Management commands for A10 Thunder TPS Device.
enable |
To access the Privileged EXEC level of the CLI and allow access to all configuration levels.
|
config |
To access the global configuration level.
|
clear console |
Terminate the current login process and start a new one.
|
#show clock |
Shows the time.
|
#clock set 19:15:33 December 17 2023 |
The following example sets the time to 7:15 PM and 33 seconds on December 17, 2015 (for times beyond 12:00 PM, use 24-hour notation).
|
#timezone Europe/Istanbul |
The following example sets the timezone to Europe/Istanbul.
|
#ntp server 216.171.124.36 |
To configure a preferred NTP server.
|
#prefer |
Then use the prefer command to make this the preferred server:.
|
#ntp auth-key 13579 M ascii XxEnc192 |
Create authentication keys (13579).
|
#ntp trusted-key 13579 |
Add key (13579) to the list of trusted keys.
|
#ntp server 207.69.131.204 |
Configure the NTP server at 207.69.131.204 to use trusted key (13579).
|
#show running-config | include ntp |
Verify the NTP server and authentication key configuration.
|
#hostname ACOS-TPS2 |
Change the hostname.
|
#ip dns suffix a10networks.com |
To set the default domain name (DNS suffix) for host names on the ACOS device.
|
#ip dns primary 10.10.128.101 |
To set the primary DNS server for resolving DNS requests.
|
#ip dns secondary 10.10.128.102 |
To set the secondary DNS server for resolving DNS requests.
|
#show running-config | include dns |
Show running-config command to view your configuration.
|
#banner login “welcome to login mode” |
To set the login banner.
|
#banner login “welcome to exec mode” |
To set the exec banner.
|
#web-service secure wipe |
|
#import cert |
To import a CA-signed certificate.
|
#interface management |
Puts you in interface management mode, where you can continue the management interface configuration.
|
#ip address 192.168.10.2 /24 |
To configure IPv4 access.
|
#ip default-gateway 192.168.2.1 |
To configure IPv4 access.
|
#ipv6 address 2001:db8::2/32 |
To configure IPv6 access.
|
#ipv6 default-gateway 2001:db8::1 |
To configure IPv6 access.
|
#show interfaces management |
To verify the configuration.
|
#security-reset |
Destroys all sensitive information.
|
#snmp-server SNMPv3 |
SNMPv3 Configuration
|
#system fips enable |
Enabling FIPS.
|
#system fips disable |
Disabling FIPS.
|
#system default-mtu |
To configure the MTU for supported physical and logical ports at the global configuration level.
|
#system-jumbo-global enable-jumbo |
To enable jumbo frame support on FTA models.
|
#system-jumbo-global enable-jumbo #write memory #reboot |
To enable jumbo frame support on a non-FTA model.
|
#no system-jumbo-global enable-jumbo |
To disable jumbo frame support on FTA models.
|
#no system-jumbo-global enable-jumbo #write memory #reboot |
To disable jumbo frame support on a non-FTA model.
|
#system default-mtu 9216 |
To configure the MTU for all interface ports at the global configuration level.
|
#interface ethernet 1 mtu 1800 |
To change the MTU on a particular interface, use the mtu command at the configuration level for the interface.
|
#show interface ve 300 |
To view VE interface information.
|
#show interface ethernet 15 |
To view Ethernet interface information.
|
#import key |
To import a key. (RSA & ECDSA)
|
#import cert |
To import a CA-signed certificate. (RSA & ECDSA)
|
#web-service secure private-key load |
(RSA & ECDSA)
|
#web-service secure certificate load |
(RSA & ECDSA)
|
#import glm-cert |
(RSA)
|
#sshd key load |
(RSA)
|
#ssh-pubkey import |
(RSA)
|
|
To creates a backup of the system (startup-config file, aFleX scripts, and SSL certificates and keys) on a remote server using SCP.
|
|
#backup log period 1 use-mgmt-port scp://exampleuser@192.168.3.3/home/users/exampleuser/backups/backuplog.tar.gz` |
To creates a daily backup of the log entries in the syslog buffer. The connection to the remote server will be established using SCP on the management interface (use-mgmt-port).
|
#write memory |
Replaces the configuration profile in the image area with the running-config.
|
#write force |
Forces the ACOS device to save the configuration regardless of whether the system is ready.
|
#write memory primary |
Replaces the configuration profile stored in the primary image area with the running-config
|
#write memory secondary |
Replaces the configuration profile stored in the secondary image area with the running-config.
|
#write memory profile-name |
The ACOS device replaces the commands in the specified profile-name with the running-config.
|
#show startup-config |
To view locally stored configuration information.
|
#show startup-config all |
To display a list of the locally stored configuration profiles.
|
#show startup-config profile profile-name |
Displays the commands that are in the specified configuration profile.
|
#copy |
To copy configurations.
|
#copy startup-config profile-name |
Copies the configuration profile that is currently linked to “startup-config” and saves the copy under the specified profile-name.
|
#copy startup-config running-config |
Copies the configuration profile that is currently linked to “startup-config” and replaces the current running-config.
|
#copy running-config startup-config |
Copies the running-config and saves it to the configuration profile currently linked to the startup-config.
|
#diff startup-config running-config |
Compares the configuration profile that is currently linked to “startup-config” with the running-config.
|
#diff startup-config profile-name |
Compares the configuration profile that is currently linked to “startup-config” with the specified configuration profile-name.
