THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE
SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND
RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED
WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY
FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE
SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE
INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE
LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a
program developed by the University
of California, Berkeley
(UCB) as part of UCB's public domain version of the UNIX operating system. All
rights reserved. Copyright � 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE
OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL FAULTS. CISCO AND
THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED,
INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING,
USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT,
SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION,
LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO
USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise
are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play,
and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and
Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP,
Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press,
Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity,
Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare,
GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise,
the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace,
MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX,
Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast,
SMARTnet, The Fastest Way to Increase Your Internet Quotient, and TransPath are
registered trademarks of Cisco Systems, Inc. and/or its affiliates in the
United States and certain other countries.
All other trademarks mentioned in this document or Website are the property
of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (0601R)
Obtaining Documentation,
Obtaining Support, and Security Guidelines
For information on
obtaining documentation, obtaining support, providing documentation feedback,
security guidelines, and also recommended aliases and general
Cisco documents, see the monthly Whats New in Cisco Product
Documentation, which also lists all new and revised Cisco technical
documentation, at:
This command can modify
passwords on a specific device or device group, or merely update what the
system knows of a device's or network's password information. The -ip option
provides information specific to the device. Otherwise, the command adds a network-wide
password rule to the system. When using this command to modify passwords on a
device, the modification operation is actually a scheduled task.
loc - The location to which
password information should be written. Valid values for this argument are
"db", "device", and "group". "db"
tells the command that password information should be changed only in the
system's database. "device" tells the command that the password
changes should be made on the device as well and "group"
performs the same function as "device" but across all devices in
the group.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.: The device to which this
password information should apply.
host - A valid hostname: An
existing device to which this password information should apply.
fqdn - A valid Fully Qualified
Domain Name: An existing device to which this password information should
apply.
deviceid - A device ID
snmpro - When used in
conjunction with -loc db, this argument is taken as a single community
string understood by the system as THE read only community string for the
device or network. When used in conjunction with -loc device, this
argument is taken as a comma-seperated list of read only community strings
to be, either set on the device, or appended to an existing list of read
only community strings (depends on whether or not the -appendsnmpro flag
was supplied.)
snmprw - When used in
conjunction with -loc db, this argument is taken as a single community
string understood by the system as THE read write community string for the
device or network. When used in conjunction with -loc device, this
argument is taken as a comma-seperated list of read write community
strings to be, either set on the device, or appended to an existing list
of read write community strings (depends on whether or not the
-appendsnmprw flag was supplied.)
snmpv3user - When used in
conjunction with -loc db, this argument is taken as the username for
snmpv3 access.
snmpv3authpw - When used in
conjunction with -loc db, this argument is taken as the authentication
password for snmpv3 access.
snmpv3encryptpw - When used in
conjunction with -loc db, this argument is taken as the encryption
password for snmpv3 access.
user - Username.
passwd - Password.
enableuser - ADDITIONAL
username to get to "enable" mode.
enablepasswd - ADDITIONAL
password to get to "enable" mode.
connectionmethods - The
methods used by the system to connect to devices. Can be telnet,
serial_direct, or SSH.
accessvariables - To override
variables in the script, such as prompts.
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run. Use this option only if the
argument to the -loc flag is "device".
appendsnmpro - Supply this
option if read only community strings should be appended to any existing
on the device. Use this option only if the argument to the -loc flag is
"device".
appendsnmprw - Supply this
option if read write community strings should be appended to any existing
on the device. Use this option only if the argument to the -loc flag is
"device".
sync - Indicates that the
command should return only after the password change task is complete. Do
not use this option with -start.
group - The group name for
performing this command across all devices in a group.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device will be put in.
hostname - The device's host name
comment - Additional information
regarding the device.
description - The descriptive name of
the device (informational only).
model - The device's model (such as
2620).
vendor - The device's vendor (such as
Cisco).
domain - A fully qualified domain name
(such as www.google.com).
serial - The device's serial number.
asset - The device's asset tag.
location - The device's location.
unmanaged - 0: Mark this device as
managed by the system. 1: Mark this device to be unmanaged by the system.
nopoll - 0: Mark this device to be
polled for changes. 1: Mark this device as not to be polled for changes.
consoleip - a.b.c.d where 0 <=
a,b,c,d <= 255
consoleport - The port number
tftpserverip - a.b.c.d where 0 <=
a,b,c,d <= 255
natip - a.b.c.d where 0 <= a,b,c,d
<= 255
useconsoleserver - true, if the device
uses a console server. false, if the device does not. If this option is
not provided, it is assumed that the device does not use a console server.
accessmethods - A comma-separated list
of access methods, or "none". The set of access methods:
{telnet, ssh, rlogin, SCP, FTP, TFTP, SNMP, snnp_noauthnopriv,
snmp_authnopriv, snmp_authpriv}. If this option is not provided, the
system will try all access methods when attempting to connect to the
device.
hierarchylayer - This device attribute
is used in diagramming. When you config a network diagram, you can select
which hierarchy layers on which to filter. Valid values include: (core,
distribution, access, edge and "layer not set").
