aaa authentication login console
aaa authentication login console
Description: Configure console methods
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login console
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Description: Configure console methods
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login console
Description: Configure default methods
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login default
Description: Configure domain methods
Syntax:
WORD |
Login domain name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login domain <WORD>
Description: checks if default auth servers are active or not before allowing fallback login
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login fallback-check
Description: Enables ICMP health check of AAA servers
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa authentication login ping-check
Description: CLI informational banner to be displayed before user login (wrap with single quotes)
Syntax:
LINE |
CLI informational banner to be displayed before user login (wrap with single quotes) (Max Size None) |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa banner <LINE>
Description: LDAP server group name.
Syntax:
WORD |
LDAP server group name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa group server ldap <WORD>
Description: RADIUS server group name.
Syntax:
WORD |
RADIUS server group name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa group server radius <WORD>
Description: RSA server group name.
Syntax:
WORD |
RSA server group name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa group server rsa <WORD>
Description: TACACS+ server group name.
Syntax:
WORD |
TACACS+ server group name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa group server tacacsplus <WORD>
Description: Default role assigned by aaa-admin for remote authentication
Syntax:
<default-role-policy> |
<default-role-policy> |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# aaa user default-role <default-role-policy>
Description: Absolute window configuration mode
Syntax:
window |
Configure scheduler window |
WORD |
Window name (Max size 31) |
Command Mode: scheduler : Scheduler configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# scheduler fabric|controller schedule <WORD>
(config-scheduler)# absolute window <WORD>
Description: set the access-vlan for the qinq tunnel
Syntax:
vlan |
Encapsulation Vlan |
<1-4094> |
Encapsulation Vlan. Number range from=1 to=4094 |
Command Mode: dot1q-tunnel : Tunnel configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# dot1q-tunnel <WORD>
(config-tenant-tunnel)#access-encap vlan <NUMBER>
Description: Apply an access-list on this subject
Syntax:
WORD |
Name of the access-list to apply (Max Size 64) |
WORD |
Directions |
WORD |
(Optional) PermitOrDeny |
WORD |
(Optional) priority override |
log |
Log packets hitting the ACL |
no-stats |
Stats collection for the current entry |
Command Mode: subject : Configuration a subject on the contract
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# contract <WORD> [type <type>]
(config-tenant-contract)# subject <WORD>
(config-tenant-contract-subj)# access-group <WORD> <WORD> [action <WORD>] [priority <WORD>] log no-stats
Description: Create access-list
Syntax:
WORD |
Access-list Name (Max Size 64) |
Command Mode: tenant : Tenant configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# access-list <WORD>
Description: Set The status of the locally-authenticated user account.
Syntax:
WORD |
status of the locally-authenticated user account |
Command Mode: username : Create a locally-authenticated user account
Command Path:
# configure [['terminal', 't']]
(config)# username <WORD>
(config-username)# account-status <WORD>
Description: Snapshot import action merge|replace
Syntax:
merge |
Merge with existing configuration |
replace |
Replace existing configuration |
Command Mode: snapshot import : Configuration import setup mode
Command Path:
# configure [['terminal', 't']]
(config)# snapshot import <WORD>
(config-import)# action merge|replace
Description: Configure Active Flow TimeOut
Syntax:
activeFlowTimeout |
Configure Active Flow TimeOut. Number range from=60 to=3600 |
Command Mode: flow exporter : Configure NetFlow Exporter Policy
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-dvs
(config-vmware-dvs)# flow exporter <WORD>
(config-vmware-dvs-flow-exporter)# active-flow-timeout <activeFlowTimeout>
Description: Configure Active Flow TimeOut
Syntax:
activeFlowTimeout |
Configure Active Flow TimeOut. Number range from=60 to=3600 |
Command Mode: flow exporter : Configure NetFlow Exporter Policy
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-avs
(config-vmware-avs)# flow exporter <WORD>
(config-None)# active-flow-timeout <activeFlowTimeout>
Description: Configure Active Flow TimeOut
Syntax:
activeFlowTimeout |
Configure Active Flow TimeOut. Number range from=60 to=3600 |
Command Mode: flow exporter : Configure NetFlow Exporter Policy
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-ave
