Cisco APIC NX-OS Style CLI Command Reference, Release 4.1(x)

aaa authentication login console

Description: Configure console methods

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login console

aaa authentication login default

Description: Configure default methods

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login default

aaa authentication login domain

aaa authentication login domain <WORD>

Description: Configure domain methods

Syntax:


WORD	Login domain name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login domain <WORD>

aaa authentication login fallback-check

Description: checks if default auth servers are active or not before allowing fallback login

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login fallback-check

aaa authentication login ping-check

Description: Enables ICMP health check of AAA servers

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login ping-check

aaa banner

aaa banner <LINE>

Description: CLI informational banner to be displayed before user login (wrap with single quotes)

Syntax:


LINE	CLI informational banner to be displayed before user login (wrap with single quotes) (Max Size None)

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa banner <LINE>

aaa group server ldap

aaa group server ldap <WORD>

Description: LDAP server group name.

Syntax:


WORD	LDAP server group name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa group server ldap <WORD>

aaa group server radius

aaa group server radius <WORD>

Description: RADIUS server group name.

Syntax:


WORD	RADIUS server group name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa group server radius <WORD>

aaa group server rsa

aaa group server rsa <WORD>

Description: RSA server group name.

Syntax:


WORD	RSA server group name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa group server rsa <WORD>

aaa group server tacacsplus

aaa group server tacacsplus <WORD>

Description: TACACS+ server group name.

Syntax:


WORD	TACACS+ server group name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa group server tacacsplus <WORD>

aaa user default-role

aaa user default-role <default-role-policy>

Description: Default role assigned by aaa-admin for remote authentication

Syntax:


<default-role-policy>	<default-role-policy>

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# aaa user default-role <default-role-policy>

absolute

absolute window <WORD>

Description: Absolute window configuration mode

Syntax:


window	Configure scheduler window
WORD	Window name (Max size 31)

Command Mode: scheduler : Scheduler configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# scheduler fabric|controller schedule <WORD>
(config-scheduler)# absolute window <WORD>

access-encap

access-encap vlan <NUMBER>

Description: set the access-vlan for the qinq tunnel

Syntax:


vlan	Encapsulation Vlan
<1-4094>	Encapsulation Vlan. Number range from=1 to=4094

Command Mode: dot1q-tunnel : Tunnel configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# dot1q-tunnel <WORD>
(config-tenant-tunnel)#access-encap vlan <NUMBER>

access-group

access-group <WORD> <WORD> [action <WORD>] [priority <WORD>] log no-stats

Description: Apply an access-list on this subject

Syntax:


WORD	Name of the access-list to apply (Max Size 64)
WORD	Directions
WORD	(Optional) PermitOrDeny
WORD	(Optional) priority override
log	Log packets hitting the ACL
no-stats	Stats collection for the current entry

Command Mode: subject : Configuration a subject on the contract

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# contract <WORD> [type <type>]
(config-tenant-contract)# subject <WORD>
(config-tenant-contract-subj)# access-group <WORD> <WORD> [action <WORD>] [priority <WORD>] log no-stats

access-list

access-list <WORD>

Description: Create access-list

Syntax:


WORD	Access-list Name (Max Size 64)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# access-list <WORD>

account-status

account-status <WORD>

Description: Set The status of the locally-authenticated user account.

Syntax:


WORD	status of the locally-authenticated user account

Command Mode: username : Create a locally-authenticated user account

Command Path:


# configure [['terminal', 't']]
(config)# username <WORD>
(config-username)# account-status <WORD>

action

action merge|replace

Description: Snapshot import action merge|replace

Syntax:


merge	Merge with existing configuration
replace	Replace existing configuration

Command Mode: snapshot import : Configuration import setup mode

Command Path:


# configure [['terminal', 't']]
(config)# snapshot import <WORD>
(config-import)# action merge|replace

active-flow-timeout

active-flow-timeout <activeFlowTimeout>

Description: Configure Active Flow TimeOut

Syntax:


activeFlowTimeout	Configure Active Flow TimeOut. Number range from=60 to=3600

Command Mode: flow exporter : Configure NetFlow Exporter Policy

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-dvs
(config-vmware-dvs)# flow exporter <WORD>
(config-vmware-dvs-flow-exporter)# active-flow-timeout <activeFlowTimeout>

active-flow-timeout <activeFlowTimeout>

Description: Configure Active Flow TimeOut

Syntax:


activeFlowTimeout	Configure Active Flow TimeOut. Number range from=60 to=3600

Command Mode: flow exporter : Configure NetFlow Exporter Policy

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-avs
(config-vmware-avs)# flow exporter <WORD>
(config-None)# active-flow-timeout <activeFlowTimeout>

active-flow-timeout <activeFlowTimeout>

Description: Configure Active Flow TimeOut

Syntax:


activeFlowTimeout	Configure Active Flow TimeOut. Number range from=60 to=3600

Command Mode: flow exporter : Configure NetFlow Exporter Policy

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-ave
(config-vmware-ave)# flow exporter <WORD>
(config-None)# active-flow-timeout <activeFlowTimeout>

address-family

address-family ipv4|ipv6 unicast

Description: Address Family

Syntax:


ipv4	IPv4 address family
ipv6	IPv6 address family
unicast	Unicast delivery model

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

Description: EIGRP Policy Address Family

Syntax:


ipv4	Address Family IPv4
ipv6	Address Family IPv6
unicast	Unicast

Command Mode: vrf : Configure VRF information

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# address-family ipv4|ipv6 unicast

address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

Description: Configure an address-family for peer

Syntax:


ipv4	Configure IPv4 address-family
ipv6	Configure IPv6 address-family
l2vpn	Configure l2vpn address-family
unicast	Configure Unicast sub-address-family
multicast	Configure Multicast sub-address-family
evpn	Configure EVPN sub-address-family

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

address-family ipv4|ipv6 unicast

Description: Configure an address-family

Syntax:


ipv4	Configure IPv4 address-family
ipv6	Configure IPv6 address-family
unicast	Configure unicast address-family

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

Description: Address Family

Syntax:


ipv4	IPv4 address family
ipv6	IPv6 address family
unicast	Unicast delivery model

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

Description: EIGRP Policy Address Family

Syntax:


ipv4	Address Family IPv4
ipv6	Address Family IPv6
unicast	Unicast

Command Mode: vrf : Configure VRF information

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# address-family ipv4|ipv6 unicast

address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

Description: Configure an address-family for peer

Syntax:


ipv4	Configure IPv4 address-family
ipv6	Configure IPv6 address-family
l2vpn	Configure l2vpn address-family
unicast	Configure Unicast sub-address-family
multicast	Configure Multicast sub-address-family
evpn	Configure EVPN sub-address-family

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

address-family ipv4|ipv6 unicast

Description: Configure an address-family

Syntax:


ipv4	Configure IPv4 address-family
ipv6	Configure IPv6 address-family
unicast	Configure unicast address-family

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# address-family ipv4|ipv6 unicast

address-pool

address-pool <ippool> <connection-type>

Description: Configure External IP Address Pool

Syntax:


ippool	ippool
connection-type	bridge-domain/l3-external

Command Mode: l4l7 resource-pool : Configure L4-L7 Service Resource Pool

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# l4l7 resource-pool <WORD>
(config-resource-pool)# address-pool <ippool> <connection-type>

address-pool <PoolName> <gateway-address>

Description: Configure Address Pool

Syntax:


PoolName	Name of the pool
gateway-address	gateway-address

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# address-pool <PoolName> <gateway-address>

address-range

address-range <start> <end>

Description: Add Unicast Address Range

Syntax:


start	Start Address
end	End Address

Command Mode: address-pool : Configure Address Pool

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# address-pool <PoolName> <gateway-address>
(config-tenant-addrinst)# address-range <start> <end>

address

address <A.B.C.D> [preferred]

Description: Configure the IP address for dns servers

Syntax:


A.B.C.D	IP Unicast address in format i.i.i.i
preferred	(Optional) Configure the address to be preferred

Command Mode: dns : Configure default dns policy

Command Path:


