|
|
To guarantee CPU time for processes, use the scheduler allocate global configuration command. The no form of this command restores the default.
High-priority operations are allowed to use as much of the central processor as needed.
The normal operation of the network server allows the switching operations to use as much of the central processor as is required. If the network is running unusually heavy loads that do not allow the processor the time to handle the routing protocols, give priority to the system process scheduler. Use the scheduler allocate command to guarantee processor time.
The following example changes the low-priority process schedule to an interval of 750 microseconds.
To allow scrambling to be enabled or disabled from the current port, use the scrambling interface configuration command.
scrambling scramblingmode
no scrambling scramblingmode
Syntax Description
In SONET interfaces both modes are enabled. In DS3 interfaces the mode is enabled.
The sts-stream scrambling is applicable to only SONET interfaces.
The following example shows how to disable sts-stream and cell-payload scrambling on the physical device associated with card 3, subcard 0, and port 0.
To specify that a chat script start on a line any time the line is activated, use the script activation line configuration command. Use the no form of this command to disable this feature.
This command provides an asynchronous handshake to a user or device that activates the line. It can be used only on the auxiliary port of the switch. The line can be activated by events such as the following: a user issuing a carriage return on a vacant line, a modem on the line sensing an incoming carrier, or an asynchronous device (such as a communication server) sending data. Each time an EXEC session is started on a line, the system checks to see if a script activation command is configured on the line. If so, and the argument regexp (a regular expression) matches an existing chat script name, the matched script is run on the line.
The script activation command can mimic a login handshake of another system. For example, a system that dials into the auxiliary port on a switch and expects an IBM mainframe login handshake can be satisfied with an appropriate activation script.
This command can also send strings to asynchronous devices that are connecting or dialing into a communication server.
The script activation command functions only on physical terminal lines (tty). It does not function on virtual terminal (vty) lines.
The following example specifies that the chat script with a name that includes telebit is activated whenever line 0 is activated.
chat-script
dialer-list list
script connection
script reset
script startup
start-chat
To specify that a chat script start on a line any time a remote network connection is made to a line, use the script connection line configuration command. Use the no form of this command to disable this feature.
This command provides modem dialing commands and commands for logging on to remote systems. The script connection command functions only on physical terminal (tty) lines. It does not function on virtual terminal (vty) lines.
This command can be used to initialize an asynchronous device sitting on a line to which a reverse network connection is made. This command can only be used on the auxiliary port of the switch.
The following example specifies that the chat script with a name that includes inband is activated whenever a remote connection to line 0 is established. The switch can send a login string and password to the UNIX server when a network tunneling connection comes into line 0, the auxiliary port.
chat-script
dialer-list list
script activation
script reset
script startup
start-chat
To specify that a chat script start on a line any time the specified line is reset, use the script reset line configuration command. Use the no form of this command to disable this feature.
Chat scripts provide modem dialing commands and commands for logging on to remote systems. Use this command to reset a modem attached to a line every time a call is dropped.
The script reset command functions only on physical terminal lines (tty). It does not function on virtual terminal (vty) lines. This command can only be used on the auxiliary port of the switch.
This example specifies that any chat script name with the word linebackup in it is activated any time line 0 is reset.
chat-script
dialer-list list
script activation
script connection
script startup
start-chat
To specify that a chat script start on a line any time the switch is turned on, use the script startup line configuration command. Use the no form of this command to disable this feature.
Use this command to initialize asynchronous devices connected to a line when the switch is turned on or reloaded. You can also use it to start up a banner other than the default banner on lines. The script startup command functions only on physical terminal (tty) lines. It does not function on virtual terminal (vty) lines. This command can only be used on the auxiliary port of the switch.
The following example specifies the startup chat script as linestart.
chat-script
dialer-list list
script activation
script connection
script reset
start-chat
To send a message to other TTY lines, use the send privileged EXEC command.
You use this command to inform users of an impending shut-down on the switch. The system prompts you for a message, which can be up to 500 characters long. Enter ^Z to end the message or stop the command.
To compress configuration files, use the service compress-config global configuration command. To disable compression, use the no form of this command.
This command has no arguments or keywords.
To enable autoloading of configuration files from a network server, use the service config global configuration command. Use the no form of this command to restore the default.
This command has no arguments or keywords.
Usually, the service config command is used in conjunction with the boot host or boot network command. You must enter the service config command to enable the switch to automatically configure the system from the file specified by the boot host command.
The service config command can also be used without the boot host command. If you do not specify host or network configuration filenames, the switch uses the default configuration files. The default network configuration file is network-confg. The default host configuration file is host-confg, where host is the host name of the switch. If the switch cannot resolve its host name, the default host configuration file is switch-confg.
In the following example, the switch is configured to autoload the default host configuration file.
To delay the startup of the EXEC on noisy lines, use the service exec-wait global configuration command. Use the no form of this command to disable this feature.
This command has no arguments or keywords.
This command delays startup of the EXEC until the line has been idle (no traffic seen) for 3 seconds. The default is to enable the line immediately on modem activation.
This command is useful on noisy modem lines or when a modem attached to the line is configured to ignore MNP or V.42 negotiations and MNP or V.42 modems may be dialing in. In these cases, noise or MNP/V.42 packets may be interpreted as usernames and passwords, causing authentication failure before the user gets a chance to enter a username and password. The command is not useful on nonmodem lines or lines without a login configured.
The following example delays the startup of the EXEC.
To allow Finger protocol requests (defined in RFC 742) to be made of the network server, use the service finger global configuration command. This service is equivalent to issuing a remote show users command. The no form of this command removes this service.
This command has no arguments or keywords.
The following is an example of how to disable the Finger protocol.
To configure the switch to display line number information after the EXEC or incoming banner, use the service linenumber global configuration command. To disable this function, use the no form of this command.
This command has no arguments or keywords.
With the service linenumber command, the switch can display the host name, line number, and location each time an EXEC is started or an incoming connection is made. The line number banner appears immediately after the EXEC banner or incoming banner. It is useful for tracking problems with modems because the host and line for the modem connection are listed. Modem type information can also be included.
The following example illustrates the type of line number information that can appear after the EXEC banner.
To enable the Nagle congestion control algorithm, use the service nagle global configuration command. Use the no form of this command to disable this feature.
This command has no arguments or keywords.
When using a standard TCP implementation to send keystrokes between machines, TCP tends to send one packet for each keystroke typed. On larger networks, many small packets use up bandwidth and contribute to congestion.
John Nagle's algorithm (RFC 896) helps alleviate the small-packet problem in TCP. In general, it works this way:
1. The first character typed after connection establishment is sent in a single packet, but TCP holds any additional characters typed until the receiver acknowledges the previous packet.
2. The second, larger packet is sent, and additional typed characters are saved until the acknowledgment comes back.
The effect is to accumulate characters into larger chunks, and pace them out to the network at a rate matching the round-trip time of the given connection. This method is usually good for all TCP-based traffic. However, do not use the service nagle command if you have XRemote users on X Window sessions.
The following example enables the nagle algorithm on the switch.
To encrypt passwords, use the service password-encryption global configuration command. Use the no form of this command to disable this service.
This command has no arguments or keywords.
The actual encryption process occurs when the current configuration is written or when a password is configured. Password encryption can be applied to both the privileged command password and to console and virtual terminal line access passwords.
When password encryption is enabled, the encrypted form of the passwords is displayed when a show startup-config command is entered.
The following example causes password encryption to take place.
To generate keepalive packets on idle network connections, use the service tcp-keepalives global configuration command. The no form of this command with the appropriate keyword disables the keepalives.
The following example generates keepalives on incoming TCP connections.
To set the TCP window to zero (0) when the Telnet connection is idle, use the service telnet-zeroidle global configuration command. Use the no form of this command to disable this feature.
This command has no arguments or keywords.
Normally, data sent to noncurrent Telnet connections is accepted and discarded. When service telnet-zero-idle is enabled, if a session is suspended (that is, some other connection is made active or the EXEC is sitting in command mode), the TCP window is set to zero. This action prevents the remote host from sending any more data until the connection is resumed. Use this command when it is important that all messages sent by the host be seen by the users and the users are likely to use multiple sessions.
Do not use this command if your host eventually times out and logs out a TCP user whose window is zero.
The following example sets the TCP window to zero when the Telnet connection is idle.
