|
The CLI is a text-based interface for configuring and monitoring Foundry ServerIron products. You can access the CLI can through either a direct serial connection to the device or through a Telnet session.
The commands in the CLI are organized into the following levels:
- User EXEC – Lets you display information and perform basic tasks such as pings and trace routes.
- Privileged EXEC – Lets you use the same commands as those at the User EXEC level plus configuration commands that do not require saving the changes to the system-config file.
- CONFIG – Lets you make configuration changes to the device. To save the changes across reboots, you need to save them to the system-config file. The CONFIG level contains sub-levels for individual ports, for VLANs, and other configuration areas.
NOTE: By default, any user who can open a serial or Telnet connection to the Foundry device can access all these CLI levels. To secure access, you can configure Enable passwords or local user accounts, or you can configure the device to use Access Control Lists (ACLs), a RADIUS server, or a TACACS/TACACS+ server for authentication. See the Foundry Security Guide.
To display a list of available commands or command options, enter “?” or press Tab. If you have not entered part of a command at the command prompt, all the commands supported at the current CLI level are listed. If you enter part of a command, then enter “?” or press Tab, the CLI lists the options you can enter at the point in the command string.
The CLI supports command completion, so you do not need to enter the entire name of a command or option. As long as you enter enough characters of the command or option name to avoid ambiguity with other commands or options, the CLI understands what you are typing.
The CLI supports the following line editing commands. To enter a line-editing command, use the CTRL-key combination for the command by pressing and holding the CTRL key, then pressing the letter associated with the command.
Table 2.1: CLI Line-Editing Commands
Ctrl-Key Combination |
Description |
Ctrl-A |
Moves to the first character on the command line. |
Ctrl-B |
Moves the cursor back one character. |
Ctrl-C |
Escapes and terminates command prompts and ongoing tasks (such as lengthy displays), and displays a fresh command prompt. |
Ctrl-D |
Deletes the character at the cursor. |
Ctrl-E |
Moves to the end of the current command line. |
Ctrl-F |
Moves the cursor forward one character. |
Ctrl-K |
Deletes all characters from the cursor to the end of the command line. |
Ctrl-L; Ctrl-R |
Repeats the current command line on a new line. |
Ctrl-N |
Enters the next command line in the history buffer. |
Ctrl-P |
Enters the previous command line in the history buffer. |
Ctrl-U; Ctrl-X |
Deletes all characters from the cursor to the beginning of the command line. |
Ctrl-W |
Deletes the last word you typed. |
Ctrl-Z |
Moves from any CONFIG level of the CLI to the Privileged EXEC level; at the Privileged EXEC level, moves to the User EXEC level. |
There are two different levels of EXEC commands, the User Level and the Privileged Level. The User level commands are at the top of the CLI hierarchy. These are the first commands that you have access to when connected to the ServerIron through the CLI.
At the User EXEC level, you can view basic system information and verify connectivity but cannot make any changes to the ServerIron configuration. To make changes to the configuration base, you must move to other levels of the CLI hierarchy. This is accomplished by entering the enable command at initial log-on. Once entered correctly, you have access to the Privileged Level.
The Privileged Level EXEC commands primarily enable you to transfer and store ServerIron software images and configuration files between the network and the system; and review its configuration. You reach this level by entering enable <password> or enable <username> <password> at the user EXEC level.
The global level is the first level of the CONFIG command structure. The global CONFIG level allows you to globally apply or modify parameters for ports on the ServerIron. You reach this level by entering configure terminal at the privileged EXEC level.
This redundancy level allows you to configure redundancy parameters for redundant management modules. You reach this level by entering the redundancy command at the global CONFIG level.
NOTE: The redundancy commands apply only to a chassis-based ServerIron with redundant management modules.
The interface level allows you to assign or modify specific port parameters on a port-by-port basis. You reach this level by entering interface ethernet <portnum> at the global level.
Policy-based VLANs allow you to assign VLANs on a protocol (IP, IPX, Decnet, AppleTalk, NetBIOS, Others), sub-net (IP sub-net and IPX network), port, or 802.1q tagged basis. You reach this level by entering the vlan <vlan-id> by port command at the Global CONFIG Level for switches and vlan 1 for routers.
This level allows you to assign and configure servers for the SLB, TCS, FWLB, and web switching features. For SLB and web switching, you reach this level by entering the server real-name <text> <ip-addr> command at the global CONFIG level. For TCS, you reach this level by entering the server cache-name <text> command. For FWLB, you reach this level by entering the server fw-name <text> <ip-addr> command.
The virtual server level allows you to assign and configure virtual servers. You reach this level by entering the server virtual-name <text> <ip-addr> command at the global CONFIG level.
This level allows you to configure TCS cache groups and the FWLB firewall group. For TCS, you reach this level by entering the server cache-group <num> command at the global CONFIG level. For FWLB, you reach this level by entering the server fw-group 2 command at the global CONFIG level.
This level allows you to configure Global SLB (GSLB) affinity parameters. You reach this level by entering the gslb dns affinity command at the global CONFIG level.
This level allows you to configure Global GSLB DNS zone parameters. You reach this level by entering the gslb dns zone-name <name> command at the global CONFIG level.
This level allows you to configure GSLB site parameters. You reach this level by entering the gslb site <name> command at the global CONFIG level.
This level allows you to configure GSLB policy parameters. You reach this level by entering the gslb policy command at the global CONFIG level.
This level allows you to configure URL switching policies. You reach this level by entering the url-map <policy-name> command at the global CONFIG level.
