The following commands are found at all levels of the CLI for the ServerIron, except where noted. For simplicity, they are summarized in this section as well in the individual sections.

Displays information about all TACACS+ and RADIUS servers identified on the device.

EXAMPLE:

ServerIron# show aaa
Tacacs+ key: foundry
Tacacs+ retries: 1
Tacacs+ timeout: 15 seconds
Tacacs+ dead-time: 3 minutes
Tacacs+ Server: 207.95.6.90 Port:49:
                opens=6 closes=3 timeouts=3 errors=0
                packets in=4 packets out=4
no connection

Radius key: networks
Radius retries: 3
Radius timeout: 3 seconds
Radius dead-time: 3 minutes
Radius Server: 207.95.6.90 Auth Port=1645 Acct Port=1646:
                opens=2 closes=1 timeouts=1 errors=0
                packets in=1 packets out=4
no connection

Syntax: show aaa

Possible values: N/A

Default value: N/A

Displays the ARP cache of the ServerIron. For switches, the show arp command will not display the 'type' column, but will display a VLAN ID column.

EXAMPLE:

View image

Syntax: show arp [<ip-addr> [<ip-mask>] | ethernet <portnum> mac-address <xxxx.xxxx.xxxx> [<mask>]]

The <ip-addr> and <ip-mask> parameters let you restrict the display to entries for a specific IP address and network mask. Specify the IP address masks in standard decimal mask format (for example, 255.255.0.0).

Specify the MAC address mask as “f”s and “0”s, where “f”s are significant bits. Specify IP address masks in standard decimal mask format (for example, 255.255.0.0).

The ethernet <portnum> parameter lets you restrict the display to entries for a specific port.

The mac-address <xxxx.xxxx.xxxx> parameter lets you restrict the display to entries for a specific MAC address.

The <mask> parameter lets you specify a mask for the mac-address <xxxx.xxxx.xxxx> parameter, to display entries for multiple MAC addresses. Specify the MAC address mask as “f”s and “0”s, where “f”s are significant bits.

Here are some examples of how to use these commands.

The following command displays all ARP entries for MAC addresses that begin with “abcd”:

ServerIron# show arp mac-address a.b.c.d ffff.0000.0000

The following command displays all IP address entries for IP addresses that begin with "209.157":

ServerIron# show arp 209.157.0.0 255.255.0.0

Possible values: See above

Default value: N/A

Displays configuration information for the TCS cache groups.

EXAMPLE:

View image

Syntax: show cache-group [<cache-group-number> | <cache-server-name>]

Possible values: Valid cache group number or cache server name.

Default value: N/A

Displays the presence and status of power supplies and fans in the chassis.

EXAMPLE:

ServerIron# show chassis

power supply 1 ok

power supply 2 not present

fan 1 ok

fan 2 ok

Syntax: show chassis

Possible values: N/A

Default value: N/A

Displays the current settings for the on-board time counter and Simple Network Time Protocol (SNTP) clock, if configured.

EXAMPLE:

ServerIron# show clock

Syntax: show clock [detail]

Possible values: N/A

Default value: N/A

Lists the operating configuration of a ServerIron. This command allows you to check configuration changes before saving them to flash.

EXAMPLE:

ServerIron# show configuration

Syntax: show configuration

Possible values: N/A

Default value: N/A

Displays the defaults for system parameters.

If you specify "default" but not the optional "values", the default states for parameters that can either be enabled or disabled are displayed. If you also specify "values", the default values for parameters that take a numeric value are displayed.

EXAMPLE:

View image

EXAMPLE:

View image

Syntax:
show default [values]

Possible values: N/A

Default value: N/A

Displays the version of the software image saved in the primary and secondary flash of a ServerIron.

EXAMPLE:

ServerIron# show flash

Syntax: show flash

Possible values: N/A

Default value: N/A

Displays To display configuration information, state information, and traffic statistics for the firewall group. See the Foundry ServerIron Firewall Load Balancing Guide for information about the fields in this display.

EXAMPLE:

View image

Syntax: show fw-group

Possible values: N/A

Default value: N/A

Displays the firewall that the hashing algorithm selected for a given pair of source and destination addresses.

