c 00670171

8/16/2019 c 00670171

1/1392

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .

Corporate Headquarters

Cisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000

800 553-NETS (6387)Fax: 408 526-4100

Cisco MDS 9000 Family CommandReferenceCisco MDS SAN-OS Release 3.0(1)April 2006

Text Part Number: OL-6413-01

http://www.cisco.com/http://www.cisco.com/

8/16/2019 c 00670171

2/1392

8/16/2019 c 00670171

3/1392


iii

Cisco MDS 9000 Family Command Reference

OL-6413-01, Cisco MDS SAN-OS Release 3.x

C O N T E N T S

New and Changed Information xxxi

Preface xxxix

Audience xxxix

Organization xxxix

Document Conventions xl

Related Documentation xliiRelease Notes xliiCompatibility Information xliiRegulatory Compliance and Safety InformationxliiHardware Installation xliiCisco Fabric Manager xliiiCommand-Line Interface xliiiTroubleshooting and Reference xliiiInstallation and Configuration Note xliii

Obtaining Documentation xliiiCisco.com xlivProduct Documentation DVDxliv

Ordering Documentation xlivDocumentation Feedback xliv

Cisco Product Security Overview xlvReporting Security Problems in Cisco Productsxlv

Obtaining Technical Assistance xlviCisco Technical Support & Documentation WebsitexlviSubmitting a Service Request xlviDefinitions of Service Request Severity xlvii

Obtaining Additional Publications and Informationxlvii

C H A P T E R 1 CLI Overview 1-1

About the Switch Prompt 1-2

About the CLI Command Modes1-3

Understanding CLI Command Hierarchy1-4EXEC Mode Options 1-5Configuration Mode Options 1-6

8/16/2019 c 00670171

4/1392


Contents

iv



Configuration Mode Commands and Submodes1-6

Navigating Through CLI Commands1-10Getting Help 1-10Command Completion 1-10Using the no and Default Forms of Commands1-11Entering CLI Commands1-11Viewing Switch Configurations 1-11Saving a Configuration 1-14Clearing a Configuration 1-14

Searching and Filtering CLI Output1-14Multiple Filter Commands 1-15Searching and Filtering CLI Output Examples1-16Displaying Users 1-19

Sending Messages to Users 1-19Using the ping Command 1-19Using traceroute 1-20Setting the Switch’s Shell Timeout 1-20

Displaying VTY Sessions 1-20Clearing VTY Sessions 1-21

Setting the Switch’s Terminal Timeout 1-21Setting the Switch’s Terminal Type 1-21Setting the Switch’s Terminal Length 1-22Setting the Switch’s Terminal Width 1-22Displaying Terminal Settings 1-22

Using CLI Variables 1-22User-Defined CLI Session Variables 1-23User-Defined CLI Persistent Variables 1-23System Defined Variables 1-24

Using Command Aliases 1-25Defining Command Aliases 1-25

About Flash Devices 1-26Internal bootflash: 1-26External CompactFlash (Slot0) 1-26

Formatting Flash Disks and File Systems1-27Initializing bootflash: 1-27Formatting Slot0: 1-27

Using the File System 1-28Setting the Current Directory 1-28Displaying the Current Directory 1-28

8/16/2019 c 00670171

5/1392


Contents

v



Listing the Files in a Directory 1-29Creating a New Directory 1-29Deleting an Existing Directory 1-29Moving Files 1-29Copying Files 1-30Deleting Files 1-30Displaying File Contents 1-30Saving Command Output to a File 1-31Directing show Command Output to a File1-31Compressing and Uncompressing Files 1-31Displaying the Last Line in a File1-32Executing Commands Specified in a Script1-32Setting the Delay Time 1-33

Role-Based CLI 1-33Using Valid Formats and Ranges 1-35

Using Debug Commands 1-36Generating debug Command Output 1-37Redirecting debug and Error Message Output 1-37

Enabling Message Logging 1-38Setting the Message Logging Levels 1-38Limiting the Types of Logging Messages Sent to the Console1-39Logging Messages to an Internal Buffer 1-39Limiting the Types of Logging Messages Sent to Another Monitor1-39Logging Messages to a UNIX Syslog Server1-40Limiting Messages to a Syslog Server 1-40

C H A P T E R 2 A Commands 2-1

aaa accounting logsize 2-2

aaa accounting default 2-3

aaa authentication dhchap default 2-4

aaa authentication iscsi default 2-5

aaa authentication login 2-6aaa group server 2-8

abort 2-10

active equals saved 2-11

alert-group 2-12

arp 2-14

attach module 2-15

8/16/2019 c 00670171

6/1392


Contents

vi



attribute qos 2-16

authentication 2-17

autonomous-fabric-id (IVR topology database configuration)2-19

autonomous-fabric-id (IVR service group configuration)2-21autonomous-fabric-id database 2-23

C H A P T E R 3 B Commands 3-1

banner motd 3-2

boot 3-4

bport 3-6

bport-keepalive 3-7

broadcast 3-8

C H A P T E R 4 C Commands 4-1

callhome 4-2

callhome test 4-4

cd 4-5

cdp 4-6

cfs distribute 4-8

cfs ipv4 distribute 4-10

cfs ipv4 mcast-address 4-12

cfs ipv6 distribute 4-14

cfs ipv6 mcast-address 4-16

channel mode active 4-18

channel-group 4-19

cimserver 4-20

class 4-22

clear accounting log 4-24

clear arp-cache 4-25

clear callhome session 4-26clear cdp 4-27

clear cores 4-28

clear counters (EXEC mode)4-29

clear counters (SAN extension N port configuration mode)4-30

clear crypto ike domain ipsec sa 4-31

clear crypto sa domain ipsec 4-32

8/16/2019 c 00670171

7/1392


Contents

vii



clear debug-logfile 4-33

clear device-alias 4-34

clear dpvm 4-35

clear fabric-binding statistics 4-36clear fcanalyzer 4-37

clear fcflow stats 4-38

clear fcns statistics 4-39

clear fcs statistics 4-40

clear fctimer session 4-41

clear ficon 4-42

clear fspf counters 4-43

clear ip access-list counters 4-44

clear ips arp 4-45

clear ips stats 4-46

clear ipv6 access-list 4-47

clear ipv6 neighbors 4-48

clear islb session 4-49

clear ivr fcdomain database 4-50

clear ivr service-group database 4-51

clear ivr zone database 4-52

clear license 4-53clear line 4-54

clear logging 4-55

clear ntp 4-56

clear port-security 4-57

clear processes log 4-59

clear qos statistics 4-60

clear radius session 4-61

clear rlir 4-62

clear role session 4-63

clear rscn session vsan 4-64

clear rscn statistics 4-65

clear santap module 4-66

clear scheduler logfile 4-67

clear screen 4-68

8/16/2019 c 00670171

8/1392


Contents

viii



clear scsi-flow statistics 4-69

clear ssh hosts 4-70

clear system reset-reason 4-71

clear tacacs+ session 4-72clear tlport alpa-cache 4-73

clear user 4-74

clear vrrp 4-75

clear zone 4-76

cli alias name 4-77

cli var name (EXEC)4-79

cli var name (configuration) 4-81

clock 4-82

clock set 4-84

cloud discover 4-85

cloud discovery 4-86

cloud-discovery enable 4-88

code-page 4-89

code-page 4-90

commit 4-91

contract-id 4-92

configure terminal 4-93copy 4-94

copy licenses 4-97

copy ssm-nvram standby-sup 4-98

crypto ca authenticate 4-99

crypto ca crl request 4-101

crypto ca enroll 4-103

crypto ca export 4-105

crypto ca import 4-107

crypto ca test verify 4-109

crypto ca trustpoint 4-110

crypto global domain ipsec security-association lifetime4-112

crypto ike domain ipsec 4-113

crypto ike domain ipsec rekey sa 4-114

crypto ike enable 4-115

8/16/2019 c 00670171

9/1392


Contents

ix



crypto ipsec enable 4-116

crypto key generate rsa 4-117

crypto key zeroize rsa 4-119

crypto map domain ipsec (configuration mode)4-121crypto map domain ipsec (interface configuration submode)4-123

