Cisco APIC NX-OS Style CLI Command Reference, Release 4.1(x)

radius-provider-group

radius-provider-group <arg>

Description: Set radius provider group

Syntax:


arg

Command Mode: policy-map type port-authentication : Create node level port authentication policy

Command Path:


# configure [['terminal', 't']]
(config)# policy-map type port-authentication <WORD>
(config-pmap-port-authentication)# radius-provider-group <>

radius-server host

radius-server host <A.B.C.D|A:B::C:D|WORD>

Description: RADIUS server's DNS name or its IP address

Syntax:


A.B.C.D\|A:B::C:D\|WORD	Provide a hostname or IPV4/IPV6 address

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# radius-server host <A.B.C.D|A:B::C:D|WORD>

radius-server retries

radius-server retries <NUMBER>

Description: Global RADIUS server retransmit count

Syntax:


<0-5>	Global RADIUS server retransmit count. Number range from=0 to=5

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# radius-server retries <NUMBER>

radius-server timeout

radius-server timeout <NUMBER>

Description: Global RADIUS server timeout period in seconds

Syntax:


<1-60>	Global RADIUS server timeout period in seconds. Number range from=1 to=60

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# radius-server timeout <NUMBER>

rate

rate <arg>

Description: Set rate and burst-rate (Byte Per Second)

Syntax:


arg	. Number range from=10 to=4398046510080

Command Mode: policy-protocol : Create policy protocol

Command Path:


# configure [['terminal', 't']]
(config)# policy-map type control-plane-if <WORD>
(config-pmap-copp-if)# policy-protocol <WORD>
(config-pmap-copp-if)# rate <>

rbac role

rbac role <WORD>

Description: Create AAA role, attributes and privileges for user authorization

Syntax:


WORD	Provide AAA Security domain role name (Max Size 32)

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rbac role <WORD>

rbac rule

rbac rule <DN> <WORD>

Description: Create RBAC rule, security domain users can read subtree starting at specific object

Syntax:


DN	Provide RBAC Rule ObjectDN string
WORD	Provide RBAC Rule domain name (Max Size None)

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rbac rule <DN> <WORD>

rbac security-domain

rbac security-domain <WORD>

Description: Create AAA security domain for processing authentication requests.

Syntax:


WORD	Provide AAA Security domain name (Max Size 32)

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rbac security-domain <WORD>

readerr

readerr <500-2000>

Description: Set readErr for ssd flash config

Syntax:


<500-2000>	readErr

Command Mode: flash-config : Configure SSD Flash Config policy

Command Path:


# configure [['terminal', 't']]
(config)# flash-config <WORD>
(config-flash-config)# readerr <500-2000>

realm

realm <realm>

Description: Specify server realm

Syntax:


<realm>	<realm>

Command Mode: aaa authentication login console : Configure console methods

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login console
(config-console)# realm <realm>

realm <realm>

Description: Specify server realm

Syntax:


<realm>	<realm>

Command Mode: aaa authentication login default : Configure default methods

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login default
(config-default)# realm <realm>

realm <realm>

Description: Specify server realm

Syntax:


<realm>	<realm>

Command Mode: aaa authentication login domain : Configure domain methods

Command Path:


# configure [['terminal', 't']]
(config)# aaa authentication login domain <WORD>
(config-domain)# realm <realm>

record

record <WORD>

Description: Assign Netflow Record to the Monitor

Syntax:


WORD	Monitor Name (Max Size 64)

Command Mode: flow monitor : Configure Netflow Monitor

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# flow monitor <WORD>
(config-tn-flow-monitor)# record <WORD>

record <WORD>

Description: Assign Netflow Record to the Monitor

Syntax:


WORD	Monitor Name (Max Size 64)

Command Mode: flow monitor : Configure Netflow Monitor

Command Path:


# configure [['terminal', 't']]
(config)# flow monitor <WORD>
(config-flow-monitor)# record <WORD>

recurring

recurring window <WORD>

Description: Recurring window configuration mode

Syntax:


window	Configure a schedule window
WORD	Window name (Max size 31)

Command Mode: scheduler : Scheduler configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# scheduler fabric|controller schedule <WORD>
(config-scheduler)# recurring window <WORD>

redir-dest

redir-dest <A.B.C.D|A:B::C:D> <XX:XX:XX:XX:XX:XX>

Description: Set ip and mac for service redirect destination

Syntax:


A.B.C.D\|A:B::C:D	IP address of the device
XX:XX:XX:XX:XX:XX	virtual mac address

Command Mode: svcredir-pol : Configure L4L7 service redirection policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# svcredir-pol <WORD>
(svcredir-pol)# redir-dest <A.B.C.D|A:B::C:D> <XX:XX:XX:XX:XX:XX>

redirect-health-group

redirect-health-group <WORD>

Description: Configure Redirect Health Group

Syntax:


WORD	Redirect HealthGroup name (Max Size 64)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# redirect-health-group <WORD>

redirect

Description: Enable the state of the HTTP redirect state

Command Mode: http : HTTP communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# redirect

redistrib-metric

redistrib-metric <NUMBER>

Description: Set the configuration of ISIS metric for redistributed routes

Syntax:


<1-63>	The configuration of ISIS metric for redistributed routes. Number range from=1 to=63

Command Mode: isis : Intermediate System to Intermediate System (IS-IS)

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# isis fabric
(config-pod-isis)# redistrib-metric <NUMBER>

redistrib-metric <NUMBER>

Description: Set the configuration of ISIS metric for redistributed routes

Syntax:


<1-63>	The configuration of ISIS metric for redistributed routes. Number range from=1 to=63

Command Mode: template isis-fabric : InterSystem-InterSystem Protocol (IS-IS)

Command Path:


# configure [['terminal', 't']]
(config)# template isis-fabric <WORD>
(config-template-isis-fabric)# redistrib-metric <NUMBER>

redistribute

redistribute ospf|eigrp route-map <WORD>

Description: Redistribute route map

Syntax:


ospf	Redistribute OSPF
eigrp	Redistribute EIGRP
route-map	Route map to redistribute to
WORD	Route map name

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# redistribute ospf|eigrp route-map <WORD>

redistribute ospf|eigrp route-map <WORD>

Description: Redistribute route map

Syntax:


ospf	Redistribute OSPF
eigrp	Redistribute EIGRP
route-map	Route map to redistribute to
WORD	Route map name

Command Mode: vrf : Virtual Router Context

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# redistribute ospf|eigrp route-map <WORD>

redundancy-mode

redundancy-mode combined|ps-redundant|redundant

Description: Configure power supply redundancy mode

Syntax:


combined	Combined mode to use output of all available PS
ps-redundant	PS redundant mode (N+1) to enable power output redundancy
redundant	Redundant mode (N+N) for a single PS to power the system

Command Mode: power : Create a power supply redundancy policy

Command Path:


# configure [['terminal', 't']]
(config)# power redundancy-policy <WORD>
(config-power)# redundancy-mode combined|ps-redundant|redundant

region

region <WORD>

Description: STP MST region configuration mode

Syntax:


WORD	MST region name

Command Mode: spanning-tree : STP MST configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# spanning-tree mst configuration
(config-stp)# region <WORD>

reload controller

reload controller <NUMBER>

Description: Reload controller

Syntax:


<1-64>	Controller id. Number range from=1 to=64

Command Mode: exec : Exec Mode

Command Path:


# reload controller <NUMBER>

reload switch

reload switch <NUMBER>

Description: Reload switch

Syntax:


<101-4000>	Switch id. Number range from=101 to=4000

Command Mode: exec : Exec Mode

Command Path:


# reload switch <NUMBER>

remote-as

remote-as <NUMBER>

Description: Specify Autonomous System Number of the neighbor

Syntax:


<1-4294967295>	The Remote autonomous system number. Number range from=1 to=4294967295

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# remote-as <NUMBER>

remote-as <NUMBER>

Description: Specify Autonomous System Number of the neighbor

Syntax:


<1-4294967295>	The Remote autonomous system number. Number range from=1 to=4294967295

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# remote-as <NUMBER>

remote-dest

remote-dest <A.B.C.D|A:B::C:D|WORD> port <port>

Description: TACACS Accounting remote destination's DNS name or its IP address

Syntax:


A.B.C.D\|A:B::C:D\|WORD	TACACS+ server's DNS name or its IP address
port	port number for the remote destination
port	Tacacs server port for accounting logs. Number range from=1 to=65535

Command Mode: tacacslog-group : configure tacacs group

Command Path:


# configure [['terminal', 't']]
(config)# tacacslog-group <WORD>
(config-tacacslog-group)# remote-dest <A.B.C.D|A:B::C:D|WORD> port <port>

remote

remote path <WORD>

Description: Remote path configuration mode

Syntax:


path	Configure remote path
WORD	Remote path configuration name

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# remote path <WORD>

remote path <WORD>

Description: Set the remote path configuration will get downloaded from

Syntax:


path	Assign remote path
WORD	Remote path name

Command Mode: snapshot download : Configuration snapshot download setup mode

Command Path:


# configure [['terminal', 't']]
(config)# snapshot download <WORD>
(config-download)# remote path <WORD>

remote path <WORD>

Description: Set the remote path configuration will get exported to

Syntax:


path	Configure remote path
WORD	Remote path name

Command Mode: snapshot export : Configuration export setup mode

Command Path:


# configure [['terminal', 't']]
(config)# snapshot export <WORD>
(config-export)# remote path <WORD>

remote path <WORD>

Description: Set the remote path configuration will get imported from

Syntax:


path	Assign remote path
WORD	Remote path name

Command Mode: snapshot import : Configuration import setup mode

Command Path:


# configure [['terminal', 't']]
(config)# snapshot import <WORD>
(config-import)# remote path <WORD>

remote path <WORD>

Description: Set the remote path configuration will get uploaded to

Syntax:


path	Assign remote path
WORD	Remote path name

Command Mode: snapshot upload : Configuration snapshot upload setup mode

Command Path:


# configure [['terminal', 't']]
(config)# snapshot upload <WORD>
(config-upload)# remote path <WORD>

replace-controller replace

replace-controller replace <NUMBER> <standby-serial>

Description: Replace active controller with standby

Syntax:


<1-64>	Controller ID. Number range from=1 to=64
<standby-serial>	Backup serial number

Command Mode: exec : Exec Mode

Command Path:


# replace-controller replace <NUMBER> <standby-serial>

replace-controller reset

replace-controller reset <NUMBER>

Description: Reset failover status of controller

Syntax:


<1-64>	Controller ID. Number range from=1 to=64

Command Mode: exec : Exec Mode

Command Path:


# replace-controller reset <NUMBER>

request-status-count

request-status-count <NUMBER>

Description: Set the maximum count of HTTP requests to track.

Syntax:


<count>	Set the maximum count of HTTP requests to track.. Number range from=0 to=1024

Command Mode: http : HTTP communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# request-status-count <NUMBER>

request-status-count <NUMBER>

Description: Set the maximum count of HTTPS requests to track

Syntax:


<count>	Set the maximum count of HTTPS requests to track.. Number range from=0 to=1024

Command Mode: https : HTTPS communication policy group

Command Path:


# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# request-status-count <NUMBER>

reset-to-factory

Description: Reset role to factory default privileges

Command Mode: rbac role : Create AAA role, attributes and privileges for user authorization

Command Path:


# configure [['terminal', 't']]
(config)# rbac role <WORD>
(config-role)# reset-to-factory

response-incl

response-incl <respincl>

Description: Configure response subtree which needs to be included

Syntax:


<respincl>	The response subtree to be included

Command Mode: query : Configure Query profile Parameters

Command Path:


# configure [['terminal', 't']]
(config)# callhome common
(config-callhome)# query-profile
(config-callhome-queryprof)# query <WORD> type dn|class <dn/classname>
(config-callhome-queryprof-query)# response-incl <respincl>

response-incl <respincl>

Description: Configure response subtree which needs to be included

Syntax:


<respincl>	The response subtree to be included

Command Mode: query : Configure Query profile Parameters

Command Path:


# configure [['terminal', 't']]
(config)# smartcallhome common
(config-smartcallhome)# query-profile
(config-callhome-queryprof)# query <WORD> type dn|class <dn/classname>
(config-callhome-queryprof-query)# response-incl <respincl>

response-subtree

response-subtree full|children|no

Description: Configure response-subtree

Syntax:


full	Full
children	Children
no	No

Command Mode: query : Configure Query profile Parameters

Command Path:


# configure [['terminal', 't']]
(config)# callhome common
(config-callhome)# query-profile
(config-callhome-queryprof)# query <WORD> type dn|class <dn/classname>
(config-callhome-queryprof-query)# response-subtree full|children|no

response-subtree full|children|no

Description: Configure response-subtree

Syntax:


full	Full
children	Children
no	No

Command Mode: query : Configure Query profile Parameters

Command Path:


# configure [['terminal', 't']]
(config)# smartcallhome common
(config-smartcallhome)# query-profile
(config-callhome-queryprof)# query <WORD> type dn|class <dn/classname>
(config-callhome-queryprof-query)# response-subtree full|children|no

retransmit-interval

retransmit-interval <NUMBER>

Description: Set the interval between LSA retransmissions

Syntax:


<1-65535>	Interval in seconds. Number range from=1 to=65535

Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# retransmit-interval <NUMBER>

retransmit-interval <NUMBER>

Description: Set the interval between LSA retransmissions

Syntax:


<1-65535>	Interval in seconds. Number range from=1 to=65535

Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# retransmit-interval <NUMBER>

retries

retries <NUMBER>

Description: LDAP server retries for authentication

Syntax:


<0-5>	LDAP server retries for authentication. Number range from=0 to=5

Command Mode: ldap-server host : LDAP server DNS name or IP address

Command Path:


# configure [['terminal', 't']]
(config)# ldap-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# retries <NUMBER>

retries <0-5>

Description: RADIUS server retries for authentication

Syntax:


<0-5>	RADIUS server retries for authentication

Command Mode: radius-server host : RADIUS server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# radius-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# retries <0-5>

retries <0-5>

Description: RSA server retries for authentication

Syntax:


<0-5>	RSA server retries for authentication

Command Mode: rsa-server host : RSA server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# rsa-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# retries <0-5>

retries <NUMBER>

Description: TACACS server retries for authentication

Syntax:


<0-5>	TACACS server retries for authentication. Number range from=0 to=5

Command Mode: tacacs-server host : TACACS+ server's DNS name or its IP address

Command Path:


# configure [['terminal', 't']]
(config)# tacacs-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# retries <NUMBER>

reverse-port

Description: Decide if the ports should be reverted on filters of type both

Command Mode: subject : Configuration a subject on the contract

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# contract <WORD> [type <type>]
(config-tenant-contract)# subject <WORD>
(config-tenant-contract-subj)# reverse-port

revision

revision <NUMBER>

Description: Set the MST region revision number

Syntax:


<0-65535>	MST region revision number. Number range from=0 to=65535

Command Mode: region : STP MST region configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# spanning-tree mst configuration
(config-stp)# region <WORD>
(config-stp-region)# revision <NUMBER>

rfc-compliant

rfc-compliant true|false

Description: Configure the rfc compliance

Syntax:


true	Enable rfc compliance
false	Disable rfc compliance

Command Mode: destination : Configure destination Parameters

Command Path:


# configure [['terminal', 't']]
(config)# callhome common
(config-callhome)# destination-profile
(config-callhome-destnprof)# destination <WORD>
(config-callhome-destnprof-destn)# rfc-compliant true|false

rfc-compliant true|false

Description: Configure the rfc compliance

Syntax:


true	Enable rfc compliance
false	Disable rfc compliance

Command Mode: destination : Configure destination Parameters

Command Path:


# configure [['terminal', 't']]
(config)# smartcallhome common
(config-smartcallhome)# destination-profile
(config-callhome-destnprof)# destination <WORD>
(config-callhome-destnprof-destn)# rfc-compliant true|false

rhev-domain

rhev-domain <WORD> [delimiter <WORD>]

Description: Create a VMM Redhat Domain

Syntax:


WORD	VMM Redhat Domain name
WORD	(Optional) Custom Delimiter

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rhev-domain <WORD> [delimiter <WORD>]

rhev-domain member <WORD> [encap <WORD>] [primary-encap <WORD>] [deploy <WORD>] [push <WORD>] [delimiter <WORD>]

Description: Associate EPG to a Redhat Domain

Syntax:


member	Bind the EPG to a Redhat domain
WORD	Redhat Domain Name
WORD	(Optional) Enforce encap value. Secondary encap when EPG is isolated (For example vlan-10 or auto)
WORD	(Optional) Primary encap when EPG is isolated (For example vlan-11 or auto)
WORD	(Optional) Deployment mode
WORD	(Optional) Push mode
WORD	(Optional) Custom Delimiter

Command Mode: epg : AEPg configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>
(config-tenant-app)# epg <WORD> [type <WORD>]
(config-tenant-app-epg)# rhev-domain member <WORD> [encap <WORD>] [primary-encap <WORD>] [deploy <WORD>] [push <WORD>] [delimiter <WORD>]

rhev

rhev <arg> datacenter <WORD>

Description: Configure an RHEV controller in the Redhat domain

Syntax:


arg
datacenter	Datacenter Name
WORD	Datacenter Name

Command Mode: rhev-domain : Create a VMM Redhat Domain

Command Path:


# configure [['terminal', 't']]
(config)# rhev-domain <WORD> [delimiter <WORD>]
(config-redhat)# rhev <> datacenter <WORD>

role

role <WORD>

Description: Create the AAA domain role to set privilege bitmask of a user domain

Syntax:


WORD	User role

Command Mode: domain : Create the AAA domain to which the user belongs.