To configure the system to timestamp debugging or logging messages, use one of the service timestamps global configuration commands. Use the no form of this command to disable this service.
If service timestamps is specified with no arguments or keywords, default is service timestamps debug uptime.
The default for service timestamps type datetime is to format the time in UTC, with no milliseconds and no time zone name.
The command no service timestamps by itself disables timestamps for both debug and log messages.
Timestamps can be added to either debugging or logging messages independently. The uptime form of the command adds timestamps in the format hh:mm:ss, indicating the time since the system was rebooted. The datetime form of the command adds timestamps in the format mm dd hh:mm:ss, indicating the date and time according to the system clock. If the system clock has not been set, the date and time are preceded by an asterisk (*) to indicate the date and time are not correct.
The following example enables timestamps on debugging messages, showing the time since reboot.
The following example enables timestamps on logging messages, showing the current time and date relative to the local time zone, with the time zone name included.
clock set
debug ports
ntp clock-period
To set the interval for closing the connection when there is no input or output traffic, use the session-timeout line configuration command. The no form of this command removes the timeout definition.
The default interval is zero, indicating the switch maintains the connection indefinitely.
This command sets the interval that the switch waits for traffic before closing the connection to a remote computer and returning the terminal to an idle state. If the keyword output is not specified, the session timeout interval is based solely on detected input from the user. You can specify a session timeout on each port.
The following example sets an interval of 20 minutes and specifies that the timeout is subject to traffic detected from the user (input only).
To display information about the access list, use the show access-lists EXEC command.
The system displays all access lists.
The following is sample output from the show access-lists command when access list 101 is specified.
An access list counter counts how many packets are allowed by each line of the access list. This number is displayed as the number of matches.
For information on how to configure access lists, refer to the "Configuring IP" chapter of the LightStream 1010 ATM Switch Software Configuration Guide.
access-list (extended)
access-list (standard)
clear access-list counters
clear access-template
Use the show accounting EXEC command to step through all active sessions and to print all the accounting records for actively accounted functions. To disable this function, use the no form of the command.
This command has no keywords or arguments.
The following is sample output from the show accounting command.
The show accounting command allows you to display the active accountable events on the system. It provides systems administrators with a quick look at what is going on, and it also can help collect information in the event of a data loss on the accounting server. The show accounting command displays additional data on the internal state of AAA if debug aaa accounting is turned on as well.
To display all alias commands or the alias commands in a specified mode, use the show aliases EXEC command.
(Optional) Command mode. See Table 16-7 in the description of the alias command for acceptable options for the mode argument. |
All of the modes listed in Table 16-7 have their own prompts, except for the null interface mode. For example, the prompt for interface configuration mode is switch(config-if).
The following is sample output from the show aliases exec commands. The aliases configured for commands in EXEC mode are displayed.
To display the entries in the ARP table, use the show arp privileged EXEC command.
This command has no arguments or keywords.
The following is sample output from the show arp command.
Table 16-1 describes significant fields shown in the first line of output in the display.
Show ARP Field Descriptions
To display the extended BOOTP request parameters that were configured for asynchronous interfaces, use the show async bootp privileged EXEC command.
This command has no arguments or keywords.
The following is a sample output of the show async bootp command.
If no extended data is defined, you receive the following response.
Table 16-2 describes significant fields shown in the display.
Table 16-2 Show Async-BOOTP Field Descriptions
To list the status of the asynchronous interface 1 associated with the auxiliary port, use the show async status user EXEC command.
This command has no arguments or keywords.
Shows all SLIP asynchronous sessions.
The following is sample output from the show async status command.
Table 16-3 describes significant fields shown in the display.
Table 16-3 Show Async Status Field Descriptions
To display the active ATM switches on an interface, use the show atm address EXEC command.
This command has no keyword or arguments.
The first switch address is displayed with the word active on the side to indicate which one is the current address of the switch. The output also includes automatically generated soft VC addresses, switch prefix(es) used by ILMI, configured interface specific ILMI prefixes, and the configured LECS addresses.
The following is an example of output from the show atm address command.
To display the ATM ARP-server table, use the show atm arp-server command.
The command only applies to the CPU interface. Use this command to see the ARP server configured on the subinterface CPU.
Use the show atm connection-traffic-table command to display a table of connection traffic parameters used by network and connection management.
The row-index is an integer in the range of 1 through 2147483647. An asterisk (*) is appended to row indexes created by SNMP but not made active. Because these rows are not active, they cannot be used by connections. If both the row and from-row clauses are not used, the entire connection traffic table is displayed.
The following example shows the display from a show ATM connection-traffic-table command.
Table 16-4 describes the fields shown in the display.
| Field | Description |
|---|---|
Is measured in kilobits per second, used to transmit whole cells, including the header. |
|
Is measured in kilobits per second, used to transmit whole cells, including the header. |
|
Show ATM Connection-Traffic-Table Field Descriptions
atm connection-traffic-table-row
To display a specific ATM filter expression or a summary ATM filter expression, use the show atm filter-expr EXEC command.
The following displays assume filter expressions were defined using the commands shown in the example. The names fred, barney, wilma, and betty are all filter sets.
The show atm filter-expr command produces the following output.
The show atm filter-expr detail command produces the following output.
To display a specific ATM filter set or a summary ATM filter set, use the show atm filter-set EXEC command.
The following display assumes the filter sets were defined with the commands shown in the example.
The following is a sample output from the show atm filter-set command.
To display the IISP information about the ATM address prefixes, use the show atm iisp prefix EXEC command.
This command has no keywords or arguments.
Use this command to show all the prefixes in the local table.
The command displays the ATM address prefixes of the IISP routing table. Prefixes are tagged with either E or I. The E represents external prefixes configured by using the atm route command. The I represents internal prefixes registered either through ILMI or generated internally by the system for other purposes (for example soft PVP support).
The prefix is displayed in the following notation, which is prefix/length, where length is in bits.
The following sample shows the ATM port and port state from the show atm iisp prefix command.
To display the switch configuration use the show atm ilmi-configuration EXEC command.
This command has no arguments or keywords.
Displays the information and status about the switch configuration.
The following output is a sample display of the show atm ilmi-configuration command.
Table 16-5 describes the fields shown in the display.
| Field | Description |
|---|---|
Show ATM ilmi-config Field Descriptions
To display the ILMI related information, use the show atm ilmi EXEC command.
The following output is a sample display of the show atm ilmi-status atm command.
Table 16-6 describes the fields shown in the display.
Show ATM ILMI Field Descriptions
To display ATM-specific information about an ATM interface, use the show atm interface EXEC command.
If you do not specify a specific interface, all interfaces on the switch are displayed.
The following is sample output from the show atm interface command, which displays the statistics on card 3, subcard 0, and port 0.
Table 16-7 describes the fields shown in the display.
Table 16-7 Show ATM Interface ATM Field Descriptions
The following is an example of the show ATM interface command from the subinterface.
atm pvp
show ip access-lists
show atm status
Use the show atm interface rm privileged EXEC command to display resource management interface configuration status, and statistics.
The command displays information that differs depending on the type of the interface: external physical interface, subinterface, or CPU interface.
The following example shows the RM information displayed by the show atm interface rm command for a physical interface.
The following example shows the RM information displayed by the show atm interface rm command for a logical interface (assuming a VBR-RT underlying VP).
The following example shows the resource management information displayed by the show atm interface rm command with the accounting parameter.
Table 16-8 describes the fields values shown in the previous displays.
Table 16-8 Show ATM Interface RM Field Values
atm cac
atm link-distance
atm output-queue
atm output-threshold
atm pacing
To display the list of all configured ATM static maps to remote hosts on an ATM network, use the show atm map privileged EXEC command.
This command has no arguments or keywords.
The following is sample output from the show atm map command.
The following is sample output from the show atm map command for a multipoint connection.
Table 16-9 describes the fields shown in the display.
Table 16-9 Show ATM Map Field Descriptions
To display the address of the PNNI interface assigned to the switch, use the following show atm pnni address privileged EXEC command.
This command has no keywords or arguments.
The following is sample output from the show atm pnni address command.
To show the precalculated background route table to other PNNI nodes, use the show atm pnni bg-routes privileged EXEC command.
Use this command to displays routes from the background SPF trees for all known nodes in the PNNI network.
This command filters based on service class or metric information.
The following is sample output from the show atm pnni bg-routes command.
