Professional Documents
Culture Documents
Big-Ip Advanced Routing™: Integrated Management Interface Command Line Interface Reference Guide
Big-Ip Advanced Routing™: Integrated Management Interface Command Line Interface Reference Guide
Version 7.8.4
Publication Date
This document was published on June 27, 2013.
Legal Notices
Copyright
Copyright 2001-2013, F5 Networks, Inc. All rights reserved.
F5 Networks, Inc. (F5) believes the information it furnishes to be accurate and reliable. However, F5
assumes no responsibility for the use of this information, nor any infringement of patents or other rights of
third parties which may result from its use. No license is granted by implication or otherwise under any
patent, copyright, or other intellectual property right of F5 except as specifically described by applicable
user licenses. F5 reserves the right to change specifications at any time without notice.
Trademarks
AAM, Access Policy Manager, Advanced Client Authentication, Advanced Firewall Manager, Advanced
Routing, AFM, Alive With F5, APM, Application Acceleration Manager, Application Security Manager,
ARX, AskF5, ASM, BIG-IP, BIG-IQ, Cloud Extender, CloudFucious, Cloud Manager, Clustered
Multiprocessing, CMP, COHESION, Data Manager, DevCentral, DevCentral [DESIGN], DNS Express,
DSC, DSI, Edge Client, Edge Gateway, Edge Portal, ELEVATE, EM, Enterprise Manager, ENGAGE, F5,
F5 [DESIGN], F5 Certified [DESIGN], F5 Networks, Fast Application Proxy, Fast Cache, FirePass,
Global Traffic Manager, GTM, GUARDIAN, iApps, IBR, Intelligent Browser Referencing, Intelligent
Compression, IPv6 Gateway, iControl, iHealth, iQuery, iRules, iRules OnDemand, iSession, L7 Rate
Shaping, LC, Link Controller, Local Traffic Manager, LTM, LineRate, LineRate Systems [DESIGN],
LROS, Message Security Manager, MSM, OneConnect, Packet Velocity, PEM, Policy Enforcement
Manager, Protocol Security Manager, PSM, Real Traffic Policy Builder, ScaleN, Signalling Delivery
Controller, SDC, SSL Acceleration, StrongBox, SuperVIP, SYN Check, TCP Express, TDR, TMOS,
Traffic Management Operating System, Traffix Systems, Traffix Systems (DESIGN), Transparent Data
Reduction, UNITY, VAULT, VIPRION, vCMP, VE F5 [DESIGN], Virtual Clustered Multiprocessing,
WA, WAN Optimization Manager, WebAccelerator, WOM, and ZoneRunner, are trademarks or service
marks of F5 Networks, Inc., in the U.S. and other countries, and may not be used without F5's express
written consent.
All other product and company names herein may be trademarks of their respective owners.
i
ii
Table of Contents
iii
Table of Contents
iv
Table of Contents
v
Table of Contents
vi
CHAPTER 1 ZebOS Command Line Interface Environment
Network administrators and application developers who install and configure ZebOS® IP routing software should use
this Command Line Interface (CLI) reference guide. This guide includes contains the following information:
• An overview of the ZebOS Command Line Interface
• A complete reference of the Command Line Interface commands for the Integrated Management Interface (IMI)
1
ZebOS Command Line Interface Environment
Command Completion
The ZebOS CLI can complete the spelling of a command or a parameter. Begin typing the command or parameter,
then press the TAB key. For example, at the CLI command prompt type sh:
ZebOS> sh
Press TAB. The CLI displays:
ZebOS> show
If the command or parameter partial spelling is ambiguous, the ZebOS CLI displays the choices that match the
abbreviation. Type show i and press TAB. The CLI displays:
ZebOS> show i
interface ip isis
ZebOS> show i
The CLI displays the interface and ip keywords. Type n to select interface and press TAB. The CLI displays:
ZebOS> show in
ZebOS> show interface
Type ? and the CLI displays the list of parameters for the show interface command.
ZebOS> show interface
IFNAME Interface name
| Output modifiers
> Output redirection
<cr>
The CLI displays the only parameter associated with this command, the IFNAME parameter.
Note: For more information about output modifiers and output redirection, see the Show Command Tokens section.
Command Abbreviations
The ZebOS CLI accepts abbreviations for commands. For example,
sh in eth0
is an abbreviation for the show interface command.
2
ZebOS Command Line Interface Environment
Definitions
The following table defines the terms used in this document.
Table 1: Definition of Terms
Term Description
token A token is a non-character, non-numeric symbol: {}, {}, (), <>, |, ?, >, ., =
parameter A parameter is an UPPERCASE term for which the user substitutes input.
keyword A keyword is a lowercase term that the user types exactly as shown.
line A line is the user input of any text string, including spaces. No other parameters may be
entered after input for this token.
word A word is the user input of any contiguous text string (excluding spaces).
Typographic Conventions
The following table describes the typographic conventions that are used in this guide.
Table 2: .Typographic Conventions
Monospaced Command Represents command strings entered on a command line show ip ospf
font and sample source code.
UPPERCASE Variable Indicates user input. Enter values according to the area AREAID range
parameter description. Each uppercased token expands into one or ADDRESS
more other tokens.
lowercase Keyword Indicates keywords. Enter values exactly as displayed in show ip ospf
parameter the command description.
| Vertical bar Limits the choices. Select one from the list. Do not enter A.B.C.D|<0-
the bar as part of the command. 4294967295>
{ } Braces Encloses optional parameters. Select none, one or more {priority <0-255>|
than one. Do not enter the brace as part of the command. poll-interval <1-
65535>}
< > Angle brackets Encloses a numeric range, endpoints inclusive. Do not <0-65535>
enter the bracket as part of the command.
= Equal sign Separates the variable from explanatory text. Do not enter PROCESSID = <0-
the equal sign as part of the command. 65535>
3
ZebOS Command Line Interface Environment
Format Description
Command Name Describes the command, what the command does and when should it be used.
Command Mode Displays the name of the command mode in which this command is used.
Examples include Exec or Configure modes.
Example Displays an example of the command being executed and the complexities of
the command syntax.
Command Negation
Many commands can be negated using the no keyword. Depending on the command or the parameters, some
command negation can disable one feature or a feature for a specific ID, interface, address or other identifier.
However, some negation is for the base command only; thus, the negated form does not take a parameter.
4
ZebOS Command Line Interface Environment
Output Modifiers
Users can type the | (vertical bar character) to use output modifiers. For example:
ZebOS>show rsvp | ?
begin Begin with the line that matches
exclude Exclude lines that match
include Include lines that match
redirect Redirect output
Begin Parameter
The begin parameter displays the output beginning with the first line containing a token matching the input string
(everything typed after the begin token). For example:
ZebOS# show run | begin eth1
...skipping
interface eth1
ipv6 address fe80::204:75ff:fee6:5393/64
!
interface eth2
ipv6 address fe80::20d:56ff:fe96:725a/64
!
line con 0
login
!
end
Exclude Parameter
The exclude parameter excludes all lines of output that contain the input string. In the following output example, all
lines containing the word “include” are excluded:
ZebOS# show interface eth1 | exclude input
Interface eth1
Scope: both
Hardware is Ethernet, address is 0004.75e6.5393
index 3 metric 1 mtu 1500 <UP,BROADCAST,RUNNING,MULTICAST>
VRF Binding: Not bound
Label switching is disabled
No Virtual Circuit configured
Administrative Group(s): None
DSTE Bandwidth Constraint Mode is MAM
inet6 fe80::204:75ff:fee6:5393/64
output packets 4438, bytes 394940, dropped 0
5
ZebOS Command Line Interface Environment
Include Parameter
The include parameter includes only those lines of output that contain the input string. In the output below, all lines
containing the word “input” are included:
ZebOS# show interface eth1 | include input
input packets 80434552, bytes 2147483647, dropped 0, multicast packets 0
input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 1, missed 0
Redirect Parameter
The redirect parameter puts the lines of output into the indicated file.
ZebOS# show history | redirect /var/frame.txt
In addition, the output redirection token (>) allows the user to specify a target file for the lines of output.
ZebOS# show history >/var/frame.txt
Note: To modify the lines displayed for any Show command in this guide, use the | (vertical bar) output modifier token;
to save the output to a file, use the > (right arrow) output redirection token.
Command Modes
Commands available for each protocol separate into several modes (or nodes) and are arranged in a hierarchy. Each
mode has its own special commands.
Table 4: Command Modes
Name Description
Exec Mode Also called the View mode, this mode the first mode to appear after logging in to the CLI. It is a
base mode from where users can perform basic commands, such as show, exit, quit, help,
list, and enable.
Privileged Exec Mode Also called the Enable mode, it allows users to run additional basic commands, such as debug,
write (for saving and viewing the configuration) and show commands.
Configure Mode Also called Configure Terminal mode, it allows users to run configuration commands and to
serve as a gateway into the Interface, Router, Line, Route Map, Key Chain and
Address Family modes.
Interface Mode Is used to configure protocol-specific settings for a particular interface. Any attribute configured in
this mode overrides an attribute configured in the Router mode.
