Table of Contents

Command Summary

This appendix contains a categorized complete listing of CLI configuration manager commands for the Secure Content Accelerator. Each command is described and, where appropriate, an example of usage is included. Some commands are available only with specific configuration connection methods. Availability of each command is indicated. Configuration using the GUI is described in Chapter 6.

This appendix contains the following sections:

• Input Data Format Specification
  
  
• Text Conventions
  
  
• Editing and Completion Features
  
  
• Command Hierarchy
  
  
• Configuration Security
  
  
• Methods to Manage the Device
  
  
• Initiating a Management Session
  
  
• Using the Remote Configuration Manager
  
  
• Top Level Command Set
  
  
• Group Configuration Command Set
  
  
• Configuration Command Set
  
  

Input Data Format Specification

Table C-1 describes the data formats acceptable for most commands.

"H" is one or more hexadecimal digit [0-F] and "D" is one or more decimal digit.

Text Conventions

Bold text indicates a command in a paragraph.

Courier text indicates text that appears in a command line (such as the command line interface) or is returned by the computer.

Courier bold text indicates commands and text you enter in a command line.

Italic text indicates the first occurrence of a new term, book title, and emphasized text. In this command summary, items presented in italics represent user-specified information.

Items within angle brackets ("<>") are required information.

Items within square brackets ("[]") are optional information.

Items separated by a vertical bar ("|") are options. You can choose any of them.

Note   Though a command string may be displayed on multiple lines in this guide, it must be entered on a single line with not returns except at the end of the complete command.

Editing and Completion Features

You can use individual keys and control-key combinations to help you work with the Command Line Interface (CLI). Table C-2 describes the key and key combination functions.

Note   Due to differences in operating systems, client software, and user preferences, some keys (such as ARROW, HOME, and END keys may not work as expected. Please use the key combinations listed in the Table C-2.

Most configuration commands require completing all fields in the command. For commands that have several possible completers, the TAB or ? keys display all options.

SCA> show [TAB]
access-list	ip	route
arp	keep-alive monitor	running-configuration
copyrights	memory	snmp
cpu	messages	ssl
device	netstat	syslog
dns	processes	system-resources
group	profile	terminal
history	remote-management	version
interface	rip
 

The TAB key can also be used to finish a command if the command is uniquely identified by user input.

SCA> show cop[TAB]
 

results in

SCA> show copyrights
 

Additionally, commands may be abbreviated as long as the partial commands are unique. The following text:

SCA> sho dev lis
 

is an acceptable abbreviation for

SCA> show device list
 

Note   Device, certificate, certificate group, key, security policy, and server names are case-sensitive.

Command Hierarchy

The CLI configuration manager allows you to control hardware and SSL portions of the appliance through a discreet mode and submode system. The commands for the Secure Content Accelerator device fit into the logical hierarchy show in Figure C-1.

To configure items in a submode, activate the submode by entering a command in the mode above it. For example, to set the network interface speed or duplex you must first enter enable, configure, then interface network. To return to the higher Configuration mode, simply enter end or exit or press CTRL+D. The finished command returns to the Top Level from any mode. Appendix C lists all commands for SSL devices.

Configuration Security

Cisco Secure Content Accelerator devices allow easy, flexible configuration without compromising the security of your network or their own configuration.

Passwords

Cisco Secure Content Accelerator devices use two levels of password protection: access- and enable-level. Access-level passwords control who can attach the remote configuration manager or access the device via telnet and serial connections. Enable-level passwords control who can view the same data available with access-level passwords as well as view sensitive data and configure the device.

SSL devices are shipped without passwords. Setting passwords is important because the device can be administered over a network. For more information about passwords, see the commands password access and password enable in Appendix C.

Access Lists

Access lists control which computers can attach to a specific device. No access lists exist when you first install the Secure Content Accelerator. You can restrict the computers allowed to manage the appliance by adding their IP addresses to one or more access lists for each device. For more information about configuring access lists, see the commands show access-list, access-list, snmp access-list, remote-management access-list, telnet access-list, and web-mgmt access-list in Appendix C.

Encrypted Management Sessions

To further protect the configuration security, you can specify that remote (non-serial and non-telnet) configuration sessions be encrypted using AES, DES, or ARC4. See remote-management encryption in Appendix C.

Factory Default Reset Password

If you have forgotten your access or enable password, you can use a factory-set password during a serial configuration session. When prompted for a password, enter FailSafe (case-sensitive). You are asked to confirm the action. The appliance reboots (reloads) with factory default settings.

Caution   All configuration is lost when using the factory default reset password.

Methods to Manage the Device

You can configure the Cisco Secure Content Accelerator using one of four methods, three of which use the CLI configuration manager.

• Serial connection, configuration manager
  
  
• • An IP address need not have been assigned for appliance management.
    
    
  • A device can be set to single-port mode via serial connection.
    
    
  • A device must be managed while physically connected via a serial cable.
    
    
  • The FailSafe password can be used as a factory reset.
    
    
• Telnet connection, configuration manager
  
  
• • An IP address must have been assigned to the appliance.
    
    
  • A device cannot be set to single-port mode via telnet.
    
    
  • Only one device can be managed at a time.
    
    
• Remote network connection, configuration manager application
  
  
• • An IP address need not have been assigned for appliance management.
    
    
  • A device cannot be set to single-port mode via the remote connection.
    