|
#diff profile-name1 profile-name2 |
To compare any two configuration profiles.
|
#link |
To link configuration profiles.
|
#link startup-config test-profile primary |
To links the startup-config to a new profile called test_profile.
|
#link startup-config default |
To relink “startup-config” to the configuration profile stored in the image area.
|
#delete |
To delete configurations.
|
#delete startup-config test_profile1 |
To remove a specific configuration profile.
|
#show ip route mgmt |
To display the routes in the management route table.
|
#show ip route |
To display the data plane routes.
|
#show ip fib |
To display the data plane routes.
|
#show techsupport |
To display general information about the router when reporting a problem.
|
#ip control-apps-use-mgmt-port |
To management interface as the source interface for automated management traffic is enable. (Execute in
interface management) |
#interface loopback 2 #ip address 10.10.10.66 /24 #exit |
To configure an IP address on loopback interface 2.
|
#ip mgmt-traffic all source-interface loopback 2 |
To configures the ACOS device to use loopback interface 2 as the source interface for management traffic of all types listed above.
|
#show version |
To shows storage area information.
|
#show bootimage |
To view the storage location for future reboots.
|
#bootimage hd sec |
To configure the ACOS device to use the secondary storage area on the SSD or hard drive for future reboots, and verify the setting.
|
#fail-safe fpga-buff-recovery-threshold 2 |
Trigger the fail-safe recovery if the number of free (available) FPGA buffers drops below 2 long enough for the recovery timeout to occur.
|
#fail-safe sw-error-recovery-timeout 3 |
Trigger the fail-safe recovery if a software error remains in effect for longer than 3 minutes.
|
#show fail-safe config |
Verify the configuration.
|
#show fail-safe information |
To output differs between models that use FPGAs in hardware and models that do not.
|
#system asic-mmu-fail-safe recovery-threshold 5 |
To configures the error threshold count to 5 (the default value is 2).
|
#fail-safe total-memory-size-check 5 log |
The fail-safe feature will be triggered when the total memory size is less than 5 GB. When this happens, this event will be logged.
|
#show poap |
To show the status (enabled or disabled) of POAP mode.
|
|
glid 1
pkt-rate-limit 4 over-limit-action drop ! ddos src entry src-v41 10.10.71.7 log-enable log-periodic l4-type tcp glid 1 ! system ddos-attack log ! |
To configure a custom packet rate limit for TCP traffic from a source, and enable logging of DDoS events for the source.
|
|
ddos template logging default
log-format-cef use-obj-name ! |
Enable CEF and object name display for DDoS event messages.
|
|
ddos dst entry dst-host8 10.10.10.8
log-enable log-periodic ! vsystem ddos-attack log ! |
For the template to be used, DDoS event logging also must be enabled globally and in the individual rules that will use logging.
|
#logging single-priority error |
To configure single-priority logging
|
#logging email buffer |
To configure log email settings.
|
#logging email buffer number 32 time 30 |
To configures the ACOS device to buffer log messages to be emailed. Messages will be emailed only when the buffer reaches 32 messages, or 30 minutes passes since the previous log message email, whichever happens first.
|
#logging email filter 1 "level information pattern abc and" |
To configures a filter that matches on log messages if they are information-level messages and contain the string “abc”. The messages will be buffered and not emailed immediately.
|
#logging email filter 1 "level information pattern abc and" trigger |
To reconfigures the filter to immediately email matching messages by using the trigger option.
|
|
ddos template logging default
log-format-cef use-obj-name ! |
To configure the default DDoS logging template.
|
|
glid 2
conn-limit 800000 ! |
To configure GLID 2, to set a custom connection limit.
|
|
ddos src entry v4-71 192.168.71.7
log-enable log-periodic l4-type tcp glid 2 ! |
To configure a rule for source 192.168.71.7
|
|
glid 3
bit-rate-limit 8000000 ! |
To configure GLID 3, to set a custom bandwidth limit (bit rate).
|
|
ddos dst entry dst-81 10.10.10.8
log-enable log-periodic l4-type tcp glid 3 ! |
To configure a rule for protected destination 10.10.10.8
|
|
system ddos-attack log
! |
To globally enables DDoS event logging.
|
|
ddos protection enable
! |
To enables DDoS Mitigation.
|
#snmp-server enable traps |
To enable SNMP traps.
|
#snmp-server enable traps system start |
To enables system start traps.
|
#snmp-server view |
To configure an SNPM view.
|
#snmp-server view exampleview 1.2.3 included |
To creates a view called “exampleview” which includes OID 1.2.3
|
#snmp-server SNMPv1-v2c user u1 #community read examplestring #show running-config | sec snmp |
To configure an SNMP community string for SNMPv1 or SNMPv2c users.
|
#snmp-server view exampleview 1.2.3 included #snmp-server group examplegroup v3 auth read exampleview #snmp-server SNMPv3 user exampleuser group examplegroup v3 auth md5 examplepassword1 priv aes examplepassword2 #show running-config | sec snmp |
To configure an SNMP community string for SNMPv3 users.
|
#remote 192.168.20.1 /24 |
To restrict access to allow only specific remote hosts to access SNMP data
|
#oid 1.2.3 remote 192.168.40.1 255.255.255.0 |
To restrict access so that only a specific OID (1.2.3) can be accessed by the specified hosts (subnets 192.168.30.x and 192.168.40.x).
