Table Of Contents
Configuring Session Manager
Information About Session Manager
Configuration Guidelines and Limitations
Configuring Session Manager
Creating a Session
Configuring ACLs in a Session
Verifying a Session
Committing a Session
Saving a Session
Discarding a Session
Session Manager Example Configuration
Verifying Session Manager Configuration
Configuring Session Manager
This chapter describes how to configure the Session Manager features in Cisco NX-OS.
This chapter includes the following sections:
•
Information About Session Manager
•
Configuration Guidelines and Limitations
•
Configuring Session Manager
•
Verifying Session Manager Configuration
Information About Session Manager
Session Manager allows you to implement your configuration changes in batch mode. Session Manager works in the following phases:
•
Configuration session—Creates a list of commands that you want to implement in session manager mode.
•
Validation—Provides a basic semantic check on your configuration. Cisco NX-OS returns an error if the semantic check fails on any part of the configuration.
•
Verification—Verifies the configuration as a whole, based on the existing hardware and software configuration and resources. Cisco NX-OS returns an error if the configuration does not pass this verification phase.
•
Commit—Cisco NX-OS verifies the complete configuration and implements the changes atomically to the device. If a failure occurs, Cisco NX-OS reverts to the original configuration.
•
Abort—Discards the configuration changes before implementation.
You can optionally end a configuration session without committing the changes. You can also save a configuration session.
Configuration Guidelines and Limitations
Session Manager has the following configuration guidelines and limitations:
•
Session Manager supports only the ACL feature.
•
You can create up to 32 configuration sessions.
•
You can configure a maximum of 20,000 commands across all sessions.
Configuring Session Manager
This section includes the following topics:
•
Creating a Session
•
Configuring ACLs in a Session
•
Verifying a Session
•
Committing a Session
•
Saving a Session
•
Discarding a Session
•
Session Manager Example Configuration
Creating a Session
You can create up to 32 configuration sessions. To create a configuration session, perform this task:
| |
Command
|
Purpose
|
Step 1
|
switch# configure session name
|
Creates a configuration session and enters session configuration mode. The name can be any alphanumeric string.
|
Step 2
|
switch(config-s)# show configuration
session [name]
|
(Optional) Displays the contents of the session.
|
Step 3
|
switch(config-s)# save location
|
(Optional) Saves the session to a file. The location can be in bootflash or volatile.
|
Configuring ACLs in a Session
You can configure ACLs within a configuration session. To configure ACLs within a configuration session, perform this task:
| |
Command
|
Purpose
|
Step 1
|
switch# configure session name
|
Creates a configuration session and enters session configuration mode. The name can be any alphanumeric string.
|
Step 2
|
switch(config-s)# ip access-list name
|
Creates an ACL.
|
Step 3
|
switch(config-s-acl)# permit protocol
source destination
|
(Optional) Adds a permit statement to the ACL.
|
Step 4
|
switch(config-s-acl)# interface
interface-type number
|
Enters interface configuration mode.
|
Step 5
|
switch(config-s-if)# ip port
access-group name in
|
Adds a port access group to the interface.
|
Step 6
|
switch# show configuration session
[name]
|
(Optional) Displays the contents of the session.
|
Verifying a Session
To verify a session, use the following command in session mode:
Command
|
Purpose
|
switch(config-s)# verify [verbose]
|
Verifies the commands in the configuration session.
|
Committing a Session
To commit a session, use the following command in session mode:
Command
|
Purpose
|
switch(config-s)# commit [verbose]
|
Commits the commands in the configuration session.
|
Saving a Session
To save a session, use the following command in session mode:
Command
|
Purpose
|
switch(config-s)# save location
|
(Optional) Saves the session to a file. The location can be in bootflash or volatile.
|
Discarding a Session
To discard a session, use the following command in session mode:
Command
|
Purpose
|
switch(config-s)# abort
|
Discards the configuration session without applying the commands.
|
Session Manager Example Configuration
This example shows how to create a configuration session for ACLs:
switch# configure session name test2
switch(config-s)# ip access-list acl2
switch(config-s-acl)# permit tcp any any
switch(config-s-acl)# exit
switch(config-s)# interface Ethernet 1/4
switch(config-s-ip)# ip port access-group acl2 in
switch(config-s-ip)# exit
switch(config-s)# verify
switch(config-s)# exit
switch# show configuration session test2
Verifying Session Manager Configuration
To verify Session Manager configuration information, use the following commands:
Command
|
Purpose
|
switch# show configuration session
[name]
|
Displays the contents of the configuration session.
|
switch# show configuration session
status [name]
|
Displays the status of the configuration session.
|
switch# show configuration session
summary
|
Displays a summary of all the configuration sessions.
|