Add images to database. Must specify
either driver or model
imageset - The imageset the images will
add to.
images - The images to add. The paths
specified by this option must point to files accessible by the management
server. Files must be placed on the management server first.
driver - The driver the images
required.
model - The device model the images
required.
memory - The minimum system memory
required (in bytes) for images.
ipvalue - The ip value a.b.c.d where 0
<= a,b,c,d <= 255
deviceip - The device's ip address a.b.c.d
where 0 <= a,b,c,d <= 255. You may optionally prefix the IP with
SITE: where SITE is the name of the Site the device is in.
comment - Additional information regarding
the device.
usetoaccess - Use this IP Value to access
its device, 0 - yes, 1 - no, default - no
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
An email message (containing
the system message) will be the result of an added system messages if the
system is configured to send email for added events.
message - The text of the
system message
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
Configure a device to send
syslog messages to the system's change detection facilites.
Description
Have the system configure the
specified device to send all syslog messages necessary for the system's change
detection facilites to function optimally to the system's syslog server. The
configuration operation is atually a scheduled task.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
group - A valid group name. Do
not use this option with -ip (exactly one of -ip or -group must be
specified).
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
rep - (#min | #:# | #days |
#weeks | #months) where # is a positive integer. #:# is hours:minutes--the
two integers do not have to be the same. Do not use this option with
-sync.
sync - Indicates the command
should return only after the Configure Syslog task is complete. Do not use
this option with -rep or -start.
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run.
comment - An optional comment
about the Configure Syslog task.
usesyslogrelay - Indicates to
the syslog configuration task that the device currently logs to syslog
relay host. Supply this option if you wish to set up forwarding on that
relay host rather than have the device log directly to the system's syslog
server. The specified IP address is taken to be the IP address of the
relay host.
This command can delete a single access
record when provided that record's id (via. the option "-id"), or all
access records prior to a given date (via the option "-cutoff").
Provide exactly one of "-id", "-cutoff". Note that deleting
access records will cause all configs associated with the deleted access record
to also be deleted.
id - A device access record ID.
cutoff - YYYY:MM:DD:HH:mm. All access
records prior to this date will be deleted.
Deletes all password
information associated with the specified device.
Description
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.: The device for which password
information should be deleted.
host - A valid hostname: The
device for which password information should be deleted.
fqdn - A valid Fully Qualified
Domain Name: The device for which password information should be deleted.
This command can delete a single
device data block when provided that device data id (via. the option
"-id"), or all device data prior to a given date (via the option
"-cutoff"). Provide exactly one of "-id",
"-cutoff".
id - A config ID
cutoff - YYYY:MM:DD:HH:mm. All
configs prior to this date will be deleted.
ipvalue - The ip value a.b.c.d where 0
<= a,b,c,d <= 255
deviceip - The device's ip address a.b.c.d
where 0 <= a,b,c,d <= 255. You may optionally prefix the IP with
SITE: where SITE is the name of the Site the device is in.
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
Delete an existing command script,
advanced script or diagnostic.
Description
Delete the indicated command script,
advanced script or diagnostic. The desired script or diagnostic can be
specified by ID, or by a combination of name and type. If more than one name
match occurs, then an error will be reported and you must specify the unique
script desired by ID.
id - ID of the desired script or
diagnostic
name - Name of the desired script or
diagnostic
type - Type of the desired script or
diagnostic - may be command, advanced or diagnostic
Deploy the specified config to a
specified device either right away, or at some point in the future. The deploy
operation is actually a scheduled task.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
id - The ID of the config to deploy
to the specified device.
configtext - The configuration text
to deploy to the specified device.
start - YYYY:MM:DD:HH:mm. The first
date on which the task will run. Do not use this option with -sync.
sync - Indicates that the command
should return only after the deploy task is complete. Do not use this
option with -start.
option - current or startup_reload,
as applicable to the device.
Attempts to match a driver to the
specified device.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.: The device for which a driver
should be discovered.
host - A valid hostname: The
device for which a driver should be discovered.
fqdn - A valid Fully Qualified
Domain Name: The device for which a driver should be discovered.
Get the config from a specified
device either right away, or at some point in the future. The retrieval
operation is actually a scheduled task. Using this command, you can set the
task to repeat periodically.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
group - A valid group name. Do not
use this option with -ip (exactly one of -ip or -group must be specified).