|
#snmp-server group examplegroup v3 priv read exampleview |
To configure an SNMP group.
|
#snmp-server view exampleview 1.2.3 included #snmp-server group examplegroup v3 auth read exampleview #snmp-server SNMPv3 user exampleuser group examplegroup v3 auth md5 examplepassword1 priv aes examplepassword2 |
Shows how to configure an SNMPv3 user “exampleuser”, who is a member in “examplegroup”, which is part of “exampleview”.
|
#snmp enable traps system ? |
Note that using the ? allows you to see all SNMP traps within the category before activating that category.
|
#snmp enable traps system packet-drop |
To enables SNMP traps for all packet drops performed by the system.
|
#snmp-server location example-location |
To configure location information.
|
#snmp-server contact example-contact |
To configure contact information.
|
#snmp-server host example-trap-host |
To configure external SNMP trap receivers.
|
#snmp-server community read example-community-string |
To configure one or more read-only communities.
|
snmp-server view example-view-name example-oid included |
To configure an SNMP view.
|
#snmp-server group example-grou-name v3 auth read example-read-view-name |
To configure an SNMP group.
|
#snmp-server user example-user group example-group v3 auth md5 example-password |
To configure an SNMP user.
|
#snmp-server enable traps all |
To enable the SNMP agent and SNMP traps.
|
#mirror-port |
To configure mirror ports.
|
#mirror-port 1 ethernet 4 |
Example for mirror ports.
|
#mirror-port 2 ethernet 7 output |
Example for mirror ports.
|
#mirror-port 3 ethernet 9 |
Example for mirror ports.
|
#mirror-port 4 ethernet 3 input |
Example for mirror ports.
|
#show mirror |
Verifies the mirror configuration.
|
#interface ethernet 1 #monitor input 1 |
To access the configuration level for Ethernet interface 1 and enable monitoring of its traffic.
|
#interface ethernet 2 #monitor output 2 |
To access the configuration level for Ethernet interface 2 and enable monitoring of its traffic.
|
#interface ethernet 2 #no monitor output 2 |
To removing the monitor configuration.
|
#no mirror-port 2 ethernet 7 output |
To removing the mirror port configuration.
|
#ddos template monitor 1 #monitor link-down eth 5 sequence 1 #monitor link-down eth 6 sequence 2 #monitor link-down eth 9 sequence 3 #monitor link-down eth 10 sequence 4 |
To configure monitor template 1 and the physical data interfaces and events to monitor.
|
#action clear sessions sequence 1 |
To configure the actions to take when a monitored event is detected.
|
#system template monitor 1 |
To activates the template, to place it into effect.
|
#clear session |
To clears only data sessions.
|
#clear sessions all |
To clear all sessions.
|
#netflow monitor test |
To configure a NetFlow monitor named “test” to collect all NetFlow v5-compatible flow records and export them to the host at IP 10.10.3.2
|
#netflow monitor test |
To configure a NetFlow monitor named “test” used to export DDoS general statistics and DDoS HTTP statistics to the host IP 10.10.3.2 using IPFIX.
|
#ip nat pool p1 172.168.6.100 172.168.6.100 netmask /24 |
Stateful session mode is required but is disabled by default for UDP. To configure NAT at the Layer 4 UDP level or on individual UDP ports within a rule, you first must enable stateful mode. The following example configures source NAT for client traffic allowed to go to destination 10.10.6.50
|
#ddos dst entry ip-dest-entry 10.10.6.60 |
To configure destination NAT for destination 10.10.6.60
|
#access-list 1 permit 10.1.1.0 0.0.0.255 |
Define the ACL and configure the IP address pool.
|
#interface ethernet 1 |
Enable inside source NAT and outside source NAT on the interfaces.
|
show ip nat alg pptp statistics |
To displays PPTP NAT ALG statistics.
|
ACOS> |
User EXEC Level. This is the first level entered when a CLI session begins. At this level, users can view basic system information but cannot configure system or port parameters. (>)
|
ACOS# |
Privileged EXEC Level. Critical commands (configuration and management) require that the user be at the “Privileged EXEC” level. To change to the Privileged EXEC level, type
enable then press Enter at the ACOS> prompt. (#) |
ACOS(config)# |
Privileged EXEC Level - Config Mode. The Privileged EXEC level’s configuration mode is used to configure the system IP address and to configure switching and routing features. To access the configuration mode, you must first be logged into the Privileged EXEC level. Enter the
config command. |
? |
System prompt to display a list of available commands for each command mode. The context-sensitive help feature provides a list of the arguments and keywords available for any command.
|
#terminal history size 500 |
To set the buffer size for the current session. For example, to set the buffer to 500, then verify the change with the show terminal command.
|
no terminal history size |
To reset the buffer size for this session to the default value.
|
> show history |
While in EXEC mode, lists the most recent commands entered.
|
begin string |
Begins the output with the line containing the specified string.
|
include string |
Displays only the output lines that contain the specified string.
|
exclude string |
Displays only the output lines that do not contain the specified string.
|
section string |
Displays only the lines for the specified section (for example, “ddos dst entry”, or “logging”). To display all DDoS-related configuration lines, you can enter “ddos”.
|
| |
Delimiter between the
show command and the display filter. |
show arp | include 192.168.1.3* |
The output filter in this example displays only the ARP entries that contain IP addresses that match “192.168.1.3” and any value following “3”. The asterisk ( * ) matches on any pattern following the “3”.
