AOS-CX 10.08 Command-line Interface Guide for 6200 Switches

AOS-CX 10.08 Command-line Interface Guide for 6200 Switches6200 Switch Series
| 2
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General Public License, and/or certain other open source licenses. A complete machine-readable copy of the source code corresponding to such code is available upon request. This offer is valid to anyone in receipt of this information and shall expire three years following the date of the final distribution of this product version by Hewlett Packard Enterprise Company. To obtain such source code, send a check or money order in the amount of US $10.00 to:
Hewlett Packard Enterprise Company 6280 America Center Drive San Jose, CA 95002 USA
Notices The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website. For more information, see the KM Process Guide. ?>
Acknowledgments Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Enterprise under license.
Contents
Contents
Contents 3
About this document 37 Applicable products 37 Latest version available online 37 Command syntax notation conventions 37 About the examples 38 Identifying switch ports and interfaces 38
Introduction to the AOS-CX CLI 40 CLI access 40 Getting CLI help 40 Authority levels 41 Command contexts 42
Operator context (>) 42 Navigating to the operator context (>) 42 Auditor context 42 Manager context (#) 43 Navigating to the manager context (#) 43 Global configuration context (config) 43 Navigating to the config context 44 Other configuration command contexts 44 Support for range contexts 45 Rules for range contexts 46
Command history 47 Command completion 47 Pipe (|) support in show commands 48 Command syntax notation conventions 48
Service OS CLI commands 50 boot 50 cat 50 cd path 51 config-clear 52 cp 52 du 53 erase zeroize 54 exit 56 format 56 identify 57 ip 57 ls 58 md5sum 60 mkdir 61 mount 62 mv 62 password 63 ping 64
AOS-CX 10.08 Command-Line Interface Guide | (6200 Switch Series) 3
Contents | 4
pwd 64 reboot 65 rm 66 rmdir 66 secure-mode 67 sh 68 umount 69 update 70 tftp 71 version 72
ACL commands 73 ACL application 73 access-list copy 73 access-list ip 76 access-list ipv6 85 access-list log-timer 92 access-list mac 95 access-list resequence 101 access-list reset 103 apply access-list control-plane 105 apply access-list (to interface or LAG) 106 apply access-list (to interface VLAN) 108 apply access-list (to VLAN) 110 clear access-list hitcounts 112 clear access-list hitcounts control-plane 113 object-group address resequence 114 object-group address reset 115 object-group all reset 115 object-group ip address 116 object-group ipv6 address 118 object-group port 120 object-group port resequence 122 object-group port reset 123 show access-list 124 show access-list control-plane 128 show access-list hitcounts 130 show access-list hitcounts control-plane 133 show capacities 134 show capacities-status 135 show object-group 136
ACL and Policy hardware resource commands 139 show resources 139
AirWave commands 141 logging 141 snmp-server community 143 snmp-server host 143 snmp-server vrf 145 snmpv3 context 146 snmpv3 user 147
ARP commands 150 arp cache-limit 150 arp inspection 150
arp inspection trust 151 arp ipv4 mac 152 clear arp 152 ip local-proxy-arp 153 ipv6 neighbor mac 154 ip proxy-arp 155 show arp 156 show arp inspection interface 156 show arp inspection statistics 157 show arp state 158 show arp summary 159 show arp timeout 161 show arp vrf 161 show ipv6 neighbors 163 show ipv6 neighbors state 163
Aruba Central commands 165 aruba-central 165 aruba-central support-mode 165 configuration-lockout central managed 166 disable 167 enable 168 location-override 168 show aruba-central 169 show running-config current-context 170
Banner commands 172 banner 172 show banner 173
BFD Commands 175 bfd 175 bfd <IPV4-ADDR> 175 bfd all-interfaces 176 bfd detect-multiplier 177 bfd disable 178 bfd enable (Context: config-hsc) 178 bfd disable (Context: config-hsc) 179 bfd echo disable 180 bfd min-echo-receive-interval 181 bfd min-receive-interval 181 bfd min-transmit-interval 182 clear bfd statistics 183 ip ospf bfd 184 ip ospf bfd disable 185 ip route bfd 185 ipv6 ospfv3 bfd 187 ipv6 ospfv3 bfd disable 187 neighbor fall-over bfd 188 show bfd 189 show bfd interface 191 show hsc 193
Boot commands 194 boot set-default 194 boot system 194
Contents | 6
Captive portal (RADIUS) commands 201 aaa authentication port-access captive-portal-profile 201 show port-access captive-portal-profile 202 url 203 url-hash-key 204
CDP commands 206 cdp 206 clear cdp counters 207 clear cdp neighbor-info 207 show cdp 208 show cdp neighbor-info 208 show cdp traffic 209
Checkpoint commands 211 checkpoint auto 211 checkpoint auto confirm 212 checkpoint diff 212 checkpoint post-configuration 214 checkpoint post-configuration timeout 215 checkpoint rename 216 checkpoint rollback 217 copy checkpoint <CHECKPOINT-NAME> <REMOTE-URL> 217 copy checkpoint <CHECKPOINT-NAME> {running-config | startup-config} 218 copy checkpoint <CHECKPOINT-NAME> <STORAGE-URL> 219 copy <REMOTE-URL> checkpoint <CHECKPOINT-NAME> 220 copy <REMOTE-URL> {running-config | startup-config} 221 copy running-config {startup-config | checkpoint <CHECKPOINT-NAME>} 222 copy {running-config | startup-config} <REMOTE-URL> 223 copy {running-config | startup-config} <STORAGE-URL> 225 copy startup-config running-config 226 copy <STORAGE-URL> running-config 226 erase {checkpoint <CHECKPOINT-NAME> | startup-config | all} 228 show checkpoint <CHECKPOINT-NAME> 228 show checkpoint <CHECKPOINT-NAME> hash 231 show checkpoint post-configuration 232 show checkpoint 232 show checkpoint date 233 show running-config hash 234 show startup-config hash 235 write memory 235
Classifier policy commands 237 Classifier policy application 237 apply policy (config-if, config-lag-if, config-if-vlan, config-vlan) 237 class copy 241 class ip 242 class ipv6 249 class mac 256 class resequence 260 class reset 262
clear policy hitcounts 262 policy 264 policy copy 268 policy resequence 269 policy reset 270 show class 271 show policy 272
CLI session commands 277 alias 277 auto-confirm 278 configure terminal 279 disable 280 do 280 enable 281 end 282 exit 282 list 283 page 283 Pipe (|) command 284 repeat 285 session-timeout 286 show session-timeout 287 show alias 287 show history 288
CLI user session management commands 290 cli-session 290
Clock commands 293 clock date 293 clock datetime 293 clock time 294 clock timezone 295 show clock 295
CoPP commands 297 Classes of traffic 297 apply copp-policy 299 class 300 clear copp-policy statistics 301 copp-policy 302 default-class 303 reset copp-policy 304 show copp-policy 305 show copp-policy factory-default 306 show copp-policy statistics 308 show tech copp 309
Debug logging commands 311 clear debug buffer 311 debug {all | <MODULE-NAME>} 312 debug db 313 debug destination 315 show debug 317 show debug buffer 317
Contents | 8
Device fingerprinting commands 321 cdp 321 client device-fingerprint apply-profile 322 client device-fingerprint client-limit 322 client device-fingerprint profile 323 dhcp 324 http user-agent 325 lldp 325 vsx-sync 326 vsx-sync device-fingerprint 327 show client device-fingerprint 328 show client device-fingerprint active 329 show client device-fingerprint profile 330
Device profile commands 332 aaa authentication port-access allow-cdp-bpdu 332 aaa authentication port-access allow-lldp-bpdu 333 associate cdp-group 334 associate lldp-group 335 associate mac-group 336 associate role 337 disable 338 enable 338 ignore (for CDP groups) 339 ignore (for LLDP groups) 340 ignore (for MAC groups) 341 mac-group 345 match (for CDP groups) 346 match (for LLDP groups) 348 match (for MAC groups) 349 port-access cdp-group 353 port-access device-profile 354 port-access device-profile mode block-until-profile-applied 355 port-access lldp-group 356 show port-access device-profile 357
DHCP client commands 359 ip dhcp 359
DHCPv4 relay commands 360 dhcp-relay 360 dhcp-relay hop-count-increment 360 dhcp-relay option 82 361 ip bootp-gateway 362 ip helper-address 363 show dhcp-relay 364 show dhcp-relay bootp-gateway 365 show ip helper-address 365
DHCP relay (IPv6) commands 367 dhcpv6-relay 367 dhcpv6-relay option 79 367 ipv6 helper-address 368
show dhcpv6-relay 369 show ipv6 helper-address 370
DHCP server IPv4 commands 372 authoritative 372 bootp 372 clear dhcp-server leases 373 default-router 375 dhcp-server external-storage 376 dhcp-server vrf 376 disable 377 dns-server 378 domain-name 379 enable 379 http-proxy 380 lease 381 netbios-name-server 382 netbios-node-type 383 option 384 pool 385 range 386 show dhcp-server 387 static-bind 389
DHCP server IPv6 commands 391 authoritative 391 clear dhcpv6-server leases 391 dhcv6p-server external-storage 393 dhcpv6-server vrf 394 disable 394 dns-server 395 enable 396 lease 396 option 397 pool 398 range 399 show dhcpv6-server 400 static-bind 402
DHCPv4 snooping commands 404 clear dhcpv4-snooping binding 404 clear dhcpv4-snooping statistics 405 dhcpv4-snooping 405 dhcpv4-snooping (in config-vlan context) 406 dhcpv4-snooping allow-overwrite-binding 407 dhcpv4-snooping authorized-server 407 dhcpv4-snooping external-storage 408 dhcpv4-snooping flash-storage 410 dhcpv4-snooping max-bindings 411 dhcpv4-snooping option 82 412 dhcpv4-snooping trust 413 dhcpv4-snooping verify mac 414 show dhcpv4-snooping 414 show dhcpv4-snooping binding 416 show dhcpv4-snooping statistics 417