crypto transform-set domain ipsec 4-124

customer-id 4-126

C H A P T E R 5 D Commands 5-1

data-pattern-file 5-2

deadtime (radius group configuration) 5-3

deadtime (tacacs+ group configuration) 5-4

delete 5-5

delete ca-certificate 5-7

delete certificate 5-8

delete crl 5-10

deny (IPv6-ACL configuration)5-11

destination interface 5-14

destination-profile 5-16

device-alias (IVR fcdomain database configuration submode)5-18

device-alias abort 5-19

device-alias commit 5-20

device-alias database 5-21

device-alias distribute 5-22

device-alias import fcalias 5-23

device-alias name 5-24

dir 5-25

disable 5-27

discover custom-list 5-28

discover scsi-target 5-29

distribute 5-31

do 5-32

dpvm abort 5-34

dpvm activate 5-35

dpvm auto-learn 5-36

dpvm commit 5-38

8/16/2019 c 00670171

10/1392


Contents

x



dpvm database 5-39

dpvm database copy active 5-40

dpvm database diff 5-41

dpvm distribute 5-43dpvm enable 5-44

dscp 5-45

duplicate-message throttle 5-46

C H A P T E R 6 Debug Commands 6-1

debug aaa 6-2

debug all 6-4

debug biosd 6-5

debug bootvar 6-6

debug callhome 6-7

debug cert-enroll 6-9

debug cdp 6-11

debug cfs 6-13

debug cimserver 6-15

debug cloud 6-16

debug core 6-18

debug device-alias 6-19

debug dpvm 6-21

debug dstats 6-23

debug ethport 6-24

debug exceptionlog 6-26

debug fabric-binding 6-27

debug fc-tunnel 6-29

debug fc2 6-31

debug fc2d 6-34

debug fcc 6-36

debug fcdomain 6-38

debug fcfwd 6-40

debug fcns 6-42

debug fcs 6-44

debug fcsp-mgr 6-46

debug fdmi 6-48

8/16/2019 c 00670171

11/1392


Contents

xi



debug ficon 6-50

debug flogi 6-52

debug fm 6-54

debug fspf 6-56debug hardware arbiter 6-59

debug idehsd 6-60

debug ike 6-61

debug ilc_helper 6-62

debug ipacl 6-63

debug ipconf 6-64

debug ipfc 6-65

debug ips 6-66

debug ipsec 6-68

debug isns 6-70

debug ivr 6-72

debug klm 6-74

debug license 6-76

debug logfile 6-77

debug mcast 6-79

debug mip 6-81

debug module 6-82debug ntp 6-83

debug obfl 6-84

debug platform 6-85

debug plog 6-87

debug port 6-88

debug port-channel 6-90

debug port-resources 6-91

debug qos 6-93

debug radius 6-94

debug rd-reg 6-96

debug rdl errors 6-97

debug rib 6-98

debug rlir 6-99

debug rscn 6-100

8/16/2019 c 00670171

12/1392


Contents

xii



debug san-ext-tuner 6-101

debug scsi-flow 6-103

debug scsi-target 6-105

debug security 6-106debug sensor 6-107

debug snmp 6-108

debug span 6-110

debug system health 6-112

debug tacacs+ 6-114

debug tcap 6-116

debug tlport 6-117

debug ttyd 6-118

debug vni 6-119

debug vrrp 6-120

debug vsan 6-122

debug wr-reg 6-124

debug wwn 6-125

debug xbar 6-127

debug xbar_driver 6-128

debug xbc 6-129

debug zone 6-130

C H A P T E R 7 E Commands 7-1

email-contact 7-2

enable 7-3

encryption 7-4

end 7-5

enrollment terminal 7-6

exit 7-7

C H A P T E R 8 F Commands 8-1

fabric-binding activate 8-2

fabric-binding database copy 8-4

fabric-binding database diff 8-5

fabric-binding database vsan 8-6

fabric-binding enable 8-8

8/16/2019 c 00670171

13/1392

8/16/2019 c 00670171

14/1392


Contents

xiv



fc-tunnel 8-53

ficon enable 8-55

ficon logical-port assign port-numbers 8-56

ficon slot assign port-numbers 8-57ficon swap 8-59

ficon-tape-accelerator vsan 8-60

ficon vsan (EXEC mode)8-62

ficon vsan (configuration mode) 8-64

file 8-65

find 8-66

format 8-67

fspf config vsan 8-68

fspf cost 8-70

fspf dead-interval 8-71

fspf enable vsan 8-72

fspf hello-interval 8-73

fspf passive 8-74

fspf retransmit-interval 8-75

C H A P T E R 9 G Commands 9-1

group 9-2

gzip 9-3

gunzip 9-5

C H A P T E R 10 H Commands 10-1

hash 10-2

host 10-3

hw-module logging onboard 10-5

C H A P T E R 11 I Commands 11-1identity 11-2

in-order-guarantee 11-4

initiator 11-5

install all 11-6

install clock-module 11-12

install license 11-14

8/16/2019 c 00670171

15/1392


Contents

xv



install module bios 11-15

install module epld 11-16

install module loader 11-18

install ssi 11-19interface 11-20

interface fc 11-22

interface fc-tunnel 11-24

interface fcip 11-26

interface gigabitethernet 11-29

interface iscsi 11-31

interface mgmt 11-33

interface port-channel 11-35

interface vsan 11-37

ip access-group 11-38

ip access-list 11-40

ip address (FCIP profile configuration submode)11-43

ip address (interface configuration) 11-44

ip-compression 11-45

ip default-gateway 11-47

ip default-network 11-48

ip domain-list 11-49ip domain-lookup 11-50

ip domain-name 11-51

ip name-server 11-52

ip route 11-53

ip routing 11-54

ipv6 access-list 11-55

ipv6 address 11-56

ipv6 address autoconfig 11-58

ipv6 enable 11-59

ipv6 nd 11-60

ipv6 route 11-62

ipv6 routing 11-64

ipv6 traffic-filter 11-65

iscsi authentication 11-66

8/16/2019 c 00670171

16/1392


Contents

xvi



iscsi duplicate-wwn-check 11-68

iscsi dynamic initiator 11-70

iscsi enable 11-72

iscsi import target fc 11-73iscsi initiator idle-timeout 11-74

iscsi initiator ip-address 11-75

iscsi initiator name 11-77

iscsi interface vsan-membership 11-78

iscsi save-initiator 11-79

iscsi virtual-target name 11-81

islb abort 11-84

islb commit 11-85

islb distribute 11-86

islb initiator 11-88

islb save-initiator 11-90

islb virtual-target name 11-92

islb vrrp 11-94

islb zoneset activate 11-96

isns 11-97

isns distribute 11-99

isns esi retries 11-100isns profile name 11-101

isns reregister 11-102

isns-server enable 11-103

ivr abort 11-104

ivr commit 11-105

ivr copy active-service-group user-configured-service-group11-106

ivr copy active-topology user-configured-topology11-107

ivr copy active-zoneset full-zoneset 11-108

ivr copy auto-topology user-configured-topology11-109

ivr distribute 11-110

ivr enable 11-111

ivr fcdomain database autonomous-fabric-num 11-112

ivr nat 11-113

ivr refresh 11-114

8/16/2019 c 00670171

17/1392


Contents

xvii



ivr service-group activate 11-115

ivr service-group name 11-117

ivr virtual-fcdomain-add 11-119

ivr vsan-topology 11-120ivr vsan-topology database 11-122

ivr withdraw domain 11-124

ivr zone name 11-125

ivr zone rename 11-126

ivr zoneset 11-127

ivr zoneset rename 11-128

C H A P T E R 12 J Commands 12-1

job name 12-2

C H A P T E R 13 K Commands 13-1

keepalive 13-2

kernel core 13-3

key 13-5

C H A P T E R 14 L Commands 14-1

lifetime seconds 14-2

line com1 14-3

line console 14-6

line vty 14-9

logging abort 14-10

logging commit 14-11

logging console 14-12

logging distribute 14-13

logging level 14-14

logging logfile 14-15logging module 14-16

logging monitor 14-17

logging server 14-18

logging timestamp 14-20

8/16/2019 c 00670171

18/1392


Contents

xviii



C H A P T E R 15 M Commands 15-1

match 15-2

match address 15-4

mcast root 15-5member (fcalias configuration submode) 15-6

member (ivr zone configuration) 15-8

member (zone configuration and zoneset-zone configuration submode)15-10

member (zoneset configuration submode) 15-12

metric (iSLB initiator configuration)15-13

mkdir 15-14

modem connect line 15-15

move 15-16

mutual-chap username (iSCSI initiator configuration and iSLB initiator configuration)15-17