6
ZebOS Command Line Interface Environment
7
ZebOS Command Line Interface Environment
route-map enter the route-map mode and to permit or deny match/set operations
show ip protocols display the IP routing protocol process parameters and statistics
show user-priority display the default user priority associated with the layer2 interface
8
ZebOS Command Line Interface Environment
configure terminal enter the Configure Terminal mode. You must me in the Privilege Executive
mode to issue this command
copy running-config startup-config copy the current running configuration to the startup configuration file
9
ZebOS Command Line Interface Environment
show ip protocols display the IP routing protocol process parameters and statistics
show user-priority display the default user priority associated with the layer2 interface
10
ZebOS Command Line Interface Environment
max-fib-routes set the maximum number of FIB (forwarding information base) routes
11
ZebOS Command Line Interface Environment
route-map enter the route-map mode and to permit or deny match/set operations
service advanced-vty set the VTY session to Privileged Exec mode instead of the Exec mode (which
is the default)
12
CHAPTER 2 Common IMI Commands
This chapter provides a description, syntax, and examples of the common Integration Management Interface (IMI)
commands. It includes the following commands:
• banner on page 15
• configure terminal on page 16
• copy running-config startup-config on page 17
• disable on page 18
• enable on page 19
• enable password on page 20
• end on page 21
• help on page 22
• hostname on page 23
• password on page 24
• quit on page 25
• service advanced-vty on page 26
• service password-encryption on page 27
• service terminal-length on page 28
• show interface on page 29
• show process on page 31
• show running-config on page 32
• show running-config access-list on page 33
• show running-config as-path on page 34
• show running-config bgp on page 35
• show running-config community-list on page 36
• show running-config control-adjacency on page 37
• show running-config control-channel on page 38
• show running-config full on page 39
• show running-config interface on page 40
• show running-config interface IP on page 41
• show running-config interface IPv6 on page 42
• show running-config ip on page 43
• show running-config ipv6 on page 44
• show running-config key chain on page 45
• show running-config mpls on page 46
• show running-config prefix-list on page 47
• show running-config route-map on page 48
13
Common IMI Commands
14
Common IMI Commands
banner
Use the banner command to display the banner motive of the day on login. When using the banner command
through IMISH, you must write to memory using the write memory or write file command. If you have not written
to memory, the change made by this command (the new banner) is not available when you log into IMISH the next
time.
By default, the following banner is displayed on logging.
Hello, this is ZebOS(version 4.0051502-Main).
Command Syntax
banner motd default
no banner motd
Parameters
motd Sets the message of the day banner
LINE Specify a custom string.
default Specify a default string.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#banner motd default
ZebOS#configure terminal
ZebOS(config)#no banner motd
15
Common IMI Commands
configure terminal
Use the configure terminal command to enter the Configure command mode.
Command Syntax
configure terminal
Parameters
None
Command Mode
Privileged Exec mode
Example
The following example shows the use of the configure terminal command to enter the Configure command
mode (note the change in the command prompt).
ZebOS#configure terminal
ZebOS(config)#
16
Common IMI Commands
Command Syntax
copy running-config startup-config
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS#copy running-config startup-config
Building configuration...
[OK]
ZebOS#
17
Common IMI Commands
disable
Use this command from to exit the Privileged Exec mode and return to the Exec mode. This is the only command that
allows a user to go back to the Exec mode. Using the exit or quit command from the Privileged Exec mode ends the
session; they do not go back to the Exec mode.
Command Syntax
disable
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS#disable
ZebOS>
Related Commands
enable, end, exit
18
Common IMI Commands
enable
Use the enable command to enter the Privileged Exec command mode.
Command Syntax
enable
Parameters
None
Command Mode
Exec mode
Example
The following example shows the use of the enable command to enter the Privileged Exec mode (note the change in
the command prompt).
ZebOS>enable
ZebOS#
Related Commands
disable, exit, quit
19
Common IMI Commands
enable password
Use the enable password command to modify or create a password to be used when entering the Enable mode.
There are three methods to enable a password:
Plain Password
The plain password is a clear text string that appears in the configuration file as configured.
Encrypted Password
An encrypted password encrypts a password. First, use the enable password command to create a password.
Then, use the service encrypted-password command to encrypt the specified string. An encrypted
password does not display in the configuration file; instead, it displays the encrypted string.
Note: See service password-encryption on page 27 for more information on hidden passwords
Hidden Password
A hidden password also encrypts a password; however, you do not need the service password-encryption
command for this method. Use this method if you know the encrypted string of the plain text string that you want to
use as a password. The output in the configuration file displays only the encrypted string and not the text string
Note: When using the enable password command through IMISH, you must write to memory using the write
memory or write file command. If you have not written to memory, the change made by this command (the
new password) is not available when you log into IMISH the next time.
Use the no parameter to disable the password.
Command Syntax
enable password [8|LINE]
no enable password [LINE]
Parameters
8 Specify that a hidden password will follow.
line Specify the hidden enable password string.
Note: Password can be an alpha-numeric string up to 80-characters, including spaces. The string cannot begin with a
number.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#enable password mypasswd
ZebOS#configure terminal
ZebOS(config)#enable password 8 fU7zHzuutY2SA
Related Commands
service password-encryption
20
Common IMI Commands
end
Use the end command to return to the Privileged Exec command mode from any other advanced command mode.
Command Syntax
end
Parameters
None
Command Mode
All command modes
Example
The following example shows the use of the end command to return to the Privileged Exec mode directly from
Interface mode.
ZebOS#configure terminal
ZebOS(config)#interface eth0
ZebOS(config-if)#end
ZebOS#
Related Commands
exit, disable, enable
21
Common IMI Commands
help
Use the help command to display a description of the ZebOS help system.
Command Syntax
help
Parameters
None
Command Mode
All command modes
Example
This is the sample output from the help command:
ZebOS#help
ZebOS VTY provides advanced help feature. When you need help,
anytime at the command line please press '?'.
If nothing matches, the help list will be empty and you must backup
until entering a '?' shows the available options.
Two styles of help are provided:
1. Full help is available when you are ready to enter a
command argument (e.g. 'show ?') and describes each possible
argument.
2. Partial help is provided when an abbreviated argument is entered
and you want to know what arguments match the input
(e.g. 'show me?'.)
22
Common IMI Commands
hostname
Use this command to set or change the network server name. ZebOS daemons use this name in system prompts and
default configuration filenames. This command provides a hostname for login purposes, only. A hostname could be
added for each remote system with which the local router communicates and from which it requires authentication. The
other router must have a hostname entry for the local router. This entry must have the same password as the local
router.
This command is useful for defining host names for special privileges. For example, a hostname all requiring no
password could be created allowing the users to connect to general information without a password. Setting a
hostname using this command takes precedence over setting a hostname in the kernel. If you set the hostname using
the CLI, and then set the hostname in the kernel, the hostname set using the CLI remains.
Note: When using the hostname command through IMISH, you must write to memory using the write memory or
write file command. If you have not written to memory, the change made by this command (the new
hostname) is not available when you log into IMISH the next time.
Use the no parameter to disable this function.
Command Syntax
hostname WORD
no hostname WORD
Parameter
WORD This network name for a system.
Command Mode
All command modes
Example
The following example sets the hostname to IPI, and shows the change in the prompt:
ZebOS#configure terminal
ZebOS(config)#hostname IPI
IPI(config)#
Validation Commands
show running-config
23
Common IMI Commands
password
Use the password command to specify a network password.
Note: This command is unavailable to ZebOS Network Platform customers using the IMISH for CLI management.
Command Syntax
password [8|PLAIN|password]
no password [8|PLAIN|password]
Parameters
8 Specify that hidden password will follow.
PLAIN Specify the hidden enable password string.
password Specify a password. Password can be an alpha-numeric string up to 80-characters,
including spaces. The string cannot begin with a number.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#password 8 hiddenpassword
ZebOS(config)#password plainpassword
Related Commands
enable
24
Common IMI Commands
quit
Use the quit command to exit current mode and down to previous mode
Note: This command closes the IMI shell if you are in the Privilege mode.
Command Syntax
quit
Parameters
None
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#password 8 hiddenpassword
ZebOS(config)#password plainpassword
25
Common IMI Commands
service advanced-vty
Use this command to set multiple options to be listed when the Tab key is pressed after completing a command. This
feature applies to commands with more than one option.
Use the no parameter to set no options to be listed when the Tab key is pressed, after completing a command.
Command Syntax
service advanced-vty
no service advanced-vty
Parameters
None
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#service advanced-vty
26
Common IMI Commands
service password-encryption
Use this command to specify encryption of passwords. Encryption helps prevent observers from reading passwords.
Note: When using the service password-encryption command through IMISH, you must write to memory
using the write memory or write file command. If you have not written to memory, the change made by
this command (encryption) is not available when you log into IMISH the next time. See write file on page 62 for
more information.
Use the no parameter to disable this feature.
Note: Password can be an alpha-numeric string up to 80-characters, including spaces. The string cannot begin with a
number.
Command Syntax
service password-encryption
no service password-encryption
Parameters
None
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#enable password mypasswd
ZebOS(config)#service password-encryption
Validation Commands
enable password
27
Common IMI Commands
service terminal-length
Use this command to set the terminal length for VTY sessions.
Use the no parameter to disable this feature.
Command Syntax
service terminal-length <0-512>
no service terminal-length <0-512>
Parameters
<0-512> Number of lines of VTY (0 means no line control).
Command Mode
Configure mode
Example
In the following configuration, the terminal length for VTY sessions will be set to 60, making 60 the number of terminal
lines for any telnet session.
ZebOS#configure terminal
ZebOS(config)#service terminal-length 60
Validation Commands
show running-config
28
Common IMI Commands
show interface
Use this command to show the running system status and configuration for a specified interface.
