Table of Contents

A Commands

B Commands

C Commands

D Commands

E Commands

F Commands

G Commands

I Commands

L Commands

M Commands

N Commands

O Commands

P Commands

Q Commands

R Commands

S Commands

Show Commands

T Commands

U Commands

V Commands

W Commands

X Commands

Cisco Nexus 1000V for VMware vSphere Command Reference, Release 5

A Commands

This chapter describes the Cisco Nexus 1000V commands that begin with A.

aaa authentication login console

form of this command.

Syntax Description

Specifies to use a server group for authentication.

Specifies a space-separated list of server groups. The list can include the following:

- radius for all configured RADIUS servers.

- tacacs+ for all configured TACACS+ servers.

- Any configured RADIUS or TACACS+ server group name.

Specifies to use the username for authentication.

Specifies to use the local database for authentication.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to create a named group of servers.

command to display the RADIUS server groups on the device.

If you specify more that one server group, the software checks each group in the order that you specify in the list.

method, then the authentication always succeeds.

Examples

This example shows how to configure the AAA authentication console login methods:

n1000v# config t

n1000v(config)# aaa authentication login console group radius

This example shows how to revert to the default AAA authentication console login method:

n1000v# config t

n1000v(config)# no aaa authentication login console group radius

Related Commands

Command

Description

Configures AAA server groups.

Configures RADIUS servers.

show aaa authentication

Displays AAA authentication information.

show aaa group

Displays the AAA server groups.

Configures TACACS+ servers.

aaa authentication login default

form of this command.

Syntax Description

Specifies a server group list to be used for authentication.

Space-separated list of server groups that can include the following:

- radius for all configured RADIUS servers.

- tacacs+ for all configured TACACS+ servers.

- Any configured RADIUS or TACACS+ server group name.

(Optional) Specifies to use the username for authentication.

Specifies to use the local database for authentication.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to create a named group of servers.

command to display the RADIUS server groups on the device.

If you specify more that one server group, the software checks each group in the order that you specify in the list.

method, then the authentication always succeeds.

Examples

This example shows how to configure the AAA authentication console login method:

n1000v# config t

n1000v(config)# aaa authentication login default group radius

This example shows how to revert to the default AAA authentication console login method:

n1000v# config t

n1000v(config)# no aaa authentication login default group radius

Related Commands

Command

Description

Configures AAA server groups.

Configures RADIUS servers.

show aaa authentication

Displays AAA authentication information.

show aaa group

Displays the AAA server groups.

Configures TACACS+ servers.

aaa authentication login error-enable

form of this command.

aaa authentication login error-enable

aaa authentication login error-enable

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If none of the remote AAA servers respond when a user logs in, the authentication is processed by the local user database. If you have enabled the display, one of the following message is generated for the user:

Remote AAA servers unreachable; local authentication done.

Remote AAA servers unreachable; local authentication failed.

Examples

This example shows how to enable the display of AAA authentication failure messages to the console:

n1000v# config t

n1000v(config)# aaa authentication login error-enable

This example shows how to disable the display of AAA authentication failure messages to the console:

n1000v# config t

n1000v(config)# no aaa authentication login error-enable

Related Commands

Command

Description

show aaa authentication login error-enable

Displays the status of the AAA authentication failure message display.

aaa authentication login mschap

form of this command.

aaa authentication login mschap

aaa authentication login mschap

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable MSCHAP authentication:

n1000v# config t

n1000v(config)# aaa authentication login mschap

This example shows how to disable MSCHAP authentication:

n1000v# config t

n1000v(config)# no aaa authentication login mschap

Related Commands

Command

Description

show aaa authentication login mschap

Displays the status of MSCHAP authentication.

aaa group server radius

form of this command.

Syntax Description

RADIUS server group name.The name is alphanumeric and case-sensitive. The maximum length is 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create a RADIUS server group and enter RADIUS Server Configuration mode for configuring the specified server group:

n1000v# config t

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)#

This example shows how to delete a RADIUS server group:

n1000v# config t

n1000v(config)# no aaa group server radius RadServer

Related Commands

Command

Description

show aaa groups

Displays server group information.

radius-server host

Defines the IP address or hostname for a RADIUS server.

aaa group server tacacs+

form of this command.

Syntax Description

TACACS+ server group name. The name is alphanumeric and case-sensitive. The maximum length is 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command before you can configure TACACS+.

Examples

This example shows how to create a TACACS+ server group:

n1000v# config t

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-radius)#

This example shows how to delete a TACACS+ server group:

n1000v# config t

n1000v(config)# no aaa group server tacacs+ TacServer

Related Commands

Command

Description

Enables TACACS+.

show aaa groups

Displays server group information.

address-family l2vpn evpn

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to configure an l2vpn evpn address-family:

n1000v(config-router)# address-family l2vpn evpn

Related Commands

None.

assign port-profile-role

form of this command.

Syntax Description

Name of the port profile role.

Defaults

None

Command Modes

port-profile configuration (config-port-profile)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to assign a port profile role to a specific port profile:

n1000v# config t

n1000v(config)# port-profile allaccess2

n1000v(config-port-prof)# assign port-profile-role adminUser

This example shows how to remove a role from a port profile configuration:

n1000v# config t

n1000v(config)# port-profile allaccess2

n1000v(config-port-prof)# no assign port-profile-role adminUser

Related Commands

Command

Description

port-profile

Creates a port profile.

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

attach module

command.

Syntax Description

Number that identifies an existing module. The range is 1–66.

Note Only one value, 2, is operational.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to attach to the console of the secondary VSM:

n1000v# config t

n1000v(config)# attach module 2

n1000v#

Usage Guidelines

Although the allowable range of module numbers is from 1–66, only one value, 2, is operational.

Related Commands

Command

Description

show cores

Displays a list of cores.

show processes log

Displays a list of process logs.

show system redundancy status

Checks redundancy status.

show system internal sysmgr state

Checks the system internal sysmgr state.

reload module

Reloads a module.

attach vem

command. By using the attach vem command, you can get into the VEM and execute all the VEM commands.

Syntax Description

Number that identifies an existing module. The range is 3–130.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV2(2.1)

This command was introduced.

Examples

This example shows :

n1000v# config t

n1000v(config)# attach vem 4

n1000v# (vem-attach)# ?

vemcmd Execute vem command

vemdpa Execute vemdpa command

vemlog Execute vemlog command

vempkt Execute vempkt command

vemset Execute vemset command

ecd Go to execute command

exit Exit from command interpreter

pop Pop mode from stack or restore from name

push Push current mode to stack or save it under name

where Shows the CLI context you are in

Related Commands

Command

Description

show cores

Displays a list of cores.

show processes log

Displays a list of process logs.

show system redundancy status

Checks redundancy status.

show system internal sysmgr state

Checks the system internal sysmgr state.

reload module

Reloads a module.

B Commands

This chapter describes the Cisco Nexus 1000V commands that begin with B.

bandwidth (policy map)

form of this command.

Syntax Description

Specify a percentage (1 - 100) of total bandwidth guaranteed.

Defaults

No bandwidth is set by default.

Command Modes

Policy map class queuing configuration (config-pmap-c-que).

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

command must explicitly be configured on a class, if desired. Bandwidth is configurable between 1% and 100%.

Examples

This example shows how to configure 20% minimum guaranteed bandwidth for the class_fin1 traffic class.

n1000v# config t

n1000v(config)# policy-map type queuing Policy-vmotion

n1000v(config-pmap-que)# class type queuing class_fin1

n1000v(config-pmap-c-que)# bandwidth percent 20

This example shows how to remove the configured bandwidth for the class_fin1 traffic class.

n1000v# config t

n1000v(config)# policy-map type queuing Policy-vmotion

n1000v(config-pmap-que)# class type queuing class_fin1

n1000v(config-pmap-c-que)# no bandwidth percent 20

Related Commands

Command

Description

show policy-map

Displays the policy map configuration for verification.

policy-map type queuing

Creates a class-based weighted fair queueing (CBWFQ) policy map.

Assigns a class-based weighted fair queueing (CBWFQ) class to the specified policy map.

queue-limit

Configures the queue size in packets.

show policy-map type queuing

banner motd

command.

Syntax Description

The character used to signal the beginning and end of the message text, for example, in the following message, the delimiting character is #.

#Testing the MOTD#

Specifies the banner message, restricted to 40 lines with a maximum of 80 characters in each line.

Defaults

“User Access Verification” is the default message of the day.

Command Modes

Configuration (config)

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The MOTD banner is displayed on the terminal before the login prompt whenever you log in.

The message is restricted to 40 lines and 80 characters per line.

To create a multiple-line MOTD banner, press Enter before typing the delimiting character to start a new line. You can enter up to 40 lines of text.

Follow these guidelines when choosing your delimiting character:

- Do not use the delimiting-character in the message string.

- Do not use " and % as delimiters.

Examples

This example shows how to configure and then display a banner message with the text, “Testing the MOTD.”

n1000v# config terminal

n1000v(config)# banner motd #Testing the MOTD#

n1000v(config)# show banner motd

Testing the MOTD

This example shows how to configure and then display a multiple-line MOTD banner:

n1000v(config)# banner motd #Welcome to authorized users.

> Unauthorized access prohibited.#

n1000v(config)# show banner motd

Welcome to authorized users.

Unauthorized access prohibited.

This example shows how to revert to the default MOTD banner:

n1000v# config terminal

n1000v(config)# no banner motd

n1000v(config)# show banner motd

User Access Verification

Related Commands

Command

Description

Displays the MOTD banner.

boot auto-copy

form of this command.

boot auto-copy

no boot auto-copy

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When automatic copying of image files is enabled, the Cisco NX-OS software copies the image files referred to by the boot variable to the standby supervisor module. These image files must be present in local memory on the active supervisor module. For kickstart and system boot variables, only those image files that are configured for the standby supervisor module are copied.

Examples

This example shows how to enable automatic copying of boot image files to the standby supervisor module:

n1000v# configure terminal

n1000v(config)# boot auto-copy

Auto-copy administratively enabled

Related Commands

Command

Description

Configures the kickstart boot variable.

Configures the system boot variable.

Copies files.

Displays boot variable configuration information.

boot kickstart

form of this command.

no boot kickstart

Syntax Description

:

.

(Optional) Name of a directory. The directory name is case sensitive.

Name of the kickstart image file. The filename is case sensitive.

(Optional) Configures the kickstart boot for the active supervisor module only.

(Optional) Configures the kickstart boot for the standby supervisor module only.

Defaults

Configures the kickstart boot variable for both supervisor modules.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The kickstart boot variable is used for loading software images when booting up. You must copy the kickstart image to the device before you reload.

Examples

This example shows how to configure the kickstart boot variable for both supervisor modules:

n1000v# configure terminal

n1000v(config)# boot kickstart bootflash:kickstart-image

This example shows how to configure the kickstart boot variable for the active supervisor module:

n1000v# configure terminal

n1000v(config)# boot kickstart bootflash:kickstart-image sup-1

This example shows how to clear the kickstart boot variable:

n1000v# configure terminal

n1000v(config)# no boot kickstart

Related Commands

Command

Description

boot system

Configures the boot variable for the system software image.

Copies files.

Displays boot variable configuration information.

boot system

form of this command.

no boot system

Syntax Description

:

.

(Optional) Name of a directory. The directory name is case sensitive.

Name of the system image file. The filename is case sensitive.

(Optional) Configures the system boot for the sup-1 supervisor module only.

(Optional) Configures the system boot for the sup-2 supervisor module only.

Defaults

Configures the system boot variable for both supervisor modules.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The system boot variable is used for loading images when booting up. You must copy the system image to the device before you reload.

Examples

This example shows how to configure the system boot variable for both supervisor modules:

n1000v# configure terminal

n1000v(config)# boot system bootflash:system-image

This example shows how to configure the system boot variable for the sup-1 supervisor module:

n1000v# configure terminal

n1000v(config)# boot system bootflash:system-image sup-1

This example shows how to clear the system boot variable:

n1000v# configure terminal

n1000v(config)# no boot system

Related Commands

Command

Description

boot kickstart

Configures the boot variable for the kickstart software image.

Displays boot variable configuration information.

bridge-domain

form of this command.

Syntax Description

The name of the bridge domain.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to create a VXLAN:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)#

Related Commands

Command

Description

Displays bridge domain information.

C Commands

This chapter describes the Cisco Nexus 1000V commands that begin with C.

cache size

form of this command.

Syntax Description

Size in number of entries. The range is 256 to 16384 entries.

Defaults

4096 entries

Command Modes

Netflow monitor configuration (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to limit the impact of the Netflow flow monitor cache on memory and performance.

Examples

This example shows how to configure the cache size for a Netflow flow monitor named MonitorTest, and then display the configuration:

n1000v# config t

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# cache size 15000

n1000v(config-flow-monitor)# show flow monitor MonitorTestFlow

Monitor monitortest:

Use count: 0

Inactive timeout: 600

Active timeout: 1800

Cache Size: 15000

n1000v(config-flow-monitor)#

This example shows how to remove a cache size from a flow monitor:

n1000v# config t

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# no cache size

n1000v(config-flow-monitor)#show flow monitor MonitorTestFlow

n1000v(config-flow-monitor)#

Monitor monitortest:

Use count: 0

Inactive timeout: 600

Active timeout: 1800

Cache Size: 4096

n1000v(config-flow-monitor)#

Related Commands

Command

Description

Displays information about the flow monitor cache module.

flow monitor

Creates a flow monitor.

Specifies an aging timer and its value for aging entries from the cache.

Adds a flow record to the flow monitor.

exporter

Adds a flow exporter to the flow monitor.

capability iscsi-multipath

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

command.

Usage Guidelines

If you are configuring a port profile for ISCSI Multipath, then you must first configure the port profile in switchport mode.

Examples

This example shows how to configure a port profile to be used with ISCSI Multipath protocol:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# capability iscsi-multipath

n1000v(config-port-prof)#

This example shows how to remove the ISCSI multipath configuration from the port profile:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no capability iscsi-multipath

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays the port profile configuration.

Places you into port profile configuration mode for creating and configuring a port profile.

capability l3control

form of this command.

Syntax Description

Configures a port profile to be used for one of the following Layer 3 communication purposes:

- The management interface used for Layer 3 communication between the VSM and VEMs.

- To carry NetFlow ERSPAN traffic.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

command to designate a port profile as an uplink.

4.0(4)SV1(2)

command. A port profile used as an uplink is now designated as type Ethernet instead.

command.

Usage Guidelines

command for the VSM domain.

Examples

This example shows how to configure a port profile to be used for Layer 3 communication purposes:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# capability l3control

n1000v(config-port-prof)#

This example shows how to remove the Layer 3 configuration from the port profile:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no capability l3control

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays the port profile configuration.

Places you into port profile configuration mode for creating and configuring a port profile.

capability vxlan

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to assign the VXLAN capability to port profile vmnic-pp:

n1000v# configure terminal

n1000v(config)# port-profile vmknic-pp

(config-port-prof)# capability vxlan

(config-port-prof)

Related Commands

Command

Description

Displays bridge domain information.

Displays information about virtual interfaces.

Displays information about the running configuration of the vEthernet interface.

Display the usage for all port profiles.

cd

command.

Syntax Description

:

.

(Optional) Name of the directory. The directory name is case sensitive.

Defaults

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You can only change to the directories that are on the active supervisor module.

command to verify the name of the directory you are currently working in.

Examples

This example shows how to change to a different directory on the current file system:

n1000v# cd my-scripts

This example shows how to change from the file system you are currently working in to a different file system:

n1000v# cd volatile:

This example shows how to revert back to the default directory, bootflash:

n1000v# cd

Related Commands

Command

Description

Displays the name of the directory you are currently working in.

cdp advertise

form of this command.

}

]

Syntax Description

CDP Version 1.

CDP Version 2.

Defaults

CDP Version 2

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set CDP Version 1 as the version to advertise:

n1000v(config)# cdp advertise v1

This example shows how to remove CDP Version 1 as the configuration to advertise:

n1000v(config)# no cdp advertise v1

Related Commands

Command

Description

Displays the CDP configuration.

cdp enable (global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled on all interfaces and port channels

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

CDP can only be configured on physical interfaces and port channels.

Examples

This example shows how to enable CDP globally and then show the CDP configuration:

n1000v# config t

n1000v(config)# cdp enable

n1000v(config)# show cdp global

Global CDP information:

CDP enabled globally

Refresh time is 60 seconds

Hold time is 180 seconds

CDPv2 advertisements is enabled

DeviceID TLV in System-Name(Default) Format

This example shows how to disable CDP globally and then show the CDP configuration:

n1000v(config)# no cdp enable

n1000v# show cdp global

Global CDP information:

CDP disabled globally

Refresh time is 60 seconds

Hold time is 180 seconds

CDPv2 advertisements is enabled

DeviceID TLV in System-Name(Default) Format

n1000v(config)#

Related Commands

Command

Description

Displays the CDP configuration.

cdp enable (interface or port channel)

Enables CDP on an interface or port channel.

cdp enable (interface or port channel)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

CDP can only be configured on physical interfaces and port channels.

Examples

This example shows how to enable CDP on port channel 2:

n1000v# config t

n1000v(config)# interface port-channel2

n1000v(config-if)# cdp enable

n1000v(config-if)#

This example shows how to disable CDP on mgmt0:

n1000v# config t

n1000v(config)# interface mgmt0

n1000v(config-if)# no cdp enable

n1000v(config-if)# show cdp interface mgmt0

mgmt0 is up

CDP disabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

n1000v(config-if)#

Related Commands

Command

Description

Displays the CDP configuration for an interface.

show cdp neighbors

Displays your device from the upstream device.

cdp advertise

Assigns the CPD version the interface will advertise—CDP Version 1 or CDP Version 2.

cdp format device ID

Assigns the CDP device ID

cdp holdtime

Sets the maximum amount of time that CDP holds onto neighbor information before discarding it.

cdp format device-id

form of this command.

}

}

Syntax Description

MAC address of the Chassis.

Chassis serial number.

System name/Fully Qualified Domain Name (Default).

Defaults

System name/Fully Qualified Domain Name

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

CDP must be enabled globally before you configure the device ID format.

You can configure CDP on physical interfaces and port channels only.

Examples

This example shows how to configure the CDP device ID with the MAC address format and then display the configuration:

n1000v(config)# cdp format device-id mac-address

n1000v(config)# show cdp global

Global CDP information:

CDP enabled globally

Sending CDP packets every 5 seconds

Sending a holdtime value of 10 seconds

Sending CDPv2 advertisements is disabled

Sending DeviceID TLV in Mac Address Format

This example shows how to remove the CDP device ID MAC address format from the configuration:

n1000v(config)# no cdp format device-id mac-address

Related Commands

Command

Description

Displays CDP global configuration parameters.

Displays the CDP configuration for an interface.

show cdp neighbors

Displays your device from the upstream device.

cdp advertise

Assigns the CPD version the interface will advertise—CDP Version 1 or CDP Version 2.

cdp enable interface

Enables CDP on an interface or port channel.

cdp holdtime

Sets the maximum amount of time that CDP holds onto neighbor information before discarding it.

cdp holdtime

form of this command.

Syntax Description

The range is from 10 to 255 seconds.

Defaults

180 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

CDP must be enabled globally before you configure the device ID format.

You can configure CDP on physical interfaces and port channels only.

Examples

This example shows how to set the CDP holdtime to 10 second:

n1000v(config)# cdp holdtime 10

This example shows how to remove the CDP holdtime configuration:

n1000v(config)# no cdp holdtime 10

Related Commands

Command

Description

Displays CDP global configuration parameters.

show cdp neighbors

Displays the upstream device from your device.

cdp timer

form of this command.

Syntax Description

The range is from 5 to 254 seconds.

Defaults

60 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the CDP timer to 10 seconds:

n1000v(config)# cdp timer 10

This example shows how to remove the CDP timer configuration:

n1000v(config)# no cdp timer 10

Related Commands

Command

Description

Displays CDP global configuration parameters.

show cdp neighbors

Displays the upstream device from your device.

channel-group auto (port profile)

form of this command.

]

Syntax Description

(Optional) Specifies a channeling mode:

- on

- active (uses LACP)

- passive (uses LACP)

(Optional) Specifies to create subgroups for managing the traffic flow when the port profile connects to multiple upstream switches. The feature is also called virtual port channel host mode (vPC-HM).

cdp

Specifies to create subgroups using Cisco Discovery Protocol (CDP).

manual

Specifies to create subgroups manually.

(Optional) Specifies to attach VEMs to an upstream switch that does not support port-channels. There are a maximum of 32 subgroups per port channel, so a maximum of 32 Ethernet port members can be assigned.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

4.0(4)SV1(2)

.

Usage Guidelines

command creates a unique port channel for all interfaces that belong to the same module. The channel group is automatically assigned when the port profile is assigned to the first interface. Each additional interface that belongs to the same module is added to the same port channel. In VMware environments, a different port channel is created for each module.

- The channel group mode must be set to on when configuring vPC-HM.

- When configuring a port channel for a port profile that connects to two or more upstream switches, note the following:

– You need to know whether CDP is configured in the upstream switches.

If configured, CDP creates a subgroup for each upstream switch to manage its traffic separately.

If not configured, then you must manually configure subgroups to manage the traffic flow on the separate switches.

– When configuring a port channel for vPC-HM and the upstream switches do not support port channels, you can use MAC pinning, which will automatically assign each Ethernet member port to a unique sub-group.

– If vPC-HM is not configured when port channels connect to two different upstream switches, the VMs behind the Cisco Nexus 1000V receive duplicate packets from the network for broadcasts and multicasts.

.

Examples

This example shows how to configure a port profile for a port channel that connects to a single upstream switch and then display the configuration:

n1000v# config t

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)# channel-group auto mode on

n1000v(config-port-prof)# show port-profile name AccessProf

port-profile AccessProf

description: allaccess4

status: disabled

capability uplink: yes

port-group: AccessProf

config attributes:

switchport mode access

channel-group auto mode on

evaluated config attributes:

switchport mode access

channel-group auto mode on

assigned interfaces:

n1000v(config-port-prof)#

This example shows how to remove the channel group configuration from the port profile and then display the configuration:

n1000v# config t

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)# no channel-group

n1000v(config-port-prof)# show port-profile name AccessProf

port-profile AccessProf

description: allaccess4

status: disabled

capability uplink: yes

port-group: AccessProf

config attributes:

switchport mode access

evaluated config attributes:

switchport mode access

assigned interfaces:

n1000v(config-port-prof)#

This example shows how to configure a port profile for a port channel that connects to multiple upstream switches that have CDP enabled and then display the configuration:

n1000v# config t

n1000v(config)# port-profile uplinkProf

n1000v(config-port-prof)# channel-group auto mode on sub-group cdp

n1000v(config-port-prof)# show port-profile name uplinkProf

port-profile uplinkProf

description:

type: vethernet

status: disabled

capability l3control: no

pinning control-vlan: -

pinning packet-vlan: -

system vlans: none

port-group:

max ports: 32

inherit:

config attributes:

channel-group auto mode on sub-group cdp

evaluated config attributes:

channel-group auto mode on sub-group cdp

assigned interfaces:

Related Commands

Command

Description

Displays the port profile configuration.

Creates a port profile and places you into global configuration mode for the named port profile.

channel-group (interface)

form of this command.

Syntax Description

ll port channels that are not running LACP remain in this mode. If you attempt to change the channel mode to active or passive before enabling LACP, the device returns an error message.

After you enable LACP globally, you enable LACP on each channel by configuring the channel mode as either active or passive. An interface in this mode does not initiate or respond to LACP packets. When an LACP attempts to negotiate with an interface in the on state, it does not receive any LACP packets and becomes an individual link with that interface; it does not join the channel group.

Defaults

.

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

channel mode is a pure port channel and can aggregate a maximum of eight ports. It does not run LACP.

and an error message is generated.

command.

When an interface joins a port channel, the following attributes are removed and replaced with the those of the port channel:

- Bandwidth

- Delay

- Extended Authentication Protocol over UDP

- VRF

- IP address

- MAC address

- Spanning Tree Protocol

- NAC

- Service policy

- Quality of Service (QoS)

- ACLs

The following attributes remain unaffected when an interface joins or leaves a port channel:

- Beacon

- Description

- CDP

- LACP port priority

- Debounce

- UDLD

- MDIX

- Rate mode

- Shutdown

- SNMP trap

You do not have to create a port channel interface before you assign a physical interface to a channel group. A port channel interface is created automatically when the channel group gets its first physical interface, if it is not already created.

Examples

This example shows how to add an interface to LACP channel group 5 in active mode:

n1000v(config-if)# channel-group 5 mode active

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the specified port channel interface.

Displays information on the port channels.

feature lacp

Enables the LACP feature globally

Displays LACP information.

Displays the list of compatibility checks that the Cisco Nexus 1000V uses.

class (policy map type qos)

form of this command.

]

Syntax Description

(Optional) Specifies the class type to be QoS. QoS is the default class type.

Adds the specified name of an existing class to the policy map.

Adds the class-default to a policy map. The class-default matches all traffic not classified in other classes.

(Optional) Specifies the sequence of this class in the policy by identifying the class map it should precede. If not specified, the class is placed at the end of the list of classes in the policy. Policy actions in the first class that matches the traffic type are performed.

Defaults

type QoS

The default is to reference a new class map at the end of the policy map.

The class named class-default matches all traffic not classified in other classes.

Command Modes

Policy map configuration (config-pmap)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Policy actions in the first class that matches the traffic type are performed.

The class named class-default matches all traffic not classified in other classes.

Examples

This example shows how to add a class map in sequence to the end of a policy map:

n1000v(config)# policy-map my_policy1

n1000v(config-pmap)# class traffic_class2

n1000v(config-pmap-c-qos)#

This example shows how to insert a class map in sequence before an existing class map in a policy map:

n1000v(config)# policy-map my_policy1

n1000v(config-pmap-qos)# class insert-before traffic_class2 traffic_class1

n1000v(config-pmap-c-qos)#

This example shows how to add the class-default class map to a policy map:

n1000v(config)# policy-map my_policy1

n1000v(config-pmap-qos)# class class-default

n1000v(config-pmap-c-qos)#

This example shows how to remove a class map reference from a policy map:

n1000v(config)# policy-map my_policy1

n1000v(config-pmap)# no class traffic_class1

n1000v(config-pmap)#

Related Commands

Command

Description

policy-map

Creates or modifies a policy map.

set cos

Assigns a CoS to a QoS policy map.

set dscp

Assigns a DSCP value for a traffic class in a QoS policy map.

set precedence

Assigns a precedence value for the IP headers in a specific traffic class in a QoS policy map.

set discard-class

Assigns a discard-class value for a class of traffic in a QoS policy map.

Displays class maps.

Displays policy maps and statistics.

class-map

form of this command.

Syntax Description

(Optional) Specifies the component type QoS for the class map. By default, the class map type is QoS.

(Optional) Specifies that if the packet matches any of the matching criteria configured for this class map, then this class map is applied to the packet.

is not specified.

Name assigned to the class map. The name class-default is reserved.

Defaults

type QoS

match-all

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Hyphen, underscore, and alphabetic characters are allowed in the class map name.

Forty characters are the maximum allowed in the class map name.

Characters in the class map name are case sensitive.

Examples

This example shows how to create a class map and enter the QoS class map configuration mode to configure the specified map:

n1000v# configure terminal

n1000v(config)# class-map my_class1

n1000v(config-cmap-qos)#

This example shows how to remove the QoS class map named my_class1:

n1000v(config)# no class-map my_class1

n1000v(config)#

Related Commands

Command

Description

Displays class maps.

match class-map

Configures the traffic class by matching packets based on match criteria in another class map.

match packet length

Configures the traffic class by matching packets based on packet lengths.

class-map type queuing

command.

Syntax Description

Specifies that if the packet matches any of the matching criteria configured for this class map, then this class map is applied to the packet.

is not specified.

Name assigned to the class map. The name class-default is reserved.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to modify a queuing class map:

n1000v(config)# class-map type queuing match-any myclass

n1000v(config-cmap-que)#

Related Commands

Command

Description

Displays class maps.

match cos

Configures the traffic class by matching packets based on match criteria in another class map.

match protocol

Configures match criteria based on protocol.

clear access-list counters

command.

Syntax Description

(Optional) Name of the ACL whose counters the device clears. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you specify an ACL, the name can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all IP and MAC ACLs:

n1000v# clear access-list counters

n1000v#

This example shows how to clear counters for an IP ACL named acl-ip-01:

n1000v# clear access-list counters acl-ip-01

n1000v#

Related Commands

Command

Description

Clears counters for IP ACLs.

Clears counters for MAC ACLs.

Displays information about one or all IP and MAC ACLs.

clear active-active accounting logs

command.

Syntax Description

This command has no arguments.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

Use the following command to check the accounting logs that were backed up during the split-brain resolution.

Examples

This example shows how to clear the accounting logs:

n1000v# clear active-active accounting logs

n1000v#

Related Commands

Command

Description

Clears the remote accounting logs that are stored on a remote VSM during the split-brain resolution.

clear active-active redundancy traces

Clears the redundancy traces that are stored on a local VSM during the split-brain resolution.

redundancy traces

Clears the remote redundancy traces that are stored on a remote VSM during the split-brain resolution.

clear active-active remote accounting logs

command.

Syntax Description

This command has no arguments.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

Use the following command to check the remote accounting logs that were backed up during the split-brain resolution.

Examples

This example shows how to clear the remote accounting logs:

n1000v# clear active-active remote accounting logs

n1000v#

Related Commands

Command

Description

Clears the accounting logs that are stored on a local VSM during the split-brain resolution.

clear active-active redundancy traces

Clears the redundancy traces that are stored on a local VSM during the split-brain resolution.

redundancy traces

Clears the remote redundancy traces that are stored on a remote VSM during the split-brain resolution.

clear active-active redundancy traces

command.

Syntax Description

This command has no arguments.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

Use the following command to check the redundancy traces that were backed up during the split-brain resolution.

Examples

This example shows how to clear the redundancy traces:

n1000v# clear active-active redundancy traces

n1000v#

Related Commands

Command

Description

Clears the accounting logs that are stored on a local VSM during the split-brain resolution.

Clears the remote accounting logs that are stored on a remote VSM during the split-brain resolution.

clear active-active remote redundancy traces

Clears the remote redundancy traces that are stored on a remote VSM during the split-brain resolution.

clear active-active remote redundancy traces

command.

Syntax Description

This command has no arguments.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

Use the following commands to check the remote accounting logs that were backed up during the split-brain resolution.

Examples

This example shows how to clear the remote accounting logs:

n1000v# clear active-active remote redundancy traces

n1000v#

Related Commands

Command

Description

Clears the accounting logs that are stored on a local VSM during the split-brain resolution.

Clears the remote accounting logs that are stored on a remote VSM during the split-brain resolution.

redundancy traces

Clears the redundancy traces that are stored on a local VSM during the split-brain resolution.

clear cdp

command.

]}

Syntax Description

Clear CDP counters on all interfaces.

(Optional) Clear CDP counters on a specified interface .

Clear CDP cache on all interfaces.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear CDP counters on all interfaces:

n1000V# clear cdp counters

This example shows how to clear CDP cache on all interfaces:

n1000V# clear cdp table

Related Commands

Command

Description

Displays all interfaces that have CDP enabled.

show cdp entry

Displays the CDP database entries

show cdp global

Displays the CDP global parameters.

show cdp interface intrface-type slot-port

Displays the CDP interface status

clear cli history

command.

clear cli history

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to display the history of the commands that you entered at the command-line interface (CLI).

Examples

This example shows how to clear the command history:

n1000v# clear cli history

Related Commands

Command

Description

Displays the command history.

clear cores

command.

Syntax Description

(Optional) Clears the core file on the logflash filesystem.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to display information about the core files.

Examples

This example shows how to clear the core file:

n1000v# clear cores

This example shows how to clear the core on the logflash filesystem:

n1000v# clear cores archive

Related Commands

Command

Description

Displays the core filename.

Configures the core filename.

clear counters

command.

Syntax Description

Clears interface counters.

Clears all interface counters.

Clears Ethernet interface counters. The range is 1 to 66.

Clears loopback interface counters. The range is 0 to 1023.

Clears the management interface (mgmt0).

Clears port-channel interfaces. The range is 1 to 4096.

Clears virtual Ethernet interfaces. The range is 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear the Ethernet interface counters:

n1000v(config)# clear counters ethernet 2/1

Related Commands

Command

Description

Displays the interface status, which includes the counters.

clear debug-logfile

command.

Syntax Description

Name of the debug logfile to clear.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear the debug logfile:

n1000v# clear debug-logfile syslogd_debugs

Related Commands

Command

Description

Configures a debug logging file.

Enable debug logging.

Displays the contents of the debug logfile.

clear flow exporter

command in Any.

Syntax Description

Indicates that a flow exporter will be specified by name.

Name of an existing flow exporter.

Command Default

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

The following example clears the statistics for the flow exporter named NFC-DC-PHOENIX:

n1000v# clear flow exporter name NFC-DC-PHOENIX

n1000v#

Related Commands

Command

Description

Clears the statistics for exporters.

Creates a flow exporter.

Displays flow exporter status and statistics.

clear ip access-list counters

command.

Syntax Description

(Optional) Name of the IP ACL whose counters you want cleared. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If specifying an ACL by name, it can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all IP ACLs:

n1000v# clear ip access-list counters

n1000v#

This example shows how to clear counters for an IP ACL named acl-ip-101:

n1000v# clear ip access-list counters acl-ip-101

n1000v#

Related Commands

Command

Description

Clears counters for IP and MAC ACLs.

Clears counters for MAC ACLs.

Displays information about one or all IP and MAC ACLs.

Displays information about one or all IP ACLs.

clear ipv6 access-list counters

command.

Syntax Description

(Optional) Name of the IPv6 ACL whose counters you want cleared. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

If specifying an ACL by name, it can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all IPv6 ACLs:

n1000v# clear ipv6 access-list counters

n1000v#

This example shows how to clear counters for an IPv6 ACL named acl-ip-101:

n1000v# clear ipv6 access-list counters acl-ipv6-101

n1000v#

Related Commands

Command

Description

Clears counters for IPv4, IPv6 and MAC ACLs.

Clears counters for MAC ACLs.

Displays information about one or all IPv4, IPv6 and MAC ACLs.

Displays information about one or all IPv4 ACLs.

Displays information about one or all IPv6 ACLs.

clear ip arp inspection statistics vlan

command.

Syntax Description

Range of VLAN IDs from 1 to 4094 that you can clear DAI statistics from.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to clear the DAI statistics for VLAN 2:

n1000v# clear ip arp inspection statistics vlan 2

n1000v#

This example shows how to clear the DAI statistics for VLANs 5 through 12:

n1000v# clear ip arp inspection statistics vlan 5-12

n1000v#

This example shows how to clear the DAI statistics for VLAN 2 and VLANs 5 through 12:

n1000v# clear ip arp inspection statistics vlan 2,5-12

n1000v#

Related Commands

Command

Description

Enables or disables DAI for a list of VLANs.

Displays the DAI statistics.

clear ip dhcp snooping binding

command.

]

Syntax Description

(Optional) Specifies the VLAN to clear.

ID of the specified VLAN.

(Optional) Specifies the MAC address associated with this VLAN.

MAC address associated with this VLAN.

(Optional) Specifies the IP address associated with this VLAN.

IP address associated with this VLAN.

(Optional) Specifies the interface associated with this VLAN.

ID of the interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear dynamically added entries from the DHCP snooping binding database:

n1000v# clear ip dhcp snooping binding

n1000v#

This example shows how to clear a DHCP snooping binding table entry for an interface:

n1000v# clear ip dhcp snooping binding vlan 10 mac EEEE.EEEE.EEEE ip 10.10.10.1 interface vethernet 1

n1000v#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Displays the DHCP snooping binding database.

ip dhcp snooping

Enables DHCP snooping globally.

ip dhcp snooping vlan

.

ip dhcp snooping verify mac-address

Enables DHCP snooping MAC address verification.

clear ip igmp interface statistics

command.

]

Syntax Description

(Optional) Interface type. For more information, use the question mark (?) online help function.

(Optional) Interface number.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear IGMP statistics for an interface:

n1000v# clear ip igmp interface statistics ethernet 2/1

n1000v#

Related Commands

Command

Description

Displays information about IGMP interfaces.

clear ip igmp snooping statistics vlan

command.

}

Syntax Description

VLAN number. The range is from 1 to 3967 and 4048 to 4093.

Applies to all VLANs.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear IGMP snooping statistics for VLAN 1:

n1000v# clear ip igmp snooping statistics vlan 1

n1000v#

Related Commands

Command

Description

Displays IGMP snooping statistics by VLAN.

clear lacp counters

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you do not specify a channel number, the LACP counters for all LACP port groups are cleared.

for a static port-channel group, without the aggregation protocol enabled, the device ignores the command.

Examples

This example shows how to clear all the LACP counters:

n1000v(config)# clear lacp counters

n1000v(config) #

This example shows how to clear all LACP counters for the LACP port-channel group 20:

n1000v(config)# clear lacp counters interface port-channel 20

n1000v(config)#

Related Commands

Command

Description

clear license

command.

clear license filename

Syntax Description

Name of the license file to be uninstalled.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If a license is in use, you cannot uninstall it. Before uninstalling the license file, all licenses must first be transferred from the VEMs to the VSM license pool.

Caution Service Disruption

When you uninstall a license file from a VSM, the vEthernet interfaces on the VEMs are removed from service and the traffic flowing to them from virtual machines is dropped. This traffic flow is not resumed until you add a new license file with licenses for the VEMs. We recommend notifying the server administrator that you are uninstalling a license and that this will cause the vEthernet interfaces to shut down.

Examples

This example shows how to remove the Enterprise.lic license file from a VSM:

n1000v# clear license Enterprise.lic

Clearing license Enterprise.lic:

SERVER this_host ANY

VENDOR cisco

Do you want to continue? (y/n) y

Clearing license ..done

n1000v#

Related Commands

Command

Description

Displays license information.

Installs a license file(s) on a VSM

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

clear line

command.

Syntax Description

Specifies the vty name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to end a session on a specified vty:

n1000v(config)# clear line

Related Commands

Command

Description

Displays active user sessions.

clear logging logfile

command to clear messages from the logging file.

clear logging logfile

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Super user

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear messages from the logging file:

n1000v# clear logging logfile

n1000v#

Related Commands

Command

Description

Displays the logs in the local log file.

clear logging session

command to clear the current logging session.

clear logging session

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Super user

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear the current logging session:

n1000v# clear logging session

n1000v#

Related Commands

Command

Description

Displays logging session status

clear mac access-list counters

command.

Syntax Description

(Optional) Name of the MAC ACL whose counters you want to clear. The name can be up to 64 alphanumeric, case-sensitive characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you want counters cleared for a specific MAC ACL, the name can be up to 64 alphanumeric, case-sensitive characters.

Examples

This example shows how to clear counters for all MAC ACLs:

n1000v# clear mac access-list counters

n1000v#

This example shows how to clear counters for a MAC ACL named acl-mac-0060:

n1000v# clear mac access-list counters acl-mac-0060

n1000v#

Related Commands

Command

Description

Clears counters for IP and MAC ACLs.

Clears counters for IP ACLs.

Displays information about one or all IP and MAC ACLs.

Displays information about one or all MAC ACLs.

clear mac address-table dynamic

command.

Syntax Description

he type of interface, the slot number, and the port number, or the port-channel number.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command with no arguments to remove all dynamic entries from the table.

command.

command is entered with no options, all dynamic addresses are removed. If you specify an address but do not specify an interface, the address is deleted from all interfaces. If you specify an interface but do not specify an address, the device removes all addresses on the specified interfaces.

Examples

This example shows how to clear all the dynamic Layer 2 entries from the MAC address table:

n1000v(config)# clear mac address-table dynamic

n1000v(config) #

This example shows how to clear all the dynamic Layer 2 entries from the MAC address table for VLAN 20 on port 2/20:

n1000v(config)# clear mac address-table dynamic vlan 20 interface ethernet 2/20

n1000v(config)#

Related Commands

Command

Description

clear mac address-table sw-installed stale-entries

To clear the software installed address entries from the MAC address table. Clear commands allow for clearing up any stale MACs/VTEPs.

clear mac address-table sw-installed stale entries

Syntax Description

sw-installed

Specifies that you want to clear software installed MAC addresses and VTEPs.

stale entries

Specifies any stale MACs/VTEPs entries.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use the clear mac address-table sw-installed stale entries command to clear the software installed MAC addresses and any stale entries in the VSM.

Examples

This example shows how to clear the software installed address entries from the MAC address table:

n1000v(config)# clear mac address-table sw-installed stale-entries

Related Commands

Command

Description

clear vtep-table stale-entries

To clear the stale VTEPs entries.

clear vtep-table stale-entries module <module num>

To clear the stale VTEPs entries of specific module.

clear mac address-table sw-installed stale-entries module <module num>

To clear the software installed address entries from the MAC address table of specific module. Clear commands allow for clearing up any stale MACs/VTEPs.

clear mac address-table sw-installed stale-entries module <module num>

Syntax Description

sw-installed

Specifies that you want to clear software installed MAC addresses and VTEPs.

stale entries

Specifies any stale MACs/VTEPs entries.

module <module num>

Specifies the specific module number.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use the clear mac address-table sw-installed stale-entries module <module num> command to clear the software installed MAC addresses and any stale entries of the specific module in the VSM.

Examples

This example shows how to clear the software installed address entries from the MAC address table of specific module:

n1000v(config)# clear mac address-table sw-installed stale-entries module <module num>

Related Commands

Command

Description

clear vtep-table stale-entries

To clear the stale VTEPs entries.

clear vtep-table stale-entries module <module num>

To clear the stale VTEPs entries of specific module.

clear ntp statistics

command.

}

Syntax Description

Clear statistics for all NTP peers.

Clear IO statistics.

Clear local statistics.

Clear memory statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear statistics for all NTP peers:

n1000v(config)# clear ntp statistics all-peers

Related Commands

Command

Description

Displays information about NTP peers.

clear port-security

command.

Syntax Description

Specifies that you want to clear dynamically-learned, secure MAC addresses.

Specifies the interface of the dynamically learned, secure MAC addresses that you want to clear.

is the MAC address.

Specifies the VLAN of the secure MAC addresses to be cleared. Valid VLAN IDs are from 1 to 4096.

module

Module number.

Defaults

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to remove dynamically learned, secure MAC addresses from the veth1 interface:

n1000v# config t

n1000v(config)# clear port-security dynamic interface veth 1

This example shows how to remove the dynamically learned, secure MAC address 0019.D2D0.00AE:

n1000v# config t

n1000v(config)# clear port-security dynamic address 0019.D2D0.00AE

Related Commands

Command

Description

Provides debugging information for port security.

Enables port security on a Layer 2 interface.

clear qos statistics

command.

]}

Syntax Description

(Optional) Identifies a specific interface for which to clear statistics.

(Optional) Clears only input QoS statistics.

(Optional) Clears only output QoS statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you do not specify an interface, the counters are cleared for all interfaces.

Examples

This example shows how to clear QoS statistics for all interfaces:

n1000v# clear qos statistics

n1000v#

This example shows how to clear all input QoS statistics for veth2:

n1000v# clear qos statistics veth2 input type qos

n1000v#

Related Commands

Command

Description

Enables or disables QoS statistics.

Displays the policy map configuration for all policy maps or for a specified policy map.

clear ssh hosts

command.

clear ssh hosts

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear all SSH host sessions:

n1000v# clear ssh hosts

Related Commands

Command

Description

Enables the SSH server.

clear system reset-reason

command.

clear system reset-reason

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to clear reset-reason history:

n1000v# clear system reset-reason

Related Commands

Command

Description

Displays the device reset-reason history.

clear user

command.

Syntax Description

User identifier.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to display the current user sessions on the device.

Examples

This example shows how to clear all SSH host sessions:

n1000v# clear user user1

Related Commands

Command

Description

Displays the user session information.

clear vtep-table stale-entries

To clear the stale vteps entries from the address table. Clear commands allow for clearing up any stale MACs/VTEPs.

clear vtep-table stale-entries

Syntax Description

vtep-table

Specifies that you want to clear stale VTEPs.

stale-entries

Specifies any stale MACs/VTEPs entries.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use the clear vtep-table stale-entries command to clear the stale vtep entries in the VSM.

Examples

This example shows how to clear the stale vtep entries:

n1000v(config)# clear vtep-table stale-entries

Related Commands

Command

Description

clear mac address-table sw-installed stale-entries

clear vtep-table stale-entries module <module num>

To clear the stale VTEPs entries of specific module.

clear vtep-table stale-entries module <module num>

To clear the stale vteps entries from the address table of specific module. Clear commands allow for clearing up any stale MACs/VTEPs.

clear vtep-table stale-entries module <module num>

Syntax Description

vtep-table

Specifies that you want to clear stale VTEPs.

stale-entries

Specifies any stale MACs/VTEPs entries.

module <module num>

Specifies the specific module number.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use the clear vtep-table stale-entries module <module num> command to clear the stale vtep entries of specific module.

Examples

This example shows how to clear the stale vtep entries of specific module:

n1000v(config)# clear vtep-table stale-entries module <module num>

Related Commands

Command

Description

clear mac address-table sw-installed stale-entries

clear vtep-table stale-entries

To clear the stale VTEPs entries.

cli var name

form of this command.

cli var name variable-name variable-text

cli no var name variable-name

Syntax Description

Name of the variable. The name is alphanumeric, case sensitive, and has a maximum of 31 characters.

Variable text. The text is alphanumeric, can contain spaces, and has a maximum of 200 characters.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You can reference a CLI variable using the following syntax:

Instances where you can use variables in include the following:

- Command scripts

- Filenames

You cannot reference a variable in the definition of another variable.

You can use the predefined variable, TIMESTAMP, to insert the time of day. You cannot change or remove the TIMESTAMP CLI variable.

You must remove a CLI variable before you can change its definition.

Examples

This example shows how to define a CLI variable:

n1000v# cli var name testinterface interface 2/3

This example shows how to reference the TIMESTAMP variable:

n1000v# copy running-config > bootflash:run-config-$(TIMESTAMP).cnfg

This example shows how to remove a CLI variable:

n1000v# cli no var name testinterface interface 2/3

Related Commands

Command

Description

Displays the CLI variables.

clock set

command.

clock set time day month year

Syntax Description

Day of the month. The range is from 1 to 31.

.

Year. The range is from 2000 to 2030.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Use this command when you cannot synchronize your device with an outside clock source, such as NTP.

Examples

This example shows how to manually set the clock:

n1000v# clock set 9:00:00 1 June 2008

Related Commands

Command

Description

Displays the clock time.

clock summer-time

form of this command.

no clock summer-time

Syntax Description

Time zone string. The time zone string is a three-character string.

Week of the month to start the summer-time offset. The range is from 1 to 5.

.

.

Week of the month to end the summer-time offset. The range is from 1 to 5.

.

.

Number of minutes to offset the clock. The range is from 1 to 1440.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the offset for summer-time or daylight saving time:

n1000v# configure terminal

n1000v(config)# clock summer-time PDT 1 Sunday March 02:00 1 Sunday November 02:00 60

This example shows how to remove the summer-time offset:

n1000v# configure terminal

n1000v(config)# no clock summer-time

Related Commands

Command

Description

Displays clock summer-time offset configuration.

clock timezone

form of this command.

no clock timezone

Syntax Description

Zone name. The name is a 3-character string for the time zone acronym (for example, PST or EST).

Number of hours offset from UTC. The range is from –23 to 23.

Number of minutes offset from UTC. The range is from 0 to 59.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the time zone offset from UTC:

n1000v# clock timezone EST 5 0

This example shows how to remove the time zone offset:

n1000v# no clock timezone

Related Commands

Command

Description

Displays the clock time.

cluster-id A.B.C.D

To configure Route Reflector Cluster-ID, use the cluster-id A.B.C.D command.

cluster-id A.B.C.D

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to manually specify the IP address to use as cluster-id for Route Reflector:

n1000v(config-router)# cluster-id 17.17.17.31

Related Commands

Command

Description

Displays the clock time.

collect counter

form of this command.

]}

]}

Syntax Description

Configures the number of bytes or packets seen in a flow as a non-key field and enables collecting the total number of bytes from the flow.

(Optional) Enables collecting the total number of bytes from the flow using a 64 bit counter.

Configures the number of bytes seen in a flow as a non-key field and enables collecting the total number of packets from the flow.

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

The following example enables collecting the total number of bytes from the flows as a non-key field:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter bytes

The following example enables collecting the total number of bytes from the flows as a non-key field using a 64 bit counter:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter bytes long

The following example enables collecting the total number of packets from the flows as a non-key field:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter packets

The following example enables collecting the total number of packets from the flows as a non-key field using a 64 bit counter:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect counter packets long

Related Commands

Command

Description

Configures the counters as a non-key field and collects the counter values.

Creates a flow record.

Displays flow record status and statistics.

collect timestamp sys-uptime

form of this command.

}

}

Syntax Description

Configures the sys-uptime for the time the first packet was seen from the flows as a non-key field and enables collecting time stamps based on the sys-uptime for the time the first packet was seen from the flows.

Configures the sys-uptime for the time the last packet was seen from the flows as a non-key field and enables collecting time stamps based on the sys-uptime for the time the most recent packet was seen from the flows.

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

The following example enables collecting the sys-uptime for the time the first packet was seen from the flows:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect timestamp sys-uptime first

The following example enables collecting the sys-uptime for the time the most recent packet was seen from the flows:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect timestamp sys-uptime last

Related Commands

Command

Description

Creates a flow record.

Displays flow record status and statistics.

collect transport tcp flags

form of this command.

Syntax Description

This command has no arguments or keywords

Command Default

This command is not enabled by default.

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

The following example collects the TCP flags:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)# collect transport tcp flags

Related Commands

Command

Description

Creates a flow record.

Displays flow record status and statistics.

configure terminal

command.

configure terminal

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to access configuration commands in the CLI global configuration mode:

n1000v# configure terminal

n1000v(config)#

Related Commands

Command

Description

Displays the current configuration mode context.

pwd

Displays the name of the present working directory.

Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

connect

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

no connect

Command Modes

SVS connect configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Upon connection to vCenter, if a username and password have not been configured for this connection, you are prompted to enter them.

.

Examples

This example shows how to connect to vCenter:

n1000v(config#) svs connection vcWest

n1000v(config-svs-conn#) protocol vmware-vim

n1000v(config-svs-conn#) remote hostname vcMain

n1000v(config-svs-conn#) vmware dvs datacenter-name HamiltonDC

n1000v(config-svs-conn#) connect

This example shows how to disconnect from vCenter:

n1000v(config#) svs connection vcWest

n1000v(config-svs-conn#) no connect

Related Commands

Command

Description

Displays the current connections to the Cisco Nexus 1000V.

control type multicast

Configures the control type multicast in Layer 3 mode on the VSM. To disable the control type multicast, use the no form of this command.

control type multicast

Syntax Description

This command has no arguments or keywords.

Defaults

This command is not enabled by default.

Command Modes

SVS domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

None.

Examples

The following example configures control type multicast::

n1000v(config)# svs-domain

n1000v(config-svs-domain)# control type multicast

Related Commands

Command

Description

show svs-domain

Displays svs domain configuration.

control vlan

form of this command.

Syntax Description

control VLAN number.

Defaults

None

Command Modes

SVS domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Newly-created VLANs remain unused until Layer 2 ports are assigned to them.

If you enter a VLAN ID that is assigned to an internally allocated VLAN, the CLI returns an error message.

Examples

This example shows how to configure control VLAN 70 for domain ID 32:

n1000v# config t

n1000v(config)# svs-domain

n1000v(config-svs-domain)# domain id 32

n1000v(config-svs-domain)# control vlan 70

n1000v(config-svs-domain)#

This example shows how to remove control VLAN 70 from domain ID 32:

n1000v# config t

n1000v(config)# svs-domain

n1000v(config-svs-domain)# domain id 32

n1000v(config-svs-domain)# no control vlan 70

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays the configuration for the specified VLAN.

svs-domain

Creates the domain and places you into CLI SVS domain configuration mode.

domain id

Assigns a domain ID to the domain.

packet vlan

Assigns a packet VLAN to the domain.

show svs-domain

Displays the domain configuration.

copy

command.

Syntax Description

Location URL (or variable) of the source file or directory to be copied. The source can be either local or remote, depending upon whether the file is being downloaded or uploaded.

Destination URL (or variable) of the copied file or directory. The destination can be either local or remote, depending upon whether the file is being downloaded or uploaded.

]).

The following tables list URL prefix keywords by the file system type. If you do not specify a URL prefix keyword, the device looks for the file in the current directory.

lists URL prefix keywords for bootflash and remote writable storage file systems.

Table 3-1 URL Prefix Keywords for Storage File Systems

Keyword

Source or Destination

]

.

server][/path]/filename

filename

lists the URL prefix keywords for nonwritable file systems.

Table 3-2 URL Prefix Keywords for Special File Systems

Keyword

Source or Destination

core:

Local memory for core files. You can copy core files from the core: file system.

debug:

Local memory for debug files. You can copy core files from the debug: file system.

log:

Local memory for log files. You can copy log files from the log: file system.

Local system memory. You can copy the running configuration to or from the system: file system. The system: file system is optional when referencing the running-config file in a command.

volatile:

Local volatile memory. You can copy files to or from the volatile: file system. All files in the volatile: memory are lost when the physical device reloads.

Defaults

The default name for the destination file is the source filename.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The entire copying process may take several minutes, depending on the network conditions and the size of the file, and differs from protocol to protocol and from network to network.

).

, the server is either an IP address or a host name.

Examples

This example shows how to copy a file within the same directory:

n1000v# copy file1 file2

This example shows how to copy a file to another directory:

n1000v# copy file1 my_files:file2

This example shows how to copy a file to another supervisor module:

n1000v# copy file1 bootflash://sup-remote/file1.bak

This example shows how to copy a file from a remote server:

n1000v# copy scp://10.10.1.1/image-file.bin bootflash:image-file.bin

Related Commands

Command

Description

Changes the current working directory.

Configures CLI variables for the session.

Displays the directory contents.

Moves a file.

Displays the name of the current working directory.

copy running-config startup-config

command.

copy running-config startup-config

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Use this command to save configuration changes in the running configuration to the startup configuration in persistent memory. When a device reload or switchover occurs, the saved configuration is applied.

Examples

This example shows how to save the running configuration to the startup configuration:

n1000v# copy running-config startup-config

[########################################] 100%

Related Commands

Command

Description

Displays the running configuration.

Displays the differences between the running configuration and the startup configuration.

Displays the startup configuration.

Erases the startup configuration in the persistent memory.

cts device-id

To configure a Cisco TrustSec device identifier, use the cts device-id command.

Syntax Description

device-id

Cisco TrustSec device identifier name. The name is alphanumeric and case-sensitive. The maximum length is 32 characters.

7

(Optional) Encrypts the password.

password password

Specifies the password to use during EAP-FAST processing. The name is alphanumeric and case-sensitive. The maximum length is 32 characters.

Defaults

No Cisco TrustSec device identifier

Clear text password

Command Modes

Global configuration (config)

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command. The Cisco TrustSec device identifier name must be unique in your Cisco TrustSec network cloud. This command requires the Advanced Services license.

Examples

This example shows how to configure a Cisco TrustSec device identifier:

switch# configure terminal

swtich(config)# cts device-id DeviceA password Cisco321

Related Commands

Command

Description

feature cts

Enables the Cisco TrustSec feature.

Displays the Cisco TrustSec credentials information.

cts device tracking

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to enable the device tracking on Cisco TrustSec SXP:

n1000v# configure terminal

n1000v(config)# cts device tracking

enabled

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the Cisco TrustSec device tracking configuration.

cts interface delete-hold

form of this command.

Syntax Description

Number of seconds. The range is from 0 to 64000.

Defaults

60 seconds.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

If the timer is set to 0, the IP-SGT mappings are deleted instantly.

The no form of this command does not start the timer when the interface goes to non-participating state and the IP-SGT entries are then always held on the interface.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure the delete hold timer period for an interface:

n1000v# configure terminal

n1000v(config)# cts interface delete-hold

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the interface delete hold timer period for Cisco TrustSec

cts refresh role-based-policy

To refresh the Cisco TrustSec security group access control list (SGACL) policies downloaded from the Cisco Secure ACS, use the cts refresh role-based-policy command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command. This command requires the Advanced Services license.

Examples

This example shows how to enter Cisco TrustSec manual configuration mode for an interface:

switch# cts refresh role-based-policy

Related Commands

Command

Description

feature cts

Enables the Cisco TrustSec feature.

Displays Cisco TrustSec SGACL policy configuration.

cts role-based access-list

To create or specify a Cisco TrustSec security group access control list (SGACL) and enter role-based access control list configuration mode, use the cts role-based access-list command. To remove an SGACL, use the no form of this command.

Syntax Description

Name for the SGACL. The name is alphanumeric and case-sensitive. The maximum length is 32 characters.

Defaults

None

Command Modes

Global configuration mode.

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command. This command requires the Advanced Services license.

Examples

This example shows how to create a Cisco TrustSec SGACL and enter role-based access list configuration mode:

switch# configure terminal

switch(config)# cts role-based access-list MySGACL

switch(config-rbacl)#

This example shows how to remove a Cisco TrustSec SGACL:

switch# configure terminal

switch(config)# no cts role-based access-list MySGACL

Related Commands

Command

Description

feature cts

Enables the Cisco TrustSec feature.

Displays Cisco TrustSec SGACL policy configuration.

cts role-based counters enable

To enable role-based access control list (RBACL) statistics, use the cts role-based counters enable command. To disabled RBACL statistics, use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled.

Command Modes

Global configuration mode.

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

To use this command, you must enable RBACL policy enforcement under the cts manual config mode at port-profiles conf.

When you enable RBACL statistics, each policy requires one entry in the . If you do not have enough space remaining in the , an error message appears, and you cannot enable the statistics.

When you modify an RBACL policy, statistics for the previously assigned access control entry (ACE) are displayed, and the newly assigned ACE statistics are initialized to 0.

RBACL statistics are lost only when the Cisco NX-OS device reloads or you deliberately clear the statistics.

Examples

This example shows how to enable RBACL statistics:

switch# configure terminal

switch(config)# cts role-based counters enable

This example shows how to disable RBACL statistics:

switch# configure terminal

switch(config)# no cts role-based counters enable

Related Commands

Command

Description

clear cts role-based counters

Clears the RBACL statistics so that all counters are reset to 0.

Displays the configuration status of RBACL statistics and lists statistics for all RBACL policies.

cts role-based enforcement

To enable Cisco TrustSec security group access control list (SGACL) enforcement. use the cts role-based enforcement command under cys manual config level at port-profile configuration. To revert to the default, use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled.

Command Modes

cts manual (at port-profile configuration)

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to enable Cisco TrustSec SGACL enforcement in a port-profile:

switch(config)# port-profile type vethernet A-PP

switch(config-port-prof)# cts manual

switch(config-port-prof-cts-manual)# role-based enforcement

switch(config-port-prof-cts-manual)# no role-based enforcement

Related Commands

Command

Description

feature cts

Enables the Cisco TrustSec feature.

Displays the Cisco TrustSec SGACL policy enforcement configuration.

cts role-based sgt

To manually configure mapping of Cisco TrustSec security group tags (SGTs) to a security group access control list (SGACL), use the cts role-based sgt command. To remove the SGT mapping to an SGACL, use the no form of this command.

Syntax Description

Source SGT value. The range is 0 to 65533.

any

Specifies any SGT.

unknown

Specifies an unknown SGT.

dgt

Specifies the destination SGT.

dgt-value

Destination SGT value. The range is 0 to 65533.

access-list list-name

Specifies the name for the SGACL.

Defaults

None.

Command Modes

Global configuration

Supported User Roles

network-admin

vdc-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

You must configure the SGACL before you can configure SGT mapping.

This command requires the Advanced Services license.

Examples

This example shows how to configure SGT mapping for an SGACL:

switch# configure terminal

switch(config)# cts role-based sgt 3 dgt 10 access-list MySGACL

This example shows how to remove SGT mapping for an SGACL:

switch# configure terminal

switch(config)# no cts role-based sgt 3 sgt 10

Related Commands

Command

Description

feature cts

Enables the Cisco TrustSec feature.

Displays the Cisco TrustSec SGT mapping for an SGACL.

cts role-based sgt map

form of this command.

Syntax Description

Specifies the IP address of the host.

Specifies the SGT corresponding to the IP address. The range is from 1-65519.

Defaults

None

Command Modes

Global configuration (config)

VRF configuration (config-vrf)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

You can use only IPv4 addressing with Cisco TrustSec.

The static IP-SGT bindings are configured in a context of a VRF and will be applied to the default VRF unless management VRF is specified.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure mapping for a Cisco TrustSec SGT:

n1000v# configure terminal

n1000v(config)# cts role-based sgt-map 1.1.1.1 100

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the mapping of the IP address to SGT for Cisco TrustSec.

show ipstg entries

Displays SXP SGT mappings for Cisco TrustSec.

cts sgt

form of this command.

Syntax Description

Local SGT for the device that is a hexadecimal value with the format 0xhhhh. The range is from 1-65519.

Defaults

None

Command Modes

Port profile configuration (config-port-profile)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure the Cisco TrustSec SGT for the device:

n1000v# configure terminal

n1000v(config)# cts stg 0x00a2

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

cts sxp connection peer

form of this command.

Syntax Description

Specifies IPv4 address of the peer device.

Specifies the IPV4 address of the source.

Specifies the password that SXP should use for the peer connection.

default

Specifies that SXP should use the default SXP password for the peer connection.

none

Specifies that SXP should not use a password for the peer connection.

required

Specifies the password that SXP should use for this peer connection.

mode

Specifies the mode of the peer device.

listener

Specifies that the peer is the listener.

vrf

Specifies the VRF for the peer.

default

Specifies the default VRF for the peer.

management

Specifies the management VRF for the peer.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

Since Cisco Nexus 1000V can only act as the speaker in the connection, the peer must be configured as the listener.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

n1000v# configure terminal

n1000v(config)# cts sxp connection peer 1.2.3.4 password none mode listener vrf management

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays SXP connections for Cisco TrustSec.

cts sxp default password

form of this command.

Syntax Description

Specifies unencrypted default password

Specifies encrypted default password.

Defaults

Unencrypted password.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure the default SXP password for the device:

n1000v# configure terminal

n1000v(config)# cts sxp default password 7 CisocPassword

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

cts sxp default source-ip

form of this command.

Syntax Description

Default SXP IPv4 address for the device.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

You can use only IPv4 addressing with Cisco TrustSec.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure the default SXP source IP address for the device:

n1000v# configure terminal

n1000v(config)# cts sxp default source-ip 10.10.3.3

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the SXP configuration for Cisco TrustSec.

cts sxp retry-period

form of this command.

Syntax Description

Number of seconds. The range is from 0 to 64000.

Defaults

60 seconds.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

Setting the SXP retry period to 0 seconds disables the timer and retries are not attempted.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to configure the SXP retry period:

n1000v# configure terminal

n1000v(config)# cts sxp retry-period 120

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the SXP configuration for Cisco TrustSec.

cts sxp enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to enable the Cisco TrustSec SXP:

n1000v# configure terminal

n1000v(config)# cts sxp enable

This example shows how to disable the Cisco TrustSec SXP:

n1000v# configure terminal

D Commands

This chapter describes the Cisco Nexus 1000V commands that begin with D.

deadtime

form of this command.

Syntax Description

Number of minutes, from 0 to 1440, for the interval.

Defaults

0 minutes

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

The dead-time can be configured either globally and applied to all RADIUS or TACACS+ servers; or per server group.

If the dead-time interval for a RADIUS or TACACS+ server group is greater than zero (0), that value takes precedence over the global dead-time value.

Setting the dead-time interval to 0 disables the timer.

When the dead-time interval is 0 minutes, RADIUS and TACACS+ servers are not marked as dead even if they are not responding.

Examples

This example shows how to set the dead-time interval to 2 minutes for a RADIUS server group:

n1000v# config t

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# deadtime 2

This example shows how to set a global dead-time interval to 5 minutes for all TACACS+ servers and server groups:

n1000v# config t

n1000v(config)# tacacs-server deadtime 5

n1000v(config)#

This example shows how to set the dead-time interval to 5 minutes for a TACACS+ server group:

n1000v# config t

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-tacacs+)# deadtime 5

This example shows how to revert to the dead-time interval default:

n1000v# config t

n1000v(config)# feature tacacs+

n1000v(config)# aaa group server tacacs+ TacServer

n1000v(config-tacacs+)# no deadtime 5

Related Commands

Command

Description

Configures AAA server groups.

Configures a RADIUS server.

Displays RADIUS server group information.

Displays TACACS+ server group information.

Enables TACACS+.

Configures a TACACS+ server.

debug logfile

form of this command.

Syntax Description

command output. The filename is alphanumeric, case sensitive, and has a maximum of 64 characters.

(Optional) Specifies the size of the logfile in bytes. The range is from 4096 to 4194304.

Defaults

Default filename: syslogd_debugs

Default file size: 4194304 bytes

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The logfile is created in the log: file system root directory.

command to display the log files.

Examples

This example shows how to specify a debug logfile:

n1000v# debug logfile debug_log

This example shows how to revert to the default debug logfile:

n1000v# no debug logfile debug_log

Related Commands

Command

Description

Displays the contents of a directory.

Displays the debug configuration.

Displays the debug logfile contents.

debug logging

form of this command.

debug logging

no debug logging

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

command:

n1000v# debug logging

command:

n1000v# no debug logging

Related Commands

Command

Description

command output.

default ip arp inspection limit

command. This resets the inspection limit to its defaults.

}

Syntax Description

Rate Limit.

(Optional) burst interval.

(Optional) burst interval.

No limit.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Examples

This example shows how to remove a configured rate limit for dynamic ARP inspection from vEthernet interface 3, and reset the rate limit to the default:

n1000v# config t

interface vethernet 3

n1000v(config-if)# default ip arp inspection limit rate

Related Commands

Command

Description

Displays the DHCP configuration including DAI.

Displays the status of DAI.

ip arp inspection vlan

Configures a VLAN for dynamic ARP inspection.

Configures a rate limit for dynamic ARP inspection.

default ip arp inspection trust

command. This returns the interface to the default untrusted state.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Examples

This example shows how to remove the trusted vEthernet interface configuration for dynamic ARP inspection; and return vEthernet interface 3 to the untrusted state:

n1000v# config t

interface vethernet 3

n1000v(config-if)# default ip arp inspection trust

n1000v(config-if)#

Related Commands

Command

Description

Displays the trust state and ARP packet rate for a specific interface.

ip arp inspection vlan

Configures a VLAN for dynamic ARP inspection.

Configures a trusted vEthernet interface for dynamic ARP inspection.

default segment distribution mac

To configure default MAC distribution mode of the bridge-domain. Global Configuration will take effect only on BDs which have default configuration.

Syntax Description

Default segment mode.

Configure MAC distribution mode.

Defaults

None

Command Modes

bridge-domain configuration (config-bd)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Global Configuration will take effect only on BDs which have default configuration.

Examples

This example shows how to configure the default MAC distribution mode per bridge-domain:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# default segment mode unicast-only

n1000v(config-bd)# default segment distribution mac

Related Commands

Command

Description

Configure the default segment mode unicast-only per bridge-domain.

default segment mode unicast-only

To configure default segment mode of the bridge-domain. Global Configuration will take effect only on BDs which have default configuration.

Syntax Description

Default segment mode.

Configure segment mode unicast-only..

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Global Configuration will take effect only on BDs which have default configuration.

Examples

This example shows how to configure the default segment mode unicast-only per bridge-domain:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# default segment mode unicast-only

Related Commands

Command

Description

Configure the default MAC distribution mode per bridge-domain.

default switchport (port profile)

command.

}

Syntax Description

command.

Removes an access VLAN configuration.

Removes trunking allowed VLAN characteristics.

Removes trunking native VLAN characteristics.

Removes PVLAN host-association.

Removes PVLAN mapping.

Removes port-security characteristics.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The functionally of this command is equivalent to using the no form of a specific switchport command. For example, the effect of the following commands is the same:

- default switchport mode command = no switchport mode command

- default switchport access vlan command = no switchport access vlan command

- default switchport trunk native vlan command= no switchport trunk native vlan command

Examples

This example shows how to revert port profile ports to switch access ports.

n1000v(config-port-prof)# default switchport mode

This example shows how to remove the trunking allowed VLAN characteristics of a port profile.

n1000v(config-port-prof)# default switchport trunk allowed vlan

This example shows how to remove the private VLAN host association of a port profile.

n1000v(config-port-prof)# default switchport private-vlan host-association

This example shows how to remove port security characteristics of a port profile.

n1000v(config-port-prof)# default switchport port-security

Related Commands

Command

Description

Displays information about port profile(s).

default shutdown (port profile)

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to change the member interfaces in the port profile named DataProfile to shutdown:

n1000v# config t

n1000v# port-profile DataProfile

n1000v(config-port-prof)# default shutdown

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays the configuration for a port profile.

default shutdown (interface)

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command on a port profile member interface, it also allows the port profile configuration to take affect.

