Silver Peak Command Line Interface Reference Guide

1 Silver PeakCommand line Interface Reference Guide SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, and TrademarksSilver peak Command line Interface Reference Reference GuideDate: November 2019 Copyright 2019 Silver peak Systems, Inc. All rights reserved. Information in this document is subject to change at any time. Use of this documentation is restricted as specified in the End User License Agreement. No part of this documentation can be reproduced, except as noted in the End User License Agreement, in whole or in part, without the written consent of Silver peak Systems, Notification The following are trademarks of Silver peak Systems, Inc.: Silver peak SystemsTM, the Silver peak logo, Network MemoryTM, Silver peak NX-SeriesTM, Silver peak VX-SeriesTM, Silver peak VRX-SeriesTM, Silver peak Unity EdgeConnectTM, and Silver peak OrchestratorTM. All trademark rights reserved. All other brand or product names are trademarks or registered trademarks of their respective companies or and Disclaimers THIS DOCUMENTATION IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

2 Silver peak SYSTEMS, INC. ASSUMES NO RESPONSIBILITY FOR ERRORS OR OMISSIONS IN THIS DOCUMENTATION OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS DOCUMENTATION. REFERENCES TO CORPORATIONS, THEIR SERVICES AND PRODUCTS, ARE PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED. IN NO EVENT SHALL Silver peak SYSTEMS, INC. BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER, INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE OF THIS DOCUMENTATION. THIS DOCUMENTATION MAY INCLUDE TECHNICAL OR OTHER INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN; THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THE DOCUMENTATION. Silver peak SYSTEMS, INC. MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS DOCUMENTATION AT ANY peak Systems, De La Cruz BoulevardSanta Clara, CA (toll-free in USA)+ 2019bySilverPeakSystems, product and technical support, contact Silver peak Systems at either of the following: (toll-free in USA)+ re dedicated to continually improving the usability of our products and documentation.

3 If you have suggestions or feedback for our documentation, send an e-mail to If you have comments or feedback about the Interface , send an e-mail to SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, and Trademarks2 Support3 Using the Command line Interface11 CLI Modes12 User EXEC Mode12 Privileged EXEC Mode13 Global Configuration Mode14 User Privilege Levels15 Monitor15 Administrator15 User Names16 Passwords17 Naming Objects18 Understanding the Command Syntax19 Syntax Helper19 Command History19 Conventions Used in this Manual20 Typographical Conventions20 Syntax Notation20 Using the Command line -Editing Keys21 Configuring DB-9 Console Access to the Appliance22 Administration Commands23aaa authentication login default24aaa authorization map26arp28boot system29clear30cli32configuration35email 39email send-test41excess-flow42file debug-dump43file job upload45file stats46file tcpdump47file upload cancel48help49image boot51image install52image upgrade53job54job execute56license57 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems.

4 Disk62system eclicense63system firmware64system passthru-to-sender65system peer-list66tacacs-server67tca69terminal7 3username75web77write79 Configuration Commands81access-list82IP Address and Netmasks84 Using Deny85active-flows87application88applica tion-group90banner login92banner motd93bgp94bridge97cdp98cifs signing delegation domain99clock set101clock timezone102cluster104configure terminal106disable107dns cache108enable109enable password110exit112flow-export113flow-red irection115hostname116iflabel117interfac e cdp118interface dhcp119interface inbound-max-bw120interface ip address121interface label123interface lan-if124interface mac address125interface mtu126interface outbound-max-bw127 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, pass-through128interface security-mode129interface shutdown130interface speed-duplex131interface tunnel admin132interface tunnel alias133interface tunnel bind-tunnel134interface tunnel control-packet135interface tunnel create137interface tunnel gre-protocol139interface tunnel ipsec140interface tunnel max-bandwidth142interface tunnel min-bandwidth143interface tunnel mode144interface tunnel mtu146interface tunnel nat-mode147interface tunnel packet148interface tunnel peer-name150interface tunnel revert151interface tunnel tag-name152interface tunnel threshold153interface tunnel traceroute155interface tunnel udp-flow156interface tunnel udp-port157interface virtual158interface vrrp160interface wan-if163ip datapath route164ip default-gateway166ip domain-list168ip host169ip mgmt-ip170ip name-server171ip route172ip-tracking174nat-map176nat-map activate179nat-map comment180nat-map match181nat-map modify-priority184nat-map set185no

5 Nat-map187no opt-map188no qos-map189no route-map190ntp191ntpdate193opt-map194op t-map activate196opt-map comment197opt-map match198 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, set202overlay206preposition ftp209qos-map211qos-map activate213qos-map comment214qos-map match215qos-map modify-priority219qos-map set220route-map222route-map activate224route-map comment225route-map match226route-map modify-priority230route-map set231saas234shaper inbound236shaper outbound238snmp-server241snmp-server user v3244ssl auth-certificate246ssl builtin-signing248ssl cert-substitution249ssl host-certificate250ssl signing-certificate252ssl subs-certificate254subnet255system arp-table-size257system auto-ipid258system auto-mac-configure259system auto-policy-lookup260system auto-subnet261system auto-syn263system auto-tunnel264system auto-tunnel allow265system bandwidth266system bonding267system bypass268system contact270system disk encryption271system dpc272system hostname273system igmp-snooping274system int-hairpin275system location276system mode277system nat-all-inbound280system nat-all-outbound281system