Contents | 10
DHCPv6 snooping commands 418 clear dhcpv6-snooping binding 418 clear dhcpv6-snooping statistics 419 dhcpv6-snooping 419 dhcpv6-snooping (in config-vlan context) 420 dhcpv6-snooping authorized-server 421 dhcpv6-snooping external-storage 422 dhcpv6-snooping flash-storage 423 dhcpv6-snooping max-bindings 424 dhcpv6-snooping trust 425 show dhcpv6-snooping 426 show dhcpv6-snooping binding 427 show dhcpv6-snooping statistics 428
DNS client commands 430 ip dns domain-list 430 ip dns domain-name 431 ip dns host 431 ip dns server address 432 show ip dns 433
ECMP commands 435 show ip ecmp 435
ERPS Commands 436 clear erps ring <RINGID> instance <ID> 436 clear erps statistics 436 erps ring 437 erps ring <RINGID> <port0|port1> interface 438 erps ring <RINGID> description 439 erps ring <RINGID> guard-interval 440 erps ring <RINGID> hold-off-interval 441 erps ring <RINGID> instance 441 erps ring <RINGID> instance <ID> control-vlan 442 erps ring <RINGID> instance <ID> description 443 erps ring <RINGID> instance <ID> enable 444 erps ring <RINGID> instance <ID> protected-vlans 445 erps ring <RINGID> instance <ID> protection-switch {{manual|force} <PORT0>|<PORT1>} 446 erps ring <RINGID> instance <ID> revertive 448 erps ring <RINGID> instance <ID> role 449 erps ring <RINGID> instance <ID> rpl 450 erps ring <RINGID> meg-level 451 erps ring <RINGID> parent-ring 452 erps ring <RINGID> sub-ring 453 erps ring <RINGID> tcn-propogation 453 erps ring <RINGID> transmission-interval 454 erps ring <RINGID> wtr-interval 455 show erps statistics 456 show erps status 458 show erps summary 460
EVPN commands 461 active-gateway 461 arp-suppression 463 evpn 464
mac-move-detection count timer 464 nd-suppression 465 rd 466 redistribute host-route 467 redistribute local-mac 468 redistribute local-svi 468 route-target 469 route-target {evpn} 470 show evpn evi 471 show evpn evi summary 472 show evpn evi <EVI-ID> 473 show evpn evi detail 474 show evpn evi <EVI-ID> detail 476 show evpn mac-ip 477 show evpn mac-ip evi 477 show evpn vtep-neighbor 478 show running-config evpn 479 virtual-mac 480 vlan 480
External storage commands 482 address 482 directory 483 disable 483 enable 484 external-storage 485 password 485 show external-storage 486 show running-config external-storage 487 type 488 username 489 vrf 490
Fault monitor commands 491 (enabling, disabling faults) 491 action 492 apply fault-monitor profile 494 fault-monitor profile 495 show fault-monitor profile 496 show interface fault-monitor profile 497 show interface fault-monitor status 498 show running-config 499 show running-config all 500 threshold 501 vsx-sync (fault monitor) 503
Firmware management commands 504 copy {primary | secondary} <REMOTE-URL> 504 copy {primary | secondary} <FIRMWARE-FILENAME> 505 copy primary secondary 505 copy <REMOTE-URL> 506 copy secondary primary 508 copy <STORAGE-URL> 508
High Availability Commands 510 redundancy switchover 510
Contents | 12
HTTPS server commands 511 https-server max-user-sessions 511 https-server rest access-mode 511 https-server session close all 512 https-server session-timeout 513 https-server vrf 514 show https-server 515
ICMP commands 517 ip icmp redirect 517 ip icmp throttle 517 ip icmp unreachable 518
IGMP commands 520 ip igmp 520 ip igmp apply access-list 521 ip igmp last-member-query-interval 522 ip igmp querier 523 ip igmp querier interval 524 ip igmp querier query-max-response-time 525 ip igmp robustness 525 ip igmp router-alert-check 526 ip igmp static-group 527 ip igmp version 528 ip igmp version strict 529 no ip igmp 530 show ip igmp 530 show ip igmp counters 531 show ip igmp group 533 show ip igmp groups 535 show ip igmp interface 537 show ip igmp interface counters 538 show ip igmp interface group 539 show ip igmp interface groups 540 show ip igmp interface statistics 541 show ip igmp static-groups 542 show ip igmp statistics 543
IGMP snooping commands 545 ip igmp snooping 545 ip igmp snooping apply access-list 546 ip igmp snooping auto vlan 547 ip igmp snooping blocked 547 ip igmp snooping drop-unknown 548 ip igmp snooping fastlearn 549 ip igmp snooping fastleave vlan 550 ip igmp snooping forced fastleave vlan 551 ip igmp snooping forward vlan 552 ip igmp snooping static-group 553 ip igmp snooping version 553 no ip igmp snooping 554 show ip igmp snooping 555 show ip igmp snooping counters 556 show ip igmp snooping groups 557 show ip igmp snooping static-groups 557
show ip igmp snooping statistics 558 show ip igmp snooping vlan 559 show ip igmp snooping vlan counters 561 show ip igmp snooping vlan group port 562 show ip igmp snooping vlan statistics 563
In-System Programming commands 565 clear update-log 565 show needed-updates 565
Interface commands 567 allow-unsupported-transceiver 567 default interface 568 description 569 energy-efficient-ethernet 570 flow-control 570 interface 571 interface loopback 572 interface vlan 573 ip address 573 ip mtu 574 ip source-interface 575 ipv6 address 576 ipv6 source-interface 577 mtu 579 routing 580 show allow-unsupported-transceiver 580 show interface 581 show interface dom 584 show interface energy-efficient ethernet 585 show interface flow-control 586 show interface transceiver 587 show ip interface 590 show ip source-interface 591 show ipv6 interface 592 show ipv6 source-interface 593 shutdown 594
IP Client Tracker commands 596 client track ip 596 client track ip { enable | disable | auto } 596 client track ip client-limit 597 client track ip update-interval 598 client track ip update-method probe 599 show capacities 599 show client ip { count | port | vlan } 600
IP-SLA commands 602 ip-sla responder 602 show ip-sla responder 603 show ip-sla responder results 603
IP tunnels commands 605 description 605 destination ip 606 destination ipv6 606
Contents | 14
interface tunnel 607 ip address 609 ipv6 address 610 ip mtu 610 show interface tunnel 612 show running-config interface tunnel 612 shutdown 613 source ip 614 source ipv6 615 ttl 616
IPv6 RA commands 617 ipv6 address <global-unicast-address> 617 ipv6 address autoconfig 617 ipv6 address link-local 618 ipv6 nd cache-limit 619 ipv6 nd dad attempts 620 ipv6 nd hop-limit 621 ipv6 nd mtu 621 ipv6 nd ns-interval 622 ipv6 nd prefix 623 ipv6 nd ra dns search-list 624 ipv6 nd ra dns server 625 ipv6 nd ra lifetime 626 ipv6 nd ra managed-config-flag 627 ipv6 nd ra max-interval 628 ipv6 nd ra min-interval 629 ipv6 nd ra other-config-flag 630 ipv6 nd ra reachable-time 630 ipv6 nd ra retrans-timer 631 ipv6 nd router-preference 632 ipv6 nd suppress-ra 633 show ipv6 nd global traffic 633 show ipv6 nd interface 634 show ipv6 nd interface prefix 637 show ipv6 nd ra dns search-list 638 show ipv6 nd ra dns server 638
IRDP commands 640 diag-dump irdp basic 640 ip irdp 640 ip irdp holdtime 641 ip irdp maxadvertinterval 642 ip irdp minadvertinterval 643 ip irdp preference 644 show ip irdp 645
Job Scheduler commands 646 job 646 schedule 648 show job 651 show capacities (job, schedule) 653 show running-config (job, schedule) 654 show schedule 655
Key chain commands 658
accept-lifetime 658 cryptographic-algorithm 659 key 660 keychain 661 key-string 661 send-lifetime 663 show capacities keychain 664 show keychain 665 show running-config keychain 666
L1-100Mbps downshift commands 667 downshift enable 667 show interface 668 show interface downshift-enable 670 show running-config interface 671
LACP and LAG commands 673 description 673 hash 673 interface lag 674 lacp mode 675 lacp port-id 676 lacp port-priority 677 lacp rate 678 lacp system-priority 679 lag 680 show interface 681 show lacp aggregates 682 show lacp configuration 683 show lacp interfaces 683 shutdown 686 vlan trunk native 687
LLDP commands 689 clear lldp neighbors 689 clear lldp statistics 689 lldp 690 lldp dot3 690 lldp holdtime 691 lldp management-ipv4-address 692 lldp management-ipv6-address 693 lldp med 694 lldp med-location 695 lldp receive 696 lldp reinit 697 lldp select-tlv 697 lldp timer 699 lldp transmit 700 lldp txdelay 701 lldp trap enable 702 show lldp configuration 704 show lldp configuration mgmt 705 show lldp local-device 706 show lldp neighbor-info 708 show lldp neighbor-info detail 711 show lldp neighbor-info mgmt 713
Contents | 16
show lldp statistics 715 show lldp statistics mgmt 716 show lldp tlv 717
Local AAA commands 719 aaa accounting all-mgmt 719 aaa authentication console-login-attempts 720 aaa authentication limit-login-attempts 722 aaa authentication login 723 aaa authentication minimum-password-length 724 aaa authorization commands 725 show aaa accounting 727 show aaa authentication 728 show aaa authorization 729 show ssh authentication-method 729 show user 730 ssh password-authentication 731 ssh public-key-authentication 732 user authorized-key 732
Log rotation commands 735 logrotate maxsize 735 logrotate period 736 logrotate target 736 show logrotate 738
Loop protect commands 739 loop-protect 739 loop-protect action 739 loop-protect re-enable-timer 740 loop-protect transmit-interval 741 loop-protect trap loop-detected 742 loop-protect vlan 742 show loop-protect 743
Loopback commands 745 interface loopback 745 ip address 745 ipv6 address 746 show interface loopback 747