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
rep - (#min | #:# | #days | #weeks |
#months) where # is a positive integer. #:# is hours:minutes--the two
integers do not have to be the same. Do not use this option with -sync.
sync - Indicates the command should
return only after the snapshot retrieval task is complete. Do not use this
option with -rep or -start.
start - YYYY:MM:DD:HH:mm. The first
date on which the task will run.
comment - An optional comment about
the snapshot.
duration - A number concatenated
with a units signifier. Valid signifiers are m (minutes), h (hours), d
(days), w (weeks). If this option is not provided, the duration for the
task is set to 60 minutes.
This command can import into the system
device or device password information contained in appropriately formatted CSV
files. (Contact customer support for a CSV file format specification.)
input - Either the name of a file that
contains CSV data or the CSV data itself.
data - Whether the type of information
imported is devices or device authentication.
log - Command log file.
append - If true, will append imported
information to existing information. If false, will overwrite existing
device/auth records. This option is false by default.
discoverafter - Discover drivers for
imported device? This option is false by default.
configuresyslog - Configure devices to
send syslog messages to the system? Valid values are true | false
filter - An application that reads the
input file from stdin, and writes a the system compatible CSV file to
stdout.
cleanafter - If true, then after importing
data, a process will run on the server that will delete old devices.
Devices are deleted according to the current configuration of the system's
"deletion-on-import" rules, and the argument to the deviceorigin
option. This option is false by default.
deviceorigin - A description of the source
of the data. This is recorded by the system, but is not visible via any
UI.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
start - Display only those access
records created on or after the given date. Values for this option may be
in one of the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06
12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: "
end - Display only those access
records created on or before the given date. Values for this option have
the same format as for the option -start.
List all configs for which the
BasicIP model can be shown.
Description
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those configs
stored on or after the given date. Values for this option may be in one of
the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06 12:30:00
YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those configs
stored on or before the given date. Values for this option have the same
format as for the option -start.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
start - Display only those configs
stored on or after the given date. Values for this option may be in one of
the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06 12:30:00
YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those configs
stored on or before the given date. Values for this option have the same
format as for the option -start.
size - Display the size (in bytes) of
each config
ids - List only configs in this
comma-separated list of IDs.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those configs
stored on or after the given date. Values for this option may be in one of
the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06 12:30:00
YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those configs
stored on or before the given date. Values for this option have the same
format as for the option -start.
List all configs for which the
given diagnostic may be shown.
Description
diagnostic - A diagnostic name
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those
diagnostics stored on or after the given date. Values for this option may
be in one of the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06
12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those
diagnostics created on or before the given date. Values for this option
have the same format as for the option -start.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.: Display only those events associated
with the specified device.
host - A valid hostname: Display only
those events associated with the specified device.
fqdn - A valid Fully Qualified Domain
Name: Display only those events associated with the specified device.
deviceid - A device ID
type - A valid event type: Display only
events of this type. Values for this option may one of the following:
Approval No Longer Required Approval Request Approval Granted Approval
Task Changed Approval Task Deleted Approval Denied Approval Task Timeout
Approval Override Command Authorization Error User Authentication Error
Configuration Policy Added Configuration Policy Non-Compliance
Configuration Policy Changed Configuration Policy Pattern Timeout
Configuration Rule Added Configuration Rule Changed Device Access Failure
Device Added Device Password Change Device Booted Device Command Script
Failed Device Command Script Completed Successfully Device Configuration
Change Device Configuration Change - No User Device Configuration
Deployment Failure Device Configuration Deployment Device Data Failure
Device Deleted Device Diagnostic Changed Device Diagnostic Failed Device
Diagnostic Completed Successfully Device Flash Storage Running Low Group
Modified Group Added Group Deleted Device Inaccessible Device Edited Last
Used Device Password Changed Device Managed Device Missing from Import
Device Permissions - Modified Device Reservation Conflict Device Snapshot
Device Software Change Device Startup/Running Config Difference Device
Unmanaged Software Vulnerability Detected Email Report Saved External
Directory Server Authentication Error License Almost Exceeded License
Almost Expired License Exceeded License Expired Module Added Module
Changed Module Removed Monitor Okay Monitor Error Device Permissions - New
Device Device Password Change Failure Concurrent Telnet/SSH Session
Override Reserved Device Configuration Changed Scheduled for Deploy
Configuration Edited Scheduled for Deploy Password Modified Server Startup
Session Data Captured Software Update Failed Software Update Succeeded
Summary Reports Generated Pending Task Deleted Task Started Ticket Created
User Login User Logout User Added User Deleted User Permission Changed
User Message
start - Display only events after this
date. Values for this option may be in one of the following formats: YYYY-MM-DD
HH:MM:SS e.g. 2002-09-06 12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30
YYYY-MM-DD e.g. 2002-09-06 YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM
e.g. 2002:09:06:12:30 Or, one of: now, today, yesterday, tomorrow Or, in
the format: e.g. 3 days ago is a
positive integer. is one of: seconds, minutes, hours, days,
weeks, months, years;. is one of: ago, before, later, after.
