Quick Reference: CLI Commands for CUCM, CUC and IM & Presence

Often times, it's necessary to access a CUCM server via the CLI instead of the web server. If you've not done
much of this yet, the command structure may seem a little awkward. It's nothing like IOS and can give many
voice and network engineers pause when they first encounter it.
This large post contains a list of all Cisco UC 9.1(1) CLI commands and their syntax in brief format. This
included CUCM CLI commands, CUC CLI commands and IM & Presence CLI commands. It's no
coincidence that this is the version of UC that is tested on the current CCIE Collaboration exams. However,
if you'd like to consult the full Cisco document for your version of UC (or something close), refer to the links
below:
Cisco Command Line Interface (CLI) Guides for Unified Communication
7.0(1)

8.6(1)

9.1(1)

10.0(1)

Disclaimer
Many of the CLI commands below require that services be reset, will reset the services themselves or require
a server reset to be effective. Some are disruptive and some could be catastrophic. Please use this list as a
quick reference guide, but ALWAYS research and test commands on a non-production system to verify that
you get the desired results. Furthermore, some of the commands listed below will not function on specific
UCS hardware or they are specific to CUCM or CUC (and some work on either).
Initiate the CLI
First and foremost, you remotely access the CLI via a secure SSH session to the CUCM. If you do not have
remote access to the CUCM via SSH, you can also gain access to the CLI via a locally attached keyboard and
monitor. Shown below, I've used PuTTY to gain access to the CLI of the CUCM server.
SSH to CUCM CLI via PuTTY
Delete Commands
delete account account-name

delete cuc futuredelivery

delete cuc locale locale-id
delete dns addr
delete dscp port-tag
delete ipsec policy_group { group | | all }
delete ipsec
policy_name { policy_name | all}
delete process processid [ force | terminate| crash ]
delete smtp

File Commands
file check [detection-size-kb]

Deletes an administrator account

Warning: Be cautious; ensure that you have known credentials for
another admin
Deletes all messages that have been marked for future delivery;
specific to CUC
Deletes the specified locale and all associated files; specific to CUC
Delete the ip address for a DNS server
Deletes a DSCP port tag
Deletes all policies within a specified group
Deletes a policy with a specified name
Deletes a specific process
Delete the SMTP host

Checks the /usr directory for files or directories that have changed
since the last installation or upgrade

file delete { activelog | inactivelog | install

}file-spec [detail] [noconfirm]
file delete tftp file-spec [detail] [noconfirm]
file delete dir ftp dir-name [detail]
file dump { activelog | inactivelog | install
}file-spec [hex] [recent] [ regexp expression ]
file dump sftpdetails
file dump tftp file-spec [page] [detail] [hex]
file fragmentation sdi most { fragmented |
recent } [number]
file fragmentation sdi file filename [verbose]
file fragmentation sdi all filename
file fragmentation sdl most { fragmented |
recent } [number]
file fragmentation sdl file filename [verbose]
file fragmentation sdl all filename
file get { activelog | inactivelog | install } filespec [ reltime | abstime ] [ match regex ]
[recurs] [compress]
file get { partBsalog | salog } filespec [reltime | abstime ] [ match regex ]
[recurs] [compress]
file get tftp file-spec [ reltime | abstime ] [
match regex ] [recurs] [compress]
file list { activelog | inactivelog | install } filespec [ page | detail | reverse ] [ date | size ]
file list { partBsalog | salog } file-spec [ page |
detail | reverse ] [ date | size ]
file list tftp file-spec [ page | detail | reverse ]
[ date | size ]
file search { activelog | inactivelog | install
}file-spec [ reltime | abstime ] [ignorecase]
file search tftp file-spec [ reltime | abstime ]
[ignorecase]
file tail { activelog | inactivelog | install
}filespec [hex] [lines] [ regexp expression ]
file tail tftp filespec [detail] [hex] [lines]
file view { activelog | inactivelog | install
}file-spec
file view system-management-log
file view tftp file-spec
License Commands
license file { diagnose | get }
license management change user { name |
password }
license management list users

Deletes a file, or files

Deletes a tftp file
Deletes a tftp directory
Dumps the contents of a file to the screen
Specifies the list of files that can be dumped in the SFTP context and
allows you to choose which file to dump
Dumps the contents of a specified file from TFTP
Shows file fragmentation information about most fragmented SDI
log files
Shows file fragmentation information about a specified SDI log file
Shows file fragmentation information about all SDI log files in the
directory
Shows file fragmentation information about most fragmented SDL
log files
Shows file fragmentation information about a specified SDL log file
Shows file fragmentation information about all SDL log files in the
directory
Sends a file to another system by using SFTP

Sends the partBsalog or salog directory to another system by using

SFTP
Sends a TFTP file to another system by using SFTP
Lists log files in an available log directory
Lists the partBsalog or salog directory
Lists TFTP files
Searches the content of a log and shows the matching lines a page at
a time
Searches the content of a TFTP file and shows the matching lines a
page at a time
Shows the last few lines of a log file
Shows the last few lines of a TFTP file
Displays the contents of a file
Displays the contents of the Integrated Management Logs (IML)
Displays the contents of an installation file

