Table of Contents

A Commands

B Commands

C Commands

D Commands

E Commands

F Commands

G Commands

I Commands

L Commands

M Commands

N Commands

O Commands

P Commands

R Commands

S Commands

Show Commands

T Commands

U Commands

V Commands

W Commands

X Commands

TItle Page

A Commands

This chapter describes the Cisco Nexus1000V commands that begin with the letter A.

aaa authentication login console

form of this command.

Syntax Description

Specifies the use of a server group for authentication.

Space-separated list of server groups. The list can include the following:

- radius for all configured Remote Authentication Dial-In User Service (RADIUS) servers.

- tacacs+ for all configured Terminal Access Controller Access Control System Plus (TACACS+) servers.

- Any configured RADIUS or TACACS+ server group name.

(Optional) Specifies the username for authentication.

(Optional) Specifies the local database for authentication.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to create a named group of servers.

command to display the RADIUS server groups on the device.

If you specify more that one server group, the software checks each group in the order that you specify in the list.

method, the authentication always succeeds.

Examples

This example shows how to configure an AAA authentication console login methods:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa authentication login console group radius

This example shows how to revert to the default AAA authentication console login method:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no aaa authentication login console group radius

Related Commands

Command

Description

Configures AAA server groups.

Configures RADIUS servers.

show aaa authentication

Displays AAA authentication information.

show aaa group

Displays the AAA server groups.

Configures TACACS+ servers.

aaa authentication login default

form of this command.

Syntax Description

Specifies the use of a server group for authentication.

Space-separated list of server groups. The list can include the following:

- radius for all configured Remote Authentication Dial-In User Service (RADIUS) servers.

- tacacs+ for all configured Terminal Access Controller Access Control System Plus (TACACS+) servers.

- Any configured RADIUS or TACACS+ server group name.

(Optional) Specifies to use the username for authentication.

(Optional) Specifies to use the local database for authentication.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to create a named group of servers.

command to display the RADIUS server groups on the device.

If you specify more that one server group, the software checks each group in the order that you specify in the list.

method, then the authentication always succeeds.

Examples

This example shows how to configure the AAA authentication console login method:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa authentication login default group radius

This example shows how to revert to the default AAA authentication console login method:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no aaa authentication login default group radius

Related Commands

Command

Description

Configures AAA server groups.

Configures RADIUS servers.

show aaa authentication

Displays AAA authentication information.

show aaa group

Displays the AAA server groups.

Configures the TACACS+ servers.

aaa authentication login error-enable

form of this command.

aaa authentication login error-enable

aaa authentication login error-enable

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If none of the remote AAA servers respond when a user logs in, the authentication is processed by the local user database. If you have enabled the display, one of the following message is generated for the user:

Remote AAA servers unreachable; local authentication done.

Remote AAA servers unreachable; local authentication failed.

Examples

This example shows how to enable the display of AAA authentication failure messages to the console:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa authentication login error-enable

This example shows how to disable the display of AAA authentication failure messages to the console:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no aaa authentication login error-enable

Related Commands

Command

Description

show aaa authentication login error-enable

Displays the status of the AAA authentication failure message display.

aaa authentication login mschap

form of this command.

aaa authentication login mschap

aaa authentication login mschap

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable MSCHAP authentication:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa authentication login mschap

This example shows how to disable MSCHAP authentication:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no aaa authentication login mschap

Related Commands

Command

Description

show aaa authentication login mschap

Displays the status of MSCHAP authentication.

aaa group server tacacs+

form of this command.

Syntax Description

TACACS+ server group name. The name is alphanumeric, case-sensitive, and has a maximum length of 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command before you can configure TACACS+.

Examples

This example shows how to create a TACACS+ server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-radius)#

This example shows how to delete a TACACS+ server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no aaa group server tacacs+ TacServer

Related Commands

Command

Description

show aaa groups

Displays server group information.

Enables TACACS+.

attach module

command.

Syntax Description

Module number. The range is from 1 to 66.

Note The module number should match that of the standby VSM.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Although the allowable range of module numbers is from 1–66, the module number should match that of the standby VSM.

Examples

This example shows how to attach to the console of the secondary VSM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# attach module 2

Attaching to module 2 ...

To exit type 'exit', to abort type '$.'

Last login: Mon May 13 12:36:02 UTC 2013 from sup1 on pts/0

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

Copyright (c) 2002-2013, Cisco Systems, Inc. All rights reserved.

The copyrights to certain works contained in this software are

owned by other third parties and used and distributed under

license. Certain components of this software are licensed under

the GNU General Public License (GPL) version 2.0 or the GNU

Lesser General Public License (LGPL) Version 2.1. A copy of each

such license is available at

http://www.opensource.org/licenses/gpl-2.0.php and http://www.opensource.org/licenses/lgpl-2.1.php

n1000v(standby)#

Related Commands

Command

Description

reload module

Reloads a module.

show cores

Displays a list of cores.

show processes log

Displays a list of process logs.

show system redundancy status

Displays redundancy status.

B Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter B.

banner motd

command.

Syntax Description

(Optional) Character used to signal the beginning and end of the message text, for example, in the following message, the delimiting character is #.

#Testing the MOTD#

Banner message. The message is restricted to 40 lines with a maximum of 80 characters in each line.

Defaults

“Nexus 1000V Switch ” is the default message of the day.

Command Modes

Global configuration (config)

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The MOTD banner is displayed on the terminal before the login prompt whenever you log in.

The message is restricted to 40 lines and 80 characters per line.

before typing the delimiting character to start a new line. You can enter up to 40 lines of text.

Follow these guidelines when choosing your delimiting character:

- Do not use the delimiting-character in the message string.

- Do not use " and % as delimiters.

Examples

This example shows how to configure and then display a banner message with the text, “Testing the MOTD”:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# banner motd #Testing the MOTD#

n1000v(config)# show banner motd

Testing the MOTD

This example shows how to configure and then display a multiple-line MOTD banner:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# banner motd #Welcome to authorized users.

> Unauthorized access prohibited.#

n1000v(config)# show banner motd

Welcome to authorized users.

Unauthorized access prohibited.

This example shows how to revert to the default MOTD banner:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no banner motd

n1000v(config)# show banner motd

User Access Verification

Related Commands

Command

Description

Displays the MOTD banner.

boot auto-copy

form of this command.

boot auto-copy

no boot auto-copy

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When automatic copying of image files is enabled, the Cisco NX-OS software copies the image files referred to by the boot variable to the standby supervisor module. These image files must be present in the local memory on the active supervisor module. For kickstart and system boot variables, only those image files that are configured for the standby supervisor module are copied.

Examples

This example shows how to enable automatic copying of boot image files to the standby supervisor module:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# boot auto-copy

Auto-copy administratively enabled

Related Commands

Command

Description

Configures the kickstart boot variable.

Configures the system boot variable.

Copies files.

Displays boot variable configuration information.

boot kickstart

form of this command.

no boot kickstart

Syntax Description

:

.

(Optional) Directory name. The directory name is case-sensitive and can be up to 28 characters.

Kickstart image file name. The filename is case-sensitive and can be up to 28 characters.

(Optional) Configures the kickstart boot for the active supervisor module only.

(Optional) Configures the kickstart boot for the standby supervisor module only.

Defaults

Configures the kickstart boot variable for both supervisor modules.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The kickstart boot variable is used for loading software images when booting up. You must copy the kickstart image to the device before you reload.

Examples

This example shows how to configure the kickstart boot variable for both supervisor modules:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# boot kickstart bootflash:kickstart-image

This example shows how to configure the kickstart boot variable for the active supervisor module:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# boot kickstart bootflash:kickstart-image sup-1

This example shows how to clear the kickstart boot variable:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no boot kickstart

Related Commands

Command

Description

boot system

Configures the boot variable for the system software image.

Copies files.

Displays boot variable configuration information.

boot system

form of this command.

no boot system

Syntax Description

:

.

(Optional) Directory name. The directory name is case-sensitive and can be up to 28 characters.

Kickstart image file name. The filename is case-sensitive and can be up to 28 characters.

(Optional) Configures the system boot for the sup-1 supervisor module only.

(Optional) Configures the system boot for the sup-2 supervisor module only.

Defaults

Configures the system boot variable for both supervisor modules.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The system boot variable is used for loading images when booting up. You must copy the system image to the device before you reload.

Examples

This example shows how to configure the system boot variable for both supervisor modules:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# boot system bootflash:system-image

This example shows how to configure the system boot variable for the sup-1 supervisor module:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# boot system bootflash:system-image sup-1

This example shows how to clear the system boot variable:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no boot system

Related Commands

Command

Description

boot kickstart

Configures the boot variable for the kickstart software image.

Displays boot variable configuration information.

C Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter C.

capability vxlan

To set VXLAN capability for the port profile so that the port inheriting this port profile carries VXLAN traffic, use the capability vxlan command. To remove the VXLAN capability for the port profile, use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows how to set the VXLAN capability for the port profile:

n1000v(config)# capability vxlan

This example shows how to remove the VXLAN capability for the port profile:

n1000v(config)# no capability vxlan

Related Commands

Command

Description

Displays port profile configurations.

cd

command.

Syntax Description

:

.

(Optional) Directory name. The directory name is case-sensitive and can be up to 28 characters.

Defaults

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can only change to the directories that are on the active supervisor module.

command to verify the name of the directory that you are currently working in.

Examples

This example shows how to change to a different directory on the current file system:

n1000v# cd my-scripts

This example shows how to change from the file system that you are currently working in to a different file system:

n1000v# cd volatile:

This example shows how to revert back to the default directory, bootflash:

n1000v# cd

Related Commands

Command

Description

Displays the name of the directory that you are currently working in.

cdp advertise

form of this command.

Syntax Description

Specifies Cisco Discovery Protocol Version 1.

Specifies Cisco Discovery Protocol Version 2.

Defaults

Cisco Discovery Protocol Version 2

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set Cisco Discovery Protocol Version 1 as the version to advertise:

n1000v(config)# cdp advertise v1

This example shows how to remove Cisco Discovery Protocol Version 1 as the configuration to advertise:

n1000v(config)# no cdp advertise v1

Related Commands

Command

Description

Displays the Cisco Discovery Protocol configuration.

cdp enable (global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled on all interfaces and port channels

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Cisco Discovery Protocol can only be configured on physical interfaces and port channels.

Examples

This example shows how to enable Cisco Discovery Protocol globally and then display the Cisco Discovery Protocol configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# cdp enable

n1000v(config)# show cdp global

Global CDP information:

CDP enabled globally

Refresh time is 60 seconds

Hold time is 180 seconds

CDPv2 advertisements is enabled

DeviceID TLV in System-Name(Default) Format

n1000v(config)#

This example shows how to disable Cisco Discovery Protocol globally and then display the Cisco Discovery Protocol configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no cdp enable

n1000v(config)# show cdp global

Global CDP information:

CDP disabled globally

Refresh time is 60 seconds

Hold time is 180 seconds

CDPv2 advertisements is enabled

DeviceID TLV in System-Name(Default) Format

n1000v(config)#

Related Commands

Command

Description

cdp enable (interface or port channel)

Enables the Cisco Discovery Protocol on an interface or port channel.

Displays the Cisco Discovery Protocol configuration.

cdp enable (interface or port channel)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Cisco Discovery Protocol can only be configured on physical interfaces and port channels.

Examples

This example shows how to enable the Cisco Discovery Protocol on port channel 2:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface port-channel2

n1000v(config-if)# cdp enable

n1000v(config-if)#

This example shows how to disable the Cisco Discovery Protocol on mgmt0:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface mgmt0

n1000v(config-if)# no cdp enable

n1000v(config-if)# show cdp interface mgmt0

mgmt0 is up

CDP disabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

n1000v(config-if)#

Related Commands

Command

Description

cdp advertise

Assigns the version that the interface will advertise—Cisco Discovery Protocol Version 1 or Cisco Discovery Protocol Version 2.

cdp format device ID

Assigns the Cisco Discovery Protocol device ID.

cdp holdtime

Sets the maximum amount of time that the Cisco Discovery Protocol holds onto neighbor information before discarding it.

Displays the Cisco Discovery Protocol configuration for an interface.

show cdp neighbors

Displays your device from the upstream device.

cdp format device-id

form of this command.

Syntax Description

- X.X.X

- XX-XX-XX-XX-XX-XX

- XX:XX:XX:XX:XX:XX

- XXXX.XXXX.XXXX

Specifies the chassis serial number.

Specifies the system name/fully qualified domain name (default).

Defaults

System name/fully qualified domain name

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Cisco Discovery Protocol must be enabled globally before you configure the device ID format.

You can configure the Cisco Discovery Protocol on physical interfaces and port channels only.

Examples

This example shows how to configure the Cisco Discovery Protocol device ID with the MAC address format and then display the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# cdp format device-id mac-address

n1000v(config)# show cdp global

Global CDP information:

CDP enabled globally

Sending CDP packets every 5 seconds

Sending a holdtime value of 10 seconds

Sending CDPv2 advertisements is disabled

Sending DeviceID TLV in Mac Address Format

This example shows how to remove the Cisco Discovery Protocol device ID MAC address format from the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no cdp format device-id mac-address

Related Commands

Command

Description

cdp advertise

Assigns the Cisco Discovery Protocol version the interface will advertise—Cisco Discovery Protocol Version 1 or Cisco Discovery Protocol Version 2.

cdp enable interface

Enables the Cisco Discovery Protocol on an interface or port channel.

cdp holdtime

Sets the maximum amount of time that the Cisco Discovery Protocol holds onto neighbor information before discarding it.

Displays the Cisco Discovery Protocol global configuration parameters.

Displays the Cisco Discovery Protocol configuration for an interface.

show cdp neighbors

Displays your device from the upstream device.

cdp holdtime

form of this command.

Syntax Description

Time that the Cisco Discovery Protocol holds on to neighbor information. The range is from 10 to 255 seconds.

Defaults

180 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Cisco Discovery Protocol must be enabled globally before you configure the device ID format.

You can configure the Cisco Discovery Protocol on physical interfaces and port channels only.

Examples

This example shows how to set the Cisco Discovery Protocol holdtime to 10 second:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# cdp holdtime 10

This example shows how to remove the Cisco Discovery Protocol holdtime configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no cdp holdtime 10

Related Commands

Command

Description

Displays the Cisco Discovery Protocol global configuration parameters.

show cdp neighbors

Displays the upstream device from your device.

cdp timer

form of this command.

Syntax Description

Time before the Cisco Discovery Protocol sends advertisements to neighbors. The range is from 5 to 254 seconds.

Defaults

60 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the Cisco Discovery Protocol timer to 10 seconds:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# cdp timer 10

This example shows how to remove the Cisco Discovery Protocol timer configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no cdp timer 10

Related Commands

Command

Description

Displays the Cisco Discovery Protocol global configuration parameters.

show cdp neighbors

Displays the upstream device from your device.

channel-group auto (port profile)

form of this command.

Syntax Description

(Optional) Specifies a channeling mode:

- on

- active (uses Link Aggregation Control Protocol (LACP))

- passive (uses LACP)

(Optional) Specifies to create subgroups for managing the traffic flow when the port profile connects to multiple upstream switches. The feature is also called virtual port channel host mode (vPC-HM).

cdp

Specifies to create subgroups using the Cisco Discovery Protocol.

manual

Specifies to create subgroups manually.

(Optional) Specifies to attach Virtual Ethernet Modules (VEMs) to an upstream switch that does not support port channels. There are a maximum of 32 subgroups per port channel, so a maximum of 32 Ethernet port members can be assigned.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command creates a unique port channel for all interfaces that belong to the same module. The channel group is automatically assigned when the port profile is assigned to the first interface. Each additional interface that belongs to the same module is added to the same port channel. In Microsoft Hyper-V environments, a different port channel is created for each module.

- The channel group mode must be set to on when configuring a virtual port channel host machine (vPC-HM).

- When configuring a port channel for a port profile that connects to two or more upstream switches, note the following:

– You need to know whether Cisco Discovery Protocol is configured in the upstream switches.

If configured, Cisco Discovery Protocol creates a subgroup for each upstream switch to manage its traffic separately.

If not configured, you must manually configure subgroups to manage the traffic flow on the separate switches.

– When configuring a port channel for vPC-HM, and the upstream switches do not support port channels, you can use MAC pinning, which automatically assigns each Ethernet member port to a unique subgroup.

.

Examples

This example shows how to configure a port profile for a port channel that connects to a single upstream switch and then display the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)# channel-group auto mode on

n1000v(config-port-prof)# show port-profile name AccessProf

port-profile AccessProf

description: allaccess4

status: disabled

capability uplink: yes

port-group: AccessProf

config attributes:

switchport mode access

channel-group auto mode on

evaluated config attributes:

switchport mode access

channel-group auto mode on

assigned interfaces:

n1000v(config-port-prof)#

This example shows how to remove the channel group configuration from the port profile and then display the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)# no channel-group

n1000v(config-port-prof)# show port-profile name AccessProf

port-profile AccessProf

description: allaccess4

status: disabled

capability uplink: yes

port-group: AccessProf

config attributes:

switchport mode access

evaluated config attributes:

switchport mode access

assigned interfaces:

n1000v(config-port-prof)#

This example shows how to configure a port profile for a port channel that connects to multiple upstream switches that have the Cisco Discovery Protocol enabled and then display the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile uplinkProf

n1000v(config-port-prof)# channel-group auto mode on sub-group cdp

n1000v(config-port-prof)# show port-profile name uplinkProf

port-profile uplinkProf

description:

type: vethernet

status: disabled

pinning control-vlan: -

pinning packet-vlan: -

system vlans: none

port-group:

max ports: 32

inherit:

config attributes:

channel-group auto mode on sub-group cdp

evaluated config attributes:

channel-group auto mode on sub-group cdp

assigned interfaces:

Related Commands

Command

Description

Creates a port profile and places you into global configuration mode for the named port profile.

Displays the port profile configuration.

clear access-list counters

command.

Syntax Description

(Optional) ACL name, whose counters the device clears. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you specify an ACL, the name can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all IP and MAC ACLs:

n1000v# clear access-list counters

n1000v#

This example shows how to clear counters for an IP ACL named acl-ip-01:

n1000v# clear access-list counters acl-ip-01

n1000v#

Related Commands

Command

Description

Clears counters for IP ACLs.

Clears counters for MAC ACLs.

Displays information about one or all IP and MAC ACLs.

clear cdp

command.

Syntax Description

Clears the Cisco Discovery Protocol counters on all interfaces.

(Optional) Clears the Cisco Discovery Protocol counters on a specified interface.

Clears the Cisco Discovery Protocol cache on all interfaces.

Specifies the control interface.

Control interface number. The only accepted value is 0.

mgmt_num

Specifies the management interface number.

Management interface number. The only accepted value is 0.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear the Cisco Discovery Protocol counters on all interfaces:

n1000V# clear cdp counters

This example shows how to clear the Cisco Discovery Protocol cache on all interfaces:

n1000V# clear cdp table

Related Commands

Command

Description

Displays interfaces that have the Cisco Discovery Protocol enabled.

clear cli history

command.

clear cli history

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to display the history of the commands that you entered at the CLI.

Examples

This example shows how to clear the command history:

n1000v# clear cli history

Related Commands

Command

Description

Displays the command history.

clear cores

command.

Syntax Description

(Optional) Clears the core file on the logflash file system.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to display information about the core files.

Examples

This example shows how to clear the core file:

n1000v# clear cores

This example shows how to clear the core on the logflash file system:

n1000v# clear cores archive

Related Commands

Command

Description

Displays the core filename.

Configures the core filename.

clear counters

command.

Syntax Description

(Optional ) Clears the interface counters.

Clears all of the interface counters.

Clears an Ethernet interface counter

Ethernet slot/chassis number. The range is from 1 to 66.

Clears the management interface (mgmt0).

Clears a port channel interface.

Port channel number. The range is from 1 to 4096.

Clears a virtual Ethernet interface.

Virtual Ethernet interface number. The range is from 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear the Ethernet interface counters:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clear counters ethernet 2/1

Related Commands

Command

Description

Displays the interface status, which includes the counters.

clear debug-logfile

command.

Syntax Description

Debug logfile name to clear.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear the debug logfile:

n1000v# clear debug-logfile syslogd_debugs

Related Commands

Command

Description

Configures a debug logging file.

Enable debug logging.

Displays the contents of the debug logfile.

clear flow exporter

command.

Syntax Description

Specifies a flow exporter.

Flow exporter name. The maximum size is 63, case-sensitive, alphanumeric characters.

Command Default

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to clear the statistics for the flow exporter named NFC-DC-PHOENIX:

n1000v# clear flow exporter name NFC-DC-PHOENIX

n1000v#

Related Commands

Command

Description

Clears the statistics for exporters.

Creates a flow exporter.

Displays flow exporter status and statistics.

clear ip access-list counters

command.

Syntax Description

(Optional) IP ACL name, whose counters you want cleared. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If specifying an ACL by name, it can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all IP ACLs:

n1000v# clear ip access-list counters

n1000v#

This example shows how to clear counters for an IP ACL named acl-ip-101:

n1000v# clear ip access-list counters acl-ip-101

n1000v#

Related Commands

Command

Description

Clears counters for IP and MAC ACLs.

Clears counters for MAC ACLs.

Displays information about one or all IP and MAC ACLs.

Displays information about one or all IP ACLs.

clear ip igmp interface statistics

command.

Syntax Description

(Optional) Interface type. For more information, use the question mark (?) online help function.

(Optional) Interface number. The range of numbers is dependent of the interface.

Defaults

None

Command Modes

Any

Supported User Roles

This example shows how to clear IGMP statistics for an interface:

n1000v# clear ip igmp interface statistics ethernet 2/1

n1000v#

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Related Commands

Command

Description

Displays IGMP snooping information.

clear ip igmp snooping statistics vlan

command.

Syntax Description

VLAN number. The range is from 1 to 3967 and from 4048 to 4093.

Applies to all VLANs.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear IGMP snooping statistics for VLAN 1:

n1000v# clear ip igmp snooping statistics vlan 1

n1000v#

Related Commands

Command

Description

Displays IGMP snooping statistics by VLAN.

clear lacp counters

command.

Syntax Description

(Optional) Specifies an interface.

The port channel interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you do not specify a port channel number, the LACP counters for all LACP port groups are cleared.

for a static port-channel group, without the aggregation protocol enabled, the device ignores the command.

Examples

This example shows how to clear all the LACP counters:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clear lacp counters

n1000v(config) #

This example shows how to clear all LACP counters for the LACP port-channel group 20:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clear lacp counters interface port-channel 20

n1000v(config)#

Related Commands

Command

Description

clear license

command.

clear license filename

Syntax Description

License file to be uninstalled.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If a license is in use, you cannot uninstall it. Before uninstalling the license file, all licenses must first be transferred from the Virtual Ethernet Modules (VEMs) to the VSM license pool.

Caution Service Disruption

When you uninstall a license file from a VSM, the virtual Ethernet interfaces on the VEM are removed from service and the traffic flowing to them from virtual machines is dropped. This traffic flow is not resumed until you add a new license file with licenses for the VEMs. We recommend that you notify the server administrator that you are uninstalling a license and that this will cause the virtual Ethernet interfaces to shut down.

Examples

This example shows how to remove the Enterprise.lic license file from a VSM:

n1000v# clear license Enterprise.lic

Clearing license Enterprise.lic:

SERVER this_host ANY

VENDOR cisco

Do you want to continue? (y/n) y

Clearing license ..done

n1000v#

Related Commands

Command

Description

Displays license information.

Installs a license file(s) on a VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM or to the VSM pool of available licenses.

clear line

command.

Syntax Description

VTY name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to end a session on a specified VTY:

n1000v(config)# clear line

Related Commands

Command

Description

Displays active user sessions.

clear logging logfile

command:

clear logging logfile

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Super user

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear messages from the logging file:

n1000v# clear logging logfile

n1000v#

Related Commands

Command

Description

Displays the logs in the local log file.

clear logging session

command:

clear logging session

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Super user

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear the current logging session:

n1000v# clear logging session

n1000v#

Related Commands

Command

Description

Displays the logging session status

clear mac access-list counters

command.

Syntax Description

(Optional) MAC ACL name, whose counters you want to clear. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you want counters cleared for a specific MAC ACL, the name can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all MAC ACLs:

n1000v# clear mac access-list counters

n1000v#

This example shows how to clear counters for a MAC ACL named acl-mac-0060:

n1000v# clear mac access-list counters acl-mac-0060

n1000v#

Related Commands

Command

Description

Clears counters for IP and MAC ACLs.

Clears counters for IP ACLs.

Displays information about one or all IP and MAC ACLs.

Displays information about one or all MAC ACLs.

clear mac address-table dynamic

command.

Syntax Description

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Specifies the VLAN to clear.

VLAN identification number. The range is from 1 to 4094.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command with no arguments or keywords to remove all dynamic entries from the table.

command.

command with no arguments or keywords, all dynamic addresses are removed. If you specify an address but do not specify an interface, the address is deleted from all interfaces. If you specify an interface but do not specify an address, the device removes all addresses on the specified interfaces.

Examples

This example shows how to clear all dynamic Layer 2 entries from the MAC address table:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clear mac address-table dynamic

n1000v(config) #

This example shows how to clear all dynamic Layer2 entries for VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clear mac address-table dynamic vlan 342

n1000v(config)#

Related Commands

Command

Description

clear ntp statistics

command.

Syntax Description

Clears statistics for all NTP peers.

Clears IO statistics.

Clears local statistics.

Clears memory statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear statistics for all NTP peers:

n1000v(config)# clear ntp statistics all-peers

Related Commands

Command

Description

Displays information about NTP peers.

clear ssh hosts

command.

clear ssh hosts

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear all of the SSH host sessions:

n1000v# clear ssh hosts

Related Commands

Command

Description

show ssh

Shows the SSH sessions.

Enables the SSH server.

clear system reset-reason

command.

clear system reset-reason

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to clear the reset-reason history:

n1000v# clear system reset-reason

Related Commands

Command

Description

Displays the device reset-reason history.

clear user

command.

Syntax Description

User identifier. The name is alphanumeric, not case-sensitive, and has a maximum of 32 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to display the current user sessions on the device.

Examples

This example shows how to clear all Secure Shell (SSH) host sessions:

n1000v# clear user user1

Related Commands

Command

Description

Displays the user session information.

cli var name

form of this command.

cli var name variable-name variable-text

cli no var name variable-name

Syntax Description

Variable name. The name is alphanumeric, case-sensitive, and has a maximum of 31 characters.

Variable text. The text is alphanumeric, can contain spaces, and has a maximum of 200 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can reference a CLI variable using the following syntax:

Instances where you can use variables in include the following:

- Command scripts

- Filenames

You cannot reference a variable in the definition of another variable.

You can use the predefined variable, TIMESTAMP, to insert the time of day. You cannot change or remove the TIMESTAMP CLI variable.

You must remove a CLI variable before you can change its definition.

Examples

This example shows how to define a CLI variable:

n1000v# cli var name testinterface interface 2/3

This example shows how to reference the TIMESTAMP variable:

n1000v# copy running-config > bootflash:run-config-$(TIMESTAMP).cnfg

This example shows how to remove a CLI variable:

n1000v# cli no var name testinterface interface 2/3

Related Commands

Command

Description

Displays the CLI variables.

clock set

command.

clock set time day month year

Syntax Description

Day of the month. The range is from 1 to 31.

Year. The range is from 2000 to 2030.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Use this command when you cannot synchronize your device with an outside clock source, such as NTP.

Examples

This example shows how to manually set the clock:

n1000v# clock set 9:00:00 1 June 2008

Related Commands

Command

Description

Displays the clock time.

clock summer-time

form of this command.

no clock summer-time

Syntax Description

Time zone string. The time zone string is a three-character string.

Week of the month to start the summer-time offset. The range is from 1 to 5.

.

.

Week of the month to end the summer-time offset. The range is from 1 to 5.

.

.

Number of minutes to offset the clock. The range is from 1 to 1440.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the offset for summer-time or daylight saving time:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# clock summer-time PDT 1 Sunday March 02:00 1 Sunday November 02:00 60

This example shows how to remove the summer-time offset:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no clock summer-time

Related Commands

Command

Description

Displays the clock summer-time offset configuration.

clock timezone

form of this command.

no clock timezone

Syntax Description

Zone name. The name is a 3-character string e.g., PST or EST.

Hours offset from UTC. The range is from –23 to 23.

Minutes offset from UTC. The range is from 0 to 59.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the time zone offset from UTC:

n1000v# clock timezone EST 5 0

This example shows how to remove the time zone offset:

n1000v# no clock timezone

Related Commands

Command

Description

Displays the clock time.

collect counter

form of this command.

Syntax Description

Configures the number of bytes or packets seen in a flow as a nonkey field and enables collecting the total number of bytes from the flow.

(Optional) Enables collecting the total number of bytes from the flow using a 64-bit counter.

Configures the number of bytes seen in a flow as a nonkey field and enables collecting the total number of packets from the flow.

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to collect the total number of bytes from the flows as a nonkey field:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter bytes

This example shows how to collect the total number of bytes from the flows as a nonkey field using a 64 bit counter:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter bytes long

This example shows how to collect the total number of packets from the flows as a nonkey field:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter packets

This example shows how to collect the total number of packets from the flows as a nonkey field using a 64-bit counter:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter packets long

Related Commands

Command

Description

Configures the counters as a nonkey field and collects the counter values.

Creates a flow record.

Displays flow record status and statistics.

collect timestamp sys-uptime

form of this command.

Syntax Description

Configures the sys-uptime for the that time the first packet was seen from the flows as a nonkey field and enables collecting time stamps based on the sys-uptime for the that time the first packet was seen from the flows.

Configures the sys-uptime for the time that the last packet was seen from the flows as a nonkey field and enables collecting time stamps based on the sys-uptime for the time that the most recent packet was seen from the flows.

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example enables collecting the sys-uptime for the time that the first packet was seen from the flows:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect timestamp sys-uptime first

This example enables collecting the sys-uptime for the time that the most recent packet was seen from the flows:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect timestamp sys-uptime last

Related Commands

Command

Description

Creates a flow record.

Displays flow record status and statistics.

collect transport tcp flags

form of this command.

Syntax Description

This command has no arguments or keywords

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to collect the TCP flags:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect transport tcp flags

Related Commands

Command

Description

Creates a flow record.

Displays flow record status and statistics.

configure terminal

command.

configure terminal

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to enter global configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)#

Related Commands

Command

Description

Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

pwd

Displays the name of the present working directory.

Displays information about the terminal.

Displays the current configuration mode context.

copy

command.

Syntax Description

Source URL (or variable) of the file or directory to be copied. The source can be either local or remote, depending upon whether the file is being downloaded or uploaded.

Destination URL (or variable) of the copied file or directory. The destination can be either local or remote, depending upon whether the file is being downloaded or uploaded.

Defaults

The default name for the destination file is the source filename.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The entire copying process may take several minutes, depending on the network conditions and the size of the file and differs from protocol to protocol and from network to network.

).

, the server is either an IP address or a hostname.

).

The following tables list URL prefix keywords by the file system type. If you do not specify a URL prefix keyword, the device looks for the file in the current directory.

lists URL prefix keywords for bootflash and remote writable storage file systems.

Table 3-1 URL Prefix Keywords for Storage File Systems

Keyword

Source or Destination

.

/filename

filename

lists the URL prefix keywords for nonwritable file systems.

Table 3-2 URL Prefix Keywords for Special File Systems

Keyword

Source or Destination

core:

Local memory for core files. You can copy core files from the core: file system.

debug:

Local memory for debug files. You can copy core files from the debug: file system.

log:

Local memory for log files. You can copy log files from the log: file system.

Local system memory. You can copy the running configuration to or from the system: file system. The system: file system is optional when referencing the running-config file in a command.

volatile:

Local volatile memory. You can copy files to or from the volatile: file system. All files in the volatile: memory are lost when the physical device reloads.

Examples

This example shows how to copy a file within the same directory:

n1000v# copy file1 file2

This example shows how to copy a file to another directory:

n1000v# copy file1 my_files:file2

This example shows how to copy a file to another supervisor module:

n1000v# copy file1 bootflash://sup-remote/file1.bak

This example shows how to copy a file from a remote server:

n1000v# copy scp://10.10.1.1/image-file.bin bootflash:image-file.bin

Related Commands

Command

Description

Changes the current working directory.

Configures CLI variables for the session.

Displays the directory contents.

Moves a file.

Displays the name of the current working directory.

copy running-config startup-config

command.

copy running-config startup-config

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Use this command to save configuration changes in the running configuration to the startup configuration in persistent memory. When a device reload or switchover occurs, the saved configuration is applied.

Examples

This example shows how to save the running configuration to the startup configuration:

n1000v# copy running-config startup-config

[########################################] 100%

Related Commands

Command

Description

Displays the running configuration.

Displays the differences between the running configuration and the startup configuration.

Displays the startup configuration.

Erases the startup debug configuration in the persistent memory.

D Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter D.

deadtime

form of this command.

Syntax Description

Number of minutes, from 0 to 1440, for the interval.

Defaults

0 minutes

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

The deadtime can be configured either globally and applied to all RADIUS or TACACS+ servers or per server group.

If the deadtime interval for a RADIUS or TACACS+ server group is greater than zero (0), that value takes precedence over the global dead-time value.

Setting the dead-time interval to 0 disables the timer.

When the deadtime interval is 0 minutes, RADIUS and TACACS+ servers are not marked as dead even if they are not responding.

Examples

This example shows how to set the deadtime interval to 2 minutes for a RADIUS server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# deadtime 2

This example shows how to set a global deadtime interval to 5 minutes for all TACACS+ servers and server groups:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server deadtime 5

n1000v(config)#

This example shows how to set the deadtime interval to 5 minutes for a TACACS+ server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-tacacs+)# deadtime 5

This example shows how to revert to the deadtime interval default:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature tacacs+

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-tacacs+)# no deadtime 5

Related Commands

Command

Description

Configures AAA server groups.

Configures a RADIUS server.

Displays RADIUS server group information.

Displays TACACS+ server group information.

Enables TACACS+.

Configures a TACACS+ server.

debug logfile

form of this command.

Syntax Description

command output. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

(Optional) Specifies the size of the logfile in bytes.

File size in bytes. The range is from 4096 to 4194304.

Defaults

Default filename: syslogd_debugs

Default file size: 4194304 bytes

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The logfile is created in the log: file system root directory.

command to display the log files.

Examples

This example shows how to specify a debug logfile:

n1000v# debug logfile debug_log

This example shows how to revert to the default debug logfile:

n1000v# no debug logfile debug_log

Related Commands

Command

Description

Displays the contents of a directory.

Displays the debug configuration.

Displays the debug logfile contents.

debug logging

form of this command.

debug logging

no debug logging

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

command:

n1000v# debug logging

command:

n1000v# no debug logging

Related Commands

Command

Description

command output.

default shutdown (interface)

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command on a port profile member interface, it also allows the port profile configuration to take affect.

Examples

This example shows how to change interface Ethernet 3/2 to shutdown:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 3/2

n1000v(config-if)# default shutdown

n1000v(config-if)#

Related Commands

Command

Description

Displays the interface configuration.

interface ethernet

Configures an Ethernet interface.

interface vethernet

Configures a virtual Ethernet interface.

default shutdown (port profile)

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to change the member interfaces in the port profile named DataProfile to shutdown:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v# port-profile DataProfile

n1000v(config-port-prof)# default shutdown

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays the configuration for a port profile.

default switchport (port profile)

command.

Syntax Description

command.

Removes an access VLAN configuration.

Removes trunking allowed VLAN characteristics.

Removes trunking native VLAN characteristics.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The functionally of this command is equivalent to using the no form of a specific switchport command. For example, the effect of the following commands is the same:

- default switchport mode command = no switchport mode command.

- default switchport access vlan command = no switchport access vlan command.

- default switchport trunk native vlan command= no switchport trunk native vlan command.

Examples

This example shows how to revert port profile ports to switch access ports:

n1000v(config-port-prof)# default switchport mode

This example shows how to remove the trunking allowed VLAN characteristics of a port profile:

n1000v(config-port-prof)# default switchport trunk allowed vlan

Related Commands

Command

Description

Displays information about port profile(s).

default (table map)

command.

Syntax Description

Output value. The range is from 0 to 63.

Specifies that the default action is to copy all equal values to an equal output value.

Defaults

Copies the input value to the output value.

Command Modes

Default table map configuration

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

keyword is not available because all values must be assigned a mapping.

Examples

This example shows how to remove the default mapping action copy. The resulting default action is ignore:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# table-map my_table1

n1000v(config-tmap)# no default copy

n1000v(config-tmap)#

Related Commands

Command

Description

Specifies input field to output field mappings in table maps.

Displays table maps.

delete

command.

filename

Syntax Description

:

.

(Optional) Directory name. The directory name is case-sensitive and can be up to 28 characters.

File name. The filename is alphanumeric, case-sensitive, and has a maximum of 28 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to locate the file you that want to delete.

Examples

This example shows how to delete a file:

n1000v# delete bootflash:old_config.cfg

Related Commands

Command

Description

Displays the contents of a directory.

deny (IPv4)

form of this command.

General Syntax

Internet Control Message Protocol (ICMP)

Internet Group Management Protocol (IGMP)

Internet Protocol v4

Transmission Control Protocol

User Datagram Protocol (UDP)

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- igmp —Specifies that the rule applies to IGMP traffic only. When you use this keyword, the igmp-type argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv4 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv4 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- ef —Expedited Forwarding (101110)

argument can be a number or a keyword, as follows:

- 0–7—Decimal equivalent of the 3 bits of the IP Precedence field. For example, if you specify 3, the rule matches only packets that have the following bits in the DSCP field: 011.

- critical —Precedence 5 (101)

- flash —Precedence 3 (011)

- flash-override —Precedence 4 (100)

- immediate —Precedence 2 (010)

- internet —Precedence 6 (110)

- network —Precedence 7 (111)

- priority —Precedence 1 (001)

- routine —Precedence 0 (000)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

argument can be the IGMP message number, which is an integer from 0 to 15. It can also be one of the following keywords:

- dvmrp —Distance Vector Multicast Routing Protocol

- host-query —Host query

- host-report —Host report

- pim —Protocol Independent Multicast

- trace —Multicast trace

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv4 ACL contains no rules.

If you do not specify a sequence number, the device assigns the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv4 ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When the device applies an IPv4 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv4 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address network-wildcard

argument with the IPv4 address and network wildcard for the 192.0.2.0 subnet:

n1000v(config-acl)# deny tcp 192.0.2.0 0.0.0.255 any

- Address and variable-length subnet mask—You can use an IPv4 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address/prefix-len

argument with the IPv4 address and VLSM for the 192.0.2.0 subnet:

n1000v(config-acl)# deny udp 192.0.2.0/24 any

- Host address—You can use the host keyword and an IPv4 address to specify a host as a source or destination. The syntax is as follows:

host IPv4-address

0.0.0.0.

keyword and the 192.0.2.0 IPv4 address:

n1000v(config-acl)# deny icmp host 192.0.2.0 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv4 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time-exceeded messages

- timestamp-reply —Time-stamp replies

- timestamp-request —Time-stamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—EXEC (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv4 ACL named acl-lab-01 with rules that deny all TCP and UDP traffic from the 10.23.0.0 and 192.0.2.0 networks to the 10.176.0.0 network and a final rule that permits all other IPv4 traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip access-list acl-lab-01

n1000v(config-acl)# deny tcp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# deny udp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# deny tcp 192.0.2.0/16 10.176.0.0/16

n1000v(config-acl)# deny udp 192.0.2.0/16 10.176.0.0/16

n1000v(config-acl)# permit ip any any

Related Commands

Command

Description

Configures an IPv4 ACL.

Configures a permit rule in an IPv4 ACL.

Configures a remark in an IPv4 ACL.

Displays all IPv4 ACLs or one IPv4 ACL.

deny (MAC)

form of this command.

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Source MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

(Optional) Protocol number that the rule matches. Valid protocol numbers are 0x0 to 0xffff. For listings of valid protocol names, see “MAC Protocols” in the “Usage Guidelines” section.

argument.

CoS number The range is from 0 to 7.

(Optional) Specifies that the rule matches only packets with an IEEE 802.1Q header that contains the VLAN identification given.

VLAN ID. The range is from 1 to 4094.

Defaults

A newly created MAC ACL contains no rules.

If you do not specify a sequence number, the device assigns the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When the device applies a MAC ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and mask—You can use a MAC address followed by a mask to specify a single address or a group of addresses. The syntax is as follows:

MAC-address MAC-mask

argument with the MAC address 00c0.4f03.0a72:

n1000v(config-acl)# deny 00c0.4f03.0a72 0000.0000.0000 any

argument with a MAC address for all hosts with a MAC vendor code of 00603e:

n1000v(config-acl)# deny any 0060.3e00.0000 0000.0000.0000

- Any address—You can use the any keyword to specify that a source or destination is any MAC address. For examples of the use of the any keyword, see the examples in this section. Each of the examples shows how to specify a source or destination by using the any keyword.

MAC Protocols

argument can be the MAC protocol number or a keyword. The protocol number is a four-byte hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are the following:

- aarp —Appletalk ARP (0x80f3)

- appletalk —Appletalk (0x809b)

- decnet-iv —DECnet Phase IV (0x6003)

- diagnostic —DEC Diagnostic Protocol (0x6005)

- etype-6000 —EtherType 0x6000 (0x6000)

- etype-8042 —EtherType 0x8042 (0x8042)

- ip —Internet Protocol v4 (0x0800)

- lat —DEC LAT (0x6004)

- lavc-sca —DEC LAVC, SCA (0x6007)

- mop-console —DEC MOP Remote console (0x6002)

- mop-dump —DEC MOP dump (0x6001)

- vines-echo —VINES Echo (0x0baf)

Examples

This example shows how to configure a MAC ACL named mac-ip-filter with rules that permit any non-IPv4 traffic between two groups of MAC addresses:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# mac access-list mac-ip-filter

n1000v(config-mac-acl)# deny 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff ip

n1000v(config-mac-acl)# permit any any

Related Commands

Command

Description

Configures a MAC ACL.

Configures a deny rule in a MAC ACL.

Configures a remark in an ACL.

Displays all MAC ACLs or one MAC ACL.

description (interface)

form of this command.

Syntax Description

Interface type. The maximum number of characters is 80.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add the description for the interface and save it in the running configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# description Ethernet port 3 on module 1

This example shows how to remove the interface description:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# no description Ethernet port 3 on module 1

Related Commands

Command

Description

Creates a virtual Ethernet interface.

Creates a port channel interface.

Creates an Ethernet interface.

interface mgmt

Configure the management interface.

Displays the interface status, including the description.

description (NetFlow)

form of this command.

Syntax Description

Flow record description. The range is from 1 to 63, case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

NetFlow flow record (config-flow-record)

NetFlow flow exporter (config-flow-exporter)

Netflow flow monitor (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add a description to a flow record:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# description Ipv4flow

This example shows how to add a description to a flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# description ExportHamilton

This example shows how to add a description to a flow monitor:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# description Ipv4Monitor

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

destination (NetFlow)

form of this command.

Syntax Description

IP address for collector.

(Optional) VRF label.

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add a destination IP address to a Netflow flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# destination 192.0.2.1

This example shows how to remove the IP address from a flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no destination 192.0.2.1

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

dir

command.

Syntax Description

(Optional) Specifies the directory or filename. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

(Optional) Specifies the directory or filename on expansion flash.

(Optional) Specifies the directory or filename on log flash.

modflash:

(Optional) Specifies the directory or filename on mod flash.

(Optional) Specifies the directory or filename on volatile flash.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to identify the directory that you are currently working in.

command to change the directory that you are currently working in.

Examples

This example shows how to display the contents of the directory:

n1000v# dir ?

> Redirect it to a file

>> Redirect it to a file in append mode

bootflash: Directory or filename

debug: Directory or filename

log: Directory or filename

modflash: Directory or filename

volatile: Directory or filename

| Pipe command output to filter

This example shows how to display the contents of the bootflash: directory:

n1000v# dir bootflash:

77824 May 24 16:21:09 2013 accounting.log

989 May 01 21:33:23 2013 apache_server.crt

1742 May 02 18:09:53 2013 apache_server.key

4096 Apr 30 12:09:14 2013 core/

99 May 19 17:53:05 2013 csv.txt

9585 May 17 17:21:59 2013 event_archive_1

4096 Apr 30 12:09:14 2013 log/

16384 Apr 30 12:08:37 2013 lost+found/

12236 May 17 17:53:29 2013 mts.log

1953327 Apr 30 12:10:01 2013 n1000vh-dk9-dplug.5.2.1.SM1.5.0.339.gbin

31030784 Mar 04 16:00:33 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.1.gbin

31153664 Apr 30 12:10:07 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.339.gbin

31243776 May 03 15:24:25 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.342.gbin

31178240 May 08 16:15:13 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.344.gbin

31452672 May 09 15:31:06 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.346.gbin

31223296 May 13 21:13:48 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.347.gbin

31157760 May 16 10:10:09 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.352.gbin

90829654 Apr 30 13:12:59 2013 n1000vh-dk9.5.2.1.SM1.5.0.1.gbin

90826915 Apr 30 12:10:25 2013 n1000vh-dk9.5.2.1.SM1.5.0.339.gbin

90823045 May 03 15:23:11 2013 n1000vh-dk9.5.2.1.SM1.5.0.342.gbin

90833045 May 08 16:16:02 2013 n1000vh-dk9.5.2.1.SM1.5.0.344.gbin

90868045 May 09 15:31:45 2013 n1000vh-dk9.5.2.1.SM1.5.0.346.gbin

90868714 May 13 21:14:00 2013 n1000vh-dk9.5.2.1.SM1.5.0.347.gbin

90871517 May 16 10:06:13 2013 n1000vh-dk9.5.2.1.SM1.5.0.352.gbin

107726 Apr 30 12:33:16 2013 run-jarvis.txt

12662 May 19 17:50:08 2013 soak-config1.txt

4096 Apr 30 12:09:33 2013 vdc_2/

4096 Apr 30 12:09:34 2013 vdc_3/

4096 Apr 30 12:09:34 2013 vdc_4/

16978300 Apr 30 12:10:28 2013 vsmhv-pa.2.0.0.12.bin

Usage for bootflash://sup-local

1070575616 bytes used

2127364096 bytes free

3197939712 bytes total

Related Commands

Command

Description

Changes the current working directory.

pwd

Displays the current working directory.

disable-loop-detection

form of this command.

Syntax Description

Disables the loop detection mechanism for the Common Address Redundancy Protocol.

Disables the loop detection mechanism for the Hot Standby Router Protocol.

Disables the loop detection mechanism for the Virtual Router Redundancy Protocol.

Disables the loop detection mechanism for the user-defined redundant routing protocol.

Specifies the source MAC address for the user defined protocol (UDP).

Start MAC address.

End MAC address.

Specifies the destination IP address for the user defined protocol.

Specifies the IP protocol number for the user defined protocol.

Specifies the UDP or TCP destination port number for the user defined protocol.

Defaults

By default, the loop detection mechanism is enabled.

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

- If you configure a virtual Ethernet interface and a port profile to run multiple protocols on the same virtual machine, then the configuration on the virtual Ethernet interface overrides the configuration on the port profile.

- Disable Internet Group Management Protocol (IGMP) snooping on both Cisco Nexus 1000V and upstream switches between the servers to support most redundant routing protocols.

Examples

This example shows how to disable loop detection for redundant routing protocols:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# int veth5

n1000v(config-if)# disable-loop-detection carp

n1000v(config-if)# disable-loop-detection vrrp

n1000v(config-if)# disable-loop-detection hsrp

n1000v(config-if)# disable-loop-detection custom-rp dest-ip 224.0.0.12 port 2234

n1000v(config-if)# end

n1000v# show running-config interface vethernet 5

!Command: show running-config interface Vethernet5

!Time: Fri Nov 4 02:21:24 2011

version 4.2(1)SV1(5.1)

interface Vethernet5

inherit port-profile vm59

description Fedora117, Network Adapter 2

disable-loop-detection carp

disable-loop-detection custom-rp dest-ip 224.0.0.12 port 2234

disable-loop-detection hsrp

disable-loop-detection vrrp

Hyper-V dvport 32 dvswitch uuid "ea 5c 3b 50 cd 00 9f 55-41 a3 2d 61 84 9e 0e c4"

Hyper-V vm mac 0050.56B3.00B2

n1000v#

Related Commands

Command

Description

Displays the interface configuration.

domain id

form of this command.

Syntax Description

Domain ID number. The range is from 1 to 1023.

Defaults

None

Command Modes

Domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

During the installation of the Cisco Nexus 1000V the setup utility prompts you to configure a domain, including the domain ID and control and packet VLANs.

Examples

This example shows how to assign a domain ID:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# sve-domain

n1000v(config-svs-domain)# domain-id number 32

n1000v(config-svs-domain)#

This example shows how to remove the domain ID:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# sve-domain

n1000v(config-svs-domain)# no domain-id number 32

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays the domain configuration.

dscp (NetFlow)

form of this command.

Syntax Description

DSCP value. The range is from 0 to 63.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a DSCP for a NetFlow flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# dscp 2

n1000v(config-flow-exporter)#

This example shows how to remove a DSCP from the NetFlow flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no dscp 2

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

duplex

form of this command.

Syntax Description

Specifies full-duplex mode for the interface.

Specifies half-duplex mode for the interface.

Sets the duplex mode on the interface to autonegotiate with the connecting port.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When you use the no version of this command, an argument (such as full, half, or auto) is optional. To return to the default duplex setting, you can use either of the following commands (if, for example, the setting had been changed to full):

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no duplex

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no duplex full

Examples

This example shows how to set the Ethernet port 1 on the module in slot 3 to full-duplex mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# duplex full

This example shows how to revert to the default duplex setting for the Ethernet port 1 on the module in slot 3:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no duplex

Related Commands

Command

Description

Specifies the interface that you are configuring.

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

speed

Sets the speed for the port channel interface.

E Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter E.

echo

command.

Syntax Description

(Optional) Interprets any character following a backslash character (\) as a formatting option.

(Optional) Interprets any character following a backslash character (\) as a formatting option.

(Optional) Text string to display. The text string is alphanumeric, case-sensitive, can contain spaces, and has a maximum length of 200 characters. The text string can also contain references to CLI variables.

Defaults

Displays a blank line.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can use this command in a command script to display information while the script is running.

keyword.

Table 5-1 Formatting Options for the echo Command

Formatting Option

Description

Back spaces.

Removes the new line character at the end of the text string.

Inserts a form feed character.

Inserts a new line character.

Returns to the beginning of the text line.

Inserts a horizontal tab character.

Inserts a vertical tab character.

Displays a backslash character.

Displays the corresponding ASCII octal character.

Examples

This example shows how to display a blank line at the command prompt:

n1000v# echo

This example shows how to display a line of text at the command prompt:

n1000v# echo Script run at $(TIMESTAMP).

Script run at 2008-08-12-23.29.24.

This example shows how to use a formatting option in the text string:

n1000v# echo backslash-interpret This is line #1. \nThis is line #2.

This is line #1.

This is line #2.

Related Commands

Command

Description

Runs command scripts.

end

command.

end

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command always takes you completely out of configuration mode and places you in privileged EXEC mode.

Examples

This example shows how to end the session in global configuration mode and return to privileged EXEC mode:

n1000v(config)# end

n1000v#

This example shows how to end the session in interface configuration mode and return to privileged EXEC mode:

n1000v(config-if)# end

n1000v#

Related Commands

Command

Description

Exits the current command mode and returns you to the previous command mode.

errdisable detect cause

of this command.

Syntax Description

detection on all causes.

disable detection on link-state flapping.

detection on a loopback.

Command Default

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to recover an interface manually from the error-disabled state.

Examples

This example shows how to detect the cause of the error-disabled state for all applications:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# errdisable detect cause all

n1000v(config)#

Related Commands

Command

Description

no shutdown

show interface status err-disabled

Displays the interfaces currently in the error-disabled state.

errdisable recovery cause

of this command.

Syntax Description

from Bridge Protocol Data Unit (BPDU) Guard error-disabled state.

from link-state flapping.

from the Spanning Tree Protocol (STP) set port state failure.

from the psecure violation disable state.

from the 802.1X violation disable state.

from the storm control error-disabled state.

from the Unidirectional Link Detection (UDLD) error-disabled state.

from an inconsistent virtual port channel (vPC) peer-link error-disabled state.

Command Default

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to automatically recover from the error-disabled state for link flapping after you have enabled the recovery timer:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# errdisable recovery cause link-flap

n1000v(config)#

Related Commands

Command

Description

show interface status err-disabled

Displays the interface error disabled state.

errdisable recovery interval

command.

Syntax Description

Command Default

300 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to configure the recovery timer.

Examples

This example shows how to configure the recovery timer:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# errdisable recovery interval 32

n1000v(config)#

Related Commands

Command

Description

show interface status err-disabled

state.

ethanalyzer local read

command.

Syntax Description

Filename. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to capture and display packets from a file:

n1000v# ethanalyzer local read bootflash:packet.log

2010-06-08 16:06:20.791442 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793056 00:02:3d:40:71:41 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793130 00:02:3d:40:71:03 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793243 00:50:56:b5:00:3b -> 00:02:3d:40:71:41 LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793292 00:50:56:b5:00:3b -> 00:02:3d:40:71:03 LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.811147 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.279679 00:15:c6:49:2f:32 -> 01:00:0c:cc:cc:cd STP Conf. Root = 32818/00:0b:45:b6:e2:00 Cost = 6

Port = 0x8093

2010-06-08 16:06:21.781290 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.782961 00:02:3d:40:71:41 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.782965 00:02:3d:40:71:03 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

Related Commands

Command

Description

Captures packet on a given interface.

ethanalyzer local sniff-interface

command.

Syntax Description

Specifies that the packets are captured on the control interface.

Specifies that the packets are captured on the packet interface.

Specifies that the packets are captured on the management interface.

Filters the types of packets to capture.

Displays detailed protocol information.

Filters the types of captured packets to display.

Dumps the packet in HEX/ASCII.

Limits the number of frames to capture.

Limits the length of the frame to capture.

Saves the captured data to a file.

Filename. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to capture and decode packets:

n1000v# ethanalyzer local sniff-interface control write bootflash:packet.log

Capturing on eth0

10

n1000v#

Related Commands

Command

Description

Captures and displays packet information from a file.

exec-timeout

form of this command.

Syntax Description

Timeout in minutes. The range is from 0 to 525600.

Defaults

No timeout is configured.

Command Modes

Console configuration (config-console)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

to 0, exec timeout is disabled.

If a session remains inactive longer than this specified time period, then it is automatically closed.

Examples

This example shows how to configure an inactive session timeout for the console port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line console

n1000v(config-com1)# exec-timeout 20

This example shows how to configure an inactive session timeout for the virtual terminal:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line vty

n1000v(config-line)# exec-timeout 20

This example shows how to remove an EXEC timeout on the console port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line console

n1000v(config-console)# no exec-timeout

n1000v(config-console)#

Related Commands

Command

Description

Displays the terminal configuration, including the timeout value.

Displays the currently active user sessions.

exit

command.

exit

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to exit global configuration mode. The CLI returns you to EXEC mode:

n1000v(config)# exit

n1000v#

This example shows how to exit interface configuration mode. The CLI returns you to the global configuration mode:

n1000v(config-if)# exit

n1000v(config)#

This example shows how to exit the CLI:

n1000v# exit

Related Commands

Command

Description

Returns to EXEC command mode.

exporter

form of this command.

Syntax Description

Flow exporter that is to be added for the flow monitor. The maximum is 63, case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

CLI flow monitor configuration (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add the flow exporter called Exportv9 and save it in the running configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# exporter Exportv9

n1000v(config-flow-monitor)#

This example shows how to remove the flow exporter called Exportv9:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# no exporter Exportv9

n1000v(config-flow-monitor)#

Related Commands

Command

Description

cache

Specifies the cache size for the specified monitor and saves it in the running configuration.

description

Adds a descriptive string for the specified flow monitor and saves it in the running configuration.

exporter

Adds an existing flow exporter for the specified monitor and saves it in the running configuration.

Creates a flow monitor, by name, saves it in the running configuration, and then puts you in the CLI flow monitor configuration mode.

record

Adds an existing flow record for the specified monitor and saves it in the running configuration.

timeout

Specifies, for the specified monitor, an aging timer and its value for aging entries from the cache, and saves them in the running configuration.

F Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter F.

feature dhcp

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to enable DHCP globally:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature dhcp

n1000v(config)#

This example shows how to disable DHCP globally:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature dhcp

n1000v(config)#

Related Commands

Command

Description

Displays the features available, such as DHCP, and whether they are enabled.

feature http-server

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

- The vCenter Update Manager (VUM) will not install the Virtual Ethernet Module (VEM) if the HTTP server is disabled.

- The HTTP server must be enabled in order to get the Cisco Nexus 1000V XML plugin from the Virtual Supervisor Module (VSM).

Examples

This example shows how to enable the HTTP server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature http-server

This example shows how to disable the HTTP server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature http-server

Related Commands

Command

Description

Displays the features available, such as LACP, and whether they are enabled.

show http-server

Displays the HTTP server configuration.

feature lacp

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

LACP is disabled.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

LACP bundles a number of physical ports together to form a single logical channel.

.

Examples

This example shows how to turn on LACP for port channels:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature lacp

This example shows how to turn off LACP for port channels:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature lacp

Related Commands

Command

Description

Configures a channel group on an interface.

Configures a channel group on a port profile.

Configures an interface.

Configures a port profile.

show feature

Displays the features available and whether they are enabled.

Displays a summary for the port channel interfaces.

feature netflow

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

- Be aware of resource requirements since NetFlow consumes additional memory and CPU resources.

- Memory and CPU resources are provided by the Virtual Ethernet Module (VEM) hosting the flow monitor interface. Resources are limited by the number of CPU cores present on the VEM.

Examples

This example shows how to enable NetFlow:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature netflow

This example shows how to disable NetFlow:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature netflow

Related Commands

Command

Description

flow exporter

Creates a NetFlow flow exporter.

flow monitor

Creates a NetFlow flow monitor.

flow record

Creates a NetFlow flow record.

Displays information about NetFlow flow exporters.

Displays information about NetFlow flow monitors.

Displays information about NetFlow flow records.

show ssh server

Displays the SSH server configuration.

feature network-segmentation-manager

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable the NSM feature:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature network-segmentation-manager

n1000v#

This example shows how to disable the NSM feature:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature network-segmentation-manager

n1000v#

Related Commands

Command

Description

Creates a NSM network segmentation policy.

Displays the Cisco Nexus 1000V configured with NSM.

Displays NSM information.

feature segmentation

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows how to enable segmentation:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature segmentation

This example shows how to disable segmentation:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature segmentation

Related Commands

Command

Description

Displays the available features and whether the feature is enabled or disabled.

show bridge-domain

Displays bridge-domain configurations.

feature ssh

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Before enabling SSH, you must configure IP on a Layer 3 interface, out-of-band on the mgmt 0 interface.

Examples

This example shows how to enable the SSH server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature ssh

This example shows how to disable the SSH server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature ssh

Related Commands

Command

Description

Displays the features available, such as the SSH server, and whether they are enabled.

show ssh server

Displays the SSH server configuration.

ssh

Creates and starts an SSH server session.

ssh key

Generates an SSH server key.

feature tacacs+

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable TACACS+:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature tacacs+

This example shows how to disable TACACS+:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature tacacs+

Related Commands

Command

Description

Displays the features available, such as TACACS+, and whether they are enabled.

show tacacs-server

Displays the TACACS+ server configuration.

tacacs-server host

Designates the key shared between the Cisco Nexus 1000V and this specific TACACS+ server host.

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

feature telnet

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

- Before enabling Telnet, you must configure IP on a Layer 3 interface, out-of-band on the mgmt 0 interface, or inband on an Ethernet interface.

Examples

This example shows how to enable the Telnet server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# feature telnet

This example shows how to disable the Telnet server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature telnet

Related Commands

Command

Description

show telnet server

Displays the Telnet server configuration.

telnet

Creates and configures a telnet session.

Displays the features available, such as the Telnet server, and whether they are enabled.

find

command.

Syntax Description

First part or all of a filename. The filename prefix is case-sensitive and can be up to 28 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

commands to navigate to the starting directory.

Examples

This example shows how to display filenames beginning with ospf:

n1000v# find ospf

/usr/bin/find: ./lost+found: Permission denied

./ospf-gr.cfg

./ospfgrconfig

./ospf-gr.conf

Related Commands

Command

Description

Changes the current working directory.

Displays the name of the current working directory.

flow exporter

form of this command.