To show the status of background route calculation, use the show atm pnni bg-status privileged EXEC command.
This command has no keywords or arguments.
This command displays the status of the background SPF activity.
The following is sample output from the show atm pnni bg-status command.
To display the contents of the PNNI database, use the show atm pnni database EXEC command.
The database is the collection of PTSEs that the protocol gathered from the network.
For information on specific PTSE types and their use, refer to the PNNI specification, ATM Forum 94-0471R16.
The show atm pnni database command displays the contents of the PNNI database.
Using the detail option displays information about the nodal information group, the internal reachable address, the exterior reachable address, and the horizontal link PTSE. Nodal information group provides status about the PTSE that a node advertises, such as its ATM address, the leadership priority, and which node the current node accepts as a peer group leader. The internal reachable address is an address that can be reached by PNNI. The exterior reachable address can be accessed outside the scope of PNNI, such as through a static route. The horizontal link PTSE is where a PNNI node advertises connection to its neighbors after the neighbor state becomes full.
The following is sample output using the detail option.
To display information relevant to the PNNI Peer group leader election process, use the show atm pnni election EXEC command.
The following shows sample output from the show atm pnni election command.
To display the mapping of PNNI node identifiers, use the show atm pnni identifiers EXEC command.
Because PNNI node identifiers are long, the PNNI implementation has mapped them into numbers. The node numbers are used to display the topology in a compact fashion.
The following is sample output from the show atm pnni identifiers command.
To display specific information about an interface or to list the interfaces running on a PNNI node, use the show atm pnni interface EXEC command.
Use the show atm pnni interface command to display information about the status of the NNI interfaces is obtained.
For a description of the hello states and timers, consult the PNNI specification, ATM Forum 94-0471R16.
The following is sample output about ATM 0/1/1 using the show atm pnni interface command.
The following is sample output using the detail option of the show atm pnni interface command.
To list PNNI neighbors for a switch, use the show atm pnni neighbor EXEC command.
The show atm pnni neighbor command displays information about an adjacency. Multiple links can be connected to the same neighbor. The output from the show command displays the local port, the remote port, and its port numbers. Based on the port number, PNNI derives the port string if the remote switch is a LightStream 1010 ATM switch. The switch may not translate the port into a meaningful string (such as ATM 3/0/0) if the remote switch is not a LightStream 1010 ATM. In these cases the port ID is displayed twice. The flooding port displays the interface used by PNNI to flood PTSEs to the neighbor.
There is only one port used for flooding and it is identified as "(flooding port)" in the following example. The following is sample output from the show atm pnni neighbor command.
To display overall PNNI information, use the show atm pnni node EXEC command.
If node-index is not specified, the default is node 1.
The show atm pnni node command displays information about the PNNI node and its status.
The following is sample output from the show atm pnni node command.
The following is sample output for a specific node.
To show the current PNNI prefix priorities for routing, use the show atm pnni precedence privileged EXEC configuration command.
This command has no keywords or arguments.
The following example is sample output from the show atm pnni precedence command.
To display prefixes and related information from either local or network-wide tables in PNNI, use the show atm pnni prefix EXEC command.
The command displays the ATM address prefixes of the PNNI routing table. Prefixes are tagged with either E or I. The E represents external prefixes that were configured using the atm route command. The I represents internal prefixes registered through ILMI or generated internally by the system for other purposes (for example; soft PVP support). The prefix is displayed in the following notation and the prefix/length shows the length in bits:
The node represents the switch that generated the prefix (see show atm pnni node-id command for node number mappings). Node 1 represents a LightStream 1010 ATM switch, while other numbers represent switches that PNNI learned from the network. The port number, the protocol that generated the advertisement, the timestamp, and the port status (or summary information) are also displayed.
The following is sample output from the show atm pnni prefix command.
To display information about routing parameters of all PNNI interfaces received from resource management module, use the show atm pnni rm-info EXEC command.
This command is used to display information about the MCR, ACR, CTD, CDV, and CLR for a specific port. Only applicable information is displayed.
The following is sample output from the show atm pnni rm-info command.
To display PNNI statistics, use the show atm pnni statistics EXEC command.
This command displays statistics related to path selection, for example number of crankbacks, number of calls set up, number of calls serviced by the background tree, on-demand calculation, and PTSE exchanges, such as number of incoming PTSE per minute or number of PTSE retransmitted.
The following is sample output from the show atm pnni statistics call command.
To display the topology connectivity information from the internal topology database, use the show atm pnni topology EXEC command.
The topology as seen from the PNNI database can be displayed using the show atm pnni topology command. This command shows all accessible PNNI nodes in the network (through PTSEs) and any links to neighboring nodes.
PNNI nodes are represented internally by an 8-bit number. This command shows the mapping between the internal node number and the full 22-byte node ID.
The following is sample output from the show atm pnni topology command.
Use the show atm qos command to display the table used to provide default values for QOS.
This command has no arguments or keywords.
The following sample output of the show atm qos command displays the UNI 3 Default QOS table.
Table 16-10 describes the fields shown in the display.
Show ATM QOS Field Descriptions
Use the show atm resource privileged EXEC command to display global resource manager configuration and status.
This command has no arguments or keywords.
The following example shows the results of using the show atm resource command.
atm abr-mode
atm over-subscription-factor
atm service-category-limit
atm sustained-cell-rate-margin-factor
To display the current port snooping configuration and actual register values for the highest ATM interface, use the show atm snoop EXEC command.
This command has no keywords or arguments.
This command displays the snoop test port name, snoop option (enabled or disabled), monitored port name (if enabled), and snoop direction (receive or transmit if enabled).
This command applies only to card 4, subcard 1, and the highest port allowed for the card. Refer to the atm snoop command for port information.
The following example displays the snoop configuration on OC3 port and actual register values for the highest interface.
The following example shows the display when there is no card in the Snoop Test Port card 4, subcard 1 position.
The following example shows the display when the Snoop Test Port has been inserted and configured but is shut down.
To display current information about ATM interfaces and the number of installed connections, use the show atm status EXEC command.
This command has no keywords or arguments.
The following is a sample display from the show atm status command.
To display the ATM layer traffic information for all of the ATM interfaces, use the show atm traffic privileged EXEC command.
This command has no keywords or arguments.
This command displays input and output cell counts and 5-minute transfer rate for all ATM interfaces.
The following is a sample display from the show atm traffic command.
To display the ATM layer connection information about the virtual connection, use the show atm vc EXEC command.
The following example shows a display for the vc interface.
Table 16-11 describes the fields shown in the display.
Table 16-11 Show ATM VC Descriptions
The following sample display shows the interface information for ATM 4/1/1, with VPI 0 and VCI 34.
Table 16-12 describes the fields shown in the display.
Show ATM VC Interface ATM Field Descriptions
atm pvc
show atm interface
show atm status
To display the ATM layer connection information about the virtual path, use the show atm vp EXEC command.
The following is a sample display from the show atm vp command.
The following is a sample display from the show atm vp command of ATM 4/1/1.
The following is a sample display from the show atm vp command of ATM 4/1/1 and vp 2.
Table 16-13 describes the fields shown in the display.
Show ATM VP Interface ATM Field Descriptions
show atm interface
show atm status
To display the contents of the BOOT environment variable, the name of the configuration file pointed to by the CONFIG_FILE environment variable, and the contents of the BOOTLDR environment variable, use the show boot EXEC command.
This command has no arguments or keywords.
The show boot command allows you to view the current settings for the following environment variables:
The BOOT environment variable specifies a list of bootable images on various devices. The config_file environment variable specifies the configuration file used during system initialization. The BOOTLDR environment variable specifies the Flash device and filename containing the rxboot image that ROM uses for booting. You set these environment variables with the boot system, boot config, and boot bootldr commands, respectively.
The following is sample output from the show boot command.
In the sample output, the BOOT environment variable contains a null string: that is, a list of bootable images is not specified.
The run-time value for the config_file environment variable points to the switch-config file on the Flash memory card inserted in the first slot of the ASP card. That is, during the run-time configuration, you have modified the config_file environment variable using the boot config command, but you have not saved the run-time configuration to the startup configuration. To save your run-time configuration to the startup configuration, use the copy running command.
The BOOTLDR environment variable does not yet exist. That is, you have not created the BOOTLDR environment variable using the boot bootldr command.
boot
boot config
boot system
show version
Use the show buffers EXEC command to display statistics for the buffer pools on the network server.