List all configs for which the ICMPTest
model may be shown.
Description
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
start - Display only those ICMPTest
models stored on or after the given date. Values for this option may be in
one of the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06 12:30:00
YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one
of: now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those ICMPTest
models stored on or before the given date. Values for this option have the
same format as for the option -start.
List all configs for which the
ShowInterfaces model may be shown.
Description
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
start - Display only those
ShowInterfaces models stored on or after the given date. Values for this
option may be in one of the following formats: YYYY-MM-DD HH:MM:SS e.g.
2002-09-06 12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g.
2002-09-06 YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g.
2002:09:06:12:30 Or, one of: now, today, yesterday, tomorrow Or, in the
format: e.g. 3 days ago is a
positive integer. is one of: seconds, minutes, hours, days,
weeks, months, years;. is one of: ago, before, later, after.
end - Display only those ShowInterfaces
models stored on or before the given date. Values for this option have the
same format as for the option -start.
deviceip - The device's ip address
a.b.c.d where 0 <= a,b,c,d <= 255. You may optionally prefix the IP
with SITE: where SITE is the name of the Site the device is in.
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
List all configs for which the
ShowOSPFNeighbors model may be shown.
Description
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those
ShowOSPFNeighbors models stored on or after the given date. Values for
this option may be in one of the following formats: YYYY-MM-DD HH:MM:SS
e.g. 2002-09-06 12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD
e.g. 2002-09-06 YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g.
2002:09:06:12:30 Or, one of: now, today, yesterday, tomorrow Or, in the
format: e.g. 3 days ago is a
positive integer. is one of: seconds, minutes, hours, days,
weeks, months, years;. is one of: ago, before, later, after.
end - Display only those
ShowOSPFNeighbors models stored on or before the given date. Values for
this option have the same format as for the option -start.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those routing
tables stored on or after the given date. Values for this option may be in
one of the following formats: YYYY-MM-DD HH:MM:SS e.g. 2002-09-06 12:30:00
YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g. 2002-09-06
YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g. 2002:09:06:12:30 Or, one of:
now, today, yesterday, tomorrow Or, in the format: e.g.
3 days ago is a positive integer. is one of: seconds,
minutes, hours, days, weeks, months, years;. is one of: ago,
before, later, after.
end - Display only those routing
tables stored on or before the given date. Values for this option have the
same format as for the option -start.
List command scripts, advanced
scripts and/or diagnostics.
Description
type - Type of the desired script or
diagnostic - may be command, advanced or diagnostic
scripttype - User defined script type
(i.e. subcategory) - applies only to command scripts and advanced scripts
name - Script name
mode - Script mode - for command
scripts and diagnostics the script's level of device access (such as Cisco
IOS enable); for advanced scripts the device family (such as Cisco IOS)
ids - List only scripts in this
comma-separated list of IDs.
List command script IDs, advanced
scripts and/or diagnostics.
Description
type - Type of the desired script
or diagnostic - may be command, advanced or diagnostic
scripttype - User defined script
type (i.e. subcategory) - applies only to command scripts and advanced
scripts
name - Script name
mode - Script mode - for command
scripts and diagnostics the script's level of device access (such as Cisco
IOS enable); for advanced scripts the device family (such as Cisco IOS)
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
start - Display only those
interceptor log records created on or after the given date. Values for
this option may be in one of the following formats: YYYY-MM-DD HH:MM:SS
e.g. 2002-09-06 12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD
e.g. 2002-09-06 YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g.
2002:09:06:12:30 Or, one of: now, today, yesterday, tomorrow Or, in the
format: e.g. 3 days ago is a
positive integer. is one of: seconds, minutes, hours, days,
weeks, months, years;. is one of: ago, before, later, after.
end - Display only those interceptor
log records created on or before the given date. Values for this option
have the same format as for the option -start.
Lists all system messages
unless you include one of the options. Including one of the device options
displays all system messages associated with the specified device.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully
Qualified Domain Name
deviceid - A device ID
start - Display only those
system messages created on or after the given date. Values for this option
may be in one of the following formats: YYYY-MM-DD HH:MM:SS e.g.
2002-09-06 12:30:00 YYYY-MM-DD HH:MM e.g. 2002-09-06 12:30 YYYY-MM-DD e.g.
2002-09-06 YYYY/MM/DD e.g. 2002/09/06 YYYY:MM:DD:HH:MM e.g.
2002:09:06:12:30 Or, one of: now, today, yesterday, tomorrow Or, in the
format: e.g. 3 days ago is a
positive integer. is one of: seconds, minutes, hours, days,
weeks, months, years;. is one of: ago, before, later, after.
end - Display only those
system messages created on or before the given date. Values for this
option have the same format as for the option -start.