Syntax Description

Flow exporter name that is created or modified.

Defaults

Flow exporters are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create and configure FLOW-EXPORTER-1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter FLOW-EXPORTER-1

n1000v(config-flow-exporter)# description located in Pahrump, NV

n1000v(config-flow-exporter)# destination A.B.C.D

n1000v(config-flow-monitor)# dscp 32

n1000v(config-flow-monitor)# source mgmt0

n1000v(config-flow-monitor)# transport udp 59

n1000v(config-flow-monitor)# version 9

This example shows how to remove FLOW-EXPORTER-1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no flow exporter FLOW-EXPORTER-1

n1000v(config)#

Related Commands

Command

Description

Clears the flow monitor.

Displays flow monitor status and statistics.

Adds a description to a flow record, flow monitor, or flow exporter.

Adds a destination IP address to a NetFlow flow exporter.

Adds a DSCP to a flow exporter.

Adds an IP address to a flow exporter designating it as the source for NetFlow flow records.

Adds a destination UDP port used to reach the NetFlow collector to a flow exporter.

Designates NetFlow export version 9 in the NetFlow exporter.

flow monitor

form of this command.

Syntax Description

Flow monitor name that is created or modified. The range is from 1 to 63, case-sensitive, alphanumeric characters.

Defaults

Flow monitors are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Flow monitors are the Flexible NetFlow component that is applied to interfaces to perform network traffic monitoring. Flow monitors consist of a record that you add to the flow monitor after you create the flow monitor and a cache that is automatically created at the time the flow monitor is applied to the first interface. Flow data is collected from the network traffic during the monitoring process based on the key and nonkey fields in the record that is configured for the flow monitor and stored in the flow monitor cache.

Once you enter the flow monitor configuration mode, the prompt changes to the following:

n1000v(config-flow-monitor)#

Within the flow monitor configuration mode, the following keywords and arguments are available to configure the flow monitor:

- cache— Specifies the cache size, from 256 to 16384 entries.

- description description —Provides a description for this flow monitor. The argument has a maximum of 63, case-sensitive, alphanumeric characters.

- exit —Exits from the current configuration mode.

- exporter name —Specifies the name of an exporter to export records.

- no —Negates a command or sets its defaults.

- record { record-name | netflow ipv4 collection-type | netflow-original } —Specifies a flow record to use as follows:

Specifies the traditional IPv4 NetFlow collection schemes as follows:

—Specifies the traditional IPv4 input NetFlow.

—Specifies the traditional IPv4 output NetFlow

—Specifies the protocol and ports aggregation scheme.

Specifies the traditional IPv4 input NetFlow with origin autonomous systems.

- timeout { active | inactive } —Specifies a flow timeout period as follows:

—Specifies an active or long timeout in the range of 60 to 4092 seconds.

—Specifies an inactive or normal timeout in the range of 15 to 4092 seconds.

keywords are the same and are equivalent to the following commands:

- match ipv4 source address

- match ipv4 destination address

- match ip tos

- match ip protocol

- match transport source-port

- match transport destination-port

- match interface input

- collect counter bytes

- collect counter packet

- collect timestamp sys-uptime first

- collect timestamp sys-uptime last

- collect interface output

- collect transport tcp flags

keywords except for the following:

- match interface output (instead of match interface input )

- collect interface input (instead of collect interface output )

Examples

This examples shows how to create and configure a flow monitor named FLOW-MONITOR-1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor FLOW-MONITOR-1

n1000v(config-flow-monitor)# description monitor location las vegas, NV

n1000v(config-flow-monitor)# exporter exporter-name1

n1000v(config-flow-monitor)# record test-record

n1000v(config-flow-monitor)# netflow ipv4 original-input

Related Commands

Command

Description

Clears the flow monitor.

Displays the flow monitor status and statistics.

flow record

form of this command.

Syntax Description

Flow record name that is created or modified. The range is from 1 to 63, case-sensitive, alphanumeric characters.

Defaults

Flow records are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Flexible NetFlow uses key and nonkey fields just as original NetFlow does to create and populate flows in a cache. In Flexible NetFlow, a combination of key and nonkey fields is called a record. Original NetFlow and Flexible NetFlow both use the values in key fields in IP datagrams, such as the IP source or destination address and the source or destination transport protocol port, as the criteria for determining when a new flow must be created in the cache while network traffic is being monitored. A flow is defined as a stream of packets between a given source and a given destination. New flows are created whenever NetFlow analyzes a packet that has a unique value in one of the key fields.

Once you enter the flow record configuration mode, the prompt changes to the following:

n1000v(config-flow-record)#

Within the flow record configuration mode, the following keywords and arguments are available to configure the flow record:

- collect —Specifies a nonkey field. See the collect command for additional information.

- description description —Provides a description for this flow record. The argument has a range that is from 1 to 63, case-sensitive, alphanumeric characters.

- exit —Exits from the current configuration mode.

- match — Specifies a key field. See the match command for additional information.

- no —Negates a command or sets its defaults.

Cisco NX-OS enables the following match fields by default when you create a flow record:

- match interface input

- match interface output

- match flow direction

Examples

This example shows how to create a flow record named FLOW-RECORD-1 and enter Flexible NetFlow flow record configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)#

Related Commands

Command

Description

Clears the flow monitor.

Creates a flow monitor.

Displays flow monitor status and statistics.

G Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter G.

gunzip

command.

Syntax Description

File name. The name is alphanumeric, case-sensitive, has a maximum of 64 characters, and must have the extension .gz.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The compressed filename must have the .gz extension.

You do not have to enter the .gz extension as part of the filename.

The Cisco NX-OS software uses Lempel-Ziv 1977 (LZ77) coding for compression.

Examples

This example shows how to uncompress a compressed file:

n1000v# gunzip bootflash:sh-logging.gz

n1000v# dir bootflash:

19 May 21 14:44:15 2013 .ovfconfigured

77824 May 23 19:32:20 2013 accounting.log

4096 May 21 14:43:04 2013 core/

4096 May 21 14:43:04 2013 log/

16384 May 21 14:42:28 2013 lost+found/

456 May 21 14:51:42 2013 mts.log

31235584 May 21 14:42:38 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.357.bin

90078471 May 21 14:42:58 2013 n1000vh-dk9.5.2.1.SM1.5.0.357.bin

25975 May 23 19:27:23 2013 sh-logging

4096 May 21 14:43:23 2013 vdc_2/

4096 May 21 14:43:23 2013 vdc_3/

4096 May 21 14:43:23 2013 vdc_4/

14816014 May 21 14:43:01 2013 vsmhv-pa.2.0.0.14.bin

These examples show how to compress a file:

n1000v# gzip run_cnfg.cfg

n1000v# dir bootflash:

19 May 21 14:44:15 2013 .ovfconfigured

77824 May 23 19:32:20 2013 accounting.log

4096 May 21 14:43:04 2013 core/

4096 May 21 14:43:04 2013 log/

16384 May 21 14:42:28 2013 lost+found/

456 May 21 14:51:42 2013 mts.log

31235584 May 21 14:42:38 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.357.bin

90078471 May 21 14:42:58 2013 n1000vh-dk9.5.2.1.SM1.5.0.357.bin

25975 May 23 19:27:23 2013 sh-logging

4096 May 21 14:43:23 2013 vdc_2/

4096 May 21 14:43:23 2013 vdc_3/

4096 May 21 14:43:23 2013 vdc_4/

14816014 May 21 14:43:01 2013 vsmhv-pa.2.0.0.14.bin

Usage for bootflash://sup-local

291319808 bytes used

2096951296 bytes free

2388271104 bytes total

n1000v#

n1000v# gzip bootflash:sh-logging

n1000v#

n1000v# dir

19 May 21 14:44:15 2013 .ovfconfigured

77824 May 23 19:33:30 2013 accounting.log

4096 May 21 14:43:04 2013 core/

4096 May 21 14:43:04 2013 log/

16384 May 21 14:42:28 2013 lost+found/

456 May 21 14:51:42 2013 mts.log

31235584 May 21 14:42:38 2013 n1000vh-dk9-kickstart.5.2.1.SM1.5.0.357.bin

90078471 May 21 14:42:58 2013 n1000vh-dk9.5.2.1.SM1.5.0.357.bin

3699 May 23 19:27:23 2013 sh-logging.gz

4096 May 21 14:43:23 2013 vdc_2/

4096 May 21 14:43:23 2013 vdc_3/

4096 May 21 14:43:23 2013 vdc_4/

14816014 May 21 14:43:01 2013 vsmhv-pa.2.0.0.14.bin

Related Commands

Command

Description

Displays the directory contents.

Compresses a file.

gzip

command.

Syntax Description

File name. The name is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

After you use this command, the file is replaced with the compressed filename that has the .gz extension.

The Cisco Nexus 1000V software uses Lempel-Ziv 1977 (LZ77) coding for compression.

Examples

This example shows how to compress a file:

n1000v# gzip run_cnfg.cfg

Related Commands

Command

Description

Displays the directory contents.

Uncompresses a compressed file.

I Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter I.

inherit port-profile

form of this command.

Syntax Description

Port profile name whose policies are inherited. The name has a maximum length of 80, case-sensitive, alphanumeric characters and must be unique for each port profile on the Cisco Nexus 1000V.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Any inherited setting, except the port profile type, can be changed using the command-line interface (CLI).

When you use the no form of this command, the port profile settings are returned to the defaults, except for the port profile type and any settings that were explicitly configured independent of those inherited.

Examples

as the port profile whose policies will be inherited:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type vethernet AllAccess2

n1000v(config-port-prof)# inherit port-profile AllAccess1

This example shows how to remove the inherited policies:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type vethernet AllAccess2

n1000v(config-port-prof)# no port-profile inherit

Related Commands

Command

Description

port-profile

Places you into port profile configuration mode and defines the port profile.

Displays the port profile inherited by the current port profile.

install license bootflash:

command.

Syntax Description

(Optional) License file name. If you do not specify a name, then the license is installed using the default name. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Follow these guidelines:

- You must first uninstall an evaluation license if one is present on your Virtual Supervisor Module (VSM). For more information, see the Cisco Nexus 1000V License Configuration Guide, Release 4.2(1)SV1(5.1) .

- You must be logged in to the active VSM console port.

- This command installs the license file using the name, license_file.lic. You can specify a different name.

- If you are installing multiple licenses for the same VSM, also called license stacking, make sure that each license key filename is unique.

- Repeat this procedure for each additional license file you are installing, or stacking, on the VSM.

Examples

This example shows how to install a license to bootflash on a VSM and then display the installed file:

n1000v# install license bootflash:license_file.lic

Installing license ..done

n1000v# show license file license.lic

SERVER this_host ANY

VENDOR cisco

INCREMENT NEXUS1000V_LAN_SERVICES_PKG cisco 1.0 permanent 1 \

HOSTID=VDH=1575337335122974806 \

NOTICE="<LicFileID>license.lic</LicFileID><LicLineID>0</LicLineID> \

<PAK>PAK12345678</PAK>" SIGN=3AF5C2D26E1A

n1000v#

Related Commands

Command

Description

Uninstalls a license, that is, removes it from the VSM and shuts down the Ethernet interfaces to the VEM covered by that license.

Installs a license file(s) on a VSM

Designates the level of severity at which license messages should be logged.

Verifies the license installation by displaying the license configured for the VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM or to the VSM pool of available licenses.

interface control0

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

Command Historynetwork-admin

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enter interface configuration mode to configure the control interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface control0

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the control interface.

interface ethernet

command.

Syntax Description

Slot number and port number for the Ethernet interface. The slot number ranges from 1 to 66 and the port number from 1 to 128. The slot and port numbers must be separated by the slash (/) operator.

Defaults

None

Command Modes

Global configuration (config)

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to access interface command mode for configuring the Ethernet interface on slot 2, port 1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the Ethernet interface.

interface mgmt0

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Examples

This example shows how to enter interface configuration mode to configure the management interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface mgmt0

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the management interface.

interface port-channel

form of this command.

Syntax Description

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to create or delete port channel groups and to enter interface configuration mode for the port channel.

A port can belong to only one channel group.

command, follow these guidelines:

- If you are using the Cisco Discovery Protocol (CDP), you must configure it only on the physical interface and not on the port channel interface.

- If you do not assign a static MAC address on the port channel interface, a MAC address is automatically assigned. If you assign a static MAC address and then later remove it, the MAC address is automatically assigned.

- The MAC address of the port channel is the address of the first operational port added to the channel group. If this first-added port is removed from the channel, the MAC address comes from the next operational port added, if there is one.

Examples

This example shows how to create a port channel group interface with channel group number 50:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface port-channel 50

n1000v(config-if)#

Related Commands

Command

Description

Displays information on traffic on the specified port channel interface.

Displays information about the port channels.

interface vethernet

form of this command.

Syntax Description

Interface number. The range is from 1 to 1048575.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to create a virtual Ethernet interface.

Examples

This example shows how to create a virtual Ethernet interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface vethernet 50

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the specified virtual Ethernet interface.

ip access-group

form of this command.

Syntax Description

List name. The list name is alphanumeric, case-sensitive and can be up to 28 characters.

Specifies the incoming (ingress) traffic direction.

Specifies the outgoing (egress) traffic direction.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure an IP access group named Telnet for incoming traffic to the mgmt0 interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface mgmt0

n1000v(config-if)# ip access-group telnet in

n1000v(config-if)#

Related Commands

Command

Description

Displays the ACL configuration.

ip access-list

form of this command.

Syntax Description

List name. The list name is alphanumeric, case-sensitive and can be up to 28 characters.

Enables access list matching for locally generated traffic.

Defaults

No access list exists.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create an access list:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip access-list acl1

n1000v(config)#

Related Commands

Command

Description

Displays access lists.

ip route

form of this command.

Syntax Description

IP address in the format A.B.C.D.

IP network mask in the format A.B.C.D.

IP prefix and network mask length in the format A.B.C.D/LEN.

IP next-hop address in the format A.B.C.D.

IP next-hop prefix in the format A.B.C.D./LEN.

Specifies an interface type.

Interface or subinterface number.

(Optional) Configures additional IP addresses on the interface.

(Optional) Specifies a supply tag.

Supply tag value. The range is from 0 to 4294967295. The default is 0.

(Optional) Route preference.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create an IP address:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip route 10.1.1.0 255.255.255.0 10.1.1.10

n1000v(config)#

Related Commands

Command

Description

Displays interfaces for local IP addresses.

ip directed-broadcast

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable IP directed broadcast:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface mgmt 0

n1000v(config-if)# ip directed-broadcast

n1000v(config-if)#

Related Commands

Command

Description

Displays IP interface information.

ip flow monitor

form of this command.

Syntax Description

Flow monitor name. The name is alphanumeric, case-sensitive, and has a maximum of 63 characters.

Monitors traffic that the router is receiving on the interface.

Monitors traffic that the router is transmitting on the interface.

Defaults

Disabled.

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to enable traffic monitoring with Flexible NetFlow.

Examples

This example shows how to enable a flow monitor for monitoring input traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

This example shows how to enable a flow monitor for monitoring output traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

This example shows how to enable the same flow monitor on the same interface for monitoring input and output traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

This example shows how to enable two different flow monitors on the same interface for monitoring input and output traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config-if)# ip flow monitor FLOW-MONITOR-2 output

This example shows how to enable the same flow monitor on two different interfaces for monitoring input and output traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config)# interface ethernet1/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

This example shows how to enable two different flow monitors on two different interfaces for monitoring input and output traffic:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config)# interface ethernet1/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-2 output

Related Commands

Command

Description

Creates a flow exporter.

Creates a flow monitor.

Creates a flow record.

ip igmp snooping (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If the global configuration of IGMP snooping is disabled, all VLANs are treated as disabled, whether they are enabled or not.

Examples

This example shows how to enable IGMP snooping:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip igmp snooping

n1000v(config)#

This example shows how to disable IGMP snooping:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no ip igmp snooping

n1000v(config)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If the global configuration of IGMP snooping is disabled, all VLANs are treated as disabled, whether they are enabled or not.

Examples

This example shows how to enable IGMP snooping on a VLAN interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping

n1000v(config-vlan)#

This example shows how to disable IGMP snooping on a VLAN interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping explicit-tracking

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN feature configuration (config-vlan-config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable tracking of IGMPv3 membership reports on a VLAN interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 1

n1000v(config-vlan-config)# ip igmp snooping explicit-tracking

n1000v(config-vlan-config)#

This example shows how to disable IGMP snooping on a VLAN interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 1

n1000v(config-vlan-config)# no ip igmp snooping explicit-tracking

n1000v(config-vlan-config)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping fast-leave

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When you enable fast leave, the IGMP software assumes that only one host is present on each VLAN port.

Examples

This example shows how to enable support of IGMPv2 hosts:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping fast-leave

n1000v(config-vlan)#

This example shows how to disable support of IGMPv2 hosts:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping fast-leave

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping last-member-query-interval

form of this command.

Syntax Description

Query interval in seconds. The range is from 1 to 25. The default is 1.

Defaults

The query interval is 1.

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a query interval in which the software removes a group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping last-member-query-interval 3

n1000v(config-vlan)#

This example shows how to reset a query interval to the default:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping last-member-query-interval

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping link-local-groups-suppression (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Usage Guidelines

You can apply link-local groups suppression to all interfaces in the Virtual Supervisor Module (VSM) by entering this command in global configuration mode.

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to limit Internet Group Management Protocol (IGMP) traffic sent from VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping link-local-groups-suppression

This example shows how to resume IGMP traffic sent from VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan vlan2

n1000v(config-vlan)# no ip igmp snooping link-local-groups-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Enables IGMP snooping on a VLAN.

Displays IGMP snooping information.

ip igmp snooping link-local-groups-suppression (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can apply link-local groups suppression to a single VLAN by entering this command in VLAN configuration mode.

Examples

This example shows how to limit Internet Group Management Protocol (IGMP) traffic sent from all interfaces in the Virtual Supervisor Module (VSM):

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip igmp snooping link-local-groups-suppression

n1000v(config)#

This example shows how to resume sending unlimited IGMP traffic from all interfaces in the VSM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no ip igmp snooping link-local-groups-suppression

n1000v(config)#

Related Commands

Command

Description

Enables IGMP snooping on a VLAN.

Displays IGMP snooping information.

ip igmp snooping mrouter interface

form of this command.

Syntax Description

Specifies interface type. For more information, use the question mark (?) online help function.

Interface or subinterface number. The values vary by interface. For more information about the numbering syntax for your networking device, use the question mark (?) online help function.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The interface to the router must be in the selected VLAN.

Examples

This example shows how to configure a static connection to a multicast router:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping mrouter interface ethernet 2/1

n1000v(config-vlan)#

This example shows how to remove a static connection to a multicast router:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping mrouter interface ethernet 2/1

n1000v(config-vlan)#

Related Commands

Command

Description

Displays Internet Group Management Protocol (IGMP) snooping information.

ip igmp snooping report-suppression (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IGMPv1 or IGMPv2 report suppression for VLANs:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip igmp snooping report-suppression

This example shows how to remove IGMPv1 or IGMPv2 report suppression:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no ip igmp snooping report-suppression

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping report-suppression (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IGMPv1 or IGMPv2 report suppression for VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping report-suppression

n1000v(config-vlan)#

This example shows how to remove IGMPv1 or IGMPv2 report suppression from VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping report-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping static-group

form of this command.

Syntax Description

Group IP address.

Specifies the interface for a static group.

Interface type. For more information, use the question mark (?) online help function.

Interface or subinterface number. For more information about the numbering syntax for your networking device, use the question mark (?) online help function.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can specify the interface by the type and the number, such as ethernet slot/port.

Examples

This example shows how to configure a static member of a multicast group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1

n1000v(config-vlan)#

This example shows how to remove a static member of a multicast group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping v3-report-suppression (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global Configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IGMPv3 report suppression and proxy reporting:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip igmp snooping v3-report-suppression

This example shows how to remove IGMPv3 report suppression and proxy reporting:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no ip igmp snooping v3-report-suppression

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping v3-report-suppression (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IGMPv3 report suppression and proxy reporting for VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# ip igmp snooping v3-report-suppression

n1000v(config-vlan)#

This example shows how to remove IGMPv3 report suppression and proxy reporting for VLAN 342:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan configuration 342

n1000v(config-vlan)# no ip igmp snooping v3-report-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip port access-group

form of this command.

Syntax Description

Access group name. The range is from 1 to 64, case-sensitive, alphanumeric characters.

Defaults

No access group exists.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You create an access group to specify in an access control list (ACL) the access control of packets.

Examples

This example shows how to create an access group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile 1

n1000v(config-port-prof)# ip port access-group group1 in

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays access lists.

show port-profile

Displays port profile information.

ip source binding

form of this command.

Syntax Description

IPv4 address to be used on the specified interface. Valid entries are in dotted-decimal format.

MAC address to be used on the specified interface. Valid entries are in dotted-hexadecimal format.

Specifies the VLAN associated with the IP source entry.

VLAN number. The range is from 1 to 4096.

Specifies the Layer 2 virtual Ethernet interface that is associated with the static IP entry.

Virtual Ethernet number. The range is from 1 to 1048575.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

By default, there are no static IP source entries.

Examples

This example shows how to create a static IP source entry that is associated with VLAN 100 on virtual Ethernet interface 3:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip source binding 10.5.22.7 001f.28bd.0013 vlan 100 interface vethernet 3

n1000v(config)#

Related Commands

Command

Description

Displays IP-to-MAC address bindings.

L Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter L.

line console

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enter console configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line console

n1000v(config-console)#

Related Commands

line vty

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enter line configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line vty

n1000v(config-line)#

logging console

command.

form of this command.

no logging console

Syntax Description

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable logging messages with a severity level of 4 (warning) or higher to the console session:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging console 4

n1000v(config)#

Related Commands

Command

Description

Displays the console logging configuration.

logging event

command.

Syntax Description

Logs all up/down and change status messages.

Logs all trunk status messages.

Specifies that the default logging configuration is used.

Enables interface logging to override the port level logging configuration.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to log interface events:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging event link-status default

n1000v(config)#

Related Commands

Command

Description

Displays the logging configuration and contents of a logfile.

logging level

form of this command.

Syntax Description

Facility name.

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

To apply the same severity level to all facilities, use the following command:

- logging level all level_number

To list the available facilities for which messages can be logged, use the following command:

- logging level ?

Examples

This example shows how to enable logging messages from the AAA facility with a severity level of 0 through 2:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging level aaa 2

n1000v(config)#

0 through 4 and then display the license logging configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging level license 4

n1000v(config)# show logging level license

Facility Default Severity Current Session Severity

-------- ---------------- ------------------------

licmgr 6 4

0(emergencies) 1(alerts) 2(critical)

3(errors) 4(warnings) 5(notifications)

6(information) 7(debugging)

n1000v(config)#

Related Commands

Command

Description

logging level ?

Lists the available facilities for which messages can be logged.

Displays the facility logging level configuration.

logging logfile

command.

form of this command.

Syntax Description

Name of the log file that stores system messages.

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

(Optional) Specifies the log file size in bytes, from 4096 to 10485760 bytes.

The default file size is 10485760 bytes.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a log file named LogFile to store system messages and set its severity level to 4:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging logfile LogFile 4

n1000v(config)#

Related Commands

Command

Description

Displays the contents of the log file.

logging module

form of this command.

Syntax Description

(Optional) Severity level at which you want messages to be logged. If you do not specify a severity level, the default is used. When you set a severity level, for example 4, all messages at that severity level and higher (0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition (the default)

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

Disabled

If you start logging messages, and do not specify a severity, then the default is used, Notification (5).

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to start logging of module messages to the log file at the default severity level (severity 4):

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging module

n1000v(config)#

This example shows how to stop the logging of module messages to the log file:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no logging module

n1000v#

Related Commands

Command

Description

Displays the current configuration for logging module messages to the log file.

logging monitor

command.

form of this command.

no logging monitor

Syntax Description

(Optional) Severity level at which you want messages to be logged. If you do not specify a severity level, the default is used. When you set a severity level, for example 4, all messages at that severity level and higher (0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition (the default)

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

Network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This configuration applies to telnet and Secure Shell (SSH) sessions.

Examples

This example shows how to enable monitor log messages:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging monitor

n1000v(config)#

Related Commands

Command

Description

Displays the monitor logging configuration.

logging server

form of this command to remove or change the configuration,

Syntax Description

Hostname/IPv4/IPv6 address of the Remote Syslog Server.

(Optional) 0-emerg;1-alert;2-crit;3-err;4-warn;5-notif;6-inform;7-debug.

(Optional) Specifies a virtual routing and forwarding (VRF) name

VRF name. The default is management and the VRF name.

(Optional) Specifies the facility to use when forwarding to server.

Specifies the auth facility.

Specifies the authpriv facility.

Specifies the Cron/at facility.

Specifies the daemon facility.

Specifies the file transfer system facility.

Specifies the kernel facility.

Specifies the local0 facility.

Specifies the local1 facility.

Specifies the local2 facility.

Specifies the local3 facility.

Specifies the local4 facility.

Specifies the local5 facility.

Specifies the local6 facility.

Specifies the local7 facility.

Specifies the lpr facility.

Specifies the mail facility.

Specifies the USENET news facility.

Specifies the syslog facility.

Specifies the user facility.

Specifies the Unix-to-Unix copy system facility.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a remote syslog server at a specified IPv4 address by using the default outgoing facility:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging server 172.28.254.253

n1000v(config)#

This example shows how to configure a remote syslog server at a specified host name with the severity level 5 or higher:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging server syslogA 5

n1000v(config)#

Related Commands

Command

Description

Displays the current server configuration for logging system messages.

logging timestamp

form of this command.

Syntax Description

Specifies the time stamp in micro-seconds.

Specifies the time stamp in milli-seconds.

Specifies the time stamp in seconds (Default).

Defaults

Seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set microseconds as the unit of measure for the system messages time stamp:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# logging timestamp microseconds

n1000v(config)#

Related Commands

Command

Description

Displays the logging time stamp configuration.

M Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter M.

mac access-list

form of this command.

Syntax Description

MAC ACL name. The name is case-sensitive, alphanumeric, and has a maximum of 64 characters.

Defaults

The MAC ACL does not exist.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create a MAC ACL:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# mac access-list aL1

n1000v(config)#

Related Commands

Command

Description

Displays access list information.

mac address-table aging-time

form of this command.

Syntax Description

Defaults

1800 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

seconds to disable the aging process.

The age value may be rounded off to the nearest multiple of 5 seconds. If the system rounds the value to a different value from that specified by the user (from the rounding process), the system returns an informational message.

form of this command without the VLAN parameter, only those VLANs that have not been specifically configured for the aging time reset to the default value. Those VLANs with specifically modified aging times are not modified.

configuration for the aging time, which may or may not be the default value of 300 seconds depending if the global configuration of the device for the aging time has been changed.

The aging time is counted from the last time that the switch detected the MAC address.

Examples

This example shows how to change the length of time an entry remains in the MAC address table to 500 seconds for the entire device:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# mac address-table aging-time 500

Related Commands

Command

Description

mac address-table static

form of this command.

Syntax Description

- X.X.X

- XX-XX-XX-XX-XX-XX

- XX:XX:XX:XX:XX:XX

- XXXX.XXXX.XXXX

:

- ethernet slot/port

- vethernet number

(Optional) Allows you to move this MAC address.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command to a multicast MAC address.

The output interface specified cannot be a VLAN interface or a Switched Virtual Interface (SVI).

form to remove entries that are profiled by the combination of specified entry information.

Examples

This example shows how to add a static entry to the MAC address table:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# mac address-table static 0050.3e8d.6400 vlan 3 interface ethernet 2/1

n1000v(config)#

Related Commands

Command

Description

mac auto-static-learn

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the auto-mac-learning state is enabled.

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-profile)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Follow these guidelines:

- This command is needed on the vEthernet interfaces that are used for Microsoft Network Load Balancing setups in unicast mode.

- This configuration is not supported on the ports configured with Unknown Unicast Flood Blocking (UUFB).

Examples

This example shows how to configure the auto-mac-learning state on veth1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# int veth 1

n1000v(config-if)# no mac auto-static-learn

n1000v(config-if)#

Related Commands

Command

Description

Adds a static MAC address in the Layer 2 MAC address table and saves it in the running configuration.

mac port access-group

form of this command.

Syntax Description

Group name. The name is case-sensitive, alphanumeric, and can have a maximum of 64 characters.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable access control for port groups:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile 1

n1000v(config-port-prof)# mac port access-group groupOne in

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays MAC information.

match ip (NetFlow)

form of this command.

Syntax Description

Specifies the protocol.

Specifies the type of service.

Defaults

None

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IP matching criteria for a NetFlow flow record and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match ip protocol

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match ip protocol

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

This example shows how to remove the IP matching criteria for a NetFlow flow record a and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match ip protocol

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

match ipv4

Defines IPv4 matching criteria for a NetFlow flow record.

match transport

Defines transport matching criteria for a NetFlow flow record.

Displays a NetFlow flow record configuration.

match ipv4 (NetFlow)

form of this command.

Syntax Description

Specifies the source address.

Specifies the destination address.

Specifies the address.

Defaults

None

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure IPv4 matching criteria for a NetFlow flow record and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match ipv4 destination address

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

Description: Ipv4flow

No. of users: 0

Template ID: 0

Fields:

match ipv4 destination address

match interface input

match interface output

match flow direction

collect counter packets

n1000v(config-flow-record)#

This example shows how to remove the IPv4 matching criteria for a NetFlow flow record and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match ipv4 destination address

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

match ip

Defines IP matching criteria for a NetFlow flow record.

match transport

Defines transport matching criteria for a NetFlow flow record.

Displays a NetFlow flow record configuration.

match transport (NetFlow)

form of this command.

Syntax Description

Specifies the transport destination port.

Specifies the transport source port.

Defaults

None

Command Modes

Flow Record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure transport matching criteria for a NetFlow flow record and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match transport destination-port

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

Description: Ipv4flow

No. of users: 0

Template ID: 0

Fields:

match ipv4 destination-port

match interface input

match interface output

match flow direction

collect counter packets

n1000v(config-flow-record)#

This example shows how to remove the transport matching criteria for a NetFlow flow record a and then display the result:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match transport destination-port

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

match ip

Defines IP matching criteria for a NetFlow flow record.

match ipv4

Defines IPv4 matching criteria for a NetFlow flow record.

Displays a NetFlow flow record configuration.

max-ports

form of this command.

Syntax Description

Number of ports for a port profile. The range is from 1 to 1024.

Defaults

32 ports

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set the maximum number of ports in the testprofile port profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# max-ports 100

n1000v(config-port-prof)#

This example shows how to remove the maximum ports configuration from the testprofile port profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no max-ports 100

n1000v(config-port-prof)#

Related Commands

Command

Description

port-profile

Creates a port profile.

show port-profile name

Displays configuration information about a particular port profile.

mkdir

command.

Syntax Description

bootflash:

Specifies bootflash as the directory name.

debug:

Specifies debug as the directory name.

volatile:

Specifies volatile as the directory name.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create the bootflash: directory:

n1000v# mkdir bootflash:

Related Commands

Command

Description

Changes the current working directory.

Displays the directory contents.

Displays the name of the current working directory.

module vem

command.

Syntax Descriptionfrom

Specifies the module number. The range is from 3 to 66.

Specifies the command to execute on the VEM.

Command to be sent to the VEM.

Defaults

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the VEM port profile configuration remotely from the Cisco Nexus 1000V:

n1000v# module vem 3 execute vemcmd show port-profile

This example shows how to display the VEM configuration remotely from the Cisco Nexus 1000V:

n1000v# module vem 3 execute vemcmd show l2 342

Bridge domain 8 brtmax 4096, brtcnt 6, timeout 300

VLAN 342, swbd 342, ""

Flags: S - Secure D - Drop

Type MAC Address LTL timeout Flags Secure

Dynamic 00:15:5d:e1:25:03 305 22

Dynamic 00:15:5d:e1:25:01 305 7

Dynamic 00:15:5d:e1:25:00 305 9

Dynamic 00:15:5d:e1:25:05 305 12

Dynamic 24:b6:57:63:60:43 305 7

Dynamic 00:1b:21:c2:46:f0 305 108

n1000v#

Related Commands

Command

Description

Displays VEM information.

move

command.

Syntax Description

:

(Optional) File system name. The name is case-sensitive and can be up to 28 characters.

. The identifiers are alphanumeric, case-sensitive, and can be up to 28 characters.

(Optional) Directory name. The name is alphanumeric, case-sensitive and can be up to 28 characters.

File to move name. The name is alphanumeric, case-sensitive and can be up to 28 characters.

(Optional) Destination filename. The name is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

The default name for the destination file is the same as the source filename.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Tip You can rename a file by moving it within the same directory.

Examples

This example shows how to move a file to another directory:

n1000v# move file1 my_files:file2

This example shows how to move a file to another file system:

n1000v# move file1 slot0:

This example shows how to move a file to another supervisor module:

n1000v# move file1 bootflash://sup-remote/file1.bak

Related Commands

Command

Description

Changes the current working directory.

Makes a copy of a file.

Displays the directory contents.

Displays the name of the current working directory.

N Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter N.

name

form of this command.

Syntax Description

VLAN name. The range is from 1 to 32.

Defaults

The VLAN has no name.

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to name a VLAN:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan 10

n1000v(config-vlan)# name v10

n1000v(config-vlan)#

Related Commands

Command

Description

Displays NSM information.

Displays VLAN information.

native network segment

Syntax Description

Segment name. The name is a maximum of 64 case-sensitive, alphanumeric characters.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

Network uplink (config-uplink-net)

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The command is used to set a VLAN that is carried by the segments as a native VLAN on the uplink interfaces connected to switches. NSM will auto generate a native VLAN configuration inside the uplink profile on issuing this command.

Note Changing the native VLAN causes ports to flap.

Examples

This example shows how to configure native segment

n1000v(config)# nsm network uplink LACP

n1000v(config-uplink-net)# native network segment vlan_342

n1000v(config-uplink-net)# end

n1000v# show running-config port-profile LACP

version 5.2(1)SM1(5.1)

port-profile type ethernet LACP

inherit port-profile uplink_network_default_policy

switchport mode trunk

switchport trunk allowed vlan 342

switchport trunk native vlan 342

guid a17cbcc8-216f-4e0e-a965-501476b70965

max-ports 512

description NSM created profile. Do not delete.

state enabled

Related Commands

Command

Description

Configures a NSM network uplink (a set of network segment pools).

Displays NSM uplink information.

Displays the port profile running configuration.

nsm ip pool template

form of this command.

Syntax Description

Group name. The name is a maximum of 64 case-sensitive, alphanumeric characters.

Defaults

No NSM IP pool template with the given name exists.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

See the Cisco Nexus 1000V for KVM Network Segmentation Manager Configuration Guide, Release 5.2(1)SM1(5.1) for instructions about how to configure an NSM IP pool template.

Examples

This example shows how to configure an IP pool template

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm ip pool template pool10

n1000v(config-ip-pool-template)# description pool

n1000v(config-ip-pool-template)# ip address 172.16.0.7 172.16.0.9

n1000v(config-ip-pool-template)# network 172.16.10.10 255.255.255.0

n1000v(config-ip-pool-template)# exit

Related Commands

Command

Description

description

Description for the IP pool.

dhcp-support

DHCP support for the IP pool.

dns-server

DNS for the IP pool.

dns-suffix

DNS suffix for the IP pool.

gateway

Gateway for the IP pool.

ip route

IP address for the IP pool.

netbios

Netbios for the IP pool.

Creates a network segment.

no

Negate a command or set its defaults.

Configures the NSM IP pool.

Configures a NSM logical network.

Creates a NSM network consisting of a collection of network segments.

Configures a NSM network uplink (a set of network segment pools).

reserved-ip

Reserved IP for the IP pool.

Displays information about the pool of NSM IP addresses.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

subnet-mask

Subnet mask for the IP pool.

nsm logical network

form of this command.

Syntax Description

Logical network name. The name is case-sensitive, alphanumeric, and can have up to 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Use these steps to create a logical network.

- Enter the global configuration mode.

- Enter the command nsm logical network log_network_name to create the logical network. This command will also place you into the config-logical-net sub mode.

- (Optional) While in the config-logical-net sub mode, enter the keyword description followed by a description of the logical network. The description can be up to 256 characters long.

- Exit the config-logical-net sub mode.

Examples

This example shows how to create a logical network named IntranetSFO:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network IntranetSFO

n1000v(config-logical-net)# description Network for external Internet connectivity

mode: conf

nsm logical network IntranetSFO

username: admin

n1000v(config-logical-net)# exit

n1000v(config)#show nsm logical network name IntranetSFO

Name: IntranetSFO

Description: Network for external Internet connectivity

This example shows how to disable a logical network named Hyper-v:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no nsm logical network Hyper-v

n1000v(config)# end

n1000v#

Related Commands

Command

Description

Creates a network segment.

Configures the NSM IP pool.

Creates a NSM network consisting of a collection of network segments.

Configures a NSM network uplink (a set of network segment pools).

Displays information about the pool of NSM IP addresses.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

nsm network segment

form of this command.

seg_name

seg_name

Syntax Description

seg_name

Network segment name. The name is a maximum of 64 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

See the Cisco Nexus 1000V for KVM Network Segmentation Manager Configuration Guide, Release 5.2(1)SM1(5.1) for instructions about how to configure an NSM network segment.

A network segment defines a Layer 2 network. In this release only VLAN backed network segments are supported. A NSM network segment must be added to a NSM network segment pool.

Examples

This example shows how to configure a network segment name VMNetwork:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment VMNetworkA

n1000v(config-net-seg)# switchport access vlan 100

n1000v(config-net-seg)# member-of network segment pool IntranetSJ

n1000v(config-net-seg)# ip pool import template pool10

n1000v(config-net-seg)# publish network segment

n1000v(config-net-seg)# end

n1000v#

Related Commands

Command

Description

Enables the NSM feature.

Configures the NSM IP pool.

Configures a NSM logical network.

Creates a NSM network consisting of a collection of network segments.

Configures a NSM network uplink (a set of network segment pools).

Displays information about the pool of NSM IP addresses.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

nsm network segment pool

option.

pool_name

Syntax Description

pool_name

Network segment pool name. The name is alphanumeric, case-sensitive, and has a maximum size of 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Network segment pools are a collection of network segments. All network segment pools should be part of a logical network.

See the Cisco Nexus 1000V for KVM Network Segmentation Manager Configuration Guide, Release 5.2(1)SM1(5.1) for instructions about how to configure an NSM network segment pool.

Examples

This example shows how to create a network segment pool named IntranetSJ that is a member of the logical network IntranetSFO:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v# configure terminal

n1000v(config)# nsm network segment pool IntranetSJ

n1000v(config-net-seg-pool)# member-of logical network IntranetSFO

n1000v(config-net-seg-pool)# exit

Related Commands

Command

Description

Creates a NSM network segment.

Configures the NSM IP pool.

Configures a NSM logical network.

Configures a NSM network uplink (a set of network segment pools).

Displays information about the pool of NSM IP addresses.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

nsm network uplink

command. To remove a network uplink, use the no form of this command.

Syntax Description

Uplink network name. The name is alphanumeric, case-sensitive, and have a maximum of 80 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

.

Examples

This example shows how to configure an uplink from one network to another:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink NexusUplink

n1000v(config-uplink-net)# import port-profile PortChannelProfile

n1000v(config-uplink-net)# allow nsm network segment pool IntranetSanJose

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

This example shows how to configure a trunk uplink network:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink uplink

n1000v(config-uplink-net)# allow nsm network segment pool net-seg-pool

n1000v(config-uplink-net)# allow nsm network segment pool net-seg-pool-1

n1000v(config-uplink-net)# publish network uplink

n1000v(config-uplink-net)# end

This example shows how to configure a trunk uplink network with native VLAN:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink uplink-with-native

n1000v(config-uplink-net)# native-nsm network segment net-seg-100

n1000v(config-uplink-net)# nsm network segment pool net-seg-pool

n1000v(config-uplink-net)# nsm network segment pool net-seg-pool-1

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

To configure an uplink profile in port channel mode:

1.Create network-segments with VLANs carried by uplink

2. Associate each network segment to a network segment pool.

command.

4. Create a uplink network object with all required network segment pool under it.

5. Inherit classification profile inside uplink network object.

6. Publish uplink network object to SCVMM.

This example shows how to configure a trunk uplink network in port channel mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network Hyper-v

n1000v(config-logical-net)# description "Hyper-v Logic"

n1000v(config-logical-net)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment pool net-seg-pool

n1000v(config-net-seg-pool)# nsm network logical Hyper-v

n1000v(config-net-seg-pool)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-101

n1000v(config-net-seg)# switchport access vlan 101

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-102

n1000v(config-net-seg)# switchport access vlan 102

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type ethernet PORT_CHANNEL

n1000v(config-port-prof)# channel-group auto mode on

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)# no shut

n1000v(config-port-prof)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink trunk

n1000v(config-uplink-net)# nsm network segment pool net-seg-pool

n1000v(config-uplink-net)# import port-profile PORT_CHANNEL

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

n1000v#

To configure an uplink profile in trunk mode:

1.Create network segments with VLANs carried by uplink

2. Associate each network segment to a network segment pool.

3. Create a uplink network object with all required network segment pools under it.

4. Publish uplink network object to SCVMM.

This example shows how to configure an uplink profile in trunk mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network Hyper-v

n1000v(config-logical-net)# description "Hyper-v Logic"

n1000v(config-logical-net)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment pool net-seg-pool

n1000v(config-net-seg-pool)# nsm network logical Hyper-v

n1000v(config-net-seg-pool)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-101

n1000v(config-net-seg)# switchport access vlan 101

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-102

n1000v(config-net-seg)# switchport access vlan 102

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink trunk

n1000v(config-uplink-net)# nsm network segment pool net-seg-pool

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

n1000v#

To Configure an uplink profile in access mode:

1. Create network segment for access VLAN carried by uplink.

2. Associate each network segment to a network segment pool.

3. Create a uplink network object with the network segment pool carrying access VLAN.

4. Declare network segment to be native.

5. Publish the uplink network object to SCVMM.

This example shows how to configure an uplink profile in access mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network Hyper-v

n1000v(config-logical-net)# description "Hyper-v Logic"

n1000v(config-logical-net)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment pool access-200

n1000v(config-net-seg-pool)# nsm network logical Hyper-v

n1000v(config-net-seg-pool)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-200

n1000v(config-net-seg)# switchport access vlan 200

n1000v(config-net-seg)# nsm network segment pool access-200

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink trunk

n1000v(config-uplink-net)# nsm network segment pool access-200

n1000v(config-uplink-net)# native-nsm network segment net-seg-200

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

n1000v#

To configure an uplink profile with features:

1.Create network segments with vlans carried by uplink.

2. Associate each network segment to a network segment pool.

3. Create classification profile of type “ethernet” with required features.

4. Create a nsm network uplink object with all required network segment pools under it.

5. Inherit classification profile inside uplink network object.

6. Publish the uplink network object to SCVMM.

This example shows how to configure an Uplink Profile with features:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network Hyper-v

n1000v(config-logical-net)# description "Hyper-v Logic"

n1000v(config-logical-net)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment pool net-seg-pool

n1000v(config-net-seg-pool)# nsm network logical Hyper-v

n1000v(config-net-seg-pool)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-101

n1000v(config-net-seg)# switchport access vlan 101

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-102

n1000v(config-net-seg)# switchport access vlan 102

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type ethernet PC_Qos

n1000v(config-port-prof)# channel-group auto mode on mac-pinning

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)# no shut

n1000v(config-port-prof)# end

n1000v#

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink trunk

n1000v(config-uplink-net)# nsm network segment pool net-seg-pool

n1000v(config-uplink-net)# inherit port-profile PC_Qos

n1000v(config-uplink-net)# publish nsm network uplink

n1000v(config-uplink-net)# end

n1000v#

The following example shows how to create a new uplink network named NexusUplink, how to import a port profile named UplinkNoPortChannel that gives the policy for the uplink, how to associate the uplink network to a network segment pool, and publish the uplink network.

n1000v(config)# nsm network uplink NexusUplink

n1000v(config-uplink-net)# allow network segment pool IntranetSJ

n1000v(config-uplink-net)# import port-profile UplinkNoPortChannel

n1000v(config-uplink-net)# native network segment VMNetworkA

n1000v(config-uplink-net)# system network uplink

n1000v(config-uplink-net)# publish network uplink NexusUplink

n1000v(config-uplink-net)# exit

Related Commands

Command

Description

Configures the NSM IP pool.

Configures a NSM logical network.

Creates a NSM network consisting of a collection of network segments.

Displays information about the pool of NSM IP addresses.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

show port-profile

Displays port profile type, description, status, configuration attributes, and other information.

ntp enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable NTP:

n1000v# ntp enable

This example shows how to disable NTP:

n1000v# no ntp enable

Related Commands

Command

Description

Configures a remote NTP server.

show ntp

Displays NTP statistics.

ntp peer

form of this command.

Syntax Description

Hostname or IP address of the NTP peer.

(Optional) Specifies this peer as the preferred peer.

(Optional) Specifies a virtual routing and forwarding (VRF) used to reach this peer.

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure an NTP peer:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ntp peer 192.0.2.2

Related Commands

Command

Description

Displays information about the NTP peer.

ntp server

form of this command.

Syntax Description

Hostname or IP address of the NTP server.

(Optional) Specifies this server as the preferred server.

(Optional) Specifies a virtual routing and forwarding (VRF) used to reach this peer.

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure an NTP server:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ntp server 192.0.2.2

Related Commands

Command

Description

Displays information about the NTP peer.

ntp source

form of this command.

Syntax Description

IPv4 or IPv6 address of the source. The IPv4 address format is dotted decimal, A.B.C.D. The IPv6 address format is hex A:B::C:D.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the NTP source:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ntp source 192.0.2.3

This example shows how to remove the NTP source:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no ntp source 192.0.2.3

Related Commands

Command

Description

Displays information about the NTP source.

O Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter O.

option exporter-stats timeout

form of this command.

Syntax Description

Timeout period. The range is between 1 and 86400 seconds.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a 3600-second timeout period for resending NetFlow flow exporter data:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# option exporter-stats timeout 3600

This example shows how to remove the timeout period for resending NetFlow flow exporter data:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no option exporter-stats timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Specifies a timeout period for resending the NetFlow flow exporter interface table.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

Specifies a timeout period for resending NetFlow flow exporter template data.

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

option interface-table timeout

form of this command.

Syntax Description

Timeout period. The range is between 1 and 86400 seconds.

Defaults

None

Command Modes

Netflow flow exporter version 9 configuration (config-flow-exporter-version-9)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a 3600-second timeout period for resending the NetFlow flow exporter interface table:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# option exporter-stats timeout 3600

This example shows how to remove the timeout period for resending the NetFlow flow exporter interface table:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no option exporter-stats timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Specifies a timeout period for resending NetFlow flow exporter data.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

Specifies a timeout period for resending NetFlow flow exporter template data.

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

P Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter P.

password strength-check

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

This feature is enabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable the checking of password strength:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# password strength-check

n1000v(config)#

This example shows how to disable the checking of password strength:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no password strength-check

n1000v(config)#

Related Commands

Command

Description

role name

Names a user role and places you in role configuration mode for that role.

Displays the configuration for checking the password strength.

username

Creates a user account.

permit (IPv4)

form of this command.

General Syntax

Internet Control Message Protocol (ICMP)

Internet Group Management Protocol (IGMP)

Internet Protocol v4

Transmission Control Protocol

User Datagram Protocol (UDP)

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- igmp —Specifies that the rule applies to IGMP traffic only. When you use this keyword, the igmp-type argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv4 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv4 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments and the portgroup and established keywords are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument and the portgroup keyword are available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- if —Expedited Forwarding (101110)

argument can be a number or a keyword, as follows:

- 0–7—Decimal equivalent of the 3 bits of the IP Precedence field. For example, if you specify 3, the rule matches only packets that have the following bits in the DSCP field: 011.

- critical —Precedence 5 (101)

- flash —Precedence 3 (011)

- flash-override —Precedence 4 (100)

- immediate —Precedence 2 (010)

- internet —Precedence 6 (110)

- network —Precedence 7 (111)

- priority —Precedence 1 (001)

- routine —Precedence 0 (000)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

argument can be the IGMP message number, which is an integer from 0 to 15. It can also be one of the following keywords:

- dvmrp —Distance Vector Multicast Routing Protocol

- host-query —Host query

- host-report —Host report

- pim —Protocol Independent Multicast

- trace —Multicast trace

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv4 ACL contains no rules.

If you do not specify a sequence number, the device assigns to the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv4 ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When the device applies an IPv4 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv4 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address network-wildcard

argument with the IPv4 address and network wildcard for the 192.168.67.0 subnet:

n1000v(config-acl)# permit tcp 192.168.67.0 0.0.0.255 any

- Address and variable-length subnet mask—You can use an IPv4 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address/prefix-len

argument with the IPv4 address and VLSM for the 192.168.67.0 subnet:

n1000v(config-acl)# permit udp 192.168.67.0/24 any

- Host address—You can use the host keyword and an IPv4 address to specify a host as a source or destination. The syntax is as follows:

host IPv4-address

0.0.0.0.

keyword and the 192.168.67.132 IPv4 address:

n1000v(config-acl)# permit icmp host 192.168.67.132 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv4 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time exceeded messages

- timestamp-reply —Timestamp replies

- timestamp-request —Timestamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—Exec (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv4 ACL named acl-lab-01 with rules permitting all TCP and UDP traffic from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ip access-list acl-lab-01

n1000v(config-acl)# permit tcp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# permit udp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# permit tcp 192.168.37.0/16 10.176.0.0/16

n1000v(config-acl)# permit udp 192.168.37.0/16 10.176.0.0/16

Related Commands

Command

Description

Configures a deny rule in an IPv4 ACL.

Configures an IPv4 ACL.

Configures a remark in an ACL.

Displays all IPv4 ACLs or one IPv4 ACL.

permit (MAC)

form of this command.

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Source MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

(Optional) Protocol number that the rule matches. Valid protocol numbers are 0x0 to 0xffff. For listings of valid protocol names, see “MAC Protocols” in the “Usage Guidelines” section.

argument can be an integer from 0 to 7.

argument can be an integer from 1 to 4094.

Defaults

None

Command Modes

MAC ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

A newly created MAC ACL contains no rules.

If you do not specify a sequence number, the device assigns a sequence number that is 10 greater than the last rule in the ACL.

When the device applies a MAC ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and mask—You can use a MAC address followed by a mask to specify a single address or a group of addresses. The syntax is as follows:

MAC-address MAC-mask

argument with the MAC address 00c0.4f03.0a72:

n1000v(config-acl)# permit 00c0.4f03.0a72 0000.0000.0000 any

argument with a MAC address for all hosts with a MAC vendor code of 00603e:

n1000v(config-acl)# permit any 0060.3e00.0000 0000.0000.0000

- Any address—You can use the any keyword to specify that a source or destination is any MAC address. For examples of the use of the any keyword, see the examples in this section. Each of the examples shows how to specify a source or destination by using the any keyword.

MAC Protocols

argument can be the MAC protocol number or a keyword. The protocol number is a four-byte hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are the following:

- aarp —Appletalk Address Resolution Protocol (ARP) (0x80f3)

- appletalk —Appletalk (0x809b)

- decnet-iv —DECnet Phase IV (0x6003)

- diagnostic —DEC Diagnostic Protocol (0x6005)

- etype-6000 —Ethertype 0x6000 (0x6000)

- etype-8042 —Ethertype 0x8042 (0x8042)

- ip —Internet Protocol v4 (0x0800)

- lat —DEC LAT (0x6004)

- lavc-sca —DEC LAVC, SCA (0x6007)

- mop-console —DEC MOP Remote console (0x6002)

- mop-dump —DEC MOP dump (0x6001)

- vines-echo —VINES Echo (0x0baf)

Examples

This example shows how to configure a MAC ACL named mac-ip-filter with a rule that permits all IPv4 traffic between two groups of MAC addresses:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# mac access-list mac-ip-filter

n1000v(config-mac-acl)# permit 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff ip

Related Commands

Command

Description

Configures a deny rule in a MAC ACL.

Configures a MAC ACL.

Configures a remark in an ACL.

Displays all MAC ACLs or one MAC ACL.

permit interface

command.

form of this command.

Syntax Description

Interface(s) that can be accessed by users with a specified role. The list name is alphanumeric, case-sensitive, and can be up to 16 characters long.

Defaults

None

Command Modes

Interface configuration (config-role-interface)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Repeat this command to specify all interface lists that users assigned to this role are permitted to access.

Examples

This example shows how to specify ethernet 2/1-4 as interfaces that users assigned to this role can access:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name network-observer

n1000v(config-role)# interface policy deny

n1000v(config-role-interface)# permit interface ethernet 2/1-4

n1000v(config-role-interface)#

This example shows how to remove the policy restrictions for ethernet 2/1-4:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name network-observer

n1000v(config-role)# interface policy deny

n1000v(config-role-interface)# no permit interface ethernet 2/1-4

n1000v(config-role-interface)#

Related Commands

Command

Description

interface policy deny

Enters the interface configuration mode and denies all interface access for the role.

Specifies a user role and enters role configuration mode for the named role.

show role

Displays the role configuration.

ping

command.

Syntax Description

.

(Optional) Hostname of destination device. The hostname is case-sensitive and can be up to 28 characters.

(Optional) Multicast ping.

.

(Optional) Specifies the interface to send the multicast packet.

ethernet

(Optional) Specifies the slot and port number for the Ethernet interface.

Slot/port number. The range is from 1 to 66.

loopback

(Optional) Specifies a virtual interface number.

Virtual interface number. The range is from 0 to 1023.

mgmt0

(Optional) Specifies the management interface.

port-channel

(Optional) Specifies a port-channel interface.

Port channel number. The range is from 1 to 4096.

vethernet

(Optional) Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies the number of transmissions to send.

Number of pings. The range is from 1 to 655350. The default is 5.

Allows an unlimited number of pings.

(Optional) Enables the do-not-fragment bit in the IPv4 header. The default is disabled.

(Optional) Specifies the interval in seconds between transmissions.

The range is from 0 to 60. The default is 1 second.

(Optional) Specifies the packet size in bytes to transmit. The range is from 1 to 65468. The default is 56 bytes.

(Optional) Specifies the source IPv4 address to use.

. The default is the IPv4 address for the management interface of the device.

(Optional) Specifies the nonresponse timeout interval in seconds.

The range is from 1 to 60. The default is 2 seconds.

(Optional) Specifies a virtual routing and forwarding (VRF) name.

The name is a maximum of 32 case-sensitive, alphanumeric characters. The default is the default VRF.

Defaults

For the default values, see the “Syntax Description” section for this command.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to determine connectivity to another device using IPv4 addressing:

n1000v# ping 172.28.231.246 vrf management

PING 172.28.231.246 (172.28.231.246): 56 data bytes

Request 0 timed out

64 bytes from 172.28.231.246: icmp_seq=1 ttl=63 time=0.799 ms

64 bytes from 172.28.231.246: icmp_seq=2 ttl=63 time=0.597 ms

64 bytes from 172.28.231.246: icmp_seq=3 ttl=63 time=0.711 ms

64 bytes from 172.28.231.246: icmp_seq=4 ttl=63 time=0.67 ms

--- 172.28.231.246 ping statistics ---

5 packets transmitted, 4 packets received, 20.00% packet loss

round-trip min/avg/max = 0.597/0.694/0.799 ms

Related Commands

Command

Description

Determines connectivity to another device using IPv6 addressing.

pinning id

form of this command.

Syntax Description

ID number of the subgroup. The range is from 0 to 31.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to pin virtual Ethernet interfaces to subgroup 3:

n1000v(config)# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface vethernet 1

n1000v(config-if)# pinning id 0

n1000v(config-if)# show running-config interface vethernet 1

version 4.0(4)SV1(2)

interface Vethernet1

pinning id 0

n1000v(config)# exit

n1000v# module vem 3 execute vemcmd show pinning

LTL IfIndex PC_LTL VSM_SGID VEM_SGID Eff_SGID

48 1b040000 304 0 0 0

n1000v(config-if)# copy running-config startup-config

Related Commands

Command

Description

Displays the pinning configuration on the specified VEM.

Displays port profile information.

Displays the running configuration of the specified virtual Ethernet interface, including the pinning configuration.

Displays the running configuration of the specified port profile, including the pinning configuration.

port-channel load-balance ethernet

form of this command.

Syntax Description

Destination IP address and Layer 4 port.

Destination IP address, Layer 4 port, and VLAN.

Destination IP address and VLAN.

Destination MAC address.

Destination Layer 4 port.

Source and destination IP address and Layer 4 port.

Source and destination IP address, Layer 4 port, and VLAN.

Source and destination IP address and VLAN.

Source and destination MAC address.

Source and destination Layer 4 port.

Source IP address

Source IP address, Layer 4, and VLAN.

Source IP address and VLAN.

Source MAC address (the default).

Source port.

Source virtual port ID.

VLAN only.

load balance independently. If you do not specify a module, the specified algorithm is applied to all device modules.

Module number. The range is from 1 to 66.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you do not specify a module, the algorithm is applied globally to all port channels.

If you specify a module, the algorithm is applied to all port channels in the specified module.

If the traffic on a port channel is going only to a single MAC address and you load balance on a destination MAC address, the port channel always chooses the same link in that port channel. In this case, using source addresses or IP addresses might result in better load balancing.

Examples

This example shows how to specify the source port as the global algorithm for balancing loads on the interfaces in channel-groups:

n1000V# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-channel load-balance ethernet src-port

n1000v(config)#

This example shows how to configure the source IP load-balancing algorithm for port channels on module 5:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-channel load-balance ethernet source-ip module 5

Related Commands

Command

Description

Displays information about port channel load balancing.

port-profile

form of this command.

Syntax Description

Port profile name. The name can be up to 80 characters in length, alphanumeric, and case-sensitive.

(Optional) Specifies an interface of type Ethernet or virtual Ethernet.

The Ethernet type.

The virtual Ethernet type.

Defaults

The default type is virtual Ethernet.

Command Modes

Configure port profile (config-net-seg).

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The port profile name must be unique for each port profile on the Cisco Nexus 1000V.

The port profile type can be Ethernet or virtual Ethernet. Once configured, the type cannot be changed.

Defining a port profile type as Ethernet allows the port profile to be used for physical (Ethernet) ports. In the Microsoft System Center Virtual Machine Manager (SCVMM) server, the corresponding uplink port profile can be selected and assigned to physical ports (PNICs).

If a port profile is configured as an Ethernet type, it cannot be used to configure a vNIC or Microsoft Hyper-V virtual port.

Classification profiles carry the feature configuration for Ethernet and virtual Ethernet interfaces. The classification profile type determines which type of interfaces can inherit them. virtual Ethernet classification profiles are published to the SCVMM server while Ethernet profiles are inherited by uplink networks.

To configure a virtual Ethernet profile with features:

1. Create network-segments with VLANs to be assigned for virtual Ethernet interfaces.

2. Create classification profile of type “vethernet” with required features.

3. Publish classification profile to the SCVMM server.

4. On the SCVMM server attach both nsm network segment and the classification profile to the virtual Ethernet interface.

To configure a virtual Ethernet profile with port binding:

1. Once a virtual Ethernet port profile has been created as a port group on the SCVMM server, you cannot change its port binding type.

2. You cannot configure maximum port limits for virtual Ethernet port profiles with ephemeral port binding.

3. You cannot configure port binding for Ethernet type port profiles. Port binding is available only for virtual Ethernet port profiles.

4. Manual configurations on an interface are purged when the system administrator changes its port profile if either port profile is configured with ephemeral port binding regardless of the auto purge setting.

Examples

This example shows how to create an Ethernet type port profile with the name PortChannelProfile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type ethernet PortChannelProfile

n1000v(config-port-prof)# channel-group auto

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)# state enabled

This example shows how to remove the port profile with the name PortChannelProfile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v#(config)# port-profile type ethernet PortChannelProfile

n1000v#(config-port-prof)# no shutdown

n1000v#(config-port-prof)# publish port-profile

n1000v#(config-port-prof)# state enabled

n1000v#(config-port-prof)# publish port-profile

This example shows how to configure a classification profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type vethernet ACL

n1000v(config-port-prof)# service-policy input mark

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)# publish port-profile

n1000v(config-port-prof)# no shut

This example shows how to create an Ethernet profile carrying a port channel configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type ethernet PORT_CHANNEL

n1000v(config-port-prof)# channel-group auto mode on

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)# no shut

n1000v(config-port-prof)# end

n1000v

This example shows how to configure a virtual Ethernet profile with features:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm logical network Hyper-v

n1000v(config-log-net)# description "Hyper-v Logic"

n1000v(config-log-net)# end

n1000v

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment pool net-seg-pool

n1000v(config-net-seg-pool)# nsm network logical Hyper-v

n1000v(config-net-seg-pool)# end

n1000v

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment net-seg-101

n1000v(config-net-seg)# switchport access vlan 101

n1000v(config-net-seg)# nsm network segment pool net-seg-pool

n1000v(config-net-seg)# publish network-segment

n1000v(config-net-seg)# end

n1000v

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile type vethernet ACL

n1000v(config-port-prof)# service-policy input police

n1000v(config-port-prof)# ip port access-group security in

n1000v(config-port-prof)# publish port-profile

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)# no shut

n1000v(config-port-prof)# end

n1000v

Related Commands

Command

Description

show port-profile

Displays the port profile configuration, including assigned roles.