MAC address table commands 749 clear mac-address 749 mac-address-table age-time 749 show mac-address-table 750 show mac-address-table address 751 show mac-address-table count 752 show mac-address-table dynamic 753 show mac-address-table lockout 754 show mac-address-table port 754 show mac-address-table static 755 show mac-address-table vlan 756 static-mac 756
Management interface commands 758
default-gateway 758 ip static 759 nameserver 759 show interface mgmt 760
mDNS gateway commands 762 debug mdns 762 description 763 id 763 mdns-sd 764 mdns-sd apply-profile tx 765 mdns-sd enable 766 mdns-sd profile 766 mdns-sd service 767 clear mdns-sd statistics 768 sequence-number 768 show mdns-sd service-entries 770 show mdns-sd statistics 771 show mdns-sd statistics profile 772 show mdns-sd summary 772 show running-config interface 773 show running-config mdns-sd profile 774 show running-config mdns-sd service 775
Mirroring commands 776 clear mirror 776 clear mirror endpoint 776 comment 777 copy tcpdump-pcap 778 copy tshark-pcap 779 destination cpu 780 destination interface 781 diagnostic 782 diag utilities tcpdump 783 disable 785 enable 785 mirror endpoint 786 mirror session 787 show mirror 788 show mirror endpoint 790 shutdown 790 source 791 source interface 792 source vlan 794
MLD snooping global configuration commands 797 ipv6 mld snooping 797
MLD snooping VLAN configuration commands 798 ipv6 mld snooping 798 ipv6 mld snooping fastlearn 798 ipv6 mld snooping fastleave vlan 799 ipv6 mld snooping forced fastleave vlan 800 ipv6 mld snooping apply access-list 801 ipv6 mld snooping auto vlan 802 ipv6 mld snooping blocked vlan 803
Contents | 18
ipv6 mld snooping forward vlan 804 ipv6 mld snooping static-group 804 ipv6 mld snooping version 805
MLD snooping show commands 807 show ipv6 mld snooping 807 show ipv6 mld snooping counters 808 show ipv6 mld snooping groups 809 show ipv6 mld snooping statistics 809 show ipv6 mld snooping vlan counters 810 show ipv6 mld snooping vlan statistics 811 show ipv6 mld snooping vlan group source 812 show ipv6 mld snooping vlan group port 814 show ipv6 mld snooping static-groups 815
MLD configuration commands for interface VLAN 817 ipv6 mld 817 ipv6 mld apply access-list 817 no ipv6 mld 818 ipv6 mld querier 819 ipv6 mld querier interval 819 ipv6 mld last-member-query-interval 820 ipv6 mld querier query-max-response-time 821 ipv6 mld robustness 821 ipv6 mld static-group 822 ipv6 mld version 823 ipv6 mld version strict 823
MLD show commands for interface VLAN 825 show ipv6 mld 825 show ipv6 mld interface vlan 825 show ipv6 mld all-vrfs 826 show ipv6 mld interface vlan counters 827 show ipv6 mld interface vlan groups 828 show ipv6 mld interface vlan group source 829 show ipv6 mld groups 831 show ipv6 mld groups all-vrfs 832 show ipv6 mld interface counters 833 show ipv6 mld interface statistics 834 show ipv6 mld interface groups 834 show ipv6 mld interface vlan group source 835 show ipv6 mld group all-vrfs 837 show ipv6 mld group source all-vrfs 838 show ipv6 mld interface vlan statistics 839 show ipv6 mld static-groups all-vrfs 840 show ipv6 mld counters 841
MLD configuration commands for interface 843 ipv6 mld 843 ipv6 mld apply access-list 843 no ipv6 mld 844 ipv6 mld querier 845 ipv6 mld querier interval 845 ipv6 mld last-member-query-interval 846 ipv6 mld querier query-max-response-time 847 ipv6 mld robustness 847
ipv6 mld static-group 848 ipv6 mld version 849 ipv6 mld version strict 849
MSTP commands 851 show spanning-tree 851 show spanning-tree detail 852 show spanning-tree inconsistent-ports 853 show spanning-tree mst 854 show spanning-tree mst-config 856 show spanning-tree mst detail 857 show spanning-tree mst <INSTANCE-ID> 860 show spanning-tree mst <INSTANCE-ID> detail 861 show spanning-tree mst interface 862 show spanning-tree summary port 863 show spanning-tree summary root 864 spanning-tree 865 spanning-tree bdpu-filter 865 spanning-tree bpdu-guard 866 spanning-tree bpdu-guard timeout 867 spanning-tree config-name 868 spanning-tree config-revision 869 spanning-tree cost 870 spanning-tree forward-delay 871 spanning-tree hello-time 872 spanning-tree instance cost 872 spanning-tree instance port-priority 873 spanning-tree instance priority 874 spanning-tree instance vlan 875 spanning-tree link-type 876 spanning-tree loop-guard 877 spanning-tree max-age 878 spanning-tree max-hops 879 spanning-tree mode 880 spanning-tree port-priority 881 spanning-tree port-type 882 spanning-tree priority 883 spanning-tree root-guard 884 spanning-tree rpvst-filter 885 spanning-tree rpvst-guard 886 spanning-tree rpvst-mstp interconnect vlan 886 spanning-tree tcn-guard 887 spanning-tree transmit-hold-count 888 spanning-tree trap 888
MVRP commands 891 clear mvrp statistics 891 mvrp 891 mvrp registration 892 mvrp timer 893 show mvrp config 894 show mvrp state 895 show mvrp statistics 896
ND snooping commands 898 clear nd-snooping binding 898
Contents | 20
clear nd-snooping statistics 899 nd-snooping 899 nd-snooping (in config-vlan context) 900 nd-snooping mac-check 901 nd-snooping prefix-list 902 nd-snooping max-bindings 902 nd-snooping nd-guard 903 nd-snooping ra-guard 904 nd-snooping ra-drop 905 nd-snooping trust 906 show nd-snooping 907 show nd-snooping binding 908 show nd-snooping prefix-list 909 show nd-snooping statistics 910
Network Analytics Engine commands 911 show nae-agent 911 show nae-script 912 show running-config nae 914
NTP commands 915 ntp authentication 915 ntp authentication-key 915 ntp disable 917 ntp enable 917 ntp server 918 ntp trusted-key 920 ntp vrf 920 show ntp associations 921 show ntp authentication-keys 922 show ntp servers 923 show ntp statistics 923 show ntp status 924
OSPFv2 commands 926 area 926 area default-metric 927 area nssa 928 clear ip ospf neighbors 929 clear ip ospf statistics 929 default-information originate 930 default-information originate always 931 default-metric 932 disable 932 distance 933 enable 934 graceful-restart 934 ip ospf area 935 ip ospf authentication 936 ip ospf authentication-key 937 ip ospf cost 939 ip ospf dead-interval 939 ip ospf hello-interval 940 ip ospf keychain 941 ip ospf message-digest-key md5 942 ip ospf network 943
ip ospf passive 944 ip ospf priority 945 ip ospf retransmit-interval 946 ip ospf sha-key sha 946 ip ospf shutdown 948 ip ospf transit-delay 948 keychain 949 max-metric router-lsa 950 passive-interface default 951 redistribute 951 reference-bandwidth 953 rfc1583-compatibility 954 router ospf 955 router-id 955 sha-key sha 956 show ip ospf 958 show ip ospf border-routers 959 show ip ospf interface 960 show ip ospf lsdb 962 show ip ospf neighbors 966 show ip ospf routes 968 show ip ospf statistics 969 show ip ospf statistics interface 970 summary-address 972 timers lsa-arrival 973 timers throttle lsa 974 timers throttle spf 975 trap-enable 976
OSPFv3 commands 978 area 978 area authentication ipsec 979 area encryption ipsec 980 clear ipv6 ospfv3 neighbors 982 clear ipv6 ospfv3 statistics 983 default-metric 983 disable 984 distance 985 enable 986 default-information originate 986 default-information originate always 987 graceful-restart 988 ipv6 ospfv3 area 989 ipv6 ospfv3 authentication null 990 ipv6 ospfv3 authentication ipsec 990 ipv6 ospfv3 cost 991 ipv6 ospfv3 dead-interval 992 ipv6 ospfv3 encryption ipsec 993 ipv6 ospfv3 encryption null 995 ipv6 ospfv3 hello-interval 995 ipv6 ospfv3 network 996 ipv6 ospfv3 passive 997 ipv6 ospfv3 priority 998 ipv6 ospfv3 retransmit-interval 999 ipv6 ospfv3 shutdown 999 ipv6 ospfv3 transit-delay 1000
Contents | 22
maximum-paths 1001 max-metric router-lsa 1002 passive-interface default 1002 redistribute 1003 reference-bandwidth 1005 retransmit-interval 1005 router-id 1006 router ospfv3 1007 show ipv6 ospfv3 1008 show ipv6 ospfv3 border-routers 1009 show ipv6 ospfv3 interface 1010 show ipv6 ospfv3 neighbors 1012 show ipv6 ospfv3 routes 1014 show ipv6 ospfv3 statistics 1015 show ipv6 ospfv3 statistics interface 1016 summary-address 1018 timers lsa-arrival 1019 timers throttle lsa 1020 timers throttle spf 1021 transit-delay 1022 trap-enable 1023
PBR commands 1025 apply policy 1025 pbr-action-list 1026 pbr-action-list copy 1029 pbr-action-list resequence 1030 pbr-action-list reset 1031 policy 1031 show pbr 1034 show pbr-action-list 1035 show running-config current-context 1037
PIM-DM commands for IPv4 1039 disable 1039 enable 1039 ip pim-dense 1040 ip pim-dense graft-retry-interval 1041 ip pim-dense hello-delay 1042 ip pim-dense hello-interval 1042 ip pim-dense ip-addr 1043 ip pim-dense lan-prune-delay 1044 ip pim-dense max-graft-retries 1045 ip pim-dense override-interval 1046 ip pim-dense propagation-delay 1047 ip pim-dense ttl-threshold 1047 router pim 1048 show ip mroute 1049 show ip mroute group-addr 1051 show ip mroute brief 1052 show ip pim 1053 show ip pim interface 1054 show ip pim interface interface-name 1055 show ip pim interface interface-name counters 1056 show ip pim neighbor 1057 state-refresh-interval 1058