C H A P T E R 16 N Commands 16-1

nasb module 16-2

nasb rediscover module 16-4

native-autonomous-fabric-num 16-5

npiv enable 16-6

nport pwwn 16-7

ntp 16-8ntp abort 16-9

ntp commit 16-10

ntp distribute 16-11

nwwn (DPVM database configuration submode)16-12

nwwn (SAN extension configuration mode)16-13

C H A P T E R 17 O Commands 15

ocsp url 16

out-of-service 18

out-of-service module 20

out-of-service xbar 21

C H A P T E R 18 P Commands 17-1

passive-mode 17-2

peer-info ipaddr 17-3

8/16/2019 c 00670171

19/1392


Contents

xix



periodic-inventory notification 17-5

permit (IPv6-ACL configuration)17-6

phone-contact 17-9

ping 17-10policy 17-12

port 17-13

port-channel persistent 17-14

port-security 17-15

port-security abort 17-18

port-security commit 17-19

port-security database 17-20

port-security distribute 17-22

port-security enable 17-23

port-track enable 17-24

port-track force-shut 17-25

port-track interface 17-26

portaddress 17-28

power redundancy-mode 17-30

poweroff module 17-32

priority 17-33

purge fcdomain fcid 17-35purge module 17-36

pwc 17-37

pwd 17-38

pwwn (DPVM database configuration submode)17-39

pwwn (fcdomain database configuration submode) 17-40

C H A P T E R 19 Q Commands 18-1

qos class-map 18-2

qos control priority 18-3

qos dwrr-q 18-4

qos enable 18-5

qos policy-map 18-6

qos priority 18-7

qos service 18-8

quiesce 18-9

8/16/2019 c 00670171

20/1392


Contents

xx



C H A P T E R 20 R Commands 19-1

radius abort 19-2

radius commit 19-3

radius distribute 19-4radius-server deadtime 19-5

radius-server directed-request 19-6

radius-server host 19-7

radius-server key 19-9

radius-server retransmit 19-10

radius-server timeout 19-11

reload 19-12

read command-id 19-14

read-only 19-15

revocation-check 19-16

rmdir 19-18

rmon alarm 19-19

rmon event 19-21

role abort 19-22

role commit 19-23

role distribute 19-24

role name 19-25rsakeypair 19-27

rscn 19-29

rscn abort vsan 19-30

rscn commit vsan 19-31

rscn distribute 19-32

rscn event-tov 19-33

run-script 19-35

rspan-tunnel 19-37

C H A P T E R 21 S Commands 20-1

santap module 20-2

scsi-flow distribute 20-4

scsi-flow flow-id 20-5

send 20-7

8/16/2019 c 00670171

21/1392


Contents

xxi



server 20-8

server (radius configuration) 20-9

server (tacacs+ configuration) 20-10

set (IPsec crypto map configuration submode)20-11setup 20-13

setup ficon 20-14

shutdown 20-15

site-id 20-17

sleep 20-18

snmp port 20-19

snmp-server 20-20

snmp-server enable traps 20-22

snmp-server host 20-25

snmp-server user 20-26

source 20-28

span session 20-31

special-frame 20-32

ssh 20-33

ssh key 20-34

ssh server enable 20-36

ssm enable feature 20-37static (iSCSI initiator configuration and iSLB initiator configuration)20-40