    
  • Multiple devices can be attached.
    
    
• Remote network connection, GUI
  
  
• • In IP address must have been assigned to the appliance for management.
    
    
  • A device cannot be set to single-port mode via the GUI.
    
    
  • Only one device can be managed at a single time.
    
    

Additionally, the behaviors of some commands vary depending upon the management method. The configuration information for the commands ip name-server, rdate-server, and ip domain-name can be set remotely, but the configuration information is used only through a serial or telnet connection. The results of the ping and traceroute commands also are dependent upon the management method. When used with the remote management application, these commands are executed and results returned based upon the configuring computer's hardware information. When used with serial or telnet management, the results are based upon the SSL appliance's hardware information.

Serial and telnet management commands can use symbolic hostnames in URL identifiers if the ip domain-name has been set.

File name formats differ depending on the management method. When using remote management, you can specify the file name as it appears in the configuring computer's file system. A path must be included, if necessary. When using serial or telnet management, the file name must be entered in any of the following formats:

[<http://   | ftp:// | https:// | tftp:// >] URL
 

In situations where a file is written, anonymous write access must be configured on the system with these caveats:

• http: — The server must be configured to accept PUT commands
  
  
• https: — The server must be configured to accept PUT commands
  
  
• ftp: — If anonymous write access is not allowed, use this format:
  ftp://username:password@hostname/directory/filename
  
  
• tftp: — Use this format:
  tftp://hostname/filename
  where the hostname may be either a URL or IP address
  
  

Additionally, we provide a guided QuickStart wizard configuration method, available from both the configuration manager and GUI. To use this method for configuration, see Chapter 4. Brief instructions are also included for initiating a management session using the configuration manager.

For instructions on using any of the CLI configuration managers, see Chapter 5 for instructions on using the GUI, see Chapter 6.

Initiating a Management Session

Use the appropriate instructions below to initiate a management session with the Secure Content Accelerator.

Serial Management and IP Address Assignment

Follow these steps to initiate a management session via a serial connection and set an IP address for the device.

Note   The default terminal settings on the SSL devices and modules is 80 columns by 25 lines. To ensure the best display and reduce the chance of graphic anomalies, please use the same settings with the serial terminal software. The device terminal settings can be changed, if necessary. Use the standard ANSI setting on the serial terminal software.

SCA> enable
SCA# configure
(config[SCA])# ip address 10.1.2.5
(config[SCA])#
 

---

Note   When prompted to supply a file name during serial management, you must supply it as a URL in the form of HOST/PATH/FILENAME using the http://, https://, ftp://, or tftp:// prefix.

---

Telnet

After you have assigned an IP address to the Cisco Secure Content Accelerator using the serial connection or remote configuration manager, you can connect to the appliance via telnet.

1. Initiate a telnet session with the IP address previously assigned to the appliance.

2. An SCA> prompt is displayed.

---

Note   When prompted to supply a file name during a telnet management session, you must supply it as a URL in the form of HOST/PATH/FILENAME using the http://, https://, ftp://, or tftp:// prefix.

---

Running the Remote Configuration Manager

Use the appropriate instructions below to run the CLI configuration manager.

Linux

Enter csacfg at a Linux shell prompt.

Solaris

Enter csacfg at a Unix shell prompt.

Windows NT and Windows 2000 Software

To start the configuration manager, use the Start menu and point to Programs>Cisco Systems and click Cisco Secure Content Acc. Manager, or double-click the shortcut on the desktop.

Using the Remote Configuration Manager

Enter show device list to display a list of all Cisco Secure Content Accelerators in the same broadcast domain as the configuring computer and those found using the discover port command. Devices are listed in the following format:

Type     Key     Name     Version     MacAddr     IPaddr 
 

Cisco Secure Content Accelerator devices are listed with the "CSS-SCA" device type. Note the MAC address of the device you wish to configure. It is used with the "CS-" prefix to identify a specific device when giving commands in the format CS-macaddress, where macaddress is the MAC address of the device.

Note   Identify an unnamed device as a specific appliance, match the last six digits of the serial number with the MAC address shown.

Specifying Devices

If only one device is listed, you can configure it by simply entering commands as listed. If multiple devices are listed, you must specify the device your commands should address. In these instances you must use the on prefix.

For example, entering show device list returns the following list of unattached devices:

CSS-SCA	Ru	sslDev1	...
CSS-SCA	Ru	sslDev2	...
CSS-SCA	Ru	sslDev3	...
CSS-SCA	Ru	sslDev4	...
 

To attach the configuration manager to the device sslDev3, enter this command:

on sslDev3 attach
 

The auto completer function can assist data entry. See "Editing and Completion Features" in Appendix C for details for using editing and auto completer features.

Working with Device Groups

The remote configuration manager allows you to create groups of devices for single management sessions. Most Top Level commands can target a group just as they would a single device. Using the device list above, the commands below create a device group named myGroup, add three devices, and display the group contents.

csacfg> group myGroup create
(group[myGroup])> device sslDev1
(group[myGroup])> device sslDev2
(group[myGroup])> device sslDev4
(group[myGroup])> info
group name: myGroup
number of devices: 3
	device: sslDev1
	device: sslDev2
	device: sslDev4
(group[myGroup])> 
 

To remove a device from the group, use the no form of the command:

(group[myGroup])> no device sslDev2
 

Enter end to leave Group configuration mode. To send commands to every device in the group, use the on prefix.

on myGroup attach
 

You can simplify command entry for this group further by setting the on command to address the group myGroup by default.

set on-prefix myGroup
 

After entering this command, you do not need to use the on prefix when addressing the default target. For example, the on myGroup attach command becomes attach. You can still address another group instead of the default; simply specify its name following the on prefix. Change the on prefix target by re-entering the command, identifying the new group. View the on prefix target by entering show profile.

