Feedback
Table Of Contents
snmp-server aaa-user cache-timeout
S Commands
This chapter describes the Cisco Nexus 1010 commands that begin with the letter S.
session-limit
To limit the number of Vegas shell (VSH) sessions, use the session-limit command. To remove the limit, use the no form of this command.
session-limit number
no session-limit number
Syntax Description
Defaults
No limit is set.
Command Modes
Line configuration (config-line)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to limit the number of VSH sessions:
switch# configure terminalswitch(config)# line vtyswitch(config-line)# session-limit 10switch(config-line)#This example shows how to remove the limit:
switch# configure terminalswitch(config)# line vtyswitch(config-line)# no session-limit 10switch(config-line)#Related Commands
setup
To use the Basic System Configuration Dialog for creating or modifying a configuration file, use the setup command.
setup
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Any command mode
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
While the setup command contains no arguments or keywords, the Basic System Configuration Dialog prompts you for complete setup information, as shown in the Examples section.
The Basic System Configuration Dialog assumes the factory defaults. Keep this in mind when using it to modify an existing configuration.
All changes made to your configuration are summarized for you at the completion of the setup sequence with an option to save the changes or not.
You can exit the setup sequence at any point by pressing Ctrl-C.
Examples
This example shows how to use the setup command to create or modify a basic system configuration:
switch# setupEnter HA role[primary/secondary]: primaryEnter network-uplink type <1-4>:1. Ports 1-2 carry all management, control and data vlans2. Ports 1-2 management and control, ports 3-6 data3. Ports 1-2 management, ports 3-6 control and data4. Ports 1-2 management, ports 3-4 control, ports 5-6 data2Enter control vlan <1-3967, 4048-4093>: 1Enter the domain id<1-4095>: 2801Enter management vlan <1-3967, 4048-4093>: 1Error: There was an error executing atleast one of the commandPlease verify the following log for the command execution errors.ERROR: CLI error: Domain id can be configured only onceWarning! Mandatory reload needed for change to take effect.Save configuration before reload, else Nexus1010 HA will break![########################################] 100%---- Basic System Configuration Dialog ----This setup utility will guide you through the basic configuration ofthe system. Setup configures only enough connectivity for managementof the system.*Note: setup is mainly used for configuring the system initially,when no configuration is present. So setup always assumes systemdefaults and not the current system configuration values.Press Enter at anytime to skip a dialog. Use ctrl-c at anytimeto skip the remaining dialogs.Would you like to enter the basic configuration dialog (yes/no): yCreate another login account (yes/no) [n]: nConfigure read-only SNMP community string (yes/no) [n]:Configure read-write SNMP community string (yes/no) [n]:Enter the VSA name [Nexus1010]:Continue with Out-of-band (mgmt0) management configuration? (yes/no) [y]: nConfigure the default gateway? (yes/no) [y]: nConfigure advanced IP options? (yes/no) [n]:Enable the telnet service? (yes/no) [y]:Enable the ssh service? (yes/no) [n]:Configure the ntp server? (yes/no) [n]:The following configuration will be applied:switchname Nexus1010telnet server enableno ssh server enableWould you like to edit the configuration? (yes/no) [n]:switch#Related Commands
shutdown
To shut down the virtual service, use the shutdown command. To return the virtual service status to powered on, use the no version of this command.
shutdown [primary | secondary]
no shutdown [primary | secondary]
Syntax Description
primary
(Optional) Specifies only the primary blade for shutdown.
secondary
(Optional) Specifies only the secondary blade for shutdown.
Defaults
None
Command Modes
Virtual service blade configuration (config-vsb-config)
Supported User Rolesnetwork-admin
network-operatorCommand History
Examples
This example shows how to shut down the primary blade in the virtual service:
switch# configure terminalswitch(config)# virtual-service-blade VSM-1switch(config-vsb-config)# shutdown primaryRelated Commands
sleep
To set a sleep time, use the sleep command.
sleep time
Syntax Description
Defaults
Sleep time is not set.