EXAMPLE:

ServerIron# show fw-hash 1.1.1.1 2.2.2.2 2
fw3

In this example, the command output indicates that the FWLB hashing algorithm selected firewall "fw3" for traffic to IP address 1.1.1.1 from IP address 2.2.2.2.

Syntax: show fw-hash <dst-ip-addr> <src-ip-addr> <fwall-group-id>
[<protocol> <dst-tcp/udp-port> <src-tcp/udp-port>]

The <dst-ip-addr> parameter specifies the destination IP address.

The <src-ip-addr> parameter specifies the source IP address.

The <fwall-group-id> parameter specifies the FWLB group ID. Normally, the FWLB group ID is 2.

The <protocol> parameter specifies the protocol number for TCP or UDP. You can specify one of the following:

• 6 – TCP

• 17 – UDP

The <dst-tcp/udp-port> specifies the destination TCP or UDP application port number.

The <src-tcp/udp-port> specifies the source TCP or UDP application port number.

If you configured the ServerIron to hash based on source and destination TCP or UDP application ports as well as IP addresses, the ServerIron might select more than one firewall for the same pair of source and destination IP addresses, when the traffic uses different pairs of source and destination application ports. Use the optional parameters to ensure that the command’s output distinguishes among the selected firewalls based on the application ports. Here is an example:

ServerIron# show fw-hash 1.1.1.1 2.2.2.2 2 6 80 8080
fw2
ServerIron# show fw-hash 1.1.1.1 2.2.2.2 2 6 80 9000
fw3

Possible values: See above

Default value: N/A

Displays RTT prefix cache entries.

The GSLB ServerIron maintains a cache of RTT information received from the site ServerIrons through the GSLB protocol. You can display the RTT information the GSLB ServerIron has related to a client IP address.

EXAMPLE:

View image

The command in this example shows the RTT prefix information the GSLB ServerIron has related to client IP address 209.156.100.100. In this case, the GSLB ServerIron has two RTT entries for zone www.foundrynet.com.

Syntax: show gslb cache <ip-addr>

The <ip-addr> command specifies a site address.

Here is another example. In this example, a statically generated entry that the GSLB ServerIron created is displayed. The statically generated entries have an 8-bit prefix, whereas the prefix for dynamic entries is 20 bits long by default.

ServerIron(config)# show gslb cache 61.1.1.1

prefix length = 8, prefix = 60.0.0.0, region = ASIA
prefix source = geographic

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays the default GSLB policy parameters.

EXAMPLE:

To display the default GSLB policy, enter the following command:

View image

Syntax: show gslb default

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays all the information displayed by the show gslb dns zone command plus information about the site and the ServerIron on which a VIP is configured.

On the ServerIron Chassis devices running software version 07.2.26A or later, and on the ServerIronXL running software version 07.3.05 or later, this command also shows the following information:

• The metrics that were used to select a given site as the best site.

• For each of the GSLB metrics that have been used to select the site, the number of times that metric was the deciding factor in selection of the site.

This command is especially useful for sites that are configured for Symmetric Server Load Balancing. For information about this load balancing feature, see the "Configuring Symmetric SLB and SwitchBack" chapter of the Foundry ServerIron Installation and Configuration Guide.

EXAMPLE:

View image

Syntax: show gslb dns detail

Possible values: N/A

Default value: N/A

Displays information about all the DNS zones and host applications configured on the GSLB ServerIron.

EXAMPLE:

View image

Syntax: show gslb dns zone [<name>]

The <name> parameter specifies the zone name.

To display GSLB information for a specific DNS zone, enter a command such as the following:

ServerIron(config)# show gslb dns zone foundrynet.com

The information is the same as the information displayed when you do not specify a zone name, except the ZONE field is unneeded and thus does not appear.

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays statistics for transparent DNS query intercept and for DNS cache proxy.

The following statistics are displayed for DNS cache proxy:

• Number of DNS queries the GSLB ServerIron has responded to using the DNS cache proxy feature instead of forwarding the queries to the DNS server. (See the Direct response field under “DNS cache proxy stat:” in the output.)

The following statistics are displayed for transparent DNS query intercept:

• Number of queries the ServerIron has redirected to a proxy DNS server or another ServerIron. (See the Redirect field under “DNS query intercept stat:” in the output.)

• Number of queries to which the ServerIron has directly responded using a transparent DNS query intercept IP address configured on the ServerIron itself. (See the Direct response field under “DNS query intercept stat:” in the output.)

