usage Guidelines
When a peer is configured, the default NTP version number is 3, no authentication key is used, and the source IP address is taken from the outgoing interface.
Use this command to allow a device to synchronize with a peer, or vice versa. Using the prefer keyword reduces switching between peers.
Tip
The NTP service can be activated by entering any ntp command. When you use the ntp peer command, the NTP service is activated (if it has not already been activated) and the peer is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp peer command, only the NTP peer configuration is removed from NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp peer command and you now want to remove not only the peer, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure a router to allow its software clock to be synchronized with the clock of the peer (or vice versa) at IP address 192.168.22.33 using NTP version 2. The source IP address is the address of Ethernet 0.
Router(config)# ntp peer 192.168.22.33 version 2 source ethernet 0The following example shows how to disable rapid synchronization at startup:
Router(config)# ntp peer 192.168.22.33 normal-syncThe following example shows how to keep a peer configured but re-enable rapid synchronization at startup after previously disabling it:
Router(config)# ntp peer 192.168.22.33The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp refclock
To configure an external clock source for use with Network Time Protocol (NTP) services, use the ntp refclock command in line configuration mode. To disable support of the external time source, use the no form of this command.
ntp refclock {trimble | telecom-solutions} pps {cts | ri | none} [inverted] [pps-offset number] [stratum number] [timestamp-offset number]
no ntp [refclock]
Syntax Description
Defaults
This command is disabled by default.
Command Modes
Line configuration (for auxilary 0 only)
Command History
12.1
The trimble keyword was added to provide driver activation for a Trimble GPS time source on the Cisco 7200 series router.
Usage Guidelines
To configure a PPS signal as the source for NTP synchronization, use the following form of the ntp refclock command:
ntp refclock pps {cts | ri} [inverted] [pps-offset number] [stratum number] [timestamp-offset number]
To configure a Trimble Palisade NTP Synchronization Kit as the GPS clock source connected to the auxiliary port of a Cisco 7200 router, use the following form of the ntp refclock command:
ntp refclock trimble pps none [stratum number]
To configure a Telecom Solutions product as the GPS clock source, use the ntp refclock telecom-solutions form of the command:
ntp refclock telecom-solutions pps cts [stratum number]
The NTP service can be activated by entering any ntp command. When you use the ntp refclock command, the NTP service is activated (if it has not already been activated) and the external clock source is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp refclock command, only the external clock source is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp refclock command and you now want to remove not only the external clock source, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows configuration of a Trimble Palisade GPS time source on a Cisco 7200 router:
Router(config)# ntp masterRouter(config)# ntp update-calendarRouter(config)# line aux 0Router(config-line)# ntp refclock trimble pps noneThe following example shows configuration of a Telecom Solutions GPS time source on a Catalyst switch platform:
Router(config)# ntp masterRouter(config)# ntp update-calendarRouter(config)# line aux 0Router(config-line)# ntp refclock telecom-solutions pps cts stratum 1The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
show ntp associations
Displays the status of NTP associations configured for your system.
ntp server
To allow the software clock to be synchronized by a Network Time Protocol (NTP) time server, use the ntp server command in global configuration mode. To disable this capability, use the no form of this command.
ntp server {{[vrf vrf-name] ip-address | hostname} [version number] [key key-id] [source interface] [prefer]}
no ntp server {[vrf vrf-name] ip-address | hostname}
Syntax Description
Defaults
No servers are configured by default. If a server is configured, the default NTP version number is 3, no authentication key is used, and the source IP address is taken from the outgoing interface.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command if you want to allow the system to synchronize with the specified server. The server will not synchronize to this machine.
When you use the hostname option, the router does a domain name server (DNS) lookup on that name, and stores the IP address in the configuration. For example, if you enter the command ntp server host1 and then check the running configuration, the output shows "ntp server 172.16.0.4," assuming that the router is correctly configured as a DNS client.
Use the prefer keyword if you use this command multiple times, and you want to set a preferred server. Using the prefer keyword reduces switching between servers.
If you are using the default version of 3 and NTP synchronization does not occur, try NTP version 2. Some NTP servers on the Internet run version 2.
The NTP service can be activated by entering any ntp command. When you use the ntp server command, the NTP service is activated (if it has not already been activated) and software clock synchronization is configured simultaneously.
In the no form of any ntp command, all the keywords are optional. When you enter the no ntp server command, only the server synchronization capability is removed from the NTP service. The NTP service itself remains active, along with any other functions you previously configured.
To terminate NTP service on a device, you must enter the no ntp command without keywords. For example, if you previously issued the ntp server command and you now want to remove not only the server synchronization capability, but all NTP functions from the device, use the no ntp command without any keywords. This ensures that all NTP functions are removed and that the NTP service is also terminated.
Examples
The following example shows how to configure a router to allow its software clock to be synchronized with the clock by the device at IP address 172.16.22.44 using NTP version 2:
Router(config)# ntp server 172.16.22.44 version 2The following example shows how to remove all the configured NTP options and disable the ntp server:
Router(config)# no ntpRelated Commands
ntp source
To use a particular source address in Network Time Protocol (NTP) packets, use the ntp source command in global configuration mode. To remove the specified source address, use the no form of this command.
ntp source type number
no ntp [source]
Syntax Description