Note   Individual devices can also be set as the on prefix default target. Any command without the on prefix defaults to the group or device specified by the set on-prefix command.

For more information about Group Configuration commands, see "Group Configuration Command Set" in Appendix C.

Remote Configuration Caching

The remote configuration manager caches some management session information. Some changes made during a configuration session may not be displayed. Additionally, configuration changes from multiple concurrent configuration sessions may not be reflected in status and configuration displays. To obtain the most current configuration data, exit the configuration manager, and launch the application again or use the refresh command in the Privileged Command set.

Top Level Command Set

The Top Level command set consists of Non-Privileged and Privileged commands. These commands are used to view and clear statistics and device status, set terminal configuration, enter configuration modes, manage hardware, and exit the configuration manager.

Non-Privileged Command Set

The Non-Privileged command set consists of the lowest level commands having the least impact on configuration and security of the devices.

attach

Attaches or detaches the configuration manager from one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote

Use the simple attach form of the command to attach to a single found device. Use the no form of the command to detach the configuration manager from a single attached device. If an access-level password has been defined, you must enter it when prompted before the configuration manager will attach to the device(s). If a shared secret passphrase has been assigned as part of remote management encryption, you are prompted for it. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Note   If you have forgotten the device's access password, see "Factor y Default Reset Password".

Related Commands

attach ip (Non-Privileged Command Set)
enable (Non-Privileged Command Set)
remote-management enable (Configuration Command Set)
remote-management port (Configuration Command Set)

attach ip

Attaches or detaches the configuration manager from one or more devices using an alternate remote management port.

Syntax Description

Usage Guidelines

Availability: Remote

Use the port option to specify a TCP/UDP service port to use for attaching to the device. The remote-management port command must have been used on the device to change the management port from the default. If a shared secret passphrase has been assigned as part of remote management encryption, you are prompted for it. Use the no form of the command to detach the configuration manager from the specified device. If an access-level password has been defined, you must enter it when prompted before the configuration manager can attach to the device.

Note   If you have forgotten the device's access password, see "Factor y Default Reset Password".

Related Commands

attach (Non-Privileged Command Set)
enable (Non-Privileged Command Set)
remote-management enable (Configuration Command Set)
remote-management port (Configuration Command Set)

clear screen

Clears the display, leaving only one prompt line.

Usage Guidelines

Availability: Remote, Serial, Telnet

cls

Clears the display, leaving only one prompt line.

Usage Guidelines

Availability: Remote, Serial, Telnet

discover

Checks the network for new remote devices on the default or, optionally, on the specified TCP service port when using an alternate remote management port.

Syntax Description

Usage Guidelines

Availability: Remote

Use the port option to specify a TCP service port to search for devices when using an alternate remote management port.

Related Commands

remote-management port (Configuration Command Set)

enable

Enters or leaves Privileged Mode for one or more attached device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If an enable-level password has been defined, you must enter it when prompted. When using remote management, enters Privileged mode for a single, attached device. Using the no form of this command leaves Privileged mode. When using remote configuration, use the on form of the command to specify the target(s) of the command when more than one device is appropriate.

Note   If you have forgotten the device's enable password, see "Factor y Default Reset Password".

Related Commands

attach (Non-Privileged Command Set)
attach ip (Non-Privileged Command Set)

See the section "Privileged Command Set".

exit

Quits the configuration manager.

Usage Guidelines

Availability: Remote, Serial, Telnet

When executed from the remote configuration manager, closes the configuration manager. When executed from a serial connection, the connection is not closed. If an access password has been configured, you are prompted for it. When executed from telnet, the telnet connection is closed.

Related Commands

quit (Non-Privileged Command Set)

group

Creates or configures the specified user-defined device group.

Syntax Description

Usage Guidelines

Availability: Remote

Use the create flag to create the specified group and enter Group Configuration mode for it. Use the no form of the command to remove the specified group.

Related Commands

See also "Group Configuration Command Set".

help

Displays help information for the specified command.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If no command is specified, help information is displayed for all Non-Privileged commands. When using remote configuration, help information is displayed for all Top Level commands.

monitor

Displays the results of the specified show command at one second intervals.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The interval between refreshes is set using the set monitor-interval command.

Related Commands

set monitor-interval (Non-Privileged Command Set)
show profile (Non-Privileged Command Set)

paws

Pauses the configuration manager for a specified time or until a key is pressed.

Usage Guidelines

Availability: Remote, Serial, Telnet

ping

Sends ICMP packets to the specified IP address.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The host name can be used remotely if a domain name has been assigned for the device. When issued from a serial or telnet connection, the command returns information based upon the hardware of the Secure Content Accelerator. When issued from a remote management connection, the command returns information based upon the configuring computer.

Related Commands

ip name-server (Configuration Command Set)

quit

Quits the configuration manager.

