NIOS 6.0.0 CLIGuide

Infoblox CLI Guide
NIOS 6.0
for Infoblox Network Core Services Appliances
Copyright Statements
2010-2011, Infoblox Inc. All rights reserved.
The contents of this document may not be copied or duplicated in any form, in whole or in part, without the prior
written permission of Infoblox, Inc.
The information in this document is subject to change without notice. Infoblox, Inc. shall not be liable for any
damages resulting from technical errors or omissions which may be present in this document, or from use of this
document.
This document is an unpublished work protected by the United States copyright laws and is proprietary to Infoblox,
Inc. Disclosure, copying, reproduction, merger, translation, modification, enhancement, or use of this document by
anyone other than authorized employees, authorized users, or licensees of Infoblox, Inc. without the prior written
consent of Infoblox, Inc. is prohibited.
For Open Source Copyright information, refer to the Infoblox NIOS Administrator Guide.
Trademark Statements
Infoblox, the Infoblox logo, Grid, NIOS, bloxTools, NetMRI and PortIQ are trademarks or registered trademarks of
Infoblox Inc.
All other trademarked names used herein are the properties of their respective owners and are used for identification
purposes only.
Company Information
Infoblox is located at:
4750 Patrick Henry Drive
Santa Clara, CA 95054-1851, USA
Web: www.infoblox.com
www.infoblox.com/en/support/support-center-login.html
Phone: 408.625.4200
Toll Free: 888.463.6259
Outside North America: +1.408.716.4300
Fax: 408.625.4201
Product Information
Hardware Models: Infoblox-250-A, -550-A, -1050-A, -1550-A, -1552-A, -1852-A, and -2000-A.
Document Number: 400-0311-000, Rev. A
Document Updated: December 17, 2010
Warranty Information
Your purchase includes a 90-day software warranty and a one year limited warranty on the Infoblox device, plus an
Infoblox Warranty Support Plan and Technical Support. For more information about Infoblox Warranty information,
refer to the Infoblox Web site, or contact Infoblox Technical Support.
NIOS 6.0 Infoblox CLI Guide (Rev. A) 3
Contents
Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Document Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Related Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Customer Care . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Accessing the Infoblox CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Infoblox CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
CLI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
ddns_add. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
ddns_delete. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
dig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
reboot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
reset all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
reset arp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
reset database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
rotate log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
set bgp log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
set bloxtools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
set debug. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
set dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
set interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
set ip_rate_limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
set ipam_web_ui . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
set lcd keys or set lcd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
set license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
set lines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
set membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
set mld_version_1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
set monitor dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
set monitor dns alert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
set network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
set nogrid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
set nosafemode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
set ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
set phonehome . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
set promote_master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
4 Infoblox CLI Guide (Rev. A) NIOS 6.0
set prompt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
set remote_console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
set revert_grid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
set safemode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
set scheduled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
set security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
set session_timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
set support_access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
set temp_license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
show bgp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
show bloxtools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
show capacity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
show config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
show connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
show cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
show date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
show debug. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
show dhcp_gss_tsig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
show disk. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
show dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
show dns_gss_tsig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
show file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
show hardware_status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
show hwid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
show interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
show ip_rate_limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
show lcd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
show lcd_info . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
show license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
show log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
show logfiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
show memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
show mld_version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
show monitor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
show monitor dns alert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
show monitor dns alert status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
show network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
show ntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
show ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
show phonehome . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
show remote_console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
show routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
show scheduled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
show security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102
show session_timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
show snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104
show status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
show support_access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106
show tech-support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107
show upgrade_compatible. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
show upgrade_history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
show uptime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110
show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111
show vpn_cert_dates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112
shutdown. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114
Preface
This guide explains the Infoblox CLI (Command Line Interface) commands that you can use to configure and manage
the NIOS appliance.
This preface describes the content and organization of this guide, how to find additional product information, and
how to contact technical support. It comprises the following sections:
Document Overview on page 8
Documentation Organization on page 8
Conventions on page 8
Related Documentation on page 9
Customer Care on page 10
User Accounts on page 10
Software Upgrades on page 10
Technical Support on page 10
Preface
Document Overview
This guide explains the CLI (Command Line Interface) commands that you can use to configure and manage the NIOS
appliance from a remote terminal. For the latest Infoblox documentation, visit the Infoblox Support web site at
http://www.infoblox.com/en/support/support-center-login.html.
Documentation Organization
This guide covers the following topics.
Conventions
This guide follows the Infoblox documentation style conventions, as listed in the following table.

CLI syntax uses conventions that are unique to documenting command line tools. The following table provides a list
of syntax delimiters and their meanings.