EXAMPLE:

To display the statistics, enter the following command at any level of the CLI:

View image

Syntax: show gslb global-stat

The Direct response field, under “DNS cache proxy stat”, lists how many DNS queries the GSLB ServerIron has responded to using the DNS cache proxy feature instead of forwarding the queries to the DNS server. In this example, the GSLB ServerIron has responded directly to client queries ten times with the best site address among those cached on the ServerIron itself, instead of forwarding the request to the DNS server.

The Redirect field shows the number of queries the ServerIron has redirected to an alternative (proxy) DNS or another ServerIron.

The Direct response field shows the number of queries to which the ServerIron has directly responded using a transparent DNS query intercept IP address configured on the ServerIron itself.

Possible values: N/A

Default value: N/A

Displays the current GSLB policy parameter settings.

EXAMPLE:

To display the user-configured GSLB policy, enter the following command:

View image

Syntax: show gslb policy

In this example, the default order of the policy metrics is in effect. In the following example, the order has been changed and two of the metrics have been disabled.

View image

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays the current GSLB resource utilization and the ServerIron capacity for each GSLB resource.

For GSLB parameters, you can display the number of currently configured items and the maximum number of items you can configure on the ServerIron.

EXAMPLE:

To display GSLB resource information, enter the following command at any level of the CLI:

ServerIron(config)# show gslb resources
GSLB resource usage:
                    Current   Maximum
sites               1         100
SIs                 2         200
SIs' VIPs           2         2000
dns zones           2         200
dns hosts           2         400
health-checks app.  2         600
dns IP addrs.       5         2000
affinities          0         50
static prefixes     4         250
prefix cache        104       5050
RTT entries         1         10000

The values in the Current column indicate how many of each GSLB configuration or data item are currently on the GSLB ServerIron. The values in the Maximum column list the maximum number of each item the GSLB ServerIron can hold.

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays information for all the configured sites.

EXAMPLE:

View image

Syntax: show gslb site [<name>]

The <name> parameter specifies a site name.

To display information about the GSLB site called “sunnyvale” and the ServerIrons providing SLB within those sites, enter the following command:

View image

For more information, see the "Configuring Global Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays a list of the configured health-check policies and their current status. For information about the fields in this display, see one of the following:

• ServerIronXL – the "Configuring Boolean Health-Check Policies (ServerIronXL)" section in the "Configuring Port and Health Check Parameters" chapter of the Foundry ServerIron Installation and Configuration Guide.

• ServerIron Chassis devices – the "Configuring Boolean Health-Check Policies (ServerIron Chassis Devices)" section in the "Configuring Port and Health Check Parameters" chapter of the Foundry ServerIron Installation and Configuration Guide.

EXAMPLE:

Here is an example for the ServerIronXL.

View image

EXAMPLE:

Here is an example for ServerIron Chassis devices.

View image

Syntax: show healthck

Possible values: N/A

Default value: N/A

Displays health-check policy statistics. For information about the fields in this display, see the "Displaying Health-Check Policy Information" section in the "Configuring Port and Health Check Parameters" chapter of the Foundry ServerIron Installation and Configuration Guide.

EXAMPLE:

ServerIron(config)# show healthck statistics
Ping Statistics:
Sent: 1524                     Received: 1524
Invalid Replies: 0             Dropped Replies: 0

Syntax: show healthck statistics

Possible values: N/A

Default value: N/A

Displays information about HTTP content verification matching lists. For information about this health-check feature, see the "Configuring Port and Health Check Parameters" in the Foundry ServerIron Installation and Configuration Guide.

EXAMPLE:

ServerIron# show http match-list
http match-list m1
down simple "404"
down simple "File Not Found"
http match-list m4
default down
up compound "monkey see" "monkey do" log
down compound "500" "Internal Server Error" log
down compound "503" "Service Unavailable" log

Syntax: show http match-list

Possible values: N/A

Default value: N/A

Displays all port interfaces of the ServerIron and their state, duplex mode, STP state, priority and MAC address.

EXAMPLE:

View image

Syntax: show interfaces [ethernet <portnum>]

Possible values: Valid port number

Default value: N/A

Displays IP configuration information.