Usage Guidelines

Availability: Remote, Serial, Telnet

When executed from the remote configuration manager, closes the configuration manager. When executed from a serial connection, the connection is not closed. If an access password has been configured, you are prompted for it. When executed from telnet, the telnet connection is closed.

Related Commands

exit (Non-Privileged Command Set)

set monitor-interval

Sets the number of seconds between monitor-prefixed command refreshes.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to return the monitor interval to default value.

Related Commands

monitor (Non-Privileged Command Set)
show profile (Non-Privileged Command Set)

set on-prefix

Sets the entity to address as default when using the on prefix.

Syntax Description

Usage Guidelines

Availability: Remote

Use the no form of the command to clear the default entity.

Related Commands

group (Non-Privileged Command Set)
show profile (Non-Privileged Command Set)

show arp

Displays the ARP cache on the specified device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show copyrights

Displays copyright information for software and hardware products.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show version (Non-Privileged Command Set)

show cpu

Displays CPU utilization information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the continuous option to have statistics displayed continuously, updated at one-second intervals. Use the interval option to specify an interval for display updates. Press any key to stop displaying statistics. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show date

Displays current date and time settings on the device.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

rdate-server (Configuration Command Set)

show device

Displays information about the specified device(s).

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show device list

Displays summary information for all Secure Content Accelerators in the same broadcast domain as the configuring computer or found by the configuration manager after launching the configuration manager and using the discover command.

Usage Guidelines

Availability: Remote

Devices are listed in the following format:

Type     Key     Name     Version     MacAddr     IPaddr 
 

Note the MAC address of the device you wish to configure. It is used with the "CS-" prefix to identify a specific device when giving commands.

Related Commands

discover (Non-Privileged Command Set)

show dns

Displays DNS configuration information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

ip domain-name (Configuration Command Set)
show ip domain-name (Non-Privileged Command Set)
show ip name-server (Non-Privileged Command Set)

show flow

Displays IP connection information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show group

Displays group summary information for the specified group.

Syntax Description

Usage Guidelines

Availability: Remote

If a group is not specified, information is displayed for all groups.

Related Commands

group (Non-Privileged Command Set)

See the section "Group Configuration Command Set".

show history

Displays the last commands executed.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show terminal (Top Level Command Set)
terminal history (Top Level Command Set)

show interface

Displays information for the specified Ethernet interface on one or more devices.

Syntax Description

Usage Guidelines

The information includes connection, duplex, speed, and autonegotiation settings. If a single interface is not specified, information is displayed for all interfaces on the device(s). When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show interface errors (Non-Privileged Command Set)
show interface statistics (Non-Privileged Command Set)
interface (Configuration Command Set)

See the section "Interface Configuration Command Set".

show interface errors

Displays error information for the specified Ethernet interface on one or more devices.

Syntax Description

Usage Guidelines

If a single interface is not specified, errors are displayed for both interfaces. If continuous is specified, error statistics are updated every second. Use the interval option to specify an interval for display updates. Press any key to stop displaying errors. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show interface (Non-Privileged Command Set)
show interface statistics (Non-Privileged Command Set)
interface (Configuration Command Set)

See the section "Interface Configuration Command Set".

show interface statistics

Displays interface statistics for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If a single interface is not specified, statistics are displayed for both interfaces. If continuous is specified, statistics are updated every second. Use the interval option to specify an interval for display updates. Press any key to stop displaying statistics. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show interface (Non-Privileged Command Set)
show interface errors (Non-Privileged Command Set)
interface (Configuration Command Set)

See the section "Interface Configuration Command Set".

show ip domain-name

Displays DNS configuration information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

ip domain-name (Configuration Command Set)
show dns (Non-Privileged Command Set)
show ip name-server (Non-Privileged Command Set)

show ip name-server

Displays DNS configuration information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command when more than one device is appropriate.

Related Commands

ip domain-name (Configuration Command Set)
show dns (Non-Privileged Command Set)
show ip domain-name (Non-Privileged Command Set)

show ip routes

Displays the routing table stored in one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show route (Non-Privileged Command Set)

show ip statistics

Displays diagnostic IP, ICMP, TCP, and UDP statistics for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show keepalive-monitor

Displays a list of keepalive-monitor IP addresses for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

SSL errors from IP addresses specified with the keepalive-monitor command are ignored. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

keepalive-monitor (Configuration Command Set)

show memory

Displays memory usage on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The zones flag is used to display information for each memory zone. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show messages

Displays the diagnostic message buffer for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

clear messages (Non-Privileged Command Set)
write messages (Privileged Command Set)

show netstat

Displays the current state of the IP connection for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show processes

Displays information, by thread, about processes running on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show profile

Displays the monitor-interval and on-prefix settings of the if they have been changed from the default settings.

Syntax Description

Usage Guidelines

Availability: Remote

Use the all keyword to display the current configuration of both the monitor-interval and on-prefix.