PIM-DM commands for IPv6 1060 disable 1060 enable 1060 ipv6 pim6-dense 1061 ipv6 pim6-dense graft-retry-interval 1062 ipv6 pim6-dense hello-delay 1062 ipv6 pim6-dense hello-interval 1063 ipv6 pim6-dense ipv6-addr 1064 ipv6 pim6-dense lan-prune-delay 1065 ipv6 pim6-dense max-graft-retries 1066 ipv6 pim6-dense override-interval 1067 ipv6 pim6-dense propagation-delay 1068 ipv6 pim6-dense ttl-threshold 1068 no ipv6 pim6-dense 1069 show ipv6 pim6 1070 show ipv6 pim6 interface 1071 show ipv6 pim6 interface interface-name 1072 show ipv6 mroute 1073 show ipv6 mroute brief 1074 show ipv6 mroute group-addr 1075 show ipv6 pim6 neighbor 1077 router pim6 1078 state-refresh-interval 1079
PIM-SM commands for IPv4 1080 accept-register access-list 1080 accept-rp 1081 active-active 1082 bsr-candidate bsm-interval 1083 bsr-candidate hash-mask-length 1084 bsr-candidate priority 1085 bsr-candidate source-ip-interface 1085 disable 1086 enable 1087 ip pim-sparse 1087 ip pim-sparse dr-priority 1088 ip pim-sparse hello-delay 1089 ip pim-sparse hello-interval 1090 ip pim-sparse ip-addr 1091 ip pim-sparse lan-prune-delay 1091 ip pim-sparse override-interval 1092 ip pim-sparse propagation-delay 1093 join-prune-interval 1094 multicast-route-limit 1095 no ip pim-sparse 1096 register-rate-limit 1096 router pim 1097 rp-address 1098 rp-candidate group-prefix 1099 rp-candidate hold-time 1100 rp-candidate priority 1100 rp-candidate source-ip-interface 1101 rpf-override 1102 show ip mroute 1103 show ip mroute brief 1105 show ip mroute group-addr 1106
Contents | 24
show ip pim 1107 show ip pim bsr 1108 show ip pim bsr elected 1109 show ip pim bsr local 1110 show ip pim interface 1111 show ip pim interface interface-name 1112 show ip pim interface interface-name counters 1113 show ip pim neighbor 1115 show ip pim pending 1115 show ip pim rp-candidate 1116 show ip pim rp-set 1117 show ip pim rp-set learned 1119 show ip pim rp-set static 1119 show ip pim rpf-override 1120 show ip pim rpf-override source 1121 sources-per-group 1122 spt-threshold 1123
PIM-SM commands for IPv6 1125 accept-register access-list 1125 accept-rp 1126 bsr-candidate bsm-interval 1127 bsr-candidate hash-mask-length 1128 bsr-candidate priority 1128 bsr-candidate source-ip-interface 1129 disable 1130 enable 1131 ipv6 pim6-sparse 1131 ipv6 pim6-sparse dr-priority 1132 ipv6 pim6-sparse hello-delay 1133 ipv6 pim6-sparse hello-interval 1134 ipv6 pim6-sparse ipv6-addr 1135 ipv6 pim6-sparse lan-prune-delay 1136 ipv6 pim6-sparse override-interval 1137 ipv6 pim6-sparse propagation-delay 1138 join-prune-interval 1139 no ipv6 pim6-sparse 1140 router pim6 1140 rp-address 1141 rp-candidate group-prefix 1142 rp-candidate hold-time 1143 rp-candidate priority 1144 rp-candidate source-ip-interface 1145 rpf-override 1146 show ipv6 mroute grorp-addr 1147 show ipv6 mroute 1149 show ipv6 mroute brief 1150 show ipv6 pim6 1151 show ipv6 pim6 bsr 1152 show ipv6 pim6 bsr elected 1153 show ipv6 pim6 bsr local 1154 show ipv6 pim6 interface interface-name 1155 show ipv6 pim6 interface 1156 show ipv6 pim6 neighbor 1157 show ipv6 pim6 pending 1158 show ipv6 pim6 rp-candidate 1159
show ipv6 pim6 rpf-override 1160 show ipv6 pim6 rpf-override source 1161 show ipv6 pim6 rp-set 1162 show ipv6 pim6 rp-set learned 1163 show ipv6 pim6 rp-set static 1164 spt-threshold 1165
Ping commands 1167 ping 1167 ping6 1172
PKI commands 1175 crypto pki application 1175 crypto pki certificate 1176 crypto pki ta-profile 1177 enroll self-signed 1178 enroll terminal 1179 import (CA-signed leaf certificate) 1180 import (self-signed leaf certificate) 1182 key-type 1183 ocsp disable-nonce 1184 ocsp enforcement-level 1185 ocsp url 1186 ocsp vrf 1187 revocation-check ocsp 1188 show crypto pki application 1188 show crypto pki certificate 1189 show crypto pki ta-profile 1191 ta-certificate 1193 subject 1194
PKI EST commands 1196 arbitrary-label 1196 arbitrary-label-enrollment 1197 arbitrary-label-reenrollment 1198 crypto pki est-profile 1199 enroll est-profile 1200 reenrollment-lead-time 1201 retry-count 1202 retry-interval 1203 show crypto pki est-profile 1203 url 1204 username 1206 vrf 1207
PoE commands 1209 lldp dot3 poe 1209 lldp med poe 1209 power-over-ethernet 1210 power-over-ethernet allocate-by 1211 power-over-ethernet always-on 1212 power-over-ethernet assigned-class 1213 power-over-ethernet pre-std-detect 1214 power-over-ethernet priority 1214 power-over-ethernet quick-poe 1215 power-over-ethernet threshold 1216
Contents | 26
power-over-ethernet trap 1217 show lldp local 1217 show lldp neighbor 1218 show power-over-ethernet 1219
Port access general commands 1224 aaa authentication port-access auth-mode 1224 aaa authentication port-access auth-precedence 1225 aaa authentication port-access auth-priority 1226 aaa authentication port-access client-limit 1227 aaa authentication port-access client-limit multi-domain 1228 aaa authentication port-access radius-override 1228 aaa authentication port-access (role) 1230 port-access allow-flood-traffic 1231 port-access auto-vlan 1231 port-access client-move 1232 port-access fallback-role 1233 port-access log-off client 1234 port-access onboarding-method precedence 1235 port-access onboarding-method concurrent 1236 port-access reauthenticate interface 1237 show aaa authentication port-access interface client-status 1238 show port-access clients 1240 show port-access clients detail 1242 show port-access clients onboarding-method 1245
Port access 802.1X authentication commands 1247 aaa authentication port-access dot1x authenticator 1247 aaa authentication port-access dot1x authenticator auth-method 1248 aaa authentication port-access dot1x authenticator cached-reauth 1249 aaa authentication port-access dot1x authenticator cached-reauth-period 1249 aaa authentication port-access dot1x authenticator discovery-period 1250 aaa authentication port-access dot1x authenticator eapol-timeout 1251 aaa authentication port-access dot1x authenticator max-eapol-requests 1252 aaa authentication port-access dot1x authenticator max-retries 1253 aaa authentication port-access dot1x authenticator quiet-period 1254 aaa authentication port-access dot1x authenticator radius server-group 1255 aaa authentication port-access dot1x authenticator reauth 1255 aaa authentication port-access dot1x authenticator reauth-period 1256 clear dot1x authenticator statistics interface 1257 show aaa authentication port-access dot1x authenticator interface client-status 1258 show aaa authentication port-access dot1x authenticator interface port-statistics 1259
Port access MAC authentication commands 1262 aaa authentication port-access mac-auth 1262 aaa authentication port-access mac-auth addr-format 1263 aaa authentication port-access mac-auth auth-method 1263 aaa authentication port-access mac-auth cached-reauth 1264 aaa authentication port-access mac-auth cached-reauth-period 1265 aaa authentication port-access mac-auth password 1266 aaa authentication port-access mac-auth quiet-period 1266 aaa authentication port-access mac-auth radius server-group 1267 aaa authentication port-access mac-auth reauth 1268 aaa authentication port-access mac-auth reauth-period 1269 clear mac-auth statistics 1269 show aaa authentication port-access mac-auth interface client-status 1270
show aaa authentication port-access mac-auth interface port-statistics 1272
Port access policy commands 1274 port-access policy 1274 port-access policy copy 1278 port-access policy resequence 1279 port-access policy reset 1280 clear port-access policy hitcounts 1281 show port-access policy 1283 show port-access policy hitcounts 1285
Port access role commands 1287 associate captive-portal-profile 1287 associate policy 1288 auth-mode 1288 cached-reauth-period 1290 client-inactivity timeout 1290 description 1291 device-traffic-class 1292 gateway-zone zone gateway-role 1293 mtu 1293 poe-priority 1294 port-access role 1295 reauth-period 1296 session timeout 1296 show aaa authentication port-access interface client-status 1297 show port-access role 1298 stp-admin-edge-port 1300 trust-mode 1301 vlan 1302
Port access security violation commands 1305 port-access security violation action 1305 port-access security violation action shutdown auto-recovery 1306 port-access security violation action shutdown recovery-timer 1307 show interface 1307 show port-access aaa violation interface 1308 show port-access port-security violation client-limit-exceeded interface 1309
Port access VLAN group commands 1311 associate-vlan 1311 port-access vlan-group 1312 show running-config port-access vlan-group 1312
Port filtering commands 1314 portfilter 1314 show portfilter 1315
Port security commands 1317 port-access port-security 1317 port-access port-security client-limit 1317 port-access port-security mac-address 1318 show port-access port-security interface client-status 1319 show port-access port-security interface port-statistics 1320 show port-access security violation sticky-mac-client-move interface 1321
Contents | 28
Private VLAN commands 1324 diagnostics 1324 private-vlan 1324 private-vlan port-type 1326 show capacities private-vlan 1327 show capacities-status private-vlan 1327 show private-vlan 1328 show private-vlan association 1329 show private-vlan inconsistency 1330 show private-vlan port-type 1332 show running-configuration private-vlan 1332 show tech private-vlan 1333
QoS commands 1336 apply qos 1336 dwrr queue 1338 map queue 1339 min-bandwidth 1340 name queue 1341 qos cos 1342 qos cos-map 1343 qos dscp 1344 qos dscp-map 1345 qos queue-profile 1347 qos schedule-profile 1348 qos shape 1349 qos trust 1350 rate-limit 1352 show interface queues 1353 show interface qos 1355 show qos cos-map 1356 show qos dscp-map 1357 show qos queue-profile 1358 show qos schedule-profile 1359 show qos trust 1360 strict queue 1361