(config-vmware-ave)# flow exporter <WORD>
(config-None)# active-flow-timeout <activeFlowTimeout>
Description: Address Family
Syntax:
ipv4 |
IPv4 address family |
ipv6 |
IPv6 address family |
unicast |
Unicast delivery model |
Command Mode: vrf : Configure VRF parameters
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast
Description: EIGRP Policy Address Family
Syntax:
ipv4 |
Address Family IPv4 |
ipv6 |
Address Family IPv6 |
unicast |
Unicast |
Command Mode: vrf : Configure VRF information
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# address-family ipv4|ipv6 unicast
Description: Configure an address-family for peer
Syntax:
ipv4 |
Configure IPv4 address-family |
ipv6 |
Configure IPv6 address-family |
l2vpn |
Configure l2vpn address-family |
unicast |
Configure Unicast sub-address-family |
multicast |
Configure Multicast sub-address-family |
evpn |
Configure EVPN sub-address-family |
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# address-family ipv4|ipv6|l2vpn unicast|multicast|evpn
Description: Configure an address-family
Syntax:
ipv4 |
Configure IPv4 address-family |
ipv6 |
Configure IPv6 address-family |
unicast |
Configure unicast address-family |
Command Mode: vrf : Virtual Router Context
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# address-family ipv4|ipv6 unicast
Description: Address Family
Syntax:
ipv4 |
IPv4 address family |
ipv6 |
IPv6 address family |
unicast |
Unicast delivery model |
Command Mode: vrf : Configure VRF parameters
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# vrf context tenant <WORD> vrf <WORD> [l3out <l3out>]
(config-leaf-vrf)# address-family ipv4|ipv6 unicast
Description: EIGRP Policy Address Family
Syntax:
ipv4 |
Address Family IPv4 |
ipv6 |
Address Family IPv6 |
unicast |
Unicast |
Command Mode: vrf : Configure VRF information
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# address-family ipv4|ipv6 unicast
Description: Configure an address-family for peer
Syntax:
ipv4 |
Configure IPv4 address-family |
ipv6 |
Configure IPv6 address-family |
l2vpn |
Configure l2vpn address-family |
unicast |
Configure Unicast sub-address-family |
multicast |
Configure Multicast sub-address-family |
evpn |
Configure EVPN sub-address-family |
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# address-family ipv4|ipv6|l2vpn unicast|multicast|evpn
Description: Configure an address-family
Syntax:
ipv4 |
Configure IPv4 address-family |
ipv6 |
Configure IPv6 address-family |
unicast |
Configure unicast address-family |
Command Mode: vrf : Virtual Router Context
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# address-family ipv4|ipv6 unicast
Description: Configure External IP Address Pool
Syntax:
ippool |
ippool |
connection-type |
bridge-domain/l3-external |
Command Mode: l4l7 resource-pool : Configure L4-L7 Service Resource Pool
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# l4l7 resource-pool <WORD>
(config-resource-pool)# address-pool <ippool> <connection-type>
Description: Configure Address Pool
Syntax:
PoolName |
Name of the pool |
gateway-address |
gateway-address |
Command Mode: tenant : Tenant configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# address-pool <PoolName> <gateway-address>
Description: Add Unicast Address Range
Syntax:
start |
Start Address |
end |
End Address |
Command Mode: address-pool : Configure Address Pool
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# address-pool <PoolName> <gateway-address>
(config-tenant-addrinst)# address-range <start> <end>
Description: Configure the IP address for dns servers
Syntax:
A.B.C.D |
IP Unicast address in format i.i.i.i |
preferred |
(Optional) Configure the address to be preferred |
Command Mode: dns : Configure default dns policy
Command Path:
# configure [['terminal', 't']]
(config)# dns
(config-dns)# address <A.B.C.D> [preferred]
Description: Set adminRxSt for lldp policy
Syntax:
admin-rx-state |
Admin state |
Command Mode: mgmt-lldp : Configure LLDP policy for management interfaces on spines and leaves
Command Path:
# configure [['terminal', 't']]
(config)# mgmt-lldp <WORD>
(config-mgmt-lldp)# admin-rx-state <admin-rx-state>
Description: Enable the state of the SSH communication service
Command Mode: ssh-service : SSH communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# ssh-service
(config-ssh-service)# admin-state-enable
Description: Enable the state of the TELNET communication service
Command Mode: telnet : TELNET communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# telnet
(config-telnet)# admin-state-enable
Description: Enable the state of the shellinabox communication service
Command Mode: shellinabox : SHELLINABOX communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# shellinabox
(config-shellinabox)# admin-state-enable
Description: Enable the state of the HTTP communication service
Command Mode: http : HTTP communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# admin-state-enable
Description: Enable the state of the HTTPS communication service
Command Mode: https : HTTPS communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# admin-state-enable