Command Syntax
show interface [IFNAME]
Parameters
None
Command Mode
Exec modes
Examples
The following displays information on all interfaces:
ZebOS#show interface
Interface lo
Scope: both
Hardware is Loopback index 1 metric 1 mtu 16436 duplex-half arp ageing
timeout 25
<UP,LOOPBACK,RUNNING>
VRF Binding: Not bound
Label switching is disabled
No Virtual Circuit configured
Administrative Group(s): None
DSTE Bandwidth Constraint Mode is MAM
DHCP client is disabled.
inet 4.4.4.40/32 secondary
inet 127.0.0.1/8
VRRP Master of : VRRP is not configured on this interface.
inet6 ::1/128
input packets 31627, bytes 2076312, dropped 0, multicast packets 0
input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 0, missed 0
output packets 31627, bytes 2076312, dropped 0
output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0
collisions 0
Interface eth0
Scope: both
Hardware is Ethernet Current HW addr: 000e.0c83.3727
Physical:000e.0c83.3727 Logical:(not set)
index 2 metric 1 mtu 1500 duplex-full arp ageing timeout 25
<UP,BROADCAST,RUNNING,MULTICAST>
VRF Binding: Not bound
Label switching is disabled
No Virtual Circuit configured
Administrative Group(s): None
Bandwidth 100m
DSTE Bandwidth Constraint Mode is MAM
DHCP client is disabled.
inet 10.1.2.40/24 broadcast 10.1.2.255
VRRP Master of : VRRP is not configured on this interface.
inet6 fe80::20e:cff:fe83:3727/64
29
Common IMI Commands
30
Common IMI Commands
show process
Use this command to display information of ZebOS protocol daemon processes.
Command Syntax
show process
Parameters
None
Command Mode
Exec modes
Example
This is a sample show output of the show process command displaying information of a currently running process.
ZebOS#show process
PID NAME TIME FD
1 nsm 00:56:29 7
2 ripd 00:56:29 11
3 ripngd 00:56:29 12
4 ospfd 00:56:29 9
5 ospf6d 00:56:29 10
6 bgpd 00:56:29 14
9 isisd 00:56:29 8
31
Common IMI Commands
show running-config
Use this command to show the running system status and configuration.
Command Syntax
show running-config
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config
!
interface eth1
switchport
channel-group 1 mode active
lacp port-priority 1
!
interface eth2
ip address 172.21.70.119/25
shutdown
!
interface eth3
ip address 11.11.11.1/24
!
end
32
Common IMI Commands
Command Syntax
show running-config access-list
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config access-list
!
access-list abc remark annai
access-list abc deny any
access-list abd deny any
!
33
Common IMI Commands
Command Syntax
show running-config as-path [access-list]
Parameters
access-list Display an access list.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config as-path access-list
!
ip as-path access-list wer permit knsmk
!
34
Common IMI Commands
Command Syntax
show running-config bgp
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config bgp
!
35
Common IMI Commands
Command Syntax
show running-config community-list
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config community-list
!
ip community-list standard aspd permit internet
ip community-list expanded cspd deny ljj
ip community-list expanded cspd permit dcv
ip community-list expanded wde permit njhd
ip community-list expanded wer deny sde
36
Common IMI Commands
Command Syntax
show running-config control-adjacency [CANAME]
Parameter
CANAME Indicate the control adjacency name.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config control-adjacency
!
37
Common IMI Commands
Command Syntax
show running-config control-channel [CCNAME]
Parameter
CCNAME Indicate the control channel name.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config control-channel new-channel
!
38
Common IMI Commands
Command Syntax
show running-config full
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config full
!
no service password-encryption
!
interface lo
ip address 127.0.0.1/8
ipv6 address::1/128
!
interface eth0
ip address 10.92.0.16/24
ipv6 address fe80::202:b3ff:fea1:2159/64
!
interface eth1
ip address 20.10.10.54/24
ipv6 address fe80::200:5eff:fe00:101/64
ipv6 address fe80::202:b3ff:fea1:1567/64
ipv6 address fe80::204:76ff:fee6:6c1c/64
ip rip authentication string abcdefghijklmnop
ip router isis 1
isis circuit-type level-1
isis priority 80 level-1
!
interface eth2
ip address 192.168.0.127/24
ipv6 address fe80::204:76ff:fef1:e787/64
ip ospf authentication-key password
ip ospf hello-interval 10
ip ospf priority 2
ip ospf transmit-delay 100
!
39
Common IMI Commands
Command Syntax
show running-config interface (IFNAME) [bridge|dot1x|ip|ipv6|lacp|ldp|mstp|ospf
|rip|rpvst+|rstp|rsvp|stp]
Parameters
bridge Display bridge information.
dot1x Display IEEE 802.1X port-based access control.
ip Display Internet Protocol version 4 (IPv4) (see also show running-config interface IP on
page 41) information.
ipv6 Display Internet Protocol version 6 (IPv6) information (see also show running-config
interface IPv6 on page 42) information.
isis Display Intermediate System to Intermediate System (IS-IS) information.
lacp Display Link Aggregation Control Protocol (LACP) information.
ldp Display Label Distribution Protocol (LDP) information.
mstp Display Multiple Spanning Tree Protocol (MSTP) information.
ospf Display Open Shortest Path First (OSPF) information.
rip Display Routing Information Protocol (RIP) information.
rpvst+ Display Rapid Per VLAN Spanning Tree Protocol (RPVST) information.
rstp Display Rapid Spanning Tree Protocol (RSTP) information.
rsvp Display Resource Reservation Protocol (RSVP) information.
stp Display Spanning Tree Protocol (STP) information.
Command Mode
Privileged Exec mode
Example
ZebOS#show running-config interface eth1 bridge
!
interface eth1
switchport
bridge-group 1
switchport mode access
user-priority 3
traffic-class-table user-priority 2 num-traffic-classes 3 value 3 traffic-
class-table user-priority 7 num-traffic-classes 1 value 2 traffic-class-table
user-priority 7 num-traffic-classes 2 value 0 traffic-class-table user-
priority 7 num-traffic-classes 3 value 0 traffic-class-table user-priority 7
num-traffic-classes 4 value 0 traffic-class-table user-priority 7 num-traffic-
classes 5 value 0 traffic-class-table user-priority 7 num-traffic-classes 6
40
Common IMI Commands
Command Syntax
show running-config interface (IFNAME) ip [dvmrp|igmp|multicast|pim (dense-mode
|sparse-mode)]
Parameters
dvmrp Display Distance Vector Multicast Routing Protocol (DVMRP)
igmp Display Internet Group Management Protocol (IGMP)
multicast Display global IP multicast commands information.
pim Display Protocol Independent Multicast (PIM) information.
dense-mode Display PIM Dense Mode (PIM-DM) information.
sparse-mode Display PIM Sparse Mode (PIM-SM) information.
Command Mode
Privileged Exec mode
Example
ZebOS#show running-config interface eth1 ip dvmrp
!
interface eth1
switchport
41
Common IMI Commands
Command Syntax
show running-config interface (IFNAME) IPv6 [ospf|pim (dense-mode|sparse-mode)|rip]
Parameters
ospf Display Open Shortest Path First (OSPF) for IPv6 information.
pim Display Protocol Independent Multicast (PIM) for IPv6 information.
dense-mode Display PIM Dense Mode (PIM-DM) information.
sparse-mode Display PIM Sparse Mode (PIM-SM) information.
rip Display Routing Information Protocol (RIP) for IPv6 information.
Command Mode
Privileged Exec mode
Example
ZebOS#show running-config interface eth1 ipv6 ospf
!
interface eth1
switchport
42
Common IMI Commands
show running-config ip
Use this command to show the running system of IP configurations.
Command Syntax
show running-config IP [igmp (snooping)|mroute|multicast|pim (dense-mode|sparse-
mode)|route]
Parameters
igmp Display Internet Group Management Protocol (IGMP)
snooping Layer 2 Snooping
mroute Display static IP multicast route information.
multicast Display global IP multicast information.
pim Display Protocol Independent Multicast (PIM) information.
dense-mode Display PIM Dense Mode (PIM-DM) information.
sparse-mode Display PIM Sparse Mode (PIM-SM) information.
route Display static IP route information.
Command Mode
Privileged Exec mode
Example
ZebOS#show running-config interface eth1 ip multicast
!
ip multicast-routing
ip multicast route-limit 23
!
43
Common IMI Commands
Command Syntax
show running-config ipv6 (access-list|mroute|multicast|pim [dense-mode|sparse-
mode]|route)
Parameters
access-list Display access-list information.
mroute Display static IP multicast route information.
pim Display Independent Multicast (PIM) information.
dense-mode Display PIM Dense Mode (PIM-DM) information.
sparse-mode Display PIM Sparse Mode (PIM-SM) information.
prefix-list Display prefix-list information.
route Display static IP route information.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config ipv6 access-list
!
ipv6 access-list abc permit any
!
ZebOS#show running-config ipv6 pim sparse-mode
!
ipv6 pim accept-register list 1
ipv6 pim bsr-candidate lo0
!
44
Common IMI Commands
Command Syntax
show running-config key chain
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config key chain
!
key chain 12
key 2
key-string 234
!
key chain 123
key 3
key-string 345
!
45
Common IMI Commands
Command Syntax
show running-config mpls
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config mpls
!
mpls propagate-ttl
!
!
!
ZebOS#
46
Common IMI Commands
Command Syntax
show running-config prefix-list
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config prefix-list
!
ip prefix-list abc seq 5 permit any
ip prefix-list as description annai
ip prefix-list wer seq 45 permit any
!
47
Common IMI Commands
Command Syntax
show running-config route-map
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config route-map
!
route-map abc deny 2
match community 2
!
route-map abc permit 3
match route-type external type-2
set metric-type type-1
!
48
Common IMI Commands
Command Syntax
show running-config router [bgp|ipv6 (ospf|rip|vrrp)|isis|ldp|ospf|rip|rsvp|vrrp]
Parameters
bgp Display Border Gateway Protocol (BGP) information.
ipv6 Display Internet Protocol version 6 (IPv6) information.
ospf Display Open Shortest Path First (OSPF) information for IPv6.
rip Display Routing Information Protocol (RIP) information for IPv6.
vrrp Display Virtual Redundancy Routing Protocol (VRRP) information for IPv6.
isis Display Intermediate System to Intermediate System (IS-IS) information.
ldp Display Label Distribution Protocol (LDP) information.
ospf Display Open Shortest Path First (OSPF) information.
rip Display Routing Information Protocol (RIP) information.
rsvp Display Resource Reservation Protocol (RSVP) information.
vrrp Display Virtual Redundancy Routing Protocol (VRRP) information.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config router bgp
!
router bgp 1
network 172.1.0.0/16
neighbor 10.10.10.1 remote-as 1
!