Configurable RADIUS attribute commands 1363 aaa radius-attribute group 1363 nas-id request-type 1363 nas-id value 1364 tunnel-private-group-id request-type 1365 tunnel-private-group-id value 1366
RADIUS dynamic authorization commands 1368 radius dyn-authorization enable 1368 radius dyn-authorization client 1368 radius dyn-authorization client tls (RadSec) 1370 radius dyn-authorization port 1371 show radius dyn-authorization 1371 show radius dyn-authorization client 1373 show radius dyn-authorization client tls (RadSec) 1375
Remote AAA (TACACS+, RADIUS) commands 1377 aaa accounting all-mgmt 1377 aaa accounting port-access (RADIUS only) 1379 aaa authentication allow-fail-through 1381 aaa authentication login 1381 aaa authorization commands 1383 aaa group server 1386 radius-server auth-type 1387 radius-server host 1388 radius-server host (ClearPass) 1391 radius-server host secure ipsec 1392 radius-server host tls (RadSec) 1397 radius-server key 1400 radius-server retries 1401 radius-server timeout 1401 radius-server tls timeout (RadSec) 1402 radius-server tracking 1403 server 1405 show aaa accounting 1407 show aaa accounting port-access (RADIUS only) 1409 show aaa authentication 1410 show aaa authorization 1412 show aaa server-groups 1413 show accounting log 1415 show accounting log port-access 1418 show radius-server 1419 show radius-server secure ipsec 1422 show radius-server statistics 1423 show radius-server statistics host 1424 show tacacs-server 1426 show tacacs-server statistics 1428 show tech aaa 1429 tacacs-server auth-type 1432 tacacs-server host 1433 tacacs-server key 1435 tacacs-server timeout 1436 tacacs-server tracking 1437
Remote syslog commands 1440 logging 1440 logging filter 1442 logging facility 1445 logging persistent-storage 1446
RIPv2 (IPv4) commands 1448 Configuration commands 1448
router rip 1448 Interface commands 1449
ip rip 1449 ip rip all-ip enable 1450 ip rip all-ip disable 1450 ip rip all-ip send disable 1451 ip rip all-ip receive disable 1452
Routing commands 1453 enable 1453 disable 1453
Contents | 30
distance 1454 maximum-paths 1455 redistribute 1455 timers update 1456
RIPv2 clear commands 1457 clear ip rip statistics 1457
RIPv2 interface commands 1458 enable 1458 disable 1459 send disable 1460 receive disable 1460
RIPv2 show commands 1461 show capacities rip 1461 show capacities-status rip 1462 show ip rip 1463 show ip rip interface 1464 show ip rip neighbors 1465 show ip rip routes 1466 show ip rip statistics 1467 show ip rip statistics interface 1468 show running-config 1469
RIPng (IPv6) commands 1471 Configuration commands 1471
router ripng 1471 Interface commands 1472
ipv6 ripng 1472 Routing commands 1472
enable 1472 disable 1473 distance 1474 maximum-paths 1475 redistribute 1475 timers update 1476
RIPng clear commands 1477 clear ipv6 ripng statistics 1477
RIPng interface commands 1478 enable 1478 disable 1479 send disable 1479 receive disable 1480
RIPng show commands 1481 show capacities ripng 1481 show capacities-status ripng 1481 show ipv6 ripng 1482 show ipv6 ripng interface 1483 show ipv6 ripng neighbors 1484 show ipv6 ripng routes 1485 show ipv6 ripng statistics 1487 show ipv6 ripng statistics interface 1488 show running-config 1489
RPVST+ commands 1491 show spanning-tree 1491 show spanning-tree inconsistent-ports 1493 show spanning-tree summary port 1494
show spanning-tree summary root 1495 show spanning-tree vlan 1496 spanning-tree bpdu-guard timeout 1498 spanning-tree extend-system-id 1498 spanning-tree ignore-pvid-inconsistency 1499 spanning-tree link-type 1500 spanning-tree mode 1501 spanning-tree pathcost-type 1502 spanning-tree rpvst-mstp interconnect vlan 1503 spanning-tree tcn-guard 1504 spanning-tree vlan 1505 spanning-tree vlan cost 1506 spanning-tree vlan port-priority 1507 spanning-tree trap 1508
Runtime diagnostic commands 1510 diagnostic monitor 1510 diag on-demand 1511 show diagnostic 1512 show diagnostic events 1512
Selftest commands 1514 fastboot 1514 show selftest 1515
sFlow agent commands 1518 clear sflow statistics 1518 sflow 1518 sflow agent-ip 1520 sflow collector 1521 sflow disable 1521 sflow header-size 1522 sflow max-datagram-size 1523 sflow mode 1523 sflow polling 1524 sflow sampling 1525 show sflow 1526
SNMP commands 1528 event-trap-enable 1528 lldp trap enable 1528 mac-notify traps 1531 rmon alarm 1532 rmon alarm {enable | disable} {index | all} 1533 show mac-notify 1534 show mac-notify port 1535 show rmon alarm 1536 show snmp agent-port 1537 show snmp community 1538 show snmp system 1539 show snmp trap 1539 show snmp vrf 1540 show snmpv3 context 1540
1541 show snmpv3 engine-id 1541 show snmpv3 security-level 1542
Contents | 32
SSH client commands 1573 ssh (client login) 1573
SSH server commands 1575 show ssh host-key 1575 show ssh server 1576 show ssh server sessions 1579 ssh ciphers 1580 ssh host-key 1581 ssh host-key-algorithms 1582 ssh key-exchange-algorithms 1583 ssh known-host remove 1585 ssh macs 1586 ssh maximum-auth-attempts 1587 ssh public-key-algorithms 1587 ssh server vrf 1589
Static routing commands 1590 ip route 1590 ip route tag 1591 ipv6 route 1592 ipv6 route distance 1593 show ipv4 rib 1594 show ipv6 rib 1596
Supportability copy commands 1599 copy checkpoint 1599 copy command-output 1600 copy core-dump [<MEMBER/SLOT>] daemon 1601
copy core-dump [<MEMBER/SLOT>] kernel 1602 copy core-dump vsf member daemon 1603 copy core-dump vsf member kernel 1604 copy diag-dump feature <FEATURE> 1605 copy diag-dump local-file 1606 copy diag-dump vsf member local-file 1608 copy <IMAGE> 1609 copy running-config 1610 copy show-tech feature 1611 copy show-tech local-file 1612 copy show-tech vsf member local-file 1613 copy startup-config 1614 copy support-files 1615 copy support-files local-file 1617 copy support-files vsf member 1618 copy support-log 1619 copy support-log vsf member 1621
Switch system and hardware commands 1623 bluetooth disable 1623 bluetooth enable 1623 clear events 1624 clear ip errors 1625 console baud-rate 1626 domain-name 1627 hostname 1627 led locator 1628 mtrace 1629 show bluetooth 1630 show boot-history 1632 show capacities 1634 show capacities-status 1635 show console 1635 show core-dump 1636 show domain-name 1638 show environment fan 1638 show environment led 1640 show environment power-supply 1640 show environment temperature 1642 show events 1643 show hostname 1646 show images 1647 show ip errors 1648 show module 1649 show running-config 1650 show running-config current-context 1653 show startup-config 1655 show system 1656 show system resource-utilization 1657 show tech 1658 show usb 1659 show usb file-system 1660 show version 1662 system resource-utilization poll-interval 1662 top cpu 1663 top memory 1664
Contents | 34
usb 1664 usb mount | unmount 1665
Terminal monitor commands 1667 logging console {notify | severity | filter} 1667 show terminal-monitor 1668 terminal-monitor {notify | severity | filter} 1669
Traceroute commands 1671 traceroute 1671 traceroute6 1673
UDLD commands 1676 clear udld statistics 1676 show udld 1676 udld 1678 udld interval 1679 udld mode 1681 udld retries 1682
UDP commands 1684 ip forward-protocol udp 1684 ip udp-bcast-forward 1685 show ip forward-protocol udp 1685
User and group commands 1688 user 1688 user-group 1690 user password 1694 service export-password 1695 show user-group 1696 show user information 1698 show user-list 1699
User-based tunneling commands 1701 backup-controller ip 1701 enable 1701 ip source-interface 1702 papi-security-key 1703 primary-controller ip 1705 sac-heartbeat-interval 1705 show ip source-interface ubt 1706 show capacities ubt 1707 show ubt 1707 show ubt information 1709 show ubt state 1711 show ubt statistics 1714 show ubt users 1718 uac-keepalive-interval 1720 ubt 1721 ubt-client-vlan 1722 ubt mode vlan-extend 1723
VLAN commands 1725 description 1725
vlan name 1725 show capacities-status vlan-count 1726 show capacities svi-count 1727 show capacities vlan-count 1727 show capacities-status vlan-translation 1728 show system internal-vlan-range 1729 show vlan 1729 show vlan port 1730 show vlan summary 1733 show vlan voice 1734 shutdown 1735 system internal-vlan-range 1735 system vlan-client-presence-detect 1737 trunk-dynamic-vlan-include 1737 vlan 1738 vlan access 1739 vlan protocol 1740 vlan translate 1742 vlan trunk allowed 1743 vlan trunk native 1744 vlan trunk native tag 1746 voice 1747
VRRP commands 1748 address 1748 authentication 1749 preempt 1751 preempt delay minimum 1752 priority 1752 router vrrp {enable | disable} 1753 no router vrrp 1754 show track 1755 show track brief 1755 show vrrp 1756 shutdown 1762 timers advertise 1763 track (VRRP group) 1764 track (VRRP virtual router) 1765 track by 1765 version 1766 vrrp 1767
VSF Commands 1769 vsf member 1769 member 1770 type 1771 link 1772 vsf force-auto-join 1774 vsf start-auto-stacking 1775 vsf split-detect 1776 vsf secondary-member 1777 vsf renumber-to 1778 vsf member reboot 1779 interface 1780 shutdown 1780 show vsf 1781
Contents | 36
show vsf detail 1782 show vsf link 1783 show vsf link detail 1784 show vsf link error-detail 1786 show vsf link error-detail member 1787 show vsf member 1788 show vsf topology 1789