Chapter Content
Overview on page 11 Explains how to access the Infoblox CLI using a console port or
SSHv2 client. This topic also describes the CLI conventions and
outlines the basic CLI commands.
CLI Commands on page 15 Explains the function and usage of each command, and provides
an example of the command usage and expected results.
Style Usage
scr een Indicates session text or system information displayed on the screen.
boldface screen Signifies command line entries that you type.
italic screen Signifies variables that you enter for your configuration, such as file
names and group names.
Item Convention
{} brackets Indicates a mandatory feature.
[ ] brackets Indicates an optional feature.
| pipe symbol Indicates an or relationship between two features.
Related Documentation
Variables
Infoblox uses the following variables to represent the values of the configurations that exist on your appliance. You
should substitute the variables with the actual values that match your site configuration.
Related Documentation
Other Infoblox appliance documentation:
Infoblox NIOS Administrator Guide
Infoblox IBOS Administrator Guide
Infoblox API Documentation
Infoblox CSV Import Reference
Infoblox-500, Infoblox-1000 and Infoblox-1200 Quick Start
Infoblox User Guide for the Infoblox-1050, 1550, and 1552 Appliances
Infoblox User Guide for the Infoblox-500, 550 Appliance
Infoblox Installation Guide for the Infoblox-550, -1050, -1550, and -1552 Appliances
Infoblox Installation Guide for the Infoblox-550-A, -1050-A, -1550-A, and -1552-A Appliances
Infoblox Installation Guide for the Infoblox-1852-A Appliance
Infoblox Installation Guide for the Infoblox-250 Appliance
Infoblox Installation Guide for the Infoblox-2000 Appliance
Variable Value
admin_group Name of a group of administrators
admin_name Name of the appliance administrator
addr_range IP address range
domain_name Domain name
directory Directory name
dns_view DNS view
filter_name Filter name
grid_master Grid master
grid_member Grid member
hostname Host name of an independent appliance
id_grid Grid name
ip_addr IPv4 address
member Grid member name
netmask Subnet mask
network IP address of a network
numerical Numerical entry
zone DNS zone
Preface
Quick Start Guide for Installing vNIOS Software on Riverbed Services Platforms
Quick Start Guide for Installing vNIOS Software on Cisco Application eXtension Platforms
Quick Start Guide for Installing vNIOS Software on VMware Platforms
Quick Start Guide for Installing vIBOS Software on VMware Platforms
Infoblox Safety Guide
To provide feedback on any of the Infoblox technical documents, please e-mail techpubs@infoblox.com.
Customer Care
This section addresses user accounts, software upgrades, and technical support.
User Accounts
The Infoblox appliance ships with a default user name and password. Change the default admi n account password
immediately after the system is installed to safeguard its use. Make sure that the appliance has at least one
administrator account with superuser privileges at all times, and keep a record of your account information in a safe
place. If you lose the admi n account password, and did not already create another superuser account, the system will
need to be reset to factory defaults. This may cause you to lose all existing data on the appliance. You can create new
administrator accounts, with or without superuser privileges. For more information, refer to the Infoblox NIOS
Administrator Guide.
Software Upgrades
Software upgrades are available according to the Terms of Sale for your system. Infoblox notifies you when an
upgrade is available. Register immediately with Infoblox Technical Support at
http://www.infoblox.com/en/support/product-registration.html to maximize your Technical Support.
Technical Support
Infoblox Technical Support provides assistance via the Web, e-mail, and telephone. The Infoblox Support web site at
http://www.infoblox.com/en/support/support-center-login.html provides access to product documentation and
release notes, but requires the user ID and password you receive when you register your product online at:
http://www.infoblox.com/en/support/product-registration.html.
Overview
This chapter explains how to access the Infoblox CLI (Command Line Interface) and introduces the CLI commands.
This chapter is organized into the following sections:
Accessing the Infoblox CLI on page 12
Console Port Access on page 12
SSHv2 Client Access on page 12
Infoblox CLI on page 13
CLI commands on page 13
Using CLI Help on page 14
Overview
Accessing the Infoblox CLI
You can access the Infoblox CLI from a management system. The management system is the computer from which you
configure and monitor the NIOS appliance. You can access the Infoblox CLI from the management system directly
through a serial cable or remotely across an ethernet network.
Console port accessAccess the Infoblox CLI through a direct console connection from your management
system to the appliance.
SSHv2 client accessAccessing the Infoblox CLI remotely by making an SSHv2 connection across an ethernet
network.
Note: Only superusers can log in to the appliance through a console connection.
Console Port Access
You can access the Infoblox CLI by using a terminal emulation program from the management system through a direct
console connection.
To access the Infoblox CLI through the console port:
1. Connect a serial cable from the console port on your management system to the console port on the appliance.
The appliance has a male DB-9 console port on its front panel.
2. Use the following connection settings to launch an emulation session through a serial terminal emulation
program such as Hilgraeve Hyperterminal
(provided with the Windows
operating systems):
Bits per second: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow control: Xon/Xoff
3. Use the following default user name and password to log in to the Infoblox appliance:
admin
infoblox
Note: User names and passwords are case-sensitive.
SSHv2 Client Access
You can access the Infoblox CLI from a remote management system. You must first enable remote console access
before you can remotely access the Infoblox CLI. By default, remote console access (SSHv2 access) is disabled on the
Infoblox appliance.
You can enable remote console access on the Infoblox appliance through either the Infoblox GUI or the CLI.
To enable remote console access through the Infoblox GUI:
1. Make an HTTPS or console connection to the appliance and log in to the appliance.
2. For a grid member or grid master, complete the following:
1. From the Grid tab, select the Grid Manager tab, and then click Grid Properties -> Edit from the Toolbar.
2. In the Grid Properties editor, select the Security tab, and then select Enable Remote Console Access.
3. Click Save & Close.
Infoblox CLI
For an independent appliance, complete the following:
1. From the System tab, select the System Manager tab, and then click System Properties -> Edit from the
Toolbar.
2. In the System Properties editor, select the Security tab, and then select Enable Remote Console Access.
3. Click Save & Close.
To enable remote console access through the CLI:
1. From the command line, enter the following after the Infoblox > prompt:
set remote_console
2. Enter y at the Enable remote console access (grid-level)? (y or n): prompt.
3. Confirm the settings.
After you enable the remote console access, you can access the Infoblox CLI from a remote location using an SSHv2
client.
To access the Infoblox CLI using an SSHv2 client:
1. On the management system, open a remote console connection through an SSHv2 client.
2. In a shell window or terminal window, log in with an account that has superuser privileges.
3. Enter the user name and host name or IP address of the appliance. For example:
ssh admin@192.168.1.2
4. Optionally, you can launch a graphical SSHv2 client and enter the information in the appropriate fields.
Infoblox CLI
The Infoblox CLI allows you to configure and monitor the appliance from a remote console using a set of commands.
Some administrative tasks, such as resetting the appliance, can be done only through the CLI.
CLI commands
The basic Infoblox CLI commands are alphabetically listed in the following table.
CLI Command Description
? Displays the help information.
ddns_add Sends DDNS updates to add records.
ddns_del et e Sends DDNS updates to delete records.
del et e Deletes specific files.
di g Performs a DNS lookup and prints the results.
exi t Exits the command interpreter.
hel p Displays the help information.
pi ng Sends ICMP ECHO requests to verify that the host is functioning properly.
qui t Exits the command interpreter.
r eboot Reboots the Infoblox appliance.
r eset Resets the system settings.
r ot at e Rotates specific files.
Overview
The reset, set, and show commands each have related commands. To view a complete list of the related
commands on the remote console, go to the command prompt and enter help set or help show.
For information on all available commands, see CLI Commands on page 15.
Using CLI Help
You can display a list of available CLI commands by typing help at the command prompt. For example:
> help
? Di spl ay hel p
del et e Del et e f i l es
di g Per f or ma DNS l ookup and pr i nt t he r esul t s
exi t Exi t command i nt er pr et er
hel p Di spl ay hel p
pi ng Send I CMP ECHO
qui t Exi t command i nt er pr et er
r eboot Reboot devi ce
r eset Reset syst emset t i ngs
set Set cur r ent syst emset t i ngs
show Show cur r ent syst emset t i ngs
shut down Shut down devi ce
t r acer out e Rout e pat h di agnost i c
ddns_add Send DDNS updat e t o add a r ecor d
ddns_del et e Send DDNS updat e t o del et e a r ecor d
r ot at e Rot at e f i l es
To view a detailed explanation about a CLI command and its syntax, type help <command> after the command
prompt. For example:
> help rotate
Synopsi s:
r ot at e l og [ sysl og | debug | audi t | i f mapser ver ]
r ot at e f i l e gr oupname f i l ename [ f i l ename2, f i l ename3, . . . ]
Descr i pt i on:
Rot at es t he speci f i ed l og f i l e, up t o 10 pr evi ous.
l ogf i l es wi l l be pr eser ved
set Sets the current system settings. This command has other related commands.
show Shows the current system settings. This command has other related commands.
shut down Shuts down the Infoblox appliance.
t r acer out e Displays the path or route diagnostic information of the IPv4/IPv6 packets.
CLI Command Description
CLI Commands
This chapter provides information on all the Infoblox CLI commands, and is organized in alphabetical order as shown
in the following table.
Commands
ddns_add on page 17 set monitor dns on page 43
ddns_delete on page 18 set monitor dns alert on page 44
dig on page 19 set network on page 45
exit on page 21 set nogrid on page 46
help on page 22 set nosafemode on page 47
ping on page 23 set ospf on page 48
reboot on page 24 set phonehome on page 49
reset all on page 25 set promote_master on page 50
reset arp on page 26 set prompt on page 51
reset database on page 27 set remote_console on page 52
rotate log on page 28 set revert_grid on page 53
set bgp log on page 29 set safemode on page 54
set debug on page 31 set scheduled on page 55
set dns on page 32 set security on page 56
set interface on page 33 set session_timeout on page 57
set ip_rate_limit on page 35 set support_access on page 58
set ipam_web_ui on page 37 set temp_license on page 59
set lcd keys or set lcd on page 38 show arp on page 60
set license on page 39 show bgp on page 61
set lines on page 40 show capacity on page 63
set membership on page 41 show config on page 64
set mld_version_1 on page 42 show connections on page 65
CLI Commands
show cpu on page 66 show monitor dns alert status on page 93
show date on page 67 show network on page 94
show debug on page 68 show ntp on page 95
show dhcp_gss_tsig on page 69 show ospf on page 96
show disk on page 72 show phonehome on page 98
show dns on page 73 show remote_console on page 99
show dns_gss_tsig on page 74 show routes on page 100
show file on page 75 show scheduled on page 101
show hardware_status on page 77 show security on page 102
show hwid on page 78 show session_timeout on page 103
show interface on page 79 show snmp on page 104
show ip_rate_limit on page 81 show status on page 105
show lcd on page 82 show support_access on page 106
show lcd_info on page 83 show tech-support on page 107
show license on page 84 show upgrade_compatible on page 108
show log on page 86 show upgrade_history on page 109
show logfiles on page 88 show uptime on page 110
show memory on page 89 show version on page 111
show mld_version on page 90 show vpn_cert_dates on page 112
show monitor on page 91 shutdown on page 113
show monitor dns alert on page 92 traceroute on page 114
Commands
ddns_add
ddns_add
The ddns_add command sends DDNS updates to the appliance when you add new resource records. To use this
command, ensure that you have properly configured the appliance for DDNS updates. For information, refer to the
Infoblox Administrator Guide.
Syntax
ddns_add <domain-name> <ttl> <type> <data> [ keyname:secret]
Example
I nf obl ox > ddns_add dns1.corp100.com 20 A 10.0.0.11
Argument Description
domain-name The FQDN of the resource record being added. For example, if the name
of the record is dns1 and the forward-mapping zone name is
corp100.com, the FQDN is dns1.corp100.com.
ttl The TTL value (in seconds) of the new resource record.
type The record type of the new resource record. For example, enter A for an
A record and PTR for a PTR record.
data The RDATA of the resource record. For example, enter the IP address of
an A record or the domain name of a PTR record.
[ keyname:secret] The TSIG key name and the secret for sending DDNS updates. You must
enter the TSIG key name and shared secret if the DNS zone to which the
record belongs is configured with a TSIG key.
CLI Commands
ddns_delete
The ddns_delete command sends DDNS updates to the appliance when you delete existing resource records. To
use this command, ensure that you have properly configured the appliance for DDNS updates. For information, refer
to the Infoblox Administrator Guide.
Syntax
ddns_del et e <domain-name> [ type[ keyname:secret] ]
Example
I nf obl ox > ddns_delete dns1.corp100.com
domain-name The FQDN of the resource record being deleted. For example, if the name
of the record is dns1 and the forward-mapping zone name is
corp100.com, the FQDN is dns1.corp100.com.
type The record type of the resource record. For example, enter A for an A
record and PTR for a PTR record. This is optional.
[ keyname:secret] The TSIG key name and the secret for sending DDNS updates. You must
enter the TSIG key name and shared secret if the DNS zone to which the
record belongs is configured with a TSIG key.
dig
dig
The dig command performs a DNS lookup on a specified server and displays the results. You can also use the inverse
command to perform a reverse DNS lookup.
Syntax
di g [ @server_address] <hostname> [ type] [ opt...]
di g [ @server_address] <ip-address> i nver se
Examples
Perform a DNS lookup
I nf obl ox > dig @10.0.2.60 www.infoblox.com a
: <<>> Di G 9. 6. 1- p3 <<>> @10. 0. 2. 60 - x www. i nf obl ox. coma
: <1 ser ver f ound>
: : gl obal opt i ons: +cmd
: : Got answer :
: : - >>HEADER<<- opcode: QUERY, st at us: NOERROR, i d: 45283
: : f l ags: qr aa r d r a: QUERY: 1, ANSWER: 2, AUTHORI TY: 0, ADDI TI ONAL: 0
: : QUESTI ON SECTI ON:
: www. i nf obl ox. com. I N A
server_address The IP address of the host on which you want to perform a DNS lookup.
hostname The name of the host on which you want to perform a DNS lookup.
ip-address The IP address of the host on which you want to perform a DNS lookup.
type You can enter any of the following for the object type (case sensitive): a,
a6, aaaa, af sdb, any, apl , axf r , cer t , cname, dhci d, di v,
dname, dnskey, ds, gpos, hi nf o, hi p, i pseckey, i sdn, i xf r ,
key, keydat a, kx, l oc, mai l a, mai l b, mb, md, mf , mg, mi nf o,
mr , mx, napt r , none, ns, nsap, nsap_pt r , nsec, nsec3,
nsec3par am, nul l , nxt , opt , pt r , px, r p, r r si g, r t , si g,
soa, spf , sr v, sshf p, t key, t si g, t xt , unspec, wks, and
x25. The default is a.
opt You can enter one or more of the following options:
-x (specifies the in-addr lookup)
-b address (specifies the binding to the source address)
-y name:key (specifies the named base64 tsig key)
+vc (enables the TCP mode)
+norecurse (disables the recursive mode)
+short (disables everything except the short forms of answers)
+nssearch ( searches all the authoritative nameservers)
+trace (traces all the delegations from the root)
+cdflag (requests the server not to perform a DNSSEC validation)
+dnssec ( requests the server to send DNSSEC records)
+multiline ( displays records in multiple lines)
CLI Commands
: : ANSWER SECTI ON:
www. i nf obl ox. com 3600 I N CNAME i nf obl ox. com.
i nf obl ox. com 600 I N A 128. 242. 99. 236
: : Quer y t i me: 2 msec
: : SERVER: 10. 0. 2. 60#53<10. 0. 2. 60>
: : WHEN: Fr i Feb 26 14: 06: 00 2010
: : MSG SI ZE r cvd: 64
Perform a reverse DNS lookup
I nf obl ox > dig @10.0.2.60 inverse
: <<>> Di G 9. 6. 1- p3 <<>> @10. 0. 2. 60 i nver se
: <1 ser ver f ound>
: : gl obal opt i ons: +cmd
: : Got answer :
: : - >>HEADER<<- opcode: QUERY st at us: NXDOMAI N, i d: 37916
: : f l ags: qr r d r a: QUERY: 1, ANSWER: 0, AUTHORI TY: 1, ADDI TI ONAL: 0
: : QUESTI ON SECTI ON:
: i nver se. I N A
: : AUTHORI TY SECTI ON:
. 10800 I N SOA a. r oot - ser ver s. net .
nst 1d. ver i si gn- gr s. com. 2010022601 1800 900 604800 86400
: : Quer y t i me: 132 msec
: : SERVER: 10. 0. 2. 60#53<10. 0. 2. 60>
: : WHEN: Thu Feb 25 11: 20: 09 2010
: : MSG SI ZE r cvd: 100
exit
exit
The exit (quit) command terminates the command line interface and halts the CLI session.
Syntax
exi t , qui t
Both commands produce the same results. There are no arguments for either command.
Examples
I nf obl ox > exit
Good Bye
Connect i on t o <IP address> cl osed.
I nf obl ox > quit
Good Bye
Connect i on t o <IP address> cl osed.
Command Description
exi t Terminates the current CLI session.
qui t Terminates the current CLI session.
CLI Commands
help
The help command displays information about a specified CLI command. If you do not specify a command, a list of
all available commands is shown.
Syntax
hel p [ command]
Examples
Display a list of commands
I nf obl ox > help
==================================================================
Command Summar y
==================================================================
? Di spl ay hel p
del et e Del et e f i l es
di g Per f or ma DNS l ookup and pr i nt t he r esul t s
exi t Exi t command i nt er pr et er
hel p Di spl ay hel p
pi ng Send I CMP ECHO
qui t Exi t command i nt er pr et er
r eboot Reboot devi ce
r eset Reset syst emset t i ngs
set Set cur r ent syst emset t i ngs
show Show cur r ent syst emset t i ngs
shut down Shut down devi ce
t r acer out e Rout e pat h di agnost i c
ddns_add Send DDNS updat e t o add a r ecor d
ddns_del et e Send DDNS updat e t o del et e a r ecor d
r ot at e Rot at e f i l es
=================================================================
Display details for a single command
I nf obl ox > help exit
Synopsi s:
exi t , qui t
Descr i pt i on:
Exi t s t he command i nt er pr et er . Ther e ar e no ar gument s t o exi t .
command A variable that you substitute with any CLI command to display a
description of the function and a synopsis of its usage.
ping
ping
The ping command verifies if a remote IPv4/IPv6 host is functioning and accessible across the network. When you
execute the pi ng command, it sends five (default) sequential ICMP ECHO requests to the host and displays the
results.
Syntax
pi ng {hostname | ip_address} [ opt ]
Examples
Valid host
I nf obl ox > ping 10.1.1.1
pi ngi ng 10. 1. 1. 1
PI NG 10. 1. 1. 1 ( 10. 1. 1. 1) 56( 84) byt es of dat a.
64 byt es f r om10. 1. 1. 1: i cmp_seq=1 t t l =64 t i me=0. 295 ms
- - - 10. 1. 1. 1 pi ng st at i st i cs - - -
5 packet s t r ansmi t t ed, 5 r ecei ved, 0%packet l oss, t i me 4005ms
r t t mi n/ avg/ max/ mdev = 0. 335/ 0. 562/ 1. 245/ 0. 343 ms
Invalid host
I nf obl ox > ping jsparrow
pi ngi ng j spar r ow
pi ng: unknown host j spar r ow
hostname The name of the remote host that you want to verify.