The following is sample output from the show buffers command with no arguments, showing all buffer pool information.
Table 16-14 describes significant fields shown in the display.
Table 16-14 Show Buffers Field Descriptions
To display the calendar hardware setting, use the show calendar EXEC command.
This command has no arguments or keywords.
You can compare the time and date shown with this command with the time and date listed via the show clock command to verify that the calendar and system clock are synchronized. The time displayed is relative to the configured time zone.
In the following sample display, the hardware calendar indicates the timestamp of 12:13:44 p.m. on Thursday, April 4, 1996.
To display global CDP information, including timer and hold-time information, use the show cdp privileged EXEC command.
This command has no arguments or keywords.
The following is sample output from the show cdp command. Global CDP timer and hold-time parameters are set to the defaults of 60 and 180 seconds, respectively.
cdp holdtime
cdp timer
show cdp entry
show cdp neighbors
To display information about a neighbor device listed in the CDP table, use the show cdp entry privileged EXEC command.
The following is sample output from the show cdp entry privilege command. Only information about the protocols enabled on device.cisco.com is displayed.
The following is sample output from the show cdp entry version command. Only information about the version of software running on device.cisco.com is displayed.
To display information about the interfaces on which CDP is enabled, use the show cdp interface privileged EXEC command.
The following sample output forms the show cdp interface command. Status information and information about CDP timer and hold-time settings is displayed for all interfaces on which CDP is enabled.
The following is sample output from the show cdp interface command with an interface specified. Status information and information about CDP timer and hold-time settings is displayed for Ethernet interface 2/0/0 only.
To display information about neighbors, use the show cdp neighbors privileged EXEC command.
The following is sample output from the show cdp neighbors command. Device ID, interface type and number, holdtime settings, capabilities, platform, and port ID information about the switch's neighbors are displayed.
The following is sample output from the show cdp neighbors detail command with information about the ATM neighbors, including network address, enabled protocols, and software version.
To display traffic information from the CDP table, use the show cdp traffic privileged EXEC command.
This command has no arguments or keywords.
The following is sample output from the show cdp traffic command.
In this example, traffic information is displayed including the numbers of packets sent, the number of packets received, header syntax, checksum errors, failed encapsulations, memory problems, and invalid and fragmented packets. Header syntax indicates the number of packets CDP receives that have an invalid header format.
To display the system clock, use the show clock EXEC command.
The system clock keeps an "authoritative" flag that indicates whether or not the time is authoritative (believed to be accurate). If system clock has been set by a timing source, the flag is set. If the time is not authoritative, it is used only for display purposes. Until the clock is authoritative and the "authoritative" flag is set, the flag prevents the switch from causing peers to synchronize to itself when the switch time is invalid.
The symbol that precedes the show clock display indicates the following:
The following sample output shows that the current clock is authoritative and that the time source is NTP.
To display information about a physical port device, use the show controllers privileged EXEC command.
The following example shows output used for debugging from the show controllers atm command on ATM 0/1/0.
The following example shows output used for debugging from the show controllers atm command on ATM 2/0/0.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To obtain a general diagnostic display for serial interfaces configured for DDR, use the show dialer EXEC command.
The following is sample output from the show dialer command for an asynchronous interface.
Table 16-15 describes significant fields shown in the display.
Table 16-15 Show Dialer Field Descriptions for In-Band Dialers
If an interface is connected to a destination, a display is provided that indicates the idle time before the line is disconnected (decrements each second). Then the duration of the current connection is shown. The following shows an example of this display; it appears after the third line in the show dialer display.
After a call disconnects, the system displays the time remaining before being available to dial again. The following is an example of this display; it appears after the third line in the show dialer display.
If the show dialer command is issued for an interface on which DDR is not enabled, the system displays an error message. The following is a sample error message.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display state information and the current configuration of the DNSIX audit writing module, use the show dnsix privileged EXEC command.
This command has no arguments or keywords.
The following is sample output from the show dnsix command.
Use the show environment EXEC command to display temperature and voltage information on the console.
This command has no arguments or keywords.
The following is an example from the show environment command.
To display the configuration stored in a specified file, use the show file EXEC command.
When showing the configuration, the switch informs you whether the displayed configuration is a complete configuration or a distilled version. A distilled configuration is one that does not contain access lists.
The following is sample output from the show file command.
To display the layout and contents of Flash memory, use one of the following show flash EXEC commands.
The show flash command displays the type of Flash memory present, any files that might currently exist in PCMCIA slot0: Flash memory, and the amounts of Flash memory used and remaining.
When you specify a PCMCIA slot as the device, the switch displays the layout and contents of the Flash memory card inserted in the specified slot of the ASP card. When you omit the device: argument, the switch displays the default device specified by the cd command. Use the pwd command to show the current default device.
The following is sample output from the show flash command.
As the display shows, the Flash memory can store and display multiple, independent software images for booting itself or for TFTP server software for other products. This feature is useful for storing default system software. These images can be stored in compressed format (but cannot be compressed by the switch).
To eliminate any files from Flash memory (invalidated or otherwise) and free up all available memory space, the entire Flash memory must be erased; individual files cannot be erased from Flash memory.
Table 16-16 describes the show flash display fields.
Table 16-16 Show Flash Field Descriptions
The following is sample output for the show flash all command that has Flash memory partitioned.
Table 16-17 describes the show flash all display fields.
Table 16-17 Show Flash All Fields for Partitioned Flash Memory
| Field | Description |
|---|---|
If you do not use the cd command to change the present working device to slot 1, you can display the same sample output with the following command.
The following is sample output for the show flash filesys command.
The following is sample output for the show flash chips bootflash: command.
In the following example, the present working device is bootflash. The sample output displays the show flash all output.
To display the revision number of the hardware, use the show hardware EXEC command.
This command had no keywords or arguments.
The following is a sample output from the show hardware command.
To list the commands you have entered in the current EXEC session, use the show history EXEC command.
This command has no arguments or keywords.
The command history feature provides a record of EXEC commands you have entered. The number of commands the history buffer records is determined by the history size line configuration command or the terminal history size EXEC command.
Table 16-18 lists the keys and functions you can use to recall commands from the command history buffer.
The following is sample output from the show history command, which lists the commands the user has entered in EXEC mode for this session.
history size
terminal history size
To display the default domain name, the style of name lookup service, a list of name server hosts, and the cached list of host names and addresses, use the show hosts EXEC command.
This command has no arguments or keywords.
The following is sample output from the show hosts command.
Table 16-19 describes significant fields shown in the display.
Table 16-19 Show Hosts Field Descriptions
To display the interface configuration, status, and statistics, use the show interface command.
This command has no keywords or arguments.
The following is a sample output from the show interface command. In this example, CRC is the number of correctable and uncorrectable input HCS errors.
Input packet and output packet are the number of terminated cells received or transmitted over the interface for physical ports. For the CPU port, it is the number of AAL5 packets plus the terminating OAM cells received or transmitted.
Table 16-20 describes the fields shown in the displays.
Show Interface Field Descriptions
To display the contents of all current IP access lists, use the show ip access-list EXEC command.
Displays all standard and extended IP access lists.
The show ip access-list command provides output identical to the show access-lists command, except that it is IP-specific and allows you to specify a particular access list.
The following is sample output from the show ip access-list command.
To display the active accounting or checkpointed database or to display access-list violations, use the show ip accounting EXEC command.
If neither the output-packets nor access-violations keyword is specified, show ip accounting displays information pertaining to packets that passed access control and were successfully routed.
If you do not specify any keywords, the show ip accounting command displays information about the active accounting database.
To display IP access violations, you must give the access-violations keyword on the command. If you do not specify the keyword, the command defaults to displaying the number of packets that have passed access lists and were routed.
To use this command, you must first enable IP accounting on a per-interface basis.
Following is sample output from the show ip accounting command.
The following is sample output from the show ip accounting access-violations command. The output pertains to packets that failed access lists and were not routed.
Table 16-21 describes the fields shown in the displays.
Table 16-21 Show IP Accounting (and Access-Violation) Field Descriptions
clear ip accounting
ip accounting
ip accounting-list
ip accounting-threshold
ip accounting-transits
To display the switch's IP addresses mapped to TCP ports (aliases) and SLIP addresses, which are treated similarly to aliases, use the show ip aliases EXEC command.
This command has no arguments or keywords.