49
Common IMI Commands
Command Syntax
show running-config router-id
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config router-id
!
router-id 3.3.3.3
!
50
Common IMI Commands
Command Syntax
show running-config switch [bridge|dot1x|gmrp|gvrp|lacp|mstp|radius-server|rstp
|stp|vlan]
Parameters
bridge Display Bridge group information.
dot1x Display 802.1x port-based authentication information.
gmrp Display GARP Multicast Registration Protocol (GMRP) information.
gvrp Display GARP VLAN Registration Protocol (GVRP) information.
lacp Display Link Aggregation Control Protocol (LACP) information.
mstp Display Multiple Spanning Tree Protocol (MSTP) information.
radius-server Display RADIUS server information.
rstp Display Rapid Spanning Tree Protocol (RSTP) information.
stp Display Spanning Tree Protocol (STP) information.
vlan Display values associated with a single VLAN.
Command Mode
Privileged Exec mode
Example
ZebOS#show running-config switch stp
!
bridge 6 ageing-time 45
bridge 6 priority 4096
bridge 6 max-age 7
51
Common IMI Commands
Command Syntax
show startup-config
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS#show startup-config
!
no service password-encryption
!
no service dhcp
hostname PC1
!
!
ip domain-lookup
!
mpls propagate-ttl
!
vrrp vmac enable
spanning-tree mode provider-rstp
no data-center-bridging enable
!
interface lo
ip address 127.0.0.1/8
ipv6 address ::1/128
no shutdown
!
52
Common IMI Commands
Command Syntax
show running-config te-link [TLNAME]
Parameters
TLNAME Display the TE link name
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config te-link new-te-123
!
53
Common IMI Commands
Command Syntax
show running-config virtual-router [WORD]
Parameters
WORD Display the virtual router name (maximum of 12 characters)
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config virtual-router xyz
!
54
Common IMI Commands
Command Syntax
show running-config vrf [WORD]
Parameters
WORD Display the VPN routing/forwarding instance name.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#show running-config vrf xyz
!
ip vrf xyz
description vrf
router-id 11.11.11.11
55
Common IMI Commands
show user-priority
Use this command to display the default user priority associated with the layer2 interface
Command Syntax
show user-priority interface [IFNAME]
Parameters
interface Display the interface information
Command Mode
Exec mode and Privileged Exec mode
Example
This is a sample output of the show users command:
56
Common IMI Commands
show user-priority-regen-table
Use this command to display the user priority to regenerated user priority mapping associated with the layer2 interface
Command Syntax
show user-priority-regen-table [interface (IFNAME)]
Parameters
interface Display the interface information
Command Mode
Exec mode and Privileged Exec mode
Example
This is a sample output of the show users command:
57
Common IMI Commands
show users
Use this command to display information about users logged on to a terminal.
Command Syntax
show users
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
This is a sample output of the show users command:
ZebOS#show users
58
Common IMI Commands
terminal length
Use the terminal length command to display the number of lines on a screen. Enter a value between 0 and 512 lines.
Enter zero for no pausing.
Use the no option to unset the number of lines on a screen.
Command Syntax
terminal length <0-512>
terminal no length <0-512>
Parameters
<0-512> Enter the number of lines on screen (0 for no pausing)
Command Mode
Exec mode and Privileged Exec mode
Examples
ZebOS>enable
ZebOS#terminal length 0
59
Common IMI Commands
terminal monitor
Use the terminal monitor command to display debugging output on a terminal. Use one of the optional parameters to
enable the display of debugging output for the Privileged Virtual Router (PVR) or VR user. When the command is used
without either of the optional parameters, it may be used by a PVR user or non-PVR user to display the debug output
on the terminal for the user local VR. When used with either parameter, it may be used only by a PVR user.
The no form of the command terminates the debug output on the terminal. Both the PVR and VR user can use this
command. In addition, the PVR user can cancel a debug output from a specific VR or all VRs.
Command Syntax
terminal monitor [WORD|all]
terminal no monitor [WORD|all]
Parameters
WORD (Optional) Used in the PVR context, and contains the VR name to be included in the
debugging session.
all (Optional) Used the PVR context to include all VR in a PVR debugging session.
Command Mode
Privileged Exec mode
Example
ZebOS#enable
ZebOS#terminal monitor
60
Common IMI Commands
username
Use the username command to establish a user name authentication.
The no form of the command to delete a user name authentication.
Command Syntax
username [WORD|privilege<0-15>|password|(8|PLAIN)]
no username [WORD]
Parameters
WORD User name.
password Specify a password.
privilege Specify a privilege level <0-15>.
8 Specify that hidden password will follow.
PLAIN Specify the hidden enable password string.
Note: Password can be an alpha-numeric string up to 80-characters, including spaces. The string cannot begin with a
number.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#username password password new 12345
61
Common IMI Commands
write file
Use the write memory command to write configuration data to a file.
Command Syntax
write file
Parameters
None
Command Mode
Privileged Exec mode
Example
The following is an output from the write terminal command displaying current configuration on the terminal.
ZebOS#write file
Building configuration...
ZebOS#
Related Commands
show running-config, write memory, write terminal
62
Common IMI Commands
write memory
Use the write memory command to write configuration data to a file.
Command Syntax
write memory
Parameters
None
Command Mode
Privileged Exec mode
Example
The following is an output from the write terminal command displaying current configuration on the terminal.
ZebOS#write memory
Building configuration...
[OK]
Related Commands
show-running-config, write file, write terminal
63
Common IMI Commands
write terminal
Use the write terminal command to display current configurations to the VTY terminal.
Command Syntax
write terminal
Parameters
None
Command Mode
Privileged Exec mode
Example
The following is an output from the write terminal command displaying current configuration on the terminal.
ZebOS#write terminal
Current configuration:
!
hostname ripd
password zebra
log stdout
!
debug rip events
debug rip packet
!
interface lo
!
interface eth0
ip rip send version 1 2
ip rip receive version 1 2
!
interface eth1
ip rip send version 1 2
ip rip receive version 1 2
!
!
router rip
network 10.10.10.0/24
network 10.10.11.0/24
redistribute connected
!
line vty
exec-timeout 0 0
Related Commands
show-running-config, write file, write memory
64
CHAPTER 3 IMI Shell Commands
This chapter provides a description, syntax, and examples of the IMI Shell commands. It includes the following
commands:
• do on page 66
• login on page 67
• logout on page 68
• mtrace on page 69
• mstat on page 70
• ping on page 71
• privilege on page 72
• start-shell on page 73
• show privilege on page 74
• telnet on page 75
• traceroute on page 76
65
IMI Shell Commands
do
Use this command to run any Exec mode or Privileged Exec mode command from the Configure mode.
Command Syntax
do (LINE)
Parameters
LINE Specify the command and its parameters.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS#(config)#do show interface
Interface lo
Hardware is Loopback index 1 metric 1 mtu 16436 duplex-half arp ageing
timeout 25
<UP,LOOPBACK,RUNNING>
VRF Binding: Not bound
Label switching is disabled
No Virtual Circuit configured
Administrative Group(s): None
DSTE Bandwidth Constraint Mode is MAM
inet 4.4.4.40/32 secondary
inet 127.0.0.1/8
inet6 ::1/128
Interface Gifindex: 3
Number of Data Links: 0
GMPLS Switching Capability Type:
Packet-Switch Capable-1 (PSC-1)
GMPLS Encoding Type: Packet
Minimum LSP Bandwidth 0
input packets 10026, bytes 730660, dropped 0, multicast packets 0
input errors 0, length 0, overrun 0, CRC 0, frame 0, fifo 0, missed 0
output packets 10026, bytes 730660, dropped 0
output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0
collisions 0
66
IMI Shell Commands
login
Use this command to set a password prompt before entering the configuration mode, and enable password checking.
Use the no login command allows users to connect directly to the Privileged Exec mode skipping the password
verification prompt. After using the no login command, if the user changes to the login command again, the system
uses the password used earlier, unless the user specifies a password in the configure mode.
Note: Password can be an alpha-numeric string up to 80-characters, including spaces. The string cannot begin with a
number.
Command Syntax
login [local]
no login [local]
Parameters
local Local password checking
Default
Enabled
Command Mode
Line mode
Examples
The following examples show the use of login and no login command. In this example, a password pass is set (in
configure mode) before using the login command.
ZebOS#configure terminal
ZebOS(config)#line vty 1
ZebOS(config-line)#no login
ZebOS#configure terminal
ZebOS#(config)#password pass
ZebOS#(config)#line vty 1
ZebOS#(config-line)#login local
67
IMI Shell Commands
logout
Use this command to exit from the ZebOS CLI.
Command Syntax
logout
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS>logout
[root@TSUP40 sbin]#
68
IMI Shell Commands
mtrace
Use this command to trace the path from a source to a destination branch for a multicast distribution tree. This
command is identical in function to the UNIX version of mtrace.
The trace request generated by the mtrace command is multicast to the multicast group, to find the last-hop router to
the specified destination. The trace then follows the multicast path from destination to source by passing the mtrace
request packet via unicast to each hop. Responses are unicast to the querying router by the first-hop router to the
source. If no arguments are entered, the router will interactively prompt you for them.
Command Syntax
mtrace [A.B.C.D|A.B.C.D|A.B.C.D|<1-255>]
Parameters
A.B.C.D Multicast-capable source IP address. This is a unicast address of the beginning of the
path to be traced.
A.B.C.D Unicast destination IP address. If omitted, the mtrace starts from the system at which the
command is typed.