Displays the port profile configuration.

Designates whether the interfaces in the port profile are to be used as access or trunking ports.

pwd

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to view the current directory:

n1000v# pwd

bootflash:

n1000v#

R Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter R.

radius-server deadtime

form of this command.

Syntax Description

Number of minutes for the dead-time interval. The range is from 1 to 1440 minutes.

Defaults

0 minutes

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The dead-time interval is the number of minutes before the device checks a RADIUS server that was previously unresponsive.

Note The default idle timer value is 0 minutes. When the idle time interval is 0 minutes, periodic RADIUS server monitoring is not performed.

Examples

This example shows how to configure the global dead-time interval for all RADIUS servers to perform periodic monitoring:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server deadtime 5

This example shows how to revert to the default for the global dead-time interval for all RADIUS servers and disable periodic server monitoring:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no radius-server deadtime 5

Related Commands

Command

Description

Displays RADIUS server information.

radius-server directed-request

form of this command.

radius-server directed-request

radius-server directed-request

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

during login, where vrfname is the virtual routing and forwarding (VRF) instance to use and hostname is the name of a configured RADIUS server. The username is sent to the RADIUS server for authentication.

Examples

This example shows how to allow users to send authentication requests to a specific RADIUS server when logging in:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server directed-request

This example shows how to disallow users to send authentication requests to a specific RADIUS server when logging in:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no radius-server directed-request

Related Commands

Command

Description

Displays the directed request RADIUS server configuration.

radius-server host

form of this command.

Syntax Description

RADIUS server Domain Name Server (DNS) name. The name is alphanumeric, case-sensitive, and has a maximum of 256 characters.

format.

format.

(Optional) Configures the RADIUS server preshared secret key.

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the RADIUS client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text (indicated by 7) to authenticate communication between the RADIUS client and server.

Preshared key to authenticate communication between the RADIUS client and server. The preshared key can include any printable ASCII characters (white spaces are not allowed), is case-sensitive and can be up to 28 characters.

(Optional) Enables the generation of Protected Access Credentials (PAC) on the RADIUS Cisco Access Control Server (ACS).

accounting

(Optional) Configures accounting.

(Optional) Configures the RADIUS server port for accounting.

Port number. The range is from 0 to 65535.

(Optional) Configures the RADIUS server port for authentication.

(Optional) Configures authentication.

(Optional) Configures the number of times that the device tries to connect to a RADIUS server(s) before reverting to local authentication.

Number of times a device tries to connect to a RADIUS server. The range is from 1 to 5 times and the default is 1 time.

test

(Optional) Configures parameters to send test packets to the RADIUS server.

Specifies the time interval (in minutes) for monitoring the server.

Time interval (in minutes) for monitoring the server. The range is from 1 to 1440 minutes.

Specifies a user password in the test packets.

is alphanumeric, case-sensitive, and has a maximum of 32 characters.

Specifies a username in the test packets.

is alphanumeric, not case-sensitive and can be up to 28 characters.

Specifies the timeout (in seconds) between retransmissions to the RADIUS server. The default is 5 seconds and the range is from 1 to 60 seconds.

Timeout (in seconds) between retransmissions to the RADIUS server. The default is 5 seconds and the range is from 1 to 60 seconds.

Defaults

Parameter

Default

Accounting port

1813

Authentication port

1812

Accounting

Enabled

Authentication

Enabled

Retransmission count

1

Idle-time

None

Server monitoring

Disabled

Timeout

5 seconds

Test username

test

Test password

test

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When the idle time interval is 0 minutes, periodic RADIUS server monitoring is not performed.

Examples

This example shows how to configure RADIUS server authentication and accounting parameters:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server host 10.10.2.3 key HostKey

n1000v(config)# radius-server host 10.10.2.3 auth-port 2003

n1000v(config)# radius-server host 10.10.2.3 acct-port 2004

n1000v(config)# radius-server host 10.10.2.3 accounting

n1000v(config)# radius-server host radius2 key 0 abcd

n1000v(config)# radius-server host radius3 key 7 1234

n1000v(config)# radius-server host 10.10.2.3 test idle-time 10

n1000v(config)# radius-server host 10.10.2.3 test username tester

n1000v(config)# radius-server host 10.10.2.3 test password 2B9ka5

Related Commands

Command

Description

Displays RADIUS server information.

radius-server key

form of this command.

Syntax Description

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the RADIUS client and server.

7

(Optional) Configures a preshared key specified in encrypted text to authenticate communication between the RADIUS client and server.

Preshared key used to authenticate communication between the RADIUS client and server. The preshared key can include any printable ASCII characters (white spaces are not allowed), is case-sensitive and can be up to 28 characters.

Defaults

Clear text

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to provide various scenarios to configure RADIUS authentication:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server key AnyWord

n1000v(config)# radius-server key 0 AnyWord

n1000v(config)# radius-server key 7 public pac

Related Commands

Command

Description

Displays RADIUS server information.

radius-server retransmit

form of this command.

Syntax Description

Number of times that the device tries to connect to a RADIUS server(s) before reverting to local authentication. The range is from 1 to 5 times.

Defaults

1 retransmission

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the number of retransmissions to RADIUS servers:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server retransmit 3

This example shows how to revert to the default number of retransmissions to RADIUS servers:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no radius-server retransmit 3

Related Commands

Command

Description

Displays RADIUS server information.

radius-server timeout

form of this command.

Syntax Description

Number of seconds between retransmissions to the RADIUS server. The range is from 1 to 60 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the timeout interval:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# radius-server timeout 30

This example shows how to revert to the default interval:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no radius-server timeout 30

Related Commands

Command

Description

Displays RADIUS server information.

record

form of this command.

Syntax Description

name

NetFlow flow record name. The name is alphanumeric, case-sensitive, and has a maximum of 63 characters.

Specifies a predefined NetFlow flow record that uses traditional IPv4 NetFlow collection schemes.

Specifies a predefined NetFlow flow record that uses traditional IPv4 input.

Specifies a predefined NetFlow flow record that uses traditional IPv4 output.

Specifies the NetFlow flow record that uses the protocol and ports aggregation scheme.

Specifies a NetFlow flow record that uses traditional IPv4 input with origin ASs.

Defaults

None

Command Modes

Flow monitor configuration (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

A flow record defines the information that NetFlow gathers, such as packets in the flow and the types of counters gathered per flow. You can define new flow records or use the predefined flow record.

Examples

This example shows how to configure a flow record to use the predefined traditional IPv4 input NetFlow record:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor testmon

n1000v(config-flow-monitor)# record netflow ipv4 original-input

n1000v(config-flow-monitor)#

This example shows how to remove the predefined traditional IPv4 input NetFlow flow record configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow monitor testmon

n1000v(config-flow-monitor)# no record netflow ipv4 original-input

n1000v(config-flow-monitor)#

Related Commands

Command

Description

Displays NetFlow monitor configuration information.

Displays NetFlow record configuration information.

reload

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command instead.

command to preserve any configuration changes made since the previous reboot or restart.

After reloading it, you must manually restart the VSM.

Examples

This example shows how to reload both the primary and secondary VSM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# reload

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from command-line interface

Related Commands

Command

Description

Reloads the specified VSM (1 or 2) in a redundant pair.

reload module

command.

Syntax Description

Module number:

- 1 (primary VSM)

- 2 (secondary VSM)

(Optional) Reboots the specified module to force NetBoot and image download.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command instead.

command to preserve any configuration changes made since the previous reboot or restart.

After reloading it, you must manually restart the VSM.

Examples

This example shows how to reload VSM 2, the secondary VSM in a redundant pair:

n1000v# reload module 2

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from command-line interface

Related Commands

Command

Description

reload

Reboots both the primary and secondary VSM.

Displays information about the software version.

resequence

command.

Syntax Description

Specifies resequencing of an IP access list.

mac

Specifies resequencing of a MAC access list.

Specifies resequencing of an access list.

Specifies resequencing of a time range.

(Optional) List name. The name is alphanumeric, case-sensitive and can be up to 28 characters.

(Optional) Starting sequence number. The range is from 1 to 4294967295.

(Optional) Step to increment the sequence number. The range is from 1 to 4294967295.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to resequence the first entry in the MAC ACL named aclOne:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# resequence mac access-list aclOne 1 2

n1000v(config)#

Related Commands

Command

Description

Displays ACLs.

rmdir

command.

Syntax Description

:

(Optional) File system name. The name is case-sensitive and can be up to 28 characters.

. The identifiers are case-sensitive and can be up to 28 characters.

Directory name. The name is case-sensitive and can be up to 28 characters.

Defaults

Removes the directory from the current working directory.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to remove the my_files directory:

n1000v# rmdir my_files

Related Commands

Command

Description

Changes the current working directory.

Displays the directory contents.

Displays the name of the current working directory.

role

form of this command.

Syntax Description

Configures the feature group role.

Feature group name. The name is alphanumeric, case-sensitive, and has a maximum of 32 characters.

Specifies a ole name.

User role. The name is alphanumeric, case-sensitive, and has a maximum of 16 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to create a role named UserA:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name UserA

This example shows how to remove the UserA role:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no role UserA

Related Commands

Command

Description

Denies users assigned to this role access to all interfaces unless specifically permitted.

Specifies the interface(s) that users assigned to this role can access.

Specifies the VLAN(s) that users assigned to this role can access.

Displays the available user roles and their rules.

vlan policy

Denies users assigned to this role access to all VLANs unless specifically permitted.

rule

form of this command.

Syntax Description

Rule number. The range is from 1 to 256.

Indicates that the user is denied the ability to perform a function.

Indicates that the user is permitted to perform a function.

Specifies whether the assigned user has read access.

Specifies whether the assigned user has read-write access.

feature

(Optional) Specifies a feature for the rule.

Feature name, such as syslog or TACACS+, whose access can be defined in this rule.

(Optional) Specifies a feature type.

Group of features whose access can be defined in a rule.

Specifies a command for this rule.

Command, or group of commands collected in a regular expression, whose access can be defined in a rule.

Defaults

None

Command Modes

Role configuration (config-role)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

specifies the order in which the rule is applied, in descending order. For example, if a role has three rules, rule 3 is applied first, rule 2 is applied next, and rule 1 is applied last. You can configure up to 256 rules for each role.

Examples

command:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name UserA

n1000v(config-role)# rule 1 deny command clear users

n1000v(config-role)#

This example shows how to remove the rule 1 configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name UserA

n1000v(config-role)# no rule 1

Related Commands

Command

Description

show role

Displays the user role configuration.

username

Configures information about the user.

run-script

command.

Syntax Description

Filename that contains the command script. The filename is alphanumeric, case-sensitive and can be up to 28 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to run a command script that is saved in the Sample file on the Volatile file system:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# run-script volatile:Sample

n1000v(config)#

Related Commands

Command

Description

Changes the current working directory.

Copies files.

Displays the contents of the working directory.

Displays the name of the present working directory (pwd).

S Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter S.

send

command.

Syntax Description

Message. The message has a maximum length of one line.

Specifies a specific session.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to send a message to an open session:

n1000v# send session sessionOne testing

n1000v#

Related Commands

Command

Description

Displays a banner.

server

form of this command.

Syntax Description

IPV4 address of the RADIUS server.

server-name

RADIUS server name. The name is alphanumeric, case sensitive, and has a maximum of 256 characters.

Defaults

None

Command Modes

Radius configuration (config-radius)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the RADIUS server as a member of the RADIUS server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# server 10.10.1.1

n1000v(config-radius)#

This example shows how to remove the server configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius RadServer

n1000v(config)# no server 10.10.1.1

Related Commands

Command

Description

Creates a RADIUS server group and enters the RADIUS server group configuration submode for that group.

deadtime

Configures the monitoring dead time.

show radius-server groups

Displays the RADIUS server group configuration.

use-vrf

Specifies the VRF instance to use to contact the servers in the server group.

session-limit

form of this command.

Syntax Description

Number of VSH sessions. The range is from 1 to 64

Defaults

No limit is set.

Command Modes

Line configuration (config-line)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to limit the number of VSH sessions:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line vty

n1000v(config-line)# session-limit 10

n1000v(config-line)#

This example shows how to remove the limit:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# line vty

n1000v(config-line)# no session-limit 10

n1000v(config-line)#

setup

command.

setup

Syntax Description

This command has no arguments or keywords, but the BSCD prompts you for complete setup information (see the example below).

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The BSCD assumes the factory defaults.

All changes made to your configuration are summarized for you at the completion of the setup sequence with an option to save the changes or not.

You can exit the setup sequence at any point by pressing Ctrl-C.

Examples

This example shows how to create or modify a basic system configuration:

n1000v# setup

Enter the domain id<1-1023>: 400

Enter HA role[standalone/primary/secondary]: standalone

[########################################] 100%

---- Basic System Configuration Dialog ----

This setup utility will guide you through the basic configuration of

the system. Setup configures only enough connectivity for management

of the system.

*Note: setup is mainly used for configuring the system initially,

when no configuration is present. So setup always assumes system

defaults and not the current system configuration values.

Press Enter at anytime to skip a dialog. Use ctrl-c at anytime

to skip the remaining dialogs.

Would you like to enter the basic configuration dialog (yes/no): y

Create another login account (yes/no) [n]: n

Configure read-only SNMP community string (yes/no) [n]: n

Configure read-write SNMP community string (yes/no) [n]: n

Enter the switch name : n1000v

Continue with Out-of-band (mgmt0) management configuration? (yes/no) [y]:

Mgmt0 IPv4 address :

Configure the default gateway? (yes/no) [y]: n

Configure advanced IP options? (yes/no) [n]:

Enable the telnet service? (yes/no) [y]:

Enable the ssh service? (yes/no) [n]:

Configure the ntp server? (yes/no) [n]:

Configure vem feature level? (yes/no) [n]:

The following configuration will be applied:

switchname n1000v

telnet server enable

no feature ssh

feature http-server

svs-domain

no control vlan

no packet vlan

svs mode L3 interface mgmt0

domain id 400

vlan 400

vlan 405

Would you like to edit the configuration? (yes/no) [n]:

Use this configuration and save it? (yes/no) [y]: n

n1000v#

Related Commands

Command

Description

Displays the running configuration.

shutdown (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

no shutdown

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You cannot shut down the default VLAN, VLAN1, or VLANs 1006 to 4094.

Examples

This example shows how to shut down switching on VLAN 10:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan 10

n1000v(config-vlan)# shutdown

n1000v(config-vlan)#

This example shows how to turn on switching on VLAN 10:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan 10

n1000v(config-vlan)# no shutdown

n1000v(config-vlan)#

Related Commands

Command

Description

Displays VLAN information.

shutdown (interface)

form of this command.

Syntax Description

(Optional) Administratively enables or disables an interface.

Defaults

No shutdown

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This command shuts down the interface. No traffic passes and the interface displays as administratively down.

Examples

This example shows how to administratively disable Ethernet interface 3/1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# shutdown

n1000v(config-if)#

This example shows how to administratively enable Ethernet interface 3/1:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# no shutdown

n1000v(config-if)#

Related Commands

Command

Description

interface ethernet

Creates an Ethernet interface configuration.

interface vethernet

Creates a virtual Ethernet interface configuration.

Displays the interface configuration.

shutdown (port profile)

form of this command.

Syntax Description

(Optional) Administratively enables or disables all ports in the profile.

Defaults

all ports administratively disabled

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This command administratively disables all ports in the profile. No traffic passes and the ports display as administratively down.

Examples

This example shows how to administratively enable all ports in the TrunkProf port profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile TrunkProf

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)#

This example shows how to administratively disable all ports in the TrunkProf port profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile TrunkProf

n1000v(config-port-prof)# shutdown

n1000v(config-port-prof)#

Related Commands

Command

Description

port-profile

Creates a port profile configuration.

Displays the named port profile configuration.

sleep

command.

Syntax Description

Sleep time. The range is from 0 to 2147483647 seconds.

Defaults

Sleep time is not set.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

to 0, sleep is disabled.

Examples

This example shows how to set a sleep time:

n1000v# sleep 100

n1000v#

This example shows how to disable sleep:

n1000v# sleep 0

n1000v#

snmp-server aaa-user cache-timeout

form of this command.

Syntax Description

Length of the time for the user configuration to remain in the local cache. The range is from 1 to 86400 seconds.

Defaults

The default timeout is 3600 seconds.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the AAA synchronized user configuration to stay in the local cache for 1200 seconds:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server aaa-user cache-timeout 1200

This example shows how to revert back to the default value of 3600 seconds:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server aaa-user cache-timeout 1200

Related Commands

Command

Description

Displays SNMP information.

snmp-server contact

Configures sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces the SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server protocol enable

Enables the SNMP protocol.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server community

form of this command.

Syntax Description

SNMP community string, which identifies the community. The string has a maximum size of 32 case sensitive, alphanumeric characters.

(Optional) Specifies a group to which this community belongs.

Group name. The group name has a maximum size of 32 case sensitive, alphanumeric characters.

(Optional) Specifies read-only access for this community.

(Optional) Specifies read-write access for this community.

(Optional) Specified an access control list (ACL) to filter SNMP requests.

ACL name. The maximum size is 32 case sensitive, alphanumeric characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can create SNMP communities for SNMPv1 or SNMPv2c.

Examples

This example shows how to configure read-only access for the SNMP community called public:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server community public ro

This example shows how to remove the SNMP community called public:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server community public

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server community

Creates an SNMP community string and assigns access privileges for the community.

snmp-server contact

Configures the sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server contact

command.

form of this command.

Syntax Description

(Optional) SNMP contact name (sysContact), which can contain a maximum of 32 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You can create SNMP communities for SNMPv1 or SNMPv2c.

Examples

This example shows how to configure the sysContact to be Admin:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server contact Admin

This example shows how to remove the sysContact:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server contact

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server globalEnforcePriv

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enforce SNMP message encryption for all users:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server globalEnforcePriv

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA synchronized user configuration stays in the local cache.

snmp-server contact

Configures the sysContact, (the SNMP contact).

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server host

form of this command.

Syntax Description

IPv4 address, IPv6 address, or Domain Name System (DNS) of the SNMP notification host.

Specifies Inform messages to this host.

Specifies Traps messages to this host.

Specifies the SNMP version to use for notification messages.

Specifies SNMPv1 as the version.

Specifies SNMPv2c as the version.

Specifies SNMPv3 as the version.

(Optional) Specifies (for SNMPv3) the authNoPriv Security Level.

(Optional) Specifies (for SNMPv3) the noAuthNoPriv Security Level.

(Optional) Specifies (for SNMPv3) the authPriv Security Level.

SNMPv1/v2c community string or SNMPv3 user name. The community string can be any alphanumeric string up to 255 characters.

(Optional) Specifies an existing User Datagram Protocol (UDP) port.

Number that identifies the UDP port of the notification host. The range is from 0 to 65535.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the host receiver, 192.0.2.1, for SNMPv1 traps:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server host 192.0.2.1 traps version 1 public

This example shows how to remove the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server host 192.0.2.1 traps version 1 public

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA synchronized user configuration stays in the local cache.

snmp-server contact

Configures the sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server location

command.

form of this command.

Syntax Description

(Optional) SNMP location name (sysLocation). The name can contain a maximum of 32 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the sysLocation to be Lab-7:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server location Lab-7

This example shows how to remove the sysLocation:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server location

Related Commands

Command

Description

Displays SNMP information.

Configures how long the AAA synchronized user configuration stays in the local cache.

Configures the sysContact (the SNMP contact).

Enforces SNMP message encryption for all users.

Configures a host receiver for SNMP traps or informs.

Enables SNMP.

Enables a one-time authentication for SNMP over a TCP session.

Configures an SNMP user with authentication and privacy parameters.

snmp-server protocol enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

This command is enabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable SNMP protocol operations:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server protocol enable

This example shows how to disable SNMP protocol operations:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server protocol enable

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA synchronized user configuration stays in the local cache.

snmp-server contact

Configures the sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server tcp-session

form of this command.

Syntax Description

(Optional) Enables one-time authentication for SNMP over the entire TCP session (rather than on a per-command basis).

Defaults

This command is disabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable one-time authentication for SNMP over TCP:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server tcp-session auth

This example shows how to disable one-time authentication for SNMP over TCP:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server tcp-session

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA synchronized user configuration stays in the local cache.

snmp-server contact

Configures the sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server user

form of this command.

Syntax Description

SNMP engine user name. The user name is not case-sensitive and can be up to 28 characters.

(Optional) Enables one-time authentication for SNMP over a TCP session

Specifies a keyed-hash message authentication code (HMAC) Message Digest (MD)5 algorithm for authentication.

sha

Specifies HMAC Secure Hash Algorithm (SHA) for authentication.

Authentication passphrase for this user. The passphrase can be any case-sensitive, alphanumeric string of up to 64 characters.

priv

(Optional) Specifies encryption parameters for the user.

aes-128

(Optional) Specifies a 128-byte Advanced Encryption Standard (AES) algorithm for privacy.

Encryption passphrase for this user. The passphrase can be any case-sensitive, alphanumeric string up to 64 characters.

(Optional) Specifies the engineID for configuring the notification target user (for V3 informs).

EngineID. The ID is in a 12-digit, colon-separated decimal format.

(Optional) Specifies the passphrase as any case-sensitive, alphanumeric string of up to 130 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to provide one-time SNMP authorization for the user, Admin, using the HMAC SHA algorithm for authentication:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# snmp-server user Admin auth sha abcd1234 priv abcdefgh

This example shows how to deny a user access to the SNMP engine:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no snmp-server user Admin

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA synchronized user configuration stays in the local cache.

snmp-server contact

Configures the sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures the sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp trap link-status

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

CLI interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This command is enabled by default.

Examples

This example shows how to enable SNMP link-state traps for the interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface veth 2

n1000v(config-if)# snmp trap link-status

n1000v(config-if)#

This example shows how to disable SNMP link-state traps for the interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface veth 2

n1000v(config-if)# no snmp trap link-status

n1000v(config-if)#

Related Commands

Command

Description

interface vethernet

Creates a virtual Ethernet interface and enters interface configuration mode.

Enables all SNMP notifications.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

source-interface

form of this command.

Syntax Description

Interface type:

- loopback = Loopback interface

- mgmt = Management interface

- null = Null interface

- port-channel = Port Channel interface

Interface ID, such as the slot/port or number:

- loopback = Virtual interface number from 0 to 1023

- mgmt = Management interface 0

- null = Null interface 0

- port-channel = Port channel number from 1 to 4096

Defaults

None

Command Modes

RADIUS server group configuration (config-radius)

TACACS+ server group configuration (config-tacacs+)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to specify source interface mgmt0 to reach the RADIUS server for the RadServer RADIUS server group:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# source-interface mgmt0

n1000v(config-radius)#

This example shows how to remove the source interface from the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# no source-interface

n1000v(config-radius)#

Related Commands

Command

Description

Creates a RADIUS server group.

Creates a TACACS+ server group.

Displays the RADIUS server group configuration.

Displays the TACACS+ server group configuration.

source lc-exp (NetFlow)

form of this command.

Syntax Description

Exporter IP address in the format A.B.C.D/LEN.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add a source IP to the ExportTest flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# source lc-exp 10.105.225.180/27

This example shows how to remove a source IP from the ExportTest flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no source lc-exp 10.105.225.180/27

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

speed

form of this command.

Syntax Description

.

.

.

Sets the interface to autonegotiate the speed with the connecting port.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you configure an Ethernet port speed to a value other than auto (for example, 10, 100, or 1000 Mbps), you must configure the connecting port to match. Do not configure the connecting port to negotiate the speed.

Examples

This example shows how to set the speed of Ethernet port 1 on the module in slot 3 to 1000 Mbps:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# speed 1000

This example shows how to automatically set the speed to auto:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no speed 1000

Related Commands

Command

Description

duplex

Specifies the duplex mode as full, half, or autonegotiate.

Specifies the interface that you are configuring.

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

ssh

command.

Syntax Description

(Optional) Username for the SSH session. The user name is not case-sensitive and can be up to 64 characters.

IPv4 address of the remote device.

Hostname of the remote device. The hostname is case sensitive.

(Optional) Specifies a virtual routing and forwarding (VRF) name to use for the SSH session.

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

Default VRF

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The Cisco Nexus 1000V software supports SSH version 2.

Examples

This example shows how to start an SSH session:

n1000v# ssh 10.10.1.1 vrf management

The authenticity of host '10.10.1.1 (10.10.1.1)' can't be established.

RSA key fingerprint is 9b:d9:09:97:f6:40:76:89:05:15:42:6b:12:48:0f:d6.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '10.10.1.1' (RSA) to the list of known hosts.

User Access Verification

Password:

Related Commands

Command

Description

Clears SSH sessions.

Enables the SSH server.

ssh key

form of this command.

Syntax Description

Specifies the Digital System Algorithm (DSA) SSH server key.

(Optional) Forces the replacement of an SSH key.

Specifies the Rivest, Shamir, and Adelman (RSA) public-key cryptography SSH server key.

(Optional) Bits to use when creating the SSH server key. The range is from 768 to 2048.

Defaults

1024-bit length

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The Cisco Nexus 1000V software supports SSH version 2.

command.

Examples

This example shows how to create an SSH server key using DSA:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ssh key dsa

generating dsa key(1024 bits).....

..

generated dsa key

This example shows how to create an SSH server key using RSA with the default key length:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ssh key rsa

generating rsa key(1024 bits).....

.

generated rsa key

This example shows how to create an SSH server key using RSA with a specified key length:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# ssh key rsa 768

generating rsa key(768 bits).....

.

generated rsa key

This example shows how to replace an SSH server key using DSA with the force option:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature ssh

n1000v(config)# ssh key dsa force

deleting old dsa key.....

generating dsa key(1024 bits).....

.

generated dsa key

n1000v(config)# feature ssh

This example shows how to remove the DSA SSH server key:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature ssh

XML interface to system may become unavailable since ssh is disabled

n1000v(config)# no ssh key dsa

n1000v(config)# feature ssh

This example shows how to remove all SSH server keys:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no feature ssh

XML interface to system may become unavailable since ssh is disabled

n1000v(config)# no ssh key

n1000v(config)# feature ssh

Related Commands

Command

Description

Enables the SSH server.

Displays the SSH server key information.

state (Port Profile)

command.

Syntax Description

Enables or disables the port profile.

Defaults

Disabled

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable or disable the operational state of a port profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays port profile information.

sub-group-id

form of this command.

Syntax Description

Subgroup ID number. The range is from 0 to 31.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure an Ethernet member port on subgroup 5:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface Ethernet 3/2

n1000v(config-if)# sub-group-id 1

This example shows how to remove the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# interface Ethernet 3/2

n1000v(config-if)# no sub-group-id

Related Commands

Command

Description

Displays information about Ethernet interfaces.

svs-domain

command.

Syntax Description

Configures a control VLAN number.

Configures a domain ID.

Negates a command or sets its defaults.

Configures a packet VLAN number.

Configures the SVS.

Configures a switch-guid.

Go to EXEC mode.

Exit from the command interpreter.

Pop a mode from the stack or restore it from name.

Push the current mode to the stack or save it under name.

Displays the command-line interface (CLI) context you are in.

Defaults

None

Command Modes

SVS domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enter SVS domain configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# svs-domain

n1000v(config-svs-domain)#

This example shows how to enter the SVS domain and show the CLI context:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# svs-domain

n1000v(config-svs-domain)# where

conf; svs-domain admin@n1000v

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays SVS information.

svs license transfer src-vem

command.

Syntax Description

Module number. The range is from 3 to 66.

(Optional) Specifies the VEM to receive the transferred license.

Transfers a license back to the VSM license pool.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Follow these guidelines:

- Licenses cannot be transferred to a VEM unless there are sufficient licenses in the pool for all CPUs on that VEM.

- When licenses are successfully transferred from one VEM to another, the following occurs:

– The virtual Ethernet interfaces on the source VEM are removed from service.

– The virtual Ethernet interfaces on the destination VEM are brought into service.

- When licenses are successfully transferred from a VEM to the VSM license pool, the virtual Ethernet interfaces on the source VEM are removed from service.

Examples

This example shows how to transfer a license from VEM 3 to VEM 5 and then display the license configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# show license usage NEXUS1000V_LAN_SERVICES_PKG

Application

-----------

VEM 5 - Socket 1

VEM 5 - Socket 2

VEM 4 - Socket 1

VEM 4 - Socket 2

-----------

n1000v#

This example shows how to transfer a license from VEM 3 to the VSM license pool and then display the license configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# show license usage NEXUS1000V_LAN_SERVICES_PKG

Application

-----------

VEM 4 - Socket 1

VEM 4 - Socket 2

-----------

n1000v#

Related Commands

Command

Description

Installs a license file(s) on a VSM.

Designates the level of severity at which license messages should be logged.

Displays the number and location of CPU licenses in use on your VEMs.

Enables volatile licenses so whenever a VEM is taken out of service, its licenses are returned to the VSM pool of available licenses.

svs license volatile

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Caution Service Disruption

Volatile licenses are removed from a VEM during a loss in connectivity and are not returned to the VEM when connectivity resumes. We recommend that the volatile license feature remain disabled and that you transfer unused licenses by using the svs license transfer src-vem command.

Examples

This example shows how to enable the volatile license feature for a VSM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

This example shows how to disable the volatile license feature for a VSM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no svs license volatile

Related Commands

Command

Description

Installs a license file(s) on a VSM.

Designates the level of severity at which license messages should be logged.

Displays the license configuration for the VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM or to the VSM pool of available licenses.

svs mode l3 interface

command.

Syntax Description

Specifies mgmt0 as the Layer 3 transport interface.

Specifies control0 as the Layer 3 transport interface.

Defaults

Layer 3 mode.

Command Modes

Software virtual switch (SVS) domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you use mgmt0 as the Layer 3 control interface in the VSM VM, Ethernet adapters 1 and 3 are not used.

If you use control0 as the Layer 3 control interface in the VSM VM, Ethernet adapter 3 is not used.

Examples

This example shows how to configure mgmt0 as the Layer 3 transport interface for the VSM domain:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays the VSM domain configuration.

svs-domain

Creates and configures the VSM domain.

svs veth auto-config-purge

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# svs veth auto-config-purge

n1000v(config)#

This example shows how to remove the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no svs veth auto-config-purge

n1000v(config)#

Related Commands

Command

Description

Creates a virtual Ethernet interface.

show interface vethernet

Displays information about virtual Ethernet interfaces.

Displays information about the configuration currently running on the system.

svs veth auto-delete

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# svs veth auto-delete

n1000v(config)#

:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no svs veth auto-delete

n1000v(config)#

Related Commands

Command

Description

Creates a virtual Ethernet interface.

show interface vethernet

Displays information about virtual Ethernet interfaces.

Displays information about the configuration that is currently running on the system.

svs veth auto-setup

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# svs veth auto-setup

:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no svs veth auto-setup

Related Commands

Command

Description

Creates a virtual Ethernet interface.

show interface vethernet

Displays information about virtual Ethernet interfaces.

Displays information about the configuration that is currently running on the system.

switchname

form of this command.

no switchname

Syntax Description

Device name. The name is alphanumeric, case-sensitive, it can contain special characters, and can have a maximum of 32 characters.

Defaults

switch

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The Cisco Nexus 1000V software uses the hostname in command-line interface (CLI) prompts and in default configuration filenames.

command.

Examples

This example shows how to configure the device hostname:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# switchname Engineering2

n1000v(config)#

This example shows how to revert to the default device hostname:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no switchname

n1000v(config)#

Related Commands

Command

Description

Configures the device hostname.

Displays the device hostname.

switchport access vlan

form of this command.

Syntax Description

VLAN identification number. The range is from 1 to 3967.

Defaults

Access mode is not set.

Command Modes

Network segment configuration (config-net-seg)

Supported User Roles

network-admin

Note VLAN configuration must be done only via network segments.

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set the access mode of an interface:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment vlan_800

n1000v(config-net-seg)# switchport access vlan 800

n1000v(config-net-seg)#

This example shows how to remove the access mode configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment vlan_800

n1000v(config-net-seg)# no switchport access vlan 800

n1000v(config-net-seg)#

Related Commands

Command

Description

Displays interface information.

show nsm

Displays NSM information.

switchport mode (network segment)

form of this command.

Syntax Description

Sets the port mode to access.

trunk

Sets the port mode to trunk.

Defaults

Switchport mode is not set.

Command Modes

Network segment configuration (config-net-seg)

Supported User Roles

network-admin

Note VLAN configuration must be done only via network segments.

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set the network segment mode to an access VLAN:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment vlan_host

n1000v(config-net-seg)# switchport mode access

n1000v(config-net-seg)#

This example shows how to remove the network segment mode community VLAN:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment vlan_host

n1000v(config-net-seg)# no switchport mode access

n1000v(config-net-seg)#

Related Commands

Command

Description

Displays interface information.

show nsm network segment

Displays NSM network segment information.

switchport trunk allowed vlan

form of this command.

Syntax Description

VLANs (allowed) that transmit through this interface in tagged format when in trunking mode. The range is from 1 to 4094.

Allows all appropriate VLANs to transmit through this interface in tagged format when in trunking mode.

Blocks all VLANs transmitting through this interface in tagged format when in trunking mode.

Adds the defined list of VLANs to those currently set instead of replacing the list.

Allows all VLANs to transmit through this interface in tagged format when in trunking mode except the specified values.

Removes the defined list of VLANs from those currently set instead of replacing the list.

Defaults

All VLANs

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

If you remove VLAN 1 from a trunk, the trunk interface continues to send and receive management traffic in VLAN 1.

Note This command is auto generated by the network segmentation manager (NSM). The user should not run this command directly for configuration or any other purposes.

Examples

n1000v# show running-config port-profile vic-uplink

!Command: show running-config port-profile vic-uplink

!Time: Fri May 24 03:28:00 2013

version 5.2(1)SM1(5.1)

port-profile type ethernet vic-uplink

inherit port-profile vmdata-vpc-mac

no shutdown

guid 1d8703cd-40b4-4848-867d-296be908921e

max-ports 512

description NSM created profile. Do not delete.

system vlan 240,251,280

state enabled

Related Commands

Command

Description

Displays the administrative and operational status of a switching (nonrouting) port.

switchport trunk native vlan

form of this command.

Syntax Description

VLAN identification number. The range is from 1 to 3967 and from 4048 to 4093.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Note This command is auto generated by the network segmentation manager (NSM). The user should not run this command directly for configuration or any other purposes.

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display trunking parameters on an interface:

n1000v# show running-config port-profile vic-uplink

!Command: show running-config port-profile vic-uplink

!Time: Fri May 24 03:28:00 2013

version 5.2(1)SM1(5.1)

port-profile type ethernet vic-uplink

inherit port-profile vmdata-vpc-mac

no shutdown

guid 1d8703cd-40b4-4848-867d-296be908921e

max-ports 512

description NSM created profile. Do not delete.

system vlan 240,251,280

state enabled

Related Commands

Command

Description

Displays VLAN information.

system network segment

To configure a network segment as a system network segment, use the system network segment command. To revert to the original network configuration , use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Network segment configuration (config-net-seg)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

A system network segment is for ports that need to be active even when the VSM is not connected to the VEM. Typical examples are server management ports, storage ports, etc.

Examples

This example shows how to configure a network segment as a system segment:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment system_segment

n1000v(config-net-seg)# switchport access vlan 900

n1000v(config-net-seg)# system network segment

n1000v(config-net-seg)#

This example shows how to deconfigure a network segment as a system segment:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment system_segment

n1000v(config-net-seg)# switchport access vlan 900

n1000v(config-net-seg)# no system network segment

n1000v(config-net-seg)#

Related Commands

Command

Description

show nsm network segment

Displays NSM network segment information.

system network uplink

To enable a system VLAN on uplink objects, use the system network uplink command. To disable a system VLAN on uplink objects , use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Uplink network configuration (config-net-seg)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The system network uplink command is used to configure system VLANs on an uplink object . This command should be enabled when system network segments are part of an uplink object

Examples

This example shows how to enable a system VLAN on an uplink object:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink system_uplink

n1000v(config-uplink-net)# system network uplink

n1000v(config-uplink-net)#

This example shows how to disable a system VLAN on an uplink object:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network uplink system_uplink

n1000v(config-uplink-net)# no system network uplink

n1000v(config-uplink-net)#

Related Commands

Command

Description

show nsm network uplink

Displays NSM network uplink information.

system redundancy role

command. To revert to the default setting, use the no form of this command.

Syntax Description

Specifies the primary redundant VSM.

Specifies the secondary redundant VSM.

Specifies no redundant VSM.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure no redundant VSM:

n1000v# system redundancy role standalone

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

system storage-loss

command. To disable storage loss checking, use the no form of this command.

Syntax Description

Displays a system log when storage loss is detected.

Reloads the Virtual Supervisor Module (VSM) when storage loss is detected.

(Optional) Specifies the time interval at which the VSM checks for storage connectivity status.

Time interval in seconds. The range is from 30 to 600 seconds.

Command Default

The default time interval is 30 seconds.

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable storage loss detection to be performed every 50 seconds.

n1000v# system storage-loss log time 50

n1000v#

This example shows how to disable the storage loss checking:

n1000v# no system storage-loss

Related Commands

Command

Description

Displays the system redundancy status.

system switchover

command.

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to switch over to the standby supervisor:

n1000v# system switchover

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

system vlan

form of this command.

Syntax Description

VLAN identification number list, separated by commas. The range is from 1 to 3967 and from 4048 to 4093.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

A system VLAN is used to configure and bring up physical or virtual Ethernet ports before the Virtual Supervisor Module (VSM) has established communication with the Virtual Ethernet Module (VEM).

Examples

This example shows how to display system VLAN information:

n1000v# show running-config port-profile vic-uplink

!Command: show running-config port-profile vic-uplink

!Time: Fri May 24 03:28:00 2013

version 5.2(1)SM1(5.1)

port-profile type ethernet vic-uplink

inherit port-profile vmdata-vpc-mac

no shutdown

guid 1d8703cd-40b4-4848-867d-296be908921e

max-ports 512

description NSM created profile. Do not delete.

system vlan 240,251,280

state enabled

Related Commands

Command

Description

Displays the status of all VLANs and the ports that are configured on them.

Displays VLAN summary information.

Show Commands

This chapter describes the Cisco Nexus 1000V show commands.

show aaa accounting

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the accounting configuration:

n1000v# show aaa accounting

default: local

Related Commands

Command

Description

Configures an AAA server group.

Displays the configuration for AAA authentication.

Displays the configured AAA server groups.

Displays AAA server group accounting.

show running-config aaa

Displays the AAA configuration as it currently exists in the running configuration.

Displays the user default role assigned by the AAA administrator.

Tests for AAA on a RADIUS server or server group.

show aaa authentication

command.

Syntax Description

login

(Optional) Displays the authentication login error message configuration.

Displays the ASCII authentication configuration.

chap

Displays the authentication login Challenge Handshake Authentication Protocol (CHAP) enable configuration.

error-enable

Displays the login error message enable configuration.

mschap

Displays the login MS-CHAP enable configuration.

mschapv2

Displays the login MS-CHAPv2 enable configuration

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the configured authentication parameters:

n1000v# show aaa authentication

default: local

console: local

Related Commands

Command

Description

Enables MSCHAP authentication at login.

Configures an AAA server group.

Displays the AAA accounting configuration.

Displays the configured AAA server groups.

Displays AAA server group accounting.

Displays the user default role assigned by the AAA administrator.

show running-config aaa

Displays the AAA configuration as it currently exists in the running configuration.

Tests for AAA on a RADIUS server or server group.

show aaa authorization

command.

Syntax Description

all

(Optional) Displays all (including default configurations) of the authorization information.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the configured authorization parameters:

n1000v# show aaa authorization

pki-ssh-cert: local

pki-ssh-pubkey: local

AAA command authorization:

keyword:

n1000v# show aaa authorization all

pki-ssh-cert: local

pki-ssh-pubkey: local

AAA command authorization:

default authorization for config-commands: local

default authorization for commands: local

Related Commands

Command

Description

Configures an AAA server group.

Displays the AAA accounting configuration.

Displays the configuration for AAA authentication.

Displays AAA server group accounting.

show running-config aaa

Displays the AAA configuration as it currently exists in the running configuration.

Displays the user default role assigned by the AAA administrator.

Tests for AAA on a RADIUS server or server group.

show aaa groups

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the AAA configured groups:

n1000v# show aaa groups

radius

Related Commands

Command

Description

Configures an AAA server group.

Displays the AAA accounting configuration.

Displays the configuration for AAA authentication.

Displays the configured AAA server groups.

show running-config aaa

Displays the AAA configuration as it currently exists in the running configuration.

Displays the user default role assigned by the AAA administrator.

Tests for AAA on a RADIUS server or server group.

show aaa user default-role

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the status of user AAA default role:

n1000v# show aaa user default-role

enabled

Related Commands

Command

Description

Configures an AAA server group.

Displays the AAA accounting configuration.

Displays the configuration for AAA authentication.

Displays the configured AAA server groups.

Displays AAA server group accounting.

show running-config aaa

Displays the AAA configuration as it currently exists in the running configuration.

Tests for AAA on a RADIUS server or server group.

show access-lists

command.

Syntax Description

capture

(Optional) Captures a session by it’s ID. When used as an option it requires the keyword session with session_id as an argument. The range is from 1 to 48.

session

session_id

Captures a session by the session_id.

Session ID. The range is from 1 to 48.

dynamic

(Optional) Displays dynamic access lists.

expanded

(Optional) Displays information about expand access list groups.

summary

(Optional) Displays summary information about access lists.

list_name

(Optional) ACL name. The name is a maximum of 64 alphanumeric, case-sensitive characters.

Defaults

The default <cr> displays all access lists.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display access lists:

n1000v# show access-lists

IPV4 ACL abhi-acl

10 permit ip 122.243.200.20/32 66.139.138.221/32 dscp af12

20 deny icmp 4.68.213.83/32 59.90.89.77/32 dscp cs1

30 permit icmp 72.165.25.69/32 85.135.171.135/32 echo dscp cs1

40 deny igmp 56.51.111.28/32 127.177.14.122/32 7 dscp 11

50 permit tcp 91.125.160.40/32 lt 40765 14.208.192.244/32 gt 2594 dscp 1

60 permit udp 15.104.89.102/32 eq 20343 54.182.95.236/32 lt 43125 dscp 6

70 permit ip 46.167.60.215/32 78.70.151.1/32 dscp 7

80 permit icmp 90.119.71.215/32 93.255.186.116/32 dscp 9

90 permit icmp 38.164.211.185/32 56.74.11.71/32 timestamp-request dscp af11

100 deny igmp 58.63.101.184/32 0.179.173.154/32 0 dscp 3

110 permit tcp 92.217.203.237/32 gt 21295 65.214.100.184/32 eq 13033 dscp 4

120 permit udp 12.229.14.211/32 lt 57734 88.115.243.129/32 gt 50221 dscp 5

130 deny ip 111.63.192.108/32 104.76.118.97/32 dscp af13

140 permit 13 125.190.31.44/32 111.228.220.8/32 dscp default

150 permit icmp 22.137.175.193/32 94.115.68.250/32 1 dscp af12

160 deny igmp 65.33.193.187/32 24.63.252.123/32 13 dscp 5

...

This example shows how to display expanded information about access lists:

n1000v# show access-lists expanded

IPV4 ACL abhi-acl

10 deny tcp any 209.165.200.234/0 eq ftp

20 deny tcp any 209.165.200.234/0 eq 666

30 deny udp any 209.165.200.234/0 eq tftp

40 deny tcp any 209.165.200.234/0 eq telnet

50 deny udp any 209.165.200.234/0 eq 1000

60 deny udp any 209.165.200.234/0 eq 1016

70 deny udp any 209.165.200.234/0 eq 1032

80 deny udp any 209.165.200.234/0 eq 1048

90 deny udp any 209.165.200.234/0 eq 1064

100 deny udp any 209.165.200.234/0 eq 1080

110 deny udp any 209.165.200.234/0 eq 1096

120 permit ip any any

...

This example shows how to display an access list by its name:

n1000v# show access-lists abhi-acl

IPV4 ACL abhi-acl

10 deny tcp any 209.165.200.234/0 eq ftp

20 deny tcp any 209.165.200.234/0 eq 666

30 deny udp any 209.165.200.234/0 eq tftp

40 deny tcp any 209.165.200.234/0 eq telnet

50 deny udp any 209.165.200.234/0 eq 1000

60 deny udp any 209.165.200.234/0 eq 1016

70 deny udp any 209.165.200.234/0 eq 1032

80 deny udp any 209.165.200.234/0 eq 1048

90 deny udp any 209.165.200.234/0 eq 1064

100 deny udp any 209.165.200.234/0 eq 1080

110 deny udp any 209.165.200.234/0 eq 1096

120 permit ip any any

This example shows how to display summary information about a named access list by using a list name as an argument and the optional summary keyword:

n1000v# show access-lists abhi-aclsummary

IPV4 ACL abhi-acl

Total ACEs Configured:12

Configured on interfaces:

Active on interfaces:

Related Commands

Command

Description

Clear the counters for IP and MAC ACLs.

Creates an IP access list.

Resequences a list with sequence numbers.

show accounting log

command.

Syntax Description

log_size

(Optional) Log size (in bytes). The range is from 0 to 250000

all

(Optional) Displays the accounting log including show commands.

last-index

(Optional) Displays the accounting log last index information.

start-seqnum

start_seqnum

(Optional) Displays accounting log messages starting from a given sequence number.

Start sequence number. The range is from 1 to 2000000000.

end-seqnum

end_seqnum

(Optional) Displays messages ending with a given sequence number.

End sequence number. The range is from 1 to 2000000000.

start-time

year

month

day

hh:mm:ss

(Optional) Displays messages from a given start time.

Year in YYYY format.

Month as Jan, Feb, Mar,..., or Dec. The maximum is three characters.

Enter day of month in DD format.

Hour, minutes, seconds as HH:MM:SS with the colons. The time is a maximum of eight characters.

end-time

(Optional) Displays messages from a given end time.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the accounting log:

n1000v# show accounting log

Sun Jan 6 18:02:11 2013:type=start:id= msp.1304:user=admin:cmd=

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 (SUCCESS)

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 ; ip port access-group abhi-acl in (SUCCESS)

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 ; ip port access-group abhi-acl out (SUCCESS)

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 ; switchport mode access (SUCCESS)

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 ; switchport access vlan 262 (SUCCESS)

Sun Jan 6 18:02:11 2013:type=update:id= msp.1304:user=admin:cmd=configure terminal ; interface Vethernet133 ; no shutdown (SUCCESS)

...

This example shows how to show the accounting log by entering a size (0 to 250000 in bytes) argument:

n1000v# show accounting log 32500

Thu Jan 3 17:07:33 2013:type=stop:id= msp.1296:user=admin:cmd=

Thu Jan 3 17:07:33 2013:type=start:id= msp.1296:user=admin:cmd=

Thu Jan 3 17:07:33 2013:type=update:id= msp.1296:user=admin:cmd=configure terminal ; interface Ethernet5/2 (SUCCESS)

Thu Jan 3 17:07:34 2013:type=update:id= msp.1296:user=admin:cmd=configure terminal ; interface Ethernet5/2 ; shutdown (SUCCESS)

Thu Jan 3 17:07:34 2013:type=update:id= msp.1296:user=admin:cmd=configure terminal ; interface Ethernet5/2 ; no channel-group auto mode on mac-pinn

ing (SUCCESS)

Thu Jan 3 17:07:34 2013:type=update:id= msp.1296:user=admin:cmd=configure terminal ; interface Ethernet5/2 ; no channel-group auto mode on mac-pinn

ing (SUCCESS)

...

This example shows how to display accounting log messages with the required year month, day, hour, minutes and seconds:

n1000v# show accounting log start-time 2013 Jan 15 02:22:30 end-time 2013 Jan 15 07:43:48

Tue Jan 15 07:43:46 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet158 ; ip flow monitor monitor2 input (SUCCESS)

Tue Jan 15 07:43:46 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet158 ; ip flow monitor monitor2 output (SUCCESS)

Tue Jan 15 07:43:46 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet158 ; switchport mode access (SUCCESS)

Tue Jan 15 07:43:46 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet158 ; switchport access vlan 263 (SUCCESS)

Tue Jan 15 07:43:46 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet158 ; no shutdown (SUCCESS)

Tue Jan 15 07:43:46 2013:type=stop:id= msp.1303:user=admin:cmd=

Tue Jan 15 07:43:46 2013:type=start:id=ppm.23757:user=admin:cmd=

Tue Jan 15 07:43:47 2013:type=stop:id=ppm.23757:user=admin:cmd=

Tue Jan 15 07:43:48 2013:type=start:id= msp.1303:user=admin:cmd=

Tue Jan 15 07:43:48 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet159 (SUCCESS)

Tue Jan 15 07:43:48 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet159 ; ip port access-group abhi-acl in (SUCCESS)

Tue Jan 15 07:43:48 2013:type=update:id= msp.1303:user=admin:cmd=configure terminal ; interface Vethernet159 ; ip port access-group abhi-acl out (SUCCESS)

Related Commands

Command

Description

Clears the accounting log.

show banner motd

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the current MOTD banner message:

n1000v# show banner motd

Nexus 1000V Switch

Related Commands

Command

Description

Configures the banner message of the day.

Sends a message to an open session.

switchname

Changes the switch prompt.

show boot

command.

Syntax Description

(Optional) Checks to see if autocopy is turned on.

(Optional) Displays the current boot variables.

(Optional) Displays the configuration of all modules.

module_key_word

(Optional) Module keyword.

(Optional) Displays the first supervisor configuration.

(Optional) Displays the second supervisor configuration.

(Optional) Displays the list of boot variables.

Defaults

None

Command Modes

Any)

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display system and kickstart boot variables for verification:

n1000v# show boot

Current Boot Variables:

sup-1

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

sup-2

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

No module boot variable set

Boot Variables on next reload:

sup-1

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

sup-2

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

No module boot variable set

This example shows how to display the first supervisor configuration:

n1000v# show boot sup-1

Current Boot Variables:

sup-1

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

Boot Variables on next reload:

sup-1

kickstart variable = bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.202.gbin

system variable = bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.202.gbin

This example shows how to display the list of boot variables:

n1000v# show boot variables

List of boot variables are:

ssi

system

asm-sfn

kickstart

Related Commands

Enables automatic copying of boot image files to the standby supervisor module.

boot kickstart bootflash:

Adds the new kickstart boot variable.

boot system bootflash:

Adds the new system boot variable.

reload

Reloads the VSM.

show version

Displays what software version is present on the VSM.

show bridge-domain

To display detailed information about bridge-domains, use the show bridge-domain summary command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example displays detailed information about bridge-domains:

n1000v# show bridge-domain

Global Configuration:

Mode: Unicast-only

MAC Distribution: Disable

.

.

.

Bridge-domain z999 (0 ports in all)

Segment ID: 7998 (Manual/Active)

Mode: Multicast (override)

MAC Distribution: Disable

Group IP: 229.1.1.1

State: UP Mac learning: Enabled

Related Commands

This command has no related commands.

show bridge-domain brief

To display brief information about the configured bridge-domains, use the show bridge-domain brief command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example displays brief information about the configured bridge-domains:

n1000v# show bridge-domain brief

Bridge-domain Segment Status Ports

-------------------------------- -------- --------- ----------------------

a 0 inactive

segment1 4096 active Veth10, Veth11, Veth12,

Veth13, Veth14, Veth15,

Veth16, Veth17, Veth18,

Veth19, Veth20, Veth21,

Veth22, Veth23, Veth24,

Veth25, Veth26, Veth27,

Veth28, Veth29, Veth70,

Veth71, Veth72, Veth73,

Veth74, Veth75, Veth76,

Veth77, Veth78, Veth79

.

.

.

z999 7998 active

Related Commands

Command

Description

Displays bridge-domain configurations.

show bridge-domain summary

To display number of bridge-domains that exist, use the show bridge-domain summary command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example displays the number of bridge-domains that exist:

n1000v# show bridge-domain summary

Number of existing bridge-domains: 3508

Related Commands

Command

Description

Displays bridge-domain configurations.

show bridge-domain vteps

To display information about all of the VTEPs that are configured on different modules for VXLAN 1.5, use the show bridge-domain vteps command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example displays information about all of the VTEPs that are configured on different modules:

n1000v# show bridge-domain vteps

D: Designated VTEP I:Forwarding Publish Incapable VTEP

Note: (*) Denotes active gateway module

Bridge-domain: segment1

VTEP Table Version: 2

Port Module VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

Veth9 3 11.1.1.2 (D)

Veth5 4 11.1.1.3 (D)

Veth8 4 11.1.1.4

Veth6 4 12.1.1.6

Veth7 4 12.1.1.5

Bridge-domain: segment3

VTEP Table Version: 1

Port Module VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

Veth9 3 11.1.1.2 (D)

Related Commands

Command

Description

Displays bridge-domain configurations.

show module vteps

Displays information about all VTEPs configured on different modules.

show cdp all

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the interfaces in the Cisco Discovery Protocol database:

n1000v# show cdp all

mgmt0 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

control0 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

Vethernet1 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

Vethernet2 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

Ethernet3/1 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays the Cisco Discovery Protocol parameters for an interface

Displays Cisco Discovery Protocol neighbors.

Displays Cisco Discovery Protocol traffic.

show cdp entry

command.

Syntax Description

Displays all of the entries in the Cisco Discovery Protocol database.

name

Specifies a Cisco Discovery Protocol entry that matches a name.

Name of an entry in the Cisco Discovery Protocol database. The name is case-sensitive, alphanumeric, and has a maximum of 256 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the entries in the Cisco Discovery Protocol database:

n1000v# show cdp entry all

----------------------------------------

Device ID:THROTTLE(0802674791369441099)

System Name: THROTTLE

Interface address(es):

IPv4 Address: 10.105.225.181

Platform: Nexus1000V, Capabilities:

Interface: mgmt0, Port ID (outgoing port): mgmt0

Holdtime: 140 sec

Version:

Cisco Nexus Operating System (NX-OS) Software, Version 5.2(1)SM1(5.1)

Advertisement Version: 2

MTU: 1500

Mgmt address(es):

IPv4 Address: 10.105.225.181

----------------------------------------

Device ID:THROTTLE(0802674791369441099)

System Name: THROTTLE

Interface address(es):

IPv4 Address: 10.105.225.181

Platform: Nexus1000V, Capabilities:

Interface: control0, Port ID (outgoing port): control0

Holdtime: 140 sec

Version:

Cisco Nexus Operating System (NX-OS) Software, Version 5.2(1)SM1(5.1)

Advertisement Version: 2

...

This example shows how to display an entry in the Cisco Discovery Protocol database that matches a name:

n1000v# show cdp entry name N5K-1-RowP-Rack7

----------------------------------------

Device ID:THROTTLE(0802674791369441099)

System Name:THROTTLE

Interface address(es):

IPv4 Address: 10.105.225.181

Platform: Nexus1000V, Capabilities: Switch IGMP Filtering

Interface: mgmt0, Port ID (outgoing port): mgmt0

Holdtime: 139 sec

Version:

Cisco Nexus Operating System (NX-OS) Software, Version 5.2(1)SM1(5.1)

Advertisement Version: 2

Mgmt address(es):

IPv4 Address: 10.105.225.181

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables Cisco Discovery Protocol on an interface. In EXEC mode, enables Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol parameters for an interface.

Displays Cisco Discovery Protocol neighbors.

Displays Cisco Discovery Protocol traffic.

show cdp global

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the Cisco Discovery Protocol global parameters:

n1000v# show cdp global

Global CDP information:

CDP enabled globally

Refresh time is 60 seconds

Hold time is 180 seconds

CDPv2 advertisements is enabled

DeviceID TLV in System-Name(Default) Format

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

cdp enable

In interface mode, enables Cisco Discovery Protocol on an interface. In EXEC mode, enables Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol parameters for an interface

Displays Cisco Discovery Protocol neighbors.

Displays Cisco Discovery Protocol traffic.

show cdp interface

command.

Syntax Description

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

mgmt

Specifies a management interface.

Management interface number. The only valid value is 0.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the control interface in the Cisco Discovery Protocol database:

n1000v# show cdp interface control 0

control0 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

This example shows how to display the Ethernet IEEE 802.3z interfaces in the Cisco Discovery Protocol database:

n1000v# show cdp interface ethernet 3/2

Ethernet3/2 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

This example shows how to display the management interface in the Cisco Discovery Protocol database:

mgmt0 is up

CDP enabled on interface

Refresh time is 60 seconds

Hold time is 180 seconds

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Configures the control interface and enter interface configuration mode.

Configures the management interface and enter interface configuration mode.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol neighbors.

Displays Cisco Discovery Protocol traffic.

show cdp neighbors

command.

Syntax DescriptionN

detail

(Optional) Displays details of Cisco Discovery Protocol neighbors.

(Optional) Displays Cisco Discovery Protocol neighbors on an interface.

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

mgmt

(Optional) Specifies a management interface.

Management interface number. The only valid value is 0.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the Cisco Discovery Protocol neighbors interface:

n1000v(config)# show cdp neighbors

Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge

S - Switch, H - Host, I - IGMP, r - Repeater,

V - VoIP-Phone, D - Remotely-Managed-Device,

s - Supports-STP-Dispute

Device ID Local Intrfce Hldtme Capability Platform Port ID

swordfish-6k-2 Eth2/2 169 R S I WS-C6503-E Gig1/14

swordfish-6k-2 Eth2/3 139 R S I WS-C6503-E Gig1/15

swordfish-6k-2 Eth2/4 135 R S I WS-C6503-E Gig1/16

swordfish-6k-2 Eth2/5 177 R S I WS-C6503-E Gig1/17

swordfish-6k-2 Eth2/6 141 R S I WS-C6503-E Gig1/18

This example shows how to display the configuration and capabilities of the upstream devices for a specific interface:

n1000v(config)# show cdp neighbors interface ethernet 2/3

Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge

S - Switch, H - Host, I - IGMP, r - Repeater,

V - VoIP-Phone, D - Remotely-Managed-Device,

s - Supports-STP-Dispute

Device ID Local Intrfce Hldtme Capability Platform Port ID

swordfish-6k-2 Eth2/3 173 R S I WS-C6503-E Gig1/15

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol parameters for an interface

Displays Cisco Discovery Protocol traffic.

show cdp traffic interface control

command.

control if_num

Syntax DescriptionN

if_num

Control interface number. The only valid value is 0.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display Cisco Discovery Protocol traffic interface control statistics:

n1000v# show cdp traffic interface control 0

----------------------------------------

Traffic statistics for control0

Input Statistics:

Total Packets: 0

Valid CDP Packets: 0

CDP v1 Packets: 0

CDP v2 Packets: 0

Invalid CDP Packets: 0

Unsupported Version: 0

Checksum Errors: 0

Malformed Packets: 0

Output Statistics:

Total Packets: 10

CDP v1 Packets: 0

CDP v2 Packets: 10

Send Errors: 0

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Configures the control interface and enter interface configuration mode.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol parameters for an interface.

Displays Cisco Discovery Protocol neighbors.

show cdp traffic interface ethernet

command.

ethernet slot/chassis_num / port/slot_num

Syntax DescriptionN

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the IEEE 802.3z interface statistics by a named slot/chassis number:

n1000v# show cdp traffic interface ethernet 3/2

----------------------------------------

Traffic statistics for Ethernet3/2

Input Statistics:

Total Packets: 14

Valid CDP Packets: 14

CDP v1 Packets: 0

CDP v2 Packets: 14

Invalid CDP Packets: 0

Unsupported Version: 0

Checksum Errors: 0

Malformed Packets: 0

Output Statistics:

Total Packets: 16

CDP v1 Packets: 0

CDP v2 Packets: 16

Send Errors: 0

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol parameters for an interface.