To distinguish a SLIP address from a normal alias address, the command output uses the form SLIP TTY1 for the "port" number, where 1 is the auxiliary port.
The following is sample output from the show ip aliases command. The display lists the IP address and corresponding port number.
To display the Address Resolution Protocol (ARP) cache, where SLIP addresses appear as permanent ARP table entries, use the show ip arp EXEC command.
This command has no arguments or keywords.
ARP establishes correspondences between network addresses (an IP address, for example) and LAN hardware addresses (Ethernet addresses). A record of each correspondence is kept in a cache for a predetermined amount of time and then discarded.
The following is sample output from the show ip arp command.
Table 16-22 describes significant fields shown in the display.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the routing table cache used to fast switch IP traffic, use the show ip cache EXEC command.
The show ip cache display shows MAC headers up to 92 bytes.
The following is sample output from the show ip cache command.
Table 16-23 describes significant fields shown in the display.
Table 16-23 Show IP Cache Field Descriptions
The following is sample output from the show ip cache command with a prefix and mask specified.
The following is sample output from the show ip cache command with an interface specified.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the neighbors discovered by Enhanced IGRP, use the show ip eigrp neighbors EXEC command.
Use the show ip eigrp neighbors command to determine when neighbors become active and inactive. It is also useful for debugging certain types of transport problems.
The following is sample output from the show ip eigrp neighbors command.
Table 16-24 explains the fields in the output.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the Enhanced IGRP topology table, use the show ip eigrp topology EXEC command.
Use the show ip eigrp topology command to determine DUAL states and to debug possible DUAL problems.
The following is sample output from the show ip eigrp topology command.
Table 16-25 explains the fields in the output.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the number of Enhanced IGRP packets sent and received, use the show ip eigrp traffic EXEC command.
The following is sample output from the show ip eigrp traffic command.
Table 16-26 describes the fields that might be shown in the display.
Table 16-26 Show IP EIGRP Traffic Field Descriptions
| Field | Description |
|---|---|
Autonomous system number specified in the ip router command. |
|
Number of acknowledgment packets that were sent and received. |
To display the usability status of interfaces configured for IP, use the show ip interface EXEC command.
A switch automatically enters a directly connected route in the routing table if the interface is usable. A usable interface is one through which the switch can send and receive packets. If the switch determines that an interface is not usable, it removes the directly connected routing entry from the routing table. Removing the entry allows the switch to use dynamic routing protocols to determine backup routes to the network (if any).
If the interface can provide two-way communication, the line protocol is marked "up." If the interface hardware is usable, the interface is marked "up."
If you specify an optional interface type, you will see only information on that specific interface.
If you specify no optional arguments, you will see information on all the interfaces.
The following is sample output from the show ip interface command.
Table 16-27 describes the fields shown in the display.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display IRDP values, use the show ip irdp EXEC command.
This command has no arguments or keywords.
The following is sample output from the show ip irdp command.
As the display shows, show ip irdp output indicates whether switch discovery has been configured for each interface and lists the values of discovery configurables for those interfaces on which discovery has been enabled. Explanations for the less self-evident lines of output in the display follow.
Indicates the configured minimum and maximum advertising interval for the interface.
Indicates the configured holdtime values for the interface.
Indicates the configured (or in this case default) preference value for the interface.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display statistics for any defined IP address pools, use the show ip local-pool command.
If you omit the variable name, the software will display a generic list of all defined address pools and the IP addresses that belong to them. If you specify a name, the software displays more detailed information for that pool.
The following is sample output from the show ip local-pool command.
Table 16-28 describes the fields shown in the display.
Table 16-28 Show IP Local Pool Field Descriptions
| Field | Description |
|---|---|
The first IP address in the defined range of addresses in this pool. |
|
The last IP address in the defined range of addresses in this pool. |
|
To display the masks used for network addresses and the number of subnets using each mask, use the show ip masks EXEC command.
The show ip masks command is useful for debugging when variable-length subnet masks (VLSM) are used. It shows the number of masks associated with the network and the number of routes for each mask.
The following is sample output from the show ip masks command.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the parameters and current state of the active routing protocol process, use the show ip protocols EXEC command.
The information displayed by show ip protocols is useful in debugging routing operations.
To display the address of a default gateway and the address of hosts for which a redirect has been received, use the show ip redirects EXEC command.
This command has no arguments or keywords.
The following is sample output from the show ip redirects command.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the entries in the routing table, use the show ip route EXEC command.
The following is sample output from the show ip route command entered when you do not specify an address.
The following is sample output from the show ip route command when you specify an address.
Table 16-29 describes the significant field shown in the display.
Table 16-29 Show IP Route Field Descriptions When You Specify an Address
To display summary information about entries in the routing table, use the show ip route summary EXEC command.
This command has no arguments or keywords.
The following is sample output from the show ip route summary command.
Table 16-30 describes the fields shown in the display.
Table 16-30 Show IP Route Summary Field Descriptions
To display statistics about TCP header compression, use the show ip tcp header-compression EXEC command.
The following is sample output from the show ip tcp header-compression command.
Table 16-31 describes significant fields shown in the display.
Table 16-31 Show IP TCP Header-Compression
Field Descriptions
To display statistics about IP traffic, use the show ip traffic EXEC command.
This command has no arguments or keywords.
The following is sample output from the show ip traffic command.
Table 16-32 describes significant fields shown in the display.
Table 16-32 Show IP Traffic Field Descriptions
To display global and per-VCC LANE information for all the LANE components configured on an interface or any of its subinterfaces, on a specified subinterface, or on an emulated LAN, use the show lane EXEC command.
Entering the show lane command is equivalent to entering the show lane config, show lane server, show lane bus, and show lane client commands. The show lane command shows all LANE-related information except the show lane database information.
The following is sample output of the show lane command.
Table 16-33 describes significant fields in the sample display.
Table 16-33 Show Lane Command Field Descriptions
To display global and per-VCC LANE information for all the LANE clients configured on an interface or any of its subinterfaces, on a specified subinterface, or on an emulated LAN, use the show lane client EXEC command.
The following is sample output from the show lane client command.
Table 16-34 describes significant fields in the sample display.
Table 16-34 Show Lane Client Command Field Descriptions
| 1The Configure Direct VCC is shown in this display as configure. The Control Direct VCC is shown as direct; the Control Distribute VCC is shown as distribute. The Multicast Send VCC and Multicast Forward VC are shown as send and forward, respectively. The data Direct VCC is shown as data. |
To display the automatically assigned ATM address of each LANE component in a switch or on a specified interface or subinterface, use the show lane default-atm-address EXEC command.
To display the LANE ARP table of the LANE client configured on an interface or any of its subinterfaces, on a specified subinterface, or on an emulated LAN, use the show lane le-arp EXEC command.
The following is sample output of the show lane le-arp command.
Table 16-35 describes significant fields shown in the display.
To display a terminal line's parameters, use the show line EXEC command.
The following sample output from the show line command shows that line 2 is a virtual terminal with a transmit and receive rate of 9600 bps. Also shown is the modem state, terminal screen width and length, and so on.
Overruns occur when the UART serving the line receives a byte but has nowhere to put it because previous bytes were not taken from the UART by the host CPU. The byte is lost, and the overrun count increases when the CPU next looks at UART status.
Table 16-36 describes the fields shown in the display.
Table 16-36 Show Line Field Descriptions
Use the show logging EXEC command to display the state of logging (syslog).
This command displays the state of syslog error and event logging, including host addresses, and whether console logging is enabled. This command also displays Simple Network Management Protocol (SNMP) configuration parameters and protocol activity.
This command has no arguments or keywords.
The following is sample output from the show logging command.
Table 16-37 describes significant fields shown in the display.
Table 16-37 Show Logging Field Descriptions
Use the show memory EXEC command to show statistics about the switch's memory, including memory free pool statistics.
It is recommended you use the summary option to limit the amount of information presented.
The following is sample output from the show memory command.
The following is sample output from the show memory free command.
The display of show memory free contains the same types of information as the show memory display, except that only free memory is displayed, and the information is displayed, in order, for each free list.
The first section of the display includes summary statistics about the activities of the system memory allocator. Table 16-38 describes significant fields shown in the first section of the display.
Table 16-38 Show Memory Field Descriptions—First Section
| Field | Description |
|---|---|
Hexadecimal address of the head of the memory allocation chain. |
|
The second section of the display is a block-by-block listing of memory use. Table 16-39 describes significant fields shown in the second section of the display.