EXAMPLE:

ServerIron(config)# show ip

             Disabled : IP_Forwarding

             Disabled : RIP  RIP-Redist

     Switch IP address: 192.168.2.100

           Subnet mask: 255.255.255.0

Default router address: 192.168.2.1
   TFTP server address: None
Configuration filename: None
        Image filename: None

For information about the fields in this display, see the "Displaying the IP Forwarding State" section in the "Configuring IP Forwarding" chapter of the Foundry ServerIron Installation and Configuration Guide.

Syntax: show ip

Possible values: N/A

Default value: N/A

Displays the IP host table showing indexes to MAC addresses and the IP address of the next hop for ServerIrons configured to operate in a multinetted environment.

EXAMPLE:

View image

Syntax: show ip cache [<ip-addr> [<ip-addr>]]

Possible values: N/A

Default value: N/A

Displays the currently loaded public keys.

EXAMPLE:

View image

Syntax: show ip client-public-key

Possible values: N/A

Default value: N/A

Displays all active IP filter definitions for a Foundry switch operating with Layer 3 switching.

EXAMPLE:

ServerIron# show ip filter-cache

Syntax: show ip filter-cache [<ip-addr>]

Possible values: N/A

Default value: N/A

Displays information about the IP interfaces configured on virtual routing interfaces.

EXAMPLE:

View image

Syntax: show ip interface

Possible values: N/A

Default value: N/A

Indicates if IP multicast is active on a Foundry switch or not, and notes its operating mode—active or passive.

EXAMPLE:

ServerIron# show ip multicast

Syntax: show ip multicast

Possible values: N/A

Default value: N/A

Displays Network Address Translation (NAT) statistics.

EXAMPLE:

To display the NAT statistics, enter the following command at any level of the CLI:

ServerIron(config)# show ip nat statistics

Total translations: 2 (1 static, 1 dynamic)
Hits: 2 Misses: 2
Expired translations: 4
Dynamic mappings:
pool OutAdds: netmask 255.255.255.0
   start 209.157.1.2 end 209.157.1.254
   total addresses 252

Syntax: show ip nat statistics

For information, see the "Configuring Network Address Translation" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays currently active NAT entries.

EXAMPLE:

To display the currently active NAT translations, enter the following command at any level of the CLI:

View image

Syntax: show ip nat translation

For information, see the "Configuring Network Address Translation" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays the configured global and local session policies defined via the ip policy command.

EXAMPLE:

Index Priority Protocol Socket Type
1    high       tcp       pop3    global
2     high       udp       dns    global

Syntax: show ip policy

Possible values: N/A

Default value: N/A

Displays the IP route table.

EXAMPLE:

View image

Possible values: N/A

Default value: N/A

Displays information about the SSH management sessions in effect on the device. Up to five SSH connections can be active on the Foundry device. For information about this display and about using SSH, see the “Configuring Secure Shell” chapter.

EXAMPLE:

View image

Syntax: show ip ssh

Possible values: N/A

Default value: N/A

Displays the static ARP entries.

EXAMPLE:

View image

The <ip-addr> and <ip-mask> parameters let you restrict the display to entries for a specific IP address and network mask. Specify the IP address masks in standard decimal mask format (for example, 255.255.0.0).

Specify the MAC address mask as “f”s and “0”s, where “f”s are significant bits. Specify IP address masks in standard decimal mask format (for example, 255.255.0.0).

The ethernet <portnum> parameter lets you restrict the display to entries for a specific port.

The mac-address <xxxx.xxxx.xxxx> parameter lets you restrict the display to entries for a specific MAC address.

The <mask> parameter lets you specify a mask for the mac-address <xxxx.xxxx.xxxx> parameter, to display entries for multiple MAC addresses. Specify the MAC address mask as “f”s and “0”s, where “f”s are significant bits.

Possible values: See above

Default value: N/A

Displays IP (ICMP, UDP, TCP, and RIP) traffic statistics for a ServerIron.

EXAMPLE:

View image

Syntax: show ip traffic

Possible values: N/A

Default value: N/A

Displays the statistics for all HTTP content rewrites. You can use this command on both the Management Processor (MP) and Velocity Switching Processors (VSPs). Using this command on the MP shows the results of all HTTP content rewrites for both the MP and the VSPs. Using this command on a VSP shows the results for the VSP only.