Displays Cisco Discovery Protocol neighbors.

show cdp traffic interface mgmt

command.

mgmt mgmt_if_num

Syntax DescriptionN

mgmt_if_num

Management interface number. The only valid value is 0.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display Cisco Discovery Protocol traffic interface management statistics:

n1000v# show cdp traffic interface mgmt 0

----------------------------------------

Traffic statistics for mgmt0

Input Statistics:

Total Packets: 0

Valid CDP Packets: 0

CDP v1 Packets: 0

CDP v2 Packets: 0

Invalid CDP Packets: 0

Unsupported Version: 0

Checksum Errors: 0

Malformed Packets: 0

Output Statistics:

Total Packets: 34

CDP v1 Packets: 0

CDP v2 Packets: 34

Send Errors: 0

Related Commands

Command

Description

Assigns the Cisco Discovery Protocol version to advertise.

cdp enable

In interface mode, enables the Cisco Discovery Protocol on an interface. In EXEC mode, enables the Cisco Discovery Protocol for your device.

Clears the Cisco Discovery Protocol information on an interface.

Configures the management interface and enter interface configuration mode.

Displays all interfaces in Cisco Discovery Protocol database.

Displays Cisco Discovery Protocol entries by name.

Displays Cisco Discovery Protocol global parameters.

Displays Cisco Discovery Protocol parameters for an interface.

Displays Cisco Discovery Protocol neighbors.

show cli alias

command.

Syntax Description

name

Displays a specific alias.

The name of the specific alias. The alias name is not case-sensitive.

Defaults

Displays all CLI aliases.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI alias configuration:

n1000v# show cli alias

n1000v#

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli dynamic

command.

Syntax Description

integers

Specifies the current range of dynamic integer parameters.

(Optional) Parameter name. The integer value name ranges from 1 to 66.

strings

Specifies the current range of dynamic string parameters.

(Optional) Parameter name. The string values are case-sensitive and alphanumeric.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display current range of dynamic CLI integers:

n1000v# show cli dynamic integers

<module> 1 to 66 <i1> 1 to 66

This example shows how to display current range of dynamic CLI strings:

n1000v# show cli dynamic strings

Token: <res-mgr-template-known-name-all>

vdc-default

global-default

Token: <res-mgr-res-known-name>

vrf

u4route-mem

u6route-mem

vlan

monitor-session

port-channel

Token: <res-mgr-res-known-name-all>

vrf

u4route-mem

u6route-mem

vlan

monitor-session

port-channel

Token: <trap_arg>

rmon

config

snmp

upgrade

sysmgr

aaa

rf

entity

feature-control

license

link

vtp

Token: <license-feature>

N1KV_MSFT_LAN_SERVIC

NEXUS_VSG_SERVICES_P

NEXUS_ASA1000V_SERVI

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli history

command.

Syntax Description

(Optional) Number of lines to display. The range is from 0 to 2147483647.

unformatted

(Optional) Displays just the commands.

config-mode

(Optional) Displays the history of configuration commands only.

exec-mode

(Optional) Displays the history of EXEC commands only.

this-mode-only

(Optional) Displays the history from current mode only.

Defaults

Displays the CLI command history.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the history of CLI commands:

n1000v# show cli history

0 01:12:51 show cli dynamic integers

1 01:13:47 show cli dynamic string

2 01:17:14 show cli dynamic integers module

3 01:17:25 show cli dynamic integers 1

4 01:22:12 show cli history

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli interface table

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI interface table:

n1000v# show cli interface table

name port-channel mask 2097152 match length 2 format 9 lib ethpcmcli

name ethernet mask 8589934592 match length 1 format 14 lib pmcli_common

name mgmt mask 128 match length 4 format 1 lib pmcli_common

name control mask 68719476736 match length 7 format 1 lib pmcli_common

name vethernet mask 4294967296 match length 2 format 1 lib vimcli

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli list

command.

Syntax Description

(Optional) Maximum number of combinations to show per command. The default is 100.

(Optional) Component to match.

detail

instead of <int:1-10>.

recurse

(Optional) Specifies going into submodes.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI command syntax:

n1000v# show cli list

MODE exec

no debug fm error

no debug fm flow

no debug aclmgr all

no debug aclmgr ha

no debug aclmgr fsm

no debug aclmgr errors

no debug aclmgr events

no debug aclmgr trace

no debug aclmgr ppf mts

no debug aclmgr ppf session

no debug aclmgr ppf session-state

no debug aclmgr ppf pss

no debug aclmgr ppf errors

no debug aclmgr ppf remote-link

no debug core error

no debug core flow

no debug aaa aaa-requests

no debug aaa all

no debug aaa conf-events

no debug aaa errors

no debug aaa events

no debug aaa mts

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli syntax

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the syntax of all commands:

n1000v# show cli syntax

(0) [no] debug fm {error | flow}

(1) [no] debug aclmgr all

(2) [no] debug aclmgr {ha | fsm | errors | events | trace}

(3) [no] debug aclmgr ppf {mts | session | session-state | pss | errors | remote-link}

(4) [no] debug core {error | flow}

(5) [no] debug aaa aaa-requests

(6) [no] debug aaa all

(7) [no] debug aaa conf-events

(8) [no] debug aaa errors

(9) [no] debug aaa events

(10) [no] debug aaa mts

(11) [no] debug license all

(12) [no] debug license errors

(13) [no] debug license events

(14) [no] debug license mts

(15) [no] debug klm rwsem {error | flow [sap <i0>]}

(16) [no] debug klm internal redundancy {error | flow}

(17) [no] debug klm internal kadb {error | flow}

(18) [no] debug system internal confcheck all

(19) [no] debug system internal confcheck error

(20) [no] debug system internal confcheck mts {pkt {both | rx [{node <i0> | opcode <i1> | sap <i2>}] | tx} | pkthdr {both | rx [numpkt <

i3>] | tx}}

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli syntax

Displays CLI commands.

show cli syntax long

command.

Syntax Description

(Optional) Displays children of the current mode.

(Optional) Displays commands for a specific role.

role-mask

(Optional) Displays commands that match the roles mask. The range is from 0x0 to 0xffffffff.

(Optional) Displays commands for the network administrator role.

(Optional) Displays commands for the network operator role.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI syntax by using more than one line per command (tree form):

n1000v# show cli syntax long

MODE exec

***(0) [no] debug fm {error

| flow}

***(1) [no] debug aclmgr all

***(2) [no] debug aclmgr {ha

| fsm

| errors

| events

| trace}

***(3) [no] debug aclmgr ppf {mts

| session

| session-state

| pss

| errors

| remote-link}

***(4) [no] debug core {error

| flow}

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli syntax recurse

command.

Syntax Description

(Optional) Displays more than 1 line per command (tree form).

(Optional) Displays commands for a specific role.

role-mask

(Optional) Commands that match the roles mask. The range is from 0x0 to 0xffffffff.

(Optional) Displays commands for the network administrator role.

(Optional) Displays commands for the network operator role.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI syntax and the children of all commands:

n1000v# show cli syntax recurse

MODE exec

(0) [no] debug fm {error | flow}

(1) [no] debug aclmgr all

(2) [no] debug aclmgr {ha | fsm | errors | events | trace}

(3) [no] debug aclmgr ppf {mts | session | session-state | pss | errors | remote-link}

(4) [no] debug core {error | flow}

(5) [no] debug aaa aaa-requests

(6) [no] debug aaa all

(7) [no] debug aaa conf-events

(8) [no] debug aaa errors

(9) [no] debug aaa events

(10) [no] debug aaa mts

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli syntax roles

command.

Syntax Description

role-mask

(Optional) Commands that match the roles mask. The range is from 0x0 to 0xffffffff.

(Optional) Displays commands for the network administrator role.

(Optional) Displays commands forthe network operator role.

Defaults

Displays the CLI syntax of all command roles.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the CLI syntax of all commands in EXEC mode:

n1000v# show cli syntax roles network-admin

MODE exec

(0) [no] debug license all

(1) [no] debug license errors

(2) [no] debug license events

(3) [no] debug license mts

(4) [no] debug module all

(5) [no] debug module error [module1 <module>]

(6) [no] debug module event

(7) [no] debug module ha

(8) [no] debug module no-heartbeat

(9) [no] debug module no-powerdown

(10) [no] debug module trace [module1 <module>]

(11) [no] debug exceptionlog {demux | deque | error | flow | info}

...

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show cli variables

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display user-defined CLI persistent variables:

n1000v# show cli variables

VSH Variable List (* = session vars)

-----------------

SWITCHNAME="nexus1000V"

TIMESTAMP="2013-02-16-02.20.43"

Related Commands

Command

Description

y

Clears the history of commands that you have entered into the CLI.

Defines a CLI variable for a terminal session.

run-script

Runs a saved shell script.

show clock

command.

Syntax Description

(Optional) Displays the current date and time configuration.

Defaults

Displays the machine time and date.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the clock:

n1000v# show clock

13:59:11.321 PST Fri Jan 04 2013

Related Commands

Command

Description

Manually sets the clock.

Configures summer-time (daylight saving time).

Configurec the time zone offset from the UTC.

show copyright

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the copyright:

n1000v# show copyright

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

Copyright (c) 2002-2013, Cisco Systems, Inc. All rights reserved.

The copyrights to certain works contained in this software are

owned by other third parties and used and distributed under

license. Certain components of this software are licensed under

the GNU General Public License (GPL) version 2.0 or the GNU

Lesser General Public License (LGPL) Version 2.1. A copy of each

such license is available at

http://www.opensource.org/licenses/gpl-2.0.php and

http://www.opensource.org/licenses/lgpl-2.1.php

Related Commands

Command

Description

Displays the software version.

show cores

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the device core dumps for the current VDC:

n1000v# show cores

Module Instance Process-name PID Date(Year-Month-Day Time)

------ -------- --------------- -------- -------------------------

Related Commands

Command

Description

Accesses the standby VSM console from the active VSM.

Clears the core files.

Displays information about the process logs.

show debug

command.

Syntax Description

(Optional) Displays the authentication, authorization, and accounting (AAA) debugging flags.

(Optional) Displays the access control list (ACL) COMP debugging flags.

(Optional) Displays the ACL log debugging flags.

(Optional) Displays the ACL log bypass flags.

(Optional) Displays the ACL manager debugging flags.

(Optional) Displays all of the ASCII-CFG debugging flags.

(Optional) Displays the boot variable debugging flags.

(Optional) Displays all of the capability debugging flags.

(Optional) Displays the Cisco Discovery Protocol debug flags.

(Optional) Displays the Cert-enroll debugging flags.

(Optional) Displays all of the configuration check debugging flags.

(Optional) Displays the core daemon debugging flags.

(Optional) Displays the Cisco security manager (CSM) debugging flags.

(Optional) Displays the debugging flags of the Dynamic Host Configuration Protocol (DHCP).

(Optional) Displays the Ethernet port manager (ETHPM) debugging flags.

(Optional) Displays the event manager client (EVMC) debugging flags.

(Optional) Displays the EVMS debugging flags.

(Optional) Displays all of the exception logger debugging flags.

(Optional) Displays the feature manager debugging flags.

(Optional) Displays the FS daemon debugging flags.

(Optional) Displays the IM debugging flags.

(Optional) Displays IP information.

(Optional) Displays the IP configuration debugging flags.

Displays the ICMP debug flags.

Displays the InterProcessor Communication (IPC) events debug flags.

Displays multicast packet debug flags.

Displays unicast packet debug flags.

Displays the routing table debug flags.

Displays Multicast Listener Discovery (MLD) debug flags.

Displays Neighbor Discovery (ND) debug flags.

(Optional) Displays the kernel ADB debugging flags.

(Optional) Displays the RWSEM driver debug elements.

(Optional) Displays the Link Aggregation Control Protocol (LACP) debugging flags.

(Optional) Displays the licensing debugging flags.

(Optional) Displays the contents of the logfile.

Log file name.

(Optional) Displays information about the Multicast 2 Routing Information Base (M2RIB).

(Optional) Displays all of the module debugging flags.

(Optional) Displays the MSP debugging flags.

(Optional) Displays the MSVSH debugging flags.

(Optional) Displays the network fault manager (NFM) debugging flags.

(Optional) Displays debugging flags of the name space manager (NSMGR).

(Optional) Displays the state of the Network Time Protocol (NTP) debug settings.

(Optional) Displays all of the platform manager debugging flags.

(Optional) Displays the PLTFM_CONFIG debugging flags.

(Optional) Displays the PLUGIN debugging flags.

(Optional) Displays the port channel debugging flags.

(Optional) Displays the port profile debugging flags.

(Optional) Displays the Remote Authentication Dial-In User Service (RADIUS) debugging flags.

(Optional) Displays the redundancy drivers debugging flags.

(Optional) Displays the RES_MGR debugging flags.

(Optional) Displays the Route Processor Module (RPM) debug flags.

(Optional) Displays the Service Abstraction Layer (SAL) debugging flags.

(Optional) Displays all of the scheduler debugging flags.

(Optional) Displays the security debugging flags.

(Optional) Displays the session manager debugging flags.

(Optional) Displays all of the Simple Network Management Protocol (SNMP) server debugging flags.

(Optional) Displays the STP debugging flags.

(Optional) Displays all of the system debugging flags.

(Optional) Displays all of the exception logger debugging flags.

(Optional) Displays all of the TTYD debugging flags.

(Optional) Displays the virtual device context (VDC) manager debugging flags.

(Optional) Displays the VEM_MGR debugging flags.

(Optional) Displays the Virtual Infrastructure Methodology (VIM) debugging flags.

(Optional) Displays all of the VLAN manager debugging flags.

(Optional) Displays the virtual machine manager (VMM) debugging flags.

(Optional) Displays the virtual modular system (VMS) debugging flags.

(Optional) Displays the VNM PA debugging flags.

(Optional) Displays the VNS_AGENT debugging flags

(Optional) Displays all of the VSH debugging flags

(Optional) Displays all of the virtual shared hardware device (VSHD) debugging flags.

(Optional) Displays the XML debugging flags.

Specifies the XML agent server.

(Optional) Displays the XML agent session.

Displays message logging facilities.

Displays the facility parameter for system log messages.

Defaults

Displays all of the debug flags.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the debug flags:

n1000v# show debug

show debug

Debug level is set to Minor(1)

REDUN_MGR Daemon:

Error debugging is on

default for new sessions logging level: 3

Related Commands

Command

Description

Clears the contents of the debug logfile.

commands to a specified file.

command output logging.

Displays the settings of the debug filter.

show debug-filter

command.

Syntax Description

all

Displays all debugs filters.

rpm

Displays Route Processor Module (RPM) debug filters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the settings of the debug filter:

n1000v# show debug-filter all

n1000v#

This example shows how to display the debug filter settings for the RPM:

n1000v# show debug-filter rpm

n1000v#

Related Commands

Command

Description

Clears the contents of the debug logfile.

commands to a specified file.

command output logging.

show default-interface log

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the default interface:

n1000v# show default-interface log

No default interface command log

Related Commands

Command

Description

Remove a configured administrative state from an interface.

show dynamic-port-profile

command.

Syntax Description

inherit

(Optional) Specifies the inherited port profile.

name

(Optional) Specifies a dynamic port profile.

network segment

(Optional) Specifies a network segment.

Network segment name. The name is a maximum of 64 characters.

Defaults

Displays information about the dynamic port profiles.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the dynamic ports:

n1000v# show dynamic-port-profile

dynamic-port-profile: dynpp_330779e2-4641-46cc-a757-5a31b1b3999f_272e538f-7f4e-45b6-a363-9fda6b1389f7

inherit port-profile: cluster-traffic

network-segment: NS_VLAN_261

dynamic-port-profile: dynpp_e06910e1-dc31-4212-8f21-4f657bed269d_ae3f98c7-a021-4124-9ab2-7a68f9955467

inherit port-profile: veth-policy

network-segment: sec-20

dynamic-port-profile: dynpp_e06910e1-dc31-4212-8f21-4f657bed269d_f3c01725-6685-4d5a-b08f-7494f744ea08

inherit port-profile: veth-policy

network-segment: NS_VLAN_262

Related Commands

Command

Description

Configures a port profile to be used with the ISCSI multipath protocol.

Adds an inherited configuration to a new port profile as a default configuration.

show encryption service stat

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the encryption service status:

n1000v# show encryption service stat

Encryption service not enabled

Master Encryption Key: not configured.

Type-6 encryption is not being used

show event manager environment

command.

Syntax Description

Environment variable name. The name is a maximum of 29 characters.

Displays information about all the configured environment variables.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about event manager environment variables:

n1000v# show event manager environment all

n1000v#

Related Commands

Command

Description

Enables and disables event logging for the VNS agent and saves or configures logging.

Creates or modifies an event manager policy, configures an environment variable, or registers/activates a script policy.

show event manager event-types

command.

Syntax Description

(Optional) Displays information about the specified event type.

(Optional) Displays information about event types on other modules.

Slot ID. The range is from 1 to 66.

(Optional) Displays information about all the configured environment variables.

Defaults

Displays information about registered EM event types.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about registered EM event types:

n1000v# show event manager event-types

Name : oir

Description : OIR event

Event Parameters : devicetype, eventtype, devicenum

Publisher : Platform Manager

Default Action : None

Name : fanabsent

Description : Fan Absent Event

Event Parameters : devicenum, time

Publisher : Platform Manager

Default Action : None

Name : fanbad

Description : Fan Bad Event

Event Parameters : devicenum, time

Publisher : Platform Manager

Default Action : None

Name : memory

Description : Memory Alerts

Event Parameters : memstate

Publisher : Platform Manager

Default Action : None

Name : temperature

Description : Temperature Sensor Event

Event Parameters : modnum, sensornum, major_minor

Publisher : Platform Manager

Default Action : Shutdown on major temperature threshold

Name : poweroverbudget

Description : Power Over Budget Event

Event Parameters :

Publisher : Platform Manager

Default Action : Syslog

...

Related Commands

Command

Description

Enables and disables event logging for the VNS agent and saves or configures logging.

Creates or modifies an EM policy, configures an environment variable, or registers/activates a script policy.

show event manager history events

command.

Syntax Description

detail

(Optional) Displays information about the event parameters as well.

maximum

(Optional) Specifies an upper limit on the number of events to be shown.

Maximum number of events to be shown. The range is from 1 to 500.

severity

(Optional) Displays those events where the severity is >= to the specified severity.

Severity level:

- catastrophic

- minor

- moderate

- severe

Defaults

Displays information about the history of EM events.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the history of EM events:

n1000v# show event manager history events

n1000v#

Related Commands

Command

Description

Enables and disables event logging for the VNS agent and saves or configures logging.

Creates or modifies an event manager policy, configures an environment variable, or registers/activates a script policy.

show event manager policy-state

command.

Syntax Description

Policy name. The name is a maximum of 29 alphanumeric, non case-sensitive characters.

(Optional) Specifies information about event types on other modules.

Slot ID. The range is from 1 to 66.

Defaults

Displays information about the state of an EM policy.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the state of an EM policy:

n1000v# show event manager policy-state __pfm_power_over_budget

Policy __pfm_power_over_budget

Related Commands

Command

Description

EM commands.

EM logging commands.

show event manager script system

command.

Syntax Description

Displays information about all the available system scripts.

System script policy name. The name is a maximum of 29 alphanumeric, non case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about all EM script policies:

n1000v# show event manager script system all

n1000v#

Related Commands

Command

Description

EM commands.

EM logging commands.

show event manager system-policy

command.

Syntax Description

(Optional) Policy name. The name is a maximum of 29 alphanumeric, non case-sensitive characters.

(Optional) Displays all policies including advanced and ones that can not be overridden.

Defaults

Displays information about the EM system policies.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about all of the EM system policies:

n1000v# show event manager system-policy all

Name : __lcm_module_failure

Description : Power-cycle 2 times then power-down

Overridable : Yes

Name : __pfm_fanabsent_any_singlefan

Description : Shutdown if any fanabsent for 5 minute(s)

Overridable : Yes

Name : __pfm_fanbad_any_singlefan

Description : Syslog when fan goes bad

Overridable : Yes

...

Related Commands

Command

Description

Creates or modifies an event manager policy, configures an environment variable, or registers/activates a script policy.

Enables and disables event logging for the VNS agent and saves or configures logging.

show feature

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the feature status:

n1000v# show feature

Feature Name Instance State

-------------------- -------- --------

Flexlink 1 disabled

bfd 1 disabled

bfd_app 1 disabled

btcm 1 disabled

dhcp 1 enabled

drap 1 disabled

fcoe-npv 1 disabled

http-server 1 enabled

ippool 1 disabled

lacp 1 enabled

ldap 1 disabled

netflow 1 enabled

network-segmentation 1 enabled

oim 1 disabled

otv 1 disabled

poe 1 disabled

privilege 1 disabled

ptp 1 disabled

scpServer 1 disabled

segmentation 1 disabled

sftpServer 1 disabled

sshServer 1 enabled

tacacs 1 disabled

telnetServer 1 enabled

vem 1 disabled

Related Commands

Command

Description

Enables the DHCP feature globally.

Enables the HTTP server.

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Enables the SSH server.

Enables the TACACS+ server.

Enables the Telnet server.

show feature-set services

command.

Syntax Description

The name of the feature set. The name is case-sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the feature set services and status:

n1000v# show feature-set services http-server

0 services in feature set http-server

Related Commands

Command

Description

Enables the DHCP feature globally.

Enables the HTTP server.

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Enables the SSH server.

Enables the TACACS+ server.

Enables the Telnet server.

show file

command.

Syntax Description

Specifies a bootflash filename.

debug:

Specifies a debug filename on expansion flash.

log:

Specifies a log filename.

modflash:

Specifies a modflash filename.

Specifies a filename on volatile flash.

Portion of the filename to be displayed. Pressing the Tab Kay lists any existing files that match the partial name.

(Optional) Displays the Cycle Redundancy Check (CRC) checksum for a file.

(Optional) Displays the Message-Digest Algorithm (MD5) checksum for a file.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When you type a partial filename and then press the Tab Key, the command-line interface (CLI) completes the filename if the characters that you typed are unique to a single file. If not, the CLI lists a selection of filenames that match the characters that you typed. You can then retype enough characters to make the filename unique, and CLI completes the filename for you.

Examples

This example shows how to display a full filename by entering a partial filename and pressing the Tab key:

n1000v# show file bootflash:n1000v-dk9 <Tab>

bootflash:n1000vh-dk9-kickstart.5.2.1.SM1.5.1.bin

bootflash:n1000vh-dk9.5.2.1.SM1.5.1.binn

Related Commands

Command

Description

Displays the contents of a directory or file.

copy

Copies a file from the specified source location to the specified destination location.

mkdir

Creates a directory at the current directory level.

rmdir

Removes a directory.

show flow cache size

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the NetFlow cache properties:

n1000v# show flow cache size

Module Cache Size Free Flows Monitors NetFlow Memory Used

------ ---------- ---------- -------- -------------------

3 65536 65536 0 9539584

4 65536 65536 0 9539584

6 65536 65536 0 9539584

show flow exporter

command.

Syntax Description

(Optional) Exporter name. The name is a maximum of 63 case-sensitive, alphanumeric characters.

Defaults

Displays information about the NetFlow Exporter configuration and statistics.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the NetFlow Exporter configuration and statistics:

n1000v# show flow exporter

Flow exporter exporter2:

Destination UDP Port 9996

Source IP Address 10.105.225.180/27

Export from Line Card

DSCP 63

Export Version 9

Exporter Statistics

Number of Flow Records Exported 0

Number of Templates Exported 0

Number of Export Packets Sent 0

Number of Export Bytes Sent 0

Number of Destination Unreachable Events 0

Number of No Buffer Events 0

Number of Packets Dropped (No Route to Host) 0

Number of Packets Dropped (other) 0

Number of Packets Dropped (LC to RP Error) 0

Number of Packets Dropped (Output Drops) 0

Time statistics were last cleared: Never

...

This example shows how to display the NetFlow Exporter configuration and statistics for flow exporter e123456789012345678901234567890123456789:

n1000v# show flow exporter e123456789012345678901234567890123456789

Flow exporter e123456789012345678901234567890123456789:

Destination UDP Port 6

Source IP Address 10.105.225.180/27

Export from Line Card

DSCP 63

Export Version 9

Exporter Statistics

Number of Flow Records Exported 0

Number of Templates Exported 0

Number of Export Packets Sent 0

Number of Export Bytes Sent 0

Number of Destination Unreachable Events 0

Number of No Buffer Events 0

Number of Packets Dropped (No Route to Host) 0

Number of Packets Dropped (other) 0

Number of Packets Dropped (LC to RP Error) 0

Number of Packets Dropped (Output Drops) 0

Time statistics were last cleared: Never

Related Commands

Command

Description

Adds a destination IP address to a NetFlow flow exporter.

Adds a destination UDP port from the NetFlow exporter to the collector.

show flow Internal

command.

internal

Defaults

Displays information about the internal NetFlow configuration details.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the internal netflow configuration and statistics:

switch(config)# show flow internal

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

event-history Show various event logs of NFM

global Display nfm global info

info Show internal data structure information

interface Interface information

lif Logical interface

mem-stats Show memory allocation statistics of NFM

pdl PDL database

template Show all the template fields

| Pipe command output to filter

Related Commands

Command

Description

Clears the statistics for a Flexible NetFlow flow exporter.

Configures the number of bytes or packets in a flow as a nonkey field and collects the number of bytes or packets seen for a Flexible NetFlow record.

Collects the TIMESTAMP SYS-UPTIME for a NetFlow flow record.

Collects TCP flags for a NetFlow flow record.

Adds a description to a flow record, flow monitor, IP address or VRF instance to a NetFlow flow exporter.

Adds a DSCP to a NetFlow flow exporter.

Enables the NetFlow.

Creates or modifies a Flexible NetFlow flow exporter defining where and how Flow Records are exported to the NetFlow collector server.

Creates a Flexible NetFlow flow monitor, modifies an existing Flexible NetFlow flow monitor, and enters Flexible NetFlow flow monitor configuration mode.

Creates a Flexible NetFlow flow record, modifies an existing Flexible NetFlow flow record, and enters Flexible NetFlow flow record configuration mode.

Enables a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding.

Defines IP matching criteria for a NetFlow flow record.

Defines IPv4 matching criteria for a NetFlow flow record.

Defines transport matching criteria for a NetFlow flow record.

Specifies a timeout period for resending NetFlow flow exporter data.

The timeout period for resending the NetFlow flow exporter interface table.

Configures a NetFlow flow record.

Adds an interface to a flow exporter designating it as the source for NetFlow flow records.

Designates a timeout period for resending NetFlow template data.

Adds a destination UDP port from the NetFlow exporter to the collector.

Designate NetFlow export version 9 in the NetFlow exporter.

show flow internal interface

command.

internal interface

Defaults

Displays information about the NetFlow internal interface configuration and statistics.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the NetFlow internal interface configuration and statistics:

switch(config)# sh flow internal interface

Note: Interface lveth3/1:

Note: ifindex type: 0x1b

Note: count: 2

Note: Monitor: m1

Note: Direction: Input

Note: Handle: 65537

Note: State: NFM_INTF_ENABLED

Note: Monitor: m1

Note: Direction: Output

Note: Handle: 65537

Note: State: NFM_INTF_ENABLED

Note: Interface lveth3/4:

Note: ifindex type: 0x1b

Note: count: 2

Note: Monitor: m2

Note: Direction: Input

Note: Handle: 64

Note: State: NFM_INTF_ENABLED

Note: Monitor: m2

Note: Direction: Output

Note: Handle: 64

Note: State: NFM_INTF_ENABLED

Related Commands

Command

Description

Clears the statistics for a Flexible NetFlow flow exporter.

Configures the number of bytes or packets in a flow as a nonkey field and collects the number of bytes or packets seen for a Flexible NetFlow record.

Collects the TIMESTAMP SYS-UPTIME for a NetFlow flow record.

Collects TCP flags for a NetFlow flow record.

Adds a description to a flow record, flow monitor, IP address or VRF instance to a NetFlow flow exporter.

Adds a DSCP to a NetFlow flow exporter.

Enables the NetFlow.

Creates or modifies a Flexible NetFlow flow exporter defining where and how Flow Records are exported to the NetFlow collector server.

Creates a Flexible NetFlow flow monitor, modifies an existing Flexible NetFlow flow monitor, and enters Flexible NetFlow flow monitor configuration mode.

Creates a Flexible NetFlow flow record, modifies an existing Flexible NetFlow flow record, and enters Flexible NetFlow flow record configuration mode.

Enables a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding.

Defines IP matching criteria for a NetFlow flow record.

Defines IPv4 matching criteria for a NetFlow flow record.

Defines transport matching criteria for a NetFlow flow record.

Specifies a timeout period for resending NetFlow flow exporter data.

The timeout period for resending the NetFlow flow exporter interface table.

Configures a NetFlow flow record.

Adds an interface to a flow exporter designating it as the source for NetFlow flow records.

Designates a timeout period for resending NetFlow template data.

Adds a destination UDP port from the NetFlow exporter to the collector.

Designate NetFlow export version 9 in the NetFlow exporter.

show flow interface

command.

Syntax Description

ethernet

/

(Optional) Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

vethernet

(Optional) Specifies a virtual Ethernet interface.

Virtual Ethernet interface number. The range is from 1 to 1048575.

Defaults

Displays information about the NetFlow interfaces.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display NetFlow interface information:

n1000v# show flow interface

Interface Vethernet19:

Monitor: monitor2

Direction: Input

Interface Vethernet20:

Monitor: monitor2

Direction: Input

Interface Vethernet21:

Monitor: monitor2

Direction: Input

Related Commands

Command

Description

command.

show running-config netflow

command.

Defaults

Displays information about the running configuration details.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the NetFlow Exporter configuration and statistics:

switch(config)# show running-config netflow

!Time: Sun Sep 28 22:49:22 2014

version 5.2(1)SK3(2.1)

feature netflow

flow exporter e1

destination 10.197.128.44 use-vrf management

transport udp 9002

source lc-exp 10.197.128.26/27

version 9

flow record r1

match ipv4 source address

match ipv4 destination address

match ip protocol

match transport source-port

match transport destination-port

collect counter bytes long

collect counter packets long

flow monitor m1

record r1

exporter e1

interface Vethernet1

ip flow monitor m1 input

ip flow monitor m1 output

...

Related Commands

Command

Description

Clears the statistics for a Flexible NetFlow flow exporter.

Configures the number of bytes or packets in a flow as a nonkey field and collects the number of bytes or packets seen for a Flexible NetFlow record.

Collects the TIMESTAMP SYS-UPTIME for a NetFlow flow record.

Collects TCP flags for a NetFlow flow record.

Adds a description to a flow record, flow monitor, IP address or VRF instance to a NetFlow flow exporter.

Adds a DSCP to a NetFlow flow exporter.

Enables the NetFlow.

Creates or modifies a Flexible NetFlow flow exporter defining where and how Flow Records are exported to the NetFlow collector server.

Creates a Flexible NetFlow flow monitor, modifies an existing Flexible NetFlow flow monitor, and enters Flexible NetFlow flow monitor configuration mode.

Creates a Flexible NetFlow flow record, modifies an existing Flexible NetFlow flow record, and enters Flexible NetFlow flow record configuration mode.

Enables a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding.

Defines IP matching criteria for a NetFlow flow record.

Defines IPv4 matching criteria for a NetFlow flow record.

Defines transport matching criteria for a NetFlow flow record.

Specifies a timeout period for resending NetFlow flow exporter data.

The timeout period for resending the NetFlow flow exporter interface table.

Configures a NetFlow flow record.

Adds an interface to a flow exporter designating it as the source for NetFlow flow records.

Designates a timeout period for resending NetFlow template data.

Adds a destination UDP port from the NetFlow exporter to the collector.

Designate NetFlow export version 9 in the NetFlow exporter.

show flow monitor

command.

Syntax Description

(Optional) Monitor name. The name is a maximum of 63 alphanumeric characters.

(Optional) Displays the cache properties.

module

Specifies a module.

Module number. The range is from 3 to 66.

statistics

(Optional) Displays monitor statistics.

Defaults

Displays information about NetFlow monitor configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the NetFlow monitor configuration:

n1000v# show flow monitor

Flow Monitor m123456789012345678901234567890123456789:

Use count: 0

Flow Record: r123456789012345678901234567890123456789

Flow Exporter: e123456789012345678901234567890123456789

Flow Monitor monitor2:

Use count: 0

Flow Record: record1

Flow Exporter: exporter2

Flow Monitor test:

Use count: 0

Flow Monitor monitor1:

Use count: 0

Flow Record: record1

Flow Exporter: exporter1

Flow Exporter: exporter2

Flow Monitor m2:

Use count: 0

Flow Record: r1

Flow Exporter: ex1

Flow Exporter: ex2

Related Commands

Command

Description

To enable a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding, use the ip flow monitor command. To disable a Flexible NetFlow flow monitor, use the no form of this command.

To add a description for the interface and save it in the running configuration, use the description command. To remove the interface description, use the no form of this comma

show flow record

command.

Syntax Description

(Optional) Flow record name. The name is a maximum of 63 alphanumeric characters.

netflow

(Optional) Displays NetFlow records.

ipv4

Displays the IPv4 collection schemes.

original-input

Displays the input NetFlow.

original-output

Displays the output NetFlow.

protocol-port

Displays the protocol and ports aggregation scheme.

netflow-original

(Optional) Displays the original NetFlow records.

Defaults

Displays information about NetFlow records.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display NetFlow record information:

n1000v# show flow record

Flow record r123456789012345678901234567890123456789:

No. of users: 1

Template ID: 257

Fields:

match ipv4 source address

match ipv4 destination address

match ip protocol

match ip tos

match transport source-port

match transport destination-port

match interface input

match interface output

match flow direction

collect transport tcp flags

collect counter bytes

collect counter packets

collect timestamp sys-uptime first

collect timestamp sys-uptime last

Flow record record1:

No. of users: 2

Template ID: 258

Fields:

match ipv4 source address

match ipv4 destination address

match ip protocol

match ip tos

...

Related Commands

Command

Description

Clears the statistics for a Flexible NetFlow flow exporter.

Configures the number of bytes or packets in a flow as a nonkey field and collect the number of bytes or packets seen for a Flexible NetFlow record.

Collects the TIMESTAMP SYS-UPTIME for a NetFlow flow record.

Collects TCP flags for a NetFlow flow record.

Defines the IP matching criteria for a NetFlow flow record.

Defines the IPv4 matching criteria for a NetFlow flow record.

Defines the transport matching criteria for a NetFlow flow record.

show flow timeout

command.

timeout

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display NetFlow flow cache timeout values:

n1000v# show flow timeout

Flow timeout values

Active timeout: 1800 seconds

Inactive timeout: 45 seconds

Fast timeout: Disabled

Session aging timeout: Disabled

Aggressive aging timeout: Disabled

Related Commands

Command

Description

Displays the flow active timeout values

Displays the flow inactive timeout values

show hostname

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the hostname:

n1000v# show hostname

n1000v

Related Commands

Command

Description

Configures the system host name.

show hosts

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about host devices:

n1000v# show hosts

DNS lookup enabled

Name/address lookup uses domain service

Name servers are 255.255.255.255

Host Address

show http-server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the HTTP server state:

n1000v# show http-server

http-server enabled

Related Commands

Command

Description

Enables the HTTP server.

show incompatibility system

command.

Syntax Description

Specifies a bootflash filename.

Specifies a filename on volatile flash.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When you type a partial filename and then press the Tab Key, the command-line interface (CLI) completes the filename if the characters that you typed are unique to a single file. If not, the CLI lists a selection of filenames that match the characters that you typed. You can then retype enough characters to make the filename unique, and CLI completes the filename for you.

Examples

This example shows how to display information about incompatible configurations:

n1000v# show incompatibility system bootflash: <Tab>

bootflash:/// bootflash://module-2/ bootflash://sup-2/ bootflash://sup-local/ bootflash://sup-standby/

bootflash://module-1/ bootflash://sup-1/ bootflash://sup-active/ bootflash://sup-remote/

Related Commands

Command

Description

Displays the contents of a directory or file.

show install all

command.

Syntax Description

Displays log from failed standby.

Displays failure reason for the last install all.

command.

Displays the boot variable name.

Displays the bootflash image Uniform Resource Identifier (URI).

Displays the boot-variable name.

Displays the File Transfer Protocol (FTP) image URI.

Displays the modflash image URI.

Displays the Secure Copy (SCP) image URI.

Displays the Secure File Transfer Protocol (SFTP) image URI.

Displays the Trivial File Transfer Protocol (TFTP) image URI.

Displays the volatile image URI.

Displays the system boot variable name.

.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the status of the current or last install all:

n1000v# show install all status

No installation has taken place since the last reboot.

Related Commands

Command

Description

Upgrades software.

show interface

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The options for this command are in the following sections.

Examples

This example shows how to display the interface configuration:

n1000v# show interface

mgmt0 is up

Hardware: Ethernet, address: 0015.5de1.85a4 (bia 0015.5de1.85a4)

Internet Address is 10.105.225.180/27

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

auto-duplex, auto-speed

Auto-Negotiation is turned on

1 minute input rate 13528 bits/sec, 8 packets/sec

1 minute output rate 176 bits/sec, 0 packets/sec

Rx

1210626 input packets 40911 unicast packets 90963 multicast packets

1078752 broadcast packets 331363572 bytes

Tx

31274 output packets 22558 unicast packets 4358 multicast packets

4358 broadcast packets 4586888 bytes

Ethernet3/2 is up

Hardware: Ethernet, address: 0025.b5aa.ab5f (bia 0025.b5aa.ab5f)

Port-Profile is DATA-Macpin

MTU 1500 bytes

Encapsulation ARPA

Port mode is trunk

full-duplex, 10 Gb/s

5 minute input rate 15200 bits/second, 10 packets/second

5 minute output rate 24 bits/second, 0 packets/second

Rx

2813862 Input Packets 0 Unicast Packets

632362 Multicast Packets 2181514 Broadcast Packets

471008300 Bytes

Tx

4221 Output Packets 0 Unicast Packets

4221 Multicast Packets 0 Broadcast Packets 0 Flood Packets

1055250 Bytes

0 Input Packet Drops 0 Output Packet Drops

.

.

.

port-channel1 is up

Hardware: Port-Channel, address: 0025.b5aa.ab4f (bia 0025.b5aa.ab4f)

MTU 1500 bytes, BW 30000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

Port mode is trunk

full-duplex, 10 Gb/s

Input flow-control is off, output flow-control is off

Switchport monitor is off

Members in this channel: Eth3/1, Eth3/2, Eth3/3

Last clearing of "show interface" counters never

300 seconds input rate 45656 bits/sec, 30 packets/sec

300 seconds output rate 72 bits/sec, 0 packets/sec

Rx

0 unicast packets 1890152 multicast packets 6550952 broadcast packets

8440897 input packets 1413635922 bytes

0 input packet drops

Tx

0 unicast packets 12658 multicast packets 0 broadcast packets

12658 output packets 3164500 bytes

0 flood packets

0 output packet drops

1 interface resets

.

.

.

Vethernet1 is up

Port description is 1000V

Hardware: Virtual, address: 0025.b5aa.ab2f (bia 0025.b5aa.ab2f)

Active on module 3

DVS port D962C7C4-DF69-4254-A07C-E67F33CF887B

Port-Profile is dynpp_4a4baaec-30e6-4686-b130-24f31acbdcb2_2c97d33c-44b5-4e93-9b2e-d96ad521bad4

Port mode is access

5 minute input rate 167704 bits/second, 32 packets/second

5 minute output rate 179960 bits/second, 46 packets/second

Rx

17964785 Input Packets 17953842 Unicast Packets

1752 Multicast Packets 11289 Broadcast Packets

53132004473 Bytes

Tx

42851796 Output Packets 42057541 Unicast Packets

160900 Multicast Packets 633355 Broadcast Packets 794256 Flood Packets

41115843155 Bytes

0 Input Packet Drops 0 Output Packet Drops

.

.

.

control0 is up

Hardware: Ethernet, address: 0015.5dad.ab25 (bia 0015.5dad.ab25)

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

auto-duplex, auto-speed

Auto-Negotiation is turned on

1 minute input rate 0 bits/sec, 0 packets/sec

1 minute output rate 0 bits/sec, 0 packets/sec

Rx

0 input packets 0 unicast packets 0 multicast packets

0 broadcast packets 0 bytes

Tx

5178 output packets 0 unicast packets 5178 multicast packets

0 broadcast packets 1325365 bytes

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface brief

command.

brief

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a short version of the interface configuration:

n1000v# show interface brief

--------------------------------------------------------------------------------

Port VRF Status IP Address Speed MTU

--------------------------------------------------------------------------------

mgmt0 -- up 10.105.225.180 -- 1500

--------------------------------------------------------------------------------

Ethernet VLAN Type Mode Status Reason Speed Port

Interface Ch #

--------------------------------------------------------------------------------

Eth3/1 1 eth trunk up none 10G 1

Eth3/2 1 eth trunk up none 10G 1

Eth3/3 1 eth trunk up none 10G 1

Eth3/5 260 eth trunk up none 10G

Eth4/1 1 eth trunk up none 10G 3

Eth4/2 1 eth trunk up none 10G 3

Eth4/3 1 eth trunk up none 10G 3

Eth4/5 260 eth trunk up none 10G

--------------------------------------------------------------------------------

Port-channel VLAN Type Mode Status Reason Speed Protocol

Interface

--------------------------------------------------------------------------------

Po1 1 eth trunk up none a-10G(D) none

Po3 1 eth trunk up none a-10G(D) none

--------------------------------------------------------------------------------

Vethernet VLAN Type Mode Status Reason MTU Module

--------------------------------------------------------------------------------

Veth1 260 virt access up none auto

Veth2 260 virt access up none auto

--------------------------------------------------------------------------------

Port VRF Status IP Address Speed MTU

--------------------------------------------------------------------------------

control0 -- up -- -- 1500

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface capabilities

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the interface capabilities:

n1000v# show interface capabilities

mgmt0

Model: --

Type: --

Speed: 10,100,1000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: no

Broadcast suppression: none

Flowcontrol: rx-(none),tx-(none)

Rate mode: none

CoS rewrite: yes

ToS rewrite: yes

UDLD: yes

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

port-channel1

Model: unavailable

Type: unknown

Speed: 10,100,1000,10000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: yes

Broadcast suppression: percentage(0-100)

Flowcontrol: rx-(off/on/desired),tx-(off/on/desired)

Rate mode: none

CoS rewrite: yes

ToS rewrite: yes

UDLD: no

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface control

command.

Syntax Description

Control interface number. The only valid value is 0.

(Optional) Displays brief interface information.

(Optional) Displays interface counters.

detailed

(Optional) Displays only non-zero counters.

all

(Optional) Displays every interface counter.

errors

(Optional) Displays interface error counters.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

(Optional) Displays interface description.

status

(Optional) Displays interface line status.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the control interface:

n1000v# show interface control 0

control0 is up

Hardware: Ethernet, address: 001d.d8b7.1ca2 (bia 001d.d8b7.1ca2)

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

auto-duplex, auto-speed

Auto-Negotiation is turned on

1 minute input rate 0 bits/sec, 0 packets/sec

1 minute output rate 0 bits/sec, 0 packets/sec

Rx

0 input packets 0 unicast packets 0 multicast packets

0 broadcast packets 0 bytes

Tx

69 output packets 0 unicast packets 69 multicast packets

0 broadcast packets 17661 bytes

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface counter

command.

Syntax Description

detailed

(Optional) Displays only non-zero counters.

all

(Optional) Displays every interface counter.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

errors

(Optional) Displays interface error counters.

module

Specifies a module.

Module number. The range is from 1 to 66.

Defaults

Displays information about the interface counters.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about interface counters:

n1000v# show interface counters detailed

mgmt0

Input Packets: 64623

Input Bytes: 13465065

Output Packets: 126442

Output Bytes: 80902866

Ethernet3/1

0. InPackets = 484561

1. InOctets = 45999918

2. InUcastPkts = 70211

3. InMcastPkts = 322151

4. InBcastPkts = 92203

5. OutPackets = 320

6. OutOctets = 82560

7. OutUcastPkts = 0

8. OutMcastPkts = 320

9. OutBcastPkts = 0

10. OutFloodPkts = 0

11. InDrops = 24894

12. OutDrops = 0

Ethernet3/2

0. InPackets = 483869

1. InOctets = 45349933

2. InUcastPkts = 70399

3. InMcastPkts = 321391

4. InBcastPkts = 92160

5. OutPackets = 320

6. OutOctets = 82560

7. OutUcastPkts = 0

8. OutMcastPkts = 320

9. OutBcastPkts = 0

10. OutFloodPkts = 0

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface description

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display interface descriptions:

n1000v# show interface description

-------------------------------------------------------------------------------

Interface Description

-------------------------------------------------------------------------------

mgmt0 --

-------------------------------------------------------------------------------

Interface Description

-------------------------------------------------------------------------------

Veth1 --

Veth2 --

Veth3 --

Veth4 --

Veth5 --

Veth6 --

Veth7 --

Veth8 --

Veth9 --

Veth10 --

Veth11 --

Veth12 --

Veth13 --

Veth14 --

Veth15 --

Veth16 --

Veth17 --

Veth18 --

Veth19 --

Veth20 --

-------------------------------------------------------------------------------

Interface Description

-------------------------------------------------------------------------------

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface ethernet

command.

Syntax Description

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Displays brief interface information.

(Optional) Displays interface capabilities information.

(Optional) Displays interface counters.

detailed

(Optional) Displays only nonzero counters.

all

(Optional) Displays all interface counters.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

errors

(Optional) Displays the interface error counters.

(Optional) Displays the interface description.

(Optional) Displays the interface MAC address.

status

(Optional) Displays the interface line status.

err-disabled

(Optional) Displays the interface error disabled state.

(Optional) Displays interface switchport information.

(Optional) Displays interface trunk information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the Ethernet IEEE 802.3z interface:

n1000v# show interface ethernet 6/1

Ethernet6/1 is up

Hardware: Ethernet, address: 001b.21b1.a6bc (bia 001b.21b1.a6bc)

Port-Profile is DATA-Macpin

MTU 1500 bytes

Encapsulation ARPA

Port mode is trunk

full-duplex, 10 Gb/s

5 minute input rate 20680 bits/second, 22 packets/second

5 minute output rate 3024 bits/second, 3 packets/second

Rx

39381 Input Packets 6039 Unicast Packets

24442 Multicast Packets 8900 Broadcast Packets

5120342 Bytes

Tx

4626 Output Packets 220 Unicast Packets

3768 Multicast Packets 639 Broadcast Packets 4386 Flood Packets

488408 Bytes

894 Input Packet Drops 0 Output Packet Drops

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface mac-address

command.

show interface mac-address

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the interface MAC addresses:

n1000v# show interface mac-address

--------------------------------------------------------------------------------

Interface Mac-Address Burn-in Mac-Address

--------------------------------------------------------------------------------

mgmt0 0015.5dad.ab26 0015.5dad.ab26

Vethernet1 0000.0000.0000 0000.0000.0000

Vethernet2 0000.0000.0000 0000.0000.0000

Vethernet3 0000.0000.0000 0000.0000.0000

Vethernet4 0000.0000.0000 0000.0000.0000

Vethernet5 0000.0000.0000 0000.0000.0000

Vethernet6 0000.0000.0000 0000.0000.0000

Vethernet7 0000.0000.0000 0000.0000.0000

Vethernet8 0000.0000.0000 0000.0000.0000

Vethernet9 0000.0000.0000 0000.0000.0000

Vethernet10 0000.0000.0000 0000.0000.0000

Vethernet11 0000.0000.0000 0000.0000.0000

Vethernet12 0000.0000.0000 0000.0000.0000

Vethernet13 0000.0000.0000 0000.0000.0000

Vethernet14 0000.0000.0000 0000.0000.0000

Vethernet15 0000.0000.0000 0000.0000.0000

Vethernet16 0000.0000.0000 0000.0000.0000

Vethernet17 0000.0000.0000 0000.0000.0000

Vethernet18 0000.0000.0000 0000.0000.0000

Vethernet19 0000.0000.0000 0000.0000.0000

Vethernet20 0000.0000.0000 0000.0000.0000

control0 0015.5dad.ab25 0015.5dad.ab25

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface mgmt

command.

Syntax Description

Management interface number. The only valid value is 0.

(Optional) Displays brief interface information.

(Optional) Displays interface capabilities information.

(Optional) Displays the interface counters.

detailed

(Optional) Displays only non-zero counters.

all

(Optional) Displays all interface counters.

errors

(Optional) Displays the interface error counters.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

(Optional) Displays the interface description.

status

(Optional) Displays the interface line status.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the management interface:

n1000v# show interface mgmt 0

mgmt0 is up

Hardware: Ethernet, address: 0015.5de1.85a4 (bia 0015.5de1.85a4)

Internet Address is 10.105.225.180/27

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

auto-duplex, auto-speed

Auto-Negotiation is turned on

1 minute input rate 14168 bits/sec, 9 packets/sec

1 minute output rate 560 bits/sec, 0 packets/sec

Rx

1212841 input packets 41020 unicast packets 91025 multicast packets

1080796 broadcast packets 331770692 bytes

Tx

31383 output packets 22659 unicast packets 4362 multicast packets

4362 broadcast packets 4617918 bytes

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface port-channel

command.

Syntax Description

Port channel number. The range is from 1 to 4096.

(Optional) Displays brief interface information.

(Optional) Displays interface capabilities information.

(Optional) Displays the interface counters.

detailed

(Optional) Displays only non-zero counters.

all

(Optional) Displays all interface counters.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

errors

(Optional) Displays the interface error counters.

(Optional) Displays interface trunk information.

(Optional) Displays the interface description.

fcoe

(Optional) Displays Fiber Channel over Ethernet (FCoE) information.

(Optional) Displays the interface MAC address.

status

(Optional) Displays the interface line status.

err-vlans

(Optional) Displays VLANs with errors.

(Optional) Displays interface switchport information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display port channel 1 interface information:

n1000v# show interface port-channel l

port-channel1 is up

Hardware: Port-Channel, address: 0025.b5aa.ab4f (bia 0025.b5aa.ab4f)

MTU 1500 bytes, BW 30000000 Kbit, DLY 10 usec

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

Port mode is trunk

full-duplex, 10 Gb/s

Input flow-control is off, output flow-control is off

Switchport monitor is off

Members in this channel: Eth3/1, Eth3/2, Eth3/3

Last clearing of "show interface" counters never

300 seconds input rate 59448 bits/sec, 54 packets/sec

300 seconds output rate 72 bits/sec, 0 packets/sec

Rx

0 unicast packets 633095 multicast packets 1446439 broadcast packets

2079474 input packets 395962426 bytes

0 input packet drops

Tx

0 unicast packets 3549 multicast packets 0 broadcast packets

3549 output packets 887250 bytes

0 flood packets

0 output packet drops

1 interface resets

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface snmp-ifindex

command.

snmp-ifindex

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the SNMP IFindex list:

n1000v# show interface snmp-ifindex

--------------------------------------------------------------------------------

Port IFMIB Ifindex (hex)

--------------------------------------------------------------------------------

mgmt0 83886080 (0x5000000 )

Veth1 469762048 (0x1c000000)

Veth2 469762064 (0x1c000010)

Veth3 469762080 (0x1c000020)

Veth4 469762096 (0x1c000030)

Veth5 469762112 (0x1c000040)

Veth6 469762128 (0x1c000050)

Veth7 469762144 (0x1c000060)

Veth8 469762160 (0x1c000070)

Veth9 469762176 (0x1c000080)

Veth10 469762192 (0x1c000090)

Veth11 469762208 (0x1c0000a0)

Veth12 469762224 (0x1c0000b0)

Veth13 469762240 (0x1c0000c0)

Veth14 469762256 (0x1c0000d0)

Veth15 469762272 (0x1c0000e0)

Veth16 469762288 (0x1c0000f0)

Veth17 469762304 (0x1c000100)

Veth18 469762320 (0x1c000110)

Veth19 469762336 (0x1c000120)

Veth20 469762352 (0x1c000130)

control0 117440512 (0x7000000 )

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface status

command.

Syntax Description

(Optional) Displays the interface down state.

(Optional) Displays the interface error disabled state.

(Optional) Displays VLANs. with errors.

(Optional) Displays the interface inactive state.

(Optional) Displays interfaces on the module.

(Optional) Displays the interface up state

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the interface up state:

n1000v# show interface status up

--------------------------------------------------------------------------------

Port Name Status Vlan Duplex Speed Type

--------------------------------------------------------------------------------

mgmt0 -- connected routed auto auto --

control0 -- connected routed auto auto --

This example shows how to display the interface down state:

n1000v# show interface status down

--------------------------------------------------------------------------------

Port Name Status Vlan Duplex Speed Type

--------------------------------------------------------------------------------

Veth1 -- nonPcpt 1 auto auto --

Veth2 -- nonPcpt 1 auto auto --

Veth3 -- nonPcpt 1 auto auto --

Veth4 -- nonPcpt 1 auto auto --

Veth5 -- nonPcpt 1 auto auto --

Veth6 -- nonPcpt 1 auto auto --

Veth7 -- nonPcpt 1 auto auto --

Veth8 -- nonPcpt 1 auto auto --

Veth9 -- nonPcpt 1 auto auto --

Veth10 -- nonPcpt 1 auto auto --

Veth11 -- nonPcpt 1 auto auto --

Veth12 -- nonPcpt 1 auto auto --

Veth13 -- nonPcpt 1 auto auto --

Veth14 -- nonPcpt 1 auto auto --

Veth15 -- nonPcpt 1 auto auto --

Veth16 -- nonPcpt 1 auto auto --

Veth17 -- nonPcpt 1 auto auto --

Veth18 -- nonPcpt 1 auto auto --

Veth19 -- nonPcpt 1 auto auto --

Veth20 -- nonPcpt 1 auto auto --

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface switchport

command.

switchport

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the interface switchport information:

n1000v# show interface switchport

Name: Vethernet1

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: access

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Allowed: 1 to 4094

Voice VLAN: none

Extended Trust State : not trusted [COS = 0]

Name: Vethernet2

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: access

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Allowed: 1 to 4094

Voice VLAN: none

Extended Trust State : not trusted [COS = 0]

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface trunk

command.

Syntax Description

(Optional) Specifies a command redirect to a Fabric Extender (FEX).

FEX ID. The range is from 100 to 199.

module

Specifies a module.

Module number. The range is from 1 to 66.

(Optional) Specifies trunk information per native VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays interface trunk information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display interface trunk information:

n1000v# show interface trunk

--------------------------------------------------------------------------------

Port Native Status Port

Vlan Channel

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Port Vlans Allowed on Trunk

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Port Vlans Err-disabled on Trunk

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Port STP Forwarding

--------------------------------------------------------------------------------

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface vem-internet

command.

Syntax Description

Displays interface attach connectee device names.

Displays VEM-related interface information.

module

(Optional) Specifies a module.

Module number. The range is from 3 to 66.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display VEM-related interface information:

n1000v# show interface vem-ethernet info

show interface vem-ethernet info

-------------------------------------------------------------------------------

Port If-index Ltl Module Hostname

-------------------------------------------------------------------------------

Eth3/2 0x25008040 18 3 NODE-135

Eth3/3 0x25008080 19 3 NODE-135

Eth4/7 0x2500c180 23 4 NODE-137

Eth5/1 0x25010000 17 5 NODE-UCS-154

Eth5/2 0x25010040 18 5 NODE-UCS-154

Eth6/1 0x25014000 17 6 NODE-UCS-157

Eth6/2 0x25014040 18 6 NODE-UCS-157

Eth7/1 0x25018000 17 7 NODE-UCS-158

Eth7/2 0x25018040 18 7 NODE-UCS-158

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface vethernet

command.

Syntax Description

Virtual Ethernet interface number. The range is from 1 to 1048575.

(Optional) Displays brief interface information.

(Optional) Displays the interface counters.

detailed

(Optional) Displays only non-zero counters.

all

(Optional) Displays all interface counters.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) Management Information Base (MIB) values.

errors

(Optional) Displays the interface error counters.

(Optional) Displays the interface description.

(Optional) Displays the interface MAC address.

status

(Optional) Displays the interface line status.

(Optional) Displays the interface error disabled state.

(Optional) Displays interface switchport information.

(Optional) Displays interface trunk information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a virtual Ethernet interface configuration:

n1000v# show interface vethernet 1

Vethernet1 is down (nonParticipating)

Hardware: Virtual, address: 0000.0000.0000 (bia 0000.0000.0000)

Inactive

Port mode is access

5 minute input rate 0 bits/second, 0 packets/second

5 minute output rate 0 bits/second, 0 packets/second

Rx

0 Input Packets 0 Unicast Packets

0 Multicast Packets 0 Broadcast Packets

0 Bytes

Tx

0 Output Packets 0 Unicast Packets

0 Multicast Packets 0 Broadcast Packets 0 Flood Packets

0 Bytes

0 Input Packet Drops 0 Output Packet Drops

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual

command.

virtual

Syntax Description

This command has no arguments or keywords

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Options for this command are presented in the sections that follow.

Examples

This example shows how to display information about all of the virtual interfaces:

n1000v# show interface virtual

-------------------------------------------------------------------------------

Port If-index Ltl Module Hostname

-------------------------------------------------------------------------------

Eth3/2 0x25008040 18 3 NODE-135

Eth3/3 0x25008080 19 3 NODE-135

Eth4/7 0x2500c180 23 4 NODE-137

Eth5/1 0x25010000 17 5 NODE-UCS-154

Eth5/2 0x25010040 18 5 NODE-UCS-154

Eth6/1 0x25014000 17 6 NODE-UCS-157

Eth6/2 0x25014040 18 6 NODE-UCS-157

Eth7/1 0x25018000 17 7 NODE-UCS-158

Eth7/2 0x25018040 18 7 NODE-UCS-158

JARVIS# show interface virtual

-------------------------------------------------------------------------------

Port Adapter Owner Mod Host

-------------------------------------------------------------------------------

Veth19 Net Adapter VM1 7 NODE-UCS-158

Veth20 Net Adapter VM1 7 NODE-UCS-158

Veth21 Net Adapter VM1 7 NODE-UCS-158

Veth34 1000V 4 NODE-137

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual attach

command.

Syntax Description

Displays attach port bindings.

detail

(Optional) Displays additional details.

module

(Optional) Specifies the interfaces on a module.

Module number. The range is from 3 to 66.

vm_name

(Optional) Specifies a virtual machine (VM) interfaces.

VM name. The name is a maximum of 80 characters.

Displays interface attach connectee information.

device

Displays attached device names.

id

Displays attached connectee identifiers.

name

Displays attached connectee names.

(Optional) Displays the interface attach status.

Displays interface attach sync information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the virtual interface attach status information:

n1000v# show interface virtual attach status

-------------------------------------------------------------------------------

Port Status Port-Profile

-------------------------------------------------------------------------------

Veth1 detached

Veth2 detached

Veth3 detached

Veth4 detached

Veth5 detached

Veth6 detached

Veth7 detached

Veth8 detached

Veth9 detached

Veth10 detached

Veth11 detached

Veth12 detached

Veth13 detached

Veth14 detached

Veth15 detached

Veth16 detached

Veth17 detached

Veth18 detached

Veth19 detached

Veth20 detached

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual description

command.

virtual description

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a virtual interface descriptions:

n1000v# show interface virtual description

-------------------------------------------------------------------------------

Interface Description

-------------------------------------------------------------------------------

Veth1 --

Veth2 --

Veth3 --

Veth4 --

Veth5 --

Veth6 --

Veth7 --

Veth8 --

Veth9 --

Veth10 --

Veth11 --

Veth12 --

Veth13 --

Veth14 --

Veth15 --

Veth16 --

Veth17 --

Veth18 --

Veth19 --

Veth20 --

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual module

command.

Syntax Description

Module number. The range is from 3 to 66.

vm_name

(Optional) Specifies a virtual machine (VM) interface.

VM name. The name is a maximum of 80 characters.

(Optional) Displays the interfaces owned by the VM kernel.

vswif

(Optional) Displays the interfaces owned by the virtual service (vService) console.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display virtual interface information for a specific module:

n1000v# show interface virtual module 5

-------------------------------------------------------------------------------

Port Adapter Owner Mod Host

-------------------------------------------------------------------------------

Veth2 Net Adapter BLUEVM-01 5 NODE-139

Veth4 Net Adapter GREENVM-01 5 NODE-139

Veth5 Net Adapter BLUEVM-01 5 NODE-139

Veth6 Net Adapter GREENVM-01 5 NODE-139

Veth8 Net Adapter GREENVM-01 5 NODE-139

Veth9 Net Adapter BLUEVM-01 5 NODE-139

Veth10 Net Adapter GREENVM-01 5 NODE-139

Veth12 Net Adapter GREENVM-01 5 NODE-139

Veth13 Net Adapter BLUEVM-01 5 NODE-139

Veth14 Net Adapter GREENVM-01 5 NODE-139

Veth16 Net Adapter GREENVM-01 5 NODE-139

Veth17 Net Adapter BLUEVM-01 5 NODE-139

Veth19 Net Adapter GREENVM-01 5 NODE-139

Veth20 Net Adapter GREENVM-02 5 NODE-139

Veth21 Net Adapter BLUEVM-01 5 NODE-139

Veth23 Net Adapter GREENVM-02 5 NODE-139

Veth24 Net Adapter BLUEVM-01 5 NODE-139

Veth25 Net Adapter GREENVM-02 5 NODE-139

Veth27 Net Adapter GREENVM-02 5 NODE-139

Veth28 Net Adapter BLUEVM-01 5 NODE-139

Veth29 Net Adapter GREENVM-02 5 NODE-139

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual pinning

command.