This command behaves differently
depending on the options you give it. The command by itself returns a list of
all tasks. Each option filters the returned list of tasks, causing it to return
a subset of the total list.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.: Display only those tasks associated
with the specified device.
host - A valid hostname: Display only
those tasks associated with the specified device.
fqdn - A valid Fully Qualified Domain
Name: Display only those tasks associated with the specified device.
deviceid - A valid device ID: Display
only those tasks associated with the specified device.
start - YYYY:MM:DD:HH:mm: Display only
those tasks whose schedule date falls on or after the given date.
end - YYYY:MM:DD:HH:mm: Display only
those tasks whose schedule date falls on or before the given date
parentid - a task ID: Display only
those tasks whose parent is the task specified by the given Task ID.
status - (pending | succeeded | failed
| running | paused | starting | waiting | synchronous | skipped |
warning): Display only those tasks with the specified status.
id - a task ID: Display the task with
the given task ID.
Modify the indicated advanced
script. The desired script can be specified by ID or name. If more than one
name match occurs, then an error will be reported and you must specify the
unique script desired by ID.
id - ID of the advanced
script to edit
name - Name of the advanced
script to edit
newname - New name for the
script being modified
description - New description
for the script being modified
scripttype - New script type
(i.e. user defined subcategory)
family - New device family
for the script being modified
language - New language for
the script being modified - must be a supported language such as Expect or
Perl
parameters - New command line
parameters for the script being modified
This command can modify
passwords on a specific device, across all devices in a device group, or merely
update what the system knows of the device's password information. When using
this command to modify passwords on a device or device group, the modification
operation is actually a scheduled task.
loc - The location to which
password information should be written. Valid values for this argument are
"db", "device", and "group". "db"
tells the command that password information should be changed only in the
system's database. "device" tells the command that the password
changes should be made on the device as well and "group"
performs the same function as "device" but across all devices in
the group.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.: An existing device to which
this password information should apply.
host - A valid hostname: An
existing device to which this password information should apply.
fqdn - A valid Fully Qualified
Domain Name: An existing device to which this password information should
apply.
deviceid - A valid device ID:
An existing device to which this password information should apply.
snmpro - When used in
conjunction with -loc db, this argument is taken as a single community
string understood by the system as THE read only community string for the
device or network. When used in conjunction with -loc device, this
argument is taken as a comma-seperated list of read only community strings
to be, either set on the device, or appended to an existing list of read
only community strings (depends on whether or not the -appendsnmpro flag
was supplied.)
snmprw - When used in
conjunction with -loc db, this argument is taken as a single community
string understood by the system as THE read write community string for the
device or network. When used in conjunction with -loc device, this
argument is taken as a comma-seperated list of read write community
strings to be, either set on the device, or appended to an existing list
of read write community strings (depends on whether or not the
-appendsnmprw flag was supplied.)
snmpv3user - When used in
conjunction with -loc db, this argument is taken as the username for
snmpv3 access.
snmpv3authpw - When used in
conjunction with -loc db, this argument is taken as the authentication password
for snmpv3 access.
snmpv3encryptpw - When used in
conjunction with -loc db, this argument is taken as the encryption
password for snmpv3 access.
user - Username.
passwd - Password.
enableuser - ADDITIONAL
username to get to "enable" mode.
enablepasswd - ADDITIONAL
password to get to "enable" mode.
connectionmethods - The
methods used by the system to connect to devices. Can be telnet,
serial_direct, or SSH.
accessvariables - To override
variables in the script, such as prompts.
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run. Use this option only if the
argument to the -loc flag is "device".
appendsnmpro - Supply this
option if read only community strings should be appended to any existing
on the device. Use this option only if the argument to the -loc flag is
"device".
appendsnmprw - Supply this
option if read write community strings should be appended to any existing
on the device. Use this option only if the argument to the -loc flag is
"device".
sync - Indicates that the
command should return only after the password change task is complete. Do
not use this option with -start.
group - The group name for
performing this command across all devices in a group.
rulename - The password rule
name to apply the access variables to
Modify the indicated command
script. The desired script can be specified by ID or name. If more than one
name match occurs, then an error will be reported and you must specify the
unique script desired by ID.
id - ID of the command script
to edit
name - Name of the command
script to edit
newname - New name for the
script being modified
description - New description
for the script being modified
scripttype - New script type
(i.e. user defined subcategory)
mode - New command script mode
driver - New list of
applicable drivers - provided as a comma separated list of internal driver
names
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
hostname - The device's new host name
comment - Additional information
regarding the device.
description - The descriptive name of
the device (informational only).
model - The device's model (such as
2620).
vendor - The device's vendor (such as
Cisco).
domain - A fully qualified domain name
(such as www.google.com).
serial - The device's serial number.