|
show startup-config | section logging |
To displays the startup-config lines for “logging".
|
enable |
Enter privileged EXEC mode, or any other security level set by a system administrator.
|
exit |
When used from User EXEC mode, this command closes an active terminal session by logging off the system. In any other mode, it will move the user to the previous configuration level.
|
help |
Display a description of the interactive help system of the ACOS device.
|
no |
Most configuration commands have a
no form. Typically, you use the no form to disable a feature or function. The command without the no keyword is used to re-enable a disabled feature or to enable a feature that is disabled by default. |
ping |
Send an ICMP echo packet to test network connectivity.
|
show |
Show system or configuration information.
|
ssh |
Establish a Secure Shell (SSH) connection from the Thunder Series to another device.
|
telnet |
Open a Telnet tunnel connection from the Thunder Series to another device.
|
traceroute |
Display the router hops through which a packet sent from the ACOS device can reach a remote device.
|
axdebug |
Access the AXdebug subsystem.
|
backup log |
Configure log backup options and save a backup of the system log.
|
backup system |
Back up the system. The startup-config file, and SSL certificates and keys will be backed up to a tar file.
|
clear |
Clear statistics or reset functions. Sub-command parameters are required for specific sub-commands.
|
clock |
Set the system time and date.
|
configure |
Enter Global configuration mode from the Privileged EXEC mode.
|
ddos run-time-user-string |
Set the DDoS runtime user string. The runtime user string provides a way to add a nonpersistent memo to the device. The runtime user string does not appear in the runningconfig and is not saved across reboots or reloads.
|
debug |
Access debug options.
|
diff |
Display a side-by-side comparison of the commands in a pair of locally stored configurations.
|
disable |
Exit the Privileged EXEC mode and enter the EXEC mode.
|
enable-bgp-advertisement |
Enable BGP advertisements.
|
exit |
Exit the Privileged EXEC mode and enter the EXEC Mode.
|
export |
Export a file to a remote site using the specified transport method.
|
help |
Display a description of the interactive help system of the ACOS device.
|
import |
Get a file from a remote site.
|
locale |
Set the locale for the current terminal session.
|
no |
Negate a command or set it to its default setting.
|
ping |
Test network connectivity.
|
reboot |
Reboot the device.
|
reload |
Restart ACOS system processes and reload the startup-config, without rebooting.
|
repeat |
Periodically re-enter a
show command. |
show |
Display system or configuration information.
|
shutdown |
Schedule a system shutdown at a specified time or after a specified interval, or cancel a scheduled system shutdown.
|
ssh |
Establish a Secure Shell (SSH) connection from the Thunder Series to another device.
|
telnet |
Establish a Telnet connection from the ACOS device to another device.
|
terminal |
Set terminal display parameters for the current session.
|
traceroute |
Display the route hops to a destination.
|
write force |
Forces the ACOS device to save the configuration regardless of whether the system is ready.
|
write memory |
Write the running-config to a configuration profile.
|
write terminal |
Display the current running-config on your terminal.
|
access-list |
Standard. Configure a standard Access Control List (ACL) to permit or deny source IP addresses.
|
access-list |
Extended. Configure an extended Access Control List (ACL) to permit or deny traffic based on source and destination IP addresses, IP protocol, and TCP/UDP ports.
|
accounting |
Configure TACACS+ as the accounting method for recording information about user activities.
|
admin |
Configure an admin account for management access to ACOS.
|
admin-lockout |
Set lockout parameters for admin sessions.
|
admin-session clear |
Clear current ACOS admin sessions.
|
arp |
Create a static ARP entry.
|
arp-timeout |
Change the aging timer for dynamic ARP entries.
|
audit |
Configure command auditing.
|
authentication console type |
Configure a console authentication type.
|
authentication enable |
Configuration authentication of admin enable (Privileged mode) access.
|
authentication login privilege-mode |
Place admins into the CLI directly at the Privileged EXEC level following successful authentication. The admin does not need to navigate to the Privileged EXEC level from the User EXEC level.
|
authentication mode |
Enable tiered authentication.
|
authentication multiple-auth-reject |
Configure support for multiple concurrent admin sessions using the same account.
|
authentication type |
Set the authentication method used to authenticate administrative access to ACOS.
|
authorization |
Configure authorization for controlling access to functions in the CLI. The ACOS device can use TACACS+ for authorizing commands executed under a specified privilege level. This command also allows you to specify the level for authorization debugging.
|
backup log |
Configure log backup options and save a backup of the system log.
|
backup store |
Configure and save file access information for backup. When you back up system information, you can save typing by specifying the name of the store instead of the options in the store.
|
backup system |
Back up the system. The startup-config file, and SSL certificates and keys will be backed up to a tar file.
|
backup-periodic |
Schedule periodic backups.
|
banner |
Set the banners to be displayed when an admin logs onto the CLI or accesses the Privileged EXEC mode.
|
bfd echo |
Enables echo support for Bidirectional Forwarding Detection (BFD).
|
bfd enable |
Globally enable BFD packet processing.
|
bfd interval |
Configure BFD timers.
|
bgp |
The commands in this section apply globally to the BGP process running on the ACOS device.
|
bootimage |
Specify the boot image location from which to load the system image the next time the Thunder Series is rebooted.
