Note: See the description for the admin-password command. If the admin-password is configured in the config>system>security>password context, any user can enter a special administrative mode by entering the enable-admin command. |
The enable-admin command is in the default profile. By default, all users are given access to this command.
When the enable-admin command is entered, the user is prompted for a password. If the password is correct, the user is given unrestricted access to all commands.
The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password is determined by the complexity command.
The following is an example of a password configuration.
Use one of the following options to verify that a user is in the enable-admin mode.
The following is an example output for the show users command.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command moves the context back one level in the command hierarchy. For example, if the current level is the config router ospf context, the back command moves the cursor to the config router context level.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command clears statistics for a specified entity, or it clears and resets the entity.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command echoes arguments on the command line. The primary use of this command is to allow messages to be displayed to the screen in files executed with the exec command.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command executes the contents of a text file as if they were CLI commands entered at the console.
Exec commands do not have no versions.
The following commands are related to the exec command:
If an error occurs entering an exec file sourced from stdin, all commands after the command returning the error will be silently ignored. The exec command will indicate the command error line number when the stdin input is terminated with an end-of-file input.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command returns to the context from which the current level was entered. For example, if you navigated to the current level on a context by context basis, then the exit command only moves the cursor back one level.
If you navigated to the current level by entering a command string, then the exit command returns the cursor to the context in which the command was initially entered.
The following is a sample configuration output.
The exit all command moves the cursor all the way back to the root level.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command provides a brief description of the help system. The following information is displayed:
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command lists the last 30 commands entered in this session.
Re-execute a command in the history with the !n command, where n is the line number associated with the command in the history output.
For example:
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays the running configuration for the configuration context.
The output of this command is similar to the output of a show config command. This command, however, lists the configuration of the context where it is entered and all branches below that context level.
By default, the command only enters the configuration parameters that vary from the default values. The detail keyword causes all configuration parameters to be displayed.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command logs out of the router session.
When the logout command is issued from the console, the login prompt is displayed, and any log IDs directed to the console are discarded. When the console session resumes (regardless of the user), the log output to the console resumes.
When a Telnet session is terminated from a logout command, all log IDs directed to the session are removed. When a user logs back in, the log IDs must be recreated.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command changes a user CLI login password.
When a user logs in after the administrator forces a new-password-at-login, or the password has expired (aging), then this command is automatically invoked.
When this command is invoked, the user is prompted to enter the old password, the new password, and the new password again to verify the correct input.
If a user fails to create a new password after the administrator forces a new-password-at-login or after the password has expired, the user is denied access to the CLI.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command is the TCP/IP utility to verify IP reachability.
The detail keyword includes in the output the interface on which the ping reply was received.
The following is a sample configuration.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays the present or previous working context of the CLI session. The pwc command provides a user who is in the process of dynamically configuring a chassis a way to display the current or previous working context of the CLI session. The pwc command displays a list of the CLI nodes that hierarchically define the current context of the CLI instance of the user.
The following is a sample configuration output.
When the previous keyword is specified, the previous context displays. This is the context entered by the CLI parser upon execution of the exit command. The current context of the CLI is not affected by the pwc command.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command causes the console session to pause operation (sleep) for 1 second (default) or for the specified number of seconds.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command initiates a client Secure Shell (SSH) session with the remote host and is independent from the administrative or operational state of the SSH server. However, to be the target of an SSH session, the SSH server must be operational.
Quitting SSH while in the process of authentication is accomplished by either executing a Ctrl-c or "~." (tilde and dot), assuming the “~” is the default escape character for SSH session.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command opens a Telnet session to a remote host. Telnet servers in 7210 SAS networks limit a Telnet clients to three login attempts. The Telnet server disconnects the Telnet client session after the third attempt has failed. The number of attempts for a Telnet client session is not user-configurable.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
The TCP/IP traceroute utility determines the route to a destination address. Aborting a traceroute with the Ctrl-c could require issuing a second Ctrl-c before the prompt is returned.
The following is a sample configuration output.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays the command hierarchy structure from the present working context.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command sends a console message to a specific user or to all users with active console sessions.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables the substitution of a command line by an alias.
Use the alias command to create alternative names for an entity or command string that are r easier to remember and understand. If the string contains special characters (#, $, spaces, and others), the entire string must be enclosed within double quotes. Only a single command can be present in the command string.
The alias command can be entered in any context but must be created in the environment context.
For example, to create an alias named soi to display OSPF interfaces, enter:
alias soi “show router ospf interface”
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command is required to create a new OS entity.
The no form of the command disables requiring the create keyword.
create
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables per-screen CLI output, meaning that the output is displayed on a screen-by-screen basis. The terminal screen length can be modified with the terminal command. The following prompt appears at the end of each screen of paginated output:
The no form of the command displays the output all at once. If the output length is longer than one screen, the entire output will be displayed, which may scroll the screen.
more
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command configures the maximum number of higher CLI context levels to display in the CLI prompt for the current CLI session. This command is useful when configuring features that are several node levels deep, causing the CLI prompt to become too long. By default, the CLI prompt displays the system name and the complete context in the CLI.