EXAMPLE:

View image

Syntax: show l7-rewrite-info

Possible values: N/A

Default value: N/A

Displays the SNMP event log.

EXAMPLE:

This example shows some common Syslog messages.

View image

Syntax: show logging

Possible values: N/A

Default value: N/A

EXAMPLE:

This example shows log entries for authentication failures. If someone enters an invalid community string when attempting to access the SNMP server on the Foundry device, the device generates a trap in the device's Syslog buffer. (If you have configured the device to use a third-party Syslog server, the device also sends a log entry to the server.)

Here is an example of a log that contains SNMP authentication traps. In this example, someone attempted to access the Foundry device three times using invalid SNMP community strings. The unsuccessful attempts indicate either an authorized user who is also a poor typist, or an unauthorized user who is attempting to access the device.

View image

EXAMPLE:

This example shows a log entry for an IP address conflict between the Foundry device and another device on the network.

In addition to placing an entry in the log, the software sends a log message to the Syslog server, if you have configured one, and sends a message to each open CLI session.

View image

EXAMPLE:

Here are some examples of log entries for packets denied by Access Control Lists (ACLs).

View image

The first time an entry in an ACL denies a packet and logging is enabled for that entry, the software generates a Syslog message and an SNMP trap. Messages for packets denied by ACLs are at the warning level of the Syslog.

When the first Syslog entry for a packet denied by an ACL is generated, the software starts a five-minute ACL timer. After this, the software sends Syslog messages every five minutes. The messages list the number of packets denied by each ACL during the previous five-minute interval. If an ACL entry does not deny any packets during the five-minute interval, the software does not generate a Syslog entry for that ACL entry.

In this example, the two-line message at the bottom is the first entry, which the software immediately generates the first time an ACL entry permits or denies a packet. In this case, an entry in ACL 101denied a packet. The packet was a TCP packet from host 209.157.22.198 and was destined for TCP port 80 (HTTP) on host 198.99.4.69.

When the software places the first entry in the log, the software also starts the five-minute timer for subsequent log entries. Thus, five minutes after the first log entry, the software generates another log entry and SNMP trap for denied packets.

In this example, the software generates the second log entry five minutes later. The second entry indicates that the same ACL denied two packets.

The time stamp for the third entry is much later than the time stamps for the first two entries. In this case, no ACLs denied packets for a very long time. In fact, since no ACLs denied packets during the five-minute interval following the second entry, the software stopped the ACL log timer. The software generated the third entry as soon as the ACL denied a packet. The software restarted the five-minute ACL log timer at the same time. As long as at least one ACL entry permits or denies a packet, the timer continues to generate new log entries and SNMP traps every five minutes.

EXAMPLE:

Here are some examples of log messages for CLI access.

View image

The first message (the one on the bottom) indicates that user “dg” logged in to the CLI’s User EXEC level on October 15 at 5:38 PM and 3 seconds (Oct 15 17:38:03). The same user logged in to the Privileged EXEC level four seconds later.

The user remained in the Privileged EXEC mode until 5:59 PM and 22 seconds. (The user could have used the CONFIG modes as well. Once you access the Privileged EXEC level, no further authentication is required to access the CONFIG levels.) At 6:01 PM and 11 seconds, the user ended the CLI session.

Displays all MAC addresses on a ServerIron.

EXAMPLE:

To display all MAC addresses on a ServerIron, enter the following:

View image

Syntax: show mac-address [ethernet <portnum> | <mac-addr> | session]

Possible values: The session keyword causes information about MAC session entries to be displayed.

Default value: N/A

Displays the total number of MAC addresses currently active on a ServerIron. This command serves as a numerical summary of the detailed summary provided by the command show mac-addresses.

For each port, the number of learned MAC addresses is displayed.

EXAMPLE:

View image

Syntax: show mac-address-statistics

Possible values: N/A

Default value: N/A

Shows the types of ports active on a Chassis device.