|
boot-block-fix |
Repair the master boot record (MBR) on the hard drive or compact flash.
|
bridge-vlan-group |
Configure a bridge VLAN group for VLAN-to-VLAN bridging.
|
capture-config |
This command configures DDoS packet capture so that the packets causing DDoS violations can be reviewed and analyzed.
|
class-list |
Configure a class list.
|
convert-startup-config |
Convert configuration profile from version 3.0/3.1 to 3.2.
|
copy |
Copy a running-config or startup-config.
|
ddos |
Configure DDoS Mitigation settings.
|
debug |
Legacy debug command. It is recommended to use the AXdebug subsystem instead of these
debug commands. |
delete |
Delete an axdebug capture file.
|
diff |
Display a side-by-side comparison of the commands in a pair of locally stored configurations.
|
disable-failsafe |
Disable fail-safe monitoring for software-related errors.
|
disable-management service |
Disable management access to specific protocols on specific Ethernet interfaces.
|
do |
Run a Privileged EXEC level command from a configuration level prompt, without leaving the configuration level.
|
domain-group |
Create a group of related
domain-list configurations |
domain-list |
Create a domain classification list.
|
enable-core |
Change the file size of core dumps.
|
enable-management |
Enable management access to specific protocols on specific Ethernet interfaces.
|
enable-password |
Set the enable password, which secures access to the Privileged EXEC level of the CLI.
|
end |
Return to the Privileged EXEC level of the CLI.
|
environment temperature threshold |
Configure the temperature condition under which a log is generated.
|
environment update-interval |
Configure the hardware polling interval for fault detection and log generation.
|
erase |
Erase the startup-config file. This command returns the device to its factory default configuration after the next reload or reboot.
|
exit |
Return to the Privileged EXEC level of the CLI.
|
export |
Export a file to a remote site using the specified transport method.
|
export-periodic |
Export file to a remote site periodically.
|
fail-safe |
Configure fail-safe automatic recovery.
|
fan-speed |
Control fan speed setting.
|
glid |
Configure a Global Limit ID (GLID). A GLID is a set of traffic limits that can be used with other features, such as DDoS Mitigation.
|
hd-monitor enable |
Enable hard disk monitoring on your ACOS device.
|
hostname |
Set the ACOS device’s hostname.
|
icmpv6-rate-limit |
Configure ICMPv6 rate limiting for IPv6 to protect against denial-of-service (DoS) attacks.
|
icmp-rate-limit |
Configure ICMP rate limiting, to protect against denial-of-service (DoS) attacks.
|
import |
Get a file from a remote site.
|
import-periodic |
Get files from a remote site periodically.
|
interface |
Access the CLI configuration level for an interface.
|
ip |
Configure global IP settings.
|
ipmi |
Configure Intelligent Platform Management Interface (IPMI) settings on the ACOS device.
|
ipv6 |
Configure global IPv6 settings.
|
key |
Configure a key chain for use by routing authentication features.
|
lacp-passthrough |
Configure an LACP tunnel for LACP passthrough. This feature allows the ACOS device to forward traffic on one trunk that originates on another trunk that is down. With this feature, if an LACP trunk goes down, the other trunk is used to continue connectivity for the traffic.
|
lacp system-priority |
Set the Link Aggregation Control Protocol (LACP) priority.
|
ldap-server |
Set Lightweight Directory Access Protocol (LDAP) parameters for authenticating administrative access to the ACOS device.
|
link |
Link the “startup-config” token to the specified configuration profile. By default, “startup-config” is linked to “default”, which means the configuration profile stored in the image area from which the ACOS device most recently rebooted.
|
lldp enable |
Enable the Link Layer Detection Protocol (LLDP). You can enable LLDP to either receive only, transmit only, or transmit and receive.
|
lldp management-address |
Specify the hostname or IP address and Ethernet interface to use as the management interface for the LLDP agent on the ACOS device.
|
lldp notification interval |
Configure the interval between transmission of LLDP notifications during normal transmission periods. (In the IEEE 802.3AB specification, this the msgTxInterval parameter.)
|
lldp system-description |
Defines the alpha-numeric string that describes the system in the network.
|
lldp system-name |
Defines the string that will be assigned as the system name.
|
lldp tx fast-count |
Set the initial value for the txFast variable, which determines the number of LLDP data packets that are transmitted during a fast transmission period. (In the IEEE 802.3AB specification, this the txFastInit parameter.)
|
lldp tx fast-interval |
Configure the LLDP PDU transmission interval for fast periods. (In the IEEE 802.3AB specification, this the msgFastTx parameter.)
|
lldp tx hold |
Configure the time to live (TTL) transmission interval that is carried in LLDP frames during normal (non-fast) periods. (In the IEEE 802.3AB specification, this the msgTxHold parameter.)
|
lldp tx interval |
Configure the LLDP packet transmit interval. (In the IEEE 802.3AB specification, this the msgTxInterval parameter.)
|
lldp tx reinit-delay |
Configure the delay between a change to administrative “disabled” status of LDDP and reinitialization of the protocol.
|
locale |
Set the locale for the current terminal session.
|
logging auditlog host |
Configure audit logging to an external server.
|
logging buffered |
Configure the event log on the ACOS device.
|
logging console |
Set the logging level for messages sent to the console.
|
logging email-address |
Specify the email addresses to which to send event messages.
|
logging email buffer |
Configure log email settings.