Examples

This example shows how to change interface Ethernet 3/2 to shutdown:

n1000v# config t

n1000v(config)# interface ethernet 3/2

n1000v(config-if)# default shutdown

n1000v(config-if)#

Related Commands

Command

Description

Displays the interface configuration.

interface ethernet

Configures an Ethernet interface.

interface vethernet

Configures a vEthernet interface.

default switchport port-security (VEthernet)

command. This has the effect of setting the default (disabled) for port-security for that interface.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to disable port security n1000von VEthernet 2:

n1000v# config t

n1000v(config)# interface veth 2

n1000v(config-if)# default switchport port-security

n1000v(config-if)#

Related Commands

Command

Description

Displays the port security configuration.

default (table map)

command.

}

}

Syntax Description

Default value to use for the output value in the range from 0 to 63.

Specifies that the default action is to copy all equal values to an equal output value.

Defaults

Copies the input value to the output value.

Command Modes

Default table map configuration

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

keyword is not available because all values must be assigned a mapping.

Examples

This example shows how to remove the default mapping action copy. The resulting default action is ignore:

n1000v(config)# table-map my_table1

n1000v(config-tmap)# no default copy

n1000v(config-tmap)#

Related Commands

Command

Description

Specifies input field to output field mappings in table maps.

Displays table maps.

delay

form of this command.

]

Syntax Description

Specifies the throughput delay time in tens of microseconds.

Allowable values are between 1 and 16777215.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The actual Ethernet interface throughput delay time does not change when you set this value—the setting is for informational purposes only.

Examples

This example shows how to assign the delay time to an Ethernet slot 3 port 1 interface:

n1000v# config t

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# delay 10000

n1000v(config-if)#

This example shows how to remove the delay time configuration:

n1000v# config t

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# no delay 10000

n1000v(config-if)#

Related Commands

Command

Description

Displays configuration information for an interface.

delete

command.

filename

Syntax Description

:

.

(Optional) Name of the directory. The directory name is case sensitive.

Name of the file. The name is case sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to locate the file you that want to delete.

Examples

This example shows how to delete a file:

n1000v# delete bootflash:old_config.cfg

Related Commands

Command

Description

Displays the contents of a directory.

deny (IPv4)

form of this command.

General Syntax

Internet Control Message Protocol

Internet Group Management Protocol

Internet Protocol v4

Transmission Control Protocol

User Datagram Protocol

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- igmp —Specifies that the rule applies to IGMP traffic only. When you use this keyword, the igmp-type argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv4 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv4 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- ef —Expedited Forwarding (101110)

argument can be a number or a keyword, as follows:

- 0–7—Decimal equivalent of the 3 bits of the IP Precedence field. For example, if you specify 3, the rule matches only packets that have the following bits in the DSCP field: 011.

- critical —Precedence 5 (101)

- flash —Precedence 3 (011)

- flash-override —Precedence 4 (100)

- immediate —Precedence 2 (010)

- internet —Precedence 6 (110)

- network —Precedence 7 (111)

- priority —Precedence 1 (001)

- routine —Precedence 0 (000)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

argument can be the IGMP message number, which is an integer from 0 to 15. It can also be one of the following keywords:

- dvmrp —Distance Vector Multicast Routing Protocol

- host-query —Host query

- host-report —Host report

- pim —Protocol Independent Multicast

- trace —Multicast trace

]

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv4 ACL contains no rules.

If you do not specify a sequence number, the device assigns the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv4 ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When the device applies an IPv4 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv4 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address network-wildcard

argument with the IPv4 address and network wildcard for the 192.168.67.0 subnet:

n1000v(config-acl)# deny tcp 192.168.67.0 0.0.0.255 any

- Address and variable-length subnet mask—You can use an IPv4 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address/prefix-len

argument with the IPv4 address and VLSM for the 192.168.67.0 subnet:

n1000v(config-acl)# deny udp 192.168.67.0/24 any

- Host address—You can use the host keyword and an IPv4 address to specify a host as a source or destination. The syntax is as follows:

host IPv4-address

0.0.0.0.

keyword and the 192.168.67.132 IPv4 address:

n1000v(config-acl)# deny icmp host 192.168.67.132 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv4 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time-exceeded messages

- timestamp-reply —Time-stamp replies

- timestamp-request —Time-stamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—EXEC (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv4 ACL named acl-lab-01 with rules that deny all TCP and UDP traffic from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network and a final rule that permits all other IPv4 traffic:

n1000v# config t

n1000v(config)# ip access-list acl-lab-01

n1000v(config-acl)# deny tcp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# deny udp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# deny tcp 192.168.37.0/16 10.176.0.0/16

n1000v(config-acl)# deny udp 192.168.37.0/16 10.176.0.0/16

n1000v(config-acl)# permit ip any any

Related Commands

Command

Description

Configures an IPv4 ACL.

Configures a permit rule in an IPv4 ACL.

Configures a remark in an IPv4 ACL.

Displays all IPv4 ACLs or one IPv4 ACL.

Enables collection of statistics for each entry in an ACL.

deny (IPv6)

form of this command.

[sequence-number] deny protocol source destination [dscp dscp | log ]

Internet Control Message Protocol

Internet Protocol v6

Transmission Control Protocol

User Datagram Protocol

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv6 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv6 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv6 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv6 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- ef —Expedited Forwarding (101110)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

]

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv6 ACL contains no rules.

If you do not specify a sequence number, the device assigns the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv6 ACL configuration (config-ipv6-acl)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

When the device applies an IPv6 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv6 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv6-address network-wildcard

argument with the IPv6 address and network wildcard for the 2001::1 subnet:

n1000v(config-ipv6-acl)# deny tcp 2001::1 0::0 any

- Address and variable-length subnet mask—You can use an IPv6 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv6-address/prefix-len

argument with the IPv6 address and VLSM for the 2001:1::100 subnet:

n1000v(config-ipv6-acl)# deny udp 2001:1::100/128 any

- Host address—You can use the host keyword and an IPv6 address to specify a host as a source or destination. The syntax is as follows:

host IPv6-address

0:0::0:0

keyword and the 2001::100 IPv6 address:

n1000v(config-ipv6-acl)# deny icmp host 2001::100 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv6 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time-exceeded messages

- timestamp-reply —Time-stamp replies

- timestamp-request —Time-stamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—EXEC (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv6 ACL named acl-lab-01 with rules that deny all TCP and UDP traffic from the 2001:100::100 and 2001:200::200 ip address to the 2002:100::100 ip address and a final rule that permits all other IPv6 traffic:

n1000v# config t

n1000v(config)# ipv6 access-list acl-lab-01

n1000v(config-ipv6-acl)# deny tcp 2001:100::100/128 2002:100::100/128

n1000v(config-ipv6-acl)# deny udp 2001:200::200/128 2002:100::100/128

n1000v(config-ipv6-acl)# permit ipv6 any any

Related Commands

Command

Description

Configures an IPv6 ACL.

Configures a permit rule in an IPv6 ACL.

Configures a remark in an IPv6 ACL.

Displays all IPv6 ACLs or one IPv6 ACL.

Enables collection of statistics for each entry in an ACL.

deny (MAC)

form of this command.

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Source MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

(Optional) Protocol number that the rule matches. Valid protocol numbers are 0x0 to 0xffff. For listings of valid protocol names, see “MAC Protocols” in the “Usage Guidelines” section.

argument can be an integer from 0 to 7.

argument can be an integer from 1 to 4094.

Defaults

A newly created MAC ACL contains no rules.

If you do not specify a sequence number, the device assigns the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When the device applies a MAC ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and mask—You can use a MAC address followed by a mask to specify a single address or a group of addresses. The syntax is as follows:

MAC-address MAC-mask

argument with the MAC address 00c0.4f03.0a72:

n1000v(config-acl)# deny 00c0.4f03.0a72 0000.0000.0000 any

argument with a MAC address for all hosts with a MAC vendor code of 00603e:

n1000v(config-acl)# deny any 0060.3e00.0000 0000.0000.0000

- Any address—You can use the any keyword to specify that a source or destination is any MAC address. For examples of the use of the any keyword, see the examples in this section. Each of the examples shows how to specify a source or destination by using the any keyword.

MAC Protocols

argument can be the MAC protocol number or a keyword. The protocol number is a four-byte hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are the following:

- aarp —Appletalk ARP (0x80f3)

- appletalk —Appletalk (0x809b)

- decnet-iv —DECnet Phase IV (0x6003)

- diagnostic —DEC Diagnostic Protocol (0x6005)

- etype-6000 —EtherType 0x6000 (0x6000)

- etype-8042 —EtherType 0x8042 (0x8042)

- ip —Internet Protocol v4 (0x0800)

- lat —DEC LAT (0x6004)

- lavc-sca —DEC LAVC, SCA (0x6007)

- mop-console —DEC MOP Remote console (0x6002)

- mop-dump —DEC MOP dump (0x6001)

- vines-echo —VINES Echo (0x0baf)

Examples

This example shows how to configure a MAC ACL named mac-ip-filter with rules that permit any non-IPv4 traffic between two groups of MAC addresses:

n1000v# config t

n1000v(config)# mac access-list mac-ip-filter

n1000v(config-mac-acl)# deny 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff ip

n1000v(config-mac-acl)# permit any any

Related Commands

Command

Description

Configures a MAC ACL.

Configures a deny rule in a MAC ACL.

Configures a remark in an ACL.

Displays all MAC ACLs or one MAC ACL.

Enables collection of statistics for each entry in an ACL.

description (interface)

form of this command.

Syntax Description

Describes the interface. The maximum number of characters is 80.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add the description for the interface and save it in the running configuration.:

n1000v(config-if)# description Ethernet port 3 on module 1

This example shows how to remove the interface description.

n1000v(config-if)# no description Ethernet port 3 on module 1

Related Commands

Command

Description

Creates a virtual Ethernet interface.

Creates a port-channel interface.

Creates an Ethernet interface.

interface mgmt

Configure the management interface.

Displays the interface status, including the description.

description (NetFlow)

form of this command.

Syntax Description

Description of up to 63 characters.

Defaults

None

Command Modes

NetFlow flow record (config-flow-record)

NetFlow flow exporter (config-flow-exporter)

Netflow flow monitor (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add a description to a flow record:

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# description Ipv4flow

This example shows how to add a description to a flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# description ExportHamilton

This example shows how to add a description to a flow monitor:

n1000v# config t

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# description Ipv4Monitor

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

description(Network Segmentation Policy)

form of this command.

]

Syntax Description

The description of the network segmentation policy. The description can be up to 80 ASCII characters.

Defaults

None

Command Modes

Network Segment Policy configuration (config-network-segment-policy)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to add a description to the network segmentation policy:

n1000v# configure terminal

n1000v(config)# network-segment policy abc-policy-vxlan

n1000v(config-network-segment-policy)# description network segmentation policy for ABC for VXLAN networks

n1000v(config-network-segment-policy)

Related Commands

Command

Description

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

description (Port Profile Role)

form of this command.

Syntax Description

Describes the role in up to 32 characters.

Defaults

None

Command Modes

Port profile role configuration (config-port-profile-role)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to add a description to a role:

n1000v# config t

n1000v(config)# port-profile-role adminRole

n1000v(config-port-profile-role)# description adminOnly

This example shows how to remove the role description:

n1000v# config t

n1000v(config)# port-profile-role adminRole

n1000v(config-role)# no description

Related Commands

Command

Description

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

port-profile-role

Creates a port profile role.

user

Assigns a user to a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

description (QoS)

form of this command.

Syntax Description

Description, of up to 200 characters, for the class map or policy map.

Defaults

None

Command Modes

s)

s)

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add a description to a policy map:

n1000v(config)# policy-map my_policy1

n1000v(config-pmap)# description this policy applies to input packets

n1000v(config-pmap)#

Related Commands

Command

Description

Creates or modifies a class map.

Creates or modifies a policy map.

Creates or modifies a QoS table map.

description (role)

form of this command.

Syntax Description

Describes the role. The string can include spaces.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add a description to a role:

n1000v(config-role)# description admin

This example shows how to remove the role description:

n1000v(config-role)# no description admin

Related Commands

Command

Description

username

Creates a user account including the assignment of a role.

Displays a role configuration.

description (SPAN)

form of this command.

Syntax Description

Specifies a description of up to 32 alphanumeric characters.

Defaults

Blank (no description)

Command Modes

SPAN monitor configuration (config-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add a description to a SPAN session:

n1000v# config t

n1000v(config)# monitor session 8

n1000v(config-monitor)# description span_session_8a

n1000v(config-monitor)#

This example shows how to remove a description from a SPAN session:

n1000v# config t

n1000v(config)# monitor session 8

n1000v(config)# no description span_session_8a

n1000v(config-monitor)#

Related Commands

Command

Description

Displays session information.

destination (NetFlow)

form of this command.

]

Syntax Description

Destination IP address for collector.

Destination IPv6 address for collector.

(Optional) Optional VRF label.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add a destination IP address to a Netflow flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# destination 192.0.2.1

This example shows how to remove the IP address from a flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no destination 192.0.2.1

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

destination interface (SPAN)

form of this command.

Syntax Description

Designates the SPAN destination(s) Ethernet interface(s).

Designates the SPAN destination(s) port channel(s).

Designates the SPAN destination(s) virtual Ethernet interface(s).

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

SPAN destination ports must already be configured as either access or trunk ports.

SPAN sessions are created in the shut state by default.

.

Examples

This example shows how to configure ethernet interfaces 2/5 and 3/7 in a SPAN session to act as destination(s) for copied source packets:

n1000v# config t

n1000v(config)# monitor session 8

n1000v(config-monitor)# destination interface ethernet 2/5, ethernet 3/7

This example shows how to remove the SPAN configuration from destination interface ethernet 2/5:

n1000v# config t

n1000v(config)# monitor session 8

n1000v(config-monitor)# no destination interface ethernet 2/5

Related Commands

Command

Description

Displays the interface trunking configuration for the specified destination interface.

show monitor

Displays Ethernet SPAN information.

monitor session

Starts the specified SPAN monitor session(s).

dir

command.

Syntax Description

(Optional) Directory or filename.

(Optional) Directory or filename on expansion flash.

(Optional) Directory or filename on log flash.

(Optional) Directory or filename on volatile flash.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to identify the directory you are currently working in.

command to change the directory you are currently working in.

Examples

This example shows how to display the contents of the bootflash: directory

n1000v# dir bootflash:

Related Commands

Command

Description

Changes the current working directory.

pwd

Displays the current working directory.

disable-loop-detection

form of this command.

Syntax Description

Disables loop detection mechanism for Common Address Redundancy Protocol.

Disables loop detection mechanism for Hot Standby Router Protocol.

Disables loop detection mechanism for Virtual Router Redundancy Protocol.

Disables loop detection mechanism for user defined redundant routing protocol.

(Optional) Source MAC address range for the user defined protocol.

(Optional) Start MAC address.

(Optional) End MAC address.

(Optional) Destination IP address for the user defined protocol.

(Optional) IP protocol number for the user defined protocol.

(Optional) UDP or TCP destination port number for the user defined protocol.

Defaults

By default, the loop detection mechanism is enabled.

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

- If you configure a vEthernet Interface and a port profile to run multiple protocols on the same virtual machine, then the configuration on the vEthernet Interface overrides the configuration on the port profile.

- Disable IGMP Snooping on both Cisco Nexus 1000 and upstream switches between the servers to support most redundant routing protocols.

- Disable loop detection configuration is not supported on PVLAN ports.

- Disable loop detection configuration is not supported on the port security ports.

Examples

This example shows how to disable loop detection for redundant routing protocols:

n1000v(config)# int veth5

n1000v(config-if)# disable-loop-detection carp

n1000v(config-if)# disable-loop-detection vrrp

n1000v(config-if)# disable-loop-detection hsrp

n1000v(config-if)# disable-loop-detection custom-rp dest-ip 224.0.0.12 port 2234

n1000v(config-if)# end

n1000v# show running-config interface vethernet 5

!Command: show running-config interface Vethernet5

!Time: Fri Nov 4 02:21:24 2011

version 4.2(1)SV1(5.1)

interface Vethernet5

inherit port-profile vm59

description Fedora117, Network Adapter 2

disable-loop-detection carp

disable-loop-detection custom-rp dest-ip 224.0.0.12 port 2234

disable-loop-detection hsrp

disable-loop-detection vrrp

vmware dvport 32 dvswitch uuid "ea 5c 3b 50 cd 00 9f 55-41 a3 2d 61 84 9e 0e c4"

vmware vm mac 0050.56B3.00B2

n1000v#

Related Commands

Command

Description

Displays the interface configuration.

domain id

form of this command.

Syntax Description

Specifies the domain-id number. The allowable domain IDs are 1 to 4095.

Defaults

None

Command Modes

Domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

During installation of the Cisco Nexus 1000V the setup utility prompts you to configure a domain, including the domain ID and control and packet VLANs.

Examples

This example shows how to assign a domain id:

n1000v# config t

n1000v(config)# sve-domain

n1000v(config-svs-domain)# domain-id number 32

n1000v(config-svs-domain)#

This example shows how to remove the domain-id:

n1000v# config t

n1000v(config)# sve-domain

n1000v(config-svs-domain)# no domain-id number 32

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays domain configuration.

dscp (NetFlow)

form of this command.

Syntax Description

Specifies a DSCP between 0 and 63.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure DSCP for a NetFlow flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# dscp 2

n1000v(config-flow-exporter)#

This example shows how to remove DSCP from the NetFlow flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no dscp 2

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

duplex

form of this command.

}

]

Syntax Description

Specifies full-duplex mode for the interface.

Specifies half-duplex mode for the interface.

Sets the duplex mode on the interface to autonegotiate with the connecting port.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you use the no version of this command, an argument (such as full, half, or auto) is optional. To return to the default duplex setting, you can use either of the following commands (if, for example, the setting had been changed to full):

n1000v(config-if)# no duplex

n1000v(config-if)# no duplex full

Examples

This example shows how to set the Ethernet port 1 on the module in slot 3 to full-duplex mode:

n1000v# config t

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# duplex full

This example shows how to revert to the default duplex setting for the Ethernet port 1 on the module in slot 3:

n1000v# config t

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no duplex

Related Commands

Command

Description

Specifies the interface that you are configuring.

speed

Sets the speed for the port channel interface.

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

E Commands

This chapter describes the Cisco Nexus 1000V commands that begin with E.

echo

command.

Syntax Description

(Optional) Interprets any character following a backslash character (\) as a formatting option.

(Optional) Interprets any character following a backslash character (\) as a formatting option.

(Optional) Text string to display. The text string is alphanumeric, case sensitive, can contain spaces, and has a maximum length of 200 characters. The text string can also contain references to CLI variables.

Defaults

Displays a blank line.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You can use this command in a command script to display information while the script is running.

keyword.

Table 5-1 Formatting Options for the echo Command

Formatting Option

Description

Back spaces.

Removes the new line character at the end of the text string.

Inserts a form feed character.

Inserts a new line character.

Returns to the beginning of the text line.

Inserts a horizontal tab character.

Inserts a vertical tab character.

Displays a backslash character.

Displays the corresponding ASCII octal character.

Examples

This example shows how to display a blank line at the command prompt:

n1000v# echo

This example shows how to display a line of text at the command prompt:

n1000v# echo Script run at $(TIMESTAMP).

Script run at 2008-08-12-23.29.24.

This example shows how to use a formatting option in the text string:

n1000v# echo backslash-interpret This is line #1. \nThis is line #2.

This is line #1.

This is line #2.

Related Commands

Command

Description

Runs command scripts.

ecp max retries

Syntax Description

Defaults

The default value is 3.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

This command is optional. Use this command only if you want to reconfigure the number of times ECP should retry sending a protocol message to a non default value.

Related Commands

Command

Description

Configures the exponential value of the interval for which ECP waits before trying to retransmit the packet.

evb resource-wait-delay

Configures the resource wait delay used by VDP to calculate the time it waits before concluding that a request has timed out.

evb reinit-keep-alive

Configures the interval at which VDP refreshes the VSI state with in the bridge by sending a VDP associate refresh.

ecp retransmission-timer-exponent

ecp retransmission-timer-exponent command

Syntax Description

The range is from 10-20. The no form of this command resets this value to to the default.

Defaults

The default value is 14.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

This command is optional. Use this command only if you want to specify a non-default value for the ecp retransmission timer.

Related Commands

Command

Description

Configures the number of times ECP retries to send an upper layer protocol message.

evb resource-wait-delay

Configures the resource wait delay used by VDP to calculate the time it waits before concluding that a request has timed out.

evb reinit-keep-alive

Configures the interval at which VDP refreshes the VSI state with in the bridge by sending a VDP associate refresh.

enable l3sec

To enable feature l3security in Layer 3, use the enable l3sec command.

enable l3sec

Syntax Description

Command to enable Layer 3 security.

Defaults

None

Command Modes

svs-domain

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable feature l3security in Layer 3:

switch(config)# svs-domain

switch(config-svs-domain)# enable l3sec

Enabling l3sec enables stronger security for VSM-VEM communication.But all vems will get disconnect and connect back. Do you really want to proceed(yes/no)? [no] yes

switch(config-svs-domain)#

Related Commands

Command

Description

Command to disable Layer 3 security.

encapsulation dot1q vlan id bridge-domain

Creates a VLAN-VXLAN mapping on the service module.

Syntax Description

The range is from 1 - 4094.

bd-name

Name of the bridge-domain.

Defaults

None.

Command Modes

Port-profile configuration (config-port-prof-srv)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use this command to create a VLAN-VXLAN mapping on an attached service module.

Examples

This example shows how to create mappings:

n1000v# config t

n1000v(config)# port-profile type vethernet Uplink-All-VXGW

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# switchport access bridge-domain bd-701

n1000v(config-port-prof)# service instance 10

n1000v(config-port-prof-srv)# encapsulation dot1q 600 bridge-domain bd-600

n1000v(config-port-prof-srv)# encapsulation dot1q 601 bridge-domain bd-601

n1000v(config-port-prof-srv)# encapsulation dot1q 602 bridge-domain bd-602

n1000v(config-port-prof-srv)# no shutdown

n1000v(config-port-prof-srv)# state enabled

n1000v(config-port-prof)# end

This example shows how to remove mappings:

n1000v# config t

n1000v(config)# port-profile type vethernet Uplink-All-VXGW

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# switchport access bridge-domain bd-701

n1000v(config-port-prof)# service instance 10

n1000v(config-port-prof-srv)# no encapsulation dot1q 600 bridge-domain bd-600

n1000v(config-port-prof-srv)# no encapsulation dot1q 601 bridge-domain bd-601

n1000v(config-port-prof-srv)# no encapsulation dot1q 602 bridge-domain bd-602

n1000v(config-port-prof-srv)# no shutdown

n1000v(config-port-prof-srv)# state enabled

n1000v(config-port-prof)# end

Related Commands

None.

end

command.

end

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command always takes you completely out of configuration mode and places you in privileged EXEC mode.

Examples

This example shows how to end the session in Global Configuration mode and return to privileged EXEC mode:

n1000v(config)# end

n1000v#

This example shows how to end the session in Interface Configuration mode and return to privileged EXEC mode:

n1000v(config-if)# end

n1000v#

Related Commands

Command

Description

Exits the current command mode and returns you to the previous command mode.

errdisable detect cause

of this command.

| arp-inspection | dhcp-rate-limit | qos-exception}

| arp-inspection | dhcp-rate-limit | qos-exception}

Syntax Description

detection on all causes.

disable detection on link-state flapping.

detection on a loopback.

arp-inspection

detection on arp-inspection.

dhcp-rate-limit

detection on dhcp-rate-limit.

qos-exception

detection on qos-exception.

Command Default

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

command to recover an interface manually from the error-disabled state.

Examples

This example shows how to detect the cause of the error-disabled state for all applications:

n1000v(config)# errdisable detect cause all

n1000v(config)#

Related Commands

Command

Description

no shutdown

show interface status err-disabled

Displays the interfaces currently in the error-disabled state.

errdisable recovery cause

of this command.

Syntax Description

arp-inspection

Enables automatic recovery from the ARP inspection error state.

from BPDU Guard error-disabled state.

dhcp-rate-limit

Enables automatic recovery from the DHCP rate-limit error state.

from link-state flapping.

from the Spanning Tree Protocol (STP) set port state failure.

from the psecure violation disable state.

from the 802.1X violation disable state.

from the storm control error-disabled state.

from the UDLD error-disabled state.

from an inconsistent virtual port channel (vPC) peer-link error-disabled state.

Command Default

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to automatically recover from the error-disabled state for link flapping after you have enabled the recovery timer:

n1000v(config)# errdisable recovery cause link-flap

n1000v(config)#

Related Commands

Command

Description

show interface status err-disabled

Displays the interface error-disabled state.

errdisable recovery interval

command.

Syntax Description

Command Default

300 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

command to configure the recovery timer.

Examples

This example shows how to configure the recovery timer:

n1000v(config)# errdisable recovery interval 32

n1000v(config)#

Related Commands

Command

Description

show interface status err-disabled

state.

erspan-id

command.

Syntax Description

Flow ID to be assigned to the ERSPAN session. The range is 1–1023.

Defaults

None

Command Modes

CLI ERSPAN source configuration (config-erspan-src)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The session ERSPAN ID is added to the ERSPAN header of the encapsulated frame and can be used at the termination box to differentiate between various ERSPAN streams of traffic.

Examples

This example shows how to add ERSPAN ID 51 to the session configuration and save it in the running configuration:

n1000v# config t

n1000v(config)# monitor session type erspan-source

n1000v(config-erspan-src)# erspan_id 51

n1000v(config-erspan-src)#

Related Commands

Command

Description

monitor session type erspan-source

Creates a session with the given session number and puts you in the CLI ERSPAN source configuration mode.

source

For the specified session, configures the source and the direction of traffic to monitor, and saves this information in the running configuration.

filter vlan

For the specified ERSPAN session, configures the VLANs, VLAN lists, or VLAN ranges to be monitored.

ip ttl

Specifies the IP time-to-live value for the packets in the ERSPAN traffic.

ip prec

Specifies the IP precedence value for the packets in the ERSPAN traffic.

mtu

Specifies a maximum transmission unit (MTU) size for the ERSPAN traffic.

Displays the ERSPAN session configuration as it exists in the running configuration.

ethanalyzer local read

command.

Syntax Description

Specifies the file name.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4.0)

This command was introduced.

Examples

This example shows how to capture and display packets from a file:

1000v# ethanalyzer local read bootflash:packet.log

2010-06-08 16:06:20.791442 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793056 00:02:3d:40:71:41 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793130 00:02:3d:40:71:03 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793243 00:50:56:b5:00:3b -> 00:02:3d:40:71:41 LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.793292 00:50:56:b5:00:3b -> 00:02:3d:40:71:03 LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:20.811147 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.279679 00:15:c6:49:2f:32 -> 01:00:0c:cc:cc:cd STP Conf. Root = 32818/00:0b:45:b6:e2:00 Cost = 6

Port = 0x8093

2010-06-08 16:06:21.781290 00:50:56:b5:00:3b -> ff:ff:ff:ff:ff:ff LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.782961 00:02:3d:40:71:41 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

2010-06-08 16:06:21.782965 00:02:3d:40:71:03 -> 00:50:56:b5:00:3b LLC U, func=UI; SNAP, OUI 0x00000C (Cisco), PID 0x0132

Related Commands

Command

Description

Captures packet on a given interface.

ethanalyzer local sniff-interface

command.

Syntax Description

The packets are captured on the control interface.

inband

The packets are captured on the packet interface.

management

The packets are captured on the management interface.

ha-primary

The packets are captures on the primary HA interface.

ha-secondary

The packets are captures on the secondary HA interface.

capture-filter

Filters the types of packets to capture.

detailed-dissection

Displays detailed protocol information

display-filter

Filters the types of captured packets to display.

dump-pkt

Dump the packet in HEX/ASCII

limit-captured-frames

Limits the number of frames to capture.

limit-frame-size

Limits the length of the frame to capture.

write filename

Saves the captured data to a file.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4.0)

This command was introduced.

Examples

This example shows how to capture and decode packets:

n1000v# ethanalyzer local sniff-interface control write bootflash:packet.log

Capturing on eth0

10

n1000v#

Related Commands

Command

Description

Captures and diaplayes packet information from a file.

evb mac

To add the DMAC information for the ECP packets originating from the VDP station to blade-switches such as the UCS-FI and other similar network devices, use the evb mac command. Use the no form of this command to remove the DMAC information.

Syntax Description [no] evb mac

Mac address.

Defaults

None.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows the evb segmentation information:

switch (config)# show evb

Edge Virtual Bridging

Role : VDP Station

VDP Mac Address : 0180.0000.0000

VDP Resource Wait Delay : 22(66 secs)

VDP Reinit Keep Alive : 21(20 secs

Related Commands

Command

Description

show evb

Displays the configured MAC addresses.

evb reinit-keep-alive

Configures the interval at which VDP refreshes the VSI state with in the bridge by sending a VDP associate refresh.

evb resource-wait-delay

To configure the resource wait delay used by VDP to calculate the time it waits before concluding that a request has timed out, use the evb-resource-wait-delay command. Use the no form of this command to revert to the default value.

Syntax Description

Defaults

The default value is 20.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Related Commands

Command

Description

Configures the exponential value of the interval for which ECP waits before trying to retransmit the packet.

ecp max-retries

Configures the number of times ECP will retry sending an upper layer protocol message.

evb reinit-keep-alive

Configures the interval at which VDP refreshes the VSI state with in the bridge by sending a VDP associate refresh.

evb reinit-keep-alive

Syntax Description

Defaults

The default value is 20.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Related Commands

Command

Description

Configures the exponential value of the interval for which ECP waits before trying to retransmit the packet.

evb resource-wait-delay

Configures the resource wait delay used by VDP to calculate the time it waits before concluding that a request has timed out.

ecp max-retries

Configures the number of times ECP will retry sending an upper layer protocol message.

exec-timeout

form of this command.

]

Syntax Description

Timeout time, in minutes. The range of valid values is 0 to 525600.

If a session remains inactive longer than this specified time period, then it is automatically closed.

Defaults

No timeout is configured.

Command Modes

Console configuration (config-console)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

to 0, exec timeout is disabled.

Examples

This example shows how to configure an inactive session timeout for the console port:

n1000v# configure terminal

n1000v(config)# line console

n1000v(config-com1)# exec-timeout 20

This example shows how to configure an inactive session timeout for the virtual terminal:

n1000v# configure terminal

n1000v(config)# line vty

n1000v(config-line)# exec-timeout 20

This example shows how to remove an exec timeout on the console port:

n1000v# configure terminal

DocTeamVSM(config)# line console

n1000v(config-console)# no exec-timeout

n1000v(config-console)#

Related Commands

Command

Description

Displays the terminal configuration, including the timeout value.

Displays the currently active user sessions.

exit

command.

exit

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to exit global configuration mode. The CLI returns you to the EXEC mode.

n1000v(config)# exit

n1000v#

This example shows how to exit interface configuration mode. The CLI returns you to the global configuration mode.

n1000v(config-if)# exit

n1000v(config)#

This example shows how to exit the CLI.

n1000v# exit

Related Commands

Command

Description

Returns to the EXEC command mode.

exporter

form of this command.

Syntax Description

Name of the flow exporter to be added for the flow monitor.

Defaults

None

Command Modes

CLI flow monitor configuration (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to add the flow exporter called Exportv9 and save it in the running configuration:

n1000v# config t

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# exporter Exportv9

n1000v(config-flow-monitor)#

This example shows how to remove the flow exporter called Exportv9:

n1000v# config t

n1000v(config)# flow monitor MonitorTest

n1000v(config-flow-monitor)# no exporter Exportv9

n1000v(config-flow-monitor)#

Related Commands

Command

Description

Creates a flow monitor, by name, saves it in the running configuration, and then puts you in the CLI flow monitor configuration mode.

description

Adds a descriptive string for the specified flow monitor and saves it in the running configuration.

exporter

Adds an existing flow exporter for the specified monitor and saves it in the running configuration.

record

Adds an existing flow record for the specified monitor and saves it in the running configuration.

timeout

Specifies, for the specified monitor, an aging timer and its value for aging entries from the cache, and saves them in the running configuration.

cache

Specifies the cache size for the specified monitor and saves it in the running configuration.

F Commands

This chapter describes the Cisco Nexus 1000V commands that begin with F.

fabric forwarding anycast gateway-mac

command.

Syntax Description

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

You must have enbaled the fabric forwarding feature on the Cisco Nexus 1000V.

Related Commands

Command

Description

show fabric forwarding

Displays the fabric forwarding details for the anycast gateway-MAC on the Cisco Nexus 1000V.

Displays the features available, such as fabric forwarding, and whether they are enabled.

fabric forwarding mode

command.

Syntax Description

anycast-gateway

The anycast-gateway mode

proxy-gateway

The proxy-gateway mode

Defaults

The default mode is anycast-gateway.

Command Modes

bridge-domain configuration (bd-config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Related Commands

Command

Description

show fabric forwarding

Displays the fabric forwarding details on the Cisco Nexus 1000V.

Displays the features available, such as fabric forwarding, and whether they are enabled.

feature bgp

command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable BGP feature on n1000v:

n1000v(config)# feature bgp

Related Commands

Command

Description

Displays the features available, such as CTS, and whether they are enabled.

feature cts

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to enable the Cisco TrustSec feature:

n1000v# configure terminal

n1000v(config)# feature cts

This example shows how to disable the Cisco TrustSec feature:

n1000v# configure terminal

n1000v(config)# no feature cts

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the features available, such as CTS, and whether they are enabled.

feature dhcp

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Starting with Release 4.2(1)SV2(1.1), a tier-based Licensing approach is adopted for the Cisco Nexus 1000V. The Cisco Nexus 1000V is shipped in two editions: Essential and Advanced. When the switch edition is configured as the Advanced edition, DHCP Snooping, Dynamic ARP Inspection (DAI), and IP Source Guard (IPSG) are available as advanced features that require licenses.

See the Cisco Nexus 1000V License Configuration Guide for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to enable DHCP globally:

n1000v# configure terminal

n1000v(config)# feature dhcp

n1000v(config)#

This example shows how to disable DHCP globally:

n1000v# configure terminal

n1000v(config)# no feature dhcp

n1000v(config)#

Related Commands

Command

Description

Displays the features available, such as DHCP, and whether they are enabled.

Configures an interface as a trusted source of DHCP messages.

Enables DHCP snooping on the specified VLANs.

Displays general information about DHCP snooping.

feature evb

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable the evb feature:

n1000v# configure terminal

n1000v(config)# feature evb

This example shows how to disable the evb feature:

n1000v# configure terminal

n1000v(config)# no feature evb

Related Commands

Command

Description

Displays the features available, such as EVB, and whether they are enabled.

feature fabric forwarding

command. Use the no form of this command to disable the fabric forwarding feature.

fabric forwarding

fabric forwarding

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable the fabric forwarding feature:

n1000v# configure terminal

n1000v(config)# feature fabric forwarding

This example shows how to disable the fabric forwarding feature:

n1000v# configure terminal

n1000v(config)# no feature fabric forwarding

Related Commands

Command

Description

Displays the features available, such as fabric forwarding, and whether they are enabled.

feature http-server

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

- VUM will not install VEMs if the HTTP server is disabled.

- The HTTP server must be enabled in order to get the Cisco Nexus 1000V XML plugin from the VSM.

Examples

This example shows how to enable the HTTP server:

n1000v# config t

n1000v(config)# feature http-server

This example shows how to disable the HTTP server:

n1000v# config t

n1000v(config)# no feature http-server

Related Commands

Command

Description

show http-server

Displays the HTTP server configuration.

Displays the features available, such as LACP, and whether they are enabled.

feature lacp

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

.

Examples

This example shows how to turn on LACP for port channels:

n1000v# config t

n1000v(config)# feature lacp

This example shows how to turn off LACP for port channels:

n1000v(config)# no feature lacp

Related Commands

Command

Description

show feature

Displays the features available and whether they are enabled.

Displays a summary for the port channel interfaces.

Configures an interface.

Configures a channel group on an interface.

Configures a port profile.

Configures a channel group on a port profile.

Offloads LACP management from the VSM to the VEMs.

feature http-server

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

- VUM will not install VEMs if the HTTP server is disabled.

- The HTTP server must be enabled in order to get the Cisco Nexus 1000V XML plugin from the VSM.

Examples

This example shows how to enable the HTTP server:

n1000v# config t

n1000v(config)# feature http-server

This example shows how to disable the HTTP server:

n1000v# config t

n1000v(config)# no feature http-server

Related Commands

Command

Description

show http-server

Displays the HTTP server configuration.

Displays the features available, such as LACP, and whether they are enabled.

feature netflow

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

- Be aware of resource requirements since NetFlow consumes additional memory and CPU resources.

- Memory and CPU resources are provided by the VEM hosting the flow monitor interface. Resources are limited by the number of CPU cores present on the VEM.

Examples

This example shows how to enable NetFlow:

n1000v# config t

n1000v(config)# feature netflow

This example shows how to disable NetFlow:

n1000v# config t

n1000v(config)# no feature netflow

Related Commands

Command

Description

show ssh server

Displays the SSH server configuration.

flow record

Creates a NetFlow flow record.

flow exporter

Creates a NetFlow flow exporter.

flow moniter

Creates a NetFlow flow monitor.

Displays information about NetFlow flow records.

Displays information about NetFlow flow exporters.

Displays information about NetFlow flow monitors.

feature network-segmentation-manager

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to enable the network segmentation manager feature:

n1000v# configure terminal

n1000v(config)# feature network-segmentation-manager

n1000v(config)#

This example shows how to disable the network segmentation manager feature:

n1000v# configure terminal

n1000v(config)# no feature network-segmentation-manager

n1000v(config)#

Related Commands

Command

Description

Displays the Cisco Nexus 1000V configured with NSM.

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

feature port-profile-roles

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

When the port profile roles feature is disabled, all users on vCenter lose access to the port groups.

Examples

This example shows how to enable the port profile roles feature to restrict visibility to specific port groups:

n1000v(config)# feature port-profile-roles

n1000v(config)#

This example shows how to disable the port profile roles feature:

n1000v(config)# no feature port-profile-roles

n1000v(config)#

Related Commands

Command

Description

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

show feature

Displays features available, such as LACP or Port Profile Roles and whether they are enabled.

port-profile-role

Creates a port profile role.

user

Assigns a user to a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

feature private-vlan

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

- Be aware of resource requirements since NetFlow consumes additional memory and CPU resources.

- Memory and CPU resources are provided by the VEM hosting the flow monitor interface. Resources are limited by the number of CPU cores present on the VEM.

Examples

This example shows how to enable the private VLAN feature:

n1000v# config t

n1000v(config)# feature private-vlan

This example shows how to disable the private VLAN feature:

n1000v# config t

n1000v(config)# no feature private-vlan

Related Commands

Command

Description

show vlan private-vlan

Displays the private VLAN configuration.

private-vlan

Configures a VLAN as a private VLAN.

feature segmentation

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to enable the VXLAN feature:

n1000v# configure terminal

n1000V(config)# feature segmentation

n1000v(config)#

Related Commands

Command

Description

Displays the features available and whether they are enabled.

feature ssh

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Before enabling SSH, you must configure IP on a Layer 3 interface, out-of-band on the mgmt 0 interface, or inband on an Ethernet interface.

Examples

This example shows how to enable the SSH server:

n1000v# config t

n1000v(config)# feature ssh

This example shows how to disable the SSH server:

n1000v# config t

n1000v(config)# no feature ssh

Related Commands

Command

Description

show ssh server

Displays the SSH server configuration.

ssh key

Generates an SSH server key.

ssh

Creates and starts an SSH server session.

Displays the features available, such as the SSH server, and whether they are enabled.

feature tacacs+

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to enable TACACS+:

n1000v# config t

n1000v(config)# feature tacacs+

This example shows how to disable TACACS+:

n1000v# config t

n1000v(config)# no feature tacacs+

Related Commands

Command

Description

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

tacacs-server host

Designates the key shared between the Cisco Nexus 1000V and this specific TACACS+ server host.

show tacacs-server

Displays the TACACS+ server configuration.

Displays the features available, such as TACACS+, and whether they are enabled.

feature telnet

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Before enabling Telnet, you must configure IP on a Layer 3 interface, out-of-band on the mgmt 0 interface, or inband on an Ethernet interface.

Examples

This example shows how to enable the Telnet server:

n1000v# config t

n1000v(config)# feature telnet

This example shows how to disable the Telnet server:

n1000v# config t

n1000v(config)# no feature telnet

Related Commands

Command

Description

show telnet server

Displays the Telnet server configuration.

telnet

Creates and configures a telnet session.

Displays the features available, such as the Telnet server, and whether they are enabled.

filter vlan

form of this command.

}

}

Syntax Description

Number of the VLAN associated with this filter.

Range of VLANs associated with this filter.

Defaults

None

Command Modes

CLI monitor configuration (config-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the filter for VLAN IDs, 3, 4, 5, and 7:

n1000v# config t

n1000v(config)# monitor session 3

n1000v(config-monitor)# filter vlan 3-5, 7

n1000v(config-monitor)#

This example shows how to remove the filter for VLAN ID 7:

n1000v# config t

n1000v(config)# monitor session 3

n1000v(config-monitor)# no filter vlan 7

n1000v(config-monitor)#

Related Commands

Command

Description

monitor session

Creates a session with the given session number and places you in the CLI monitor configuration mode to further configure the session.

description

For the specified SPAN session, adds a description.

For the specified session, configures the sources and the direction of traffic to monitor.

destination interface

Configures the ports, for the specified session, to act as destinations for copied source packets.

no shut

Enables the SPAN session.

interface ethernet

Places you in CLI interface configuration mode for the specified interface.

switchport trunk allowed vlan

For the specified interface, configures the range of VLANs that are allowed on the interface.

show interface ethernet

Displays the interface trunking configuration for the selected slot and port or range of ports.

feature vtracker

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

vTracker can be configured globally, not per interface.

Examples

This example shows how to enable vTracker:

n1000v# config t

n1000v(config)# feature vtracker

This example shows how to disable vTracker:

n1000v(config)# no feature vTracker

Related Commands

Command

Description

show vtracker upstream view

Displays all the available virtual Ethernet interfaces for which traffic can flow through the upstream physical switch.

show vtracker vm-view vnic

Displays all the virtual network interface cards (vNICs) that run on the VMs with the adapter and pinning details.

Displays all the Virtual Machines (VMs) that run on each server module.

show vtracker module-view pnic

Displays the physical network interface cards (pNICs) that are connected to each Virtual Ethernet Module (VEM) server module in the network.

show vtracker vlan-view

Displays all the VMs that are connected to a specific VLAN or a range of VLANs.

show vtracker vmotion-view

Displays all the ongoing (if any) as well as previous VM migration events.

find

command.

Syntax Description

First part or all of a filename. The filename prefix is case sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

commands to navigate to the starting directory.

Examples

This example shows how to display filenames beginning with ospf:

n1000v# find ospf

/usr/bin/find: ./lost+found: Permission denied

./ospf-gr.cfg

./ospfgrconfig

./ospf-gr.conf

Related Commands

Command

Description

Changes the current working directory.

Displays the name of the current working directory.

flow exporter

form of this command.

Syntax Description

Name of the flow exporter that is created or modified.

Defaults

Flow exporters are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

The following example shows how to create and configure FLOW-EXPORTER-1:

n1000v(config)# flow exporter FLOW-EXPORTER-1

n1000v(config-flow-exporter)# description located in Pahrump, NV

n1000v(config-flow-exporter)# destination A.B.C.D

n1000v(config-flow-monitor)# dscp 32

n1000v(config-flow-monitor)# source mgmt0

n1000v(config-flow-monitor)# transport udp 59

n1000v(config-flow-monitor)# version 9

The following example shows how to remove FLOW-EXPORTER-1:

n1000v(config)# no flow exporter FLOW-EXPORTER-1

n1000v(config)#

Related Commands

Command

Description

Clears the flow monitor.

Displays flow monitor status and statistics.

Adds a description to a flow record, flow monitor, or flow exporter.

Adds a destination IP address to a NetFlow flow exporter.

Adds a differentiated services codepoint (DSCP) to a flow exporter.

Adds the management interface to a flow exporter designating it as the source for NetFlow flow records.

Adds a destination UDP port used to reach the NetFlow collector to a flow exporter.

Designates NetFlow export version 9 in the NetFlow exporter.

flow monitor

form of this command.

Syntax Description

Name of the flow monitor that is created or modified.

Defaults

Flow monitors are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Flow monitors are the Flexible NetFlow component that is applied to interfaces to perform network traffic monitoring. Flow monitors consist of a record that you add to the flow monitor after you create the flow monitor, and a cache that is automatically created at the time the flow monitor is applied to the first interface. Flow data is collected from the network traffic during the monitoring process based on the key and non-key fields in the record which is configured for the flow monitor and stored in the flow monitor cache.

Once you enter the flow monitor configuration mode, the prompt changes to the following:

n1000v(config-flow-monitor)#

Within the flow monitor configuration mode, the following keywords and arguments are available to configure the flow monitor:

- cache— Specifies the cache size, from 256 to 16384 entries.

- description description —Provides a description for this flow monitor; maximum of 63 characters.

- exit —Exits from the current configuration mode.

- exporter name —Specifies the name of an exporter to export records.

- no —Negates a command or sets its defaults.

- record { record-name | netflow ipv4 collection-type | netflow-original } —Specifies a flow record to use as follows:

Specifies the traditional IPv4 NetFlow collection schemes as follows:

—Specifies the traditional IPv4 input NetFlow.

—Specifies the traditional IPv4 output NetFlow

—Specifies the protocol and ports aggregation scheme.

Specifies the traditional IPv4 input NetFlow with origin autonomous systems.

- timeout { active | inactive }—Specifies a flow timeout period as follows:

—Specifies an active or long timeout in the range of 60 to 4092 seconds.

—Specifies an inactive or normal timeout in the range of 15 to 4092 seconds.

keywords are the same and are equivalent to the following commands:

- match ipv4 source address

- match ipv4 destination address

- match ip tos

- match ip protocol

- match transport source-port

- match transport destination-port

- match interface input

- collect counter bytes

- collect counter packet

- collect timestamp sys-uptime first

- collect timestamp sys-uptime last

- collect interface output

- collect transport tcp flags

keywords except for the following:

- match interface output (instead of match interface input)

- collect interface input (instead of collect interface output)

Examples

The following examples creates and configures a flow monitor named FLOW-MONITOR-1:

n1000v(config)# flow monitor FLOW-MONITOR-1

n1000v(config-flow-monitor)# description monitor location las vegas, NV

n1000v(config-flow-monitor)# exporter exporter-name1

n1000v(config-flow-monitor)# record test-record

n1000v(config-flow-monitor)# netflow ipv4 original-input

Related Commands

Command

Description

Clears the flow monitor.

Displays flow monitor status and statistics.

flow record

form of this command.

Syntax Description

Name of the flow record that is created or modified.

Defaults

Flow records are not present in the configuration until you create them.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Flexible NetFlow uses key and non-key fields just as original NetFlow does to create and populate flows in a cache. In Flexible NetFlow a combination of key and non-key fields is called a record. Original NetFlow and Flexible NetFlow both use the values in key fields in IP datagrams, such as the IP source or destination address and the source or destination transport protocol port, as the criteria for determining when a new flow must be created in the cache while network traffic is being monitored. A flow is defined as a stream of packets between a given source and a given destination. New flows are created whenever NetFlow analyzes a packet that has a unique value in one of the key fields.

Once you enter the flow record configuration mode, the prompt changes to the following:

n1000v(config-flow-record)#

Within the flow record configuration mode, the following keywords and arguments are available to configure the flow record:

- collect —Specifies a non-key field. See the collect command for additional information.

- description description —Provides a description for this flow record; maximum of 63 characters.

- exit —Exits from the current configuration mode.

- match — Specifies a key field. See the match command for additional information.

- no —Negates a command or sets its defaults.

Cisco NX-OS enables the following match fields by default when you create a flow record:

- match interface input

- match interface output

- match flow direction

Examples

The following example creates a flow record named FLOW-RECORD-1, and enters Flexible NetFlow flow record configuration mode:

n1000v(config)# flow record FLOW-RECORD-1

n1000v(config-flow-record)#

Related Commands

Command

Description

Clears the flow monitor.

Creates a flow monitor.

Displays flow monitor status and statistics.

from (table map)

command.

Syntax Description

Specifies the source value in the range from 0 to 63.

Specifies the destination value in the range from 0 to 63.

Defaults

None

Command Modes

Table map configuration (config-tmap)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create a mapping from three source values to the corresponding destination values:

n1000v(config)# table-map cir-markdown-map

n1000v(config-tmap)# from 0 to 7

n1000v(config-tmap)# from 1 to 6

n1000v(config-tmap)# from 2 to 5

Related Commands

Command

Description

Displays QoS table maps.

Creates or modifies a QoS table map.

G Commands

This chapter describes the Cisco Nexus 1000V commands that begin with G.

group (Port Profile Role)

command. To remove the group, use the no form of the command.

Syntax Description

Specify that a group is to be added to the port-profile role, and the name of the group (maximum of 32 characters).

Defaults

None

Command Modes

Port profile role configuration (config-port-profile-role)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to assign the credit group to the supportRole:

n1000v# config t

n1000v(config)# port-profile-role supportRole

n1000v(config-port-profile-role)# group credit

This example shows how to remove the credit group assignment from the supportRole:

n1000v# config t

n1000v(config)# port-profile-role supportRole

n1000v(config-role)# no group credit

Related Commands

Command

Description

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

port-profile-role

Creates a port profile role.

user

Assigns a user to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

group (VXLAN)

form of this command.

Syntax Description

The multicast group ip address.

Defaults

None

Command Modes

Bridge Domain configuration (config-bd)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to associate a multicast group to a VXLAN:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# group 239.1.1.1

n1000v(config-bd)#

Related Commands

Command

Description

Displays bridge domain information.

gunzip

command.

Syntax Description

Name of a file. The filename is case sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The compressed filename must have the .gz extension.

You do not have to enter the .gz extension as part of the filename.

The Cisco NX-OS software uses Lempel-Ziv 1977 (LZ77) coding for compression.

Examples

This example shows how to uncompress a compressed file:

n1000v# gunzip run_cnfg.cfg

Related Commands

Command

Description

Displays the directory contents.

Compresses a file.

gzip

command.

Syntax Description

Name of a file. The filename is case sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

After you use this command, the file is replaced with the compressed filename that has the .gz extension.

The Cisco NX-OS software uses Lempel-Ziv 1977 (LZ77) coding for compression.

Examples

This example shows how to compress a file:

n1000v# gzip run_cnfg.cfg

Related Commands

Command

Description

Displays the directory contents.

Uncompresses a compressed file.

I Commands

This chapter describes the Cisco Nexus 1000V commands that begin with I.

id

command.

Syntax Description

The tenant ID of the network segmentation policy.

Defaults

None

Command Modes

Network Segment Policy configuration (config-network-segment-policy)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

The tenant ID correlates to the Organization UUID in the vCloud Director and cannot be changed once it is configured.

Examples

This example shows how associate a network segmentation policy with the tenant ID:

n1000v# configure terminal

id f5dcf127-cdb0-4bdd-8df5-9515d6dc8170

Related Commands

Command

Description

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

inherit port-profile

form of this command.

Syntax Description

Name for the port profile whose policies are inherited. The name can be up to 80 characters and must be unique for each port profile on the Cisco Nexus 1000V.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Any inherited setting, except the port profile type, can be changed using the CLI.

form of the command, the port profile settings are returned to the defaults, except for the port profile type and any settings that were explicitly configured independent of those inherited.

Examples

as the port profile whose policies will be inherited:

n1000v# config t

n1000v(config)# port-profile type vethernet AllAccess2

n1000v(config-port-prof)# inherit port-profile AllAccess1

This example shows how to remove the inherited policies:

n1000v# config t

n1000v(config)# port-profile type vethernet AllAccess2

n1000v(config-port-prof)# no port-profile inherit

Related Commands

Command

Description

Displays the port profile inherited by the current port profile.

port-profile

Places you into port profile configuration mode and defines the port profile.

install certificate

form of this command.

}

Syntax Description

Specifies the path.

Specifies the default certificate.

Defaults

No certificate is installed.

Command Modes

SVS connection configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Only one SVS connection can be created.

Examples

This example shows how to install a certificate:

n1000v# configure terminal

n1000v(config)# svs connect s1

n1000v(config-svs-conn)# install certificate default

n1000v(config-svs-conn)#

This example shows how to remove a certificate:

n1000v# configure terminal

n1000v(config)# svs connect s1

n1000v(config-svs-conn)# no install certificate default

n1000v(config-svs-conn)#

Related Commands

Command

Description

Displays SVS information.

install http certificate

form of this command.

}

Syntax Description

Specifies the path.

Specifies the default certificate.

Defaults

No HTTP certificate is installed.

Command Modes

SVS connection configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Only one SVS connection can be created.

Examples

This example shows how to install a HTTP certificate:

n1000v# configure terminal

n1000v(config)# svs connect s1

n1000v(config-svs-conn)# install http certificate bootflash:<cert_path>

n1000v(config-svs-conn)#

This example shows how to remove a HTTP certificate:

n1000v# configure terminal

n1000v(config)# svs connect s1

n1000v(config-svs-conn)# no install http certificate bootflash:<cert_path>

n1000v(config-svs-conn)#

Related Commands

Command

Description

Displays SVS information.

install license bootflash:

command.

Syntax Description

(Optional) Specify a name for the license file. If you do not specify a name, then the license is installed using the default name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

- You must first uninstall an evaluation license if one is present on your VSM. For more information, see the Cisco Nexus 1000V License Configuration Guide, Release 4.2(1)SV2(1.1) .

- You must be logged in to the active VSM console port.

- This command installs the license file using the name, license_file.lic. You can specify a different name.

- If you are installing multiple licenses for the same VSM, also called license stacking, make sure that each license key file name is unique.

- Repeat this procedure for each additional license file you are installing, or stacking, on the VSM.

Examples

This example shows how to install a license to bootflash on a VSM and then display the installed file:

n1000v# install license bootflash:license_file.lic

Installing license ..done

n1000v# show license file license.lic

SERVER this_host ANY

VENDOR cisco

INCREMENT NEXUS1000V_LAN_SERVICES_PKG cisco 1.0 permanent 1 \

HOSTID=VDH=1575337335122974806 \

NOTICE="<LicFileID>license.lic</LicFileID><LicLineID>0</LicLineID> \

<PAK>PAK12345678</PAK>" SIGN=3AF5C2D26E1A

n1000v#

Related Commands

Command

Description

Verifies the license installation by displaying the license configured for the VSM.

Uninstalls a license, that is, removes it from the VSM and shuts down the Ethernet interfaces to the VEMs covered by that license.

Designates the level of severity at which license messages should be logged.

Installs a license file(s) on a VSM

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

install service-module (kickstart and system image)

To upgrade a VXLAN gateway service module (standalone) or a VXLAN gateway high availability (HA) cluster by using the kickstart and the system images, use the install service-module command.

install service-module kickstart bootflash: kickstart_image system bootflash: system_image {module-num module_number | cluster-id cluster_id}

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

Name of the kickstart image.

Name of the system image.

The module number. The module number range is from 3 to 130.

cluster_id

The cluster ID. The cluster ID range is from 1 to 8.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1a)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to upgrade a VXLAN gateway cluster:

n1000v# install service-module kickstart bootflash:vxgw-kickstart-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg system bootflash:vxgw-1000v-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg cluster-id 1

Verifying image bootflash:/vxgw-kickstart-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg for boot variable "kickstart".

[####################] 100% -- SUCCESS

Verifying image bootflash:/vxgw-1000v-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg for boot variable "system".

[####################] 100% -- SUCCESS

Output commands:

----------------

Extracting SRG from the Service Module image bootflash:/vxgw-1000v-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg.

[####################] 100% -- SUCCESS

Service Module compatibility check is done:

VSM Version Service Module Version Compatible

---------------- ---------------------- ----------

4.2(1)SV2(2.1a) 4.2(1u)SV2(2.1au) yes

Do you want to continue with the Service Module installation (y/n)? [n] y

Install is in progress, please wait.

Copying bootflash:/vxgw-kickstart-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg to Service Module 10.105.234.177.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw-1000v-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg to Service Module 10.105.234.177.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw-kickstart-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg to Service Module 10.105.234.176.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw-1000v-upgrade.4.2.1.SV2.1a.2.0.315.bin.upg to Service Module 10.105.234.176.

[####################] 100% -- SUCCESS

Set bootvariables on the standby Service Module.

Sent reboot message to standby Service Module.

Related Commands

Command

Description

Upgrades a VXLAN gateway service module (standalone) or a VXLAN gateway high availability (HA) cluster by using the iso image.

show module service-module

Displays Cluster-id, HA-role, HA mode, and HA-status for service modules attached to the VSM.

install service-module (iso image)

To upgrade a VXLAN gateway service module (standalone) or a VXLAN gateway high availability (HA) cluster by using the iso image, use the install service-module command.

install service-module iso bootflash: iso_image {module-num module_number | cluster-id cluster_id}

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

Name of the iso image.

The module number. The module number range is from 3 to 130.

cluster_id

The cluster ID. The cluster ID range is from 1 to 8.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1a)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to upgrade a VXLAN gateway cluster:

n1000v# install service-module iso bootflash:vxgw.4.2.1.SV2.2.2.iso cluster-id 1

Verifying image bootflash:/vxgw-kickstart.4.2.1.SV2.2.2.gbin for boot variable "kickstart".

[####################] 100% -- SUCCESS

Verifying image bootflash:/vxgw.4.2.1.SV2.2.2.gbin for boot variable "system".

[####################] 100% -- SUCCESS

Extracting SRG from the Service Module image bootflash:/vxgw.4.2.1.SV2.2.2.gbin.

[####################] 100% -- SUCCESS

Service Module compatibility check is done:

VSM Version Service Module Version Compatible

---------------- ---------------------- ----------

4.2(1)SV2(2.2) 4.2(1)SV2(2.2) yes

Do you want to continue with the Service Module installation (y/n)? [n] y

Install is in progress, please wait.

Copying bootflash:/vxgw-kickstart.4.2.1.SV2.2.2.gbin to Service Module 10.105.232.77.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw.4.2.1.SV2.2.2.gbin to Service Module 10.105.232.77.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw-kickstart.4.2.1.SV2.2.2.gbin to Service Module 10.105.232.202.

[####################] 100% -- SUCCESS

Copying bootflash:/vxgw.4.2.1.SV2.2.2.gbin to Service Module 10.105.232.202.

[####################] 100% -- SUCCESS

Set bootvariables on the standby Service Module.

Sent reboot message to standby Service Module.

2014 Jan 15 07:02:34 CY %VEM_MGR-2-VEM_MGR_REMOVE_NO_HB: Removing VEM 9 (heartbeats lost)

2014 Jan 15 07:02:35 CY %VEM_MGR-2-MOD_OFFLINE: Module 9 is offline

Related Commands

Command

Description

Upgrades a VXLAN gateway service module (standalone) or a VXLAN gateway high availability (HA) cluster by using the kickstart and the system image.

show module service-module

Displays Cluster-id, HA-role, HA mode, and HA-status for service modules attached to the VSM.

interface control

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to enter the interface configuration mode to configure the control interface:

n1000v(config)# interface control0

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the control interface.

interface ethernet

command.

Syntax Description

Specifies the slot number and port number for the Ethernet interface.

Defaults

None

Command Modes

Global configuration (config)

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to access the interface command mode for configuring the Ethernet interface on slot 2, port 1:

n1000v# config t

n1000v(config)# interface ethernet 2/1

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the Ethernet interface.

interface loopback

form of this command.

Syntax Description

Identifying interface number; valid values are from 0 to 1023.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to create a loopback interface:

n1000v(config)# interface loopback 50

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the specified loopback interface.

interface mgmt

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to enter the interface configuration mode to configure the management interface:

n1000v(config)# interface mgmt0

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the management interface.

interface port-channel

form of this command.

Syntax Description

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to create or delete port-channel groups and to enter the interface configuration mode for the port channel.

A port can belong to only one channel group.

command, follow these guidelines:

- If you are using CDP, you must configure it only on the physical interface and not on the port-channel interface.

- If you do not assign a static MAC address on the port-channel interface, a MAC address is automatically assigned. If you assign a static MAC address and then later remove it, the MAC address is automatically assigned.

- The MAC address of the port channel is the address of the first operational port added to the channel group. If this first-added port is removed from the channel, the MAC address comes from the next operational port added, if there is one.

Examples

This example shows how to create a port-channel group interface with channel-group number 50:

n1000v(config)# interface port-channel 50

n1000v(config-if)#

Related Commands

Command

Description

Displays information on traffic on the specified port-channel interface.

Displays information on the port channels.

interface vethernet

form of this command.

Syntax Description

Identifying interface number; valid values are from 1 to 1048575.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to create a virtual Ethernet interface.

Examples

This example shows how to create a virtual Ethernet interface:

n1000v(config)# interface vethernet 50

n1000v(config-if)#

Related Commands

Command

Description

Displays information about the traffic on the specified virtual Ethernet interface.

ip access-group

form of this command.

}

}

Syntax Description

List name.

Specify incoming (ingress) traffic direction.

Specify outgoing (egress) traffic direction.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to configure an IP access group named Telnet for incoming traffic to the mgmt0 interface:

n1000v# config t

n1000v(config)# interface mgmt0

n1000v(config-if)# ip access-group telnet in

n1000v(config-if)#

Related Commands

Command

Description

Displays the ACL configuration.

ip access-list

form of this command.

Syntax Description

List name.

Enables access list matching for locally generated traffic.

Defaults

No access list exists.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create an access list:

n1000v# configure terminal

n1000v(config)# ip access-list acl1

n1000v(config)#

Related Commands

Command

Description

Displays access lists.

ip address

form of this command.

]

]

Syntax Description

IP address, in format A.B.C.D.

IP network mask, in format A.B.C.D.

IP prefix and network mask length, in format A.B.C.D/LEN.

IP next-hop address, in format A.B.C.D.

IP next-hop prefix in format A.B.C.D./LEN.

Interface type.

Interface or subinterface number.

(Optional) Configures additional IP addresses on the interface.

(Optional) Specifies a supply tag.

Supply tag value. The range of valid values is 0 to 4294967295. The default is 0.

(Optional) Route preference.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create an IP address:

n1000v# configure terminal

n1000v(config)# ip address 209.165.200.225 255.255.255.224 x

n1000v(config)#

Related Commands

Command

Description

Displays interfaces for local IP addresses.

ip arp inspection limit

form of this command.

}

}

}

Syntax Description

Specifies the rate limit in packets per second.

(Optional) Specifies the burst interval.

(Optional) Burst interval in seconds.

Specifies that there is no limit.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to set the rate limit of ARP requests to 20 pps:

n1000v(config)# ip arp inspection limit rate 20

This example shows how to remove the configuration:

n1000v(config)# no arp inspection limit rate 20

Related Commands

Command

Description

Displays the trust state and the ARP packet rate for a specified interface.

ip arp inspection trust

form of this command.

ip arp inspection trust

no ip arp inspection trust

default ip arp inspection trust

Syntax Description

This command has no arguments or keywords.

Defaults

By default, all interfaces are untrusted ARP interfaces.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

You can configure only Layer 2 virtual Ethernet interfaces as trusted ARP interfaces.

Examples

This example shows how to configure a Layer 2 interface as a trusted ARP interface:

n1000v# configure terminal

n1000v(config)# interface vethernet 2

n1000v(config-if)# ip arp inspection trust

n1000v(config-if)#

Related Commands

Command

Description

Displays the trust state and the ARP packet rate for a specified interface.

ip arp inspection validate

form of this command.

ip arp inspection validate {dst-mac [ip] [src-mac] | ip [dst-mac] [src-mac] | src-mac [dst-mac] [ip]}

no ip arp inspection validate {dst-mac [ip] [src-mac] | ip [dst-mac] [src-mac] | src-mac [dst-mac] [ip]}

Syntax Description

(Optional) Enables validation of the destination MAC address in the Ethernet header against the target MAC address in the ARP body for ARP responses. The device classifies packets with different MAC addresses as invalid and drops them.

(Optional) Enables validation of the ARP body for invalid and unexpected IP addresses. Addresses include 0.0.0.0, 255.255.255.255, and all IP multicast addresses. The device checks the sender IP addresses in all ARP requests and responses and checks the target IP addresses only in ARP responses.

(Optional) Enables validation of the source MAC address in the Ethernet header against the sender MAC address in the ARP body for ARP requests and responses. The devices classifies packets with different MAC addresses as invalid and drops them.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

You must specify at least one keyword. If you specify more than one keyword, the order is irrelevant.

Examples

This example shows how to enable additional DAI validation:

n1000v# configure terminal

n1000v(config)# ip arp inspection validate src-mac dst-mac ip

n1000v(config)#

Related Commands

Command

Description

Displays the DAI configuration status.

ip arp inspection vlan

form of this command.

Syntax Description

argument allows you to specify a single VLAN ID, a range of VLAN IDs, or comma-separated IDs and ranges (see the “Examples” section). Valid VLAN IDs are from 1 to 4096.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

By default, the device does not log packets inspected by DAI.

Examples

This example shows how to enable DAI on VLANs 13, 15, and 17 through 23:

n1000v# configure terminal

n1000v(config)# ip arp inspection vlan 13,15,17-23

n1000v(config)#

Related Commands

Command

Description

Enables additional DAI validation.

Displays the DAI status for a specified list of VLANs.

ip dhcp snooping

form of this command.

ip dhcp snooping

no ip dhcp snooping

Syntax Description

This command has no arguments or keywords.

Defaults

By default, DHCP snooping is globally disabled.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

command).

command.

Examples

This example shows how to globally enable DHCP snooping:

n1000v# configure terminal

n1000v(config)# ip dhcp snooping

n1000v(config)#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Configures an interface as a trusted source of DHCP messages.

Enables DHCP snooping on the specified VLANs.

Displays general information about DHCP snooping.

ip dhcp snooping information option

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to globally relay the VSM MAC address and vEthernet port information in DHCP packets:

n1000v# configure terminal

n1000v(config)# ip dhcp snooping information option

n1000v(config)#

This example shows how to remove global relaying of the VSM MAC address and vEthernet port information in DHCP packets:

n1000v# configure terminal

n1000v(config)# no ip dhcp snooping information option

n1000v(config)#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Configures an interface as a trusted source of DHCP messages.

Enables DHCP snooping on the specified VLANs.

Displays general information about DHCP snooping.

ip dhcp snooping limit rate

form of this command.

Syntax Description

Number of DHCP packets per second. The range is from 1 to 2048.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to limit the rate of DHCP packets to 30 pps on vEthernet interface 3:

n1000v# configure terminal

n1000v(config)# interface vethernet 3

n1000v(config-if)# ip dhcp snooping limit rate 30

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Configures an interface as a trusted source of DHCP messages.

Enables DHCP snooping on the specified VLANs.

Displays general information about DHCP snooping.

ip dhcp snooping trust

form of this command.

ip dhcp snooping trust

no ip dhcp snooping trust

default ip dhcp snooping trust

Syntax Description

This command has no arguments or keywords.

Defaults

By default, no interface is a trusted source of DHCP messages.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

You can configure DHCP trust on the following types of interfaces:

- Layer 2 vEthernet interfaces

- Private VLAN interfaces

Examples

This example shows how to configure an interface as a trusted source of DHCP messages:

n1000v# configure terminal

n1000v(config)# interface vethernet 2

n1000v(config-if)# ip dhcp snooping trust

n1000v(config-if)#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Globally enables DHCP snooping on the device.

Enables MAC address verification as part of DHCP snooping.

Enables DHCP snooping on the specified VLANs.

Displays general information about DHCP snooping.

ip dhcp snooping verify mac-address

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable DHCP snooping MAC address verification:

n1000v(config)# config t

n1000v(config)# ip dhcp snooping verify mac-address

n1000v(config)#

This example shows how to disable DHCP snooping MAC address verification:

n1000v(config)# config t

n1000v(config)# no ip dhcp snooping verify mac-address

n1000v(config)#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Displays the DHCP snooping configuration.

ip dhcp snooping

Enables DHCP snooping globally.

ip dhcp snooping vlan

.

clear ip dhcp snooping binding

Clears dynamically added entries from the DHCP snooping binding database.

ip dhcp snooping trust

Configures the interface as a trusted interface for DHCP snooping.

ip dhcp snooping limit rate

Configures the DHCP limit rate.

ip dhcp snooping vlan

form of this command.