The number of nodes specified indicates the number of higher-level contexts that can be displayed in the prompt. For example, if reduced-prompt is set to 2, the two highest contexts from the present working context are displayed by name with the hidden (reduced) contexts compressed into a ellipsis (“…”).
The following is a sample configuration output.
The setting is not saved in the configuration. It must be reset for each CLI session or stored in an exec script file.
The no form of the command reverts to the default.
no reduced-prompt
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables saved indicator in the prompt. When changes are made to the configuration file a “*” appears in the prompt string indicating that the changes have not been saved. When an admin save command is executed, the “*” disappears.
The following is a sample configuration output.
Supported on all 7210 SAS platforms as described in this document
This command enables the context to configure the terminal screen length and width for the current CLI session.
Supported on all 7210 SAS platforms as described in this document
This command sets the terminal screen length (number of lines).
24
Supported on all 7210 SAS platforms as described in this document
This command sets the terminal screen width (number of characters).
80
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays timestamps in the CLI session based on local time or Coordinated Universal Time (UTC).
The system keeps time internally in UTC and is capable of displaying the time in either UTC or local time based on the time zone configured.
This configuration command is only valid for times displayed in the current CLI session. This includes displays of event logs, traps and all other places where a timestamp is displayed.
In general all timestamps are shown in the time selected. This includes log entries destined for console/session, memory, or SNMP logs. Log files on compact flash are maintained and displayed in UTC format.
time-display local — Displays time stamps based on the local time.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays timestamps in the CLI session.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command shows a list of existing aliases.
The following output is an example of alias information, and Table 15 describes the output fields.
Label | Description |
Alias-Name | Displays the name of the alias |
Alias-command-name | The command and parameter syntax that define the alias |
Number of aliases | The total number of aliases configured on the router |
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables the context to configure criteria to monitor IP and MAC filter statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables IP filter monitoring. The statistical information for the specified IP filter entry is displayed at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the specified IP filter. The subsequent statistical information listed for each interval is displayed as a delta to the previous screen output.
When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands, but only statistical information is displayed. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
The following is output is an example of filter IP statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables IPv6 filter monitoring. The statistical information for the specified IPv6 filter entry displays at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the specified IPv6 filter. The subsequent statistical information listed for each interval is displayed as a delta to the previous display.
When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
The following output is an example of IPv6 filter statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables MAC filter monitoring. The statistical information for the specified MAC filter entry displays at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the specified MAC filter. The subsequent statistical information listed for each interval is displayed as a delta to the previous display.
When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
The following output is an example of MAC filter statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command monitors traffic statistics for Link Aggregation Group (LAG) ports. Statistical information for the specified LAG IDs is displayed at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the specified LAG ID. The subsequent statistical information listed for each interval is displayed as a delta to the previous display.
When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
The following output is an example of LAG statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables the context to monitor management access filters. These filters are configured in the config>system>security>mgmt-access-filter context.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables port traffic monitoring. The specified ports statistical information is displayed at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the specified ports. The subsequent statistical information listed for each interval is displayed as a delta to the previous display.
When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
The following output is an example of port statistics.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables the context to configure criteria to monitor statistical information for BGP, LDP, MPLS, OSPF, and RSVP protocols.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command enables the context to configure criteria to monitor specific service SAP criteria.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command displays statistics for a specific service, specified by the service-id, at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the service-id. The subsequent statistical information listed for each interval is displayed as a delta to the previous display.
When the keyword rate is specified, the “rate per second” for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command monitors statistics for a SAP associated with this service.
This command displays statistics for a specific SAP, identified by the port-id and encapsulation value, at the configured interval until the configured count is reached.
The first screen displays the current statistics related to the SAP. The subsequent statistical information listed for each interval is displayed as a delta to the previous display. When the keyword rate is specified, the rate per second for each statistic is displayed instead of the delta.
Monitor commands are similar to show commands but only statistical information displays. Monitor commands display the selected statistics according to the configured number of times at the interval specified.
If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 1/2/3 specifies port 3 on MDA 2 in slot 1.
The values depends on the encapsulation type configured for the interface. The following table describes the allowed values for the port and encapsulation types.
Port Type | Encap-Type | Allowed Values | Comments |
Ethernet | Null | 0 | The SAP is identified by the port. |
Ethernet | Dot1q | 0 to 4094 | The SAP is identified by the 802.1Q tag on the port. A 0 qtag1 value also accepts untagged packets on the dot1q port. |
Ethernet | QinQ | qtag1: 0 to 4094 qtag2: 0 to 4094 | The SAP is identified by two 802.1Q tags on the port. A 0 qtag1 value also accepts untagged packets on the dot1q port. |
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
This command monitors statistics for a SDP binding associated with this service.
The following output is an example of SDP statistics.