Prints diagnostic information on a license file or transfers it/them to a

remote destination via TAR file
Takes parameters interactively and changes the username or
password of the administrator
Lists all administrative users

license management product re-register all

license management reset { identity |

registration }
license management service { activate |
deactivate }
license management show system

Run Commands
run cuc dbquery database_name
sql_query[page]
run cuc preupgrade test

run cuc smtptest email-address

run cuc sysagent task task_name
run cuc vui rebuild
run loadxml

run sql sql_statement

run pe sql datastore_name sql_statement

Set Commands
set account enable user-id
set account name name
set accountlocking { enable | disable }
set accountlocking count attempts
set accountlocking unlocktime seconds
set cert bulk consolidate unit
set cert bulk export unit
set cert bulk import unit
set cert bulk sftp
set cert delete unit name
set cert import type name [caCert]
set cert regen name
set cli pagination { on | off }
set cli session timeout minutes

Forces re-registration of all product instances associated with this

Enterprise License Manager/Cisco Prime License Manager server.
This command may take some time for re-registration and
synchronization with all product instances to complete.
Resets the identity, store data, and essentially removes all the
installed licenses. It also restarts the Cisco Prime License Manager
server process to make the changes effective.
Activates or deactivates a given service on the Cisco Prime License
Manager server
Lists details about the ELM system; includes last sync time and ELM
id

Runs an SQL query and displays the results; specific to CUC

Verifies the state of the connection server on which the upgrade
process is to be performed and specifies the actions that can be taken
before upgrading the system; specific to CUC
Initiates a test that helps to verify the outgoing or incoming SMTP
configuration for SpeechView transcriptions; specific to CUC
Runs a sysagent task; specific to CUC
Instructs the voice recognition transport utility to immediately
rebuild the voice recognition name grammars with pending changes
Workaround for when service parameters or product-specific
information does not appear in the administration window as
expected
Allows you to run an sql command
Allows you to run an input SQL statement against the specified
presence datastore; specific to IM and Presence service on UCM

Enables the OS user account that was disabled because of password

inactivity
Sets up a new account on the operating system
Enables or disables account locking for the current administration
accounts
Sets the global consecutive failed sign-in attempt count that triggers
locking a user account
Configures the unlock time for the current Unified Communications
Manager admin accounts
Consolidates all the certificates that are available on the unit
Exports all the certificates that are available on the unit
Imports the certificates that are in the SFTP location into the
specified unit trust-store
Prompts for the SFTP server information to use for bulk operations
Deletes a specific certificate file from the trust unit
Imports the specified certificate for the specified certificate type
Regenerates the certificate for the specified unit
For the current CLI session, this command turns automatic
pagination On or Off
Sets the time, in minutes, after which an active CLI session times out
and disconnects

set commandcount { enable | disable }

set csr gen name
set cuc jetty stderrlog { enable | disable }

set cuc jetty stdoutlog { enable | disable }

set cuc jetty requestlog { enable | disable }

set cuc trace { enable | disable } trace_name

level
set date HH:mm:ss:MM/DD/YY
set dscp defaults
set dscp { enable | disable } { all | port_tag }

set dscp marking port_tag value

set ipsec policy_group { ALL | group }
set ipsec policy_name { ALL | policy_name }
set logging { enable | disable }
set network cluster publisher { hostname | ip
} name
set network dhcp eth0 { enable | disable } {
node_ip | net_mask | gateway_ip }
set network dns { primary | secondary } addr
set network dns options [ timeout | seconds ]
[ attempts | number ] [ rotate ]
set network domain [domain-name]
set network failover { ena | dis }
set network gateway addr
set network hostname hostname
set network ip eth0 addr mask gw
set network ipv6 dhcp { enable | disable }
[reboot]
set network ipv6 gateway addr [reboot]
set network ipv6 service { enable | disable }
[reboot]
set network ipv6 static_address addr
mask[reboot]
set network
max_ip_conntrackip_conntrack_max value
set network mtu mtu_max