Syntax Description

argument allows you to specify a single VLAN ID, a range of VLAN IDs, or comma-separated IDs and ranges (see the “Examples” section). Valid VLAN IDs are from 1 to 4096.

Defaults

By default, DHCP snooping is not enabled on any VLAN.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to enable DHCP snooping on VLANs 100, 200, and 250 through 252:

n1000v# configure terminal

n1000v(config)# ip dhcp snooping vlan 100,200,250-252

n1000v(config)#

Related Commands

Command

Description

Enables the DHCP snooping feature on the device.

Globally enables DHCP snooping on the device.

Configures an interface as a trusted source of DHCP messages.

Displays general information about DHCP snooping.

ip directed-broadcast

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable IP directed broadcast:

n1000v# configure terminal

n1000v(config)# interface mgmt 0

n1000v(config-if)# ip directed-broadcast

n1000v(config-if)#

Related Commands

Command

Description

Displays IP interface information.

ip dscp

command.

Syntax Description

DSCP value, in seconds, for ERSPAN traffic packets. The value can range from 0–63.

Defaults

The default DSCP value is 0.

Command Modes

CLI ERSPAN source configuration (config-erspan-src)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to specify the DSCP value of 25 for packets in the ERSPAN traffic:

n1000v# config t

n1000v(config)# monitor session 3 type erspa

n1000v(config-erspan-src)# ip dscp 25

n1000v(config-erspan-src)#

Related Commands

Command

Description

Creates a session with the given session number and places you in the CLI ERSPAN source configuration mode.

description

For the specified ERSPAN session, adds a description and saves it in the running configuration.

source

Configures the sources and the direction of traffic to monitor for the specified session, and saves the information in the running configuration.

filter vlan

Configures the VLANs, VLAN lists, or VLAN ranges to be monitored for the specified session; and saves this information in the running configuration.

destination ip

Configures the IP address of the host to which the encapsulated traffic is sent and saves it in the running configuration.

ip ttl

Specifies the IP time-to-live value for the packets in the ERSPAN traffic, and saves it in the running configuration.

ip prec

Specifies the IP precedence value for the packets in the ERSPAN traffic, and saves it in the running configuration.

mtu

Specifies a maximum transmission unit (MTU) size for the ERSPAN traffic, and saves it in the running configuration.

erspan-id

Adds an ERSPAN ID to the session configuration and saves it in the running configuration.

no shut

Enables the ERSPAN session and saves it in the running configuration.

show monitor session session_id

Displays the ERSPAN session configuration as it exists in the running configuration.

ip flow monitor

form of this command.

Syntax Description

Name of a flow monitor that you previously configured.

Monitors traffic that the routers is receiving on the interface.

Monitors traffic that the routers is transmitting on the interface.

Defaults

Disabled.

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to enable traffic monitoring with Flexible NetFlow.

Examples

The following example enables a flow monitor for monitoring input traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

The following example enables a flow monitor for monitoring output traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

The following example enables the same flow monitor on the same interface for monitoring input and output traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

The following example enables two different flow monitors on the same interface for monitoring input and output traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config-if)# ip flow monitor FLOW-MONITOR-2 output

The following example enables the same flow monitor on two different interfaces for monitoring input and output traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config)# interface ethernet1/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 output

The following example enables two different flow monitors on two different interfaces for monitoring input and output traffic:

n1000v(config)# interface ethernet0/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-1 input

n1000v(config)# interface ethernet1/0

n1000v(config-if)# ip flow monitor FLOW-MONITOR-2 output

Related Commands

Command

Description

Creates a flow exporter.

Creates a flow monitor.

Creates a flow record.

ip igmp snooping (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If the global configuration of IGMP snooping is disabled, then all VLANs are treated as disabled, whether they are enabled or not.

Examples

This example shows how to enable IGMP snooping:

n1000v(config)# ip igmp snooping

n1000v(config)#

This example shows how to disable IGMP snooping:

n1000v(config)# no ip igmp snooping

n1000v(config)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If the global configuration of IGMP snooping is disabled, then all VLANs are treated as disabled, whether they are enabled or not.

Examples

This example shows how to enable IGMP snooping on a VLAN interface:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping

n1000v(config-vlan)#

This example shows how to disable IGMP snooping on a VLAN interface:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping explicit-tracking

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable tracking of IGMPv3 membership reports on a VLAN interface:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping explicit-tracking

n1000v(config-vlan)#

This example shows how to disable IGMP snooping on a VLAN interface:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping explicit-tracking

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping fast-leave

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you enable fast leave, the IGMP software assumes that no more than one host is present on each VLAN port.

Examples

This example shows how to enable support of IGMPv2 hosts:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping fast-leave

n1000v(config-vlan)#

This example shows how to disable support of IGMPv2 hosts:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping fast-leave

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping last-member-query-interval

form of this command.

]

Syntax Description

Query interval in seconds. The range is from 1 to 25. The default is 1.

Defaults

The query interval is 1.

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a query interval in which the software removes a group:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping last-member-query-interval 3

n1000v(config-vlan)#

This example shows how to reset a query interval to the default:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping last-member-query-interval

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping link-local-groups-suppression (VLAN)

command. To allow unlimited snooping, use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

You can apply link-local groups suppression to all interfaces in the VSM by entering this command in global configuration mode.

Examples

This example shows how to limit IGMP traffic sent from VLAN2:

n1000v# config t

n1000v(config)# vlan vlan2

n1000v(config-vlan)# ip igmp snooping link-local-groups-suppression

This example shows how to resume IGMP traffic sent from VLAN2:

n1000v# config t

n1000v(config)# vlan vlan2

n1000v(config-vlan)# no ip igmp snooping link-local-groups-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

Enables IGMP snooping on a VLAN.

ip igmp snooping link-local-groups-suppression (Global)

command. To allow unlimited snooping, use the no form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

You can apply link-local groups suppression to a single VLAN by entering this command in VLAN configuration mode.

Examples

This example shows how to limit IGMP traffic sent from all interfaces in the VSM:

n1000v# config t

n1000v(config)# ip igmp snooping link-local-groups-suppression

n1000v(config)#

This example shows how to resume sending unlimited IGMP traffic from all interfaces in the VSM:

n1000v# config t

n1000v(config)# no ip igmp snooping link-local-groups-suppression

n1000v(config)#

Related Commands

Command

Description

Displays IGMP snooping information.

Enables IGMP snooping on a VLAN.

ip igmp snooping mrouter interface

form of this command.

Syntax Description

Interface type. For more information, use the question mark (?) online help function.

Interface or subinterface number. For more information about the numbering syntax for your networking device, use the question mark (?) online help function.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The interface to the router must be in the selected VLAN.

Examples

This example shows how to configure a static connection to a multicast router:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping mrouter interface ethernet 2/1

n1000v(config-vlan)#

This example shows how to remove a static connection to a multicast router:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping mrouter interface ethernet 2/1

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping report-suppression (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IGMPv1 or GMPv2 report suppression for VLANs:

n1000v(config)# ip igmp snooping report-suppression

This example shows how to remove IGMPv1 or GMPv2 report suppression:

n1000v(config)# no ip igmp snooping report-suppression

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping report-suppression (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IGMPv1 or GMPv2 report suppression for VLANs:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping report-suppression

n1000v(config-vlan)#

This example shows how to remove IGMPv1 or GMPv2 report suppression:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping report-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping static-group

form of this command.

Syntax Description

Group IP address.

Specifies interface for static group.

Interface type. For more information, use the question mark (?) online help function.

Interface or subinterface number. For more information about the numbering syntax for your networking device, use the question mark (?) online help function.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You can specify the interface by the type and the number, such as ethernet slot/port.

Examples

This example shows how to configure a static member of a multicast group:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1

n1000v(config-vlan)#

This example shows how to remove a static member of a multicast group:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping v3-report-suppression (Global)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global Configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IGMPv3 report suppression and proxy reporting:

n1000v(config)# ip igmp snooping v3-report-suppression

This example shows how to remove IGMPv3 report suppression and proxy reporting:

n1000v(config)# no ip igmp snooping v3-report-suppression

Related Commands

Command

Description

Displays IGMP snooping information.

ip igmp snooping v3-report-suppression (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IGMPv3 report suppression and proxy reporting for VLANs:

n1000v(config)# vlan 1

n1000v(config-vlan)# ip igmp snooping v3-report-suppression

n1000v(config-vlan)#

This example shows how to remove IGMPv3 report suppression and proxy reporting for VLANs:

n1000v(config)# vlan 1

n1000v(config-vlan)# no ip igmp snooping v3-report-suppression

n1000v(config-vlan)#

Related Commands

Command

Description

Displays IGMP snooping information.

ip port access-group

form of this command.

Syntax Description

Group name. The range of valid values is 1 to 64.

Defaults

No access group exists.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You create an access group to specify in an ACL the access control of packets.

Examples

This example shows how to create an access group:

n1000v# configure terminal

n1000v(config)# port-profile 1

n1000v(config-port-prof)# ip port access-group group1 in

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays access lists.

show port-profile

Displays port profile information.

ip prec

command.

Syntax Description

IP precedence value for the ERSPAN traffic packets. The range is 0–7.

Defaults

None

Command Modes

CLI ERSPAN source configuration (config-monitor-erspan-src)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to specify the IP precedence value as 1 for the packets in the ERSPAN traffic and save it in the running configuration:

n1000v# config t

n1000v(config)# monitor session 3 type erspa

n1000v(config-erspan-src)# destination ip 10.54.54.1

n1000v(config-monitor-erspan-src)# ip prec 1

n1000v(config-monitor-erspan-src)#

Related Commands

Command

Description

Creates a session with the given session number and places you in the CLI ERSPAN source configuration mode.

description

For the specified ERSPAN session, adds a description and saves it in the running configuration.

source

Configures the sources and the direction of traffic to monitor for the specified session, and saves the information in the running configuration.

filter vlan

Configures the VLANs, VLAN lists, or VLAN ranges to be monitored for the specified session; and saves this information in the running configuration.

destination ip

Configures the IP address of the host to which the encapsulated traffic is sent and saves it in the running configuration.

ip ttl

Specifies the IP time-to-live value for the packets in the ERSPAN traffic, and saves it in the running configuration.

ip dscp

Specifies the IP DSCP value for the packets in the ERSPAN traffic, and saves it in the running configuration.

mtu

Specifies a maximum transmission unit (MTU) size for the ERSPAN traffic, and saves it in the running configuration.

erspan-id

Adds an ERSPAN ID to the session configuration and saves it in the running configuration.

no shut

Enables the ERSPAN session and saves it in the running configuration.

show monitor session session_id

Displays the ERSPAN session configuration as it exists in the running configuration.

ip source binding

form of this command.

Syntax Description

IPv4 address to be used on the specified interface. Valid entries are in dotted-decimal format.

MAC address to be used on the specified interface. Valid entries are in dotted-hexadecimal format.

Specifies the VLAN associated with the IP source entry.

Specifies the Layer 2 vEthernet interface associated with the static IP entry.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

By default, there are no static IP source entries.

Examples

This example shows how to create a static IP source entry that is associated with VLAN 100 on vEthernet interface 3:

n1000v# configure terminal

n1000v(config)# ip source binding 10.5.22.7 001f.28bd.0013 vlan 100 interface vethernet 3

n1000v(config)#

Related Commands

Command

Description

Displays IP-to-MAC address bindings.

ip source binding filter-mode [ip | ip-mac]

[ip | ip-mac]command to enable source IP based filtering.

ip source binding filter-mode [ip | ip-mac]

Syntax Description

filter-mode

Filter mode to be used on the switch. The available filter modes are ip and ip-mac. Use the ip filter mode to filter the traffic based on the source IP address. Use the ip-mac filter mode to filter the traffic based on the IP-MAC Address pair.

Defaults

ip-mac

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced to include the ip filter mode.

Usage Guidelines

This functionality is applicable to static bindings only. In the case of the dynamic bindings, a new MAC Address results in updating the dynamic binding on the Cisco Nexus 1000V.

Examples

This example shows how to enable source-IP only filtering for IPSG/DAI:

n1000v# configure terminal

n1000v(config)# ip source binding filter-mode ip

n1000v(config)#

Related Commands

Command

Description

Displays IP-to-MAC address bindings and the filter mode.

Displays IP-to-MAC address bindings and the filter mode.

Displays IP-to-MAC address bindings and the filter mode.

ip source-route

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable an IP source route:

n1000v# configure terminal

n1000v(config)# ip source-route

n1000v(config)#

Related Commands

Command

Description

Displays static routes.

ip ttl

command.

Syntax Description

Time-to-live value, in seconds, from 1–255.

Defaults

None

Command Modes

CLI ERSPAN source configuration (config-monitor-erspan-src)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to specify the time-to-live value of 64 seconds for packets in the ERSPAN traffic:

n1000v# config t

n1000v(config)# monitor session 3 type erspa

n1000v(config-erspan-src)# destination ip 10.54.54.1

nn1000v(config-monitor-erspan-src)# ip ttl 64

n1000v(config-monitor-erspan-src)#

Related Commands

Command

Description

Creates a session with the given session number and places you in the CLI ERSPAN source configuration mode.

description

For the specified ERSPAN session, adds a description and saves it in the running configuration.

source

Configures the sources and the direction of traffic to monitor for the specified session, and saves the information in the running configuration.

filter vlan

Configures the VLANs, VLAN lists, or VLAN ranges to be monitored for the specified session; and saves this information in the running configuration.

destination ip

Configures the IP address of the host to which the encapsulated traffic is sent and saves it in the running configuration.

ip prec

Specifies the IP precedence value for the packets in the ERSPAN traffic, and saves it in the running configuration.

ip dscp

Specifies the IP DSCP value for the packets in the ERSPAN traffic, and saves it in the running configuration.

mtu

Specifies a maximum transmission unit (MTU) size for the ERSPAN traffic, and saves it in the running configuration.

erspan-id

Adds an ERSPAN ID to the session configuration and saves it in the running configuration.

no shut

Enables the ERSPAN session and saves it in the running configuration.

show monitor session session_id

Displays the ERSPAN session configuration as it exists in the running configuration.

ip verify source dhcp-snooping-vlan

form of this command.

ip verify source dhcp-snooping-vlan

no ip verify source dhcp-snooping-vlan

default ip verify source dhcp-snooping-vlan

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

By default, IP Source Guard is not enabled on any interface.

Examples

This example shows how to enable IP Source Guard on an interface:

n1000v# configure terminal

n1000v(config)# interface vethernet 2

n1000v(config-if)# ip verify source dhcp-snooping-vlan

n1000v(config-if)#

Related Commands

Command

Description

Creates a static IP source entry for the specified vEthernet interface.

Displays IP-to-MAC address bindings.

ipv6 access-list

form of this command.

Syntax Description

List name.

Enables access list matching for locally generated traffic.

Defaults

No access list exists.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to create an access list:

n1000v# configure terminal

n1000v(config)# ipv6 access-list acl1

n1000v(config)#

Command

Description

Displays access lists.

ipv6 port traffic-filter

To create an access group, use the ipv6 port traffic-filter command. To remove access control, use the

no form of this command.

Syntax Description

Group name. The range of valid values is 1 to 64.

Defaults

No traffic-filter exits.

Command Modes

Port profile configuration (config-port-prof) or in Veth or in Eth interfaces

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

You create a traffic filter to specify in an IPv6 ACL the access control of packets.

Examples

This example shows how to create a traffic filter:

n1000v# configure terminal

n1000v(config)# port-profile 1

n1000v(config-port-prof)# ipv6 port traffic-filter group1 in

n1000v(config-port-prof)#

Related Commands

Command

Description

show access-lists

Displays access lists.

show port-profile

Displays port profile information.

ipv6 traffic-filter

To create an IPv6 traffic-filter for mgmt0 interface, use the ipv6 traffic-filter command. To remove the traffic-filter, use the no form of this command.

Syntax Description

Group name. The range of valid values is 1 to 64.

Defaults

None.

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to configure an IPv6 traffic filter named Telnet for incoming traffic to the mgmt0 interface:

n1000v# config t

n1000v(config)# interface mgmt0

n1000v(config-if)# ipv6 traffic-filter telnet in

n1000v(config-if)#

Related Commands

Command

Description

show ipv6 access-lists

Displays the IPv6 ACL configuration.

L Commands

This chapter describes the Cisco Nexus 1000V commands that begin with L.

lacp offload

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4))

This command was introduced.

Usage Guidelines

After changing the management of LACP from the VSM to the VEM, or back from VEM to VSM, you must copy the running configuration to the startup configuration and then reload the VSM for the change to take effect.

Examples

This example shows how to offload management of LACP from the VSM to the VEMs and then reload the switch for the change to take effect:

n1000v# config t

n1000v(config)# lacp offload

Please do a "copy running startup" to ensure the new setting takes effect on next reboot

LACP Offload Status can be verified using "show lacp offload status"

Change in LACP Offload Status takes effect only on the next VSM Reboot

This can potentially cause modules with LACP uplinks to flap

copy running-config startup-config

[###############################] 100%

n1000v(config)# reload

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from Command Line Interface

This example shows how to return management of LACP to the VSM and then reload the switch for the change to take effect:

n1000v# config t

n1000v(config)# no lacp offload

Please do a "copy running startup" to ensure the new setting takes effect on next reboot

LACP Offload Status can be verified using "show lacp offload status"

Change in LACP Offload Status takes effect only on the next VSM Reboot

This can potentially cause modules with LACP uplinks to flap

copy running-config startup-config

[###############################] 100%

n1000v(config)# reload

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from Command Line Interface

Related Commands

Command

Description

Displays the LACP offload status for verification.

show lacp port-channel [interface port-channel channel-number]

Displays information about LACP port channels.

show lacp interface ethernet slot/port

Displays information about specific LACP interfaces.

channel-group auto [ mode { on | active | passive }] mac-pinning

Configures port channel mode (active and passive) used by LACP in the port profile.

limit-resource erspan-flow-id minimum

form of this command.

Syntax Description

Minimum ERSPAN flow ID number allowed.

Configures the maximum range value for ERSPAN flow IDs.

Maximum ERSPAN flow ID number allowed.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to restrict the range of allowed ERSPAN flow IDs to the range, 1-80:

n1000v(config)# limit-resource erspan-flow-id minimum 1 maximum 80

This example shows how to restore the default range of ERSPAN flow IDs:

n1000v(config)# no limit-resource erspan-flow-id

Related Commands

Command

Description

Adds an ERSPAN ID (1-1023) to the session configuration and saves it in the running configuration.

show monitor session

Displays the ERSPAN session configuration as it exists in the running configuration.

monitor session

Creates an ERSPAN session.

line console

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enter console configuration mode:

n1000v# configure terminal

n1000v(config)# line console

n1000v(config-console)#

line vty

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enter line configuration mode:

n1000v# configure terminal

n1000v(config)# line vty

n1000v(config-line)#

logging console

command to enable logging messages to the console session.

form of this command.

]

no logging console

Syntax Description

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable logging messages with a severity level of 4 (warning) or higher to the console session:

n1000v# configure terminal

n1000v(config)# logging console 4

n1000v(config)#

Related Commands

Command

Description

Displays the console logging configuration.

logging event

command to log interface events.

logging event {link-status | trunk-status} {enable | default}

no logging event {link-status | trunk-status} {enable | default}

Syntax Description

Log all up/down and change status messages.

Log all trunk status messages.

The default logging configuration is used.

Enables interface logging to override the port level logging configuration.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to log interface events:

n1000v# configure terminal

n1000v(config)# logging event link-status default

n1000v(config)#

Related Commands

Command

Description

Displays the logging configuration and contents of logfile.

logging ip access-list cache

form of this command.

}}

}}

Syntax Description

Sets the time interval in seconds to accumulate packet counters before they are reported to the syslog servers, where seconds is the number of seconds. the range is from 5 to 86,400 seconds. The default is 300 seconds.

Sets the number of deny flows, where deny is the number of flows. The range is from 0 to 5000 flows. The default is 3000 flows.

Sets the number of permit flows where permit is the number of flows. The range is from 0 to 5000 flows. The default is 3000 flows.

Enables ACL logging on the specified VEM where vem is the ID of the VEM.

Defaults

By default, ACL logging is the enabled on all VEMs.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to enable ACL logging on VEM 5:

n1000v# configure terminal

n1000v(config)# logging ip access-list cache module 5

This example shows how to disable ACL logging on VEM 5:

n1000v# configure terminal

n1000v(config)# no logging ip access-list cache module 5

Related Commands

Command

Description

Displays the status of the ACL logging configuration for a VSM.

Displays the ACL logging configuration for the specified VEM module.

logging level

command to enable the logging of messages as follows:

- from a named facility (such as license or aaa)

- of a specified severity level or higher

form of this command.

Syntax Description

.

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

To apply the same severity level to all facilities, use the following command:

- logging level all level_number

To list the available facilities for which messages can be logged, use the following command:

- logging level ?

Examples

This example shows how to enable logging messages from the AAA facility that have a severity level of 0 through 2:

n1000v# configure terminal

n1000v(config)# logging level aaa 2

n1000v(config)#

0 through 4; and then display the license logging configuration:

n1000v# configure terminal

n1000v(config)# logging level license 4

n1000v(config)# show logging level license

Facility Default Severity Current Session Severity

-------- ---------------- ------------------------

licmgr 6 4

0(emergencies) 1(alerts) 2(critical)

3(errors) 4(warnings) 5(notifications)

6(information) 7(debugging)

n1000v(config)#

Related Commands

Command

Description

Displays the facility logging level configuration.

logging level ?

Lists the available facilities for which messages can be logged.

logging logfile

command to configure the log file used to store system messages.

form of this command.

]

]]]

Syntax Description

Specifies the name of the log file that stores system messages.

(0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition

6

Informational

Informational message only

7

Debugging

Appears during debugging only

(Optional) Specifies the log file size in bytes, from 4096 to 10485760 bytes.

The default file size is 10485760 bytes.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a log file named LogFile to store system messages and set its severity level to 4:

n1000v# config t

n1000v(config)# logging logfile LogFile 4

n1000v(config)#

Related Commands

Command

Description

Displays the contents of the log file.

logging module

form of this command.

]

]

Syntax Description

The severity level at which you want messages to be logged. If you do not specify a severity level, the default is used. When you set a severity level, for example 4, then messages at that severity level and higher (0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition (the default)

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

Disabled

If you start logging of module messages, and do not specify a severity, then the default is used, Notification (5).

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to start logging of module messages to the log file at the default severity level (severity 4):

n1000v# configure terminal

n1000v(config)# logging module

n1000v(config)#

This example shows how to stop the logging of module messages to the log file:

n1000v# configure terminal

n1000v(config)# no logging module

n1000v#

Related Commands

Command

Description

Displays the current configuration for logging module messages to the log file.

logging monitor

command to enable the logging of messages to the monitor (terminal line). This configuration applies to telnet and Secure Shell (SSH) sessions.

form of this command.

]

no logging monitor

Syntax Description

The severity level at which you want messages to be logged. If you do not specify a severity level, the default is used. When you set a severity level, for example 4, then messages at that severity level and higher (0 through 4) are logged.

Severity levels are as follows:

Level

Designation

Definition

0

Emergency

System unusable *the highest level*

1

Alert

Immediate action needed

2

Critical

Critical condition—default level

3

Error

Error condition

4

Warning

Warning condition

5

Notification

Normal but significant condition (the default)

6

Informational

Informational message only

7

Debugging

Appears during debugging only

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

Network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable monitor log messages:

n1000v# configure terminal

n1000v(config)# logging monitor

n1000v(config)#

Related Commands

Command

Description

Displays the monitor logging configuration.

logging server

form of this command to remove or change the configuration,

}]]]

}]]]

Syntax Description

Hostname/IPv4/IPv6 address of the Remote Syslog Server.

(Optional) 0-emerg;1-alert;2-crit;3-err;4-warn;5-notif;6-inform;7-debug.

(Optional) Enter VRF name, default is management + VRF name,default management.

(Optional) Facility to use when forwarding to server.

Use auth facility.

Use authpriv facility.

Use Cron/at facility.

Use daemon facility.

Use file transfer system facility.

Use kernel facility.

Use local0 facility.

Use local1 facility.

Use local2 facility.

Use local3 facility.

Use local4 facility.

Use local5 facility.

Use local6 facility.

Use local7 facility.

Use lpr facility.

Use mail facility.

Use USENET news facility.

Use syslog facility.

Use user facility.

Use Unix-to-Unix copy system facility.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a remote syslog server at a specified IPv4 address, using the default outgoing facility:

n1000v# configure terminal

n1000v(config)# logging server 172.28.254.253

n1000v(config)#

This example shows how to configure a remote syslog server at a specified host name, with severity level 5 or higher:

n1000v# configure terminal

n1000v(config)# logging server syslogA 5

n1000v(config)#

Related Commands

Command

Description

Displays the current server configuration for logging system messages.

logging timestamp

form of this command.

}

}

Syntax Description

Timestamp in micro-seconds.

Timestamp in milli-seconds.

Timestamp in seconds (Default).

Defaults

Seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set microseconds as the unit of measure for the system messages timestamp:

n1000v# configure terminal

n1000v(config)# logging timestamp microseconds

n1000v(config)#

Related Commands

Command

Description

Displays the logging timestamp configuration.

M Commands

This chapter describes the Cisco Nexus 1000V commands that begin with M.

mac access-list

form of this command.

Syntax Description

List name. The range of valid values is 1 to 64.

Defaults

The MAC ACL does not exist.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create a MAC ACL:

n1000v# configure terminal

n1000v(config)# mac access-list aL1

n1000v(config)#

Related Commands

Command

Description

Displays access list information.

mac address-table aging-time

form of this command.

Syntax Description

Defaults

1800 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

seconds to disable the aging process.

The age value may be rounded off to the nearest multiple of 5 seconds. If the system rounds the value to a different value from that specified by the user (from the rounding process), the system returns an informational message.

form of this command without the VLAN parameter, only those VLANs that have not been specifically configured for the aging time reset to the default value. Those VLANs with specifically modified aging times are not modified.

configuration for the aging time, which may or may not be the default value of 300 seconds depending if the global configuration of the device for aging time has been changed.

Aging time is counted from the last time that the switch detected the MAC address.

Examples

This example shows how to change the length of time an entry remains in the MAC address table to 500 seconds for the entire device:

n1000v(config)# mac address-table aging-time 500

n1000v(config)#

Related Commands

Command

Description

mac address-table static

form of this command.

]

Syntax Description

- X.X.X

- XX-XX-XX-XX-XX-XX

- XX:XX:XX:XX:XX:XX

- XXXX.XXXX.XXXX

:

- ethernet slot/port

- veth number

(Optional) Allow moving this MAC address.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was modified to remove the port channel option.

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to a multicast MAC address.

The output interface specified cannot be a VLAN interface or a Switched Virtual Interface (SVI).

form to remove entries that are profiled by the combination of specified entry information.

Examples

This example shows how to add a static entry to the MAC address table:

n1000v# confi t

n1000v(config)# mac address-table static 0050.3e8d.6400 vlan 3 interface ethernet 2/1

n1000v(config)#

Related Commands

Command

Description

mac auto-static-learn

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the auto-mac-learning state is enabled.

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-profile)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

- This command is needed on the VEthernets that are used for Microsoft Netwrok Load Balancing setups in unicast mode.

- This configuration is not supported on PVLAN ports.

- This configuration is not supported on the ports configured with UUFB (Unknown Unicast Flood Blocking).

- This configuration is not supported on the ports configured with the command switchport port-security mac-address sticky.

Examples

This example shows how to configure the auto-mac-learning state on vEth1:

n1000v# configure terminal

n1000v(config)# int veth 1

n1000v(config-if)# [no] mac auto-static-learn

n1000v(config-if)#

Related Commands

Command

Description

Adds a static MAC address in the Layer 2 MAC address table and saves it in the running configuration.

mac port access-group

form of this command.

Syntax Description

Group name. The range of valid values is 1 to 64.

Defaults

Access control for packets is not specified.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable access control for port groups:

n1000v# configure terminal

n1000v(config)# port-profile 1

n1000v(config-port-prof)# mac port access-group groupOne in

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays MAC information.

match (ACL)

form of this command.

}}

}}

Syntax Description

Specifies the access group.

Specifies the ACL name.

ACL name. The range of valid values is 1 to 64.

(Optional) Negates the match result.

IEEE 802.1Q CoS (Class of Service).

List of CoS values. The range of valid values is 0 to 7.

DSCP in IP(v4) and IPv6 packets.

List of DSCP values.

.

Precedence in IP(v4) and IPv6 packets.

List of precedence values.

.

Discard class + List of discard-class values.

Qos-group + List of qos-group values.

Class map + Match class-map name.

Packet.

Length of IP datagram.

list of IP packet length.

IP.

Real Time Protocol.

UDP port list that are using RTP.

Defaults

None

Command Modes

Class map configuration (config-cmap-qos

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a class-map match criteria:

n1000v(config)# class-map cl_map1

n1000v(config-cmap-qos)# match access-group name ac_gr1

n1000v(config-cmap-qos)#

This example shows how to remove the class-map match criteria:

n1000v(config)# class-map cl_map1

n1000v(config-cmap-qos)# no match access-group name ac_gr1

n1000v(config-cmap-qos)#

Related Commands

Command

Description

Displays class map information.

match ip (NetFlow)

form of this command.

}

}

Syntax Description

Protocol.

Type of service.

Defaults

None

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IP matching criteria for a NetFlow flow record and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match ip protocol

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match ip protocol

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

This example shows how to remove the IP matching criteria for a NetFlow flow record a and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match ip protocol

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

[name]

Displays a NetFlow flow record configuration.

match ipv4

Defines IPv4 matching criteria for a NetFlow flow record.

match transport

Defines transport matching criteria for a NetFlow flow record.

match ipv4 (NetFlow)

form of this command.

Syntax Description

Source Address.

Destination Address.

Address.

Defaults

None

Command Modes

Flow record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure IPv4 matching criteria for a NetFlow flow record and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match ipv4 destination address

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

Description: Ipv4flow

No. of users: 0

Template ID: 0

Fields:

match ipv4 destination address

match interface input

match interface output

match flow direction

collect counter packets

n1000v(config-flow-record)#

This example shows how to remove the IPv4 matching criteria for a NetFlow flow record a and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match ipv4 destination address

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

[name]

Displays a NetFlow flow record configuration.

match ip

Defines IP matching criteria for a NetFlow flow record.

match transport

Defines transport matching criteria for a NetFlow flow record.

match protocol

command.

Syntax Description

Acceptable protocol values:

- n1k_control

- n1k_mgmt

- n1k_packet

- vmw_ft

- vmw_iscsi

- vmw_mgmt

- vmw_nfs

- vmw_vmotion

Command Default

No match protocol is set by default.

Command Modes

Class map configuration (config-cmap-que)

Supported User Roles

network admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

The match protocol command configures a match criteria based on the specified protocol.

Examples

This example show how to set the protocol to a value of vmw_motion.

n1000v(config-cmap-que)# match protocol vmw_motion

Related Commands

None

match transport (NetFlow)

form of this command.

}

}

Syntax Description

Transport destination port.

Transport source port.

Defaults

None

Command Modes

Flow Record configuration (config-flow-record)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure transport matching criteria for a NetFlow flow record and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# match transport destination-port

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

Description: Ipv4flow

No. of users: 0

Template ID: 0

Fields:

match ipv4 destination-port

match interface input

match interface output

match flow direction

collect counter packets

n1000v(config-flow-record)#

This example shows how to remove the transport matching criteria for a NetFlow flow record a and then display the result:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# no match transport destination-port

n1000v(config-flow-record)# show flow record

Flow record RecordTest:

No. of users: 0

Template ID: 0

Fields:

match interface input

match interface output

match flow direction

doc-n1000v(config-flow-record)#

Related Commands

Command

Description

[name]

Displays a NetFlow flow record configuration.

match ip

Defines IP matching criteria for a NetFlow flow record.

match ipv4

Defines IPv4 matching criteria for a NetFlow flow record.

max-ports

form of this command.

Syntax Description

Specifies the maximum number of ports (1 to 1024) for a port profile. This limit is not applicable when the port binding type is static auto expand.

Defaults

32 ports

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was changed from vmware max-ports to max-ports.

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to set the maximum number of ports in the testprofile port profile:

n1000v# configure terminal

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# max-ports 100

n1000v(config-port-prof)#

This example shows how to remove the maximum ports configuration from the testprofile port profile:

n1000v# configure terminal

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no max-ports 100

n1000v(config-port-prof)#

Related Commands

Command

Description

show port-profile name

Displays configuration information about a particular port-profile.

port-profile

Creates a port profile.

media

form of this command.

media ethernet

Syntax Description

Specifies Ethernet media type.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure media type:

n1000v# configure terminal

n1000v(config)# media ethernet

n1000v(config)#

Related Commands

Command

Description

Displays VLAN information.

mkdir

command.

mkdir {bootflash: | debug: | volatile:}

Syntax Description

bootflash:

Specifies bootflash as the directory name.

debug:

Specifies debug as the directory name.

volatile:

Specifies volatile as the directory name.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create the bootflash: directory:

n1000v# mkdir bootflash:

Related Commands

Command

Description

Changes the current working directory.

Displays the directory contents.

Displays the name of the current working directory.

module vem

command.

Syntax Description

Specifies the module number. The range is 3 to 66.

Specifies the command to execute on the VEM.

(Optional) The syntax of the command to be sent to the VEM.

Defaults

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the VEM port profile configuration remotely from the Cisco Nexus 1000V:

n1000v# module vem 3 execute vemcmd show port-profile

This example shows how to display the VEM VSD configuration remotely from the Cisco Nexus 1000V:

n1000v# module vem 3 execute vemcmd show vsd

ID Def_Act ILTL OLTL NMLTL State Member LTLs

1 DROP 48 49 4 ENA 54,52,55,53

2 FRWD 50 51 0 ENA

vsim-cp# module vem 3 execute vemcmd show vsd ports

LTL IfIndex VSD_ID VSD_PORT_TYPE

48 1b020000 1 INSIDE

49 1b020010 1 OUTSIDE

50 1b020020 2 INSIDE

51 1b020030 2 OUTSIDE

52 1b020040 1 REGULAR

53 1b020050 1 REGULAR

54 1b020060 1 REGULAR

55 1b020070 1 REGULAR

n1000v#

Related Commands

Command

Description

Displays Virtual Ethernet Module information.

monitor session

To enter the monitor configuration mode for configuring an Ethernet switch port analyzer (SPAN) session for analyzing traffic between ports, use the monitor session command.

To disable monitoring a SPAN session(s), use the no form of this command.

}

}

Syntax Description

Specifies the session number for monitoring a switched port. SPAN sessions are numbered from 1 to 64.

(Optional) Shuts the selected session.

(Optional) Specifies a session type.

(Optional) Creates an erspan source session

Specify all sessions for monitoring a switched port.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enter the monitor configuration mode for configuring SPAN session number 2 for analyzing traffic between ports:

n1000v# configuration t

n1000v(config)# monitor session 2

n1000v(config-monitor)#

This example shows how to remove the configuration for SPAN session 2 for analyzing traffic between ports:

n1000v# configuration t

n1000v(config)# no monitor session 2

n1000v(config)#

Related Commands

Command

Description

Displays Ethernet SPAN information.

move

command.

Syntax Description

:

(Optional) Name of a file system. The name is case sensitive.

. The identifiers are case sensitive.

(Optional) Name of a directory. The name is case sensitive.

Name of the file to move. The name is case sensitive.

(Optional) Name of the destination file. The name is alphanumeric, case sensitive, and has a maximum of 64 characters.

Defaults

The default name for the destination file is the same as the source filename.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Tip You can rename a file by moving it within the same directory.

Examples

This example shows how to move a file to another directory:

n1000v# move file1 my_files:file2

This example shows how to move a file to another file system:

n1000v# move file1 slot0:

This example shows how to move a file to another supervisor module:

n1000v# move file1 bootflash://sup-remote/file1.bak

Related Commands

Command

Description

Changes the current working directory.

Makes a copy of a file.

Displays the directory contents.

Displays the name of the current working directory.

mtu (Interface)

form of this command.

Syntax Description

Specifies the maximum allowable MTU. The range is 1500 to 9000 bytes.

Defaults

1500 Bytes

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was added to port profile configuration.

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

.

When configuring port profiles, MTU is only applied in Ethernet type port profiles that are system uplink port profiles.

When you configure the MTU in a system port profile, it causes any interface inheriting the port profile to flap. If the system port profile includes the control VLAN, then the module, itself, flaps.

Examples

This example shows how to set the size of the port channel interface MTU to 2000:

n1000v# configure terminal

n1000v(config)# interface port-channel 2

n1000v(config-if)# mtu 2000

This example shows how to set the size of the MTU to 2000 in a port profile:

n1000v# configure terminal

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)# mtu 2000

Related Commands

Command

Description

show port-profile

Displays port profile information.

port-profile

Creates a port profile and enters port profile configuration mode.

show interface ethernet

Displays Ethernet interface information.

Displays port-channel interface information.

Displays the current operating configuration, which includes the system jumbo MTU size.

interface

Creates an interface and enters interface configuration mode.

mtu (ERSPAN)

command.

Syntax Description

Specifies the maximum allowable MTU (50 - 1500 bytes) for ERSPANed packets in a monitor session. Packets larger than the allowable size are truncated.

Defaults

1500 bytes

Command Modes

ERSPAN configuration (config-erspan-src)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

ERSPANed packets larger than the specified allowable size for the monitor session are truncated.

Examples

This example shows how to configure an MTU of 1000 bytes for ERSPANed packets in monitor session 2:

n1000v# configure terminal

n1000v(config)# monitor session 2 type erspan-source

n1000v(config-erspan-source)# mtu 1000

Related Commands

Command

Description

Displays the ERSPAN session configuration.

monitor session

Creates an ERSPAN monitor session.

N Commands

This chapter describes the Cisco Nexus 1000V commands that begin with N.

name

form of this command.

Syntax Description

VLAN name. The range of valid values is 1 to 32.

Defaults

The VLAN has no name.

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to name a VLAN:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)# name v10

(config-vlan)#

Related Commands

Command

Description

Displays VLAN information.

neighbor <>

To configure a BGP neighbor, use the neighbor <> command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure a BGP neighbor:

n1000v(config-router)# neighbor 17.17.17.38

n1000v(config-router-neighbor)#

Related Commands

Command

Description

Displays VLAN information.

network-segment policy

form of this command.

Syntax Description

Name of the network segmentation policy. The policy name can be up to 80 characters and must be unique for each policy on the network segmentation manager.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to create a network segmentation policy ABC:

n1000v# configure terminal

n1000v(config)# network-segment policy abc-policy-vxlan

n1000v(config-network-segment-policy)#

Related Commands

Command

Description

Displays the network segmentation policy configuration.

Enables the Network Segmentation Manager (NSM) feature.

no enable l3sec

To disable feature l3security in Layer 3, use the no enable l3sec command.

no enable l3sec

Syntax Description

Command to disable Layer 3 security.

Defaults

None

Command Modes

svs-domain

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to disable feature l3security in Layer 3:

switch(config)# svs-domain

switch(config-svs-domain)# no enable l3sec

Related Commands

Command

Description

Command to enable Layer 3 security.

[no] segment control-protocol bgp

To enable or disable BGP control protocol, use the [no] segment control-protocol bgp command.

[no] segment control-protocol bgp

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable or disable BGP control protocol globally and also per-bd:

n1000v(config)# segment control-protocol bgp

n1000v(config)# no segment control-protocol bgp

n1000v(config-bd)# segment control-protocol bgp

n1000v(config-bd)# no segment control-protocol bgp

Related Commands

None.

ntp authenticate

form of this command to allow synchronization with unauthenticated unconfigured network peers.

commands, when NTP receives an incoming symmetric active, broadcast, or multicast packet, it can set up an ephemeral peer association to synchronize with the sender.

global configuration command.

command, have been taken to prevent unauthorized hosts from communicating with the NTP service on the device.

keyword.

ntp enable

command form.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable NTP:

n1000v# ntp enable

This example shows how to disable NTP:

n1000v# no ntp enable

Related Commands

Command

Description

Configures a remote NTP server.

ntp peer

form of this command.

]

]

Syntax Description

Hostname or IP address of the NTP peer.

(Optional) Specifies this peer as the preferred peer.

(Optional) Specifies the virtual routing and forwarding (VRF) used to reach this peer.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure an NTP peer:

n1000v(config)# ntp peer 192.0.2.2

Related Commands

Command

Description

Displays information about the NTP peer.

ntp server

form of this command.

]

]

Syntax Description

Hostname or IP address of the NTP server.

(Optional) Specifies this server as the preferred server.

(Optional) Specifies the virtual routing and forwarding (VRF) used to reach this peer.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure an NTP server:

n1000v(config)# ntp server 192.0.2.2

Related Commands

Command

Description

Displays information about the NTP peer.

ntp source

form of this command.

Syntax Description

IPv4 or IPv6 address of the source. The IPv4 address format is dotted decimal, x.x.x.x. The IPv6 address format is hex A:B::C:D.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the NTP source:

n1000v(config)# ntp source 192.0.2.3

This example shows how to remove the NTP source:

n1000v(config)# no ntp source 192.0.2.3

Related Commands

Command

Description

Displays information about the NTP source.

O Commands

This chapter describes the Cisco Nexus 1000V commands that begin with O.

option exporter-stats timeout

form of this command.

Syntax Description

A time period between 1 and 86400 seconds.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a 3600-second timeout period for resending NetFlow flow exporter data:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# option exporter-stats timeout 3600

This example shows how to remove the timeout period for resending NetFlow flow exporter data:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no option exporter-stats timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

Specifies a timeout period for resending the NetFlow flow exporter interface table.

Specifies a timeout period for resending NetFlow flow exporter template data.

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

option interface-table timeout

form of this command.

Syntax Description

A time period between 1 and 86400 seconds.

Defaults

None

Command Modes

Netflow flow exporter version 9 configuration (config-flow-exporter-version-9)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a 3600 second timeout period for resending the NetFlow flow exporter interface table:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# option exporter-stats timeout 3600

This example shows how to remove the timeout period for resending the NetFlow flow exporter interface table:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no option exporter-stats timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

Specifies a timeout period for resending NetFlow flow exporter data.

Specifies a timeout period for resending NetFlow flow exporter template data.

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

P Commands

This chapter describes the Cisco Nexus 1000V commands that begin with P.

packet vlan

form of this command.

}

Syntax Description

Defaults

None

Command Modes

SVS domain (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create packet VLAN 261:

n1000v# configure terminal

n1000v(config)# svs-domain

n1000v(config-svs-domain)# packet vlan 261

n1000v(config-svs-domain)#

This example shows how to remove the packet VLAN 261:

n1000v# configure terminal

n1000v(config)# svs-domain

n1000v(config-svs-domain)# no packet vlan 261

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays information about the running configuration on the switch.

password <>

To configure a password for neighbor, For MD5 authentication, per TCP packet, use the password <> command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure a password for the neighbor:

n1000v(config-router-neighbor)# password cisco

Related Commands

Command

Description

Displays the configuration for checking password strength.

password strength-check

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

This feature is enabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable the checking of password strength:

n1000v# config t

n1000v(config)# password strength-check

n1000v(config)#

This example shows how to disable the checking of password strength:

n1000v# config t

n1000v(config)# no password strength-check

n1000v(config)#

Related Commands

Command

Description

Displays the configuration for checking password strength.

username

Creates a user account.

role name

Names a user role and places you in role configuration mode for that role.

peer-sup mac-addresses check

To display the peer supervisor (Active / Standby) MACaddress learnt during VSM HA pairing between Active and Standby, use the peer-sup mac-addresses check command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

command:

n1000v# peer-sup mac-addresses check enable

Related Commands

Command

Description

Display the peer supervisor (Active / Standby) MAC address learnt during initial pairing between Active and Standby.

peer-sup mac-address clear

Clear the peer mac address learnt by VSM (Active / Standby).

peer-sup mac-addresses clear

To clear the peer MAC address learnt by the VSM (Active / Standby), use the peer-sup mac-addresses clear command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

command:

n1000v# peer-sup mac-addresses clear

Related Commands

Command

Description

Display the peer supervisor (Active / Standby) MAC address learnt during initial pairing between Active and Standby.

peer-sup mac-addresses check [enable | disable]

Enable or disable the peer MAC learning option while VSM forming HA pair.

permit (IPv4)

form of this command.

General Syntax

Internet Control Message Protocol

Internet Group Management Protocol

Internet Protocol v4

Transmission Control Protocol

User Datagram Protocol

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- igmp —Specifies that the rule applies to IGMP traffic only. When you use this keyword, the igmp-type argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv4 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv4 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments and the portgroup and established keywords are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument and the portgroup keyword are available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv4 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- if —Expedited Forwarding (101110)

argument can be a number or a keyword, as follows:

- 0–7—Decimal equivalent of the 3 bits of the IP Precedence field. For example, if you specify 3, the rule matches only packets that have the following bits in the DSCP field: 011.

- critical —Precedence 5 (101)

- flash —Precedence 3 (011)

- flash-override —Precedence 4 (100)

- immediate —Precedence 2 (010)

- internet —Precedence 6 (110)

- network —Precedence 7 (111)

- priority —Precedence 1 (001)

- routine —Precedence 0 (000)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

argument can be the IGMP message number, which is an integer from 0 to 15. It can also be one of the following keywords:

- dvmrp —Distance Vector Multicast Routing Protocol

- host-query —Host query

- host-report —Host report

- pim —Protocol Independent Multicast

- trace —Multicast trace

]

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv4 ACL contains no rules.

If you do not specify a sequence number, the device assigns to the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv4 ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When the device applies an IPv4 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv4 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address network-wildcard

argument with the IPv4 address and network wildcard for the 192.168.67.0 subnet:

n1000v(config-acl)# permit tcp 192.168.67.0 0.0.0.255 any

- Address and variable-length subnet mask—You can use an IPv4 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv4-address/prefix-len

argument with the IPv4 address and VLSM for the 192.168.67.0 subnet:

n1000v(config-acl)# permit udp 192.168.67.0/24 any

- Host address—You can use the host keyword and an IPv4 address to specify a host as a source or destination. The syntax is as follows:

host IPv4-address

0.0.0.0.

keyword and the 192.168.67.132 IPv4 address:

n1000v(config-acl)# permit icmp host 192.168.67.132 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv4 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time exceeded messages

- timestamp-reply —Timestamp replies

- timestamp-request —Timestamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—Exec (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv4 ACL named acl-lab-01 with rules permitting all TCP and UDP traffic from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network:

n1000v# config t

n1000v(config)# ip access-list acl-lab-01

n1000v(config-acl)# permit tcp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# permit udp 10.23.0.0/16 10.176.0.0/16

n1000v(config-acl)# permit tcp 192.168.37.0/16 10.176.0.0/16

n1000v(config-acl)# permit udp 192.168.37.0/16 10.176.0.0/16

Related Commands

Command

Description

Configures a deny rule in an IPv4 ACL.

Configures an IPv4 ACL.

Configures a remark in an ACL.

Displays all IPv4 ACLs or one IPv4 ACL.

Enables collection of statistics for each entry in an ACL.

permit (IPv6)

form of this command.

General Syntax

Internet Control Message Protocol

Internet Protocol v6

Transmission Control Protocol

User Datagram Protocol

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Name or number of the protocol of packets that the rule matches. Valid numbers are from 0 to 255. Valid protocol names are the following keywords:

- icmp —Specifies that the rule applies to ICMP traffic only. When you use this keyword, the icmp-message argument is available, in addition to the keywords that are available for all valid values of the protocol argument.

- ip —Specifies that the rule applies to all IPv6 traffic. When you use this keyword, only the other keywords and arguments that apply to all IPv6 protocols are available. They include the following:

- tcp —Specifies that the rule applies to TCP traffic only. When you use this keyword, the flags and operator arguments and the portgroup and established keywords are available, in addition to the keywords that are available for all valid values of the protocol argument.

- udp —Specifies that the rule applies to UDP traffic only. When you use this keyword, the operator argument and the portgroup keyword are available, in addition to the keywords that are available for all valid values of the protocol argument.

Source IPv6 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination IPv6 addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

argument can be one of the following numbers or keywords:

- 0–63—The decimal equivalent of the 6 bits of the DSCP field. For example, if you specify 10, the rule matches only those packets that have the following bits in the DSCP field: 001010.

- af11 —Assured Forwarding (AF) class 1, low drop probability (001010)

- af12 —AF class 1, medium drop probability (001100)

- af13 —AF class 1, high drop probability (001110)

- af21 —AF class 2, low drop probability (010010)

- af22 —AF class 2, medium drop probability (010100)

- af23 —AF class 2, high drop probability (010110)

- af31 —AF class 3, low drop probability (011010)

- af32 —AF class 3, medium drop probability (011100)

- af33 —AF class 3, high drop probability (011110)

- af41 —AF class 4, low drop probability (100010)

- af42 —AF class 4, medium drop probability (100100)

- af43 —AF class 4, high drop probability (100110)

- cs1 —Class-selector (CS) 1, precedence 1 (001000)

- cs2 —CS2, precedence 2 (010000)

- cs3 —CS3, precedence 3 (011000)

- cs4 —CS4, precedence 4 (100000)

- cs5 —CS5, precedence 5 (101000)

- cs6 —CS6, precedence 6 (110000)

- cs7 —CS7, precedence 7 (111000)

- default —Default DSCP value (000000)

- if —Expedited Forwarding (101110)

(ICMP only: Optional) ICMP message type that the rule matches. This argument can be an integer from 0 to 255 or one of the keywords listed under “ICMP Message Types” in the “Usage Guidelines” section.

]

argument.

argument can be the name or the number of a TCP or UDP port. Valid numbers are integers from 0 to 65535. For listings of valid port names, see “TCP Port Names” and “UDP Port Names” in the “Usage Guidelines” section.

argument is a range.

argument must be one of the following keywords:

- eq —Matches only if the port in the packet is equal to the port argument.

- gt —Matches only if the port in the packet is greater than and not equal to the port argument.

- lt —Matches only if the port in the packet is less than and not equal to the port argument.

- neq —Matches only if the port in the packet is not equal to the port argument.

- range —Requires two port arguments and matches only if the port in the packet is equal to or greater than the first port argument and equal to or less than the second port argument.

argument must be one or more of the following keywords:

- ack

- fin

- psh

- rst

- syn

- urg

Defaults

A newly created IPv6 ACL contains no rules.

If you do not specify a sequence number, the device assigns to the rule a sequence number that is 10 greater than the last rule in the ACL.

Command Modes

IPv6 ACL configuration (config-ipv6-acl)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

When the device applies an IPv6 ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and network wildcard—You can use an IPv6 address followed by a network wildcard to specify a host or a network as a source or destination. The syntax is as follows:

IPv6-address network-wildcard

argument with the IPv6 address and network wildcard for the 2001::1 subnet:

n1000v(config-ipv6-acl)# permit tcp 2001::1 0::0 any

- Address and variable-length subnet mask—You can use an IPv6 address followed by a variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv6-address/prefix-len

argument with the IPv6 address and VLSM for the 2001:1::100 subnet:

n1000v(config-ipv6-acl)# permit udp 2001:1::100/128 any

- Host address—You can use the host keyword and an IPv6 address to specify a host as a source or destination. The syntax is as follows:

host IPv6-address

0:0::0:0

keyword and the the 2001::100 IPv6 address:

n1000v(config-ipv6-acl)# permit icmp host 2001::100 any

- Any address—You can use the any keyword to specify that a source or destination is any IPv6 address. For examples of the use of the any keyword, see the examples in this section. Each example shows how to specify a source or destination by using the any keyword.

ICMP Message Types

argument can be the ICMP message number, which is an integer from 0 to 255. It can also be one of the following keywords:

- administratively-prohibited —Administratively prohibited

- alternate-address —Alternate address

- conversion-error —Datagram conversion

- dod-host-prohibited —Host prohibited

- dod-net-prohibited —Net prohibited

- echo —Echo (ping)

- echo-reply —Echo reply

- general-parameter-problem —Parameter problem

- host-isolated —Host isolated

- host-precedence-unreachable —Host unreachable for precedence

- host-redirect —Host redirect

- host-tos-redirect —Host redirect for ToS

- host-tos-unreachable —Host unreachable for ToS

- host-unknown —Host unknown

- host-unreachable —Host unreachable

- information-reply —Information replies

- information-request —Information requests

- mask-reply —Mask replies

- mask-request —Mask requests

- mobile-redirect —Mobile host redirect

- net-redirect —Network redirect

- net-tos-redirect —Net redirect for ToS

- net-tos-unreachable —Network unreachable for ToS

- net-unreachable —Net unreachable

- network-unknown —Network unknown

- no-room-for-option —Parameter required but no room

- option-missing —Parameter required but not present

- packet-too-big —Fragmentation needed and DF set

- parameter-problem —All parameter problems

- port-unreachable —Port unreachable

- precedence-unreachable —Precedence cutoff

- protocol-unreachable —Protocol unreachable

- reassembly-timeout —Reassembly timeout

- redirect —All redirects

- router-advertisement —Router discovery advertisements

- router-solicitation —Router discovery solicitations

- source-quench —Source quenches

- source-route-failed —Source route failed

- time-exceeded —All time exceeded messages

- timestamp-reply —Timestamp replies

- timestamp-request —Timestamp requests

- traceroute —Traceroute

- ttl-exceeded —TTL exceeded

- unreachable —All unreachables

TCP Port Names

argument can be a TCP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Border Gateway Protocol (179)

—Character generator (19)

—Remote commands (rcmd, 514)

—Daytime (13)

—Discard (9)

—Domain Name Service (53)

—Dynamic Routing Information Protocol (3949)

—Echo (7)

—Exec (rsh, 512)

—Finger (79)

—File Transfer Protocol (21)

—FTP data connections (2)

—Gopher (7)

—NIC hostname server (11)

—Ident Protocol (113)

—Internet Relay Chat (194)

—Kerberos login (543)

—Kerberos shell (544)

—Login (rlogin, 513)

—Printer service (515)

—Network News Transport Protocol (119)

—PIM Auto-RP (496)

—Post Office Protocol v2 (19)

—Post Office Protocol v3 (11)

—Simple Mail Transport Protocol (25)

—Sun Remote Procedure Call (111)

—TAC Access Control System (49)

—Talk (517)

—Telnet (23)

—Time (37)

—UNIX-to-UNIX Copy Program (54)

—WHOIS/NICNAME (43)

—World Wide Web (HTTP, 8)

UDP Port Names

argument can be a UDP port number, which is an integer from 0 to 65535. It can also be one of the following keywords:

—Biff (mail notification, comsat, 512)

—Bootstrap Protocol (BOOTP) client (68)

—Bootstrap Protocol (BOOTP) server (67)

—Discard (9)

—DNSIX security protocol auditing (195)

—Domain Name Service (DNS, 53)

—Echo (7)

—Internet Security Association and Key Management Protocol (5)

—Mobile IP registration (434)

—IEN116 name service (obsolete, 42)

—NetBIOS datagram service (138)

—NetBIOS name service (137)

—NetBIOS session service (139)

—Internet Security Association and Key Management Protocol (45)

—Network Time Protocol (123)

—PIM Auto-RP (496)

—Routing Information Protocol (router, in.routed, 52)

—Simple Network Management Protocol (161)

—SNMP Traps (162)

—Sun Remote Procedure Call (111)

—System Logger (514)

—TAC Access Control System (49)

—Talk (517)

—Trivial File Transfer Protocol (69)

—Time (37)

—Who service (rwho, 513)

—X Display Manager Control Protocol (177)

Examples

This example shows how to configure an IPv6 ACL named acl-lab-01 with rules that permit all TCP and UDP traffic from the 2001:100::100 and 2001:200::200 ip address to the 2002:100::100 ip address:

n1000v# config t

n1000v(config)# ipv6 access-list acl-lab-01

n1000v(config-ipv6-acl)# permit tcp 2001:100::100/128 2002:100::100/128

n1000v(config-ipv6-acl)# permit udp 2001:200::200/128 2002:100::100/128

Related Commands

Command

Description

Configures a deny rule in an IPv6 ACL.

Configures an IPv6 ACL.

Configures a remark in an ACL.

Displays all IPv6 ACLs or one IPv6 ACL.

Enables collection of statistics for each entry in an ACL.

permit (MAC)

form of this command.

Syntax Description

command, which causes the device to insert the command in that numbered position in the access list. Sequence numbers maintain the order of rules within an ACL.

A sequence number can be any integer between 1 and 4294967295.

By default, the first rule in an ACL has a sequence number of 10.

If you do not specify a sequence number, the device adds the rule to the end of the ACL and assigns a sequence number that is 10 greater than the sequence number of the preceding rule.

command to reassign sequence numbers to rules.

Source MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

Destination MAC addresses that the rule matches. For details about the methods that you can use to specify this argument, see “Source and Destination” in the “Usage Guidelines” section.

(Optional) Protocol number that the rule matches. Valid protocol numbers are 0x0 to 0xffff. For listings of valid protocol names, see “MAC Protocols” in the “Usage Guidelines” section.

argument can be an integer from 0 to 7.

argument can be an integer from 1 to 4094.

Defaults

None

Command Modes

MAC ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A newly created MAC ACL contains no rules.

If you do not specify a sequence number, the device assigns a sequence number that is 10 greater than the last rule in the ACL.

When the device applies a MAC ACL to a packet, it evaluates the packet with every rule in the ACL. The device enforces the first rule that has conditions that are satisfied by the packet. When the conditions of more than one rule are satisfied, the device enforces the rule with the lowest sequence number.

Source and Destination

arguments:

- Address and mask—You can use a MAC address followed by a mask to specify a single address or a group of addresses. The syntax is as follows:

MAC-address MAC-mask

argument with the MAC address 00c0.4f03.0a72:

n1000v(config-acl)# permit 00c0.4f03.0a72 0000.0000.0000 any

argument with a MAC address for all hosts with a MAC vendor code of 00603e:

n1000v(config-acl)# permit any 0060.3e00.0000 0000.0000.0000

- Any address—You can use the any keyword to specify that a source or destination is any MAC address. For examples of the use of the any keyword, see the examples in this section. Each of the examples shows how to specify a source or destination by using the any keyword.

MAC Protocols

argument can be the MAC protocol number or a keyword. The protocol number is a four-byte hexadecimal number prefixed with 0x. Valid protocol numbers are from 0x0 to 0xffff. Valid keywords are the following:

- aarp —Appletalk ARP (0x80f3)

- appletalk —Appletalk (0x809b)

- decnet-iv —DECnet Phase IV (0x6003)

- diagnostic —DEC Diagnostic Protocol (0x6005)

- etype-6000 —Ethertype 0x6000 (0x6000)

- etype-8042 —Ethertype 0x8042 (0x8042)

- ip —Internet Protocol v4 (0x0800)

- lat —DEC LAT (0x6004)

- lavc-sca —DEC LAVC, SCA (0x6007)

- mop-console —DEC MOP Remote console (0x6002)

- mop-dump —DEC MOP dump (0x6001)

- vines-echo —VINES Echo (0x0baf)

Examples

This example shows how to configure a MAC ACL named mac-ip-filter with a rule that permits all IPv4 traffic between two groups of MAC addresses:

n1000v# config t

n1000v(config)# mac access-list mac-ip-filter

n1000v(config-mac-acl)# permit 00c0.4f00.0000 0000.00ff.ffff 0060.3e00.0000 0000.00ff.ffff ip

Related Commands

Command

Description

Configures a deny rule in a MAC ACL.

Configures a MAC ACL.

Configures a remark in an ACL.

Enables collection of statistics for each entry in an ACL.

Displays all MAC ACLs or one MAC ACL.

permit interface

command.

form of this command.

Syntax Description

List of one or more interfaces that can be accessed by users with a specified role.

Defaults

None

Command Modes

Interface configuration (config-role-interface)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Repeat this command to specify all interface lists that users assigned to this role are permitted to access.

Examples

This example shows how to specify ethernet 2/1-4 as interfaces that users assigned to this role can access:

n1000v# config t

n1000v(config)# role name network-observer

n1000v(config-role)# interface policy deny

n1000v(config-role-interface)# permit interface ethernet 2/1-4

n1000v(config-role-interface)#

This example shows how to remove the policy restrictions for ethernet 2/1-4:

n1000v# config t

n1000v(config)# role name network-observer

n1000v(config-role)# interface policy deny

n1000v(config-role-interface)# no permit interface ethernet 2/1-4

n1000v(config-role-interface)#

Related Commands

Command

Description

Specifies a user role and enters role configuration mode for the named role.

interface policy deny

Enters the interface configuration mode and denies all interface access for the role.

show role

Displays the role configuration.

ping

command.

Syntax Description

.

Hostname of destination device. The hostname is case sensitive.

Multicast ping.

.

Specifies the interface to send the multicast packet.

Specifies the slot and port number for the Ethernet interface.

Specifies a virtual interface number from 0 to 1023.

mgmt0

Specifies the management interface.

Specifies a port-channel interface in the range 1 to 4096.

Specifies a virtual Ethernet interface in the range 1 to 1048575.

(Optional) Specifies the number of transmissions to send.

Number of pings. The range is from 1 to 655350. The default is 5.

Allows an unlimited number of pings.

(Optional) Enables the do-not-fragment bit in the IPv4 header. The default is disabled.

(Optional) Specifies the interval in seconds between transmissions. The range is from 0 to 60. The default is 1 second.

(Optional) Specifies the packet size in bytes to transmit. The range is from 1 to 65468. The default is 56 bytes.

. The default is the IPv4 address for the management interface of the device.

(Optional) Specifies the nonresponse timeout interval in seconds. The range is from 1 to 60. The default is 2 seconds.

(Optional) Specifies the virtual routing and forwarding (VRF) name. The default is the default VRF.

Defaults

For the default values, see the “Syntax Description” section for this command.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to determine connectivity to another device using IPv4 addressing:

n1000v# ping 172.28.231.246 vrf management

PING 172.28.231.246 (172.28.231.246): 56 data bytes

Request 0 timed out

64 bytes from 172.28.231.246: icmp_seq=1 ttl=63 time=0.799 ms

64 bytes from 172.28.231.246: icmp_seq=2 ttl=63 time=0.597 ms

64 bytes from 172.28.231.246: icmp_seq=3 ttl=63 time=0.711 ms

64 bytes from 172.28.231.246: icmp_seq=4 ttl=63 time=0.67 ms

--- 172.28.231.246 ping statistics ---

5 packets transmitted, 4 packets received, 20.00% packet loss

round-trip min/avg/max = 0.597/0.694/0.799 ms

Related Commands

Command

Description

Determines connectivity to another device using IPv6 addressing.

pinned-sgid

form of this command.

Syntax Description

Specifies to pin control VLAN traffic to a specific sub group.

Specifies to pin packet VLAN traffic to a specific sub group.

ID number of the sub group. Range is from 0 to 31.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to pin traffic on the control VLAN to a sub group 0:

n1000v# config t

n1000v(config)# port-profile SystemProfile1

n1000v(config-port-prof)# pinned-sgid control-vlan-pinned-sgid 3

n1000v(config-port-prof)# show port-profile SystemProfile1

port-profile SystemProfile1

description:

type: ethernet

status: disabled

capability l3control: no

pinning control-vlan: 3

pinning packet-vlan: -

system vlans: 1

port-group: SystemProfile1

max ports: -

inherit:

config attributes:

switchport mode trunk

switchport trunk allowed vlan 1-5

no shutdown

evaluated config attributes:

switchport mode trunk

switchport trunk allowed vlan 1-5

no shutdown

assigned interfaces:

n1000v(config-port-prof)# copy running-config startup-config

This example shows how to pin traffic on the packet VLAN to sub group 0:

n1000v# config t

n1000v(config)# port-profile SystemProfile1

n1000v(config-port-prof)# pinned-sgid packet-vlan-pinned-sgid 0

n1000v(config-port-prof)# show port-profile name SystemProfile1

port-profile SystemProfile1

description:

type: ethernet

status: disabled

capability l3control: no

pinning control-vlan: -

pinning packet-vlan: 0

system vlans: 1

port-group:

max ports: -

inherit:

config attributes:

switchport mode access

switchport access vlan 1

switchport trunk native vlan 1

no shutdown

evaluated config attributes:

switchport mode access

switchport access vlan 1

switchport trunk native vlan 1

no shutdown

assigned interfaces:

n1000v(config-port-prof)# copy running-config startup-config

Related Commands

Command

Description

profile-name]

Displays port profile information.

Displays the running configuration of the specified port profile, including the pinning configuration.

pinning control-vlan 0

To enable pinning control-vlan 0 under MAC pinning configuration, use the pinning control-vlan 0 command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Examples

This example shows how to enable pinning control-vlan 0 under MAC pinning configuration:

n1000v(config-port-prof)# pinning control-vlan 0

Related Commands

Command

Description

Configures pinning control-vlan 0 under MAC pinning.

pinning id

command. To remove the configuration, use the no form of this command.

Syntax Description

ID number of the sub group. Range is from 0 to 31.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to pin vEthernet interfaces to sub-group 3:

n1000v(config)# config t

n1000v(config)# interface vethernet 1

n1000v(config-if)# pinning id 0

n1000v(config-if)# show running-config interface vethernet 1

version 4.0(4)SV1(2)

interface Vethernet3

service-policy type qos input policy1

pinning id 0

n1000v(config)# exit

n1000v# module vem 3 execute vemcmd show pinning

LTL IfIndex PC_LTL VSM_SGID VEM_SGID Eff_SGID

48 1b040000 304 0 0 0

n1000v(config-if)# copy running-config startup-config

Related Commands

Command

Description

Displays the pinning configuration on the specified VEM.

profile-name]

Displays port profile information.

Displays the running configuration of the specified vEthernet interface, including the pinning configuration.

Displays the running configuration of the specified port profile, including the pinning configuration.

pinning packet-vlan 0

To configure pinning packet-vlan 0 under MAC pinning, use the pinning packet-vlan 0 command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Examples

This example shows how to configure pinning packet-vlan 0 under MAC pinning.:

n1000v(config-port-prof)# pinning packet-vlan 0

Related Commands

Command

Description

Enables pinning control-vlan 0 under MAC pinning configuration.

police

form of this command.

}]]}}

}]]}}

Syntax Description

(Optional) Specifies CIR (Committed Information Rate).

.

(Optional) Specifies bits per second.

(Optional) Specifies kilobits per second.

(Optional) Specifies megabits per second.

(Optional) Specifies gigabits per second.

Specifies CIR (Committed Information Rate) percentage.

CIR percentage.

(Optional) Specifies BC (Burst Commit).

Packet burst.

(Optional) Specifies burst size in bytes.

(Optional) Specifies burst size in kilobytes.

(Optional) Specifies burst size in megabytes.

(Optional) Specifies burst interval in milliseconds.

(Optional) Specifies burst interval in microseconds.

(Optional) Specifies PIR (Peak Information Rate).

.

(Optional) Specifies bits per second.

(Optional) Specifies kilobits per second.

(Optional) Specifies megabits per second.

(Optional) Specifies gigabits per second.

(Optional) Specifies extended burst.

Extended packet burst.

(Optional) Specifies burst interval in milliseconds.

(Optional) Specifies burst interval in microseconds.

(Optional) Specifies a conform action.

Specifies packet transmission.

Specifies a precedence and transmits it.

Precedence number. The following are valid numbers:

- 0—Routine precedence

- 1—Priority precedence

- i2—Immediate precedence

- 3—Flash precedence

- 4—Flash override precedence

- 5—Critical precedence

- 6—Internetwork control precedence

- 7— Network control precedence

Specifies a DSCP (Differentiated Services Code Point) and transmits it.

DSCP number or code. The range of valid values is 1 to 63. You can also set DSCP to one of the following codes:

- af11—AF11 dscp (001010)

- af12—AF12 dscp (001100)

- af13—AF13 dscp (001110)

- af21—AF21 dscp (010010)

- af22—AF22 dscp (010100)

- af23—AF23 dscp (010110)

- af31—AF31 dscp (011010)

- af32—AF32 dscp (011100)

- af33—AF33 dscp (011110)

- af41—AF41 dscp (100010)

- af42—AF42 dscp (100100)

- af43—AF43 dscp (100110)

- cs1—CS1(precedence 1) dscp (001000)

- cs2—CS2(precedence 2) dscp (010000)

- cs3—CS3(precedence 3) dscp (011000)

- cs4—CS4(precedence 4) dscp (100000)

- cs5—CS5(precedence 5) dscp (101000)

- cs6—CS6(precedence 6) dscp (110000)

- cs7—CS7(precedence 7) dscp (111000)

- default—default dscp (000000)

- ef—EF dscp (101110)

Specifies a CoS number and transmits it.

CoS group number. The range of valid values is 0 to 7.

Specifies a discard class number and transmits it.

The discard class number. The range of valid values is 0 to 63.

Specifies a QoS group number and transmits it.

QoS group number. The range of valid values is 0 to 126.

(Optional) Specifies an exceed action.