ip_address The IP address of the remote host that you want to verify.
opt numerical (specifies to not interpret the IP address as a DNS name)
src_addr (specifies the starting or from address)
v6 (specifies you are using an IPv6 hostname)
broadcast (allows pinging to a broadcast address)
ttl <hops> (specifies the time-to-live setting for outgoing
packets)
packetsize <bytes> (specifies the number of data bytes to send)
count <packets> ( specifies number of echo_requests packets
sent, default is 5, maximum is 250)
CLI Commands
reboot
The reboot command halts and then restarts the appliance. Use this command as a last measure when the
appliance appears to be hung. Rebooting the appliance clears the cache and resets the system.
Syntax
r eboot
There are no arguments for this command.
Example
I nf obl ox > reboot
REBOOT THE SYSTEM? ( y or n) y
reset all
reset all
The reset all command clears the NIOS appliance of database, configuration, and network settings. It then
re-establishes the factory settings with the default IP address, gateway, and subnet mask.
The reset all licenses command clears database, configuration, and network settings. It also clears all licensing
information from the appliance before re-establishing the factory settings.
Note: No previous data remains on the appliance after using these commands.
Syntax
r eset al l [ l i censes]
Examples
Re-establish factory settings
I nf obl ox > reset all
The ent i r e syst emwi l l be r eset t o def aul t set t i ngs.
WARNI NG: THI S WI LL ERASE ALL DATA AND LOG FI LES THAT HAVE BEEN CREATED ON THI S SYSTEM.
ARE YOU SURE YOU WANT TO PROCEED? ( y or n) : y
Re-establish factory settings and remove all licenses
I nf obl ox > reset all licenses
The ent i r e syst emwi l l be r eset t o def aul t set t i ngs and al l l i censes wi l l be r emoved.
WARNI NG: THI S WI LL ERASE ALL DATA AND LOG FI LES THAT HAVE BEEN CREATED ON THI S SYSTEM.
ARE YOU SURE YOU WANT TO PROCEED? ( y or n) : y
l i censes Specifies the removal of all licenses during the process of re-establishing
the factory settings on the appliance.
CLI Commands
reset arp
The reset arp command clears the ARP (Address Resolution Protocol) cache. The ARP maps IP addresses to the
hardware MAC addresses and logs them in a table which is stored in the cache. Over time, the IP address leases
expire and are assigned to new devices (MAC addresses). Infoblox recommends that you periodically clear this cache
to maintain valid mappings between IP addresses and MAC addresses.
Syntax
r eset ar p
This command has no arguments.
Example
I nf obl ox > reset arp
ARP cache cl ear ed.
reset database
reset database
The reset database command removes configuration files and DNS and DHCP data from the NIOS appliance
database. However, the network and licensing information remains intact. The network settings of the appliance
include the IP address and subnet mask for the appliance, the IP address of the gateway, the host name, and the
remote access setting.
You can use this command to diagnose problems such as the following:
Misplacing the administrator account and password.
Preserving the log files when clearing the database.
Syntax
r eset dat abase
Example
I nf obl ox > reset database
The f ol l owi ng net wor k set t i ngs can be r est or ed af t er r eset :
I P Addr ess: 10. 1. 1. 10
Subnet Mask: 255. 255. 255. 0
Gat eway: 10. 1. 1. 1
Host Name: ns1. cor p100. com
Remot e Consol e Access: t r ue The ent i r e dat abase wi l l be er ased.
Do you wi sh t o pr eser ve basi c net wor k set t i ngs? ( y or n) y
CLI Commands
rotate log
The rotate log command rolls, or rotates, specified log files. When the audit log, syslog file, and IF-MAP log each
reaches its maximum size, the NIOS appliance automatically writes the file into a new file by adding a . 0 extension
to the first file and incrementing subsequent file extensions by 1. The maximum file size is 100 MB for the audit log,
300 MB for the syslog file, and 120 MB for the IF-MAP log.
Files are compressed during the rotation process, adding a . gz extension following the numerical increment
(file. #. gz). The first file starts with .0 and subsequent file extensions are incremented by one until it reaches nine.
For example, the current log file moves to file. 0. gz, the previous file. 0. gz moves to file. 1. gz, and so on
through file. 9. gz. A maximum of 10 log files (0-9) are kept. When the eleventh file is started, the last log file
(file. 9. gz) is deleted, and subsequent files are renumbered accordingly.
When the debug log file reaches its maximum size, which is 300 MB, the appliance rotates it, but does not compress
it. The appliance retains only one previous debug log file to which it adds a . ol d extension.
This command is useful for diagnostic purposes. To export a file to the management system for viewing, you can
include it in the support bundle.
To download the support bundle:
1. From the Grid tab or System tab, select the Grid Manager tab or System Manager tab, and then click Download ->
Support Bundle from the Toolbar.
2. Select all options to include configuration and core file information in the output file, then save the tar file to a
secure location on the management system.
Syntax
r ot at e l og {sysl og | debug | audi t | i f mapser ver }
r ot at e f i l e gr oupname f i l ename [ f i l ename2, f i l ename3, . . . }
Examples
I nf obl ox > rotate log debug
The sel ect ed l og f i l e has been r ot at ed t o i nf obl ox. l og. 0. gz
I nf obl ox > rotate log audit
The sel ect ed l og f i l e has been r ot at ed t o audi t . l og. 0. gz
I nf obl ox > rotate log ifmapserver
The pr evi ous i f mapser ver l og has successf ul l y been r ot at ed
sysl og Syslog file
debug Debug log file
audi t Audit log file
i f mapser ver IF-MAP log file (for Infoblox Orchestration Servers only)
set bgp log
set bgp log
The set bgp log command sets the verbosity level of the BGP routing services and writes statistical information to
the syslog. The information in syslog can be helpful for diagnostic purposes. When viewing the syslog file, lines with
names such as bgp st at i st i cs are the BGP statistical information. To view information about the BGP protocol
running on the member, see show bgp on page 61.
Note: To use this command, the NSQ software package must be installed.
Syntax
set bgp l og {debuggi ng | i nf or mat i onal | not i f i cat i ons | war ni ngs | er r or s | cr i t i cal |
al er t s | emer genci es }
Example
I nf obl ox > set bgp log
debuggi ng
i nf or mat i onal
not i f i cat i ons
war ni ngs
er r or s
cr i t i cal
al er t s
emer genci es
The verbosity level at which you select to write BGP statistics to syslog.
CLI Commands
set bloxtools
The set bloxtools command permanently clears all bloxtools data files and root system files so you can reset the
bloxtools environment. You can also use this command to clear bloxtools user data. For information about the
bloxtools status, see show bgp on page 61.
You can download a copy of the existing bloxtools data using an FTP or SFTP client before you use this command to
permanently delete the data. For information, refer to the Infoblox NIOS Administrator Guide.
Note: bloxtools data files are not automatically removed when the bloxtools environment is disabled. You must use
this command to manually delete bloxtools data.
Syntax
set bl oxt ool s r eset {al l | dat a}
Examples
Delete all bloxtools data files
I nf obl ox > set bloxtools reset all
Thi s wi l l er ase al l Bl oxt ool s dat a per manent l y.
Do you want t o pr oceed? ( y or n) : y
Ar e you sur e you want t o do t hi s ( y or n) :
Bl oxt ool s r eset .
Delete bloxtools user data
I nf obl ox > set bloxtools reset data
Thi s wi l l er ase al l Bl oxt ool s dat a per manent l y.
Do you want t o pr oceed? ( y or n) : y
Ar e you sur e you want t o do t hi s ( y or n) :
Bl oxt ool s r eset .
al l Clears all bloxtools data files and root system files to reset the bloxtools
environment.
dat a Clears all bloxtools user data to reset the bloxtools environment.
set debug
set debug
The set debug command enables and disables debug logging for the NIOS appliance. Debug logging is the most
extensive and verbose logging that is available on the appliance. It captures all levels of messaging. The output is
written into the debug log file. For information on how to view this output, see show log on page 86.
Use this command to capture specific occurrences. However, only use it for short periods of time. Do not leave it
running for extended periods of time. Due to the amount of data that is captured, leaving this feature running for any
length of time can affect the performance of the appliance. For this reason, it is best to use this command during
non-peak hours.
Note: Infoblox recommends that you turn debug logging off, unless Infoblox Support specifically directs you to turn
this feature on. If you leave debug logging turned on, it can cause performance issues.
Syntax
set debug {on | of f }
Examples
Enable debugging
I nf obl ox > set debug all on
Enabl ed debug l oggi ng f or : al l
Disable debugging
I nf obl ox > set debug all off
Di sabl ed debug l oggi ng f or : al l
al l Specifies debug logging for all services as enabled or disabled.
on Enables debug logging.
of f Disables debug logging.
CLI Commands
set dns
The set dns command enables you to control the DNS cache. You can flush the cache file of a DNS view or flush a
particular entry from a cache file. In addition, you can schedule an inbound zone transfer from an external primary
server.
Syntax
set dns f l ush al l [ dns_view]
set dns f l ush name name [ dns_view]
set dns t r ansf er zone [ dns_view]
Example
Flush the cache file from the default DNS view
I nf obl ox > set dns flush all
al l Flushes the cache file from the default view.
dns_view Specifies a particular DNS view.
name Flushes the specific entry from the cache.
zone Specifies the zone for the inbound transfer from an external primary
server.
set interface
set interface
The set interface command allows you to configure the speed and duplex settings of the network interfaces
(MGMT, HA, LAN, and LAN2) on single independent appliances only. You cannot configure the network interface
settings of appliances after they join a grid or become HA pairs.
You can use set interface mgmt to enable the MGMT port and configure its IP address, netmask, and gateway
address. Once the MGMT port is enabled, you can use the command to configure the speed and duplex settings of
the MGMT port. You can also use set interface mgmt off to disable the MGMT port.
Use the show interface command to view the interface settings.
Syntax
set i nt er f ace [ l an| ha| l an2] speed [ aut o| 10M| 100M| 1000M] dupl ex {aut o| hal f | f ul l ]
set i nt er f ace mgmt [ speed [ aut o| 10M| 100M| 1000M] dupl ex {aut o| hal f | f ul l ] ]
set i nt er f ace mgmt of f
Examples
Enable and configure the MGMT interface
I nf obl ox > set interface mgmt
Enabl e Management por t ? ( y or n) : y
Ent er Management I P addr ess: 10.36.1.157
Ent er Management net mask [ Def aul t : 255. 255. 255. 0] : 255.255.0.0
Ent er Management gat eway addr ess [ Def aul t : 10. 36. 0. 1] :
Rest r i ct Suppor t and r emot e consol e access t o MGMT por t ? ( y or n) : n
Management Por t Set t i ng:
Management Por t Enabl ed: t r ue
Management I P addr ess: 10. 36. 1. 157
Management net mask: 255. 255. 0. 0
Management Gat eway addr ess: 10. 36. 0. 1
Rest r i ct Suppor t and r emot e consol e access t o MGMT por t : f al se
l an
l an2
ha
Specifies the LAN interface.
Specifies the LAN2 interface on the Infoblox-250-A, -550-A, -1050-A,
-1550-A, -1552-A, and -2000-A appliances.
Specifies the HA interface.
speed
aut o
10M | 100M | 1000M
Specifies the speed of the incoming line rate in Mbps, or allows the
appliance to automatically match the line speed.
dupl ex
aut o
hal f
f ul l
Specifies the duplex speed:
Automatically adjusts the speed
Sets it at half speed
Set it at full speed
mgmt Specifies the management interface.
mgmt of f Disables the management system interface.
Note: If this port is not being used, it should be set to off for security
reasons.
CLI Commands
I s t hi s cor r ect ? [ y or n] : y
Ar e you sur e? ( y or n) : y
The management por t set t i ngs have been updat ed.
Specify the MGMT interface speed after the port is enabled
I nf obl ox > set interface mgmt speed 10M duplex full
Set t i ng Management i nt er f ace speed t o: 10M and dupl ex t o: f ul l
The net wr ok i nt er f ace set t i ngs have been updat ed.
Specify the LAN interface speed
I nf obl ox > set interface lan speed 10M duplex full
Set t i ng LAN i nt er f ace speed t o: 10M and dupl ex t o: f ul l
Specify the HA interface speed
I nf obl ox > set interface ha speed 100M duplex half
Set t i ng HA i nt er f ace speed t o: 100M and dupl ex t o: hal f
Note: This command is not supported on vNIOS appliances.
set ip_rate_limit
set ip_rate_limit
The set ip_rate_limit commands enable and disable rate limiting traffic from external sources, configure rate
limiting rules that control the traffic from a specific source or all sources, and remove rate limiting rules from a specific
source or all sources. Once you enable rate limiting, the current rate limiting rules take effect.
This command is useful when you want to mitigate cache poisoning on your DNS server by limiting the traffic or
blocking connections from external sources.
Syntax
set i p_r at e_l i mi t {on | of f }
set i p_r at e_l i mi t r emove {sour ce al l | al l | sour ce ip-address[ / mask] }
set i p_r at e_l i mi t add sour ce {al l | ip_address [ / mask] } l i mi t 0
set i p_r at e_l i mi t add sour ce {al l | ip_address [ / mask] } l i mi t packets/ m[ bur st
burst_packets]
on Enables rate limiting from UDP port 53.
of f Disables rate limiting from UDP port 53.
add sour ce Configures the rate limiting rules.
al l
Enter all or 0.0.0.0 if you want to limit all traffic from all sources.
ip_address/mask
Enter the IP address, and optionally the netmask, from which you want to
limit the traffic.
l i mi t packet s
Enter the number of packets per minute that you want to receive from the
source.
bur st burst_packets
Optionally, enter burst and the number of packets for burst traffic. Burst
is the maximum number of packets accepted.
r emove Removes rate limiting rules from all sources or an existing host.
sour ce al l
Removes the rate limiting rule that limits traffic from all sources.
al l
Removes all of the rate limiting rules from all sources.
sour ce ip-address/ mask
Removes the existing rules for an existing host.
CLI Commands
Examples
Turn on rate limiting
I nf obl ox > set ip_rate_limit on
Enabl i ng r at e l i mi t i ng wi l l di scar d packet s and may degr ade per f or mance.
Ar e you sur e? ( y or n) :
Turn off rate limiting
I nf obl ox > set ip_rate_limit off
Block all traffic from host 10.10.1.1
I nf obl ox > set ip_rate_limit add source 10.10.1.1 limit 0
Limit the traffic to five packets per minute from host 10.10.1.2/24, with an allowance for burst of 10 packets
I nf obl ox > set ip_rate_limit add source 10.10.1.2/24 limit 5/m burst 10
Remove the rate limiting rule from host 10.10.1.1/24
I nf obl ox > set ip_rate_limit remove source 10.10.1.1/24
set ipam_web_ui
set ipam_web_ui
The set ipam_web_ui command enables and disables Grid Manager on vNIOS appliances on Cisco. For information
about Grid Manager, refer to the Infoblox Administrator Guide.
Syntax
set i pam_web_ui
Example
I nf obl ox > set ipam_web_ui
CLI Commands
set lcd keys or set lcd
The set lcd keys or set lcd command enables and disables the LCD input keys. Turning off the LCD input keys
prevents anyone from manually changing the IP address on the NIOS appliance. Infoblox recommends this practice
as a security measure for remote appliances.
Syntax
set l cd keys {of f | on}
Examples
Disable the lcd keys
I nf obl ox > set lcd keys
Enable the lcd keys
I nf obl ox > set lcd keys on
Tur ni ng ON t he LCD di spl ay. .
Note: You cannot enable or disable the LCD input keys on vNIOS appliances. You can configure the LCD input keys
only on a grid master. On a vNIOS appliance, the set lcd keys or set lcd command generates an error.
of f Disables the LCD input keys on the appliance.
on Re-enables the LCD input keys on the appliance.
set license
set license
The set license command installs a license upon entering a valid license string. You must send an email request
to Infoblox to receive a unique license string for your NIOS appliance. Copy the string directly from the email, and then
use CTRL + V to insert it after the CLI command prompt. Use the show license command to view the license settings.
Note: You can install a temporary 60-day license that allows your system to be fully functional while waiting to
receive your permanent license. For more information, see set temp_license on page 59.
Syntax
set l i cense
Example
I nf obl ox > set license
Ent er l i cense st r i ng: EQAAAAKS4n90WFGNUSirwvyUT9/z
I nst al l l i cense? ( y or n) : y
CLI Commands
set lines
The set lines command specifies the number of lines that the NIOS appliance displays when you execute a show
command during a session. The default is 20 lines.
Syntax
set l i nes num
Example
I nf obl ox > set lines 4
Number of scr ol l l i nes set t o 4.
I nf obl ox > show log
May 31 13: 30: 05 ( none) sysl og- ng[ 892] : sysl og- ng ver si on 1. 6. 11 st ar t i ng
May 31 13: 30: 05 ( none) ker nel : Li nux ver si on 2. 6. 17. 4 ( r oot @bui l d- asl an) ( gcc ver si on
3. 2. 1) #1 SMP Fr i May 18 19: 44: 21 EDT 2007
May 31 13: 30: 05 ( none) ker nel : BI OS- pr ovi ded physi cal RAM map:
May 31 13: 30: 05 ( none) ker nel : BI OS- e820: 0000000000000000 - 000000000009f 800 ( usabl e)
Ent er <r et ur n> f or next page or q<r et ur n> t o go back t o command l i ne.
num The number of lines the appliance displays when you execute a show
command.
set membership
set membership
The set membership command specifies a grid for the NIOS appliance. Use this command when the network
address has been set (see set network on page 45) and you want to put the appliance in a grid.
If the IP address is acceptable to the grid master, use this command to join the grid. If you need to re-address the
appliance, use theset network command.
Syntax
set member shi p
Example
I nf obl ox > set membership
J oi n st at us: No pr evi ous at t empt t o j oi n a gr i d.
Ent er new Gr i d Mast er VI P: 10.1.1.22
Ent er Gr i d Name [ Def aul t I nf obl ox] : DaveyJones
Ent er Gr i d Shar ed Secr et : L0ck37
J oi n gr i d as member wi t h at t r i but es:
J oi n Gr i d Mast er VI P: 10. 1. 1. 22
Gr i d Name: DaveyJ ones
Gr i d Shar ed Secr et : L0ck37
WARNI NG: J oi ni ng a Gr i d wi l l r epl ace al l t he dat a on t hi s node!
I s t hi s cor r ect ? ( y or n) : y
CLI Commands
set mld_version_1
The set ml d_ver si on_1 command sets the IPv6 MLD (Multicast Listener Discovery) protocol to version 1, as
described in RFC 2710, Multicast Listener Discovery for IPv6. MLD enables the appliance to detect multicast listeners
on its directly attached links and discover which multicast addresses are of interest.
The appliance runs MLD version 2, as described in RFC 3810, Multicast Listener Discovery Version 2 for IPv6, by
default. MLD version 2 is interoperable with version 1.
Syntax
set ml d_ver si on_1
Example
I nf obl ox > set mld_version_1
Cur r ent MLD ver si on: 2
Set Mul t i cast Li st ener Di scover y Ver si on 1? ( y or n) : y
New MLD Set t i ngs:
Use MLD ver si on 1: Yes
MLD ver si on: 1 i s saved t o dat abase.
MLD ver si on i s set f or I Pv6.
set monitor dns
set monitor dns
The set monitor dns command enables network monitoring for DNS. Once enabled, you can do the following:
View the average latency of authoritative and non-authoritative replies to DNS queries in 1, 5, 15, and 60
minute time intervals. Use the show monitor command to view the DNS network data.
Monitor invalid DNS responses from UDP port 53. Use the show monitor dns alert status command to view the
DNS alert status.
This command is useful when troubleshooting DNS and network issues.
Syntax
set moni t or dns {on | of f }
Examples
Turn on DNS network monitoring
I nf obl ox > set monitor dns on
Tur ni ng On DNS Net wor k Moni t or i ng. . .
Turn off DNS network monitoring
I nf obl ox > set monitor dns off