Changes the CLI command prompt, so it displays how many CLI

commands have executed.
Generates the csr for the unit name
Enables or disables the error log getting generated while any standard
error occurs during communicating with the Jetty server. This error
log gets generated and is available at the path
/var/log/active/jetty/. Specific to CUC
Enables or disables the standard input and output log getting
generated while communicating with Jetty server. This standard input
and output log gets generated and is available at the path
/var/log/active/jetty/. Specific to CUC
Enables or disables the request log getting generated from the Jetty
server while any request is raised for notifications. This request log
gets generated and is available at the path
/usr/local/jetty/logs/. Specific to CUC
Enables or disables the specified traces and trace levels. Specific to
CUC
Changes the time and date on the server
Sets the factory default DSCP settings for all of the port tags
Enables or disables DSCP marking on outgoing TCP or UDP
packets. You can enable or disable DSCP on a single port tag, or on
all port tags at once
Sets DSCP markings on port tags by using well-known DSCP classes
and numeric values
Enables ipsec policies with the specified policy group name
Enables the specified ipsec policy
Allows you to enable or disable CLI Admin logs
Sets the network cluster publisher hostname and IP address
Enables or disables DHCP for Ethernet interface 0. You cannot
configure Ethernet interface 1.
Sets the IP address for the primary or secondary DNS server
Sets DNS options
Sets the domain name for the system
Enables and disables Network Fault Tolerance on the Media
Convergence Server network interface card
Enables you to configure the IP address of the network gateway
Allows an administrator to set the network host name, change the IP
address of the node, and restart the system.
Sets the IP address for Ethernet interface 0. You cannot configure
Ethernet interface 1.
Sets the DHCPv6 client on the server and enables IPv6 support. For
changes to take effect, you must restart the server.
Sets the IPv6 gateway for the server. For changes to take effect, you
must restart the server.
Enables or disables the IPv6 service on the server. For changes to
take effect, you must restart the server.
Assigns the static IPv6 address to the server. For changes to take
effect, you must restart the server.
Sets the ip_conntrack_max value
Sets the maximum MTU value

set network nic eth0 { auto | { en | dis } } {

speed | { 10 | 100 } } { duplex half | { half |
full } }
set network pmtud { enable | disable }
set network restore eth0 ip-address networkmask gateway
set network status eth0 { up | down }
set password age { maximum | minimum
}days
set password change-at-login { disable |
enable } userid
set password complexity character { disable
| enable } num-char
set password complexity character
differencenum-char
set password complexity character maxrepeat max-repeat
set password expiry maximum-age { enable |
disable }
set password expiry minimum-age { enable |
disable }
set password expiry user maximum-age {
enable | disable } userid
set password expiry user minimum-age {
enable | disable } userid
set password history number

set password inactivity { enable | disable |

period } days
set password user admin
set password user security
set replwatcher monitor { enable | disable }

set session maxlimit [value]

set smtp hostname
set strace enable [all] tracevalue servicename
set strace disable [all] servicename
set timezone zone
set trace disable tname
set trace enable { Arbitrary | Detailed |
Entry_exit | Error | Significant | Special |
State_Transition } tname
set web-security orgunit orgname locality
state [country] [alternatehostname]
set webapp session timeout minutes

set workingdir { activelog | inactivelog | tftp

Sets the properties of the Ethernet Interface 0. You cannot configure

Ethernet interface 1.
Enables and disables Path MTU Discovery
Configures the specified Ethernet port to use a specified static IP
address
Sets the status of Ethernet 0 to up or down. You cannot configure
Ethernet interface 1.
Modifies the value for password age, in days, for Cisco Unified
Communications Operating System accounts
Force new or existing users to change their password when they sign
in to the system the next time
Enable or disable password complexity rules for the type of
characters in a password
Specifies the number of characters that the character sequence in a
new password must differ from the character sequence in the old
password
Specifies the number of times you can consecutively repeat a single
character in a new password
Enables or disables the password expiry maximum age settings for
Cisco Unified Operating System Administrator accounts
Enables or disables the password expiry minimum age settings for
Cisco Unified Operating System Administrator accounts
Disables the maximum age password expiry for a particular Cisco
Unified Operating System Administrator account
Enables or disables the maximum age password expiry for a
particular Cisco Unified Operating System Administrator account
Modifies the number of passwords that get maintained in the history
for OS admin accounts. New passwords matching remembered
passwords get rejected
Enables or disables the password inactivity setting globally
Allows you to change the administrator password
Allows you to change the security password
Enables or disables replication monitoring by the Cisco Replication
Watcher service. The Cisco Replication Watcher service blocks other
services from starting until database replication is setup and
functioning normally.
Sets the upper limit for concurrent sessions
Sets the SMTP server hostname
Enables the service trace and sets the trace level
Disables the service trace
Lets you change the system time zone
Unsets trace activity for the specified task
Sets trace activity for the specified task

Sets the web security certificate information for the operating system
Sets the time, in minutes, that can elapse before a web application,
such as Cisco Unified Communications Manager Administration,
times out and logs off the user.
Sets the working directory for active, inactive, and installation logs

}directory
Show Commands
show account
show accountlocking
show cert list { own | trust }
show cert own filename
show cert trust filename
show cli pagination
show cli session timeout

show csr list { own | | trust }

show csr own name
show ctl
show cuc cluster status
show cuc config groups [page]
show cuc config settings group_name page
show cuc dbconsistency [database_name]
show cuc dbcontents [database_name]
show cuc dbschema [database_name]
show cuc dbserver disk [page] [file]
show cuc dbserver session session_id [page] [file]
show cuc dbserver sessions all [page] [file]
show cuc dbserver sessions list [page]
show cuc dbserver user list [page]
show cuc dbserver user waiting [page]
show cuc dbtable contents { database_name |
table_name }
show cuc dbtable list database_name [page]
show cuc dbtable schema { database_name |
table_name } [page]
show cuc dbview contents { database_name |
view_name }
show cuc dbview list database_name [page]
show cuc dbview schema { database_name |
view_name } [page]
show cuc locales
show cuc sysagent task list [page]
show cuc sysagent task results task_name[page]
show cuc sysinfo