Specifies that packets are to be dropped.

Specifies a particular value in a table or markdown map.

.

.

.

.

(Optional) Specifies a violate action.

.Specifies that packets are to be dropped.

.

.

.

.

Defaults

None

Command Modes

Policy map configuration (config-pmap-c-qos)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to control traffic rates:

n1000v# configure terminal

n1000v(config)# policy-map pm10

n1000v(config-pmap-qos)# class class-default

n1000v(config-pmap-c-qos)# police 100000 bps 10000 bytes

n1000v(config-pmap-c-qos)#

Related Commands

Command

Description

Displays the policy map configuration for all policy maps or for a specified policy map.

policy-map

form of this command.

}

}

Syntax Description

Specifies the policy map type as QoS.

Defaults

The policy map does not exist.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you create or configure a policy map, you automatically enter configure policy map mode.

Examples

This example shows how to create policy maps:

n1000v# configure terminal

n1000v(config)# policy-map pm20

n1000v(config-pmap-qos)#

This example shows how to remove policy maps:

n1000v# configure terminal

n1000v(config)# no policy-map pm20

n1000v(config)#

Related Commands

Command

Description

Displays policy map information.

policy-map type queuing

form of this command.

Syntax Description

Policy-map name. Up to 40 alphanumeric characters.

Take the action for the first class that matches.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

command is only supported for uplink ports.

Examples

This example shows how to create a type queueing policy map named my_policymap1:

n1000v# config t

n1000v(config)# policy-map type queuing my_policy1

n1000v(config-pmap-que)

This example shows how to remove the type queuing policy map named my_policymap1:

n1000v# config t

n1000v(config)# no policy-map type queuing my_policy1

Related Commands

Command

Description

Displays policy map information.

Assigns a class-based weighted fair queueing (CBWFQ) class to a specified policy map.

show policy-map type queuing

Displays all queuing policy-maps configured on the system.

port-binding

form of this command.

Syntax Description

Specifies static port binding. Port is connected when VM is powered on and disconnected when powered off. Maximum port limits are enforced.

Specifies dynamic port binding. Port is created when VM is powered on and destroyed when powered off. Maximum port limits are not enforced.

Specifies ephemeral port binding. Port is created when VM is powered on and destroyed when powered off. Max-port limits are not enforced.

auto

Dynamically adjusts the reserved ports at the vCenter Server.

expand

Dynamically increases the reserved ports at the vCenter Server.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to add static port binding to the vEthernet port-profile named accessprof:

n1000v# config t

n1000v(config)# port-profile type accessprof

n1000v(config-port-prof)# port-binding static

n1000v(config-port-prof)#

This example shows how to remove static port binding from the vEthernet port-profile named accessprof:

n1000v# config t

n1000v(config)# port-profile type accessprof

n1000v(config-port-prof)# no port-binding static

n1000v(config-port-prof)#

Related Commands

Command

Description

show port-profile name

Displays the configuration for the named port profile.

port-profile

Creates a port profile.

port-channel load-balance ethernet

form of this command.

]

]]

Syntax Description

Destination IP address and L4 port

Destination IP address, L4 port, and VLAN

Destination IP address and VLAN

Destination MAC address

Destination L4 port

Source and destination IP address and L4 port

Source and destination IP address, L4 port, and VLAN

Source and destination IP address and VLAN

Source and destination MAC address

Source and destination L4 port

Source IP address

Source IP address, L4, and VLAN

Source IP address and VLAN

Source MAC address (the default)

Source port

Source virtual port ID

VLAN only

load balance independently. If you do not specify a module, the specified algorithm is applied to all modules in the device.

Defaults

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you do not specify a module, the algorithm is applied g lobally to all port channels.

If you specify a module, the algorigthm is applied to all port channels in the specified module.

If the traffic on a port channel is going only to a single MAC address and you balance on destination MAC address, the port channel always chooses the same link in that port channel. In this case, using source addresses or IP addresses might result in better load balancing.

Examples

This example shows how to specify source port as the global algorithm for balancing load on the interfaces in channel-groups:

n1000v(config)# port-channel load-balance ethernet src-port

n1000v(config)#

The following example shows how to configure the source IP load-balancing algorithm for port channels on module 5:

n1000v# config t

n1000v(config)# port-channel load-balance ethernet source-ip module 5

Related Commands

Command

Description

Displays information on port-channel load balancing.

port-profile

form of this command.

port-profile word | type {Ethernet | vethernet} word | default {max-port <max-port-number> | port-binding {dynamic [auto] | static [auto] | ephemeral}}

Syntax Description

type

(Optional) Specify interface of type ethernet or vethernet.

Specify the port profile name. The name can be up to 80 characters in length.

word

Name of the profile (Max Size 80)

default

Configure default settings.

type

Configure type of the profile.

max-ports

Configure default max-ports.

port-binding

Configure the default port-binding behavior of the port-profile.

dynamic

Port is connected when VM is powered on and disconnected when powered off. Max-port limits are enforced.

ephemeral

Port is created when VM is powered on and destroyed when powered off. Max-port limits are not enforced.

static

Port is always connected. Max-port limits are enforced.

Defaults

Default type is vethernet

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(2)

type Ethernet or type vEthernet.

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

The port profile name must be unique for each port profile on the Cisco Nexus 1000V.

The port profile type can be Ethernet or vEthernet. Once configured, the type cannot be changed.

Defining a port profile type as Ethernet allows the port profile to be used for physical (Ethernet) ports. In the vCenter Server, the corresponding port group can be selected and assigned to physical ports (PNICs).

If a port profile is configured as an Ethernet type, then it cannot be used to configure VMware virtual ports.

Examples

This example shows how to create an Ethernet type port profile with the name AccessProf:

n1000v# configure terminal

n1000v(config)# port-profile type ethernet AccessProf

n1000v(config-port-prof)

This example shows how to remove the port profile with the name AccessProf:

n1000v# configure terminal

n1000v(config)# no port-profile AccessProf

n1000v(config)

Related Commands

Command

Description

show port-profile

Displays the port profile configuration, including assigned roles.

]

Displays the port profile configuration.

port-profile-role

Creates a port profile role for restricting access by users and groups.

]

Designates a port profile as a VMware port group.

}

Designates whether the interfaces in the port profile are to be used as access or trunking ports.

port-profile default port-binding

command.

form of this command.

}

]

Syntax Description

Port is created when you assign the port to a port group and persists through the life of the adapter. Port is always connected. Max port limits are enforced.

Port is connected when VM is powered on and disconnected when powered off. Max-port limits are enforced.

Port is created when VM is powered on and destroyed when powered off. Max-port limits are not enforced.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

- Once a vEthernet port profile has been created as a port group on the vCenter Server, you are not allowed to change its port binding type.

- You are not allowed to configure max ports for vEthernet port profiles with ephemeral port binding.

- You are not allowed to configure port binding for Ethernet type port profiles. Port binding is only available for vEthernet port profiles.

- Manual configurations on an interface are purged when the system administrator changes its port profile if either port profile is configured with ephemeral port binding. This occurs regardless of your auto purge setting.

Examples

This example shows how to configure ephemeral port binding type as the default for all new vEthernet port profiles created:

n1000v# config t

n1000v(config)# port-profile default port-binding ephemeral

n1000v(config)#

This example shows how to remove the the default port binding configuration:

n1000v# config t

n1000v(config)# no port-profile default port-binding

n1000v(config)#

Related Commands

Command

Description

Creates a port profile.

Displays the port profile configuration, including roles assigned to them.

Enables support for the restriction of port profile roles.

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Adds the inherited configuration to the new port profile as a default configuration.

Creates a port profile role.

port-profile-role

form of this command.

Syntax Description

Specify the name of the port-profile role.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

You cannot remove a port profile role if it is currently assigned to a port profile. You must first remove the role from the port profile.

Examples

This example shows how to create the adminUser port profile role:

n1000v# config t

n1000v(config)# port-profile-role adminUser

n1000v(config-port-prof-role)#

This example shows how to remove the adminUser port profile role:

n1000v# config t

n1000v(config)# no port-profile-role adminUser

n1000v(config)#

This example shows the resulting error message if you try to remove adminUser port profile role when it is still assigned to a port profile:

n1000v(config)# no port-profile-role adminUser

ERROR: Cannot remove role because it is assigned to one or more port-profiles

n1000v(config)#

Related Commands

Command

Description

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

user

Assigns a user to a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

port-security stop learning

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the DSM bit on the port:

n1000v# port-security stop learning

n1000v#

This example shows how to clear the DSM bit on the port:

n1000v# no port-security stop learning

n1000v#

Related Commands

Command

Description

module vem execute

Remotely executes commands on the Virtual Ethernet Module (VEM) from the Cisco Nexus 1000V.

show cdp neighbors

Displays the configuration and capabilities of upstream devices.

private-vlan association

form of this command.

]

Syntax Description

Adds a secondary VLAN to a private VLAN list.

Removes a secondary VLAN from a private VLAN list.

IDs of the secondary VLANs to be added or removed.

Defaults

None

Command Modes

VLAN (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command) before the private VLAN commands are visible in the CLI for configuration.

Examples

This example shows how to associate primary VLAN 202 with secondary VLAN 303:

n1000v#configure t

n1000v(config)# vlan 202

n1000v(config-vlan)# private-vlan association add 303

n1000v(config-vlan)#

Related Commands

Command

Description

Designates the private VLAN as primary.

}

Designates the private VLAN as community or isolated.

Displays the private VLAN configuration.

private-vlan { community | isolated}

form of this command.

}

}

Syntax Description

Designates the VLAN as a community private VLAN.

Designates the VLAN as an isolated private VLAN.

Defaults

None

Command Modes

VLAN (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command) before the private VLAN commands are visible in the CLI for configuration.

Examples

This example shows how to configure VLAN 303 as a community private VLAN:

n1000v#configure t

n1000v(config)# vlan 303

n1000v(config-vlan)# private-vlan community

n1000v(config-vlan)#

Related Commands

Command

Description

Designates the private VLAN as primary.

Configures an association between a primary VLAN and a secondary VLAN

Displays the private VLAN configuration.

private-vlan primary

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

VLAN (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command) before the private VLAN commands are visible in the CLI for configuration.

Examples

This example shows how to configure VLAN 202 as the primary VLAN in a private VLAN:

n1000v#configure t

n1000v(config)# vlan 202

n1000v(config-vlan)# private-vlan primary

n1000v(config-vlan)# show vlan private-vlan

Primary Secondary Type Ports

------- --------- --------------- -------------------------------------------

202 primary

n1000v(config-vlan)#

Related Commands

Command

Description

}

Designates the private VLAN as community or isolated.

Displays the private VLAN configuration.

Associates a primary and secondary private VLAN.

protocol vmware-vim

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

The VMware VI SDK is disabled.

Command Modes

SVS connection configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The VMware VI SDK is published by VMware and it allows clients to talk to VMware vCenter.

You must first create an SVS connection before you enable the VMware VI SDK.

Examples

This example shows how to enable the VMware VI SDK.:

n1000v# configure terminal

n1000v(config)# svs connection svs1

n1000v(config-svs-conn)# protocol vmware-vim

n1000v(config-svs-conn)#

Related Commands

Command

Description

Displays SVS connection information.

pwd

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to view the current directory:

n1000v# pwd

bootflash:

n1000v#

Q Commands

This chapter describes the Cisco Nexus 1000V commands that begin with Q.

qos statistics

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

QoS statistics are not recorded.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable the recording of QoS statistics:

n1000v# configure terminal

n1000v(config)# qos statistics

n1000v(config)#

Related Commands

Command

Description

Displays the policy map configuration for all policy maps or for a specified policy map.

queue-limit

form of this command.

Syntax Description

Queue size in packets.

(Optional) Packets.

Defaults

None

Command Modes

policy-map type queuing class configuration (config-pmap-c-que)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to configure the queue limit to 5000 packets:

n1000v(config-pmap-c-que)# queue-limit 5000 packets

Related Commands

Command

Description

bandwidth (policy map)

Configures the minimum guaranteed bandwidth for a specific traffic class in a QoS policy map.

R Commands

This chapter describes the Cisco Nexus 1000V commands that begin with R.

radius-server deadtime

form of this command.

Syntax Description

Number of minutes for the dead-time interval. The range is from 1 to 1440 minutes.

Defaults

0 minutes

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The dead-time interval is the number of minutes before the device checks a RADIUS server that was previously unresponsive.

Note The default idle timer value is 0 minutes. When the idle time interval is 0 minutes, periodic RADIUS server monitoring is not performed.

Examples

This example shows how to configure the global dead-time interval for all RADIUS servers to perform periodic monitoring:

n1000v# config t

n1000v(config)# radius-server deadtime 5

This example shows how to revert to the default for the global dead-time interval for all RADIUS servers and disable periodic server monitoring:

n1000v# config t

n1000v(config)# no radius-server deadtime 5

Related Commands

Command

Description

Displays RADIUS server information.

radius-server directed-request

form of this command.

radius-server directed-request

radius-server directed-request

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

during login, where vrfname is the virtual routing and forwarding (VRF) instance to use and hostname is the name of a configured RADIUS server. The username is sent to the RADIUS server for authentication.

Examples

This example shows how to allow users to send authentication requests to a specific RADIUS serve when logging in:

n1000v# config t

n1000v(config)# radius-server directed-request

This example shows how to disallow users to send authentication requests to a specific RADIUS server when logging in:

n1000v# config t

n1000v(config)# no radius-server directed-request

Related Commands

Command

Description

Displays the directed request RADIUS server configuration.

radius-server host

form of this command.

Syntax Description

RADIUS server Domain Name Server (DNS) name. The name is alphanumeric, case sensitive, and has a maximum of 256 characters.

format.

format.

(Optional) Configures the RADIUS server preshared secret key.

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the RADIUS client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text (indicated by 7) to authenticate communication between the RADIUS client and server.

Preshared key to authenticate communication between the RADIUS client and server. The preshared key can include any printable ASCII characters (white spaces are not allowed), is case sensitive, and has a maximum of 63 characters.

(Optional) Enables the generation of Protected Access Credentials (PAC) on the RADIUS Cisco Access Control Server (ACS) for use with Cisco TrustSec.

accounting

(Optional) Configures accounting.

(Optional) Configures the RADIUS server port for accounting. The range is from 0 to 65535.

(Optional) Configures the RADIUS server port for authentication. The range is from 0 to 65535.

(Optional) Configures authentication.

(Optional) Configures the number of times that the device tries to connect to a RADIUS server(s) before reverting to local authentication. The range is from 1 to 5 times and the default is 1 time.

test

(Optional) Configures parameters to send test packets to the RADIUS server.

Specifies the time interval (in minutes) for monitoring the server. The range is from 1 to 1440 minutes.

Specifies a user password in the test packets. The password is alphanumeric, case sensitive, and has a maximum of 32 characters.

Specifies a username in the test packets. The is alphanumeric, not case sensitive, and has a maximum of 32 characters.

Specifies the timeout (in seconds) between retransmissions to the RADIUS server. The default is 5 seconds and the range is from 1 to 60 seconds.

Defaults

Parameter

Default

Accounting port

1813

Authentication port

1812

Accounting

enabled

Authentication

enabled

Retransmission count

1

Idle-time

none

Server monitoring

disabled

Timeout

5 seconds

Test username

test

Test password

test

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When the idle time interval is 0 minutes, periodic RADIUS server monitoring is not performed.

Examples

This example shows how to configure RADIUS server authentication and accounting parameters:

n1000v# config terminal

n1000v(config)# radius-server host 10.10.2.3 key HostKey

n1000v(config)# radius-server host 10.10.2.3 auth-port 2003

n1000v(config)# radius-server host 10.10.2.3 acct-port 2004

n1000v(config)# radius-server host 10.10.2.3 accounting

n1000v(config)# radius-server host radius2 key 0 abcd

n1000v(config)# radius-server host radius3 key 7 1234

n1000v(config)# radius-server host 10.10.2.3 test idle-time 10

n1000v(config)# radius-server host 10.10.2.3 test username tester

n1000v(config)# radius-server host 10.10.2.3 test password 2B9ka5

Related Commands

Command

Description

Displays RADIUS server information.

radius-server key

form of this command.

Syntax Description

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the RADIUS client and server.

7

(Optional) Configures a preshared key specified in encrypted text to authenticate communication between the RADIUS client and server.

Preshared key used to authenticate communication between the RADIUS client and server. The preshared key can include any printable ASCII characters (white spaces are not allowed), is case sensitive, and has a maximum of 63 characters.

Defaults

Clear text

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to provide various scenarios to configure RADIUS authentication:

n1000v# config terminal

n1000v(config)# radius-server key AnyWord

n1000v(config)# radius-server key 0 AnyWord

n1000v(config)# radius-server key 7 public pac

Related Commands

Command

Description

Displays RADIUS server information.

radius-server retransmit

form of this command.

Syntax Description

Number of times that the device tries to connect to a RADIUS server(s) before reverting to local authentication. The range is from 1 to 5 times.

Defaults

1 retransmission

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the number of retransmissions to RADIUS servers:

n1000v# config t

n1000v(config)# radius-server retransmit 3

This example shows how to revert to the default number of retransmissions to RADIUS servers:

n1000v# config t

n1000v(config)# no radius-server retransmit 3

Related Commands

Command

Description

Displays RADIUS server information.

radius-server timeout

form of this command.

Syntax Description

Number of seconds between retransmissions to the RADIUS server. The range is from 1 to 60 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the timeout interval:

n1000v# config t

n1000v(config)# radius-server timeout 30

This example shows how to revert to the default interval:

n1000v# config t

n1000v(config)# no radius-server timeout 30

Related Commands

Command

Description

Displays RADIUS server information.

rate-mode dedicated

command.

rate-mode dedicated

no rate-mode

Syntax Description

This command has no arguments or keywords.

Command Default

Shared rate mode is the default.

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Use the rate-mode dedicated command to set the dedicated rate mode for the specified ports.

On a 32-port 10-Gigabit Ethernet module, each set of four ports can handle 10 gigabits per second (Gb/s) of bandwidth. You can use the rate-mode parameter to dedicate that bandwidth to the first port in the set of four ports or share the bandwidth across all four ports.

Note When you dedicate the bandwidth to one port, you must first administratively shut down the ports in the group, change the rate mode to dedicated, and then bring the dedicated port administratively up.

identifies the ports that are grouped together to share each 10 Gb/s of bandwidth and which port in the group can be dedicated to utilize the entire bandwidth.

Table 15-1 Dedicated and Shared Ports

Ports Groups that Can Share Bandwidth

Ports that Can be Dedicated to Each 10-Gigabit Ethernet of Bandwidth

1, 3, 5, 7

1

2, 4, 6, 8

2

9, 11, 13, 15

9

10, 12, 14, 16

10

17, 19, 21, 23

17

18, 20, 22, 24

18

25, 27, 29, 31

25

26, 28, 30, 32

26

command, the full bandwidth of 10 Gb is dedicated to one port. When you dedicate the bandwidth, all subsequent commands for the port are for dedicated mode.

Examples

This example shows how to configure the dedicated rate mode for Ethernet ports 4/17, 4/19, 4/21, and 4/23:

n1000v# config t

n1000v(config)# interface ethernet 4/17, ethernet 4/19, ethernet 4/21, ethernet 4/23

n1000v(config-if)# shutdown

n1000v(config-if)# interface ethernet 4/17

n1000v(config-if)# rate-mode dedicated

n1000v(config-if)# no shutdown

n1000v(config-if)#

Related Commands

Command

Description

show interface

record

form of the command.

Syntax Description

name

Specifies the name of a new NetFlow flow record.

Specifies a predefined NetFlow flow record that uses traditional IPv4 NetFlow collection schemes.

Specifies a predefined NetFlow flow record that uses traditional IPv4 input.

Specifies a predefined NetFlow flow record that uses traditional IPv4 output.

Specifies the NetFlow flow record that uses the protocol and ports aggregation scheme.

Specifies a NetFlow flow record that uses traditional IPv4 input with origin ASs.

Defaults

None

Command Modes

Flow monitor configuration (config-flow-monitor)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was modified to change the protocol-port attribute to netflow protocol-port.

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A flow record defines the information that NetFlow gathers, such as packets in the flow and the types of counters gathered per flow. You can define new flow records or use the pre-defined flow record.

Examples

This example shows how to configure a flow record to use a the predefined traditional IPv4 input NetFlow record:

n1000v# config t

n1000v(config)# flow monitor testmon

n1000v(config-flow-monitor)# record netflow ipv4 original-input

n1000v(config-flow-monitor)#

This example shows how to remove the predefined traditional IPv4 input NetFlow flow record configuration:

n1000v# config t

n1000v(config)# flow monitor testmon

n1000v(config-flow-monitor)# no record netflow ipv4 original-input

n1000v(config-flow-monitor)#

Related Commands

Command

Description

Displays NetFlow monitor configuration information.

Displays NetFlow record configuration information.

reload

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command instead.

command to preserve any configuration changes made since the previous reboot or restart.

Examples

This example shows how to reload both the primary and secondary VSM:

n1000v(config)# reload

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from Command Line Interface

Related Commands

Command

Description

Reloads the specified VSM (1 or 2) in a redundant pair.

reload module

command.

Syntax Description

The module number:

- 1 (primary VSM)

- 2 (secondary VSM)

(Optional) Reboots the specified module to force NetBoot and image download.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command instead.

command to preserve any configuration changes made since the previous reboot or restart.

Examples

This example shows how to reload VSM 2, the secondary VSM in a redundant pair:

n1000v# reload module 2

!!!WARNING! there is unsaved configuration!!!

This command will reboot the system. (y/n)? [n] y

2010 Sep 3 11:33:35 bl-n1000v %PLATFORM-2-PFM_SYSTEM_RESET: Manual system restart from Command Line Interface

Related Commands

Command

Description

Displays information about the software version.

reload

Reboots both the primary and secondary VSM.

remote

form of this command.

}

}

Syntax Description

Specifies an IP address.

IPv4 address. The format is A.B.C.D.

Specifies the remote host name.

Host name. The range of valid values is 1 to 128.

Defaults

None

Command Modes

SVS connection configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to connect to a remote machine:

n1000v# configure terminal

n1000v(config)# svs connection svsconn1

n1000v(config-svs-conn)# remote hostname server1

n1000v(config-svs-conn)#

Related Commands

Command

Description

Displays SVS information.

remote-as <AS>

To specify Autonomous System Number of the neighbor, use the remote-as <AS> command.

remote-as <AS>

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure Autonomous System Number of the neighbor:

n1000v(config-router-neighbor)# remote-as 1

Related Commands

Command

Description

Connects to remote machines.

resequence

command.

Syntax Description

Indicates resequencing of an IP access-list.

mac

Indicates resequencing of a MAC access-list.

Indicates resequencing of an access list.

Indicates resequencing of a time-range.

(Optional) List name.

(Optional) Starting sequence number.

(Optional) Step to increment the sequence number.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to resequence the first entry in the MAC ACL named aclOne:

n1000v# configure terminal

n1000v(config)# resequence mac access-list aclOne 1 2

n1000v(config)#

Related Commands

Command

Description

Displays ACLs.

retain route-target all

To retain all the routes regardless of Target-VPN community, use the retain route-target all command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to retain all the routes regardless of Target-VPN community:

n1000v(config-router-af)# retain route-target all

Related Commands

Command

Description

Displays ACLs.

rmdir

command.

Syntax Description

:

(Optional) Name of a file system. The name is case sensitive.

. The identifiers are case sensitive.

Name of a directory. The name is case sensitive.

Defaults

Removes the directory from the current working directory.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to remove the my_files directory:

n1000v# rmdir my_files

Related Commands

Command

Description

Changes the current working directory.

Displays the directory contents.

Displays the name of the current working directory.

role name

form of this command.

Syntax Description

Creates a user role of this name.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to create a role named UserA:

n1000v # config t

n1000v(config)# role name UserA

This example shows how to remove the UserA role:

n1000v(config)# no role UserA

Related Commands

Command

Description

Displays the available user roles and their rules.

Denies users assigned to this role access to all interfaces unless specifically permitted.

Specifies the interface(s) that users assigned to this role can access.

vlan policy

Denies users assigned to this role access to all VLANs unless specifically permitted.

Specifies the VLAN(s) that users assigned to this role can access.

route-reflector-client

To configure a neighbor as Route reflector client, use the route-reflector-client command.

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure a neighbor as Route reflector client:

n1000v(config-router-neighbor-af)# route-reflector-client

Related Commands

Command

Description

Displays the available user roles and their rules.

Specifies the VLAN(s) that users assigned to this role can access.

router bgp <AS>

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure Border Gateway Protocol (BGP) with Autonomous system number:

n1000v(config)# router bgp <AS>

Related Commands

Command

Description

Displays the available user roles and their rules.

router-id A.B.C.D

To manually specify the IP address to use as router-id, use the router-id A.B.C.D command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to manually specify the IP address to use as router-id:

n1000v(config-router)# router-id 17.17.17.31

Related Commands

Command

Description

Configures Border Gateway Protocol (BGP) with Autonomous system number.

rule

form of this command.

}

Syntax Description

Number that identifies this rule.

Indicates that the user is denied the ability to perform a function.

Indicates that the user is permitted to perform a function.

Specifies whether the assigned user has read access.

Specifies whether the assigned user has read-write access.

feature

(Optional) Specifies a feature for the rule.

Name of an individual feature, such as syslog or TACACS+, whose access can be defined in this rule.

(Optional) Specifies a feature type.

Grouping of features whose access can be defined in a rule.

Specifies a command for this rule.

Single command, or group of commands collected in a regular expression, whose access can be defined in a rule.

Defaults

None

Command Modes

Role configuration (config-role)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

specifies the order in which the rule is applied, in descending order. For example, if a role has three rules, rule 3 is applied first, rule 2 is applied next, and rule 1 is applied last. You can configure up to 256 rules for each role.

Examples

command:

n1000v# config t

n1000v(config)# role name UserA

n1000v(config-role)# rule 1 deny command clear users

n1000v(config-role)#

This example shows how to remove the rule 1 configuration:

n1000v# config t

n1000v(config)# role name UserA

n1000v(config-role)# no rule 1

Related Commands

Command

Description

username

Configures information about the user.

show role

Displays the user role configuration.

run-script

command.

Syntax Description

The name of the file containing the command script. The name is case sensitive.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to run a command script that is saved in the Sample file on the Volatile file system.

n1000v(config)# run-script volatile:Sample

n1000v(config)#

Related Commands

Command

Description

Changes the current working directory.

Copies files.

Displays the contents of the working directory.

Displays the name of the present working directory (pwd).

S Commands

This chapter describes the Cisco Nexus 1000V commands that begin with S.

segment distribution mac

To configure MAC distribution mode globally and per bridge domain.

Syntax Description

Configure MAC distribution mode.

Defaults

None

Command Modes

Global configuration (config)

Bridge Domain configuration (config-bd)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

This command specifes the mac distribution mode globally and per bridge-domain

Examples

This example shows how to configure the mac distribution mode globally:

n1000v(config)# segment mode unicast-only

n1000v(config)# segment distribution mac

This example shows how to configure the mac distribution mode per bridge-domain:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# segment mode unicast-only

n1000v(config-bd)# segment distribution mac

Related Commands

Command

Description

Configures the segment mode unicast-only globally and per bridge-domain.

segment id

form of this command.

Syntax Description

The segment id of the VXLAN. The valid values are 4096 to 16777215. (Values 1 - 4095 are reserved for VLANs)

Defaults

None

Command Modes

Bridge Domain configuration (config-bd)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Only one Bridge Domain can use a particular segment id value.

Examples

This example shows how to specify a segment ID to a VXLAN:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# segment id 20480

n1000v(config-bd)#

Related Commands

Command

Description

Displays bridge domain information.

segment mode unicast-only

To configure unicast mode globally and per bridge domain with no MAC distribution enabled.

Syntax Description

Specifies the segment mode in unicast only.

Defaults

None

Command Modes

Global configuration (config)

Bridge Domain configuration (config-bd)

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

This command configures the segment mode as unicast-only mode globally and per bridge-domain.

Examples

This example shows how to configure the segment mode unicast-only globally:

n1000v(config)# segment mode unicast-only

This example shows how to configure the segment mode unicast-only per bridge-domain:

n1000v(config)# bridge-domain tenant-red

n1000v(config-bd)# segment mode unicast-only

Related Commands

Command

Description

Configure MAC distribution mode globally and per bridge-domain.

segment-id

The segment id of the VXLAN.

segment transport-mode native

To set the transport-mode to native (VDP) at the global configuration level on the Cisco Nexus 1000V, use the segment transport-mode native command.

Syntax Description

Configures the segment transport mode to native (VDP) to enable network-based overlays.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

The default segment transport-mode is set to VXLAN. Use this command to set it to native (VDP) at the global configuration level, to employ network based overlays.

Examples

This example shows the output where the segment transport-mode is set to native globally.:

n1000V(config)# segment transport-mode native

n1000V(config)# no segment transport-mode native

This example shows the running configuration for the segment transport-mode set to native globally.

switch # show run

!Command: show running-config

version 4.2(1)SV2(2.2)

svs switch edition essential

feature telnet

feature segmentation

no segment mode unicast-only

segment transport-mode native

feature evb

feature fabric forwarding

...

Related Commands

Command

Description

Specifies the segmentation transport-mode for a bridge-domain configuration.

segment-id

The segment id of the VXLAN.

segment transport-mode

To configure the transport-mode to native (VDP) or VXLAN for a bridge-domain on the Cisco Nexus 1000V, use the segment transport-mode native command.

Syntax Description

Sets the transport-mode to VDP to employ the network based overlays.

VXLAN

Set the transport-mode to VXLAN

Defaults

The segment transport mode (VXLAN or native) set globally by executing the segment transport-mode native command.

Command Modes

bridge-domain configuration (bd-config)

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows running configuration for a bridge-domain with the segment transport-mode set to native(VDP) :

n1000v # show run bridge-domain

version 4.2(1)SV2(2.2)

feature segmentation

no segment mode unicast-only

bridge-domain seg22222

segment id 22222

group 239.1.1.1

segment transport-mode native

fabric forwarding mode proxy-gateway

Related Commands

Command

Description

Specifies the segmentation transport-mode to native globally.

show running-config bridge-domain

Displays the running configuration for bridge-domain..

send

command.

Syntax Description

Message.

Specifies a specific session.

Device type.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to send a message to an open session:

n1000v# send session sessionOne testing

n1000v#

Related Commands

Command

Description

Displays a banner.

send-community extended

To send extended community attribute to the neighbor, use the send-community extended command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to send extended community attribute to the neighbor:

n1000v(config-router-neighbor-af)# send-community extended

Related Commands

Command

Description

Displays a banner.

server

form of this command.

}

}

Syntax Description

IPV4 address of the RADIUS server.

server-name

Name that identifies the RADIUS server.

Defaults

None

Command Modes

Radius configuration (config-radius)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the RADIUS server as a member of the RADIUS server group:

n1000v# config t

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# server 10.10.1.1

n1000v(config-radius)#

This example shows how to remove the server configuration:

n1000v# config t

n1000v(config)# aaa group server radius RadServer

n1000v(config)# no server 10.10.1.1

Related Commands

Command

Description

Creates a RADIUS server group and enters the RADIUS server group configuration submode for that group.

deadtime

Configures the monitoring dead time.

use-vrf

Specifies the Virtual Routing and Forwarding (VRF) to use to contact the servers in the server group.

show radius-server groups

Displays the RADIUS server group configuration.

service ha-cluster clusterNo switchover

Triggers a switchover from an Active service module to a Standby service module paired in HA.

Syntax Description

HA cluster number (1-8).

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use this command to initiate a switchover between service modules in HA.

Examples

This example shows how to configure a switchover of an active service module on a HA cluster:

n1000v# config t

n1000v(config)# service ha-cluster 1 switchover

Note Command is applicable for service modules configured in HA.

Related Commands

Command

Description

Defines a place holder for mappings.

service mod

Configure the service module in high availabilty (HA) pair.

service <mod> update port-profile type ethernet name <Service module uplink port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway uplink.

service <mod> update port-profile type vethernet name <Service module VTEP port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway VTEP.

service instance

Defines a place holder for mappings. The range is from 1 to 4096.

Syntax Description

ID of the service instance.

Defaults

None.

Command Modes

Port-profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

command is a place holder for mappings.

Examples

This example shows how to configure a service instance:

n1000v# config t

n1000v(config)# port-profile type vethernet csr-access

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# switchport access bridge-domain bd-701

n1000v(config-port-prof)# service instance 10

n1000v(config-port-prof-srv)# encapsulation dot1q 600 bridge-domain bd-600

n1000v(config-port-prof-srv)# encapsulation dot1q 601 bridge-domain bd-601

n1000v(config-port-prof-srv)# encapsulation dot1q 602 bridge-domain bd-602

n1000v(config-port-prof-srv)# no shutdown

n1000v(config-port-prof-srv)# state enabled

n1000v(config-port-prof)# end

This example shows how to remove the service instance:

n1000v# config t

n1000v(config)# port-profile type vethernet csr-access

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# switchport access bridge-domain bd-701

n1000v(config-port-prof)# no service instance 10

Note Port profiles containing the service instance keyword cannot be used for a non-VXLAN gateway module.

Related Commands

Command

Description

Defines a place holder for mappings. The range is from 1 to 4096.

Defines a place holder for remove mappings. The range is from 1 to 4096.

service mod

Configure the service module in high availability (HA) pair.

[no] service modNo2 role secondary ha-cluster clusterNo

[no] service mod

Syntax Description

Gateway module number

primary

Configures service module in HA with the specified cluster-id and role as Primary.

secondary

Configures service module in HA with the specified cluster-id and role as Secondary.

clusterNo

Configures the service module in HA belonging to a unique Cluster-id.

standalone

Configure the service module as a Standalone mode.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Roles can be pre-configured to module numbers in the VSM. When a VXLAN gateway is attached to the

VSM on that module, it inherits the Role and Status of that VSM.

Examples

:

n1000v# config t

n1000v(config)# service 4 role standalone

n1000v# config t

n1000v(config)# service 4 role primary ha-cluster 1

n1000v# config t

n1000v(config)# service 5 role secondary ha-cluster 1

This example shows how to remove the HA related configuration:

n1000v# config t

n1000v(config)# no service mod

Related Commands

Command

Description

Defines a place holder for mappings.

service ha-cluster clusterNo switchover

Triggers a switchover from an Active service module to a Standby service module paired in HA.

service <mod> update port-profile type ethernet name <Service module uplink port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway uplink.

service <mod> update port-profile type vethernet name <Service module VTEP port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway VTEP.

service <mod> update port-profile type ethernet name <Service module uplink port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway uplink.

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

service module number

Uplink port-profile of the service module.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Port-profile name of the service module/VXLAN gateway uplink are changed by using this command.

Examples

This example shows how to change the currently assigned port-profile name of the service module/VXLAN gateway uplink.

n1000v(config)# service 37 update port-profile type ethernet name Uplink-All-VXGW

Related Commands

Command

Description

To change the currently assigned port-profile name of the service module/VXLAN gateway VTEP.

service <mod> update port-profile type vethernet name <Service module VTEP port-profile>

To change the currently assigned port-profile name of the service module/VXLAN gateway VTEP.

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

service module number

VTEP port-profile of the service module.

Defaults

None.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Port-profile name of the service module/VXLAN gateway VTEP are changed by using this command.

Examples

This example shows how to change the currently assigned port-profile name of the service module/VXLAN gateway VTEP.

n1000v (config)# service 37 update port-profile type ethernet name vmknic_vtep14_vlan1546

Related Commands

Command

Description

To change the currently assigned port-profile name of the service module/VXLAN gateway uplink.

service-policy

form of this command.

]}}

]}}

Syntax Description

Specifies an input service policy.

Policy name. The range of valid values is 1 to 40.

(Optional) Specifies no statistics.

Specifies an output service policy.

Specifies a QoS service policy.

Defaults

None

Command Modes

Interface configuration (config-if)

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Examples

This example shows how to add an input QoS service policy called sp10 to vEthernet interface 10 with no statistics:

n1000v# configure terminal

n1000v(config)# interface vethernet 10

n1000v(config-if)# service-policy type qos input sp10 no-stats

n1000v(config-if)#

vEthernet interface 10:

n1000v# configure terminal

n1000v(config)# interface vethernet 10

n1000v(config-if)# no service-policy type qos input sp10 no-stats

n1000v(config-if)#

Related Commands

Command

Description

Displays interface configuration information.

interface vethernet

Creates a vEthernet interface configuration.

port-profile

Creates a port profile configuration.

service-port

form of this command.

}]

Syntax Description

Inside Network

Outside Network

(Optional) Action to be taken if service port is down.

- drop : drops packets

- forward : forwards packets (the default)

Defaults

forward default-action

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

If a port profile without a service port is configured on an SVM, it will flood the network with packets.

When configuring a port profile on an SVM, first bring the SVM down, This prevents a port-profile that is mistakenly configured without a service port from flooding the network with packets. The SVM can be returned to service after the configuration is complete and verified.

Examples

This example shows how to configure an inside interface on a VSD port profile that drops packets if the service port is down:

n1000v# config t

n1000v(config)# port-profile svm_vsd1_in

n1000v(config-port-prof)# service-port inside default-action drop

n1000v(config-port-prof)#

This example shows how to remove a service port configuration:

n1000v# config t

n1000v(config)# port-profile svm_vsd1_in

n1000v(config-port-prof)# no service-port

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays a list of the VSDs currently configured in the VSM, including VSD names and port profiles.

session-limit

form of this command.

Syntax Description

Number of VSH sessions. The range of valid values is 1 to 64

Defaults

No limit is set.

Command Modes

Line configuration (config-line)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to limit the number of VSH sessions:

n1000v# configure terminal

n1000v(config)# line vty

n1000v(config-line)# session-limit 10

n1000v(config-line)#

This example shows how to remove the limit:

n1000v# configure terminal

n1000v(config)# line vty

n1000v(config-line)# no session-limit 10

n1000v(config-line)#

set

form of this command.

}}}}

}}}}

Syntax Description

Specifies IEEE 802.1Q CoS (Class of Service).

CoS value. The range of valid values is 0 to 7.

Specifies DSCP (Differentiated Services Code Point) in IPv4 and IPv6 packets.

(Optional) Specifies DSCP in tunnel encapsulation.

DSCP value.

Precedence in IP(v4) and IPv6 packets.

IP Precedence value.

.

Discard class + Discard class value.

Qos-group + Qos-group value.

Table defining mapping from input to output + Table-map name.

IEEE 802.1Q class of service.

Cos to DSCP Mutation map.

Cos to Precedence Mutation map.

Cos to Discard Class Mutation map.

DSCP in IP(v4) and IPv6 packets.

DSCP to COS Mutation map.

Precedence in IP(v4) and IPv6 packets.

DSCP to Precedence Mutation map.

Discard class.

DSCP to Discard Class Mutation map.

Precedence in IP(v4) and IPv6 packets.

IEEE 802.1Q class of service.

Precedence to COS Mutation map.

DSCP in IP(v4) and IPv6 packets.

Precedence to DSCP Mutation map.

Precedence to Discard Class Mutation map.

Discard class.

Discard Class to COS Mutation map.

Discard Class to DSCP Mutation map.

Discard Class to Precedence Mutation map.

Defaults

None

Command Modes

Policy map class configuration (config-pmap-c-qos)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set class attributes:

n1000v# configure terminal

n1000v(config)# policy-map pm1

n1000v(config-pmap-qos)# class class-default

n1000v(config-pmap-c-qos)# set qos-group 1

n1000v(config-pmap-c-qos)#

This example shows how to remove class attributes:

n1000v# configure terminal

n1000v(config)# policy-map pm1

n1000v(config-pmap-qos)# class class-default

n1000v(config-pmap-c-qos)# no set qos-group 1

n1000v(config-pmap-c-qos)#

Related Commands

Command

Description

Displays policy maps.

setup

command.

setup

Syntax Description

This command has no arguments or keywords, but the Basic System Configuration Dialog prompts you for complete setup information (see the example below).

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The Basic System Configuration Dialog assumes the factory defaults. Keep this in mind when using it to modify an existing configuration.

All changes made to your configuration are summarized for you at the completion of the setup sequence with an option to save the changes or not.

You can exit the setup sequence at any point by pressing Ctrl-C.

Examples

This example shows how to use the setup command to create or modify a basic system configuration:

n1000v# setup

Enter the domain id<1-4095>: 400

Enter HA role[standalone/primary/secondary]: standalone

[########################################] 100%

---- Basic System Configuration Dialog ----

This setup utility will guide you through the basic configuration of

the system. Setup configures only enough connectivity for management

of the system.

*Note: setup is mainly used for configuring the system initially,

when no configuration is present. So setup always assumes system

defaults and not the current system configuration values.

Press Enter at anytime to skip a dialog. Use ctrl-c at anytime

to skip the remaining dialogs.

Would you like to enter the basic configuration dialog (yes/no): y

Create another login account (yes/no) [n]: n

Configure read-only SNMP community string (yes/no) [n]: n

Configure read-write SNMP community string (yes/no) [n]: n

Enter the switch name : n1000v

Continue with Out-of-band (mgmt0) management configuration? (yes/no) [y]:

Mgmt0 IPv4 address :

Configure the default gateway? (yes/no) [y]: n

Configure advanced IP options? (yes/no) [n]:

Enable the telnet service? (yes/no) [y]:

Enable the ssh service? (yes/no) [n]:

Configure the ntp server? (yes/no) [n]:

Configure vem feature level? (yes/no) [n]:

Configure svs domain parameters? (yes/no) [y]:

Enter SVS Control mode (L2 / L3) : l2

Invalid SVS Control Mode

Enter SVS Control mode (L2 / L3) : L2

Enter control vlan <1-3967, 4048-4093> : 400

Enter packet vlan <1-3967, 4048-4093> : 405

The following configuration will be applied:

switchname n1000v

feature telnet

no feature ssh

svs-domain

svs mode L2

control vlan 400

packet vlan 405

domain id 400

vlan 400

vlan 405

Would you like to edit the configuration? (yes/no) [n]:

Use this configuration and save it? (yes/no) [y]: n

n1000v#

Related Commands

Command

Description

Displays the running configuration.

shutdown (VLAN)

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

no shutdown

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

You cannot shut down the default VLAN, VLAN1, or VLANs 1006 to 4094.

Examples

This example shows how to shutdown switching on VLAN 10:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)# shutdown

n1000v(config-vlan)#

This example shows how to turn on switching on VLAN 10:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)# no shutdown

n1000v(config-vlan)#

Related Commands

Command

Description

Displays VLAN information.

vlan

Creates a VLAN configuration.

shutdown (interface)

form of this command.

]

]

Syntax Description

(Optional) Administratively enables or disables an interface.

Defaults

No shutdown

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

This command shuts down the interface. No traffic passes and the interface displays as administratively down.

Examples

This example shows how to administratively disable Ethernet interface 3/1:

n1000v# config t

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# shutdown

n1000v(config-if)#

This example shows how to administratively enable Ethernet interface 3/1:

n1000v# config t

n1000v(config)# interface ethernet 3/1

n1000v(config-if)# no shutdown

n1000v(config-if)#

Related Commands

Command

Description

Displays the interface configuration.

interface ethernet

Creates an Ethernet interface configuration.

interface vethernet

Creates a vEthernet interface configuration.

shutdown (port profile)

form of this command.

]

]

Syntax Description

(Optional) Administratively enables or disables all ports in the profile.

Defaults

all ports administratively disabled

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

This command administratively disables all ports in the profile. No traffic passes and the ports display as administratively down.

Examples

This example shows how to administratively enable all ports in the TrunkProf port profile:

n1000v# config t

n1000v(config)# port-profile TrunkProf

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)#

This example shows how to administratively disable all ports in the TrunkProf port profile:

n1000v# config t

n1000v(config)# port-profile TrunkProf

n1000v(config-port-prof)# shutdown

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays the named port profile configuration.

port-profile

Creates a port profile configuration.

sleep

command.

Syntax Description

Sleep time, in seconds. The range of valid values is 0 to 2147483647.

Defaults

Sleep time is not set.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

to 0, sleep is disabled.

Examples

This example shows how to set a sleep time:

n1000v# sleep 100

n1000v#

This example shows how to disable sleep:

n1000v# sleep 0

n1000v#

snmp-server aaa-user cache-timeout

form of this command.

Syntax Description

Length of the time for the user configuration to remain in the local cache. The range is 1 to 86400 seconds.

Defaults

The default timeout is 3600 seconds.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the AAA-synchronized user configuration to stay in the local cache for 1200 seconds:

n1000v# config t

n1000v(config)# snmp-server aaa-user cache-timeout 1200

This example shows how to revert back to the default value of 3600 seconds:

n1000v# config t

n1000v(config)# no snmp-server aaa-user cache-timeout 1200

Related Commands

Command

Description

Displays SNMP information.

snmp-server contact

Configures sysContact, (the SNMP contact).

snmp-server protocol enable

Enables the SNMP protocol.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server community

form of this command.

]

Syntax Description

SNMP community string, which identifies the community.

(Optional) Specifies a group to which this community belongs.

Name that identifies an existing group.

(Optional) Specifies read-only access for this community.

(Optional) Specifies read-write access for this community.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Usage Guidelines

You can create SNMP communities for SNMPv1 or SNMPv2c.

Examples

This example shows how to configure read-only access for the SNMP community called public:

n1000v# config t

n1000v(config)# snmp-server community public ro

This example shows how to remove the SNMP community called public:

n1000v# config t

n1000v(config)# no snmp-server community public

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact, (the SNMP contact).

snmp-server protocol enable

Enables SNMP.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server community

Creates an SNMP community string and assigns access privileges for the community.

snmp-server contact

command.

form of this command.

Syntax Description

(Optional) SNMP contact name (sysContact), which can contain a maximum of 32 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You can create SNMP communities for SNMPv1 or SNMPv2c.

Examples

This example shows how to configure the sysContact to be Admin:

n1000v# config t

n1000v(config)# snmp-server contact Admin

This example shows how to remove the sysContact:

n1000v# config t

n1000v(config)# no snmp-server contact

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server protocol enable

Enables SNMP.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server globalEnforcePriv

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enforce SNMP message encryption for all users:

n1000v# config t

n1000v(config)# snmp-server mib globalEnforcePriv

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact, (the SNMP contact).

snmp-server protocol enable

Enables SNMP.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server host

form of this command.

]

]

Syntax Description

IPv4 address, IPv6 address, or DNS name of the SNMP notification host.

Specifies Inform messages to this host.

Specifies Traps messages to this host.

Specifies the SNMP version to use for notification messages.

Specifies SNMPv1 as the version.

Specifies SNMPv2c as the version.

Specifies SNMPv3 as the version.

(Optional) Specifies (for SNMPv3) the authNoPriv Security Level.

(Optional) Specifies (for SNMPv3) the noAuthNoPriv Security Level.

(Optional) Specifies (for SNMPv3) the authPriv Security Level.

SNMPv1/v2c community string or SNMPv3 user name. The community string can be any alphanumeric string up to 255 characters.

(Optional) Specifies an existing UDP port.

Number that identifies the UDP port of the notification host. The range is 0 to 65535.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(1)

This command was introduced.

Examples

This example shows how to configure the host receiver, 192.0.2.1, for SNMPv1 traps:

n1000v# config t

n1000v(config)# snmp-server host 192.0.2.1 traps version 1 public

This example shows how to remove the configuration:

n1000v# config t

n1000v(config)# no snmp-server host 192.0.2.1 traps version 1 public

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact, (the SNMP contact).

snmp-server protocol enable

Enables SNMP.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server location

command.

form of this command.

Syntax Description

(Optional) SNMP location name (sysLocation), which can contain a maximum of 32 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure the sysLocation to be Lab-7:

n1000v# config t

n1000v(config)# snmp-server location Lab-7

This example shows how to remove the sysLocation:

n1000v# config t

n1000v(config)# no snmp-server location

Related Commands

Command

Description

Displays SNMP information.

Configures how long the AAA-synchronized user configuration stays in the local cache.

Configures sysContact (the SNMP contact).

Enables SNMP.

Enforces SNMP message encryption for all users.

Configures a host receiver for SNMP traps or informs.

Enables a one-time authentication for SNMP over a TCP session.

Configures an SNMP user with authentication and privacy parameters.

snmp-server protocol enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

This command is enabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable SNMP protocol operations:

n1000v# config t

n1000v(config)# snmp-server protocol enable

This example shows how to disable SNMP protocol operations:

n1000v# config t

n1000v(config)# no snmp-server protocol enable

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact (the SNMP contact).

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server tcp-session

form of this command.

]

Syntax Description

(Optional) Enables one-time authentication for SNMP over the entire TCP session (rather than on a per-command basis).

Defaults

This command is disabled by default.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable one-time authentication for SNMP over TCP:

n1000v# config t

n1000v(config)# snmp-server tcp-session auth

This example shows how to disable one-time authentication for SNMP over TCP:

n1000v# config t

n1000v(config)# no snmp-server tcp-session

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact, (the SNMP contact).

snmp-server protocol enable

Enables SNMP.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server user

Configures an SNMP user with authentication and privacy parameters.

snmp-server user

form of this command.

]]

Syntax Description

Name of a user who can access the SNMP engine.

(Optional) Enables one-time authentication for SNMP over a TCP session

(Optional) Specifies HMAC MD5 algorithm for authentication.

sha

(Optional) Specifies HMAC SHA algorithm for authentication.

Authentication passphrase for this user. The passphrase can be any case-sensitive alphanumeric string up to 64 characters.

priv

(Optional) Specifies encryption parameters for the user.

aes-128

(Optional) Specifies a 128-byte AES algorithm for privacy.

Encryption passphrase for this user. The passphrase can be any case-sensitive alphanumeric string up to 64 characters.

(Optional) Specifies the engineID for configuring the notification target user (for V3 informs).

Number that identifies the engineID, in a 12-digit, colon-separated decimal format.

(Optional) Specifies the passphrase as any case-sensitive alphanumeric string up to 130 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to provide one-time SNMP authorization for the user, Admin, using the HMAC SHA algorithm for authentication:

n1000v# config t

n1000v(config)# snmp-server user Admin auth sha abcd1234 priv abcdefgh

This example shows how to deny a user access to the SNMP engine:

n1000v# config t

n1000v(config)# no snmp-server user Admin

Related Commands

Command

Description

Displays SNMP information.

snmp-server aaa-user cache-timeout

Configures how long the AAA-synchronized user configuration stays in the local cache.

snmp-server contact

Configures sysContact (the SNMP contact).

snmp-server protocol enable

Enables SNMP.

snmp-server globalEnforcePriv

Enforces SNMP message encryption for all users.

snmp-server host

Configures a host receiver for SNMP traps or informs.

snmp-server location

Configures sysLocation (the SNMP location).

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

snmp trap link-status

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

CLI interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command is enabled by default.

Examples

This example shows how to enable SNMP link-state traps for the interface:

n1000v# config t

n1000v(config)# interface veth 2

n1000v(config-if)# snmp trap link-status

n1000v(config-if)#

This example shows how to disable SNMP link-state traps for the interface:

n1000v# config t

n1000v(config)# interface veth 2

n1000v(config-if)# no snmp trap link-status

n1000v(config-if)#

Related Commands

Command

Description

interface vethernet

Creates a virtual Ethernet interface and enters interface configuration mode.

Enables all SNMP notifications.

snmp-server tcp-session

Enables a one-time authentication for SNMP over a TCP session.

source-interface

form of this command.

Syntax Description

Specifies the interface type.

- loopback = Loopback interface

- mgmt = Management interface

- null = Null interface

- port-channel = Port Channel interface

Specifies the interface ID, such as slot/port or number.

- loopback = Virtual interface number from 0 to 1023

- mgmt = Management interface 0

- null = Null interface 0

- port-channel = Port channel number from 1 to 4096

Defaults

None

Command Modes

RADIUS server group configuration (config-radius)

TACACS+ server group configuration (config-tacacs+)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to specify source interface mgmt0 to reach the RADIUS server for the RadServer RADIUS server group:

n1000v # configure terminal

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# source-interface mgmt0

n1000v(config-radius)#

This example shows how to remove the source interface from the configuration:

n1000v # configure terminal

n1000v(config)# aaa group server radius RadServer

n1000v(config-radius)# no source-interface

n1000v(config-radius)#

Related Commands

Command

Description

Creates a RADIUS server group.

Creates a TACACS+ server group.

Displays the RADIUS server group configuration.

Displays the TACACS+ server group configuration.

source mgmt (NetFlow)

form of this command.

Syntax Description

Adds the mgmt 0 interface to the flow exporter.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The mgmt0 interface is the only interface that can be added to the flow exporter.

Examples

This example shows how to add source management interface 0 to the ExportTest flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# source mgmt 0

This example shows how to remove source management interface 0 from the ExportTest flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no source mgmt 0

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

spanning-tree bpduguard <enable | disable>

To configure BPDU guard for VETH or Port-profile, use the spanning-tree bpduguard <enable | disable> command.

spanning-tree bpduguard <enable | disable>

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to configure BPDU guard for VETH or Port-profile:

n1000v# conf t

n1000v(config)# interface vethernet 3

n1000v(config-if)# spanning-tree bpduguard enable

n1000v# conf t

n1000v(config)# interface vethernet 3

n1000v(config-if)# spanning-tree bpduguard disable

Related Commands

Command

Description

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

spanning-tree port type edge bpduguard default

To enable bpduguard globally, use the spanning-tree port type edge bpduguard default command.

spanning-tree port type edge bpduguard default

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any.

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to enable bpduguard globally:

n1000v config t

n1000v(config)# spanning-tree port type edge bpduguard default

Related Commands

Command

Description

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

speed

form of this command.

]]}

]]}]

Syntax Description

Port speed on the interface, in Mbps.

Sets the interface to autonegotiate the speed with the connecting port.

(Optional) Specifies a speed of 10 Mbps.

(Optional) Specifies a speed of 100 Mbps.

(Optional) Specifies a speed of 1000 Mbps.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you configure an Ethernet port speed to a value other than auto (for example, 10, 100, or 1000 Mbps), you must configure the connecting port to match. Do not configure the connecting port to negotiate the speed.

Examples

This example shows how to set the speed of Ethernet port 1 on the module in slot 3 to 1000 Mbps:

n1000v config t

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# speed 1000

This example shows how to automatically set the speed to auto:

n1000v config t

n1000v(config)# interface ethernet 2/1

n1000v(config-if)# no speed 1000

Related Commands

Command

Description

Specifies the interface that you are configuring.

duplex

Specifies the duplex mode as full, half, or autonegotiate.

show interface

Displays the interface status, which includes the speed and duplex mode parameters.

ssh

command.

Syntax Description

(Optional) Username for the SSH session. The user name is not case sensitive.

IPv4 address of the remote device.

Hostname of the remote device. The hostname is case sensitive.

(Optional) Specifies the virtual routing and forwarding (VRF) name to use for the SSH session. The VRF name is case sensitive.

Defaults

Default VRF

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The NX-OS software supports SSH version 2.

Examples

This example shows how to start an SSH session:

n1000v# ssh 10.10.1.1 vrf management

The authenticity of host '10.10.1.1 (10.10.1.1)' can't be established.

RSA key fingerprint is 9b:d9:09:97:f6:40:76:89:05:15:42:6b:12:48:0f:d6.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '10.10.1.1' (RSA) to the list of known hosts.

User Access Verification

Password:

Related Commands

Command

Description

Clears SSH sessions.

Enables the SSH server.

ssh key

form of this command.

Syntax Description

Specifies the Digital System Algrorithm (DSA) SSH server key.

(Optional) Forces the replacement of an SSH key.

Specifies the Rivest, Shamir, and Adelman (RSA) public-key cryptography SSH server key.

(Optional) Number of bits to use when creating the SSH server key. The range is from 768 to 2048.

Defaults

1024-bit length

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The NX-OS software supports SSH version 2.

command.

Examples

This example shows how to create an SSH server key using DSA:

n1000v# config t

n1000v(config)# ssh key dsa

generating dsa key(1024 bits).....

..

generated dsa key

This example shows how to create an SSH server key using RSA with the default key length:

n1000v# config t

n1000v(config)# ssh key rsa

generating rsa key(1024 bits).....

.

generated rsa key

This example shows how to create an SSH server key using RSA with a specified key length:

n1000v# config t

n1000v(config)# ssh key rsa 768

generating rsa key(768 bits).....

.

generated rsa key

This example shows how to replace an SSH server key using DSA with the force option:

n1000v# config t

n1000v(config)# no feature ssh

n1000v(config)# ssh key dsa force

deleting old dsa key.....

generating dsa key(1024 bits).....

.

generated dsa key

n1000v(config)# feature ssh

This example shows how to remove the DSA SSH server key:

n1000v# config t

n1000v(config)# no feature ssh

XML interface to system may become unavailable since ssh is disabled

n1000v(config)# no ssh key dsa

n1000v(config)# feature ssh

This example shows how to remove all SSH server keys:

n1000v# config t

n1000v(config)# no feature ssh

XML interface to system may become unavailable since ssh is disabled

n1000v(config)# no ssh key

n1000v(config)# feature ssh

Related Commands

Command

Description

Displays the SSH server key information.

Enables the SSH server.

state (VLAN)

form of this command.

}

Syntax Description

Specifies the active state.

Specifies the suspended state.

Defaults

None

Command Modes

VLAN configuration (config-vlan)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the operational state of a VLAN:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)# state active

n1000v(config-vlan)#

This example shows how to disable state configuration:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)# no state

n1000v(config-vlan)#

Related Commands

Command

Description

Displays VLAN information.

state (Port Profile)

command.

Syntax Description

Enables or disables the port profile.

Defaults

Disabled

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable or disable the operational state of a port profile:

n1000v# configure terminal

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays port profile information.

statistics per-entry

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

No statistics are collected.

Command Modes

ACL configuration (config-acl)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to collect statistics for each ACL entry:

n1000v# configure terminal

n1000v(config)# ip access-list 1

n1000v(config-acl)# statistics per-entry

n1000v(config-acl)#

This example shows how to remove statistics:

n1000v# configure terminal

n1000v(config)# ip access-list 1

n1000v(config-acl)# no statistics per-entry

n1000v(config-acl)#

Related Commands

Command

Description

Displays statistics.

storm-control enable

Syntax Description

This command has no arguments or keywords.

Defaults

None.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to enable storm-control feature:

n1000v#

n1000v# storm-control enable

Related Commands

Command

Description

Displays the storm control statistics for the respective module.

sub-group

form of this command.

}

Syntax Description

Specifies that Cisco Discovery Protocol (CDP) information is used to automatically create subgroups for managing the traffic flow.

Specifies that subgroups are configured manually. This option is used if CDP is not configured on the upstream switches.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0

This command was introduced.

4.0(4)SV1(2)

keyword was added.

Usage Guidelines

Use this command to identify the port channel as being in vPC-HM, which requires traffic to be managed separately for each upstream switch connected to the member ports. If the upstream switches have CDP enabled, the Cisco Nexus 1000V can use this information to automatically assign subgroups. If the upstream switches do not have CDP enabled, then you must configure subgroups manually.

This command overrides any subgroup configuration specified in the port-profile inherited by the port channel interface.

Examples

This example shows how to configure a subgroup type for a port channel interface:

h1000v# config t

n1000v(config)# interface port-channel 1

n1000v(config-if)# sub-group cdp

This example shows how to remove the configuration:

h1000v# config t

n1000v(config)# interface port-channel 1

n1000v(config-if)# no sub-group

Related Commands

Command

Description

Displays port-channel information.

sub-group-id

form of this command.

Syntax Description

Subgroup ID number. Range is from 0 to 31.

Defaults

None

Command Modes

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Release

Modification

4.0

This command was introduced.

4.0(4)SV1(2)

The number of subgroups was increased to 32.

Examples

This example shows how to configure an Ethernet member port on subgroup 5:

n1000v# config t

n1000v(config)# interface Ethernet 3/2

n1000v(config-if)# sub-group-id 1

This example shows how to remove the configuration:

n1000v# config t

n1000v(config)# interface Ethernet 3/2

n1000v(config-if)# no sub-group-id

Related Commands

Command

Description

Displays information about Ethernet interfaces.

svs connection

form of this command.

Syntax Description

Connection name.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Only one SVS connection can be enabled per session.

Examples

This example shows how to enable an SVS connection:

n1000v# configure terminal

n1000v(config)# svs connection conn1

n1000v(config-svs-conn)#

This example shows how to disable an SVS connection:

n1000v# configure terminal

n1000v(config)# no svs connection conn1

n1000v(config)#

Related Commands

Command

Description

Displays SVS information.

svs-domain

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enter SVS domain configuration mode to configure an SVS domain:

n1000v# configure terminal

n1000v(config)# svs-domain

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays SVS information.

svs license transfer src-vem

command.

]

Syntax Description

Specifies the VEM to receive the transferred license.

Transfers a license back to the VSM license pool.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

- Licenses cannot be transferred to a VEM unless there are sufficient licenses in the pool for all CPUs on that VEM.

- When licenses are successfully transferred from one VEM to another, then the following happens:

– The virtual Ethernet interfaces on the source VEM are removed from service.

– The virtual Ethernet interfaces on the destination VEM are brought into service.

- When licenses are successfully transferred from a VEM to the VSM license pool, then the following happens:

– The virtual Ethernet interfaces on the source VEM are removed from service.

Examples

This example shows how to transfer a license from VEM 3 to VEM 5, and then display the license configuration:

n1000v(config)# svs license transfer src-vem 3 dst-vem 5

n1000v(config)# show license usage NEXUS1000V_LAN_SERVICES_PKG

Application

-----------

VEM 5 - Socket 1

VEM 5 - Socket 2

VEM 4 - Socket 1

VEM 4 - Socket 2

-----------

n1000v#

This example shows how to transfer a license from VEM 3 to the VSM license pool, and then display the license configuration:

n1000v(config)# show license usage NEXUS1000V_LAN_SERVICES_PKG

Application

-----------

VEM 4 - Socket 1

VEM 4 - Socket 2

-----------

n1000v#

Related Commands

Command

Description

Displays the number and location of CPU licenses in use on your VEMs.

Designates the level of severity at which license messages should be logged.

Installs a license file(s) on a VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

svs license volatile

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Caution Service Disruption

Volatile licenses are removed from a VEM during a loss in connectivity and are not returned to the VEM when connectivity resumes. Cisco recommends that the volatile license feature remain disabled and that you, instead, transfer unused licenses using the svs license transfer src-vem command.

Examples

This example shows how to enable the volatile license feature for a VSM:

n1000v(config)#

This example shows how to disable the volatile license feature for a VSM:

n1000v(config)# no svs license volatile

Related Commands

Command

Description

Displays the license configuration for the VSM.

Designates the level of severity at which license messages should be logged.

Installs a license file(s) on a VSM.

svs license transfer src-vem

Transfers licenses from a source VEM to another VEM, or to the VSM pool of available licenses.

svs mode

command.

}}

Syntax Description

Specifies Layer 2 as the transport mode for the VSM domain.

Specifies Layer 3 as the transport mode for the VSM domain and configures the Layer 3 transport interface.

Specifies mgmt0 as the Layer 3 transport interface.

Specifies control0 as the Layer 3 transport interface.

Defaults

Layer 2 mode

Command Modes

SVS domain configuration (config-svs-domain)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

If you use mgmt0 as the Layer 3 control interface, then in the VSM VM, Ethernet adapters 1 and 3 are not used.

If you use control0 as the Layer 3 control interface, then in the VSM VM, Ethernet adapter 3 is not used.

Examples

This example shows how to configure mgmt0 as the Layer 3 transport interface for the VSM domain:

n1000v(config-svs-domain)#

Related Commands

Command

Description

Displays the VSM domain configuration.

svs-domain

Creates and configures the VSM domain.

svs switch edition

To configure the Cisco Nexus 1000V switch edition, use the svs switch edition command.

Syntax Description

Configures the Cisco Nexus 1000V switch in the essential edition.

Configures the Cisco Nexus 1000V switch in the advanced edition.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

When the Release 4.2.1SV2(1.1) software is installed, the Essential edition is the default edition. When the switch is configured in the Essential edition, all the features (other than the advancd feafures) are available for free. No licenses are required to operate the Essential edition. The switch edition configuration is global and not per module. In Essential edition, all the modules are automatically licensed. A new command is provided to move the switch from the Essential edition to the Advanced edition and vice versa. The licenses are required only when switch edition is configured as the Advanced edition.

Examples

This example shows how to complete the VSM upgrade, notify hosts to switch to the upgraded datapath, and then display the upgrade status:

n1000v(config)# svs switch edition advanced

Related Commands

Command

Description

Displays the switch edition..

svs upgrade complete

To complete a VSM software upgrade, and notify hosts to switch to the upgraded datapath, use the svs upgrade complete command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to complete the VSM upgrade, notify hosts to switch to the upgraded datapath, and then display the upgrade status:

n1000v(config)# svs upgrade complete

Warning: Config saved but not pushed to vCenter Server due to inactive connection!

n1000v(config)# show running-config | in svs

svs-domain

svs mode L2

svs upgrade complete

svs connection vcenter

Related Commands

Command

Description

Monitors the upgrade of the VSM to a new software version.

svs upgrade start

Starts a manual VSM upgrade and saves upgrade information at the standby.

svs upgrade start

To start a manual VSM upgrade and save upgrade information at the standby, use the svs upgrade start command. To stop a manual upgrade, use the no form of this command.

no svs upgrade start

Syntax Description

mgmt0

Specifies the management interface.

Specifies an IP address.

Specifies an IPv6 address.

(Optional) Specifes the control0 ip address.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Before starting a manual VSM upgrade:

- Stop all configuration of the system, and do not change the configuration for the duration of the upgrade.

- Save all changes in the running configuration to the startup configuration to be preserved through the upgrade.

- Save a copy of your running configuration in external storage.

- Make sure all VSM ports, uplinks, vmknics, and vsifs used for control, packet, management, and storage are configured with system profiles.

- Make sure there is network connectivity between VC, VSM pair, and hosts or modules.

- Make sure all hosts or modules are upgraded to the concurrent VEM software version.

- If you are upgrading VSMs on a Cisco Nexus 1010, make sure the secondary VSM2 is active and the primary VSM1 is standby.

- If upgrading VSMs on a Cisco Nexus 1010, the Cisco Nexus 1010s must be in an HA configuration.

To preserve access to VSM2 during software upgrade, this process requires you to assign an alternate management IP address to VSM2.

Examples

This example shows how to start a manual VSM upgrade and assign a temporary IP address.

n1000v# configure terminal

n1000v(config)# svs upgrade start mgmt0 ip 10.78.109.44

WARNING!

1. Please do not change the configuration of the system from this point onwards

2. Ensure that all relevant ports, including uplinks, vmknics, and vsifs used for control, packet, management, storage as well as VSM ports, are all configured with system profiles

3. Ensure there is network connectivity between VC, VSM pair, and the hosts/modules

4. Ensure all the hosts/modules are upgraded with the next version of VEM software package

n1000v(config)#

Related Commands

Command

Description

Monitors the upgrade of the VSM to a new software version.

svs upgrade complete

Completes a VSM software upgrade, and notifies hosts to switch to the upgraded datapath.

show module

Displays information about all available VSMs and VEMs in the system.

reload

Reboots both the primary and secondary VSM.

show system redundancy status

Displays the HA status of the system.

boot kickstart

Configures the kickstart boot variable.

boot system

Configures the system boot variable.

system redundancy role primary

Configures the primary redundant role for a VSM.

show svs connections

Displays the current connections to the Cisco Nexus 1000V.

svs veth auto-config-purge

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

:

n1000v(config)# svs veth auto-config-purge

n1000v(config)#

This example shows how to remove the xxx configuration:

n1000v(config)# no svs veth auto-config-purge

n1000v(config)#

Related Commands

Command

Description

Creates a vEthernet interface.

Displays information about the configuration currently running on the system.

show interface vethernet

Displays information about vEthernet interfaces.

svs veth auto-delete

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

:

n1000v(config)# svs veth auto-delete

n1000v(config)#

:

n1000v(config)# no svs veth auto-delete

n1000v(config)#

Related Commands

Command

Description

Creates a vEthernet interface.

Displays information about the configuration currently running on the system.

show interface vethernet

Displays information about vEthernet interfaces.

svs veth auto-setup

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

Enabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to configure xxx:

n1000v(config)# xxx

This example shows how to remove the xxx configuration:

n1000v(config)# no xxx

Related Commands

Command

Description

Creates a vEthernet interface.

Displays information about the configuration currently running on the system.

show interface vethernet

Displays information about vEthernet interfaces.

switchname

form of this command.

no switchname

Syntax Description

Name for the device. The name is alphanumeric, case sensitive, can contain special characters, and can have a maximum of 32 characters.

Defaults

switch

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The Cisco NX-OS software uses the hostname in command-line interface (CLI) prompts and in default configuration filenames.

command.