# configure [['terminal', 't']]
(config)# dns
(config-dns)# address <A.B.C.D> [preferred]

admin-state-enable

Description: Enable the state of the SSH communication service

Command Mode: ssh-service : SSH communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# ssh-service
(config-ssh-service)# admin-state-enable

admin-state-enable

Description: Enable the state of the TELNET communication service

Command Mode: telnet : TELNET communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# telnet
(config-telnet)# admin-state-enable

admin-state-enable

Description: Enable the state of the shellinabox communication service

Command Mode: shellinabox : SHELLINABOX communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# shellinabox
(config-shellinabox)# admin-state-enable

admin-state-enable

Description: Enable the state of the HTTP communication service

Command Mode: http : HTTP communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# admin-state-enable

admin-state-enable

Description: Enable the state of the HTTPS communication service

Command Mode: https : HTTPS communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# admin-state-enable

admin

admin enable

Description: Set admin state of syslog group

Syntax:


enable	Enable

Command Mode: logging : Logging server group configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# logging server-group <WORD>
(config-logging)# admin enable

advertise-host-routes

Description: Enable advertising host-routes

Command Mode: bridge-domain : Configuration for bridge-domain

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# bridge-domain <WORD>
(config-tenant-bd)# advertise-host-routes

advertise-subnet

Description: Advertise ip subnet instead of a host mask in the router LSA

Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# advertise-subnet

advertise-subnet

Description: Advertise ip subnet instead of a host mask in the router LSA

Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# advertise-subnet

aggregate-address

aggregate-address <IP-PREFIX/LEN> [as-set]

Description: Route summarization

Syntax:


IP-PREFIX/LEN	Aggregate IPv4 address and mask length
as-set	(Optional) Autonomous system set path information and community information

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# aggregate-address <IP-PREFIX/LEN> [as-set]

aggregate-address <IP-PREFIX/LEN> [as-set]

Description: Route summarization

Syntax:


IP-PREFIX/LEN	Aggregate IPv4 address and mask length
as-set	(Optional) Autonomous system set path information and community information

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# aggregate-address <IP-PREFIX/LEN> [as-set]

algo

algo wred|tail-drop

Description: Configure the global QOS policies

Syntax:


wred	Set parameters for wred
tail-drop	Set parameters for tail-drop

Command Mode: qos parameters : Configure the global QOS policies

Command Path:


# configure [['terminal', 't']]
(config)# qos parameters <WORD>
(config-qos)# algo wred|tail-drop

allow-credential

Description: Enable HTTP Access-Control-Allow-Credentials header

Command Mode: http : HTTP communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# allow-credential

allow-credential

Description: Enable HTTPS Access-Control-Allow-Credentials header

Command Mode: https : HTTPS communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# allow-credential

allow-origin

allow-origin <WORD>

Description: The URL to return in the Access-Control-Allow-Origin HTTP header

Syntax:


WORD	The URL to return in the Access-Control-Allow-Origin HTTP header (Max Size 256)

Command Mode: http : HTTP communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# allow-origin <WORD>

allow-origin <WORD>

Description: The URL to return in the Access-Control-Allow-Origin HTTPS header

Syntax:


WORD	The URL to return in the Access-Control-Allow-Origin HTTPS header (Max Size 256)

Command Mode: https : HTTPS communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# allow-origin <WORD>

allow-promiscuous

allow-promiscuous enable

Description: Enable/disable promiscuous mode on trunk

Syntax:


enable	enable

Command Mode: trunk-portgroup : Configure a trunk port group in the VMWare domain

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# trunk-portgroup <>
(config-vmware-trunk)# allow-promiscuous enable

allow-self-as

Description: Accept as-path with my AS present in it

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allow-self-as

allow-self-as

Description: Accept as-path with my AS present in it

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allow-self-as

allow-writes

Description: Allow writes for the RBAC rule

Command Mode: rbac rule : Create RBAC rule, security domain users can read subtree starting at specific object

Command Path:


# configure [['terminal', 't']]
(config)# rbac rule <DN> <WORD>
(config-rule)# allow-writes

allowed-self-as-count

allowed-self-as-count <NUMBER>

Description: The number of occurrences of a local access service network

Syntax:


<1-10>	Number of occurrences of AS number, default is 3. Number range from=1 to=10

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allowed-self-as-count <NUMBER>

allowed-self-as-count <NUMBER>

Description: The number of occurrences of a local access service network

Syntax:


<1-10>	Number of occurrences of AS number, default is 3. Number range from=1 to=10

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allowed-self-as-count <NUMBER>

analytics

analytics cluster <WORD>

Description: Configure external analytics reachability information

Syntax:


cluster	Analytics cluster name
WORD	Analytics cluster name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# analytics cluster <WORD>

anycast

anycast enable

Description: Configure an anycast feature on a Redirection policy, example: anycast enable