Command Modes
Any command mode
Supported User Rolesnetwork-admin
network-operatorCommand History
Usage Guidelines
When you set time to 0, sleep is disabled.
Examples
This example shows how to set a sleep time:
switch# sleep 100switch#This example shows how to disable sleep:
switch# sleep 0switch#snmp-server aaa-user cache-timeout
To configure how long the AAA-synchronized user configuration stays in the local cache, use the snmp-server aaa-user cache-timeout command. To revert back to the default value of 3600 seconds, use the no form of this command.
snmp-server user aaa-user cache-timeout seconds
no snmp-server user aaa-user cache-timeout seconds
Syntax Description
seconds
Length of the time for the user configuration to remain in the local cache. The range is from 1 to 86400 seconds.
Defaults
The default timeout is 3600 seconds.
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to configure the AAA-synchronized user configuration to stay in the local cache for 1200 seconds:
switch# config tswitch(config)# snmp-server aaa-user cache-timeout 1200This example shows how to revert back to the default value of 3600 seconds:
switch# config tswitch(config)# no snmp-server aaa-user cache-timeout 1200Related Commands
snmp-server community
To create an SNMP community string and assign access privileges for the community, use the snmp-server community command.
To remove the community or its access privileges, use the no form of this command.
snmp-server community string [group group-name] [ro | rw]
no snmp-server community string [group group-name] [ro | rw]
Syntax Description
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
You can create SNMP communities for SNMPv1 or SNMPv2c.
Examples
This example shows how to configure read-only access for the SNMP community named public:
switch# config tswitch(config)# snmp-server community public roThis example shows how to remove the SNMP community named public:
switch# config tswitch(config)# no snmp-server community publicRelated Commands
snmp-server contact
To configure the sysContact, which is the SNMP contact name, use the snmp-server contact command.
To remove or modify the sysContact, use the no form of this command.
snmp-server contact [name]
no snmp-server contact [name]
Syntax Description
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
You can create SNMP communities for SNMPv1 or SNMPv2c.
Examples
This example shows how to configure the sysContact to be Admin:
switch# config tswitch(config)# snmp-server contact AdminThis example shows how to remove the sysContact:
switch# config tswitch(config)# no snmp-server contactRelated Commands
snmp-server globalEnforcePriv
To enforce SNMP message encryption for all users, use the snmp-server globalEnforcePriv command.
snmp-server globalEnforcePriv
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to enforce SNMP message encryption for all users:
switch# config tswitch(config)# snmp-server globalEnforcePrivRelated Commands
snmp-server host
To configure a host receiver for SNMPv1 or SNMPv2c traps, use the snmp-server host command. To remove the host, use the no form of this command.
snmp-server host ip-address {informs | traps}{version {1 | 2c | 3}} [auth | noauth | priv] community [udp_port number]
no snmp-server host ip-address {informs | traps} {version {1 | 2c | 3}} [auth | noauth | priv] community [udp_port number]
Syntax Description
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to configure the host receiver, 192.0.2.1, for SNMPv1 traps:
switch# config tswitch(config)# snmp-server host 192.0.2.1 traps version 1 publicThis example shows how to remove the configuration:
switch# config tswitch(config)# no snmp-server host 192.0.2.1 traps version 1 publicRelated Commands
snmp-server location
To configure the sysLocation, which is the SNMP location name, use the snmp-server location command.
To remove the sysLocation, use the no form of this command.
snmp-server location [name]
no snmp-server location [name]
Syntax Description
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to configure the sysLocation to be Lab-7:
switch# config tswitch(config)# snmp-server location Lab-7This example shows how to remove the sysLocation:
switch# config tswitch(config)# no snmp-server locationRelated Commands
snmp-server protocol enable
To enable SNMP protocol operations, use the snmp-server protocol enable command. To disable SNMP protocol operations, use the no form of this command.
snmp-server protocol enable
no snmp-server protocol enable
Syntax Description
This command has no arguments or keywords.
Defaults
This command is enabled by default.