Examples

This example shows how to configure the device hostname:

n1000v# configure terminal

n1000v(config)# switchname Engineering2

Engineering2(config)#

This example shows how to revert to the default device hostname:

Engineering2# configure terminal

Engineering2(config)# no switchname

n1000v(config)#

Related Commands

Command

Description

Configures the device hostname.

Displays the device hostname.

switchport access bridge-domain

form of this command.

Syntax Description

The name of the VXLAN bridge domain.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to assign a VXLAN bridge domain to a port profile:

n1000v# configure terminal

n1000v(config)# port-profile tenant-profile

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)# switchport access bridge-domain tenant-red

n1000v(config-port-prof)#

Related Commands

Command

Description

Displays bridge domain information.

Displays the running configuration of the specified port profile.

Displays the port profile configuration.

switchport access vlan

form of this command.

Syntax Description

VLAN identification number. The range of valid values is 1 to 3967.

Defaults

Access mode is not set.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the access mode of an interface:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# switchport access vlan 10

n1000v(config-if)#

This example shows how to remove access mode configuration:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# no switchport access vlan

n1000v(config-if)#

Related Commands

Command

Description

Displays interface information.

switchport mode

form of this command.

Syntax Description

Sets port mode access.

Sets the port mode to private VLAN.

Sets the port mode private VLAN to host.

Sets the port mode private VLAN to promiscuous.

Sets the port mode to trunk.

Defaults

Switchport mode is not set.

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the port mode of an interface:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# switchport mode private-vlan host

n1000v(config-if)#

This example shows how to remove mode configuration:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# no switchport mode private-vlan host

n1000v(config-if)#

Related Commands

Command

Description

Displays interface information.

switchport port-security

form of this command.

Syntax Description

Configures port security aging characteristics.

Specifies the port security aging time.

Aging time in minutes, in the range of 0 to 1440.

Specifies the type of timers.

Specifies an absolute timer.

Specifies an inactivity timer.

.

Specifies the VLAN where the MAC address should be secured.

VLAN identification number. The range of valid values is 1 to 4094.

Specifies a sticky MAC address.

Specifies the maximum number of addresses, in the range of 1 to 1025.

Specifies the security violation mode.

Specifies the security violation protect mode.

restrict

Specifies the security violation restrict mode. Restrict mode drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value and causes the Security Violation counter to increment.

Specifies the security violation shutdown mode.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the port security aging inactivity timer:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# switchport port-security aging type inactivity

n1000v(config-if)#

This example shows how to remove the port security aging inactivity timer:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# no switchport port-security aging type inactivity

n1000v(config-if)#

Related Commands

Command

Description

Displays interface information.

switchport private-vlan host-association

form of this command.

Syntax Description

Number of the primary VLAN of the private VLAN relationship.

Number of the secondary VLAN of the private VLAN relationship.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

There is no run-time effect on the port unless it is in private VLAN-host mode. If the port is in private VLAN-host mode but neither of the VLANs exist, the command is allowed but the port is made inactive. The port also may be inactive when the association between the private VLANs is suspended.

The secondary VLAN may be an isolated or community VLAN.

Examples

This example shows how to configure a host private VLAN port with a primary VLAN (VLAN 18) and a secondary VLAN (VLAN 20):

n1000v(config-if)# switchport private-vlan host-association 18 20

n1000v(config-if)#

This example shows how to remove the private VLAN association from the port:

n1000v(config-if)# no switchport private-vlan host-association

n1000v(config-if)#

Related Commands

Command

Description

Displays information on private VLANs.

switchport private-vlan mapping

form of this command.

Syntax Description

Number of the primary VLAN of the private VLAN relationship.

Associates the secondary VLANs to the primary VLAN.

Number of the secondary VLAN of the private VLAN relationship.

Clears the association between the secondary VLANs and the primary VLAN.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

There is no run-time effect on the port unless it is in private VLAN-promiscuous mode. If the port is in private VLAN-promiscuous mode but the primary VLAN does not exist, the command is allowed but the port is made inactive.

The secondary VLAN may be an isolated or community VLAN.

Examples

This example shows how to configure the associate primary VLAN 18 to secondary isolated VLAN 20 on a private VLAN promiscuous port:

n1000v(config-if)# switchport private-vlan mapping 18 20

n1000v(config-if)#

This example shows how to add a VLAN to the association on the promiscuous port:

n1000v(config-if)# switchport private-vlan mapping 18 add 21

n1000v(config-if)#

This example shows how to remove the all private VLAN association from the port:

n1000v(config-if)# no switchport private-vlan mapping

Related Commands

Command

Description

Displays information on all interfaces configured as switchports.

Displays the information about the private VLAN mapping for VLAN interfaces, or SVIs.

switchport private-vlan mapping trunk

form of this command.

Syntax Description

VLAN identification number. The range of valid values is 1 to 3967.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you use this command, you must either add a secondary VLAN, or remove a VLAN.

Examples

This example shows how to designate the primary private VLAN:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# n1000v(config-if)# switchport private-vlan mapping trunk 10 add 11

n1000v(config-if)#

This example shows how to remove the primary private VLAN:

n1000v# configure terminal

n1000v(config)# interface vethernet 1

n1000v(config-if)# n1000v(config-if)# no switchport private-vlan mapping trunk 10

n1000v(config-if)#

Related Commands

Command

Description

Displays VLAN information.

switchport private-vlan trunk allowed vlan

form of this command.

Syntax Description

VLAN IDs of the allowed VLANs when interface is in trunking mode.

Adds the VLANs to the interface.

Allows all the VLANs on the interface.

Allows all the VLANs on the interface except the specified ones.

Allows no VLANs on the interface.

Removes VLAN IDs from existing allowed VLANs on the interface.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Interface configuration (config-if)

Supported User Roles

network-admin

Command History

Releases

Modifications

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command is used to allow only the normal VLANs on the promiscuous trunk port.

Examples

This example shows how to set the allowed VLANs when the interface is in private VLAN trunking mode:

switch# config t

Enter configuration commands, one per line. End with CNTL/Z.

switch(config)# port-profile type ethernet PVLAN-UPLINK

switch(config-port-prof)# vmware port-group

switch(config-port-prof)# switchport mode private-vlan trunk promiscuous

switch(config-port-prof)# switchport private-vlan trunk allowed vlan 155-156

switch(config-port-prof)# switchport private-vlan mapping 156 155

switch(config-port-prof)# switchport private-vlan mapping trunk 156 155

switch(config-port-prof)# channel-group auto mode on mac-pinning

switch(config-port-prof)# no shutdown

switch(config-port-prof)# state enabled

Related Commands

Command

Description

--

--

switchport trunk allowed vlan

form of this command.

Syntax Description

Allowed VLANs that transmit through this interface in tagged format when in trunking mode; the range of valid values is from 1 to 4094.

Allows all appropriate VLANs to transmit through this interface in tagged format when in trunking mode.

Blocks all VLANs transmitting through this interface in tagged format when in trunking mode.

Adds the defined list of VLANs to those currently set instead of replacing the list.

Allows all VLANs to transmit through this interface in tagged format when in trunking mode except the specified values.

Removes the defined list of VLANs from those currently set instead of replacing the list.

Defaults

All VLANs

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command for the interface.

If you remove VLAN 1 from a trunk, the trunk interface continues to send and receive management traffic in VLAN 1.

Examples

This example shows how to add a series of consecutive VLANs to the list of allowed VLANs on a trunking port:

n1000v(config-if)# switchport trunk allowed vlan add 40-50

n1000v(config-if)#

Related Commands

Command

Description

Displays the administrative and operational status of a switching (nonrouting) port.

switchport trunk native vlan

form of this command.

Syntax Description

VLAN identification number. The range of valid values is 1 to 3967.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure trunking parameters on an interface:

n1000v# configure terminal

n1000v(config)# interface vethernet 10

n1000v(config-if)# switchport trunk native vlan 20

n1000v(config-if)#

Related Commands

Command

Description

Displays VLAN information.

system inter-sup-heartbeat time

system inter-sup-heartbeat time <7-30>

Syntax Description

Defaults

15

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure the inter-supervisor heartbeat time:

n1000v# system inter-sup-heartbeat time 10

Related Commands

None.

system jumbomtu

command.

Syntax Description

Defaults

9000 bytes

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

- For transmissions to occur between two ports, you must configure the same MTU size for both ports.

- A port drops any frames that exceed its MTU size.

- If you do not configure a system jumbo MTU size, it defaults to 1500 bytes.

- For a Layer 2 port, you can configure an MTU size as the system default of 1500 bytes or the system default jumbo MTU size of 9000 bytes.

- If you change the system jumbo MTU size, Layer 2 ports automatically use the system default MTU size of 1500 bytes unless you specifically configure the MTU size differently per port.

Examples

This example shows how to configure a system-wide maximum frame size of 8000 bytes:

n1000v# config t

n1000v(config)# system jumbomtu 8000

n1000v#

Related Commands

Command

Description

show interface ethernet

Displays information about Ethernet interfaces, including the configured MTU size.

Displays the current operating configuration, which includes the system jumbo MTU size.

interface ethernet

Specifies an interface to configure and enters interface configuration mode.

mtu

Specifies the system jumbo MTU size.

system redundancy role

form of the command.

Syntax Description

Specifies the primary redundant VSM.

Specifies the secondary redundant VSM.

Specifies no redundant VSM.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure no redundant VSM:

n1000v# system redundancy role standalone

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

system storage-loss

form of the command.

Syntax Description

Displays a system log when storage loss is detected.

Reloads the VSM when storage loss is detected.

The time interval at which the VSM checks for storage connectivity status. The default time interval is 30 seconds.

Command Default

The default time interval is 30 seconds.

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Examples

This example shows how to enable storage loss detection to be performed every 50 seconds.

n1000v# system storage-loss log time 50

n1000v#

This example shows how to disable the storage loss checking:

n1000v# no system storage-loss

Related Commands

Command

Description

Displays the system redundancy status.

system switchover

command.

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to switch over to the standby supervisor:

n1000v# system switchover

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

system update vem feature level

command.

]

Syntax Description

(Optional) version number index from the list above.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to change the software version supported:

n1000v# system update vem feature level

Error : the feature level is set to the highest value possible

n1000v#

Related Commands

Command

Description

Displays the current software release supported.

system vlan

form of this command.

Syntax Description

List of VLAN IDs, separated by commas. The allowable range is 1–3967 and 4048–4093.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A system VLAN is used to configure and bring up physical or vEthernet ports before the Virtual Supervisor Module (VSM) has established communication with the Virtual Ethernet Module (VEM).

Examples

This example shows how to add system VLANs 260 and 261 to the port profile:

n1000v# config t

n1000v (config)# port-profile system-uplink

n1000v(config-port-prof)# system vlan 260, 261

n1000v(config-port-prof)#

This example shows how to remove all system VLANs from the port profile:

n1000v# config t

n1000v (config)# port-profile system-uplink

n1000v(config-port-prof)# no system vlan

n1000v(config-port-prof)#

Related Commands

Command

Description

Creates a VLAN and enters the VLAN configuration mode.

Displays the status of all VLANs and the ports that are configured on them.

Displays private VLAN information.

Displays VLAN summary information.

Show Commands

This chapter describes the Cisco Nexus 1000V show commands.

show aaa accounting

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the accounting configuration:

n1000v# show aaa accounting

default: local

n1000v#

Related Commands

Command

Description

Configures the console or default login accounting method.

show running-config aaa [all]

Displays the AAA configuration as it currently exists in the running configuration.

show aaa authentication

command.

Syntax Description

login error-enable

(Optional) Displays the authentication login error message enable configuration.

login mschap

(Optional) Displays the authentication login MS-CHAP enable configuration.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the configured authentication parameters:

n1000v# show aaa authentication

default: local

console: local

This example shows how to display the authentication-login error-enable configuration:

n1000v# show aaa authentication login error-enable

disabled

This example shows how to display the authentication-login MSCHAP configuration:

n1000v# show aaa authentication login mschap

disabled

Related Commands

Command

Description

Configures the console or default login authentication method.

show running-config aaa [all]

Displays the AAA configuration as it currently exists in the running configuration.

show aaa groups

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display AAA group information:

n1000v# show aaa groups

radius

TacServer

Related Commands

Command

Description

Configures an AAA server group.

show running-config aaa [all]

Displays the AAA configuration as it currently exists in the running configuration.

show access-list summary

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display configured ACLs:

n1000v# show access-lists summary

IP access list acl1

Total ACEs Configured:1

n1000v#n1000v#

Related Commands

Command

Description

ip access-list

Creates the IP ACL and enters IP ACL configuration mode.

show ip access-lists

Displays the IP ACL configuration.

show accounting log

command.

]

Syntax Description

(Optional) Size of the log to display in bytes. The range is from 0 to 250000.

(Optional) Specifies a start time as follows.

- The year is shown in the yyyy format, such as 2009.

- The month is shown in the three-letter English abbreviation, such as Feb.

- The day of the month is shown as a number from 1 to 31.

- Hours, minutes, and seconds are shown in the standard 24-hour format, such as 16:00:00.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the entire accounting log:

n1000v# show accounting log

Wed Jul 22 02:09:44 2009:update:vsh.3286:root:configure terminal ; port-profile Unused_O

r_Quarantine_Uplink ; capability uplink (SUCCESS)

Wed Jul 22 07:57:50 2009:update:171.71.55.185@pts/2:admin:configure terminal ; flow reco

rd newflowrecord (SUCCESS)

Wed Jul 22 08:48:57 2009:start:swordfish-build1.cisco.com@pts:admin:

Wed Jul 22 08:49:03 2009:stop:swordfish-build1.cisco.com@pts:admin:shell terminated grac

efully

Wed Jul 22 08:50:36 2009:update:171.71.55.185@pts/2:admin:configure terminal ; no flow r

ecord newflowrecord (SUCCESS)

Thu Jul 23 07:21:50 2009:update:vsh.29016:root:configure terminal ; port-profile Unused_

Or_Quarantine_Veth ; state enabled (SUCCESS)

Thu Jul 23 10:25:19 2009:start:171.71.55.185@pts/5:admin:

Thu Jul 23 11:07:37 2009:update:171.71.55.185@pts/5:admin:enabled aaa user default role

enabled/disabled

doc-n1000v(config)#

This example shows how to display 400 bytes of the accounting log:

n1000v# show accounting log 400

Sat Feb 16 21:15:24 2008:update:/dev/pts/1_172.28.254.254:admin:show accounting log start-time 2008 Feb 16 18:31:21

Sat Feb 16 21:15:25 2008:update:/dev/pts/1_172.28.254.254:admin:show system uptime

Sat Feb 16 21:15:26 2008:update:/dev/pts/1_172.28.254.254:admin:show clock

This example shows how to display the accounting log starting at 16:00:00 on February 16, 2008:

n1000v(config)# show accounting log start-time 2008 Feb 16 16:00:00

Sat Feb 16 16:00:18 2008:update:/dev/pts/1_172.28.254.254:admin:show logging log file start-time 2008 Feb 16 15:59:16

Sat Feb 16 16:00:26 2008:update:/dev/pts/1_172.28.254.254:admin:show accounting log start-time 2008 Feb 16 12:05:16

Sat Feb 16 16:00:27 2008:update:/dev/pts/1_172.28.254.254:admin:show system uptime

Sat Feb 16 16:00:28 2008:update:/dev/pts/1_172.28.254.254:admin:show clock

Sat Feb 16 16:01:18 2008:update:/dev/pts/1_172.28.254.254:admin:show logging log file start-time 2008 Feb 16 16:00:16

Sat Feb 16 16:01:26 2008:update:/dev/pts/1_172.28.254.254:admin:show accounting log start-time 2008 Feb 16 12:05:16

Sat Feb 16 16:01:27 2008:update:/dev/pts/1_172.28.254.254:admin:show system uptime

Sat Feb 16 16:01:29 2008:update:/dev/pts/1_172.28.254.254:admin:show clock

Sat Feb 16 16:02:18 2008:update:/dev/pts/1_172.28.254.254:admin:show logging log file start-time 2008 Feb 16 16:01:16

Sat Feb 16 16:02:26 2008:update:/dev/pts/1_172.28.254.254:admin:show accounting log start-time 2008 Feb 16 12:05:16

Sat Feb 16 16:02:28 2008:update:/dev/pts/1_172.28.254.254:admin:show system uptime

Related Commands

Command

Description

Clears the accounting log.

show banner motd

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the configured banner message:

n1000v(config)# show banner motd

April 16, 2008 Welcome to the Switch

Related Commands

Command

Description

Configures the banner message of the day.

switchname

Changes the switch prompt.

show bgp all

To display BGP information for all the address families, use show bgp all command.

bgp all

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display BGP information for all the address families:

n1000v(config)# show bgp all

BGP routing table information for VRF default, address family L2VPN EVPN

BGP table version is 128, local router ID is 17.17.17.31

Status: s-suppressed, x-deleted, S-stale, d-dampened, h-history, *-valid, >-best

Path type: i-internal, e-external, c-confed, l-local, a-aggregate, r-redist

Origin codes: i - IGP, e - EGP, ? - incomplete, | - multipath

Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 17.17.17.31:7001 (EVI 7001)

*>i[3]:[0]:[32]:[1.2.3.4]/88

1.2.3.4 100 0 i

*>i[3]:[0]:[32]:[17.17.18.41]/88

17.17.18.41 100 0 i

*>l[3]:[0]:[32]:[17.17.19.15]/88

17.17.19.15 100 32768 i

*>l[3]:[0]:[32]:[17.17.19.16]/88

17.17.19.16 100 32768 i

*>i[3]:[0]:[32]:[17.17.19.21]/88

17.17.19.21 100 0 i

n1000v#

Related Commands

Command

Description

Displays the information about BGP convergence.

show bgp convergence

bgp convergence command.

bgp convergence

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to displays the information about BGP convergence:

n1000v(config)# show bgp convergence

Global settings:

BGP start time 00:15:51

Config processing completed 0.686217 after start

BGP out of wait mode 0.686265 after start

Information for VRF default

Initial-bestpath timeout: 300 sec, configured 0 sec

First peer up 00:00:11 after start

Bestpath timer not running

IPv4 Unicast:

First bestpath signalled 00:00:03 after start

First bestpath completed 00:00:03 after start

L2VPN EVPN:

First bestpath signalled 00:00:03 after start

First bestpath completed 00:00:03 after start

n1000v(config)#

Related Commands

Command

Description

Displays BGP information for all the address families

show bgp event-history cli

bgp event-history cli command.

show bgp event-history cli

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display BGP cli logs:

n1000v(config)# show bgp event-history cli

bgp-1 cli events

2014 Aug 10 10:50:10.772790 bgp 1 [7900]: [30712]: Calling callback 'show_bgp_int_event_hist_cmd' for 'show bgp event-history cli'

2014 Aug 10 10:41:32.000639 bgp 1 [7900]: [29001]: Callback 'show_ip_bgp_convergence_cmd' returned 0

2014 Aug 10 10:41:32.000374 bgp 1 [7900]: [29001]: Calling callback 'show_ip_bgp_convergence_cmd' for 'show bgp convergence'

n1000v#

Related Commands

Command

Description

show bgp event-history cli

Displays BGP cli logs

show bgp event-history detail

Displays detailed event logs

show bgp event-history errors

Displays error logs of BGP

show bgp event-history events

Displays event logs

show bgp event-history logs

Displays messages logged via syslog

show bgp event-history msgs

Displays various message logs of BGP

Displays periodic event logs

show bgp l2vpn evpn summary

To display summarized information of BGP state, use show bgp l2vpn evpn summary command.

show bgp l2vpn evpn summary

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display summarized information of BGP state:

n1000v(config)# show bgp l2vpn evpn summary

BGP summary information for VRF default, address family L2VPN EVPN

BGP router identifier 17.17.17.31, local AS number 1

BGP table version is 128, L2VPN EVPN config peers 1, capable peers 1

30 network entries and 30 paths using 3420 bytes of memory

BGP attribute entries [19/2508], BGP AS path entries [0/0]

BGP community entries [0/0], BGP clusterlist entries [0/0]

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

17.17.17.39 4 1 13030 4860 128 0 0 2d15h 11

n1000v(config)#

Related Commands

Command

Description

show bgp l2vpn evpn community

Display routes matching the BGP communities.

show bgp l2vpn evpn community-list

Display routes matching the community-list.

show bgp l2vpn evpn dampening

Display dampening info.

show bgp l2vpn evpn evi

EVPN Instance.

show bgp l2vpn evpn extcommunity

Display routes matching the BGP extcommunities.

show bgp l2vpn evpn extcommunity-list

Display routes matching the extcommunity-list.

show bgp l2vpn evpn filter-list

Display routes matching the filter-list.

show bgp l2vpn evpn neighbors

Display all configured BGP neighbors.

show bgp l2vpn evpn rd

Display information for a route distinguisher.

show bgp l2vpn evpn received-paths

Display paths stored for soft-reconfig.

show bgp l2vpn evpn route-map

Display routes matching the route-map.

show bgp l2vpn evpn summary

Display summarized information of BGP state.

show bgp l2vpn evpn vrf

Virtual Router Context.

Display VTEP information.

show bgp paths

To display Path information, use show bgp paths command.

show bgp paths

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display Path information:

n1000v(config)# show bgp paths

Address Hash Refcount Metric Path

0x5bb6c938 377 1 0 i

0x5bb6c9a4 377 1 0 i

0x5bb6ca10 377 1 0 i

0x5bb6ca7c 377 1 0 i

0x5bb6cae8 377 1 0 i

0x5bb6cb54 377 1 0 i

0x5bb6cd04 377 1 0 i

0x5bb6cd70 377 1 0 i

0x5bb6cc98 379 1 0 i

0x5bb6c860 379 1 0 i

0x5bb6c8cc 379 1 0 i

0x5bb6cc2c 379 1 0 i

0x5bb6cf20 379 1 0 i

0x5bb6c7f4 379 1 0 i

0x5bb6cbc0 379 1 0 i

0x5bb6c71c 379 1 0 i

0x5bb6c788 379 1 0 i

0x5bb6ce48 379 1 0 i

0x5bb6cddc 379 1 0 i

n1000v(config)#

Related Commands

Command

Description

Displays BGP information for all the address families

show bgp process

To display BGP global information, use show bgp process command.

show bgp process

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display BGP global information:

n1000v(config)# show bgp process

BGP Process Information

BGP Process ID : 7900

BGP Protocol Started, reason: : configuration

BGP Protocol Tag : 1

BGP Protocol State : Running

BGP Memory State : OK

BGP attributes information

Number of attribute entries : 19

HWM of attribute entries : 20

Bytes used by entries : 1824

Entries pending delete : 0

HWM of entries pending delete : 0

BGP paths per attribute HWM : 2

BGP AS path entries : 0

Bytes used by AS path entries : 0

BGP PMSI entries : 19

Bytes used by PMSI entries : 171

Information regarding configured VRFs:

BGP Information for VRF default

VRF Id : 1

VRF state : UP

Router-ID : 17.17.17.31

Configured Router-ID : 17.17.17.31

Confed-ID : 0

Cluster-ID : 0.0.0.0

No. of configured peers : 1

No. of pending config peers : 0

No. of established peers : 1

VRF RD : Not configured

Information for address family IPv4 Unicast in VRF default

Table Id : 1

Table state : UP

Peers Active-peers Routes Paths Networks Aggregates

0 0 0 0 0 0

Redistribution

None

Information for address family L2VPN EVPN in VRF default

Table Id : 1

Table state : UP

Peers Active-peers Routes Paths Networks Aggregates

1 1 30 30 0 0

Redistribution

None

n1000v(config)#

Related Commands

Command

Description

Displays BGP information for all the address families

show bgp sessions

To display session information for all peers, use show bgp sessions command.

show bgp sessions

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display BGP session information for all peers:

n1000v(config)# show bgp sessions

Total peers 1, established peers 1

ASN 1

VRF default, local ASN 1

peers 1, established peers 1, local router-id 17.17.17.31

State: I-Idle, A-Active, O-Open, E-Established, C-Closing, S-Shutdown

Neighbor ASN Flaps LastUpDn|LastRead|LastWrit St Port(L/R) Notif(S/R)

17.17.17.39 1 1 2d15h |00:00:24|00:00:14 E 179/58155 0/1

n1000v(config)#

Related Commands

Command

Description

Displays BGP information for all the address families

show bgp statistics

To display session information for all peers, use show bgp statistics command.

show bgp statistics

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display BGP global statistics:

n1000v(config)# show bgp statistics

Neighbor aggregated statistics (sent/received)

Msgs Bytes Opens Updates

4883/13052 910472/94003 4/2 18/8188

Keepalives Notifications Route-refresh Capabilities

4855/4861 0/1 6/0 0/0

BGP I/O Information

Active Open attempts : 3

Passive Open attempts : 1

BGP I/O Open loops : 291332

BGP I/O Open calls : 9

BGP I/O Open recv calls : 8

BGP I/O Send calls : 4871

BGP I/O Recv calls : 5000

BGP I/O Write calls : 4867

BGP I/O Write loops : 9735

BGP I/O Write loop yields : 0

BGP I/O Read calls : 291350

BGP I/O Read loops : 291406

BGP I/O Read loop yields : 4947

BGP I/O process nlri yields : 0

BGP I/O process withdraw yields : 0

BGP Read time exceeded : 0

BGP Update send pending : 0

BGP Update buffer not available : 10

BGP Update walk suspended : 2

BGP Yielded in updates : 0

BGP Yielded in packing : 0

BGP No sendbuf for peer : 0

BGP No withdraw buf for peer : 0

BGP Yields while updating peer : 2

BGP Yields in update event : 0

Signal Update Events : 78

Work queue empty : 77

No data to write : 4868

Msg queue recv errors : 0

Sockets create/accept/close : 5/1/3

Sockets create retries/failures : 0/0

Socket fd-close session/setup sched : 1/2

Socket fd-close runs/total/max/curr : 4/3/1/0

n1000v(config)#

Related Commands

Command

Description

Displays BGP information for all the address families

show boot

command.

]

Syntax Description

(Optional) Determines whether auto-copy is enabled.

(Optional) Displays the list of files to be auto-copied.

(Optional) Displays the sup-1 supervisor module configuration.

(Optional) Displays the sup-2 supervisor module configuration.

(Optional) Displays a list of boot variables.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the system and kickstart boot variables for verification:

n1000v# config t

n1000v(config)# show boot

sup-1

kickstart variable =

bootflash:/nexus-1000v-kickstart-mzg.4.0.4

.SV1.2.bin

system variable =

bootflash:/nexus-1000v-mzg.4.0.4.SV1.2.bin

sup-2

kickstart variable =

bootflash:/nexus-1000v-kickstart-mzg.4.0.4

.SV1.2.bin

system variable =

bootflash:/nexus-1000v-mzg.4.0.4.SV1.2.bin

No module boot variable set

n1000v(config)#

Related Commands

Command

Description

boot system bootflash:

Adds the new system boot variable.

boot kickstart bootflash:

Adds the new kickstart boot variable.

reload

Reloads the Virtual Supervisor Module (VSM).

show version

Displays the software version is present on the VSM.

show bridge-domain

command.

]

Syntax Description

(Optional) The name of the bridge domain.

(Optional) Specifies to display only a brief summary of the information for the bridge domain.

(Optional) Specifies to display summary information for all bridge domains.

Defaults

None

Command Modes

Any command mode

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was modified to list the global configurations and segment mode changes.

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

The ports are inactive if a segment ID is not configured for a bridge domain.

Examples

This example shows how to display all bridge domains.

n1000v(config)# show bridge-domain

Global Configuration:

Mode: Unicast-only

MAC Distribution: Enable

Bridge-domain tenant-red (0 ports in all)

Segment ID: 5000 (Manual/Active)

Mode: Unicast-only (override)

MAC Distribution: Enable (override)

Group IP: 224.24.109.28

State: UP Mac learning: Enabled

Veth5, Veth7, Veth9

n1000v(config)#

This example shows how to display brief summary information for a bridge domain:

n1000v(config)# show bridge-domain brief

Bridge-domain Status Ports

------------------------------------- --------- -------------------------------

tenant-red active Veth5, Veth7, Veth9

This example shows how to display summary information for all bridge domains:

n1000v(config)# show bridge-domain summary

Number of existing bridge-domains: 1

n1000v(config)#

Related Commands

Command

Description

Displays all bridge domains with the mode.

show bridge-domain vteps

Displays the bridge domain-to-VTEP mappings that are maintained by the VSM and are pushed to all VEMs.

show bridge-domain mappings

Displays VLAN-VXLAN mappings configured in VSM on the Ethernet uplink port-profile of a service module/VXLAN gateway or the vEthernet access port-profile for VXLAN trunk feature.

show bridge-domain mac

Displays all the MAC addresses that are learned by the VSMs on VXLANs that are configured with the MAC distribution feature.

show bridge-domain mac

Displays all the MACs learnt by VSM on VXLANs configured with MAC distribution.

Syntax Description

(Optional) The name of the bridge domain.

(Optional) Displays all the MACs learnt by VSM on VXLANs configured with MAC distribution.

(Optional) Displays all the MACs learnt by VSM on VXLANs configured with MAC distribution.

Defaults

None

Command Modes

Any command mode

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

To list all the MAC addresses that are learned by the VSMs on VXLANs that are configured with the MAC distribution feature.

Examples

This example shows how to display mac information for all bridge domains:

n1000v(config)# show bridge-domain mac

Bridge-domain: Vxlan-32200

MAC Table Count: 3

MAC Table Version: 3

MAC Address Module Port VTEP-IP Address

------------------------------------------------------------------------------

0050.569f.2c58 6 Veth65 10.105.232.88

0050.569f.4ebf 6 Veth67 10.105.232.88

0050.569f.7957 6 Veth68 10.105.232.88

This example shows how to display <bd-name> mac information for bridge domain:

n1000v(config)# show bridge-domain Vxlan-32200 mac

Bridge-domain: Vxlan-32200

MAC Table Count: 3

MAC Table Version: 3

MAC Address Module Port VTEP-IP Address

------------------------------------------------------------------------------

0050.569f.2c58 6 Veth65 10.105.232.88

0050.569f.4ebf 6 Veth67 10.105.232.88

0050.569f.7957 6 Veth68 10.105.232.88

Related Commands

Command

Description

Displays all bridge domains with the mode.

show bridge-domain vteps

Displays the bridge domain-to-VTEP mappings that are maintained by the VSM and are pushed to all VEMs.

show bridge-domain mappings

Displays VLAN-VXLAN mappings configured in VSM on the Ethernet uplink port-profile of a service module/VXLAN gateway or the vEthernet access port-profile for VXLAN trunk feature.

show bridge-domain mappings

Displays VLAN-VXLAN mappings configured in VSM on the Ethernet uplink port-profile of a service module/VXLAN gateway or the vEthernet access port-profile for VXLAN trunk feature.

[active | inactive | module | service]

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

active

(Optional) Displays the active mappings. A mapping is considered active if the VLAN and bridge-domain are created in VSM.

inactive

(Optional) Displays the inactive mappings. A mapping is considered inactive if either the VLAN or bridge-domain is not created in VSM.

module

(Optional) Displays interfaces on a specified module.

service

(Optional) Service command.

Defaults

None

Command Modes

Any command mode

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use this command to view all VLAN-VXLAN mappings created in the VSM.

Examples

This example shows how to display VLAN-VXLAN mappings for VXLAN gateway:

vsm# show bridge-domain mappings

-------------------------------------------------------------------------------

Interface Module Serv Inst Vlan BD-Name

-------------------------------------------------------------------------------

port-channel7 9 753 753 bd-753

port-channel8 10 753 753 bd-753

This example shows how to display VLAN-VXLAN mappings for theVXLAN trunk feature:

switch(config-bd)# show bridge-domain mappings

-------------------------------------------------------------------------------

Interface Service Instance ID Module ID Vlan ID Segment ID

-------------------------------------------------------------------------------

Vethernet2 10 3 600 5000

Vethernet2 10 3 601 500

Note The value in the Interface column varies based on the VXLAN gateway or the VXLAN trunk feature. Vethernet<number> in the Interface column indicates mapping for the VXLAN trunk feature; port-channel<number> in the Interface column indicates mapping configured on the VXLAN gateway.

Related Commands

Command

Description

Displays all bridge domains with the mode.

show bridge-domain vteps

Displays the bridge domain-to-VTEP mappings that are maintained by the VSM and are pushed to all VEMs.

show bridge-domain mac

Displays all the MAC addresses that are learned by the VSMs on VXLANs that are configured with the MAC distribution feature.

show bridge-domain vteps

Displays bridge-domain to VTEPs mapping maintained by VSM and pushed to all VEMs.

Syntax Description

(Optional) The name of the bridge domain.

(Optional) Displays bridge-domain to VTEPs mapping maintained by VSM and pushed to all VEMs.

(Optional) Displays bridge-domain to VTEPs mapping maintained by VSM and pushed to all VEMs.

Defaults

None

Command Modes

Any command mode

Supported User Roles

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Mappings that are maintained by the VSM bridge-domain to VTEP and are pushed to all VEMs.

Examples

This example shows how to display vteps information for all bridge domains:

n1000v(config)# show bridge-domain vteps

D: Designated VTEP I:Forwarding Publish Incapable VTEP

Note: (*) Denotes active gateway module

Bridge-domain: Vxlan-32000

VTEP Table Version: 3

Port Module VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

Veth48 7 10.105.232.89 (D)

Veth55 7 10.105.232.106

Veth53 7 30.30.30.89

Veth231 18 104.232.105.10 (DI*)

This example shows how to display <bd-name> vteps information for specific bridge domains:

n1000v(config)# show bridge-domain Vxlan-32000 vteps

D: Designated VTEP I:Forwarding Publish Incapable VTEP

Note: (*) Denotes active gateway module

Bridge-domain: Vxlan-32000

VTEP Table Version: 3

Port Module VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

Veth48 7 10.105.232.89 (D)

Veth55 7 10.105.232.106

Veth53 7 30.30.30.89

Veth231 18 104.232.105.10 (DI*)

Related Commands

Command

Description

Displays all bridge domains with the mode.

show bridge-domain mappings

Displays VLAN-VXLAN mappings configured in VSM on the Ethernet uplink port-profile of a service module/VXLAN gateway or the vEthernet access port-profile for VXLAN trunk feature.

show bridge-domain mac

Displays all the MAC addresses that are learned by the VSMs on VXLANs that are configured with the MAC distribution feature.

show cdp

command.

}

Syntax Description

Display all interfaces in CDP database.

Display CDP entries in database.

Display a specific CDP entry matching a name.

Display CDP parameters for all interfaces.

Display CDP parameters for a specified interface.

Display CDP traffic statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the global CDP configuration:

n1000v(config)# show cdp global

Global CDP information:

CDP enabled globally

Sending CDP packets every 5 seconds

Sending a holdtime value of 10 seconds

Sending CDPv2 advertisements is disabled

Sending DeviceID TLV in Mac Address Format

This example shows how to display the CDP configuration for a specified interface:

n1000v(config)# show cdp interface ethernet 2/3

Ethernet2/3 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

This example shows how to display the CDP traffic statistics for a specified interface:

n1000v(config)# show cdp traffic interface ethernet 2/3

----------------------------------------

Traffic statistics for Ethernet2/3

Input Statistics:

Total Packets: 98

Valid CDP Packets: 49

CDP v1 Packets: 49

CDP v2 Packets: 0

Invalid CDP Packets: 49

Unsupported Version: 49

Checksum Errors: 0

Malformed Packets: 0

Output Statistics:

Total Packets: 47

CDP v1 Packets: 47

CDP v2 Packets: 0

Send Errors: 0

This example shows how to display CDP parameters for all interfaces:

n1000v# show cdp all

Ethernet2/2 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

Ethernet2/3 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

Ethernet2/4 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

Ethernet2/5 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

Ethernet2/6 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

mgmt0 is up

CDP enabled on interface

Sending CDP packets every 60 seconds

Holdtime is 180 seconds

Related Commands

Command

Description

Displays the configuration and capabilities of upstream devices.

cdp enable

In interface mode, enables CDP on an interface.

In EXEC mode, enables CDP for your device.

Assigns the CDP version to advertise.

show cdp neighbors

command.

Syntax Description

(Optional) Show CDP neighbors for a specified interface.

Show the detailed configuration of all CDP neighbors.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the configuration and capabilities of upstream devices:

n1000v(config)# show cdp neighbors

Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge

S - Switch, H - Host, I - IGMP, r - Repeater,

V - VoIP-Phone, D - Remotely-Managed-Device,

s - Supports-STP-Dispute

Device ID Local Intrfce Hldtme Capability Platform Port ID

swordfish-6k-2 Eth2/2 169 R S I WS-C6503-E Gig1/14

swordfish-6k-2 Eth2/3 139 R S I WS-C6503-E Gig1/15

swordfish-6k-2 Eth2/4 135 R S I WS-C6503-E Gig1/16

swordfish-6k-2 Eth2/5 177 R S I WS-C6503-E Gig1/17

swordfish-6k-2 Eth2/6 141 R S I WS-C6503-E Gig1/18

This example shows how to display configuration and capabilities of upstream devices for a specific interface:

n1000v(config)# show cdp neighbors interface ethernet 2/3

Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge

S - Switch, H - Host, I - IGMP, r - Repeater,

V - VoIP-Phone, D - Remotely-Managed-Device,

s - Supports-STP-Dispute

Device ID Local Intrfce Hldtme Capability Platform Port ID

swordfish-6k-2 Eth2/3 173 R S I WS-C6503-E Gig1/15

Related Commands

Command

Description

Displays the CDP configuration and capabilities for your device.

cdp enable

In interface mode, enables CDP on an interface.

In EXEC mode, enables CDP for your device.

Assigns the CDP version to advertise.

show cts

To display the global Cisco TrustSec configuration, use the show cts command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec global configuration:

switch# show cts

CTS Global Configuration

==============================

CTS support : enabled

CTS device identity : Device1

CTS caching support : disabled

Number of CTS interfaces in

DOT1X mode : 0

Manual mode : 0

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts credentials

To display the Cisco TrustSec device credentials configuration, use the show cts credentials command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec credentials configuration:

switch# show cts credentials

CTS password is defined in keystore, device-id = Device1

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts environment-data

To display the global Cisco TrustSec environment data, use the show cts environment-data command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

The Cisco NX-OS device downloads the Cisco TrustSec environment data from the ACS after you have configured the Cisco TrustSec credentials for the device and configured authentication, authorization, and accounting (AAA).

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec environment data:

switch# show cts environment-data

CTS Environment Data

==============================

Current State : CTS_ENV_DNLD_ST_ENV_DOWNLOAD_DONE

Last Status : CTS_ENV_SUCCESS

Local Device SGT : 0x0002

Transport Type : CTS_ENV_TRANSPORT_DIRECT

Data loaded from cache : FALSE

Env Data Lifetime : 300 seconds after last update

Last Update Time : Sat Jan 5 16:29:52 2008

Server List : ACSServerList1

AID:74656d706f72617279 IP:10.64.65.95 Port:1812

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts interface

To display the Cisco TrustSec information for interfaces, use the show cts interface command.

Syntax Description

Displays Cisco TrustSec information for all interfaces.

Displays a delete hold timer value.

Ethernet 3/2

Displays Cisco TrustSec information for the specific ethernet interface.

Vethernet 3

Displays Cisco TrustSec information for the specific vethernet interface.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec configuration for all interfaces:

switch# show cts interface all

CTS Information for Interface port-channel1:

CTS is enabled, mode: CTS_MODE_MANUAL

IFC state: Unknown

Authentication Status: CTS_AUTHC_INIT

Peer Identity:

Peer is: Unknown in manual mode

802.1X role: CTS_ROLE_UNKNOWN

Last Re-Authentication:

Authorization Status: CTS_AUTHZ_INIT

PEER SGT: 101

Peer SGT assignment: Trusted

SAP Status: CTS_SAP_INIT

Configured pairwise ciphers:

Replay protection:

Replay protection mode:

Selected cipher:

Current receive SPI:

Current transmit SPI:

Propagate SGT: Enabled

CTS Information for Interface Vethernet17:

CTS is enabled, mode: CTS_MODE_MANUAL

IFC state: Unknown

Authentication Status: CTS_AUTHC_INIT

Peer Identity:

Peer is: Unknown in manual mode

802.1X role: CTS_ROLE_UNKNOWN

Last Re-Authentication:

Authorization Status: CTS_AUTHZ_INIT

PEER SGT: 5

Peer SGT assignment: Not Trusted

SAP Status: CTS_SAP_INIT

Configured pairwise ciphers:

Replay protection:

Replay protection mode:

Selected cipher:

Current receive SPI:

Current transmit SPI:

Propagate SGT: Disabled

CTS Information for Interface Vethernet33:

CTS is enabled, mode: CTS_MODE_MANUAL

IFC state: Unknown

Authentication Status: CTS_AUTHC_INIT

Peer Identity:

Peer is: Unknown in manual mode

802.1X role: CTS_ROLE_UNKNOWN

Last Re-Authentication:

Authorization Status: CTS_AUTHZ_INIT

PEER SGT: 2

Peer SGT assignment: Not Trusted

SAP Status: CTS_SAP_INIT

Configured pairwise ciphers:

Replay protection:

Replay protection mode:

Selected cipher:

Current receive SPI:

This example shows how to display the Cisco TrustSec configuration for a specific interface:

switch# show cts interface vethernet 40

CTS Information for Interface Vethernet40:

CTS is enabled, mode: CTS_MODE_MANUAL

IFC state: Unknown

Authentication Status: CTS_AUTHC_INIT

Peer Identity:

Peer is: Unknown in manual mode

802.1X role: CTS_ROLE_UNKNOWN

Last Re-Authentication:

Authorization Status: CTS_AUTHZ_INIT

PEER SGT: 5

Peer SGT assignment: Not Trusted

SAP Status: CTS_SAP_INIT

Configured pairwise ciphers:

Replay protection:

Replay protection mode:

Selected cipher:

Current receive SPI:

Current transmit SPI:

Propagate SGT: Disabled

provides information about the values displayed in the show cts interface command output.

Table 17-1 show cts interface Command Output Values Descriptions

Value

Description

Authentication Status Field

CTS_AUTHC_INIT

The authentication engine is in initial state.

CTS_AUTHC_SUCCESS

The authentication is successful.

CTS_AUTHC_NO_RESPONSE

The Cisco Access Control Server (ACS) is cannot be reached. No response was received from the Cisco ACS.

CTS_AUTHC_UNAUTHORIZED

The authentication is in progress.

CTS_AUTHC_SKIPPED_CONFIG

The Cisco TrustSec configuration indicates that the device should skip the authentication process.

CTS_AUTHC_REJECT

The Cisco ACS rejected the authentication request.

Authorization Status Field

CTS_AUTHZ_INIT

The authorization engine is in the initial state.

CTS_AUTHZ_SUCCESS

The authorization was successful.

CTS_AUTHZ_REJECT

The ACS rejected the authorization request.

CTS_AUTHZ_SKIPPED_CONFIG

The Cisco TrustSec configuration indicates that the device should skip the authorization process.

CTS_AUTHZ_POL_ACQ_FAILURE

The authorization policy acquisition failed.

CTS_AUTHZ_HW_FAILURE

The authorization programming failed.

CTS_AUTHZ_RBACL_FAILURE

The security group access control groups (SGACLs) failed to download and install.

CTS_AUTHZ_INCOMPLETE

The authorization is in progress.

SAP Status Field

CTS_SAP_INIT

The Security Association Protocol (SAP) negotiation is in the initial state.

CTS_SAP_SUCCESS

The SAP negotiation succeeded.

CTS_SAP_FAILURE

The SAP negotiation failed.

CTS_SAP_SKIPPED_CONFIG

The Cisco TrustSec configuration indicates that the device should skip the SAP negotiation.

CTS_SAP_REKEY

The SAP rekey is in progress.

CTS_SAP_INCOMPLETE

The SAP negotiation in progress.

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts pacs

To display the Cisco TrustSec protect access credentials (PACs) provisioned by EAP-FAST, use the show cts pacs command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec global configuration:

switch# show cts pacs

PAC Info :

==============================

PAC Type : unknown

AID : 74656d706f72617279

I-ID : india1

AID Info : ACS Info

Credential Lifetime : Thu Apr 3 00:36:04 2008

PAC Opaque : 0002008300020004000974656d706f7261727900060070000101001d

6321a2a55fa81e05cd705c714bea116907503aab89490b07fcbb2bd455b8d873f21b5b6b403eb1d8

125897d93b94669745cfe1abb0baf01a00b77aacf0bda9fbaf7dcd54528b782d8206a7751afdde42

1ff4a3db6a349c652fea81809fba4f30b1fffb7bfffaf9a6608

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts role-based access-list

To display the global Cisco TrustSec security group access control list (SGACL) configuration, use the show cts role-based access-list command.

Syntax Description

(Optional) SGACL name.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec SGACL configuration:

switch# show cts role-based access-list

rbacl:test-3

deny ip

rbacl:test-1

deny ip

deny icmp

deny tcp src eq 1000 dest eq 2000

deny udp src range 1000 2000

rbacl:test-2

permit icmp

permit igmp

permit tcp src lt 2000

permit udp dest gt 4000

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show cts role-based counters

To display the configuration status of role-based access control list (RBACL) statistics and list the statistics for all RBACL policies, use the show cts role-based counters command.

Syntax Description

To display the configuration status of role-based access control list (RBACL) statistics.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the configuration status of RBACL statistics and the total number of packets that match RBACL policies for a specific SGT and DGT:

switch# show cts role-based counters

rbacl:Deny IP

deny ip [0]

rbacl:ISE2_AC1

permit icmp [0]

permit igmp [0]

permit tcp [0]

permit udp [0]

permit tcp src eq 126 dst eq 20 [0]

deny all [0]

permit tcp src eq 126 dst eq 25 [0]

permit tcp src eq 126 dst eq 35 [0]

Related Commands

Command

Description

Clears the RBACL statistics so that all counters are reset to 0.

cts role-based counters enable

Enables the RBACL statistics.

show cts role-based policy

To display the global Cisco TrustSec security group access control list (SGACL) policies, use the show cts role-based policy command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode.

Supported User Roles

network-admin

vdc-admin

network-operator

vdc-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

To use this command, you must enable the Cisco TrustSec feature using the feature cts command.

This command requires the Advanced Services license.

Examples

This example shows how to display the Cisco TrustSec SGACL policies:

switch# show cts role-based policy

sgt:unknown

dgt:unknown rbacl:test-2

permit icmp

permit igmp

permit tcp src lt 2000

permit udp dest gt 4000

sgt:1000

dgt:2000 rbacl:test-1

deny ip

deny icmp

deny tcp src eq 1000 dest eq 2000

deny udp src range 1000 2000

sgt:any

dgt:any rbacl:test-3

deny ip

Related Commands

Command

Description

Enables the Cisco TrustSec feature.

show class-map

command.

]]

Syntax Description

(Optional) Specifies the type of the class map.

(Optional) Specifies the type QoS.

(Optional) Name of an existing class map.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the class map configuration for all class maps with the type qos:

n1000v# show class-map type qos

Type qos class-maps

====================

class-map type qos match-all class1

class-map type qos match-all class2

n1000v#

Related Commands

Command

Description

Puts you in Class Map QoS configuration mode for the specified class map, and configures and saves the map name in the running configuration.

match access-group name

Configures and saves the access group to match for this class in the running configuration.

show ip access-lists

Displays all IPv4 access control lists (ACLs) or a specific IPv4 ACL.

show cli variables

command.

command in configuration mode.

Syntax Description

Name of an existing variable.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display user-defined CLI persistent variables:

n1000v# show cli variables

VSH Variable List

-----------------

TIMESTAMP="2008-07-02-13.45.15"

testinterface="ethernet 3/1"

.

n1000v# cli no var name mgmtport

n1000v#

Related Commands

Command

Description

Defines a command-line interface (CLI) variable for a terminal session.

run-script

Runs a command script that is saved in a file.

show cores

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

System core image files are generated when a service fails.

Examples

This example shows how to display recent core images:

n1000v# show cores

Module-num Instance-num Process-name PID Core-create-time

---------- ------------ ------------ --- ----------------

n1000v#

Related Commands

Command

Description

Displays information regarding process logs.

show cts

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

To use this command, you enable the Cisco TrustSec feature.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS configuration:

n1000v# show cts

CTS Global Configuration

==============================

CTS support : enabled

CTS device identity : not configured

SGT : 0

CTS caching support : disabled

Number of CTS interfaces in

DOT1X mode : 0

Manual mode : 0

n1000v#

Related Commands

Command

Description

feature cts

Enables Cisco TrustSec on Cisco Nexus 1000V.

Displays the SXP configuration for Cisco TrustSec.

show cts device tracking

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS device tracking configuration:

n1000v# show cts device tracking

enabled

n1000v#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Enables the device tracking on Cisco TrustSec SXP.

show cts interface delete-hold timer

interface delete-hold timer command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS configuration:

n1000v# configure terminal

n1000v# cts interface delete-hold timer 120

n1000v# show cts interface delete-hold timer

120

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Configures the delete hold timer period for an interface for Cisco TrustSec.

show cts ipsgt entries

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display SGT related configuration:

n1000v# show cts ipsgt entries

Interface SGT IP ADDRESS VRF Learnt

-------------- ------ ---------------- ---------- ---------

- 100 1.1.1.1 default Cli Configured

- 200 2.2.2.3 management Cli Configured

switch(config)#

n1000V(config)# show cts ipsgt entries vrf default

Interface SGT IP ADDRESS Pushed Learnt

-------------- ------ ---------------- ---------- ---------

Vethernet2 6766 10.78.1.76 Yes Device Tracking

n1000V(config)# show cts ipsgt entries vrf management

Interface SGT IP ADDRESS Pushed Learnt

-------------- ------ ---------------- ---------- ---------

Vethernet2 6766 10.78.1.76 Yes Device Tracking

- 545 99.10.10.10 Yes Cli Configured

n1000V(config)# show cts ipsgt entries

Interface SGT IP ADDRESS VRF Learnt

-------------- ------ ---------------- ---------- ---------

Vethernet2 6766 10.78.1.76 - Device Tracking

- 545 99.10.10.10 management Cli Configured

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the SXP configuration for Cisco TrustSec.

cts role-based sgt-map

Configures the Cisco TrustSec security group tag (SGT) mapping to the host IP addresses.

show cts role-based sgt-map

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display IP-SGT mapping:

n1000v# show cts role-based sgt-map

IP ADDRESS SGT VRF/VLAN SGT CONFIGURATION

1.1.1.1 100 vrf:1 CLI Configured

2.2.2.3 200 vrf:2 CLI Configured

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the SXP configuration for Cisco TrustSec.

cts role-based sgt-map

Configures the Cisco TrustSec security group tag (SGT) mapping to the host IP addresses.

show cts sxp

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS SXP configuration:

n1000v# show cts sxp

CTS SXP Configuration:

SXP enabled

SXP retry timeout:60

SXP reconcile timeout:120

Minimum SXP Version: 1

Maximum SXP Version:1

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Enables the Security Group Tag (SGT) Exchange Protocol (SXP) peer on a device.

show cts sxp connection

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS SXP connection information:

n1000v# show cts sxp

PEER_IP_ADDR VRF PEER_SXP_MODE SELF_SXP_MODE CONNECTION STATE

172.23.233.94 management listener speaker initializing

n1000v(config)#

Related Commands

Command

Description

show cts

Displays Cisco TrustSec configuration.

Displays the SXP configuration for Cisco TrustSec.

cts sxp connection peer

Configures a Security Group Tag (SGT) Exchange Protocol (SXP) peer connection for Cisco TrustSec.

show ecp

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None

Examples

The following example shows the configured information for ECP.

n1000v# show ecp

ECP Max ReTries : 3

ECP Retransmition Timer Exp : 14(163840 micro seconds)

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

show ecp module

command.

Syntax Description

The module ID for which you want to display state information and statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the ecp module information:

n1000v# show ecp mod 4

ECP Max ReTries : 3

ECP Retransmition Timer Exp : 14(163840 micro seconds)

TX Sequence No : 127

Retry Count : 0

TX Count : 0

TX Count Errors : 0

In TX Queue : 0

RX Count : 0

RX Sequence : 42634

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

Displays the ECP information.

show evb

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None

Examples

This example shows the evb segmentation information:

n1000v# show evb

Edge Virtual Bridging

Role : VDP Station

VDP Mac Address : 0180.0000.0000

VDP Resource Wait Delay : 22(66 secs)

VDP Reinit Keep Alive : 21(20 secs)

Related Commands

Command

Description

Displays the running configuration for the EVB segmentation.

Displays evb information for a module.

show evb module

command.

Syntax Description

The module ID for which you want to display the evb information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

You must have the EVB feature enabled before executing this command.

Examples

This example shows how to display evb module information.

n1000V# show evb mod 4

Edge Virtual Bridging

Role : VDP Station

VDP Mac Address : 2020.1111.2222

VDP Resource Wait Delay : 20(17 secs)

VDP Reinit Keep Alive : 20(10 secs)

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

Displays the ECP information.

show evb vsi

command.

evb vsi interface veth

Syntax Description

Name of an interface veth .

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to display the VDP VSI information from Cisco Nexus 1000V VEMs.

switch # show evb vsi interface vethernet 15

LTL : 50 [module: 4]

Segment : 33333

MAC : 0050.5693.7D25

IP : 222.222.221.100

VSI State : 3

State Machine State : 8

Rwd Expiry Count : 20999

Last CMD Time : 1

Last RSP Time : 0

switch # show ecp

ECP Max ReTries : 3

ECP Retransmition Timer Exp : 14(163840 micro seconds)

switch # show ecp mod 4

ECP Max ReTries : 3

ECP Retransmition Timer Exp : 14(163840 micro seconds)

TX Sequence No : 34778

Retry Count : 0

TX Count : 0

TX Count Errors : 21

In TX Queue : 0

RX Count : 0

RX Sequence : 11040

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

Displays the ECP information.

Displays the EVB information for a module.

show fabric forwarding

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None

Examples

This example shows the fabric forwarding feature enabled.

n1000v# show fabric forwarding

Gateway mac-address: 2020.1111.2222

Related Commands

Command

Description

Displays the running configuration for the fabric forwarding feature on teh Cisco Nexus 1000V.

show feature

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was modified to list the VXLAN gateway feature state.

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Specifies all the features enabled on VSM.

Examples

This example shows how to display available features and whether they are enabled:

n1000v# show feature

Feature Name Instance State

-------------------- -------- --------

cts 1 enabled

dhcp-snooping 1 enabled

http-server 1 enabled

lacp 1 disabled

netflow 1 enabled

network-segmentation 1 disabled

port-profile-roles 1 enabled

private-vlan 1 enabled

segmentation 1 enabled

sshServer 1 enabled

tacacs 1 disabled

telnetServer 1 enabled

vtracker 1 disabled

vxlan-gateway 1 enabled

n1000v(config)#

Related Commands

Command

Description

Enables LACP support for port channels.

Enables DHCP snooping support.

Enables NetFlow support.

feature evb

Enables the EVB feature.

Enables private VLAN support.

show file

command.

]

Syntax Description

Specifies a directory or filename.

Specifies a directory or filename on volatile flash.

Specifies a directory or filename on expansion flash.

Portion of the filename to be displayed. Pressing Tab lists any existing files that match the partial name.

Displays CRC checksum for a file.

Displays MD5 checksum for a file.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you type a partial filename and then press Tab, the CLI completes the filename if the characters that you typed are unique to a single file.

If not, the CLI lists a selection of filenames that match the characters that you typed.

You can then retype enough characters to make the filename unique; and CLI completes the filename for you.

Examples

This example shows how to display a full filename by entering a partial filename and pressing the Tab key:

n1000v# show file bootflash:nexus-1000v <Tab>

bootflash:nexus-1000v-dplug-mzg.4.0.4.SV1.0.42.bin bootflash:nexus-1000v-mzg.4.0.4.SV1.0.42.bin

bootflash:nexus-1000v-kickstart-mzg.4.0.4.SV1.0.42.bin

Related Commands

Command

Description

Displays the contents of a directory or file.

copy

Copies a file from the specified source location to the specified destination location.

mkdir

Creates a directory at the current directory level.

rmdir

Removes a directory.

show flow exporter

command.

]

Syntax Description

(Optional) Name of an existing flow exporter.

Defaults

None

Command Modes

CLI flow exporter configuration (config-flow-exporter)

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the flow exporter:

n1000v(config-flow-exporter)# show flow exporter

Related Commands

Command

Description

Creates a flow exporter, saves it in the running configuration, and then places you in CLI flow exporter configuration mode.

show flow interface

Displays flow interface information.

show flow monitor

Displays the monitor configuration.

show flow record

Displays the record configuration.

show flow interface

command.

}

Syntax Description

Indicates Ethernet IEEE 802.3z.

Number that identifies this interface. The range is 1–1048575.

Indicates virtual Ethernet interface.

Number identifying the slot. The range is 1–66.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display NetFlow configuration information for vEthernet slot 2:

n1000v(config-if)# show flow interface veth 2

Interface veth 2:

Monitor: MonitorTest

Direction: Output

Related Commands

Command

Description

Creates a flow monitor, by name, saves it in the running configuration, and then places you in the CLI flow monitor configuration mode.

Creates a flow exporter, saves it in the running configuration, and puts you in CLI flow exporter configuration mode.

show flow exporter

Displays information about the flow exporter.

show flow monitor

Displays the monitor configuration.

show flow record

Displays the record configuration.

show flow monitor

command.

]

show flow monitor name {cache | statistics} module number

Syntax Description

(Optional) Name of an existing flow monitor.

number

(Optional) Number of a VEM module.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

5.2(1)SV3(1.1)

The cache and statistics options were introduced.

Examples

This example shows how to display information about the flow monitor called MonitorTest:

n1000v(config-flow-monitor)# show flow monitor MonitorTest

Flow Monitor MonitorTest:

Use count: 4

Flow Record: RecordTest

Flow Exporter: ExporterTest

This example shows how to display cache and statistics information about the flow monitor called MonitorTest. The cache option is a superset of the statistics option:

n1000v(config-flow-monitor)# show flow monitor MonitorTest cache module 3

Cache type: Normal

Cache size (Bytes): 224

Active Flows: 4

Flows added: 4

Packets added: 218

Flows aged: 0

- Watermark aged 0

- Inactive timeout 0

- Active timeout 0

- Event aged 0

- Emergency aged 0

- Permanent 0

- Immediate aged 0

- Session aged 0

- Fast aged 0

- Counters Overflow 0

* Denotes interface no longer exists, so just the IF Handle is displayed

IPV4 SRC ADDR IPV4 DST ADDR INTF INPUT INTF OUTPUT FLOW DIRN bytes pkts time first time last

=======================================================================================

192.168.0.15 192.168.0.11 Veth4 Veth6 Input 5390 55 261471738 261525781

192.168.0.11 192.168.0.15 Veth6 Veth4 Input 5390 55 261471739 261525782

192.168.0.14 192.168.0.10 Veth1 Veth5 Input 5292 54 261472199 261525248

192.168.0.10 192.168.0.14 Veth5 Veth1 Input 5292 54 261472200 261525249

Related Commands

Command

Description

Creates a flow monitor, by name, saves it in the running configuration, and then places you in the CLI flow monitor configuration mode.

show flow exporter

Displays information about the flow exporter.

show flow record

Displays the record configuration.

show flow record

command.

}}]

Syntax Description

(Optional) Name of an existing NetFlow flow record.

(Optional) Specifies traditional IPv4 input NetFlow with an AS origin.

(Optional) Specifies traditional NetFlow collection schemes.

Specifies IPv4 collection schemes.

Indicates the input NetFlow.

Indicates the output NetFlow.

Specifies the protocol and ports aggregation scheme.

Defaults

None

Command Modes

CLI flow exporter configuration (config-flow-exporter)

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was modified to change the protocol-port attribute to netflow protocol-port.

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the NetFlow flow record called RecordTest:

n1000v# config t

n1000v(config)# flow record RecordTest

n1000v(config-flow-record)# show flow record RecordTest

Flow record RecordTest:

Description: Ipv4flow

No. of users: 0

Template ID: 0

Fields:

match ipv4 destination address

match interface input

match interface output

match flow direction

collect counter packets

n1000v(config-flow-record)#

Related Commands

Command

Description

Creates a flow monitor, by name, saves it in the running configuration, and then puts you in the CLI flow monitor configuration mode.

Creates a flow exporter, saves it in the running configuration, and then puts you in CLI flow exporter configuration mode.

show flow exporter

Displays information about the flow exporter.

show interface brief

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display a short version of the interface configuration:

n1000v# show int brief

--------------------------------------------------------------------------------

Port VRF Status IP Address Speed MTU

--------------------------------------------------------------------------------

mgmt0 -- up 172.23.232.141 1000 1500

--------------------------------------------------------------------------------

Ethernet VLAN Type Mode Status Reason Speed Port

Interface Ch #

--------------------------------------------------------------------------------

Eth3/2 1 eth trunk up none 1000(D) --

Eth3/3 1 eth access up none 1000(D) --

n1000v#

Related Commands

Command

Description

Adds, removes or configures interfaces.

show interface ethernet

Displays information about Ethernet interfaces.

show interface port-channel

Displays descriptive information about port channels.

show interface switchport

Displays information about switchport interfaces.

show interface trunk

Displays information about all the trunk interfaces.

show interface vethernet

Displays statistical information about vEthernet interfaces.

show interface capabilities

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any configuration mode

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the capabilities of the interfaces:

n1000v# show interface capabilities

mgmt0

Model: --

Type: --

Speed: 10,100,1000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: no

Broadcast suppression: none

Flowcontrol: rx-(none),tx-(none)

Rate mode: none

QOS scheduling: rx-(none),tx-(none)

CoS rewrite: yes

ToS rewrite: yes

SPAN: yes

UDLD: yes

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

port-channel1

Model: unavailable

Type: unknown

Speed: 10,100,1000,10000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: yes

Broadcast suppression: percentage(0-100)

Flowcontrol: rx-(off/on/desired),tx-(off/on/desired)

Rate mode: none

QOS scheduling: rx-(none),tx-(none)

CoS rewrite: yes

ToS rewrite: yes

SPAN: yes

UDLD: no

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

port-channel2

Model: unavailable

Type: unknown

Speed: 10,100,1000,10000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: yes

Broadcast suppression: percentage(0-100)

Flowcontrol: rx-(off/on/desired),tx-(off/on/desired)

Rate mode: none

QOS scheduling: rx-(none),tx-(none)

CoS rewrite: yes

ToS rewrite: yes

SPAN: yes

UDLD: no

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

port-channel12

Model: unavailable

Type: unknown

Speed: 10,100,1000,10000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: yes

Broadcast suppression: percentage(0-100)

Flowcontrol: rx-(off/on/desired),tx-(off/on/desired)

Rate mode: none

QOS scheduling: rx-(none),tx-(none)

CoS rewrite: yes

ToS rewrite: yes

SPAN: yes

UDLD: no

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

control0

Model: --

Type: --

Speed: 10,100,1000,auto

Duplex: half/full/auto

Trunk encap. type: 802.1Q

Channel: no

Broadcast suppression: none

Flowcontrol: rx-(none),tx-(none)

Rate mode: none

QOS scheduling: rx-(none),tx-(none)

CoS rewrite: yes

ToS rewrite: yes

SPAN: yes

UDLD: yes

Link Debounce: no

Link Debounce Time: no

MDIX: no

Port Group Members: none

n1000v#

Related Commands

Command

Description

Displays the status for a specified Ethernet interface.

interface switchport

Displays interface configuration information, including the mode.

interface trunk

Displays information, including access and trunk interface, for all Layer 2 interfaces.

interface counters

Displays the counters for a specified Ethernet interface.

show interface brief

Displays a short version of the interface configuration.

show interface counters

To display the list of interface counters, use the show interface counters command.

Syntax Description

This command has no argument or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

.

Examples

This example shows how to display the list of interface counters:

n1000v# show interface counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts

--------------------------------------------------------------------------------

mgmt0 224396010 562676

Eth8/2 1106222375 703688

Veth1 2700 0

control0 155152164 501981

--------------------------------------------------------------------------------

Port InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

mgmt0 148552 656058

Eth8/2 15051 2093981

Veth1 0 45

control0 999 119539

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts

--------------------------------------------------------------------------------

mgmt0 14803330 56509

Eth8/2 164990676 514040

Veth1 820595312 17385

control0 251243 0

--------------------------------------------------------------------------------

Port OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

mgmt0 1001 1001

Eth8/2 11451 70

Veth1 108 1383772

control0 1001 0

Related Commands

Command

Description

Clears the counters for the specified interfaces.

show interface counters trunk

command.

Syntax Description

Specifies the module number and port number for the trunk interface that you want to display.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The device supports only IEEE 802.1Q encapsulation. This command also displays the counters for trunk port channels.

Examples

This example shows how to display the counters for a trunk interface. This display shows the frames transmitted and received through the trunk interface, as well as the number of frames with the wrong trunk encapsulation:

n1000v# show interface ethernet 2/9 counters trunk

---------------------------------------------------------------------

Port TrunkFramesTx TrunkFramesRx WrongEncap

---------------------------------------------------------------------

Ethernet2/9 0 0 0

n1000v#

Related Commands

Command

Description

Clears the counters for the specified interfaces.

show interface ethernet

command.

]

Syntax Description

Slot number of the interface that you want to display. The slot number range is from 1 to 66, and the port number range is from 1 to 256.

(Optional) Specifies to display only a brief summary of the information for the specified interface.

capabilities

(Optional) Specifies to display capability information for the specified interface.

debounce

(Optional) Specifies to display interface debounce time information.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

4.0(4)SV1(2)

Displays 5-minute input and output packet/bit rate statistics for the specified Ethernet interface.

Examples

This example shows how to display statistical information for Ethernet interface 3/2:

n1000v# show interface ethernet 3/2

Ethernet3/2 is up

Hardware: Ethernet, address: 0050.5652.a9ba (bia 0050.5652.a9ba)

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,

reliability 0/255, txload 0/255, rxload 0/255

Encapsulation ARPA

Port mode is trunk

full-duplex, 1000 Mb/s

Beacon is turned off

Auto-Negotiation is turned off

Input flow-control is off, output flow-control is off

Auto-mdix is turned on

Switchport monitor is off

5 minute input rate 570 bytes/second, 6 packets/second

5 minute output rate 220 bytes/second, 0 packets/second

Rx

7570522 Input Packets 1120178 Unicast Packets

5340163 Multicast Packets 1110181 Broadcast Packets

647893616 Bytes

Tx

1177170 Output Packets 1168661 Unicast Packets

7269 Multicast Packets 1240 Broadcast Packets 0 Flood Packets

252026472 Bytes

4276048 Input Packet Drops 0 Output Packet Drops

1 interface resets

Related Commands

Command

Description

Clears the interface statistics.

show interface ethernet counters

command.

]

Syntax Description

Slot number of the interface that you want to display. The slot number range is from 1 to 66, and the port number range is from 1 to 256.

detailed

errors

snmp

storm-control

the storm-control counters for the specified interface.

trunk

the trunk counters for the specified interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display counters for Ethernet interface 3/2:

n1000v# show interface ethernet 3/2 counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

Eth3/2 684023652 1182824 5637863 1171780

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

n1000v# 265927107 1233866 7269 1240

Related Commands

Command

Description

Clears the interface statistics.

show interface ethernet status

command.

]

Syntax Description

Slot number of the interface that you want to display. The slot number range is from 1 to 66, and the port number range is from 1 to 256.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the err-disabled status for Ethernet interface 3/2:

n1000v# show interface ethernet 3/2 status err-disabled

--------------------------------------------------------------------------------

Port Name Status Reason

--------------------------------------------------------------------------------

Eth3/2 -- up none

Related Commands

Command

Description

Clears the interface statistics.

show interface ethernet transceiver

command.

