Table Of Contents

K Commands

keepalive

kernel core

key

K Commands

---

The commands in this chapter apply to the Cisco MDS 9000 Family of multilayer directors and fabric switches. All commands are shown here in alphabetical order regardless of command mode. See the "Command Modes" section to determine the appropriate mode for each command. For more information, refer to the Cisco MDS 9000 Family Configuration Guide.

keepalive

To configure the message keepalive interval for the IKE protocol, use the keepalive command in IKE configuration submode. To revert to the default, use the no form of the command.

keepalive seconds

no keepalive [seconds]

Syntax Description

seconds

Specifies the number of seconds for the keepalive interval. The range is 120 to 86400.

Defaults

3600 seconds or 1 hour.

Command Modes

IKE configuration submode.

Command History

Release	Modification
2.0(1b)	This command was introduced.

Usage Guidelines

The keepalive interface only applies to IKE version 2 tunnels.

To use this command, the IKE protocol must be enabled using the crypto ike enable command.

Examples

The following example shows how to configure the keepalive interval.

switch# config terminal

switch(config)# crypto ike domain ipsec

switch(config-ike-ipsec)# keepalive 7200

Related Commands

Command	Description
crypto ike domain ipsec	Enters IKE configuration mode.
crypto ike enable	Enables the IKE protocol.
show crypto ike domain ipsec	Displays IKE information for the IPsec domain.

kernel core

Use the kernel core command to generate a core dump for each module. Use the no form of this command to negate the command or revert to its factory

kernel core {limit number | module slot {force | level {all | header | kernel | ram | used-ram} | target ipaddress}

no kernel core {limit number | module slot {force | level {all | header | kernel | ram | used-ram} | target ipaddress}

Syntax Description

limit number	Limits the number of modules for which the core is generated. The range is 1 to 6.
module slot	Configures the module requiring the core generation.
force	Forces a module to dump kernel core.
level	Specifies the core dump level for the selected module.
all	Dumps all the memory (requires 1G of space)
header	Dumps kernel header only.
kernel	Dumps all kernel memory pages.
ram	Dumps all the RAM pages.
used-ram	Dumps all the used RAM pages.
target ipaddress	Configures the external server IP address on the same physical LAN.

Defaults

Disabled.

Command Modes

Configuration mode.

Command History

Release	Modification
1.1(1)	This command was introduced.

Usage Guidelines

Core dumps performed on the supervisor module can lead to packet loss, even in a dual supervisor configuration.

Examples

The following example limits core generation to two modules.

switch(config)# kernel core limit 2

succeeded

The following example configures module 5 to generate cores.

switch(config)# kernel core module 5

succeeded

The following example configures module 5 to generate only header-level cores.

switch(config)# kernel core module 5 level header

succeeded

The following example configures the external server.

switch(config)# kernel core target 10.50.5.5

succeeded

Related Commands

Command	Description
show kernel	Displays configured kernel core settings.
show running-config	Displays all switch configurations saved to PSS.

key

To configure the preshared key for the IKE protocol, use the key command in IKE configuration submode. To revert to the default, use the no form of the command.

key key-id address ip-address

no key key-id address ip-address

Syntax Description

key-id	Specifies the ID for the preshared key. Maximum length is 128 characters.
address ip-address	Specifies the peer IP address. The format is A.B.C.D.

Defaults

None.

Command Modes

IKE configuration submode.

Command History

Release	Modification
2.0(1b)	This command was introduced.

Usage Guidelines

To use this command, the IKE protocol must be enabled using the crypto ike enable command.

Examples

The following example shows how to configure the key.

switch# config terminal

switch(config)# crypto ike domain ipsec

switch(config-ike-ipsec)# key ctct address 10.10.100.231

Related Commands

Command	Description
crypto ike domain ipsec	Enters IKE configuration mode.
crypto ike enable	Enables the IKE protocol.
show crypto ike domain ipsec	Displays IKE information for the IPsec domain.