6 Network-memory282system registration283system router284 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, routing286system smb-signing288system ssl-ipsec-override289traffic-class290wcc p291 Monitoring Commands295monitor296show aaa297show access-list298show alarms300show application302show application-builtin305show application-group306show arp308show banner309show bgp310show bootvar311show bridge312show cdp314show cifs signing delegation316show cli317show clock319show cluster320show configuration321show email323show excess-flow325show files326show flow-debug328show flow-export329show flow-redirection330show hosts331show iflabels332show image334show interfaces336show interfaces cdp338show interfaces pass-through340show interfaces security343show interfaces tunnel344show interfaces virtual347show interfaces vrrp348show ip349show ip-tracking351show jobs353show licenses354show log355show log audit358show log-files360show log-list matching362show logging363 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems.

7 Memory366show nat-map367show nat statistics369show ntp370show opt-map371show overlay375show overlay-common377show pass-through378show preposition380show qos-map381show radius384show route-map385show running-config388show selftest389show shaper391show snmp393show ssh395show ssl397show stats398show stats tunnel400show subif403show subnet404show system406show tacacs409show tca410show tech-support413show terminal414show tunnel415show usernames418show users419show version421show vlan423show vrrp424show wccp426show web429show whoami430 Alarm Commands431alarms432logging434logging facility436logging files437logging local439logging trap441 Troubleshooting Commands443debug generate dump444flow-debug445hping2447 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, packet description (new, unstable)450mtr452ping455selftest459slog in461ssh client global466ssh client user468ssh server470tcpdump472tcptraceroute477tech- support create job481telnet482traceroute485 SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, the Command line InterfaceThis document provides details of the Command syntax for Silver peak 's VXOA software.

8 This document does not provide feature descriptions or explanations of the technologies. For information about the various features and technologies supported by Silver peak physical and virtual appliances, see the Silver peak Appliance Manager Operator s Guide . SilverPeakCommandLineInterfaceReferenceG uideCopyright 2019bySilverPeakSystems, ModesThis section describes the following three Command modes that the CLI uses for the Silver peak NX Series appliances:User EXEC Mode Privileged EXEC ModeGlobal Configuration ModeBeing in a particular Command mode determines which commands you may execute. To display a list of the Command that are available to you, enter that Command mode and type ? (a question mark).User EXEC ModeWhen you first log in to a Silver peak appliance, you are in the User EXEC mode. The User EXEC mode provides access to commands for non-configuration tasks, such as checking the appliance status. When you are in this mode, the following prompt displays: <appliance> > where appliance is the name of the appliance on which you logged the User EXEC mode, you have access to the following commands: cliConfigure CLI shell optionsenableEnter enable modeexitLog out of the CLInoNegate or clear certain configuration optionspingSend ICMP echo requests to a specified hostshowDisplay system configuration or statisticssloginLog into another system securely using sshtelnetLog into another system using telnetterminalSet terminal parameterstracerouteTrace the route packets take to a destinationwccpConfigure WCCPS ilverPeakCommandLineInterfaceReferenceGu ideCopyright 2019bySilverPeakSystems, EXEC ModeThe Privileged EXEC mode provides access to all the commands you could execute in User EXEC mode, as well as several additional commands.

9 Also, from this mode, you can enter Global Configuration mode. Most of the commands that the Privileged EXEC mode makes available are one-time commands, such as show commands, which show the current configuration status, and clear commands, which clear counters or interfaces. To enter the Privileged EXEC mode, type enable to log in as privileged user, which displays the following prompt: <appliance> # where appliance is the name of the appliance on which you logged the Privileged EXEC mode, you access to the following commands: clearReset certain statistics or clear cachescliConfigure CLI shell optionsconfigureEnter configuration modedebugDebugging commandsdisableLeave enable modeemailConfigure e-mail and event notification via e-mailexitLog out of the CLIfileManipulate files on diskimageManipulate system software imagesjobConfigure scheduled jobsloggingConfigure event loggingnoNegate or clear certain configuration optionsntpdateSet system clock once from a remote server using NTPpingSend ICMP echo requests to a specified hostrebootReboot or shut down the systemshowDisplay system configuration or statisticssloginLog into another system securely using sshsystemConfigure system level informationtcpdumpDisplay packets on a networktelnetLog into another system using telnetterminalSet terminal parameterstracerouteTrace the route packets take to a destinationSilverPeakCommandLineInterfac eReferenceGuideCopyright 2019bySilverPeakSystems.

10 The running configuration to persistent storageGlobal Configuration ModeThe Global Configuration mode allows you to make changes to the running configuration. If you later save the configuration, these commands are stored across appliance reboots. To enter the Global Configuration mode, you must first enter the Privileged EXEC mode and then type configure terminal at the prompt. When you press Enter, the following prompt displays: <appliance> (config) # where appliance is the name of the appliance on which you logged Global Configuration mode provides access to all CLI commands, including those available to the User EXEC and Privileged EXEC must have an Administrator user privilege level to access the Global Configuration leave Global Configuration mode, you can use the Command :<appliance> (config) # no configureSilverPeakCommandLineInterfaceR eferenceGuideCopyright 2019bySilverPeakSystems, Privilege LevelsThe CLI has two user privilege levels, which determine the CLI modes you may enter and the commands you can execute.