Command Path:


# configure [['terminal', 't']]
(config)# username <WORD>
(config-username)# domain <WORD>
(config-domain)# role <WORD>

role <WORD>

Description: Create the AAA domain role to set privilege bitmask of a user domain

Syntax:


WORD	User role

Command Mode: domain : Create the AAA domain to which the Group DN belongs.

Command Path:


# configure [['terminal', 't']]
(config)# ldap-group-map-rule <WORD>
(config-ldap-group-map-rule)# domain <WORD>
(config-domain)# role <WORD>

rotrigger snapshot export

rotrigger snapshot export <WORD>

Description: Read-only Trigger command for snapshot export

Syntax:


WORD	Snapshot export configuration name

Command Mode: exec : Exec Mode

Command Path:


# rotrigger snapshot export <WORD>

route-control

route-control import|export

Description: Configure Route Control

Syntax:


import	Import Control
export	Export Control

Command Mode: l3out : Configuration for L3Out

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# l3out <WORD>
(config-tenant-l3out)# route-control import|export

route-map

route-map <WORD> deny|permit <Sequence to insert to/delete from existing route-map entry>

Description: Configure route-map

Syntax:


WORD	Route-map name
deny	deny
permit	permit
Sequence to insert to/delete from existing route-map entry	Sequence to insert to/delete from existing route-map entry. Number range from=0 to=65535

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# route-map <WORD> deny|permit <Sequence to insert to/delete from existing route-map entry>

route-map <WORD>

Description: Create route-map or enter route-map command mode

Syntax:


WORD	Route-map name (Max Size 64)

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# route-map <WORD>

route-map <WORD> in|out

Description: Apply route-map to neighbor

Syntax:


WORD	Route Map Name (Max Size 63)
in	Apply policy to incoming routes
out	Apply policy to outgoing routes

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# route-map <WORD> in|out

route-map <WORD>

Description: Create route-map or enter route-map command mode

Syntax:


WORD	Route-map name (Max Size 64)

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# route-map <WORD>

route-map <WORD> in|out

Description: Apply route-map to neighbor

Syntax:


WORD	Route Map Name (Max Size 63)
in	Apply policy to incoming routes
out	Apply policy to outgoing routes

Command Mode: neighbor : Configure a BGP neighbor

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# route-map <WORD> in|out

route-map interpod-import

Description: Import subnet from IPN

Syntax:


interpod-import	Import subnet from IPN

Command Mode: fabric-external : Intrasite/Intersite Connectivity Profile

Command Path:


# configure [['terminal', 't']]
(config)# fabric-external <NUMBER>
(config-fabric-external)# route-map interpod-import

route-profile

route-profile <WORD>

Description: Configure route-profile

Syntax:


WORD	Route profile name

Command Mode: vrf : Configuration for vrf

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# vrf context <WORD>
(config-tenant-vrf)# route-profile <WORD>

route-profile <WORD>

Description: Configure route-profile for bridge-domain

Syntax:


WORD	Route profile name

Command Mode: interface : Configuration for interface bridge-domain

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# interface bridge-domain <WORD>
(config-tenant-interface)# route-profile <WORD>

route-reflector

route-reflector spine <LIST> [description <TEXT>]

Description: Configure BGP route-reflectors

Syntax:


spine	Configure Spines as route-reflectors
LIST	Route-reflector spine node name or ID list. Ex. spine1 or 103,105
TEXT	(Optional) Description

Command Mode: bgp-fabric : Border Gateway Protocol (BGP)

Command Path:


# configure [['terminal', 't']]
(config)# bgp-fabric
(config-bgp-fabric)# route-reflector spine <LIST> [description <TEXT>]

route-reflector spine <LIST> [description <TEXT>]