A.B.C.D Multicast address of the group to be traced. The default address is 224.2.0.1 (group used
for multicast backbone [MBONE] audio). When address 0.0.0.0 is used, a weak mtrace is
invoked. The weak mtrace follows the reverse path forwarding (RPF) path to the source,
whether or not any router along the path has the multicast routing table state.
<1-255> TTL for the multicast trace request. This is the maximum number of hops to be traced on
the path from the destination to the source.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS5#mtrace 192.168.1.1 192.168.10.1 224.1.1.1
ZebOS5#mtrace
Source address: 192.168.1.1
Destination address: 192.168.10.1
Group address: 224.1.1.1
69
IMI Shell Commands
mstat
Use this command to display IP multicast packet rate and loss information. This command is identical in function to the
UNIX version of mtrace that reports packet rate and loss information.
If no arguments are entered, the router will interactively prompt you for them.
Command Syntax
mstat [A.B.C.D|A.B.C.D|A.B.C.D|<1-255>]
Parameters
A.B.C.D Multicast-capable source IP address. This is a unicast address of the beginning of the
path to be traced.
A.B.C.D Unicast destination IP address. If omitted, the mtrace starts from the system at which the
command is typed.
A.B.C.D Multicast address of the group to be traced. The default address is 224.2.0.1 (group used
for multicast backbone [MBONE] audio). When address 0.0.0.0 is used, a weak mtrace is
invoked. The weak mtrace follows the reverse path forwarding (RPF) path to the source,
whether or not any router along the path has the multicast routing table state.
<1-255> TTL for the multicast trace request. This is the maximum number of hops to be traced on
the path from the destination to the source.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS5#mstat 192.168.1.1 192.168.10.1 1.1.1.1 1
ZebOS5#mstat
Source address: 192.168.1.1
Destination address: 192.168.10.1
Group address: 224.1.1.1
70
IMI Shell Commands
ping
Use the ping utility to query another host (send echo messages).
Command Syntax
ping [WORD] (ethernet [mac|multicast|unicast]) (IP [IFNAME|vrf {NAME}]) (IPv6
[IFNAME|vrf {NAME}])
Parameters
WORD Specify the destination address or hostname. Use the form, A.B.C.D for IPv4 addresses,
or x:x::x:x for IPv6 addresses.
vrf Specify the VPN routing/forwarding instance.
Ethernet Specify the Ethernet type.
mac Specify the destination MAC address.
multicast Specify the send multicast frame.
unicast Specify the send unicast frame.
ip Specify the IP echo.
IFNAME Specify the name of the interface.
vrf Specify the VPN routing/forwarding instance.
NAME Specify the VPN Routing/Forwarding instance name.
ipv6 Specify the IP echo.
IFNAME Specify the name of the interface.
vrf Specify the VPN routing/forwarding instance.
NAME Specify the VPN Routing/Forwarding instance name.
Command Mode
Privileged Exec mode
Examples
ZebOS>ping 10.10.0.5
ZebOS>enable
ZebOS#ping ip 3ffe::4
71
IMI Shell Commands
privilege
Use this command to set a new command privilege level.
Use the no parameter with this command to disable the command privilege level.
Command Syntax
privilege level <0-15>
no privilege level <0-15>
Parameters
level Specify an assigned default privilege level for a line.
16 Specify the maximum privilege level for a line.
<1-15> Specify the default privilege level for a line.
Command Mode
Line mode
Example
ZebOS#configure terminal
ZebOS(config)#line vty 0 5
ZebOS(config-line)#privilege line 15
72
IMI Shell Commands
start-shell
Use this command to execute commands on the underlying kernel. For example, after using this command, you can
use Linux commands, if Linux is the underlying operating system.
Use the exit command to get back to the IMISH.
Command Syntax
start-shell
Parameters
None
Command Mode
Privileged Exec mode
Example
ZebOS#start-shell
[root@TSUP40 sbin]#exit
exit
ZebOS#
73
IMI Shell Commands
show privilege
Use this command to display the current privilege level set in the IMISH. The privilege level varies from 1-15.
Note: Currently, privilege levels 2-14 are undefined.
Command Syntax
show privilege
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS#show privilege
Current privilege level is 15
ZebOS#
74
IMI Shell Commands
telnet
Use this command to open a telnet session.
Command Syntax
telnet [WORD|PORT]
Parameters
WORD Specify the IP address or hostname of a remote system.
PORT Specify the TCP port number.
Command Mode
Privileged Exec mode
Example
ZebOS#telnet 2.2.2.2 2602
trying telnet 2.2.2.2 2602...
75
IMI Shell Commands
traceroute
Use this command to trace an IPv4 route to its destination.
Command Syntax
traceroute [WORD] [ethernet (mac|domain|level|bridge|vlan)] [ip (WORD)] [ipv6
(WORD)]
Parameters
WORD Specify the destination address or hostname. Use the form, A.B.C.D for IPv4 addresses,
or x:x::x:x for IPv6 addresses.
Ethernet Specify the Ethernet type.
mac Specify the MAC address of the remote MEP.
domain Specify the domain of the destination MEP.
level Specify the level to which remote MEP belong <0-7>.
bridge Specify the bridge group commands.
vlan Specify the primary VID of the MA.
IP Specify the IP echo.
WORD Specify the traceroute of the destination address or hostname.
IPv6 Specify the IP echo.
WORD Specify the traceroute of the destination address or hostname.
Command Mode
Privileged Exec mode
Example
ZebOS#traceroute 10.10.0.5
76
CHAPTER 4 VLOG Commands
This chapter provides a description, syntax, and examples for the Virtual Router Log (VLOG) commands. It includes
the following commands:
• log file on page 78
• reset log on page 79
• show vlog all on page 80
• show vlog clients on page 81
• show vlog terminals on page 82
• show vlog virtual-routers on page 83
77
VLOG Commands
log file
Use the log file command to enable logging a debug output to a file, either default or explicitly named. If a filename is
not specified, a default directory and a default file name is used. The default directory for all VR log files is /var/local/
ZebOS/log/<vr-name>. The default log file name is “<vr-name>-log”. For privileged VR the name “pvr” is used as a VR
name. A Privileged Virtual Router (PVR) user can also enter a global path and a different default – file name.
Note: In builds that do not include the VLOG daemon, the log configuration commands remains unchanged.
Use no optrion with this command to cancel writing to a specific log file.
Command Syntax
log file [FILENAME]
no log file [FILENAME]
Parameters
FILENAME Specify the log file name.
Command Mode
Configure router mode
Example
The first example results in a log file with a user-assigned log file path and log file name:
ZebOS#configure terminal
ZebOS(config)#log file my-log-file
ZebOS(config)#log file /root/peter/logs/pvr-log-file
78
VLOG Commands
reset log
Use this command to reset the current, open log file.
This command may only be used in the Privileged VR context.
Command Syntax
reset log [file]
Parameters
file Specify the log file name.
Command Mode
Privileged Exec mode
Example
ZebOS>enable
ZebOS#reset log file
79
VLOG Commands
Command Syntax
show vlog all
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS>enable
ZebOS#show vlog all
80
VLOG Commands
Command Syntax
show vlog clients
Parameters
None
Command Mode
Privileged Exec mode
Displayed Columns
The report columns show the following data:
• Name: Name of protocol module
• Id: Protocol module identifier
• MsgCnt: Number of log messages received from protocol module
• ConTime: Time the connection was established
• ReadTime: Time the last log message was received
Example
ZebOS>enable
ZebOS#show vlog clients
81
VLOG Commands
Command Syntax
show vlog terminals
Parameters
None
Command Mode
Privileged exec mode
Displayed Columns
The report columns show the following data:
• Type: Type of terminal
• Name: Device name
• FD: File descriptor identifier
• UserVR: Name of the Virtual Router where the user is logged in
• AllVRs: Indicates whether PVR user requested debug output from all VRs
• VRCnt: Number of VRs a terminal is attached
Example
ZebOS>enable
ZebOS#show vlog terminals
82
VLOG Commands
Command Syntax
show vlog virtual-routers
Parameters
None
Command Mode
Privileged exec mode
Displayed Columns
The report columns show the following data:
• VR-Name: Virtual router name
• VR-Id: Virtual router identifier
• PVR-Terms: Number of attached PVR terminals
• VR-Terms: Number of attached VR terminals
• LogFile: Name of VR log file (columns is empty if writing to a log file is disabled)
• CurSize: The log file current size
Example
ZebOS>enable
ZebOS#show vlog virtual-routers
83
VLOG Commands
84
CHAPTER 5 DHCP Commands
This chapter provides a description, syntax, and examples of the Dynamic Host Configuration Protocol (DHCP)
commands, including commands for the DHCP Client and the DHCP Server. It includes the following commands:
• default-router on page 86
• dns-server on page 87
• domain-name on page 88
• ip address dhcp on page 89
• ip dhcp pool on page 90
• lease on page 91
• network A.B.C.D/M on page 93
• network A.B.C.D on page 92
• range on page 94
• service dhcp on page 95
• show ip dhcp on page 96
• show service dhcp on page 97
85
DHCP Commands
default-router
Use this command to add a default router to the default router address list for a DHCP server pool.
Use the no parameter with this command to remove the router from the list.
Command Syntax
default-router [A.B.C.D]
no default-router [A.B.C.D]
Parameters
A.B.C.D Specify the IP address of the router.
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#default-router 10.10.0.35
86
DHCP Commands
dns-server
Use this command to add a DNS server to the list of DNS servers that the DHCP server passes to the clients.
Use the no parameter with this command to disable the effects of a command or set its defaults.
Command Syntax
dns-server [A.B.C.D]
no dns-server [A.B.C.D]
Parameters
A.B.C.D Specify the DNS server address to be added to the list.
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#dns-server 10.10.0.36
87
DHCP Commands
domain-name
Use this command to configure a domain name. The DHCP server can pass a domain-name to the DHCP clients that
connect to it.
Use the no parameter with this command to remove the domain name.