Lists current administrator accounts, except the master

administrator account
Displays the current account locking settings
Displays certificate trust lists
Displays certificate contents
Displays certificate contents
Displays the status of automatic CLI automatic pagination
Displays the CLI session timeout value, which is the amount of
time, in minutes, that can elapse before a CLI session times out
and disconnects
Displays Certificate Sign Request contents and certificate trust
lists
Displays Certificate Sign Request (CSR) contents and
certificate trust lists
Displays the contents of the Certificate Trust List (CTL) file on
the server. It notifies you if the CTL is invalid
Shows the status of the servers in the cluster; Applies to CUC
Displays a list of the valid configuration group names
Displays the settings and values for a specified group of
Connection configuration settings
Checks the tables and indexes of a specified database for
inconsistencies
Exports the data from a specified database to a CSV file
Exports the SQL statements that are necessary to replicate the
schema for a specified database to a file
Displays summary information about informix storage space
for all Connection databases on the current server
Displays summary information about a specified informix
database user session
Displays summary information about all the current Informix
database user sessions
Displays a list of the current Informix database user sessions
Displays a list of the active Connection internal database users
Displays a list of the Connection internal users that are waiting
for a resource
Exports the contents of a specified Connection table to a CSV
file
Displays a list of the tables in a specified database
Displays a description for a specified table and a list of the
columns in the table
Saves the results from a specified SQL view in a CSV file
Displays a list of the views in a specified database
Displays the schema for a specified view
Displays a list of the locales currently installed
Displays a list of the Sysagent tasks
Displays the times at which the specified task started and
completed, with the most recent time listed first
Displays a summary of hardware and software system

show cuc tech dbschemaversion [page]

show cuc tech dbserver all
show cuc tech dbserver integrity
show cuc tech dbserver log diagnostic
show cuc tech dbserver log message [lines] [ page
]
show cuc tech dbserver status
show cuc version

show diskusage activelog { activelog | common |

inactivelog | install | tftp | tmp }filename filename
{ directory | sort }
show dscp all

show dscp defaults

show dscp marking value
show dscp status { enabled | disabled }
show environment { fans | power-supply |
temperatures }
show hardware
show ipsec information { policy_group |
policy_name }
show ipsec policy_group
show ipsec policy_name policy_group
show ipsec status
show itl
show logins [number]
show media streams [options]
show memory { count | modules | size }
show myself
show network all [detail] [page] [ searchsrchtext ]
show network cluster
show network dhcp eth0
show network eth0 [detail] [ search srchtxt ]

information for the current Connection server, including the

version installed on the active and inactive partitions; whether
a cluster is configured; QOS settings; hardware specifications;
the amount of used and free disk space on the active, inactive,
and common partitions; licensing information; etc.
Displays the schema version information for each database
Runs all the show cuc tech commands in sequence and saves
the results in a text file
Checks the integrity of the Informix database server storage
space structure
Checks for the existence of Informix assertion-failure and
shared-memory-dump logs
Displays the end of the Informix message log
Saves a detailed status report of the database server instance to
a file
Displays the version in the active partition. If the active
partition contains an upgrade, the command also shows the
version in the inactive partition. The current Engineering
Special also displays.
Displays disk usage information about specific directories

Displays the current DSCP traffic markings on all the ports. It

displays the DSCP markings in decimal and hexidecimal. If the
value corresponds to a class then it displays the correct class. If
the value does not correspond to a class, then it displays N/A.
Displays the default factory DSCP settings. These values take
effect if the set dscp defaults command is executed.
Displays the current DSCP traffic markings for a particular
DSCP value
Displays the current DSCP traffic markings
Displays environmental information for three types of
hardware components
Displays hardware-related information about the platform
Displays detailed information about the specified ipsec policy
Displays all the ipsec policy group on the node
Displays the list of ipsec policy names that exist in the
specified policy group
Displays status information related to ipsec
Displays the ITL file contents or prints an error message if the
ITL file is invalid
Lists recent logins to the server
Captures information on current media stream connections
Displays information about the onboard memory
Selfie! Displays information about the current account
Shows network information for listening and nonlistening
sockets
Lists nodes in the network cluster
Shows DHCP status information
Shows network information for ethernet 0

show network failover [detail] [page]