stop 20-42

streetaddress 20-43

suspend 20-44

switch-priority 20-46

switch-wwn 20-47

switchname 20-49

switchport 20-50

switchport auto-negotiate 20-55

switchport ignore bit-errors 20-56

switchport ingress-rate 20-58

switchport initiator id 20-59

switchport promiscuous-mode 20-60

switchport proxy-initiator 20-61

8/16/2019 c 00670171

22/1392


Contents

xxii



system cores 20-63

system default switchport 20-64

system default zone default-zone permit 20-65

system default zone distribute full 20-66system hap-reset 20-67

system health 20-68

system health clear-errors 20-70

system health external-loopback 20-72

system health internal-loopback 20-74

system health module 20-76

system health serdes-loopback 20-79

system heartbeat 20-81

system memlog 20-82

system startup-config 20-83

system statistics reset 20-84

system switchover (EXEC mode)20-85

system switchover (configuration mode) 20-86

system trace 20-87

system watchdog 20-88

C H A P T E R 22 Show Commands 21-1

show aaa accounting 21-2

show aaa authentication 21-3

show aaa groups 21-4

show accounting log 21-5

show arp 21-7

show autonomous-fabric-id database 21-8

show banner motd 21-10

show boot 21-11

show boot auto-copy 21-12

show callhome 21-14

show cdp 21-17

show cfs 21-21

show cimserver 21-23

show cli alias 21-24

show cli variables 21-25

8/16/2019 c 00670171

23/1392


Contents

xxiii



show clock 21-26

show cloud discovery 21-27

show cloud membership 21-28

show cores 21-30show crypto ca certificates 21-31

show crypto ca crl 21-33

show crypto ca trustpoints 21-35

show crypto global domain ipsec 21-36

show crypto ike domain ipsec 21-38

show crypto key mypubkey rsa 21-39

show crypto map domain ipsec 21-40

show crypto sad domain ipsec 21-42

show crypto spd domain ipsec 21-44

show crypto transform-set domain ipsec 21-45

show debug 21-46

show device-alias 21-49

show dpvm 21-51

show environment 21-52

show fabric-binding 21-54

show fc-tunnel 21-58

show fc2 21-59show fcalias 21-62

show fcanalyzer 21-63

show fcc 21-64

show fcdomain 21-65

show fcdroplatency 21-69

show fcflow stats 21-70

show fcfwd 21-71

show fcid-allocation 21-72

show fcip 21-73

show fcns database 21-75

show fcns statistics 21-79

show fcroute 21-80

show fcs 21-83

show fcsp 21-87

8/16/2019 c 00670171

24/1392


Contents

xxiv



show fctimer 21-89

show fdmi 21-91

show ficon 21-94

show file 21-101show flogi database 21-102

show fspf 21-104

show hardware 21-107

show hosts 21-109

show incompatibility system 21-110

show install all impact 21-111

show install all status 21-113

show in-order-guarantee 21-115

show interface 21-116

show inventory 21-123

show ip access-list 21-124

show ip arp 21-125

show ip interface 21-126

show ip route 21-128

show ip routing 21-129

show ip traffic 21-130

show ips arp 21-131show ips ip route 21-132

show ips ipv6 21-133

show ips stats 21-135

show ips status 21-138

show ipv6 access-list 21-139

show ipv6 interface 21-140

show ipv6 neighbours 21-142

show ipv6 route 21-143

show ipv6 routing 21-144

show ipv6 traffic 21-145

show iscsi global 21-147

show iscsi initiator 21-148

show iscsi session 21-150

show iscsi stats 21-152

8/16/2019 c 00670171

25/1392


Contents

xxv



show iscsi virtual-target 21-156

show islb cfs-session status 21-157

show islb initiator 21-158

show islb merge status 21-160show islb pending 21-161

show islb pending-diff 21-162

show islb session 21-163

show islb status 21-165

show islb virtual-target 21-166

show islb vrrp 21-168

show isns 21-175

show ivr 21-178

show ivr fcdomain database 21-183

show ivr service-group 21-185

show ivr virtual-switch-wwn 21-186

show kernel core 21-187

show license 21-188

show line 21-190

show logging 21-192

show mcast 21-215

show module 21-217show nasb 21-223

show ntp 21-226

show port index-allocation 21-228

show port-channel 21-230

show port-resources module 21-234

show port-security 21-236

show processes 21-239

show qos 21-242

show radius 21-244

show radius-server 21-245

show rlir 21-247

show rmon 21-251

show role 21-253

show rscn 21-255

8/16/2019 c 00670171

26/1392


Contents

xxvi



show running-config 21-257

show san-ext-tuner 21-260

show santap module 21-261

show scheduler 21-265show scsi-flow 21-267

show scsi-target 21-271

show snmp 21-274

show span session 21-277

show sprom 21-279

show ssh 21-282

show ssm provisioning 21-284

show startup-config 21-285

show switchname 21-289

show system 21-290

show system health 21-293

show tacacs+ 21-296

show tacacs-server 21-297

show tech-support 21-299

show telnet server 21-304

show terminal 21-305

show tlport 21-306show topology 21-308

show trunk protocol 21-310

show user-account 21-311

show users 21-312

show version 21-313

show vrrp 21-317

show vsan 21-319

show wwn 21-322

show zone 21-323

show zone analysis 21-328

show zone-attribute-group 21-334

show zoneset 21-335

C H A P T E R 23 T Commands 22-1

tacacs+ abort 22-2

8/16/2019 c 00670171

27/1392


Contents

xxvii



tacacs+ commit 22-3

tacacs+ distribute 22-4

tacacs+ enable 22-5

tacacs-server deadtime 22-6tacacs-server directed-request 22-7

tacacs-server host 22-8

tacacs-server key 22-10

tacacs-server timeout 22-12

tail 22-13

tape-read command-id 22-14

tape-write command-id 22-16

target (iSLB initiator configuration)22-18

tcp cwm 22-21

tcp keepalive-timeout 22-23

tcp maximum-bandwidth-kbps 22-24

tcp maximum-bandwidth-mbps 22-26

tcp max-jitter 22-28

tcp max-retransmissions 22-30

tcp min-retransmit-time 22-31

tcp pmtu-enable 22-32

tcp qos 22-34tcp qos control 22-35

tcp sack-enable 22-36

tcp send-buffer-size 22-37

tcp-connection 22-38

telnet 22-39

telnet server enable 22-40

terminal 22-41

time 22-43

time-stamp 22-45

tlport alpa-cache 22-46

traceroute 22-47

transfer-ready-size 22-48

transport email 22-49

trunk protocol enable 22-51

8/16/2019 c 00670171

28/1392


Contents

xxviii



C H A P T E R 24 U Commands 23-1

undebug all 23-2

update license 23-3

use-profile 23-4username 23-5

username (iSCSI initiator configuration and iSLB initiator configuration)23-8

C H A P T E R 25 V Commands 24-1

vrrp 24-2

vsan (iSCSI initiator configuration and iSLB initiator configuration)24-5

vsan database 24-7

vsan policy deny 24-10

C H A P T E R 26 W Commands 25-1

write command-id 25-2

write-accelerator 25-3

write erase 25-5

wwn secondary-mac 25-6

wwn vsan 25-7

C H A P T E R 27 Z Commands 26-1

zone broadcast enable vsan 26-2

zone clone 26-3

zone commit vsan 26-4

zone compact vsan 26-5

zone copy 26-6

zone default-zone 26-8

zone merge-control restrict vsan 26-9

zone mode enhanced vsan 26-10

zone name (configuration mode) 26-11zone name (zone set configuration submode) 26-14

zone rename 26-15

zone-attribute-group clone 26-16

zone-attribute-group name 26-17

zone-attribute-group rename 26-18

zonename (iSLB initiator configuration)26-19

8/16/2019 c 00670171

29/1392


Contents

xxix



zoneset (configuration mode) 26-21

zoneset (EXEC mode) 26-23

C H A P T E R 28 Caching Services Module Commands 28-1

cluster add 28-2

cluster config 28-4

cluster name 28-5

dir modflash: 28-7

feature enable 28-8

flash-copy 28-10

host 28-12

install module node 28-14

interface svc 28-16

iogroup 28-18

ip 28-19

mdisk-grp 28-20

migrate vdisk 28-22

node 28-23

node svc delete 28-25

node svc recover 28-26

node svc servicemode 28-27

node svc upgrade 28-28

quorum 28-29

remote-copy 28-30

show cluster flash-copy 28-32

show cluster host 28-33

show cluster iogroup 28-34

show cluster ip 28-35

show cluster mdisk 28-36

show cluster mdsik-grp 28-38

show cluster nodes 28-39

show cluster remote-copy 28-40

show cluster remote-copy-cluster 28-41

show cluster status 28-42

show cluster vdisk 28-43

show environment battery 28-44

8/16/2019 c 00670171

30/1392


Contents

xxx



show interface svc 28-46

show nodes 28-49

show svc 28-51

svc-config 28-54svc-ibmcli 28-55

svc-purge-wwn module 28-56

vdisk 28-57

8/16/2019 c 00670171

31/1392


xxxi



New and Changed Information

Table 1 summarizes the new and changed commands for Cisco MDS SAN-OS Release 3.0(1), and tellsyou where they are documented in the Cisco MDS 9000 Family Command Reference .

Table 1 New and Changed Information for the Cisco MDS 9000 Family Command Reference

Feature Description Where DocumentedAAA enhancements aaa authentication login command A Commands

deadtime (radius group configuration) command

deadtime (tacacs+ group configuration) command

D Commands

debug radius command ( server-monitor andserver-monitor-errors options)

debug tacacs+ command ( server-monitor and server-monitor-errors options)

Debug Commands

radius-server deadtime commandradius-server directed-request command

radius-server host command

R Commands

server (radius configuration) command

server (tacacs+ configuration) command

S Commands

show aaa authentication command

show radius-server command

show tacacs-server command

Show Commands

tacacs-server deadtime command

tacacs-server directed-request commandtacacs-server host command

T Commands

username command U Commands

boot auto-copy commandenabled by default

boot command B Commands

Call Home alert-group command A Commands

show callhome command Show Commands

8/16/2019 c 00670171

32/1392

xxxii




Certificate authorities anddigital certificates

crypto ca authenticate command

crypto ca crl request command

crypto ca enroll command

crypto ca export command

crypto ca import command

crypto ca test verify command

crypto ca trustpoint command

crypto key generate rsa command

crypto key zeroize rsa command

C Commands

delete ca-certificate command

delete certificate command

D Commands

debug cert-enroll command Debug Commands

enrollment terminal command E Commands

ocsp url command O Commands

revocation-check command

rsakeypair command

R Commands

show crypto ca certificates command

show crypto ca crl command

show crypto ca trustpoints command

show crypto key mypubkey rsa command

Show Commands

CFS support for alloweddomain ID list

fcdomain abort vsan command

fcdomain commit vsan command

fcdomain distribute command

F Commands

show fcdomain command Show Commands

CFS over IP cfs ipv4 distribute command

cfs ipv4 mcast-address command

cfs ipv6 distribute command

cfs ipv6 mcast-address command

C Commands

CFS support for RSCN clear rscn session vsan command C Commands

rscn abort vsan commandrscn commit vsan command

rscn distribute command

rscn event-tov command

R Commands

show rscn command Show Commands


Feature Description Where Documented

8/16/2019 c 00670171

33/1392

xxxiii




CLI Enhancements cli alias name command

cli var name (EXEC) command

cli var name (configuration) command

C Commands

show cli alias command

show cli variables command

Show Commands

pwc command P Commands

run-script command R Commands

Cloud Discovery cloud discover command

cloud discovery command

cloud-discovery enable command

C Commands

debug cloud command Debug Commands

show cloud discovery command

show cloud membership command

show debug command

Show Commands

Configuration Check show incompatibility system command Show Commands

Crossbar graceful shutdown out-of-service module command

out-of-service xbar command

O Commands

Deprecated Commands fcid-last-byte command F Commands

EPLD enhancements for theMDS 9513

install clock-module command I Commands

show version commnand ( clock-module

option)

Show Commands

FICON Port Numbering ficon enable command

ficon logical-port assign port-numbers command

ficon slot assign port-numbers command

F Commands

show ficon command Show Commands

Generation 2 Module Support channel-group command C Commands

debug port-resources command Debug Commands

out-of-service command O Commands

switchport command ( rate-mode and

fcbbscn options)