Command Syntax
domain-name [WORD]
no domain-name
Parameters
WORD Specify the domain name.
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#domain-name marketing
88
DHCP Commands
ip address dhcp
Use this command to enable a DHCP client on the current interface. This command specifies that the interface should
use the DHCP client to obtain its IP address from the DHCP server on its connected network.
Use the no parameter with this command to disable DHCP client on an interface.
Command Syntax
ip address dhcp [client-id (IFNAME)|hostname (WORD)]
no ip address dhcp [client-id (IFNAME)|hostname (WORD)]
Parameters
client-id Specify the interface name from which the MAC address is taken.
hostname Specify the hostname for this DHCP client. This domain name is supplied by a service
provider.
Command Mode
Interface mode
Examples
ZebOS#configure terminal
ZebOS(config)#interface eth0
ZebOS(config-if)#ip address dhcp client-id eth1 hostname ipi.com
ZebOS(config-if)#ip address dhcp hostname ipi.com
89
DHCP Commands
ip dhcp pool
Use this command to configure the DHCP address pool. This command enters the DHCP configuration mode for the
specified pool, hence, all commands executed before the next Exit command apply to this pool.
Use the no parameter with this command to delete a DHCP pool.
Command Syntax
ip dhcp pool [WORD]
no ip dhcp pool [WORD]
Parameters
WORD Specify the pool identifier.
Command Mode
Configure mode
Example
The administrator can create multiple DHCP server pools on devices with multiple interfaces. Such a device may act as
DHCP server on two interfaces to distribute different information to clients on the two different networks.
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool P2
ZebOS(dhcp-config)#network 11.11.0.0 255.255.255.0
ZebOS(dhcp-config)#dns-server 10.10.0.2
ZebOS(dhcp-config)#ip dhcp pool 2
ZebOS(dhcp-config)#lease 1 0 0
ZebOS(config)#service dhcp
90
DHCP Commands
lease
Use this command to set the expiration time for a leased address for the current DHCP pool. The default lease time is
1 day. When a pool is created, 1 0 0 is set by default. You can also set the lease to be infinite.
Use the no parameter with this command to turn off a lease.
Command Syntax
lease [<0-30>|<0-24>|<0-60>] (infinite)
lease [infinite]
no lease
Parameters
<0-30> Specify the number of days in the lease.
<0-24> Specify the number of hours in the lease.
<0-60> Specify the number of minutes in the lease.
infinite Specify that the lease is infinite.
Command Mode
DHCP mode
Examples
This example sets the lease to 2 full days:
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool default
ZebOS(dhcp-config)#network 11.11.0.0 255.255.255.0
ZebOS(dhcp-config)#dns-server 10.10.0.2
ZebOS(dhcp-config)#lease 1 0 0
ZebOS(dhcp-config)#ip dhcp pool 2
ZebOS(dhcp-config)#lease 1 0 0
ZebOS(dhcp-config)#service dhcp
This example sets an infinite lease:
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#lease infinite
91
DHCP Commands
network A.B.C.D
Use this command to configure an address pool network and mask in dot-decimal format.
Use the no parameter with this command to disable this command.
Command Syntax
network [A.B.C.D|A.B.C.D]
no network
Parameters
A.B.C.D Specify the IP subnet network number.
A.B.C.D Specify the IP subnet network mask.
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#network 3.3.3.3 255.255.0.0
92
DHCP Commands
network A.B.C.D/M
Use this command to configure an address pool network and mask in Classless Inter-Domain Routing (CIDR) format.
Use the no parameter with this command to disable this command.
Command Syntax
network [A.B.C.D/M]
no network
Parameters
A.B.C.D/M Specify the IP subnet network number and mask (for example, 10.0.0.0/8).
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#network 3.3.3.3/16
93
DHCP Commands
range
Use this command to add an address range to the DHCP pool. Addresses within the specified range are given to
DHCP clients that connect to this server.
Use the no parameter with this command to delete a range from the DHCP pool.
Command Syntax
range [A.B.C.D|A.B.C.D]
no range [A.B.C.D|A.B.C.D]
Parameters
A.B.C.D Specify the low address in range
A.B.C.D Specify the high address in range
Command Mode
DHCP mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip dhcp pool Pool1
ZebOS(dhcp-config)#range 10.10.0.5
94
DHCP Commands
service dhcp
Use this command to enable a DHCP server.
Use the no parameter with this command to disable the server.
Command Syntax
service dhcp
no service dhcp
Parameters
None
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service dhcp
95
DHCP Commands
show ip dhcp
Use this command to show all the running system DHCP data.
Command Syntax
show ip dhcp
show ip dhcp [pool (WORD)]
Parameters
pool Show DHCP address pool
WORD Set the pool identifier
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS#show ip dhcp
dhcp server disabled
dhcp pool list: Pool1 P2 2 default
ZebOS#
96
DHCP Commands
Command Syntax
show service dhcp
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
This command displays one of two messages for the enabled state of the DHCP service:
ZebOS#show ip dhcp pool
service dhcp disabled
ZebOS#
97
DHCP Commands
98
CHAPTER 6 DNS Commands
This chapter provides an alphabetized reference for the Domain Name Service (DNS) commands. It includes the
following commands:
• ip domain-list on page 100
• ip domain-lookup on page 101
• ip domain-name on page 102
• ip name-server on page 103
• show hosts on page 104
• show ip domain-list on page 105
• show ip domain-name on page 106
• show ip name-server on page 107
99
DNS Commands
ip domain-list
Use this command to add a domain to the DNS list.
Use the no parameter with this command to delete a domain from the list.
Command Syntax
ip domain-list [WORD]
no ip domain-list [WORD]
Parameters
WORD Specify the domain string name. For example, company.com
Command Mode
Configure mode
Examples
ZeboS#configure terminal
ZebOS(config)#ip domain-list ipi.com
100
DNS Commands
ip domain-lookup
Use this command to turn on the Domain Name Service (DNS).
Use the no parameter with this command to disable the Domain Name Service.
Command Syntax
ip domain-lookup
no ip domain-lookup
Parameters
None
Command Mode
Configure mode
Examples
ZeboS#configure terminal
ZebOS(config)#ip domain-lookup
101
DNS Commands
ip domain-name
Use this command to set the default domain name for the DNS.
Use the no parameter with this command to unset the default domain.
Command Syntax
ip domain-name [WORD]
no ip domain-name [WORD]
Parameters
WORD Specify the domain string name. For example, company.com
Command Mode
Configure mode
Examples
ZeboS#configure terminal
ZebOS(config)#ip domain-name company.com
102
DNS Commands
ip name-server
Use this command to add a name server to the DNS.
Use the no parameter with this command to remove the server.
Command Syntax
ip name-server [A.B.C.D]
no ip name-server [A.B.C.D]
Parameters
A.B.C.D Specify the IP address of the name server to add.
Command Mode
Configure mode
Examples
ZeboS#configure terminal
ZebOS(config)#ip name-server 123.70.0.23
103
DNS Commands
show hosts
Use this command to show the default domain.
Command Syntax
show hosts
Parameters
None
Command Mode
Exec mode and Privilege Exec mode
Example
The following is a sample output of this command displaying two name servers: 10.10.0.2 and 10.10.0.88.
ZebOS#show hosts
Default domain is ipinfusion.com
Domain list: ipi.com
Name/address lookup uses domain service
Name servers are 10.10.0.2 10.10.0.88
104
DNS Commands
show ip domain-list
Use this command to show running system data for the domain list for the DNS server.
Command Syntax
show ip domain-list
Parameters
None
Command Mode
Exec mode and Privilege Exec mode
Example
ZebOS#show ip domain-list
Domain 1: ipinfusion.com
105
DNS Commands
show ip domain-name
Use this command to show running system data for the default domain for DNS.
Command Syntax
show ip domain-name
Parameters
None
Command Mode
Exec mode and Privilege Exec mode
Example
ZebOS#show ip domain-name
Default domain: ipinfusion.com
106
DNS Commands
show ip name-server
Use this command to show the running system data for DNS servers.
Command Syntax
show ip name-server
Parameters
None
Command Mode
Exec mode and Privilege Exec mode
Example
This is a sample output of the show ip name-server command displaying a list of name servers:
ZebOS#show ip domain-server
Domain 1: ipinfusion.com
Nameservers:
10.10.0.123
10.10.0.124
107
DNS Commands
108
CHAPTER 7 NTP Commands
This chapter provides an alphabetized reference for each of the NTP (Network Time Protocol) commands. It includes
the following commands:
• ntp access-group on page 110
• ntp authenticate on page 111
• ntp authentication-key on page 112
• ntp broadcastdelay on page 113
• ntp master on page 114
• ntp peer on page 115
• ntp server on page 116
• ntp trusted-key on page 117
• show ntp associations on page 118
• show ntp status on page 119
109
NTP Commands
ntp access-group
Use this command to control access to NTP services. You can create an NTP access group, and apply a basic IP
access list to it.
Use the no command to remove this access.
Command Syntax
ntp access-group [peer|query-only|serve|serve-only] (<1-99>|<1300-1999>)
no ntp [peer|query-only|serve|serve-only]
Parameters
peer Allows time requests and NTP control queries, and allows the system to synchronize itself
to a system whose address passes the access list criteria.
query-only Allows only NTP control queries from a system whose address passes the access list
criteria.
serve Allows time requests and NTP control queries, but does not allow the system to
synchronize itself to a system whose address passes the access list criteria.
serve-only Allows only time requests from a system whose address passes the access list criteria.
<1-99> Specify a standard IP access list.
<1300-1999> Specify an expanded IP access list.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ntp access-group peer 1998
110
NTP Commands
ntp authenticate
Use this command to authenticate the associations with other systems for security purposes. This command enables
the NTP authentication feature.
Use the no command to remove authentication.