Table 16-39 Characteristics of Each Block of Memory—Second Section
The show memory io command displays the free IO memory blocks. This command quickly shows how much unused IO memory is available.
The following is sample output from the show memory io command.
To show which ports are designated as network clock sources, use the show network-clocks EXEC command.
This command has no keywords or arguments.
The following is sample output from the show network-clocks EXEC command.
To show the status of Network Time Protocol (NTP) associations, use the show ntp associations EXEC command.
Detailed descriptions of the information displayed by this command can be found in the NTP specification (RFC 1305).
The following is sample output from the show ntp associations command.
Table 16-40 describes significant fields shown in the display.
Table 16-40 Show NTP Associations Field Descriptions
| Field | Description |
|---|---|
Relative time of peer's clock to local clock (milliseconds). |
|
The first character of the line can be one or more of the following: |
|
The following is sample output of the show ntp associations detail command.
Table 16-41 describes significant fields shown in the display.
Table 16-41 Show NTP Associations Detail Field Descriptions
| Field | Descriptions |
|---|---|
Our mode relative to peer (active / passive / client / server / bdcast / bdcast client). |
|
To show the status of Network Time Protocol (NTP), use the show ntp status EXEC command.
This command has no arguments or keywords.
The following is sample output from the show ntp status command.
Table 16-42 shows the significant fields in the display.
Table 16-42 Show NTP Status Field Descriptions
| Field | Description |
|---|---|
To display your current level of privilege, use the show privilege EXEC command.
This command has no arguments or keywords.
The following is sample output from the show privilege command. The current privilege level is 15.
Use the show processes EXEC command to display information about the active processes.
The following is sample output from the show processes command.
The following is sample output from the show processes cpu command.
Table 16-43 describes significant fields shown in the two displays.
Note Because the network server has a 4-millisecond clock resolution, run times are considered reliable only after a large number of invocations or a reasonable, measured run time.
Use the show processes memory EXEC command to show memory utilization.
This command has no arguments or keywords.
The following is sample output from the show processes memory command.
Table 16-44 describes significant fields shown in the display.
Table 16-44 Show Processes Memory Field Descriptions
| Field | Description |
|---|---|
Sum of all memory that process has requested from the system. |
|
Allocated memory minus freed memory. A value can be negative when it has freed more than it was allocated. |
|
Use the show protocols EXEC command to display the configured protocols.
This command shows the global and interface-specific status of any configured IP protocol.
This command has no arguments or keywords.
The following is sample output from the show protocols command.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To display the contents of the queue, use the show queue command.
The following is sample output from the show queue command.
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To list the current state of the queue lists, use the show queueing privileged EXEC command.
If no keyword is entered, this command shows the status of both custom and priority queue lists.
The following is sample output from the show queueing custom EXEC command.
The following is sample output from the show queueing command. On interface Aux0, there are two active conversations. Weighted fair queueing ensures both of these IP data streams—both using TCP—receive equal bandwidth on the interface while messages are in the pipeline, even though there is more FTP data in the queue than RCP data.
custom-queue-list
priority-group
priority-list interface
priority-list queue-limit
scheduler allocate
queue-list interface
queue-list protocol
queue-list queue byte-count
queue-list queue limitt
queue-list stun
To show the registry, use the show registry EXEC command.
The following is a sample display from the show registry command.
The following is a sample display of a brief show display command.
To display the configuration information currently running on the terminal, use the show running-config EXEC command. This command replaces the write terminal command.
This command has no arguments or keywords.
Use this command in conjunction with the show startup-config command to compare the information in running memory to the information stored in a location specified by the config_file environment variable. This variable specifies the configuration file used for initialization (startup). Use the boot config command in conjunction with the copy running-config startup-config command to set the config_file environment variable.
The following example illustrates how to display the running configuration.
boot config
configure
copy running-config
copy startup-config
show startup-config
To check the status of communications between the SNMP agent and SNMP manager, use the
show snmp EXEC command.
This command has no arguments or keywords.
This command provides counter information for RFC 1213 SNMP operations. It also displays the chassis ID string defined with the snmp-server chassis-id command.
The following is sample output from the show snmp command.
To show SSCOP details for all ATM interfaces, use the show sscop privileged EXEC command.
The following is sample output from the show sscop command.
Table 16-45 describes the fields shown in the display. Interpreting this output requires an understanding of the SSCOP; it is usually displayed by Cisco technicians to help diagnose network problems.
Table 16-45 Show SSCOP Field Descriptions
| Field | Description |
|---|---|
Number of Sd frames sent that trigger a sending of a Poll frame. |
|
To monitor the stack utilization of processes and interrupt routines, use the show stacks EXEC command. Its display includes the reason for the last system reboot. If the system was reloaded because of a system failure, a saved system stack trace is displayed. This information is of use only to Cisco engineers analyzing crashes in the field. It is included here so you can read the displayed statistics to an engineer over the phone.
The following is sample output from the show stacks command following a system failure.
To show the configuration file pointed to by the config_file environment variable, use the show startup-config EXEC command. This command replaces the show configuration command.
This command has no arguments or keywords.
The show startup-config command shows the configuration file specified by the config_file environment variable. The switch informs you whether the displayed configuration is a complete configuration or a distilled version. A distilled configuration is one that does not contain access lists.
The following is sample output from the show startup-config command.
The following is partial sample output from the show startup-config command when the configuration file is compressed.
configure
copy running-config
description (interface)
service compress-config
show boot
show running-config
To display the subsystem information, use the show subsys EXEC command.
The following is sample output from the show subsys command.
To display the status of TCP connections, use the show tcp EXEC command.
The following is sample output from the show tcp command.
Table 16-46 describes the following lines of output shown in the display con0 (console terminal), connection 1 to host MATHOM Connection state is ESTAB, I/O status: 1, unread input bytes: 1 Local host: 172.30.7.18, 33537 Foreign host: 192.31.7.17, 23 Enqueued packets for retransmit: 0, input: 0, saved: 0
Show TCP Field Descriptions—First Section of Output
The following lines of output show the current time according to the system clock of the local host.
The following lines of output display the number of times that various local TCP timeout values were reached during this connection. In this example, the local host retransmitted 69 times because it received no response from the remote host, and it transmitted an acknowledgment many more times because there was no data on which to piggyback.
Table 16-47 describes the fields in the preceding lines of output.
Show TCP Field Descriptions—Second Section of Output
The following lines of output display the sequence numbers that TCP uses to ensure sequenced, reliable transport of data. The local host and remote host each use these sequence numbers for flow control and to acknowledge receipt of datagrams. Table 16-48 describes the specific fields in these lines of output:
Show TCP Field Descriptions—Sequence Number
The following lines of output display values that the local host uses to keep track of transmission times so that TCP can adjust to the network it is using. Table 16-49 describes the fields in the following line of output:
Show TCP Field Descriptions—Line Beginning with RTTO
For more information on these fields, refer to "Round Trip Time Estimation," P. Karn & C. Partridge, ACM SIGCOMM-87, August 1987. Table 16-50 describes the fields in the following lines of output:
Show TCP Field Descriptions—Last Section of Output
Use the show version EXEC command to display the configuration of the system hardware, the software version, the names and sources of configuration files, and the boot images.
This command has no arguments or keywords.
The following is sample output from the show version command.
Table 16-51 describes significant fields shown in the display.
Table 16-51 Show Version Field Descriptions
The output of the show version EXEC command can also provide certain messages, such as bus error messages. If such error messages appear, report the complete text of this message to your technical support specialist.
To disable an interface, use the shutdown interface configuration command. To restart a disabled interface, use the no form of this command.
This command has no arguments or keywords.
The shutdown command disables all functions on the specified interface.When the ATM interfaces shut down a loss of signal is transmitted to the far-end.
This command also marks the interface as unavailable. To check whether an interface is disabled, use the EXEC command show interfaces. An interface that has been shut down is shown as administratively down in the display from this command.
The following example turns off the Ethernet interface 2/0/0.
The following example turns the interface on.
Use the slip EXEC command to attach or detach a Serial-line IP (SLIP) interface.
This command has no keywords or arguments.
To create or update an access policy, use the snmp-server access-policy global configuration command. To remove the specified access policy, use the no form of this command.