show network ip_conntrack
show network ipprefs { all | enabled | public }
show network ipv6 { route | settings }
show network max_ip_conntrack
show network route [detail] [ search srchtext]
show network status [detail] [listen] [process]
[all] [nodns] [ search stext ]
show open files all
show open files process processID
show open files regexp reg_exp
show open ports all
show open ports process processID
show open ports regexp reg_exp
show packages { active | inactive } name[page]
show password { age | history | inactivity }
show password expiry { maximum-age |
minimum-age }
show password expiry user { maximum-age |
minimum-age } userid
show password expiry user
show perf counterhelp class-name counter-name
show perf list categories
show perf list classes [ cat category ] [ detail ]
show perf list counters class-name [ detail ]
show perf list instances class-name [ detail ]
show perf query class class-name [ ,class-name... ]
show perf query counter class-name counter-name
[ ,counter-name... ]
show perf query instance class-name instancename [ ,instance-name... ]
show perf query path path-spec [ ,path-spec... ]
show process list [ file filename ] [ detail ]

show process load [ cont ] [ clear ] [ noidle ] [

num number ] [ thread ] [ cpu | | memory | | time ]
[ page ]
show process name process [ file filename ]
show process open-fd process-id [ ,process-id2 ]
show process pid pid [ file filename ]
show process search regexp [ file filename ]

show process user username [ file filename ]

show process using-most cpu [ number ] [
filefilename ]

Shows Network Fault Tolerance information

Shows ip_conntrack usage information
Shows the list of ports that have been requested to be opened
or translated in the firewall
Shows IPv6 network routes and network settings
Shows max_ip_conntrack information
Shows network routing information
Shows active internet connections
Shows all open files on the system
Shows open files that belong to a specified process
Shows open files that match the specified regular expression
Shows all open ports on the system
Displays open ports the belong to a specified process
Shows open ports that match the specified regular expression
Displays the name and version for installed packages
Shows information about the configured password
Shows the configured password expiration parameters
Shows the configured password expiration parameters for the
specified user
Shows the password maximum age and password minimum
age for each CLI user in the system
Displays information about the specified perfmon counter
Lists the categories in the perfmon system
Lists perfmon classes (objects)
Lists perfmon counters for the specified perfmon class
Lists the perfmon instances for the specified perfmon class
Queries a perfmon class and displays all the instances and
counter values of each instance
Queries the specified counter or counters and displays the
counter value of all instances
Queries the specified instance and displays all its counter
values
Queries a specified perfmon path
Displays a list of all the processes and critical information
about each process and visually indicates the child-parent
relationships between the processes
Displays the current load on the system

Displays the details of processes that share the same name and
indicates their parent-child relationship
Lists the open file descriptors for a comma-separated list of
process IDs
Shows a specific process number or command name
Searches for the pattern that the regular expression regexp
specifies in the output of the operating system-specific process
listing
Retrieves details of processes that share the user name and
displays parent-child relationship
Displays a list of the most processor-intensive processes

show process using-most memory [ number ] [

file filename ]
show registry system component [ name ] [ page ]
show risdb list [ file filename ]
show risdb query table1 table2 table3 ... [
filefilename ]
show session maxlimit
show smtp
show stats io [ kilo ] [ detail ] [ page ] [
filefilename ]
show status
show strace [ servicename ]
show tech activesql
show tech all [ page ] [ file filename ]
show tech ccm_service
show tech database { dump | sessions }
show tech dberrcode errorcode
show tech dbintegrity
show tech dbschema [ car | cm ]
show tech dbinuse [ car | cm ]
show tech dbstateinfo [ car | cm ]
show tech devdefaults
show tech dumpCSVandXML
show tech gateway
show tech locales
show tech network all [ page ] [ search text ] [
file filename ]
show tech network hosts [ page ] [ searchtext ] [
file filename ]
show tech network interfaces [ page ] [
search text ] [ file filename ]
show tech network resolv [ page ] [ searchtext ] [
file filename ]
show tech network routes [ page ] [ searchtext ] [
file filename ]
show tech network sockets { numeric }
show tech notify [search pattern_to_match]
show tech params { all | | enterprise | | service }
show tech prefs
show tech procedures { car | | cm }
show tech repltimeout
show tech routepatterns
show tech routeplan
show tech runtime { all | cpu | disk | env |
memory } page file filename
show tech sqlhistory

Displays a list of the most memory-intensive processes

Displays the contents of the registry
Displays the tables that are supported in the Realtime
Information Service (RIS) database
Displays the contents of the specified RIS tables
Shows the upper limit for concurrent SSH sessions
Displays the name of the SMTP host
Displays the IO statistics
Displays basic platform status
Lists the current service trace level
Displays the active queries to the database taken at one minute
intervals as far back as the logs allow
Displays the combined output of all show tech commands
Displays information about all services that can run on the
system
Shows information about the database
Displays information (from the database log files) about the
error code that is specified
Displays the database integrity
Displays the database schema in a CSV file
Displays the database in use
Displays the state of the database
Displays the device defaults table
Provides detailed information for customer support in the case
of a standard upgrade condition
Displays the gateway table from the database
Displays the locale information for devices, device pools, and
end users
Displays all network tech information
Displays information about hosts configuration
Displays information about the network interfaces
Displays information about hostname resolution
Displays information about network routes
Displays the list of open sockets
Displays the database change notify monitor
Displays the database parameters
Displays database settings
Displays the CAR or CM procedures that are in use for the
database
Displays the replication timeout
Displays the route patterns that are configured for the system
Displays the route plans that are configured for the system
Displays CPU usage information at the time the command is
run
Prints the history of SQL statements executed