Syntax Description

module

(Optional) Specifies an interface on a module.

Module number. The range is from 3 to 66.

Defaults

Displays all virtual interface pinning information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display virtual interface pinning information:

n1000v# show interface virtual pinning

------------------------------------------------------

Veth Pinned Associated PO List of

Sub Group id interface Eth interface(s)

------------------------------------------------------

Veth19 1 Po5 Eth7/2

Veth20 0 Po5 Eth7/1

Veth21 1 Po5 Eth7/2

Veth34 -

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual port-mapping

command.

Syntax Description

module

(Optional) Specifies an interface on a module.

Module number. The range is from 3 to 66.

vm_name

(Optional) Specifies a virtual machine (VM) interface.

VM name. The name is a maximum of 80 characters.

(Optional) Displays the interfaces owned by the VM kernel.

vswif

(Optional) Displays the interfaces owned by the virtual service (vService) console (VSC).

Defaults

Displays the virtual port mapping for all virtual interfaces.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the virtual port mapping for all virtual interfaces:

n1000v# show interface virtual port-mapping

-------------------------------------------------------------------------------

Port Binding-Type Status Reason

Hypervisor-Port

-------------------------------------------------------------------------------

Veth1 static up none

05d2442e-4331-492c-a14e-430719805a2c--343f289a-3244-4830-8ca2-24efe1bdee4a

Veth2 static up none

98bcf40e-2a47-4b39-a968-f2f21d1aaf7d--4210be98-0739-4fd2-ac60-b7b697763efa

Veth3 static up none

05d2442e-4331-492c-a14e-430719805a2c--dc1f4f47-238a-4bbc-86e2-3a1a130325ba

Veth4 static up none

0a4f801d-920a-48c6-b691-8d79a10c774b--6b49eea0-06f8-4fad-a11b-4001da33be70

Veth5 static up none

98bcf40e-2a47-4b39-a968-f2f21d1aaf7d--96b40d64-2ae7-439e-bbf3-d7a6aea4622b

Veth6 static up none

0a4f801d-920a-48c6-b691-8d79a10c774b--16f6e52b-b56b-4cbb-9831-45519303cdd9

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual vem-info

command.

Syntax Description

module

(Optional) Specifies an interface on a module.

Module number. The range is from 3 to 66.

vm_name

(Optional) Specifies a virtual machine (VM) interfaces.

VM name. The name is a maximum of 80 characters.

Defaults

Displays all VEM information that relates to virtual interfaces.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display VEM information that relate to virtual interfaces:

n1000v# show interface virtual vem-info

-------------------------------------------------------------------------------

Port If-index Ltl Module Hostname

-------------------------------------------------------------------------------

Veth1 0x1c000000 57 6 NODE-141

Veth2 0x1c000010 121 5 NODE-139

Veth3 0x1c000020 58 6 NODE-141

Veth4 0x1c000030 81 5 NODE-139

Veth5 0x1c000040 122 5 NODE-139

Veth6 0x1c000050 82 5 NODE-139

Veth7 0x1c000060 59 6 NODE-141

Veth8 0x1c000070 83 5 NODE-139

Veth9 0x1c000080 123 5 NODE-139

Veth10 0x1c000090 84 5 NODE-139

Veth11 0x1c0000a0 60 6 NODE-141

Veth12 0x1c0000b0 85 5 NODE-139

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show interface virtual vm

command.

Syntax Description

vm_name

(Optional) VM name. The name is a maximum of 80 characters.

Defaults

Displays all virtual interfaces owned by all VMs.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about all virtual interfaces owned by all VMs:

n1000v# show interface virtual vm

-------------------------------------------------------------------------------

Port Adapter Owner Mod Host

-------------------------------------------------------------------------------

Veth1 Net Adapter REDVM-01 6 NODE-141

Veth2 Net Adapter BLUEVM-01 5 NODE-139

Veth3 Net Adapter REDVM-01 6 NODE-141

Veth4 Net Adapter GREENVM-01 5 NODE-139

Veth5 Net Adapter BLUEVM-01 5 NODE-139

Veth6 Net Adapter GREENVM-01 5 NODE-139

Veth7 Net Adapter REDVM-01 6 NODE-141

Veth8 Net Adapter GREENVM-01 5 NODE-139

Veth9 Net Adapter BLUEVM-01 5 NODE-139

Veth10 Net Adapter GREENVM-01 5 NODE-139

Veth11 Net Adapter REDVM-01 6 NODE-141

Veth12 Net Adapter GREENVM-01 5 NODE-139

Veth13 Net Adapter BLUEVM-01 5 NODE-139

Veth14 Net Adapter GREENVM-01 5 NODE-139

Veth15 Net Adapter REDVM-01 6 NODE-141

Veth16 Net Adapter GREENVM-01 5 NODE-139

Veth17 Net Adapter BLUEVM-01 5 NODE-139

Veth18 Net Adapter REDVM-01 6 NODE-141

Veth19 Net Adapter GREENVM-01 5 NODE-139

...

Related Commands

Command

Description

Sets the duplex mode for an interface as full, half, or autonegotiate.

Detects the reason that an interface is error-disabled.

Enables the automatic recovery from the error-disabled (errdisable) state for an application.

Enables the recovery timer.

Creates a port channel interface and enters interface configuration mode.

Creates a virtual Ethernet interface and enter interface configuration mode.

Disables an interface.

Sets the speed for an interface.

Configures an interface port channel subgroup assignment.

Configures subgroup IDs for Ethernet member ports of a vPC-HM.

.

Sets the access mode of an interface.

Sets the port mode of an interface.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

show inventory

command.

Syntax Description

module_num

odule number. The range is from 1 to 66.

Defaults

Displays all network inventory information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the network inventory:

n1000v# show inventory

NAME: "Chassis", DESCR: "Nexus 1000V Chassis"

PID: Nexus1000V , VID: V00 , SN: 3911703911355839484

NAME: "Slot 1", DESCR: "Virtual Supervisor Module"

PID: Nexus1000V , VID: TBD SN: T1DD8B71C00

...

This example shows how to display information about the system chassis:

NAME: "Chassis", DESCR: "Nexus 1000V Chassis"

PID: Nexus1000V , VID: V00 , SN: 9593408361359731774

This example shows how to display information about the system inventory for a specific module:

n1000v# show inventory module 1

NAME: "Slot 1", DESCR: "Virtual Supervisor Module"

PID: Nexus1000V , VID: TBD SN: T1DD8B71C00

Related Commands

Command

Description

Displays an abridged view of the network inventory.

show ip access-lists

To display the IP access control lists (ACLs), use the show ip access-lists command.

Syntax Description

list_name

(Optional) Access list name. The name is a maximum of 64 characters.

capture

(Optional) Capture a session by its ID.

session

session_id

Specifies a session.

Session ID. The range is from 1 to 48.

dynamic

(Optional) Displays dynamic ACLs.

expanded

(Optional) Displays information about expand ACL groups.

summary

(Optional) Displays summary information about ACLs.

Defaults

Displays all IP ACLs.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all IP ACLs:

n1000v# show ip access-lists

IPV4 ACL abhi-acl

10 permit ip 122.243.200.20/32 66.139.138.221/32 dscp af12

20 deny icmp 4.68.213.83/32 59.90.89.77/32 dscp cs1

30 permit icmp 72.165.25.69/32 85.135.171.135/32 echo dscp cs1

40 deny igmp 56.51.111.28/32 127.177.14.122/32 7 dscp 11

50 permit tcp 91.125.160.40/32 lt 40765 14.208.192.244/32 gt 2594 dscp 1

60 permit udp 15.104.89.102/32 eq 20343 54.182.95.236/32 lt 43125 dscp 6

70 permit ip 46.167.60.215/32 78.70.151.1/32 dscp 7

80 permit icmp 90.119.71.215/32 93.255.186.116/32 dscp 9

90 permit icmp 38.164.211.185/32 56.74.11.71/32 timestamp-request dscp af11

...

This example shows how to display an IP ACL by name:

n1000v# show ip access-lists abhi-acl

IPV4 ACL abhi-acl

10 permit ip 122.243.200.20/32 66.139.138.221/32 dscp af12

20 deny icmp 4.68.213.83/32 59.90.89.77/32 dscp cs1

30 permit icmp 72.165.25.69/32 85.135.171.135/32 echo dscp cs1

40 deny igmp 56.51.111.28/32 127.177.14.122/32 7 dscp 11

50 permit tcp 91.125.160.40/32 lt 40765 14.208.192.244/32 gt 2594 dscp 1

60 permit udp 15.104.89.102/32 eq 20343 54.182.95.236/32 lt 43125 dscp 6

70 permit ip 46.167.60.215/32 78.70.151.1/32 dscp 7

80 permit icmp 90.119.71.215/32 93.255.186.116/32 dscp 9

90 permit icmp 38.164.211.185/32 56.74.11.71/32 timestamp-request dscp af11

100 deny igmp 58.63.101.184/32 0.179.173.154/32 0 dscp 3

110 permit tcp 92.217.203.237/32 gt 21295 65.214.100.184/32 eq 13033 dscp 4

120 permit udp 12.229.14.211/32 lt 57734 88.115.243.129/32 gt 50221 dscp 5

130 deny ip 111.63.192.108/32 104.76.118.97/32 dscp af13

140 permit 13 125.190.31.44/32 111.228.220.8/32 dscp default

This example shows how to display a summary of IP ACLs:

n1000v# show ip access-lists summary

IPV4 ACL abhi-acl

Total ACEs Configured:110

Configured on interfaces:

Active on interfaces:

IPV4 ACL abhi-acl-2807

Total ACEs Configured:109

Configured on interfaces:

Active on interfaces:

...

Related Commands

Command

Description

Clear the counters for IP and MAC ACLs.

Creates an IPv4 ACL rule that denies traffic matching its conditions.

Creates an ACL.

Creates an access group.

Creates an IPv4 ACL rule that permits traffic matching its conditions.

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays an IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays an IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip show ip igmp snooping

To display the Internet Group Management Protocol (IGMP) snooping status and configuration information, use the show ip igmp snooping command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP snooping statistics:

n1000v# show ip igmp snooping

Global IGMP Snooping Information:

IGMP Snooping enabled

Optimised Multicast Flood (OMF) enabled

IGMPv1/v2 Report Suppression disabled

IGMPv3 Report Suppression disabled

Link Local Groups Suppression enabled

VPC Multicast optimization disabled

IGMP Snooping information for vlan 1

IGMP snooping enabled

Optimised Multicast Flood (OMF) enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression disabled

IGMPv3 Report suppression disabled

Link Local Groups suppression enabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

VLAN vPC function disabled

Active ports:

...

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping event-history

To display various event logs of Internet Group Management Protocol (IGMP) snooping, use the show ip igmp snooping event-history command.

Syntax Description

Displays the Routing Information Base (RIB) event history.

Displays the virtual port channel operations event history.

Displays the internal IGMP event history buffers.

Displays the event-history buffer of the type Multicast Forwarding Information Base (MFIB) distribution sum.

Displays the MFIB distribution

Displays the state and size of the event history buffers.

Displays the VLAN event history buffer.

Displays the history buffer of the VLAN events.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP the RIB event history:

n1000v# show ip igmp snooping event-history rib

RIB Events for IGMP Snoop process

2013 Feb 8 11:23:11.898387 igmp [2626]: [2736]: M2RIB: Processing ack: reclaiming buffer 0x0x8282d6c, xid 0x5, count 1

2013 Feb 8 11:23:11.898384 igmp [2626]: [2736]: M2RIB: Received ack for proto-recv-op, xid 0x5

2013 Feb 8 11:23:11.896409 igmp [2626]: [2736]: M2RIB: Processing ack: reclaiming buffer 0x0x8270134, xid 0x4, count 1

2013 Feb 8 11:23:11.896406 igmp [2626]: [2736]: M2RIB: Received ack for proto-recv-op, xid 0x4

2013 Feb 8 11:23:11.891937 igmp [2626]: [2648]: M2RIB: Sent OMF-op, buffer 0x0x8282d6c, xid 0x5, count 1

2013 Feb 8 11:23:11.891910 igmp [2626]: [2648]: M2RIB: Sent proto-recv-op, buffer 0x0x8270134, xid 0x4, count 1,size:0x8282d4c-0x827014c

2013 Feb 8 11:23:11.891870 igmp [2626]: [2648]: M2RIB: Moving RIB txlist member marker to version 2

2013 Feb 8 11:23:11.891857 igmp [2626]: [2648]: M2RIB: Syncing router-ports, snoop-state, OMF-state for vlan 173

2013 Feb 8 11:23:11.891850 igmp [2626]: [2648]: M2RIB: Adding vlan OMF-op enable for vlan 173 to buffer

2013 Feb 8 11:23:11.891847 igmp [2626]: [2648]: M2RIB: Adding vlan proto-recv enable for vlan 173 to buffer, lkup-mode:ip

2013 Feb 8 11:23:11.891833 igmp [2626]: [2648]: M2RIB: Vlan 173 OMF state changed, triggering update

2013 Feb 8 11:23:11.891830 igmp [2626]: [2648]: M2RIB: Vlan 173 state changed, triggering update

2013 Feb 8 11:23:11.891827 igmp [2626]: [2648]: M2RIB: Processing vlan-update for vlan 173 from txlist

2013 Feb 8 11:23:11.891821 igmp [2626]: [2648]: M2RIB: Obtained OMF-buffer 0x0x8282d6c

...

This example shows how to display the internal IGMP event-history buffers:

n1000v# show ip igmp snooping event-history igmp-snoop-internal

igmp-snoop-internal Events for IGMP Snoop process

2013 Feb 8 11:23:11.891232 igmp [2626]: [2736]: Created igmp snooping vdb for <vlan 173> on vlan-create notification (state ACTIVE)

2013 Feb 8 11:23:11.889610 igmp [2626]: [2736]: Sent IGMP snooping status notification message

2013 Feb 8 11:23:11.889597 igmp [2626]: [2736]: IGMP snooping is globally enabled

2013 Feb 8 11:23:11.889589 igmp [2626]: [2736]: Sending IGMP snooping status to registry

2013 Feb 8 11:23:11.889472 igmp [2626]: [2736]: Received vlan create notification for <vlan 173>, (type 1)

2013 Feb 8 11:23:11.889464 igmp [2626]: [2736]: Parsed vlan mgr message, num_records 1

2013 Feb 8 11:13:47.556270 igmp [2626]: [2736]: Sending request to CLI-server for if:sup-eth3 config

2013 Feb 8 11:13:47.555602 igmp [2626]: [2736]: Sending request to CLI-server for if:sup-eth2 config

2013 Feb 8 11:13:47.554804 igmp [2626]: [2736]: Sending request to CLI-server for if:sup-eth1 config

2013 Feb 8 11:13:47.553993 igmp [2626]: [2736]: Sending request to CLI-server for if:control0 config

2013 Feb 8 11:13:47.552798 igmp [2626]: [2736]: Sending request to CLI-server for if:mgmt0 config

2013 Feb 8 11:13:47.552274 igmp [2626]: [2736]: Ignoring vlan create notification for reserved vlan <vlan 4040>, (type 6)

2013 Feb 8 11:13:47.552270 igmp [2626]: [2736]: Parsed vlan mgr message, num_records 1

2013 Feb 8 11:13:47.547170 igmp [2626]: [2736]: Created igmp snooping vdb for <vlan 1> on vlan-create notification (state ACTIVE)

2013 Feb 8 11:13:47.546057 igmp [2626]: [2736]: Sent IGMP snooping status notification message

2013 Feb 8 11:13:47.546040 igmp [2626]: [2736]: IGMP snooping is globally enabled

2013 Feb 8 11:13:47.546002 igmp [2626]: [2736]: Sending IGMP snooping status to registry

2013 Feb 8 11:13:47.545667 igmp [2626]: [2736]: Received vlan create notification for <vlan 1>, (type 1)

2013 Feb 8 11:13:47.545657 igmp [2626]: [2736]: Obtained 81 reserved vlans from vlan-mgr

2013 Feb 8 11:13:47.545645 igmp [2626]: [2736]: Reserved vlan 4094

2013 Feb 8 11:13:47.545644 igmp [2626]: [2736]: Reserved vlan 4047

...

This example shows how to display the state and size of the event-history buffers:

n1000v# show ip igmp snooping event-history statistics

Buffer name State Size

vlan Enabled large

vlan-events Enabled large

igmp-snoop-internal Enabled large

mfdm Enabled large

mfdm-sum Enabled large

VPC Enabled large

RIB Enabled large

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping explicit-tracking

To display the explicit-tracking database for the Internet Group Management Protocol (IGMP), use the show ip igmp snooping explicit-tracking command.

Syntax Description

(Optional) Specifies the VLAN explicit tracking database.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays the entire IGMP explicit-tracking database.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP snooping information for the explicit tracking database:

IGMPv3 Snooping Explicit-tracking information

Vlan Source/Group

Intf Reporter Uptime Last-Join Expires

This example shows how to display IGMP snooping information for VLAN 59 when the explicit tracking database is enabled:

n1000v# (config-vlan-config)# vlan configuration 59

n1000v# (config-vlan-config)# ip igmp snooping explicit-tracking

n1000v# (config-vlan-config)# show ip igmp snooping vlan 59

IGMP Snooping information for vlan 59

IGMP snooping disabled

Optimised Multicast Flood (OMF) disabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled (initializing, time-left: 00:04:17)

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression disabled

IGMPv3 Report suppression disabled

Link Local Groups suppression enabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

VLAN vPC function disabled

Active ports:

Po1

This example shows how to display IGMP snooping information for VLAN 59 when the explicit tracking database is disabled:

n1000v# vlan configuration 59

n1000v#(config-vlan-config)# no ip igmp snooping explicit-tracking

n1000v#(config-vlan-config)# show ip igmp snooping vlan 59

IGMP Snooping information for vlan 59

IGMP snooping disabled

Optimised Multicast Flood (OMF) disabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression disabled

IGMPv3 Report suppression disabled

Link Local Groups suppression enabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

VLAN vPC function disabled

Active ports:

Po1

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping groups

To display the Internet Group Management Protocol (IGMP) snooping information for a group address, use the show ip igmp snooping groups command.

Syntax Description

(Optional) Multicast IP address of single group in the format A.B.C.D.

(Optional) Source IP address in the format A.B.C.D.

(Optional) Displays detailed information for the group.

(Optional) Displays snooping group summary.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays IGMP snooping information for all group addresses.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP snooping information for a group address:

n1000v# show ip igmp snooping groups

Type: S - Static, D - Dynamic, R - Router port

Vlan Group Address Ver Type Port list

This example shows how to display IGMP snooping information for a multicast address with a source address:

n1000v# show ip igmp snooping groups 224.1.1.1 209.165.202.130

Type: S - Static, D - Dynamic, R - Router port

Vlan Group Address Ver Type Port list

This example shows how to display IGMP snooping information for a source address with a multicast address:

n1000v# show ip igmp snooping groups 209.165.202.130 224.0.1.0

Type: S - Static, D - Dynamic, R - Router port

Vlan Group Address Ver Type Port list

This example shows how to display the VLAN explicit tracking database:

n1000v# show ip igmp snooping groups vlan 2

Type: S - Static, D - Dynamic, R - Router port

Vlan Group Address Ver Type Port list

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping lookup-mode

To display information about the IP Internet Group Management Protocol (IGMP) lookup mode, use the show ip igmp snooping lookup-mode command.

Syntax Description

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays all of the information about the IP IGMP lookup mode.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the IP IGMP lookup mode:

n1000v# show ip igmp snooping lookup-mode

Global lookup-mode:

configured : IP

operational: IP

VLAN lookup-mode

1 IP

10 IP

20 IP

30 IP

40 IP

50 IP

60 IP

77 IP

80 IP

200 IP

201 IP

202 IP

...

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping mac-oif

To display information about the IP Internet Group Management Protocol (IGMP) snooping, static MAC outgoing interface (OIF), use the show ip igmp snooping mac-oif command.

Syntax Description

(Optional) Displays detailed information for the group.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays summary information about the IP IGMP snooping, static MAC OIF.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the IP IGMP snooping, static MAC OIF:

n1000v# show ip igmp snooping mac-oif

Total Mac OIF: 0

VLAN Count MAC-ADDR OIFs

1 0

173 0

This example shows how to display detailed information about the IP IGMP snooping, static MAC OIF for a specific VLAN:

n1000v# show ip igmp snooping mac-oif vlan 173 detail

VLAN Count MAC-ADDR OIFs

173 0

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping mrouter

To display information about the detected IP Internet Group Management Protocol (IGMP) multicast routers, use the show ip igmp snooping mrouter command.

Syntax Description

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays all information about the detected IP IGMP multicast routers.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the detected IGMP multicast routers:

n1000v# show ip igmp snooping mrouter

Type: S - Static, D - Dynamic, V - vPC Peer Link

I - Internal, C - Co-learned, U - User Configured

Vlan Router-port Type Uptime Expires

This example shows how to display the IGMP multicast routers detected for a specific VLAN:

n1000v# show ip igmp snooping mrouter vlan 173

Type: S - Static, D - Dynamic, V - vPC Peer Link

I - Internal, C - Co-learned, U - User Configured

Vlan Router-port Type Uptime Expires

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping querier

To display information about the IP Internet Group Management Protocol (IGMP) snooping querier, use the show ip igmp snooping querier command.

Syntax Description

(Optional) Displays detailed information for the group.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays all information about the IP IGMP snooping querier.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP snooping querier information:

n1000v# show ip igmp snooping querier

Vlan IP Address Version Expires Port

This example shows how to display IGMP snooping querier information:

n1000v# show ip igmp snooping querier detail

Vlan IP Address Version Expires Port

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping statistics

To display Internet Group Management Protocol (IGMP) snooping packet/error counter statistics, use the show ip igmp snooping statistics command.

Syntax Description

(Optional) Displays global statistics.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays all of the IGMP snooping packet/error counter statistics.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP packet/error counter statistics:

n1000v# show ip igmp snooping statistics

Global IGMP snooping statistics: (only non-zero values displayed)

Native mct reports drop: 0

IGMP pkt rcvd without if_create: 0

MVR mapped in access : 0

MVR groups_cleared from access: 0

VLAN 1 IGMP snooping statistics, last reset: never (only non-zero values displayed)

vPC Peer Link CFS packet statistics:

VLAN 173 IGMP snooping statistics, last reset: never (only non-zero values displayed)

vPC Peer Link CFS packet statistics:

This example shows how to display IGMP packet/error counter statistics for a specific VLAN:

n1000v# show ip igmp snooping statistics vlan 173

Global IGMP snooping statistics: (only non-zero values displayed)

Native mct reports drop: 0

IGMP pkt rcvd without if_create: 0

MVR mapped in access : 0

MVR groups_cleared from access: 0

VLAN 173 IGMP snooping statistics, last reset: never (only non-zero values displayed)

vPC Peer Link CFS packet statistics:

Related Commands

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip igmp snooping vlan

To display VLAN Internet Group Management Protocol (IGMP) snooping membership information, use the show ip igmp snooping vlan command.

Syntax Description

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IGMP VLAN snooping information:

n1000v# show ip igmp snooping vlan 59

IGMP Snooping information for vlan 59

IGMP snooping disabled

Optimised Multicast Flood (OMF) disabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled (initializing, time-left: 00:04:14)

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression disabled

IGMPv3 Report suppression disabled

Link Local Groups suppression enabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

VLAN vPC function disabled

Active ports:

Po1

Related CommandsIGMP Snooping information for vlan 59

Related Commands IGMP snooping disabled

Related Commands Optimised Multicast Flood (OMF) disabled

Related Commands IGMP querier none

Related Commands Switch-querier disabled

Related Commands IGMPv3 Explicit tracking enabled (initializing, time-left: 00:04:14)

Related Commands IGMPv2 Fast leave disabled

Related Commands IGMPv1/v2 Report suppression disabled

Related Commands IGMPv3 Report suppression disabled

Related Commands Link Local Groups suppression enabled

Related Commands Router port detection using PIM Hellos, IGMP Queries

Related Commands Number of router-ports: 0

Related Commands Number of groups: 0

Related Commands VLAN vPC function disabled

Related Commands Active ports:

Related Commands Po1

Command

Description

Clears the IGMP statistics for an interface.

Clears the IGMP snooping statistics for VLANs.

Enables IGMP snooping.

show ip access-lists

Displays the IP ACLs.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface

To display information about the IP interface status, use the show ip interface command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the IP interface status:

n1000v# show ip interface

IP Interface Status for VRF "default"

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface A.B.C.D

To display information about a specific IP-related interface, use the show ip interface command.

Syntax Description

IPv4 address in the format A.B.C.D.

operational

(Optional) Displays administratively enabled interfaces.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about al IP interface per VRF instance:

n1000v# show ip interface vrf all

IP Interface Status for VRF "default"

IP Interface Status for VRF "management"

mgmt0, Interface status: protocol-up/link-up/admin-up, iod: 2,

IP address: 10.105.225.180, IP subnet: 10.105.225.160/27

IP broadcast address: 255.255.255.255

IP multicast groups locally joined: none

IP MTU: 1500 bytes (using link MTU)

IP primary address route-preference: 0, tag: 0

IP multicast routing: disabled

IP icmp redirects: enabled

IP directed-broadcast: disabled

IP icmp unreachables (except port): disabled

IP icmp port-unreachable: enabled

IP unicast reverse path forwarding: none

IP load sharing: none

IP interface statistics last reset: never

IP interface software stats: (sent/received/forwarded/originated/consumed)

Unicast packets : 22713/28081/13328/20697/11312

Unicast bytes : 3356973/2798523/1917483/2072962/633472

Multicast packets : 0/14820/0/0/0

Multicast bytes : 0/849808/0/0/0

Broadcast packets : 0/28628/0/0/0

Broadcast bytes : 0/3537430/0/0/0

Labeled packets : 0/0/0/0/0

Labeled bytes : 0/0/0/0/0

WCCP Redirect outbound: disabled

WCCP Redirect inbound: disabled

WCCP Redirect exclude: disabled

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface brief

To display a brief summary of the status and configuration of the IP interfaces, use the show ip interface brief command.

Syntax Description

include-secondary

(Optional) Displays a summary of all IP addresses.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

operational

(Optional) Displays administratively enabled interfaces.

Defaults

Displays a brief summary of the status and configuration of the IP interfaces.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a brief summary of the status and configuration of IP interfaces:

n1000v# show ip interface brief operational vrf all

IP Interface Status for VRF "default"(1)

Interface IP Address Interface Status

IP Interface Status for VRF "management"(2)

Interface IP Address Interface Status

mgmt0 10.105.225.180 protocol-up/link-up/admin-up

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface control

To display IP-related information for a control interface, use the show ip interface control command.

Syntax Description

Control interface number. The only valid value is 0.

operational

(Optional) Displays administratively enabled interfaces.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP-related information for a control interface:

n1000v# show ip interface control 0

IP is disabled on control0

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface mgmt

To display IP-related information for management interfaces, use the show ip interface mgmt command.

Syntax Description

Management interface number. The only valid value is 0.

operational

(Optional) Displays administratively enabled interfaces.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP-related information for a management interface:

n1000v# show ip interface mgmt 0

IP Interface Status for VRF "management"(2)

mgmt0, Interface status: protocol-up/link-up/admin-up, iod: 2,

IP address: 10.105.225.180, IP subnet: 10.105.225.160/27

IP broadcast address: 255.255.255.255

IP multicast groups locally joined: none

IP MTU: 1500 bytes (using link MTU)

IP primary address route-preference: 0, tag: 0

IP multicast routing: disabled

IP icmp redirects: enabled

IP directed-broadcast: disabled

IP icmp unreachables (except port): disabled

IP icmp port-unreachable: enabled

IP unicast reverse path forwarding: none

IP load sharing: none

IP interface statistics last reset: never

IP interface software stats: (sent/received/forwarded/originated/consumed)

Unicast packets : 22744/28107/13328/20728/11312

Unicast bytes : 3361843/2800071/1917483/2077832/633472

Multicast packets : 0/14828/0/0/0

Multicast bytes : 0/850208/0/0/0

Broadcast packets : 0/28646/0/0/0

Broadcast bytes : 0/3538834/0/0/0

Labeled packets : 0/0/0/0/0

Labeled bytes : 0/0/0/0/0

WCCP Redirect outbound: disabled

WCCP Redirect inbound: disabled

WCCP Redirect exclude: disabled

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface operational

To display information about administratively enabled IP interfaces, use the show ip interface operational command.

Syntax Description

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays information about all administratively enabled IP interfaces.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about administratively enabled IP interfaces per-VRF instance:

n1000v# show ip interface operational vrf all

IP Interface Status for VRF "default"

IP Interface Status for VRF "management"

mgmt0, Interface status: protocol-up/link-up/admin-up, iod: 2,

IP address: 10.105.225.180, IP subnet: 10.105.225.160/27

IP broadcast address: 255.255.255.255

IP multicast groups locally joined: none

IP MTU: 1500 bytes (using link MTU)

IP primary address route-preference: 0, tag: 0

IP multicast routing: disabled

IP icmp redirects: enabled

IP directed-broadcast: disabled

IP icmp unreachables (except port): disabled

IP icmp port-unreachable: enabled

IP unicast reverse path forwarding: none

IP load sharing: none

IP interface statistics last reset: never

IP interface software stats: (sent/received/forwarded/originated/consumed)

Unicast packets : 22756/28118/13328/20740/11312

Unicast bytes : 3364307/2800761/1917483/2080296/633472

Multicast packets : 0/14828/0/0/0

Multicast bytes : 0/850208/0/0/0

Broadcast packets : 0/28646/0/0/0

Broadcast bytes : 0/3538834/0/0/0

Labeled packets : 0/0/0/0/0

Labeled bytes : 0/0/0/0/0

WCCP Redirect outbound: disabled

WCCP Redirect inbound: disabled

WCCP Redirect exclude: disabled

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip interface vrf

command.

Syntax Description

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP-related interface information as per-VRF instance:

n1000v# show ip interface vrf all

IP Interface Status for VRF "default"

IP Interface Status for VRF "management"

mgmt0, Interface status: protocol-up/link-up/admin-up, iod: 2,

IP address: 10.105.225.180, IP subnet: 10.105.225.160/27

IP broadcast address: 255.255.255.255

IP multicast groups locally joined: none

IP MTU: 1500 bytes (using link MTU)

IP primary address route-preference: 0, tag: 0

IP multicast routing: disabled

IP icmp redirects: enabled

IP directed-broadcast: disabled

IP icmp unreachables (except port): disabled

IP icmp port-unreachable: enabled

IP unicast reverse path forwarding: none

IP load sharing: none

IP interface statistics last reset: never

IP interface software stats: (sent/received/forwarded/originated/consumed)

Unicast packets : 22775/28145/13328/20759/11312

Unicast bytes : 3367793/2802627/1917483/2083782/633472

Multicast packets : 0/14828/0/0/0

Multicast bytes : 0/850208/0/0/0

Broadcast packets : 0/28646/0/0/0

Broadcast bytes : 0/3538834/0/0/0

Labeled packets : 0/0/0/0/0

Labeled bytes : 0/0/0/0/0

WCCP Redirect outbound: disabled

WCCP Redirect inbound: disabled

WCCP Redirect exclude: disabled

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip logging

To display IP logging information, use the show ip logging command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP logging information:

n1000v# show ip logging

n1000v#

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip process

To display IP global information, use the show ip process command.

Syntax Description

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays IP global information.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP process information for VRF:

n1000v# show ip process vrf all

VRF default

VRF id is 1

Base table id is 1

Auto discard is disabled

Auto discard is not added

Auto Null broadcast is configured

Auto Punt broadcast is configured

Static discard is not configured

Number of static default route configured is 0

Number of ip unreachable configured is 0

Iodlist:

Local address list:

VRF management

VRF id is 2

Base table id is 2

Auto discard is disabled

Auto discard is not added

Auto Null broadcast is not configured

Auto Punt broadcast is not configured

Static discard is not configured

Number of static default route configured is 1

Number of ip unreachable configured is 0

Iodlist: 2

Local address list: 10.105.225.180

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip route

Displays the IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route

To display IP routing information, use the show ip route command.

Syntax Description

This commands has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the IP routing table:

n1000v# show ip route

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route A.B.C.D

command.

Syntax Description

(Optional) Displays routes that the adjacency manager owns.

(Optional) Displays connected routes that broadcast owns.

detail

(Optional) Displays IP routes in full detail.

(Optional) Displays connected routes that direct owns.

interface

(Optional) Specifies only the routes with this output interface.

Further branches are:

- control Specifies the control interface.

- ethernet Specifies an Ethernet IEEE 802.3z interface.

- port-channel Specifies a port channel interface.

- vethernet Specifies a virtual Ethernet interface.

(Optional) Displays connected routes that local owns.

(Optional) Displays routes that mstatic owns.

(Optional) Displays routes that NetFlow owns.

(Optional) Displays routes with this next hop only.

(Optional) Displays connected routes that the Service Abstraction Layer (SAL) owns.

(Optional) Displays routes that static owns.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays a single IP route, longest match lookup.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

and then to enter the command:

n1000v# show ip route 10.105.225.180 ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

all Display routes for protocol for backup next-hops too

detail Display routes in full detail

interface Display routes with this output interface only

next-hop Display routes with this next-hop only

summary Display route counts

updated Display routes filtered by last updated time

vrf Display per-VRF information

| Pipe command output to filter

This example shows how to display the IP routes that the adjacency manager owns:

n1000v# show ip route 10.105.225.180 am

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

Route not found

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route A.B.C.D/LEN

command.

Syntax Description

(Optional) Displays routes that the adjacency manager owns.

(Optional) Displays connected routes that broadcast owns.

detail

(Optional) Displays IP routes in full detail.

(Optional) Displays connected routes that direct owns.

interface

(Optional) Specifies the routes with this output interface.

Further branches are:

- control Specifies the control interface.

- ethernet Specifies an Ethernet IEEE 802.3z interface.

- port-channel Specifies a port channel interface.

- vethernet Specifies a virtual Ethernet interface.

(Optional) Displays connected routes that local owns.

(Optional) Displays routes that mstatic owns.

(Optional) Displays routes that NetFlow owns.

(Optional) Displays routes with this next hop only.

(Optional) Displays connected routes that the Service Abstraction Layer (SAL) owns.

(Optional) Displays routes that static owns.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays a single exact match IP route.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

:

n1000v# show ip route 209.165.200.224/8 updated ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

am Display routes owned by adjacency manager

broadcast Display connected routes owned by broadcast

detail Display routes in full detail

direct Display connected routes owned by direct

interface Display routes with this output interface only

local Display connected routes owned by local

mstatic Display routes owned by mstatic

netflow Display routes owned by netflow

next-hop Display routes with this next-hop only

sal Display connected routes owned by sal

since Display those routes updated since this time

static Display routes owned by static

summary Display route counts

until Display those routes updated until this time

vrf Display per-VRF information

| Pipe command output to filter

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route am

To display IP routes that the adjacency manager owns, use the show ip route am command.

Syntax Description

(Optional) Displays routes for backup next hops.

detail

(Optional) Displays IP routes in full detail.

(Optional) Displays connected routes that direct owns.

interface

(Optional) Specifies the routes with this output interface.

Further branches are:

- control Specifies the control interface.

- ethernet Specifies an Ethernet IEEE 802.3z interface.

- port-channel Specifies a port channel interface.

- vethernet Specifies a virtual Ethernet interface.

(Optional) Displays routes with this next hop only.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Display all of the IP routes that the adjacency manager owns.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

:

keywords:

n1000v# show ip route am updated ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

detail Display routes in full detail

interface Display routes with this output interface only

next-hop Display routes with this next-hop only

since Display those routes updated since this time

summary Display route counts

until Display those routes updated until this time

vrf Display per-VRF information

| Pipe command output to filter

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route broadcast

To display IP routes that broadcast owns, use the show ip route broadcast command.

Syntax Description

(Optional) Displays routes for backup next hops.

detail

(Optional) Displays IP routes in full detail.

(Optional) Displays connected routes that direct owns.

interface

(Optional) Specifies the routes with this output interface.

Further branches are:

- control Specifies the control interface.

- ethernet Specifies an Ethernet IEEE 802.3z interface.

- port-channel Specifies a port channel interface.

- vethernet Specifies a virtual Ethernet interface.

(Optional) Displays routes with this next hop only.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays all IP routes that broadcast owns.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

n1000v# show ip route broadcast summary ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

vrf Display per-VRF information

| Pipe command output to filter

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route detail

command.

Syntax Description

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays detailed information about IP routes.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about IP routes:

n1000v# show ip route detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 00:01:41, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 00:01:41, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 00:01:16, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route direct

To display IP connected routes that direct owns, use the show ip route direct command.

Syntax Description

(Optional) Displays routes for backup next hops.

detail

(Optional) Displays IP routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

Further branches are:

- control Specifies the control interface.

- ethernet Specifies an Ethernet IEEE 802.3z interface.

- port-channel Specifies a port channel interface.

- vethernet Specifies a virtual Ethernet interface.

(Optional) Displays routes with this next hop only.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays all IP connected routes that direct owns.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

n1000v# show ip route direct updated ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

detail Display routes in full detail

interface Display routes with this output interface only

next-hop Display routes with this next-hop only

since Display those routes updated since this time

summary Display route counts

until Display those routes updated until this time

vrf Display per-VRF information

| Pipe command output to filter

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route ip

command.

Syntax Description

(Optional) Specifies an IP route in one of the following formats:

- Single route longest match lookup A.B.C.D or WORD

- Single exact match route A.B.C.D/LEN

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays routes in full detail.

(Optional) Displays the connected direct routes.

(Optional) Displays the connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Displays routes with this next hop only.

rpf

(Optional) Displays reverse path forwarding (RPF) information for a multicast source.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

(Optional) Displays route counts.

unicast

(Optional) Displays unicast information.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays IP route information.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

n1000v# show ip route ip route rpf ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

A.B.C.D Display single route longest match lookup

A.B.C.D/LEN Display single exact match route

WORD Display single route longest match lookup

am Display routes owned by adjacency manager

broadcast Display connected routes owned by broadcast

detail Display routes in full detail

direct Display connected routes owned by direct

interface Display routes with this output interface only

local Display connected routes owned by local

mstatic Display routes owned by mstatic

netflow Display routes owned by netflow

next-hop Display routes with this next-hop only

sal Display connected routes owned by sal

static Display routes owned by static

summary Display route counts

updated Display routes filtered by last updated time

vrf Display per-VRF information

| Pipe command output to filter

This example shows how to display IP route RPF details per-VRF:

n1000v# show ip route ip rpf detail vrf all

IP Route Table for VRF "default", RPF for multicast source

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 3d00h, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 3d00h, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 3d00h, broadcast

IP Route Table for VRF "management", RPF for multicast source

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 3d00h, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 3d00h, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 3d00h, broadcast

0.0.0.0/0, ubest/mbest: 1/0

*via 10.105.225.161, mgmt0, [1/0], 3d00h, static

recursive next hop: 10.105.225.161/32

10.105.225.160/27, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 3d00h, direct

10.105.225.160/32, ubest/mbest: 1/0, attached

*via 10.105.225.160, Null0, [0/0], 3d00h, broadcast

10.105.225.161/32, ubest/mbest: 1/0, attached

*via 10.105.225.161, mgmt0, [250/0], 3d00h, am

10.105.225.180/32, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 3d00h, local

10.105.225.191/32, ubest/mbest: 1/0, attached

*via 10.105.225.191, mgmt0, [0/0], 3d00h, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route ipv4

command.

Syntax Description

(Optional) Specifies an IP route in one of the following formats:

- Single route longest match lookup A.B.C.D or WORD

- Single exact match route A.B.C.D/LEN

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays routes in full detail.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Displays routes with this next hop only.

rpf

(Optional) Displays reverse path forwarding (RPF) information for a multicast source.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

(Optional) Displays route counts.

unicast

(Optional) Displays unicast information.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays IPv4 route information.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

n1000v# show ip route ipv4 rpf ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

A.B.C.D Display single route longest match lookup

A.B.C.D/LEN Display single exact match route

WORD Display single route longest match lookup

am Display routes owned by adjacency manager

broadcast Display connected routes owned by broadcast

detail Display routes in full detail

direct Display connected routes owned by direct

interface Display routes with this output interface only

local Display connected routes owned by local

mstatic Display routes owned by mstatic

netflow Display routes owned by netflow

next-hop Display routes with this next-hop only

sal Display connected routes owned by sal

static Display routes owned by static

summary Display route counts

updated Display routes filtered by last updated time

vrf Display per-VRF information

| Pipe command output to filter

This example shows how to display IPv4 RPF per VRF information:

n1000v# show ip route ipv4 rpf vrf all

IP Route Table for VRF "default", RPF for multicast source

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management", RPF for multicast source

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/0, ubest/mbest: 1/0

*via 10.105.225.161, mgmt0, [1/0], 3d00h, static

10.105.225.160/27, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 3d00h, direct

10.105.225.180/32, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 3d00h, local

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route local

command.

Syntax Description

(Optional) As an individual option, it displays routes for protocol for backup next-hops.

(Optional) Displays routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays connected IP routes owned by local.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the connected routes owned by local per VRF instance:

n1000v# show ip route local vrf all

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

10.105.225.180/32, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 12:50:25, local

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route mstatic

command.

Syntax Description

(Optional) as an individual option. Displays routes for protocol for backup next hops.

(Optional) Displays routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays connected IP routes owned by mstatic.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the connected routes owned by mstatic per VRF instance:

n1000v# show ip route mstatic

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route netflow

command.

Syntax Description

(Optional) As an individual option, it displays routes for protocol for backup next-hops.

(Optional) Displays routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays connected IP routes owned by NetFlow.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP routes owned by NetFlow for a virtual Ethernet interface:

n1000v# show ip route netflow interface vethernet 1

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route next-hop

command.

Syntax Description

A.B.C.D the next hop address.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

(Optional) as an individual option. Displays routes for protocol for backup next hops.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all IP route next hop information per VRF instance:

n1000v# show ip route next-hop 0.0.0.0 vrf all

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/0, ubest/mbest: 1/0

*via 10.105.225.161, mgmt0, [1/0], 13:01:17, static

10.105.225.160/27, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 13:01:18, direct

10.105.225.160/32, ubest/mbest: 1/0, attached

*via 10.105.225.160, Null0, [0/0], 13:01:18, broadcast

10.105.225.161/32, ubest/mbest: 1/0, attached

*via 10.105.225.161, mgmt0, [250/0], 13:01:04, am

10.105.225.180/32, ubest/mbest: 1/0, attached

*via 10.105.225.180, mgmt0, [0/0], 13:01:18, local

10.105.225.191/32, ubest/mbest: 1/0, attached

*via 10.105.225.191, mgmt0, [0/0], 13:01:18, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route static

command.

Syntax Description

(Optional) as an individual option. Displays routes for protocol for backup next hops.

(Optional) Displays routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays IP connected routes owned by static.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all IP connected static routes per VRF instance:

n1000v# show ip route static vrf all

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/0, ubest/mbest: 1/0

*via 10.105.225.161, mgmt0, [1/0], 13:03:29, static

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route summary

command.

Syntax Description

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays IP connected route counts.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display summaries of IP connected routes:

n1000v# show ip route summary

IP Route Table for VRF "default"

Total number of routes: 3

Total number of paths: 3

Best paths per protocol: Backup paths per protocol:

broadcast : 3 None

Number of routes per mask-length:

/8 : 1 /32: 2

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast

command.

Syntax Description

(Optional) Specifies an IP route in one of the following formats:

- Single route longest match lookup A.B.C.D or WORD

- Single exact match route A.B.C.D/LEN

(Optional) Displays the adjacency manager (AM) routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays routes in full detail.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays the NetFlow routes.

(Optional) Displays routes with this next hop only.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays unicast IP route information/

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

n1000v# show ip route unicast ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

A.B.C.D Display single route longest match lookup

A.B.C.D/LEN Display single exact match route

WORD Display single route longest match lookup

am Display routes owned by adjacency manager

broadcast Display connected routes owned by broadcast

detail Display routes in full detail

direct Display connected routes owned by direct

interface Display routes with this output interface only

local Display connected routes owned by local

mstatic Display routes owned by mstatic

netflow Display routes owned by netflow

next-hop Display routes with this next-hop only

rpf Display RPF information for multicast source

sal Display connected routes owned by sal

static Display routes owned by static

summary Display route counts

updated Display routes filtered by last updated time

vrf Display per-VRF information

| Pipe command output to filter

This example shows how to display information about IP unicast routes per-VRF unstance:

n1000v# show ip route unicast vrf all

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/0, ubest/mbest: 1/0

*via 209.165.200.226, mgmt0, [1/0], 21:20:01, static

209.165.200.225/27, ubest/mbest: 1/0, attached

*via 209.165.200.227, mgmt0, [0/0], 21:20:01, direct

209.165.200.227/32, ubest/mbest: 1/0, attached

*via 209.165.200.227, mgmt0, [0/0], 21:20:01, local

This example shows how to display all unicast IP adjacency manager routes per-VRF instance:

n1000v# show ip route unicast updated am vrf all

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

209.165.200.229/32, ubest/mbest: 1/0, attached

*via 209.165.200.229, mgmt0, [250/0], 01:05:26, am

209.165.200.230/32, ubest/mbest: 1/0, attached

*via 209.165.200.230, mgmt0, [250/0], 00:29:00, am

209.165.200.231/32, ubest/mbest: 1/0, attached

*via 209.165.200.231, mgmt0, [250/0], 01:05:27, am

209.165.200.232/32, ubest/mbest: 1/0, attached

*via 209.165.200.232, mgmt0, [250/0], 01:05:22, am

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast interface control

command.

Syntax Description

Control interface number. The only valid value is 0.

(Optional) Displays adjacency manager (AM) routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP unicast routes on the control interface:

n1000v# show ip route unicast interface control 0

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast interface ethernet

command.

Syntax Description

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display unicast IP routes on an Ethernet interface:

n1000v# show ip route unicast interface ethernet 3/2

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast interface port-channel

command.

Syntax Description

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display details of IP unicast routes on a port channel interface:

n1000v# show ip route unicast interface port-channel 4 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 00:41:49, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 00:41:49, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 00:41:23, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast interface vethernet

command.

Syntax Description

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Displays adjacency manager (AM) routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display details about IP unicast routes on a virtual Ethernet interface:

n1000v# show ip route unicast interface vethernet 1 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:10:45, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:10:45, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:10:19, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route unicast rpf

command.

Syntax Description

(Optional) Specifies an IP route in one of the following formats:

- Single route longest match lookup A.B.C.D or WORD

- Single exact match route A.B.C.D/LEN

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays routes in full detail.

interface

(Optional) Specifies the routes with this output interface.

control

Specifies the control interface.

Control interface number. The only valid value is 0.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

(Optional) As an individual option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays IP route RPF unicast information.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about RPF IP routes for a unicast source:

n1000v# show ip route unicast rpf detail

IP Route Table for VRF "default", RPF for multicast source

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:11:52, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:11:52, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:11:26, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route updated

command.

Syntax Description

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays routes in full detail.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Displays routes with this next hop only.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays routes updated since this time.

(Optional) Displays the static routes.

(Optional) Displays route counts.

(Optional) Specifies routes updated until this time.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

Defaults

Displays IP routes filtered by last updated time.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following any one of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

keywords:

nexus1000v# show ip route updated ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

am Display routes owned by adjacency manager

broadcast Display connected routes owned by broadcast

detail Display routes in full detail

direct Display connected routes owned by direct

interface Display routes with this output interface only

local Display connected routes owned by local

mstatic Display routes owned by mstatic

netflow Display routes owned by netflow

next-hop Display routes with this next-hop only

sal Display connected routes owned by sal

since Display those routes updated since this time

static Display routes owned by static

summary Display route counts

until Display those routes updated until this time

vrf Display per-VRF information

| Pipe command output to filter

This example shows how to display updated IP per-VRF routes that are owned by the adjacency manager:

n1000v# show ip route updated am vrf all

IP Route Table for VRF "management"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

209.165.200.229/32, ubest/mbest: 1/0, attached

*via 209.165.200.229, mgmt0, [250/0], 01:05:26, am

209.165.200.230/32, ubest/mbest: 1/0, attached

*via 209.165.200.230, mgmt0, [250/0], 00:29:00, am

209.165.200.231/32, ubest/mbest: 1/0, attached

*via 209.165.200.231, mgmt0, [250/0], 01:05:27, am

209.165.200.232/32, ubest/mbest: 1/0, attached

*via 209.165.200.232, mgmt0, [250/0], 01:05:22, am

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route updated interface control

command.

Syntax Description

Control interface number. The only valid value is 0.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

e.g., 13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about IP routes on a control interface that are filtered by last updated time:

n1000v# show ip route updated interface control 0 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:14:54, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:14:54, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:14:28, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route updated interface ethernet

command.

Syntax Description

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about IP routes on an Ethernet interface that are filtered by last updated time:

n1000v# show ip route updated interface ethernet 3/2 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:16:15, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:16:15, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:15:49, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route updated interface port-channel

command.

Syntax Description

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

(Optional) Displays the adjacency manager routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about IP routes on the port channel 1 interface that are filtered by last updated time:

n1000v# show ip route updated interface port-channel 1 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:23:47, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:23:47, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:23:21, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip route updated interface vethernet

command.

Syntax Description

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Displays adjacency manager (AM) routes.

(Optional) Displays the connected broadcast routes.

(Optional) Displays the connected direct routes.

(Optional) Displays connected local routes.

(Optional) Displays the mstatic routes.

(Optional) Displays routes that are owned by NetFlow.

(Optional) Specifies routes with this next hop only.

Next hop IP address in the format A.B.C.D.

(Optional) Displays routes in full detail.

(Optional) Displays route counts.

(Optional) Displays routes filtered by the last updated time.

(Optional) Specifies routes updated since this time.

13-02-01-12:13:13.

(Optional) Specifies routes updated until this time.

(Optional) Displays the connected controller Service Abstraction Layer (SAL) routes.

(Optional) Displays the static routes.

all

(Optional) When used as an independent option, it displays routes for protocol for backup next hops.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

When used as a choice under VRF, it displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about IP routes on a virtual Ethernet interface that are filtered by the last updated time:

n1000v# show ip route updated interface vethernet 1 detail

show ip route updated interface vethernet 1 detail

IP Route Table for VRF "default"

'*' denotes best ucast next-hop

'**' denotes best mcast next-hop

'[x/y]' denotes [preference/metric]

0.0.0.0/32, ubest/mbest: 1/0

*via Null0, [220/0], 13:24:49, broadcast, discard

127.0.0.0/8, ubest/mbest: 1/0

*via Null0, [220/0], 13:24:49, broadcast, discard

255.255.255.255/32, ubest/mbest: 1/0

*via sup-eth1, [0/0], 13:24:23, broadcast

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing information.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip static-route

To display IP configured static routes, use the show ip static-route command.

Syntax Description

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

Defaults

Displays IP configured static routes.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP configured static routes:

n1000v# show ip static-route

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays the IP routing table.

show ip traffic

Displays the IP traffic statistics.

show ip verify

Displays IPSG information.

show ip traffic

To display IP traffic statistics, use the show ip traffic command.

Syntax Description

(Optional) Displays detailed IP traffic statistics.

Defaults

Displays IP traffic statistics.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display IP traffic statistics:

n1000v# show ip traffic

IP Software Processed Traffic Statistics

----------------------------------------

Transmission and reception:

Packets received: 1268, sent: 28832, consumed: 522,

Forwarded, unicast: 0, multicast: 0, Label: 0

Opts:

end: 0, nop: 0, basic security: 0, loose source route: 0

timestamp: 0, record route: 0

strict source route: 0, alert: 0,

other: 0

Errors:

Bad checksum: 0, packet too small: 0, bad version: 0,

Bad header length: 0, bad packet length: 0, bad destination: 0,

Bad ttl: 0, could not forward: 516, no buffer dropped: 0,

Bad encapsulation: 4, no route: 4, non-existent protocol: 0

Bad options: 0

Stateful Restart Recovery: 0

MBUF pull up fail: 0

Ingress Drop (ifmgr init): 0,

Ingress Drop (invalid filter): 0

Ingress Drop (Invalid L2 msg): 0

Stateful Restart Recovery: 0, MBUF pull up fail: 0

Bad context id: 0, rpf drops: 0

Ingress Drop (ifmgr init): 0,

Ingress Drop (invalid filter): 0

Ingress Drop (Invalid L2 msg): 0

ACL Filter Drops :

Ingress - 0

Egree - 0

Directed Broadcast - 0

Fragmentation/reassembly:

Fragments received: 0, fragments sent: 0, fragments created: 0,

Fragments dropped: 0, packets with DF: 0, packets reassembled: 0,

Fragments timed out: 0

ICMP Software Processed Traffic Statistics

------------------------------------------

Transmission:

Redirect: 0, unreachable: 0, echo request: 0, echo reply: 0,

Mask request: 0, mask reply: 0, info request: 0, info reply: 0,

Parameter problem: 0, source quench: 0, timestamp: 0,

Timestamp response: 0, time exceeded: 0,

Irdp solicitation: 0, irdp advertisement: 0

Output Drops - badlen: 0, encap fail: 0, xmit fail: 0

ICMP originate Req: 24, Redirects Originate Req: 0

Originate deny - Resource fail: 0, short ip: 0, icmp: 0, others: 24

Reception:

Redirect: 0, unreachable: 0, echo request: 0, echo reply: 0,

Mask request: 0, mask reply: 0, info request: 0, info reply: 0,

Parameter problem: 0, source quench: 0, timestamp: 0,

Timestamp response: 0, time exceeded: 0,

Irdp solicitation: 0, irdp advertisement: 0,

Format error: 0, checksum error: 0

Lisp processed: 0, No clients: 0: Consumed: 0

Replies: 0, Reply drops - bad addr: 0, inactive addr: 0

Statistics last reset: never

RFC 4293: IP Software Processed Traffic Statistics

----------------------------------------

Reception

Pkts recv: 1351, Bytes recv: 121317,

inhdrerrors: 0, innoroutes: 0, inaddrerrors: 0,

inunknownprotos: 0, intruncatedpkts: 0, inforwdgrams: 524,

reasmreqds: 0, reasmoks: 0, reasmfails: 0,

indiscards: 0, indelivers: 609,

inmcastpkts: 218, inmcastbytes: 11218,

inbcastpkts: 540,

Transmission

outrequests: 29617, outnoroutes: 4, outforwdgrams: 0,

outdiscards: 0, outfragreqds: 0, outfragoks: 0,

outfragfails: 0, outfragcreates: 0, outtransmits: 29609,

bytes sent: 29253974, outmcastpkts: 0, outmcastbytes: 0,

outbcastpkts: 0, outbcastbytes: 0

Related Commands

Command

Description

Creates an IPv4 ACL rule that denies traffic matching its conditions.

Creates an IPv4 ACL rule that permits traffic matching its conditions.

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays an IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip verify

Displays IPSG information.

show ip verify source

To verify IP Source Guard (IPSG) information, use the show ip verify source command.

Syntax Description

(Optional) Specifies interface information.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

Defaults

Displays IPSG information.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to verify IPSG information:

n1000v# show ip verify source

IP source guard is enabled on the following interfaces:

------------------------------------------------------

IP source guard operational entries:

-----------------------------------

Interface Filter-mode IP-address Mac-address Vlan

------------ ----------- ---------- -------------- ----

Related Commands

Command

Description

show ip access-lists

Displays the IP ACLs.

show ip igmp snooping

Displays the IP IGMP snooping information.

show ip interface

Displays IP-related interface information.

show ip internal

Displays internal IP information.

show ip logging

Displays the IP policy logging table.

show ip process

Displays IP global information.

show ip route

Displays an IP routing table.

show ip static-route

Displays the IP configured static routes.

show ip traffic

Displays the IP traffic statistics.

show l2 mroute

command.

Syntax Description

(Optional) Displays the VLAN flood route.

(Optional) Displays the switch IDs in hex.

(Optional) Displays the resolve switch ID next hops into the underlying interfaces.

(Optional) Specifies the group address.

IPv4 group address in the format A.B.C.D.

MAC group address.

(Optional) Displays the catch-all entries consisting of multicast route ports.

(Optional) Specifies a source IP address.

IPv4 source address in the format A.B.C.D.

MAC source address.

(Optional) Displays the multicast route database summary.

(Optional) Displays the virtual device context (VDC) optimized multicast flooding (OMF) route.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5, 7-19.

Defaults

Displays information about the Layer 2 multicast route database.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the Layer 2 multicast route:

n1000v# show l2 mroute

Found total 0 route(s)

show lacp counters

command.

Syntax Description

(Optional) Specifies an interface.

port-channel

Specifies the LACP port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

Defaults

Displays information about the LACP counters.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the LACP counters:

n1000v# show lacp counters

LACPDUs Marker Marker Response LACPDUs

Port Sent Recv Sent Recv Sent Recv Pkts Err

---------------------------------------------------------------------

port-channel1

Ethernet4/4 2604 2605 0 0 0 0 0

Ethernet4/3 2604 2604 0 0 0 0 0

Ethernet4/6 2597 2596 0 0 0 0 0

Ethernet4/5 2597 2596 0 0 0 0 0

port-channel2

Ethernet4/2 2597 2596 0 0 0 0 0

Ethernet4/1 2597 2596 0 0 0 0 0

port-channel4

Ethernet3/2 2598 2598 0 0 0 0 0

Ethernet3/1 2598 2598 0 0 0 0 0

port-channel6

Ethernet3/5 2606 2607 0 0 0 0 0

Ethernet3/6 2598 2598 0 0 0 0 0

Ethernet3/4 2598 2598 0 0 0 0 0

Ethernet3/3 2598 2598 0 0 0 0 0

This example shows how to display information about the LACP counters for port channel 1:

n1000v# show lacp counters interface port-channel 1

LACPDUs Marker Marker Response LACPDUs

Port Sent Recv Sent Recv Sent Recv Pkts Err

---------------------------------------------------------------------

port-channel1

Ethernet4/4 2606 2607 0 0 0 0 0

Ethernet4/3 2606 2606 0 0 0 0 0

Ethernet4/6 2599 2599 0 0 0 0 0

Ethernet4/5 2599 2599 0 0 0 0 0

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp interface

command.

Syntax Description

ethernet

/

(Optional) Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

Defaults

Displays information about the LACP interface.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about an LACP Ethernet interface:

n1000v# show lacp interface ethernet 3/2

Interface Ethernet3/2 is up

Channel group is 4 port channel is Po4

PDUs sent: 2608

PDUs rcvd: 2607

Markers sent: 0

Markers rcvd: 0

Marker response sent: 0

Marker response rcvd: 0

Unknown packets rcvd: 0

Illegal packets rcvd: 0

Lag Id: [[(00:05:73:d8:ef:01, 32768, 60, 0x8000, 0x105), (00:05:73:d8:ef:01, 32768, 60, 0x8000, 0x105)]]

Operational as aggregated link since

Local Port: Eth3/2 MAC Address= 2-0-c-0-0-3c

System Identifier=0x8000,2-0-c-0-0-3c

Port Identifier=0x8000,0x302

Operational key=3

LACP_Activity=active

LACP_Timeout=Long Timeout (30s)

Synchronization=IN_SYNC

Collecting=true

Distributing=true

Partner information refresh timeout=Long Timeout (90s)

Actor Admin State=(Ac-1:To-0:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)

Actor Oper State=(Ac-1:To-0:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)

Neighbor: 1/5

MAC Address= 0-5-73-d8-ef-1

System Identifier=0x8000,0-5-73-d8-ef-1

Port Identifier=0x8000,0x105

Operational key=60

LACP_Activity=active

LACP_Timeout=Long Timeout (30s)

Synchronization=IN_SYNC

Collecting=true

Distributing=true

Partner Admin State=(Ac-1:To-0:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)

Partner Oper State=(Ac-1:To-0:Ag-1:Sy-1:Co-1:Di-1:De-0:Ex-0)

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp internal

command.