Related Commands

monitor (Non-Privileged Command Set)
set monitor-interval (Non-Privileged Command Set)
set on-prefix (Non-Privileged Command Set)

show rdate-server

Displays the IP address of the RDATE protocol server configuration for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show remote-management

Displays remote management information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

remote-management access-list (Configuration Command Set)
remote-management enable (Configuration Command Set)
remote-management encryption (Configuration Command Set)
remote-management port (Configuration Command Set)
remote-management shared-secret (Configuration Command Set)
show telnet (Non-Privileged Command Set)
show web-management (Non-Privileged Command Set)

show rip

Displays the RIP status of one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

rip (Configuration Command Set)

show route

Displays the routing table stored in one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ip routes (Top Level Command Set)

show sessions

Displays current remote configuration manager, serial, and telnet management connections to the device.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

clear line (Privileged Command Set)

show sntp-server

Displays SNTP-server information for one or more devices. The SNTP server is used for date and time information.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

sntp-server (Configuration Command Set)

show ssl

Displays SSL summary data for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the section "SSL Configuration Command Set".

show ssl cert

Displays summary data for the specified certificate entity loaded on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a certificate name, all certificate entity information is displayed When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl errors all (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
show ssl statistics all (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the sections "SSL Configuration Command Set", "Certificate Configuration Command Set", and "Certificate Group Configuration Command Set".

show ssl certgroup

Displays summary data for the specified certificate group loaded on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a certificate group, all certificate group information is displayed. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the sections "SSL Configuration Command Set", "Certificate Configuration Command Set", and "Certificate Group Configuration Command Set".

show ssl errors

Displays SSL errors reported on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

(This command must be given on one line.) Displays SSL errors reported on a single device or module. Use the continuous keyword to update the statistics every second. Use the interval keyword to specify an interval for display updates, where value is the interval in seconds. Press any key to stop displaying errors. When using remote configuration, use the on form of the command to specify the target(s) of the command, where devname is the name of a single device or module, groupname is the name of a user-defined device group, and all represents all appropriate devices and modules. The errors displayed when using the continuous or interval keywords are:

Related Commands

keepalive-monitor (Configuration Command Set)
show keepalive-monitor (Non-Privileged Command Set)
show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the section "SSL Configuration Command Set".

show ssl key

Displays summary data for the specified private key loaded on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a key name, all key information is displayed. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the sections "SSL Configuration Command Set" and "Key Configuration Command Set".

show ssl secpolicy

Displays summary data for the specified security policy on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a security policy name, all security policy information is displayed. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the sections "SSL Configuration Command Set" and "Security Policy Configuration Command Set".

show ssl server

Displays information for the specified configured logical secure server of type server, reverse-proxy server, or backend server on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a secure server name, all secure server information is displayed. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the sections "SSL Configuration Command Set" and "Server Configuration Command Set".

show ssl session-stats

Displays SSL session statistics summed over all secure logical servers on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the continuous keyword to update the statistics every second. Use the interval keyword to specify an interval for display updates. Press any key to stop displaying information. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the section "SSL Configuration Command Set".

show ssl statistics

Displays SSL statistics summed over all secure logical servers on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the continuous keyword to update the statistics every second. Use the interval keyword to specify an interval for display updates. Press any key to stop displaying information. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate. The statistics displayed when using the continuous or interval keywords are:

---

Note   Values for Active Server Connections and Total SSL Connections Refused are not shown when using the continuous keyword.

---

Related Commands

show ssl (Non-Privileged Command Set)
show ssl cert (Non-Privileged Command Set)
show ssl certgroup (Non-Privileged Command Set)
show ssl errors (Non-Privileged Command Set)
show ssl key (Non-Privileged Command Set)
show ssl secpolicy (Non-Privileged Command Set)
show ssl server (Non-Privileged Command Set)
show ssl session-stats (Non-Privileged Command Set)
ssl (Configuration Command Set)

See the section "SSL Configuration Command Set".

show syslog

Displays the list of hosts to which diagnostic messages from one or more devices are sent.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

syslog (Configuration Command Set)

show system-resources

Displays system memory and CPU usage for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the continuous option to update the information every second. Use the interval option to specify an interval for display updates. Press any key to stop displaying information. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

show telnet

Displays telnet management information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

telnet access-list (Configuration Command Set)
telnet enable (Configuration Command Set)
telnet port (Configuration Command Set)
show remote-management (Non-Privileged Command Set)
show web-management (Non-Privileged Command Set)

show terminal

Displays terminal setting information.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show history (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

show version

Displays configuration manager version information.

Usage Guidelines

Availability: Remote, Serial, Telnet

show web-management

Displays Web-based GUI management information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

web-mgmt access-list (Configuration Command Set)
web-mgmt enable (Configuration Command Set)
web-mgmt port (Configuration Command Set)
show remote-management (Non-Privileged Command Set)
show telnet (Non-Privileged Command Set)

terminal baud

Sets the baud for communicating with the Secure Content Accelerator.

Syntax Description

Usage Guidelines

Availability: Serial

Related Commands

show terminal (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

terminal history

Sets the number of commands saved in the history buffer. Use the no form of the command to disable the history list.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The default is 25.

Related Commands

show history (Non-Privileged Command Set)
show terminal (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

terminal length

Sets the number of lines in a terminal window.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show terminal (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

terminal pager

Enables the terminal pager. Using the no form of the command disables the pager.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show terminal (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

terminal reset

Resets the internal state of the terminal.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show terminal (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal width (Non-Privileged Command Set)

terminal width

Sets the width of the terminal window.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show terminal (Non-Privileged Command Set)
terminal baud (Non-Privileged Command Set)
terminal history (Non-Privileged Command Set)
terminal length (Non-Privileged Command Set)
terminal pager (Non-Privileged Command Set)
terminal reset (Non-Privileged Command Set)

traceroute

Displays the router hops to the specified destination.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When issued from a serial or telnet connection, the command returns information based upon the device's hardware. When issued from the remote configuration manager, the command returns information based upon the configuring computer.