S Commands

show interface command ( fc capabilities option)

show module command (recovery-stepsoption )

show port index-allocation command

show port-resources module command

Show Commands



8/16/2019 c 00670171

34/1392

xxxiv




IKE Enhancements authentication command A Commands

identity command I Commands

key command K Commands

IPv6 clear ips stats command

clear ipv6 access-list command

clear ipv6 neighbors command

clear vrrp commands

C Commands

deny (IPv6-ACL configuration) command D Commands

ipv6 access-list command

ipv6 address command

ipv6 address autoconfig command

ipv6 enable command

ipv6 nd command

ipv6 route command

ipv6 routing command

ipv6 traffic-filter command

I Commands

permit (IPv6-ACL configuration) command

ping command

P Commands

show ip arp command

show ip interface command

show ip traffic command

show ips ipv6 command

show ipv6 access-list command

show ipv6 interface command

show ipv6 neighbours command

show ipv6 route command

show ipv6 routing command

show ipv6 traffic command

show vrrp command

Show Commands

traceroute command T Commandsvrrp command V Commands

iSCSI Server Load Balancing(iSLB)

clear islb session command C Commands

debug ips command ( iSLB option) Debug Commands



8/16/2019 c 00670171

35/1392

8/16/2019 c 00670171

36/1392

xxxvi




IVR clear ivr service-group database command C Commands

ivr copy active-service-group

user-configured-service-group commandivr copy active-topologyuser-configured-topology command

ivr copy active-zoneset full-zoneset command

ivr service-group activate command

ivr zone rename command

ivr zoneset rename command

I Commands

show ivr service-group command

show ivr virtual-switch-wwn command

Show Commands

Lossless InOrder Delivery(IOD)

debug rib command Debug Commands

McData InteroperabilitySupport

show wwn command Show Commands

vsan database command V Commands

wwn vsan command W Commands

Message logging logging timestamp command L Commands

N-port identifiervirtualization (NPIV)

npiv enable command N Commands

Onboard Failure Logging(OBFL)

clear logging command C Commands

hw-module logging onboard command H Commands

show logging command Show Commands

Online Health ManagementSystem

system health command

system health external-loopback command

system health internal-loopback command

system health module command

system health serdes-loopback command

S Commands

SAN tuner extension tape-read command-id command

tape-write command-id command

T Commands

SANTap clear santap module command C Commands

santap module command ( cvt-name , dvt ,target-pwwn , target-vsan , dvt-name ,dvt-vsan , dvt-port , lun-size-handling , andio-timeout options )

S Commands

Troubleshooting show tech-support command ( fcdomain ,port-channel , and zone options)

Show Commands



8/16/2019 c 00670171

37/1392

xxxvii




Zoning clear zone command ( lock option) C Commands

system default zone default-zone permit

commandsystem default zone distribute full command

S Commands

show system command

show zone analysis command

Show Commands

zone compact vsan command

zone default-zone command

zoneset (configuration mode) command

Z Commands



8/16/2019 c 00670171

38/1392

xxxviii




8/16/2019 c 00670171

39/1392


xxxix



Preface

This preface describes the audience, organization, and conventions of the Cisco MDS 9000 FamilyCommand Reference . It also provides information on how to obtain related documentation.

AudienceThis guide is for experienced network operators and administrators who are responsible for configuringand maintaining the Cisco MDS 9000 family of multilayer directors and fabric switches.

OrganizationThis guide is organized as follows:

Chapter Title Description

Chapter 1 CLI Overview Describes the CLI (command-line interface).Chapter 2 A Commands Describes all commands beginning with the letter “a.”

Chapter 3 B Commands Describes all commands beginning with the letter “b.”

Chapter 4 C Commands Describes all commands beginning with the letter “c.”

Chapter 5 D Commands Describes all commands beginning with the letter “d.”

Chapter 6 Debug Commands Describes all the debug commands.

Chapter 7 E Commands Describes all commands beginning with the letter “e.”

Chapter 8 F Commands Describes all commands beginning with the letter “f.”

Chapter 9 G Commands Describes all commands beginning with the letter “g.”

Chapter 10 H Commands Describes all commands beginning with the letter “h.”Chapter 11 I Commands Describes all commands beginning with the letter “i.”

Chapter 12 J Commands Describes all commands beginning with the letter “j.”

Chapter 13 K Commands Describes all commands beginning with the letter “k.”

Chapter 14 L Commands Describes all commands beginning with the letter “l.”

Chapter 15 M Commands Describes all commands beginning with the le tter “m.”

Chapter 16 N Commands Describes all commands beginning with the letter “n.”

8/16/2019 c 00670171

40/1392


xl



Preface Document Conventions

Document ConventionsCommand descriptions use these conventions:

Screen examples use these conventions:

Chapter 17 O Commands Describes all commands beginning with the letter “o.”

Chapter 18 P Commands Describes all commands beginning with the letter “p.”

Chapter 19 Q Commands Describes all commands beginning with the letter “q.”

Chapter 20 R Commands Describes all commands beginning with the letter “r.”Chapter 21 S Commands Describes all commands beginning with the le tter “s” except for

the show commands.

Chapter 22 Show Commands Describes all the show commands.

Chapter 23 T Commands Describes all commands beginning with the letter “t.”

Chapter 24 U Commands Describes all commands beginning with the letter “u.”

Chapter 25 V Commands Describes a ll commands beginning with the le tter “v.”

Chapter 26 W Commands Describes a ll commands beginning with the le tter “w.”

Chapter 27 Z Commands Describes all commands beginning with the letter “z.”

Chapter 28 Caching ServicesModule Commands

Describes all commands pertaining to the Caching ServicesModule (CSM).

Chapter Title Description

Convention Indication

boldface f ont Commands and keywords are in boldface.

italic font Arguments for which you supply values are in italics.

[ ] Elements in square brackets are optional.

{x | y | z } Required alternative keywords are grouped in braces and separated by verticalbars.

[ x | y | z ] Optional alternative keywords are grouped in brackets and separated by verticalbars.

string A nonquoted set of characters. Do not use quotation marks around the string orthe string will include the quotation marks.

Convention Indication

screen font Terminal sessions and information the switch displays are in screen font.

boldface screen font

Information you must enter is in boldface screen font.

italic screen font Arguments for which you supply values are in italic screen font.

< > Nonprinting characters, such as passwords are in angle brackets.

[ ] Default responses to system prompts are in square brackets.

!, # An exclamation point (!) or a pound sign (#) at the beginning of a line of codeindicates a comment line.

8/16/2019 c 00670171

41/1392


xli



Preface Document Conventions

This document uses the following conventions:

Note Means reader take note . Notes contain helpful suggestions or references to material not covered in themanual.

Caution Means reader be careful . In this situation, you might do something that could result in equipmentdamage or loss of data.

8/16/2019 c 00670171

42/1392


xlii



Preface Related Documentation

Related DocumentationThe documentation set for the Cisco MDS 9000 Family includes the following documents. To find adocument online, use the Cisco MDS SAN-OS Documentation Locator at:http://www.cisco.com/en/US/products/ps5989/products_documentation_roadmap09186a00804500c1.html .

For information on IBM TotalStorage SAN Volume Controller Storage Software for the Cisco MDS9000 Family, refer to the IBM TotalStorage Support website:http://www.ibm.com/storage/support/2062-2300/

Release Notes Cisco MDS 9000 Family Release Notes for Cisco MDS SAN-OS Releases

• Cisco MDS 9000 Family Release Notes for Storage Services Interface Images

• Cisco MDS 9000 Family Release Notes for Cisco MDS SVC Releases

• Cisco MDS 9000 Family Release Notes for Cisco MDS 9000 EPLD Images

Compatibility Information• Cisco MDS 9000 SAN-OS Hardware and Software Compatibi lity Information

• Cisco MDS 9000 Family Interoperability Support Matrix

• Cisco MDS SAN-OS Release Compatibi lity Matrix for IBM SAN Volume Controller Software forCisco MDS 9000

• Cisco MDS SAN-OS Release Compatibili ty Matrix for Storage Service Interface Images

Regulatory Compliance and Safety Information• Regulatory Compliance and Safety Information for the Cisco MDS 9000 Family

Hardware Installation• Cisco MDS 9500 Series Hardware Installa tion Guide

• Cisco MDS 9200 Series Hardware Installa tion Guide

• Cisco MDS 9216 Switch Hardware Installat ion Guide

• Cisco MDS 9100 Series Hardware Installa tion Guide

• Cisco MDS 9020 Fabric Switch Hardware Installation Guide

http://www.ibm.com/storage/support/2062-2300/http://www.ibm.com/storage/support/2062-2300/