Tur ni ng Of f DNS Net wor k Moni t or i ng. . .
on Enables network monitoring for DNS.
of f Disables network monitoring for DNS.
CLI Commands
set monitor dns alert
The set monitor dns alert commands enable DNS alert monitoring and set the thresholds for invalid DNS
responses. After you enable DNS alert monitoring, the appliance monitors the UDP traffic on port 53 for recursive DNS
queries, and then reports invalid DNS responses on UDP ports that are not open and with mismatched TXIDs. You
must enable DNS network monitoring when you enable DNS alert monitoring. For information, see theset monitor dns
command.
You can also configure the thresholds for invalid DNS responses. When the number of invalid responses exceeds the
thresholds, the appliance logs the event and sends SNMP traps and notifications, if previously enabled. The default
thresholds for both invalid ports and invalid TXIDs are 50%. You can configure the thresholds either as absolute
packet counts or as percentages of the total traffic during a one minute time interval.
This command is useful for monitoring possible cache poisoning. Use the show monitor dns alert status command to
view invalid port and invalid TXID data.
Syntax
set moni t or dns al er t {on | of f }
set moni t or dns al er t modi f y {por t | t xi d} over threshold_value {packet s | per cent }
Examples
Turn on DNS alert monitoring
I nf obl ox > set monitor dns alert on
Turn off DNS alert monitoring
I nf obl ox > set monitor dns alert off
Trigger a DNS alert when the percentage of invalid DNS responses on UDP ports exceeds 70% per minute
I nf obl ox > set monitor dns alert modify port over 70 percent
Trigger a DNS alert when the total packet count of invalid DNS responses with mismatched TXIDs is over
100 packets per minute
I nf obl ox > set monitor dns alert modify txid over 100 packets
on Enables DNS alert monitoring.
of f Disables DNS alert monitoring.
modi f y Sets the thresholds for invalid DNS responses.
por t
Enter port to set the threshold for invalid ports.
t xi d
Enter txid to set the threshold for invalid TXIDs.
threshold_value
Enter the number of packets or percentage for the threshold.
packet s
Enter packets if you want to set the threshold as a total packet count.
per cent
Enter percentage if you want to set the threshold as a percentage of the
total traffic. For a percentage-based threshold, the appliance does not
generate a threshold crossing event if the traffic level is less than 100
packets per minute.
set network
set network
The set network command specifies an address for a NIOS appliance so that it can join a network, with the option
of joining a grid. Use the show monitor dns alert command to view the network settings.
Syntax
set net wor k
Example
I nf obl ox > set network
NOTI CE: Al l HA conf i gur at i ons ar e per f or med f r omt he GUI . Thi s i nt er f ace i s used onl y t o
conf i gur e a st andal one node or t o j oi n a gr i d.
Ent er I P addr ess: 10.1.1.11
Ent er net mask: [ Def aul t : 255. 255. 255. 0] : 255.255.255.0
Ent er gat eway addr ess [ Def aul t : 10. 1. 1. 1] : 10.1.1.1
Become gr i d member ? ( y or n) : y
Ent er Gr i d Mast er VI P: 10.1.1.22
Ent er Gr i d Shar ed Secr et : L0ck37
J oi n gr i d as member wi t h at t r i but es:
J oi n Gr i d Mast er VI P: 10. 1. 1. 22
Gr i d Name: DaveyJ ones
Gr i d Shar ed Secr et : L0ck37
WARNI NG: J oi ni ng a gr i d wi l l r epl ace al l t he dat a on t hi s node!
The net wor k set t i ngs have been updat ed.
Note: After you confirm your network settings, the Infoblox application automatically restarts.
CLI Commands
set nogrid
The set nogrid command removes the specified member from the current grid. Execute this command from the grid
member. This command is valid only on a member.
Note: Infoblox recommends that you use this command only in an emergency, such as when the network is down
between the master and the member. Otherwise, you should configure the member to leave the grid using the
GUI on the grid master.
Syntax
set nogr i d
Example
I nf obl ox > set nogrid
The nor mal met hod t o conf i gur e a node t o l eave a gr i d i s t o use t he GUI on t he gr i d
mast er . Thi s met hod i s onl y used f or emer genci es ( e. g. net wor k i s down f r omt he mast er
t o t hi s node) .
I s t hi s such an emer gency? y
The cur r ent node wi l l become a st andal one machi ne, wi t h def aul t val ues f or gr i d
set t i ngs.
Ar e you sur e? ( y or n) y
The net wor k set t i ngs have been updat ed.
set nosafemode
set nosafemode
The set nosafemode command disables safe mode on the NIOS appliance by re-enabling DNS and DHCP services.
For more information, see set safemode on page 54.
Syntax
set nosaf emode
Example
I nf obl ox > set nosafemode
CLI Commands
set ospf
The set ospf command writes statistical information to syslog. This command provides informational data that can
be helpful for diagnostic purposes. The statistical information is written (dumped) to syslog. When viewing the syslog
file, lines with names such as ospf st at i st i cs are the OSPF statistical information. Use the show ospf command
to view the OSPF settings.
Syslog level describes the types of messages that are sent to syslog. You can identify the syslog information by using
the l evel option.
Note: To use this command, the NSQ software package must be installed.
Syntax
set ospf l og {level}
Example
I nf obl ox > set ospf log alerts
level Writes OSPF statistics to syslog with a specific associated level. The
supported log levels are: debuggi ng, i nf or mat i onal ,
not i f i cat i ons, war ni ngs, er r or s, cr i t i cal , al er t s, and
emer genci es.
set phonehome
set phonehome
The set phonehome command enables a grid master or an independent appliance to email reports monthly and after
each upgrade to Infoblox Technical Support and other specified recipients.
The reports provide status and event information about the grid or independent appliance and its services. The
report is an XML document that includes the following information:
The phone home feature version.
The report type, such as periodic and test.
The time of the report.
The Infoblox Support ID that was assigned to the account.
Information about the grid, such as its NIOS version, name, VIP, grid master hostname, LAN IP, and the number
of grid members and appliances in the grid.
The upgrade history of the grid.
Information about each grid member, such as the hostname, IP address, status, role (such as standalone,
master), and if the member is an HA pair. If the member is a peer in a DHCP failover association, the report also
includes the DHCP failover status.
Hardware information, such as the hardware type, serial number, HA status, and uptime.
Information about the interfaces, such as the interface name and IP addresses.
Resource usage information, such as CPU and system temperature, and CPU, database, disk, and memory
usage.
Syntax
set phonehome {on | of f }
Examples
Turn on the phone home feature
I nf obl ox > set phonehome on
Turn off the phone home feature
I nf obl ox > set phonehome off
on Enables the appliance to send status and event reports to specified
recipients.
of f Disables the function to send reports.
CLI Commands
set promote_master
The set promote_master command specifies a NIOS appliance as the new grid master in the case of a grid master
failure. The new grid master then alerts all the members of the grid to redirect their traffic to it.
For this command to be effective, you must have previously specified an appliance as the grid master candidate. Then
when you lose the grid master, you can remotely (SSH) log in to the grid master candidate and execute this command.
Note: When the previous grid master comes back on line, it automatically joins the grid as a master candidate.
Syntax
set pr omot e_mast er
Example
I nf obl ox > set promote_master
Thi s act i on wi l l i mmedi at el y pr omot e t hi s member t o become t he
gr i d mast er . Thi s f eat ur e i s desi gned t o be used pr i mar i l y
f or di sast er r ecover y.
Ar e you sur e you want t o do t hi s? ( y or n) : y
The cur r ent member wi l l become t he gr i d mast er .
Ar e you r eal l y sur e you want t o do t hi s? ( y or n) : y
Note: This command is not supported on vNIOS appliances on Riverbed and Cisco.
set prompt
set prompt
Use the set prompt command to change the prompt to the host name, user@host name, host IP address, or user@
host IP address.
Syntax
set pr ompt {host name | user @host name | ip | user @i p | def aul t }
Example
I nf obl ox > set prompt user@hostname
admi n@i nf obl ox >
admi n@i nf obl ox > set prompt user@ip
admi n@172. 31. 1. 254 >
host name Sets the prompt to the host name of the computer from which you access
the appliance.
user @host name Sets the prompt to the user name@ the host name of the computer from
which you access the appliance.
i p Sets the prompt to the IP address of the host.
user @i p Sets the prompt to the user name@ the IP address of the host.
def aul t Sets the prompt to Infoblox >.
CLI Commands
set remote_console
The set remote_console command enables and disables access to the NIOS appliance using a remote console.
Use the show remote_console command to view the remote console settings.
Note: Infoblox recommends that you close any port that is not being used, for security reasons. An open, unused
port offers the potential for unwanted access to your network.
Syntax
set r emot e_consol e
Example
I nf obl ox > set remote_console
Enabl e r emot e consol e access ( gr i d l evel ) ? ( y or n) : y
New r emot e consol e access set t i ngs:
Remot e consol e access enabl ed: Yes
set revert_grid
set revert_grid
Use the set revert_grid command to revert to a version of software that was running previously on a grid or on an
independent appliance or HA pair. Be aware that when you revert to this software, any configurations made to the
currently running software are lost. You can back up the current data before you revert so that you can later determine
what configuration changes are missing.
Syntax
set r ever t _gr i d
Example
I nf obl ox > set revert_grid
CLI Commands
set safemode
The set safemode command disables DNS and DHCP services. Use this command to troubleshoot a NIOS appliance
with unreliable services.
This command restarts all the services, including DNS and DHCP. DNS and DHCP remain active only long enough to
write named. conf and dhcp. conf files. These services then shut down. All other services remain functional. This
allows you to review the named. conf and dhcp. conf files to determine and alleviate the cause of the appliance
distress.
Once you have determined the problem, you can reinstate DNS and DHCP services using the set nosafemode
command.
Syntax
set saf emode
Example
I nf obl ox > set safemode
set scheduled
set scheduled
Use the set scheduled command to specify the number of times per hour the appliance checks if it needs to restart
services when the task scheduling feature is enabled. The appliance restarts services only when the execution of a
scheduled task requires a service restart.
You can set the value from 0 to 60, and the default value is 60. When you set the value to 0, the appliance turns off
the automatic restart feature. You must manually restart services or schedule a restart of services for the scheduled
change to take effect.
Use the show scheduled to view the number of times per hour the appliance checks whether an automatic restart of
services is required.
Syntax
set schedul ed t ask r est ar t s [ 0-60]
Example
Enter the following command to enable the appliance to check 10 times per hour whether an automatic restart of
services is required:
I nf obl ox > set scheduled task restarts 10
The appliance checks 10 times per hour if it needs to restart services, which is every six minutes of the hour. For
example, if you enter the command at 3:15 p.m., the appliance checks if it needs to restart services every six minutes
starting at the hour (3:00 p.m.). Therefore, the next checks are at 3:18, 3:24, 3:30, 3:36, 3:42, 3:48, 3:54, and 4:00
p.m.
0- 60 The number of times per hour the appliance checks if it needs to restart
services when the task scheduling feature is enabled. You can enter any
number from 0 to 60. The default is 60.
A value of 0 turns off the automatic restart feature.
CLI Commands
set security
The set security command allows you to specify IP or network addresses that can access the appliance through
the GUI. The appliance denies access to addresses that are not specified. Use the show security command to view
the security settings.
Syntax
set secur i t y
Example
In the following example, security is enabled to restrict access to the NIOS appliance (through the GUI) to the IP
address range 10.1.1.1:
I nf obl ox > set security
Enabl e secur i t y? ( y or n) : y
Ent er access I P r ange: 10.1.1.1
Ent er access net mask ( Def aul t : 255. 255. 255. 0) : 255.255.255.0
New secur i t y set t i ngs:
Secur i t y enabl ed: Yes
I P r ange: 10. 1. 1. 1
Do you wi sh t o ent er addi t i onal access r ange? ( y or n) : n
set session_timeout
set session_timeout
Use the set session_timeout command to specify how long a session remains open when there is no user activity.
Use the show session_timeout command to view the session_timeout setting.
Syntax
set sessi on_t i meout
Example
I nf obl ox > set session_timeout
Cur r ent GUI / CLI t i meout i s 60000 seconds ( 16: 40: 00)
WARNI NG: Changi ng t he sessi on t i meout wi l l cause GUI user s t o be l ogged out .
New GUI / CLI sessi on t i meout ( i n seconds, 0 t o abor t ) ? 90000
CLI Commands
set support_access
The set support_access command enables and disables support access. This feature is disabled (off) by default.
Enabling this feature allows Infoblox Support (Tier 3 access) to perform root level diagnostics on an appliance that is
in severe distress. A special key is required to access the appliance at root level, and only Infoblox Support (Tier 3)
can generate this key.
Note: Once the problem has been resolved, Infoblox recommends that you turn off this port. Any open port that is
not in use can become a security risk.
Syntax
set suppor t _access
Example
I nf obl ox > set support_access
Enabl e suppor t access ( gr i d l evel ) ? ( y or n) : y
New suppor t access set t i ngs:
Suppor t access enabl ed: Yes
set temp_license
set temp_license
The set temp_license command generates and installs a temporary 60-day license for a fully functional NIOS
appliance and IBOS (Infoblox Orchestration Server), or a temporary 90-day license for an IF-MAP Starter Kit on a
VMware virtual appliance. Use the show license command to view the license settings.
Syntax
set t emp_l i cense
Examples
Install a temporary license
I nf obl ox > set temp_license
1. DNSone ( DNS, DHCP)
2. DNSone wi t h Gr i d ( DNS, DHCP, Gr i d)
3. Net wor k Ser vi ces f or Voi ce ( DHCP, Gr i d)
4. Add DNS Ser ver l i cense
5. Add DHCP Ser ver l i cense
6. Add Gr i d l i cense
7. Add I F- MAP Ser vi ce l i cense
8. Add Mi cr osof t management l i cense
9. Add vNI OS l i cense
10. Add I F- MAP St ar t er Ki t l i cense
Sel ect l i cense ( 1- 10) or q t o qui t :
To install temporary license(s)
for...
Select... Remarks
DNS and DHCP services 1. DNSone (DNS, DHCP) Installs DNS and DHCP licenses
DNS and DHCP services with grid 2. DNS with Grid (DNS, DHCP, Grid) Installs DNS, DHCP, and grid
licenses
DHCP services with grid 3. Network Services for Voice (DHCP,
Grid)
Installs DHCP and grid licenses
DNS services 4. Add DNS Server license Installs a DNS license
DHCP services 5. Add DHCP Server license Installs a DHCP license
Grid 6. Add Grid license Installs a grid license
IF-MAP service on an IBOS 7. Add IF-MAP Service license You cannot install other services,
such as DNS and DHCP, on an IBOS.
Microsoft server management 8. Add Microsoft management license You can install other licenses with
the Microsoft management license.
VMware virtual appliance 9. Add vNIOS license For VMware virtual appliances only.
You can install other licenses with
the vNIOS license.
IF-MAP Starter Kit (for evaluation
only)
10. Add IF-MAP Starter Kit license For VMware virtual appliances only.
Installs a 90-day temporary IF-MAP
license on a VMware virtual
appliance.
CLI Commands
show arp
The show arp command displays ARP (Address Resolution Protocol) data to view mappings. This allows you to see
if the current state matches the mappings. If the mappings are out of date, use the reset arp command as described
on page 26. This command is also useful for troubleshooting network connectivity issues.
Syntax
show ar p
Example
The following example shows the IP address (10.1.1.1), MAC address (00: 04: 96: 1D: 19: 80) , and type of
connection (ethernet).
I nf obl ox > show arp
? ( 10. 1. 1. 1) at 00: 04: 96: 1D: 19: 80 [ et her ] or LAN
show bgp
show bgp
The show bgp command displays information about the BGP configuration on the appliance, reachability information
about neighbors, and BGP routes to destinations. You can specify the command with or without an argument. A
command without an argument defaults to show bgp route.
For information about how to write statistical information to syslog, see set bgp log on page 29.
Syntax
show bgp {r out e | nei ghbor | summar y | communi t y | conf i g}
Example
The following examples are for illustration only. The actual output varies based on the Quagga version.
I nf obl ox > show bgp route
BGP t abl e ver si on i s 0, l ocal r out er I D i s 50. 0. 1. 2
St at us codes: s suppr essed, d damped, h hi st or y, * val i d, > best , i - i nt er nal ,
r RI B- f ai l ur e, S St al e, R Removed
Or i gi n codes: i - I GP, e - EGP, ? - i ncompl et e
Net wor k Next Hop Met r i c LocPr f Wei ght Pat h
* i 10. 0. 1. 0/ 24 10. 0. 1. 1 0 100 0 ?
*> 10. 0. 2. 99 11 32768 ?
* i 10. 0. 2. 0/ 24 10. 0. 1. 99 2 100 0 ?
*> 0. 0. 0. 0 1 32768 ?
* i 50. 0. 1. 1/ 32 10. 0. 1. 1 0 100 0 i
*> 10. 0. 2. 99 1011 32768 ?
* 50. 0. 1. 2/ 32 0. 0. 0. 0 1 32768 ?
*> 0. 0. 0. 0 0 32768 i
. . .
I nf obl ox > show bgp summary
BGP r out er i dent i f i er 50. 0. 1. 2, l ocal AS number 65001
RI B ent r i es 25, usi ng 1600 byt es of memor y
Peer s 2, usi ng 5024 byt es of memor y
Nei ghbor V AS MsgRcvd MsgSent Tbl Ver I nQ Out Q Up/ Down St at e/ Pf xRcd
10. 0. 1. 1 4 65001 89 85 0 0 0 01: 11: 27 10
100. 0. 2. 4 4 65004 57 53 0 0 0 00: 46: 37 5
Tot al number of nei ghbor s 2
r out e Displays the BGP routing table.
summar y Displays the BGP protocol summary.
nei ghbor Displays information about all known BGP neighbors.
communi t y Displays information about all known BGP communities.
conf i g Displays the running BGP configuration file.
CLI Commands
show bloxtools
The show bloxtools command displays the operational status of the bloxTools service and the usage percentage
for the CPU, memory and disk resources.
Syntax
show bl oxt ool s
Example
Following is an example of the output displayed when you execute the command and bloxTools is enabled and its
services are running:
I nf obl ox > show bloxtools
bl oxTool s st at us: enabl ed( GREEN)
CPU: 1%, Memor y: 21%, Har d Di sk: 0%
show capacity
show capacity
The show capacity command displays database capacity limits for your NIOS appliance. This allows you to see the
object counts and types on a member. This command is useful to see the amount of data is assigned to a member
and how that relates to the members specified capacity.
Syntax
show capaci t y
Example
I nf obl ox > show capacity
Har dwar e Type = I B- 2000
Dat abase Capaci t y = 1200000 " obj ect s"
Obj ect s Pr esent = 112466 ( 9 per cent used)
Count Ar ea Type
16638 dns bi nd_a
15000 dns bi nd_cname
1000 dns bi nd_mx
19392 dns bi nd_ns
15501 dns bi nd_pt r
836 dns bi nd_soa
500 dns bul k_host
5000 dns dhcp_host
385 dns dhcp_member
322 dns dhcp_r ange
1538 dns f i xed_addr ess
5000 dns host
5000 dns host _addr ess
5000 dns host _al i as
265 dns net wor k
263 dns shar ed_net wor k_i t em
500 dns sr g_zone_l i nki ng
840 dns zone
18018 dns zone_cl ust er _secondar y_ser ver
537 dns zone_ext _secondar y_ser ver
208 gr i d pr oduct _l i cense
Not e: Count s per obj ect t ype not di spl ayed unl ess
at l east 100 of t hat t ype exi st .
CLI Commands
show config
The show config command displays the DNS or DHCP configuration files, named.conf and dhcpd.conf respectively.