|
logging email filter |
Configure a filter for emailing log messages.
|
logging export |
Send the messages that are in the event buffer to an external file server.
|
logging facility |
Enable logging facilities.
|
logging host |
Specify a Syslog server to which to send event messages.
|
logging monitor |
Set the logging level for messages sent to the terminal monitor.
|
logging syslog |
Set the syslog logging level for events sent to the syslog host.
|
logging trap |
Set the logging level for traps sent to the SNMP host.
|
mac-address |
Configure a static MAC address.
|
mac-age-time |
Set the aging time for dynamic (learned) MAC entries. An entry that remains unused for the duration of the aging time is removed from the MAC table.
|
maximum-paths |
Change the maximum number of paths a route can have in the Forwarding Information Base (FIB).
|
mirror-port |
Specify a port to receive copies of another port’s traffic.
|
monitor |
Specify event thresholds for utilization of resources.
|
multi-config |
Enable simultaneous admin sessions.
|
multi-ctrl-cpu |
Enable use of more than one CPU for control processing.
|
netflow common max-packet-queue-time |
Specify the maximum amount of time ACOS can hold onto a NetFlow record packet in the queue before sending it to the NetFlow collector. ACOS holds a NetFlow packet in the queue until the packet payload is full of record data or until the queue timer expires.
|
netflow common selector-algorithm random |
Configures the algorithm that Netflow uses to sample traffic. The only option is the random algorithm.
|
netflow monitor |
Enable ACOS to act as a NetFlow exporter, for monitoring traffic and exporting the data to one or more NetFlow collectors for analysis.
|
no |
Remove a configuration command from the running configuration.
|
ntp |
Configure Network Time Protocol (NTP) parameters.
|
ntp-status |
Get the status of the NTP servers.
|
overlay-tunnel |
Configure a remote tunnel endpoint for remote sites where protected objects reside. This can be used in conjunction with OSPF neighbor adjacency via GRE or VXLAN tunnels.
|
pki delete |
Deletes a self-signed certificate or the CSR file.
|
radius-server host |
Set RADIUS parameters, for authenticating administrative access to the ACOS device.
|
restore |
Restore the startup-config, aFleX policy files, <<when aFlex support is added>> and SSL certificates and keys from a .tar file previously created by the backup command. The restored configuration takes effect following a reboot.
|
router log file |
Configure router logging to a local file.
|
router log log-buffer |
Sends router logs to the logging buffer.
|
router protocol |
Enter the configuration mode for a dynamic routing protocol.
|
route-map |
Configure a route map.
|
running-config |
Enable display of file information in the running-config.
|
run-hw-diag |
Access the hardware diagnostics menu.
|
sflow |
Configure parameters for sFlow packet sampling.
|
single-board-mode forced |
On the Thunder 14045 device with dual processing modules, this command causes all traffic to be processed by the master only.
|
smtp |
Configure a Simple Mail Transfer Protocol (SMTP) server to use for sending emails from the ACOS device.
|
ssh-login-grace-time |
Configures the time to establish an SSH connection.
|
sshd |
Perform an SSHD operation on the system.
|
system all-vlan-limit |
Set the global traffic limits for all VLANs. The limit applies system-wide to all VLANs; collectively, all ACOS device VLANs cannot exceed the specified limit.
|
system anomaly |
Enable logging for packet anomaly events. This type of logging applies to system-wide attacks such as SYN attacks.
|
system asic-mmu-fail-safe |
Configures fail-safe parameters for the Layer 2/3 ASIC.
|
system attack |
Enable logging for DDoS attacks. This type of logging applies to violations of DDoS Mitigation rules.
|
system cpu-load-sharing |
Configure thresholds for CPU load sharing. If a threshold is exceeded, CPU load sharing is activated to relieve the stressed CPUs. When activated, CPU load sharing distributes processing of the stressed CPU’s operations across the device’s other CPUs. Load sharing remains in effect until the threshold is no longer exceeded.
|
system ddos-attack log |
Enable logging for DDoS attack events.
|
system default-mtu |
Configure the MTU for all interfaces.
|
system ext-only-logging |
Enable external only logging for packet driven DDoS logs. When enabled, DDoS non-event logs will not be displayed through
show log. Other types of logs are unaffected. |
system fips |
Enable/Disable FIPS Mode for ACOS devices.
|
system glid |
Globally apply the specified GLID to the whole system.
|
system-jumbo-global enable-jumbo |
Globally enable jumbo frame support. In this release, a jumbo frame is an Ethernet frame that is more than 1522 bytes long.
|
system module-ctrl-cpu |
Throttle CLI and SNMP output when control CPU utilization reaches a specific threshold.
|
system mon-template monitor |
Configure monitoring of a set of ports for link-state changes, and change the link states of another set of ports, or clear sessions based on the detected changes.
|
system pbslb sockstress-disable |
Globally disable Sockstress protection on the system.
|
system per-vlan-limit |
Configure the packet flooding limit per VLAN. The limit applies to each VLAN. No individual can exceed the specified limit.
|
system-reset |
Restore the ACOS device to its factory default settings.
|
system resource-usage |
Change the capacity of a system resource.
|
system session-reclaim-limit |
Set limits for SMP session reclaim; this controls how the system should recover and reclaim DDoS entries.
|
system template-bind monitor |
Apply a monitor template to the whole TPS system.