Syntax:


enable	Redirecion Policy for anycast feature, example: anycast enable

Command Mode: svcredir-pol : Configure L4L7 service redirection policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# svcredir-pol <WORD>
(svcredir-pol)# anycast enable

application

application <WORD>

Description: application configuration mode

Syntax:


WORD	Application name (Max Size 64)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>

application <WORD>

Description: application configuration mode

Syntax:


WORD	Application name (Max Size 64)

Command Mode: dnssvrgrp : dnssvrgrp configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# dnssvrgrp <WORD>
(config-tenant-dnssvrgrp)# application <WORD>

area default-cost

area <A.B.C.D|NUMBER> default-cost <0-16777215>

Description: Set OSPF default area cost

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<0-16777215>	Cost value

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> default-cost <0-16777215>

area <A.B.C.D|NUMBER> default-cost <0-16777215>

Description: Set OSPF default area cost

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<0-16777215>	Cost value

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> default-cost <0-16777215>

area interpod

area <A.B.C.D|NUMBER> interpod peering

Description: InterPod Peering

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
peering	InterPod Peering

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> interpod peering

area <A.B.C.D|NUMBER> interpod peering

Description: InterPod Peering

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
peering	InterPod Peering

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> interpod peering

area l3out

area <A.B.C.D|NUMBER> l3out <l3out name>

Description: Enable OSPF in the L3Out

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<l3out name>	Configure ASN on an API configured L3Out

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> l3out <l3out name>

area <A.B.C.D|NUMBER> l3out <l3out name>

Description: Enable OSPF in the L3Out

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<l3out name>	Configure ASN on an API configured L3Out

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> l3out <l3out name>

area loopback

area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>

Description: Configure OSPF on Loopback

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<Loopback Ip Address>	Loopback Ip

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>

area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>

Description: Configure OSPF on Loopback

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
<Loopback Ip Address>	Loopback Ip

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>

area nssa

area <A.B.C.D|NUMBER> nssa

Description: Configure area as nssa

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa

area <A.B.C.D|NUMBER> nssa

Description: Configure area as nssa

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa

area nssa default-information-originate

area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]

Description: Originate a default route

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
no-redistribute	(Optional) No Redistribute area option

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]

area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]

Description: Originate a default route

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
no-redistribute	(Optional) No Redistribute area option

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]

area nssa no-redistribute

area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]

Description: Configure area as no-redistribute

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
default-information-originate	(Optional) Originate a default route

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]

area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]

Description: Configure area as no-redistribute

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
default-information-originate	(Optional) Originate a default route

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]

area nssa translate

area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa

Description: Translate LSAs

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
type7	From Type 7 to Type 5
suppress-fa	Suppress forwarding address in translated LSAs

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa

area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa

Description: Translate LSAs

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
type7	From Type 7 to Type 5
suppress-fa	Suppress forwarding address in translated LSAs

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa

area range

area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]

Description: Range

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
IP-PREFIX/LENGTH	Summarized IP
cost	(Optional) Route cost

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]

area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]

Description: Range

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
IP-PREFIX/LENGTH	Summarized IP
cost	(Optional) Route cost

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]

area route-map

area <A.B.C.D|NUMBER> route-map <WORD> out|in

Description: Set Route Map

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
WORD	Route Map Name (Max Size 63)
out	Apply policy to outgoing routes
in	Apply Policies for Incoming route

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> route-map <WORD> out|in

area <A.B.C.D|NUMBER> route-map <WORD> out|in

Description: Set Route Map

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID
WORD	Route Map Name (Max Size 63)
out	Apply policy to outgoing routes
in	Apply Policies for Incoming route

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> route-map <WORD> out|in

area stub

area <A.B.C.D|NUMBER> stub

Description: Configure area as a stub

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> stub

area <A.B.C.D|NUMBER> stub

Description: Configure area as a stub

Syntax:


<A.B.C.D\|NUMBER>	OSPF area ID

Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> stub

arp-learning

arp-learning enabled|disabled

Description: Enable/Disable arp learning on AVS/AVE Domain

Syntax:


enabled	Enable arp learning
disabled	Disable arp learning

Command Mode: configure-avs : Configure a VMWare Domain as AVS (N1K) type

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-avs
(config-vmware-avs)# arp-learning enabled|disabled

arp-learning enabled|disabled

Description: Enable/Disable arp learning on AVS/AVE Domain

Syntax:


enabled	Enable arp learning
disabled	Disable arp learning

Command Mode: configure-ave : Configure a Cisco AVE domain

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-ave
(config-vmware-ave)# arp-learning enabled|disabled

arp

Description: Config trust ARP in trust control policy

Command Mode: trust-control : Configuration for trust control policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# first-hop-security
(config-tenant-fhs)# trust-control <WORD>
(config-tenant-fhs-trustctrl)# arp

arp flooding

Description: Enable ARP flooding

Command Mode: bridge-domain : Configuration for bridge-domain

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# bridge-domain <WORD>
(config-tenant-bd)# arp flooding

as-override

Description: AS-override attribute to this neighbor

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# as-override

as-override

Description: AS-override attribute to this neighbor

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# as-override

asn

asn <NUMBER>

Description: Configure BGP Autonomous System number

Syntax:


<1-4294967295>	Number that uniquely identifies an autonomous system. Number range from=1 to=4294967295

Command Mode: bgp-fabric : Border Gateway Protocol (BGP)

Command Path:


# configure [['terminal', 't']]
(config)# bgp-fabric
(config-bgp-fabric)# asn <NUMBER>

asn <NUMBER>

Description: Configure BGP Autonomous System number

Syntax:


<1-4294967295>	Number that uniquely identifies an autonomous system. Number range from=1 to=4294967295

Command Mode: bgp : Border Gateway Protocol (BGP)

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# bgp fabric
(config-pod-bgp)# asn <NUMBER>

attach-ave-ng

attach-ave-ng <OpflexDevid>

Description: Execute remote cli on AVE NG Device

Syntax:


<OpflexDevid>	Specify the AVE NG device

Command Mode: exec : Exec Mode

Command Path:


# attach-ave-ng <OpflexDevid>

attach-ave

attach-ave <OpflexDevid>

Description: Execute remote cli on AVE Device

Syntax:


<OpflexDevid>	Specify the AVE device

Command Mode: exec : Exec Mode

Command Path:


# attach-ave <OpflexDevid>

attach-avs

attach-avs <OpflexDevid>

Description: Execute remote cli on an Opflex Device

Syntax:


<OpflexDevid>	Specify the OpFlex device

Command Mode: exec : Exec Mode

Command Path:


# attach-avs <OpflexDevid>

attribute-logical-expression

attribute-logical-expression <logical-expression>

Description: Configure a logical expression as criteria

Syntax:


<logical-expression>	Enter a logical expression in the format: '<attributeType> <operator> <attributeValue>' For custom-label, enter logical expression in the format: 'custom <labelName> <operator> <labelValue>' For tags, enter logical expression in the format: 'tag <operator> <categoryName> <tagName>' - attributeType can take one of these values: vm-name, guest-os, hypervisor-id, vm-id, vnic, domain, datacenter, ip, mac, vm-folder - operator can take one of these values: equals, contains, startsWith, endsWith - operator should be 'equals' when attributeType is ip or mac - attributeValue, labelName, labelValue, categoryName and tagName accept a string - attributeValue can be 'use-epg-subnet' only when attributeType is ip - A logical expression can be formed by combining any of the above using 'AND'/'and'/'OR'/'or' - If any attribute value contains spaces or parenthesis, enclose it in backslashes ('\'). e.g.: attribute-logical-expression 'hypervisor-id equals host-123 OR tag contains TCAT_1 TTAG_1 AND (guest-os equals \Ubuntu Linux (64-bit)\ and domain contains fex)' e.g.: attribute-logical-expression 'ip equals 10.1.1.10 or ip equals use-epg-subnet'

Command Mode: epg : AEPg configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>
(config-tenant-app)# epg <WORD> [type <WORD>]
(config-tenant-app-epg)# attribute-logical-expression <logical-expression>

attribute

attribute <WORD>

Description: An LDAP endpoint attribute to be used as the CiscoAVPair

Syntax:


<WORD>	LDAP endpoint attribute (Max Size 63)

Command Mode: ldap-server host : LDAP server DNS name or IP address

Command Path:


# configure [['terminal', 't']]
(config)# ldap-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# attribute <WORD>

auth-choice

auth-choice <authChoice>

Description: Set the LDAP Server authorization choice

Syntax:


authChoice	authChoice

Command Mode: aaa group server ldap : LDAP server group name.