asset - The device's asset tag.
location - The device's location.
unmanaged - 0: Mark this device as
managed by the system. 1: Mark this device to be unmanaged by the system.
nopoll - 0: Mark this device to be
polled for changes. 1: Mark this device as not to be polled for changes.
newIP - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device will be put in. This is the new IP address of
the device.
consoleip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with REALM_NAME:,
where REALM_NAME is the name of the Realm the address is in.
consoleport - The port number
tftpserverip - a.b.c.d where 0 <=
a,b,c,d <= 255
natip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with REALM_NAME:, where
REALM_NAME is the name of the Realm the address is in.
customname - The custom field name
customvalue - The custom field value
useconsoleserver - true, if the device
uses a console server. false, if the device does not.
accessmethods - A comma-separated list
of access methods, or "none". The set of access methods:
{telnet, ssh, rlogin, SCP, FTP, TFTP, SNMP, snmp_noauthnopriv,
snmp_authnopriv, snmp_authpriv}.
hierarchylayer - This device attribute
is used in diagramming. When you config a network diagram, you can select
which hierarchy layers on which to filter. Valid values include: (core,
distribution, access, edge and "layer not set").
Modify the indicated diagnostic
script. The desired diagnostic can be specified by ID or name. If more than one
name match occurs, then an error will be reported and you must specify the
unique diagnostic desired by ID.
id - ID of the diagnostic to edit
name - Name of the diagnostic to
edit
newname - New name for the
diagnostic being modified
description - New description for
the diagnostic being modified
mode - New command script mode
driver - New list of applicable
drivers - provided as a comma separated list of internal driver names
ipvalue - The ip value a.b.c.d where 0
<= a,b,c,d <= 255
deviceip - The device's ip address a.b.c.d
where 0 <= a,b,c,d <= 255. You may optionally prefix the IP with
SITE: where SITE is the name of the Site the device is in.
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain Name
deviceid - A device ID
comment - Additional information regarding
the device.
usetoaccess - Use this IP Value to access
its device, 0 - yes, 1 - no, default - no
retryInterval - The number of seconds
between retries.
expensive - Mark the task as expensive.
Do not use this option with -notexpensive.
notexpensive - Mark the task as not
expensive. Do not use this option with -expensive.
days - This argument differs depending
on the task. For weekly tasks, -days should be a comma-separated list of
weekdays. Each item in the list is a day of the week upon which the task
should be run. Valid weekdays are: sun, mon, tue, wed, thur, fri, sat. For
monthly tasks, -days should be a single integer between 1 and 31,
corresponding to the day of the month upon which the task should be run.
retryCount - The number of times to
retry the task if it fails.
repeatType - The metric by which a task
repeats. Valid values are 1: once, 2: periodically, 3: daily, 4: weekly,
5: monthly. If you modify this value, then modify -repeatInterval or -days
accordingly.
duration - Estimated duration the task
will run(in minutes)
start - YYYY:MM:DD:HH:mm. The first date
the task will run.
repeatInterval - This option differs
depending on the task. For Periodic tasks, this is the period in minutes.
For Monthly tasks, each bit of the integer (except the last) represents a
day, but we recommend using the -days option to modify the days on which a
monthly task runs. This option is invalid with all other tasks.
Causes a series of ping commands to be
executed on a device. One ping command is executed for each target host
specified. This series of commands may by run on the device immediately, or
scheduled to run sometime in the future. Via this command, the task scheduled
can be set to repeat periodically. Note that if not scheduled as a task, this
command may take some time to complete.
source - Can be an IP address (a.b.c.d where
0 <= a,b,c,d <= 255), or a valid hostname, or a valid Fully
Qualified Domain Name.
sourcegroup - A valid group name. Exactly
one of -source or -sourcegroup must be specified.
dest - A comma seperated list of devices.
Devices may be specified in any way that is understood by the ping program
on the device specified by the option "-source".
rep - (#min | #:# | #days | #weeks |
#months) where # is a positive integer. #:# is hours:minutes, the two
integers don't have to be the same. This option should not be used unless
-async is also supplied.
async - Indicates that the ping operation
should be scheduled on the system as a task. The start time for the task
will be immediatly unless an alternate start data is provided by means of
the -start option.
start - YYYY:MM:DD:HH:mm. The date on which
the task will first be run. This option should not be used unless -async
is also supplied.
Load any new content packs (such
as scripts or policies) that have been installed on the server since the last
time it was restarted or content was reloaded.
Run an existing advanced script
against a device or group of devices.
Description
Runs an existing advanced
script, specified by name, against a device or group of devices. The proper
variant of the script will be applied to each device. If no variant of the
script supports a given device, that device will be skipped. The script is run
as a system task.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully
Qualified Domain Name
deviceid - A device ID
group - A valid group name.