An access policy defines the management operations the destination party can perform in relation to resources defined by the specified context when requested by the source party. A destination party performs management operations that are requested by a source party. A source party sends communications to a destination party requesting the destination party to perform management operations. A context identifies object resources accessible to a party.
Access policies are defined on the switch for communications from the manager to the agent; in this case, the agent is the destination party and the manager is the source party. Access policies can also be defined on the switch for Response message and trap message communication from the agent to the manager; in this case, the manager is the destination party and the agent is the source party.
The privileges argument specifies the types of SNMP operations that are allowed between the two parties. There are seven types of SNMP operations.You specify the privileges as a bit mask representing the access privileges that govern the management operations that the source party can ask the destination party to perform. In other words, the bit mask identifies the commands that the source party can send to the destination party.
You use decimal or hexadecimal format to specify privileges as a sum of values in which each value specifies an SNMP PDU type that the source party can use to request an operation. The decimal values are defined as follows:
To remove an access-policy entry, all three arguments specified as command arguments must match exactly the values of the entry to be deleted. A difference of one value constitutes a different access policy.
The first snmp-server command you enter enables both versions of SNMP.
The following example configures an access policy providing the manager with read-only access to the agent.
The following example configures an access policy providing the manager with read-write access to the agent.
The following example configures an access policy that allows responses and SNMP v.2 traps to be sent from the agent to a management station.
The following example removes the access policy configured for the destination party named agt1, the source party named mgr1, and with a context named ctx1.
snmp-server context
snmp-server party
Note This command or some of its parameters might not function as expected in the LightStream 1010 ATM switch environment.
To provide a message line identifying the SNMP server serial number, use the snmp-server chassis-id global configuration command. Use the no form of this command to restore the default value, if any.
On hardware platforms where the serial number can be machine read, the default is the serial number. For example, an AGS+ default value is none.
The Cisco MIB provides a chassis MIB variable that enables the SNMP manager to gather data on system card descriptions, chassis type, chassis hardware version, chassis ID string, software version of ROM monitor, software version of system image, bytes of processor RAM installed, current configuration register setting, and the value of the configuration register at the next reload. The following installed card information is provided: type of card, serial number, hardware version, software version, and chassis slot number.
The chassis ID message can be seen with the show stacks command.
In the following example, the chassis serial number specified is 1234456.
To set up the community access string to permit access to the SNMPv1 protocol, use the snmp-server community global configuration command. The no form of this command removes the specified community string.
By default, an SNMP community string permits read-only access.
For the previous version of this command, the string argument was optional. The string argument is now required. However, to prevent errors and provide backward-compatibility, if the string option is omitted, a default value of public is assumed.
The no snmp-server command disables both versions of SNMP (SNMPv1 and SNMPv2).
The first snmp-server command that you enter enables both versions of SNMP.
The following example assigns the string comaccess to SNMPv1, allowing read-only access and specifying that IP access list 4 can use the community string.
The following example disables both versions of SNMP.
To set the system contact (syscontact) string, use the snmp-server contact global configuration command. Use the no form of this command to remove the system contact information.
The following is an example of a syscontact string.
To create or update a context record, use the snmp-server context global configuration command. To remove a specific context entry, use the no form of this command.
A context record identifies object resources accessible to a party. A context record is one of the components that make up an access policy. Therefore, you must configure a context record before you can create an access policy that includes the context. Context records and party records further codify MIB views.
To remove a context entry, specify only the name of the context. The name identifies the context to be deleted.
The first snmp-server command that you enter enables both versions of SNMP.
The following example shows how to create a context that includes all objects in the MIB-II subtree using a previously defined view named mib2.
copy running-config
show running-config
snmp-server view
To specify the recipient of an SNMP trap operation ir Inform information, use the snmp-server host global configuration command. The no form of this command removes the specified host.
If you enter the command with no keywords, the default is to enable all trap types.
The snmp-server host command specifies which host or hosts should receive SNMP traps. You need to issue the snmp-server host command once for each host acting as a trap recipient. When multiple snmp-server host commands are given, the community string in the last command is used, and in general, the trap types set in the last command are used for all SNMP trap operations.
Whether a trap-type option is available depends on the LightStream software features supported.
The following example sends the SNMP traps defined in RFC 1157 to the host specified by the name cisco.com. The community string is defined as the string comaccess.
The following example sends the SNMP and Cisco enterprise-specific traps to address 131.108.2.160.
snmp-server trap-source
snmp-server trap-timeout
To set the system location string, use the snmp-server location global configuration command. Use the no form of this command to remove the location string.
No system location string is set.
The following example illustrates a system location string.
To establish control over the largest SNMP packet size permitted when the SNMP server is receiving a request or generating a reply, use the snmp-server packetsize global configuration command. Use the no form of this command to restore the default value.
The following example establishes a packet filtering of a maximum size of 1024 bytes.
To create or update a party record, use the snmp-server party global configuration command. To remove a specific party entry, use the no form of this command.
If neither local nor remote is specified to indicate the location of the party, the party is assumed to be local.
If you do not specify a packet size, the packet size set through the snmp-server packetsize command is used.
You define parties to identify managers and agents. An SNMPv2 party identity is unique; it includes the logical network location of the party, characterized by the transport protocol domain and transport addressing information, and, optionally, an authentication method and its arguments. The authentication protocol reliably identifies the origin of all messages sent by the party. The authentication protocol also ensures the integrity of the messages; in other words, it ensures that the message received is the message that was sent.
Specifying md5 as the authentication method implies that this party record pertains to an SNMPv2 party.
Specifying snmpv1 as the authentication method implies that this party record pertains to an SNMPv1 party. This allows a management station that supports only SNMPv1 to use SNMPv2 MIB views. Instead of using the snmp-server community command, you can use the snmp-server party command with the snmpv1 keyword to define an SNMPv1 party to be used to communicate with an SNMPv1 management station. The snmp-server community command does not allow you to create MIB views for an SNMPv1 management station.
If authentication is not specified, the party record pertains to an SNMPv2 party, and no authentication is performed for messages sent to this party.
To remove a party record, specify only the name of the party. The name identifies the party to be deleted.
The first snmp-server command that you enter enables both versions of SNMP.
The following example configures a remote unauthenticated party.
The following example configures a local MD5-authenticated party with a large maximum packet size. You enter this command as a single line.
The following example configures an SNMPv1 proxy party for the community public.
The following example removes the party named mgr1.
copy running-config startup-config
show running-config
snmp-server community
snmp-server packetsize
To establish the message queue length for each trap host, use the snmp-server queue-length global configuration command.
This command defines the length of the message queue for each trap host. Once a trap message is successfully transmitted, software continues to empty the queue, but never faster than at a rate of four trap messages per second.
The following example establishes a message queue that traps four events before it must be emptied.
To use the SNMP message reload feature, the device configuration must include the snmp-server system-shutdown global configuration command. The no form of this command prevents an SNMP system-shutdown request (from an SNMP manager) from resetting the Cisco agent.
This command has no arguments or keywords.
This command is not included in the configuration file.
The following example illustrates how to include the SNMP message reload feature in the device configuration.
To establish trap message authentication, use the snmp-server trap-authentication global configuration command. To remove message authentication, use the no form of this command.
Specifying the snmp-server trap-authentication command without a keyword turns on trap message authentication. In this case, messages are sent to the host that is specified through the snmp-server host command and to any SNMP stations configured through access policies to receive trap messages.
Specify the snmpv1 or snmpv2 keyword to indicate the type of management stations to send the trap messages to.
This command enables the switch as an agent to send a trap message when it receives an SNMPv1 packet with an incorrect community string or an SNMPv2 packet with an incorrect MD5 authentication key.
The SNMP specification requires that a trap message be generated for each packet with an incorrect community string or authentication key; however, because this action can cause a security breach, the switch (as an agent) by default does not send a trap message when it receives an incorrect community string or authentication key.
The community string or key is checked before any access list that may be set, so it is possible to get spurious trap messages. In other words, if you issued an snmp-server community command with a specified access list, you might receive messages that come from someone not on the access list; in this case, an authentication trap is issued. The only workarounds are to disable trap authentication or to configure an access list on a switch between the SNMP agent and the SNMP manager to prevent packets from getting to the SNMP agent.
To turn off all message authentication traps, use the no snmp-server trap-authentication without a keyword. To turn off message authentication traps only for SNMPv1 stations or only for SNMPv2 stations, give the negative form of the command with the appropriate keyword.