8/16/2019 c 00670171

43/1392


xliii



Preface Obtaining Documentation

Cisco Fabric Manager• Cisco MDS 9000 Family Fabric Manager Quick Configuration Guide

• Cisco MDS 9000 Family Fabric Manager Configuration Guide

• Cisco MDS 9000 Fabric Manager Online Help

• Cisco MDS 9000 Fabric Manager Web Services Online Help

Command-Line Interface• Cisco MDS 9000 Family Software Upgrade and Downgrade Guide

• Cisco MDS 9000 Family CLI Quick Configuration Guide

• Cisco MDS 9000 Family CLI Configuration Guide

• Cisco MDS 9000 Family Command Reference

• Cisco MDS 9000 Family Quick Command Reference

• Cisco MDS 9020 Fabric Switch Configuration Guide and Command Reference

• Cisco MDS 9000 Family SAN Volume Controller Configuration Guide

Troubleshooting and Reference• Cisco MDS 9000 Family Troubleshooting Guide

• Cisco MDS 9000 Family MIB Quick Reference

• Cisco MDS 9020 Fabric Switch MIB Quick Reference

• Cisco MDS 9000 Family SMI-S Programming Reference

• Cisco MDS 9000 Family System Messages Reference

• Cisco MDS 9020 Fabric Switch System Messages Reference

Installation and Configuration Note• Cisco MDS 9000 Family SSM Configuration Note

• Cisco MDS 9000 Family Port Analyzer Adapter Installat ion and Configuration Note

Obtaining DocumentationCisco documentation and additional literature are available on Cisco.com. Cisco also provides severalways to obtain technical assistance and other technical resources. These sections explain how to obtaintechnical information from Cisco Systems.

8/16/2019 c 00670171

44/1392


xliv



Preface Documentation Feedback

Cisco.comYou can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

You can access the Cisco website at this URL:http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Product Documentation DVDThe Product Documentation DVD is a comprehensive library of technical product documentation on aportable medium. The DVD enables you to access multiple versions of installation, configuration, andcommand guides for Cisco hardware and software products. With the DVD, you have access to the sameHTML documentation that is found on the Cisco website without being connected to the Internet.Certain products also have .PDF versions of the documentation available.

The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.comusers (Cisco direct customers) can order a Product Documentation DVD (product numberDOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at this URL:

http://www.cisco.com/go/marketplace/

Ordering DocumentationRegistered Cisco.com users may order Cisco documentation at the Product Documentation Store in theCisco Marketplace at this URL:

http://www.cisco.com/go/marketplace/ Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m.(0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere bycalling 011 408 519-5055. You can also order documentation by e-mail [email protected] or by fax at 1 408 519-5001 in the United States and Canada,or elsewhere at 011 408 519-5001.

Documentation FeedbackYou can rate and provide feedback about Cisco technical documents by completing the online feedbackform that appears with the technical documents on Cisco.com.

You can submit comments about Cisco documentation by using the response card (if present) behind thefront cover of your document or by writing to the following address:

Cisco SystemsAttn: Customer Document Ordering170 West Tasman DriveSan Jose, CA 95134-9883

We appreciate your comments.

http://www.cisco.com/techsupporthttp://www.cisco.com/http://www.cisco.com/public/countries_languages.shtmlhttp://www.cisco.com/go/marketplace/http://www.cisco.com/go/marketplace/mailto:[email protected]:[email protected]://www.cisco.com/go/marketplace/http://www.cisco.com/go/marketplace/http://www.cisco.com/public/countries_languages.shtmlhttp://www.cisco.com/http://www.cisco.com/techsupport

8/16/2019 c 00670171

45/1392


xlv



Preface Cisco Product Security Overview

Cisco Product Security OverviewCisco provides a free online Security Vulnerability Policy portal at this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

From this site, you will find information about how to:• Report security vulnerabilities in Cisco products.

• Obtain assistance with security incidents that involve Cisco products.

• Register to receive security information from Cisco.

A current list of security advisories, security notices, and security responses for Cisco products isavailable at this URL:

http://www.cisco.com/go/psirt

To see security advisories, security notices, and security responses as they are updated in real time, youcan subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS)feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:

http://www.cisco.com/en/US/products/products_psirt_rss_feed.html

Reporting Security Problems in Cisco ProductsCisco is committed to delivering secure products. We test our products internally before we release them,and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerabilityin a Cisco product, contact PSIRT:

• For Emergencies only — [email protected]

An emergency is either a condition in which a system is under active attack or a condition for whicha severe and urgent security vulnerability should be reported. All other conditions are considerednonemergencies.

• For Nonemergencies— [email protected]

In an emergency, you can also reach PSIRT by telephone:

• 1 877 228-7302

• 1 408 525-6532

Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product (for example, GnuPG) toencrypt any sensitive information that you send to Cisco. PSIRT can work with information that has beenencrypted with PGP versions 2. x through 9. x .

Never use a revoked or an expired encryption key. The correct public key to use in your correspondencewith PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy pageat this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

The link on this page has the current PGP key ID in use.

If you do not have or use PGP, contact PSIRT at the aforementioned e-mail addresses or phone numbersbefore sending any sensitive material to find other means of encrypting the data.

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.htmlhttp://www.cisco.com/go/psirthttp://www.cisco.com/en/US/products/products_psirt_rss_feed.htmlmailto:[email protected]:[email protected]://www.cisco.com/en/US/products/products_security_vulnerability_policy.htmlhttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.htmlmailto:[email protected]:[email protected]://www.cisco.com/en/US/products/products_psirt_rss_feed.htmlhttp://www.cisco.com/go/psirthttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

8/16/2019 c 00670171

46/1392


xlvi



Preface Obtaining Technical Assistance

Obtaining Technical AssistanceCisco Technical Support provides 24-hour-a-day award-winning technical assistance. The CiscoTechnical Support & Documentation website on Cisco.com features extensive online support resources.In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC)

engineers provide telephone support. If you do not have a valid Cisco service contract, contact yourreseller.

Cisco Technical Support & Documentation WebsiteThe Cisco Technical Support & Documentation website provides online documents and tools fortroubleshooting and resolving technical issues with Cisco products and technologies. The website isavailable 24 hours a day, at this URL:

http://www.cisco.com/techsupport

Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com userID and password. If you have a valid service contract but do not have a user ID or password, you canregister at this URL:

http://tools.cisco.com/RPF/register/register.do

Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submittinga web or phone request for service. You can access the CPI tool from the Cisco Technical Support &Documentation website by clicking the Tools & Resources link under Documentation & Tools. ChooseCisco Product Identification Tool from the Alphabetical Index drop-down list, or click the CiscoProduct Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: byproduct ID or model name; by tree view; or for certain products, by copying and pasting show commandoutput. Search results show an illustration of your product with the serial number label locationhighlighted. Locate the serial number label on your product and record the information before placing a

service call.

Submitting a Service RequestUsing the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3and S4 service requests are those in which your network is minimally impaired or for which you requireproduct information.) After you describe your situation, the TAC Service Request Tool providesrecommended solutions. If your issue is not resolved using the recommended resources, your servicerequest is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:

http://www.cisco.com/techsupport/servicerequest

For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone.(S1 or S2 service requests are those in which your production network is down or severely degraded.)Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your businessoperations running smoothly.

To open a service request by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)EMEA: +32 2 704 55 55USA: 1 800 553-2447

http://www.cisco.com/techsupporthttp://tools.cisco.com/RPF/register/register.dohttp://www.cisco.com/techsupport/servicerequesthttp://www.cisco.com/techsupport/servicerequesthttp://tools.cisco.com/RPF/register/register.dohttp://www.cisco.com/techsupport

8/16/2019 c 00670171

47/1392


xlvii



Preface Obtaining Additional Publications and Information

For a complete list of Cisco TAC contacts, go to this URL:

http://www.cisco.com/techsupport/contacts

Definitions of Service Request SeverityTo ensure that all service requests are reported in a standard format, Cisco has established severitydefinitions.

Severity 1 (S1)—An existing network is down, or there is a critical impact to your business operations.You and Cisco will commit all necessary resources around the clock to resolve the situation.

Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of yourbusiness operations are negatively affected by inadequate performance of Cisco products. You and Ciscowill commit full-time resources during normal business hours to resolve the situation.