Privileged Command Set

Use Privileged mode commands to view and edit device-specific configuration information. Enter Privileged mode for a device by using the enable command in Non-Privileged mode. All Non-Privileged commands are also available.

clear interface statistics

Resets all interface statistics for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show interface (Non-Privileged Command Set)
show interface errors (Non-Privileged Command Set)
show interface statistics (Non-Privileged Command Set)
interface (Configuration Command Set)

See "Interface Configuration Command Set".

clear ip routes

Clears the IP routing table on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ip routes (Non-Privileged Command Set)
show routes (Non-Privileged Command Set)
ip route (Configuration Command Set)

clear ip statistics

Resets all IP statistics on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ip statistics (Non-Privileged Command Set)

clear line

Closes a specified management session.

Syntax Description

Usage Guidelines

Availability: Serial

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate. Use the show sessions command to display the open management sessions.

Related Commands

show sessions (Non-Privileged Command Set)

clear messages

Empties the diagnostic message buffer on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show messages (Non-Privileged Command Set)
write messages (Privileged Command Set)

clear ssl session-stats

Resets all SSL session statistics for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl errors (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)

clear ssl statistics

Resets all SSL statistics for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

show ssl errors (Non-Privileged Command Set)
show ssl statistics (Non-Privileged Command Set)

configure

Enters Configuration mode for a device in Privileged mode.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

See the section "Configuration Command Set".

copy running-configuration

Writes the running-configuration of a device to a file.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a file name or URL, you are prompted for it. When using remote configuration, use the on form of the command to specify the target of the command if more than one device is appropriate.

Related Commands

copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy running-configuration startup-configuration

Writes the running-configuration of a device to its startup-configuration.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

copy running-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy startup-configuration

Writes the startup-configuration of a device to a file.

Syntax Description

Usage Guidelines

Availability: Serial, Telnet

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration running configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy startup-configuration running-configuration

Writes the startup-configuration of a device to its running-configuration.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy to flash

Uploads a Cisco Secure Content Accelerator image file to the device flash.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a file name or URL, you are prompted for it. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy to running-configuration

Uploads a saved configuration file and merges it to the running-configuration of a device.

Syntax Description

Usage Guidelines

Availability: Remote

If you do not specify a file name or URL, you are prompted for it. When using remote configuration, use the on form of the command to specify the target of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to startup-configuration (Privileged Command Set)

copy to startup-configuration

Uploads a saved configuration file and merges it to the startup-configuration of a device.

Syntax Description

Usage Guidelines

Availability: Serial, Telnet

If you do not specify a URL, you are prompted for it.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)

disable

Exits Privileged mode for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

enable (Non-Privileged Command Set)

erase running-configuration

Erases the running-configuration on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase startup-configuration (Privileged Command Set)

erase startup-configuration

Erases the startup-configuration on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase running-configuration (Privileged Command Set)

quick-start

Runs the QuickStart wizard for a device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

refresh

Updates device information in the configuration manager.

Usage Guidelines

Availability: Remote, Serial, Telnet

reload

Reboots one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The device resumes operation using the startup-configuration stored in the flash memory. You are prompted to confirm restarting the device. When using remote configuration, use the on form of the command to specify the target(s) of the command.

---

Note   You are not prompted to reload devices on a device-by-device basis.

---

show access-list

Displays the specified access list for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify an access list id, information for all access lists is displayed. When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

access-list (Configuration Command Set)
remote-management access-list (Configuration Command Set)
snmp access-list (Configuration Command Set)
telnet access-list (Configuration Command Set)
web-mgmt access-list (Configuration Command Set)

show running-configuration

Displays the running-configuration on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase running-configuration (Privileged Command Set)
show startup-configuration (Privileged Command Set)
write file (Privileged Command Set)

show snmp

Displays SNMP configuration information for one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

no snmp (Configuration Command Set)
snmp access-list (Configuration Command Set)
snmp contact (Configuration Command Set)
snmp default community (Configuration Command Set)
snmp enable (Configuration Command Set)
snmp location (Configuration Command Set)
snmp trap-host (Configuration Command Set)
snmp trap-type enterprise (Configuration Command Set)
snmp trap-type generic (Configuration Command Set)

show startup-configuration

Displays the startup-configuration on a device.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to flash (Privileged Command Set)
erase start-up-configuration (Privileged Command Set)
show running-configuration (Privileged Command Set)
write flash (Privileged Command Set)

write file

Writes the running-configuration of a device to a file on the file system of the configuring computer.

Syntax Description

Usage Guidelines

Availability: Remote

If you do not supply a file name, you are prompted for it. When using remote configuration, use the on form of the command to specify the target of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase running-configuration (Privileged Command Set)
show running-configuration (Privileged Command Set)
write memory (Privileged Command Set)

write flash

Writes the running-configuration to flash memory on one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Related Commands

copy running-configuration (Privileged Command Set)
copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase running-configuration (Privileged Command Set)
show running-configuration (Privileged Command Set)
write memory (Privileged Command Set)

write memory

Writes the running-configuration to flash memory on a device.