Description: Enable the api montiroring
Command Mode: performance : Nginx Requested Response Time Policy Group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# performance
(config-performance)# admin-state-enable
Description: Set adminSt for cdp policy
Syntax:
admin-state |
Admin state |
Command Mode: mgmt-cdp : Configure CDP policy for management interfaces on spines and leaves
Command Path:
# configure [['terminal', 't']]
(config)# mgmt-cdp <WORD>
(config-mgmt-cdp)# admin-state <admin-state>
Description: Set adminTxSt for lldp policy
Syntax:
admin-tx-state |
Admin state |
Command Mode: mgmt-lldp : Configure LLDP policy for management interfaces on spines and leaves
Command Path:
# configure [['terminal', 't']]
(config)# mgmt-lldp <WORD>
(config-mgmt-lldp)# admin-tx-state <admin-tx-state>
Description: Set admin state of syslog group
Syntax:
enable |
Enable |
Command Mode: logging : Logging server group configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# logging server-group <WORD>
(config-logging)# admin enable
Description: Enable advertising host-routes
Command Mode: bridge-domain : Configuration for bridge-domain
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# bridge-domain <WORD>
(config-tenant-bd)# advertise-host-routes
Description: Advertise ip subnet instead of a host mask in the router LSA
Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# advertise-subnet
Description: Advertise ip subnet instead of a host mask in the router LSA
Command Mode: template ospf interface-policy : Configure OSPF Interface Policy Templates
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template ospf interface-policy <WORD> tenant <WORD>
(config-interface-policy)# advertise-subnet
Description: Route summarization
Syntax:
IP-PREFIX/LEN |
Aggregate IPv4 address and mask length |
as-set |
(Optional) Autonomous system set path information and community information |
Command Mode: vrf : Virtual Router Context
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# aggregate-address <IP-PREFIX/LEN> [as-set]
Description: Route summarization
Syntax:
IP-PREFIX/LEN |
Aggregate IPv4 address and mask length |
as-set |
(Optional) Autonomous system set path information and community information |
Command Mode: vrf : Virtual Router Context
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# aggregate-address <IP-PREFIX/LEN> [as-set]
Description: Configure the global QOS policies
Syntax:
wred |
Set parameters for wred |
tail-drop |
Set parameters for tail-drop |
Command Mode: qos parameters : Configure the global QOS policies
Command Path:
# configure [['terminal', 't']]
(config)# qos parameters <WORD>
(config-qos)# algo wred|tail-drop
Description: Enable HTTP Access-Control-Allow-Credentials header
Command Mode: http : HTTP communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# allow-credential
Description: Enable HTTPS Access-Control-Allow-Credentials header
Command Mode: https : HTTPS communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# allow-credential
Description: The URL to return in the Access-Control-Allow-Origin HTTP header
Syntax:
WORD |
The URL to return in the Access-Control-Allow-Origin HTTP header (Max Size 256) |
Command Mode: http : HTTP communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# http
(config-http)# allow-origin <WORD>
Description: The URL to return in the Access-Control-Allow-Origin HTTPS header
Syntax:
WORD |
The URL to return in the Access-Control-Allow-Origin HTTPS header (Max Size 256) |
Command Mode: https : HTTPS communication policy group
Command Path:
# configure [['terminal', 't']]
(config)# comm-policy <WORD>
(config-comm-policy)# https
(config-https)# allow-origin <WORD>
Description: Enable/disable promiscuous mode on trunk
Syntax:
enable |
enable |
Command Mode: trunk-portgroup : Configure a trunk port group in the VMWare domain
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# trunk-portgroup <>
(config-vmware-trunk)# allow-promiscuous enable
Description: Accept as-path with my AS present in it
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allow-self-as
Description: Accept as-path with my AS present in it
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allow-self-as
Description: Allow writes for the RBAC rule
Command Mode: rbac rule : Create RBAC rule, security domain users can read subtree starting at specific object
Command Path:
# configure [['terminal', 't']]
(config)# rbac rule <DN> <WORD>
(config-rule)# allow-writes
Description: The number of occurrences of a local access service network
Syntax:
<1-10> |
Number of occurrences of AS number, default is 3. Number range from=1 to=10 |
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allowed-self-as-count <NUMBER>
Description: The number of occurrences of a local access service network
Syntax:
<1-10> |
Number of occurrences of AS number, default is 3. Number range from=1 to=10 |
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# allowed-self-as-count <NUMBER>
Description: Configure external analytics reachability information