show tech systables

show tech system { all | bus | hardware | host |
kernel modules | software | tools } page
file filename
show tech table table_name [page]
show tech triggers
show tech version [page]
show timezone config
show timezone list [ page ]
show trace [ task_name ]
show ups status

show version active

show version inactive
show web-security
show webapp session timeout

show workingdir

Unset Commands
unset ipsec policy_group policy_group
unset ipsec policy_name policy_name
unset network dns options [ timeout ] [
attempts ] [ rotate ]
unset network domain
unset network ipv6 static_address [ reboot ]
Utils Commands
utils auditd { enable | disable | status }
utils core { active | inactive } analyze
[core_filename]
utils core { active | inactive } list
utils cuc activate CUSRSV
utils cuc cluster activate
utils cuc cluster deactivate
utils cuc cluster makeprimary
utils cuc cluster overwritedb

utils cuc cluster renegotiate

utils cuc create report

Displays the name of all tables in the sysmaster database

Displays all the system information

Displays the contents of the specified database table

Displays table names and the triggers that are associated with
those tables
Displays the version of the installed components
Displays the current timezone settings
Displays the available timezones
Displays trace information for a particular task
Shows the current status of the USB-connected APC smartUPS device and starts the monitoring service if this service is
not already started
Displays the software version on the active partition
Displays the software version on the inactive partition
Displays the contents of the current web-security certificate
Displays the webapp session timeout value, which is the
amount of time, in minutes, that can elapse before a web
application times out and logs off the user
Retrieves the current working directory for activelog,
inactivelog, install, and TFTP

Disables the ipsec policy on the specified group.

Disables the ipsec policy with the specified name
Unsets DNS options
Unsets the domain name and restarts the server
Unsets the ipv6 static address

Starts, stops, and provides the status of the system auditing service
Generates a backtrace for a core file, a thread list, and the current
value of all CPU registers
Creates reports about the server in the platform/log directory
Converts the standalone Cisco Unity Connection server to Cisco
Unity Connection SRSV server
Activates this server in a Cisco Unity Connection cluster
Deactivates this server in a Cisco Unity Connection cluster
Forces the specified server to take the primary server status in a
Cisco Unity Connection cluster
Overwrites the database on the server on which you run this
command with the database from the other server in the
Connection cluster. Replication restarts after the database is
overwritten. This method is used when you restore one server from
a backup and must copy the restored data to the other server.
Creates a cluster relationship with the publisher server in a
Connection cluster after the server was replaced or the Connection
was reinstalled on the publisher server. This command overwrites
all data on the publisher server with data from the subscriber server
and initializes replication between the servers.
Collects data that is helpful to technical support staff for

utils cuc networking clear_replication

utils cuc networking dscp { on | off }

utils cuc reset password

utils dbreplication clusterreset

utils dbreplication dropadmindb
utils dbreplication
forcedatasyncsubnodename [offloadpub]
[timeoutvalue]
utils dbreplication quickaudit { nodename | all
}
utils dbreplication repair { nodename | all }
utils dbreplication
repairreplicatereplicatename [ nodename | all ]
utils dbreplication
repairtable tablename [nodename | all ]
utils dbreplication reset { nodename | all }

utils dbreplication runtimestate nodename

utils dbreplication setprocess [process]

utils dbreplication setrepltimeout timeout

utils dbreplication status { all | node |
replicate }
utils dbreplication stop { nodename | all }

utils diagnose { fix | list | module | test |

version } [module_name]
utils disaster_recovery backup network
[featurelist] [path] [servername] [username]
utils disaster_recovery backup tape
[featurelist] [devicename]
utils disaster_recovery cancel_backup
[confirm]

troubleshooting the system. Data collected includes version

information, cluster status, service information, database
information, trace files, log files, disk information, memory
information, and restart information.
Stops the Connection Digital Networking Replication Agent and
Connection SMTP service, deletes the drop, queue, and pickup
replication folders, clears the status of in-progress directory pushes
to or pulls from this server, and restarts the Connection Digital
Networking Replication Agent and Connection SMTP service.
Depending on the size of the replication folders, this operation may
take several minutes.
Causes Connection either to start or to stop including a DSCP
value of 18 in packets sent between the Connection servers in a
cluster, so a router configured to prioritize packets based on their
DSCP value can prioritize Connection data and voice messages.
Resets the password for a specified user account. If Connection
locked the account because of too many failed sign-in attempts,
this command also unlocks the account.
Resets replication on an entire cluster
Drops the Informix syscdr database on any server in the cluster
Forces a subscriber server to have its data restored from data on
the publisher server
Runs a quick database check on selected content on dynamic tables
Repairs database replication
Repairs mismatched data between cluster nodes and changes the
node data to match the publisher data
Repairs mismatched data between cluster nodes and changes the
node to match the publisher data
Resets and restarts database replication. You can use this
command to rebuild replication when the system has not set up
replication properly
Monitors progress of the database replication process and provides
replication state in the cluster
Improves replication performance of clusters that have nodes
separated by WANs with delay (Clustering over WAN
configuration)
Sets the timeout for database replication on large clusters
Shows the status of database replication and indicates whether the
servers in the cluster are connected and the data is in sync
Stops the automatic setup of database replication. Run this
command on subscriber and publisher servers before executing the
CLI command utils dbreplication reset or utils dbreblication
clusterreset. You can run this command on the subscriber servers
simultaneously, before you run it on the publisher server.
Enables you to diagnose and attempt to automatically fix system
problems
Displays information about the backup files that are stored on a
remote server
Displays information about the backup files that are stored on tape
Cancels the ongoing backup