Description: Configure BGP route-reflectors

Syntax:


spine	Configure Spines as route-reflectors
LIST	Route-reflector spine node name or ID list. Ex. spine1 or 103,105
TEXT	(Optional) Description

Command Mode: bgp : Border Gateway Protocol (BGP)

Command Path:


# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# bgp fabric
(config-pod-bgp)# route-reflector spine <LIST> [description <TEXT>]

route-target

route-target <WORD> <WORD>

Description: Route-Target

Syntax:


WORD	Route-Target mode
WORD	Route-Target Extended Community in format <AS(4bytes)>:<NN(2bytes)> (Max Size None)

Command Mode: address-family : Address Family

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast
(config-leaf-vrf-af)# route-target <WORD> <WORD>

route-target <WORD> <WORD>

Description: Route-Target

Syntax:


WORD	Route-Target mode
WORD	Route-Target Extended Community in format <AS(4bytes)>:<NN(2bytes)> (Max Size None)

Command Mode: address-family : Address Family

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast
(config-leaf-vrf-af)# route-target <WORD> <WORD>

route-target extended <value>

Description: Global EVPN Route Target

Syntax:


extended	Route-Target as extended community
value	Community value in aa:nn format

Command Mode: fabric-external : Intrasite/Intersite Connectivity Profile

Command Path:


# configure [['terminal', 't']]
(config)# fabric-external <NUMBER>
(config-fabric-external)# route-target extended <value>

router-advertisement-guard-admin-status

router-advertisement-guard-admin-status enabled|disabled

Description: Config router advertisement administrative status in first hop security bridge domain policy

Syntax:


enabled	Enable router advertisement guard
disabled	Disable router advertisement guard

Command Mode: security-policy : Configuration for security policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# first-hop-security
(config-tenant-fhs)# security-policy <WORD>
(config-tenant-fhs-secpol)# router-advertisement-guard-admin-status enabled|disabled

router-advertisement-guard

Description: Configuration for router advertisement guard policy

Command Mode: security-policy : Configuration for security policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# first-hop-security
(config-tenant-fhs)# security-policy <WORD>
(config-tenant-fhs-secpol)# router-advertisement-guard

router-advertisement

Description: Config trust router advertisement in trust control policy

Command Mode: trust-control : Configuration for trust control policy

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# first-hop-security
(config-tenant-fhs)# trust-control <WORD>
(config-tenant-fhs-trustctrl)# router-advertisement

router-id

router-id <A.B.C.D|A:B::C:D>

Description: Set router-id for peer l4l7 device

Syntax:


A.B.C.D\|A:B::C:D	IP address for the l4l7 peer

Command Mode: rtr-cfg : Configure L4-L7 router configuration parameters

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# rtr-cfg <WORD>
(rtr-cfg)# router-id <A.B.C.D|A:B::C:D>

router-id <A.B.C.D>

Description: Configure Router ID

Syntax:


A.B.C.D	Router ID Value

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# router-id <A.B.C.D>

router-id <A.B.C.D>

Description: Configure Router ID

Syntax:


A.B.C.D	Router ID Value

Command Mode: vrf : Configure VRF parameters

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# router-id <A.B.C.D>

router bgp

router bgp <fabric-ASN>

Description: Border Gateway Protocol (BGP)

Syntax:


<fabric-ASN>	Autonomous System Number

Command Mode: leaf : Configure Leaf Node

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>

router bgp <fabric-ASN>

Description: Border Gateway Protocol (BGP)

Syntax:


<fabric-ASN>	Autonomous System Number

Command Mode: spine : Configure Spine Node

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>

router eigrp

router eigrp default

Description: Enhanced Interior Gateway Routing Protocol (EIGRP)

Syntax:


default	EIGRP process tag

Command Mode: leaf : Configure Leaf Node

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router eigrp default

router eigrp default

Description: Enhanced Interior Gateway Routing Protocol (EIGRP)

Syntax:


default	EIGRP process tag

Command Mode: spine : Configure Spine Node

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router eigrp default

router ospf

router ospf default|multipod-internal

Description: Open Shortest Path First (OSPF and OSPF Version3)

Syntax:


default	Process tag for default ospf and ospfv3
multipod-internal	Process tag for multipod-internal ospf (used for forwarding traffic from local leaf across pod to remote leaf in remote pod

Command Mode: leaf : Configure Leaf Node

Command Path:


# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal

router ospf default|multipod-internal

Description: Open Shortest Path First (OSPF and OSPF Version3)