VXLAN commands 1790 interface vxlan 1790 routing 1790 show interface vxlan1 1791 show interface vxlan vni 1792 show interface vxlan vteps 1794 shutdown 1795 source ip 1796 vlan 1797 vni 1798 vrf 1799 vtep-peer 1800 vxlan-counters aggregate 1801
Zeroization commands 1802 erase all zeroize 1802
ZTP commands 1804 show ztp information 1804 ztp force provision 1807
Support and Other Resources 1809 Accessing Aruba Support 1809 Accessing Updates 1809
Aruba Support Portal 1809 My Networking 1810
Warranty Information 1810 Regulatory Information 1810 Documentation Feedback 1810
Chapter 1 About this document
About this document This document describes features of the AOS-CX network operating system. It is intended for administrators responsible for installing, configuring, and managing Aruba switches on a network.
Applicable products This document applies to the following products:
n Aruba 6200 Switch Series (JL724A, JL725A, JL726A, JL727A, JL728A)
Latest version available online Updates to this document can occur after initial publication. For the latest versions of product documentation, see the links provided in Support and Other Resources.
Command syntax notation conventions
Convention Usage
example-text Identifies commands and their options and operands, code examples, filenames, pathnames, and output displayed in a command window. Items that appear like the example text in the previous column are to be entered exactly as shown and are required unless enclosed in brackets ([ ]).
example-text In code and screen examples, indicates text entered by a user.
Any of the following: n <example-text> n <example-text> n example-text
n example-text
Identifies a placeholder—such as a parameter or a variable—that you must substitute with an actual value in a command or in code:
n For output formats where italic text cannot be displayed, variables are enclosed in angle brackets (< >). Substitute the text—including the enclosing angle brackets—with an actual value.
n For output formats where italic text can be displayed, variables might or might not be enclosed in angle brackets. Substitute the text including the enclosing angle brackets, if any, with an actual value.
| Vertical bar. A logical OR that separates multiple items from which you can choose only one. Any spaces that are on either side of the vertical bar are included for readability and are not a required part of the command syntax.
{ } Braces. Indicates that at least one of the enclosed items is required.
[ ] Brackets. Indicates that the enclosed item or items are optional.
About this document | 38
… or ...
Ellipsis: n In code and screen examples, a vertical or horizontal ellipsis indicates an
omission of information. n In syntax using brackets and braces, an ellipsis indicates items that can be
repeated. When an item followed by ellipses is enclosed in brackets, zero or more items can be specified.
About the examples Examples in this document are representative and might not match your particular switch or environment.
The slot and port numbers in this document are for illustration only and might be unavailable on your switch.
Understanding the CLI prompts When illustrating the prompts in the command line interface (CLI), this document uses the generic term switch, instead of the host name of the switch. For example: switch>
The CLI prompt indicates the current command context. For example: switch>
Indicates the operator command context. switch#
Indicates the manager command context. switch(CONTEXT-NAME)#
Indicates the configuration context for a feature. For example: switch(config-if)#
Identifies the interface context.
Variable information in CLI prompts In certain configuration contexts, the prompt may include variable information. For example, when in the VLAN configuration context, a VLAN number appears in the prompt: switch(config-vlan-100)#
When referring to this context, this document uses the syntax: switch(config-vlan-<VLAN-ID>)#
Where <VLAN-ID> is a variable representing the VLAN number.
Identifying switch ports and interfaces Physical ports on the switch and their corresponding logical software interfaces are identified using the format: member/slot/port
On the 6200 Switch Series
n member: Member number of the switch in a Virtual Switching Framework (VSF) stack. Range: 1 to 8. The primary switch is always member 1. If the switch is not a member of a VSF stack, then member is 1.
n slot: Always 1. This is not a modular switch, so there are no slots. n port: Physical number of a port on the switch.
For example, the logical interface 1/1/4 in software is associated with physical port 4 in slot 1 on member 1.
Chapter 2 Introduction to the AOS-CX CLI
Introduction to the AOS-CX CLI
CLI access Access the CLI through the following interfaces:
Console port Connect the management port on the switch to your computer using a serial cable and then use terminal emulation software to reach the switch from the computer. Typically, the console port is used when first installing the switch and performing initial configuration tasks.
Management port (out-of-band connection) Connect the management port on the switch to your network, and then use SSH client software to reach the switch from a computer connected to the same network. This requires that a DHCP server is installed on the network. In the switch factory default state, the management port and SSH on the management VRF (mgmt) are enabled.
Data port (in-band connection) Connect a data port on the switch to your network, and then use SSH client software to reach the switch from a computer connected to the same network. Management traffic ingresses and egresses switch data ports with rest of the traffic on the network, therefore it can be affected by traffic congestion and other issues impacting the network.
Getting CLI help To show the available commands that you can execute in the current command context, enter the ? symbol.
For example:
switch# ? boot Reboot all or part of the system checkpoint Checkpoint information
switch#
The ? symbol does not display on the screen when you enter it.
The commands that are available to you depend on your authority and the command context. In a given command context, you can only list and execute the commands available in that context.
To show the available parameters for a command, enter the command followed by a space and then enter the ? symbol.
For example:
Introduction to the AOS-CX CLI | 41
switch(config)# access-list ? all All access-lists ip Internet Protocol v4 (IPv4) ipv6 Internet Protocol v6 (IPv6) log-timer Set ACL log timer length (frequency) mac Ethernet MAC Protocol
switch(config)# access-list
After the CLI displays the information, it automatically displays the text you entered before you entered the ? symbol.
If there is no <cr> symbol at the end the command help output, the command is not complete as displayed. You must specify one of the listed parameters.
The <cr> symbol alone in the command help output indicates that there are no additional parameters and that you must press the enter key to complete the command. For example:
switch# list ? <cr>
switch# list
The <cr> symbol at the end of the command help output indicates that the parameters preceding the <cr>
are optional and you can enter the command as is displayed. For example:
switch# configure ? terminal Configuration terminal (default) <cr>
switch# configure
To show information about a parameter for a command, enter the command and parameter followed by a space, then enter the ? symbol.
For example:
switch(config)# access-list log-timer
Authority levels In command descriptions, the authority level indicates the user role that is required to execute a command:
Administrators Users with the role: administrators Users with administrator rights can execute any command.
Operators Users with the role: operators. Users with operator rights can execute commands in the operator context (>) only.
Auditors Users with the role: auditors.
Users with auditor rights can execute commands in the auditor context (auditor>) only.
Local user group members with execution rights for a command You can create up to 29 user-defined local user groups on the switch. Each group can be defined to allow execution of up to 1024 specific CLI commands.
Command contexts The command context determines the following:
n Which parts of the switch can be managed n Which commands are available to users with the appropriate authority
Command contexts have a parent-child tree structure in which contexts might themselves contain nested contexts.
Operator context (>) The operator context enables you to execute commands to view—but not change—the configuration.
The operator context requires the least user privilege to execute commands.
In command descriptions, this context is listed as: Operator (>)
Switch prompt example switch>
Authority Operators or Administrators
Showing the available commands in this context At the command prompt, enter the ? symbol.
Navigating to the operator context (>) To navigate to the operator command context (>), do one of the following:
n Log in to the switch CLI with a user ID that has the operator-group role. n From the manager context (#), enter the disable command.