EXAMPLE:

ServerIron(config)# show media

1/1:SX 1/2:SX 1/3:SX 1/4:SX

2/1:SX 2/2:SX 2/3:SX 2/4:SX 2/5:SX 2/6:SX 2/7:SX 2/8:SX

3/1:SX 3/2:SX 3/3:SX 3/4:SX 3/5:SX 3/6:SX 3/7:SX 3/8:SX

4/1:SX 4/2:SX 4/3:SX 4/4:SX 4/5:SX 4/6:SX 4/7:SX 4/8:SX

5/1:SX 5/2:SX 5/3:SX 5/4:SX 5/5:SX 5/6:SX 5/7:SX 5/8:SX

6/1:SX 6/2:SX 6/3:SX 6/4:SX 6/5:SX 6/6:SX 6/7:SX 6/8:SX

7/1:SX 7/2:SX 7/3:SX 7/4:SX 7/5:SX 7/6:SX 7/7:SX 7/8:SX

8/1:SX 8/2:SX 8/3:SX 8/4:SX 8/5:SX 8/6:SX 8/7:SX 8/8:SX

Syntax: show media

Possible values: N/A

Default value: N/A

Shows the types of modules installed on a Chassis device.

EXAMPLE:

Here is an example of the command’s display output on a ServerIron 800.

View image

Possible values: N/A

Default value: N/A

Displays the current port mirroring and monitoring configuration.

EXAMPLE:

ServerIron(config)# show monitor
Mirror Interface:   ethernet 4/1
Monitored Interfaces:
   Both    Input    Output
    ---------------------------------------------------
    ethernet 4/3

Syntax: show monitor

In this example, port 4/1 is the mirror interface, to which the software copies (“mirrors”) the traffic on port 4/3. In this case, both directions of traffic on the monitored port are mirrored to port 4/1.

If only the incoming traffic is mirrored, the monitored interface is listed under Input. If only the outbound traffic is mirrored, the monitored interface is listed under Output.

Possible values: N/A

Default value: N/A

Displays one or more entries in the policy list used for policy-based SLB.

EXAMPLE:

To display an individual policy list entry, enter a command such as the following:

ServerIron# show pbslb 192.168.9.210

Syntax: show pbslb <ip-address>

The show pbslb command displays the entry in the policy list that corresponds to the specified IP address. If no entry is found for the specified IP address, no output is displayed.

EXAMPLE:

To display multiple entries in the policy list, enter a command such as the following:

ServerIron# show pbslb all 100

Syntax: show pbslb all <index>

The show pbslb all command displays 20 entries in the policy list, starting from the point specified with the <index> parameter. In the example, 20 entries in the policy list are displayed, starting from the 100th entry.

Possible values: See above.

Default value: N/A

Displays information about the URL switching policies configured on the ServerIron.

EXAMPLE:

View image

Syntax: show policy-map [<policy-map-name>]

Possible values: <policy-map-name> is the name of a URL switching policy. If you omit this parameter, information about all URL switching policies is displayed.

Default value: N/A

Displays an uplink utilization list, which allows you to observe the percentage of the uplink’s bandwidth that each of the downlink ports used during the most recent 30-second port statistics interval. The number of packets sent and received between the two ports is listed, as well as the ratio of each individual downlink port’s packets relative to the total number of packets on the uplink.

EXAMPLE:

To display an uplink utilization list:

ServerIron(config)# show relative-utilization 1
uplink: ethe 1
30-sec total uplink packet count = 3011
packet count ratio (%)
  1/ 2:60   1/ 3:40

In this example, ports 2 and 3 are sending traffic to port 1. Port 2 and port 3 are isolated (not shared by multiple clients) and typically do not exchange traffic with other ports except for the uplink port, port 1.

Syntax: show relative-utilization <num>

Possible values: The <num> parameter specifies the list number.

Default value: N/A

Displays the time and date for scheduled system reloads.

EXAMPLE:

ServerIron# show reload

Syntax: show reload

Possible values: N/A

Default value: N/A

This command will display any reported RMON alarms for the system.

EXAMPLE:

ServerIron# show rmon alarm

Alarm table is empty

Syntax: show rmon alarm [<alarm-table-entry>]

Possible values: N/A

Default value: N/A

This command will display any reported RMON events for the system.

EXAMPLE:

ServerIron# show rmon event

Event table is empty

Syntax: show rmon event [<event-table-entry>]

Possible values: N/A

Default value: N/A

This command will display the RMON history for the system.

EXAMPLE:

View image

Syntax: show rmon history [<control-table-entry>]

Possible values: N/A

Default value: N/A

Displays detailed statistics for each port.