The first snmp-server command that you enter enables both versions of SNMP.
The following example illustrates how to enter the command that establishes trap message authentication.
To specify the interface (and hence the corresponding IP address) that an SNMP trap should originate from, use the snmp-server trap-source global configuration command. Use the no form of the command to remove the source designation.
When an SNMP trap is sent from a Cisco SNMP server, it displays the trap address of the interface it left at the time of the request. Use this command if you want to use the trap address to trace specified needs.
The following example specifies that the IP address for interface Ethernet 2/0/0 is the source for all traps on the switch.
To define how often to try resending trap messages on the retransmission queue, use the snmp-server trap-timeout global configuration command.
Before the switch tries to send a trap, it looks for a route to the destination address. If there is no known route, the trap is saved in a retransmission queue. The server trap-timeout command determines the number of seconds between retransmission attempts.
The following example sets an interval of 20 seconds to try resending trap messages on the retransmission queue.
To create or update an SNMPv2 security context using the simplified security conventions method, use the snmp-server userid global configuration command. The no form of this command removes the specified security context.
For the snmp-server userid command, the default value for the view-name argument depends on whether the security context is password-protected. If the security context is password-protected, one of the following default values applies:
These predefined views are described in RFC 1447.
Read-only access is the default for unauthenticated users.
Read-write access is the default for authenticated users.
The snmp-server userid command implements the simplified security conventions method of configuring the relationship between an agent and a manager. It provides a single-step method that offers an alternative to the access policy configuration method of defining this relationship. The simplified method offers ease-of-use at the cost of forfeiting control over certain values that can be configured if you create an access policy. The simplified security conventions method applies to a configuration in which the agent is the destination or recipient of messages and the manager is the source or sender of messages. You cannot use this command to define a relationship in which the agent is the source and the manager is the destination. The security context created does not apply to trap messages.
| Caution Use the simplified security conventions method only if the management station participating in the manager-agent relationship also supports this method. |
If you provide a password, the password is encrypted on write operations for which encryption is enabled.
If you use the snmp-server userid command, the SNMPv2 implementation assumes default values that it determines internally for required information that you cannot provide through the command interface. SNMPv2 uses the following methods to determine these values:
The first snmp-server command that you enter enables both versions of SNMP.
The following example configures a security context for the user florence, who is unauthenticated, uses the view default, and has read-only access.
snmp-server chassis-id
snmp-server context
snmp-server party
snmp-server view
To create or update a view entry, use the snmp-server view global configuration command. To remove the specified SNMP server view entry, use the no form of this command.
Other SNMPv2 commands require a view as an argument. You use this command to create a view to be used as arguments for other commands that create records including a view.
Two standard predefined views can be used when a view is required, instead of defining a view. One is everything, which indicates that the user can see all objects. The other is restricted, which indicates that the user can see three groups: system, snmpStats, and snmpParties. The predefined views are described in RFC 1447.
The first snmp-server command that you enter enables both versions of SNMP.
The following example creates a view that includes all objects in the MIB-II subtree.
The following example creates a view that includes all objects in the MIB-II system group and all objects in the Cisco enterprise MIB.
The following example creates a view that includes all objects in the MIB-II system group except for sysServices (System 7) and all objects for interface 1 in the MIB-II interfaces group.
copy running-config startup-config
show running-config
snmp-server context
snmp-server userid
To set the mode of operation and thus control type of ATM cell used for cell-rate decoupling on the SONET, use the sonet interface configuration command. The no form of this command restores the default sts3c operation (applies to only OC3 and OC12 interfaces).
| 1The ITU-T carries out the functions of the former Consultative Committee for International Telegraph and Telephone (CCITT). |
The default is sts3c for OC3 and sts12c for OC12.
This command applies to all ports except the CPU. Use stm-1 in applications where the ATM switch requires "idle cells" for rate adaptation. An idle cell contains 31 zeros followed by a 1.
Use the default (sts3c) in applications where the ATM switch requires "unassigned cells" for rate adaptation. An unassigned cell contains 32 zeros.
The following example specifies ATM SONET STM-1.
show controllers
show running-config
write terminal
To configure the number of data bits per character for special characters such as software flow control characters and escape characters, use the special-character-bits line configuration command.
Setting the special character bits to 8 allows you to use twice as many special characters as with the 7-bit ASCII character set. The special characters affected by this setting are the escape, hold, stop, start, disconnect, and activation characters.
The following example allows the full 8-bit international character set for special characters on the auxiliary port.
default-value exec-character-bits
default-value special-character-bits
exec-character-bits
terminal exec-character-bits
terminal special-character-bits
To set the terminal baud rate, use the speed line configuration command. The command sets both the transmit (to terminal) and receive (from terminal) speeds.
This command pertains to the auxiliary port only. Set the speed to match the baud rate of whatever device you connected to the port. Some baud rates available on devices connected to the port might not be supported on the switch. The switch indicates if the speed you select is not supported. The following speeds, in bits per second, are available.
75, 110, 134, 150, 300, 600, 1200, 1800, 2000, 2400, 4800, 9600, 19200, 38400
The following example sets the auxiliary line to 2400 bps.
To permanently delete Flash files, use the squeeze privileged EXEC command.
When Flash memory is full, you might need to rearrange the files so that the space used by the "deleted" files can be reclaimed. When you issue the squeeze command, the switch copies all valid files to the beginning of Flash memory and erases all files marked "deleted." At this point, you cannot recover "deleted" files, and you can write to the reclaimed Flash memory space.
Note The squeeze operation might take several minutes because it can involve erasing and rewriting almost an entire Flash memory space.
The following example instructs the switch to permanently erase the files marked deleted from the Flash memory card inserted in the second slot of the ASP card.
To set the flow control start character, use the start-character line configuration command. The command defines the character that signals the start of data transmission when software flow control is in effect. The no form of this command removes the character.
The following example changes the start character to Ctrl-B, which is ASCII decimal 2.
To manually start a chat script, use the start-chat privileged EXEC command. Use the no form of this command to stop the chat script.
This command provides modem dialing commands for a chat script that you want to apply immediately to a line. If you do not specify a line, the script runs on the current line. If the specified line is already in use, the script is not activated and an error message appears. This command can only be used on the auxiliary port of the switch.
The argument regexp is used to specify the name of the modem script that is to be executed. The first script that matches the argument in this command and the dialer map command is used.
The following example manually starts the chat script with the word telebit in its name on line 0.
chat-script
dialer-list list
script activation
script connection
script reset
script startup
To turn on the PNNI statistics feature, use the statistics ATM router PNNI configuration command. To disable this feature, use the no form of this command.
ATM router PNNI configuration.
For more information, refer to the LightStream 1010 ATM Switch Software Configuration Guide.
The following script shows how to access the statistics ATM router PNNI configuration command.
To set the number of the stop bits transmitted per byte, use the stopbits line configuration command.
The following example changes the default from 2 stop bits to 1 as a performance enhancement.
To set the flow control stop character, use the stop-character line configuration command. The no form of this command removes the character.
This command defines the character that signals the end of data transmission when software flow control is in effect.
The following example changes the stop character to ^E, which is ASCII decimal 5.
To configure summary address prefixes on a PNNI node, use the summary-address node-level subcommand. To remove configured summary address prefixes, use the no form of this command.
Default summary addresses are controlled by the auto-summary command.
The default summary address type is internal.
Summary addresses can be used to decrease the amount of information advertised by this PNNI node. Summary addresses should only be configured when all endsystem addresses matching the summary address are reachable from this switch (for example, not reachable through PNNI interfaces to other switches).
Summary addresses of type internal only summarize internal addresses reachable from this switch (such as ILMI-registered addresses and internal static routes). Summary addresses of type exterior only summarize exterior addresses reachable from this switch (for example, exterior static routes on IISP or Public UNI interfaces).
Suppressed summary addresses can be used to prevent other PNNI nodes from learning of this switch's connectivity to certain addresses (for example, for backdoors).
For more information, refer to the LightStream 1010 ATM Switch Software Configuration Guide.
The following script shows how to access the summary-address node-level subcommand.
atm route
auto-summary
show atm pnni prefix
Posted: Fri Jan 24 21:59:50 PST 2003
All contents are Copyright © 1992--2002 Cisco Systems, Inc. All rights reserved.
Important Notices and Privacy Statement.