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to enable SNMP protocol operations:
switch# config tswitch(config)# snmp-server protocol enableThis example shows how to disable SNMP protocol operations:
switch# config tswitch(config)# no snmp-server protocol enableRelated Commands
snmp-server tcp-session
To enable authentication for SNMP over TCP, use the snmp-server tcp-session command. To disable authentication for SNMP over TCP, use the no form of this command.
snmp-server tcp-session [auth]
no snmp-server tcp-session
Syntax Description
auth
(Optional) Enables one-time authentication for SNMP over the entire TCP session (rather than on a per-command basis).
Defaults
This command is disabled by default.
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to enable one-time authentication for SNMP over TCP:
switch# config tswitch(config)# snmp-server tcp-session authThis example shows how to disable one-time authentication for SNMP over TCP:
switch# config tn1000v(config)# no snmp-server tcp-sessionRelated Commands
snmp-server user
To define a user who can access the SNMP engine, use the snmp-server user command. To deny a user access to the SNMP engine, use the no form of this command.
snmp-server user name [auth {md5 | sha} passphrase-1 [priv [aes-128] passphrase-2] [engineID id] [localizedkey]]
no snmp-server user name
Syntax Description
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to provide one-time SNMP authorization for the user, Admin, using the HMAC SHA algorithm for authentication:
switch# config tswitch(config)# snmp-server user Admin auth sha abcd1234 priv abcdefghThis example shows how to deny a user access to the SNMP engine:
switch# config tswitch(config)# no snmp-server user AdminRelated Commands
snmp trap link-status
To enable SNMP link-state traps for the interface, use the snmp trap link-status command. To disable SNMP link-state traps for the interface, use the no form of this command.
snmp trap link-status
no snmp trap link-status
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
CLI interface configuration (config-if)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
This command is enabled by default.
Examples
This example shows how to enable SNMP link-state traps for the interface:
switch# config tswitch(config)# interface veth 2switch(config-if)# snmp trap link-statusswitch(config-if)#This example shows how to disable SNMP link-state traps for the interface:
switch# config tswitch(config)# interface veth 2switch(config-if)# no snmp trap link-statusswitch(config-if)#Related Commands
speed
To set the speed for an interface, use the speed command. To automatically set both the speed and duplex parameters to auto, use the no form of this command.
speed {speed_val | auto [10 | 100 | 1000]}
no speed [speed_val | auto [10 | 100 | 1000]]
Syntax Description
Defaults
None
Command Modes
Interface configuration (config-if)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
If you configure an Ethernet port speed to a value other than auto (for example, 10, 100, or 1000 Mbps), you must configure the connecting port to match. Do not configure the connecting port to negotiate the speed.
Examples
This example shows how to set the speed of Ethernet port 1 on the module in slot 3 to 1000 Mbps:
n1000v config tswitch(config)# interface ethernet 2/1switch(config-if)# speed 1000This example shows how to automatically set the speed to auto:
n1000v config tswitch(config)# interface ethernet 2/1switch(config-if)# no speed 1000Related Commands
ssh
To create a Secure Shell (SSH) session, use the ssh command.
ssh [username@]{ipv4-address | hostname} [vrf vrf-name]
Syntax Description
Defaults
Default VRF
Command Modes
Any command mode
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
The Cisco NX-OS software supports SSH version 2.
Examples
This example shows how to start an SSH session:
switch# ssh 10.10.1.1 vrf managementThe authenticity of host '10.10.1.1 (10.10.1.1)' can't be established.RSA key fingerprint is 9b:d9:09:97:f6:40:76:89:05:15:42:6b:12:48:0f:d6.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added '10.10.1.1' (RSA) to the list of known hosts.User Access VerificationPassword:Related Commands
clear ssh session
Clears SSH sessions.
ssh server enable
Enables the SSH server.
ssh key
To generate the key pair for the switch, which is used if SSH server is enabled, use the ssh key command. To remove the SSH server key, use the no form of this command.
ssh key {dsa [force] | rsa [length [force]]}
no ssh key [dsa | rsa]
Syntax Description
Defaults
1024-bit length
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
The switch uses a 1024-bit RSA key by default. The ssh key command allows you to choose a different algorithm (DSA) or different key strengths.