Syntax:


default	Process tag for default ospf and ospfv3
multipod-internal	Process tag for multipod-internal ospf (used for forwarding traffic from local leaf across pod to remote leaf in remote pod

Command Mode: spine : Configure Spine Node

Command Path:


# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal

rsa-server host

rsa-server host <A.B.C.D|A:B::C:D|WORD>

Description: RSA server's DNS name or its IP address

Syntax:


A.B.C.D\|A:B::C:D\|WORD	Provide a hostname or IPV4/IPV6 address

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rsa-server host <A.B.C.D|A:B::C:D|WORD>

rsa-server retries

rsa-server retries <NUMBER>

Description: Global RSA server retransmit count

Syntax:


<0-5>	Global RSA server retransmit count. Number range from=0 to=5

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rsa-server retries <NUMBER>

rsa-server timeout

rsa-server timeout <NUMBER>

Description: Global RSA server timeout period in seconds

Syntax:


<1-60>	Global RSA server timeout period in seconds. Number range from=1 to=60

Command Mode: configure : Configuration Mode

Command Path:


# configure [['terminal', 't']]
(config)# rsa-server timeout <NUMBER>

rtr-cfg

rtr-cfg <WORD>

Description: Configure router configuration association for a L4-L7 service.

Syntax:


WORD	router configuration name (Max Size 64)

Command Mode: service : Configure L4-L7 Service

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# l4l7 graph <WORD> [contract <contract-option>]
(config-graph)# service <WORD> [device-cluster-tenant <WORD>] [device-cluster <WORD>] [mode <Available Modes>] [svcredir <Service Redirection>] [service-type <Service Type>]
(config-service)# rtr-cfg <WORD>

rtr-cfg <WORD>

Description: Configure L4-L7 router configuration parameters

Syntax:


WORD	router configuration name (Max Size 64)

Command Mode: tenant : Tenant configuration mode

Command Path:


# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# rtr-cfg <WORD>

run-mode

run-mode pause-never|pause-on-failure

Description: Set run-mode

Syntax:


pause-never	Do not pause on failure
pause-on-failure	Pause upgrade if upgrade of current set of nodes fail

Command Mode: switch-group : Create switch firmware upgrade policy

Command Path:


# configure [['terminal', 't']]
(config)# firmware
(config-firmware)# switch-group <WORD>
(config-firmware-switch)# run-mode pause-never|pause-on-failure

Bias-Free Language

Results

Chapter: R Commands

R Commands

radius-provider-group

radius-provider-group <arg>

radius-server host

radius-server host <A.B.C.D|A:B::C:D|WORD>

radius-server retries

radius-server retries <NUMBER>

radius-server timeout

radius-server timeout <NUMBER>

rate

rate <arg>

rbac role

rbac role <WORD>

rbac rule

rbac rule <DN> <WORD>

rbac security-domain

rbac security-domain <WORD>

readerr

readerr <500-2000>

realm

realm <realm>

realm <realm>

realm <realm>

record

record <WORD>

record <WORD>

recurring

recurring window <WORD>

redir-dest

redir-dest <A.B.C.D|A:B::C:D> <XX:XX:XX:XX:XX:XX>

redirect-health-group

redirect-health-group <WORD>

redirect

redirect

redistrib-metric

redistrib-metric <NUMBER>

redistrib-metric <NUMBER>

redistribute

redistribute ospf|eigrp route-map <WORD>

redistribute ospf|eigrp route-map <WORD>

redundancy-mode

redundancy-mode combined|ps-redundant|redundant

region

region <WORD>

reload controller

reload controller <NUMBER>

reload switch

reload switch <NUMBER>

remote-as

remote-as <NUMBER>

remote-as <NUMBER>

remote-dest

remote-dest <A.B.C.D|A:B::C:D|WORD> port <port>

remote

remote path <WORD>

remote path <WORD>

remote path <WORD>

remote path <WORD>

remote path <WORD>

replace-controller replace

replace-controller replace <NUMBER> <standby-serial>

replace-controller reset

replace-controller reset <NUMBER>

request-status-count

request-status-count <NUMBER>

request-status-count <NUMBER>

reset-to-factory

reset-to-factory

response-incl

response-incl <respincl>

response-incl <respincl>

response-subtree

response-subtree full|children|no

response-subtree full|children|no

retransmit-interval

retransmit-interval <NUMBER>