Either a device or a group must be specified, but not both (exactly one of
-ip, -hostname, -fqdn or -group must be specified).
name - Name of the advanced
script to run
parameters - Command line
parameters for the advanced script to run
variables - A list of
variables to be replaced in the script - provided as a list of name=value
pairs, separated by commas. Values can be surrounded in single-quotes (').
Within a quoted value, a single-quote can be embedded with two
single-quote characters. Example: "variable1=value1,varable2='this is
''value 2'''"
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run.
rep - (#min | #:# | #days |
#weeks | #months) where # is a positive integer. #:# is hours:minutes--the
two integers do not have to be the same. Do not use this option with
-sync.
sync - Indicates the command
should return only after the snapshot retrieval task is complete. Do not
use this option with -rep or -start.
nowait - Indicates that the
task should not wait if there is another task currently running against
the same device.
Run an existing command script
against a device or group of devices.
Description
Runs an existing command
script, specified by name, against a device or group of devices. The proper
variant of the script will be applied to each device. If no variant of the
script supports a given device, that device will be skipped. The script is run
as a system task.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
group - A valid group name.
Either a device or a group must be specified, but not both (exactly one of
-ip, -hostname, -fqdn or -group must be specified).
name - Name of the command
script to run
variables - A list of
variables to be replaced in the script - provided as a list of name=value
pairs, separated by commas. Values can be surrounded in single-quotes (').
Within a quoted value, a single-quote can be embedded with two
single-quote characters. Example: "variable1=value1,varable2='this is
''value 2'''"
linebyline - Indicates that
line by line deployment is preferred, rather than file-based deployment
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run.
rep - (#min | #:# | #days |
#weeks | #months) where # is a positive integer. #:# is hours:minutes--the
two integers do not have to be the same. Do not use this option with
-sync.
sync - Indicates the command
should return only after the snapshot retrieval task is complete. Do not
use this option with -rep or -start.
nowait - Indicates that the
task should not wait if there is another task currently running against
the same device.
Run the specified diagnostic on a
specified device either right away, or at some point in the future. The run
diagnostic operation is actually a scheduled task.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified
Domain Name
deviceid - A device ID
group - A name of a device group
(mutually exclusive with -ip, -host, or -fqdn)
diagnostic - A diagnostic to run.
Built-in diagnostics are 'CWNCM Routing Table', 'CWNCM Interfaces' and
'CWNCM OSPF Neighbors'.
rep - (#min | #:# | #days | #weeks
| #months) where # is a positive integer. #:# is hours:minutes--the two
integers do not have to be the same. Do not use this option with -sync.
start - YYYY:MM:DD:HH:mm. The
first date on which the task will run. Do not use this option with -sync.
sync - Indicates that the command
should return only after the deploy task is complete. Do not use this
option with -start.
comment - An optional comment
about the diagnostic.
Runs a CWNCM task which
spawns a new process that executes a command external to CWNCM.
app - The command to
execute.
start - YYYY:MM:DD:HH:mm
The time when the command will be executed. Do not use this option with
-sync.
rep - (#min | #:# |
#days | #weeks | #months) where # is a positive integer. #:# is hours:minutes--the
two integers do not have to be the same. Do not use this option with
-sync.
sync - Indicates that
the CLI command should return only after the task is complete. Do not use
this option with -start.
comment - Comments to be
attached to the task that runs to execute the command.
startdir - The working
directory of the process in which the command is executed.
resultfile - The file to
contain the output of the command.
errorifnonzero - If true
the task will be marked FAILED or WARNING if the command returns a non
zero result code.
Run the specified command script on a
specified device either right away, or at some point in the future. The run
script operation is actually a scheduled task. If no mode is specified the
first supported enable, supervisor, provisioning or root mode will be used.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
group - A name of a device group
(mutually exclusive with -ip, -host, or -fqdn)
mode - A command script mode to run
the script in.
script - A script to run, may separate
commands with '\n'. Commands that require multiple entries before
returning to the device prompt can separate each entry with '\\r\\n'.
rep - (#min | #:# | #days | #weeks |
#months) where # is a positive integer. #:# is hours:minutes--the two
integers do not have to be the same. Do not use this option with -sync.
start - YYYY:MM:DD:HH:mm. The first
date on which the task will run. Do not use this option with -sync.
sync - Indicates that the command
should return only after the deploy task is complete. Do not use this
option with -start.
nowait - Indicates that the task
should not wait if there is another task currently running against the
same device.
comment - An optional comment about
the script being run.