utils disaster_recovery device add

networkdevicename path
server_namei/ip_address username
[Number_of_backups]
utils disaster_recovery device add
tapedevicenametapeid
utils disaster_recovery device
deletedevice_name | *
utils disaster_recovery device list
utils disaster_recovery history [operation]
utils disaster_recovery restore
networkrestore_server tarfilename devicename
utils disaster_recovery restore tape server
tarfilename tapeid
utils disaster_recovery schedule
addschedulename devicename featurelist
datetime frequency
utils disaster_recovery schedule { enable |
disable } [schedulename]
utils disaster_recovery schedule list
utils disaster_recovery
show_registrationhostname
utils disaster_recovery show_tapeid
utils disaster_recovery status operation
utils fior { enable | disable | start | stop | status
}
utils fior list start= [date-time] stop=date-time
utils fior top { read | write | read-rate | writerate }

utils fips { enable | disable | status }

utils firewall ipv4 debug { off | | [time] }

utils firewall ipv4 { enable | disable | [time] }
utils firewall ipv4 list
utils firewall ipv4 status
utils ipv6 firewall debug { off | | [time] }
utils firewall ipv6 { enable | disable | [time] }
utils firewall ipv6 list
utils firewall ipv6 status
utils ha failover { node name }

utils ha fallback node name

Adds the backup network device

Displays information about the backup files that are stored on a

tape.
Deletes the specified device
Displays the device name, device type, and device path for all the
backup devices.
Displays the history of previous backups and restores
Backs up files to a remote server
Displays information about the backup files that are stored on a
tape
Adds the configured schedules to backup schedule

Enables or disables the specified backup schedule

Displays the schedules that are configured
Displays the registered features and components on the specified
server
Displays a list of tape device IDs
Displays the status of the current backup or restore job
Allows you to monitor the I/O on the server. The File I/O
Reporting service provides a kernel-base daemon for collecting file
I/O per process.
Displays a list of the file I/O events, in chronological order, from
oldest to newest
Displays a list of top processes that create file I/O. You can sort
this list by the total number of bytes read, the total number of bytes
written, the rate of bytes read, or the rate of bytes written.
Enables, disables, or displays the status of FIPS 140-2 mode. FIPS
140-2 mode is disabled by default; only an administrator can
enable FIPS.
Turns IPv4 firewall debugging on or off. If you do not enter a time
parameter, this command turns on debugging for 5 minutes.
Enables and disables IPv4 firewall
Displays the current configuration of the IPv4 firewall
Displays the current status of the IPv4 firewall
Turns IPv6 firewall debugging on or off. If you do not enter a time
parameter, this command turns on debugging for 5 minutes.
Enables and disables IPv6 firewall
Displays the current configuration of the IPv6 firewall
Displays the current status of the IPv6 firewall
Initiates a manual failover for a specified node, where the Cisco
Server Recovery Manager stops the critical services on the failed
node and moves all users to the backup node.
Initiates a manual fallback for a specified node, where the Cisco
Server Recovery Manager restarts the critical services on the active
node and moves users back to the active node.

utils ha recover subcluster name

utils ha status subcluster name

utils ils findroutestring Directory URI
utils ils findxnode
utils ilslookup Directory URI
utils ils showpeerinfo clustername
utils import config

utils iostat { interval | iterations | filename }

utils iothrottle { enable | disable | status }
utils ldap config { fqdn | ipaddr }
utils network arp delete host
utils network arp set { host } { addr }
utils network arp list host hostname [options]
utils network capture eth0 [page] [numeric] [
file | fname ] [ count | num ] [ size | bytes ] [ src
| addr ] [ dest | addr ] [ port | num ]
utils network connectivity [ reset ]
[hostname/ip address]
utils network host name [ server | serv ] [page]
[detail] [srv]
utils network ipv6 host { host_name |
ipv6_address }
utils network ipv6 traceroute [ ipv6-address |
hostname ]
utils network ipv6 ping destination [count]
utils network ping destination [count] [size]
utils network traceroute [destination]
utils nscd { restart | status }
utils ntp server add s1 [ s1 | s2 | s3 | s4 | s5
][norestart]
utils ntp server delete