Syntax
show conf i g {dns | dhcp }
show config displays the contents of named.conf and dhcp.conf files. You can page through the output 10
lines at a time.
Example
I nf obl ox > show config dns
i ncl ude / i nf obl ox/ var / named_conf ;
opt i ons {
zone- st at i st i cs yes;
di r ect or y / i nf obl ox/ var / named_conf ;
ver si on ;
r ecur si on no;
l i st en- on {127. 0. 0. 1; 10. 0. 0. 0; }
quer y- sour ce addr ess 10. 0. 0. 0;
Ent er <r et ur n> t o cont i nue wi t h Mor e l i nes or ent er q<r et ur n> t o go back t o t he
command l i ne.
I nf obl ox > show config dhcp
l ocal - addr ess 10. 0. 0. 0. ;
ser ver - i dent i f i er 10. 0. 0. 0;
ddns- updat e- st yl e i nt er i m;
aut hor i t at i ve;
opt i on domai n- name cor p100. com;
mi ni - l ease- t i me 43200;
max- l ease- t i me 43200;
pi ng- check f al se;
l og- f aci l i t y daemon;
Ent er <r et ur n> t o cont i nue wi t h Mor e l i nes or ent er q<r et ur n> t o go back t o t he
command l i ne.
dns Displays the dns.conf file.
dhcp Displays the dhcp.conf file.
show connections
show connections
The show connections command shows the active Internet connections for the NIOS appliance. Use this command
to investigate connectivity issues or processes that may have stopped running.
Syntax
show connect i ons
Example
The following example provides information on:
Proto: Active protocol, TCP or UDP
Recev-Q: Packets received
Send-Q: Packets sent
Local Address: Host name and type of connection
Foreign Address: IP address of the system connected to the appliance
State: State of the connection
I nf obl ox > show connections
Act i ve I nt er net connect i ons ( ser ver s and est abl i shed)
Pr ot o Recv- Q Send- Q Local Addr ess For ei gn Addr ess St at e
t cp0 0 l ocal host : kdm*: *LI STEN
t cp0 0 l ocal host : cl ust er - di sk*: *LI STEN
t cp0 0 l ocal host : l ocal do: domai n*: *LI STEN
t cp0 0 l ocal host : domai n*: *LI STEN
t cp0 0 l ocal host : r ndc*: *LI STEN
t cp0 0 i nf obl ox: l ocal dom: ht t ps*: *LI STEN
t cp0 0 l ocal host : ht t ps*: *LI STEN
t cp0 0 i nf obl oxl ocal dom: ht t ps10. 1. 1. 1: ar bot ext - l mESTABLI SHED
Ent er <r et ur n> t o cont i nue wi t h Mor e l i nes or ent er q<r et ur n> t o go back t o t he command
l i ne.
CLI Commands
show cpu
The show cpu command displays the processor and memory statistics for the NIOS appliance. This command tells
you how busy the appliance is and indicates if an appliance is not performing properly.
Syntax
show cpu
Example
The following example provides information on:
swpd: Amount of virtual memory (swap space) used
free: Amount of available memory
idle: Amount of idle memory
buff: Amount of memory used as buffers (I/O)
cache: Amount of memory used as cache (kernel used memory)
swap
si: Amount of memory paged in (per/sec) from swap or the file system
so: Amount of memory swapped out
io: Disk input/output
bi: Blocks (4K each) received from a block appliance
bo: Blocks sent to a block appliance
system
in: Number of hardware interrupts per secondmeasures how busy the CPU is
cs: Number of context switches per secondmeasures how busy the CPU is
cpu: Measures (%) of CPU used in each of these areasthe total equals 100%
us: Percentage of CPU used running the Infoblox product and other non-kernel processes
sy: Percentage of CPU used running kernel processes
id: Percentage of CPU that is currently idle
wa: Percentage of CPU spent waiting for disk I/O
Note: If the combined io (bi and bo) and cpu wa values are high, it is a sign that the system is overloaded.
I nf obl ox > show cpu
- - - - - - - - - - memor y- - - - - - - - - - - - - - - - - - - - - - swap- - - - - - i o- - - - - - - syst em- - - - - - - - cpu- - - - - - - -
swpd f r ee i dl e buf f cache si so bi bo i n cs us sy i d wa
0 984024 15432 51932 916660 0 0 0 42 61 94 3 2 95 0
show date
show date
The show date command displays the current date, time zone, and time of a NIOS appliance. Use this command if
you log in to an appliance from a different time zone. This command is helpful when dealing with a grid that
comprises multiple appliances in multiple time zones.
Syntax
show dat e
Example
I nf obl ox > show date
Tue Aug 16: 24: 19 EDT 2006
CLI Commands
show debug
The show debug command shows whether debug logging is on or off. When on, debug logging captures all traffic
and processes on the NIOS appliance. Due to the verbose nature and the extent of the information captured, these
log files grow at a rapid rate. For information on how to turn on or off the debug logging, see set debug on page 31.
Note: Infoblox recommends that you turn off debug logging unless Infoblox Support specifically directs you to turn
on this feature. If left on, debug logging can cause performance issues.
Syntax
show debug
Example
I nf obl ox > show debug
Debug l oggi ng st at us : enabl ed
I nf obl ox > show debug
Debug l oggi ng st at us : di sabl ed
For information on viewing the output of the debug log file, see show log on page 86.
show dhcp_gss_tsig
show dhcp_gss_tsig
The show dhcp_gss_t si g commands provide information about an Infoblox DHCP server that is configured to send
GSS-TSIG authenticated DDNS updates to an AD integrated DNS server. You can use these commands to verify your
configuration and troubleshoot potential issues. You can also test whether the appliance can communicate with the
Key Distribution Center (KDC) and the DNS server.
Syntax
show dhcp_gss_t si g conf i g | keyt ab
show dhcp_gss_t si g t est {dns ip_address | kdc ip_address principal}
Examples
This section provides sample output for each command.
Display GSS-TSIG configuration information and run a test
The show dhcp_gss_t si g conf i g command displays the following information:
Whether DHCP and GSS-TSIG dynamic DNS updates are enabled on the appliance
The system time in UTC
Information about the KDC, principal, and domain
After it displays information, the appliance can test if it can obtain a TGT from the KDC and provides information about
that transaction. Note that the TGT is for test purposes only and does not affect the data used by DHCP and DNS.
It can also test the external zones that are supposed to receive the DDNS updates as follows:
Verify if the external zones specified in the members network view match the members domain
Query the name server IP address for the address of the FQDN from the DNS principal
conf i g Displays configuration information and runs tests to verify the
configuration.
keyt ab Displays information about the keytab file that is in use by the appliance.
dns Tests the configuration by verifying that the destination DNS server is
reachable.
You must enter the IP address of the destination DNS server.
kdc Tests the configuration by obtaining a test Ticket Granting Ticket (TGT))
from the configured KDC.
You must specify the following:
IP address of the AD domain controller that hosts the KDC for the
domain
The Kerberos principal you specified when you generated the keytab
file, in the following format: username/instance@REALM
username/instance: The AD user name for the NIOS
appliance and the FQDN of the appliance. This entry must be
the same on the AD domain controller and the Infoblox
appliance.
REALM: The Kerberos realm in uppercase.
CLI Commands
Query the name server for the SOA of the zone. It displays a warning if the name server does not respond or if
the result does not list the FQDN from the DNS principal as authoritative.
I nf obl ox > show dhcp_gss_tsig config
Syst emt i me: Tue Oct 21 16: 01: 43 UTC 2008
DHCP GSS- TSI G conf i gur at i on f or t hi s member :
KDC addr ess 10. 34. 123. 4
KDC I P 10. 34. 123. 4
Member pr i nci pal j doe/ anywher e@CORP100. LOCAL
Member domai n CORP100. LOCAL
GSS- TSI G enabl ed
DDNS updat es enabl ed
DHCP ser vi ce enabl ed
Test KDC usi ng member conf i gur at i on? ( y or n) : y
Request i ng TGT f or j doe/ anywher e@CORP100. LOCAL f r omKDC 10. 34. 123. 4. . .
Successf ul l y obt ai ned t est TGT.
Cr edent i al s cache: FI LE: / t mp/ kr b5_cache. 18338
Pr i nci pal : j doe/ anywher e@CORP100. LOCAL
Cache ver si on: 4
Ser ver : kr bt gt / CORP100. LOCAL@CORP100. LOCAL
Cl i ent : j doe/ anywher e@CORP100. LOCAL
Ti cket et ype: ar cf our - hmac- md5, kvno 2
Ti cket l engt h: 957
Aut h t i me: Oct 21 12: 00: 52 2008
End t i me: Oct 21 13: 00: 52 2008
Ti cket f l ags: i ni t i al , pr e- aut hent i cat ed
Addr esses: addr essl ess
Successf ul t est . Test TGT dest r oyed.
Thi s member i s conf i gur ed t o updat e t he f ol l owi ng zones:
cor p100 on 10. 34. 123. 4 as dns/ ns- cor p100. CORP100. l ocal
Test conf i gur ed zones? ( y or n) : y
Next zone i s cor p100 on 10. 34. 123. 4.
Test t hi s zone? ( y or n) : y
Test i ng ext er nal zone cor p100 on NS 10. 34. 123. 4. . .
DNS pr i nci pal i s dns/ ns- cor p100. cor p100. l ocal .
Der i ved FQDN i s ns- cor p100. cor p100. l ocal .
FQDN r esol ves t o nameser ver I P.
SOA f or cor p100 has MNAME ns- cor p100. cor p100. l ocal .
Nameser ver i s aut hor i t at i ve f or zone.
Zone cor p100 appear s val i d.
show dhcp_gss_tsig
Display information about the keytab
The show dhcp_gss_t si g keyt ab command displays the current keytab.
I nf obl ox > show dhcp_gss_tsig keytab
Vno Type Pr i nci pal
7 des- cbc- md5 j doe/ i nst ance@CORP100. LOCAL
Verify the DNS server
The show dhcp_gss_t si g t est dns command verifies the destination DNS server by performing a reverse lookup
of the IP address.
I nf obl ox > show dhcp_gss_tsig test dns 10.34.123.4
Quer yi ng DNS ser ver 10. 34. 123. 4. . .
Ser ver r esponded.
Pr obabl e DNS pr i nci pal : dns/ ns- cor p100. cor p100. l ocal
Obtain a test TGT from the KDC
When you use the show dhcp_gss_t si g t est kdc command, the appliance tries to obtain a TGT from the KDC
using the specified principal. It provides information about the transaction and upon successful completion, deletes
the test TGT.
I nf obl ox > show dhcp_gss_tsig test kdc 10.34.123.4 jdoe/instance@CORP100.LOCAL
Request i ng TGT f or j doe/ i nst ance@CORP100. LOCAL f r omKDC 10. 34. 123. 4. . .
Successf ul l y obt ai ned t est TGT.
Cr edent i al s cache: FI LE: / t mp/ kr b5_cache. 12000
Pr i nci pal : j doe/ i nst ance@CORP100. LOCAL
Cache ver si on: 4
Ser ver : kr bt gt / CORP100. LOCAL@CORP100. LOCAL
Cl i ent : j doe/ i nst ance@CORP100. LOCAL
Ti cket et ype: ar cf our - hmac- md5, kvno 2
Ti cket l engt h: 957
Aut h t i me: Oct 21 12: 30: 01 2008
End t i me: Oct 21 13: 30: 01 2008
Ti cket f l ags: i ni t i al , pr e- aut hent i cat ed
Addr esses: addr essl ess
Successf ul t est . Test TGT dest r oyed.
CLI Commands
show disk
The show disk command displays the disk space that is used. Use this command to verify the amount of free disk
space on the NIOS appliance. Infoblox recommends that you regularly check the available disk space. Clear off
outdated logs to maintain maximum available disk space. You should not allow the disk to become completely full
because this can be detrimental to the performance of the appliance.
Syntax
show di sk
Example
I nf obl ox > show disk
Avai l abl e di sk space: 50G
Di sk space used: 5%
show dns
show dns
The show dns command displays DNS query statistics for all DNS views. It also displays the recursive cache for the
specified DNS views.
Syntax
show dns {st at s | cache [ wai t _t i me nt i me] [ dns_view. . . ] }
Example
I nf obl ox > show dns stats
success 10
r ef er r al 0
nxr r set 0
nxdomai n 0
r ecur si on 0
f ai l ur e 10
st at s Displays DNS query statistics for all DNS views.
ntime The maximum time (from 1 to 600 seconds) to wait for the cache file to be
ready.
cache dns_view Specifies the DNS views for which you want to display the recursive
cache.
CLI Commands
show dns_gss_tsig
The show dns_gss_tsig commands provide information about an Infoblox DNS server that is configured to receive
GSS-TSIG authenticated DDNS updates from a DHCP server. You can use these commands for diagnostic purposes
and to troubleshoot issues.
Syntax
show dns_gss_t si g count er s [ cr ypt o] | keyt ab
Example
I nf obl ox > show dns_gss_tsig keytab
Vno Type Pr i nci pal
4 des- cbc- md5 DNS/ ns1. l ocal . t est @TEST. LOCAL
count er s Displays information from the internal counters, which are non-persistent
and reset to zero when services are restarted. It displays the number of
TKEY (transaction key) requests the Infoblox DNS server has accepted
and the number of GSS-TSIG authenticated DDNS updates received.
If you specify crypto, the display includes the number of successful and
failed attempts to establish a security by context, by encryption type.
keyt ab Displays information about the DNS keytab files that are in use by the
appliance.
show file
show file
The show file command displays specified groups and files that you can access for diagnostic purposes. You can
page through the display 10 lines at a time. Use this command to view files after you enable the bloxTools
Environment service.
Syntax
show f i l e {gr oups | group}
show f i l e group file1 [ file2 . . . ] [ f ol l ow]
If you use the show file command without any arguments, it displays all the files that you can manage with this
command. If you use the groups argument, a list of all groups is shown.
If you use the show file command with a group argument but no file, it displays a list of all the files in the
specified group. If you use the show file command with group and file arguments, you can specify a real-time
(live) view of the filethe same as the using tail -f arguments. You can interrupt the display by pressing Enter.
Examples
View bloxTools Files
I nf obl ox > show file bloxtools portal_access
Showi ng f i l e / st or age/ web- por t al / udat a/ l ogs/ access. l og
I nf obl ox > show f i l e bl oxt ool s por t al _er r or
Showi ng f i l e / st or age/ web- por t al / udat a/ l ogs/ er r or . l og
[ Thu Sep 04 11: 07: 59 2008] [ war n] RSA ser ver cer t i f i cat e CommonName ( CN)
`www. i nf obl ox. com' does NOT mat ch ser ver name! ?
[ Thu Sep 04 11: 08: 03 2008] [ not i ce] Di gest : gener at i ng secr et f or di gest aut hent i cat i on
. . .
[ Thu Sep 04 11: 08: 03 2008] [ not i ce] Di gest : done
[ Thu Sep 04 11: 08: 04 2008] [ not i ce] Apache/ 2. 2. 6 ( Uni x) mod_ssl / 2. 2. 6 OpenSSL/ 0. 9. 8h
DAV/ 2 mod_per l / 2. 0. 3 Per l / v5. 8. 8 conf i gur ed - - r esumi ng nor mal oper at i ons
[ Thu Sep 04 11: 11: 39 2008] [ not i ce] Di gest : gener at i ng secr et f or di gest aut hent i cat i on
. . .
[ Thu Sep 04 11: 11: 39 2008] [ not i ce] Di gest : done
[ Thu Sep 04 11: 11: 40 2008] [ not i ce] Apache/ 2. 2. 6 ( Uni x) mod_ssl / 2. 2. 6 OpenSSL/ 0. 9. 8h
DAV/ 2 mod_per l / 2. 0. 3 Per l / v5. 8. 8 conf i gur ed - - r esumi ng nor mal oper at i ons
gr oups Displays a list of available groups.
group Displays a list of files for the specified group.
group file1 [ file2 . . . ] Displays the specified (group) files.
f ol l ow Displays the contents of the file live, in real-time.
CLI Commands
I nf obl ox > show file bloxtools portal_log
Showi ng f i l e / st or age/ web- por t al / udat a/ l ogs/ sysl og. l og
Sep 4 11: 07: 55 ( none) ker nel : Li nux ver si on 2. 6. 17. 4 ( r oot @bui l dvm2) ( gcc ver si on
3. 2. 1) #1 Thu Aug 28 02: 20: 30 EDT 2008
Sep 4 11: 07: 55 ( none) ker nel : On node 0 t ot al pages: 32768
Sep 4 11: 07: 55 ( none) ker nel : DMA zone: 32768 pages, LI FO bat ch: 7
Sep 4 11: 07: 55 ( none) ker nel : Bui l t 1 zonel i st s
Sep 4 11: 07: 55 ( none) ker nel : Ker nel command l i ne: r oot =/ dev/ r oot r oot f st ype=host f s
r oot f l ags=/ st or age/ web- por t al / r oot _f s ubdb=/ st or age/ web- por t al / swapf i l e
ubdc=/ st or age/ web- por t al / st or agef i l e mem=128M et h0=t unt ap, uml _ht ap0 con0=nul l con1=pt s
con2=pt s host f s=/ st or age/ web- por t al
Sep 4 11: 07: 55 ( none) ker nel : PI D hash t abl e ent r i es: 1024 ( or der : 10, 4096 byt es)
Sep 4 11: 07: 55 ( none) ker nel : Dent r y cache hash t abl e ent r i es: 16384 ( or der : 4, 65536
byt es)
Sep 4 11: 07: 55 ( none) ker nel : I node- cache hash t abl e ent r i es: 8192 ( or der : 3, 32768
byt es)
Sep 4 11: 07: 55 ( none) ker nel : Memor y: 124372k avai l abl e
Sep 4 11: 07: 55 ( none) ker nel : Cal i br at i ng del ay l oop. . . 1648. 23 BogoMI PS ( l pj =8241152)
Sep 4 11: 07: 55 ( none) sysl og- ng[ 699] : sysl og- ng st ar t i ng up; ver si on=' 2. 0. 6'
Sep 4 11: 07: 55 ( none) ker nel : Mount - cache hash t abl e ent r i es: 512
Ent er <r et ur n> t o cont i nue wi t h Mor e l i nes or ent er q<r et ur n> t o pr oceed t o t he next
f i l e
show hardware_status
show hardware_status
The show hardware_status command displays information about the various hardware components of a NIOS
appliance. It displays the power supply status, fan speed, the CPU temperature, and status of the RAID array (for the
Infoblox-2000 only).
Syntax
show har dwar e_st at us
Example
The following example displays the status of an Infoblox-2000.
I nf obl ox > show hardware_status
POWER: Power OK
Fan1: 5075 RPM
Fan2: 4927 RPM
Fan3: 4787 RPM
CPU1_TEMP: +42. 0 C
CPU2_TEMP: +48. 0 C
SYS_TEMP: +49 C
RAI D_ARRAY: OPTI MAL
RAI D_BATTERY: OK READY Yes 103 HOURS
The following are notes about the output:
POWER: Displays the status of the power supply. The Infoblox-1552, -1552-A and -2000 have redundant power
supplies. If one power supply fails, the line displays POWER FAIL. To find out which power supply failed, check
the LEDs of the power supplies.
Fan1, Fan2, Fan3: Displays the fan speed. The Infoblox-2000 has three fans, therefore the sample output
displays the speed of each fan. If a fan is not functioning, the output displays 0 RPM.
CPU1 TEMP, CPU2 TEMP: Displays the CPU temperature.
SYS TEMP: Displays the operating temperature of the appliance.
RAID ARRAY: Displays the status of the RAID array of an Infoblox-2000. If at least one disk is not functioning
properly, this line indicates that the RAID array is degraded and lists the disks which are online. It also indicates
when the RAID array is rebuilding. If there is a disk mismatch, this line indicates so and lists all the RAID disks
and their disk types.
RAID BATTERY: This line reports the status of the disk controller backup battery. It includes the following
information:
Charge status: Displays either OK or CHARGING.
Ready status: Displays either READY YES or READY NO.
Hours: Displays the estimated number of hours remaining on the battery.
Note: This command is not supported on vNIOS appliances on Riverbed and VMware. The vNIOS appliance displays
No sensor s pr esent when you enter this command.
CLI Commands
show hwid
The show hwid command displays the hardware ID. The information provided by this command is required for
acquiring a new license.
Syntax
show hwi d
Example
I nf obl ox > show hwid
Har dwar e I D: 4dcef 037e91a403f e05e10ecd241
show interface
show interface
The show interface command displays network interface details. The information reveals how the NIOS appliance
is connected to the network. It shows line rate, broadcast address, and whether packets are being dropped. This
information allows you to check the status, find the MAC address for an appliance, and provides statistics on the
quality of the network signal. This command also displays whether IPv6 is enabled. On the Infoblox-250, -550-A,
-1050-A, -1550-A, -1552-A, -2000, and -2000-A appliances, the appliance displays information about the LAN2 port
as well.
For information on how to change your interface settings, see set interface on page 33.
Syntax
show i nt er f ace [ name | al l ]
Example
The following example provides the IP address and MAC address for the appliance, and information on its network
connections via the LAN and LAN2 interfaces, such as the speed of 100M and Duplex Full.
Statistical information is also provided on the packets received and transmitted, as well as any errors that have
occurred. Lack of packet activity can be a sign of connectivity problems, as well as errors, dropped packages,
overruns, or collisions.
I nf obl ox > show interface
LAN:
I P Addr ess: 10. 34. 33. 11 MAC Addr ess: 00: 30: 48: 98: 63: AD
Mask: 255. 255. 255. 0 Br oadcast : 10. 34. 33. 255
MTU: 1500 Met r i c: 1
I Pv6 Li nk: f e80: : 230: 48f f : f e98: 63ad/ 64
Negot i at i on: Enabl ed
Speed: 1000M Dupl ex: Ful l
St at us: UP BROADCAST RUNNI NG MULTI CAST