Usage Guidelines

Availability: Serial, Telnet

Related Commands

copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to flash (Privileged Command Set)
erase startup-configuration (Privileged Command Set)
show running-configuration (Privileged Command Set)
write file (Privileged Command Set)

write messages

Writes the diagnostic messages for one or more devices to a file.

Syntax Description

Usage Guidelines

Availability: Remote

If you do not supply a file name, you are prompted for it. When using remote configuration, use the on form of the command to specify the target of the command if more than one device is appropriate.

Related Commands

show messages (Non-Privileged Command Set)

write network

Writes the running-configuration to a file on a remote host.

Syntax Description

Usage Guidelines

Availability: Serial, Telnet

If you do not supply URL information, you are prompted for it.

Related Commands

copy running-configuration startup-configuration (Privileged Command Set)
copy startup-configuration running-configuration (Privileged Command Set)
copy to running-configuration (Privileged Command Set)
erase running-configuration (Privileged Command Set)
show running-configuration (Privileged Command Set)

write terminal

Displays the running-configuration of one or more devices.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

When using remote configuration, use the on form of the command to specify the target(s) of the command if more than one device is appropriate.

Group Configuration Command Set

Use Group Configuration commands to manage session-specific groups. Enter Group Configuration mode by using the group command in Top Level mode.

device

Adds the specified device to the group list.

Syntax Description

Usage Guidelines

Availability: Remote

Use the no form of the command to remove the specified device from the group list.

end

Leaves Group Configuration Mode.

Usage Guidelines

Availability: Remote

exit

Leaves Group Configuration Mode.

Usage Guidelines

Availability: Remote

finished

Exits Group Configuration Mode and returns to Top Level mode.

Usage Guidelines

Availability: Remote

help

Displays information for a specific command.

Syntax Description

Usage Guidelines

Availability: Remote

If no command is specified, help information is displayed for all Group Configuration commands.

info

Displays current information about the device group being created or edited.

Usage Guidelines

Availability: Remote

Configuration Command Set

Use Configuration mode commands to configure the Ethernet interface and SSL functions of the Secure Content Accelerator. Enter Configuration mode using the enable command in Non-Privileged mode and the configure command in Privileged mode. The prompt changes to <config[devicename]>.

access-list

Adds an access list entry to the end of the specified access list. Use the no form of the command to delete the entire specified access list.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

To activate the access list, you must also use the remote-management access-list, snmp access-list, telnet access-list, or web-mgmt access-list commands. A device can have up to 999 configured access lists.

---

Note   Configuring an access list automatically sets up an implied access denial. For example, if you have set up an access list containing the IP addresses of remote hosts allowed to access the appliance, all other IP addresses have access denied. If you configure a single access list denying access from IP addresses in that list, all other IP addresses are denied access as well.

---

Examples

The following example specifies the host with the IP address 10.1.2.3 to be the only remote host to configure the Secure Content Accelerator.

access-list 2 permit 100.1.2.3 0.0.0.0
 

The following example specifies only remote hosts on the identified subnet can configure the Secure Content Accelerator.

access-list 1 permit 100.128.0.0 0.0.255.255
 

Related Commands

show access-list (Privileged Command Set)
remote-management access-list (Configuration Command Set)
snmp access-list (Configuration Command Set)
telnet access-list (Configuration Command Set)
web-mgmt access-list (Configuration Command Set)

end

Leaves Configuration Mode and returns to Privileged Mode.

Usage Guidelines

Availability: Remote, Serial, Telnet

exit

Leaves Configuration Mode and returns to Privileged Mode.

Usage Guidelines

Availability: Remote, Serial, Telnet

finished

Leaves Configuration Mode and returns to Top Level mode.

Usage Guidelines

Availability: Remote, Serial, Telnet

help

Displays help information for the specified command.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If you do not specify a command, help information is displayed for all Configuration commands

hostname

Sets the identification name for the current Secure Content Accelerator.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to clear the hostname of the current device.

---

Note   The command prompt reflects the new name the next time Configuration mode is entered.

---

interface

Enters Interface Configuration mode for the specified Ethernet interface of the current device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show interface (Non-Privileged Command Set)
show interface errors (Non-Privileged Command Set)
show interface statistics (Non-Privileged Command Set)

See also "Interface Configuration Command Set".

ip address

Sets the IP address for the current Secure Content Accelerator.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If the netmask is not specified, a default value calculated from the user-provided IP address is used. Use the no form of the command to clear the IP address for the current device.

Related Commands

ip route default (Configuration Command Set)

ip domain-name

Sets the default domain name for the device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show ip domain-name (Non-Privileged Command Set)
show ip name-server (Non-Privileged Command Set)
ip name-server (Configuration Command Set)

ip name-server

Sets the one or more name servers to use with the device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show ip domain-name (Non-Privileged Command Set)
show ip name-server (Non-Privileged Command Set)
ip domain-name (Configuration Command Set)

ip route

Adds a static route entry for the specified destination IP address to the device routing table.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to delete the specified static route entry from the device's routing table.

Related Commands

show ip routes (Non-Privileged Command Set)
show route (Non-Privileged Command Set)

ip route default

Sets the default route for the current device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to clear the IP address for the default router.

Related Commands

ip address (Configuration Command Set)

keepalive-monitor

Indicates that SSL errors from the specified IP address are to be ignored.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Up to two IP addresses, set individually, are allowed.