Auditor context When you log in to the switch as user with auditor rights, you have access to the auditor command context only.
Users with auditor rights have access to a limited set of commands. for more information about auditors, see the Security Guide for your switch and software version.
Switch prompt example auditor>
Manager context (#) From the manager context (#), you can execute commands that do not require saving changes to the configuration.
In command descriptions, this context is listed as: Manager (#)
Switch prompt example switch#
Authority Administrators or local user group members with execution rights for this command.
Access to manager context commands from descendant contexts The do command enables you to access commands from the manager context while you are in a child or descendent context, such as config or config-if.
For example, to execute the clear command from the config context, enter the following: do clear.
The show command can be executed from configuration contexts as well as the manager context, so using the do command with the show command is deprecated. Support for do show might be discontinued in a future software release.
Navigating to the manager context (#) To navigate to the manager command context (#), do one of the following:
n Log in to the switch CLI with a user ID that has the administrators role. n From the operator context (>), enter the enable command.
You must have administrator authority to enter the enable command.
switch> enable switch#
n From the configuration context (config), enter either the exit or the end command. For example:
switch(config)# exit switch#
n From any child or descendent context, enter the end command. For example:
switch(config-vlan-100)# end switch#
Global configuration context (config)
From the global configuration context (config), you can execute commands that change the configuration of the switch.
In command descriptions, this context is listed as: config
Switch prompt example switch(config)#
You can use the do command to execute some manager context commands—such as the clear command— from the global configuration context.
Navigating to the config context To navigate to the config command context, do one of the following:
n From the manager context (#), enter the configure terminal command:
switch# configure terminal switch(config)#
n From a child configuration context, enter the exit command. For example:
switch(config-vlan-100)# exit switch(config)#
Other configuration command contexts All other configuration command contexts are descendants of the global configuration command context (config).
From these command contexts, you can execute commands that apply to that specific context, such as an interface or a VLAN.
Switch prompt examples
n switch(config-if)#
n switch(config-router)#
n switch(config-vlan-100)#
Support for range contexts Some switch features enable you to use a single command to apply configuration settings to multiple items. You specify the multiple items by creating a type of command context called a range context. Then you can execute commands that are applied to every item in the range. For example:
switch(config)# interface 1/1/1-1/1/5 switch(config-if-<1/1/1-1/1/5>)# no shutdown
You can use a range context to specify multiple items for the following:
Physical interfaces
n Switch prompt example: switch(config-if-<1/1/1-1/1/8,1/1/10,1/1/12>)#
LAG interfaces
Loopback interfaces
VLAN interfaces
VLANs
n Switch prompt example: switch(config-vlan-<1-10,15,20-25>)#
Commands entered in a range context are applied to each item in the range individually:
n Each item in the range has its own entry in the output of show running-config commands. For example, you can configure a range of interfaces as follows:
switch(config)# interface 1/1/1-1/1/5 switch(config-if-<1/1/1-1/1/5>)# no shutdown
In the output for the show running-config command, the interfaces are displayed individually:
switch(config-if-<1/1/1-1/1/5>)# show running-config Current configuration: ... interface 1/1/1
no shutdown interface 1/1/2
no shutdown ... switch(config-if-<1/1/1-1/1/5>)#
n If you specify a range context for interfaces, you cannot execute commands that create a context within the range context. For example, you cannot execute the vrrp command from an interface range context, even though you can execute the command from the config-if context for a single interface.
n If error is encountered during the execution of a command for an item in the range, the error message returned includes a prefix that identifies the item to which the error applies. However command execution does not stop until the command is attempted on all the items in the range.
n The range context is created only if every item in the range is successfully created or already exists in configuration. If an error occurs during the creation of an item in a range, the items that are created successfully are added to the configuration, but the range context is not created. The switch prompt. For example, in the following sequence:
1. VLANs 1 through 100 are created successfully, so the switch prompt reflects the range of VLANs: switch(config-vlan-<1-100>)#
2. The command interface vlan 95-105 fails for VLANs 101 through 105, so the range context is not created and the switch prompt remains in the global configuration context: switch(config)#
3. The configuration includes all the VLANs and VLAN interfaces that are created successfully.
switch(config)# vlan 1-100 switch(config-vlan-<1-100>)# exit switch(config)# interface vlan 95-105 VLAN 101 should be created before creating interface VLAN101. VLAN 102 should be created before creating interface VLAN102. VLAN 103 should be created before creating interface VLAN103. VLAN 104 should be created before creating interface VLAN104. VLAN 105 should be created before creating interface VLAN105. switch(config)# show running-config Current configuration: ... vlan 1-100 interface vlan95 interface vlan96 interface vlan97 interface vlan98 interface vlan99 interface vlan100 ... switch(config)#
n If the no form of the command can be used to remove an item from the configuration, you can use a range context with the no form of the command to remove multiple items from the configuration. For example, you can remove VLANs 95 through 100 from the configuration by entering: no vlan 95- 100
Rules for range contexts
For interfaces that use the member/slot/port notation, items in the range must be specified in ascending order.
Contiguous items in the range are represented by the smallest and largest values separated by a hyphen.
For example:
Noncontiguous items in the range must be separated by commas.
For example:
The switch prompt is truncated to 50 characters.
Command history You can use the up arrow key or Ctrl+P to display the previous command in the session history, if any.
You can use the down arrow key or Ctrl+N to display the next command in the session history, if any.
You can use the show history command to show a numbered list of the commands executed during this session. You use the command numbers to specify commands to repeat using the repeat command. The show history and repeat commands are not saved in the history buffer.
The commands saved in the history command buffer are in the same format in which you entered the commands. If you enter an incomplete command, the command saved in the history command buffer is also an incomplete one.
If you execute the same command repeatedly, the switch saves only the earliest record. However, if you execute the same command in different formats, the switch saves them as different commands.
For example, if you execute the show startup-config command repeatedly, the system saves only one command in the history command buffer. If you execute the command in the format of show start and show startup respectively, the system saves them as two commands.
Command completion The CLI supports both command abbreviation and command completion:
n If you enter enough letters to match a valid command, the CLI accepts the command. For example, you can enter con instead of configure to navigate from the manager context to the global configuration context.
switch# con switch(config)#
n If you enter part of a command word and then the press the Tab key, one of the following occurs: o If you have entered enough letters to match a valid command, the CLI displays the remainder of the
word. o If you have not entered enough letters to match a valid command, the CLI does not complete the
command.
If you press the Tab key a second time, the CLI displays commands that match the letters you entered.
For example:
switch(config)# cl class clear clock switch(config)# cl
n If you press the Tab key twice after a completed word, the CLI displays the command options. For example, if you enter the word clock followed by a space and then press the Tab key twice, the CLI displays the commands available in that command context that start with that word, and then displays the prompt—including the characters you entered—enabling you to complete the command without retyping.
switch(config)# clock date datetime time timezone switch(config)# clock
Pipe (|) support in show commands The pipe (|) command is a CLI session command that filters the output of show show commands according to the criteria specified by the parameter include, exclude, count, begin, or redirect.
n The pipe (|) command is supported for use with the show command only. n You can use multiple pipe commands with a single show command.
For example: show running-config | include "vlan" | exclude "vlan2" | count
n You can use the pipe command with the page command. n Command completion by pressing the Tab key is not supported for pipe commands.
Command syntax notation conventions
Convention Usage
example-text Identifies commands and their options and operands, code examples, filenames, pathnames, and output displayed in a command window. Items that appear like the example text in the previous column are to be entered exactly as shown and are required unless enclosed in brackets ([ ]).
example-text In code and screen examples, indicates text entered by a user.
Convention Usage
Any of the following: n <example-text> n <example-text> n example-text
n example-text
Identifies a placeholder—such as a parameter or a variable—that you must substitute with an actual value in a command or in code: n For output formats where italic text cannot be
displayed, variables are enclosed in angle brackets (< >). Substitute the text—including the enclosing angle brackets—with an actual value.
n For output formats where italic text can be displayed, variables might or might not be enclosed in angle brackets. Substitute the text including the enclosing angle brackets, if any, with an actual value.
| Vertical bar. A logical OR that separates multiple items from which you can choose only one. Any spaces that are on either side of the vertical bar are included for readability and are not a required part of the command syntax.
{ } Braces. Indicates that at least one of the enclosed items is required.
[ ] Brackets. Indicates that the enclosed item or items are optional.
… or ...
Ellipsis: n In code and screen examples, a vertical or horizontal
ellipsis indicates an omission of information. n In syntax using brackets and braces, an ellipsis
indicates items that can be repeated. When an item followed by ellipses is enclosed in brackets, zero or more items can be specified.
Chapter 3 Service OS CLI commands
Service OS CLI commands
boot boot
Description Presents you with the boot menu prompt. You can then specify which boot profile: primary, secondary, or Service OS console.
Example Presenting the boot menu prompt:
SVOS> boot
Boot Profiles:
0. Service OS Console 1. Primary Software Image [ML.10.06.0001] 2. Secondary Software Image [ML.10.07.0001E]
Select profile(primary):
Command History
Release Modification
Platforms Command context Authority
All platforms ServiceOS (SVOS>) Administrators or local user group members with execution rights for this command.
cat cat <FILENAME/DIRECTORY-NAME>
Service OS CLI commands | 51
Prints the contents of a file to the console. The Service OS does not allow command output redirection, so this command is only useful for reading short text files.
Parameter Description
<FILENAME/DIRECTORY-NAME> Shows the contents of the specified file or directory.
Example Showing the contents of /nos/hosts:
SVOS> cat /nos/hosts 127.0.0.1 localhost.localdomain localhost
SVOS>
cd path cd path
cd /
config-clear config-clear
Description Configures the switch to set all configuration settings to factory default when the switch is restarted. The next time the switch starts, the current startup-config is renamed to startup-config-fixme, and a new startup-config is created with factory default settings.