If the -ip flag is given, show the
BasicIP model for the most recent config for the specified device. If the -id
flag is given, show the BasicIP model for the specified config. Include either
the -id or -ip option, but not both.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
If the -ip flag is given, show
the DeviceInformation model for the most recent config for the specified
device. If the -id flag is given, show the DeviceInformation model for the
specified config. Include either the -id or -ip option, but not both.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
If the -ip flag is given, show the ICMPTest
model for the most recent config for the specified device. If the -id flag is
given, show the ICMPTest model for the specified config. Include exactly one of
the -id or -ip option.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
If the -ip flag is given, show the
ShowInterfaces model for the most recent config for the specified device. If
the -id flag is given, show the ShowInterfaces model for the specified config.
Include either the -id or -ip option, but not both.
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
ipvalue - The ip value a.b.c.d where 0
<= a,b,c,d <= 255
deviceip - The device's ip address
a.b.c.d where 0 <= a,b,c,d <= 255. You may optionally prefix the IP
with SITE: where SITE is the name of the Site the device is in.
ip - a.b.c.d where 0 <= a,b,c,d <=
255. You may optionally prefix the IP with SITE: where SITE is the name of
the Site the device is in.
If the -ip flag is provided,
show the ShowOSPFNeighbors model for the most recent config for the specified
device. If the -id flag is given, show the ShowOSPFNeighbors model for the
specified config. Include either the -id or -ip option, but not both.
ip - a.b.c.d where 0 <=
a,b,c,d <= 255. You may optionally prefix the IP with SITE: where SITE
is the name of the Site the device is in.
If the -ip flag is given, show the
most recent routing table captured for the specified device. If the -id flag is
given, show the specified routing table. Include either the -id or -ip option,
but not both.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
Show one command script, advanced
script or diagnostic.
Description
Output the indicated command script,
advanced script or diagnostic. The desired script or diagnostic can be
specified by ID, or by a combination of name and type. If more than one name
match occurs, then an error will be reported and you must specify the unique
script desired by ID.
id - ID of the desired script or
diagnostic
name - Name of the desired script or
diagnostic
type - Type of the desired script or
diagnostic - may be command, advanced or diagnostic
Synchronize a device's startup and
running configs.
Description
Synchronize a device's startup
configuration so it matches its running configuration. The synchronize
operation is actually a scheduled task.
ip - a.b.c.d where 0 <= a,b,c,d
<= 255. You may optionally prefix the IP with SITE: where SITE is the
name of the Site the device is in.
host - A valid hostname
fqdn - A valid Fully Qualified Domain
Name
deviceid - A device ID
group - A name of a device group
(mutually exclusive with -ip, -host, or -fqdn)
skipinsync - Indicates that the
command should skip any device that the system indicates already has
matching startup and running configs.
rep - (#min | #:# | #days | #weeks |
#months) where # is a positive integer. #:# is hours:minutes--the two
integers do not have to be the same. Do not use this option with -sync.
start - YYYY:MM:DD:HH:mm. The first
date on which the task will run. Do not use this option with -sync.
sync - Indicates that the command
should return only after the synchronize task is complete. Do not use this
option with -start.
comment - An optional comment about
the synchronize task.
Test policy compliance for a device
configuration script.
Description
This command is used to verify
whether a configuration script is in compliance with applicable policies.
family - The device family for the
configuration script to be tested("Cisco IOS", F5, etc.)
script - The configuration script to
be tested.
policy - The name of the policy for
which the script will be test against.
group - Specify a device group name.
The test will be performed against the policies that are applicable to the
group. If both -policy and -group are used, -group argument will be
ignored. If none of -policy and -group is used, test will be performed
against all applicable policies.
Causes a series of traceroute commands
to be executed on a device. One traceroute command is executed for each target
host specified. This series of commands may by run on the device immediately,
or scheduled to run sometime in the future. Via this command, the task
scheduled can be set to repeat periodically. Note that if not scheduled as a
task, this command may take some time to complete.
source - Can be an IP address (a.b.c.d
where 0 <= a,b,c,d <= 255), or a valid hostname, a valid Fully
Qualified Domain Name.
sourcegroup - A valid group name.
Exactly one of -source or -sourcegroup must be specified.
dest - A comma seperated list of
devices. Devices may be specified in any way that is understood by the
traceroute program on the device specified by the option
"-source".
rep - (#min | #:# | #days | #weeks |
#months) where # is a positive integer. #:# is hours:minutes, the two
integers don't have to be the same. This option should not be used unless
-async is also supplied.
async - Indicates that the traceroute
operation should be scheduled on the system as a task. The start time for
the task will be immediatly unless an alternate start data is provided by
means of the -start option.
start - YYYY:MM:DD:HH:mm. The date on
which the task will first be run. This option should not be used unless
-async is also supplied.
A successful login
request generates a loginreply response with a sessionid. The session id is included in all other CWNCM SOAP
API requests.
If multiple requests are included in one SOAP Body, then multiple responses
are included in the response. When an error occurs CWNCM stops processing
requests unless the SOAP Header Attribute ContinueOnError
is set.