]

Syntax Description

Slot number of the interface that you want to display. The slot number range is from 1 to 66, and the port number range is from 1 to 256.

details

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display transceiver information for Ethernet interface 3/2:

n1000v# show interface ethernet 3/2 transceiver calibrations

Ethernet3/2

sfp is not applicable

Related Commands

Command

Description

Clears the interface statistics.

show interface <interface> counters

To display the list of interface counters, use the show interface <interface> counters command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display transceiver information for Ethernet interface 3/2:

n1000v# show interface ethernet 3/3 counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts

--------------------------------------------------------------------------------

Eth3/3 2758912097290 3176383355

--------------------------------------------------------------------------------

Port InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

Eth3/3 30704417 328764864

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts

--------------------------------------------------------------------------------

Eth3/3 1260831342 184281

--------------------------------------------------------------------------------

Port OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

Eth3/3 67066 14042802

n1000v#

n1000v# show interface vethernet 12 counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts

--------------------------------------------------------------------------------

Veth12 3816166241 6370097

--------------------------------------------------------------------------------

Port InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

Veth12 77587 1536842

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts

--------------------------------------------------------------------------------

Veth12 506410315368 920858203

--------------------------------------------------------------------------------

Port OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

Veth12 147530 25779496

n1000v#

n1000v# show interface port-channel 2 counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts

--------------------------------------------------------------------------------

Po2 7557853337 7828932

--------------------------------------------------------------------------------

Port InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

Po2 77510 8506296

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts

--------------------------------------------------------------------------------

Po2 2535587 2

--------------------------------------------------------------------------------

Port OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

Po2 14822 7

n1000v#

Related Commands

Command

Description

Clears the interface statistics.

show interface port-channel

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to display information for a specific port channel. This command displays statistical information gathered on the port channel at 1-minute intervals:

n1000v(config)# show interface port-channel 50

port-channel50 is down (No operational members)

Hardware is Port-Channel, address is 0000.0000.0000 (bia 0000.0000.0000)

MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA

Port mode is access

auto-duplex, auto-speed

Beacon is turned off

Input flow-control is off, output flow-control is off

Switchport monitor is off

Members in this channel: Eth2/10

Last clearing of "show interface" counters 2d71.2uh

5 minute input rate 0 bytes/sec, 0 packets/sec

5 minute output rate 0 bytes/sec, 0 packets/sec

Rx

0 input packets 0 unicast packets 0 multicast packets

0 broadcast packets 0 jumbo packets 0 storm suppression packets

0 bytes

Tx

0 output packets 0 multicast packets

0 broadcast packets 0 jumbo packets

0 bytes

0 input error 0 short frame 0 watchdog

0 no buffer 0 runt 0 CRC 0 ecc

0 overrun 0 underrun 0 ignored 0 bad etype drop

0 bad proto drop 0 if down drop 0 input with dribble

0 input discard

0 output error 0 collision 0 deferred

0 late collision 0 lost carrier 0 no carrier

0 babble

0 Rx pause 0 Tx pause 0 reset

This example shows how to display a brief description for a specific port channel, including the mode for the port channel, the status, speed, and protocol:

n1000v# show interface port-channel 5 brief

--------------------------------------------------------------------------------

Port-channel VLAN Type Mode Status Reason Speed Protocol

Interface

--------------------------------------------------------------------------------

eth access down No operational members auto(D) lacp

This example shows how to display the description for a specific port channel:

n1000v# show interface port-channel 5 description

-------------------------------------------------------------------------------

Interface Description

-------------------------------------------------------------------------------

port-channel5 test

This example shows how to display the flow-control information for a specific port channel:

n1000v# show interface port-channel 50 flowcontrol

------------------------------------------------------------------------------

Port Send FlowControl Receive FlowControl RxPause TxPause

admin oper admin oper

------------------------------------------------------------------------------

Po50 off off off off 0 0

This example shows how to display the status of a specific port channel:

n1000v# show interface port-channel 5 status

--------------------------------------------------------------------------------

Port Name Status Vlan Duplex Speed Type

--------------------------------------------------------------------------------

test down 1 auto auto --

This example shows how to display information for a specific Layer 2 port channel:

n1000v# show interface port-channel 50 switchport

Name: port-channel50

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: trunk

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Enabled: 1-3967,4048-4093

Administrative private-vlan primary host-association: none

Administrative private-vlan secondary host-association: none

Administrative private-vlan primary mapping: none

Administrative private-vlan secondary mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

Name: port-channel20

Switchport: Disabled

This example shows how to display information for a specific Layer 2 port channel that is in trunk mode:

n1000v# show interface port-channel 5 trunk

n1000v# show interface port-channel 50 trunk

port-channel50 is down (No operational members)

Hardware is Ethernet, address is 0000.0000.0000

MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec

Port mode is access

Speed is auto-speed

Duplex mode is auto

Beacon is turned off

Receive flow-control is off, Send flow-control is off

Rate mode is dedicated

Members in this channel: Eth2/10

Native Vlan: 1

Allowed Vlans: 1-3967,4048-4093

Related Commands

Command

Description

Displays the statistics for channel groups.

Displays summary information for all channel groups.

show interface port-channel counters

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command displays statistics for all port channels including LACP-enabled port channels and those port channels that are not associated with an aggregation protocol.

Examples

This example shows how to display the counters for a specific port channel. This display shows the transmitted and received unicast and multicast packets:

n1000v# show interface port-channel 2 counters

Port InOctets InUcastPkts InMcastPkts InBcastPkts

Po2 6007 1 31 1

Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts

Po2 4428 1 25 1

n1000v#

This example shows how to display the brief counters for a specific port channel. This display shows the transmitted and received rate and total frames:

n1000v# show interface port-channel 20 counters brief

-------------------------------------------------------------------------------

Interface Input (rate is 1 min avg) Output (rate is 1 min avg)

------------------------- -----------------------------

Rate Total Rate Total

MB/s Frames MB/s Frames

-------------------------------------------------------------------------------

port-channel20 0 0 0 0

This example shows how to display all the detailed counters for a specific port channel:

n1000v# show interface port-channel 20 counters detailed all

port-channel20

64 bit counters:

0. rxHCTotalPkts = 0

1. txHCTotalPks = 0

2. rxHCUnicastPkts = 0

3. txHCUnicastPkts = 0

4. rxHCMulticastPkts = 0

5. txHCMulticastPkts = 0

6. rxHCBroadcastPkts = 0

7. txHCBroadcastPkts = 0

8. rxHCOctets = 0

9. txHCOctets = 0

10. rxTxHCPkts64Octets = 0

11. rxTxHCpkts65to127Octets = 0

12. rxTxHCpkts128to255Octets = 0

13. rxTxHCpkts256to511Octets = 0

14. rxTxHCpkts512to1023Octets = 0

15. rxTxHCpkts1024to1518Octets = 0

16. rxTxHCpkts1519to1548Octets = 0

17. rxHCTrunkFrames = 0

18. txHCTrunkFrames = 0

19. rxHCDropEvents = 0

All Port Counters:

0. InPackets = 0

1. InOctets = 0

2. InUcastPkts = 0

3. InMcastPkts = 0

4. InBcastPkts = 0

5. InJumboPkts = 0

6. StormSuppressPkts = 0

7. OutPackets = 0

8. OutOctets = 0

9. OutUcastPkts = 0

10. OutMcastPkts = 0

11. OutBcastPkts = 0

12. OutJumboPkts = 0

13. rxHCPkts64Octets = 0

14. rxHCPkts65to127Octets = 0

15. rxHCPkts128to255Octets = 0

16. rxHCPkts256to511Octets = 0

17. rxHCpkts512to1023Octets = 0

18. rxHCpkts1024to1518Octets = 0

19. rxHCpkts1519to1548Octets = 0

20. txHCPkts64Octets = 0

21. txHCPkts65to127Octets = 0

22. txHCPkts128to255Octets = 0

23. txHCPkts256to511Octets = 0

24. txHCpkts512to1023Octets = 0

25. txHCpkts1024to1518Octets = 0

26. txHCpkts1519to1548Octets = 0

27. ShortFrames = 0

28. Collisions = 0

29. SingleCol = 0

30. MultiCol = 0

31. LateCol = 0

32. ExcessiveCol = 0

33. LostCarrier = 0

34. NoCarrier = 0

35. Runts = 0

36. Giants = 0

37. InErrors = 0

38. OutErrors = 0

39. InputDiscards = 0

40. BadEtypeDrops = 0

41. IfDownDrops = 0

42. InUnknownProtos = 0

43. txCRC = 0

44. rxCRC = 0

45. Symbol = 0

46. txDropped = 0

47. TrunkFramesTx = 0

48. TrunkFramesRx = 0

49. WrongEncap = 0

50. Babbles = 0

51. Watchdogs = 0

52. ECC = 0

53. Overruns = 0

54. Underruns = 0

55. Dribbles = 0

56. Deferred = 0

57. Jabbers = 0

58. NoBuffer = 0

59. Ignored = 0

60. bpduOutLost = 0

61. cos0OutLost = 0

62. cos1OutLost = 0

63. cos2OutLost = 0

64. cos3OutLost = 0

65. cos4OutLost = 0

66. cos5OutLost = 0

67. cos6OutLost = 0

68. cos7OutLost = 0

69. RxPause = 0

70. TxPause = 0

71. Resets = 0

72. SQETest = 0

73. InLayer3Routed = 0

74. InLayer3RoutedOctets = 0

75. OutLayer3Routed = 0

76. OutLayer3RoutedOctets = 0

77. OutLayer3Unicast = 0

78. OutLayer3UnicastOctets = 0

79. OutLayer3Multicast = 0

80. OutLayer3MulticastOctets = 0

81. InLayer3Unicast = 0

82. InLayer3UnicastOctets = 0

83. InLayer3Multicast = 0

84. InLayer3MulticastOctets = 0

85. InLayer3AverageOctets = 0

86. InLayer3AveragePackets = 0

87. OutLayer3AverageOctets = 0

88. OutLayer3AveragePackets = 0

This example shows how to display the error counters for a specific port channel:

n1000v# show interface port-channel 5 counters errors

--------------------------------------------------------------------------------

Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize OutDiscards

--------------------------------------------------------------------------------

Po5 0 0 0 0 0 0

--------------------------------------------------------------------------------

Port Single-Col Multi-Col Late-Col Exces-Col Carri-Sen Runts

--------------------------------------------------------------------------------

Po5 0 0 0 0 0 0

--------------------------------------------------------------------------------

Port Giants SQETest-Err Deferred-Tx IntMacTx-Er IntMacRx-Er Symbol-Err

--------------------------------------------------------------------------------

0 -- 0 0 0 0

This example shows how to display information about the trunk interfaces for a specific port channel:

n1000v# show interface port-channel 5 counters trunk

-------------------------------------------------------------------------------

Port TrunkFramesTx TrunkFramesRx WrongEncap

-------------------------------------------------------------------------------

port-channel5 0 0 0

Related Commands

Command

Description

Clears the statistics for all interfaces that belong to a specific channel group.

show interface status

command.

]

Syntax Description

(Optional) Specifies interfaces that are in the down state.

err-disabled

(Optional) Specifies interfaces that are in the errdisabled state.

inactive

(Optional) Specifies interfaces that are in the inactive state.

module

(Optional) Limits the display to interfaces on a particular module.

Number that identifies an existing module. The range is 1–66.

up

(Optional) Specifies interfaces that are in the up state.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display line status for interfaces in the up state:

n1000v# show interface status up

--------------------------------------------------------------------------------

Port Name Status Vlan Duplex Speed Type

--------------------------------------------------------------------------------

mgmt0 -- up routed full 1000 --

ctrl0 -- up routed full 1000 --

n1000v#

Related Commands

Command

Description

show interface brief

Displays a short version of the interface configuration.

show interface

Displays interface status and information.

show interface capabilities

Displays information about interface capabilities.

interface

Adds, removes, or configures interfaces.

show interface switchport

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you do not specify an interface, this command displays information about all Layer 2 interfaces, including access, trunk, and port channel interfaces and all private VLAN ports.

Examples

This example shows how to display information for all Layer 2 interfaces:

n1000v# show interface switchport

Name: Ethernet2/5

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: access

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Enabled: 1-3967,4048-4093

Administrative private-vlan primary host-association: none

Administrative private-vlan secondary host-association: none

Administrative private-vlan primary mapping: none

Administrative private-vlan secondary mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

Name: Ethernet2/9

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: trunk

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Enabled: 1-3967,4048-4093

Administrative private-vlan primary host-association: none

Administrative private-vlan secondary host-association: none

Administrative private-vlan primary mapping: none

Administrative private-vlan secondary mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

Name: port-channel5

Switchport: Enabled

Switchport Monitor: Not enabled

Operational Mode: access

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Trunking VLANs Enabled: 1-3967,4048-4093

Administrative private-vlan primary host-association: none

Administrative private-vlan secondary host-association: none

Administrative private-vlan primary mapping: none

Administrative private-vlan secondary mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

n1000v#

Related Commands

Command

Description

Sets the specified interfaces as either Layer 2 access or trunk interfaces.

Displays statistics for a specified Layer 2 interface.

show interface trunk

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If you do not specify an interface, a module number or a VLAN number, the system displays information for all trunk interfaces.

This command displays information about all Layer 2 trunk interfaces and trunk port-channel interfaces.

command to display statistics for the specified Layer 2 interface.

Examples

This example shows how to display information for all Layer 2 trunk interfaces:

n1000v(config)# show interface trunk

-----------------------------------------------------------------------------

Port Native Status Port

Vlan Channel

-----------------------------------------------------------------------------

Eth2/9 1 trunking --

Eth2/10 1 trnk-bndl Po50

Po50 1 not-trunking --

-----------------------------------------------------------------------------

Port Vlans Allowed on Trunk

-----------------------------------------------------------------------------

Eth2/9 1-3967,4048-4093

Eth2/10 1-3967,4048-4093

Po50 1-3967,4048-4093

-----------------------------------------------------------------------------

Port STP Forwarding

-----------------------------------------------------------------------------

Eth2/9 none

Eth2/10 none

Po50 none

n1000v#

Related Commands

Command

Description

Sets the specified interfaces as Layer 2 trunk interfaces.

show interface vethernet

command.

]

Syntax Description

(Optional) Number of the interface that you want to display. The range is from 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

4.0(4)SV1(2)

Displays 5-minute input and output packet/bit rate statistics for the specified vEthernet interface.

Examples

This example shows how to display statistical information for vEthernet interface 1:

Vethernet1 is up

Port description is gentoo, Network Adapter 1

Hardware is Virtual, address is 0050.5687.3bac

Owner is VM "gentoo", adapter is Network Adapter 1

Active on module 4

VMware DVS port 1

Port-Profile is vm

Port mode is access

5 minute input rate 1 bytes/second, 0 packets/second

5 minute output rate 94 bytes/second, 1 packets/second

Rx

655 Input Packets 594 Unicast Packets

0 Multicast Packets 61 Broadcast Packets

114988 Bytes

Tx

98875 Output Packets 1759 Unicast Packets

80410 Multicast Packets 16706 Broadcast Packets 0 Flood Packets

6368452 Bytes

0 Input Packet Drops 0 Output Packet Drops

Related Commands

Command

Description

Clears the interface statistics.

show interface vethernet counters

command.

]

Syntax Description

Number of the interface that you want to display. The range is from 1 to 1048575.

detailed

errors

trunk

the trunk counters for the specified interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display counters for vEthernet interface 1:

n1000v# show interface vethernet 1 counters

--------------------------------------------------------------------------------

Port InOctets InUcastPkts InMcastPkts InBcastPkts

--------------------------------------------------------------------------------

Veth1 2434320 5024 12 32363

--------------------------------------------------------------------------------

Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts

--------------------------------------------------------------------------------

Veth1 4357946 4910 127 64494

Related Commands

Command

Description

Clears the interface statistics.

show interface vethernet status

command.

]

Syntax Description

Number of the interface that you want to display. The range is from 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the err-disabled status for vEthernet interface 1:

n1000v# show interface vethernet 1 status err-disabled

--------------------------------------------------------------------------------

Port Name Status Reason

--------------------------------------------------------------------------------

Veth1 VM1-48, Network Ad up none

n1000v#

Related Commands

Command

Description

Clears the interface statistics.

show interface virtual

command.

]

Syntax Description

(Optional) Specifies interfaces owned by a virtual machine.

(Optional) Name that identifies an existing virtual machine.

(Optional) Specifies interfaces owned by the Virtual Machine Kernel.

vswif

(Optional) Specifies interfaces owned by the Virtual Service Console.

module

(Optional) Specifies interfaces on a particular module.

Number that identifies an existing module.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information for virtual interfaces:

n1000v# show interface virtual

--------------------------------------------------------------------------------

Port Adapter Owner Mod Host

--------------------------------------------------------------------------------

Veth1 Vm1-kl61 2

Veth2 VM1-kl65 5

Veth3 VM2-kl61 2

Veth1 Net Adapter 1 austen-gentoo1 33 austen-strider.austen.

Veth2 Net Adapter 2 austen-gentoo1 33 austen-strider.austen.

n1000v#

Related Commands

Command

Description

Displays the virtual port mapping for all vEthernet interfaces.

show interface ethernet

Displays information about Ethernet interfaces.

show interface port-channel

Displays descriptive information about port channels.

show interface trunk

Displays information about all the trunk interfaces.

show interface vethernet

Displays statistical information about vEthernet interfaces.

show interface virtual port-mapping

command.

]

Syntax Description

(Optional) Specifies interfaces owned by a virtual machine.

(Optional) Name that identifies an existing virtual machine.

(Optional) Specifies interfaces owned by the Virtual Machine Kernel.

vswif

(Optional) Specifies interfaces owned by the Virtual Service Console.

module

(Optional) Specifies interfaces on a particular module.

Number that identifies an existing module.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the virtual port mapping for all vEthernet interfaces:

n1000v# show interface virtual port-mapping

--------------------------------------------------------------------------------

Port Hypervisor Port Status Reason

--------------------------------------------------------------------------------

Veth1 DVPort100 up none

Veth2 DVPort160 up none

n1000v#

Related Commands

Command

Description

Displays information about virtual interfaces.

show interface ethernet

Displays information about Ethernet interfaces.

show interface port-channel

Displays descriptive information about port channels.

show interface trunk

Displays information about all the trunk interfaces.

show interface vethernet

Displays statistical information about vEthernet interfaces.

show ip access-list

command.

]

Syntax Description

(Optional) Name of an existing IPv4 access control list.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the IPv4 access control list called protoacl:

n1000v(config)# show ip access-lists protoacl

IP access list protoacl

statistics per-entry

10 permit icmp 7.120.1.10/32 7.120.1.20/32

20 permit tcp 7.120.1.10/32 7.120.1.20/32 dscp af11

30 permit udp 7.120.1.10/32 7.120.1.20/32 precedence critical

50 permit ip 7.120.1.20/32 7.120.1.10/32

60 permit ip 7.120.1.20/32 7.120.1.10/32 dscp af11

70 permit ip 7.120.1.20/32 7.120.1.10/32 precedence critical

n1000v#

Related Commands

Command

Description

Creates the IP ACL and enters IP ACL configuration mode.

statistics per-entry

Specifies that the device maintains global statistics for packets that match the rules in the ACL.

show ip access-list summary

Displays the IP ACL configuration. If the ACL remains applied to an interface, the command lists the interfaces.

show ipv6 access-list

To display all IPv6 access control list (ACLs) or a specific IPv6 ACL, use the show ipv6 access-list command.

]

Syntax Description

(Optional) Name of an existing IPv6 access control lists.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display the IPv6 access control lists called protoacl:

n1000v(config)# show ipv6 access-lists protoacl

IPv6 ACL protoacl

statistics per-entry

10 permit ipv6 2001::2010/128 2001::2020/128

20 permit tcp 2001::2010:2010/128 2001::2020:2020/128 dscp af11

30 permit udp 2001::2030/128 2001::2040/128 range 3000-5000

n1000v#

Related Commands

Command

Description

Creates the IPv6 ACL and enter IPv6 ACLs configuration mode.

statistics per-entry

Specifies that the device maintains global statistics for packets that match the rules in the ACL.

show ipv6 access-list summary

Displays the IPv6 ACL configuration. If the ACL remains applied to an interface, the command lists the interfaces.

show logging ip access-list cache module

command.

Syntax Description

The module number of the VEM.

Defaults

None

Command Modes

Any command mode

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the ACL logging configuration for VEM:

n1000v(config)# show logging ip access-list cache module 3

Number of deny flows: 25

Number of permit flows: 30

Total Number of active flows: 55

Related Commands

Command

Description

Enables ACL logging on all VEMs.

show logging ip access-list status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any command mode

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the status of ACL logging configuration for a VSM:

switch(config)# show logging ip access-list status

Max deny flows = 3000

Max permit flows = 3000

Alert interval = 300

Match log level = 6

VSM IP = 192.168.1.1

Syslog IP = 10.1.1.1

Syslog IP = 0.0.0.0

Syslog IP = 0.0.0.0

ACL Logging enabled on module(s):

4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51

52 53 54 55 56 57 58 59 60 61 62 63 64 65 66

ACL Logging disabled on module(s):

3

Related Commands

Command

Description

Enables ACL logging on all VEMs.

show interface virtual spanning-tree bpduguard status

To display bpduguard configuration status for veths, use the show interface virtual spanning-tree bpduguard status command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

This example shows how to display bpduguard configuration status for veths:

n1000v# sh interface virtual spanning-tree bpduguard status

-------------------------------------------------------------------------------

Port Status

-------------------------------------------------------------------------------

Veth1 -

Veth2 -

Veth3 Enabled

Veth4 -

Veth5 Disabled

n1000v#

Related Commands

Command

Description

statistics per-entry

Specifies that the device maintains global statistics for packets that match the rules in the ACL.

show ip access-list

Displays all IPv4 access control lists (ACLs) or a specific IPv4 ACL.

show ip access-list summary

command.

Syntax Description

(Optional) Name of an existing IPv4 access control list.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

If the ACL remains applied to an interface, this command lists the interfaces.

Examples

This example shows how to display the IPv4 access control list called ACL1:

n1000v# show ip access-lists summary IPV4 ACL1

Total ACEs Configured: 1

Configured on interfaces:

Vethernet1 - ingress (Port ACL)

Active on interfaces:

Vethernet1 - ingress (Port ACL)

n1000v#

Related Commands

Command

Description

Creates the IP ACL and enters IP ACL configuration mode.

statistics per-entry

Specifies that the device maintains global statistics for packets that match the rules in the ACL.

show ip access-list

Displays all IPv4 access control lists (ACLs) or a specific IPv4 ACL.

show ipv6 access-list summary

command.

Syntax Description

(Optional) Name of an existing IPv6 access control list.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

If the ACL remains applied to an interface, this command lists the interfaces.

Examples

This example shows how to display the IPv6 access control list called ACL1:

n1000v# show ipv6 access-lists summary IPV6 ACL1

Total ACEs Configured: 1

Configured on interfaces:

Vethernet1 - ingress (Port ACL)

Active on interfaces:

Vethernet1 - ingress (Port ACL)

n1000v#

Related Commands

Command

Description

Creates the IPv6 ACL and enters IPv6 ACLs configuration mode.

statistics per-entry

Specifies that the device maintains global statistics for packets that match the rules in the ACL.

show ipv6 access-list

Displays all IPv6 access control lists (ACLs) or a specific IPv6 ACL.

show ip arp client

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the ARP client table:

n1000v# show ip arp client

Number of ARP Clients: 1

Protocol uuid: 442, Client type: L2

Flags: 8, Recv fn: dhcp_snoop_verify_mac2ip_binding

n1000v#

Related Commands.

Command

Description

Configures the specified VLAN or list of VLANs for Dynamic ARP Inspection (DAI).

show ip arp inspection vlan

Displays the DAI status for the specified list of VLANs.

show ip arp inspection statistics

Displays the DAI statistics.

show ip arp inspection interface

Displays the trust state and the ARP packet rate for a specified interface.

show ip arp statistics

Displays ARP statistics.

show ip arp inspection

command.

show ip arp inspection

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the dynamic ARP inspection configuration:

n1000v# show ip arp inspection

Source Mac Validation : Disabled

Destination Mac Validation : Disabled

IP Address Validation : Disabled

Filter Mode(for static bindings): IP

Vlan : 1

-----------

Configuration : Disabled

Operation State : Inactive

1000v#

Related Commands

Command

Description

Enables Dynamic ARP Inspection (DAI) for a specified list of VLANs.

Displays the DAI statistics.

show ip arp inspection interface

command.

Syntax Description

Specifies that the output is for a vEthernet interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the trust state for a trusted interface:

n1000v# show ip arp inspection interface vethernet 6

Interface Trust State

------------- -----------

vEthernet 6 Trusted

n1000v#

Related Commands

Command

Description

Enables Dynamic ARP Inspection (DAI) for a specified list of VLANs.

Displays the DAI statistics.

show ip arp inspection statistics

command to display the Dynamic ARP Inspection (DAI) statistics. You can specify a VLAN or range of VLANs.

Syntax Description

(Optional) Specifies the list of VLANs for which to display DAI statistics. Valid VLAN IDs are from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the DAI statistics for VLAN 1:

n1000v# show ip arp inspection statistics vlan 1

Vlan : 1

-----------

ARP Req Forwarded = 0

ARP Res Forwarded = 0

ARP Req Dropped = 0

ARP Res Dropped = 0

DHCP Drops = 0

DHCP Permits = 0

SMAC Fails-ARP Req = 0

SMAC Fails-ARP Res = 0

DMAC Fails-ARP Res = 0

IP Fails-ARP Req = 0

IP Fails-ARP Res = 0

n1000v#

Related Commands

Command

Description

Clears the DAI statistics for a specified VLAN.

Displays the trust state and the ARP packet rate for a specified interface.

show ip arp inspection vlan

command.

Syntax Description

Number identifying an existing VLAN, or range of VLANs, from 1–3967 and 4048–4093. You can specify groups of VLANs or individual VLANs; for example, 1–5, 10 or 2–5, 7–19.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the DAI status for VLAN 13:

n1000v# show ip arp inspection vlan 13

Source Mac Validation : Disabled

Destination Mac Validation : Disabled

IP Address Validation : Disabled

Filter Mode(for static bindings): IP

Vlan : 100

-----------

Configuration : Disabled

Operation State : Inactive

Related Commands

Command

Description

Configures the specified VLAN or list of VLANs for DAI.

show ip arp client

Displays the ARP client table.

show ip arp inspection statistics

Displays the DAI statistics.

show ip arp inspection interface

Displays the trust state and the ARP packet rate for a specified interface.

show ip arp statistics

Displays ARP statistics.

show ip arp statistics

command.

}]

Syntax Description

(Optional) Specifies ARP statistics for all interfaces.

(Optional) Specifies information about a specific Virtual Routing and Forwarding (VRF).

Name of an existing VRF.

Displays ARP statistics for all VRFs.

Specifies the default VRF currently in the system configuration.

Specifies the existing VRF currently used for management connections.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display ARP statistics for all VRFs:

n1000v# show ip arp statistics vrf all

ARP packet statistics for all contexts

Sent:

Total 101994, Requests 3920, Replies 98074, Requests on L2 0, Replies on L2 0,

Gratuitous 2, Dropped 0

Received:

Total 8070240, Requests 98074, Replies 4034, Requests on L2 0, Replies on L2 0

Proxy arp 0, Local-Proxy arp 0, Dropped 7968132

Received packet drops details:

Appeared on a wrong interface : 0

Incorrect length : 0

Invalid protocol packet : 228

Invalid context : 0

Context not yet created : 0

Invalid layer 2 address length : 0

Invalid layer 3 address length : 0

Invalid source IP address : 221153

Source IP address is our own : 0

No mem to create per intf structure : 0

Source address mismatch with subnet : 0

Directed broadcast source : 0

Invalid destination IP address : 0

Non-local destination IP address : 7746751

Invalid source MAC address : 0

Source MAC address is our own : 0

Received before arp initialization : 0

Received packet on unknown iod : 0

L2 packet on proxy-arp-enabled interface

: 0

L2 packet on untrusted L2 port : 0

ARP adjacency statistics

Adds 13, Deletes 11, Timeouts 11

Related Commands

Command

Description

Configures the specified VLAN or list of VLANs for Dynamic ARP Inspection (DAI).

show ip arp client

Displays the ARP client table.

show ip arp inspection statistics

Displays the DAI statistics.

show ip arp inspection interface

Displays the trust state and the ARP packet rate for a specified interface.

show ip arp inspection vlan

Displays the DAI status for the specified list of VLANs.

show ip dhcp snooping

command.

show ip dhcp snooping

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display general status information about DHCP snooping:

n1000v# show ip dhcp snooping

DHCP snooping service is enabled

Switch DHCP snooping is enabled

DHCP snooping is configured on the following VLANs:

1,13

DHCP snooping is operational on the following VLANs:

1

Insertion of Option 82 is disabled

Verification of MAC address is enabled

DHCP snooping trust is configured on the following interfaces:

Interface Trusted

------------ -------

vEthernet 3 Yes

n1000v#

Related Commands

Command

Description

Globally enables DHCP snooping on the device.

Displays IP-MAC address bindings, including the static IP source entries.

Displays DHCP snooping statistics.

Displays DHCP snooping configuration.

show ip dhcp snooping binding

command.

Syntax Description

(Optional) IPv4 address that the bindings shown must include. Valid entries are in dotted-decimal format.

(Optional) MAC address that the bindings shown must include. Valid entries are in dotted-hexadecimal format.

(Optional) Specifies the vEthernet interface that the bindings shown must be associated with.

(Optional) Specifies a VLAN ID that the bindings shown must be associated with. Valid VLAN IDs are from 1 to 4096.

(Optional) Limits the output to all dynamic IP-MAC address bindings.

(Optional) Limits the output to all static IP-MAC address bindings.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Usage Guidelines

The command output includes static IP source entries. Static entries appear with the term “static” in the Type column.

Examples

This example shows how to show all bindings:

n1000v# show ip dhcp snooping binding

MacAddress IpAddress LeaseSec Type VLAN Interface

----------------- --------------- -------- ---------- ---- -------------

0f:00:60:b3:23:33 10.3.2.2 infinite static 13 vEthernet 6

0f:00:60:b3:23:35 10.2.2.2 infinite static 100 vEthernet 10

n1000v#

Related Commands

Command

Description

Globally enables DHCP snooping on the device.

Displays general information about DHCP snooping.

show ip dhcp snooping statistics

To display statistics related to the Dynamic Host Configuration Protocol (DHCP), use the show ip dhcp snooping statistics command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Before you can configure DHCP, you must enable the feature using the feature dhcp command.

Examples

This example shows how to display statistics related to DHCP:

n1000v# show ip dhcp snooping statistics

Packets processed 0

Packets received through cfsoe 0

Packets forwarded 0

Total packets dropped 0

Packets dropped from untrusted ports 0

Packets dropped due to MAC address check failure 0

Packets dropped due to Option 82 insertion failure 0

Packets dropped due to o/p intf unknown 0

Packets dropped which were unknown 0

Packets dropped due to dhcp relay not enabled 0

Packets dropped due to no binding entry 0

Packets dropped due to interface error/no interface 0

Packets dropped due to max hops exceeded 0

n1000v#

Related Commands

Command

Description

Globally enables DHCP snooping on the device.

Displays general information about DHCP snooping.

Displays IP-MAC address bindings, including the static IP source entries.

feature dhcp

Enables the DHCP snooping feature on the device.

show ip igmp snooping

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to ensure that IGMP snooping is enabled on the VLAN:

n1000v# show ip igmp snooping

Global IGMP Snooping Information:

IGMP Snooping enabled

IGMPv1/v2 Report Suppression enabled

IGMPv3 Report Suppression disabled

IGMP Snooping information for vlan 1

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 2

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 100

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 101

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 102

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 103

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 104

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 105

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 106

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 107

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 108

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 109

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 115

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 260

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

IGMP Snooping information for vlan 261

IGMP snooping enabled

IGMP querier none

Switch-querier disabled

IGMPv3 Explicit tracking enabled

IGMPv2 Fast leave disabled

IGMPv1/v2 Report suppression enabled

IGMPv3 Report suppression disabled

Router port detection using PIM Hellos, IGMP Queries

Number of router-ports: 0

Number of groups: 0

n1000v#

Related Commands

Command

Description

show cores

Displays a list of cores.

show cdp neighbor

Displays the configuration and capabilities of upstream devices.

module vem execute

Remotely executes commands on the Virtual Ethernet Module (VEM) from the Cisco Nexus 1000V.

show ip igmp snooping groups

Verifies if the Cisco Nexus 1000V is configured correctly and is ready to forward multicast traffic.

show ip igmp snooping explicit-tracking vlan

command.

Syntax Description

Specifies a VLAN ID.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

Related Commands

Command

Description

Ensures that IGMP snooping is enabled on the VLAN.

Verifies if the Cisco Nexus 1000V is configured correctly and is ready to forward multicast traffic.

Displays multicast router ports on the VLAN.

Displays IGMP snooping queriers enabled on the VLAN

show ip igmp snooping groups

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When troubleshooting multicast IGMP issues, execute this command and look for the letter R under the port heading. The R indicates that the Virtual Supervisor Module (VSM) has learned the uplink router port from the IGMP query that was sent by the upstream switch, which means that the Cisco Nexus 1000V is ready to forward multicast traffic.

Examples

This example shows how to ensure that IGMP snooping is enabled on the VLAN:

n1000v# show ip igmp snooping groups

Type: S - Static, D - Dynamic, R - Router port

Vlan Group Address Ver Type Port list

59 */* v3 R Po1

n1000v#n1000v#

Related Commands

Command

Description

Displays the configuration and capabilities of upstream devices.

Remotely executes commands on the Virtual Ethernet Module (VEM) from the Cisco Nexus 1000V.

Ensures that IGMP snooping is enabled on the VLAN.

show ip igmp snooping mrouter

command.

]

Syntax Description

Specifies a VLAN and its ID.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

Related Commands

Command

Description

Ensures that IGMP snooping is enabled on the VLAN.

Verifies if the Cisco Nexus 1000V is configured correctly and is ready to forward multicast traffic.

Display IGMP snooping information for a VLAN.

Displays IGMP snooping queriers enabled on the VLAN

show ip igmp snooping querier

command.

]

Syntax Description

Specifies a VLAN and its ID.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

Related Commands

Command

Description

Ensures that IGMP snooping is enabled on the VLAN.

Verifies if the Cisco Nexus 1000V is configured correctly and is ready to forward multicast traffic.

Display IGMP snooping information for a VLAN.

Displays multicast router ports on the VLAN.

show ip verify source

command.

}]

Syntax Description

(Optional) Specifies that the output is limited to IP-to-MAC address bindings for an interface.

Specifies the vEthernet interface. Range is from 1 to 1048575.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the IP-to-MAC address bindings:

n1000v# show ip verify source

Filter Mode(for static bindings): IP

IP source guard is enabled on the following interfaces:

------------------------------------------------------

IP source guard operational entries:

-----------------------------------

Interface Filter-mode IP-address Mac-address Vlan

------------ ----------- ---------- -------------- ----

(config)#

switch(config)# show ip verify source interface vethernet 1

Filter Mode(for static bindings): IP-MAC

IP source guard is disabled on this interface.

Related Commands

Command

Description

Creates a static IP source entry for the specified Ethernet interface.

Enables IP Source Guard on an interface.

show ip source binding filter-mode

To display the source binding filter mode, use the show ip source binding filter-mode command.

Syntax Description

filter-mode

Filter mode to be used on the switch. The available filter modes are ip and ip-mac. Use the ip filter mode to filter the traffic based on the source IP address. Use the ip-mac filter mode to filter the traffic based on the IP-MAC Address pair.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV2(1.1)

This command was introduced.

Examples

This example shows how to display the IP-to-MAC address bindings:

n1000v# show ip source binding filter-mode

DHCP Snoop Filter Mode(for static bindings) = IP-MAC

cinquedia(config)#

Related Commands

Command

Description

filter-mode [ip| ip-mac]

Creates a static IP source entry for the specified Ethernet interface.

Enables IP Source Guard on an interface.

show lacp counters

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

all channel groups are displayed.

Examples

This example shows how to display the LACP statistics for a specific channel group:

n1000v# show lacp counters interface port-channel 1

LACPDUs Marker Marker Response LACPDUs

Port Sent Recv Sent Recv Sent Recv Pkts Err

-----------------------------------------------------------------------------

port-channel1

Ethernet1/1 554 536 0 0 0 0 0

Ethernet1/2 527 514 0 0 0 0 0

Ethernet1/3 535 520 0 0 0 0 0

Ethernet1/4 515 502 0 0 0 0 0

Ethernet1/5 518 505 0 0 0 0 0

Ethernet1/6 540 529 0 0 0 0 0

Ethernet1/7 541 530 0 0 0 0 0

Ethernet1/8 547 532 0 0 0 0 0

Ethernet1/9 544 532 0 0 0 0 0

Ethernet1/10 513 501 0 0 0 0 0

Ethernet1/11 497 485 0 0 0 0 0

Ethernet1/12 493 486 0 0 0 0 0

Ethernet1/13 492 485 0 0 0 0 0

Ethernet1/14 482 481 0 0 0 0 0

Ethernet1/15 481 476 0 0 0 0 0

Ethernet1/16 482 477 0 0 0 0 0

Related Commands

Command

Description

Clears the statistics for all LACP interfaces or those interfaces that belong to a specific LACP channel group.

show lacp interface

command.

Syntax Description

Slot number and port number for the interface you want to display.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The LACP_Activity field displays whether the link is configured in the active or passive port-channel mode.

The Port Identifier field displays the port priority as part of the information. The part of the information in this field is the port number. The following example shows how to identify the port priority and the port number:

Port Identifier=0x8000,0x101

The port priority value is 0x8000, and the port number value is 0x101 in this example.

Examples

This example shows how to display the LACP statistics for a specific channel group:

n1000v# show lacp interface ethernet 1/1

n1000v(config-if-range)# show lacp interface eth1/1

Interface Ethernet1/1 is up

Channel group is 1 port channel is Po1

PDUs sent: 556

PDUs rcvd: 538

Markers sent: 0

Markers rcvd: 0

Marker response sent: 0

Marker response rcvd: 0

Unknown packets rcvd: 0

Illegal packets rcvd: 0

Lag Id: [ [(8000, 0-11-11-22-22-74, 0, 8000, 101), (8000, 0-11-11-22-22-75, 0, 8

000, 401)] ]

Operational as aggregated link since Wed Jun 11 20:37:59 2008

Local Port: Eth1/1 MAC Address= 0-11-11-22-22-74

System Identifier=0x8000,0-11-11-22-22-74

Port Identifier=0x8000,0x101

Operational key=0

LACP_Activity=active

LACP_Timeout=Long Timeout (30s)

Synchronization=IN_SYNC

Collecting=true

Distributing=true

Partner information refresh timeout=Long Timeout (90s)

Actor Admin State=

Actor Oper State=

Neighbor: 4/1

MAC Address= 0-11-11-22-22-75

System Identifier=0x8000,0-11-11-22-22-75

Port Identifier=0x8000,0x401

Operational key=0

LACP_Activity=active

LACP_Timeout=Long Timeout (30s)

Synchronization=IN_SYNC

Collecting=true

Distributing=true

Partner Admin State=

Partner Oper State=

Related Commands

Command

Description

Displays information about all port-channel groups.

show lacp neighbor

command.

]

Syntax Description

Port-channel number for the LACP neighbor that you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

all channel groups are displayed.

Examples

This example shows how to display the information about the LACP neighbors for a specific port channel:

n1000v# show lacp neighbor interface port-channel 1

Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs

A - Device is in Active mode P - Device is in Passive mode

port-channel1 neighbors

Partner's information

Partner Partner Partner

Port System ID Port Number Age Flags

Eth1/1 32768,0-11-11-22-22-750x401 44817 SA

LACP Partner Partner Partner

Port Priority Oper Key Port State

32768 0x0 0x3d

Partner's information

Partner Partner Partner

Port System ID Port Number Age Flags

Eth1/2 32768,0-11-11-22-22-750x402 44817 SA

LACP Partner Partner Partner

Port Priority Oper Key Port State

32768 0x0 0x3d

Related Commands

Command

Description

Displays information about all port-channel groups.

show lacp offload status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the LACP offload status for verification:

n1000v(config)# show lacp offload status

Current Status : Enabled

Running Config Status : Enabled

Saved Config Status : Enabled

n1000v(config)#

Related Commands

Command

Description

Offloads management of LACP from the VSM to the VEMs.

show lacp port-channel

command.

]

Syntax Description

(Optional) Specifies an existing LACP port channel.

Port-channel number for the LACP channel group that you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

all channel groups are displayed.

Examples

This example shows how to display the information about LACP port channels:

n1000v# show lacp port-channel

port-channel1

Local System Identifier=0x8000,0-11-11-22-22-74

Admin key=0x0

Operational key=0x0

Partner System Identifier=0x8000,0-11-11-22-22-75

Operational key=0x0

Max delay=0

Aggregate or individual=1

port-channel2

Local System Identifier=0x8000,0-11-11-22-22-74

Admin key=0x1

Operational key=0x1

Partner System Identifier=0x8000,0-11-11-22-22-75

Operational key=0x1

Max delay=0

Aggregate or individual=1

Related Commands

Command

Description

Displays information about all port-channel groups.

show lacp system-identifier

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The LACP system ID is the combination of the configurable LACP system priority value and the MAC address.

Each system that runs LACP has an LACP system priority value. You can accept the default value of 32768 for this parameter, or you can configure a value between 1 and 65535. LACP uses the system priority with the MAC address to form the system ID and also uses the system priority during negotiation with other devices. A higher system priority value means a lower priority.

Examples

This example shows how to display the LACP system identifier on the switch:

n1000v> show lacp system-identifier

8000,AC-12-34-56-78-90

Related Commands

Command

Description

Sets the system priority for LACP.

show license

command.

Syntax Description

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the content of all the license files that are installed on the VSM:

n1000v# show license

license_file.lic:

SERVER this_host ANY

VENDOR cisco

INCREMENT NEXUS1000V_LAN_SERVICES_PKG cisco 1.0 permanent 16 \

HOSTID=VDH=8449368321243879080 \

NOTICE="<LicFileID>kathleen.lic</LicFileID><LicLineID>0</LicLineID> \

<PAK>dummyPak</PAK>" SIGN=34FCB2B24AE8

n1000v#

Related Commands

Command

Description

Displays a list of license files that are installed on the VSM.

Displays the license packages that are supported on the VSM. Optionally, you can display a specific license package.

show license brief

command.

Syntax Description

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the content of all the license files that are installed on the VSM:

n1000v# show license brief

license_file.lic

n1000v#

Related Commands

Command

Description

Displays the content of all the license files that are installed on the VSM.

Displays the license packages that are supported on the VSM. Optionally, you can display a specific license package.

show license file

command.

Syntax Description

Name of the existing license file (.lic).

Defaults

None

Command Modes

Any

Supported User Roles

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

To find the name of the existing file, enter the following command at the prompt:

n1000v# show license file ?

Examples

, configured for the VSM:

n1000v# show license file sample.lic

sample.lic:

SERVER this_host ANY

VENDOR cisco

INCREMENT NEXUS1000V_LAN_SERVICES_PKG cisco 1.0 permanent 16 \

HOSTID=VDH=8449368321243879080 \

NOTICE="<LicFileID>sample.lic</LicFileID><LicLineID>0</LicLineID> \

<PAK>dummyPak</PAK>" SIGN=34FCB2B24AE8

n1000v#

Related Commands

Command

Description

show license

Displays the content of all the license files that are installed on the VSM.

show license brief

Displays a list of license files that are installed on the VSM.

show license host-id

Displays the serial number (host ID) for your VSM

show license usage

Displays the license packages that are supported on the VSM.

show license host-id

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The host ID includes everything that appears after the equal sign (=).

The host ID is required to obtain a license key file and register your VSM license.

Examples

This example shows how to obtain the host ID for your VSM:

n1000v# show license host-id

License hostid: VDH=8449368321243879080

n1000v#

Related Commands

Command

Description

show license

Displays the content of all the license files that are installed on the VSM.

show license brief

Displays a list of license files that are installed on the VSM.

show license file

Displays the license configured for the VSM

show license usage

Displays the license packages that are supported on the VSM.

show license usage

command.

]

Syntax Description

(Optional) Name of a license file. In the Cisco Nexus 1000V, the VSM supports only one package (NEXUS1000V_LAN_SERVICES_PKG).

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display a brief summary of the various license packages that are supported on the VSM:

n1000v# show license usage

Feature Ins Lic Status Expiry Date Comments

Count

--------------------------------------------------------------------------------

NEXUS1000V_LAN_SERVICES_PKG No 16 In use Never -

n1000v# ------------------------------------------------------------------------

This example shows how to display the license usage information for a specific license package:

Example:

n1000v# show license usage NEXUS1000V_LAN_SERVICES_PKG

--------------------------------------

Feature Usage Info

--------------------------------------

Installed Licenses : 10

Eval Licenses : 0

Max Overdraft Licenses : 16

Installed Licenses in Use : 4

Overdraft Licenses in Use : 0

Eval Licenses in Use : 0

Licenses Available : 22

--------------------------------------

Application

--------------------------------------

VEM 3 - Socket 1

VEM 3 - Socket 2

VEM 4 - Socket 1

VEM 4 - Socket 2

--------------------------------------

n1000v#

Related Commands

Command

Description

Displays the content of all the license files that are installed on the VSM.

Displays a list of license files that are installed on the VSM.

Displays the content of a specific license file that is installed on the VSM. In the Cisco Nexus 1000V, the VSM supports only one package (NEXUS1000V_LAN_SERVICES_PKG).

show logging logfile

command.

]

Syntax Description

(Optional) Specify the starting time for which you want the logfile displayed.

(Optional) Specify the ending time for which you want the logfile displayed.

Specify the time as follows:

Time

Description

Specify the year.

.

.

.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the contents of the logfile:

n1000v# show logging logfile start-time 2009 Aug 23 22:00:00 end-time 2009 Aug 24 24:00:00

2009 Aug 23 22:58:00 doc-n1000v %PORTPROFILE-5-SYNC_COMPLETE: Sync completed.

2009 Aug 24 23:53:15 doc-n1000v %MODULE-5-MOD_OK: Module 3 is online (serial: )

2009 Aug 24 23:53:15 doc-n1000v %PLATFORM-5-MOD_STATUS: Module 3 current-status is MOD_S

TATUS_ONLINE/OK

n1000v#

Related Commands

Command

Description

Configures the log file used to store system messages.

show logging module

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the configuration for logging of messages to the log file:

n1000v# show logging module

Logging linecard: disabled

n1000v#

Related Commands

Command

Description

Starts logging of module messages to the log file.

show logging server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the :

n1000v## show logging server

Logging server: enabled

{172.28.254.253}

server severity: notifications

server facility: local7

server VRF: management

n1000v##

Related Commands

Command

Description

Designates a remote server for system message logging, and configures it.

show logging timestamp

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the unit of measure used in the system messages timestamp:

n1000v## show logging timestamp

Logging timestamp: Seconds

n1000v##

Related Commands

Command

Description

Sets the unit of measure for the system messages timestamp.

show mac access-lists

command.

Syntax Description

Enter the name of the MAC access list.

Defaults

None

Command Modes

ACL configuration (config-mac-acl)

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the MAC ACL configuration for the MAC access list called acl-mac-01:

n1000v# config t

n1000v(config)# mac access-list acl-mac-01

n1000v(config-mac-acl)# show mac access-lists acl-mac-01

n1000v(config-mac-acl)#

Related Commands

Command

Description

Creates the MAC ACL and enters ACL configuration mode.

show mac address-list

Displays the MAC address table.

show mac address-table

command.

]

Syntax Description

(Optional) Specifies a module number for display.

(Optional) Specifies the count of MAC address entries for display.

(Optional) Specifies static entries in the MAC address table for display.

(Optional) Specifies dynamic entries in the MAC address table for display.

(Optional) Specifies a MAC address to display in one of the following formats:

- A.B.C

- AA-BB-CC-DD-EE-FF

- AA:BB:CC:DD:EE:FF

- AAAA.BBBB.CCCC

name

(Optional) Specifies an interface name (ethernet slot/port, port channel (number), or vEth number), associated with this MAC address table for display.

Specifies an Ethernet interface slot number (1–66) and port number (1–256), separated by a slash (/) for display.

Specifies a port channel interface number (1 - 4096) for display.

Specifies a Virtual Ethernet interface number (1–1048575) for display.

(Optional) Specifies a VLAN ID (1 - 4094) for display.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

Added the count option, removed the secure option.

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the MAC address table:

n1000v# show mac address-table

VLAN MAC Address Type Age Port Module

---------+-----------------+-------+---------+------------------------------+---------

1 0002.3d11.5502 static 0 N1KV Internal Port 3

1 0002.3d21.5500 static 0 N1KV Internal Port 3

1 0002.3d21.5502 static 0 N1KV Internal Port 3

1 0002.3d31.5502 static 0 N1KV Internal Port 3

1 0002.3d41.5502 static 0 N1KV Internal Port 3

1 0002.3d61.5500 static 0 N1KV Internal Port 3

1 0002.3d61.5502 static 0 N1KV Internal Port 3

1 0002.3d81.5502 static 0 N1KV Internal Port 3

3 12ab.47dd.ff89 static 0 Eth3/3 3

342 0002.3d41.5502 static 0 N1KV Internal Port 3

342 0050.568d.5a3f dynamic 0 Eth3/3 3

343 0002.3d21.5502 static 0 N1KV Internal Port 3

343 0050.568d.2aa0 dynamic 9 Eth3/3 3

Total MAC Addresses: 13

n1000v#

This example shows how to display a specific MAC address:

n1000v# sho mac address-table address 0050.568d.5a3f

VLAN MAC Address Type Age Port Module

---------+-----------------+-------+---------+------------------------------+---------

342 0050.568d.5a3f dynamic 0 Eth3/3 3

Total MAC Addresses: 1

n1000v#

This example shows how to display a count of MAC addresses in the Layer 2 MAC address table:

n1000v# show mac address-table count

Total MAC Addresses: 42

n1000v#

Related Commands

Command

Description

mac address-table static

Adds a static MAC address in the Layer 2 MAC address table and saves it in the running configuration.

Displays the aging time in the MAC address table.

Displays the MAC ACL configuration.

show mac address-table aging-time

command.

]

Syntax Description

(Optional) Specifies that the output is required for a single VLAN associated with this MAC address table.

Identifies the VLAN ID, between 1 and 4094.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4) SV1(1)

This command was introduced.

Examples

This example shows how to display the aging time for a specific VLAN ID in the MAC address table:

n1000v# show mac address-table aging-time vlan 1

Vlan Aging Time

----- ----------

1 300

n1000v#

This example shows how to display the aging time for every VLAN in the MAC address table:

n1000v# show mac address-table aging-time

Vlan Aging Time

---- ----------

1 300

2 300

100 300

101 300

102 300

103 300

104 300

105 300

106 300

109 300

115 300

260 300

261 300

n1000v#

Related Commands

Command

Description

mac address-table aging-time

Specifies and saves in the running configuration the amount of time that will elapse before an entry in the Layer 2 MAC address table is discarded.

Displays the MAC address table.

Displays the MAC ACL configuration.

show mac address static

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to display all static MAC addresses in the MAC address table:

n1000v# show mac address static

VLAN MAC Address Type Age Port Module

---------+-----------------+-------+---------+------------------------------+---------

1 0002.3d11.5502 static 0 N1KV Internal Port 3

1 0002.3d21.5500 static 0 N1KV Internal Port 3

1 0002.3d21.5502 static 0 N1KV Internal Port 3

1 0002.3d31.5502 static 0 N1KV Internal Port 3

1 0002.3d41.5502 static 0 N1KV Internal Port 3

1 0002.3d61.5500 static 0 N1KV Internal Port 3

1 0002.3d61.5502 static 0 N1KV Internal Port 3

1 0002.3d81.5502 static 0 N1KV Internal Port 3

3 12ab.47dd.ff89 static 0 Eth3/3 3

342 0002.3d41.5502 static 0 N1KV Internal Port 3

343 0002.3d21.5502 static 0 N1KV Internal Port 3

Total MAC Addresses: 11

This example shows how to display a static MAC address entries for a specific interface in the MAC address table:

n1000v# show mac address static interface Ethernet 3/3

VLAN MAC Address Type Age Port Module

---------+-----------------+-------+---------+------------------------------+---------

3 12ab.47dd.ff89 static 0 Eth3/3 3

Total MAC Addresses: 1

n1000v(config)#

Related Commands

Command

Description

mac address-table static

Adds a static MAC address in the Layer 2 MAC address table and saves it in the running configuration.

mac address-table aging-time

Specifies and saves in the running configuration the amount of time that will elapse before an entry in the Layer 2 MAC address table is discarded.

Displays the MAC address table.

Displays the MAC ACL configuration.

show module

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

document.

Examples

This example shows how to display module information:

n1000v# show module

Mod Ports Module-Type Model Status

--- ----- -------------------------------- ------------------ ------------

1 0 Virtual Supervisor Module Nexus1000V active *

Mod Sw Hw

--- --------------- ------

1 4.0(4)SV1(2) 0.0

Mod MAC-Address(es) Serial-Num

--- -------------------------------------- ----------

1 00-19-07-6c-5a-a8 to 00-19-07-6c-62-a8 NA

Mod Server-IP Server-UUID Server-Name

--- --------------- ------------------------------------ --------------------

1 172.23.232.152 NA NA

* this terminal session

n1000v#

Related Commands

Command

Description

Displays the length of time a module has been up and running.

show module vem license-info

Displays license information about the VEM connected to your VSM.

show module vem mapping

Displays information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vteps

Displays vteps information about all the modules.

show module service-module

Displays HA-role, Cluster-id, HA mode and HA-status for service modules attached to the VSM.

show module service-module

Displays HA-role, Cluster-id, HA mode and HA-status for service modules attached to the VSM.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use this command to view the HA-role, Cluster-id, HA mode and HA status of all the service modules attached to the VSM.

Examples

This example shows how to display the cluster ID mapping and the details about active, standby, and standalone service modules:

n1000v# show module service-module

Mod Cluster-id Role HA Mode Status

--- ---------- ----------- ---------- -------

6 1 Primary HA Active

7 1 Secondary HA Standby

Related Commands

Command

Description

Displays the VXLAN gateway service modules.

show module service-module

Displays HA-role, Cluster-id, HA mode and HA-status for service modules attached to the VSM.

show module uptime

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the length of time a module has been up and running:

n1000v# show module uptime

------ Module 1 -----

Module Start Tme: Mon Feb 7 13:34:33 2011

Up Time: 36 day(s), 0 hour(s), 13 minute(s), 19 second(s)

n1000v#

Related Commands

Command

Description

Displays module status, software version, MAC address, server information, and so forth.

show module vem mapping

Displays information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

show module vem license-info

Displays license information about the VEM connected to your VSM.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vem license-info

command.

Syntax Description

(Optional) Number identifying an existing module. The range is 1–66.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the license info for VEM modules:

n1000v# show module vem license-info

Licenses are Sticky

Mod Socket Count License Usage Count License Version License Status

--- ------------ ------------------- --------------- --------------

3 2 - - unlicensed

n1000v#

Related Commands

Command

Description

Displays module status, software version, MAC address, server information, and so forth.

show module vem mapping

Displays information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vem counters

command.

Syntax Description

(Optional) Number identifying an existing module. The range is 1–66.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

command output:

Mod: Module number.

InNR: Number of node ID requests sent by this module and received by the VSM.

OutMI: Number of module insert messages sent by the VSM to this module.

OutHBeats: Number of heartbeats sent to this module.

InHBeats: Number of heartbeats received from this module.

InsCnt: Number of times this module inserted successfully.

RemCnt: Number of times this module has been removed.

Examples

This example shows how display the VEM counters to verify whether the VSM is receiving any packets from VEM:

n1000v# show module vem counters

--------------------------------------------------------------------------------

Mod InNR OutMI InMI OutHBeats InHBeats InsCnt RemCnt

--------------------------------------------------------------------------------

3 1 1 1 3113363 3113360 1 0

4 1 1 1 3113363 3113363 1 0

n1000v#

Related Commands

Command

Description

Displays module status, software version, MAC address, server information, and so forth.

show module vem license-info

Displays license information about the VEM connected to your VSM.

show module vem mapping

Displays information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vem mapping

command.

Syntax Description

(Optional) Number identifying an existing module. The range is 1–66.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status:

n1000v# show module vem mapping

Mod Status UUID License Status

--- ----------- ------------------------------------ --------------

3 absent c43cfa32-08b4-4a12-b899-90f54fb05db0 licensed

n1000v#

Related Commands

Command

Description

Displays module information.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

show module vem license-info

Displays license information about the VEM connected to your VSM.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

show module vem missing

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display VEM modules that are added to VC but are missing from the VSM:

n1000v# show module vem missing

No missing module found.

n1000v#

Related Commands

Command

Description

Displays module status, software version, MAC address, server information, and so forth.

Allows remote entry of commands on the VEM from the Cisco Nexus 1000V.

show module vem license-info

Displays license information about the VEM connected to your VSM.

show module vem mapping

Displays information about the VEM a VSM maps to, including VEM module number, status, UUID, and license status.

show module vem counters

Displays VEM counters to verify whether the VSM is receiving any packets from VEM.

show module vem missing

Displays VEM modules that are added to VC but are missing from the VSM.

show module vteps

To display the IP addresses available on each module that can be used for VXLAN Tunnel Endpoints.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

The IP addresses of VTEPS available on each module.

Examples

This example shows how to display VEM modules that are added to VC but are missing from the VSM:

n1000v# show module vteps

D: Designated VTEP I:Forwarding Publish Incapable VTEP

Note: (*) Denotes active gateway module

Module Port VTEP-IP Address VTEP-Flags

------------------------------------------------------------------------------

3 Veth6 10.105.232.87 (D)

5 Veth3 10.105.232.91 (D)

7 Veth55 10.105.232.106

18 Veth231 10.105.232.104 (DI*)

Related Commands

Command

Description

Displays module status, software version, MAC address, server information, and so forth.

Displays HA-role, Cluster-id, HA mode and HA-status for service modules attached to the VSM.

show monitor

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the status of the SPAN sessions:

n1000v# show monitor

Session State Reason Description

------- ----------- ---------------------- --------------------------------

17 down Session admin shut folio

Related Commands

Command

Description

Starts the specified SPAN monitor session from either global configuration mode or monitor-configuration mode.

show monitor session

Displays the ERSPAN session configuration as it exists in the running configuration.

show monitor session

command.

]

Syntax Description

Number identifying the SPAN session number. The range is 1–64.

Specifies all sessions.

Indicates a session range.

Range of SPAN sessions from 1–64.

(Optional) Specifies a shortened version.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the SPAN session configuration for session 1:

n1000v(config)# show monitor session 1

session 1

---------------

type : erspan-source

state : up

source intf :

rx : Eth3/3

tx : Eth3/3

both : Eth3/3

source VLANs :

rx :

tx :

both :

filter VLANs : filter not specified

destination IP : 10.54.54.1

ERSPAN ID : 999

ERSPAN TTL : 64

ERSPAN IP Prec. : 0

ERSPAN DSCP : 0

ERSPAN MTU : 1000

Related Commands

Command

Description

Displays the status of the SPAN sessions.

Starts the specified SPAN monitor session from either global configuration mode or monitor-configuration mode.

show network-segment manager switch

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the Cisco Nexus 1000V information:

n1000v# configure terminal

n1000v(config)# feature network-segmentation-manager

n1000v# show network-segment manager switch

switch: default_switch

state: enabled

dvs-uuid: d4 e7 12 50 89 db 3b c4-8d 4d 4c 36 ca 1c d1 f0

dvs-name: nexus1000v

mgmt-srv-uuid: 087F202C-8937-4F1E-8676-6F714C1AB96C

reg status: registered

last alert: 30 seconds ago

connection status: connected

Related Commandsswitch: default_switch

Related Commandsstate: enabled

Related Commandsdvs-uuid: d4 e7 12 50 89 db 3b c4-8d 4d 4c 36 ca 1c d1 f0

Related Commandsdvs-name: nexus1000v

Related Commandsmgmt-srv-uuid: 087F202C-8937-4F1E-8676-6F714C1AB96C

Related Commandsreg status: registered

Related Commandslast alert: 30 seconds ago

Related Commandsconnection status: connected

Related Commands

Command

Description

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

show network-segment network

command.

|id]

Syntax Description

(Optional) The name of the network.

id

(Optional) The ID associated with the network segmentation policy.

Defaults

None

Command Modes

Any

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the networks associated with a network segmentation policy:

n1000v(config)# show network-segment network

network dvs.VCDVSint-org-cn2-e46e9686-2327-49df-ad5c-a3f89c00cfb8

tenant id: 2b4ca1b2-ba8e-456c-b772-a4730af16e2e

network-segment policy: default_segmentation_template

segment id: 4107

multicast ip: 225.0.0.1

network dvs.VCDVSint-org-nexus-6141babd-bdc8-4e86-8f16-1ac786fb377f

tenant id: 91e87e80-e18b-460f-a761-b978c0d28aea

network-segment policy: seg-template-nexus-org

segment id: 4108

multicast ip: 225.0.0.2

n100v(config)#

Related Commands

Command

Description

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

network-segment policy migrate

To migrate the networks from the default network segmentation policy to the non default destination network segmentation policy, use the network-segment policy migrate command.

Syntax Description

Tenant ID of the networks to be migrated.

Type of networks (VLAN or Segmentation) to be migrated.

Name of the destination network segmentation policy to migrate to.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to migrate networks:

n1000v# configure terminal

n1000v(config)# network-segment policy migrate id da5c49a8-dd1b-4326-9da0-3c5e6a2c1b87 type vlan dest-policy org_vlan

n1000v(config)#

Related Commands

Command

Description

Displays the NSM policy configuration.

Creates a network segmentation policy.

Enables the Network Segmentation Manager (NSM) feature.

show network-segment policy usage

command.

Syntax Description

(Optional) The name of the network segmentation policy.

Defaults

None

Command Modes

Any

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display network segmentation policy usage by networks:

n1000v# show network-segment policy usage

network-segment policy default_segmentation_template

dvs.VCDVSint-org-cn2-e46e9686-2327-49df-ad5c-a3f89c00cfb8

network-segment policy default_vlan_template

network-segment policy seg-template-nexus-org

dvs.VCDVSint-org-nexus-6141babd-bdc8-4e86-8f16-1ac786fb377f

network-segment policy vlan-template-nexus-org

Related Commands

Command

Description

feature network-segmentation-manager

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

show network-state tracking

command.

}

Syntax Description

Show state related to module number.

Show state related to interface port channel.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to display Network State Tracking status for a module:

n1000v# show network-state tracking module 3

Port- Network Tracking SG SG Tracking SG

Channel Mode Vlan ID State Interface Members

------- ------- -------- -- -------- --------- -----------------

Po2 split 263 10 Active Eth66/3 Eth66/3, Eth66/4

Eth66/5, Eth66/6, Eth66/7

Po2 split 263 11 Active Eth66/8 Eth66/8, Eth66/9, Eth66/11

This example shows how to display Network State Tracking status for an interface and port channel:

n1000v# show network-state tracking interface port-channel 2

Port- Network Tracking SG SG Tracking SG

Channel Mode Vlan ID State Interface Members

------- ------- -------- -- -------- --------- -----------------

Po2 split 263 10 Active Eth66/3 Eth66/3, Eth66/4, Eth66/5, Eth66/6

Eth66/7

Po2 split 263 11 Active Eth66/8 Eth66/8, Eth66/9, Eth66/11

Related Commands

Command

Description

Enables Network State Tracking for all VEMs configured with a vPC-HM port-profile.

Displays the Network State Tracking configuration for verification.

show network-state tracking config

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to display the Network State Tracking configuration:

n1000v# show network-state tracking config

Tracking mode : disabled

Tracking Interval : 5 sec

Miss count threshold : 5 pkts

Split-network action : unknown

n1000v#

Related Commands

Command

Description

Enables Network State Tracking for all VEMs configured with a vPC-HM port-profile.

Displays the Network State Tracking status for a module or interface.

show ntp peer-status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A domain name is resolved only when you have a DNS server configured.

Examples

This example shows how to display the configured server and peers:

n1000v# show ntp peer-status

Total peers : 2

* - selected for sync, + - peer mode(active),

- - peer mode(passive), = - polled in client mode

remote local st poll reach delay vrf

------------------------------------------------------------------------

=192.0.2.10 0.0.0.0 16 16 0 0.00000 default

+72.229.253.127 0.0.0.0 16 16 0 0.00000 default

n1000v#

Related Commands

Command

Description

show ntp peers

Displays all NTP peers.

show ntp statistics

Displays NTP statistics.

Forms an association with a server.

ntp peer

Forms an association with a peer.

show ntp peers

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A domain name is resolved only when you have a DNS server configured.

Examples

This example shows how to display the configured server and peers:

n1000v# show ntp peers

--------------------------------------------------

Peer IP Address Serv/Peer

--------------------------------------------------

192.0.2.10 Server (configured)

72.229.253.127 Peer (configured)

n1000v#

Related Commands

Command

Description

show ntp peer-status

Displays the status for all NTP servers and peers.

show ntp statistics

Displays NTP statistics.

Forms an association with a server.

ntp peer

Forms an association with a peer.

show ntp statistics

command.

}}

Syntax Description

Specifies the input-output statistics.

Specifies the counters maintained by the local NTP.

Specifies the statistics counters related to the memory code.

Specifies the per-peer statistics counter of a peer.

IP address of this peer.

DNS name of this peer.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

A domain name is resolved only when you have a DNS server configured.

Examples

This example shows how to display the configured server and peers:

n1000v# show ntp statistics local

system uptime: 6742265

time since reset: 6742265

old version packets: 0

old version packets: 0

unknown version number: 0

bad packet format: 0

packets processed: 0

bad authentication: 0

packets rejected: 0

n1000v#

Related Commands

Command

Description

Forms an association with a server.

ntp peer

Forms an association with a peer.

show password strength-check

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display whether password strength is being checked:

n1000v# show password strength-check

Password strength check enabled

n1000v#

Related Commands

Command

Description

Enables password-strength checking.

username

Creates a user account.

role name

Names a user role and puts you in role configuration mode for that role.

show peer-sup mac-addresses details

command.

]}]

Syntax Description

(Optional) Specifies the type of the policy map.

(Optional) Specifies type QoS.

(Optional) Name of an existing policy map.

type queuing.

pmap-name-que

(Optional) policy map name (type queuing)

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

was added.

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the policy map configuration for all policy maps:

n1000v# show policy-map

Type qos policy-maps

====================

policy-map type qos class1

class class-default

policy-map type qos policy1

class class1

set dscp 26

class class2

set dscp 14

class class-default

set dscp 20

police cir 256000 bps bc 300 ms pir 256000 bps be 300 ms conform transmit

exceed set dscp dscp table cir-markdown-map violate drop

policy-map type qos policy2

policy-map type qos policy3

class class-default

police cir 256000 bps bc 300 ms pir 256000 bps be 300 ms conform transmit

exceed set dscp dscp table cir-markdown-map violate drop

n1000v#

Related Commands

Command

Description

Displays the policy map configuration for all policy maps or for a specified policy map.

class

Creates a reference to class-map-name and enters policy-map class QoS configuration mode for the specified class map.

set dscp

Defines the DSCP value that should be used in all IP headers for the specified class and saves it in the running configuration.

show platform fwm info vtep

To display all the vteps information of the bridge-domains.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

To specifies the vteps informations of all bridge-domains.

Examples

This example shows how to display the vteps information of the bridge-domain:

n1000v(config)# show platform fwm info vtep

Bridge-domain: vxlan6000, swbd: 4096, version: 5

--------------

VTEP[0]: ip_addr: [192.168.10.9], flags: 1

VTEP[0]: ip_addr: [192.168.10.6], flags: 1

VTEP[0]: ip_addr: [192.168.10.14], flags: 3

VTEP[0]: ip_addr: [192.168.10.13], flags: 1

Bridge-domain: vxlan6001, swbd: 4097, version: 3

--------------

VTEP[0]: ip_addr: [192.168.10.9], flags: 1

VTEP[0]: ip_addr: [192.168.10.14], flags: 3

Bridge-domain: vxlan6002, swbd: 4098, version: 3

--------------

VTEP[0]: ip_addr: [192.168.10.9], flags: 1

VTEP[0]: ip_addr: [192.168.10.14], flags: 3

Related Commands

Command

Description

To display all the configured vlans.

show policy-map

command.

]}]

Syntax Description

(Optional) Specifies the type of the policy map.

(Optional) Specifies type QoS.

(Optional) Name of an existing policy map.

type queuing.

pmap-name-que

(Optional) policy map name (type queuing)

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

was added.

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the policy map configuration for all policy maps:

n1000v# show policy-map

Type qos policy-maps

====================

policy-map type qos class1

class class-default

policy-map type qos policy1

class class1

set dscp 26

class class2

set dscp 14

class class-default

set dscp 20

police cir 256000 bps bc 300 ms pir 256000 bps be 300 ms conform transmit

exceed set dscp dscp table cir-markdown-map violate drop

policy-map type qos policy2

policy-map type qos policy3

class class-default

police cir 256000 bps bc 300 ms pir 256000 bps be 300 ms conform transmit

exceed set dscp dscp table cir-markdown-map violate drop

n1000v#

Related Commands

Command

Description

Displays the policy map configuration for all policy maps or for a specified policy map.

class

Creates a reference to class-map-name and enters policy-map class QoS configuration mode for the specified class map.

set dscp

Defines the DSCP value that should be used in all IP headers for the specified class and saves it in the running configuration.

show policy-map interface

command.

]]

Syntax Description

(Optional) Specifies the shortened output.

(Optional) Specifies an Ethernet interface.

Valid slot and port of the interface, separated by a slash (/). The slot range 1–66; the port range is 1–256.

port-channel

(Optional) Specifies a port channel interface.