|
system timeout-value |
Set the timeout to stop transferring a file.
|
system trunk load-balance |
Configure trunk load balancing for Layer 2 switched packets (applicable for both static and LACP trunks).
|
system ve-mac-scheme |
Configure MAC address assignment for Virtual Ethernet (VE) interfaces.
|
system-jumbo-global enable-jumbo |
Globally enable jumbo frame support. In this release, a jumbo frame is an Ethernet frame that is more than 1522 bytes long.
|
system default-mtu |
Configure the MTU for all interfaces.
|
tacacs-server host |
Configure TACACS+ for authorization and accounting. If authorization or accounting is specified, the ACOS device will attempt to use the TACACS+ servers in the order they are configured. If one server fails to respond, the next server will be used.
|
tacacs-server monitor |
Check the status of TACACS+ servers.
|
techreport |
Configure automated collection of system information. If you need to contact Technical Support, they may ask you to for the techreports to help diagnose system issues.
|
terminal |
Set the terminal configuration.
|
tftp blksize |
Change the TFTP block size.
|
timezone |
Configure the time zone on your system.
|
tx-congestion-ctrl |
Configure looping on the polling driver, on applicable models.
|
upgrade |
Upgrade the system.
|
ve-stats |
Enable statistics collection for Virtual Ethernet (VE) interfaces.
|
vlan |
Configure a virtual LAN (VLAN). This command changes the CLI to the configuration level for the VLAN.
|
vlan-global enable-def-vlan-l2-forwarding |
Enable Layer 2 forwarding on the default VLAN (VLAN 1).
|
vlan-global l3-vlan-fwd-disable |
Globally disable Layer 3 forwarding between VLANs.
|
vlan-group |
Configure a group of VLANs.
|
vrrp-a |
Enter VRRP-A configuration mode.
|
web-service |
Configure access parameters for the Graphical User Interface (GUI).
|
write |
Save the configuration.
|
#snmp-server community |
Deprecated command to configure an SNMP community string.
|
#snmp-server contact |
Configure SNMP contact information.
|
#snmp-server enable service |
Enable SNMP service on the ACOS device
|
#snmp-server enable traps |
Enable ACOS to accept SNMP MIB data queries and to send SNMP v1/v2c traps.
|
#snmp-server engineID |
Set the SNMPv3 engine ID of this ACOS device.
|
#snmp-server group |
Configure an SNMP group.
|
#snmp-server host |
Configure an SNMP v1/v2c trap receiver.
|
#snmp-server location |
Configure SNMP location information.
|
#snmp-server SNMPv1-v2c |
Define an SNMPv1 or SNMPv2c community. The members of the community can gain access to the SNMP data available on this device.
|
#snmp-server SNMPv3 |
Define an SNMPv3 user.
|
#snmp-server user |
Deprecated command to configure an SNMPv3 user.
|
#snmp-server view |
Configure an SNMP view.
|
show access-list |
Display the configured Access Control Lists (ACLs). The output lists the configuration commands for the ACLs in the running-config.
|
show admin |
Display the administrator accounts.
|
show arp |
Display ARP table entries.
|
show audit |
Show the command audit log.
|
show axdebug capture |
Display a list of debug files.
|
show axdebug config |
Display the debug filter configuration currently applied on ACOS.
|
show axdebug config-file |
Display a list of the debug configuration files.
|
Display debug capture files or their contents. |
show axdebug file
|
show axdebug filter |
Display the configured debug output filters.
|
show axdebug status |
Display per-CPU packet capture counts for AXdebug.
|
show backup |
Display information about scheduled backups.
|
show bfd |
Display information for Bidirectional Forwarding Detection (BFD).
|
show bgp |
Display information for Border Gateway Protocol (BGP).
|
show bootimage |
Display the software images stored on the ACOS device.
|
show bridge-vlan-group |
View information for any configured bridge VLAN groups.
|
show capture-config |
View capture-config information.
|
show class-list |
Display information for class lists.
|
show class-list-group |
Display information for class-list groups.
|
show clns |
Show Connectionless Network Service (CLNS) information.
|
show clock |
Display the time, timezone, and date.
|
show context |
View the configuration for the sub-module in which the command is run.
|
show core |
Display core dump statistics.
|
show cpu |
Display CPU statistics.
|
show ddos |
Show the DDoS action-list configuration on the device.
|
show disk |
Display status information for the device hard disks.
|
show domain-group |
Show domain-group configuration information.
|
show domain-list |
Show domain-list configuration information.
|
show dumpthread |
Show status information about the system threads.
|
show environment |
Display temperature, fan, and power supply status.
|
show errors |
Show error information for the system. This command provides a way to quickly view system status and error statistics.
|
show fail-safe |
Display fail-safe information.
|
show glid |
View the configuration for global IP limiting rules.
|
show hardware |
Displays hardware information for the ACOS device.
|
show history |
Show the CLI command history for the current session.
|
show interfaces |
Display interface configuration and status information.
|
show interfaces media |
Display information about 1-Gbps and 10-Gbps small form-factor pluggable (SFP+) interfaces.
|
show interfaces statistics |
Display interface statistics.
|
show ip |
Show the IP mode in which the ACOS device is running, gateway or transparent mode.
|
show ip bgp |
Show IPv4 BGP information.
|
show ip dns |
Display the DNS configuration.
|
show ip fib show ipv6 fib |
Display Forwarding Information Base (FIB) entries.