Syntax:
cluster |
Analytics cluster name |
WORD |
Analytics cluster name |
Command Mode: configure : Configuration Mode
Command Path:
# configure [['terminal', 't']]
(config)# analytics cluster <WORD>
Description: Configure an anycast feature on a Redirection policy, example: anycast enable
Syntax:
enable |
Redirecion Policy for anycast feature, example: anycast enable |
Command Mode: svcredir-pol : Configure L4L7 service redirection policy
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# svcredir-pol <WORD>
(svcredir-pol)# anycast enable
Description: application configuration mode
Syntax:
WORD |
Application name (Max Size 64) |
Command Mode: tenant : Tenant configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>
Description: application configuration mode
Syntax:
WORD |
Application name (Max Size 64) |
Command Mode: dnssvrgrp : dnssvrgrp configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# dnssvrgrp <WORD>
(config-tenant-dnssvrgrp)# application <WORD>
Description: Set OSPF default area cost
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<0-16777215> |
Cost value |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> default-cost <0-16777215>
Description: Set OSPF default area cost
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<0-16777215> |
Cost value |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> default-cost <0-16777215>
Description: InterPod Peering
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
peering |
InterPod Peering |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> interpod peering
Description: InterPod Peering
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
peering |
InterPod Peering |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> interpod peering
Description: Enable OSPF in the L3Out
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<l3out name> |
Configure ASN on an API configured L3Out |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> l3out <l3out name>
Description: Enable OSPF in the L3Out
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<l3out name> |
Configure ASN on an API configured L3Out |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> l3out <l3out name>
Description: Configure OSPF on Loopback
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<Loopback Ip Address> |
Loopback Ip |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>
Description: Configure OSPF on Loopback
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
<Loopback Ip Address> |
Loopback Ip |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> loopback <Loopback Ip Address>
Description: Configure area as nssa
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa
Description: Configure area as nssa
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa
Description: Originate a default route
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
no-redistribute |
(Optional) No Redistribute area option |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]
Description: Originate a default route
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
no-redistribute |
(Optional) No Redistribute area option |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa default-information-originate [no-redistribute]
Description: Configure area as no-redistribute
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
default-information-originate |
(Optional) Originate a default route |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]
Description: Configure area as no-redistribute
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
default-information-originate |
(Optional) Originate a default route |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa no-redistribute [default-information-originate]
Description: Translate LSAs
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
type7 |
From Type 7 to Type 5 |
suppress-fa |
Suppress forwarding address in translated LSAs |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa
Description: Translate LSAs
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
type7 |
From Type 7 to Type 5 |
suppress-fa |
Suppress forwarding address in translated LSAs |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> nssa translate type7 suppress-fa
Description: Range
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
IP-PREFIX/LENGTH |
Summarized IP |
cost |
(Optional) Route cost |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]
Description: Range
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
IP-PREFIX/LENGTH |
Summarized IP |
cost |
(Optional) Route cost |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> range <IP-PREFIX/LENGTH> [cost <cost>]
Description: Set Route Map
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
WORD |
Route Map Name (Max Size 63) |
out |
Apply policy to outgoing routes |
in |
Apply Policies for Incoming route |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> route-map <WORD> out|in
Description: Set Route Map
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
WORD |
Route Map Name (Max Size 63) |