Severity 3 (S3)—Operational performance of the network is impaired, while most business operationsremain functional. You and Cisco will commit resources during normal business hours to restore serviceto satisfactory levels.

Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, orconfiguration. There is little or no effect on your business operations.

Obtaining Additional Publications and InformationInformation about Cisco products, technologies, and network solutions is available from various onlineand printed sources.

• The Cisco Product Quick Reference Guide is a handy, compact reference tool that includes briefproduct overviews, key features, sample part numbers, and abbreviated technical specifications formany Cisco products that are sold through channel partners. It is updated twice a year and includesthe latest Cisco offerings. To order and find out more about the Cisco Product Quick ReferenceGuide, go to this URL:

http://www.cisco.com/go/guide

• Cisco Marketplace provides a variety of Cisco books, reference guides, documentation, and logomerchandise. Visit Cisco Marketplace, the company store, at this URL:

http://www.cisco.com/go/marketplace/

• Cisco Press publishes a wide range of general networking, training and certification titles. Both newand experienced users will benefit from these publications. For current Cisco Press titles and otherinformation, go to Cisco Press at this URL:

http://www.ciscopress.com

• Packet magazine is the Cisco Systems technical user magazine for maximizing Internet andnetworking investments. Each quarter, Packet delivers coverage of the latest industry trends,technology breakthroughs, and Cisco products and solutions, as well as network deployment andtroubleshooting tips, configuration examples, customer case studies, certification and traininginformation, and links to scores of in-depth online resources. You can access Packet magazine atthis URL:

http://www.cisco.com/packet

http://www.cisco.com/techsupport/contactshttp://www.cisco.com/go/guidehttp://www.cisco.com/go/marketplace/http://www.ciscopress.com/http://www.cisco.com/packethttp://www.cisco.com/packethttp://www.ciscopress.com/http://www.cisco.com/go/marketplace/http://www.cisco.com/go/guidehttp://www.cisco.com/techsupport/contacts

8/16/2019 c 00670171

48/1392


xlviii



Preface Obtaining Additional Publications and Information

• iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companieslearn how they can use technology to increase revenue, streamline their business, and expandservices. The publication identifies the challenges facing these companies and the technologies tohelp solve them, using real-world case studies and business strategies to help readers make soundtechnology investment decisions. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazineor view the digital edition at this URL:

http://ciscoiq.texterity.com/ciscoiq/sample/

• Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineeringprofessionals involved in designing, developing, and operating public and private internets andintranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

• Networking products offered by Cisco Systems, as well as customer support services, can beobtained at this URL:

http://www.cisco.com/en/US/products/index.html

• Networking Professionals Connection is an interactive website for networking professionals to sharequestions, suggestions, and information about networking products and technologies with Ciscoexperts and other networking professionals. Join a discussion at this URL:

http://www.cisco.com/discuss/networking

• World-class networking training is available from Cisco. You can view current offerings atthis URL:

http://www.cisco.com/en/US/learning/index.html

http://www.cisco.com/go/iqmagazinehttp://ciscoiq.texterity.com/ciscoiq/sample/http://www.cisco.com/ipjhttp://www.cisco.com/en/US/products/index.htmlhttp://www.cisco.com/discuss/networkinghttp://www.cisco.com/en/US/learning/index.htmlhttp://www.cisco.com/en/US/learning/index.htmlhttp://www.cisco.com/discuss/networkinghttp://www.cisco.com/en/US/products/index.htmlhttp://www.cisco.com/ipjhttp://ciscoiq.texterity.com/ciscoiq/sample/http://www.cisco.com/go/iqmagazinehttp://www.cisco.com/packet

8/16/2019 c 00670171

49/1392

C H A P T E R


1-1



1CLI Overview

This chapter prepares you to configure switches from the CLI (command-line interface). It also lists theinformation you need to have before you begin, and it describes the CLI command modes.

This chapter includes the following sections:

• About the Switch Prompt, page 1-2

• About the CLI Command Modes, page 1-3

• Understanding CLI Command Hierarchy, page 1-4

• Navigating Through CLI Commands, page 1-10

• Searching and Filtering CLI Output, page 1-14

• Using CLI Variables, page 1-22

• Using Command Aliases, page 1-25

• About Flash Devices, page 1-26

• Formatting Flash Disks and File Systems, page 1-27

• Using the File System, page 1-28

• Role-Based CLI, page 1-33

• Using Valid Formats and Ranges, page 1-35

• Using Debug Commands, page 1-36

8/16/2019 c 00670171

50/1392


1-2



Chapter 1 CLI Overview About the Switch Prompt

About the Switch PromptIf you are connected to the console port when the switch boots up, you see the output show in :

Note Refer to the Cisco MDS 9200 Series Hardware Installation Guide or the Cisco MDS 9500 Series Hardware Installation Guide for installation and connection instructions.

Once the switch is powered on successfully, you see the default switch prompt ( switch# ). You canperform embedded CLI operations, access command history, and use command parsing functions at this

prompt. The switch gathers the command st ring upon detecting an Enter (CR) and accepts commandsfrom a terminal.

Example 1-1 Output When a Switch Boots Up

Auto booting bootflash:/boot-279 bootflash:/system_image;...Booting kickstart image:bootflash:/boot-279................................................Image verification OK

Starting kernel...INIT: version 2.78 bootingChecking all filesystems..... done.Loading system softwareUncompressing system image: bootflash:/system_imageCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCINIT: Entering runlevel: 3

---- Basic System Configuration Dialog ---- This setup utility will guide you through the basic configuration ofthe system. Use ctrl-c to abort configuration dialog at any prompt. Basic management setup configures only enough connectivity for

management of the system.

Would you like to enter the basic configuration dialog (yes/no): yes

switch login:

8/16/2019 c 00670171

51/1392


1-3



Chapter 1 CLI Overview About the CLI Command Modes

About the CLI Command ModesSwitches in the Cisco MDS 9000 Family have two main command modes—user EXEC mode andconfiguration mode. The commands available to you depend on the mode you are in. To obtain a list ofavailable commands in either mode, type a question mark (?) at the system prompt.

Table 1-1 lists and describes the two commonly used modes, how to enter the modes, and the resultingsystem prompts. The system prompt helps you identify which mode you are in and hence, whichcommands are available to you.

You can abbreviate commands and keywords by entering just enough characters to make the command

unique from other commands. For example, you can abbreviate the config terminal command to conf t .

Table 1-1 Frequently Used Switch Command Modes

Mode Description of Use How to Access Prompt

EXEC Enables you to temporarily changeterminal settings, perform basic tests, anddisplay system information.

Note Changes made in this mode aregenerally not saved across systemresets.

At the switch prompt, enter the requiredEXEC mode command.

switch#

Configurationmode

Enables you to configure features thataffect the system as a whole.

Note Changes made in this mode aresaved across system resets if yousave your configuration. Refer tothe Cisco MDS 9000 Family CLIConfiguration Guide for furtherinformation.

From EXEC mode, enter the configterminal command.

switch(config)#

http://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htm

8/16/2019 c 00670171

52/1392


1-4



Chapter 1 CLI Overview Understanding CLI Command Hierarchy

Understanding CLI Command HierarchyThe CLI commands are organized hierarchically, with commands that perform similar functions groupedunder the same level. For example, all commands that display information about the system,configuration, or hardware are grouped under the show command, and all commands that allow you to

configure the switch are grouped under the config terminal command. Figure 1-1 illustrates a portionof the config terminal command hierarchy.

Figure 1-1 CLI Command Hierarchy Example

To execute a command, you enter the command by starting at the top level of the hierarchy. For example,to configure a Fibre Channel interface, use the config terminal command. Once you are in configurationmode, issue the interface command. When you are in the interface submode, you can query the availablecommands there.