Command Path:


# configure [['terminal', 't']]
(config)# aaa group server ldap <WORD>
(config-ldap)# auth-choice <authChoice>

authenticate

Description: Configure authentication for the default ntp policy

Command Mode: ntp : Configure the default ntp policy

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# ntp
(config-ntp)# authenticate

authenticate

Description: Configure authentication for the default ntp policy

Command Mode: template ntp-fabric : Network Time Protocol (NTP)

Command Path:


# configure [['terminal', 't']]
(config)# template ntp-fabric <WORD>
(config-template-ntp-fabric)# authenticate

authentication-key-timeout

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key-timeout <NUMBER>

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key-timeout <NUMBER>

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>

authentication-key-timeout <NUMBER>

Description: Configure the authentication key timeout

Syntax:


<0-32767>	Hold interval in seconds. Number range from=0 to=32767

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>

authentication-key

authentication-key <id> sha1|md5 <key>

Description: Configure ntp authentication keys for the default ntp policy

Syntax:


id	Id for the authentication key. Number range from=1 to=65535
sha1	use-hmac-sha1-algorithm-for-authentication
md5	use-hmac-md5-algorithm-for-authentication
key	Configure the authentication key (Max Size 40)

Command Mode: ntp : Configure the default ntp policy

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# ntp
(config-ntp)# authentication-key <id> sha1|md5 <key>

authentication-key <id> sha1|md5 <key>

Description: Configure ntp authentication keys for the default ntp policy

Syntax:


id	Id for the authentication key. Number range from=1 to=65535
sha1	use-hmac-sha1-algorithm-for-authentication
md5	use-hmac-md5-algorithm-for-authentication
key	Configure the authentication key (Max Size 40)

Command Mode: template ntp-fabric : Network Time Protocol (NTP)

Command Path:


# configure [['terminal', 't']]
(config)# template ntp-fabric <WORD>
(config-template-ntp-fabric)# authentication-key <id> sha1|md5 <key>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key <LINE>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key <LINE>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>

authentication-key <LINE>

Description: Configure the authentication key

Syntax:


LINE	authentication key

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>

authentication

authentication type compatible|strict

Description: Configure COOP authentication type

Syntax:


type	Configure COOP authentication type
compatible	Compatible type
strict	Strict type

Command Mode: coop-fabric : Council Of Oracles Protocol (COOP)

Command Path:


# configure [['terminal', 't']]
(config)# coop-fabric
(config-coop-fabric)# authentication type compatible|strict

authentication type compatible|strict

Description: Configure COOP authentication type

Syntax:


type	Configure COOP authentication type
compatible	Compatible type
strict	Strict type

Command Mode: coop : COOP protocol

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# coop fabric
(config-pod-coop)# authentication type compatible|strict

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication simple|md5

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: template hsrp group-policy : Configure HSRP Group policy templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication simple|md5

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5

authentication simple|md5

Description: Authentication

Syntax:


simple	Plain text authentication
md5	Use MD5 authentication

Command Mode: hsrp group : Configure HSRP Group

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5

authsvr

authsvr <WORD> <WORD> <svrMgmt> <WORD>

Description: Configure an auth server

Syntax:


WORD	Server Name (Max Size 64)
WORD	Server FQDN (Max Size None)
svrMgmt	Mgmt EPg
WORD	KeyRing name (Max Size 64)

Command Mode: authsvrgrp : authsvrgrp configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# authsvrgrp <WORD>
(config-tenant-authsvrgrp)# authsvr <WORD> <WORD> <svrMgmt> <WORD>

authsvrgrp

authsvrgrp <WORD>

Description: authsvrgrp configuration mode

Syntax:


WORD	Server group name (Max Size None)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# authsvrgrp <WORD>

auto-cost

auto-cost reference-bandwidth <NUMBER>

Description: Set OSPF Policy Bandwidth Reference

Syntax:


reference-bandwidth	OSPF Policy Bandwidth Reference
<1-4000000>	Bandwidth Reference Value in Mbps. Number range from=1 to=4000000