Command Syntax
ntp authenticate
no ntp authenticate
Parameters
None
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ntp authenticate
111
NTP Commands
ntp authentication-key
Use this command to define each of the authentication keys. Each key has a key number, a type, and a value.
Currently, the only key type supported is MD5.
Use the no command to remove authentication.
Command Syntax
ntp authentication-key [<1-4294967295>|md5 (WORD)]
no ntp authentication-key [<1-4294967295>|md5 (WORD)]
Parameters
<1-4294967295> Specify the key number.
md5 Specify MD5 authentication [WORD].
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ntp authentication-key 134343 md5 mystring
112
NTP Commands
ntp broadcastdelay
Use this command to set the estimated round-trip delay for broadcast packets.
Use the no command to remove configuration.
Command Syntax
ntp broadcastdelay <1-999999>
no ntp broadcastdelay
Parameters
<1-999999> Specify a broadcast delay in microseconds.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ntp broadcastdelay 23464
113
NTP Commands
ntp master
Use this command to make the system to be an authoritative NTP server, even if the system is not synchronized to an
outside time source.
Use the no command to remove configuration.
Command Syntax
ntp master <1-15>
no ntp master
Parameters
<1-15> Specify the stratum number.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ntp master 4
114
NTP Commands
ntp peer
Use this command to configure a peer association. An NTP association is a peer association if this system is willing to
either synchronize to the other system, or allow the other system to synchronize to it.
Use the no command to remove configuration.
Command Syntax
ntp peer [WORD] (key <1-4294967295>|prefer|version <1-4>)
no ntp peer [WORD]
Parameters
WORD Specify the IP address of the peer.
key Specify a peer authentication key <1-4294967295>.
prefer Specify to prefer this peer when possible.
version Specify an NTP version <1-4>.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ntp peer 10.10.0.23
ZebOS(config)#ntp peer 10.10.0.23 prefer version 4 key 1234536
115
NTP Commands
ntp server
Use this command to configure an NTP server. This means that system will synchronize to other system, but not vice
versa.
Use the no option with this command to remove an NTP server configuration.
Command Syntax
ntp server [WORD] (key <1-4294967295>|prefer|version <1-4>)
no ntp server [WORD]
Parameters
WORD Specify the IP address of the peer.
key Specify a peer authentication key <1-4294967295>.
prefer Specify to prefer this peer when possible.
version Specify an NTP version <1-4>.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ntp server 10.10.0.23
ZebOS(config)#ntp server 10.10.0.23 prefer version 4 key 1234536
116
NTP Commands
ntp trusted-key
Use this command to define a list of “trusted” authentication keys. If a key is trusted, this system will be ready to
synchronize to a system that uses this key in its NTP packets.
Use the no option with this command to remove a trusted-key authentication list.
Command Syntax
ntp trusted-key <1-4294967295>
no ntp trusted-key <1-4294967295>
Parameter
<1-4294967295> Specify the key number.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ntp trusted-key 234676
117
NTP Commands
Command Syntax
show ntp associations [detail]
Parameters
detail Display details of the output.
Command Mode
Exec mode and Privileged Exec mode
Example
This is a sample output of the show ntp associations command displaying the status of NTP associations.
ZebOS#show ntp associations
10.10.0.23 configured, sane, valid, leap_sub, stratum 16
ref ID INIT, time 00000000.00000000 ( 6:28:16.000 UTC Thu Feb 7 2036)
our mode active, peer mode unspec, our poll intvl 6, peer poll intvl 10
root delay 0.00 msec, root disp 0.00, reach 000,
delay 0.00 msec, offset 0.0000 msec, dispersion 0.00
precision 2**-20,
org time d050957c.9cd5b2d0 (17:14:36.612 UTC Fri Oct 1 2010)
rcv time d051012e.79aad601 ( 0:54: 6.475 UTC Sat Oct 2 2010)
xmt time d051012e.798fa376 ( 0:54: 6.474 UTC Sat Oct 2 2010)
filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filtoffset = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filterror = 16000.00 16000.00 16000.00 16000.00 16000.00 16000.00
16000.0
0 16000.00
118
NTP Commands
Command Syntax
show ntp status
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
This is a sample output of the show ntp status commands displaying information about the Network Time Protocol.
ZebOS#show ntp status
Clock is synchronized, stratum 6, reference is 127.127.1.0
actual frequency is 51.2010 Hz, precision is 2**-15
reference time is c389fad6.a9a8ac5c (13:42:46.662 UTC Wed Dec 16 2003)
clock offset is 0.000 msec, root delay is 0.000 msec
root dispersion is 11201.000 msec,
ZebOS#
119
NTP Commands
120
CHAPTER 8 NAT/ Firewall Commands
This chapter provides an alphabetized reference for the Network Address Translation (NAT)/Firewall commands. It
includes the following commands:
• clear ip nat translations on page 122
• ip access-group on page 123
• ip nat on page 124
• ip nat inside destination list on page 125
• ip nat inside destination static on page 126
• ip nat inside source list on page 127
• ip nat inside source static on page 128
• ip nat outside destination list on page 129
• ip nat outside destination static on page 130
• ip nat outside source list on page 131
• ip nat outside source static on page 132
• ip nat pool on page 133
• ip nat translation on page 134
• show ip filter translations on page 135
• show ip nat pool on page 136
• show ip nat translations on page 137
• show virtual-servers on page 138
• virtual-server on page 139
121
NAT/ Firewall Commands
Command Syntax
clear ip nat translations [*]
Parameter
* Specify to clear all NAT translations.
Command Mode
Privileged Exec mode
Example
ZebOS#clear ip nat translations *
122
NAT/ Firewall Commands
ip access-group
Use this command to set the access-group in a Broadcom platform. This command configures an access list to filter
incoming, outgoing, or forwarded packets.
Use the no parameter with this command to disable the IP access group.
Command Syntax
ip access-group [WORD] (forward|in|out)
no ip access-group [WORD] (forward|in|out)
Parameters
WORD Specify an access list name.
forward Specify to filter forwarded packets.
in Specify to filter incoming packets.
out Specify to filter outgoing packets.
Command Mode
Interface mode
Example
ZebOS#configure terminal
ZebOS(config)#interface eth0
ZebOS(config-if)#ip access-group list1 out
123
NAT/ Firewall Commands
ip nat
Use this command to configure either a NAT inside interface or NAT outside interface.
Use the no parameter with this command to negate this effect.
Command Syntax
ip nat inside
no ip nat inside
Parameters
inside Configure a NAT inside interface
outside Configure a NAT outside interface
Command Mode
Interface mode
Examples
ZebOS#configure terminal
ZebOS(config)#interface eth0
ZebOS(config-if)#ip nat inside
ZebOS#configure terminal
ZebOS(config)#interface eth0
ZebOS(config-if)#ip nat outside
124
NAT/ Firewall Commands
Command Syntax
ip nat inside destination list [WORD|pool (WORD)]
no ip nat inside destination list [WORD|pool (WORD)]
Parameters
WORD Specify an access list name in a string
pool Specify an address pool name in a string
WORD Set an address pool name
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat inside destination list L1 pool P1
125
NAT/ Firewall Commands
Command Syntax
ip nat inside destination static [A.B.C.D|A.B.C.D]
no ip nat inside destination static [A.B.C.D|A.B.C.D]
Parameters
A.B.C.D Specify an inside local IP address.
A.B.C.D Specify an inside global IP address.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat inside destination static 10.10.0.5 20.10.0.5
126
NAT/ Firewall Commands
Command Syntax
ip nat inside source list [WORD|pool (WORD)]
no ip nat inside source list [WORD|pool (WORD)]
Parameters
WORD Specify an access list name in a string
pool Specify an address pool name in a string
WORD Set an address pool name
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat inside source list list1 pool pool2
127
NAT/ Firewall Commands
Command Syntax
ip nat inside source static [A.B.C.D|A.B.C.D]
no ip nat inside source static [A.B.C.D|A.B.C.D]
Parameters
A.B.C.D Specify an inside local IP address.
A.B.C.D Specify an inside global IP address.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat inside source static 10.10.1.5 10.10.2.5
128
NAT/ Firewall Commands
Command Syntax
ip nat outside destination list [WORD|pool (WORD)]
no ip nat outside destination list [WORD|pool (WORD)]
Parameters
WORD Specify an access list name in a string
pool Specify an address pool name in a string
WORD Set an address pool name
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat outside destination list list2 pool pool3
129
NAT/ Firewall Commands
Command Syntax
ip nat outside destination static [A.B.C.D|A.B.C.D]
ip nat outside destination static [tcp (A.B.C.D|<0-65535>|A.B.C.D|<0-65535>)]
ip nat outside destination static [udp (A.B.C.D|<0-65535>|A.B.C.D|<0-65535>)]
no ip nat outside destination static [A.B.C.D|A.B.C.D]
no ip nat outside destination static [tcp (A.B.C.D|<0-65535>|A.B.C.D|<0-65535>)]
no ip nat outside destination static [udp (A.B.C.D|<0-65535>|A.B.C.D|<0-65535>)]
Parameters
A.B.C.D Specify an outside global IP address.
A.B.C.D Specify an outside local IP address.
udp Specify UDP.
tcp Specify TCP.
A.B.C.D Specify an outside global IP address.
<0-65535> Specify a destination port number.
A.B.C.D Specify an outside local IP address.
<0-65535> Specify a translated destination port number.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat outside destination static 123.123.0.123 234.234.0.234
130
NAT/ Firewall Commands
Command Syntax
ip nat outside source list [WORD]|pool [WORD]
no ip nat outside source list [WORD|pool (WORD)]
Parameters
WORD Specify an access list name in a string
pool Specify an address pool name in a string
WORD Set an address pool name
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ip nat outside source list list2 pool pool3
131
NAT/ Firewall Commands
Command Syntax
ip nat outside source static [A.B.C.D|A.B.C.D]
no ip nat outside source static [A.B.C.D|A.B.C.D]
Parameters
A.B.C.D Specify an inside local IP address.