St at i st i cs I nf or mat i on
Recei ved
packet s: 24812 byt es: 11660993 ( 11. 1 Mb)
er r or s: 0 dr opped: 0
over r uns: 0 f r ame: 0
Tr ansmi t t ed
packet s: 23148 byt es: 11493844 ( 10. 9 Mb)
over r uns: 0 car r i er : 0
Col l i si ons: 0 Txqueuel en: 1000
name Displays information about a specific interface. Enter one of the
following: l an, l an2, ha, mgmt , or l oopback.
al l Displays information about all interfaces.
CLI Commands
LAN2:
I P Addr ess: 10. 1. 1. 35 MAC Addr ess: 00: 30: 48: 98: 63: AF
Mask: 255. 255. 255. 0 Br oadcast : 10. 1. 1. 255
MTU: 1500 Met r i c: 1
I Pv6 Li nk: f e80: : 230: 48f f : f e98: 63af / 64
Negot i at i on: Enabl ed
Speed: 1000M Dupl ex: Ful l
St at us: UP BROADCAST RUNNI NG MULTI CAST

St at i st i cs I nf or mat i on
Recei ved
packet s: 11 byt es: 836 ( 836. 0 b)
over r uns: 0 f r ame: 0
Tr ansmi t t ed
packet s: 0 byt es: 0 ( 0. 0 b)
over r uns: 0 car r i er : 0
Col l i si ons: 0 Txqueuel en: 1000
Ent er <r et ur n> t o cont i nue wi t h Mor e l i nes or ent er q<r et ur n> t o go back t o command l i ne
show ip_rate_limit
show ip_rate_limit
The show ip_rate_limit command displays the current rate limiting rules. You configure rate limiting rules to limit
access or block connections from external sources. The rules take effect immediately when you enable rate limiting.
For information on rate limiting and on how to configure rate limiting rules, see set ip_rate_limit on page 35.
Syntax
show i p_r at e_l i mi t
Example
View the current rate limiting rules
I P r at e l i mi t i ng i s enabl ed.
Sour ce Li mi t Bur st
============================================
10. 10. 1. 1 0 packet s/ mi nut e 0 packet s
10. 10. 1. 2 5 packet s/ mi nut e 5 packet s
10. 10. 2. 1/ 24 5 packet s/ mi nut e 10 packet s
al l 5000packet s/ mi nut e 5000 packet s
CLI Commands
show lcd
The show lcd command displays whether LCD keys are turned on or off. If you do not plan to use the LCD keys,
Infoblox recommends that your turn them off for security reasons.
Syntax
show l cd
Example
I nf obl ox > show lcd
LCD I nput But t ons Ar e Oper at i onal . . .
Note: This command is not supported on vNIOS appliances. The vNIOS appliance displays No LCD pr esent when
you enter this command.
show lcd_info
show lcd_info
The show lcd_info command displays status, CPU temperature, network settings, version, hardware ID, and
licensing information. This command combines the output of the following CLI commands: show status, show
temperature, show network, and show license.
Syntax
show l cd_i nf o
Example
I nf obl ox > show lcd_info
Gr i d St at us: I D Gr i d Mast er
HA St at us: Not Conf i gur ed
CPU_TEMP: +45. 5 C
Cur r ent net wor k set t i ngs:
I P Addr ess: 10. 35. 0. 20
Net wor k Mask: 255. 255. 255. 0
Gat eway Addr ess: 10. 35. 0. 1
HA enabl ed: f al se
Gr i d St at us: Mast er of I nf obl ox Gr i d
Ver si on : 4. 2r 2- 0
Har dwar e I D : 553a25c34f 45e4a2a2349d996ae1285
Li cense Type : Gr i d
Expi r at i on Dat e : 05/ 31/ 2009
Li cense St r i ng : GQAAAL8oY9e0uaH3MMKf PdLXr WDTs5D4p3Uer F8=
Li cense Type : DNS
Expi r at i on Dat e : Per manent
Li cense St r i ng : EQAAAL4oZM7r +K+zct vOPdLUpH3V
Li cense Type : Gr i d Mai nt enance
Li cense St r i ng : GwAAALEj bsGypr 37HNSWf NLV4C/ Q/ 5Lw6yxQ/ V7Pdg==
Li cense Type : NI OS Mai nt enance
Li cense St r i ng : GwAAALQveMGZuqbuM8i ReNLV4C/ Q/ 5Lw6yxQ/ l vMJ g==
Li cense Type : DHCP
Li cense St r i ng : EgAAAL4udMK65OLi bpaf I Z+Y/ S6A5Q==
Note: This command is not supported on vNIOS appliances on Riverbed and VMware. On a Riverbed platform, the
show lcd_info command generates network settings and licensing information, but not the hardware
information. The No sensor s pr esent message is displayed in place of the hardware information.
CLI Commands
show license
The show license command displays the product licenses for the appliance. This command is useful for viewing
the licenses that are installed on the appliance, and information on their respective expiration dates. For information
on how to set your licenses, see set license on page 39.
Syntax
show l i cense [ al l | csv]
Example
Show the product licenses installed on a NIOS appliance
I nf obl ox > show license
Ver si on : 4. 3r 2- 5
Har dwar e I D : 6ddd3618a43027f dbb3b3ca9a29077a7
Li cense St r i ng : GwAAAAsi M/ VsmcoYLHost c8f 6T7L7HDdR+HeL6U1WA==
Li cense St r i ng : GQAAAAAl KONBms0BL3Ai 9M8bpnPKoHLUC+HEf PM=
Li cense Type : DNS
Li cense St r i ng : EQAAAAEl L/ oe28NFbWl z8M8ar W7M
Li cense St r i ng : EgAAAAEj P/ ZPx44UcSQi 7I J W9D2Z9g==
Li cense St r i ng : GwAAAA4uJ f VHhdENA2Yr sc8f 6T7L7HDdR+HeLf E2UQ==
Show the product licenses installed on Infoblox Orchestration Server
I nf obl ox > show license
Ver si on : 5. x- 86034
Har dwar e I D : 6ddd3618a43027f dbb3b3ca9a29077a7
Li cense Type : I F- MAP Ser vi ce
Li cense St r i ng : FAAAAAwt MedDl o5f I CEi 84MbpXPPpHCI
al l Displays all product licenses in a grid.
csv Displays all product licenses in a grid in csv format.
show license
Show the product licenses of all grid members in csv format
I nf obl ox > show license csv
publ i c_i p, l i cense_t ype, exp_dat e, l i cense_st r i ng
10. 0. 0. 18, DNS, Per manent , EQAAAAKS4n90WFGNUSi r wvyUT9/ z
10. 0. 0. 18, Gr i d Mai nt enance, 05/ 21/ 2009, EwAAAA4uJ f VHhdENA2Yr sc8b6T3J 7HDdR+HeLf Q2Cq==
10. 0. 0. 18, Gr i d, 05/ 21/ 2009, GwAAAA2Z6HAt BkPFPyf zg/ yVRsLzI 2x0kYyKaPb22g==
10. 0. 0. 18, NI OS Mai nt enance, 01/ 21/ 2009, GwAAAAi V/ nAGGl j QEDv0h/ yVRsLzI 2x0kYyKb/ P20Q==
10. 0. 0. 18, DHCP, Per manent , EgAAAAEj P/ ZPx44UcSQi 7J W9D2Z9g==
10. 0. 0. 22, DNS, 05/ 21/ 2009, EgAAAAKU8nMl RBzcTWX63r HYFoymOQ==
10. 0. 0. 22, Gr i d Mai nt enance, 05/ 21/ 2009GwAAAA4uJ f VHhdENA2Yr sc8b6T3J 7HDdR+HeLf Q2Cq==
10. 0. 0. 22, Gr i d, 05/ 21/ 2009, GwAAAA2B6Cf t BkPFPyf zg/ yVRsLzI 2x0kZyKaPb22g==
10. 0. 0. 22, NI OS Mai nt enance, 05/ 21/ 2009, GwAAAAi V/ nAGGl j QEDv0h/ yVRsLzI 2x0kYyKb/ P20Q==
10. 0. 0. 22, DHCP, Per manent , EgAAAAEj P/ ZPx96UcSQi 7J W9D2Z9g==
CLI Commands
show log
The show log command displays a specified log file. It is helpful for obtaining diagnostic information. The syslog
file is shown by default if no log is specified. The IF-MAP log displays all the IF-MAP protocol related events. It
contains the XML messages communicated between Infoblox Orchestration Server and the clients.
Syntax
show l og [ sysl og | debug | audi t | i f mapcl i ent | i f mapser ver ] <log num> [ t ai l <num>
| f ol l ow/ r egex/ ]
Use this command to display the contents of a specified log file.
Examples
Display syslog file
I nf obl ox > show log syslog
Aug 23 17: 48: 50 ( none) sysl og- ng[ 894] : new conf i gur at i on i ni t i al i zed
Aug 23 17: 48: 50 ( none) ker nel : i p_connt r ack ver si on 2. 4 ( 8183 bucket s, 65464 max) - 224
byt es per connt r ack
Aug 23 17: 48: 54 ( none) ker nel : ADDRCONF( NETDEV_UP) : et h1: l i nk i s not r eady
Aug 23 17: 48: 56 ( none) ker nel : e1000: et h1: e1000_wat chdog: NI C Li nk i s Up 1000 Mbps
Ful l Dupl ex
Aug 23 17: 48: 56 ( none) ker nel : ADDRCONF( NETDEV_CHANGE) : et h1: l i nk becomes r eady
Aug 23 17: 48: 58 ( none) nt pd[ 31091] : nt pd 4. 1. 2@1. 892 Fr i Aug 4 17: 14: 23 EDT 2006 ( 1)
Aug 23 17: 48: 58 ( none) nt pd[ 31091] : si gnal _no_r eset : si gnal 13 had f l ags 4000000
Aug 23 17: 48: 58 ( none) nt pd[ 31091] : pr eci si on = 11 usec
Aug 23 17: 48: 58 ( none) nt pd[ 31091] : ker nel t i me di sci pl i ne st at us 0040
Aug 23 17: 48: 58 ( none) nt pd[ 31091] : f r equency i ni t i al i zed 0. 000 f r om
/ usr / conf / nt p. dr i f t
sysl og Displays the syslog log file.
debug Displays the debug log file.
audi t Displays the audit log file.
i f mapcl i ent Displays the IF-MAP log on the DHCP server when it is configured as an
IF-MAP client.
i f mapser ver Displays the IF-MAP log on Infoblox Orchestration Server.
log num Allows you to view rolled logs by specifying a number from 0 to 9. You can
use this option when you display the syslog file, audit log, and ifmap log.
t ai l <num> Shows the last num lines from the log file or, if no number is specified, the
last 10 lines are displayed.
/ r egex/ Matches the pattern specified in regex and displays the matched lines
from the selected log file. To insert "/" in the search pattern, use escape
sequence \/. The search string starts at the first forward slash (/) ends at
the second forward slash (/), and ignores the remaining.
For information about regular expressions, see Appendix B, Regular
Expressions, in the Infoblox Administrator Guide.
show log
Display the last five lines of the debug log file
I nf obl ox > show log debug tail 5
[ 2006/ 08/ 23 17: 48: 49. 346] ( 30748 / i nf obl ox/ one/ bi n/ i ni t _dat abase) db_l ocal . c: 347
i db_dat abase_l ocal _cr eat e_env( ) : cache_si ze: 134217728
[ 2006/ 08/ 23 17: 48: 49. 739] ( 30748 / i nf obl ox/ one/ bi n/ i ni t _dat abase) i ni t _dat abase. c: 45
mai n( ) : Dat abase i ni t i al i zed: / dat a/ r ep
[ 2006/ 08/ 23 17: 48: 49. 812] ( 30749 / i nf obl ox/ one/ bi n/ db_i mpor t _3x) mai n. c: 360 mai n( ) :
St ar t i ng db_i mpor t : i mpor t i ng f r om/ i nf obl ox/ one/ f act or y_def aul t s
[ 2006/ 08/ 23 17: 48: 49. 899] ( 30749 / i nf obl ox/ one/ bi n/ db_i mpor t _3x) par t i t i on_bi t map. c: 208
onedb_r ecal cul at e_par t i t i on_bi t maps( ) : Begi n par t i t i oni ng phase
[ 2006/ 08/ 23 17: 48: 49. 900] ( 30749 / i nf obl ox/ one/ bi n/ db_i mpor t _3x) par t i t i on_bi t map. c: 283
onedb_r ecal cul at e_par t i t i on_bi t maps( ) : Tot al of 2 obj ect ( s) par t i t i oned, commi t t i ng
dat abase
Match a pattern in a log file
I nf obl ox > show log syslog /ntpd/
6: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : nt pd 4. 1. 2@1. 892 Fr i Aug 4 17: 14: 23 EDT 2006 ( 1)
7: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : si gnal _no_r eset : si gnal 13 had f l ags 4000000
8: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : pr eci si on = 11 usec
9: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : ker nel t i me di sci pl i ne st at us 0040
10: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : f r equency i ni t i al i zed 0. 000 f r om
11: Aug 23 17: 48: 58 ( none) nt pd[ 31091] : f r equency i ni t i al i zed 0. 000 f r om
13: Aug 23 17: 50: 13 ( none) nt pd[ 31091] : nt pd exi t i ng on si gnal 15
18: Aug 23 17: 50: 23 ( none) nt pd[ 32623] : nt pd 4. 1. 2@1. 892 Fr i Aug 4 17: 14: 23 EDT 2006 ( 1)
19: Aug 23 17: 50: 23 ( none) nt pd[ 32623] : si gnal _no_r eset : si gnal 13 had f l ags 4000000
20: Aug 23 17: 50: 23 ( none) nt pd[ 32623] : pr eci si on = 9 usec
Display the IF-MAP log file
I nf obl ox > show log ifmapserver
2010- 03- 16T17: 48: 04 REQUEST cl i ent 1 PUBLI SH: i nf o <?xml ver si on=" 1. 0"
encodi ng=" UTF- 8" ?><env: Envel ope xml ns: env=" ht t p: / / schemas. xml soap. or g/ soap/ envel ope/ "
xml ns: i f map=" ht t p: / / www. t r ust edcomput i nggr oup. or g/ 2006/ I FMAP/ 1"
xml ns: met a=" ht t p: / / www. t r ust edcomput i nggr oup. or g/ 2006/ I FMAP- METADATA/ 1" >
<env: Header > 28baf 7e3d84db248097e976bf 0dce9c2
</ env: Header > <env: Body> <updat e> <l i nk> <mac- addr ess val ue=" 56: b1: 19: 3b: 48: 0d" / >
 </ l i nk> <met adat a> <met a: i p- mac car di nal i t y=" si ngl eVal ue" >
<st ar t - t i me>2009- 10- 27T00: 00: 00</ st ar t - t i me> <end- t i me>2009- 10- 28T00: 00: 00</ end- t i me>
<dhcp- ser ver >10. 0. 0. 3</ dhcp- ser ver > </ met a: i p- mac> </ met adat a> </ updat e>
 </ env: Body> </ env: Envel ope>
2010- 03- 16T17: 48: 04 RESPONSE cl i ent 1 PUBLI SH: i nf o <?xml ver si on=" 1. 0"
encodi ng=" UTF- 8" ?><SOAP- ENV: Envel ope
xml ns: SOAP- ENV=" ht t p: / / schemas. xml soap. or g/ soap/ envel ope/ " xml ns: SOAP- ENC=" ht t p: / / schem
as. xml soap. or g/ soap/ encodi ng/ " xml ns: xsi =" ht t p: / / www. w3. or g/ 2001/ XMLSchema- i nst ance"
xml ns: xsd="ht t p: / / www. w3. or g/ 2001/ XMLSchema"
xml ns: met a=" ht t p: / / www. t r ust edcomput i nggr oup. or g/ 2006/ I FMAP- METADATA/ 1"
xml ns: wsdl =" ht t p: / / www. t r ust edcomput i nggr oup. or g/ 2008/ I FMAP/ 1/ i f map. wsdl "
xml ns: met a3=" www. st an. com2"
xml ns: i f map=" ht t p: / / www. t r ust edcomput i nggr oup. or g/ 2006/ I FMAP/ 1" > <SOAP- ENV: Header >
 28baf 7e3d84db248097e976bf 0dce9c2
 </ SOAP- ENV: Header > <SOAP- ENV: Body> <publ i shRecei ved/ > 
</ SOAP- ENV: Body></ SOAP- ENV: Envel ope>
CLI Commands
show logfiles
The show logfiles command displays log files and their respective sizes. You can use this command to gather
information on log file sizes, and determine how quickly they are growing. This is useful for managing disk space, as
it helps you determine when to download or rotate files. On Infoblox Orchestration Server, this command also
displays the IF-MAP log file size.
Syntax
show l ogf i l es
Examples
On a NIOS appliance
I nf obl ox > show logfiles
Logf i l es pr esent on t he syst em
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
audi t . l og 8 k
i nf obl ox. l og 26327 k
messages 46 k
messages. 0. gz 10 k
On Infoblox Orchestration Server
I nf obl ox > show logfiles
Logf i l es pr esent on t he syst em
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
audi t . l og 10 k
i f mapd. l og 27 k
i f mapd. l og. 0. gz 2 k
i f mapd. l og. 1. gz 10 k
i nf obl ox. l og 353 k
messages 85 k
show memory
show memory
The show memory command displays memory statistics on used and available buffers and cache. Poor performance
can be an indicator that the memory is full. If your NIOS appliance is not performing as it should, use this command
to verify whether or not the appliance is experiencing a memory problem. If so, Infoblox recommends that you call
Infoblox Support.
Syntax
show memor y
Example
I nf obl ox > show memory
t ot al used f r ee buf f er s cached
Mem: 1032852 309904 722948 32864 242060
Swap: 2047992 0 2047992
Tot al : 3080844 309904 2770940
CLI Commands
show mld_version
The show ml d_ver si on command displays the version of the MLD (Multicast Listener Discovery) protocol that is
running on the appliance. The appliance runs MLD version2 by default, but you can enable it to run MLD version 1
instead. (For information, see set mld_version_1) Note that MLDv2 is interoperable with MLDv1.
Syntax
show ml d_ver si on
Example
I nf obl ox > show mld_version
Cur r ent Mul t i cast Li st ener Di scover y Set t i ng:
MLD Ver si on: 2
show monitor
show monitor
The show monitor command displays current network monitoring data, when network monitoring for DNS is turned
on. This command also provides information on the average latency of authoritative and non-authoritative replies to
DNS queries. Latency is the time it takes for a packet to cross a network connection, from sender to receiver.
Note: You must turn on network monitoring for DNS to view this data. For more information, see set monitor dns on
page 43.
Syntax
show moni t or
Examples
The following example for Network Monitoring for DNS shows information on the interval times in minutes, the
latency (in milliseconds), and the number of queries.
Viewing network monitoring for DNS data
I nf obl ox > show monitor
Net wor k Moni t or i ng f or DNS i s ON
Dat a l ast updat ed: Tue Sep 12 19: 05: 51 2006
Aut hor i t at i ve I nt er val ( mi n) Lat ency ( usec) Number of quer i es
1 2 3
5 3 20
15 3 65
60 3 300
Non Aut hor i t at i ve I nt er val ( mi n) Lat ency ( usec) Number of quer i es
1 2 2
5 3 10
15 3 55
60 3 150
When network monitoring for DNS is off
I nf obl ox > show monitor
Net wor k Moni t or i ng f or DNS i s OFF
CLI Commands
show monitor dns alert
The show monitor dns alert command displays the current DNS alert thresholds. The appliance displays the
default thresholds (50% for both invalid ports and invalid TXIDs) if you have not configured new thresholds for the
DNS alerts.
Syntax
show moni t or dns al er t
Example
View DNS alert thresholds
I nf obl ox > show monitor dns alert
DNS Net wor k Moni t or i ng i s enabl ed.
Al er t i ng i s enabl ed.
DNS Al er t Thr eshol d ( per mi nut e)
===========================================
por t over 70%of packet s
t xi d over 100 packet s
show monitor dns alert status
show monitor dns alert status
The show monitor dns alert status command displays the current status of invalid DNS responses that arrive
on DNS ports that are not open and have mismatched TXIDs (DNS transaction ID). You can view the alert status to
identify the primary source of invalid DNS responses. The appliance displays historical alert counts and up to five
primary sources that generate invalid DNS responses.
Syntax
show moni t or dns al er t st at us
Example
View DNS alert status
Dat a l ast updat ed: Mon Oct 6 14: 47: 12 2008
DNS Al er t 1m 5m 15m 60m 24h Ever
============================================
por t 8 12 12 12 12 12
t xi d 8 12 12 12 12 12
Ther e wer e 80 DNS r esponses seen i n t he l ast mi nut e.
10%wer e t o an i nval i d por t .
10%had an i nval i d TXI D.
Pr i mar y sour ces of i nval i d r esponses:
4. 4. 4. 4 ( unknown) sent 4
2. 2. 2. 2 ( unknown) sent 3
7. 7. 7. 7 ( unknown) sent 1
CLI Commands
show network
The show network command displays the current network settings for the NIOS appliance and status with respect
to a grid. For information on how to change your network settings, see set network on page 45.
Syntax
show net wor k
Example
I nf obl ox > show network
Cur r ent net wor k set t i ngs:
I P Addr ess: 10. 34. 33. 11
Net wor k Mask: 255. 255. 255. 0
Gat eway Addr ess: 10. 34. 33. 1
HA enabl ed: f al se
Gr i d St at us: Member of I nf obl ox Gr i d