EXAMPLE:

ServerIron# show rmon statistics

Syntax: show rmon statistics [ethernet <portnum>] | [<num>]

The ethernet <portnum> parameter displays the RMON port statistics for the specified port.

The <num> parameter displays the specified entry. Entries are numbered beginning with 1.

Possible values: see above

Default value: N/A

Displays the running configuration of the ServerIron on the terminal screen.

EXAMPLE:

ServerIron# show running-config

Syntax: show running-config

Possible values: N/A

Default value: N/A

Displays a list of IP addresses whose traffic has been held down with the Transaction Rate Limiting feature.

EXAMPLE:

View image

Syntax: show security holddown

Possible values: N/A

Default value: N/A

Displays the backup configuration and the current backup status of the ServerIron.

Displays the services binding between virtual servers and real servers.

EXAMPLE:

ServerIron(config)# show server bind

Virtual Server Name: v100,   IP: 209.157.23.100
       http -------> s43: 209.157.23.43, http
                      s60: 209.157.23.60, 8080
         ftp -------> s43: 209.157.23.43, ftp
                      s60: 209.157.23.60, ftp
          70 -------> s43: 209.157.23.43, 70
                      s60: 209.157.23.60, 70
Virtual Server Name: v105,   IP: 209.157.23.105
      telnet -------> s60: 209.157.23.60, 300
         ftp -------> s60: 209.157.23.60, 200
       http -------> s60: 209.157.23.60, 100
         dns -------> s60: 209.157.23.60, 400
       tftp -------> s60: 209.157.23.60, 500

Syntax: show server bind

For descriptions of the information shown in this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Shows the global TCP connection rate (per second) and TCP SYN attack rate (per second). This command reports global connection rate information for the ServerIron as well as for each real server.

EXAMPLE:

View image

Syntax: show server conn-rate

For descriptions of the information shown in this display, see the "Protecting Against Denial of Service Attacks" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Shows dynamic real server and virtual server port bindings. These are bindings that the ServerIron builds automatically. Use this command if you are working with Foundry technical support to resolve a Global SLB configuration issue.

Shows information for paths configured for firewall load balancing. See the Foundry ServerIron Firewall Load Balancing Guide for information about the fields in this display.

EXAMPLE:

To display path information for firewall load balancing, enter the following command at any level of the CLI:

View image

Syntax: show server fw-path

Possible values: N/A

Default value: N/A

Displays global server configuration parameters.

EXAMPLE:

ServerIron(config)# show server global

Server Load Balancing - global parameters
Predictor =          least-conn
Force-deletion =    1
Reassign-threshold = 100
Reassign-limit =    3
Ping-interval =      8
Ping-retries =      7
Session ID age =    35
TCP-age =          30
UDP-age =          5
Sticky-age =       30
TCP-syn-limit =      65535
TCP-total conn =    4337
Unsuccessful conn = 0
ICMP-message = Disabled

Syntax: show server global

For descriptions of the fields in this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays information about hashing bucket assignments and the number of hits each bucket has received.

EXAMPLE:

ServerIron# show server hash
    Virtual port Hash Buckets:
   
    Virtual Server <x>:
    Bucket: Server             Hit   Bucket: Server             Hit
          1: s3                2          2: s2                3
          4: s2                2          7: s2                1
          8: s3                4          9: s2                1
         10: s2                1         11: s2                1
         12: s3                2         14: s2                2
         15: s2                1         16: s3                1
         18: s2                3         19: s2                1
         21: s2                2         22: s3                2
         23: s2                3         25: s2                2

Syntax: show server hash

Possible values: N/A

Default value: N/A

Displays web switching statistics.

EXAMPLE:

View image

Syntax: show server proxy

Possible values: N/A

Default value: N/A

Displays real IP servers' state information and statistics.

EXAMPLE:

View image

Syntax: show server real [<name> [detail]]

Syntax: show server real [dns | ftp | http | imap4 | ldap | nntp | pop3 | radius | rsl | smtp | telnet]

For descriptions of the information shown in this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: The optional keywords display keepalive and bring up statistics for the specified function.

Default value: N/A

Displays the free and active sessions.

EXAMPLE:

View image

Syntax: show server sessions

For descriptions of the information shown by this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays configuration information for Symmetric SLB.