|
show ip fragmentation statistics show ipv6 fragmentation statistics |
Show statistics for IP fragmentation.
|
show ip helper-address |
Display DHCP relay information.
|
show ip interfaces show ipv6 interfaces |
Display IP interface information.
|
show ip isis show ipv6 isis |
Display the IS-IS routing table.
|
show ip map-list |
Show IP map list information.
|
show ip nat show ipv6 nat |
Display NAT information.
|
show ip ospf show ipv6 ospf |
Display OSPF status information.
|
show ip prefix-list show ipv6 prefix-list |
Show information about configured IP prefix lists.
|
show ip protocols show ipv6 protocols |
Show information for dynamic routing protocols.
|
show ip route show ipv6 route |
Display the IPv4 or IPv6 routing table.
|
show ipmi |
Show information for the Intelligent Platform Management Interface (IPMI) on the ACOS device.
|
show ipv6 ndisc |
Display information for IPv6 router discovery.
|
show ipv6 neighbor |
Display information about neighboring IPv6 devices.
|
show ipv6 stats |
Show IPv6 statistics.
|
show ipv6 traffic |
Display IPv6 traffic statistics.
|
show isis |
Display information for Intermediate System to Intermediate System (IS-IS).
|
show json-config |
View the JSON/aXAPI data format associated with the running-config, or for a specific object.
|
show json-config-detail |
View detailed JSON/aXAPI data format associated with the running-config, or for a specific object.The output is similar to the output for
show json-config with the addition of the a10-url and obj-type fields. |
show json-config-with-default |
View JSON/aXAPI data format associated with the running-config, or for a specific object. The output is similar to the output for
show json-config-detail with the addition of default values for objects not explicitly configured. |
show key-chain |
Show configuration information for an authentication key chain.
|
show lacp |
Show configuration information and statistics for Link Aggregation Control Protocol (LACP).
|
show lacp-passthrough |
Show LACP passthrough configuration.
|
show license |
Display the host ID and, if applicable, serial number of the license applied to this ACOS device.
|
show lldp neighbors |
Displays information on all remote neighbors or on the specified interface.
|
show lldp statistics |
Displays LLDP receive or send error statistics, You can display information on all interfaces or only display information on a specified interface.
|
show locale |
Display the configured CLI locale.
|
show log |
Display entries in the syslog buffer or display current log settings (policy). Log entries are listed starting with the most recent entry on top.
|
show mac-address-table |
Display MAC table entries.
|
show management |
Show the types of management access allowed on each of the device’s Ethernet interfaces.
|
show memory |
Display memory usage information.
|
show mirror |
Display port mirroring information.
|
show monitor |
Display the event thresholds for system resources.
|
show netflow |
Display NetFlow information.
|
show ntp |
Show the Network Time Protocol (NTP) servers and status.
|
show overlay-tunnel |
Shows statistics of overlay tunnels on the ACOS device.
|
show pki |
Shows information about the certificates on the ACOS device.
|
show poap |
View the POAP status of your system.
|
show process system |
Display the status of system processes.
|
show radius-server |
Display RADIUS statistics.
|
show reboot |
Display scheduled system reboots.
|
show route-map |
Show the configured route maps.
|
show router log file |
Show router logs.
|
show running-config |
Display the running-config.
|
show session |
Display session information.
|
show sflow |
Show sFlow information.
|
show shutdown |
Display scheduled system shutdowns.
|
show snmp |
Display SNMP OIDs for the specified objects.
|
show snmp stats |
Display SNMP statistics.
|
show startup-config |
Display a configuration profile or display a list of all the locally saved configuration profiles.
|
show statistics |
Display packet statistics for interfaces.
|
show store |
Display the configured file transfer profiles in the credential store. The credential store is a saved set of access information for file transfer between the ACOS device and remote file servers.
|
show system cpu-load-sharing |
Displays CPU load sharing information.
|
show system platform |
Display platform-related information and statistics.
|
show system resource-usage |
Display Layer 4 session capacity information.
|
show tacacs-server |
Display TACACS statistics.
|
show techsupport |
Display or export system information for use when troubleshooting.
|
show terminal |
Show the terminal settings.
|
show tftp |
Display the currently configured TFTP block size.
|
show trunk |
Show information about the trunks configured on the system.
|
show version |
Display software, hardware, and firmware version information.
|
show vlans |
Display the configured VLANs.
|
show vrrp-a |
Display VRRP-A information.
|
apply-config |
Apply an AXdebug configuration file.
|
capture |
Start capturing packets.
|
count |
Specify the maximum number of packets to capture.
|
delete |
Delete an axdebug capture file.
|
filter-config |
Configure an AX debug filter, to specify the types of packets to capture.
|
incoming |
Specify the Ethernet interfaces and traffic direction for which to capture packets.
|
length |
Specify the maximum length of packets to capture. Packets that are longer are not captured.
|
maxfile |
Specify the maximum number of axdebug packet capture files to keep.
|
outgoing |
Limits the packet capture to outbound packets on Ethernet interface "x".
|
save-config |
Save your AXdebug configuration to a file.
|
sess-filter-dis |
Disable the session-based filter.
|
tcpdump |
Capture packets for analysis.
|
timeout |
Specify the maximum number of minutes to capture packets.
|
No comments yet.
Cheatography n. The art of mapping complex subjects into clear, instantly navigable reference guides.