Syntax Description

Displays the LACP event history logs.

Displays the LACP error logs.

Displays global event transitions.

Specifies the LACP interface index logs.

Interface index. The range is from 0 to 2147483647.

ethernet

/

Displays a LACP interface.

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

Displays the LACP lock logs.

Displays the LACP message logs.

Displays internal LACP information.

(Optional) Displays all the internal information.

detail

(Optional) Displays detailed LACP information

Displays the LACP information log.

port-channel

Displays the LACP port channel database.D

Displays a LACP interface.

Specifies a LACP port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

Displays the LACP global persistent storage service (PSS) information.

Displays LACP memory allocation statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the internal LACP event history error messages:

n1000v# # show lacp internal event-history errors

1) Event:E_DEBUG, length:85, at 630000 usecs after Thu Apr 18 08:33:54 2013

[102] lacp_vem_lc_offline_notify_handler(886): Failed to get IF OBJ for IFDX 25014040

2) Event:E_DEBUG, length:85, at 630000 usecs after Thu Apr 18 08:33:54 2013

[102] lacp_vem_lc_offline_notify_handler(886): Failed to get IF OBJ for IFDX 25014000

3) Event:E_DEBUG, length:85, at 790000 usecs after Thu Apr 18 08:21:49 2013

[102] lacp_vem_lc_offline_notify_handler(886): Failed to get IF OBJ for IFDX 25014040

4) Event:E_DEBUG, length:85, at 600000 usecs after Thu Apr 18 08:17:58 2013

[102] lacp_vem_lc_offline_notify_handler(886): Failed to get IF OBJ for IFDX 25014040

5) Event:E_DEBUG, length:85, at 600000 usecs after Thu Apr 18 08:17:58 2013

[102] lacp_vem_lc_offline_notify_handler(886): Failed to get IF OBJ for IFDX 25014000

...

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp neighbor

command.

Syntax Description

(Optional) Displays an interface.

port-channel

Specifies the LACP port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

Defaults

Displays information about the LACP interface neighbor.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the LACP port channel 1 neighbor:

n1000v# show lacp neighbor interface port-channel 1

Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs

A - Device is in Active mode P - Device is in Passive mode

Partner's information

Partner Partner Partner

Port System ID Port Number Age Flags

Eth4/4 32768,0-5-73-d6-c9-1 0x210b 78890 SA

LACP Partner Partner Partner

Port Priority Oper Key Port State

32768 0x3b 0x3d

Partner's information

Partner Partner Partner

Port System ID Port Number Age Flags

Eth4/3 32768,0-5-73-d6-c9-1 0x2108 78890 SA

LACP Partner Partner Partner

Port Priority Oper Key Port State

32768 0x3b 0x3d

Partner's information

Partner Partner Partner

Port System ID Port Number Age Flags

Eth4/6 32768,0-5-73-d6-c9-1 0x210a 78994 SA

LACP Partner Partner Partner

Port Priority Oper Key Port State

32768 0x3b 0x3d

...

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp offload status

command.

offload status

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the LACP offload status:

n1000v# show lacp offload status

Current Status : Enabled

Running Config Status : Enabled

Saved Config Status : Enabled

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp port-channel

command.

Syntax Description

(Optional) Specifies an interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

Defaults

Displays information about the LACP port channel interfaces.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the LACP port channels:

n1000v# # show lacp port-channel

port-channel1

System Mac=2-0-c-0-0-3c

Local System Identifier=0x8000,2-0-c-0-0-3c

Admin key=0x0

Operational key=0x0

Partner System Identifier=0x8000,0-5-73-d6-c9-1

Operational key=0x3b

Member Port List=3-6

port-channel2

System Mac=2-0-c-0-0-3c

Local System Identifier=0x8000,2-0-c-0-0-3c

Admin key=0x1

Operational key=0x1

Partner System Identifier=0x8000,0-5-73-d6-c9-1

Operational key=0x3c

Member Port List=1-2

port-channel4

System Mac=2-0-c-0-0-3c

Local System Identifier=0x8000,2-0-c-0-0-3c

Admin key=0x3

Operational key=0x3

Partner System Identifier=0x8000,0-5-73-d8-ef-1

Operational key=0x3c

Member Port List=1-2

port-channel6

System Mac=2-0-c-0-0-3c

Local System Identifier=0x8000,2-0-c-0-0-3c

Admin key=0x5

Operational key=0x5

Partner System Identifier=0x8000,0-5-73-d8-ef-1

Operational key=0x3b

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show lacp system-identifier

command.

system-identifier

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the LACP system identifier:

n1000v# show lacp system-identifier

32768,2-0-c-0-0-3c

Related Commands

Command

Description

Clears statistics for all LACP group interfaces.

show license

command.

Syntax Description

(Optional) Displays a brief list of license files.

(Optional) Displays services using the default license.

(Optional) Displays contents of a license file.

License file name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

(Optional) Displays the license host ID..

(Optional) Displays the license usage table.

Defaults

Displays information about the license.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the services using the default license:

Feature Default License Count

-------------------------------------------------------------------------------

NEXUS_VSG_SERVICES_PKG 16

N1KV_MSFT_LAN_SERVICES_PKG 512

NEXUS_ASA1000V_SERVICES_PKG 16

-------------------------------------------------------------------------------

This example shows how to display t the license host ID:

License hostid: VDH=1300095395136032199

This example shows how to display the license usage table:

n1000v# show license usage

Feature Ins Lic Status Expiry Date Comments

Count

--------------------------------------------------------------------------------

NEXUS_VSG_SERVICES_PKG No 16 Unused Never -

N1KV_MSFT_LAN_SERVICES_PKG No 512 Unused Never -

NEXUS_ASA1000V_SERVICES_PKG No 16 Unused 09 Apr 2013 -

--------------------------------------------------------------------------------

Related Commands

Command

Description

Uninstalls a license file from a VSM, or uninstalls an evaluation license before installing a permanent license.

Installs license files on a VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

Enables volatile licenses so that, whenever a VEM is taken out of service, its licenses are returned to the VSM pool of available licenses.

show line

command.

Syntax Description

connected

whether the line is currently connected.

user-input initialization string.

Defaults

Displays the parameters of a terminal line.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the parameters of a terminal line:

n1000v# show line

line Console:

Speed: 9600 baud

Databits: 8 bits per byte

Stopbits: 1 bit(s)

Parity: none

Modem In: Disable

Modem Init-String -

default : ATE0Q1&D2&C1S0=1\015

line Aux:

Speed: 9600 baud

Databits: 8 bits per byte

Stopbits: 1 bit(s)

Parity: none

Modem In: Disable

Modem Init-String -

default : ATE0Q1&D2&C1S0=1\015

Hardware Flowcontrol: ON

s:

n1000v# show line com1

line Aux:

Speed: 9600 baud

Databits: 8 bits per byte

Stopbits: 1 bit(s)

Parity: none

Modem In: Disable

Modem Init-String -

default : ATE0Q1&D2&C1S0=1\015

Hardware Flowcontrol: ON

Related Commands

Command

Description

Ends a session on a specified terminal.

Enters console configuration mode.

show logging

command.

Syntax Description

(Optional) Displays the console logging configuration.

(Optional) Displays the logging configuration.

(Optional) Displays the internal logging information.

(Optional) Displays the IP configuration.

access-list

Displays the access control list (ACL) logging flows on a module.

cache

Specifies the logging cache.

Specifies the module (line card) logging configuration.

Module number. The range is from 3 to 66.

internal

Displays the internal ACL log information.

Displays the ACL error logs.

Displays various ACL event logs.

Displays various ACL message logs.

Displays the ACL log global information.

Displays the ACL memory allocation statistics.

detail

(Optional) Displays the F_Port Server detailed memory statistics.

Displays the logging status; optional when used as an independent command.

(Optional) Specifies the last lines of a logfile.

Lines to display. The range is from 1 to 999.

(Optional) Displays the contents of the logfile.

hh:mm:ss

(Optional) Specifies the messages from the logfile of the last given duration.

Duration time in hours and minutes. The times entered must be in 24-hour format.

(Optional) Displays the sequence number of the last message in logfile.

(Optional) Specifies logfile messages from a given start sequence number.

Start sequence number. The range is from 0 to 2147483647.

year

month

day

(Optional) Specifies logfile messages from a given start time.

Year in YYYY format.

Month as Jan, Feb, Mar,.. The month is a maximum of three characters.

Day in DD format.

(Optional) Displays the monitor logging configuration.

(Optional) Displays the server address pending configuration.

(Optional) Displays the server address differences between the pending and configuration databases.

(Optional) Displays the server logging configuration.

(Optional) Displays the logging session status.

(Optional) Displays the logging timestamp configuration.

Defaults

Displays the system logs.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about system logs:

n1000v# show logging

Logging console: enabled (Severity: critical)

Logging monitor: enabled (Severity: notifications)

Logging linecard: enabled (Severity: notifications)

Logging fex: enabled (Severity: notifications)

Logging timestamp: Seconds

Logging server: disabled

Logging logfile: enabled

Name - messages: Severity - notifications Size - 4194304

Facility Default Severity Current Session Severity

-------- ---------------- ------------------------

aaa 3 3

aclcomp 2 2

acllog 2 2

aclmgr 3 3

auth 0 0

authpriv 3 3

bootvar 5 5

capability 2 2

capability 2 2

cdp 2 2

cert_enroll 2 2

clis 7 7

confcheck 2 2

cron 3 3

daemon 3 3

eth_port_channel 5 5

ethpm 5 5

evmc 5 5

...

Related Commands

Command

Description

Clears logging file messages.

Clears the current logging session.

Enables console session logging messages.

Logs interface events.

Enables ACL logging on all VEMs.

Enables message logging.

Configures the log file used to store system messages.

Starts module messages logging.

Enables the logging of messages to the monitor (terminal line).

esignates and configures a remote server for logging system messages.

Sets the unit of measure for the timestamp.

show logging level

command.

Syntax Descriptionvshd ]

(Optional) Displays the accounting, authorization, and authentication (AAA) logging configuration.

(Optional) Displays the access control list (ACL) logging configuration.

(Optional) Displays the level for ACL manager syslog messages.

(Optional) Displays the adjacency manager logging configuration.

(Optional) Displays the Authorization System (AS) logging configuration.

(Optional) Displays the authorization (private) logging configuration.

(Optional) Displays the boot variable logging configuration.

(Optional) Displays the capability logging configuration.

(Optional) Displays the Cisco Discovery Protocol logging configuration.

(Optional) Displays the Certificate enrollment logging configuration.

(Optional) Displays the command-line interface (CLI) logging configuration.

(Optional) Displays the core daemon logging configuration.

(Optional) Displays the Cron/at facility logging configuration.

(Optional) Displays the system daemons logging configuration.

(Optional) Displays the Ethernet port manager (ETHPM) logging configuration.

(Optional) Displays the level for EVMC manager syslog messages

(Optional) Displays the level for EVMS manager syslog messages

(Optional) Displays the feature manager (FM) logging configuration.

(Optional) Displays the fs-daemon logging configuration.

(Optional) Displays the File Transfer System (FTP) logging configuration.

(Optional) Displays the IM logging configuration.

(Optional) Displays IP Internet Group Management Protocol (IGMP) information.

(Optional) Displays the IP configuration logging configuration.

(Optional) Displays the kernel logging configuration.

(Optional) Displays the Layer 3 VM logging configuration.

(Optional) Displays the Link Aggregation Control Protocol (LACP) logging configuration.

(Optional) Displays the licensing logging configuration.

(Optional) Displays the local use daemons logging configuration.

(Optional) Displays the line printer remote (LPR) logging configuration.

(Optional) Displays the Multicast 2 Routing Information Base (M2RIB) logging configuration.

(Optional) Displays the mail system logging configuration.

(Optional) Displays the module (linecard) manager logging configuration.

(Optional) Displays the level for MVSH syslog messages

(Optional) Displays the Netstack logging configuration.

(Optional) Displays the USENET news logging configuration.

(Optional) Displays the network fault manager (NFM) logging configuration.

(Optional) Displays the Network Time Protocol (NTP) logging settings.

(Optional) Displays the platform logging configuration.

(Optional) Displays the plugin logging configuration.

(Optional) Displays the port channel logging configuration.

(Optional) Displays the syslog level for the port profile.

(Optional) Displays Remote Authentication Dial-In User Service (RADIUS) logging configuration.

(Optional) Displays redundancy manager logging configuration.

(Optional) Displays res_mgr logging configuration.

(Optional) Displays the Route Processor Module (RPM) logging configuration.

(Optional) Displays the Service Abstraction Layer (SAL) logging configuration.

(Optional) Displays the scheduler logging configuration.

(Optional) Displays the security logging configuration.

(Optional) Displays the shared memory manager (SMM) logging configuration.

(Optional) Displays the Simple Network Management Protocol (SNMP) logging configuration.

(Optional) Displays the spanning tree logging configuration.

(Optional) Displays the internal syslog message logging configuration.

(Optional) Displays the system manager logging configuration.

(Optional) Displays the Unicast 6 Routing Information Base (U6RIB) logging configuration.

(Optional) Displays the URIB logging configuration.

(Optional) Displays the user process logging configuration.

(Optional) Displays the Unix-to-Unix copy system logging configuration.

(Optional) Displays the virtual Ethernet Module (VEM) manager logging configuration.

(Optional) Displays the Virtual Infrastructure Methodology (VIM) logging configuration.

(Optional) Displays the VLAN manager logging configuration.

(Optional) Displays the virtual machine manager (VMM) logging configuration.

(Optional) Displays the VNS agent logging configuration.

(Optional) Displays the virtual shared hardware device (VSHD) logging configuration.

Defaults

Displays information about the system logging level.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the Cron/at logs:

n1000v# show logging level cron

Facility Default Severity Current Session Severity

-------- ---------------- ------------------------

cron 3 3

0(emergencies) 1(alerts) 2(critical)

3(errors) 4(warnings) 5(notifications)

6(information) 7(debugging)

Related Commands

Command

Description

Clears logging file messages.

Clears the current logging session.

Enables console session logging messages.

Logs interface events.

Enables ACL logging on all VEMs.

Enables message logging.

Configures the log file used to store system messages.

Starts module messages logging.

Enables the logging of messages to the monitor (terminal line).

esignates and configures a remote server for logging system messages.

Sets the unit of measure for the timestamp.

show mac access-lists

command.

Syntax Description

(Optional) ACL name. The name is a maximum of 64 characters.

capture session

session_id

(Optional) Specifies a session.

Session ID. The range is from 1 to 48.

dynamic

(Optional) Displays dynamic ACLs.

expanded

(Optional) Displays information about expand ACL groups.

summary

(Optional) Displays summary information about ACLs.

Defaults

Displays information about the MAC ACLs.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about MAC ACLs:

n1000v# show mac access-lists

MAC ACL test-mac

30 permit 0002.3000.0000 0000.00ff.ffff any

40 permit 0002.3100.0000 0000.00ff.ffff any

50 permit 0002.3200.0000 0000.00ff.ffff any

60 permit 0002.3300.0000 0000.00ff.ffff any

70 permit 0002.3400.0000 0000.00ff.ffff any

80 permit 0002.3500.0000 0000.00ff.ffff any

90 permit 0002.3600.0000 0000.00ff.ffff any

100 permit 0002.3700.0000 0000.00ff.ffff any

110 permit 0002.3800.0000 0000.00ff.ffff any

120 permit 0002.3900.0000 0000.00ff.ffff any

130 permit 0002.3a00.0000 0000.00ff.ffff any

140 permit 0002.3b00.0000 0000.00ff.ffff any

150 permit 0002.3c00.0000 0000.00ff.ffff any

170 permit 0002.3e00.0000 0000.00ff.ffff any

180 permit 0015.5df4.8506 0000.0000.0000 any

200 permit 0015.5df4.8704 0000.0000.0000 any

210 permit 0015.5df4.8312 0000.0000.0000 any

220 permit 0015.5df4.8706 0000.0000.0000 any

230 permit 0015.5df4.8700 0000.0000.0000 any

250 deny 0015.5df4.8304 0000.0000.0000 any

260 permit any any

MAC ACL test-mac-in

30 permit 0002.3000.0000 0000.00ff.ffff any

40 permit 0002.3100.0000 0000.00ff.ffff any

50 permit 0002.3200.0000 0000.00ff.ffff any

60 permit 0002.3300.0000 0000.00ff.ffff any

70 permit 0002.3400.0000 0000.00ff.ffff any

80 permit 0002.3500.0000 0000.00ff.ffff any

90 permit 0002.3600.0000 0000.00ff.ffff any

...

This example shows how to display summary information about a specific MAC ACL:

n1000v# show mac access-lists test-mac-in summary

MAC ACL test-mac-in

Total ACEs Configured:20

Configured on interfaces:

Active on interfaces:

This example shows how to display summary information about MAC ACLs:

n1000v# show mac access-lists summary

MAC ACL test-mac

Total ACEs Configured:21

Configured on interfaces:

Active on interfaces:

MAC ACL test-mac-in

Total ACEs Configured:20

Configured on interfaces:

Active on interfaces:

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the MAC address table:

n1000v# show mac address-table

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

1 0002.3d12.e600 static 0 N1KV Internal Port 3

1 0002.3d22.e600 static 0 N1KV Internal Port 3

1 0002.3d32.e602 static 0 N1KV Internal Port 3

1 0002.3d42.e600 static 0 N1KV Internal Port 3

1 0002.3d42.e602 static 0 N1KV Internal Port 3

1 0002.3d62.e602 static 0 N1KV Internal Port 3

1 0002.3d82.e602 static 0 N1KV Internal Port 3

262 0015.5de1.9629 dynamic 1 Po2 3

262 0015.5de1.9d07 dynamic 123 Po2 3

262 0015.5de1.9e03 dynamic 3 Po2 3

262 001d.d8b7.1c01 dynamic 0 Po2 3

263 0015.5de1.9626 dynamic 1 Po1 3

1 0002.3d12.e600 static 0 N1KV Internal Port 4

1 0002.3d22.e600 static 0 N1KV Internal Port 4

1 0002.3d32.e603 static 0 N1KV Internal Port 4

1 0002.3d42.e600 static 0 N1KV Internal Port 4

1 0002.3d42.e603 static 0 N1KV Internal Port 4

1 0002.3d62.e603 static 0 N1KV Internal Port 4

1 0002.3d82.e603 static 0 N1KV Internal Port 4

262 0015.5de1.9629 dynamic 1 Po7 4

262 0015.5de1.9d07 dynamic 123 Po7 4

262 0015.5de1.9e03 dynamic 3 Po7 4

262 001d.d8b7.1c01 dynamic 0 Po7 4

263 0015.5de1.9626 dynamic 1 Po8 4

1 0002.3d12.e600 static 0 N1KV Internal Port 5

1 0002.3d22.e600 static 0 N1KV Internal Port 5

1 0002.3d32.e604 static 0 N1KV Internal Port 5

1 0002.3d42.e600 static 0 N1KV Internal Port 5

1 0002.3d42.e604 static 0 N1KV Internal Port 5

1 0002.3d62.e604 static 0 N1KV Internal Port 5

1 0002.3d82.e604 static 0 N1KV Internal Port 5

262 0015.5de1.9629 dynamic 1 Po10 5

262 0015.5de1.9d07 dynamic 123 Po10 5

262 0015.5de1.9e03 dynamic 3 Po10 5

262 001d.d8b7.1c01 dynamic 0 Po10 5

263 0015.5de1.9626 dynamic 1 Po9 5

1 0002.3d12.e600 static 0 N1KV Internal Port 6

1 0002.3d22.e600 static 0 N1KV Internal Port 6

1 0002.3d32.e605 static 0 N1KV Internal Port 6

1 0002.3d42.e600 static 0 N1KV Internal Port 6

1 0002.3d42.e605 static 0 N1KV Internal Port 6

1 0002.3d62.e605 static 0 N1KV Internal Port 6

1 0002.3d82.e605 static 0 N1KV Internal Port 6

262 0015.5de1.9629 dynamic 2 Po13 6

262 0015.5de1.9d07 dynamic 123 Po13 6

262 0015.5de1.9e03 dynamic 4 Po13 6

262 001d.d8b7.1c01 dynamic 1 Po13 6

263 0015.5de1.9626 dynamic 2 Po12 6

Total MAC Addresses: 48

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

show mac-lists

Displays information about MAC lists.

show mac address-table address

command.

Syntax Description

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Displays an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays information about a specific MAC address table.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a specific MAC address table:

n1000v# show mac address-table address f0f7.55aa.bd11

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

2012 f0f7.55aa.bd11 dynamic 10 Po6 5

2012 f0f7.55aa.bd11 dynamic 10 Po8 6

Total MAC Addresses: 2

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table aging-time

command.

Syntax Description

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays information about the configured or default MAC address table aging time.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the MAC address table aging time:

n1000v# show mac address-table aging-time

Vlan Aging Time

----- ----------

100 300

200 300

173 300

101 300

1 300

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table bridge-domain

command.

Syntax Description

BD name. The name is a maximum of 128 characters.

Defaults

Displays information about the MAC address table for a specific BD.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the MAC address table for a specific BD name:

n1000v# show mac address-table bridge-domain

Related Commands

Command

Description

Creates a MAC access control list (ACL) rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table count

command.

Syntax Description

(Optional) Specifies a MAC address.

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Specifies an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

(Optional) Displays dynamic entries.

(Optional) Displays secure entries.

(Optional) Displays static entries.

Defaults

Displays the count of MAC address table entries.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the count of MAC address table entries:

n1000v# show mac address-table count

Total MAC Addresses: 10

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table dynamic

command.

Syntax Description

(Optional) Specifies a MAC address.

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Displays an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays information about dynamic MAC address table entries.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the dynamic MAC address table for a specific port-channel interface:

n1000v# show mac address-table dynamic interface port-channel 6

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

261 0010.1857.0cde dynamic 30 Po6 5

261 0010.1857.0cdf dynamic 5 Po6 5

262 001d.d8b7.1df9 dynamic 7 Po6 5

263 001d.d8b7.1df8 dynamic 6 Po6 5

2012 0000.c9b0.1c90 dynamic 82 Po6 5

2012 0000.c9b0.1c91 dynamic 0 Po6 5

2012 001b.21c2.497c dynamic 12 Po6 5

2012 f0f7.55aa.bd11 dynamic 2 Po6 5

2012 f0f7.55aa.bd13 dynamic 1 Po6 5

Total MAC Addresses: 9

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table interface

command.

Syntax Description

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the MAC address table interface entries for a specific port channel interface:

n1000v# show mac address-table interface port-channel 8

AC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

261 0010.1857.0cde dynamic 1 Po8 6

261 0010.1857.0cdf dynamic 23 Po8 6

262 001d.d8b7.1df9 dynamic 12 Po8 6

263 001d.d8b7.1df8 dynamic 18 Po8 6

2012 0000.c9b0.1c90 dynamic 4 Po8 6

2012 0000.c9b0.1c91 dynamic 0 Po8 6

2012 0014.1b45.6800 dynamic 249 Po8 6

2012 001b.21c2.497c dynamic 99 Po8 6

2012 f0f7.55aa.bd11 dynamic 11 Po8 6

2012 f0f7.55aa.bd13 dynamic 1 Po8 6

Total MAC Addresses: 10

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table module

command.

Syntax Description

Module number. The range is from 1 to 66.

(Optional) Specifies a MAC address.

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Displays an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

(Optional) Displays dynamic entries.

(Optional) Displays secure entries.

(Optional) Displays static entries.

Defaults

Displasy information about the VEM MAC address table.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the MAC address table, VEM module specific information:

n1000v# show mac address-table module 6

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

1 0002.3d10.0800 static 0 N1KV Internal Port 6

1 0002.3d20.0800 static 0 N1KV Internal Port 6

1 0002.3d30.0805 static 0 N1KV Internal Port 6

1 0002.3d40.0800 static 0 N1KV Internal Port 6

1 0002.3d40.0805 static 0 N1KV Internal Port 6

1 0002.3d60.0805 static 0 N1KV Internal Port 6

1 0002.3d80.0805 static 0 N1KV Internal Port 6

261 0010.1857.0cde dynamic 1 Po8 6

261 0010.1857.0cdf dynamic 2 Po8 6

262 001d.d8b7.1df9 dynamic 3 Po8 6

263 001d.d8b7.1df8 dynamic 24 Po8 6

264 001d.d8b7.1dfa dynamic 10 Po7 6

2012 0000.c9b0.1c90 dynamic 64 Po8 6

2012 0000.c9b0.1c91 dynamic 0 Po8 6

2012 0014.1b45.6800 dynamic 108 Po8 6

2012 001b.21c2.497c dynamic 112 Po8 6

2012 f0f7.55aa.bd11 dynamic 2 Po8 6

2012 f0f7.55aa.bd13 dynamic 2 Po8 6

Total MAC Addresses: 18

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

show mac-lists

Displays information about MAC lists.

show mac address-table secure

command.

Syntax Description

(Optional) Specifies a MAC address.

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Specifies an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays information about secure MAC address table entries.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display secure MAC address table entries:

n1000v# show mac address-table secure

Total MAC Addresses: 0

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

skow mac-lists

Displays information about MAC lists.

show mac address-table static

command.

Syntax Description

(Optional) Specifies a MAC address.

MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the bridge domain.

Bridge domain name. The name is a maximum of 128 characters.

(Optional) Displays an interface.

ethernet

/

Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

port-channel

(Optional) Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

(Optional) Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

Displays information about static MAC address table entries.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display static MAC address table for a specific MAC address:

n1000v# show mac address-table static address 0002.3d60.0804

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

1 0002.3d60.0804 static 0 N1KV Internal Port 5

Total MAC Addresses: 1

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

skow mac-lists

Displays information about MAC lists.

show mac address-table vlan

command.

Syntax Description

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display MAC address table VLAN entries:

n1000v# show mac address-table vlan 1

VLAN MAC Address Type Age Port Mod

---------+-----------------+-------+---------+------------------------------+---

1 0002.3d10.0800 static 0 N1KV Internal Port 3

1 0002.3d20.0800 static 0 N1KV Internal Port 3

1 0002.3d30.0802 static 0 N1KV Internal Port 3

1 0002.3d40.0800 static 0 N1KV Internal Port 3

1 0002.3d40.0802 static 0 N1KV Internal Port 3

1 0002.3d60.0802 static 0 N1KV Internal Port 3

1 0002.3d80.0802 static 0 N1KV Internal Port 3

1 0002.3d10.0800 static 0 N1KV Internal Port 4

1 0002.3d20.0800 static 0 N1KV Internal Port 4

1 0002.3d30.0803 static 0 N1KV Internal Port 4

1 0002.3d40.0800 static 0 N1KV Internal Port 4

1 0002.3d40.0803 static 0 N1KV Internal Port 4

1 0002.3d60.0803 static 0 N1KV Internal Port 4

1 0002.3d80.0803 static 0 N1KV Internal Port 4

1 0002.3d10.0800 static 0 N1KV Internal Port 5

1 0002.3d20.0800 static 0 N1KV Internal Port 5

1 0002.3d30.0804 static 0 N1KV Internal Port 5

1 0002.3d40.0800 static 0 N1KV Internal Port 5

1 0002.3d40.0804 static 0 N1KV Internal Port 5

1 0002.3d60.0804 static 0 N1KV Internal Port 5

1 0002.3d80.0804 static 0 N1KV Internal Port 5

1 0002.3d10.0800 static 0 N1KV Internal Port 6

1 0002.3d20.0800 static 0 N1KV Internal Port 6

1 0002.3d30.0805 static 0 N1KV Internal Port 6

1 0002.3d40.0800 static 0 N1KV Internal Port 6

1 0002.3d40.0805 static 0 N1KV Internal Port 6

1 0002.3d60.0805 static 0 N1KV Internal Port 6

1 0002.3d80.0805 static 0 N1KV Internal Port 6

Total MAC Addresses: 28

Related Commands

Command

Description

Creates a MAC ACL rule that denies traffic matching its conditions.

Creates a MAC ACL rule that permits traffic matching its conditions.

Displays information about the MAC ACLs.

Displays information about the MAC address table.

skow mac-lists

Displays information about MAC lists.

show mac-list

command.

Syntax Description

(Optional) MAC list name. The name is a maximum of 63 characters.

(Optional) MAC address in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) the MAC mask in one of the following formats:

- E.E.E

- EE-EE-EE-EE-EE-EE

- EE:EE:EE:EE:EE:EE

- EEEE.EEEE.EEEE

(Optional) Specifies the sequence number.

Sequence number. The range is from 1 to 4294967294.

Defaults

Displays information about MAC lists.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about MAC lists:

n1000v# show mac-list

Related Commands

Command

Description

Displays information about the MAC address table.

Displays information about the MAC access control lists (ACLs).

show module

command.

Syntax Description

(Optional) Module number. The range is from 1 to 66.

(Optional) Displays the bandwidth fairness status.

(Optional) Displays the recovery steps to bring up a module.

Defaults

Displays information for all chassis I/O and supervisor modules.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display module information for all I/O modules and supervisor modules in the chassis:

n1000v# show module

Mod Ports Module-Type Model Status

--- ----- -------------------------------- ------------------ ------------

1 0 Virtual Supervisor Module Nexus1000V active *

2 0 Virtual Supervisor Module Nexus1000V ha-standby

5 288 Virtual Ethernet Module NA ok

6 288 Virtual Ethernet Module NA ok

Mod Sw Hw

--- ------------------ ------------------------------------------------

1 5.2(1)SM1(5.0.342) 0.0

2 5.2(1)SM1(5.0.342) 0.0

5 5.2(1)SM1(5.1) Windows Server 2012 - Datacenter (6.2.9200, 6.30)

6 5.2(1)SM1(5.1) Windows Server 2012 - Datacenter (6.2.9200, 6.30)

Mod MAC-Address(es) Serial-Num

--- -------------------------------------- ----------

1 00-19-07-6c-5a-a8 to 00-19-07-6c-62-a8 NA

2 00-19-07-6c-5a-a8 to 00-19-07-6c-62-a8 NA

5 02-00-0c-00-05-00 to 02-00-0c-00-05-80 NA

6 02-00-0c-00-06-00 to 02-00-0c-00-06-80 NA

Mod Server-IP Server-UUID Server-Name

--- --------------- ------------------------------------ --------------------

1 10.105.225.180 NA NA

2 10.105.225.180 NA NA

3 10.105.225.157 20D6995A-82DC-E111-0000-0AA11223349E NODE-UCS-157

4 10.105.225.158 20D6995A-82DC-E111-0000-0AA11223346E NODE-UCS-158

* this terminal session

Related Commands

Command

Description

Allows the user to enter remote commands on the VEM, from the Cisco Nexus 1000V.

Configures a VEM.

show module vteps

command.

Syntax Description

This command has no arguments or keywords.

Defaults

Displays information for all chassis I/O and supervisor modules.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows how to display VTEP configuration information for all I/O modules and supervisor modules in the chassis:

n1000v# show module vteps

D: Designated VTEP I:Forwarding Publish Incapable VTEP

Note: (*) Denotes active gateway module

Module Port VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

3 Veth6 10.1.1.2 (D)

4 Veth2 10.1.1.1 (D)

5 Veth13 10.1.1.5 (DI*)

* this terminal session

Related Commands

Command

Description

Displays information about all of the VTEPs that are configured on different modules for VXLAN 1.5.

show network-state tracking

command.

Syntax Description

(Optional) Displays the network configuration.

(Optional) Displays the network interface information.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

module

(Optional) Specifies a module.

Module number. The range is from 3 to 66.

Defaults

Displays information about the network state.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the network state:

n1000v# show network-state tracking module 3

ERROR: network-state tracking is disabled

Related Commands

Command

Description

Displays information about the network segments.

Enables NST for all VEMs configured with a vPC-HM port profile.

Specifies an interval of time, from 1 to 10 seconds, between which NST broadcasts are sent to pinpoint link failure on a port channel configured for a vPC-HM.

Configures the maximum number of NST broadcasts that can be missed consecutively before a split network is declared.

Configures the action to take if a split network is detected by NST.

show nsm ip pool template filter description

To display a specific ip pool template or subnet based on its description.

Syntax Description

Defaults

Displays the ip pool template or subnet information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK3(1.1)

This command was introduced.

Examples

This example shows how to display information about the pool of the NSM IP addresses:

switch# show nsm ip pool template filter description sub-10-1

Name: d259d433-3e5c-491b-afda-787ddc260dea

Description: sub-10-1

IP-address-range: 10.10.1.2-10.10.1.254

Network: 10.10.1.0

Subnet mask: 255.255.255.0

Related Commands

Command

Description

Displays information about all network segments.

Displays configured ip pool template or subnets.

show nsm network segment filter description

To display a specific network segment pool based on its description.

Syntax Description

Displays the network segment in its own independent object on its own.

Defaults

Displays the information configured for the network segment.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK3(1.1)

This command was introduced.

Examples

This example shows how to display information about the pool of the NSM IP addresses:

switch# show nsm network segment filter description net-10-1

Name: 3a43c169-bbf9-404d-abf0-3580b9a7113e

Description: net-10-1

UUID: 3a43c169-bbf9-404d-abf0-3580b9a7113e

Network segment pool: 39e45a8d-8ecd-4bb0-9666-6ddcec2cfefc

Mode: switchport mode access

Vlan: 1090

System Network Segment: FALSE

ip pool template: d259d433-3e5c-491b-afda-787ddc260dea

ip pool template UUID: d259d433-3e5c-491b-afda-787ddc260dea

Publish-name: 3a43c169-bbf9-404d-abf0-3580b9a7113e

Related Commands

Command

Description

Displays information about all network segments.

Displays configured ip pool template or subnets.

show nsm network segment pool filter description

To display a specific network segment pool based on its description.

Syntax Description

Displays the network segment in its own independent object on its own.

Defaults

Displays the information configured for this network segment pool.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK3(1.1)

This command was introduced.

Examples

This example shows how to display information about the pool of the NSM IP addresses:

switch# show nsm network segment pool filter description vm-pool1

Name: 39e45a8d-8ecd-4bb0-9666-6ddcec2cfefc

Description: vm-pool1

UUID: 39e45a8d-8ecd-4bb0-9666-6ddcec2cfefc

Logical network Name: 39e45a8d-8ecd-4bb0-9666-6ddcec2cfefc_log_net

Intra Port Communication: Disabled

Publish-name: 39e45a8d-8ecd-4bb0-9666-6ddcec2cfefc

Command

Description

Displays information about all network segments.

Displays configured ip pool template or subnets.

show nsm ip pool template

command.

Syntax Description

networks using an NSM IP pool template.

Displays the network segment using an NSM IP pool template.

Defaults

Displays information about the pool of NSM IP addresses.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the pool of the NSM IP addresses:

n1000v# show nsm ip pool template

Name: default-Abhi-Pool

Description:

IP-address-range: 192.168.5.10-192.168.5.254

Network: 192.168.5.0

Subnet mask: 255.255.255.0

Default router: 192.168.5.1

Netbios: Enabled

DHCP: Disabled

Reserved-ip-list:

192.168.5.30

192.168.5.31

192.168.5.39

192.168.5.40

Netbios-name-server-list:

192.168.5.7

192.168.5.8

192.168.5.9

192.168.5.6

DNS-server-list:

192.168.5.2

192.168.5.3

192.168.5.4

192.168.5.5

DNS-suffix-list:

Name: test

Description:

IP-address-range: 10.1.1.20-10.1.1.50

Network: 10.1.1.0

Subnet mask: 255.255.255.0

Default router: 10.1.1.1

Netbios: Disabled

DHCP: Disabled

Reserved-ip-list:

10.1.1.25

10.1.1.26

10.1.1.27

Netbios-name-server-list:

10.1.1.45

10.1.1.46

10.1.1.47

DNS-server-list:

10.1.1.35

10.1.1.36

DNS-suffix-list:

This example shows how to display information about a NSM IP pool named pool10:

n1000v# show nsm ip pool template name pool10

Name: pool10

Description: pool

IP-address-range: 172.16.0.7-172.16.0.9

Network: 172.16.10.10

Subnet mask: 255.255.255.0

Default router:

Netbios: Disabled

DHCP: Disabled

Reserved-ip-list:

Netbios-name-server-list:

DNS-server-list:

DNS-suffix-list:

This example shows how to display information about network segments:

n1000v# show nsm ip pool template usage network segment

Ip-pool: default-Abhi-Pool

LLVLAN-1621

LLVLAN-1622

LLVLAN-1623

LLVLAN-1624

.

.

.

community-2012

dhcp-261

novlan

sec-10

sec-20

sec-30-isolated

sec-40

sec-50

sec-60

sec-80

sec-promisc

Ip-pool: test

This example shows how to display information about a network segment using the NSM IP pool template name default-Abhi-pool:

n1000v# show nsm ip pool template usage network segment name default-Abhi-Pool

Ip-pool: default-Abhi-Pool

NS_VLAN_1

NS_VLAN_200

NS_VLAN_201

NS_VLAN_202

NS_VLAN_203

NS_VLAN_204

NS_VLAN_205

.

.

.

community-2012

novlan

sec-10

sec-20

sec-30-isolated

sec-40

sec-50

sec-60

sec-80

sec-promisc

Related Commands

Command

Description

Creates an IP route.

Configures an NSM IP pool.

Configures an NSM logical network.

nsm network segment

Configures a network segment.

Configures an NSM network segment pool.

Configures an NSM network uplink.

Displays an NSM logical network.

Displays information about an NSM network segment.

Displays NSM uplink information.

show nsm logical network

command.

Syntax Description

name

(Optional) Specifies an NSM logical network.

Defaults

Displays a complete list of the NSM logical networks.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a complete list of NSM logical networks:

n1000v# show nsm logical network

Name: Cisco-New

Description:

Name: IntranetSFO

Description: Network for external Internet connectivity

Name: Nexus1000V-Even

Description:

Name: Nexus1000V-Odd

Description:

Name: OTHER-N1k-2

Description:

Name: OTHERS-N1K

Description:

Name: System-Fabric

Description:

This example shows how to display an NSM logical network named IntranetSFO:

n1000v# show nsm logical network name IntranetSFO

Name: IntranetSFO

Description: Network for external Internet connectivity

Related Commands

Command

Description

Configures an NSM logical network.

nsm network segment

Configures a network segment.

Configures an NSM network segment pool.

Configures an NSM network uplink.

Displays information about the pool of NSM IP addresses.

Displays information about an NSM network segment.

Displays NSM uplink information.

show nsm network segment

command.

Syntax Description

brief

(Optional) Displays brief information about the NSM network segment pool.

filter

(Optional) Displays filtered information.

vlan

(Optional) Specifies the VLAN of the virtual machine (VM) network segment pool.

The VLAN number of the VM network segment. The range is from 0 to 2147483647.

name

(Optional) Specifies the NSM network segment pool name.

pool

(Optional) Specifies the NSM network segment pool.

(Optional) Displays virtual port profile usage by interface.

Defaults

Displays information about an NSM network segment.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

NSM automatically creates and deletes a VLAN as per segment configuration. Dhe example below shows VLAN ID 342 which was auto created because segment vlan_342 is set to access vlan 342.

Examples

This example shows how to display information about NSM network segments:

n1000v# # show nsm network segment

Name: NS_VLAN_1

VM Network Name: NS_VLAN_1

VM Network GUID: 67d1daca-8c47-463a-8952-e0327ec6b284

Description:

GUID: 102cde9c-2824-4589-9585-cc6d0efc7bac

Network segment pool: System-Definition

Vlan: 1

System Network Segment: TRUE

ip pool template: default-Abhi-Pool

ip pool template GUID: dca93874-e919-4bab-bb36-ddb1a0c74324

Publish-name: NS_VLAN_1

Name: NS_VLAN_200

VM Network Name: NS_VLAN_200

VM Network GUID: 85a5ae8a-5432-4752-b9c7-c7544b7c5e14

Description:

GUID: e8caa13b-5f76-4b2f-bfbe-945c39d7b143

Network segment pool: ND_VLAN_200

Vlan: 200

System Network Segment: FALSE

ip pool template: default-Abhi-Pool

ip pool template GUID: b4b3ffb1-ff83-4ff6-b513-a8a31907de1c

Publish-name: NS_VLAN_200

Name: NS_VLAN_201

VM Network Name: NS_VLAN_201

VM Network GUID: 3618421d-1e4e-42f9-b877-b72a943ae173

Description:

GUID: 1011fb3f-3ce7-4338-99c1-52422673f1e9

Network segment pool: ND_VLAN_201

Vlan: 201

System Network Segment: FALSE

...

This example shows how to display information about a NSM network segment named NS_VLAN_202:

n1000v# show nsm network segment name NS_VLAN_202

Name: NS_VLAN_202

VM Network Name: NS_VLAN_202

VM Network GUID: 567ee28a-6cfb-46ad-b464-568a133e7592

Description:

GUID: 09f638c6-c1f4-4b94-a9b9-a44e1dd92202

Nsm Network Segment Pool: ND_VLAN_202

Vlan: 202

System Network-Segment: FALSE

nsm ip pool template:

IP-Pool_template GUID:

Publish-name: NS_VLAN_202

This example shows how to display brief information about NSM network segments:

n1000v# show nsm network segment brief

--------------------------------------------------------------------------------

Network segment Mode VLAN Pub Sys

--------------------------------------------------------------------------------

DATA-Macpin access pÃÓ¿$Ì¦·t 0 0

NS_VLAN_1 access 1 1 1

NS_VLAN_200 access 200 1 0

NS_VLAN_201 access 201 1 0

NS_VLAN_202 access 202 1 0

NS_VLAN_203 access 203 1 0

NS_VLAN_204 access 204 1 0

NS_VLAN_205 access 205 1 0

NS_VLAN_206 access 206 1 0

...

This example shows how to display information about the NSM network segment pool configuration:

n1000v# show nsm network segment pool

Name: Cisco-Campus-New

GUID: ac0e898e-6a2d-400c-8f62-7a4bc7c08506

Logical network Name: Cisco-New

Intra Port Communication: Disabled

Publish-name: Cisco-Campus-New

Name: ND_VLAN_200

GUID: d6792668-52c7-4ac0-b5b2-b349a7b714b2

Logical network Name: Nexus1000V-Even

Intra Port Communication: Disabled

Publish-name: ND_VLAN_200

Name: ND_VLAN_201

GUID: b84e4b66-fe4b-4f43-8af8-f317720b42a4

Logical network Name: Nexus1000V-Odd

Intra Port Communication: Disabled

Publish-name: ND_VLAN_201

...

:

n1000v# show nsm network segment pool name Cisco-Campus-New

Name: Cisco-Campus-New

GUID: ac0e898e-6a2d-400c-8f62-7a4bc7c08506

Logical network Name: Cisco-New

Intra Port Communication: Disabled

Publish-name: Cisco-Campus-New

The following example shows how to display information about network segment pool information for VLAN 312:

n1000v# show nsm network segment filter vlan 312

Name: VLAN-312

VM Network Name: VLAN-312

VM Network GUID: 67639a71-d88c-400e-8c54-e0bab1e4ffd3

Description:

GUID: ecd1bd51-633f-4983-8660-c19b69cde734

Network segment pool: Cisco-Campus-New

Vlan: 312

System Network Segment: FALSE

ip pool template: default-Abhi-Pool

ip pool template GUID: 9e9f13cb-4ad8-4afa-811a-04fe5c578690

Publish-name: VLAN-312

n1000v#

This example shows how to display NSM network segment virtual port profile usage by interface.

n1000v# show nsm network segment virtual usage

-------------------------------------------------------------------------------

Network segment Port Profile Port Owner

-------------------------------------------------------------------------------

NS_VLAN_261 dynpp_39dd6ff0-7102-469e-bfe2-8de7eaaf0882_

c6cd32a9-08ab-46cb-a1fa-7ae9f4641625

Veth3 SUSE-003

Veth6 SUSE-002

Veth9 SUSE-004

Veth12 SUSE-001

dynpp_18e87473-bdb5-4e84-8fa5-204642fcaa32_

c6cd32a9-08ab-46cb-a1fa-7ae9f4641625

Veth1 Win2012-001

Veth2 Win2012-002

NS_VLAN_263 dynpp_39dd6ff0-7102-469e-bfe2-8de7eaaf0882_

694182a4-d4ed-4a24-9e98-de733ea16a10

Veth4 SUSE-003

Veth7 SUSE-002

Veth10 SUSE-004

Veth13 SUSE-001

sec-20 dynpp_39dd6ff0-7102-469e-bfe2-8de7eaaf0882_

6af9ccd8-c129-4bfd-b445-af82db0bbfe1

Veth5 SUSE-003

Veth8 SUSE-002

Veth11 SUSE-004

Veth14 SUSE-001

Related Commands

Command

Description

Enables the NSM feature.

Associates an network segmentation policy with the tenant ID.

Configures an NSM logical network.

nsm network segment

Configures an NSM network segment.

Configures an NSM network segment pool.

Configures an NSM network uplink.

Displays the network state.

Displays a complete list of NSM logical networks.

Displays NSM uplink information.

Defines the network segmentation policy type.

show nsm network uplink

command.

Syntax Description

brief

(Optional) Displays brief information about the network uplink.

filter

(Optional) Displays the network uplink through a filter.

(Optional) Specifies a network segment pool.

(Optional) Specifies an uplink network.

Uplink network name. The name is a maximum of 80 case-sensitive characters.

Defaults

Displays information about the NSM uplink network configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the NSM uplink network configuration:

n1000v# show nsm network uplink

nsm network uplink: DATA-Lacp

Publish-name: DATA-Lacp

import port-profile: Lacp-Policy

nsm network segment pool:

ND_VLAN_203

ND_VLAN_205

ND_VLAN_207

ND_VLAN_209

ND_VLAN_211

.

.

.

Cisco-Campus-New

port-profile config:

switchport mode trunk

switchport trunk allowed vlan 203,205,207,209,211,213,215,217,219,221

switchport trunk allowed vlan add 223,225,227,229,231,233,235,237,239

switchport trunk allowed vlan add 241,243,245,247,249,251,253,255,257

switchport trunk allowed vlan add 261-263,265,267,269,271,273,275,277

switchport trunk allowed vlan add 281,283,285,287,289,291,293,295,297

switchport trunk allowed vlan add 299,302,304,306,308,310,312,314,316

switchport trunk allowed vlan add 318,320,322,324,326,328,330,332,334

switchport trunk allowed vlan add 336,338,340,342,344,346,348,350,352

switchport trunk allowed vlan add 354,356,358,360,362,364,366,368,370

switchport trunk allowed vlan add 372,374,376,378,380,382,384,386,388

switchport trunk allowed vlan add 390,392,394,396,398,400-402,2012

nsm network uplink: DATA-Macpin

Publish-name: DATA-Macpin

import port-profile: Macpin-Policy

nsm network segment pool:

ND_VLAN_203

ND_VLAN_205

ND_VLAN_207

ND_VLAN_209

...

This example shows how to display information about the a specific NSM network segment pool:

n1000v# show nsm network uplink filter network segment pool ND_VLAN_203

uplink network: DATA-Lacp

Publish-name: DATA-Lacp

import port-profile: Lacp-Policy

network segment pool:

ND_VLAN_203

ND_VLAN_205

ND_VLAN_207

ND_VLAN_209

ND_VLAN_211

ND_VLAN_213

ND_VLAN_215

ND_VLAN_217

ND_VLAN_219

ND_VLAN_221

ND_VLAN_223

ND_VLAN_225

ND_VLAN_227

ND_VLAN_229

...

The following example shows how to display brief information about the NSM network uplink:

n1000v# show nsm network uplink brief

--------------------------------------------------------------------------------

network uplink Pub Sys

--------------------------------------------------------------------------------

DATA-Lacp 1 1

DATA-Lacp-System 1 1

DATA-Macpin 1 0

DATA-Macpin-System 1 1

UPLINK-MGMT-LACP 1 1

Uplink-MGMT 1 1

Uplink-MGMT-Host-180 1 1

Uplink_Even_Lacp 1 0

Uplink_Even_Macpin 1 0

--------------------------------------------------------------------------------

Total Total Pub Total Sys

--------------------------------------------------------------------------------

13 13 8

n1000v#

The following example shows how to display the list of NSM network uplinks that are filtered based on the Ethernet policy port profile:

n1000v# show nsm network uplink filter import UplinkNoPortChannel

uplink network: NexusUplink

Publish-name: NexusUplink

import port-profile: UplinkNoPortChannel

network segment pool:

IntranetSJ

System Uplink-Network: TRUE

Switchport mode override:auto

Native network segment: VMNetworkB

port-profile config:

n1000v#

The following example shows how to display the list of the network uplinks that are filtered based on the NSM network segment pools used:

n1000v# show nsm network uplink filter network segment pool IntranetSJ

Publish-name: NexusUplink

import port-profile: UplinkNoPortChannel

network segment pool:

IntranetSJ

System Uplink-Network: TRUE

Switchport mode override:auto

Native network segment: VMNetworkB

port-profile config:

n1000v#

Related Commands

Command

Description

nsm network segment

Configures an NSM network segment.

Configures an NSM logical network.

Configures an NSM network segment pool.

Configures an NSM network uplink.

Displays information about an NSM network segments.

Displays a complete list of NSM logical networks.

show ntp

command.

Syntax Description

Displays the authentication keys.

Displays the NTP authentication status.

Displays NTP internal information.

Displays the event history.

Displays the configuration history.

Displays the finite state machine (FSM) state transition.

Displays the message and transaction service (MTS) history.

Displays the request-to-send (RTS) history.

Displays the timestamp update history.

Displays the NTP memory allocation statistics.

(Optional) Displays detailed NTP memory allocation statistics.

Displays all line card related information.

Displays the NTP logging status.

Displays the all of the server/peers status.

Displays all of the peers.

Displays the NTP temporary peer database.

Displays the server address differences between the pending and configuration databases.

Displays the state of the request-to-send (RTS) update.

Displays the session status.

Displays the configured IP source address.

Displays NTP statistics.

Displays the input-output statistics.

Displays the counters maintained by the local NTP.

Displays the statistics counters related to memory code.

Displays the per-peer statistics counter.

Specifies the peer's IP address.

Peer’s IPv4 address.

Specifies a peer's name.

Peer name.

Displays the NTP distribution status.

Displays trusted keys.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display messages about the NTP internal event history:

n1000v# show ntp internal event-history msgs

1) Event:E_MTS_RX, length:60, at 850000 usecs after Tue Apr 2 16:38:30 2013

[REQ] Opc:MTS_OPC_NTP_SHOW_REQ(2702), Id:0X000C6945, Ret:SUCCESS

Src:0x00000101/17080, Dst:0x00000101/72, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x000C6945, Sync:UNKNOWN, Payloadsize:200

Payload:

0x0000: 00 00 00 01 00 00 00 58 00 00 00 00 61 64 6d 69

2) Event:E_MTS_TX, length:60, at 250000 usecs after Tue Apr 2 16:38:15 2013

[NOT] Opc:MTS_OPC_NTP_TIME_UPD(2707), Id:0X000C67EB, Ret:SUCCESS

Src:0x00000101/72, Dst:0x00000101/0, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x00000000, Sync:UNKNOWN, Payloadsize:16

Payload:

0x0000: 77 09 5b 51 90 d0 03 00 e9 47 00 00 80 b2 e6 0e

3) Event:E_MTS_RX, length:60, at 460000 usecs after Tue Apr 2 16:38:07 2013

[REQ] Opc:MTS_OPC_NTP_SHOW_REQ(2702), Id:0X000C678B, Ret:SUCCESS

Src:0x00000101/17078, Dst:0x00000101/72, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x000C678B, Sync:UNKNOWN, Payloadsize:200

Payload:

0x0000: 00 00 00 01 00 00 00 58 00 00 00 00 61 64 6d 69

4) Event:E_MTS_TX, length:60, at 250000 usecs after Tue Apr 2 16:36:45 2013

[NOT] Opc:MTS_OPC_NTP_TIME_UPD(2707), Id:0X000C601D, Ret:SUCCESS

Src:0x00000101/72, Dst:0x00000101/0, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x00000000, Sync:UNKNOWN, Payloadsize:16

Payload:

0x0000: 1d 09 5b 51 90 d0 03 00 8f 47 00 00 80 b2 e6 0e

...

Related Commands

Command

Description

Clears the NTP statistics.

Enables the NTP.

Configures an NTP peer.

Configures an NTP server.

Configures an NTP source.

show password strength-check

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the status of the password strength check:

n1000v# show password strength-check

Password strength check enabled

Related Commands

Command

Description

Enables password strength checking.

show port-channel capacity

command.

capacity

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display port channel capacity information:

n1000v# show port-channel capacity

Port-channel resources

1600 total 13 used 1587 free 0% used

Related CommandsPort-channel resources

Related Commands 1600 total 13 used 1587 free 0% used

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for balancing load on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel cdp-map

command.

cdp-map

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the port channel Cisco Discovery Protocol map:

n1000v# show port-channel cdp-map --------------------------------------------------------------------------------

Sub-grp id Device-id

--------------------------------------------------------------------------------

0 N5K-2-RowP-Rack6(SSI144506V9)

1 N5K-1-RowP-Rack7(SSI144506TY)

Related Commands

Command

Description

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for balancing load on the interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel compatibility-parameters

command.

compatibility-parameters

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about port channel compatibility parameters:

n1000v# show port-channel compatibility-parameters

* port mode

Members must have the same port mode configured.

* port mode

Members must have the same port mode configured, either E,F or AUTO. If

they are configured in AUTO port mode, they have to negotiate E or F mode

when they come up. If a member negotiates a different mode, it will be

suspended.

* speed

Members must have the same speed configured. If they are configured in AUTO

speed, they have to negotiate the same speed when they come up. If a member

negotiates a different speed, it will be suspended.

* MTU

Members have to have the same MTU configured. This only applies to ethernet

port-channel.

* shut lan

Members have to have the same shut lan configured. This only applies to

ethernet port-channel.

* MEDIUM

Members have to have the same medium type configured. This only applies to

ethernet port-channel.

* load interval

Member must have same load interval configured.

* sub interfaces

Members must not have sub-interfaces.

* Duplex Mode

Members must have same Duplex Mode configured.

* Ethernet Layer

Members must have same Ethernet Layer (switchport/no-switchport) configured.

* Storm Control

Members must have same storm-control configured.

* Flow Control

Members must have same flowctrl configured.

* Capabilities

Members must have common capabilities.

* Capabilities speed

Members must have common speed capabilities.

* Capabilities duplex

Members must have common speed duplex capabilities.

* rate mode

Members must have the same rate mode configured.

...

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel database

command.

Syntax Description

interface

(Optional) Specifies a port channel.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Defaults

Displays the port channel databases.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the port channel database:

n1000v# show port-channel database

port-channel1

Last membership update is successful

4 ports in total, 4 ports up

First operational port is Ethernet3/8

Age of the port-channel is 0d:02h:15m:38s

Time since last bundle is 0d:02h:15m:38s

Last bundled member is Ethernet3/8

Ports: Ethernet3/5 [on] [up]

Ethernet3/6 [on] [up]

Ethernet3/7 [on] [up]

Ethernet3/8 [on] [up] *

...

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel load-balance

command.

load-balance

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display port channel load balance information:

n1000v# show port-channel load-balance

port channel Load-Balancing Configuration:

System: source-mac

port channel Load-Balancing Addresses Used Per-Protocol:

Non-IP: source-mac

IP: source-mac

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel summary

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display port channel summary information:

n1000v# show port-channel summary

Flags: D - Down P - Up in port-channel (members)

I - Individual H - Hot-standby (LACP only)

s - Suspended r - Module-removed

S - Switched R - Routed

U - Up (port-channel)

M - Not in use. Min-links not met

--------------------------------------------------------------------------------

Group Port- Type Protocol Member Ports

Channel

--------------------------------------------------------------------------------

1 Po1(SU) Eth NONE Eth3/5(P) Eth3/6(P)

2 Po2(SU) Eth NONE Eth3/3(P) Eth3/4(P)

3 Po3(SU) Eth NONE Eth3/1(P) Eth3/2(P)

4 Po4(SD) Eth NONE --

5 Po5(SD) Eth NONE --

6 Po6(SU) Eth NONE Eth4/1(P) Eth4/2(P)

7 Po7(SU) Eth NONE Eth4/3(P) Eth4/4(P)

...

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel traffic

command.

Syntax Description

(Optional) Displays port channel interface information.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

Command Default

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display port channel traffic statistics:

n1000v# show port-channel traffic

show port-channel traffic

ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst

------ --------- ------- ------- ------- ------- ------- -------

1 Eth3/8 24.64% 0.0% 24.90% 18.45% 25.03% 0.0%

1 Eth3/7 24.64% 0.0% 24.85% 18.45% 25.01% 0.0%

1 Eth3/6 24.96% 0.0% 25.29% 18.45% 25.02% 0.0%

1 Eth3/5 25.75% 100.00% 24.94% 44.62% 24.92% 100.00%

------ --------- ------- ------- ------- ------- ------- -------

2 Eth3/4 47.29% 25.00% 49.92% 31.61% 50.11% 17.59%

2 Eth3/3 52.70% 75.00% 50.07% 68.38% 49.88% 82.40%

------ --------- ------- ------- ------- ------- ------- -------

3 Eth4/6 0.0% 0.0% 4.59% 24.96% 0.0% 0.0%

3 Eth4/5 57.96% 0.0% 60.82% 25.03% 69.91% 0.0%

3 Eth4/4 0.0% 0.0% 4.76% 24.96% 0.09% 0.0%

3 Eth4/3 42.03% 0.0% 29.82% 25.03% 29.99% 0.0%

...

This example shows how to display port channel traffic statistics for a specific interface:

n1000v# show port-channel traffic interface port-channel 2

ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst

------ --------- ------- ------- ------- ------- ------- -------

2 Eth3/4 47.33% 25.00% 49.92% 31.46% 50.10% 17.59%

2 Eth3/3 52.66% 75.00% 50.07% 68.53% 49.89% 82.40%

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-channel usage

command.

usage

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about port channel usage:

n1000v# show port-channel usage

Total 0 port-channel numbers used

============================================

Used :

Unused: 1 - 4096

(some numbers may be in use by SAN port channels)

Related Commands

Command

Description

Enables the LACP feature that bundles a number of physical ports together to form a single logical channel.

Creates a port channel interface and enters interface configuration mode.

Sets an algorithm for load balancing on interfaces in channel groups.

show port-channel

Displays port channel information.

show port-profile

command.

Syntax Description

brief

(Optional) Displays brief information about port profiles

expand-interface

(Optional) Displays the active profile configuration applied in an interface.

Port profile name.

fip

(Optional) Displays the enabled Fiber Channel over Ethernet (FCoE) Initilization Protocol (FIP).

name

(Optional) Displays the port profile by name.

usage

(Optional) Displays the list of interfaces inheritied by a port profile.

virtual

(Optional) Displays virtual port profile information.

Defaults

Displays all port profiles.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about port profiles:

n1000v# show port-profile

port-profile ACL_POLICY

type: Vethernet

description:

status: enabled

max-ports: 32

min-ports: 1

inherit:

config attributes:

ip port access-group acl-test in

no shutdown

evaluated config attributes:

ip port access-group acl-test in

no shutdown

assigned interfaces:

port-group: ACL_POLICY

system vlans: none

capability l3control: no

capability iscsi-multipath: no

capability vxlan: no

capability l3-vn-service: no

port-profile role: none

port-binding: static

port-profile ACL_POLICY1

type: Vethernet

description:

status: disabled

max-ports: 32

min-ports: 1

inherit:

config attributes:

evaluated config attributes:

assigned interfaces:

port-group:

system vlans: none

capability l3control: no

capability iscsi-multipath: no

capability vxlan: no

capability l3-vn-service: no

port-profile role: none

port-binding: static

.

.

.

port-profile uplink_network_default_policy

type: Ethernet

description: NSM created profile. Do not delete.

status: enabled

max-ports: 512

min-ports: 1

inherit:

config attributes:

no shutdown

evaluated config attributes:

no shutdown

assigned interfaces:

port-group:

system vlans: none

capability l3control: no

capability iscsi-multipath: no

capability vxlan: no

capability l3-vn-service: no

port-profile role: none

port-binding: static

...