Cur r ent LAN2 Por t Set t i ngs:
LAN2 Por t enabl ed: t r ue
NI C f ai l over f or LAN1 and LAN2 enabl ed: f al se
LAN2 I P Addr ess: 10. 1. 1. 35
LAN2 Net mask: 255. 255. 255. 0
LAN2 Gat eway: 10. 1. 1. 1
show ntp
show ntp
The show ntp command displays a list of the peers of the NTP server, along with status information about each peer.
Syntax
show nt p
Example
I nf obl ox > show ntp
r emot e r ef i d st t when pol l r each del ay of f set j i t t er
==============================================================================
*LOCAL( 1) LOCAL( 1) 12 l 47 64 377 0. 000 0. 000 0. 008
When you execute the show nt p command, the NIOS appliance displays the following information:
remote: The IP address of the remote peer.
refid: Identifies the reference clock.
st: The stratum of the remote peer.
t: The type of the peer, such as local, unicast or broadcast.
when: When the last packet was received.
poll: The polling interval, in seconds.
reach: The reachability register, in octal numerals.
delay: The current estimated delay, in seconds.
offset: The offset of the peer clock relative to the local clock, in milliseconds.
jitter: The estimated time error of the system clock.
CLI Commands
show ospf
The show ospf command displays configuration and statistical information about the OSPF protocol that is running
on the NIOS appliance. For information on how to change your OSPF settings, see set ospf on page 48.
Syntax
show ospf {r out e | i nt er f ace | dat abase | nei ghbor | conf i gur at i on}
The show ospf command displays information about the OSPF configuration on the appliance, reachability
information about neighbors, and OSPF routes to destinations. You can specify the command with or without
arguments.
Example
I nf obl ox > show ospf interface
et h0 i s down
OSPF not enabl ed on t hi s i nt er f ace
et h1 i s up
I nt er net Addr ess 172. 32. 0. 61/ 24, Br oadcast 172. 32. 0. 255, Ar ea 0. 0. 0. 0
Rout er I D 172. 32. 0. 61, Net wor k Type BROADCAST, Cost : 100
Tr ansmi t Del ay i s 1 sec, St at e DROt her , Pr i or i t y 0
Desi gnat ed Rout er ( I D) 172. 32. 0. 110, I nt er f ace Addr ess 172. 32. 0. 254
No backup desi gnat ed r out er on t hi s net wor k
Ti mer i nt er val s conf i gur ed, Hel l o 10, Dead 40, Wai t 3, Ret r ansmi t 5
Hel l o due i n 00: 00: 01
Nei ghbor Count i s 1, Adj acent nei ghbor count i s 1
l o i s up
I nt er net Addr ess 172. 16. 10. 10/ 32, Ar ea 0. 0. 0. 0
Rout er I D 172. 32. 0. 61, Net wor k Type LOOPBACK, Cost : 100
Tr ansmi t Del ay i s 1 sec, St at e Loopback, Pr i or i t y 0
No desi gnat ed r out er on t hi s net wor k
No backup desi gnat ed r out er on t hi s net wor k
Ti mer i nt er val s conf i gur ed, Hel l o 10, Dead 40, Wai t 3, Ret r ansmi t 5
Hel l o due i n i nact i ve
Nei ghbor Count i s 0, Adj acent nei ghbor count i s 0
r out e Displays the OSPF routing table, as determined by the most recent SPF
calculation.
i nt er f ace Displays the state and configuration on all interfaces configured with
OSPF.
dat abase Displays all OSPF database information.
nei ghbor Displays the OSPF neighbor information.
conf i gur at i on Displays the running OSPF configuration file.
show ospf
I nf obl ox > show ospf route
============ OSPF net wor k r out i ng t abl e ============
N 172. 16. 10. 10/ 32 [ 100] ar ea: 0. 0. 0. 0
di r ect l y at t ached t o l o
N 172. 32. 0. 0/ 24 [ 100] ar ea: 0. 0. 0. 0
di r ect l y at t ached t o et h1
============ OSPF r out er r out i ng t abl e =============
============ OSPF ext er nal r out i ng t abl e ===========
CLI Commands
show phonehome
The show phonehome command displays the settings of the phone home feature on the appliance.
Syntax
show phonehome
Example
I nf obl ox > show phonehome
Phone home enabl ed <gr i d wi de>: Yes
Send t o I nf obl ox Suppor t : Yes
Suppor t I D: 8561
Addr ess t o send t o:
suppor t @i nf obl ox. com
show remote_console
show remote_console
The show remote_console command displays remote console access settings. This command allows you to see if
remote console access is enabled without accessing the GUI. You can set this option at the member level and the grid
level. For information on how to change your remote_console, see set remote_console on page 52.
Syntax
show r emot e_consol e
Example
I nf obl ox > show remote_console
cur r ent r emot e consol e access set t i ngs:
Remot e consol e access enabl ed ( gr i d- l evel ) : t r ue
CLI Commands
show routes
The show routes command displays the current IPv4 and IPv6 routing information on the NIOS appliance and
organizes the information according to the interface. This command is a valuable diagnostic tool for connectivity
issues.
Syntax
show r out es
Example
In the following example, def aul t specifies the direct connection to the interface and the static routes are
represented (in this example) in bold. You specify static routes by manually entering them through the GUI.
I nf obl ox > show routes
Fr omLAN:
10. 34. 33. 0/ 24 dev et h1 scope l i nk
def aul t vi a 10. 34. 33. 1 dev et h1