Related Commands

show keepalive-monitor (Non-Privileged Command Set)

mode one-port

Enables secure and non-secure traffic to pass through the single "Network" Ethernet port. Use the no form of the command to return the device to dual-port mode.

Usage Guidelines

Availability: Serial

Use the no form of the command to clear the IP address.

---

Note   Though completers and help information are available in all management options, the command is only valid via serial management.

---

mode pass-thru

Enables pass through of non-SSL traffic. This is the default configuration.

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to block non-SSL traffic pass through.

password

Sets the access- or enable-level password for the current Secure Content Accelerator.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

The access password is used when attaching to the device during a remote management session.You are prompted to enter and verify the password. Use the no form of the command to clear the access- or enable-level password for the current device.

rdate-server

Specifies and RDATE-protocol server to be used for date and time information on the device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to clear the server assignment.

Related Commands

show date (Non-Privileged Command Set)

registration-code

Stores the registration code of the device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

remote-management access-list

Assigns the specified IP access list to the remote management subsystem.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to clear the IP access list assignment in the remote management subsystem. The access list still exists but is no longer used by the remote management subsystem.

Related Commands

access-list (Configuration Command Set)
remote-management enable (Configuration Command Set)
remote-management encryption (Configuration Command Set)
remote-management port (Configuration Command Set)
remote-management shared-secret (Configuration Command Set)
show access-list (Top Level Command Set)
show remote-management (Non-Privileged Command Set)
telnet access-list (Configuration Command Set)
web-mgmt access-list (Configuration Command Set)

remote-management enable

Enables remote management for the current device.

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to disable remote management of the current device.

---

Note   Remote management is enabled by default.

---

Related Commands

access-list (Configuration Command Set)
remote-management access-list (Configuration Command Set)
remote-management encryption (Configuration Command Set)
remote-management port (Configuration Command Set)
remote-management shared-secret (Configuration Command Set)
show remote-management (Non-Privileged Command Set)
telnet enable (Configuration Command Set)
web-mgmt enable (Configuration Command Set)

remote-management encryption

Sets the encryption method for remote management sessions.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use this command after setting a passphrase using the remote-management shared-secret command. Encryption begins the next time the configuration manager accesses the Secure Content Accelerator.

Related Commands

remote-management access-list (Configuration Command Set)
remote-management enable (Configuration Command Set)
remote-management port (Configuration Command Set)
remote-management shared-secret (Configuration Command Set)
show remote-management (Non-Privileged Command Set)

remote-management port

Sets the TCP service port used for remote management to the current device. Use the no form of the command to clear the port specification and return to the default communication port.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

This port is used at the next attach. You must enter a reload command to activate the new remote management port.

Related Commands

discover (Non-Privileged Command Set)
remote-management access-list (Configuration Command Set)
remote-management enable (Configuration Command Set)
remote-management encryption (Configuration Command Set)
remote-management shared-secret (Configuration Command Set)
show remote-management (Non-Privileged Command Set)

remote-management shared-secret

Sets the secret passphrase used for encryption. Use the no form of the command to clear the passphrase.

Syntax Description

Usage Guidelines

Availability: Serial

You are prompted for this passphrase the next time a management connection with the device is requested.

Related Commands

remote-management access-list (Configuration Command Set)
remote-management enable (Configuration Command Set)
remote-management encryption (Configuration Command Set)
remote-management port (Configuration Command Set)
show remote-management (Non-Privileged Command Set)

rip

Enables Routing Interface Protocol (RIP) for the current device.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

If a single RIP version is not specified, both versions are enabled. Using the no form of the command disables RIP completely if you do not specify a version to disable.

Examples

The following example activates RIP version 1. The first command enables both RIP versions. The second command disables on RIP v2. This has the same result as using the command rip v1.

rip
no rip v2
 

Related Commands

show rip (Non-Privileged Command Set)

no snmp

Disables SNMP and clears all SNMP data.

Note   The device must be rebooted (reloaded) before this command takes effect.

Usage Guidelines

Availability: Remote, Serial, Telnet

Related Commands

show snmp (Non-Privileged Command Set)
snmp access-list (Non-Privileged Command Set)
snmp contact (Configuration Command Set)
snmp default community (Configuration Command Set)
snmp enable (Configuration Command Set)
snmp location (Configuration Command Set)
snmp trap-host (Configuration Command Set)
snmp trap-type enterprise (Configuration Command Set)
snmp trap-type generic (Configuration Command Set)

snmp access-list

Assigns an existing access list to be used with the SNMP subsystem.

Syntax Description

Usage Guidelines

Availability: Remote, Serial, Telnet

Use the no form of the command to remove the specified access list. The access list still exists but is no longer used by the SNMP subsystem.

Related Commands

access-list (Configuration Command Set)
no snmp (Configuration Command Set)
remote-management access-list (Configuration Command Set)
show access-list (Non-Privileged Command Set)
show snmp (Non-Privileged Command Set)
snmp contact (Configuration Command Set)
snmp default community (Configuration Command Set)
snmp enable (Configuration Command Set)
snmp location (Configuration Command Set)
snmp trap-host (Configuration Command Set)
snmp trap-type enterprise (Configuration Command Set)
snmp trap-type generic (Configuration Command Set)
telnet access-list (Configuration Command Set)
web-mgmt access-list (Configuration Command Set)

snmp contact

Assigns contact information for the SNMP subsystem. Use the no form of the command to remove the contact information.

Syntax Description