Identifier for a valid port channel. The range is 1–4096.

vethernet

(Optional) Specifies a Virtual Ethernet interface.

Identifier for a valid Virtual Ethernet interface. The range is 1–1048575.

(Optional) Specifies the input policy

output

(Optional) Specifies the output policy.

(Optional) Specifies the type of the class-map.

(Optional) Specifies type QoS.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display statistics for policy maps that are configured on interfaces:

n1000v(config)# show policy-map interface

Global statistics status : enabled

Vethernet3

Service-policy (qos) input: new-policy

policy statistics status: enabled

Class-map (qos): class-default (match-any)

59610700 packets

set prec 5

Vethernet5

Service-policy (qos) output: new-policer

policy statistics status: enabled

Class-map (qos): new-class (match-all)

344661013 packets

Match: precedence 5

police cir 900 mbps bc 200 ms

conformed 505953339796 bytes, 899924196 bps action: transmit

violated 12285218014 bytes, 22283000 bps action: dropn1000v#

Related Commands

Command

Description

Defines a policy map that represents a set of policies to be applied to a set of class maps.

qos statistics

Enables QoS statistics on all interfaces.

clear qos statistics

Clears the specified QoS statistics.

show port-channel compatibility-parameters

command.

compatibility-parameters

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you add an interface to a channel group, the software checks certain interface attributes to ensure that the interface is compatible with the channel group. For example, you cannot add a Layer 3 interface to a Layer 2 channel group. The software also checks a number of operational attributes for an interface before allowing that interface to participate in the port-channel aggregation.

This command displays the list of compatibility checks that the system uses.

command, you can force ports with incompatible parameters to join the port channel as long as the following parameters are the same:

- (Link) speed capability

- Speed configuration

- Duplex capability

- Duplex configuration

- Flow-control capability

- Flow-control configuration

Note See the channel-group command for information about forcing ports to join a port channel.

Examples

This example shows how to display the list of compatibility checks that the system makes before an interface to a channel group:

n1000v# show port-channel compatibility-parameters

* port mode

Members must have the same port mode configured, either E or AUTO. If they

are configured in AUTO port mode, they have to negotiate E mode when they

come up. If a member negotiates a different mode, it will be suspended.

* speed

Members must have the same speed configured. If they are configured in AUTO

speed, they have to negotiate the same speed when they come up. If a member

negotiates a different speed, it will be suspended.

* MTU

Members have to have the same MTU configured. This only applies to ethernet

port-channel.

* MEDIUM

Members have to have the same medium type configured. This only applies to

ethernet port-channel.

* Span mode

Members must have the same span mode.

* sub interfaces

Members must not have sub-interfaces.

* Duplex Mode

Members must have same Duplex Mode configured.

* Ethernet Layer

Members must have same Ethernet Layer (switchport/no-switchport) configured.

* Span Port

Members cannot be SPAN ports.

* Storm Control

Members must have same storm-control configured.

* Flow Control

Members must have same flowctrl configured.

* Capabilities

Members must have common capabilities.

* port

Members port VLAN info.

* port

Members port does not exist.

* switching port

Members must be switching port, Layer 2.

* port access VLAN

Members must have the same port access VLAN.

* port native VLAN

Members must have the same port native VLAN.

* port allowed VLAN list

Members must have the same port allowed VLAN list.

Related Commands

Command

Description

Adds or removes interfaces to port-channel groups and assigns the port-channel mode to the interface.

show port-channel database

command.

]

Syntax Description

Port-channel number for the information that you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

all channel groups are displayed. This command displays Link Aggregation Control Protocol (LACP)-enabled ports channels and port channels without an associated aggregation protocol.

Examples

This example shows how to display information on the current running of all port channels:

n1000v# show port-channel database

port-channel5

Administrative channel mode is active

Operational channel mode is active

Last membership update is successful

1 ports in total, 0 ports up

Age of the port-channel is 1d:16h:18m:50s

Time since last bundle is 1d:16h:18m:56s

Last bundled member is

Ports: Ethernet2/5 [down]

port-channel20

Administrative channel mode is active

Operational channel mode is active

Last membership update is successful

1 ports in total, 0 ports up

Age of the port-channel is 1d:16h:18m:50s

Time since last bundle is 1d:16h:18m:56s

Last bundled member is

Ports: Ethernet2/20 [down]

This example shows how to display information on the current running of a specific port channel:

n1000v# show port-channel database interface port-channel 20

port-channel20

Administrative channel mode is active

Operational channel mode is active

Last membership update is successful

1 ports in total, 0 ports up

Age of the port-channel is 1d:16h:23m:14s

Time since last bundle is 1d:16h:23m:20s

Last bundled member is

Ports: Ethernet2/20 [down]

Related Commands

Command

Description

Displays a summary of information about all port channels.

show port-channel load-balance

command.

]

Syntax Description

(Optional) Identifies the port in the port channel that forwards the packet.

Port-channel number for the load-balancing forwarding path that you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the current port-channel load balancing for the system:

n1000v# show port-channel load-balance

Port Channel Load-Balancing Configuration:

System: source-dest-ip-vlan

Port Channel Load-Balancing Addresses Used Per-Protocol:

Non-IP: source-dest-mac

IP: source-dest-ip-vlan

Related Commands

Command

Description

Configures load balancing using port channels.

show port-channel rbh-distribution

command.

]

Syntax Description

Port-channel number for the information the you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The RBH value ranges from 0 to 7 and is shared among port members in a port channel.

Examples

This example shows how to display RBH distribution for a specific port channel:

n1000v# show port-channel rbh-distribution interface port-channel 4

ChanId Member port RBH values Num of buckets

-------- ------------- ----------------- ----------------

4 Eth3/13 4,5,6,7 4

4 Eth3/14 0,1,2,3 4

Related Commands

Command

Description

Displays summary information on port channels.

show port-channel summary

command.

summary

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

in the Protocol column of the display.

A channel-group interface can be in the following operational states:

- Down—The interface is down because it is administratively shut down or some other reason not related to port channels.

- Individual—The interface is part of a port channel but unable to aggregate into a port channel because of protocol exchange problems.

– This interface continues to forward traffic as an individual link.

– STP is aware of this interface.

- Suspended—The operational parameters of the interface are not compatible with the port channel. This interface is not forwarding traffic, although the physical MAC link state is still up.

- Switched—The interface is switched.

- Up (port channel)—The port channel is up.

- Up in port channel (members)—The port member of the port channel is up.

- Hot standby (LACP only)—The interface is eligible to join the port group if one of the interfaces currently participating in the LACP channel goes down.

– This interface does not forward data traffic, only protocol data units (PDUs).

– This interface does not run STP.

- Module-removed—The module has been removed.

- Routed—The interface is routed.

Examples

This example shows how to display summary information for the port channels:

n1000v# show port-channel summary

Flags: D - Down P - Up in port-channel (members)

I - Individual H - Hot-standby (LACP only)

s - Suspended r - Module-removed

S - Switched R - Routed

U - Up (port-channel)

-------------------------------------------------------------------

Group Port- Type Protocol Member Ports

Channel

-------------------------------------------------------------------

5 Po5(SD) Eth LACP Eth2/5(D)

20 Po20(RD) Eth LACP Eth2/20(D)

Related Commands

Command

Description

Displays the port-channel numbers used and available.

Displays transmitted and received unicast, multicast, and broadcast percentages for the port channels.

show port-channel traffic

command.

]

Syntax Description

Port-channel number for the traffic statistics that you want to display. The range of values is from 1 to 4096.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command displays the percentage of transmitted and received unicast, multicast, and broadcast traffic on the port channel.

information for all port channels is displayed.

Examples

This example shows how to display the traffic statistics for all port channels:

n1000v(config)# show port-channel traffic

ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst

------ --------- ------- ------- ------- ------- ------- -------

5 Eth2/5 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%

------ --------- ------- ------- ------- ------- ------- -------

20 Eth2/20 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%

This example shows how to display the traffic statistics for a specific port channel:

n1000v(config)# show port-channel traffic interface port-channel 5

ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst

------ --------- ------- ------- ------- ------- ------- -------

5 Eth2/5 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%

Related Commands

Command

Description

Displays summary information about port channels.

show port-channel usage

command.

usage

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the usage for all port channels:

n1000v# show port-channel usage

Totally 2 port-channel numbers used

====================================

Used : 5 , 20

Unused: 1 - 4 , 6 - 19 , 21 - 4096

n1000v#

Related Commands

Command

Description

Displays summary information about port channels.

show port-profile

command.

]

Syntax Description

(Optional) Specifies to display information about a specific port profile.

Name of the port profile to display.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

Port profile role information is added to this command.

4.0(4)SV1(2)

Port profile type, pinning and channel-group configuration are added. The capability uplink information is removed.

4.0(4)SV1(1)

This command was introduced.

Examples

The following example shows how to display the configuration of port profile UplinkProfile1:

n1000v# show port-profile name UplinkProfile1

port-profile system

type: Vethernet

description:

status: disabled

max-ports: 32

inherit:

config attributes:

switchport mode trunk

switchport trunk allowed vlan 114-115

no shutdown

evaluated config attributes:

switchport mode trunk

switchport trunk allowed vlan 114-115

no shutdown

assigned interfaces:

port-group:

system vlans: none

capability l3control: no

port-profile role: none

n1000v#

Related Commands

Command

Description

port-profile

Creates a port profile.

show port-profile expand-interface

command.

]

Syntax Description

name

(Optional) Limits the display to a particular port profile name.

Name that identifies an existing port profile.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to verify that the interface level configuration did not overwrite the port profile configuration:

n1000v# show port-profile expand-interface

port-profile 1

port-profile 2

port-profile AccessProf

port-profile AllAccess

port-profile PortProfile1

port-profile SystemProfile

n1000v#

Related Commands

Command

Description

show port-profile

Displays configurations for port profiles.

port-profile

Creates a port profile and enters port-profile configuration mode.

inherit port-profile

Adds the inherited configuration to the new port profile as a default configuration.

show port-profile-role

command.

]

Syntax Description

(Optional) Specify that you want to display a specific role.

Specify the name of the role to display

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the adminUser port profile role:

n1000v# show port-profile-role name adminUser

Name: adminUser

Description: adminOnly

Users:

hdbaar (user)

Assigned port-profiles:

allaccess2

Related Commands

Command

Description

show port-profile

Displays the port profile configuration, including roles assigned to them.

Displays available users and groups.

port-profile-role

Creates a port profile role.

user

Assigns a user to a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

show port-profile-role users

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display available users and groups:

n1000v# show port-profile-role users

n1000v#

Related Commands

Command

Description

port-profile-role

Creates a port profile role.

user

Assigns a user to a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

show port-profile sync-status

command.

]

Syntax Description

(Optional) Specify that you want to display a specific interface.

Specify the name of the interface to display

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1) SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display interfaces that are out of sync with port profiles:

n1000v# show port-profile sync-status

Ethernet3/2

port-profile: uplink

interface status: quarantine

sync status: out of sync

cached commands:

errors:

command cache overrun

recovery steps:

bring interface online

Ethernet3/3

port-profile: uplink

interface status: quarantine

sync status: out of sync

cached commands:

errors:

command cache overrun

recovery steps:

bring interface online

Related Commands

Command

Description

port-profile

Creates a port profile.

show port-profile

Displays configurations for port profiles.

show port-profile virtual usage

command.

]

Syntax Description

(Optional) Specify that you want to display a specific port profile.

Specify the name of the port profile to display

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display port profile usage by interface:

n1000v# show port-profile virtual usage

-------------------------------------------------------------------------------

Port Profile Port Adapter Owner

-------------------------------------------------------------------------------

n1kv-uplink0 Po1

Eth3/2 vmnic1 localhost.

Eth3/3 vmnic2 localhost.

vlan1767 Veth7 Net Adapter 1 all-tool-7

Veth8 Net Adapter 1 all-tool-8

aipc1765 Veth4 Net Adapter 1 bl-h-s

inband1766 Veth6 Net Adapter 3 bl-h-s

mgmt1764 Veth5 Net Adapter 2 bl-h-s

vpc-mac-uplink Po7

Eth5/2 vmnic1 localhost.

Eth5/3 vmnic2 localhost.

ch-vpc-mac-uplink Po2

Po3

Eth4/2 vmnic1 VDANIKLNCOS

Eth4/3 vmnic2 VDANIKLNCOS

ch-aipc1765 Veth1 Net Adapter 1 bl-h-p

ch-mgmt1764 Veth2 Net Adapter 2 bl-h-p

ch-inband1766 Veth3 Net Adapter 3 bl-h-p

n1000v#

Related Commands

Command

Description

port-profile

Creates a port profile.

show port-profile

Displays configurations for port profiles.

inherit port-profile

Adds the inherited configuration to the new port profile as a default configuration.

port-profile-role

Creates a port profile role.

show port-security address module <module number>

command.

Syntax Description

Show secure module.

<3-258>

Enter module number

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None.

Examples

command to view information about all MAC addresses in the VEM module:

n1000v(config)# sh port-security address module 4

Secure Mac Address Table

----------------------------------------------------------------------

Vlan/Vxlan Mac Address Type Ports Configured Age

(mins)

---------- ----------- ------ ----- ---------------

61 0050.56a4.0ed4 STATIC Vethernet6 0

61 0050.56a4.1f1c STATIC Vethernet4 0

51 5555.5555.5555 STATIC Vethernet5 0

51 0050.56a4.38ec STATIC Vethernet5 0

51 0000.0000.0011 DYNAMIC Vethernet5 1

51 0000.0000.0012 DYNAMIC Vethernet5 1

51 0000.0000.0010 DYNAMIC Vethernet5 1

51 0050.56a4.3d87 STATIC Vethernet7 0

51 0000.0000.0032 STICKY Vethernet7 0

51 0000.0000.0033 STICKY Vethernet7 0

51 0000.0000.0030 STICKY Vethernet7 0

51 0000.0000.0031 STICKY Vethernet7 0

51 0050.56a4.1836 STATIC Vethernet8 0

Related Commands

Command

Description

Clears dynamically learned, secure MAC addresses.

Enables port security on a Layer 2 interface.

Displays information about secure interfaces.

Displays port-security configuration.

show port-security interface

command.

Syntax Description

Interface ID.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to use the show port-security interface command to view the status of the port security feature on the Ethernet 1/4 interface:

n1000v# show port-security interface ethernet 1/4

Port Security : Enabled

Port Status : Secure Down

Violation Mode : Shutdown

Aging Time : 0 mins

Aging Type : Absolute

Maximum MAC Addresses : 5

Total MAC Addresses : 1

Configured MAC Addresses : 1

Sticky MAC Addresses : 0

Security violation count : 0

n1000v#

Related Commands

Command

Description

Clears dynamically learned, secure MAC addresses.

Enables port security on a Layer 2 interface.

Displays port-security configuration.

show processes

command.

]

Syntax Description

(Optional) Specifies processes related to the CPU.

log

(Optional) Specifies information regarding process logs.

memory

(Optional) Specifies processes related to memory.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

After issuing the show processes cpu history CLI command on the VSM, it is observed that the CLI output to indicate the amount of time elapsed is graphed from the right to the left direction. Therefore, the output should be read from the right to the left direction.

Examples

This example shows how to display the state and the start count of all processes:

n1000v# show processes

PID State PC Start_cnt TTY Type Process

----- ----- -------- ----------- ---- ---- -------------

1 S 77f8a468 1 - O init

2 S 0 1 - O ksoftirqd/0

3 S 0 1 - O desched/0

4 S 0 1 - O events/0

5 S 0 1 - O khelper

10 S 0 1 - O kthread

18 S 0 1 - O kblockd/0

35 S 0 1 - O khubd

121 S 0 1 - O pdflush

122 S 0 1 - O pdflush

124 S 0 1 - O aio/0

123 S 0 1 - O kswapd0

709 S 0 1 - O kseriod

756 S 0 1 - O kide/0

766 S 0 1 - O ata/0

770 S 0 1 - O scsi_eh_0

1096 S 0 1 - O kjournald

1101 S 0 1 - O kjournald

1620 S 0 1 - O kjournald

1627 S 0 1 - O kjournald

1952 S 77f6c18e 1 - O portmap

1965 S 0 1 - O nfsd

1966 S 0 1 - O nfsd

1967 S 0 1 - O nfsd

1968 S 0 1 - O nfsd

1969 S 0 1 - O nfsd

1970 S 0 1 - O nfsd

1971 S 0 1 - O nfsd

1972 S 0 1 - O nfsd

1973 S 0 1 - O lockd

1974 S 0 1 - O rpciod

1979 S 77f6e468 1 - O rpc.mountd

1989 S 77f6e468 1 - O rpc.statd

2016 S 77e0e468 1 - VG sysmgr

2298 S 0 1 - O mping-thread

2299 S 0 1 - O mping-thread

2315 S 0 1 - O stun_kthread

2316 S 0 1 - O stun_arp_mts_kt

2339 S 0 1 - O redun_kthread

2340 S 0 1 - O redun_timer_kth

2866 S 0 1 - O sf_rdn_kthread

2866 S 0 1 - O sf_rdn_kthread

2867 S 77f37468 1 - VU xinetd

2868 S 77f6e468 1 - VU tftpd

2869 S 7788c1b6 1 - VL syslogd

2870 S 77ecf468 1 - VU sdwrapd

2872 S 77d94468 1 - VU platform

2877 S 0 1 - O ls-notify-mts-t

2889 S 77eb2be4 1 - VU pfm_dummy

2896 S 77f836be 1 - O klogd

2903 S 77d9ebe4 1 - VL vshd

2904 S 77e41468 1 - VU stun

2905 S 77a74f43 1 - VL smm

2906 S 77e5a468 1 - VL session-mgr

2907 S 77c4e468 1 - VL psshelper

2908 S 77f75468 1 - VU lmgrd

2909 S 77e36be4 1 - VG licmgr

2910 S 77ebe468 1 - VG fs-daemon

2911 S 77ec5468 1 - VL feature-mgr

2912 S 77e7a468 1 - VU confcheck

2913 S 77eb3468 1 - VU capability

2915 S 77c4e468 1 - VU psshelper_gsvc

2922 S 77f75468 1 - O cisco

2937 S 77895f43 1 - VL clis

2937 S 77895f43 1 - VL clis

2952 S 77cba468 1 - VL xmlma

2953 S 77e8b468 1 - VL vmm

2955 S 77e80468 1 - VU ttyd

2957 S 77ecb6be 1 - VL sysinfo

2958 S 77b57468 1 - VL sksd

2959 S 77ea7468 1 - VG res_mgr

2960 S 77e53468 1 - VG plugin

2961 S 77ccf468 1 - VL mvsh

2962 S 77e05468 1 - VU module

2963 S 77cce468 1 - VL evms

2964 S 77ccf468 1 - VL evmc

2965 S 77ecc468 1 - VU core-dmon

2966 S 7765b40d 1 - VL ascii-cfg

2967 S 77cebbe4 1 - VL securityd

2968 S 77cb5468 1 - VU cert_enroll

2969 S 77b17be4 1 - VL aaa

2973 S 77e19468 1 - VU ExceptionLog

2975 S 77dfb468 1 - VU bootvar

2976 S 77df9468 1 - VG ifmgr

2977 S 77ead468 1 - VU tcap

2978 S 77a6bf43 1 - VL l3vm

2978 S 77a6bf43 1 - VL l3vm

2979 S 77a62f43 1 - VL u6rib

2980 S 77a62f43 1 - VL urib

2981 S 77f30be4 1 - VU core-client

2983 S 77b95468 1 - VL aclmgr

3008 S 77d51468 1 - VU aclcomp

3011 S 7774440d 1 - VL tacacs

3012 S 77a72f43 1 - VL adjmgr

3016 S 77a74f43 1 - VL arp

3021 S 778a1896 1 - VL icmpv6

3022 S 7791ef43 1 - VL netstack

3050 S 7770240d 1 - VL radius

3051 S 77f59be4 1 - VL ip_dummy

3052 S 77f59be4 1 - VL ipv6_dummy

3053 S 7783c40d 1 - VU ntp

3054 S 77f59be4 1 - VL pktmgr_dummy

3055 S 778ae40d 1 - VL snmpd

3056 S 77f59be4 1 - VL tcpudp_dummy

3063 S 7782d40d 1 - VL cdp

3064 S 77b1540d 1 - VL dcos-xinetd

3154 S 77b4040d 1 - O ntpd

3195 S 77e0d468 1 - VL vsim

3196 S 778ee40d 1 - VL ufdm

3196 S 778ee40d 1 - VL ufdm

3197 S 77d42468 1 - VU sf_nf_srv

3198 S 778e240d 1 - VL sal

3199 S 77a14f43 1 - VL rpm

3200 S 778cd40d 1 - VG pltfm_config

3201 S 77efc468 1 - VU pixmc

3202 S 77e0f468 1 - VG pixm

3203 S 77c43468 1 - VU pdl_srv_tst

3204 S 7789e40d 1 - VL nfm

3205 S 77ddc468 1 - VU msp

3206 S 77dbc468 1 - VL monitor

3207 S 7789c40d 1 - VL mfdm

3208 S 7787340d 1 - VL l2fm

3209 S 77dc0468 1 - VL ipqosmgr

3210 S 77e81468 1 - VU ethanalyzer

3211 S 777b740d 1 - VL dhcp_snoop

3212 S 77b3940d 1 - VL dcos-thttpd

3213 S 77c26468 1 - VU copp

3214 S 77b2b468 1 - VL eth_port_channel

3215 S 77d15468 1 - VL vlan_mgr

3219 S 758bc40d 1 - VU vms

3220 S 77b8a468 1 - VL eth-port-sec

3221 S 77abb468 1 - VL stp

3221 S 77abb468 1 - VL stp

3226 S 77de5468 1 - VL lacp

3228 S 777ba40d 1 - VL ethpm

3232 S 77a0127b 1 - VL igmp

3235 S 77dba468 1 - VL private-vlan

3241 S 77d70468 1 - VU vim

3246 S 77d4b468 1 - VU portprofile

3285 S 77f836be 1 1 O getty

3286 S 77f806be 1 S0 O getty

3290 S 77f1deee 1 - O gettylogin1

3308 S 77f836be 1 S1 O getty

3360 S 77ae140d 1 - O dcos_sshd

3361 S 77aaa468 1 8 O vsh

4213 Z 0 1 - O vmw_maintenance

25188 Z 0 1 - O vmw_maintenance

31228 Z 0 1 - O vmw_maintenance

427 Z 0 1 - O vmw_maintenance

1035 Z 0 1 - O vmw_maintenance

2439 Z 0 1 - O vmw_maintenance

7167 Z 0 1 - O vmw_maintenance

8246 Z 0 1 - O vmw_maintenance

8856 Z 0 1 - O vmw_maintenance

10539 Z 0 1 - O vmw_maintenance

10539 Z 0 1 - O vmw_maintenance

16083 Z 0 1 - O vmw_maintenance

19353 S 77ae140d 1 - O dcos_sshd

19354 S 7752340d 1 - O xmlsa

13167 S 77ae140d 1 - O dcos_sshd

13169 S 77aaa468 1 17 O vsh

14253 S 7798140d 1 - O in.dcos-telnetd

14254 S 77aaa468 1 18 O vsh

14757 S 7798140d 1 - O in.dcos-telnetd

14758 S 77a82eee 1 19 O vsh

14933 S 77f426be 1 19 O more

14934 S 77aa9be4 1 19 O vsh

14935 R 77f716be 1 - O ps

- NR - 0 - VL eigrp

- NR - 0 - VL isis

- NR - 0 - VL ospf

- NR - 0 - VL ospfv3

- NR - 0 - VL rip

- NR - 0 - VL eigrp

- NR - 0 - VL isis

- NR - 0 - VL ospf

- NR - 0 - VL ospfv3

- NR - 0 - VL rip

- NR - 0 - VL rip

- NR - 0 - VL eigrp

- NR - 0 - VL isis

- NR - 0 - VL ospf

- NR - 0 - VL ospfv3

- NR - 0 - VL rip

- NR - 0 - VL eigrp

- NR - 0 - VL isis

- NR - 0 - VL ospf

- NR - 0 - VL ospfv3

- NR - 0 - VL rip

- NR - 0 - VL amt

- NR - 0 - VL bgp

- NR - 0 - VL eou

- NR - 0 - VL glbp

- NR - 0 - VL hsrp_engine

- NR - 0 - VU installer

- NR - 0 - VL interface-vlan

- NR - 0 - VU lisp

- NR - 0 - VL msdp

- NR - 0 - VL pim

- NR - 0 - VL pim6

- NR - 0 - VL scheduler

- NR - 0 - VL isis

- NR - 0 - VL ospf

- NR - 0 - VL ospfv3

- NR - 0 - VL rip

- NR - 0 - VL amt

- NR - 0 - VL bgp

- NR - 0 - VL eou

- NR - 0 - VL glbp

- NR - 0 - VL hsrp_engine

- NR - 0 - VU installer

- NR - 0 - VL interface-vlan

- NR - 0 - VU lisp

- NR - 0 - VL msdp

- NR - 0 - VL pim

- NR - 0 - VL pim6

- NR - 0 - VL scheduler

- NR - 0 - VU vbuilder

State: R(runnable), S(sleeping), Z(defunct)

Type: U(unknown), O(non sysmgr)

NR(not running), ER(terminated etc)

n1000v#

Related Commands

Command

Description

Displays the HA status of the system.

show module

Displays information about all available VSMs and VEMs in the system.

module vem

Allows you to enter commands on the VEM remotely from the Cisco Nexus 1000V.

show radius-server

command.

]

Syntax Description

(Optional) DNS name or IP address for the RADIUS server.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the RADIUS server configuration:

n1000v# show radius-server ads

ads:

available for authentication on port:1812

available for accounting on port:1813

idle time:0

test user:test

test password:********

n1000v(config)#

Related Commands

Command

Description

Defines the IP address or hostname for the RADIUS server.

Enables directed requests.

show radius-server groups

Displays information about the RADIUS server group configuration.

show radius-server sorted

Displays RADIUS servers sorted by name.

show radius-server statistics

Displays RADIUS statistics.

Displays the directed request configuration.

show radius-server directed-request

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the directed request configuration:

n1000v(config)# show radius-server directed-request

disabled

n1000v(config)#

Related Commands

Command

Description

Enables directed requests.

show radius-server groups

Displays information about the RADIUS server group configuration.

show radius-server sorted

Displays RADIUS servers sorted by name.

show radius-server statistics

Displays RADIUS statistics.

show radius-server groups

command.

]

Syntax Description

(Optional) Name of the RADIUS server group.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the RADIUS server group configuration:

n1000v# show radius-server groups

n1000v#

Related Commands

Command

Description

Creates a RADIUS server group and enters the RADIUS server group configuration submode for that group.

Defines the IP address or hostname for the RADIUS server.

Enables directed requests.

show radius-server sorted

Displays RADIUS servers sorted by name.

show radius-server statistics

Displays RADIUS statistics.

Displays the directed request configuration.

show radius-server sorted

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the RADIUS server configuration in a sorted format:

n1000v(config)# show radius-server sorted

Related Commands

Command

Description

Defines the IP address or hostname for the RADIUS server.

Enables directed requests.

show radius-server groups

Displays information about the RADIUS server group configuration.

show radius-server statistics

Displays RADIUS statistics.

Displays the directed request configuration.

show radius-server statistics

command.

}

Syntax Description

DNS name for the RADIUS server host.

IP address of the RADIUS server host.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the RADIUS statistics:

n1000v# show radius-server statistics 10.10.1.1

Server is not monitored

Authentication Statistics

failed transactions: 0

sucessfull transactions: 0

requests sent: 0

requests timed out: 0

responses with no matching requests: 0

responses not processed: 0

responses containing errors: 0

Accounting Statistics

failed transactions: 0

sucessfull transactions: 0

requests sent: 0

requests timed out: 0

responses with no matching requests: 0

responses not processed: 0

responses containing errors: 0

Related Commands

Command

Description

Defines the IP address or hostname for the RADIUS server.

Enables directed requests.

show radius-server groups

Displays information about the RADIUS server group configuration.

show radius-server sorted

Displays RADIUS servers sorted by name.

show radius-server statistics

Displays RADIUS statistics.

Displays the directed request configuration.

show running-config bridge-domain

To display the running configuration information for bridge domain, use the show running-config bridge-domain command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

To use this command, you can display the running bridge domain.

Examples

This example shows how to display running config bridge domain information:

n1000V(config)# # show running-config bridge-domain

!Command: show running-config bridge-domain

!Time: Tue Jun 18 05:00:03 2013

version 4.2(1)SV2(2.1)

feature segmentation

feature vxlan-gateway

segment mode unicast-only

bridge-domain tenant-red1

segment id 5000

group 224.24.109.28

segment mode unicast-only

no segment distribution mac

bridge-domain tenant-red2

segment id 5001

segment mode unicast-only

no segment distribution mac

bridge-domain tenant-red3

segment id 5002

segment mode unicast-only

segment distribution mac

interface Vethernet62

switchport access bridge-domain tenant-red1

interface Vethernet65

switchport access bridge-domain tenant-red2

interface Vethernet67

switchport access bridge-domain tenant-red3

interface port-channel1

service instance 2

encapsulation dot1q 320 bridge-domain tenant-red1

encapsulation dot1q 321 bridge-domain tenant-red2

encapsulation dot1q 322 bridge-domain tenant-red3

Related Commands

Command

Description

Displays all bridge domains with the mode.

show running-configuration cts

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

To use this command, you enable the Cisco TrustSec feature.

for more information on the licensing requirements for Cisco Nexus 1000V.

Examples

This example shows how to display CTS running configuration information:

n1000V(config)# feature cts

n1000V(config)# vrf context management

n1000V(config)# ip route 0.0.0.0/0 10.78.1.1

n1000V(config)# cts role-based sgt-map 99.10.10.10 545

n1000V(config)# port-profile type vethernet kumar

n1000V(config-port-prof)# capability l3control

n1000V(config-port-prof)# vmware port-group

n1000V(config-port-prof)# switchport mode access

n1000V(config-port-prof)# switchport access vlan 353

n1000V(config-port-prof)# cts sgt 6766

n1000V(config-port-prof)# no shutdown

n1000V(config-port-prof)# system vlan 353

n1000V(config-port-prof)# state enabled

n1000V(config-port-prof)# cts device tracking

n1000V(config-port-prof)# cts interface delete-hold 60

n1000V(config-port-prof)# cts sxp enable

n1000V(config-port-prof)# cts sxp default password 7 CisocPassword

n1000V(config-port-prof)# cts sxp connection peer 10.104.244.22 password required 7vbmxz123 mode listener vrf management

n1000v(config-port-prof)# show running-config cts

!Command: show running-config cts

!Time: Mon Oct 1 15:51:49 2012

version 4.2(1)SV2(1.1)

feature cts

cts device tracking

cts interface delete-hold 60

cts sxp enable

cts sxp connection peer 172.23.233.94 password none mode listener vrf management

n1000v(config)#

show running-config diff

Command

Description

copy running-config startup-config

Copies the running configuration to the startup configuration.

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

When you switch over from one VSM to another, any unsaved running configuration that was available in an active VSM is still unsaved in the new active VSM. You can verify this unsaved running configuration with this command. Then, save that configuration in the startup. if needed.

Examples

This example shows how to verify the difference between the running and startup configurations:

n1000v# show running-config diff

*** Startup-config

--- Running-config

***************

*** 1,38 ****

version 4.0(4)SV1(1)

role feature-group name new

role name testrole

username admin password 5 $1$S7HvKc5G$aguYqHl0dPttBJAhEPwsy1 role network-admin

telnet server enable

ip domain-lookup

Related Commands

Command

Description

Initiates, on the active VSM, a manual switchover to the standby VSM.

copy running-config startup-config

Copies the running configuration to the startup configuration.

show running-config evb

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the running configuration for the EVB segmentation.

n1000v#: show running-config evb

evb resource-wait-delay 24

evb reinit-keep-alive 25

ecp retransmission-timer-exponent 15

ecp max-retries 6

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

show running-config fabric forwarding

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.2)

This command was introduced.

Usage Guidelines

You must have enabled the fabric forwarding feature before executing this command.

Examples

This example shows how to display fabric forwarding feature on the Cisco Nexus 1000V:

n1000V# show running-config fabric forwarding

version 4.2(1)SV2(2.2)

feature fabric forwarding

fabric forwarding anycast-gateway-mac 1111.2222.4444

Related Commands

Command

Description

Displays the EVB segmentation information on the Cisco Nexus 1000V.

Displays the VDP VSI information from the Cisco Nexus 1000V VEM.

Displays the ECP information.

show running-config interface ethernet

command.

Syntax Description

Slot number and port number for an existing Ethernet interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the running configuration for a Ethernet interface 2/1:

n1000v# show running-config interface ethernet 2/1

version 4.0(4)SV1(3)

interface Ethernet3/2

inherit port-profile uplink_all

Related Commands

Command

Description

Displays information about the running configuration of the port channel.

show running-config interface vethernet

Displays information about the running configuration of the vEthernet interface.

show running-config interface port-channel

command.

Syntax Description

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

The following example shows how to display the running configuration for port channel 10:

n1000v(config)# show running-config interface port-channel 10

version 4.0(4)SV1(1)

interface port-channel10

switchport

switchport mode trunk

Related Commands

Command

Description

Displays a summary of port-channel information.

show running-config interface vethernet

command.

Syntax Description

Number that identifies an existing vEthernet interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the running configuration for a vEthernet interface 2/1:

n1000v# show running-config interface vethernet 1

version 4.0(4)SV1(2)

interface Vethernet1

description isp_pvlan1

pinning id 3

switchport mode private-vlan host

no shutdown

n1000v#

Related Commands

Command

Description

Displays information about the running configuration of the port channel.

show running-config interface ethernet

Displays information about the running configuration of the Ethernet interface.

show running-config netflow

To display the running configuration information for NetFlow, use the show running-config netflow command.

show running-config netflow

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display NetFlow running configuration information:

n1000v(config)# show running-config netflow

!Command: show running-config netflow

!Time: Mon Aug 18 21:34:44 2014

version 5.2(1)SV3(1.1)

feature netflow

flow timeout active 1800

flow timeout inactive 15

flow exporter ExporterTest

destination 192.168.0.3 use-vrf management

transport udp 9996

source lc-exp 192.168.0.2/24

version 9

template data timeout 60

flow record RecordTest

match ipv4 source address

match ipv4 destination address

collect counter bytes

collect counter packets

collect timestamp sys-uptime first

collect timestamp sys-uptime last

flow monitor MonitorTest

record RecordTest

exporter ExporterTest

interface Vethernet1

ip flow monitor MonitorTest input

interface Vethernet2

ip flow monitor MonitorTest output

Related Commands

Command

Description

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

show running-config network-segment policy

command.

]

Syntax Description

(Optional) The name of the network segmentation policy.

Defaults

None

Command Modes

Any

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how display the network segmentation policy configuration:

n1000v# show running-config network-segment policy abc-policy-vxlan

!Command: show running-config network-segment policy abc-policy-vxlan

!Time: Fri Aug 26 18:34:50 2011

version 4.2(1)SV1(5.1)

feature network-segmentation-manager

network-segment policy abc-policy-vxlan

description network segmentation policy for ABC for VXLAN networks

id f5dcf127-cdb0-4bdd-8df5-9515d6dc8170

type segmentation

import port-profile port-profile ABC_profile_segmentation

Related Commands

Command

Description

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

show running-config port-profile

command.

]

Syntax Description

(Optional) Port Profile Name.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the port profile configuration:

n1000v(config)# show running-config port-profile

!Command: show running-config port-profile

!Time: Fri Oct 15 13:28:40 2010

version 4.2(1)SV1(4)

port-profile default max-ports 32

port-profile type ethernet allaccess2

assign port-profile-role adminUser

port-profile type vethernet feature-veth-240

capability feature-veth

vmware port-group

switchport mode access

switchport access vlan 240

no shutdown

description Port-group created for Nexus1000V internal usage. Do not use/modify manually.

state enabled

n1000v(config)#

Related Commands

Command

Description

port-profile

Creates a port profile.

show running-config vlan

command.

Syntax Description

VLAN ID number or range of VLANs. Valid VLAN IDs are1-4094 or ranges are 1-5, 10 or 2-5, 7-19.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how display the running configuration for VLAN100:

n1000v(config)# show running-config vlan 100

version 4.2(1)SV1(4)

vlan 100

n1000v(config)#

Related Commands

Command

Description

Displays VLAN information.

Creates a VLAN.

show service-module interface brief

Displays all the interfaces of the service modules attached to the VSM.

service-module interface brief

Syntax Description

Specifies all interfaces of the service modules.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Specifies all Ethernet and Vethernet interfaces of the service modules.

Examples

This example shows how to display all the interfaces of the service modules attached to the VSM:

n1000v(config)# show service-module interface brief

--------------------------------------------------------------------------------

Ethernet VLAN Type Mode Status Reason Speed Port

Interface Ch #

--------------------------------------------------------------------------------

Eth37/1 1 eth trunk up none auto 5

Eth37/3 1 eth trunk up none auto 5

Eth38/1 1 eth trunk up none auto 6

Eth38/3 1 eth trunk up none auto 6

Po4 1 eth trunk down No operational members auto(D) lacp

Po5 1 eth trunk up none auto(D) lacp

Po6 1 eth trunk up none auto(D) lacp

Po7 1 eth trunk down No operational members auto(D) lacp

--------------------------------------------------------------------------------

Vethernet VLAN Type Mode Status Reason Speed

--------------------------------------------------------------------------------

Veth81 1546 virt access down nonParticipating auto

Veth129 1546 virt access down nonParticipating auto

Veth222 1546 virt access up none auto

Veth223 1546 virt access up none auto

n1000v(config)#

Related Commands

Command

Description

service-module interface module <mod>

Displays all the interfaces of a specific service module attached to the VSM.

show service-module mgmt-int

Displays the management interface of the service modules attached to the VSM.

show service-module mgmt-int module <mod>

Displays the management interface of a specific module attached to the VSM.

show service-module interface module <mod> brief

Displays all the interfaces of a specific service module attached to the VSM.

show service-module interface module <mod> brief

Syntax Description

Specifies service module attached to the VSM.

Specifies all the interfaces of a specific module.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Specifies all Ethernet and Vethernet interfaces of the specific service modules.

Examples

This example shows how to display all the interfaces of a specific service module attached to the VSM:

n1000v(config)# show service-module interface module 37 brief

--------------------------------------------------------------------------------

Ethernet VLAN Type Mode Status Reason Speed Port

Interface Ch #

--------------------------------------------------------------------------------

Eth37/1 1 eth trunk up none auto 5

Eth37/3 1 eth trunk up none auto 5

Po5 1 eth trunk up none auto(D) lacp

--------------------------------------------------------------------------------

Vethernet VLAN Type Mode Status Reason Speed

--------------------------------------------------------------------------------

Veth223 1546 virt access up none auto

n1000v(config)#

Related Commands

Command

Description

show service-module interface brief

Displays all the interfaces of the service modules attached to the VSM.

show service-module mgmt-int

Displays the management interface of the service modules attached to the VSM.

show service-module mgmt-int module <mod>

Displays the management interface of a specific module attached to the VSM.

show service-module mgmt-int

Displays the management interface of the service modules attached to the VSM.

show service-module mgmt-int

Syntax Description

mgmt-int

Specifies management interface.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

User installs the management IP address with the gateway.

Examples

This example shows how to display the management interface of the service modules attached to the VSM:

n1000v(config)# show service-module mgmt-int

--------------------------------------------------------------------------------

Mod Interface-Name IP-address Speed MTU

--------------------------------------------------------------------------------

37 Mgmt0 10.105.234.173 0 0

38 Mgmt0 10.105.234.172 0 0

n1000v(config)#

Related Commands

Command

Description

show service-module interface brief

Displays all the interfaces of the service modules attached to the VSM.

show service-module interface module <mod> brief

Displays all the interfaces of a specific service module attached to the VSM.

show service-module mgmt-int module <mod>

Displays the management interface of a specific module attached to the VSM.

show service-module mgmt-int module <mod>

Displays the management interface of a specific module attached to the VSM.

show service-module mgmt-int module <mod>

Syntax Description

mgmt-int

Specifies management interface.

module <mod>

Specifies service module number.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

User installs the management IP address with the gateway.

Examples

This example shows how to display the management interface of a specific module attached to the VSM:

n1000v(config)# show service-module mgmt-int module 37

--------------------------------------------------------------------------------

Mod Interface-Name IP-address Speed MTU

--------------------------------------------------------------------------------

37 Mgmt0 10.105.234.173 0 0

n1000v(config)#

Related Commands

Command

Description

show service-module interface brief

Displays all the interfaces of the service modules attached to the VSM.

show service-module interface module <mod> brief

Displays all the interfaces of a specific service module attached to the VSM.

show service-module mgmt-int

Displays the management interface of the service modules attached to the VSM.

show snmp

command.

]

Syntax Description

(Optional) Specifies SNMP community strings.

(Optional) Specifies SNMP context mapping entries.

(Optional) Specifies the SNMP engineID.

(Optional) Specifies the SNMP group.

(Optional) Specifies SNMP hosts.

(Optional) Specifies SNMP sessions.

(Optional) Specifies SNMP traps.

(Optional) Specifies SNMPv3 users.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the SNMP engineID:

n1000v# show snmp engineID

Local SNMP engineID: [Hex] 800000090302000C000000

[Dec] 128:000:000:009:003:002:000:012:000:000:000

n1000v#

Related Commands

Command

Description

Configures sysContact, which is the SNMP contact name.

snmp-server location

Configures sysLocation, which is the SNMP location.

show spanning-tree bpduguard info

To display bpduguard configuration status globally, use the show spanning-tree bpduguard info command.

show spanning-tree bpduguard info

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display bpduguard configuration status globally:

n1000v # sh spanning-tree bpduguard info

Global spanning-tree bpduguard status: Enabled

Related Commands

Command

Description

Configures sysContact, which is the SNMP contact name.

snmp-server location

Configures sysLocation, which is the SNMP location.

show ssh key

command.

]

Syntax Description

(Optional) Specifies the display of DSA SSH keys.

(Optional) Specifies the display of RSA SSH keys.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display SSH server keys:

n1000v# show ssh key

n1000v#

Related Commands

Command

Description

Generates the SSH server key.

show ssh server

Displays whether the SSH server is enabled.

show ssh server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the SSH server configuration:

n1000v# show ssh server

ssh is enabled

version 2 enabled

n1000v#

Related Commands

Command

Description

Creates an SSH IP session to a remote device using IP.

Generates the SSH server key.

show ssh server

Displays whether the SSH server is enabled.

show ssh key

Displays the SSH server keys.

show startup-config aaa

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the AAA configuration in the startup configuration:

n1000v# show startup-config aaa

version 4.0(4)SV1(2)

n1000v#

Related Commands

Command

Description

Displays startup configuration for the access control list (ACL) manager.

Displays information about the Arthur–Merlin protocol (AM).

Displays information about ARP.

Displays information about DHCP.

Displays information about ICMPv6.

Displays information about IGMP.

Displays the interface configuration.

Displays information about IP.

Displays the startup configuration for IP QoS Manager.

Displays information about IPv6.

Displays information about l3vm.

Displays information about licensing.

log

Displays the execution log of the last-used ASCII startup configuration.

Displays configured Ethernet SPAN sessions.

Displays the NetFlow configuration.

Displays the port-profile configuration.

Displays the port-security configuration.

Displays the RADIUS configuration.

Displays the TACACS configuration.

show startup-config network-segment policy

command.

]

Syntax Description

(Optional) The name of the network segmentation policy.

Defaults

None

Command Modes

Any command mode

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the start up configuration of a network segmentation policy:

n1000v(config)# show startup-config network-segment policy

!Command: show startup-config network-segment policy

!Time: Fri Dec 9 02:50:42 2011

!Startup config saved at: Thu Dec 8 05:02:19 2011

version 4.2(1)SV1(5.1)

feature network-segmentation-manager

network-segment policy default_vlan_template

description Default template used for VLAN backed pools

type vlan

import port-profile NSM_template_vlan

network-segment policy default_segmentation_template

description Default template used for isolation backed pools

type segmentation

import port-profile NSM_template_segmentation

Related Commands

Command

Description

Enables the Network Segmentation Manager (NSM) feature.

Creates a network segmentation policy.

show startup-config radius

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the RADIUS configuration in the startup configuration:

n1000v# show startup-config radius

version 4.0(4)SV1(2)

n1000v#

Related Commands

Command

Description

Displays the Authentication, Authorization and Accounting protocol (AAA) configuration in the startup configuration.

Displays startup configuration for the access control list (ACL) manager.

Displays information about Arthur-Merlin protocol (AM).

Displays information about ARP.

Displays information about DHCP.

Displays information about ICMPv6.

Displays information about IGMP.

Displays the interface configuration.

Displays information about IP.

Displays the startup configuration for the IP QoS Manager.

Displays information about IPv6.

Displays information about l3vm.

Displays information about licensing.

log

Displays the execution log of the last-used ASCII startup configuration.

Displays configured Ethernet SPAN sessions.

Displays the NetFlow configuration.

Displays the port-profile configuration.

Displays the port-security configuration.

Displays the RADIUS configuration.

Displays the TACACS configuration.

show startup-config security

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the user account configuration in the startup configuration:

n1000v# show startup-config security

version 4.0(4)SV1(2)

username admin password 5 $1$3/cH7rWm$W3QUjfQOyfySds5p3/PtX. role network-admin

username kathleen password 5 $1$7vewiaFA$iLCfmalyKeSBySqrAgvNZ/ role network-op

erator

username kathleen role network-admin

telnet server enable

n1000v#

Related Commands

Command

Description

Displays the Authentication, Authorization and Accounting protocol (AAA) configuration.

Displays the startup configuration for Access Control List (ACL) manager.

Displays information about the Arthur–Merlin protocol (AM).

Displays information about ARP.

Displays information about DHCP.

Displays information about ICMPv6.

Displays information about IGMP.

Displays the interface configuration.

Displays information about IP.

Displays the startup configuration for the IP QoS Manager.

Displays information about IPv6.

Displays information about l3vm.

Displays information about licensing.

log

Displays the execution log of last used ASCII startup configuration.

Displays configured Ethernet SPAN sessions.

Displays the NetFlow configuration.

Displays the port profile configuration.

Displays the port-security configuration.

Displays the RADIUS configuration.

Displays the TACACS configuration.

show storm-control statistics interface

To display storm control statistics for the interface use show storm-control statistics interface command.

Syntax Description

Specifies an Ethernet interface.

Valid slot and port of the interface, separated by a slash (/).

port-channel

Specifies a port channel interface.

Identifier for a valid port channel.

vethernet

Specifies a Virtual Ethernet interface.

Identifier for a valid Virtual Ethernet interface.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to display the VSM domain configuration:

n1000v# show storm-control statistics interface vethernet 15

Global Storm is: Enabled

Polling Interval: 1

Broadcast Storm is: Allowed

Multicast Storm is: Not configured

UUnicast Storm is: Not configured

Statistics

8 Broadcast Packets

0 Multicast Packets

0 Unknown Unicast Packets

0 Dropped Broadcast Packets

0 Dropped Multicast Packets

0 Dropped Unknown Unicast Packets

Related Commands

Command

Description

To display storm control statistics for the module.

show storm-control statistics module

To display the storm control statistics for the respective module use, show storm-control statistics module command.

show storm-control statistics module <3-256>

Syntax Description

Identifier for a valid Virtual Ethernet interface. The range is 3-256

Command Modes

Any command mode.

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the storm control statistics for the respective module:

n1000v# show storm-control statistics module 3

Interface Unicast Multicast Broadcast

Drops Drops Drops

Eth3/2 0 0 0

Eth3/3 0 0 0

Veth1 0 0 0

Veth3 0 0 0

Veth4 0 0 0

Veth5 0 0 0

Veth6 0 0 0

Veth7 0 0 0

Veth8 0 0 0

Veth9 0 0 0

Veth10 0 0 0

Veth11 0 0 0

Veth12 0 0 0

Veth16 0 0 0

Veth15 0 0 0

Veth14 0 0 0

Veth21 0 0 0

Veth19 0 0 0

Veth18 0 0 0

Veth24 0 0 0

Related Commands

Command

Description

Displays storm control statistics for the interface.

show svs connections

command.

]

Syntax Description

(Optional) Name of an existing connection.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the SVS connection:

n1000v# show svs connections

connection vc:

hostname: 172.23.232.139

remote port: 80

protocol: vmware-vim https

certificate: default

datacenter name: Documentation-DC

DVS uuid: 9b dd 36 50 2e 27 27 8b-07 ed 81 89 ef 43 31 17

config status: Enabled

operational status: Disconnected

sync status: -

version: -

n1000v#

Related Commands

Command

Description

Places you into connection configuration mode for adding this connection between Cisco Nexus 1000V and the vCenter Server.

Displays the domain configuration.

Displays information about SVS neighbors.

show svs domain

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

4.0(4)SV1(2)

The output of this command was modified to include the Layer 2 and Layer 3 transport mode configuration.

Examples

This example shows how to display the VSM domain configuration:

SVS domain config:

Domain id: 100

Control vlan: 100

Packet vlan: 101

Management vlan: 0

L2/L3 Control mode: L3

L2/L3 Control interface: mgmt0

Status: Config push to VC successful.

n1000v(config-svs-domain)#

Related Commands

Command

Description

Creates and configures a domain for the Cisco Nexus 1000V that identifies the VSM and VEMs and the control and packet VLANs for communication and management.

show svs neighbors

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display all SVS neighbors:

n1000v# show svs neighbors

Active Domain ID: 113

AIPC Interface MAC: 0050-56b6-2bd3

Inband Interface MAC: 0050-56b6-4f2d

Src MAC Type Domain-id Node-id Last learnt (Sec. ago)

------------------------------------------------------------------------

0002-3d40-7102 VEM 113 0302 71441.12

0002-3d40-7103 VEM 113 0402 390.77

n1000v#

Related Commands

Command

Description

Displays the Virtual Supervisor Module (VSM) domain configuration.

Creates and configures a domain for the Cisco Nexus 1000V that identifies the VSM and Virtual Ethernet Modules (VEMs) and the control and packet VLANs for communication and management.

show svs upgrade status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to monitor the upgrade of the VSM to a new software version:

n1000v# show svs upgrade status

Upgrade State: Start

Upgrade mgmt0 ipv4 addr: 1.1.1.1

Upgrade mgmt0 ipv6 addr:

Upgrade control0 ipv4 addr:

n1000v#

Related Commands

Command

Description

Begins the upgrade of the VSM.

Completes a VSM software upgrade, and notifies hosts to switch to the upgraded datapath.

show switch edition

switch edition command.

switch edition

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Examples

This example shows how to monitor the upgrade of the VSM to a new software version:

n1000v# show switch edition

Switch Edition - Essential

Advanced Features

Feature Name Feature State

------------------------------------------

cts disabled

dhcp snooping disabled

Licenses Available: 512

Licenses in Use: 0

License Expiry: Never

VSM# show switch edition

Switch Edition - Advanced

Advanced Features

Feature Name Feature State

-----------------------------------------

cts disabled

dhcp snooping enabled

Licenses Available: 28

Licenses in Use: 4

License Expiry: 11 Dec 2012

n1000v#

Related Commands

Command

Description

Begins the upgrade of the VSM.

Completes a VSM software upgrade, and notifies hosts to switch to the upgraded datapath.

show system error-id

command.

}

Syntax Description

Displays brief information for all the system error messages.

Displays description about a specific error code.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display detailed information about error code 0x401e0008:

n1000v# show system error-id 0x401e0008

Error Facility: sysmgr

Error Description: request was aborted, standby disk may be full

n1000v#

Related Commands

Command

Description

Displays the current software release supported.

Displays the system redundancy status.

Adds the system VLAN to this port profile.

Displays the system resources.

show system internal active-active accounting logs

To display the accounting logs that are stored on a local VSM during the latest split-brain resolution, use the show system internal active-active accounting logs command.

show system internal active-active accounting logs

Syntax Description

Displays logs during previous Active-Active VSM scenario.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the accounting logs that are stored on a local VSM during the latest split-brain resolution:

n1000v# show system internal active-active accounting logs

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

Displays the accounting logs that are stored on a remote VSM during the last split-brain resolution.

Displays the system resources.

show system internal active-active redundancy traces

To display the redundancy traces that are stored on a local VSM during the latest split-brain resolution, use the show system internal active-active redundancy traces command.

internal active-active redundancy traces

Syntax Description

Displays the redundancy traces that are stored on a local VSM during the last split-brain resolution.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the accounting logs that are stored on a local VSM during the latest split-brain resolution:

n1000v# show system internal active-active redundancy traces

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

Displays the remote redundancy traces that are stored on a remote VSM during the last split-brain resolution.

Displays the system resources.

show system internal active-active remote accounting logs

To display the accounting logs that are stored on a remote VSM during the latest split-brain resolution, use the show system internal active-active remote accounting logs command.

show system internal active-active remote accounting logs

Syntax Description

Displays the remote accounting logs that are stored on a remote VSM during the last split-brain resolution.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the accounting logs that are stored on a remote VSM:

n1000v# show system internal active-active remote accounting logs

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

Displays the accounting logs that are stored on a local VSM during the last split-brain resolution.

Displays the system resources.

show system internal active-active remote redundancy traces

To display the remote redundancy traces that are stored on a remote VSM during the latest split-brain resolution, use the show system internal active-active remote redundancy traces command.

internal active-active remote redundancy traces

Syntax Description

Displays information for the remote VSM.

Displays the remote redundancy traces that are stored on a remote VSM during the last split-brain resolution.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2.1SV2(1.1)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to display the remote redundancy traces that are stored on a remote VSM:

n1000v# show system internal active-active remote redundancy traces

n1000v#

Related Commands

Command

Description

Displays the system redundancy status.

Displays the redundancy traces that are stored on a local VSM during the last split-brain resolution.

Displays the system resources.

show system redundancy status

command. When a VSM role collision is detected, a warning is highlighted in the CLI output. If no collisions are detected, the warning is not displayed in the output.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the current redundancy status for the VSM:

n1000v# show system redundancy status

---------------

administrative: secondary

operational: secondary

Redundancy mode

---------------

administrative: HA

operational: HA

This supervisor (sup-2)

-----------------------

Redundancy state: Active

Supervisor state: Active

Internal state: Active with HA standby

Other supervisor (sup-1)

------------------------

Redundancy state: Standby

Supervisor state: HA standby

Internal state: HA standby

WARNING! Conflicting sup-2(s) detected in same domain

-----------------------------------------------------

MAC Latest Collision Time

00:50:56:97:02:3b 2012-Sep-11 18:59:17

00:50:56:97:02:3c 2012-Sep-11 18:59:17

00:50:56:97:02:2f 2012-Sep-11 18:57:42

00:50:56:97:02:35 2012-Sep-11 18:57:46

00:50:56:97:02:29 2012-Sep-11 18:57:36

00:50:56:97:02:30 2012-Sep-11 18:57:42

00:50:56:97:02:36 2012-Sep-11 18:57:46

00:50:56:97:02:2a 2012-Sep-11 18:57:36

NOTE: Please run the same command on sup-1 to check for conflicting(if any) sup-1(s) in the same

domain.

n1000v#

Related Commands

Command

Description

Designates the HA role of the VSM.

show system resources

Displays the system resources.

show system resources

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display system-related CPU and memory statistics:

n1000v# show system resources

Load average: 1 minute: 0.00 5 minutes: 0.00 15 minutes: 0.00

Processes : 261 total, 1 running

CPU states : 0.0% user, 0.0% kernel, 100.0% idle

Memory usage: 2075012K total, 946780K used, 1128232K free

66764K buffers, 475404K cache

n1000v#

Related Commands

Command

Description

show system vem feature level

Displays the current software release supported.

show system redundancy

Displays the system redundancy status.

system vlan

Adds the system VLAN to this port profile.

show system vem feature level

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the current VEM feature level:

n1000v# show system vem feature level

current feature level: 4.0(4)SV1(2)

n1000v#

Related Commands

Command

Description

Changes the software version supported on VEMs.

show table-map

command.

]

Syntax Description

(Optional) Specify a particular table map to display.

(Optional) Specify the system-defined table map name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(4)

This command was introduced.

Usage Guidelines

Examples

This example shows how to display the pir-markdown-map:

n1000v# show table-map pir-markdown-map

Table-map pir-markdown-map

default copy

from 10,12 to 14

from 18,20 to 22

from 26,28 to 30

from 34,36 to 38

n1000v#

Related Commands

Command

Description

Creates or modifies a QoS table map.

show tacacs-server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to displays the TACACS+ server configuration:

n1000v# show tacacs-server

Global TACACS+ shared secret:********

timeout value:5

deadtime value:0

total number of servers:1

following TACACS+ servers are configured:

10.10.2.2:

available on port:49

Related Commands

Command

Description

Enables TACACS+.

tacacs-server key

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

show tacacs-server directed-request

Displays the directed server enable configuration.

show tacacs-server groups

Displays information about the TACACS+ server group configuration.

show tacacs-server sorted

Displays TACACS+ servers, sorted by server name.

show tacacs-server statistics

Displays TACACS statistics.

show tcp client

command.

]

Syntax Description

(Optional) Specifies information about the client process.

ID for the specified client process.

(Optional) Specifies socket details.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the TCP client:

n1000v# show tcp client

Total number of clients: 12

Total number of cancels: 255372

client: syslogd, pid: 2962, sockets: 2

client: ntp, pid: 3148, sockets: 2

client: dcos-xinetd, pid: 3156, sockets: 2

client: snmpd, pid: 3150, sockets: 4

client: ntpd, pid: 3243, sockets: 3

client: dcos-thttpd, pid: 3305, sockets: 2

client: radiusd, pid: 3143, sockets: 2

client: vms, pid: 3318, sockets: 0

client: dcos_sshd, pid: 3491, sockets: 3

client: vsh, pid: 3494, sockets: 0

client: in.dcos-telnetd, pid: 25028, sockets: 3

client: vsh, pid: 25029, sockets: 0

Related Commands

Command

Description

show tcp connection

Displays information about the TCP connection.

show tcp statistics

Displays TCP protocol statistics.

show tcp connection

command.

]

Syntax Description

(Optional) Specifies the client process connection status.

ID for the client process connection status.

(Optional) Specifies all TCP connections.

(Optional) Specifies all UDP connections.

(Optional) Specifies all RAW connections.

(Optional) Specifies all TCP connections with a specified local address.

.

.

(Optional) Specifies all TCP connections with a specified foreign address.

.

.

(Optional) Specifies detailed connection information.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display detailed information about the connection:

n1000v# show tcp connection detail

Total number of tcp sockets: 8

Active connections (including servers)

Local host: * (22), Foreign host: * (0)

Protocol: tcp6, type: stream, ttl: 64, tos: 0, Id: 6

Options: none, state:

Receive buffer:

cc: 0, hiwat: 25300, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 25300, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 1012

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 1012, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: * (23), Foreign host: * (0)

Protocol: tcp6, type: stream, ttl: 64, tos: 0, Id: 17

Options: none, state:

Receive buffer:

cc: 0, hiwat: 17204, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 17204, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 1012

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 1012, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: * (80), Foreign host: * (0)

Protocol: tcp6, type: stream, ttl: 64, tos: 0, Id: 13

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 16384, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 16384, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 1073725440

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 1024, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: * (80), Foreign host: * (0)

Protocol: tcp, type: stream, ttl: 64, tos: 0, Id: 14

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 16500, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 16500, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 500

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 500, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: * (161), Foreign host: * (0)

Protocol: tcp, type: stream, ttl: 64, tos: 0, Id: 3

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 16384, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 16384, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 512

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 512, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: * (161), Foreign host: * (0)

Protocol: tcp6, type: stream, ttl: 64, tos: 0, Id: 5

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 16384, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 16384, lowat: 2048, flags:

Sequence number state:

iss: 0, snduna: 0, sndnxt: 0, sndwnd: 0

irs: 0, rcvnxt: 0, rcvwnd: 0, sndcwnd: 1073725440

Timing parameters:

srtt: 0 ms, rtt: 0 ms, rttv: 12000 ms, krtt: 3000 ms

rttmin: 1000 ms, mss: 1024, duration: 1390144100 ms

State: LISTEN

Flags: none

Context: management

Local host: 10.10.233.74 (22), Foreign host: 10.10.185.189 (48131)

Protocol: tcp, type: stream, ttl: 64, tos: 0, Id: 20

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 17500, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 17500, lowat: 2048, flags:

Sequence number state:

iss: 3575780911, snduna: 3576001996, sndnxt: 3576001996, sndwnd: 32767

irs: 905490047, rcvnxt: 905574926, rcvwnd: 17500, sndcwnd: 1953

Timing parameters:

srtt: 700 ms, rtt: 0 ms, rttv: 0 ms, krtt: 1000 ms

rttmin: 1000 ms, mss: 500, duration: 1390101600 ms

State: ESTABLISHED

Flags: none

Context: management

Local host: 10.10.233.74 (23), Foreign host: 10.10.22.107 (35030)

Protocol: tcp, type: stream, ttl: 64, tos: 0, Id: 18

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 17500, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 17500, lowat: 2048, flags:

Sequence number state:

iss: 3273730667, snduna: 3273793065, sndnxt: 3273793065, sndwnd: 32767

irs: 3760023047, rcvnxt: 3760024636, rcvwnd: 17500, sndcwnd: 25095

Timing parameters:

srtt: 700 ms, rtt: 0 ms, rttv: 0 ms, krtt: 1000 ms

rttmin: 1000 ms, mss: 500, duration: 467168700 ms

State: ESTABLISHED

Flags: none

Context: management

Total number of udp sockets: 11

Active connections (including servers)

Local host: * (123), Foreign host: * (0)

Protocol: udp6, type: dgram, ttl: 64, tos: 0, Id: 11

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 42240, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 9216, lowat: 2048, flags:

Context: management

Local host: * (123), Foreign host: * (0)

Protocol: udp, type: dgram, ttl: 64, tos: 0x10, Id: 10

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 42240, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 9216, lowat: 2048, flags:

Context: management

Local host: * (161), Foreign host: * (0)

Protocol: udp, type: dgram, ttl: 64, tos: 0, Id: 1

Options: none, state:

Receive buffer:

cc: 0, hiwat: 131072, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 131072, lowat: 2048, flags:

Context: management

Local host: * (161), Foreign host: * (0)

Protocol: udp6, type: dgram, ttl: 64, tos: 0, Id: 2

Options: none, state:

Receive buffer:

cc: 0, hiwat: 131072, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 131072, lowat: 2048, flags:

Context: management

Local host: 127.0.0.1 (123), Foreign host: * (0)

Protocol: udp, type: dgram, ttl: 64, tos: 0x10, Id: 12

Options: none, state: none

Receive buffer:

cc: 0, hiwat: 42240, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 9216, lowat: 2048, flags:

Context: management

Local host: 127.0.0.1 (130), Foreign host: * (0)

Protocol: udp, type: dgram, ttl: 64, tos: 0, Id: 9

Options: none, state:

Receive buffer:

cc: 0, hiwat: 42240, lowat: 1, flags: none

Send buffer:

cc: 0, hiwat: 9216, lowat: 2048, flags:

Context: management

Local host: 127.0.0.1 (27613), Foreign host: 127.0.0.1 (123)

Protocol: udp, type: dgram, ttl: 64, tos: 0, Id: 8

Options: , state: none

Receive buffer:

cc: 0, hiwat: 42240, lowat: 1, flags:

Send buffer:

cc: 0, hiwat: 9216, lowat: 2048, flags:

Context: management

Total number of raw sockets: 0

Related Commands

Command

Description

Displays the Telnet server configuration.

show running-config security

Displays the user account configuration in the running configuration.

show tcp client

Displays information about the TCP client.

show tcp statistics

Displays TCP protocol statistics.

show tcp statistics

command.

]

Syntax Description

(Optional) Specifies all TCPv4, TCPv6, UDPv4, UDPv6, RAWv4, and RAWv6 protocol statistics.

(Optional) Specifies TCPv4 protocol statistics.

(Optional) Specifies TCPv6 protocol statistics.

(Optional) Specifies the sum of TCPv4 and TCPv6 protocols statistics.

(Optional) Specifies UDPv4 protocol statistics.

(Optional) Specifies UDPv6 protocol statistics.

(Optional) Specifies the sum of UDPv4 and UDPv6 protocols statistics.

(Optional) Specifies RAWv4 protocol statistics.

(Optional) Specifies RAWv6 protocol statistics.

(Optional) Specifies the sum of RAWv4 and RAWv6 protocols statistics.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display TCP protocol statistics:

n1000v# show tcp statistics

TCP Received:

479908 packets total

0 checksum error, 0 bad offset, 0 too short, 0 MD5 error

232451 packets (72213943 bytes) in sequence

195 duplicate packets (192 bytes)

0 partially dup packets (0 bytes)

8652 out-of-order packets (0 bytes)

0 packets (0 bytes) with data after window

2 packets after close

0 window probe packets, 0 window update packets

44339 duplicate ack packets, 0 ack packets with unsent data

252581 ack packets (103465405 bytes)

TCP Sent:

533421 total, 0 urgent packets

94694 control packets

326430 data packets (105082025 bytes)

90 data packets (22114 bytes) retransmitted

105144 ack only packets

34 window probe packets, 7029 window update packets

TCP:

44330 connections initiated, 6715 connections accepted, 50669 connections established

51045 connections closed (including 165 dropped, 376 embryonic dropped)

3067 total rxmt timeout, 0 connections dropped in rxmt timeout

463 keepalive timeout, 92 keepalive probe, 371 connections dropped in keepalive

Related Commands

Command

Description

show tcp connection

Displays information about the TCP connection.

show tcp statistics

Displays TCP protocol statistics.

show tech-support

command.

}

Syntax Description

Displays information regarding access control list (ACL) commands.

adjmgr

Displays Adjmgr information.

arp

Displays ARP information.

bootvar

Displays detailed information for bootvar troubleshooting.

bridge-domain

Displays information for bridge domain segmentation troubleshooting.

cert-enroll

Displays certificate information.

cli

Displays information for parser troubleshooting.

clis

Displays information for CLI Server troubleshooting.

commands

command.

details

Displays detailed information for troubleshooting.

dhcp

Displays information related to DHCP, such as snooping statistics and VLAN configuration.

eem

Displays EEM technical support information.

ethpm

Displays detailed information for ETHPM troubleshooting.

ethport

Displays detailed information for ETHPORT troubleshooting.

ha

Displays detailed information for HA troubleshooting.

icmpv6

Displays Icmpv6 information.

im

Displays detailed information for IM troubleshooting.

include-time

Displays technical support related information and capture time taken to execute each command.

internal

Displays internal information for troubleshooting.

ip

Displays IP information.

ipqos

Displays IP QoS Manager information, such as event details and policy configuration.

ipv6

Displays IPv6 information, such as IPv6 static routes and traffic statistics.

l3vm

Displays VRF information.

lacp

Displays detailed information for LACP component.

license

Displays licensing information.

monitor

Displays detailed information to monitor troubleshooting.

npacl

Displays NPACL information

nsm

Displays detailed information for NSM troubleshooting

ntp

Displays information for NTP troubleshooting

pktmgr

Displays Packet Manager (PM) information

port

Displays detailed information for port manager troubleshooting

port-channel

Displays detailed information for port channel troubleshooting.

port-profile

Displays information for troubleshooting port profiles

port-security

Displays port security related command.

rest-api

Displays detailed information for REST-API troubleshooting.

routing

Displays routing information.

rpm

Displays Route Policy Manager (RPM) information.

sal

Displays SAL technical support information.

smm

Displays shared memory.

snmp

Displays information related to SNMP.

sockets

Displays sockets status and configuration.

sup-filesys

Displays File-system related issue.

svs

Displays SVS information, such as interface and software configurations.

sysmgr

Displays detailed information for sysmgr troubleshooting,

vlan

Displays detailed information for VLAN troubleshooting.

vvlan

Displays detailed information for Voice VLAN troubleshooting.

vxgw

Displays technical support information for VXGW.

xml

Displays information for troubleshooting XML related issues.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Note Before you open a TAC case, always generate troubleshooting information file using the tac-pac command along with feature specific command outputs and attach the files to the case. The troubleshooting information file contains complete information for the Cisco TAC engineers to understand the issue. The troubleshooting information file, in compressed file format, is easier to share and transfer. For more information, see tac-pac.