A.B.C.D Specify an inside global IP address.
Command Mode
Configure mode
Examples
ZebOS#configure terminal
ZebOS(config)#ip nat outside source static 123.123.0.123 234.234.0.234
132
NAT/ Firewall Commands
ip nat pool
Use this command to define a pool of global addresses to be allocated, as needed.
Use the no parameter with this command to remove a specific pool.
Command Syntax
ip nat pool (WORD) [A.B.C.D|A.B.C.D|A.B.C.D]
no ip nat pool (WORD) [A.B.C.D|A.B.C.D|A.B.C.D]
Parameters
WORD Specify the name of the IP address pool.
A.B.C.D Specify the start IP address of the pool.
A.B.C.D Specify the ending IP address of the pool.
A.B.C.D Specify the net mask of the pool.
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ip nat pool pool2 1.1.1.1 1.1.1.1 1.1.1.1
133
NAT/ Firewall Commands
ip nat translation
Use this command to define a pool of global addresses to be allocated, as needed.
Use the no parameter with this command to remove a specific pool.
Command Syntax
ip nat translation [icmp-timeout <0-536870>|tcp-fin-timeout <0-536870>|tcp-timeout
<0-536870>|time-out <0-536870>|udp-timeout <0-536870>]
no ip nat translation [icmp-timeout|tcp-fin-timeout|tcp-timeout|time-out|udp-
timeout]
Parameters
icmp-timeout Specify an ICMP time-out value for NAT translations.
<0-536870> Specify timeout for NAT ICMP flows in seconds
tcp-fin-timeout Specify a TCP FIN time-out value for translations
<0-536870> Specify timeout for NAT TCP flows in seconds
tcp-timeout Specify a TCP time-out value for translations
<0-536870> Specify timeout for NAT TCP flows in seconds
time-out Specify a Generic time-out value for NAT translations
<0-536870> Specify timeout value for translations in seconds
udp-timeout Specify a UDP time-out value for translations
<0-536870> Specify timeout for NAT UDP flows in seconds
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#ip nat translation icmp-timeout 55555
134
NAT/ Firewall Commands
Command Syntax
show ip filter translations
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS#show ip filter translations
Codes: ACL - Access List Name, P - Permit, D - Deny,
Proto - Protocol, SA - Source Address,
DA - Destination address, SP - Source port,
DP - Destination port,
Path - in(INPUT)/out(OUTPUT)/forward(FORWARD).
Interface(Path) ACL P/D Proto SA SP DA DP
eth0 (in) inside P tcp 14.14.0.145/24 all all all
135
NAT/ Firewall Commands
Command Syntax
show ip nat pool [WORD]
Parameters
WORD Display the name of the IP address pool.
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS#show ip nat pool
136
NAT/ Firewall Commands
Command Syntax
show ip nat translations
show ip nat translations [inside (destination|source)]
show ip nat translations [outside (destination|source)]
show ip nat translations timeouts
Parameters
inside Specify to display inside NAT translations
outside Specify to display outside NAT translations
destination Specify to display the destination information
source Specify to display the source information
timeouts Specify to display the time-outs for NAT Translations
Command Mode
Exec mode and Privileged Exec mode
Examples
The following command displays general NAT translations:
ZebOS#show ip nat translations
Src(S)/Dst(D) Inside-global Inside-Local Outside-global Outside-local ACL-
name NAT-pool
S 3.3.3.3 2.2.2.2 --- ---
The following command displays outside destination translations from an outside source:
ZebOS#show ip nat translations outside source
Src(S)/Dst(D) Inside-global Inside-Local Outside-global Outside-local ACL-
name NAT-pool
S --- --- 6.6.6.6 7.7.7.7
The following command displays time-outs for NAT translations:
ZebOS#show ip nat translations timeouts
Time-out Value
======== =====
%Generic time-out 600
%ICMP time-out 30
%UDP time-out 30
%TCP time-out 432000
%TCP FIN time-out 120
137
NAT/ Firewall Commands
show virtual-servers
Use this command to show running system information for virtual servers.
Command Syntax
show virtual-servers
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Example
ZebOS#show virtual-servers
Port Public-port Private-IP Private-port Description
tcp 5000 10.55.0.2 8080 webserver
138
NAT/ Firewall Commands
virtual-server
Use this command to configure a virtual server.
Command Syntax
virtual-server [tcp|udp] (<0-65535>|A.B.C.D|<0-65535>|WORD)
no virtual-server [tcp|udp] (<0-65535>|A.B.C.D|<0-65535>|WORD)
Parameters
tcp Configure a TCP server.
udp Configure a UDP server.
<0-65535> Specify the public port number for the virtual server.
A.B.C.D Specify the private IP address.
<0-65535> Specify the private port number for the virtual server.
WORD Specify the virtual server name.
Command Mode
Configure mode
Example
ZebOS#configure mode
ZebOS(config)#virtual-server tcp 5000 14.14.0.120 80 httpserver2
139
NAT/ Firewall Commands
140
CHAPTER 9 PPPoE Commands
This chapter provides an alphabetized reference for the Point-to-Point over Ethernet (PPPoE) commands. It includes
the following commands:
• disable on page 142
• enable on page 143
• interface on page 144
• ip mtu on page 145
• pppoe password on page 146
• pppoe username on page 147
• service pppoe on page 148
• show pppoe on page 149
141
PPPoE Commands
disable
Use the disable command to disable PPPoE.
Command Syntax
disable
Parameters
None
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service PPPOE
ZebOS(config-pppoe)#disable
142
PPPoE Commands
enable
Use this command to enable the PPPoE command mode.
Note: Set the interface and the PPPoE username and password before using this command.
Command Syntax
enable
Parameters
None
Command Mode
PPPoE Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service PPPOE
ZebOS(config-pppoe)#enable
143
PPPoE Commands
interface
Use this command to select an interface on which to configure point-to-point.
Use the no command to set the interface back to its default level.
Command Syntax
interface (IFNAME) [point-to-point]
no interface (IFNAME) [point-to-point]
Parameters
IFNAME Specify the name of the interface.
point-to-point Configure a point-to-point Interface
Command Mode
PPPoE Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service pppoe
ZebOS(config-pppoe)#interface eth0 point-to-point
ZebOS(config-if)#
144
PPPoE Commands
ip mtu
Use this command to set the Maximum Transmission Unit (MTU), or the size of the largest transmissible packet.
Use the no command to set the MTU back to its default level.
Command Syntax
ip mtu <576-1492>
no ip mtu
Parameters
<576-1492> Specify an MTU range.
Note: PPPoE headers yields an MTU of 1500.
Default
Default is 1492.
Command Mode
PPPoE Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service pppoe
ZebOS(config-pppoe)#ip mtu 1300
ZebOS(config)#service pppoe
ZebOS(config-pppoe)#no ip mtu
145
PPPoE Commands
pppoe password
Use this command to set a PPPoE password.
Command Syntax
pppoe password [WORD]
Parameters
WORD Specify a password used for login.
Command Mode
PPPoE Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service pppoe
ZebOS(config-pppoe)#pppoe password ipi123
146
PPPoE Commands
pppoe username
Use this command to set a PPPOE user name.
Command Syntax
pppoe username [WORD]
Parameters
WORD Specify a username for login.
Command Mode
PPPoE Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service pppoe
ZebOS(config-pppoe)#pppoe username ipi
147
PPPoE Commands
service pppoe
Use this command to enable the PPPoE client. This interface should be connected to a PPPoE server, for example a
DSL connection.
Use the no parameter with this command to disable the service.
Command Syntax
service pppoe
no service pppoe
Parameters
None
Command Mode
Configure mode
Example
ZebOS#configure terminal
ZebOS(config)#service pppoe
148
PPPoE Commands
show pppoe
Use this command to data about the PPPOE subsystem.
Command Syntax
show pppoe
Parameters
None
Command Mode
Exec and Privileged Exec mode
Example
The following is an output of this command displaying information about the PPPoE subsystem:
ZebOS#show pppoe
PPPOE Disabled.
ip mtu 1300
ZebOS#
149
PPPoE Commands
150
Index
Symbols login 24
match as-path 24
, meaning in command syntax notation 3 password 24
, meaning in command syntax notation 3 route-map 26
(), meaning in command syntax notation 3 service advanced-vty 26
|, meaning in command syntax notation 3 service password-encryption 27
service terminal-length 28
A set aggregator 29
write terminal 64
abbreviated commands 2 common commands
access-class 15 see ZebOS NSM Command Reference
access-group, ip 123 access-list
access-list banner motd
see ZebOS NSM Command Reference clear ip prefix-list
angle brackets, meaning in command syntax notation 3 configure terminal
copy running-config startup-config
B disable
enable
banner 15 enable password
banner motd
end
see ZebOS NSM Command Reference
begin 5 exit
braces, meaning in command syntax notation 3 help
hostname
ip prefix-list
C ipv6 access-list
clear ip prefix-list ipv6 prefix-list
see ZebOS NSM Command Reference line-vty
command abbreviation 2 list
command abbreviations 2 log file
command completion 2 log record-priority
command description format 4 log sysout
command line errors 2 log trap
command line help 1 login
command line interface
quit
syntax 2
command negation 4 route-map
command reference primer service advanced-vty
typographic conventions 3 service password-encryption
Commands Common to Protocols service terminal-length
access-class 15 set aggregator
banner 15 show access-list
configure terminal 16 show cli
copy running-config startup-config 17 show history
disable 18 show ip prefix-list
enable 19
show list
enable password 20
end 21 show route-map
help 22 show running-config
hostname 23 show startup-config
ip remote-address 24 show version
line vty 24 terminal length
Index - 1
Index
Index - 2
Index
Index - 3
Index
Index - 4