Fr omLAN2:
10. 1. 1. 0/ 24 dev et h3 scope l i nk

Fr omI Pv4 mai n r out e t abl e:
10. 34. 33. 0/ 24 dev et h1 pr ot o ker nel scope l i nk sr c 10. 34. 33. 11
10. 1. 1. 0/ 24 dev et h3 pr ot o ker nel scope l i nk sr c 10. 1. 1. 35
Fr omI Pv6 mai n r out e t abl e:
f e80: : / 64 dev et h1 met r i c 256 expi r es 21257697sec mt u 1500 advmss 1440 met r i c10
4294967295
f e80: : / 64 dev et h3 met r i c 256 expi r es 21334065sec mt u 1500 advmss 1440 met r i c10
4294967295
f f 00: : / 8 dev et h1 met r i c 256 expi r es 21257697sec mt u 1500 advmss 1440 met r i c10
4294967295
f f 00: : / 8 dev et h3 met r i c 256 expi r es 21334065sec mt u 1500 advmss 1440 met r i c10
4294967295
def aul t vi a f e80: : 204: 96f f : f e1d: 1980 dev et h1 pr ot o ker nel met r i c 1024 expi r es
1661sec mt u 1500 advmss 1440 met r i c10 64
def aul t vi a f e80: : 204: 96f f : f e1d: 1980 dev et h3 pr ot o ker nel met r i c 1024 expi r es
1661sec mt u 1500 advmss 1440 met r i c10 64
unr eachabl e def aul t dev l o pr ot o none met r i c - 1 er r or - 101 met r i c10 255
show scheduled
show scheduled
Use the show scheduled command to view the number of times per hour the appliance checks if it needs to restart
services when the scheduling task feature is enabled. The appliance restarts services only when the execution of a
scheduled task requires a service restart.
Use the set scheduled command to configure the value. You can set the value from 0 to 60, and the default value is
60. A value of 0 turns off the automatic restart feature.
Syntax
show schedul ed t ask r est ar t s
This command has no argument.
Example
I nf obl ox > show scheduled task restarts
Number of r est ar t s per hour : 4
CLI Commands
show security
The show security command shows the current security settings and whether access to the NIOS appliance
through the GUI is restricted. For more information, see set security on page 56.
Syntax
show secur i t y
Example
I nf obl ox > show security
cur r ent secur i t y set t i ngs:
Access r est r i ct ed: f al se
show session_timeout
show session_timeout
The show session_timeout command shows how long a session remains open when there is no user activity. For
more information, see set session_timeout on page 57.
Syntax
show sessi on_t i meout
Example
I nf obl ox > show session_timeout
Cur r ent GUI / CLI t i meout i s 31536000 seconds ( 8760: 00: 00)
CLI Commands
show snmp
The show snmp command shows information about the SNMP object that you specify. You can enter the object name
or OID. This command is similar to the SNMP get operation. For information on SNMP object identifiers, see Chapter
6, Monitoring with SNMP of the Infoblox Administrator Guide.
Syntax
show snmp var i abl e { name | oid }
Example
Display the host name
I nf obl ox > show snmp variable sysName.0
SNMPv2- MI B: : sysName. 0 = STRI NG: i b- 10- 34- 61- 253. i nf obl ox. com
Display the CPU temperature
I nf obl ox > show snmp variable .1.3.6.1.4.1.7779.3.1.1.2.1.1.0
I B- PLATFORMONE- MI B: : i bCPUTemper at ur e. 0 = STRI NG: +40. 75 C
name Name of the object you want to retrieve
oid OID of the object you want to retrieve
show status
show status
The show status command shows the grid and HA status. You can use this command to gather information about
the current state of a grid.
Syntax
show st at us
Example
I nf obl ox > show status
Gr i d St at us: Gr i d Mast er
HA St at us: Not Conf i gur ed
CLI Commands
show support_access
The show support_access command shows whether the support_access function is enabled. By default, the
support_access function is disabled. For more information on the suppor t _access function, see set support_access
on page 58.
Syntax
show suppor t _access
Example
I nf obl ox > show support_access
cur r ent suppor t access set t i ngs:
Suppor t access enabl ed ( gr i d- l evel ) : t r ue
show tech-support
show tech-support
The show tech-support command displays output for all show commands. It is a labor saving command that allows
you to view the information provided by all the show commands. Using the l og argument allows you to save the
output to a log file that is included in the support bundle.
Syntax
show t ech- suppor t [ l og]
Example
I nf obl ox > show tech-support
Cur r ent dat e and t i me: Thu Aug 24 14: 06: 01 EDT 2008
Up t i me : 19: 29
Ver si on : 4. 3r 2
Har dwar e I D : 4dcef 037e91a403f e05e10ecd241
Li cense St r i ng : GgAAADJ j 2t zLRv8GJ 7/ Ua4wkRcbnS6Vp5V5Rxi zS
Li cense Type : DNS
Li cense St r i ng : EQAAADNj 3cWUB/ FCZaaFa8J oT5ev
Li cense St r i ng : HAAAADxo18r NWeMKC6ndKsJ pRYqpSel r 4xJ Ui n6C6bE=
Li cense St r i ng : HAAAADl kwcr mRf gf J LXaLsJ pRYqpSel r 4xJ Ui i XWseE=
Ver si on : 4. 3r 2
SN : 000100e081277a69
REVERT ver si on i s: N/ A
No upgr ade hi st or y f ound f or t hi s box.
l og Saves the output to a log file that is included in the support bundle.
CLI Commands
show upgrade_compatible
The show upgrade_compatible command shows whether your grid can be upgraded to a later NIOS release. Use
this command to check if a grid is compatible with a later NIOS release before you upgrade. For information about
appliances that are compatible with the release, refer to the latest release notes.
Syntax
show upgr ade_compat i bl e [ maj or - number . mi nor - number ]
Example
I nf obl ox > show upgrade_compatible 6.0
The gr i d i s compat i bl e wi t h r el ease 6. 0.
I nf obl ox > show upgrade_compatible 5.1r3
The r el ease number f or mat must be maj or number . mi nor number , such as 6. 0.
I nf obl ox > show upgrade_compatible 6.0
Har dwar e Type( model ) Node I P St at us
NA 10. 35. 1. 213 bl oxTool s Enabl ed
I B- 1000 10. 35. 1. 213 Not Compat i bl e
I B- RSP2( 250) 10. 35. 1. 28 Requi r e Ri ver bed ver si on >= 5. 5. 3
The gr i d i s not compat i bl e wi t h r el ease 6. 0.
maj or - number . mi nor - number The NIOS release to which you want to upgrade your grid. You must enter
the release number in #.# format.
show upgrade_history
show upgrade_history
The show upgrade_history command displays the upgrade history of the NIOS appliance, showing how many
times the appliance has been upgraded and the versions for each upgrade. It also shows the revert versionthe
version that you can go back towhich is the version of the software the appliance was (last) running prior to the most
recent upgrade.
Syntax
show upgr ade_hi st or y
Example
I nf obl ox > show upgrade_history
REVERT ver si on i s: 4. 0r 1
[ 2006/ 08/ 14 19: 05: 48] Upgr aded t o: 4. 0r 2- 4- 06070517
CLI Commands
show uptime
The show uptime command displays the uptime (hours and minutes) of the NIOS appliance since the last reboot. In
a test environment, this command can be used as a metric. In a production environment, this command is of less use
since the appliance remains continually functional.
Syntax
show upt i me
Example
I nf obl ox > show uptime
Up t i me : 19: 33
show version
show version
The show version command displays the current version of the NIOS software that is installed on the NIOS
appliance. You can use this information when performing an upgrade to determine what version of the software to
upgrade to.
Syntax
show ver si on
Example
I nf obl ox > show version
Ver si on : 4. 0r 2
SN : 000100e081277a69
Hot f i x : N/ A
CLI Commands
show vpn_cert_dates
Use the show vpn_cert_dates command to display the start and end dates of the Infoblox appliance certificate. This
information is also included in the Support Bundle.
Syntax
show vpn_cert_dates
Example
The following is an example of the command:
I nf obl ox > show vpn_cer t _dat es
St ar t Dat e=Dec 13 11: 00: 00 2003 GMT
End Dat e=May 20 11: 00: 00 2019 GMT
shutdown
shutdown
The shutdown command halts the NIOS appliance. The appliance is designed to operate continuously. However, if
you want to halt the appliance you can do so with the shutdown command.
Note: Once you shutdown the appliance using this command, you must manually bring it back up.
Syntax
shut down
Example
The following example uses the shut down command.
I nf obl ox > shutdown
SHUT DOWN THE SYSTEM? [ y or n] y
Note: On a Riverbed Services Platform (RSP), the shutdown command restarts the Riverbed device instead of
halting it. Infoblox recommends that you use the Riverbed no rsp enable command to perform a
shutdown.
CLI Commands
traceroute
The traceroute command displays information on the route IPv4/IPv6 packets. You can use this command to
determine the path of an IPv4/IPv6 query. This command provides information on the path packets travel and the
time it takes to reach the IPv4/IPv6 destination address.
Syntax
t r acer out e {hostname | ip_address} [ opt ]
Example
The following example shows you how to use the traceroute command.
I nf obl ox > traceroute 10.1.1.1
t r acer out e t o 10. 1. 1. 1 ( 10. 1. 1. 1) , 30 hops max, 40 byt e packet s
1 10. 1. 1. 5 ( 10. 1. 1. 5) 1. 951 ms 1. 637 ms 1. 734 ms
2 10. 1. 1. 1 ( 10. 1. 1. 1) 0. 248 ms 0. 284 ms 0. 239 ms
hostname Fully qualified domain name
ip_address Valid IPv4/IPv6 address of the host
opt Can be any of the following:
numerical (specifies to not interpret the IP address as a DNS name)
src_addr (specifies the starting or from address)
I CMP (specifies to use pi ng)
v6 (specifies IPv6 hostname)

NIOS 6.0.0 CLIGuide

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

NIOS 6.0.0 CLIGuide

Uploaded by

Copyright:

Available Formats

Infoblox CLI Guide

(provided with the Windows

You might also like