out |
Apply policy to outgoing routes |
in |
Apply Policies for Incoming route |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> route-map <WORD> out|in
Description: Configure area as a stub
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> stub
Description: Configure area as a stub
Syntax:
<A.B.C.D|NUMBER> |
OSPF area ID |
Command Mode: vrf : Associate Router OSPF Policy with Tenant/VRF
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router ospf default|multipod-internal
(config-leaf-ospf)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-ospf-vrf)# area <A.B.C.D|NUMBER> stub
Description: Enable/Disable arp learning on AVS/AVE Domain
Syntax:
enabled |
Enable arp learning |
disabled |
Disable arp learning |
Command Mode: configure-avs : Configure a VMWare Domain as AVS (N1K) type
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-avs
(config-vmware-avs)# arp-learning enabled|disabled
Description: Enable/Disable arp learning on AVS/AVE Domain
Syntax:
enabled |
Enable arp learning |
disabled |
Disable arp learning |
Command Mode: configure-ave : Configure a Cisco AVE domain
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-ave
(config-vmware-ave)# arp-learning enabled|disabled
Description: Config trust ARP in trust control policy
Command Mode: trust-control : Configuration for trust control policy
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# first-hop-security
(config-tenant-fhs)# trust-control <WORD>
(config-tenant-fhs-trustctrl)# arp
Description: Enable ARP flooding
Command Mode: bridge-domain : Configuration for bridge-domain
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# bridge-domain <WORD>
(config-tenant-bd)# arp flooding
Description: AS-override attribute to this neighbor
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# as-override
Description: AS-override attribute to this neighbor
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# as-override
Description: Configure BGP Autonomous System number
Syntax:
<1-4294967295> |
Number that uniquely identifies an autonomous system. Number range from=1 to=4294967295 |
Command Mode: bgp-fabric : Border Gateway Protocol (BGP)
Command Path:
# configure [['terminal', 't']]
(config)# bgp-fabric
(config-bgp-fabric)# asn <NUMBER>
Description: Configure BGP Autonomous System number
Syntax:
<1-4294967295> |
Number that uniquely identifies an autonomous system. Number range from=1 to=4294967295 |
Command Mode: bgp : Border Gateway Protocol (BGP)
Command Path:
# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# bgp fabric
(config-pod-bgp)# asn <NUMBER>
Description: Execute remote cli on AVE NG Device
Syntax:
<OpflexDevid> |
Specify the AVE NG device |
Command Mode: exec : Exec Mode
Command Path:
# attach-ave-ng <OpflexDevid>
Description: Execute remote cli on AVE Device
Syntax:
<OpflexDevid> |
Specify the AVE device |
Command Mode: exec : Exec Mode
Command Path:
# attach-ave <OpflexDevid>
Description: Execute remote cli on an Opflex Device
Syntax:
<OpflexDevid> |
Specify the OpFlex device |
Command Mode: exec : Exec Mode
Command Path:
# attach-avs <OpflexDevid>
Description: Configure a logical expression as criteria
Syntax:
<logical-expression> |
Enter a logical expression in the format: '<attributeType> <operator> <attributeValue>' For custom-label, enter logical expression in the format: 'custom <labelName> <operator> <labelValue>' For tags, enter logical expression in the format: 'tag <operator> <categoryName> <tagName>' - attributeType can take one of these values: vm-name, guest-os, hypervisor-id, vm-id, vnic, domain, datacenter, ip, mac, vm-folder, vmfolder-path - operator can take one of these values: equals, contains, startsWith, endsWith - operator should be 'equals' when attributeType is ip or mac - attributeValue, labelName, labelValue, categoryName and tagName accept a string - attributeValue can be 'use-epg-subnet' only when attributeType is ip - A logical expression can be formed by combining any of the above using 'AND'/'and'/'OR'/'or' - If any attribute value contains spaces or parenthesis, enclose it in backslashes ('\'). e.g.: attribute-logical-expression 'hypervisor-id equals host-123 OR tag contains TCAT_1 TTAG_1 AND (guest-os equals \Ubuntu Linux (64-bit)\ and domain contains fex)' e.g.: attribute-logical-expression 'ip equals 10.1.1.10 or ip equals use-epg-subnet' |
Command Mode: epg : AEPg configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# application <WORD>
(config-tenant-app)# epg <WORD> [type <WORD>]
(config-tenant-app-epg)# attribute-logical-expression <logical-expression>
Description: An LDAP endpoint attribute to be used as the CiscoAVPair
Syntax:
<WORD> |
LDAP endpoint attribute (Max Size 63) |
Command Mode: ldap-server host : LDAP server DNS name or IP address
Command Path:
# configure [['terminal', 't']]
(config)# ldap-server host <A.B.C.D|A:B::C:D|WORD>
(config-host)# attribute <WORD>
Description: Set the LDAP Server authorization choice
Syntax:
authChoice |
authChoice |
Command Mode: aaa group server ldap : LDAP server group name.