utils ntp config

utils ntp restart
utils ntp server list
utils ntp start
utils ntp status
utils os kerneldump { enable | disable }

utils os kerneldump ssh { enable | disable |

Initiates a manual recovery of the subcluster (when nodes are in a

Failed state) where IM and Presence restarts the Cisco Server
Recovery Manager service on that subcluster.
Displays the HA status for a specified subcluster
Returns all route strings that are associated with this directory URI,
including the route string for the local cluster
Returns the current xnode for the local cluster
Returns the route string that is used for call routing when this
directory URI is dialed from this cluster
Returns the peer info vector for either a single cluster in an ILS
network, or for all the clusters in an ILS network.
Takes data from the platformConfig.xml file on the virtual floppy
drive and modifies the system to match the configuration file. The
system reboots after the command successfully completes.
Displays the iostat output for the given number of iterations and
intervals
Allows you to manage and monitor IO throttling on the server
Configures the system LDAP authentication
Deletes an entry in the Address Resolution Protocol table
Sets an entry in the Address Resolution Protocol table
Lists the contents of the Address Resolution Protocol table
Captures IP packets on the specified Ethernet interface

Verifies the node network connection to the first node in the

cluster. Be aware that this connection is only valid on a subsequent
node.
Resolves a host name to an address or an address to a host name
Performs an IPv6 host lookup (or IPv6 address lookup) for the
specified host name or IPv6 address
Traces an IPv6 address or hostname
Allows you to ping an IPv6 address or hostname
Allows you to ping another server
Traces IP packets that are sent to a remote destination
Allows you to manage the network service cache daemon (NSCD).
Adds a maximum of five specified NTP servers
Allows you to delete a configured NTP server or all of them. When
you choose the server to delete, you are prompted to indicate if you
want to restart the NTP service. If you choose no, the NTP service
does not get restarted after the server is deleted.
Displays the current configuration of the NTP client and server
Restarts the NTP service
Lists all NTP servers
If not already running, starts the NTP service.
Displays the current status of NTP.
Configures kerneldump to provide a kernel crash dumping
mechanism. The kernel captures the dump to the local disk, in case
of a kernel crash. The MCS-7835-H2 and MCS-7845-H2 models
do not support this command.
Enables, disables, or displays the status of an external SSH server

status }
utils os secure { enforce | permissive | status }
utils remote_account create
utils remote_account disable
utils remote_account enable
utils remote_account status
utils
reset_application_ui_administrator_name
utils
reset_application_ui_administrator_password
utils reset_ui_administrator_name
utils service { activate | deactivate | start | stop
| restart } service_name
utils service list [page]
utils service auto-restart { enable | disable |
show } service-name
utils snmp config 1/2c community-string {
add | | delete | | list | | update }
utils snmp config 1/2c inform { add | | delete | |
list | | update }
utils snmp config 1/2c trap { add | delete | list |
update }
utils snmp config 3 inform { add | | delete | |
list | | update }
utils snmp config mib2 { add | | delete | | list | |
update }
utils snmp config 3 trap { add | | delete | | list |
| update }
utils snmp config 3 user { add | | delete | | list |
| update }
utils snmp get version
utils snmp hardware-agents { status | | start | |
stop | | restart }
utils snmp test
utils snmp walk version
utils soap realtimeservice test [remote-ip]
remote-httpsremote https-password
utils sso { enable | disable | status }
utils system restart
utils system shutdown
utils system switch-version
utils system boot { console | serial }
utils system upgrade { initiate | cancel | status
}
utils vmtools status
utils vmtools upgrade

Used to specify the level of security provided by selinux

Creates a remote accounts
Disables a remote account
Enables a remote account
Displays the status of a remote account
Resets the application user interface administrator name
Resets the application user interface password
Resets the administrator password you use to sign in to the
administration user interface for the installed product
Activates, deactivates, starts, stops, or restarts a service
Displays a list of all services
Starts or stops a specified service
Adds, deletes, lists or updates a community string interactively
Adds, deletes, lists or updates inform notification destinations
interactively
Adds, deletes, lists or updates trap destinations interactively
Adds, deletes, lists or updates the v3 inform notification
Adds, deletes, lists or updates Mib2 information
Adds, deletes, lists or updates v3 trap destinations
Adds, deletes, lists or updates v3 user configurations
Gets the SNMP data using the specified version for the specified
MIB OID
Manipulates snmp hardware-agent services
Sends sample alarms to local syslog and remote syslog
Walks through the SNMP MIB using the specified version, starting
with the specified OID
Executes a number of test cases on the remote server
Start, stop and get status of SSO based authentication
Allows you to restart the system on the same partition
Allows you to shutdown the stystem
Allows you to restart the system on the inactive partition
Redirects where the system boot output gets sent
Allows you to install upgrades and Cisco Option (COP) files from
both local and remote directories
Displays the status of VMware Tools.
Updates the currently installed VMware Tools to the latest version
prescribed by the ESXi host for that VM