Command Mode: template ospf vrf-policy : Configure Router OSPF Timer Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template ospf vrf-policy <WORD> tenant <WORD>
(config-vrf-policy)# auto-cost reference-bandwidth <NUMBER>

auto-cost reference-bandwidth <NUMBER>

Description: Set OSPF Policy Bandwidth Reference

Syntax:


reference-bandwidth	OSPF Policy Bandwidth Reference
<1-4000000>	Bandwidth Reference Value in Mbps. Number range from=1 to=4000000

Command Mode: template ospf vrf-policy : Configure Router OSPF Timer Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template ospf vrf-policy <WORD> tenant <WORD>
(config-vrf-policy)# auto-cost reference-bandwidth <NUMBER>

auto-route-target

Description: Configure Route Target

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# auto-route-target

auto-route-target

Description: Configure Route Target

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# auto-route-target

autonomous-system

autonomous-system <NUMBER> [l3out <l3out>]

Description: Autonomous System Configuration for EIGRP

Syntax:


<1-65535>	The autonomous system number. Number range from=1 to=65535
l3out	(Optional) Configure ASN on an API configured L3Out

Command Mode: vrf : Configure VRF information

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# autonomous-system <NUMBER> [l3out <l3out>]

autonomous-system <NUMBER> [l3out <l3out>]

Description: Autonomous System Configuration for EIGRP

Syntax:


<1-65535>	The autonomous system number. Number range from=1 to=65535
l3out	(Optional) Configure ASN on an API configured L3Out

Command Mode: vrf : Configure VRF information

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# autonomous-system <NUMBER> [l3out <l3out>]

autostate

Description: Enable or disable autostate for interface-vlan

Command Mode: interface vlan : Vlan interface

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface vlan <1-4094>
(config-leaf-if)# autostate

autostate

Description: Enable or disable autostate for interface-vlan

Command Mode: interface vlan : Vlan interface

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface vlan <1-4094>
(config-leaf-if)# autostate

avail-monitor

avail-monitor enable

Description: Enable AVE availability monitoring

Syntax:


enable	enable

Command Mode: vmware-domain : Create a VMM VMWare Domain

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# avail-monitor enable

ave-timeout

ave-timeout <WORD>

Description: Configure AVE Timeout (seconds)

Syntax:


WORD	AVE Timeout (seconds)

Command Mode: configure-ave : Configure a Cisco AVE domain

Command Path:


# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>]
(config-vmware)# configure-ave
(config-vmware-ave)# ave-timeout <WORD>

Bias-Free Language

Results

Chapter: A Commands

A Commands

aaa authentication login console

aaa authentication login console

aaa authentication login default

aaa authentication login default

aaa authentication login domain

aaa authentication login domain <WORD>

aaa authentication login fallback-check

aaa authentication login fallback-check

aaa authentication login ping-check

aaa authentication login ping-check

aaa banner

aaa banner <LINE>

aaa group server ldap

aaa group server ldap <WORD>

aaa group server radius

aaa group server radius <WORD>

aaa group server rsa

aaa group server rsa <WORD>

aaa group server tacacsplus

aaa group server tacacsplus <WORD>

aaa user default-role

aaa user default-role <default-role-policy>

absolute

absolute window <WORD>

access-encap

access-encap vlan <NUMBER>

access-group

access-group <WORD> <WORD> [action <WORD>] [priority <WORD>] log no-stats

access-list

access-list <WORD>

account-status

account-status <WORD>

action

action merge|replace

active-flow-timeout

active-flow-timeout <activeFlowTimeout>

active-flow-timeout <activeFlowTimeout>

active-flow-timeout <activeFlowTimeout>

address-family

address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

address-family ipv4|ipv6 unicast

address-family ipv4|ipv6|l2vpn unicast|multicast|evpn

address-family ipv4|ipv6 unicast

address-pool

address-pool <ippool> <connection-type>

address-pool <PoolName> <gateway-address>

address-range

address-range <start> <end>

address

address <A.B.C.D> [preferred]

admin-state-enable

admin-state-enable

admin-state-enable

admin-state-enable

admin-state-enable

admin-state-enable

admin

admin enable

advertise-host-routes

advertise-host-routes

advertise-subnet

advertise-subnet

advertise-subnet

aggregate-address

aggregate-address <IP-PREFIX/LEN> [as-set]

aggregate-address <IP-PREFIX/LEN> [as-set]

algo

algo wred|tail-drop

allow-credential

allow-credential

allow-credential