EXAMPLE:

ServerIron# show server symmetric

Syntax: show server symmetric

For descriptions of the information this command shows, see the "Configuring Symmetric SLB and SwitchBack" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Displays global IP server statistics.

EXAMPLE:

View image

Syntax: show server traffic

Possible values: N/A

For descriptions of the information shown in this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Default value: N/A

Displays virtual IP servers state information and statistics.

On ServerIron Chassis devices running software release 07.2.26A and later, this command contains an optional parameter that displays detailed information for an application port on a virtual server. This detailed port information is shown in bold type in the example below.

EXAMPLE:

View image

Syntax: show server virtual [<virtual-server-name> [<tcp/upd-port>]]

For descriptions of the information shown in this display, see the "Configuring Server Load Balancing" chapter in the Foundry ServerIron Installation and Configuration Guide.

Possible values: N/A

Default value: N/A

Lists system administrative information—contact name, system location, community strings and traps enabled for a ServerIron.

EXAMPLE:

ServerIron# show snmp server
Contact: Jack Sphatt
    Location: HMB x1031
Community(ro): public
Community(rw): private
Traps
                   Cold start: Enable
                      Link up: Enable
                   Link down: Enable
               Authentication: Enable
             [ ..........]
            L4 switch standby: Enable
Total Trap-Receiver Entries: 4
Trap-Receiver IP Address       Community
    1       207.95.6.211
    2       207.95.5.21

Syntax: show snmp server

Possible values: N/A

Default value: N/A

Displays information about SNTP associations.

EXAMPLE:

View image

The following table describes the information displayed by the show sntp associations command.

This Field...	Displays...
(leading character)	One or both of the following: * Synchronized to this peer ~ Peer is statically configured
address	IP address of the peer
ref clock	IP address of the peer’s reference clock
st	NTP stratum level of the peer
when	Amount of time since the last NTP packet was received from the peer
poll	Poll interval in seconds
delay	Round trip delay in milliseconds
disp	Dispersion in seconds

Syntax: show sntp associations

Possible values: N/A

Default value: N/A

Displays information about SNTP status.

EXAMPLE:

View image

The following table describes the information displayed by the show sntp status command.

This Field...	Indicates...
unsynchronized	System is not synchronized to an NTP peer.
synchronized	System is synchronized to an NTP peer.
stratum	NTP stratum level of this system
reference clock	IP Address of the peer (if any) to which the unit is synchronized
precision	Precision of this system's clock (in Hz)
reference time	Reference time stamp
clock offset	Offset of clock to synchronized peer
root delay	Total delay along the path to the root clock
root dispersion	Dispersion of the root path
peer dispersion	Dispersion of the synchronized peer

Syntax: show sntp status

Possible values: N/A

Default value: N/A

Displays spanning tree statistics for a ServerIron such as root cost, root port and priority.

EXAMPLE:

View image

Syntax: show span

Possible values: N/A

Default value: N/A

Displays global and port STP for a given VLAN for a ServerIron.

EXAMPLE:

View image

Syntax: show span vlan <vlan-id> [ethernet <portnum>]

Possible values: N/A

Default value: N/A

Displays port statistics for a ServerIron (transmit, receive, collisions, errors).

EXAMPLE:

View image

Syntax: show statistics [ethernet <portnum>] | [slot <slot-num>]

The pos <portnum> parameter displays statistics for a specific POS port.

The ethernet <portnum> parameter displays statistics for a specific Ethernet port.

The slot <slot-num> parameter displays statistics for a specific chassis slot.

This display shows the following information for each port.

Table 22.1: CLI Display of Port Statistics  

This Field...	Displays...
Packet counters
Receive	The number of packets received on this interface.
Transmit	The number of packets transmitted on this interface.
Collision counters
Receive	The number of collisions that have occurred when receiving packets.
Transmit	The number of collisions that have occurred when sending packets.
Packet Errors These fields show statistics for various types of packet errors. The device drops packets that contain one of these errors.
Align	The number of packets that contained frame alignment errors.
FCS	The number of packets that contained Frame Check Sequence errors.
Giant	The number of packets that were longer than the configured MTU.
Short	The number of packets that were shorter than the minimum valid length.

Possible values: see above

Default value: statistics for all ports are displayed

Displays information about ICMP and TCP SYN packets dropped because burst thresholds were exceeded.

EXAMPLE:

View i