This example shows how to display brief information about the port profiles:

n1000v# show port-profile brief

--------------------------------------------------------------------------------

Port Profile Profile Conf Eval Assigned Child

Profile Type State Items Items Intfs Profs

--------------------------------------------------------------------------------

ACL_POLICY Vethernet 1 2 2 0 0

ACL_POLICY1 Vethernet 0 0 0 0 0

AllAccess Ethernet 1 2 2 0 1

AllAccess1 Vethernet 1 1 1 0 0

AllowWebServerAccess Vethernet 1 1 1 0 0

NSM_template_segmentation Vethernet 1 1 1 0 0

NSM_template_vlan Vethernet 1 1 1 0 0

NexusUplink Ethernet 1 3 4 0 0

PortChannelProfile Ethernet 1 2 2 0 0

UNN Ethernet 1 3 3 0 0

bbb Vethernet 0 0 0 0 0

channel Ethernet 1 1 2 0 0

hsrp-1 Vethernet 1 3 3 0 0

ms-nlb Vethernet 1 3 3 0 0

msft Vethernet 1 1 1 0 0

name Ethernet 1 3 3 0 0

name1 Vethernet 1 0 0 0 0

trunk Ethernet 1 2 2 0 0

uplink-port-channel Ethernet 1 2 3 0 0

uplink_network_default_policy Ethernet 1 1 1 0 5

vrrp-1 Vethernet 1 3 3 0 0

--------------------------------------------------------------------------------

Profile Assigned Total Sys Parent Child UsedBy

Type Intfs Prfls Prfls Prfls Prfls Prfls

--------------------------------------------------------------------------------

Vethernet 0 12 0 12 0 0

Ethernet 0 9 1 7 6 0

This example shows how to display the enabled port profile FIP:

n1000v# show port-profile fip

Total number of Actions for ppm: 11

Action ID: 1 -> crash

Action ID: 2 -> switchover

Action ID: 3 -> reload

Action ID: 4 -> pssdump runtime db

Action ID: 5 -> pssdump runtime cfg

Action ID: 6 -> Sleep for 10 seconds

Action ID: 7 -> Sleep for 20 seconds

Action ID: 8 -> Sleep for 30 seconds

Action ID: 9 -> Sleep for 90 seconds

Action ID: 10 -> Sleep for 3 minutes

Action ID: 11 -> Sleep for 10 minutes

Total number of Fault injection points for ppm: 1

FIP ID: 1

Description: __dummy_entry_"ppm"

Enabled: no

Action ID: 0

Repeat Count: 0

This example shows how to display a specific port profile by its name:

n1000v# show port-profile name Lacp-Policy

port-profile Lacp-Policy

type: Ethernet

description:

status: enabled

max-ports: 512

min-ports: 1

inherit:

config attributes:

channel-group auto mode active

no shutdown

evaluated config attributes:

channel-group auto mode active

no shutdown

assigned interfaces:

port-group:

system vlans: none

port-binding: static

This example shows how to display a list of interfaces inherited by a port profile:

n1000v# show port-profile usage

port-profile Lacp-Policy

port-profile Macpin-Policy

port-profile NSM_template_segmentation

port-profile NSM_template_vlan

port-profile NexusNoRestriction

port-profile NexusUplink

port-profile PortChannelProfile

port-profile Uplink-10G-Lacp

port-profile Uplink-10G-Macpin

port-profile Uplink-MGMT

port-profile Uplink-Odd-Long-Macpin

port-channel1

port-channel2

port-channel3

port-channel4

Ethernet4/3

Ethernet4/5

...

This example shows how to display virtual port profile information:

n1000v# show port-profile virtual usage

-------------------------------------------------------------------------------

Port Profile Port Adapter Owner

-------------------------------------------------------------------------------

Uplink-Odd-Long-Macpin Po1

Po2

Po3

Po4

Eth4/3 vmnic2 NODE-137

Eth4/5 vmnic4 NODE-137

Eth5/4 vmnic3 NODE-139

Eth5/5 vmnic4 NODE-139

dynpp_3d5413ff-4755-41bd-9 Veth1 WIN-VM-07

Veth2 WIN-VM-07

Veth3 WIN-VM-08

Veth4 WIN-VM-08

Veth5 WIN-VM-01

Veth6 WIN-VM-01

Veth7 WIN-VM-06

Veth8 WIN-VM-06

Veth9 WIN-VM-03

Veth10 WIN-VM-03

Veth11 WIN-VM-04

Veth12 WIN-VM-04

Veth13 WIN-VM-05

Veth14 WIN-VM-05

Veth15 WIN-VM-02

Veth16 WIN-VM-02

...

Related Commands

Command

Description

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

t

Removes a particular switchport characteristic from a port profile.

Adds an inherited configuration to a new port profile as a default configuration.

Creates a port channel interface and enters interface configuration mode.

Creates an access group.

Configures Configures the maximum number of ports for a port profile.

Configures a network uplink.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Configures port binding for a port profile.

Creates a port profile and enters port profile configuration mode.

Configures a default port binding that is automatically applied to all new virtual Ethernet port profiles.

Disables all ports in a port profile.

Assigns a user to a port profile role.

show privilege

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about your privilege level:

n1000v# show privilege

User name: admin

Current privilege level: -1

Feature privilege: Disabled

show processes

command.

Syntax Description

(Optional) Displays the process CPU information.

(Optional) Displays the processes CPU utility history.

(Optional) Displays the CPU utility sorted CPU information.

(Optional) Displays information about process logs.

(Optional) Displays details of all logs.

(Optional) Displays detailed log information about a specific process.

Process ID number. The range is from 1 to 2147483647.

(Optional) Displays information about process logs in all virtual device contexts (VDCs).

(Optional) Displays process memory information.

(Optional) Displays shared memory information.

(Optional) Displays shared memory in bytes instead of default kbytes.

(Optional) Displays the details of dynamic shared memory segments

(Optional) Displays the processes in a VDC.

VDC number.

Defaults

Displays all of the running processes.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the CPU utility history of a processes:

n1000v# show processes

PID State PC Start_cnt TTY Process

----- ----- -------- ----------- ---- -------------

1 S 41520eb8 1 - init

2 S 0 1 - kthreadd

3 S 0 1 - migration/0

4 S 0 1 - ksoftirqd/0

5 S 0 1 - watchdog/0

6 S 0 1 - events/0

7 S 0 1 - khelper

8 S 0 1 - kblockd/0

9 S 0 1 - kacpid

10 S 0 1 - kacpi_notify

11 S 0 1 - kseriod

12 S 0 1 - ata/0

13 S 0 1 - ata_aux

14 S 0 1 - ksuspend_usbd

15 S 0 1 - khubd

16 S 0 1 - pdflush

17 S 0 1 - pdflush

18 S 0 1 - kswapd0

19 S 0 1 - aio/0

20 S 0 1 - nfsiod

21 S 0 1 - rpciod/0

331 S 0 1 - kjournald

336 S 0 1 - kjournald

908 S 0 1 - kjournald

915 S 0 1 - kjournald

985 S 0 1 - hv_vmbus_con/0

...

This example shows how to display information about the CPU process history:

n1000v# show processes cpu history

3132 34 1 122 2 3 1311 2 12 2 211 12 122 31 1 2

100

90

80

70

60

50

40

30

20

10

0....5....1....1....2....2....3....3....4....4....5....5....

0 5 0 5 0 5 0 5 0 5

CPU% per second (last 60 seconds)

# = average CPU%

2 43 3 5 3 55 2 3 4 3 3 5 2 33 6

413346343444545645444756541056404544639348454407304444449548

100

90

80

70 *

60 *

50 * * ** * * *

40 * * * ** * * * * ** *

30 ** * * * ** * * * * * ** *

20 * ** * * * ** * * * * * * * ** *

10 * ** ** **** **** **** * * * * * * ** * * ** #

0....5....1....1....2....2....3....3....4....4....5....5....

0 5 0 5 0 5 0 5 0 5

CPU% per minute (last 60 minutes)

* = maximum CPU% # = average CPU%

1

0

0

100 *

90 *

80 *

70 *

60 *

50 *

40 *

30 *

20 *

10 *

0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.

0 5 0 5 0 5 0 5 0 5 0 5 0

CPU% per hour (last 72 hours)

* = maximum CPU% # = average CPU%

This example shows how to display detailed CPU process log information:

n1000v# show processes log details

======================================================

Service: nsmgr

Description: NSMGR Daemon

Executable: /isan/bin/nsmgr

Started at Sat Mar 2 14:23:24 2013 (106772 us)

Stopped at Sat Mar 2 14:54:46 2013 (65483 us)

Uptime: 31 minutes 22 seconds

Start type: SRV_OPTION_RESTART_STATELESS (23)

Death reason: SYSMGR_DEATH_REASON_FAILURE_SIGNAL (2)

Last heartbeat 2.21 secs ago

RLIMIT_AS: 188358438

System image name: n1000vh-dk9.5.2.1.SM1.5.0.7.bin

System image version: 5.2(1)SM1(5.0.7) S0

PID: 3630

Exit code: signal 11 (core dumped)

CWD: /var/sysmgr/work

RLIMIT_AS: -1

Virtual Memory:

CODE 08048000 - 081A3C04

DATA 081A4000 - 081A6468

BRK 081B9000 - 085BF000

STACK BFBAC5A0

TOTAL 94380 KB

Memory Map: 08048000 nsmg 081A4000 nsmg 4143F000 ld-2.8.s 41459000 ld-2.8.s 4145A000 ld-2.8.s 4145D000 libc-2.8.s 41596000 libc-2.8.s 41598000 libc-2.8.s 4159E000 libdl-2.8.s

415A0000 libdl-2.8.s 415A1000 libdl-2.8.s 415A4000 libuuid.so.1. 415A7000 libuuid.so.1. 415BE000 libpthread-2.8.s 415D2000 libpthread-2.8.s 415D3000 libpthread-2.8.s 415D800

0 libm-2.8.s 415FC000 libm-2.8.s 415FD000 libm-2.8.s 41600000 libtinfo.so.5. 41615000 libtinfo.so.5. 41634000 librt-2.8.s 4163B000 librt-2.8.s 4163C000 librt-2.8.s 41654000 l

ibz.so.1.2. 41666000 libz.so.1.2. B2BE5000 libsyserr-data.so.0.0. B2CEB000 libsyserr-data.so.0.0. B2D15000 mts B6D15000 libmtsdlutils.so.0.0. B6D16000 libmtsdlutils.so.0.0. B

...

This example shows how to display information about shared CPU dynamic memory:

n1000v# show processes memory shared dynamic

Component Shared Memory Current Size Max Size Used

rsw_shm_urib 0X52650000 1048264 100663296 860160

rsw_shm_u6rib 0X59480000 1048264 16777216 588456

'+' - Dynamic shared memory segment.

'*' - Non-default sized share memory segment.

Related Commands

Command

Description

Accesses the standby VSM console from the active VSM.

show radius-server

command.

Syntax Description

(Optional) DNS name or IP address for the RADIUS server.

(Optional) Displays the directed server enable configuration.

(Optional) Displays RADIUS server group configuration information.

(Optional) RADIUS server group name. The name is a maximum of 127 characters.

(Optional) Displays the RADIUS servers sorted by name.

(Optional) Displays RADIUS statistics.

Defaults

Displays the RADIUS server configuration.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the RADIUS server configuration:

n1000v# show radius-server

retransmission count:1

timeout value:5

deadtime value:0

source interface:any available

total number of servers:0

This example shows how to display information about the RADIUS server group configuration:

n1000v# show radius-server groups

total number of groups:1

following RADIUS server groups are configured:

group radius:

server: all configured radius servers

deadtime is 0

This example shows how to display the RADIUS server configuration in a sorted format:

n1000v# show radius-server sorted

timeout value:5

retransmission count:1

deadtime value:0

source interface:any available

total number of servers:0

Related Commands

Command

Description

Configures the duration of time for which a nonreachable RADIUS or TACACS+ server is skipped.

Configures the dead-time interval for all RADIUS servers used by a device.

Allows users to send authentication requests to a specific RADIUS server when logging in.

Configures the RADIUS server parameters.

Configures a RADIUS shared secret key.

Configures the number of times that the device should try a request with a RADIUS server.

Configures the time between retransmissions to the RADIUS servers.

Configures the RADIUS server as a member of a RADIUS server group.

Displays information about the RADIUS server group configuration.

Displays the RADIUS server configuration in a sorted format.

Specifies a source interface for reaching a RADIUS or TACACS+ server group.

Configures VRF to contact this server group.

show redundancy status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the redundancy status:

n1000v# show redundancy status

Redundancy role

---------------

administrative: standalone

operational: standalone

Redundancy mode

---------------

administrative: HA

operational: None

This supervisor (sup-1)

-----------------------

Redundancy state: Active

Supervisor state: Active

Internal state: Active with no standby

Other supervisor (sup-2)

------------------------

Redundancy state: N/A

Supervisor state: N/A

Internal state: N/A

System start time: Tue Feb 19 20:39:03 2013

System uptime: 4 days, 14 hours, 2 minutes, 14 seconds

Kernel uptime: 4 days, 14 hours, 3 minutes, 1 seconds

Active supervisor uptime: 4 days, 14 hours, 1 minutes, 38 seconds

Related Commands

Command

Description

Accesses the standby VSM console from the active VSM.

show resource

command.

Syntax Description

(Optional) Displays the internal resource manager information.

Displays various resource managers event logs.

Displays the resource manager error logs.

Displays the various resource manager message logs.

Displays internal data structure information.

Displays the resource configuration for the virtual device context (VDC).

(Optional) Displays EtherChannel information.

(Optional) Displays IPv4 unicast route memory information.

(Optional) Displays VLAN information.

(Optional) Displays virtual routing and forwardings (VRFs) information.

Defaults

Displays information about the resource configuration for the VDC.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about internal event history messages:

n1000v# show resource internal event-history msgs

1) Event:E_MTS_RX, length:60, at 430700 usecs after Sat Mar 2 21:36:55 2013

[REQ] Opc:MTS_OPC_SDWRAP_DEBUG_DUMP(1530), Id:0X0001EBC3, Ret:SUCCESS

Src:0x00000101/5993, Dst:0x00000101/387, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x0001EBC3, Sync:UNKNOWN, Payloadsize:216

Payload:

0x0000: 01 00 2f 74 6d 70 2f 64 62 67 64 75 6d 70 31 32

2) Event:E_MTS_RX, length:60, at 121661 usecs after Sat Mar 2 21:32:54 2013

[REQ] Opc:MTS_OPC_VSH_CMD_TLV(7679), Id:0X0001C66C, Ret:SUCCESS

Src:0x00000101/3351, Dst:0x00000101/387, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x0001C66C, Sync:UNKNOWN, Payloadsize:264

Payload:

0x0000: 04 03 02 01 08 01 00 00 00 00 00 00 00 00 00 00

3) Event:E_MTS_RX, length:60, at 585476 usecs after Sat Mar 2 21:30:58 2013

[REQ] Opc:MTS_OPC_VSH_CMD_TLV(7679), Id:0X0001B184, Ret:SUCCESS

Src:0x00000101/3351, Dst:0x00000101/387, Flags:None

HA_SEQNO:0X00000000, RRtoken:0x0001B184, Sync:UNKNOWN, Payloadsize:272

Payload:

0x0000: 04 03 02 01 10 01 00 00 00 00 00 00 00 00 00 00

...

This example shows how to display information about port channel resources:

n1000v# show resource port-channel

Resource Min Max Used Unused Avail

-------- --- --- ---- ------ -----

port-channel 0 1600 16 0 1584

Related Commands

Command

Description

Displays information about the available resources.

show rmon

command.

Syntax Description

Displays the RMON alarm table.

Displays the RMON event table.

Displays the RMON high capacity (HC) alarm table.

Displays the RMON information.

Displays the RMON event log table.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display RMON events:

n1000v# show rmon events

Event 1 is active, owned by PMON@FATAL

Description is FATAL(1)

Event firing causes log and trap to community public, last fired never

Event 2 is active, owned by PMON@CRITICAL

Description is CRITICAL(2)

Event firing causes log and trap to community public, last fired never

Event 3 is active, owned by PMON@ERROR

Description is ERROR(3)

Event firing causes log and trap to community public, last fired never

Event 4 is active, owned by PMON@WARNING

Description is WARNING(4)

Event firing causes log and trap to community public, last fired never

Event 5 is active, owned by PMON@INFO

Description is INFORMATION(5)

Event firing causes log and trap to community public, last fired never

This example shows how to display RMON information:

n1000v# show rmon info

show rmon info

Maximum allowed 32 bit or 64 bit alarms : 512

Number of 32 bit alarms configured : 0

Number of 64 bit hcalarms configured : 0

show role

command.

Syntax Description

(Optional) Displays the role feature.

detail

(Optional) Displays detailed information.

(Optional) Specifies the feature name.

(Optional) Feature name. The name is case-sensitive and alphanumeric.

(Optional) Displays the uncommitted role configuration.

(Optional) Displays the uncommitted role configuration.

(Optional) Displays the role session status.

(Optional) Displays the role status.

Defaults

Displays information about the role configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

produces a list of predefined network administration and system- defined privilege roles.

Examples

This example shows how to display detailed information about the role feature:

n1000v# # show role feature detail

aaa (AAA service related commands)

show aaa *

config t ; aaa *

aaa *

clear aaa *

debug aaa *

show accounting *

config t ; accounting *

accounting *

clear accounting *

debug accounting *

cdp (Cisco Discovery Protocol related commands)

show cdp *

config t ; cdp *

cdp *

clear cdp *

debug cdp *

l3vm (Layer 3 virtualization related commands)

show vrf *

config t ; vrf *

routing-context vrf *

ping (Network reachability test commands)

show ping *

config t ; ping *

ping *

clear ping *

debug ping *

show ping6 *

config t ; ping6 *

ping6 *

clear ping6 *

debug ping6 *

show traceroute *

config t ; traceroute *

traceroute *

clear traceroute *

debug traceroute *

show traceroute6 *

config t ; traceroute6 *

traceroute6 *

clear traceroute6 *

debug traceroute6 *

...

This example shows how to display information about the role session status:

n1000v# show role session status

Last Action Time Stamp : None

Last Action : None

Last Action Result : None

Last Action Failure Reason : none

Related Commands

Command

Description

Adds a description for a role.

Assigns interfaces that users assigned to this role can access.

Creates a user role.

Creates a rule that defines criteria for a user role.

show routing-context

To display current the routing context, use the show routing-context command.

show routing-context

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the routing context:

n1000v# show routing-context

Current Route Context: default

show running-config

Syntax Description

(Optional) Displays the authentication, authorization, and accounting (AAA) configuration.

(Optional) Displays the running configuration with default command-line interfaces (CLIs).

(Optional) Displays the running configuration for the access control list (ACL) log.

(Optional) Displays the running configuration for the ACL Manager.

(Optional) Displays adjacency manager (AM) information.

(Optional) Displays the current operating configuration with defaults.

(Optional) Displays the Cisco Discovery Protocol configuration.

(Optional) Displays the certificate configuration.

(Optional) Displays the difference between the running and startup configuration.

(Optional) Displays the embedded event manager (EEM) running configuration.

(Optional) Hides configuration for offline provision interfaces.

(Optional) Displays the expanded port profile.

(Optional) Displays the interface configuration.

(Optional) Displays IP information.

(Optional) Displays the Layer 3 virtual module (VM) information.

(Optional) Displays the licensing configuration.

(Optional) Displays the NetFlow configuration.

(Optional) Displays the network segment information.

manager

(Optional) Displays network segmentation manager (NSM) information.

switch

Displays switch information.

policy

(Optional) Specifies policy information.

Policy name The name is a maximum of 80 characters.

(Optional) Displays the Network Time Protocol (NTP) information.

(Optional) Displays the Remote Authentication Dial-In User Service (RADIUS) server configuration.

(Optional) Displays the route policy manager (RPM) information.

(Optional) Displays the security configuration.

(Optional) Displays the Simple Network Management Protocol (SNMP) configuration.

(Optional) Displays spanning tree information.

port-channel

Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

(Optional) Displays the configurations of all virtual device contexts (VDCs).

(Optional) Specifies a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

default

Displays a known VRF name.

management

Displays the management interface.

(Optional) Displays the virtual service (vService) configuration.

(Optional) Displays vService node configuration.

(Optional) vService node/path name.

(Optional) Displays the vService path configuration.

(Optional) Displays the running configuration for the virtual shared hardware device (VSHD).

Defaults

Displays the running configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the information about the AAA running configuration:

n1000v# show running-config aaa all

!Time: Mon Feb 25 06:52:42 2013

version 5.2(1)SM1(5.1)

aaa authentication login default local

aaa authorization ssh-publickey default local

aaa authorization ssh-certificate default local

aaa accounting default local

aaa user default-role

aaa authentication login default fallback error local

aaa authentication login console fallback error local

no aaa authentication login error-enable

no aaa authentication login mschap enable

no aaa authentication login mschapv2 enable

no aaa authentication login chap enable

no aaa authentication login ascii-authentication

no radius-server directed-request

This example shows how to display all of the information about the AM running configuration:

n1000v# show running-config adjmgr all

!Command: show running-config adjmgr all

!Time: Mon Feb 25 06:58:55 2013

version 5.2(1)SM1(5.1)

ip adjmgr internal event-history snmp size small

ip adjmgr internal event-history sdb size small

ip adjmgr internal event-history cli size small

ip adjmgr internal event-history ha size small

ip adjmgr internal event-history stats size small

ip adjmgr internal event-history ipc size small

ip adjmgr internal event-history errors size small

ip adjmgr internal event-history control size small

hardware ip glean throttle maximum 1000

hardware ip glean throttle timeout 300

hardware ip glean throttle syslog 10000

ip adjacency route distance 250

This example shows how to display information about the EM running configuration:

n1000v# show running-config eem

!Command: show running-config eem

!Time: Mon Feb 25 07:07:17 2013

version 5.2(1)SM1(5.1)

This example shows how to display all of the information about the IP running configuration:

n1000v# show running-config ip all

!Command: show running-config ip all

!Time: Thu May 30 14:23:52 2013

version 5.2(1)SM1(5.1)

vrf context management

ip route 0.0.0.0/0 10.105.225.161

ip internal event-history static-rt size small

ip internal event-history vrf-errors size small

ip internal event-history cli size small

ip internal event-history ppf size small

ip internal event-history ha size small

ip internal event-history snmp size small

ip internal event-history ipc size small

ip internal event-history log size small

ip internal event-history errors size small

interface mgmt0

ip address 10.105.225.180/27

This example shows how to display information about the network segment running configuration:

n1000v# show running-config network segment

!Time: Thu May 30 14:26:35 2013

version 5.2(1)SM1(5.1)

feature network-segmentation-manager

nsm ip pool template default-Abhi-Pool

ip address 192.168.5.10 192.168.5.254

network 192.168.5.0 255.255.255.0

default-router 192.168.5.1

netbt

ip reserved 192.168.5.30

ip reserved 192.168.5.31

ip reserved 192.168.5.39

ip reserved 192.168.5.40

netbios-name-server 192.168.5.7

netbios-name-server 192.168.5.8

netbios-name-server 192.168.5.9

netbios-name-server 192.168.5.6

dns-server 192.168.5.2

dns-server 192.168.5.3

dns-server 192.168.5.4

dns-server 192.168.5.5

nsm ip pool template test

ip address 10.1.1.20 10.1.1.50

network 10.1.1.0 255.255.255.0

default-router 10.1.1.1

ip reserved 10.1.1.25

ip reserved 10.1.1.26

ip reserved 10.1.1.27

netbios-name-server 10.1.1.45

netbios-name-server 10.1.1.46

netbios-name-server 10.1.1.47

dns-server 10.1.1.35

dns-server 10.1.1.36

nsm logical network OTHERS-N1K

nsm logical network Nexus1000V-Even

nsm logical network Nexus1000V-Odd

nsm logical network OTHER-N1k-2

nsm logical network System-Fabric

nsm logical network Cisco-New

nsm logical network test

description 123

nsm network segment pool ND_VLAN_200

guid d6792668-52c7-4ac0-b5b2-b349a7b714b2

member-of logical network Nexus1000V-Even

nsm network segment pool ND_VLAN_201

guid b84e4b66-fe4b-4f43-8af8-f317720b42a4

member-of logical network Nexus1000V-Odd

nsm network segment pool ND_VLAN_202

guid 930dfa53-d7d3-4f97-9aa9-54178f4748db

member-of logical network Nexus1000V-Even

...

This example shows how to display all of the information about the RADIUS server running configuration:

n1000v# show running-config radius all

!Command: show running-config radius all

!Time: Tue Feb 26 02:14:20 2013

version 5.2(1)SM1(5.1)

radius-server test username test password test idle-time 0

radius-server timeout 5

radius-server retransmit 1

radius-server deadtime 0

aaa group server radius radius

deadtime 0

use-vrf default

no source-interface

no ip radius source-interface

This example shows how to display all of the information about the security running configuration:

n1000v# show running-config security all

!Time: Tue Feb 26 02:21:45 2013

version 5.2(1)SM1(5.1)

feature telnet

feature http-server

no feature scp-server

no feature sftp-server

feature ssh

username adminbackup password 5 ! role network-operator

username admin password 5 $1$BDbVzz6B$CxQD7xT9iwTJ51rq.XPhH1 role network-admin

password strength-check

banner motd #Nexus 1000V Switch

#

ssh key rsa 1024

no ssh key dsa

This example shows how to display all of the information about the SNMP running configuration:

n1000v# show running-config snmp all

!Command: show running-config snmp all

!Time: Tue Feb 26 02:32:24 2013

version 5.2(1)SM1(5.1)

snmp-server aaa-user cache-timeout 3600

snmp-server protocol enable

no snmp-server globalEnforcePriv

snmp-server tcp-session auth

snmp-server user admin auth md5 0x524afc847e9ae2f1d543c649bbc1e858 priv 0x524afc847e9ae2f1d543c649bbc1e858 localizedkey engineID 128:0:0:9:3:2:0:12:

0:0:0

rmon event 1 log trap public description FATAL(1) owner PMON@FATAL

rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL

rmon event 3 log trap public description ERROR(3) owner PMON@ERROR

rmon event 4 log trap public description WARNING(4) owner PMON@WARNING

rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

no snmp-server enable traps link

snmp-server enable traps entity entity_mib_change

snmp-server enable traps entity entity_module_status_change

snmp-server enable traps entity entity_power_status_change

snmp-server enable traps entity entity_module_inserted

snmp-server enable traps entity entity_module_removed

snmp-server enable traps entity entity_unrecognised_module

snmp-server enable traps entity entity_fan_status_change

snmp-server enable traps entity entity_power_out_change

snmp-server enable traps link linkDown

snmp-server enable traps link linkUp

snmp-server enable traps link extended-linkDown

snmp-server enable traps link extended-linkUp

snmp-server enable traps link cieLinkDown

snmp-server enable traps link cieLinkUp

snmp-server enable traps rf redundancy_framework

no snmp-server enable traps aaa server-state-change

...

This example shows how to display information about the VLAN range 1 to 5 running configuration:

n1000v# show running-config vlan 1,5

!Command: show running-config vlan 1, 5

!Time: Tue Feb 26 02:41:19 2013

version 5.2(1)SM1(5.1)

vlan 1

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config exclude

Syntax Description

Specifies the exclusion of the authentication, authorization, and accounting (AAA) configuration.

Specifies the exclusion of the callhome running configuration.

Specifies the exclusion of the Cisco Discovery Protocol configuration.

Specifies the exclusion of the certificates configuration.

Specifies the exclusion of the Cisco Fabric Services (CFS) running configuration.

Specifies the exclusion of the embedded event manager (EEM) running configuration.

Specifies the exclusion of the licensing configuration.

Specifies the exclusion of the Network Time Protocol (NTP) information.

Specifies the exclusion of the Remote Authentication Dial-In User Service (RADIUS) server configuration.

Specifies the exclusion of the security configuration.

Specifies the exclusion of the running configuration for the virtual shared hardware device (VSHD).

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The exclude command allows the user to enter a list of one to four keywords. Exceeding four keywords results in an ‘Invalid command’ message.

Examples

This example shows how to exclude running configuration information:

n1000v# show running-config exclude aaa cdp cfs eem

!Command: show running-config exclude aaa cdp cfs eem

!Time: Tue Feb 26 03:35:38 2013

version 5.2(1)SM1(5.1)

hostname Nexus1000V

feature telnet

feature network-segmentation-manager

username adminbackup password 5 ! role network-operator

username admin password 5 $1$BDbVzz6B$CxQD7xT9iwTJ51rq.XPhH1 role network-admin

banner motd #Nexus 1000V Switch

#

ip domain-lookup

errdisable recovery cause failed-port-state

snmp-server user admin auth md5 0x524afc847e9ae2f1d543c649bbc1e858 priv 0x524afc847e9ae2f1d543c649bbc1e858 localizedkey engineID 128:0:0:9:3:2:0:12:

0:0:0

rmon event 1 log trap public description FATAL(1) owner PMON@FATAL

rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL

rmon event 3 log trap public description ERROR(3) owner PMON@ERROR

rmon event 4 log trap public description WARNING(4) owner PMON@WARNING

rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

vrf context management

ip route 0.0.0.0/0 209.165.201.1

vlan 1,100-101,173,200,400

port-channel load-balance ethernet source-mac

port-profile default max-ports 32

...

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config interface all

Syntax Description

expand-port-profile

(Optional) Displays expanded port profile information.

Defaults

Displays the running configuration for all interfaces.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the interface running configuration:

n1000v# show running-config interface all

!Time: Thu May 30 14:29:42 2013

version 5.2(1)SM1(5.1)

interface port-channel1

inherit port-profile DATA-Macpin

no description

no switchport dot1q ethertype

lacp graceful-convergence

lacp suspend-individual

lacp fast-select-hot-standby

vem 3

no switchport block unicast

no switchport block multicast

no hardware multicast hw-hash

spanning-tree port-priority 128

spanning-tree cost auto

spanning-tree link-type auto

spanning-tree port type network

no spanning-tree bpduguard

no spanning-tree bpdufilter

logging event port link-status default

logging event port trunk-status default

speed auto

duplex auto

flowcontrol receive off

flowcontrol send off

mtu 1500

delay 1

snmp trap link-status

bandwidth 30000000

.

.

.

interface mgmt0

no description

speed auto

duplex auto

snmp trap link-status

no shutdown

cdp enable

ip address 10.105.225.180/27

interface Vethernet1

no description

shutdown

switchport

switchport mode access

no switchport dot1q ethertype

no switchport priority extend

no switchport block unicast

no switchport block multicast

no hardware multicast hw-hash

no hardware vethernet mac filtering per-vlan

no capability iscsi-multipath

no capability vxlan

no capability l3-vservice

mac auto-static-learn

no switchport uufb disable

spanning-tree port-priority 128

spanning-tree cost auto

spanning-tree link-type auto

spanning-tree port type edge

spanning-tree bpduguard enable

no spanning-tree bpdufilter

storm-control broadcast level 100

storm-control multicast level 100

storm-control unicast level 100

.

.

.

interface Ethernet3/2

inherit port-profile DATA-Macpin

no description

lacp port-priority 32768

lacp rate normal

cdp enable

no switchport dot1q ethertype

no switchport priority extend

spanning-tree port-priority 128

spanning-tree cost auto

spanning-tree link-type auto

spanning-tree port type edge

spanning-tree bpduguard enable

no spanning-tree bpdufilter

.

.

.interface control0

no description

speed auto

duplex auto

snmp trap link-status

no shutdown

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enters the port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config interface control

Syntax Description

Control interface number. The only valid value is 0.

(Optional) Displays the global interface running configuration information.

expand-port-profile

(Optional) Displays the expanded port profile information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the control interface running configuration:

n1000v# show running-config interface control 0

!Command: show running-config interface control0

!Time: Wed Mar 6 18:13:52 2013

version 5.2(1)SM1(5.1)

interface control0

no snmp trap link-status

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config interface ethernet

Syntax Description

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 4093.

(Optional) Displays global interface running configuration information.

expand-port-profile

(Optional) Displays expanded port profile information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the ethernet interface running configuration:

n1000v# show running-config interface ethernet 9/7 all

!Command: show running-config interface Ethernet9/7 all

!Time: Wed Mar 6 18:27:14 2013

version 5.2(1)SM1(5.1)

interface Ethernet9/7

inherit port-profile Lacp

no description

lacp port-priority 32768

lacp rate normal

cdp enable

no switchport dot1q ethertype

no switchport priority extend

spanning-tree port-priority 128

spanning-tree cost auto

spanning-tree link-type auto

spanning-tree port type edge

spanning-tree bpduguard enable

no spanning-tree bpdufilter

speed auto

mtu 1500

snmp trap link-status

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown)..

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config interface mgmt

Syntax Description

Management interface number. The only valid value is 0.

(Optional) Displays the global interface running configuration information.

expand-port-profile

(Optional) Displays the expanded port profile information.

Defaults

Displays information about the management interface running configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all the information about the management interface running configuration:

n1000v# show running-config interface mgmt 0 all

!Command: show running-config interface mgmt0 all

!Time: Wed Mar 6 18:31:01 2013

version 5.2(1)SM1(5.1)

version 5.2(1)SM1(5.1)

interface mgmt0

no description

speed auto

duplex auto

snmp trap link-status

no shutdown

cdp enable

ip address 10.105.225.180/27

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config interface port-channel

Syntax Description

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

(Optional) Displays global interface running configuration information.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Displays membership information.

Subinterface number. The range is from 1 to 4093.

Defaults

Displays the port channel interface running configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display all of the information about the port channel interface running configuration:

n1000v# show running-config interface port-channel 1 all

!Command: show running-config interface port-channel1 all

!Time: Wed Mar 6 18:36:44 2013

version 5.2(1)SM1(5.1)

interface port-channel1

inherit port-profile Macpin

no description

no switchport dot1q ethertype

lacp graceful-convergence

lacp suspend-individual

lacp fast-select-hot-standby

vem 3

no switchport block unicast

no switchport block multicast

no hardware multicast hw-hash

spanning-tree port-priority 128

spanning-tree cost auto

spanning-tree link-type auto

spanning-tree port type network

no spanning-tree bpduguard

no spanning-tree bpdufilter

logging event port link-status default

logging event port trunk-status default

speed auto

duplex auto

flowcontrol receive off

flowcontrol send off

mtu 1500

delay 1

snmp trap link-status

bandwidth 4000000

...

Related Commands!Command: show running-config interface port-channel1 all

Related Commands!Time: Wed Mar 6 18:36:44 2013

Related Commands

Related Commandsversion 5.2(1)SM1(5.1)

Related Commands

Related Commandsinterface port-channel1

Related Commands inherit port-profile PVLAN_Macpin

Related Commands no description

Related Commands no switchport dot1q ethertype

Related Commands lacp graceful-convergence

Related Commands lacp suspend-individual

Related Commands lacp fast-select-hot-standby

Related Commands vem 3

Related Commands no switchport block unicast

Related Commands no switchport block multicast

Related Commands no hardware multicast hw-hash

Related Commands spanning-tree port-priority 128

Related Commands spanning-tree cost auto

Related Commands spanning-tree link-type auto

Related Commands spanning-tree port type network

Related Commands no spanning-tree bpduguard

Related Commands no spanning-tree bpdufilter

Related Commands logging event port link-status default

Related Commands logging event port trunk-status default

Related Commands speed auto

Related Commands duplex auto

Related Commands flowcontrol receive off

Related Commands flowcontrol send off

Related Commands mtu 1500

Related Commands delay 1

Related Commands snmp trap link-status

Related Commands bandwidth 4000000

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration.

.

Erases the startup debug configuration in the persistent memory.

show running-config port-profile

Syntax Description

Defaults

Displays the running configuration of all port profiles.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Using a ? after the command, followed by a Return, will produce a list of all the running configuration port profiles.

Examples

This example shows how to display a list of all running port profiles:

CDP-Policy

DATA-Lacp

DATA-Macpin

DHCP-SERVER-UPLINK

ETH1

Eth-Profile-Mgmt

Lacp-Policy

Macpin-Policy

Macpin-Policy2

NSM_template_segmentation

NSM_template_vlan

Lacp

Macpin

U1

Uplink-10G-Lacp

Uplink-10G-Macpin

Uplink-MGMT

Uplink-Odd-Long-Macpin

Uplink_Even_Lacp

Uplink_Even_Macpin

Uplink_Even_Macpin2

Uplink_Even_Macpin3

...

This example shows how to display information about the running configuration for all port profiles:

!Command: show running-config port-profile

!Time: Thu Feb 28 12:31:13 2013

version 5.2(1)SM1(5.1)

port-profile default max-ports 32

port-profile default port-binding static

port-profile type vethernet NSM_template_vlan

no shutdown

guid 68bb01b1-ce5f-420f-92d6-4fb0bb3c6e0b

description NSM default port-profile for VLAN networks. Do not delete.

state enabled

port-profile type vethernet NSM_template_segmentation

no shutdown

guid d8fc84eb-1462-4fd9-8de8-ee806fab79e4

description NSM default port-profile for VXLAN networks. Do not delete.

state enabled

port-profile type ethernet ETH1

no shutdown

guid a2674200-64ca-411e-83c9-a92e0bd508c0

max-ports 512

state enabled

port-profile type vethernet VETH1

no shutdown

guid 39e631a2-0828-45e3-a33a-28cd2ef14d02

publish port-profile

state enabled

port-profile type ethernet uplink_network_default_policy

no shutdown

guid b77be06a-5e10-4fa3-a654-7585a1f0e017

max-ports 512

description NSM created profile. Do not delete.

state enabled

This example shows how to display information about a specific port profile’s running configuration:

version 5.2(1)SM1(5.1)

port-profile type ethernet vic-uplink

inherit port-profile vmdata-vpc-mac

no shutdown

guid 1d8703cd-40b4-4848-867d-296be908921e

max-ports 512

description NSM created profile. Do not delete.

system vlan 240,251,280

state enabled

Related Commands!

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the startup configuration port profiles.

.

Erases the startup debug configuration in the persistent memory.

show snmp

command.

Syntax Description

(Optional) Displays the SNMP community strings.

(Optional) Displays the SNMP context mapping entries.

(Optional) Displays the SNMP engine ID.

(Optional) Displays the SNMP group.

(Optional) Displays the SNMP hosts.

(Optional) Displays the SNMP sessions.

(Optional) Displays the SNMP source interface through which notifications are sent.

(Optional) Displays the SNMP traps.

(Optional) Specifies the SNMP v3 users.

(Optional) Name of the user. The name is a maximum of 28 characters.

Target SNMP v3 engine ID. The ID is a maximum of 128 characters.

Defaults

Displays all of the information about the SNMP.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about SNMP:

n1000v# show snmp

Community Group / Access context acl_filter

----------------------------- -------------- ------- ----------

sys contact:

sys location:

0 SNMP packets input

0 Bad SNMP versions

0 Unknown community name

0 Illegal operation for community name supplied

0 Encoding errors

0 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

0 Get-next PDUs

0 Set-request PDUs

61 SNMP packets output

0 Too big errors

0 No such name errors

0 Bad values errors

0 General errors

0 In No such name PDU

0 In Bad vlaue PDU

0 In Read only PDU

0 In General errors

0 In Get Responses

0 Unknown Context name

61 Out Traps PDU

0 Out Get Requests

0 Out Get Next Requests

0 Out Set Requests

0 Out Get Responses

0 Silent Drops

...

This example shows how to display information about the SNMP engineID:

n1000v# show snmp engineID

Local SNMP engineID: [Hex] 1234412336123361464013104123361361717461126131362417715

[Dec] 3682865:3158064:3158064:3747888:3354672:3158064:3224112:3356976:3486258:3355441:3290672

This example shows how to display information about the SNMP host:

n1000v# show snmp host

-------------------------------------------------------------------

Host Port Version Level Type SecName

-------------------------------------------------------------------

This example shows how to display information about the SNMP source interface:

n1000v# show snmp source-interface

-------------------------------------------------------------------

Notification source-interface

-------------------------------------------------------------------

trap -

inform -

-------------------------------------------------------------------

This example shows how to display information about the SNMP trap:

n1000v# show snmp trap

--------------------------------------------------------------------------------

Trap type Description Enabled

--------------------------------------------------------------------------------

entity : entity_mib_change Yes

entity : entity_module_status_change Yes

entity : entity_power_status_change Yes

entity : entity_module_inserted Yes

entity : entity_module_removed Yes

entity : entity_unrecognised_module Yes

entity : entity_fan_status_change Yes

entity : entity_power_out_change Yes

link : linkDown Yes

link : linkUp Yes

link : extended-linkDown Yes

link : extended-linkUp Yes

link : cieLinkDown Yes

link : cieLinkUp Yes

rf : redundancy_framework Yes

aaa : server-state-change No

license : notify-license-expiry Yes

license : notify-no-license-for-feature Yes

license : notify-licensefile-missing Yes

license : notify-license-expiry-warning Yes

upgrade : UpgradeOpNotifyOnCompletion No

upgrade : UpgradeJobStatusNotify No

feature-control : FeatureOpStatusChange No

sysmgr : cseFailSwCoreNotifyExtended No

rmon : risingAlarm Yes

rmon : fallingAlarm Yes

rmon : hcRisingAlarm Yes

rmon : hcFallingAlarm Yes

config : ccmCLIRunningConfigChanged No

snmp : authentication No

link : cisco-xcvr-mon-status-chg No

vtp : notifs No

vtp : vlancreate No

vtp : vlandelete No

bridge : newroot No

bridge : topologychange No

Related Commands

Command

Description

Configures how long the AAA synchronized user configuration stays in the local cache.

Creates an SNMP community string.

Configures the sysContact, which is the SNMP contact name.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server protocol enable

Enables SNMP.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

show ssh

command.

Syntax Description

Displays the SSH key.

(Optional) Displays the Digital Signature Algorithm (DSA) SSH keys.

(Optional) Displays the Rivest, Shamir, and Adleman (RSA) SSH keys.

Displays if the SSH server is enabled or not.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the SSH key:

n1000v# show ssh key

**************************************

rsa Keys generated:Tue Dec 18 14:05:14 2012

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDYBHLZgAs3cz5RtwgUcOvEGEfVn/pUHs5Lq8vfPF

5Rrtt6Kvb7GZx58o+K1SVD2pP9GTJS4dJchdo9O80HMmeTY2VRg0XSQ2xi9VJsKmf6yOkw3x9yTijm9

698dUTaFIo8YjMaPJBlb6/g6f3Zf9NN2DapzOJreh0lJMdhqeezOw==

bitcount:1024

fingerprint:

a2:25:3b:33:63:d0:cb:61:ee:65:87:19:83:09:1a:d7

**************************************

could not retrieve dsa key information

**************************************

This example shows how to display the SSH RSA key:

n1000v# show ssh key rsa

**************************************

rsa Keys generated:Wed Feb 27 14:44:30 2013

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCtXrFuRgBYeHPeZYwgdoYzsQG8jRLcZce7E+vNpnWn9N8R+K+qaqChgmlQdvpVFHAt7nnyQwnvmGnroZ4wEq7vHH15CFJrJGrzw1mH1QKqoC83IAdUwUykFMVe8JkyTkorIaMG0B

o+OMtqDQOPPefF0r3VtjZNN92cERDCwCuUBQ==

bitcount:1024

fingerprint:

9a:e8:e6:50:3a:dd:f9:ca:f3:7f:26:b6:80:fe:c5:ec

**************************************

This example shows how to display the SSH server:

n1000v# show ssh server

ssh version 2 is enabled

Related Commands

Command

Description

Clears the SSH host sessions.

Clears SSH sessions.

Enables the NetFlow.

Enables the SSH server.

ssh

show startup-config

command.

Syntax Description

aaa

(Optional) Displays the authentication, authorization, and accounting (AAA) configuration.

acllog

(Optional) Displays the startup configuration for the access control list (ACL) log.

all

(Optional) Displays the current operating configuration with defaults.

aclmgr

(Optional) Displays the startup configuration for the ACL manager.

adjmgr

(Optional) Displays adjacency manager (AM) information.

cdp

(Optional) Displays the Cisco Discovery Protocol configuration.

(Optional) Displays the certificate configuration.

eem

(Optional) Displays the embedded event manager (EEM) startup configuration.

exclude

(Optional) Specifies the exclusion of the startup configuration of listed features.

Specifies the exclusion of the startup configuration of callhome.

Specifies the exclusion of the startup configuration of the Cisco Fabric Services (CFS).

exclude-provision

(Optional) Specifies the exclusion of the configuration for any offline preprovision interfaces.

expand-port-profile

(Optional) Displays the expand port profile.

glsb

(Optional) Displays the Gateway Load Balancing Protocol (GLBP) startup configuration.

hsrp

(Optional) Displays the Hot Standby Router Protocol (HSRP) startup configuration.

ip

(Optional) Displays IP information.

l3vm

(Optional) Displays the Layer 3 virtual module (VM) information.

license

(Optional) Displays the licensing configuration.

log

(Optional) Displays the execution log of last used ASCII startup configuration.

netflow

(Optional) Displays the NetFlow configuration.

network segment

(Optional) Displays the network segment information.

manager

(Optional) Displays network segmentation manager (NSM) information.

switch

Displays the switch information.

policy

(Optional) Specifies NSM network segment policy information.

NSM network segment policy name. The name is a maximum of 80 characters.

ntp

(Optional) Displays Network Time Protocol (NTP) information.

port-profile

(Optional) Displays the port profile configuration.

radius

(Optional) Displays the Remote Authentication Dial-In User Service (RADIUS) configuration.

rpm

(Optional) Displays the route policy manager (RPM) information.

security

(Optional) Displays the security configuration.

snmp

(Optional) Displays the Simple Network Management Protocol (SNMP) configuration.

spanning-tree

(Optional) Displays spanning tree (SPT) information.

vdc-all

(Optional) Displays the configuration from all virtual device contexts (VDCs).

vlan

(Optional) Displays VLAN commands.

vrf

(Optional) Displays virtual routing and forwarding (VRF) information.

vrf_name

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

Displays the adjacency entries for all VRFs.

default

Displays a known VRF name.

management

Displays the management interface.

vrrp

(Optional) Displays the Virtual Router Redundancy Protocol (VRRP) startup configuration.

vservice

(Optional) Displays the virtual service (vService) configuration.

(Optional) Displays the vService node configuration.

(Optional) the vService node and path name.

(Optional) Displays the vService path configuration.

vshd

(Optional) Displays the running configuration for the virtual shared hardware device (VSHD).

wccp

(Optional) Displays the startup configuration for the Web Cache Communication Protocol (WCCP).

Defaults

Displays information about the network startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

The exclude command allows the user to enter a list of one to four items, each separated by white space. Exceeding four items will result in an ‘Invalid command’ message.

Examples

This example shows how to display information about the AAA startup configuration:

!Command: show startup-config aaa

!Time: Tue Feb 26 03:55:46 2013

!Startup config saved at: Mon Feb 25 14:55:27 2013

version 5.2(1)SM1(5.1)

This example shows how to display all of the information about the BFD startup configuration:

!Command: show startup-config bfd all

!Time: Tue Feb 26 03:56:33 2013

!Startup config saved at: Mon Feb 25 14:55:27 2013

version 5.2(1)SM1(5.1)

This example shows how to display all of the information about the Cisco Discovery Protocol startup configuration:

!Command: show startup-config cdp all

!Time: Tue Feb 26 03:58:05 2013

version 5.2(1)SM1(5.1)

cdp advertise v2

cdp enable

cdp holdtime 180

cdp timer 60

cdp format device-id system-name

interface mgmt0

cdp enable

This example shows how to display information about how to hide startup configuration information for offline preprovision interfaces:

!Command: show startup-config exclude-provision

!Time: Tue Feb 26 04:13:18 2013

!Startup config saved at: Mon Feb 25 14:55:27 2013

version 5.2(1)SM1(5.1)

hostname nexus1000v

feature telnet

feature scp-server

feature sftp-server

feature tacacs+

feature netflow

feature lacp

feature dhcp

feature network-segmentation-manager

username adminbackup password 5 ! role network-operator

username admin password 5 $1$BDbVzz6B$CxQD7xT9iwTJ51rq.XPhH1 role network-admin

banner motd #Nexus 1000V Switch

#

ip domain-lookup

errdisable recovery cause failed-port-state

mac access-list test-mac

statistics per-entry

30 permit 0002.3000.0000 0000.00FF.FFFF any

40 permit 0002.3100.0000 0000.00FF.FFFF any

50 permit 0002.3200.0000 0000.00FF.FFFF any

60 permit 0002.3300.0000 0000.00FF.FFFF any

70 permit 0002.3400.0000 0000.00FF.FFFF any

80 permit 0002.3500.0000 0000.00FF.FFFF any

90 permit 0002.3600.0000 0000.00FF.FFFF any

.

.

.

snmp-server user admin auth md5 0x524afc847e9ae2f1d543c649bbc1e858 priv 0x524afc847e9ae2f1d543c649bbc1e858 localizedkey engineID 128:0:0:9:3:2:0:12:

0:0:0

rmon event 1 log trap public description FATAL(1) owner PMON@FATAL

rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL

rmon event 3 log trap public description ERROR(3) owner PMON@ERROR

rmon event 4 log trap public description WARNING(4) owner PMON@WARNING

rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

.

.

.

vrf context management

ip route 0.0.0.0/0 10.105.225.161

vlan 1,10,20,30,40,50,60,80,200-302,304,306,308,310,312,314,316,318,320,322,324,326,328,330,332,334,336,338,340,342,344,346,348,350,352,354,356,358,

360,362,364,366,368,370,372,374,376,378,380,382,384,386,388,390,392,394,396,398,400-403,405-406,408,410,412,414,416

vlan 418,420,422,424,426,428,430,432,436,438,440,1000,2012

flow exporter exporter2

transport udp 9996

source lc-exp 10.105.225.180/27

dscp 63

version 9

flow exporter e123456789012345678901234567890123456789

transport udp 6

source lc-exp 10.105.225.180/27

dscp 63

version 9

.

.

.

lacp offload

port-channel load-balance ethernet source-mac

port-profile default max-ports 32

port-profile default port-binding static

port-profile type vethernet NSM_template_vlan

no shutdown

guid 83ef9f6f-d9c5-44d9-91b4-451645189695

description NSM default port-profile for VLAN networks. Do not delete.

state enabled

port-profile type vethernet NSM_template_segmentation

no shutdown

guid b228a787-7546-48e3-ad44-d9871754d9e9

description NSM default port-profile for VXLAN networks. Do not delete.

state enabled

port-profile type ethernet PortChannelProfile

channel-group auto

no shutdown

guid ad99025e-dadd-46e9-8486-cfc1a0d5d796

max-ports 512

state enabled

.

.

.

system storage-loss log time 30

interface mgmt0

ip address 10.105.225.180/27

interface Vethernet1

inherit port-profile dynpp_4a4baaec-30e6-4686-b130-24f31acbdcb2_2c97d33c-44b5-4e93-9b2e-d96ad521bad4

description 1000V

dvport uuid "D962C7C4-DF69-4254-A07C-E67F33CF887B"

interface Vethernet2

inherit port-profile dynpp_4a4baaec-30e6-4686-b130-24f31acbdcb2_2c97d33c-44b5-4e93-9b2e-d96ad521bad4

description 1000V

dvport uuid "1BD62078-9929-4118-9098-EB396D9BC143"

interface Ethernet3/5

inherit port-profile Uplink-MGMT

interface Ethernet4/5

inherit port-profile Uplink-MGMT

interface control0

no snmp trap link-status

line console

line vty

boot kickstart bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.4.bin sup-1

boot system bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.4.bin sup-1

boot kickstart bootflash:/n1000vh-dk9-kickstart.5.2.1.SM1.5.0.4.bin sup-2

boot system bootflash:/n1000vh-dk9.5.2.1.SM1.5.0.4.bin sup-2

...

This example shows how to display all of the information about the IP start up configuration:

!Command: show startup-config ip all

!

!Command: show startup-config ip all

!Time: Thu May 30 14:45:54 2013

!Startup config saved at: Mon May 27 16:37:08 2013

version 5.2(1)SM1(5.1)

vrf context management

ip route 0.0.0.0/0 10.105.225.161

ip internal event-history static-rt size small

ip internal event-history vrf-errors size small

ip internal event-history cli size small

ip internal event-history ppf size small

ip internal event-history ha size small

ip internal event-history snmp size small

ip internal event-history ipc size small

ip internal event-history log size small

ip internal event-history errors size small

interface mgmt0

ip address 10.105.225.180/27

This example shows how to display information about the network segment startup configuration:

n1000v# show startup-config network segment

!Command: show startup-config network segment

!Time: Thu May 30 14:47:58 2013

!Startup config saved at: Mon May 27 16:37:08 2013

version 5.2(1)SM1(5.1)

feature network-segmentation-manager

nsm ip pool template default-Abhi-Pool

ip address 192.168.5.10 192.168.5.254

network 192.168.5.0 255.255.255.0

default-router 192.168.5.1

netbt

ip reserved 192.168.5.30

ip reserved 192.168.5.31

ip reserved 192.168.5.39

ip reserved 192.168.5.40

netbios-name-server 192.168.5.7

netbios-name-server 192.168.5.8

netbios-name-server 192.168.5.9

netbios-name-server 192.168.5.6

dns-server 192.168.5.2

dns-server 192.168.5.3

dns-server 192.168.5.4

dns-server 192.168.5.5

nsm ip pool template test

ip address 10.1.1.20 10.1.1.50

network 10.1.1.0 255.255.255.0

default-router 10.1.1.1

ip reserved 10.1.1.25

ip reserved 10.1.1.26

ip reserved 10.1.1.27

netbios-name-server 10.1.1.45

netbios-name-server 10.1.1.46

netbios-name-server 10.1.1.47

dns-server 10.1.1.35

dns-server 10.1.1.36

nsm logical network OTHERS-N1K

nsm logical network Nexus1000V-Even

nsm logical network Nexus1000V-Odd

nsm logical network OTHER-N1k-2

nsm logical network System-Fabric

nsm logical network Cisco-New

nsm network segment pool ND_VLAN_200

guid d6792668-52c7-4ac0-b5b2-b349a7b714b2

member-of logical network Nexus1000V-Even

nsm network segment pool ND_VLAN_201

guid b84e4b66-fe4b-4f43-8af8-f317720b42a4

member-of logical network Nexus1000V-Odd

nsm network segment pool ND_VLAN_202

guid 930dfa53-d7d3-4f97-9aa9-54178f4748db

member-of logical network Nexus1000V-Even

...

This example shows how to display information about the RADIUS server startup configuration:

!Command: show startup-config radius

!Time: Wed Feb 27 18:07:21 2013

!Startup config saved at: Wed Feb 27 17:24:30 2013

version 5.2(1)SM1(5.1)

This example shows how to display information about the vService startup configuration:

!Command: show startup-config vservice

!Time: Wed Feb 27 18:09:15 2013

!Startup config saved at: Wed Feb 27 17:24:30 2013

version 5.2(1)SM1(5.1)

vservice global type vsg

tcp state-checks

This example shows how to display information about the VSHD startup configuration:

!Command: show startup-config vshd

!Time: Wed Feb 27 18:10:45 2013

!Startup config saved at: Wed Feb 27 17:24:30 2013

version 5.2(1)SM1(5.1)

line vty

Related Commands

Command

Description

Adds a description to the network segmentation policy.

Associates a network segmentation policy with the tenant ID.

Displays the running configuration.

show startup-config interface control

Syntax Description

Control interface number. The only valid value is 0.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Displays membership information.

Defaults

Displays the control interface startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the control interface startup configuration:

n1000v# show startup-config interface control 0

!Command: show startup-config interface control0

!Time: Wed May 29 14:46:48 2013

!Startup config saved at: Mon May 27 16:37:08 2013

version 5.2(1)SM1(5.1)

interface control0

no snmp trap link-status

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the current running configuration.

.

Erases the startup debug configuration in the persistent memory.

show startup-config interface ethernet

Syntax Description

/

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 4093.

Defaults

Displays the Ethernet interface startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the Ethernet interface startup configuration:

n1000v# show startup-config interface ethernet 3/5

!Time: Thu May 30 11:57:44 2013

!Startup config saved at: Mon May 27 16:37:08 2013

version 5.2(1)SM1(5.1)

interface Ethernet3/5

inherit port-profile Uplink-MGMT

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the current running configuration.

.

Erases the startup debug configuration in the persistent memory.

show startup-config interface mgmt

Syntax Description

Management interface number. The only valid value is 0.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Displays membership information.

Defaults

Displays the management interface startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the management interface startup configuration:

n1000v# show startup-config interface mgmt 0

!Command: show startup-config interface mgmt0

!Time: Thu May 30 14:51:13 2013

!Startup config saved at: Mon May 27 16:37:08 2013

version 5.2(1)SM1(5.1)

interface mgmt0

ip address 10.105.225.180/27

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the current running configuration.

.

Erases the startup debug configuration in the persistent memory.

show startup-config interface port-channel

Syntax Description

Port channel number. The range is from 1 to 4096.

(Optional) Specifies the subinterface separator (dot .)

Subinterface number. The range is from 1 to 4093.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Displays membership information.

Defaults

Displays the port channel interface startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the port channel interface startup configuration:

n1000v# show startup-config interface port-channel 1

!Command: show startup-config interface port-channel5

!Time: Tue Apr 23 13:49:02 2013

!Startup config saved at: Mon Apr 22 10:59:34 2013

version 5.2(1)SM1(5.1)

interface port-channel5

inherit port-profile Macpin

vem 5

switchport trunk allowed vlan 203,205,207,209,211,213,215,217,219,221

switchport trunk allowed vlan add 223,225,227,229,231,233,235,237,239

switchport trunk allowed vlan add 241,243,245,247,249,251,253,255,257

switchport trunk allowed vlan add 261-263,265,267,269,271,273,275,277

switchport trunk allowed vlan add 281,283,285,287,289,291,293,295,297

switchport trunk allowed vlan add 299,302,304,306,308,310,312,314,316

switchport trunk allowed vlan add 318,320,322,324,326,328,330,332,334

switchport trunk allowed vlan add 336,338,340,342,344,346,348,350,352

switchport trunk allowed vlan add 354,356,358,360,362,364,366,368,370

switchport trunk allowed vlan add 372,374,376,378,380,382,384,386,388

switchport trunk allowed vlan add 390,392,394,396,398,400-402,2012

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the current running configuration.

.

Erases the startup debug configuration in the persistent memory.

show startup-config interface vethernet

Syntax Description

Virtual Ethernet number. The range is from 1 to 1048575.

expand-port-profile

(Optional) Displays expanded port profile information.

(Optional) Displays membership information.

Defaults

Displays information about the virtual Ethernet interface startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the startup configuration for the virtual Ethernet interface:

n1000v# show startup-config interface vethernet 1 expand-port-profile

!Command: show startup-config interface Vethernet1 expand-port-profile

!Time: Tue Feb 26 04:55:14 2013

!Startup config saved at: Mon Feb 25 14:55:27 2013

version 5.2(1)SM1(5.1)

interface Vethernet1

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Removes a configured administrative state from a port profile and returns its member interfaces to the default state (shutdown).

Disables the loop detection mechanism to support a redundant routing protocol.

Enables the NSM feature.

Associates a network segmentation policy with the tenant ID.

Pins virtual Ethernet traffic to a specific subgroup.

Pins control or packet VLAN traffic to a specific subgroup.

Creates a port profile and enter port profile configuration mode.

Configures a service policy for an interface.

The basic system configuration dialog for creating or modifying a configuration file.

Displays the current running configuration.

.

Erases the startup debug configuration in the persistent memory.

show startup-config port-profile

command.

Syntax Description

Defaults

Displays information about the port profile startup configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a list of commands and available startup configuration port profiles:

?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

CDP-Policy

DATA-Lacp

DATA-Lacp-System

DATA-Macpin

DATA-Macpin-System

Eth-Profile-Mgmt

Lacp-Policy

Macpin-Policy

Macpin-Policy2

NSM_template_segmentation

NSM_template_vlan

PORT_CHANNEL

Uplink-MGMT

Uplink-MGMT-Host-180

Uplink_Even_Lacp

Uplink_Even_Macpin

large-pp

system-veth

uplink_network_default_policy

veth-no-policy

veth-policy

veth-policy1

veth-policy2

| Pipe command output to filter

This example shows how to display information about the port profile startup configuration:

!Command: show startup-config port-profile

!Time: Thu Feb 28 12:54:26 2013

!Startup config saved at: Thu Feb 28 10:18:11 2013

version 5.2(1)SM1(5.1)

port-profile default max-ports 32

port-profile default port-binding static

port-profile type vethernet NSM_template_vlan

no shutdown

guid 68bb01b1-ce5f-420f-92d6-4fb0bb3c6e0b

description NSM default port-profile for VLAN networks. Do not delete.

state enabled

port-profile type vethernet NSM_template_segmentation

no shutdown

guid d8fc84eb-1462-4fd9-8de8-ee806fab79e4

description NSM default port-profile for VXLAN networks. Do not delete.

state enabled

port-profile type ethernet ETH1

no shutdown

guid a2674200-64ca-411e-83c9-a92e0bd508c0

max-ports 512

state enabled

port-profile type vethernet VETH1

no shutdown

guid 39e631a2-0828-45e3-a33a-28cd2ef14d02

publish port-profile

state enabled

port-profile type ethernet uplink_network_default_policy

no shutdown

guid b77be06a-5e10-4fa3-a654-7585a1f0e017

max-ports 512

description NSM created profile. Do not delete.