If you want to remove or replace an SSH server key, you must first disable the SSH server using the no ssh server enable command.
The Cisco NX-OS software supports SSH version 2.
Examples
This example shows how to create an SSH server key using DSA:
switch# config tswitch(config)# ssh key dsagenerating dsa key(1024 bits).......generated dsa keyThis example shows how to create an SSH server key using RSA with the default key length:
switch# config tswitch(config)# ssh key rsagenerating rsa key(1024 bits)......generated rsa keyThis example shows how to create an SSH server key using RSA with a specified key length:
switch# config tswitch(config)# ssh key rsa 768generating rsa key(768 bits)......generated rsa keyThis example shows how to replace an SSH server key using DSA with the force option:
switch# config tswitch(config)# no ssh server enableswitch(config)# ssh key dsa forcedeleting old dsa key.....generating dsa key(1024 bits)......generated dsa keyswitch(config)# ssh server enableThis example shows how to remove the DSA SSH server key:
switch# config tswitch(config)# no ssh server enableXML interface to system may become unavailable since ssh is disabledswitch(config)# no ssh key dsaswitch(config)# ssh server enableThis example shows how to remove all SSH server keys:
switch# config tswitch(config)# no ssh server enableXML interface to system may become unavailable since ssh is disabledswitch(config)# no ssh keyswitch(config)# ssh server enableRelated Commands
show ssh key
Displays the SSH server key information.
ssh server enable
Enables the SSH server.
ssh server enable
To enable the Secure Shell (SSH) server, use the ssh server enable command. To disable the SSH server, use the no form of this command.
ssh server enable
no ssh server enable
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
The Cisco NX-OS software supports SSH version 2.
Examples
This example shows how to enable the SSH server:
switch# config tswitch(config)# ssh server enableThis example shows how to disable the SSH server:
switch# config tswitch(config)# no ssh server enableXML interface to system may become unavailable since ssh is disabledRelated Commands
svs-domain
To configure an SVS domain and enter SVS domain configuration mode, use the svs-domain command.
svs-domain
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to enter SVS domain configuration mode to configure an SVS domain:
switch# configure terminalswitch(config)# svs-domainswitch(config-svs-domain)#Related Commands
switchname
To configure the hostname for the device, use the switchname command. To revert to the default, use the no form of this command.
switchname name
no switchname
Syntax Description
name
Name for the device. The name is alphanumeric, case sensitive, can contain special characters, and can have a maximum of 32 characters.
Defaults
switch
Command Modes
Global configuration (config)
Supported User Rolesnetwork-admin
Command History
Usage Guidelines
The Cisco NX-OS software uses the hostname in command-line interface (CLI) prompts and in default configuration filenames.
The switchname command performs the same function as the hostname command.
Examples
This example shows how to configure the device hostname:
switch# configure terminalswitch(config)# switchname Engineering2Engineering2(config)#This example shows how to revert to the default device hostname:
Engineering2# configure terminalEngineering2(config)# no switchnameswitch(config)#Related Commands
system redundancy role
To configure a redundancy role for the VSM, use the system redundancy role command. To revert to the default setting, use the no form of the command.
system redundancy role {primary | secondary | standalone}
no system redundancy role {primary | secondary | standalone}
Syntax Description
primary
Specifies the primary redundant VSM.
secondary
Specifies the secondary redundant VSM.
standalone
Specifies no redundant VSM.
Command Default
None
Command Modes
EXEC
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to configure no redundant VSM:
switch# system redundancy role standaloneswitch#Related Commands
reload module
Reloads the Virtual Supervisor Module (VSM).
show version
Displays the software version is present on the VSM.
system switchover
To switch over to the standby supervisor, use the system switchover command.
system switchover
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
EXEC
Supported User Rolesnetwork-admin
Command History
Examples
This example shows how to switch over to the standby supervisor:
switch# system switchoverswitch#Related Commands