Examples

This example shows how to collect switch information for Cisco TAC regarding IPv6 issues:

n1000v# show tech-support ipv6

`show ipv6 interface vrf all`

`show ipv6 static-route`

IPv6 Configured Static Routes

`show ipv6 statistic`

FTM related Statistics

ftm_stats_get : 0.00 0

ftm_stats_get_init : 0.00 0

ftm_stats_get_tx : 0.00 0

ftm_stats_get_rx : 0.00 0

ftm_stats_get_flush : 0.00 0

ftm_stats_get_radix : 0.00 0

ftm_stats_csm_fp : 0.00 0

`show ipv6 client`

IPv6 Registered Client Status

Client: icmpv6, status: up, pid: 3021, extended pid: 3021

Protocol: 58, pib-index: 4, routing context id: 255

Control mts SAP: 1280

Data mts SAP: 1281

IPC messages to control mq: 0

IPC messages to data mq: 0

Client: tcpudp, status: up, pid: 3022, extended pid: 3022

Protocol: 17, pib-index: 3, routing context id: 255

Control mts SAP: 1219

Data mts SAP: 1220

IPC messages to control mq: 1

IPC messages to data mq: 0

Recv fn: tcp_process_ipv6_data_msg (0x81fd22a)

Client: tcpudp, status: up, pid: 3022, extended pid: 3022

Protocol: 6, pib-index: 2, routing context id: 255

Control mts SAP: 1219

Data mts SAP: 1220

IPC messages to control mq: 1

IPC messages to data mq: 0

Recv fn: tcp_process_ipv6_data_msg (0x81fd22a)

`show ipv6 traffic`

IPv6 Software Processed Traffic and Error Statistics, last reset: never

RP-Traffic Statistics:

Counter Unicast Multicast

------- ------- ---------

Packets forwarded: 0 0

Bytes forwarded: 0 0

Packets originated: 0 0

Bytes originated: 0 0

Packets consumed: 0 0

Bytes consumed: 0 0

Fragments originated: 0 0

Fragments consumed: 0 0

Error Statistics:

Bad version: 0, route lookup failed: 0, hop limit exceeded: 0

Option header errors: 0, payload length too small: 0

PM errors: 0, MBUF errors: 0, encapsulation errors: 0

Syntax error while parsing 'show ipv6 route'

`show ipv6 internal mem-stats all`

Mem stats for IPV6

Private Mem stats for UUID : Malloc track Library(103) Max types: 5

--------------------------------------------------------------------------------

Curr alloc: 1591 Curr alloc bytes: 76678(74k)

IPC messages to control mq: 0

Curr alloc: 1522 Curr alloc bytes: 164596(160k)

Private Mem stats for UUID : Routing IPC Library(528) Max types: 10

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Routing Library for managing mbufs(522) Max types:

6

--------------------------------------------------------------------------------

Curr alloc: 120 Curr alloc bytes: 485008(473k)

Private Mem stats for UUID : Patricia Trie Library(523) Max types: 3

--------------------------------------------------------------------------------

Curr alloc: 29 Curr alloc bytes: 916(0k)

IPC messages to control mq: 0

Curr alloc: 1522 Curr alloc bytes: 164596(160k)

Private Mem stats for UUID : Routing IPC Library(528) Max types: 10

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Routing Library for managing mbufs(522) Max types:

6

--------------------------------------------------------------------------------

Curr alloc: 120 Curr alloc bytes: 485008(473k)

Private Mem stats for UUID : Patricia Trie Library(523) Max types: 3

--------------------------------------------------------------------------------

Curr alloc: 29 Curr alloc bytes: 916(0k)

IPC messages to control mq: 0

Curr alloc: 1522 Curr alloc bytes: 164596(160k)

Private Mem stats for UUID : Routing IPC Library(528) Max types: 10

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Routing Library for managing mbufs(522) Max types:

6

--------------------------------------------------------------------------------

Curr alloc: 120 Curr alloc bytes: 485008(473k)

Private Mem stats for UUID : Patricia Trie Library(523) Max types: 3

--------------------------------------------------------------------------------

Curr alloc: 29 Curr alloc bytes: 916(0k)

IPC messages to control mq: 0

Curr alloc: 1522 Curr alloc bytes: 164596(160k)

Private Mem stats for UUID : Routing IPC Library(528) Max types: 10

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Routing Library for managing mbufs(522) Max types:

6

--------------------------------------------------------------------------------

Curr alloc: 120 Curr alloc bytes: 485008(473k)

Private Mem stats for UUID : Patricia Trie Library(523) Max types: 3

--------------------------------------------------------------------------------

Curr alloc: 29 Curr alloc bytes: 916(0k)

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : libfsrv(404) Max types: 11

--------------------------------------------------------------------------------

Curr alloc: 65 Curr alloc bytes: 1888(1k)

Private Mem stats for UUID : FSM Utils(53) Max types: 68

--------------------------------------------------------------------------------

Curr alloc: 10 Curr alloc bytes: 376(0k)

Private Mem stats for UUID : IM LIB(319) Max types: 33

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Packet Manager(263) Max types: 16

--------------------------------------------------------------------------------

Curr alloc: 22 Curr alloc bytes: 236504(230k)

Private Mem stats for UUID : Internet Protocol version 6 (IPv6)(269) Max types:

16

--------------------------------------------------------------------------------

Curr alloc: 6 Curr alloc bytes: 1088(1k)

Private Mem stats for UUID : Transmission Control Protocol (TCP)(271) Max types:

18

--------------------------------------------------------------------------------

Curr alloc: 70 Curr alloc bytes: 272444(266k)

Private Mem stats for UUID : Lcache(544) Max types: 3

Private Mem stats for UUID : Adjacency Manager(264) Max types: 16

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : Internet Control Message Protocol version 6 (ICMPv6

)(270) Max types: 27

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Private Mem stats for UUID : NF DDB Utils(515) Max types: 15

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Curr alloc: 3838 Curr alloc bytes: 15194210 (14838k)

Shared Mem stats for UUID : Non mtrack users(0) Max types: 155

Shared Mem stats for UUID : Patricia Trie Library(523) Max types: 2

--------------------------------------------------------------------------------

Curr alloc: 2 Curr alloc bytes: 64(0k)

Shared Mem stats for UUID : Slab Library(529) Max types: 3

--------------------------------------------------------------------------------

Curr alloc: 4 Curr alloc bytes: 288(0k)

Shared Mem stats for UUID : Bitlogic Library(517) Max types: 6

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Shared Mem stats for UUID : Cisco Regex Package(525) Max types: 2

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Shared Mem stats for UUID : Routing Queue Library(526) Max types: 2

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Shared Mem stats for UUID : Internet Protocol (IP)(267) Max types: 12

--------------------------------------------------------------------------------

Curr alloc: 10 Curr alloc bytes: 65888(64k)

Shared Mem stats for UUID : SMM Library(561) Max types: 2

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Shared Mem stats for UUID : Internet Protocol version 6 (IPv6)(269) Max types: 1

4

--------------------------------------------------------------------------------

Curr alloc: 7 Curr alloc bytes: 536(0k)

Shared Mem stats for UUID : Adjacency Manager(264) Max types: 5

--------------------------------------------------------------------------------

Curr alloc: 0 Curr alloc bytes: 0(0k)

Curr alloc: 23 Curr alloc bytes: 66776 (65k)

n1000v#

Note • Use the show tech-support svs detail command to list module level information and CDM data apart from detailed SVS information.

Note • Use the show tech-support svs detail command to list module level information and CDM data apart from detailed SVS information.

- Use the show tech-support detail exclude interface command to list output for platform independent commands excluding the interface commands.

- Use the show tech-support detail interface command for detailed information about all the interfaces.

- Use the show tech-support detail command for detailed information about all the interfaces.

Related Commands

Command

Description

show logging logfile

Displays the contents of the log file.

logging logfile

Configures the log file used to store system messages.

tac-pac

Saves troubleshooting information for TAC in a compressed file.

show telnet server

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the Telnet server configuration:

n1000v# show telnet server

telnet service enabled

n1000v#

Related Commands

Command

Description

Displays information about the connection.

telnet

Uses Telnet to connect to another system.

telnet6

Uses Telnet6 to connect to another system.

show terminal

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the terminal settings for the current session:

n1000v# show terminal

TTY: /dev/pts/8 type: “vt100”

Length: 24 lines, Width: 88 columns

Session Timeout: None

n1000v#

Related Commands

Command

Description

Configures the number of characters to display on each line for the current console session.

terminal terminal-type

Sets the terminal type.

terminal length

Sets the number of lines on the screen.

terminal width

Sets the width of the display terminal.

line console

Puts you in console configuration mode.

line vty

Puts you in line configuration mode.

show user-account

command.

]

Syntax Description

(Optional) Name of a user with an existing account.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display user account configuration for the user called NewUser:

n1000v(config)# show user-account NewUser

user:NewUser

this user account has no expiry date

roles:network-operator network-admin

n1000v(config)#

Related Commands

Command

Description

Displays the available roles that can be assigned to users.

role name

Names a user role and places you in role configuration mode for that role.

username password

Creates a user account.

show users

Displays the current users logged in the system.

show users

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about the user session:

n1000v# show users

NAME LINE TIME IDLE PID COMMENT

admin pts/17 Dec 16 06:37 . 30406 (172.28.254.254) session=ss

h

admin pts/18 Jan 3 19:01 . 3847 (sjc-vpn5-786.cisco.com) *

n1000v#

Related Commands

Command

Description

Displays the new user account configuration.

Displays the available roles that can be assigned to users.

username password

Creates a user account.

role name

Names a user role and places you in role configuration mode for that role.

show version

command.

]

Syntax Description

(Optional) Specifies the software version of a module.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the versions of system software and hardware that are currently running on the switch:

n1000v# show version

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.

The copyrights to certain works contained in this software are

owned by other third parties and used and distributed under

license. Certain components of this software are licensed under

the GNU General Public License (GPL) version 2.0 or the GNU

Lesser General Public License (LGPL) Version 2.1. A copy of each

such license is available at

http://www.opensource.org/licenses/gpl-2.0.php and

http://www.opensource.org/licenses/lgpl-2.1.php

Software

loader: version 1.2(2) [last: image booted through mgmt0]

kickstart: version 4.0(4)SV1(2)

system: version 4.0(4)SV1(2)

kickstart image file is:

kickstart compile time: 9/22/2009 2:00:00

system image file is: bootflash:/nexus-1000v-mz.4.0.4.SV1.2.bin

system compile time: 9/22/2009 2:00:00 [10/07/2009 10:11:01]

Software

loader: version 1.2(2) [last: image booted through mgmt0]

kickstart: version 4.0(4)SV1(2)

system: version 4.0(4)SV1(2)

kickstart image file is:

kickstart compile time: 9/22/2009 2:00:00

system image file is: bootflash:/nexus-1000v-mz.4.0.4.SV1.2.bin

system compile time: 9/22/2009 2:00:00 [10/07/2009 10:11:01]

Hardware

Cisco Nexus 1000V Chassis ("Virtual Supervisor Module")

Intel(R) Xeon(R) CPU with 2075012 kB of memory.

Processor Board ID T5056B645A8

Device name: n1000v

bootflash: 2332296 kB

Kernel uptime is 79 day(s), 0 hour(s), 24 minute(s), 55 second(s)

plugin

Core Plugin, Ethernet Plugin

n1000v#

Related Commands

Command

Description

show version image

Displays the versions of system software and hardware that are currently running on the switch.

Displays information about the configuration currently running on the system.

show running-config diff

Displays the difference between the startup configuration and the running configuration currently on the switch.

show interface

Displays details about the specified interface configuration.

show version image

command.

}

Syntax Description

Specifies bootflash as the directory name.

URI of the system where the image resides.

Specifies volatile as the directory name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the versions of system software and hardware that are currently running on the switch:

n1000v# show version image bootflash:isan.bin

image name: nexus-1000v-mz.4.0.4.SV1.1.bin

bios: version unavailable

system: version 4.0(4)SV1(1)

compiled: 4/2/2009 23:00:00 [04/23/2009 09:55:29]

n1000v#

Related Commands

Command

Description

show version

Displays the software version of a given image.

Displays information about the configuration currently running on the system.

show running-config diff

Displays the difference between the startup configuration and the running configuration currently on the switch.

show interface

Displays details about the specified interface configuration.

show virtual-service-domain brief

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display a list of the VSDs currently configured in a VSM:

n1000v# show virtual-service-domain brief

Name default action in-ports out-ports mem-ports

vsd1 drop 1 1 4

vsd2 forward 1 1 0

vsim-cp# sho virtual-service-domain interface

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Name Interface Type Status

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

vsd1 Vethernet1 Member Active

vsd1 Vethernet2 Member Active

vsd1 Vethernet3 Member Active

vsd1 Vethernet6 Member Active

vsd1 Vethernet7 Inside Active

vsd1 Vethernet8 Outside Active

vsd2 Vethernet9 Inside Active

vsd2 Vethernet10 Outside Active

vsim-cp# show virtual-service-domain name vsd1

Default Action: drop

___________________________

Interface Type

___________________________

Vethernet1 Member

Vethernet2 Member

Vethernet3 Member

Vethernet6 Member

Vethernet7 Inside

Vethernet8 Outside

n1000v#

Related Commands

Command

Description

Creates a virtual service domain that classifies and separates traffic for network services.

show virtual-service-domain interface

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display the interfaces currently assigned to the VSDs in a VSM:

n1000v# show virtual-service-domain interface

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Name Interface Type Status

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

vsd1 Vethernet1 Member Active

vsd1 Vethernet2 Member Active

vsd1 Vethernet3 Member Active

vsd1 Vethernet6 Member Active

vsd1 Vethernet7 Inside Active

vsd1 Vethernet8 Outside Active

vsd2 Vethernet9 Inside Active

vsd2 Vethernet10 Outside Active

Related Commands

Command

Description

Creates a virtual service domain that classifies and separate traffic for network services.

show virtual-service-domain name

command.

Syntax Description

Name of the VSD.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to display a specific VSD configuration:

n1000v# show virtual-service-domain name vsd1

Default Action: drop

___________________________

Interface Type

___________________________

Vethernet1 Member

Vethernet2 Member

Vethernet3 Member

Vethernet6 Member

Vethernet7 Inside

Vethernet8 Outside

n1000v#

Related Commands

Command

Description

Creates a virtual service domain that classifies and separate traffic for network services.

show vlan

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the status and information for VLANs:

n1000v# show vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Po1, Po12, Veth1, Veth2, Veth3

Veth10, Veth100

2 VLAN0002 active

100 VLAN0100 active

101 VLAN0101 active

102 VLAN0102 active

103 VLAN0103 active

104 VLAN0104 active

105 VLAN0105 active

106 VLAN0106 active

107 VLAN0107 active

108 VLAN0108 active

109 VLAN0109 active

115 VLAN0115 active

260 cp_control active

261 cp_packet active

VLAN Type

---- -----

1 enet

2 enet

100 enet

101 enet

102 enet

103 enet

104 enet

105 enet

106 enet

107 enet

108 enet

109 enet

115 enet

260 enet

261 enet

Remote SPAN VLANs

-------------------------------------------------------------------------------

Primary Secondary Type Ports

------- --------- --------------- -------------------------------------------

n1000v#

Related Commands

Command

Description

Specifies the interface that you are configuring and places you in interface configuration mode.

switchport trunk native vlan

Designates the native VLAN for the 802.1Q trunk in the running configuration.

switchport trunk allowed vlan

Sets the allowed VLANs for the trunk interface in the running configuration.

vlan dot1q tag native

Modifies the behavior of a 802.1Q trunked native VLAN ID interface in the running configuration.

show vlan all-ports

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the status of all VLANs and the ports that are configured on them:

n1000v# show vlan all-ports

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Po1, Po2, Po12, Veth1, Veth2

Veth3, Veth10, Veth100

2 VLAN0002 active

100 VLAN0100 active

101 VLAN0101 active

102 VLAN0102 active

103 VLAN0103 active

104 VLAN0104 active

105 VLAN0105 active

106 VLAN0106 active

107 VLAN0107 active

108 VLAN0108 active

109 VLAN0109 active

115 VLAN0115 active

260 cp_control active

261 cp_packet active

n1000v#

Related Commands

Command

Description

show vlan id

Displays the VLAN configuration

show vlan summary

Displays a summary of VLAN information.

show vlan private-vlan

Displays the Private VLAN (PVLAN) configuration.

show vlan brief

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the aging time in the MAC address table:

n1000v# show vlan brief

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Po1, Po2, Po12, Veth1, Veth2

Veth3, Veth10, Veth100

2 VLAN0002 active

100 VLAN0100 active

101 VLAN0101 active

102 VLAN0102 active

103 VLAN0103 active

104 VLAN0104 active

105 VLAN0105 active

106 VLAN0106 active

107 VLAN0107 active

108 VLAN0108 active

109 VLAN0109 active

115 VLAN0115 active

260 cp_control active

261 cp_packet active

n1000v#

Related Commands

Command

Description

show vlan id

Displays the VLAN configuration

show vlan summary

Displays a summary of VLAN information.

show vlan private-vlan

Displays the PVLAN configuration.

show vlan id

command.

Syntax Description

Number identifying an existing VLAN, or range of VLANs, from 1–3967 and 4048–4093. You can specify groups of VLANs or individual VLANs; for example, 1–5, 10 or 2–5, 7–19.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the configuration for VLAN 462:

nexus1000v# show vlan id 462

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

462 VLAN0462 active Veth3, Veth5

VLAN Type

---- -----

462 enet

Remote SPAN VLAN

----------------

Disabled

Primary Secondary Type Ports

------- --------- --------------- -------------------------------------------

Related Commands

Command

Description

Creates a VLAN and enters the VLAN configuration mode.

show vlan private-vlan

Displays private VLAN information.

show vlan summary

Displays VLAN summary information.

show vlan private-vlan

command.

]

Syntax Description

(Optional) Specifies the display of only the PVLAN type information.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the PVLAN configuration:

1000v(config)# show vlan private-vlan

Primary Secondary Type Ports

------- --------- --------------- -------------------------------------------

202 303 community Eth3/2, Veth1

n1000v(config)#

Related Commands

Command

Description

show vlan id

Displays the VLAN configuration.

show vlan brief

Displays only a brief summary of the status for all VLANs.

show vlan summary

Displays a summary of VLAN information.

show vlan summary

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the aging time in the MAC address table:

n1000v# show vlan summary

Number of existing VLANs : 15

Number of existing user VLANs : 15

Number of existing extended VLANs : 0

n1000v#

Related Commands

Command

Description

show vlan id

Displays the VLAN configuration

show vlan brief

Displays only a brief summary of the status for all VLANs.

show vlan private-vlan

Displays the PVLAN configuration.

show vmware vc extension-key

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

The VSM uses the extension key when communicating with the vCenter Server. Each VSM has its own unique extension key, such as Cisco_Nexus_1000V_32943215.

You can also locate the extension key in the .xml file. The extension key registered on the vCenter Server can be found through the Managed Object Browser (MOB).

Examples

This example shows how to display the extension key of the VSM:

n1000v# show vmware vc extension-key

Extension ID: Cisco_Nexus_1000V_1193126422

n1000v#

Related Commands

Command

Description

show vmware vem upgrade status

Monitors the upgrade of a Virtual Ethernet Module (VEM) to a new software version.

vmware vem upgrade notify

Notifies the vCenter Server that the software on the VSM has been upgraded.

vmware vem upgrade proceed

Begins the upgrade of the virtual machine (VM).

vmware vem upgrade complete

Clears the upgrade status.

show vmware vem upgrade status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to monitor the upgrade of the VEMs to a new software version:

n1000v# show vmware vem upgrade status

Upgrade Status: Upgrade Complete in vCenter

Upgrade Notification Sent Time: Tue Sep 8 17:37:23 2009

Upgrade Status Time(vCenter): Tue Sep 8 17:45:05 2009

Upgrade Start Time: Tue Sep 8 17:42:02 2009

Upgrade End Time(vCenter): Tue Sep 8 17:45:02 2009

Upgrade Error:

n1000v#

Related Commands

Command

Description

vmware vem upgrade notify

Notifies the vCenter Server that the software on the Virtual Supervisor Module (VSM) has been upgraded.

vmware vem upgrade proceed

Begins the upgrade of the Virtual Machine (VM).

vmware vem upgrade complete

Clears the upgrade status.

show vtracker module-view pnic

command.

Syntax Description

module

(Optional) Specifies the VEM module number on which the Virtual Machine (VM) resides.

number

Module number. The range is from 3 to 66.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Examples

This example shows how to display the module pNIC view in a Virtual Supervisor Module (VSM):

n1000v(config)# show vtracker module-view pnic

-------------------------------------------------------------------------------

Mod EthIf Adapter Mac-Address Driver DriverVer FwVer

Description

-------------------------------------------------------------------------------

3 Eth3/8 vmnic7 0050.5652.f935 igb 2.1.11.1 1.4-3

Intel Corporation 82576 Gigabit Network Connection

4 Eth4/3 vmnic2 0050.565e.df74 e1000 8.0.3.2-1vmw-NAPI N/A

Intel Corporation 82546GB Gigabit Ethernet Controller

4 Eth4/4 vmnic3 0050.565e.df75 e1000 8.0.3.2-1vmw-NAPI N/A

Intel Corporation 82546GB Gigabit Ethernet Controller

--------------------------------------------------------------------------------

This example shows how to display the pNIC view of module number 3:

n1000v(config)# show vtracker module-view pnic module 3

--------------------------------------------------------------------------------

Mod EthIf Adapter Mac-Address Driver DriverVer FwVer

Description

--------------------------------------------------------------------------------

3 Eth3/8 vmnic7 0050.5652.f935 igb 2.1.11.1 1.4-3

Intel Corporation 82576 Gigabit Network Connection

--------------------------------------------------------------------------------

Related Commands

Command

Description

Displays the brief interface information.

show vtracker upstream-view

command.

Syntax Description

device-id

(Optional) Specifies the name of the neighboring device.

name

Device name. The name has a maximum of 80 alphanumeric characters. The name is case sensitive and special characters are allowed.

device-ip

(Optional) Specifies the IP address of the device.

IP address

Device IPv4 address.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

The Cisco Discovery Protocol (CDP) neighbor information must be accessible to generate the required upstream view output.

Examples

This example shows how to display the upstream view in a Virtual Supervisor Module (VSM):

n1000v(config)# show vtracker upstream-view

--------------------------------------------------------------------------------

Device-Name Device-Port Server-Name PC-Type Veth-interfaces

Device-IP Local-Port Adapter Status PO-Intf

--------------------------------------------------------------------------------

Upstream-SW-A Gig2/7 203.0.113.118 MacPinn 10-11

203.0.113.66 Eth3/3 vmnic2 up Po1

Upstream-SW-B Gig3/10 203.0.113.117 MacPinn 9

203.0.113.54 Eth3/4 vmnic3 up Po1

Gig3/8 203.0.113.99 Default 1-2

Eth4/3 vmnic2 up Po2

Gig3/9 203.0.113.99 Default 1-2

Eth4/4 vmnic3 up Po2

--------------------------------------------------------------------------------

This example shows how to display the upstream view of the physical switch with the device ID name Upstream-SW-A:

n1000v(config)# show vtracker upstream-view device-id Upstream-SW-A

--------------------------------------------------------------------------------

Device-Name Device-Port Server-Name PC-Type Veth-interfaces

Device-IP Local-Port Adapter Status PO-Intf

--------------------------------------------------------------------------------

Upstream-SW-A Gig2/7 203.0.113.118 MacPinn 10-11

203.0.113.66 Eth3/3 vmnic2 up Po1

--------------------------------------------------------------------------------

Related Commands

Command

Description

Displays the module’s status, software version, MAC address, and server information.

Displays your device from the upstream device.

Displays the virtual pinning information of the interface.

show vtracker vlan-view

command.

Syntax Description

vlan

(Optional) Specifies the VLAN ID on which the VM resides.

number/range

Specifies a single VLAN or a range of VLANs you need information on. The range is from 1-3967 and 4048-4093. Specify multiple IDs or range(s), separated by commas.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Examples

This example shows how to display the VLAN view in a Virtual Supervisor Module (VSM):

n1000v(config)# show vtracker vlan-view

* R = Regular Vlan, P = Primary Vlan, C = Community Vlan

I = Isolated Vlan, U = Invalid

--------------------------------------------------------------------------------

VLAN Type VethPort VM Name Adapter Name Mod

--------------------------------------------------------------------------------

1 R - - - -

233 R - - - -

335 R - - - -

336 R - - - -

337 R - - - -

338 R - - - -

339 R Veth3 gentoo-2 Net Adapter 3 3

Veth4 gentoo-2 Net Adapter 4 3

Veth5 gentoo-2 Net Adapter 2 3

340 R - - - -

341 R - - - -

400 R Veth1 Fedora-VM2 Net Adapter 1 5

401 R Veth1 Fedora-VM2 Net Adapter 1 5

402 R Veth1 Fedora-VM2 Net Adapter 1 5

403 R - - - -

404 P Veth6 Fedora-VM1 Net Adapter 1 4

405 C Veth2 Fedora-VM2 Net Adapter 3 5

406 I Veth7 Fedora-VM1 Net Adapter 2 4

--------------------------------------------------------------------------------

This example shows how to display the VLAN view within a range of 233 to 240:

n1000v(config)# show vtracker vlan-view vlan 233-340

* R = Regular Vlan, P = Primary Vlan, C = Community Vlan

I = Isolated Vlan, U = Invalid

--------------------------------------------------------------------------------

VLAN Type VethPort VM Name Adapter Name Mod

--------------------------------------------------------------------------------

233 R - - - -

335 R - - - -

336 R - - - -

337 R - - - -

338 R - - - -

339 R Veth3 gentoo-2 Net Adapter 3 3

Veth4 gentoo-2 Net Adapter 4 3

Veth5 gentoo-2 Net Adapter 2 3

340 R - - - -

-----------------------------------------------------------------------------

Related Commands

Command

Description

Displays the brief interface information.

show vlan

Displays the VLAN interfaces connected to the switch and its respective status.

show interface virtual

Displays the virtual interface information.

show vtracker vm-view info

command.

Syntax Description

module

(Optional) Specifies the module number on which the VM resides.

number

Module number. The range is from 3 to 66.

vm

(Optional) Specifies the VM for which the vmview is to be displayed.

name

VM name. The name has a maximum of 80 alphanumeric characters. The name is case sensitive and special characters are allowed.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

The VSM must be connected with the vCenter in order to generate the required VM view output.

The timeout for this command is 180 seconds.

Examples

This example shows how to display the VM information in a Virtual Supervisor Module (VSM):

n1000v(config)# show vtracker vm-view info

Module 4:

VM Name: Fedora-VM1

Guest Os: Other Linux (32-bit)

Power State: Powered On

VM Uuid: 421871bd-425e-c484-d868-1f65f4f1bc50

Virtual CPU Allocated: 1

CPU Usage: 1 %

Memory Allocated: 256 MB

Memory Usage: 1 %

VM FT State: Unknown

Tools Running status: Not Running

Tools Version status: not installed

Data Store: NFS1_4

VM Uptime: 1 day 29 minutes 46 seconds

VM Name: Fedora-VM2

Guest Os: Other Linux (32-bit)

Power State: Powered On

VM Uuid: 4218ab37-d56d-63e4-3b00-77849401071e

Virtual CPU Allocated: 1

CPU Usage: 1 %

Memory Allocated: 256 MB

Memory Usage: 1 %

VM FT State: Unknown

Tools Running status: Not Running

Tools Version status: not installed

Data Store: NFS1_4

VM Uptime: 58 minutes 30 seconds

Module 5:

VM Name: gentoo-cluster2-1

Guest Os: Other (64-bit)

Power State: Powered Off

VM Uuid: 4235edf5-1553-650f-ade8-39565ee3cd57

Virtual CPU Allocated: 1

CPU Usage: 0 %

Memory Allocated: 512 MB

Memory Usage: 0 %

VM FT State: Unknown

Tools Running status: Not Running

Tools Version status: not installed

Data Store: datastore1 (2)

VM Uptime: n/a

This example shows how to display the VM information view of Fedora-VM1:

n1000v(config)# show vtracker vm-view info vm Fedora-VM1

Module 4:

VM Name: Fedora-VM1

Guest Os: Other Linux (32-bit)

Power State: Powered On

VM Uuid: 421871bd-425e-c484-d868-1f65f4f1bc50

Virtual CPU Allocated: 1

CPU Usage: 1 %

Memory Allocated: 256 MB

Memory Usage: 1 %

VM FT State: Unknown

Tools Running status: Not Running

Tools Version status: not installed

Data Store: NFS1_4

VM Uptime: 1 day 29 minutes 46 seconds

show vtracker vm-view vnic

command.

Syntax Description

module

(Optional) Specifies the module number on which the VM resides.

number

Module number. The range is from 3 to 66.

vm

(Optional) Specifies the VM for which the vNIC view is to be displayed.

name

VM name. The name has a maximum of 80 alphanumeric characters. The name is case sensitive and special characters are allowed.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

The Virtual Supervisor Module must be connected with the vCenter in order to generate the required VM view output.

Examples

This example shows how to display the VM vNIC in a VSM:

n1000v(config)# show vtracker vm-view vnic

* Network: For Access interface - Access vlan, Trunk interface - Native vlan,

VXLAN interface - Segment Id.

--------------------------------------------------------------------------------

Mod VM-Name VethPort Drv Type Mac-Addr State Network Pinning

HypvPort Adapter Mode IP-Addr

--------------------------------------------------------------------------------

3 gentoo-2 Veth3 Vmxnet3 0050.56b5.37de up 339 Eth3/8

1025 Adapter 3 access n/a

3 gentoo-2 Veth4 E1000 0050.56b5.37df up 339 Eth3/8

1026 Adapter 4 access n/a

3 gentoo-2 Veth5 Vmxnet2 0050.56b5.37dd up 339 Eth3/8

1024 Adapter 2 access n/a

4 Fedora-VM1 Veth7 E1000 0050.56bb.4fc1 up 406 Eth4/3

4258 Adapter 2 pvlan 10.104.249.49

5 Fedora-VM2 Veth1 E1000 0050.56b5.098b up 1 Po9

100 Adapter 1 trunk n/a

5 Fedora-VM2 Veth2 E1000 0050.56b5.098d up 405 Po9

3232 Adapter 3 pvlan 10.104.249.60

--------------------------------------------------------------------------------

This example shows how to display the VM vNIC view, on module number 4:

n1000v(config)# show vtracker vm-view vnic module 4

* Network: For Access interface - Access vlan, Trunk interface - Native vlan,

VXLAN interface - Segment Id.

--------------------------------------------------------------------------------

Mod VM-Name VethPort Drv Type Mac-Addr State Network Pinning

HypvPort Adapter Mode IP-Addr

--------------------------------------------------------------------------------

4 Fedora-VM1 Veth7 E1000 0050.56bb.4fc1 up 406 Eth4/3

4258 Adapter 2 pvlan 10.104.249.49

--------------------------------------------------------------------------------

Related Commands

Command

Description

Displays the brief interface information.

show interface virtual

Displays the virtual interface information.

show interface virtual pinning

Displays the virtual pinning information of the interface.

show bridge-domain brief

Displays the bridge-domain status and connected ports.

show vtracker vmotion-view

command.

Syntax Description

now

Displays the ongoing VM migrations in the switch.

last

Specifies the number of VM migration events to report. The output includes previous and ongoing migrations.

number

Number of VM migration events. The range is from 1 to 100.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(1.1)

This command was introduced.

Usage Guidelines

The VSM must be connected with the vCenter in order to generate the required VMotion view output.

Examples

This example shows how to display the VMotion view in a Virtual Supervisor Module (VSM):

n1000v(config)# show vtracker vmotion-view now

Note: Command execution is in progress...

Note: VM Migration events are shown only for VMs currently

managed by Nexus 1000v.

* '-' = Module is offline or no longer attached to Nexus1000v DVS

--------------------------------------------------------------------------------

VM-Name Src Dst Start-Time Completion-Time

Mod Mod

--------------------------------------------------------------------------------

rk-ubt-1-0046 6 4 Mon Sep 3 10:42:27 2012 OnGoing

rk-ubt-1-0045 6 4 Mon Sep 3 10:42:27 2012 OnGoing

--------------------------------------------------------------------------------

This example shows how to display the VMotion view for 20 migrations:

n1000v(config)# show vtracker vmotion-view last 20

Note: Command execution is in progress...

Note: VM Migration events are shown only for VMs currently

managed by Nexus 1000v.

* '-' = Module is offline or no longer attached to Nexus1000v DVS

---------------------------------------------------------------------------------

VM-Name Src Dst Start-Time Completion-Time

Mod Mod

---------------------------------------------------------------------------------

rk-ubt-1-0046 6 4 Mon Sep 3 10:42:27 2012 OnGoing

rk-ubt-1-0045 6 4 Mon Sep 3 10:42:27 2012 OnGoing

rk-ubt-1-0031 6 4 Mon Sep 3 10:42:27 2012 Mon Sep 3 10:44:10 2012

rk-ubt-1-0021 6 4 Mon Sep 3 10:42:27 2012 Mon Sep 3 10:43:42 2012

rk-ubt-1-0023 6 3 Thu Aug 16 14:25:26 2012 Thu Aug 16 14:27:55 2012

rk-ubt-1-0029 6 3 Thu Aug 16 14:25:26 2012 Thu Aug 16 14:27:50 2012

rk-ubt-1-0024 6 3 Thu Aug 16 14:25:26 2012 Thu Aug 16 14:26:13 2012

rk-ubt-1-0025 6 3 Thu Aug 16 14:25:26 2012 Thu Aug 16 14:26:12 2012

rk-ubt-1-0026 6 3 Thu Aug 16 14:25:26 2012 Thu Aug 16 14:26:09 2012

RHEL-Tool-VmServer - 3 Wed Aug 8 12:57:48 2012 Wed Aug 8 12:58:37 2012

---------------------------------------------------------------------------------

show vxlan gateway interface

Displays the transport ip-address, default-gateway, netmask configured on the VTEP of the service modules attached to the VSM. Additionally it also captures module-id and HA-state of the service modules.

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Use this command to view details of the VTEP configured on the service module attached to the VSM.

Examples

This example shows how to find the module for virtual Ethernet interface binding:

n1000v(config)# show vxlan gateway interface

-------------------------------------------------------------------------------

Port IP Address Netmask Gateway Module

-------------------------------------------------------------------------------

Veth1 10.0.0.1 255.0.0.1 10.0.0.100 4

Veth2 20.0.0.1 255.0.0.1 20.0.0.100 5

Related Commands

None.

show xml server status

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display information about XML server settings and any active XML server sessions:

n1000v# show xml server status

operational status is enabled

maximum session configured is 8

n1000v#

Related Commands

Command

Description

xml server max-session

Sets the number of allowed XML server sessions.

xml server terminate session

Terminates the specified XML server session.

T Commands

This chapter describes the Cisco Nexus 1000V commands that begin with T.

table-map

form of this command.

Syntax Description

Specify the table map name.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Examples

This example shows how to create or access the my_table1 table map for configuration:

n1000v# configure terminal

n1000v(config)# table-map my_table1

n1000v(config-tmap)#

This example shows how to remove the my_table1 table map:

n1000v(config)# no table-map my_table1

n1000v(config)#

Related Commands

Command

Description

from src to dest

Maps input field values to output field values in a QoS table map.

Displays table maps.

policy-map

Creates and configures QoS policy maps.

class-map

Creates or modifies a QoS class map that defines a class of traffic.

tac-pac

To generate troubleshooting information in a compressed file format for TAC. You can specify the target location where the file is saved using the command parameter.

Note Before you open a TAC case, always generate troubleshooting information file using the tac-pac command along with feature specific command outputs and attach the files to the case. The troubleshooting information contains complete information for the Cisco TAC engineers to understand the issue. The troubleshooting information file, in compressed file format, is easier to share and transfer.

Syntax Description

Sets bootflash as destination location to save the troubleshooting information file.

Sets FTP server as destination location to save the troubleshooting information file.

Sets modflash as destination location to save the troubleshooting information file.

Sets SCP as destination location to save the troubleshooting information file.

Sets a secured FTP server as destination location to save the troubleshooting information file.

Sets TFTP server as destination location to save the troubleshooting information file.

Sets volatile memory as destination location to save the troubleshooting information file.

Defaults

volatile

Command Modes

any

Supported User Roles

network admin

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how generate troubleshooting information file for TAC and save it in the bootflash:

pri_vsm# tac-pac bootflash:

pri_vsm# dir bootflash:

1006479 Nov 23 00:07:00 2015 show_tech_out.gz

This example shows how generate troubleshooting information file for TAC and save it in the volatile memory:

pri_vsm# tac-pac volatile

pri_vsm# dir volatile:

374382 Nov 23 00:07:00 2015 show_tech_out.gz

command. For example:

pri_vsm# copy volatile:show_tech_out.gz bootflash:

Related Commands

Command

Description

To collect switch information for Cisco TAC.

tacacs+ enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to enable TACACS+:

n1000v(config)# tacacs+ enable

n1000v(config)#

This example shows how to disable TACACS+:

n1000v(config)# no tacacs+ enable

n1000v(config)#

Related Commands

Command

Description

Designates the global key shared between the Cisco Nexus 1000V and the TACACS+ server hosts.

tacacs-server host

Designates the key shared between the Cisco Nexus 1000V and this specific TACACS+ server host.

show tacacs-server

Displays the TACACS+ server configuration.

tacacs-server deadtime

form of this command.

Syntax Description

Specifies the time interval in minutes. The range is from 1 to 1440.

Defaults

0 minutes

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Setting the time interval to zero disables the timer. If the dead-time interval for an individual TACACS+ server is greater than zero (0), that value takes precedence over the value set for the server group.

When the dead-time interval is 0 minutes, TACACS+ server monitoring is not performed unless the TACACS+ server is part of a server group and the dead-time interval for the group is greater than 0 minutes.

command, before you can use any of the other TACACS+ commands to configure the feature.

Examples

This example shows how to configure the dead-time interval and enable periodic monitoring:

n1000v# config terminal

n1000v(config)# tacacs-server deadtime 10

This example shows how to revert to the default dead-time interval and disable periodic monitoring:

n1000v# config terminal

n1000v(config)# no tacacs-server deadtime 10

Related Commands

Command

Description

Sets a dead-time interval for monitoring a nonresponsive TACACS+ server.

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server directed-request

form of this command.

-server directed-request

-server directed-request

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command, before you can use any of the other TACACS+ commands to configure the feature.

during login, where vrfname is the virtual routing and forwarding (VRF) name to use and hostname is the name of a configured TACACS+ server. The username is sent to the server name for authentication.

Note If you enable the directed-request option, the NX-OS device uses only the RADIUS method for authentication and not the default local method.

Examples

This example shows how to allow users to send authentication requests to a specific TACACS+ server when logging in:

n1000v# config t

n1000v(config)# tacacs-server directed-request

This example shows how to disallow users to send authentication requests to a specific TACACS+ server when logging in:

n1000v# config t

n1000v(config)# no tacacs-server directed-request

Related Commands

Command

Description

Displays a directed request TACACS+ server configuration.

Enables TACACS+.

tacacs-server host

form of this command.

Syntax Description

TACACS+ server Domain Name Server (DNS) name. The name is alphanumeric, case sensitive, and has a maximum of 256 characters.

format.

format.

(Optional) Configures the TACACS+ server’s shared secret key.

0

(Optional) Configures a preshared key specified in clear text (indicated by 0) to authenticate communication between the TACACS+ client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text (indicated by 7) to authenticate communication between the TACACS+ client and server.

Preshared key to authenticate communication between the TACACS+ client and server. The preshared key is alphanumeric, case sensitive, and has a maximum of 63 characters.

(Optional) Configures a TACACS+ server port for authentication. The range is from 1 to 65535.

test

(Optional) Configures parameters to send test packets to the TACACS+ server.

(Optional) Specifies the time interval (in minutes) for monitoring the server. The time range is 1 to 1440 minutes.

(Optional) Specifies a user password in the test packets. The password is alphanumeric, case sensitive, and has a maximum of 32 characters.

(Optional) Specifies a user name in the test packets. The username is alphanumeric, case sensitive, and has a maximum of 32 characters.

(Optional) Configures a TACACS+ server timeout period (in seconds) between retransmissions to the TACACS+ server. The range is from 1 to 60 seconds.

Defaults

Parameter

Default

Idle-time

disabled

Server monitoring

disabled

Timeout

1 seconds

Test username

test

Test password

test

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command before you configure TACACS+.

When the idle time interval is 0 minutes, periodic TACACS+ server monitoring is not performed.

Examples

This example shows how to configure TACACS+ server host parameters:

n1000v# config terminal

n1000v(config)# tacacs-server host 10.10.2.3 key HostKey

n1000v(config)# tacacs-server host tacacs2 key 0 abcd

n1000v(config)# tacacs-server host tacacs3 key 7 1234

n1000v(config)# tacacs-server host 10.10.2.3 test idle-time 10

n1000v(config)# tacacs-server host 10.10.2.3 test username tester

n1000v(config)# tacacs-server host 10.10.2.3 test password 2B9ka5

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server key

form of this command.

Syntax Description

0

(Optional) Configures a preshared key specified in clear text to authenticate communication between the TACACS+ client and server. This is the default.

7

(Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server.

Preshared key to authenticate communication between the TACACS+ client and server. The preshared key is alphanumeric, case sensitive, and has a maximum of 63 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

command before you configure TACACS+.

Examples

The following example shows how to configure TACACS+ server shared keys:

n1000v# config terminal

n1000v(config)# tacacs-server key AnyWord

n1000v(config)# tacacs-server key 0 AnyWord

n1000v(config)# tacacs-server key 7 public

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tacacs-server timeout

form of this command.

Syntax Description

Seconds between retransmissions to the TACACS+ server. The range is from 1 to 60 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command before you configure TACACS+.

Examples

This example shows how to configure the TACACS+ server timeout value:

n1000v# config terminal

n1000v(config)# tacacs-server timeout 3

This example shows how to revert to the default TACACS+ server timeout value:

n1000v# config terminal

n1000v(config)# no tacacs-server timeout 3

Related Commands

Command

Description

Displays TACACS+ server information.

Enables TACACS+.

tail

command.

Syntax Description

:

(Optional) Name of a file system. The name is case sensitive.

. The identifiers are case sensitive.

(Optional) Name of a directory. The name is case sensitive.

Name of the command file. The name is case sensitive.

(Optional) Number of lines to display. The range is from 0 to 80.

Defaults

10 lines

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to display the last 10 lines of a file:

n1000v# tail bootflash:startup.cfg

ip arp inspection filter marp vlan 9

ip dhcp snooping vlan 13

ip arp inspection vlan 13

ip dhcp snooping

ip arp inspection validate src-mac dst-mac ip

ip source binding 10.3.2.2 0f00.60b3.2333 vlan 13 interface Ethernet2/46

ip source binding 10.2.2.2 0060.3454.4555 vlan 100 interface Ethernet2/10

logging level dhcp_snoop 6

logging level eth_port_channel 6

This example shows how to display the last 20 lines of a file:

n1000v# tail bootflash:startup.cfg 20

area 99 virtual-link 1.2.3.4

router rip Enterprise

router rip foo

address-family ipv4 unicast

router bgp 33.33

event manager applet sdtest

monitor session 1

monitor session 2

ip dhcp snooping vlan 1

ip arp inspection vlan 1

ip arp inspection filter marp vlan 9

ip dhcp snooping vlan 13

ip arp inspection vlan 13

ip dhcp snooping

ip arp inspection validate src-mac dst-mac ip

ip source binding 10.3.2.2 0f00.60b3.2333 vlan 13 interface Ethernet2/46

ip source binding 10.2.2.2 0060.3454.4555 vlan 100 interface Ethernet2/10

logging level dhcp_snoop 6

logging level eth_port_channel 6

Related Commands

Command

Description

Changes the current working directory.

Copies files.

Displays the directory contents.

Displays the name of the current working directory.

telnet

command.

Syntax Description

IPv4 address of the remote device.

Hostname of the remote device. The name is alphanumeric, case sensitive, and has a maximum of 64 characters.

(Optional) Port number for the Telnet session. The range is from 1 to 65535.

(Optional) Specifies the virtual routing and forwarding (VRF) name to use for the Telnet session. The name is case sensitive.

Defaults

Port 23

Default VRF

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to start a Telnet session using an IPv4 address:

n1000v# telnet 10.10.1.1 vrf management

Related Commands

Command

Description

Clears Telnet sessions.

Enables the Telnet server.

template data timeout

form of this command.

Syntax Description

A time period between 1 and 86400 seconds.

Defaults

None

Command Modes

Netflow flow exporter version 9 configuration (config-flow-exporter-version-9)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure a 3600-second timeout period for resending NetFlow flow exporter template data:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# template data timeout 3600

This example shows how to remove the timeout period for resending NetFlow flow exporter template data:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no template data timeout

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

version 9

Designates NetFlow export version 9 in the NetFlow exporter.

terminal event-manager bypass

command.

Syntax Description

This command has no arguments or keywords.

Defaults

Event manager is enabled.

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to disable the CLI event manager:

n1000v# terminal event-manager bypass

n1000v#

Related Commands

Command

Description

Displays terminal configuration.

terminal length

command.

Syntax Description

Number of lines. The range of valid values is 0 to 511.

Defaults

28 lines

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

to 0 to disable pausing.

Examples

This example shows how to set the number of lines that appear on the screen:

n1000v# terminal length 60

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal monitor

command. To disable logging, use the no form of this command.

no terminal monitor

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command does not disable all messages from being printed to the console. Messages such as “module add” and “remove events” will still be logged to the console.

Examples

This example shows how to enable logging for Telnet or SSH:

n1000v# terminal monitor

n1000v#

Related Commands

Command

Description

show terminal

Displays the terminal configuration.

terminal length

Sets the number of lines that appear on the screen.

terminal width

Sets the terminal width.

terminal type

Specifies the terminal type.

terminal session-timeout

Sets the session timeout.

terminal session-timeout

command.

Syntax Description

Timeout time, in seconds. The range of valid values is 0 to 525600.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

to 0 to disable timeout.

Examples

This example shows how to set session timeout:

n1000v# terminal session-timeout 100

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal terminal-type

command.

Syntax Description

Terminal type.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to specify the terminal type:

n1000v# terminal terminal-type vt100

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal tree-update

command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to update the main parse tree:

n1000v# terminal tree-update

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

terminal width

command.

Syntax Description

Number of characters on a single line. The range of valid values is 24 to 511.

Defaults

102 columns

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set terminal width:

n1000v# terminal width 60

n1000v#

Related Commands

Command

Description

Displays the terminal configuration.

test aaa

command.

Syntax Description

Specifies an AAA server group.

AAA server group name. The range of valid values is 1 to 32.

User name. The range of valid values is 1 to 32.

User password. The range of valid values is 1 to 32.

Specifies an AAA server.

Specifies a RADIUS server.

IP address or DNS name.

Specifies a virtual route.

Virtual route.name.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to test for AAA on RADIUS server:

n1000v# test aaa server radius ts1 vrf route1 user1 9w8e7r

n1000v#

Related Commands

Command

Description

Displays AAA information.

timers bgp <keepalive-timer> <hold-timer>

To configure Keepalive interval timer and holdtimer for bgp, use the timers bgp <keepalive-timer> <hold-timer> command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

5.2(1)SV3(1.1)

This command was introduced.

Examples

This example shows how to configure Keepalive interval timer and holdtimer for bgp:

n1000v(config-router)# timers bgp 180 180

Related Commands

Command

Description

Displays AAA information.

track network-state enable

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to enable Network State Tracking for all VEMs configured with a vPC-HM port-profile:

n1000v# config t

n1000v(config)# track network-state enable

n1000v(config)#

This example shows how to disable Network State Tracking:

n1000v(config)# no track network-state

n1000v(config)#

Related Commands

Command

Description

Displays the Network State Tracking configuration for verification.

Displays the Network State Tracking status for a module or interface.

track network-state interval

form of this command.

Syntax Description

Broadcast interval (from 1 to 10 seconds). The default is 5 seconds.

Defaults

5 seconds

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Usage Guidelines

None

Examples

This example shows how to specify an interval for sending broadcasts:

n1000v(config)# track network-state interval 8

n1000v(config)#

This example shows how to remove the broadcast interval configuration:

n1000v(config)# no track network-state interval

n1000v(config)#

Related Commands

Command

Description

Displays the Network State Tracking status for a module or interface.

Displays the Network State Tracking configuration for verification.

Enables Network State Tracking for all VEMs configured with a vPC-HM port-profile.

track network-state threshold miss-count

form of this command.

Syntax Description

Specifies the number of Network State Tracking broadcasts that can be missed from 3 to 7. The default is 5.

Defaults

5 missed broadcasts

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to configure the maximum number of Network State Tracking broadcasts that can be missed:

n1000v# config t

n1000v(config)# network-state tracking threshold miss-count 7

n1000v(config)#

This example shows how to remove the configuration:

n1000v(config)# no network-state tracking threshold miss-count

n1000v(config)#

Related Commands

Command

Description

Displays the Network State Tracking status for a module or interface.

Displays the Network State Tracking configuration for verification.

Enables Network State Tracking for all VEMs configured with a vPC-HM port-profile.

track network-state split action

form of this command.

Syntax Description

If a split network is detected by Network State Tracking, the traffic is pinned to another uplink. (the default)

If a split network is detected by Network State Tracking, traffic is not repinned, and system messages are logged only.

Defaults

repin

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to specify the action to take if Network State Tracking detects a split network:

n1000v# config t

repin

n1000v(config)#

This example shows how to remove the configuration:

n1000v(config)# no track network-state split action repin

n1000v(config)#

Related Commands

Command

Description

Displays the Network State Tracking status for a module or interface.

Displays the Network State Tracking configuration for verification.

Enables Network State Tracking for all VEMs configured with a vPC-HM port-profile.

traceroute

command.

Syntax Description

.

Name of the destination device. The name is case sensitive.

(Optional) Specifies the virtual routing and forwarding (VRF) to use. The name is case sensitive.

(Optional) Displays the Multiprotocol Label Switching (MPLS) hops.

.

Defaults

Uses the management IPv4 address for the source address.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to discover a route to a device:

n1000v# traceroute 172.28.255.18 vrf management

traceroute to 172.28.255.18 (172.28.255.18), 30 hops max, 40 byte packets

1 172.28.230.1 (172.28.230.1) 0.746 ms 0.595 ms 0.479 ms

2 172.24.114.213 (172.24.114.213) 0.592 ms 0.51 ms 0.486 ms

3 172.20.147.50 (172.20.147.50) 0.701 ms 0.58 ms 0.486 ms

4 172.28.255.18 (172.28.255.18) 0.495 ms 0.43 ms 0.482 ms

Related Commands

Command

Description

Discovers the route to a device using IPv6 addressing.

transport ip address A.B.C.D gateway A.B.C.D

Configures VXLAN termination or a VTEP on the VXLAN gateway. Creating VTEP port-profile is similar to the steps described under Configuring vmknics for VXLAN Encapsulation except the vmware port-group command which is not supported on the VXLAN gateway.

[no] transport ip address A.B.C.D gateway A.B.C.D

Note Starting with Release 5.2(1)SV3(1.15), Cisco Nexus 1000V for VMware vSphere does not support the VXLAN gateway feature.

Syntax Description

A.B.C.D

IPv4 address of the encapsulation device.

A.B.C.D

IPv4 default gateway address of the encapsulation device.

Defaults

None.

Command Modes

Port-profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV2(2.1)

This command was introduced.

Usage Guidelines

Configures VXLAN termination or a VTEP on the VXLAN gateway.

Examples

This example shows how to configure transport ip address:

n1000v(config)# port-profile type vethernet vmknic_vtep

n1000v(config-port-prof)# transport ip address 192.168.10.100 255.255.255.0 gateway 192.168.10.1

This example shows how to remove transport ip address:

n1000v(config)# port-profile type vethernet vmknic_vtep

n1000v(config-port-prof)# no transport ip address 192.168.10.100 255.255.255.0 gateway 192.168.10.1

Related Commands

None.

transport udp (NetFlow)

form of this command.

Command History

Destination UDP number from 1 to 65535.

Defaults

None

Command Modes

)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Avoid using well-known ports 1-1024 when possible.

Examples

This example shows how to add UDP 200 to the flow exporter:

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# transport udp 200

This example shows how to remove UDP 200 from the flow exporter:

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# no transport udp 200

Related Commands

Command

Description

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

type

form of this command.

}

}]

Syntax Description

The type of the network segmentation policy.

Defaults

None

Command Modes

Network Segment Policy configuration (config-network-segment-policy)

Supported User Roles

Command History

Release

Modification

4.2(1)SV1(5.1)

This command was introduced.

Usage Guidelines

.

The policy type corresponds to the network pools in the vCloud Director. The policy type Segmentation corresponds to the network isolation-backed network pool in the vCloud Director. The policy type VLAN corresponds to the VLAN-backed network pool in the vCloud Director.

Once configured, the type cannot be changed.

Examples

This example shows how to define the network segmentation policy type:

n1000v# configure terminal

n1000v(config)# network-segment policy abc-policy-vxlan

n1000v(config-network-segment-policy)# type segmentation

n1000v(config-network-segment-policy)

Related Commands

Command

Description

Creates a network segmentation policy.

Displays the network segmentation policy configuration.

U Commands

This chapter describes the Cisco Nexus 1000V commands that begin with U.

use-vrf

command.

Syntax Description

Name of the VRF to use to contact this server group.

Defaults

None

Command Modes

RADIUS server group configuration submode for the specified group (config-radius)

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to specify the VRF to use to contact the server group called management:

n1000v# configure terminal

n1000v(config)# aaa group server radius fred

n1000v(config-radius)# use-vrf management

n1000v(config-radius)#

Related Commands

Command

Description

Creates a TACACS+ server group with the specified name and puts you into the TACACS+ configuration mode for that group.

aaa group server radius

Creates a RADIUS server group and enters the RADIUS server group configuration submode for that group.

server

Configures the RADIUS server as a member of the RADIUS server group.

deadtime

Configures the monitoring dead time.

show radius-server groups

Displays the RADIUS server group configuration.

user (Port Profile Role)

command. To remove the user, use the no form of the command.

Syntax Description

Specify that a user is to be added to the port-profile role, and the name of the user (maximum of 32 characters.

Defaults

None

Command Modes

Port profile role configuration (config-port-profile-role)

Supported User Roles

network-admin

Command History

Release

Modification

4.2(1)SV1(4)

This command was introduced.

Examples

This example shows how to assign a user to the adminRole:

n1000v# config t

n1000v(config)# port-profile-role adminRole

n1000v(config-port-profile-role)# user hdbaar

This example shows how to remove the user assignment from the adminRole:

n1000v# config t

n1000v(config)# port-profile-role adminRole

n1000v(config-role)# no user hdbaar

Related Commands

Command

Description

Displays the port profile role configuration, including role names, descriptions, assigned users, and assigned groups.

Displays available users and groups.

show port-profile

Displays the port profile configuration, including roles assigned to them.

port-profile-role

Creates a port profile role.

group

Assigns a group to a port profile role.

assign port-profile-role

Assigns a port profile role to a specific port profile.

feature port-profile-role

Enables support for the restriction of port profile roles.

port-profile

Creates a port profile.

username

form of this command.

]

Syntax Description

User identifier, a case-sensitive, alphanumeric character string with a maximum length of 28 characters.

Note The following characters are not permitted in usernames and login is denied to usernames containing these characters:
@

YYYY-MM-DD.

(Optional) Specifies a password for the account. The default is no password.

(Optional) Specifies that the password is in clear text. Clear text passwords are encrypted before they are saved to the running configuration.\

(Optional) Specifies that the password is in encrypted format. Encrypted passwords are not changed before they are saved to the running configuration.

Password string. The password is alphanumeric, case sensitive, and has a maximum of 64 characters.
(" or '), vertical bars (|), or right angle brackets (>).

is case sensitive.

(Optional) Specifies an SSH key for the user account.

SSH public key string.

Specifies the location of the file that contains the SSH public key string.

bootflash: file containing host public key for the user

volatile: file containing host public key for the user

Defaults

No expiration date, password, or SSH key.

The default role is the network-operator user role.

Command Modes

Global configuration (config)

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

You cannot delete the default admin user role.

You cannot change the expiration date for the default admin user role.

You cannot remove the network-admin role for the default admin user role.

Login is denied to usernames containing these characters:

@

In you have enabled password-strength checking, you can only assign strong passwords. The following are the characteristics of a strong password:

- At least eight characters long

- Does not contain many consecutive characters (such as “abcd”)

- Does not contain many repeating characters (such as “aaabbb”)

- Does not contain dictionary words

- Does not contain proper names

- Contains both uppercase and lowercase characters

- Contains numbers

Caution If you do not specify a password for the user account, the user might not be able to log in.

Examples

This example shows how to create a user account with a password and a user role:

n1000v# config t

n1000v(config)# username user1 password Ci5co321 role network-admin

This example shows how to configure the SSH key for a user account:

n1000v# config t

n1000v(config)# username user1 sshkey file bootflash:key_file

Related Commands

Command

Description

password strength-check

Checks the password security strength.

Displays the user account configuration.

username admin password

command.

]

Syntax Description

(Optional) Password string, which is alphanumeric, case sensitive, and has a maximum of 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to change the network admin password in the running configuration:

n1000v# config t

n1000v(config)# username admin password <new-password>

n1000v(config)#

Related Commands

Command

Description

username

Creates and configures a user account.

show user-account

Displays usernames and their roles.

V Commands

This chapter describes the Cisco Nexus 1000V commands that begin with V.

vem

form of this command.

Syntax Description

Specifies a module number. The range of valid values is 3 to 66.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Specify a range of VEMs by using a dash. For example, 3-9 or 20-30.

Examples

This example shows how to create a VEM and enter the VEM slot configuration mode:

n1000v# configure terminal

n1000v(config)# vem 10

n1000v(config-vem-slot)#

This example shows how to remove a VEM:

n1000v# configure terminal

n1000v(config)# no vem 10

n1000v(config)#

Related Commands

Command

Description

Displays information about the VEM module.

version 9

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

NetFlow flow exporter configuration (config-flow-exporter)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to configure version 9 for a Netflow flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)#

This example shows how to remove version 9 from the Netflow flow exporter:

n1000v# config t

n1000v(config)# flow exporter ExportTest

n1000v(config-flow-exporter)# version 9

n1000v(config-flow-exporter-version-9)# no version 9

n1000v(config-flow-exporter)#

Related Commands

Command

Description

Specifies a timeout period for resending NetFlow flow exporter data.

Specifies a timeout period for resending the NetFlow flow exporter interface table.

Specifies a timeout period for resending NetFlow flow exporter template data.

Creates a Flexible NetFlow flow exporter.

flow record

Creates a Flexible NetFlow flow record.

flow monitor

Creates a Flexible NetFlow flow monitor.

Displays information about the NetFlow flow exporter.

Displays information about NetFlow flow records.

Displays information about the NetFlow flow monitor.

virtual-service-domain

form of this command.

Syntax Description

Creates and names a virtual service domain.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(2)

This command was introduced.

Examples

This example shows how to configure a port profile for a VSD:

n1000v# config t

n1000v(config)# port-profile vsd1_member

n1000v(config-port-prof)# vmware port-group

n1000v(config-port-prof)# switchport access vlan 315

n1000v(config-port-prof)# virtual-service-domain vsd1

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)# state enabled

This example shows how to remove the virtual service domain configuration:

n1000v# config t

n1000v(config)# port-profile vsd1_member

n1000v(config-port-prof)# no virtual-service-domain vsd1

Related Commands

Command

Description

Displays a list of the VSDs currently configured in the VSM, including VSD names and port profiles.

vlan

form of this command.

Syntax Description

VLAN identification number. The range of valid values is 1 to 4094.

Specifies an IEEE 802.1Q virtual LAN.

Defaults

The default VLAN is VLAN 1.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Specify a VLAN range by using a dash. For example, 1-9 or 20-30.

Examples

This example shows how to create a VLAN and enter the VLAN configuration mode:

n1000v# configure terminal

n1000v(config)# vlan 10

n1000v(config-vlan)#

This example shows how to remove a VLAN:

n1000v# configure terminal

n1000v(config)# no vlan 10

n1000v(config)#

Related Commands

Command

Description

Displays VTP VLAN status.

vlan policy deny

command.

form of this command.

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Role configuration (config-role)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command.

Examples

This example shows how to enter the VLAN configuration mode and deny all VLAN access for the role:

n1000v# config t

n1000v(config)# role name network-observer

n1000v(config-role)# vlan policy deny

n1000v(config-role-vlan)#

This example shows how to remove policy restrictions:

n1000v# config t

n1000v(config)# role name network-observer

n1000v(config-role)# no vlan policy deny

n1000v(config-role-vlan)#

Related Commands

Command

Description

Specifies a user role and enters role configuration mode.

permit vlan

Specifies the VLAN that users assigned to this role can access.

show role

Displays the role configuration.

vmware dvs datacenter-name

form of this command.

Syntax Description

folder

(Optional) Name of the folder.

Switch name.

Defaults

None

Command Modes

SVS connection configuration (config-svs-conn)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

command to create a connection and enter that mode. The number of SVS connections that can be created is limited to one.

command. This action is required because the DVS name is not automatically updated in the VSM, and if the names do not match, the connection between the VSM and DVS is broken.

Examples

This example shows how to create a VMware virtual switch:

n1000v# configure terminal

n1000v(config)# svs connect s1

n1000v(config-svs-conn)# vmware dvs datacenter-name dc1

n1000v(config-svs-conn)#

This example shows how to remove a VMware virtual switch:

n1000v# configure terminal

n1000v(config)# svs connect s1v

n1000v(config-svs-conn)# no vmware dvs datacenter-name dc1

n1000v(config-svs-conn)#

Related Commands

Command

Description

show svs

Displays SVS information.

Displays VMware information.

vmware port-group

form of this command.

Syntax Description

Specifies the name of the VMware port group.

Defaults

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

To create the VMware port group, you must be in port profile configuration mode.

Examples

This example shows how to create a VMware port group:

n1000v# configure terminal

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# vmware port-group testgroup

n1000v(config-port-prof)#

This example shows how to remove the VMware port group:

n1000v# configure terminal

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no vmware port-group testgoup

n1000v(config-port-prof)#

Related Commands

Command

Description

show port-profile name

Displays configuration information about a particular port-profile.

vmware vc extension-key

command.

Syntax Description

Extension key number. The range of valid values is 1 to 80.

Defaults

The key does not exist.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

An extension key is used to connect to an instance of Virtual Center.

Examples

This example shows how to create an extension key:

n1000v# configure terminal

n1000v(config)# vmware vc extension-key 10

n1000v(config)#

Related Commands

Command

Description

Displays extension key information.

vmware vem upgrade complete

To clear the upgrade status, use the vmware vem upgrade complete command.

vmware vem upgrade complete

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

Once you have cleared the upgrade status, you cannot repeat this procedure.

Examples

This example shows how to clear the upgrade status:

n1000v# vmware vem upgrade complete

n1000v#

Related Commands

Command

Description

show vmware vem upgrade status

Monitors the upgrade of the Virtual Ethernet Module (VEM) to a new software version.

vmware vem upgrade notify

Notifies the vCenter Server that the software on the Virtual Supervisor Module (VSM) has been upgraded.

vmware vem upgrade proceed

Begins the upgrade of the virtual machine (VM).

vmware vem upgrade notify

command.

vmware vem upgrade notify

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to notify the vCenter Server that the software on the Virtual Supervisor Module (VSM) has been upgraded, and that a VEM upgrade is available:

n1000v# vmware vem upgrade notify

n1000v#

Related Commands

Command

Description

show vmware vem upgrade status

Monitors the upgrade of the VEMs to a new software version.

vmware vem upgrade proceed

Begins the upgrade of the virtual machine (VM).

vmware vem upgrade complete

Clears the upgrade status.

vmware vem upgrade proceed

To begin the upgrade of the virtual machine (VM), use the vmware vem upgrade proceed command.

vmware vem upgrade proceed

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any

Supported User Roles

network-operator

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to begin the upgrade of the VM:

n1000v# vmware vem upgrade proceed

n1000v#

Related Commands

Command

Description

show vmware vem upgrade status

Monitors the upgrade of the Virtual Ethernet Module (VEM) to a new software version.

vmware vem upgrade notify

Notifies the vCenter Server that the software on the Virtual Supervisor Module (VSM) has been upgraded.

vmware vem upgrade complete

Clears the upgrade status.

vxlan udp port

form of this command.

Syntax Description

VXLAN UDP destination port number. The range is from 1024 to 65535. The number that you specify for this command must be a port number that is used by VXLAN encapsulation. Port 4789 is used by the Internet Assigned Numbers Authority (IANA).

Defaults

The default port number is either 4789 or 8472, depending on the installation. See the Usage Guidelines for this command.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

5.2(3)SV3(1.1)

This command was introduced.

Usage Guidelines

You must permit this port through any intermediate firewall.

In Cisco Nexus 1000V for VMware Release 4.2(1)SV2(2.1) and earlier, the default UDP port number was 8472. Beginning with Release 5.2(1)SV3(1.1), the default UDP port number has changed to the IANA-approved UDP port number 4789. This change affects the Cisco Nexus 1000V for VMware software installation, upgrade, and VXLAN configuration in the following ways:

- When you upgrade to Release 5.2(1)SV3(1.1) from an earlier release that has VXLAN configured, the switch retains the UDP port number of 8472. You are not required to change the UDP number to 4789; however if you decide to change it, make sure that the VEMs are upgraded to Release 5.2(1)SV3(1.1) as well. Otherwise the vxlan udp port command is not available and you cannot change the UDP number.

- When you upgrade to Release 5.2(1)SV3(1.1) from an earlier release that does not have VXLAN configured, and then you configure VXLAN, the switch is configured with the default UDP port number 4789.

- When you perform a fresh Cisco Nexus 1000V for VMware installation of Release 5.2(1)SV3(1.1) and you configure VXLAN, the switch is configured with the default UDP port number 4789.

- You can change the UDP port number at any time using the vxlan udp port command. However, when upgrading to Release 5.2(1)SV3(1.1) from an earlier release, ensure that the VSM and VEMs are at the same release before using the vxlan udp port command. Otherwise the vxlan udp port command is not available and you cannot change the UDP port number.

Examples

This example shows how to configure a VXLAN UDP destination port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# vxlan udp port 4789

n1000v(config)#

This example shows how to remove a VXLAN UDP destination port:

n1000v# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

n1000v(config)# no vxlan udp port 8472

n1000v(config)#

Related Commands

This command has no related commands.

W Commands

This chapter describes the Cisco Nexus 1000V commands that begin with W.

where

command.

Syntax Description

(Optional) Displays detailed context information.

Defaults

Displays summary context information.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

This command helps you track where you are in the CLI and how you got there.

Examples

This example shows how to display summary context information:

n1000v(config-if)# where

?conf; interface Ethernet2/3 admin@switch%default

This example shows how to display detailed context information:

n1000v(config-if)# where detail

?conf; interface Ethernet2/3 admin@switch%default

mode: conf

interface Ethernet2/3

username: admin

routing-context vrf: default

write erase

command.

Syntax Description

(Optional) Erases only the boot variable and mgmt0 interface configuration.

(Optional) Erases only the debug configuration.

Defaults

Erases all configuration in persistent memory except for the boot variable, mgmt0 interface, and debug configuration.

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Usage Guidelines

options.

Examples

This example shows how to erase the startup configuration:

n1000v(config)# write erase

Warning: This command will erase the startup-configuration.

Do you wish to proceed anyway? (y/n) [n] y

This example shows how to erase the boot variable and mgmt0 interface configuration in the persistent memory:

n1000v(config)# write erase boot

This example shows how to erase the debug configuration in the persistent memory:

n1000v(config)# write erase debug

Related Commands

Command

Description

Copies the running configuration to the startup configuration.

Displays the startup configuration.

X Commands

This chapter describes the Cisco Nexus 1000V commands that begin with X.

xml server max-session

command.

Syntax Description

Maximum number of XML sessions permitted at one time. The range is 1–8.

Defaults

The default maximum number of sessions is eight.

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the number of allowed XML server sessions to 6:

n1000v# config t

n1000v# xml server max-session 6

n1000v#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server terminate session

Displays information about XML server settings and any active XML server sessions.

xml server timeout

Sets the number of seconds after which an inactive XML server session is terminated.

xml server terminate session

command.

Syntax Description

Identifier for an existing XML server session. The range is 0–214748364.

Defaults

None

Command Modes

Any

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to terminate the XML server session 8665:

n1000v# xml server terminate 8665

n1000v#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server max-session

Sets the number of allowed XML server sessions.

xml server timeout

Sets the number of seconds after which an inactive XML server session is terminated.

xml server timeout

command.

Syntax Description

Maximum time that the XML server can remain inactive before session termination. The range is 0–1200 seconds.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release

Modification

4.0(4)SV1(1)

This command was introduced.

Examples

This example shows how to set the XML server timeout to 600 seconds:

n1000v# config t

n1000v# xml server timeout 600

n1000v#

Related Commands

Command

Description

show xml server status

Displays information about XML server settings and any active XML server sessions.

xml server max-session

Sets the number of allowed XML server sessions.

xml server terminate session

Displays information about XML server settings and any active XML server sessions.

Cisco Nexus 1000V Command Reference, Release 5.x

Last Updated: 2016-05-17

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2014–2016 Cisco Systems, Inc. All rights reserved.