Command Path:
# configure [['terminal', 't']]
(config)# aaa group server ldap <WORD>
(config-ldap)# auth-choice <authChoice>
Description: Configure authentication for the default ntp policy
Command Mode: ntp : Configure the default ntp policy
Command Path:
# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# ntp
(config-ntp)# authenticate
Description: Configure authentication for the default ntp policy
Command Mode: template ntp-fabric : Network Time Protocol (NTP)
Command Path:
# configure [['terminal', 't']]
(config)# template ntp-fabric <WORD>
(config-template-ntp-fabric)# authenticate
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key-timeout <NUMBER>
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key-timeout <NUMBER>
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>
Description: Configure the authentication key timeout
Syntax:
<0-32767> |
Hold interval in seconds. Number range from=0 to=32767 |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key-timeout <NUMBER>
Description: Configure ntp authentication keys for the default ntp policy
Syntax:
id |
Id for the authentication key. Number range from=1 to=65535 |
sha1 |
use-hmac-sha1-algorithm-for-authentication |
md5 |
use-hmac-md5-algorithm-for-authentication |
key |
Configure the authentication key (Max Size 40) |
Command Mode: ntp : Configure the default ntp policy
Command Path:
# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# ntp
(config-ntp)# authentication-key <id> sha1|md5 <key>
Description: Configure ntp authentication keys for the default ntp policy
Syntax:
id |
Id for the authentication key. Number range from=1 to=65535 |
sha1 |
use-hmac-sha1-algorithm-for-authentication |
md5 |
use-hmac-md5-algorithm-for-authentication |
key |
Configure the authentication key (Max Size 40) |
Command Mode: template ntp-fabric : Network Time Protocol (NTP)
Command Path:
# configure [['terminal', 't']]
(config)# template ntp-fabric <WORD>
(config-template-ntp-fabric)# authentication-key <id> sha1|md5 <key>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key <LINE>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication-key <LINE>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>
Description: Configure the authentication key
Syntax:
LINE |
authentication key |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication-key <LINE>
Description: Configure COOP authentication type
Syntax:
type |
Configure COOP authentication type |
compatible |
Compatible type |
strict |
Strict type |
Command Mode: coop-fabric : Council Of Oracles Protocol (COOP)
Command Path:
# configure [['terminal', 't']]
(config)# coop-fabric
(config-coop-fabric)# authentication type compatible|strict
Description: Configure COOP authentication type
Syntax:
type |
Configure COOP authentication type |
compatible |
Compatible type |
strict |
Strict type |
Command Mode: coop : COOP protocol
Command Path:
# configure [['terminal', 't']]
(config)# pod <NUMBER>
(config-pod)# coop fabric
(config-pod-coop)# authentication type compatible|strict
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication simple|md5
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: template hsrp group-policy : Configure HSRP Group policy templates
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template hsrp group-policy <WORD> tenant <WORD>
(config-template-hsrp-group-pol)# authentication simple|md5
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface ethernet <ifRange>
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5
Description: Authentication
Syntax:
simple |
Plain text authentication |
md5 |
Use MD5 authentication |
Command Mode: hsrp group : Configure HSRP Group
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface port-channel <WORD> [fex <fex>]
(config-leaf-if)# hsrp group <NUMBER> [['ipv4', 'ipv6']]
(config-if-hsrp)# authentication simple|md5
Description: Configure an auth server
Syntax:
WORD |
Server Name (Max Size 64) |
WORD |
Server FQDN (Max Size None) |
svrMgmt |
Mgmt EPg |
WORD |
KeyRing name (Max Size 64) |
Command Mode: authsvrgrp : authsvrgrp configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# authsvrgrp <WORD>