The following example shows how to query the available commands in the interface submode:

switch# config terminalEnter configuration commands, one per line. End with CNTL/Z.switch(config)# interface fc1/1switch(config-if)# ?Interface configuration commands: channel-group Add to/remove from a port-channel exit Exit from this submode fcdomain Enter the interface submode fspf To configure FSPF related parameters

no Negate a command or set its defaults

shutdown Enable/disable an interface switchport Configure switchport parameters

switch prompt (switch#)

cd write eraseconfigure

clock zonesetinterface

fspf switchport

EXEC mode

Configurationmode

Configurationsubmode

exit

exit

end

7 9 5 2 5

8/16/2019 c 00670171

53/1392


1-5




EXEC Mode OptionsWhen you start a session on the switch, you begin in EXEC mode. Based on the role or group to whichyou belong, you have access to limited commands or to all commands (see the “Role-Based CLI” sectionon page 1-33 ). From the EXEC mode, you can enter configuration mode. Most of the EXEC commands

are one-time commands, such as show commands, which display the current configuration status. Hereis a list of EXEC mode commands:

switch# ?Exec commands: attach Connect to a specific linecard callhome Callhome commands cd Change current directory clear Reset functions cli CLI commands clock Manage the system clock cloud Initiate Cloud Discovery config Enter configuration mode copy Copy from one file to another debug Debugging functions delete Delete a file dir List files in a directory discover Discover information exit Exit from the EXEC fcping Ping an N-Port fctrace Trace the route for an N-Port. find Find a file below the current directory format Format disks gunzip Uncompresses LZ77 coded files gzip Compresses file using LZ77 coding install Upgrade software ips Various sibyte module related commands isns Re-registers specified interface with isns server mkdir Create new directory modem Modem commands move Move files

no Disable debugging functions out-of-service Make the current module out-of-service ping Send echo messages port-channel Port-Channel related commands purge Deletes unused data pwd View current directory reload Reboot the entire box rmdir Delete a directory run-script Run shell scripts san-ext-tuner Configure san_ext_tuner send Send message to open sessions setup Run the basic SETUP command facility show Show running system information sleep Sleep for the specified number of seconds ssh SSH to another system

system System management commands tac-pac Save tac information to a specific location tail Display the last part of a file telnet Telnet to another system terminal Set terminal line parameters test Test command traceroute Trace route to destination undebug Disable Debugging functions (See also debug) update Update license write Write current configuration zone Execute Zone Server commands

8/16/2019 c 00670171

54/1392


1-6




zoneset Execute zoneset commands

Configuration Mode OptionsConfiguration mode allows you to make changes to the existing configuration. When you save theconfiguration, these commands are preserved across switch reboots. Once you are in configurationmode, you can enter interface configuration mode, zone configuration mode, and a variety ofprotocol-specific modes. Configuration mode is the starting point for all configuration commands. Whenyou are in configuration mode, the switch expects configuration commands from the user.

The following example shows output from the config terminal command:

switch# config terminalEnter configuration commands, one per line. End with CNTL/Z.switch(config)#

Configuration Mode Commands and Submodes

The following is a list of configuration mode commands:switch# config terminalEnter configuration commands, one per line. End with CNTL/Z.switch(config)# ?Configure commands: aaa Configure aaa functions arp [no] remove an entry from the ARP cache banner Configure banner message boot Configure boot variables callhome Enter the callhome configuration mode cdp CDP Configuration parameters cfs CFS configuration commands cimserver Modify cimserver configuration cli CLI configuration commands clock Configure time-of-day clock

cloud Configure Cloud Discovery cloud-discovery Configure Cloud Discovery crypto Set crypto settings device-alias Device-alias configuration commands do EXEC command dpvm Configure Dynamic Port Vsan Membership end Exit from configure mode exit Exit from configure mode fabric-binding Fabric Binding configuration fc-tunnel Configure fc-tunnel fcalias Fcalias configuration commands fcanalyzer Configure cisco fabric analyzer fcc Configure FC Congestion Control fcdomain Enter the fcdomain configuration mode fcdroplatency Configure switch or network latency

fcflow Configure fcflow fcid-allocation Add/remove company id(or OUIs) from auto area list fcinterop Interop commands fcip Enable/Disable FCIP fcns Name server configuration fcroute Configure FC routes fcrxbbcredit Enable extended rx b2b credit configuration fcs Configure Fabric Config Server fcsp Config commands for FC-SP fctimer Configure fibre channel timers fdmi Config commands for FDMI

8/16/2019 c 00670171

55/1392


1-7




ficon Configure ficon information fspf Configure fspf hw-module Enable/Disable OBFL information in-order-guarantee Set in-order delivery guarantee interface Select an interface to configure ip Configure IP features ips Various sibyte module related commands ipv6 Configure IPv6 features iscsi Enable/Disable iSCSI islb ISCSI server load-balancing isns Configure iSNS isns-server ISNS server ivr Config commands for IVR kernel Kernel options line Configure a terminal line logging Modify message logging facilities mcast Configure multicast no Negate a command or set its defaults npiv Nx port Id Virtualization (NPIV) feature enable ntp NTP Configuration port-security Configure Port Security port-track Configure Switch port track config

power Configure power supply poweroff Poweroff a module in the switch qos QoS Configuration commands radius Configure RADIUS configuration radius-server Configure RADIUS related parameters rib Configure RIB parameters rmon Remote Monitoring role Configure roles rscn Config commands for RSCN san-ext-tuner Enable/Disable San Extension Tuner tool scheduler Config commands for scheduler scsi-target Scsi-target configuration snmp-server Configure snmp server span Enter SPAN configuration mode ssh Configure SSH parameters

switchname Configure system's network name system System config command tacacs+ Enable tacacs+ telnet Enable telnet tlport Configure TL Port information trunk Configure Switch wide trunk protocol username Configure user information. vsan Enter the vsan configuration mode wwn Set secondary base MAC addr and range for additional WWNs zone Zone configuration commands zone-attribute-group Zone attribute group commands zoneset Zoneset configuration commands

Configuration mode, also known as terminal configuration mode, has several submodes. Each of thesesubmodes places you deeper in the prompt hierarchy. When you type exit , the switch backs out one level

and returns you to the previous level. When you type end , the switch backs out to the user EXEC level.You can also type Ctrl-Z in configuration mode as an alternative to typing end .

Note When in configuration mode, you can alternatively enter:

• Ctrl-Z instead of the end command

• Ctrl-G instead of the exit command

8/16/2019 c 00670171

56/1392

8/16/2019 c 00670171

57/1392


1-9




Table 1-3 displays the commonly used configuration submodes.

Table 1-3 Submodes Within the Configuration Mode

Submode Name From Configuration Mode Enter Submode Prompt Configured Information

Call Home callhomeswitch(config-callhome)#

Contact, destination, and e-mailFCS Registration fcs register switch(config-fcs-register)# FCS attribute registration

From FCS registration submode:

platform name name vsanvsan-id

switch(config-fcs-register-attrib)#

Platform name and VSAN IDassociation

Fibre Channel alias fcalias name name vsan vsan-id switch(config-fcalias)# Alias member

FSPF fspf config vsan vsan-id switch(config-(fspf-config))# Static SPF computation, holdtime, and autonomous region

Interfaceconfiguration

interface type slot / port switch(config-if)# Channel groups, Fibre Channeldomains, FSPF parameters,switch port trunk and beaconinformation, and IP address

From the VSAN or mgmt0(management) interfaceconfiguration submode:

vrrp number

switch(config-if-vrrp)# Virtual router (Refer to theCisco MDS 9000 Family CLIConfiguration Guide for furtherinformation.)

iSCSI target iscsi virtual-target name switch(config-iscsi-tgt) iSCSI virtual target

iSLB initiator islb initiator switch(config-islb-init)# iSCSI server load balancing(iSLB) initiator

iSLB target islb virtual-target name switch(config-islb-tgt) iSCSI server load balancing(iSLB) virtual target

Line console line console switch(config-console)# Primary terminal consoleVTY line vty switch(config-line)# Virtual terminal line

Role role name switch(config-role)# Rule

SPAN span session number switch(config-span)# SPAN source, destination, andsuspend session information

VSAN database vsan database switch(config-vsan-db)# VSAN database

Zone zone name string vsan vsan-id switch(config-zone)# Zone member

Zone set zoneset name name vsanvsan-id

switch(config-zoneset)# Zone set member

http://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htmhttp://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/index.htm

8/16/2019 c 00670171

58/1392


1-10



Chapter 1 CLI Overview Navigating Through CLI Commands

Navigating Through CLI CommandsTo redisplay a command you previously entered, press the Up Arrow key. You can continue to

c 00670171

Documents

Transcript of c 00670171