This level allows you to configure matching lists of selection criteria for HTTP content verification health checks. You reach this level by entering the http match-list <name> command at the global CONFIG level.
This level allows you to configure history lists for monitoring Layer 4 statistics. You reach this level by entering the server monitor command at the global CONFIG level.
This level allows you to configure global RIP parameters for use with IP forwarding. You reach this level by entering the router rip command at the global CONFIG level.
The CLI can be accessed through both serial and Telnet connections. For initial log on, you must use a serial connection. Once an IP address is assigned, you can access the CLI through Telnet.
NOTE: When accessing the CLI through Telnet, you are prompted for a password. By default, the password required is the password you enter for general access at initial setup. You also have the option of assigning a separate password for Telnet access with the enable telnet password <password> command, available at the global CONFIG level.
NOTE: At initial log on, all you need to do is type enable at the prompt. You only need to enter a password after a permanent password is entered at global CONFIG level of the CLI.
Once connectivity to the ServerIron is established, you will see one of the following prompts:
FastIron>
ServerIron>
SW-TurboIron>
At this prompt, you are at the user level of the CLI EXEC command structure.
To reach the Global CONFIG Level, the uppermost level of the CONFIG commands, enter the following commands:
ServerIron> enable
User Level EXEC commands
ServerIron# configure terminal
Privileged Level EXEC commands
ServerIron(config)#
Global Level CONFIG commands
You can then reach all other levels of the CONFIG command structure from this point.
The CLI prompt will change at each level of the CONFIG command structure, to easily identify the current level. A summary of the look of each prompt is noted below:
ServerIron> |
User EXEC level |
ServerIron# |
Privileged EXEC level |
ServerIron(config)# |
Global CONFIG level |
BigServerIron(config-redundancy)# |
Redundant Management Module CONFIG level |
ServerIron(config-gslb-dns-affinity)# |
Global SLB Affinity level |
ServerIron(config-gslb-dns-zonename)# |
Global SLB DNS Zone level |
ServerIron(config-gslb-policy)# |
Global SLB Policy level |
ServerIron(config-gslb-site-sitename)# |
Global SLB Site level |
ServerIron(config-if-portnum)# |
Interface CONFIG level |
ServerIron(config-vif-number)# |
Virtual Interface CONFIG level |
ServerIron(config-vlan-number)# |
Port-based VLAN level |
ServerIron(config-vlan-protocoltype)# |
Protocol VLAN level |
ServerIron(config-tc-cachename)# |
Cache Group level |
ServerIron(config-tc-firewallname)# |
Firewall Group level |
ServerIron(config-rs-servername)# |
Real Server level |
ServerIron(config-url-policy)# URL |
Switching Policy level |
ServerIron(config-vs-servername)# |
Virtual Server level |
ServerIron(config-http-ml-listname)# |
HTTP Matching List level |
ServerIron(config-slb-mon)# Server |
Monitor Level |
ServerIron(config-vip-host-range-1)# |
Host-range map level |
NOTE: The CLI prompt at the interface level includes the port speed. The speed is one of the following:
- e100 – The interface is a 10/100 port.
- e1000 – The interface is a Gigabit port.
For simplicity, the port speeds sometimes are not shown in example Interface level prompts in this manual.
To reach other CLI command levels, you need to enter certain commands. At each level there is a launch command that allows you to move either up or down to the next level.
Many CLI commands may require textual or numeral input as part of the command. These fields are either required or optional depending on how the information is bracketed. For clarity, a few CLI command examples are explained below.
EXAMPLE:
server virtual-name <value>
vlan <num> [name <value>] by port
Whenever an item is bracketed with “< >” symbols, the information requested is required.
Whenever an item is bracketed with “[ ]” symbols, the information requested is optional.
Whenever two or more options are separated by a vertical bar, “ | “, you must enter one of the options as part of the command.
predictor least-conn | response-time | round-robin | weighted
means enter one of the values
For example, the command above requires that "least-conn", "response-time", "round-robin", or "weighted" be entered as part of the command.
To get a quick display of available options at a CLI level, enter a question mark (?) at the prompt, and a summary list of possible commands will be listed, as shown below:
To view all available commands at the user level, enter the following:
ServerIron> ? <return>
enable
fastboot
You also can use the question mark (?) with an individual command to see all available options for that command or to check context.
To view possible copy command options, enter the following:
ServerIron# copy ?
flash
running-config
startup-config
tftp
ServerIron# copy flash ?
tftp
Commands and parameters can be abbreviated as long as enough text is entered to distinguish it from other commands at that level. For example, given the possible commands copy tftp... and config tftp..., possible shortcuts are cop tftp and con tftp respectively. In this case, co does not properly distinguish the two commands.
You can make configuration changes while the ServerIron is running. The type of configuration change determines whether or not it becomes effective immediately or requires a save to flash (write memory) and reset of the system (reload), before it becomes active.
This approach in adopting configuration changes:
- allows you to make configuration changes to the operating or running configuration of the ServerIron to address a short-term requirement or validate a configuration without overwriting the permanent configuration file, the startup configuration, that is saved in the system flash, and;
- ensures that dependent or related configuration changes are all cut in at the same time.
In all cases, if you want to make the changes permanent, you need to save the changes to flash using the
write memory command. When you save the configuration changes to flash, this will become the configuration that is initiated and run at system boot.
NOTE: The majority of configuration changes are dynamic in nature. Those changes that require a reset of the system are highlighted in the specific configuration chapter and in the CLI commands of this appendix.
|