(config-tenant-authsvrgrp)# authsvr <WORD> <WORD> <svrMgmt> <WORD>
Description: authsvrgrp configuration mode
Syntax:
WORD |
Server group name (Max Size None) |
Command Mode: tenant : Tenant configuration mode
Command Path:
# configure [['terminal', 't']]
(config)# tenant <WORD>
(config-tenant)# authsvrgrp <WORD>
Description: Set OSPF Policy Bandwidth Reference
Syntax:
reference-bandwidth |
OSPF Policy Bandwidth Reference |
<1-4000000> |
Bandwidth Reference Value in Mbps. Number range from=1 to=4000000 |
Command Mode: template ospf vrf-policy : Configure Router OSPF Timer Policy Templates
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# template ospf vrf-policy <WORD> tenant <WORD>
(config-vrf-policy)# auto-cost reference-bandwidth <NUMBER>
Description: Set OSPF Policy Bandwidth Reference
Syntax:
reference-bandwidth |
OSPF Policy Bandwidth Reference |
<1-4000000> |
Bandwidth Reference Value in Mbps. Number range from=1 to=4000000 |
Command Mode: template ospf vrf-policy : Configure Router OSPF Timer Policy Templates
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# template ospf vrf-policy <WORD> tenant <WORD>
(config-vrf-policy)# auto-cost reference-bandwidth <NUMBER>
Description: Configure Route Target
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# auto-route-target
Description: Configure Route Target
Command Mode: neighbor : Configure a BGP neighbor
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router bgp <fabric-ASN>
(config-leaf-bgp)# vrf member tenant <WORD> vrf <WORD>
(config-leaf-bgp-vrf)# neighbor A.B.C.D|A.B.C.D/LEN|A:B::C:D|A:B::C:D/LEN [evpn] [l3out <WORD>]
(config-leaf-bgp-vrf-neighbor)# auto-route-target
Description: Autonomous System Configuration for EIGRP
Syntax:
<1-65535> |
The autonomous system number. Number range from=1 to=65535 |
l3out |
(Optional) Configure ASN on an API configured L3Out |
Command Mode: vrf : Configure VRF information
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# autonomous-system <NUMBER> [l3out <l3out>]
Description: Autonomous System Configuration for EIGRP
Syntax:
<1-65535> |
The autonomous system number. Number range from=1 to=65535 |
l3out |
(Optional) Configure ASN on an API configured L3Out |
Command Mode: vrf : Configure VRF information
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# router eigrp default
(config-eigrp)# vrf member tenant <WORD> vrf <WORD>
(config-eigrp-vrf)# autonomous-system <NUMBER> [l3out <l3out>]
Description: Enable or disable autostate for interface-vlan
Command Mode: interface vlan : Vlan interface
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# interface vlan <1-4094>
(config-leaf-if)# autostate
Description: Enable or disable autostate for virtual-interface-profile
Command Mode: virtual-interface-profile : Configure virtual interface profile
Command Path:
# configure [['terminal', 't']]
(config)# leaf <101-4000>
(config-leaf)# virtual-interface-profile vlan <1-4094> tenant <WORD> vrf <WORD> [l3out <l3out>]
(virtual-interface-profile)# autostate
Description: Enable or disable autostate for interface-vlan
Command Mode: interface vlan : Vlan interface
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# interface vlan <1-4094>
(config-leaf-if)# autostate
Description: Enable or disable autostate for virtual-interface-profile
Command Mode: virtual-interface-profile : Configure virtual interface profile
Command Path:
# configure [['terminal', 't']]
(config)# spine <101-4000>
(config-spine)# virtual-interface-profile vlan <1-4094> tenant <WORD> vrf <WORD> [l3out <l3out>]
(virtual-interface-profile)# autostate
Description: Enable AVE availability monitoring
Syntax:
enable |
enable |
Command Mode: vmware-domain : Create a VMM VMWare Domain
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# avail-monitor enable
Description: Configure AVE Timeout (seconds)
Syntax:
WORD |
AVE Timeout (seconds) |
Command Mode: configure-ave : Configure a Cisco AVE domain
Command Path:
# configure [['terminal', 't']]
(config)# vmware-domain <WORD> [delimiter <WORD>] [access-mode <access-mode>] [number-of-uplinks <number-of-uplinks>]
(config-vmware)# configure-ave
(config-vmware-ave)# ave-timeout <WORD>