...

This example shows how to display information about a specific port profile startup configuration:

!Command: show startup-config port-profile uplink_network_default_policy

!Time: Thu Feb 28 12:55:41 2013

!Startup config saved at: Thu Feb 28 10:18:11 2013

version 5.2(1)SM1(5.1)

port-profile type ethernet uplink_network_default_policy

no shutdown

guid b77be06a-5e10-4fa3-a654-7585a1f0e017

max-ports 512

description NSM created profile. Do not delete.

state enabled

Related Commands

Command

Description

Adds a description to the network segmentation policy.

Associates a network segmentation policy with the tenant ID.

Displays the running configuration.

Displays the running configuration port profiles.

Displays the startup configuration.

show stun statistics

command.

Syntax Description

Protocol name.

Displays a brief statistical summary for all the protocols.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display a brief statistical summary of STUN information:

n1000v# show stun statistics brief

Protocol: Direction TxPkts RxPkts DropPkts

----------------------------------------------------------------------------------

0: VSM 1234492 1550156 0

VEM 1550156 1234512 20

1: VSM 227168 67774 0

VEM 67774 227168 0

2: VSM 597129 687448 0

VEM 687448 597129 0

3: VSM 162513 162515 0

VEM 162515 162513 0

4: VSM 3 5 0

VEM 5 3 0

5: VSM 0 0 0

VEM 0 0 324926

show svs

command.

Syntax Description

Displays Asynchronous Inter-process Communication (AIPC) packets dropped for not matching the domain-ID field 0 or local domain-ID 0.

Displays connection information.

(Optional) SVS connection name. The name is a maximum of 64 characters.

Displays the domain configuration.

Displays SVS neighbor information.

Displays SVS upgrade information.

Displays the SVS upgrade status.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display SVS AIPC drops:

n1000v# show svs aipcdrops

Active Domain ID: 1023

AIPC Interface MAC: 0015-5de1-854c

Inband Interface MAC: 0015-5de1-854e

Src MAC Type Domain-id Node-id Last learnt (Sec. ago)

------------------------------------------------------------------------

This example shows how to display the SVS domain configuration:

n1000v# show svs domain

SVS domain config:

Domain id: 1023

Control vlan: 1

Packet vlan: 1

Control mode: L3

Switch guid: e19ff967-8526-4e1d-bef2-b737801de793

L3 control interface: mgmt0

Status: Config not pushed to Management Server.

Related Commands

Command

Description

Initiates a connection with the SCVMM.

domain id

Assigns a domain ID to the domain.

Names a VLAN.

Connects to remote machines.

show svs-domain

Displays the domain configuration.

Displays the configuration for the specified VLAN.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

Enables volatile licenses so that whenever a VEM is taken out of service its licenses are returned to the VSM pool of available licenses.

Configures a transport mode for control and packet traffic in the VSM domain.

Creates the domain and places you into CLI SVS domain configuration mode.

show switch edition

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

There are 2 switch editions, Advanced and Essential.

Examples

This example shows how to display information about the switch edition:

n1000v# show switch edition

Switch Edition: Advanced

Advanced Features

Feature Name Feature State

--------------------------------

vxlan-gateway enabled

Licenses Available: 501

Licenses In Use: 11

License Expiry Date: Never

n1000v# show switch edition

Switch Edition: Essential

Advanced Features

Feature Name Feature State

--------------------------------

vxlan-gateway disabled

Licenses Available: 48

Licenses In Use: 0

License Expiry Date: Never

Related Commands

Command

Description

Displays the switchname.

show switchname

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the switchname:

n1000v# show switchname

n1000v

Related Commands

Command

Description

Configures the hostname for a device.

show system

command.

Syntax Description

Displays the core transfer option.

Displays descriptions about errors.

Hexadecimal value for a specific error. The range is from 0x0 to 0xffffffff.

list

Displays a description about all error IDs.

Displays last exception log information.

statistics

Displays the inband statistics.

status

Displays selective packet discard information.

Displays the manage index table allocation usage.

Displays last persistent storage service (PSS) shrink status.

details

(Optional) Displays last PSS shrink status details.

Displays redundancy status.

Displays last reset reason.

(Optional) Specifies per-module reset reason code.

Module number. The range is from 1 to 66.

Displays system resources.

Displays system standby manual boot option.

Show how long the system has been up and running.

Displays virtual Ethernet Module (VEM) information.

feature level

Displays the VEM feature level.

version range

Displays VEM version related information.

Displays VLAN allocation status.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the system resources:

nexus1000v# show system resources

Load average: 1 minute: 0.00 5 minutes: 0.00 15 minutes: 0.00

Processes : 289 total, 2 running

CPU states : 1.0% user, 0.0% kernel, 99.0% idle

Memory usage: 2064844K total, 1368044K used, 696800K free

Current memory status: OK

This example shows how to display a list of system errors:

nexus1000v# show system error-id list

Common errors:

0x00000000 (SYSERR_SUCCESS): "success".

0x00000001 (SYSERR_NOMEM): "not enough memory".

0x00000002 (SYSERR_PSS_ERROR): "error while accessing PSS".

0x00000003 (SYSERR_CMI_NO_RESPOSE_PAYLOAD): "no cmi response payload".

0x00000004 (SYSERR_CMI_NULL_RECEIVE_BUF): "null cmi receive buffer".

0x00000005 (SYSERR_MGMT_ERROR): "unknown error".

0x00000006 (SYSERR_MGMT_NO_ENTRY): "entry not present".

0x00000007 (SYSERR_MGMT_NO_OBJECT): "object not present".

0x00000008 (SYSERR_MGMT_CREATION_FAILED): "error in creation".

0x00000009 (SYSERR_MGMT_DELETION_FAILED): "error in deleting".

0x0000000A (SYSERR_MGMT_INCONSISTENT_VALUE): "wrong value".

0x0000000B (SYSERR_IFINDEX_INVALID_TYPE): "if_index type invalid".

0x0000000C (SYSERR_IFINDEX_TYPE_MISMATCH): "if_index type mismatch".

0x0000000D (SYSERR_IFINDEX_TYPE_OUT_OF_RANGE): "if_index type out of range".

0x0000000E (SYSERR_IFINDEX_INVALID_ARG): "if_index arg invalid".

0x0000000F (SYSERR_FU_INVALID_ARG): "fu arg invalid".

0x00000010 (SYSERR_FU_FAILURE): "fu unknown error".

0x00000011 (SYSERR_FU_HASHTABLE_NOT_INITIALIZED): "fu hashtable not initialized".

0x00000012 (SYSERR_FU_HASHTABLE_KEY_NOT_PRESENT): "fu hashtable key not present".

0x00000013 (SYSERR_FU_HASHTABLE_EMPTY): "fu hashtable empty".

0x00000014 (SYSERR_FU_FSM_NOT_SYSTEM_MSG): "fu not a system message".

0x00000015 (SYSERR_FU_FSM_MSG_PROCESSED): "fu fsm message processed".

0x00000016 (SYSERR_FU_CQ_QUEUE_FULL): "fu cqueue full".

0x00000017 (SYSERR_FU_CQ_QUEUE_EMPTY): "fu cqueue empty".

0x00000018 (SYSERR_FU_CQ_NODE_ALLOC_FAILED): "fu cqueue node allocation failed".

0x00000019 (SYSERR_FU_CQ_INVALID_CQ_PTR): "fu cqueue invalid pointer".

0x0000001A (SYSERR_FU_CQ_INVALID_NODE_FOR_CQ): "fu cqueue invalid node".

0x0000001B (SYSERR_FU_CQ_NODE_NOT_FOUND): "fu cqueue node not found".

0x0000001C (SYSERR_FU_PSEL_Q_ENTRY_NOT_PRESENT): "fu priority select queue entry not present".

0x0000001D (SYSERR_FU_HA_NOT_STDBY_MSG): "fu ha not a standby message".

0x0000001E (SYSERR_FU_STDBY_EVENT_GENERATED): "fu ha standby event generated".

...

This example shows how to display system error by its hex address:

nexus1000v# show system error-id 0x0000001C

Error Facility: (null)

Error Description: fu priority select queue entry not present

This example shows how to display information about the system uptime:

n1000v# show system uptime

System start time: Sat Mar 2 16:35:51 2013

System uptime: 0 days, 2 hours, 37 minutes, 21 seconds

Kernel uptime: 0 days, 2 hours, 38 minutes, 9 seconds

Related Commands

Command

Description

Configures a redundancy role for the VSM.

Detects and configure storage connectivity losses.

Switches over to the standby supervisor.

Changes the software version supported on VEMs.

show system clis event-history

command.

Syntax Description

cli

Displays a log of command events.

client

Displays a log of client interaction events.

errors

Displays a log of errors.

ha

Displays a log of high availability events.

nvdb

Displays a log of NVDB and persistent storage service (PSS) events.

parser

Displays a log of parser events.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the system NVDB events:

n1000v# show system clis event-history nvdb

2013 Apr 12 15:00:30.810000 clis [2229]: [5889]: nvdb: transient thread created

2013 Apr 12 08:40:07.220000 clis [2229]: [2229]: nvdb: rx if removed

2013 Apr 12 08:39:20.520000 clis [2229]: [2229]: nvdb: rx layer 2 change

2013 Apr 12 08:39:20.460000 clis [2229]: [2229]: nvdb: rx pcm change

2013 Apr 12 08:39:20.440000 clis [2229]: [2229]: nvdb: rx layer 2 change

2013 Apr 12 08:39:20.270000 clis [2229]: [2229]: nvdb: rx layer 2 change

2013 Apr 12 08:39:19.870000 clis [2229]: [2229]: nvdb: rx if created

2013 Apr 12 08:33:20.310000 clis [2229]: [2229]: nvdb: rx if removed

2013 Apr 12 08:16:54.190000 clis [2229]: [2229]: nvdb: rx if created

2013 Apr 12 08:16:36.020000 clis [2229]: [2229]: nvdb: rx if removed

2013 Apr 12 08:16:28.340000 clis [2229]: [2229]: nvdb: rx layer 2 change

2013 Apr 12 08:16:28.320000 clis [2229]: [2229]: nvdb: rx layer 2 change

2013 Apr 12 08:16:27.790000 clis [2229]: [2229]: nvdb: Processed acfg gen req for comp = 0 type = 1 all = 0 vrf = null

2013 Apr 12 08:16:27.790000 clis [2229]: [2229]: nvdb: Rcvd acfg gen req for comp = 0 type = 1 all = 0 vrf = null

2013 Apr 12 08:16:27.790000 clis [2229]: [2229]: nvdb: rx ascii config gen

...

Related Commands

Command

Description

system pss

System PSS commands.

Configures a redundancy role for the VSM.

Detects and configure storage connectivity losses.

Switches over to the standby supervisor.

Changes the software version supported on VEMs.

show table-map

command.

Syntax Description

(Optional) Table map name. The name is a maximum of 40 case sensitive, alphanumeric characters.

(Optional) Displays the exceed color markdown map.

(Optional) Displays the violate color markdown map.

Defaults

Displays all the table maps.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display table map information:

n1000v# show table-map

Table-map cir-markdown-map

default copy

from 10,12 to 12

from 18,20 to 20

from 26,28 to 28

from 34,36 to 36

Table-map pir-markdown-map

default copy

from 10,12 to 14

from 18,20 to 22

from 26,28 to 30

from 34,36 to 38

Table-map cos-dscp-map

default copy

Table-map cos-precedence-map

default copy

...

This example shows how to display a table map by name:

n1000v# show table-map cir-markdown-map

Table-map cir-markdown-map

default copy

from 10,12 to 12

from 18,20 to 20

from 26,28 to 28

from 34,36 to 36

Related Commands

Command

Description

The default action for mapping input field values to output field values in a table map.

show tacacs-server

command.

Syntax Description

(Optional) DNS name or IP address.

(Optional) Displays the directed server enable configuration.

(Optional) Displays information about the TACACS+ server group configuration.

(Optional) TACACS+ server group name. The name is a maximum of 127 characters.

(Optional) Displays the TACACS+ servers sorted by server name.

(Optional) Displays TACACS+ statistics.

Defaults

Displays TACACS+ configuration information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display TACACS+ configuration information:

n1000v# show tacacs-server

timeout value:5

deadtime value:0

source interface:any available

total number of servers:0

Related Commands

Command

Description

Sets a dead time interval for monitoring a nonresponsive TACACS+ server.

Enables the TACACS+ server.

tacacs-server host

Designates the key shared between the Cisco Nexus 1000V and this specific TACACS+ server host.

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

Configures the time between retransmissions to the TACACS+ servers.

show tech-support

command.

Syntax Description

Displays the access control list (ACL) commands.

Displays adjacency manager (AM) information.

Displays detailed information for boot variable troubleshooting.

Displays information for segmentation troubleshooting.

Displays the switch summary.

Displays certificate information.

Displays information for parser troubleshooting.

Displays information for command-line interface (CLI) server troubleshooting.

Displays commands executed as part of show technical support commands.

Displays detailed information for troubleshooting.

Displays detailed information for Dynamic Host Configuration Protocol (DHCP) troubleshooting.

Displays embedded event manager (EEM) technical support information.

Displays detailed information for the Ethernet port manager (ETHPM) troubleshooting.

Displays detailed information for Ethernet port (ETHPORT) troubleshooting.

Displays detailed information for high availability troubleshooting.

Displays detailed information for index mapping (IM) troubleshooting.

Displays technical support and capture time taken to execute each command.

Displays internal information for troubleshooting.

Displays IP information.

Displays virtual routing and forwarding (VRF) information.

Displays detailed information for Link Aggregation Control Protocol (LACP) component.

Displays licensing information.

Displays information about NetFlow technical support.

Displays NPACL information.

Displays information for Network Time Protocol (NTP) troubleshooting.

Displays packet manager information.

Displays detailed information for port manager troubleshooting.

Displays detailed information for port channel troubleshooting.

Displays information for troubleshooting port profiles.

Displays routing information technical support.

Displays information about route policy manager (RPM) technical support.

Displays information about Service Abstraction Layer (SAL) technical support.

Displays information about shared memory technical support.

Displays information related to Simple Network Management Protocol (SNMP) technical support.

Displays the sockets status and configuration technical support.

Displays file system related issues.

Displays technical support information for the Server Virtualization Switch (SVS).

Displays detailed information for system management troubleshooting.

Displays detailed information for VLAN troubleshooting.

Displays detailed information for voice VLAN troubleshooting.

Displays information for XML troubleshooting.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Following many of the above commands with a space, then a question mark (?) will bring-up menus of additional arguments or keywords. If the menu contains a carriage return <cr>, with or without additional options, the command may be terminated at that level or, if they exist, one of the options may be chosen.

Examples

This example shows how to display technical support information for the ACL manager:

n1000v# show tech-support aclmgr

`show system internal aclmgr status`

Current operation: None

last operation: CLI configuration

Last operation status: success

CLI:

`show system internal aclmgr log`

2013-03-02 18:26:40.549682 [0x0004a80f] Responding to MTS message with status 0x0

2013-03-02 18:26:40.570733 DESTROYING session ff01018210000190

2013-03-02 18:26:40.782523 [0x0004aa19] Received MEMBER_DOWN event...

2013-03-02 18:26:40.786322 [PLAN]

0: ACLMGR_PLANNING_SESSION_ID (1) (not done)

1: ACLMGR_PLANNING_MTS_EVENT_DETAILS (2) (not done)

type = 61453 (MTS_OPC_ETHPM_BUNDLE_MEMBER_DOWN);

2: ACLMGR_PLANNING_COMMIT (3) (not done)

2013-03-02 18:26:40.786330 [0x0004aa19] Responding to MTS message with status 0x0

2013-03-02 18:26:40.786335 [0x0004aa19] .......MEMBER_DOWN includes bundle/ifindex 0x1600000b/0x25014000

2013-03-02 18:26:40.787342 DESTROYING session ff01018210000191

2013-03-02 18:26:41.110305 [0x0004ab31] Received PHY_CLEANUP event for ifindex 0x25014000...

2013-03-02 18:26:41.114345 [PLAN]

0: ACLMGR_PLANNING_SESSION_ID (1) (not done)

1: ACLMGR_PLANNING_MTS_EVENT_DETAILS (2) (not done)

type = 61446 (MTS_OPC_ETHPM_PORT_PHY_CLEANUP);

2: ACLMGR_PLANNING_COMMIT (3) (not done)

2013-03-02 18:26:41.114353 [0x0004ab31] Responding to MTS message with status 0x0

2013-03-02 18:26:41.116801 DESTROYING session ff01018210000192

2013-03-02 18:26:41.124687 [PLAN]

0: ACLMGR_PLANNING_SESSION_ID (1) (not done)

1: ACLMGR_PLANNING_MTS_EVENT_DETAILS (2) (not done)

type = 62483 (MTS_OPC_IM_PORT_L2_PARAM_CHANGE);

2: ACLMGR_PLANNING_COMMIT (3) (not done)

2013-03-02 18:26:41.124694 [0x0004ab4d] Responding to MTS message with status 0x0

2013-03-02 18:26:41.125792 DESTROYING session ff01018210000193

2013-03-02 18:26:41.172917 [PLAN]

0: ACLMGR_PLANNING_SESSION_ID (1) (not done)

1: ACLMGR_PLANNING_MTS_EVENT_DETAILS (2) (not done)

type = 62483 (MTS_OPC_IM_PORT_L2_PARAM_CHANGE);

2: ACLMGR_PLANNING_COMMIT (3) (not done)

2013-03-02 18:26:41.172924 [0x0004abab] Responding to MTS message with status 0x0

2013-03-02 18:26:41.173937 DESTROYING session ff01018210000194

...

as an option:

n1000v# show tech-support ip ?

<CR>

> Redirect it to a file

>> Redirect it to a file in append mode

brief Brief information

igmp Display IGMP status and configuration

| Pipe command output to filter

n1000v# show tech-support ip igmp

`show running-config igmp`

!Command: show running-config igmp

!Time: Tue Apr 23 14:36:17 2013

version 5.2(1)SM1(5.1)

vlan configuration 77

no ip igmp snooping explicit-tracking

`show system internal sysmgr service name igmp`

Service "igmp" ("igmp", 35):

UUID = 0x11E, PID = 2655, SAP = 352

State: SRV_STATE_HANDSHAKED (entered at time Mon Apr 22 10:37:49 2013).

Restart count: 1

Time of last restart: Mon Apr 22 10:37:48 2013.

The service never crashed since the last reboot.

Tag = N/A

Plugin ID: 1

`show system internal feature-mgr feature state | include igmp`

`show processes threads igmp`

Thread-name Pid Stack-base Stack-size Bytes used MaxTimeigmp:worker-thread 2980 0xb2342000 0x1f000 0x1054

3% 0

igmp:ip-thread 2979 0xb2362000 0x1f000 0x2744 8% 10

igmp:main-thread 2978 0xb2382000 0x3f000 0x620c 10% 110

igmp:igmp-cli-thread 2677 0xb240b000 0x3f000 0x5198 8% 10

igmp:gq-proxy-response-th 2674 0xb24ce000 0x1f000 0x1014 3% 0

igmp:rib-update-thread 2673 0xb24ee000 0x1f000 0x1c6c 6% 0

igmp:igmp-sysmgr-thread 2672 0xb2549000 0x1f000 0x3f8c 13% 10

igmp:active-timer-thread 2667 0xb2569000 0x1f000 0x2084 7% 0

`show ip client igmp`

Client: igmp, uuid: 286, pid: 2655, extended pid: 2655

...

This example shows how to display port profile technical support information:

n1000v# show tech-support port-profile

`show port-profile`

port-profile CDP-Policy

type: Ethernet

description:

status: enabled

max-ports: 512

min-ports: 1

inherit:

config attributes:

channel-group auto mode on sub-group cdp

no shutdown

evaluated config attributes:

channel-group auto mode on sub-group cdp

no shutdown

assigned interfaces:

port-group:

system vlans: none

capability l3control: no

capability iscsi-multipath: no

capability vxlan: no

capability l3-vn-service: no

port-profile role: none

port-binding: static

port-profile DATA-Lacp

type: Ethernet

description: NSM created profile. Do not delete.

status: enabled

max-ports: 512

min-ports: 1

inherit: Lacp-Policy

config attributes:

...

This example shows how to display brief sockets technical support information:

n1000v# show tech-support sockets brief

`show sockets buffers`

TCPUDP Packet buffer status:

Packet mbuf statistics:

mbufs obtained from page pool 285

clusters obtained from page pool 228

spare 0

free clusters 21

times failed to find space 0

times waited for space 0

times drained protocols for space 0

Types

Free 0

Data 208

Out of band data 0

Security rights 0

Socket name 0

Control 0

Socket Options 0

Header 1

Free addr

0x86caf00

`show sockets statistics all`

TCP v4 Received:

12537 total packets received, 8158 packets received in sequence,

380582 bytes received in sequence, 61 duplicate-only packets received,

5100 duplicate-only bytes received, 2 packets with some duplicate data,

616 dup. bytes in part-dup. packets, 289 out-of-order packets received

...

show telnet server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the status of the Telnet server:

n1000v# show telnet server

telnet service enabled

Related Commands

Command

Description

Enables a Telnet server.

telnet

Creates and configures a Telnet session.

show terminal

command.

Syntax Description

(Optional) Displays terminal internal information.

Defaults

Displays brief information about the terminal.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the terminal:

n1000v# show terminal

TTY: /dev/pts/2 Type: "vt100"

Length: 22 lines, Width: 61 columns

Session Timeout: 30 minutes

Event Manager CLI event bypass: yes

Redirection mode: ascii

Accounting log all commands (including show commands): no

Vlan mutex value: 1

Vlan batch mode: yes

This example shows how to display internal terminal information:

n1000v# show terminal internal info

Process info:

Name: vsh

State: R (running)

Tgid: 14225

Pid: 14225

PPid: 14186

TracerPid: 0

Uid: 2002 2002 2002 2002

Gid: 503 503 503 503

FDSize: 256

Groups: 503

VmPeak: 129364 kB

VmSize: 128640 kB

VmLck: 0 kB

VmHWM: 12168 kB

VmRSS: 11908 kB

VmData: 2908 kB

VmStk: 84 kB

VmExe: 48 kB

VmLib: 18836 kB

VmPTE: 96 kB

Threads: 1

SigQ: 0/16383

SigPnd: 0000000000000000

ShdPnd: 0000000000000000

SigBlk: 0000001000000000

SigIgn: 0000000000300004

SigCgt: 0000000180007002

...

Memory limits:

core file size (blocks, -c) unlimited

data seg size (kbytes, -d) unlimited

scheduling priority (-e) 0

file size (blocks, -f) unlimited

pending signals (-i) 16383

max locked memory (kbytes, -l) 32

max memory size (kbytes, -m) unlimited

open files (-n) 1024

pipe size (512 bytes, -p) 8

POSIX message queues (bytes, -q) 819200

real-time priority (-r) 0

stack size (kbytes, -s) 8192

cpu time (seconds, -t) unlimited

max user processes (-u) 1024

virtual memory (kbytes, -v) 286933

file locks (-x) unlimited

Related Commands

Command

Description

Accesses configuration commands in the CLI global configuration mode.

Configures the length of time, in minutes, that an inactive Telnet or SSH session remains open until it automatically shuts down.

Bypasses the CLI event manager.

Sets the number of lines that appear on the screen.

Enables logging for Telnet or SSH.

terminal session-timeout

Sets the session timeout.

terminal terminal-type

Sets the terminal type.

Updates the main parse tree.

terminal width

Sets the terminal width.

show upgrade mode

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the upgrade mode:

n1000v# show upgrade mode

Upgrade mode: Normal

Related Commands

Command

Description

Displays the software version.

show username

command.

Syntax Description

User name. The name is a maximum of 28 case-sensitive characters.

The Secure Shell (SSH) key pairs.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about a user:

n1000v# show username admin keypair

**************************************

could not retrieve rsa key information

**************************************

could not retrieve dsa key information

**************************************

Related Commands

Command

Description

Clears a user session.

show users

Displays information about the logged in users.

Creates and configures a user account.

show users

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the users that are logged in to the system:

n1000v# show users

NAME LINE TIME IDLE PID COMMENT

admin pts/0 May 30 14:11 . 29577 (10.61.92.212) session=ssh *

admin pts/2 May 29 19:54 03:56 11962 (10.105.225.143) session=ssh

Related Commands

Command

Description

Clears a user session.

Configures the length of time, in minutes, that an inactive Telnet or SSH session remains open before it is automatically shut down.

show username

Displays information about the users.

d

Changes the network administration password in the running configuration.

show uufb status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the UUFB status:

n1000v# show uufb status

UUFB Status: Disabled

show version

command.

Syntax Description

(Optional) Displays the software version of a given image.

Enter bootflash Uniform Resource Identifier (URI) to compare.

Enter modflash URI to compare.

Enter volatile URI to compare.

(Optional) Displays internal commands.

Displays the build ID of currently running software versions.

Displays he software compatibility results between two image.

Specifies the kickstart image to be compared

Specifies the system image containing module information to be compared.

Module number. The range is from 1 to 66.

Specifies the system image to be compared.

Defaults

Displays information about the switch version.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

When you type the bootflash:, modflash:, or volatile: options and then press the Tab Key, the command-line interface (CLI) lists a selection of filenames contained in the named directory.

Examples

This example shows how to display information about the bootflash files:

n1000v# show version image bootflash:<Tab>

bootflash:/// bootflash://module-2/ bootflash://sup-2/ bootflash://sup-local/ bootflash://sup-standby/

bootflash://module-1/ bootflash://sup-1/ bootflash://sup-active/ bootflash://sup-remote/

This example shows how to display information about the version:

n1000v# show version

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

Documents: http://www.cisco.com/en/US/products/ps9372/tsd_products_support_series_home.html

Copyright (c) 2002-2013, Cisco Systems, Inc. All rights reserved.

The copyrights to certain works contained herein are owned by

other third parties and are used and distributed under license.

Some parts of this software are covered under the GNU Public

License. A copy of the license is available at

http://www.gnu.org/licenses/gpl.html.

Software

loader: version unavailable [last: loader version not available]

kickstart: version 5.2(1)SM1(5.1) [build 5.2(1)SM1(5.0.7)]

system: version 5.2(1)SM1(5.1) [build 5.2(1)SM1(5.0.7)]

kickstart image file is: bootflash:///n1000vh-dk9-kickstart.5.2.1.SM1.5.0.7.bin

kickstart compile time: 2/28/2013 19:00:00 [03/01/2013 03:12:52]

system image file is: bootflash:///n1000vh-dk9.5.2.1.SM1.5.0.7.bin

system compile time: 2/28/2013 19:00:00 [03/01/2013 05:49:34]

Hardware

cisco Nexus 1000V Chassis ("Virtual Supervisor Module")

Intel(R) Xeon(R) CPU with 2064844 kB of memory.

Processor Board ID T155DE1854D

Device name: nexus1000v

bootflash: 3122988 kB

Kernel uptime is 0 day(s), 0 hour(s), 58 minute(s), 43 second(s)

plugin

Core Plugin, Ethernet Plugin, Virtualization Plugin

This example shows how to display information about the version build:

n1000v# show version internal build-identifier

Kickstart image file: bootflash:///n1000vh-dk9-kickstart.5.2.1.SM1.5.0.327.bin : S0

System image file: bootflash:///n1000vh-dk9.5.2.1.SM1.5.0.327.bin : S0

Related Commands

Command

Description

Reloads one of the VSMs in a redundant pair.

show vlan

command.

Syntax Description

(Optional) Specifies the VLAN access list.

VLAN access list name.

(Optional) Specifies the VLAN access maps.

VLAN access map name.

(Optional) Displays all ports on VLAN.

(Optional) Displays all VLAN status in brief.

(Optional) Displays the native dot1q tag parameters.

(Optional) Displays information about VLAN filters.

vlan

(Optional) Specifies the access map applied to a VLAN.

VLAN identification number. The range is from 1 to 3967 and 4048 to 4093 or range(s): 1 to 5, 10 or 2-5,7-19.

(Optional) Displays the VLAN status by VLAN identification number.

(Optional) Specifies the VLAN status by VLAN name.

VLAN name. The maximum is 32 case-sensitive, alphanumeric characters.

(Optional) Displays VLAN summary information.

Defaults

Displays internal information about the VLAN broadcast domains.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the configured VLANs:

n1000v# show vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active

10 VLAN0010 active

20 VLAN0020 active

30 VLAN0030 active

40 VLAN0040 active

50 VLAN0050 active

200 VLAN0200 active

201 VLAN0201 active

202 VLAN0202 active

203 VLAN0203 active

204 VLAN0204 active

205 VLAN0205 active

206 VLAN0206 active

207 VLAN0207 active

Eth5/3, Eth5/4, Eth6/3, Eth6/4

.

.

.

VLAN Type Vlan-mode

---- ----- ----------

1 enet CE

10 enet CE

20 enet CE

30 enet CE

40 enet CE

50 enet CE

200 enet CE

201 enet CE

202 enet CE

203 enet CE

204 enet CE

205 enet CE

206 enet CE

207 enet CE

This example shows how to display information about the VLAN ports:

n1000v# show vlan all-ports

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active

10 VLAN0010 active

20 VLAN0020 active

30 VLAN0030 active

40 VLAN0040 active

50 VLAN0050 active

200 VLAN0200 active

201 VLAN0201 active

202 VLAN0202 active

203 VLAN0203 active

204 VLAN0204 active

205 VLAN0205 active

206 VLAN0206 active

207 VLAN0207 active

208 VLAN0208 active

209 VLAN0209 active

210 VLAN0210 active

211 VLAN0211 active Po1, Po4, Po7, Po10, Eth3/5

Eth3/6, Eth4/5, Eth4/6, Eth5/5

Eth5/6, Eth6/5, Eth6/6

...

This example shows how to display brief information about the VLAN ports:

n1000v# show vlan brief

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active

10 VLAN0010 active

20 VLAN0020 active

30 VLAN0030 active

40 VLAN0040 active

50 VLAN0050 active

200 VLAN0200 active

201 VLAN0201 active

202 VLAN0202 active

203 VLAN0203 active

204 VLAN0204 active

205 VLAN0205 active

206 VLAN0206 active

207 VLAN0207 active

208 VLAN0208 active

209 VLAN0209 active

210 VLAN0210 active

211 VLAN0211 active Po1, Po4, Po7, Po10, Eth3/5

Eth3/6, Eth4/5, Eth4/6, Eth5/5

Eth5/6, Eth6/5, Eth6/6

...

Related Commands

Command

Description

domain id

Assigns a domain ID to the domain.

show svs-domain

Displays the domain configuration.

Displays the configuration for the specified VLAN.

Shuts down switching on a VLAN.

svs-domain

Creates the domain and places you into CLI SVS domain configuration mode.

Sets the list of allowed VLANs on the trunking interface.

Configures the trunking parameters on an interface.

Adds the system VLAN to a port profile.

show vnm-pa

command.

Syntax Description

Displays VNM policy agent status.

Displays VNM policy agent technical support generation.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about the VNM policy agent:

n1000v# show vnm-pa status

VNM Policy-Agent status is - Not Installed

Related Commands

Command

Description

Configures the VNM policy agent.

show vrf

command.

Syntax Description

vrf_name

(Optional) VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

all

(Optional) Displays adjacency entries for all VRFs.

default

(Optional) Displays a known VRF name.

detail

(Optional) Displays detailed VRF information.

interface

(Optional) Displays VRF interface information.

control

(Optional) Specifies the control interface.

Control interface number.

ethernet

/

(Optional) Specifies an Ethernet IEEE 802.3z interface.

Slot/chassis number. The range is from 1 to 66.

Slash separator.

Port/slot number. The range is from 1 to 128.

(Optional) Specifies the subinterface separator (dot .)

Port number. The range is from 1 to 64.

mgmt

(Optional) Specifies a management interface.

Management interface number. The only valid value is 0.

port-channel

(Optional) Specifies a port channel interface.

Port channel number. The range is from 1 to 4096.

Subinterface number. The range is from 1 to 4093.

vethernet

(Optional) Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

management

(Optional) Displays the management interface.

Defaults

Displays information about all VRF instances.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display information about VRF instances:

n1000v# show vrf

show vrf

VRF-Name VRF-ID State Reason

default 1 Up --

management 2 Up --

This example shows how to display information about the VRF management interface:

n1000v# show vrf interface mgmt 0

Interface VRF-Name VRF-ID Site-of-Origin

mgmt0 management 2 --

Related Commands

Command

Description

Configures VRF parameters.

show vservice brief

command.

Syntax Description

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

Defaults

Displays brief information about all vServices.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display brief vService information:

Related Commands

Command

Description

Displays information about the vService.

show vservice connection

command.

Syntax Description

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

(Optional) Specifies a port profile filter.

(Optional) Specifies the service profile filter.

Service Profile name.

Defaults

Displays information about the vService connection.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display vService connection information:

Related Commands

Command

Description

Displays information about the vService.

show vservice detail

command.

Syntax Description

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

Defaults

Displays details of the vService.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about the vService:

Related Commands

Command

Description

Displays information about the vService.

show vservice license

command.

Syntax Description

Displays brief information about the vServices in use on all modules.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display brief information about the vService license:

Related Commands

Command

Description

Displays information about the vService.

show vservice node brief

command.

Syntax Description

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

Defaults

Displays brief information about the vService nodes.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display brief information about the vService node:

Related Commands

Command

Description

Displays information about the vService.

show vservice node detail

command.

Syntax Description

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

Defaults

Displays detailed information about the vService nodes.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed information about the vService node:

Related Commands

Command

Description

Displays information about the vService.

show vservice node mac brief

command.

Syntax Description

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display brief information about the vService node MAC:

Related Commands

Command

Description

Displays information about the vService.

show vservice port

command.

Syntax Description

Displays brief information of all vServices in use on all modules.

Displays detailed information of all vService in use.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Displays the vService node with the Layer 3 adjacency filter.

(Optional) Specifies the name filter.

Virtual service node/path name.

(Optional) Specifies a port profile filter.

(Optional) Specifies the service profile filter.

Service profile name.

vethernet

(Optional) Specifies a virtual Ethernet interface.

Virtual Ethernet number. The range is from 1 to 1048575.

Information about ports attached to the VSNs.

Statistics for the virtual path (vPath) and core.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display detailed vService port information:

Related Commands

Command

Description

Displays information about the vService.

show vservice statistics

command.

Syntax Description

(Optional) Specifies the IP address filter.

Virtual service node's data interface IPv4 address.

(Optional) Specifies the module filter.

Module number. The range is from 3 to 66.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display vService statistical information:

Related Commands

Command

Description

Displays information about the vService.

show vxlan statistics

To display VXLAN statistics, use the show vxlan statistics command.

Syntax Description

Displays the statistics of the specified module. The range is from 3 to 514.

Displays the statistics of the specified vEthernet interface. The range is from 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display VXLAN statistics information for module 3:

n1000v# show vxlan statistics module 3

Veth Ucast Mcast/Repl Ucast Mcast Total

Encaps Encaps Decaps Decaps Drops

Veth9 158697 254 2089 0 0

Veth10 0 6 46 0 0

Veth11 158697 7 1215 0 0

Veth12 0 6 46 0 0

.

.

.

Veth69 0 6 0 0 0

This example shows how to display the VXLAN statistics information for vEthernet interface 1:

n1000v# show vxlan statistics interface vethernet 1

Unicast Encapsulations: 0

Multicast Encapsulations/HeadEnd Replications: 0

Unicast Decapsulations: 0

Related Commands

show bridge-domain

Displays bridge-domain configurations.

T Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter T.

tacacs+ enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable TACACS+:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs+ enable

n1000v(config)#

This example shows how to disable TACACS+:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no tacacs+ enable

n1000v(config)#

Related Commands

Command

Description

show tacacs-server

Displays the TACACS+ server configuration.

tacacs-server host

Designates the key shared between the Cisco Nexus 1000V and this specific TACACS+ server host.

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

tacacs-server deadtime

form of this command.

Syntax Description

Time interval in minutes. The range is from 1 to 1440.

Defaults

0 minutes

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Setting the time interval to zero disables the timer. If the dead-time interval for an individual TACACS+ server is greater than zero (0), that value takes precedence over the value set for the server group.

When the dead-time interval is 0 minutes, TACACS+ server monitoring is not performed unless the TACACS+ server is part of a server group and the dead-time interval for the group is greater than 0 minutes.

command, before you can use any of the other TACACS+ commands to configure the feature.

Examples

This example shows how to configure the dead-time interval and enable periodic monitoring:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server deadtime 10

This example shows how to revert to the default dead-time interval and disable periodic monitoring:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no tacacs-server deadtime 10

Related Commands

Command

Description

Sets a dead-time interval for monitoring a nonresponsive TACACS+ server.

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server directed-request

form of this command.

-server directed-request

-server directed-request

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command, before you can use any of the other TACACS+ commands to configure the feature.

during login, where vrfname is the virtual routing and forwarding (VRF) name to use and hostname is the name of a configured TACACS+ server. The username is sent to the server name for authentication.

Note If you enable the directed-request option, the Cisco Nexus 1000V device uses only the RADIUS method for authentication and not the default local method.

Examples

This example shows how to allow users to send authentication requests to a specific TACACS+ server when logging in:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server directed-request

This example shows how to disallow users to send authentication requests to a specific TACACS+ server when logging in:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no tacacs-server directed-request

Related Commands

Command

Description

Displays a directed request TACACS+ server configuration.

Enables TACACS+.

tacacs-server host

form of this command.

Syntax Description

TACACS+ server Domain Name Server (DNS) name. The name is alphanumeric, case-sensitive, and has a maximum of 256 characters.

format.

format.

(Optional) Configures the TACACS+ server’s shared secret key.

0

(Optional) Configures a preshared key specified in clear text (indicated by 0) to authenticate communication between the TACACS+ client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text (indicated by 7) to authenticate communication between the TACACS+ client and server.

Preshared key to authenticate communication between the TACACS+ client and server. The preshared key is alphanumeric, case-sensitive, and has a maximum of 63 characters.

(Optional) Configures a TACACS+ server port for authentication.

The range is from 1 to 65535.

test

(Optional) Configures parameters to send test packets to the TACACS+ server.

(Optional) Specifies the time interval (in minutes) for monitoring the server.

The time range is from 1 to 1440 minutes.

(Optional) Specifies a user password in the test packets.

The password is alphanumeric, case-sensitive, and has a maximum of 32 characters.

(Optional) Specifies a user name in the test packets.

The username is alphanumeric, case-sensitive, and has a maximum of 32 characters.

(Optional) Configures a TACACS+ server timeout period (in seconds) between retransmissions to the TACACS+ server.

The range is from 1 to 60 seconds.

Defaults

Parameter

Default

Idle-time

Disabled

Server monitoring

Disabled

Timeout

1 seconds

Test username

Test

Test password

Test

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command before you configure TACACS+.

When the idle time interval is 0 minutes, periodic TACACS+ server monitoring is not performed.

Examples

This example shows how to configure TACACS+ server host parameters:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server host 10.10.2.3 key HostKey

n1000v(config)# tacacs-server host tacacs2 key 0 abcd

n1000v(config)# tacacs-server host tacacs3 key 7 1234

n1000v(config)# tacacs-server host 10.10.2.3 test idle-time 10

n1000v(config)# tacacs-server host 10.10.2.3 test username tester

n1000v(config)# tacacs-server host 10.10.2.3 test password 2B9ka5

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server key

form of this command.

Syntax Description

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the TACACS+ client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server.

Preshared key to authenticate communication between the TACACS+ client and server. The preshared key is alphanumeric, case-sensitive, and has a maximum of 63 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

command before you configure TACACS+.

Examples

This example shows how to configure TACACS+ server shared keys:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server key AnyWord

n1000v(config)# tacacs-server key 0 AnyWord

n1000v(config)# tacacs-server key 7 public

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server timeout

form of this command.

Syntax Description

Seconds between retransmissions to the TACACS+ server. The range is from 1 to 60 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command before you configure TACACS+.

Examples

This example shows how to configure the TACACS+ server timeout:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# tacacs-server timeout 3

This example shows how to revert to the default TACACS+ server timeout:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no tacacs-server timeout 3

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tail

command.

Syntax Description

:

(Optional) Name of a file system. The name is case-sensitive and can be up to 28 characters.

. The identifiers are case-sensitive and can be up to 28 characters.

(Optional) Name of a directory. The name is case-sensitive and can be up to 28 characters.

Name of the command file. The name is case-sensitive and can be up to 28 characters.

(Optional) Number of lines to display. The range is from 0 to 80.

Defaults

10 lines

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to display the last 10 lines of a file:

n1000v# tail bootflash:startup.cfg

ip arp inspection filter marp vlan 9

ip arp inspection vlan 13

ip arp inspection validate src-mac dst-mac ip

ip source binding 10.3.2.2 0f00.60b3.2333 vlan 13 interface Ethernet2/46

ip source binding 10.2.2.2 0060.3454.4555 vlan 100 interface Ethernet2/10

logging level eth_port_channel 6

This example shows how to display the last 20 lines of a file:

n1000v# tail bootflash:startup.cfg 20

area 99 virtual-link 1.2.3.4

router rip Enterprise

router rip foo

address-family ipv4 unicast

router bgp 33.33

event manager applet sdtest

monitor session 1

monitor session 2

ip arp inspection vlan 1

ip arp inspection filter marp vlan 9

ip arp inspection vlan 13

ip arp inspection validate src-mac dst-mac ip

ip source binding 10.3.2.2 0f00.60b3.2333 vlan 13 interface Ethernet2/46

ip source binding 10.2.2.2 0060.3454.4555 vlan 100 interface Ethernet2/10

logging level eth_port_channel 6

Related Commands

Command

Description

Changes the current working directory.

Copies files.

Displays the directory contents.

Displays the name of the current working directory.

telnet

command.

Syntax Description

IPv4 address of the remote device.

Hostname of the remote device. The name is alphanumeric, case-sensitive, and has a maximum of 64 characters.

(Optional) Port number for the Telnet session. The range is from 1 to 65535.

(Optional) Specifies a virtual routing and forwarding (VRF) name to use for the Telnet session.

The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

Port 23

Default VRF

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to start a Telnet session using an IPv4 address:

n1000v# telnet 10.10.1.1 vrf management

Related Commands

Command

Description

Clears Telnet sessions.

Enables the Telnet server.

show telnet server

Displays information about the telnet server configuration.

template data timeout

form of this command.

Syntax Description

A time period between 1 and 86400 seconds.

Defaults

None

Command Modes

Netflow flow exporter version 9 configuration (config-flow-exporter-version-9)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure a 3600-second timeout period for resending NetFlow flow exporter template data:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# template data timeout 3600

This example shows how to remove the timeout period for resending NetFlow flow exporter template data:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no template data timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

terminal event-manager bypass

command.

Syntax Description

This command has no arguments or keywords.

Defaults

Event manager is enabled.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to disable the CLI event manager:

n1000v# terminal event-manager bypass

n1000v#

Related Commands

Command

Description

Displays terminal configuration.

terminal length

command.

Syntax Description

Number of lines. The range is from 0 to 511.

Defaults

28 lines

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

to 0 to disable pausing.

Examples

This example shows how to set the number of lines that appear on the screen:

n1000v# terminal length 60

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal monitor

command. To disable logging, use the no form of this command.

no terminal monitor

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This command does not disable all messages from being printed to the console. Messages such as “module add” and “remove events” will still be logged to the console.

Examples

This example shows how to enable logging for Telnet or SSH:

n1000v# terminal monitor

n1000v#

Related Commands

Command

Description

show terminal

Displays the terminal configuration.

terminal length

Sets the number of lines that appear on the screen.

terminal session-timeout

Sets the session timeout.

terminal terminal-type

Specifies the terminal type.

terminal width

Sets the terminal width.

terminal session-timeout

command.

Syntax Description

Timeout time, in seconds. The range is from 0 to 525600.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

to 0 to disable timeout.

Examples

This example shows how to set session timeout:

n1000v# terminal session-timeout 100

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal terminal-type

command.

Syntax Description

Terminal type.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to specify the terminal type:

n1000v# terminal terminal-type vt100

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal tree-update

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to update the main parse tree:

n1000v# terminal tree-update

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal width

command.

Syntax Description

Characters on a line. The range is from 24 to 511.

Defaults

102 columns

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set terminal width:

n1000v# terminal width 60

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

test aaa

command.

Syntax Description

Specifies an AAA server group.

AAA server group name. group The name is a maximum of 32 case-sensitive, alphanumeric characters.

User name. The user name is a maximum of 32 case-sensitive, alphanumeric characters.

User password. The password is a maximum of 32 case-sensitive, alphanumeric characters.

Specifies an AAA server.

Specifies a RADIUS server.

IP address or DNS name.

Specifies a virtual routing and forwarding (VRF) route.

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to test for AAA on RADIUS server:

n1000v# test aaa server radius ts1 vrf route1 user1 9w8e7r

n1000v#

Related Commands

Command

Description

Displays AAA information.

track network-state

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

NST is disabled.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to enable NST for all VEMs configured with a vPC-HM port-profile:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# track network-state

n1000v(config)# show network-state tracking

Port- Network Tracking SG SG Tracking SG

Channel Mode Vlan ID State Interface Members

------- ------- -------- -- -------- --------- -----------------

Po1 ok 289 5 Active Eth3/6 Eth3/6

6 Active Eth3/7 Eth3/7

This example shows how to disable NST:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no track network-state

n1000v(config)# show network-state tracking

ERROR: network-state tracking is disabled

Related Commands

Command

Description

Displays the NST configuration for verification.

Displays the NST status for an interface.

Displays the NST status for a module.

track network-state interval

form of this command.

Syntax Description

Broadcast interval (from 1 to 10 seconds). The default is 5 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to specify an interval for sending NST broadcasts:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# track network-state interval 8

n1000v(config)#

This example shows how to remove the NST broadcast interval configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no track network-state interval

n1000v(config)#

Related Commands

Command

Description

Displays the NST status for a module or interface.

Displays the NST configuration for verification.

Enables NST for all VEMs, configured with a vPC-HM port profile.

track network-state threshold miss-count

form of this command.

Syntax Description

Number of NST broadcasts that can be missed from 3 to 7. The default is 5.

Defaults

5 missed broadcasts

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure the maximum number of NST broadcasts that can be missed:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# network-state tracking threshold miss-count 7

n1000v(config)#

This example shows how to remove the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no network-state tracking threshold miss-count

n1000v(config)#

Related Commands

Command

Description

Displays the NST status for a module or interface.

Displays the NST configuration for verification.

Enables NST for all VEMs, configured with a vPC-HM port profile.

track network-state split action

form of this command.

Syntax Description

If a split network is detected by NST, the traffic is pinned to another uplink. (the default)

If a split network is detected by NST, traffic is not repinned, and system messages are logged only.

Defaults

repin

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to specify the action to take if NST detects a split network:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# track network-state split action repin

n1000v(config)#

This example shows how to remove the configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no track network-state split action repin

n1000v(config)#

Related Commands

Command

Description

Displays the NST status for a module or interface.

Displays the NST configuration for verification.

Enables NST for all VEMs, configured with a vPC-HM port profile.

traceroute

command.

Syntax Description

.

Name of the destination device. The name is case-sensitive and can be up to 28 characters.

(Optional) Specifies virtual routing and forwarding (VRF).

The name is a maximum of 32 case-sensitive, alphanumeric characters.

(Optional) Displays the Multiprotocol Label Switching (MPLS) hops.

(Optional) Specifies a source IPv4 address.

.

Defaults

Uses the management IPv4 address for the source address.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to discover a route to a device:

n1000v# traceroute 172.28.255.18 vrf management

traceroute to 172.28.255.18 (172.28.255.18), 30 hops max, 40 byte packets

1 172.28.230.1 (172.28.230.1) 0.746 ms 0.595 ms 0.479 ms

2 172.24.114.213 (172.24.114.213) 0.592 ms 0.51 ms 0.486 ms

3 172.20.147.50 (172.20.147.50) 0.701 ms 0.58 ms 0.486 ms

4 172.28.255.18 (172.28.255.18) 0.495 ms 0.43 ms 0.482 ms

Related Commands

Command

Description

Discovers the route to a device using IPv6 addressing.

traceroute6

command.

Syntax Description

.

Name of the destination device. The name is case-sensitive and can be up to 28 characters.

(Optional) Specifies a virtual routing and forwarding (VRF) to use.

The name is a maximum of 32 case-sensitive, alphanumeric characters.

(Optional) Displays the Multiprotocol Label Switching (MPLS) hops.

(Optional) Specifies a source IPv4 address.

.

Defaults

Uses the management IPv6 address for the source address.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to discover a route to a device:

n1000v# traceroute6

Related Commands

Command

Description

Discovers the route to a device using IPv4 addressing.

transport ip address external

To avoid configuring the proxy ARP on the upstream router when the remote VTEP is on a different subnet, use the transport ip address external command and configure the transport IP address on the VTEP vEthernet interface or on the port profile that the VTEP port inherits. Use the no form of this command to remove the transport IP address configuration.

Syntax Description

Network mask in the following format: m.m.m.m.

Next-hop IP address in the following format: i.i.i.i.

Command Modes

Port profile configuration (config-port-prof) or interface configuration

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows how to configure the transport IP address on the VTEP port profile:

n1000v(config-port-prof)# transport ip address external netmask 255.255.255.0 gateway 11.1.1.1

This example shows how to remove the transport IP address configuration:

n1000v(config)# no transport ip address

Related Commands

Command

Description

Displays port profile configurations.

transport udp (NetFlow)

form of this command.

Syntax Description

Destination UDP number from 1 to 65535.

Command Modes

)

Supported User Roles

network-admin

Usage Guidelines

Avoid using well-known ports 1 to 1024 when possible.

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to add UDP 200 to the flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# transport udp 200

This example shows how to remove UDP 200 from the flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no transport udp 200

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

type

form of this command.

Syntax Description

The type of the network segmentation policy.

Defaults

None

Command Modes

Network Segment Policy configuration (config-network-segment-policy)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

.

The policy type corresponds to the network pools in the Opalis. The policy type Segmentation corresponds to the network isolation-backed network pool in the Opalis. The policy type VLAN corresponds to the VLAN-backed network pool in the Opalis.

Once configured, the type cannot be changed.

Examples

This example shows how to define the network segmentation policy type:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# nsm network segment policy abc-policy-nvgre

n1000v(config-network-segment-policy)# type segmentation

n1000v(config-network-segment-policy)

Related Commands

Command

Description

Creates a network segmentation policy.

Displays NSM information.

U Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter U.

use-vrf

command.

Syntax Description

VRF name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

RADIUS server group configuration submode for the specified group (config-radius)

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to specify the VRF to use to contact the server group called management:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# aaa group server radius fred

n1000v(config-radius)# use-vrf management

n1000v(config-radius)#

Related Commands

Command

Description

aaa group server radius

Creates a RADIUS server group and enters the RADIUS server group configuration submode for that group.

Creates a TACACS+ server group with the specified name and puts you into the TACACS+ configuration mode for that group.

deadtime

Configures the monitoring dead time.

server

Configures the RADIUS server as a member of the RADIUS server group.

show radius-server groups

Displays the RADIUS server group configuration.

user (Port Profile Role)

command. To remove the user, use the no form of this command.

Syntax Description

User name. The name is a maximum of 32 case-sensitive, alphanumeric characters.

Defaults

None

Command Modes

Port profile role configuration (config-port-profile-role)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to assign a user to the adminRole:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile-role adminRole

n1000v(config-port-profile-role)# user hdbaar

This example shows how to remove the user assignment from the adminRole:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# port-profile-role adminRole

n1000v(config-role)# no user hdbaar

Related Commands

Command

Description

port-profile

Creates a port profile.

show port-profile

Displays the port profile configuration, including roles assigned to them.

username

form of this command.

Syntax Description

User identifier, The identifier is case-sensitive, alphanumeric, and has a maximum length of 32 characters.

(Optional) The expiration date for the user account

Date in the format YYYY-MM-DD.

(Optional) Specifies a password for the account. The default is no password.

(Optional) Specifies that the password is in clear text. Clear text passwords are encrypted before they are saved to the running configuration.\

(Optional) Specifies that the password is in encrypted format. Encrypted passwords are not changed before they are saved to the running configuration.

Password string. The password is alphanumeric, case-sensitive and can be up to 28 characters.
(" or '), vertical bars (|), or right angle brackets (>).

(Optional) Specifies the user role.

is case-sensitive and can be up to 28 characters.

(Optional) Specifies an SSH key for the user account.

SSH public key string.

Specifies the location of the file that contains the SSH public key string.

file containing host public key for the user

file containing host public key for the user

Defaults

No expiration date, password, or SSH key.

The default role is the network-operator user role.

Command Modes

Global configuration (config)

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

You cannot delete the default admin user role.

You cannot change the expiration date for the default admin user role.

You cannot remove the network-admin role for the default admin user role.

Login is denied to usernames containing these characters:

@

In you have enabled password-strength checking, you can only assign strong passwords. The following are the characteristics of a strong password:

- At least eight characters long

- Does not contain many consecutive characters (such as “abcd”)

- Does not contain many repeating characters (such as “aaabbb”)

- Does not contain dictionary words

- Does not contain proper names

- Contains both uppercase and lowercase characters

- Contains numbers

Caution If you do not specify a password for the user account, the user might not be able to log in.

Examples

This example shows how to create a user account with a password and a user role:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# username user1 password Ci5co321 role network-admin

This example shows how to configure the SSH key for a user account:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# username user1 sshkey file bootflash:key_file

Related Commands

Command

Description

password strength-check

Checks the password security strength.

Displays the user account configuration.

username admin password

command.

Syntax Description

(Optional) Password string. The password is alphanumeric, case-sensitive and can be up to 32 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to change the network admin password in the running configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# username admin password <new-password>

n1000v(config)#

Related Commands

Command

Description

show user-account

Displays usernames and their roles.

username

Creates and configures a user account.

V Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter V.

vem

form of this command.

Syntax Description

Specifies a module number. The range is from 3 to 66.

Defaults

None

Command Modes

Global configuration (config).

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Specify a range of VEMs by using a dash. For example, 3-9 or 20-30.

Examples

This example shows how to create a VEM and enter the VEM slot configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vem 10

n1000v(config-vem-slot)#

This example shows how to remove a VEM:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no vem 10

n1000v(config)#

Related Commands

Command

Description

Displays information about the VEM module.

vemportlog

To show portlog information, use the following command:

To show all entries in the specified portlog, use the following command:

entries in the specified portlog, use the following command:

To show a continuous tail, similar to the tail -f command in UNIX, use the following command:

To show the port bring up events and logs for the specified LTL number, use the following command:

Syntax Description

Specifies an LTL number.

Specifies the number of entries to show, starting from the last entry.

Specifies a portlog number.

Defaults

The vemportlog is on by default.

Command Modes

None

Supported User Roles

Any

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows the output of the vemportlog show info command:

n1000v# vemportlog show info

Enabled: No

Total Entries: 1062

Wrapped Entries: 0

Lost Entries: 0

Skipped Entries: 830

Available Entries: 27594

Stop After Entry: Not Specified

This example shows the port bringup logs for LTL number 49:

n1000v# vemportlog show ltl 49

Timestamp Entry CPU Mod Lv Message

Oct 8 08:30:38.455555 12 2 1 8 Info [ltl:49]sf_create_port: Creating

Physical / Virtual Port ltl (49)

Oct 8 08:30:38.460913 13 2 1 8 Info [ltl:49]sf_create_port: Success

Related Commands

Command

Description

Displays the LTL number of an interface.

Displays all of the VEM logs, including port bring up events.

version 9

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter).

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to configure version 9 for a Netflow flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)#

This example shows how to remove version 9 from the Netflow flow exporter:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no version 9

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow monitor

Creates a Flexible NetFlow flow monitor.

flow record

Creates a Flexible NetFlow flow record.

Specifies a timeout period for resending NetFlow flow exporter data.

Specifies a timeout period for resending the NetFlow flow exporter interface table.

Displays information about the NetFlow flow exporter.

Displays information about the NetFlow flow monitor.

Displays information about NetFlow flow records.

Specifies a timeout period for resending NetFlow flow exporter template data.

vlan

form of this command.

Syntax Description

VLAN identification number. The range is from 1-4094 or range(s): 1-5, 10 or 2-5,7-19.

configuration

Specifies the VLAN configuration mode.

Specifies an IEEE 802.1Q virtual LAN.

filter

Specifies access control for packets.

Access map name. The maximum size is 64 alphanumeric, case-sensitive characters.

Specifies list of VLANs to apply access control.

Defaults

The default VLAN is VLAN 1.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

Specify a VLAN range by using a dash. For example, 1-9 or 20-30.

Examples

This example shows how to create a VLAN and enter the VLAN configuration mode:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vlan 10

n1000v(config-vlan)#

This example shows how to remove a VLAN:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no vlan 10

n1000v(config)#

Related Commands

Command

Description

Displays VTP VLAN status.

vlan policy deny

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Role configuration (config-role)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to enter the VLAN configuration mode and deny all VLAN access for the role:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name network-observer

n1000v(config-role)# vlan policy deny

n1000v(config-role-vlan)#

This example shows how to remove policy restrictions:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# role name network-observer

n1000v(config-role)# no vlan policy deny

n1000v(config-role-vlan)#

Related Commands

Command

Description

Specifies a user role and enters role configuration mode.

permit vlan

Specifies the VLAN that users assigned to this role can access.

show role

Displays the role configuration.

vxlan udp port

form of this command.

Syntax Description

VXLAN UDP destination port number. The range is from 1024 to 65535. The number that you specify for this command must be a port number that is used by VXLAN encapsulation. Port 4789 is used by the Internet Assigned Numbers Authority (IANA).

Defaults

The default port number is 8472.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(2.1)

This command was introduced.

Examples

This example shows how to configure a VXLAN UDP destination port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vxlan udp port 2934

n1000v(config)#

This example shows how to remove a VXLAN UDP destination port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no vxlan udp port 2934

n1000v(config)#

Related Commands

This command has no related commands.

W Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter W.

where

command.

Syntax Description

(Optional) Displays detailed context information.

Defaults

Displays summary context information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

This command helps you track where you are in the CLI and how you got there.

Examples

This example shows how to display summary context information:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n10000v{config)# interface Ethernet2/3

n1000v(config-if)# where

?conf; interface Ethernet2/3 admin@switch%default

This example shows how to display detailed context information:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n10000v{config)# interface Ethernet2/3n1000v(config-if)# where detail

?conf; interface Ethernet2/3 admin@switch%default

mode: conf

interface Ethernet2/3

username: admin

routing-context vrf: default

write erase debug

command.

write erase debug

Syntax Description

None

Defaults

Erases all configuration in persistent memory except for the boot variable, mgmt0 interface, and debug configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Usage Guidelines

options.

Examples

This example shows how to erase the startup configuration:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# write erase

Warning: This command will erase the startup-configuration.

Do you wish to proceed anyway? (y/n) [n] y

This example shows how to erase the debug configuration in the persistent memory:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# write erase debug

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Displays the startup configuration.

X Commands

This chapter describes the Cisco Nexus 1000V commands that begin with the letter X.

xml server max-session

command.

Syntax Description

Number of XML sessions permitted at one time. The range is from 1 to 8.

Defaults

The default maximum number of sessions is eight.

Command Modes

Global configuration (config).

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set the number of allowed XML server sessions to 6:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# xml server max-session 6

n1000v(config)#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server terminate session

Displays information about XML server settings and any active XML server sessions.

xml server timeout

Sets the number of seconds after which an inactive XML server session is terminated.

xml server terminate session

command.

Syntax Description

Identifier for an existing XML server session. The range is 0 to 214748364.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to terminate the XML server session 8665:

n1000v# xml server terminate 8665

n1000v#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server max-session

Sets the number of allowed XML server sessions.

xml server timeout

Sets the number of seconds after which an inactive XML server session is terminated.

xml server timeout

command.

Syntax Description

Time that the XML server can remain inactive before session termination. The range is 0 to 1200 seconds.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SK1(1.1)

This command was introduced.

Examples

This example shows how to set the XML server timeout to 600 seconds:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# xml server timeout 600

n1000v(config)#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server max-session

Sets the number of allowed XML server sessions.

xml server terminate session

Displays information about XML server settings and any active XML server sessions.

Cisco Nexus 1000V for KVM Reference Guide, Release 5.x

May 17, 2016

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

Cisco Nexus 1000V for KVM Reference Guide, Release 5.x

© 2010–2016 Cisco Systems, Inc. All rights reserved.