Using this command is not the same as performing zeroization, which securely erases the entire primary storage and other devices, and not just the configuration.
Example Configuring the system to clear the switch configuration:
SVOS> config-clear
The switch configuration will be cleared.
Continue (y/n)? y The system has been configured to clear the startup-config on the next boot. Please execute the 'boot' command to complete this action. SVOS>
Command History
cp cp [options] <SOURCE-FILENAME/SOURCE-DIRECTORY> <DESTINATION-FLENAME/DESTINATION-DIRECTORY>
-d,-P Specifies the preservation of symlinks (default if -R).
-a Same as -dpR.
-L Specifies the following of all symlinks.
-H Specifies the following of symlinks on command line.
-p Specifies the preservation of file attributes if possible.
-f Specifies the overwriting of a file or directory.
-i Specifies the prompting before an overwrite.
-l,-s Specifies the creation of (sym) links.
<SOURCE-FILENAME/SOURCE-DIRECTORY> Specifies the name of the source file or directory.
<DESTINATION-FLENAME/DESTINATION-DIRECTORY> Specifies the name of the destination file or directory.
Example Copying /home/customers directory to the /home/clients directory:
SVOS> cp /home/customers /home/clients
du du [options] <FILENAME/DIRECTORY-NAME>...
Description Shows estimated disk space used for each file or directory or both.
-a Show file sizes.
-L Shows all symlinks.
-H Shows symlinks on a command line.
-d, N Shows limited output to directories (and files with -a) of depth less than N.
-c Shows the total disk space usage of all files or directories or both.
-l Shows the count sizes if hard linked.
-s Shows only a total for each argument.
-x Does not show directories on different file systems.
-h Show sizes in human readable format (1K, 243M, and 2G).
-m Show sizes in megabytes.
-k Show sizes in kilobytes (default).
<FILENAME/DIRECTORY-NAME> Specifies the file or directory or both for displaying a size estimate.
Example Estimating disk space for the /nos directory:
SVOS> du -ah /nos 196.4M /nos/primary.swi 196.4M /nos SVOS>
Command History
erase zeroize erase zeroize
Description Securely erases any user data contained on the SSD or other storage devices on the management module.
Back up all data before running this command or all user/config data will be lost.
Example Erasing user data:
Securely erases storage devices on the management module. SVOS> ```
``` SVOS> erase zeroize ############################WARNING############################ This will securely erase all customer data and reset the switch to factory defaults. This will initiate a reboot and render the switch unavailable until the zeroization is complete. This should take several minutes to one hour to complete. ############################WARNING############################
Continue (y/n)? y reboot: Restarting system
ServiceOS Information: Version: ML.01.07.0001-internal Build Date: 2020-09-02 11:53:34 PDT Build ID: ServiceOS:ML.01.07.0001-internal:64dfa8c99840:202009021153 SHA: 64dfa8c998408ec69d835a070f57aad610bc0383
################ Preparing for zeroization #################
################ Storage zeroization ####################### ################ WARNING: DO NOT POWER OFF UNTIL ########## ################ ZEROIZATION IS COMPLETE ########## ################ This should take several minutes ########## ################ to one hour to complete ##########
################ Restoring files ###########################
Command History
exit exit
SVOS> exit
RESTRICTED RIGHTS LEGEND Confidential computer software. Valid license from Hewlett Packard Enterprise Development LP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
To reboot without logging in, enter 'reboot' as the login user name.
ServiceOS login:
Command History
format format
Description Configures the primary storage device with the correct partition and file system formatting. This command removes all pre-existing data on the primary storage device.
Example Configuring the primary storage device with the correct partition and file system formatting:
SVOS> format ##################WARNING#################### The following action will cause all data on
the primary storage device to be lost. After formatting has completed, a reboot will be initiated to complete storage initialization. ##################WARNING####################
Continue? (y/n): y
Command History
identify identify
Description Prints the version of the SVOS and of the UEFI BIOS.
Command History
ip ip {show | dhcp | disable | addr <ADDR-NETMASK-GATEWAY>}
Description Shows or configures the port with a static IP address (IPv4 only) or enables the DHCP client on the port. An address is set only if a DHCP server is available to provide one.
{show | dhcp | disable | addr <ADDR-NETMASK-GATEWAY>} Selects the options for the OOBM port.
show Shows the OOBM port.
dhcp Configures the port with a DHCP address.
disable Disables the OOBM port.
addr <ADDR-NETMASK-GATEWAY> Configures the port with a static IP address (IPv4 only). Specify address, netmask, and gateway as A.B.C.D.
Example Configuring the port with a DHCP IP address:
SVOS> ip dhcp SVOS> ip show Interface : Link Up IP Address : 10.0.26.17 Subnet Mask: 255.255.252.0 Gateway : 10.0.24.1
SVOS> ip disable SVOS> ip show Interface : Disabled SVOS>
Command History
6200 ServiceOS (SVOS>) Administrators or local user group members with execution rights for this command.
ls ls [<OPTIONS>] [<FILE-NME>]
-1 Shows one-column output.
-a Shows entries which start with a period (.).
-A Shows output similar to -a, but excludes a period (.) and a double period (..).
-C Shows output list by columns.
-x Shows output list by lines.
-d Shows listing of directory entries instead of contents
-L Follows symlinks.
-R Recurse.
-p Appends a slash (/) to directory entries.
-F Appends an indicator to entries. An indicator can be as an asterisk (*) or slash (/) or equal sign (=) or at sign (@) or pipe (|).
-l Shows the output in a long listing format.
-i Shows the list inode numbers.
-n Shows a list of numeric UIDs and GIDs instead of names.
-s Shows a list of allocated blocks.
-e Shows in one column a list with the full date and time.
-h Shows list sizes in human readable format (1K, 243M, 2G) with a one-column output.
-r Shows in one column a sort in reverse order.
-S Shows in one column a sort by size.
-X Shows in the output sort by extension.
-v Shows in one column a sort by version.
-c With -l, it shows a sort in one column by ctime.
-t With -l, it shows a sort by mtime.
-u With -l, sort by atime.
-c With -l, it shows a sort in one column by ctime
-w <N> Assumes that the terminal has the number of columns wide as specified by <N>.
--color[={always | never | auto}] Controls color in the output.
<FILE-NAME> Specifies the name of the file to list.
Example Listing directory contents:
SVOS> ls -la /nos drwxr-xr-x 3 0 0 4096 Nov 21 03:19 . drwxr-xr-x 11 0 0 220 Nov 21 03:21 .. drwx------ 2 0 0 16384 Nov 21 03:20 lost+found -rwxr-xr-x 1 0 0 205957424 Nov 21 03:19 primary.swi SVOS>
Command History
md5sum md5sum [-c | -s | -w] [<FILE-NAME>]
Description This command computes and checks the MD5 message digest.
[-c | -s | -w] Selects the options for the command.
-c Specifies to check the sums against the list in files.
-s Specifies not output anything, status code shows success.
-w Specifies to warn about improperly formatted checksum lines.
<FILE-NAME> Specifies the file name to run the checksum against.
Example
Computing and checking the MD5 message digest for /nos/primary.swi:
SVOS> md5sum /nos/primary.swi 93ffc89e7ec357854704d8e450c4b7ab /nos/primary.swi SVOS>
Command History
mkdir mkdir [-m | -p] [<DIRECTORY-NAME>]
Description This command makes directories.
-m Specifies the mode.
-p Specifies to make parent directories as needed with no errors for pre-existing directories.
<DIRECTORY-NAME> Specifies the directory to create.
Example Making the dir directory:
SVOS> mkdir dir
mount mount <DEVICE>
Description This command mounts the SSD partitions to the following locations: /coredump, /logs, /nos, /selftest, and mounts the USB device to /mnt/usb.
Users can mount USB flash drives formatted as either FAT16 or FAT32 with a single partition.
<DEVICE> Specifies the device to be mounted. Supported device options include all and usb.
Examples Mounting all of the SSD partitions:
SVOS> mount all SVOS> mount usb
Command History
mv mv [-f | -i | -n] <TARGET-DIRECTORY>
Description This command moves (renames) files.
-i Specifies to prompt before overwriting.
-n Specifies to not overwrite an existing file.
Example Moving the file named myfile:
SVOS> mv myfile
password password
Description Sets the admin user account password for both Service OS and AOS-CX once the user boots into AOS-CX and saves the configuration. This will overwrite the previous password if one exists. User input is masked with asterisks.
This command is not available if enhanced secure mode is set.
Example Setting the admin account password:
SVOS> password Enter password:******** Confirm password:******** SVOS>
Command History
ping ping <HOST-IP-ADDRESS>
Example Pinging a network host:
SVOS> ping 10.0.8.10 PING 10.0.8.10 (10.0.8.10): 56 data bytes 64 bytes from 10.0.8.10: seq=0 ttl=63 time=3.496 ms 64 bytes from 10.0.8.10: seq=1 ttl=63 time=0.367 ms 64 bytes from 10.0.8.10: seq=2 ttl=63 time=0.380 ms 64 bytes from 10.0.8.10: seq=3 ttl=63 time=0.282 ms 64 bytes from 10.0.8.10: seq=4 ttl=63 time=0.669 ms ^C --- 10.0.8.10 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.282/1.038/3.496 ms SVOS>
Command History
6200 ServiceOS (SVOS>) Administrators or local user group members with execution rights for this command.
pwd pwd
Displays the current working directory.
Example Displaying the current working directory:
SVOS> pwd /home SVOS>
reboot reboot
Command History
rm rm [-f | -i | -R | -r] <FILE-NAME>
Description

Documents

AOS-CX 10.08 Command-line Interface Guide for 6200 Switches