Cisco ASR 5000 Series

To Next Page

To Previous Page

An SNMP trap (starTestModeEntered) is generated whenever a user enters CLI test-commands mode.Important

ASR 5500 System Administration Guide, StarOS Release 21.4

114

System Security

Configuration Mode cli test-commands

Main Page

About this Guide29
Conventions Used29
Related Documentation30
Contacting Customer Support31
System Management Overview33
Chapter34
Terminology35
Logical Interfaces36
AAA Servers37
Trusted Builds38
How the System Selects Contexts39
ASR 5500 System Administration Guide, Staros Release 21.440
ASR 5500 System Administration Guide, Staros Release 21.441
Context Selection for Subscriber Sessions42
Understanding Configuration Files43
ASR 5500 System Administration Guide, Staros Release 21.444
IP Address Notation45
Alphanumeric Strings46
ASR 5500 System Administration Guide, Staros Release 21.447
Quoted Strings48
ASR 5500 Configuration49
The Quick Setup Wizard50
ASR 5500 System Administration Guide, Staros Release 21.451
ASR 5500 System Administration Guide, Staros Release 21.452
ASR 5500 System Administration Guide, Staros Release 21.453
ASR 5500 System Administration Guide, Staros Release 21.454
ASR 5500 System Administration Guide, Staros Release 21.455
Using the CLI for Initial Configuration56
ASR 5500 System Administration Guide, Staros Release 21.457
Configuring System Administrative Users58
Configuring the System for Remote Access59
ASR 5500 System Administration Guide, Staros Release 21.460
Configuring SSH Options61
SSH Host Keys62
Specifying SSH Encryption Ciphers63
Generating SSH Keys64
Authorizing SSH User Access65
SSH User Login Authentication66
Secure Session Logout67
SSH Client Login to External Servers68
Setting Preferred Authentication Methods69
Generating SSH Client Key Pair70
Enabling NETCONF71
ASR 5500 System Administration Guide, Staros Release 21.472
ASR 5500 System Administration Guide, Staros Release 21.473
Configuring a Second Management Interface74
Configuring System Timing75
Verifying and Saving Your Clock and Time Zone Configuration76
Configuring NTP Servers with Local Sources77
Verifying the NTP Configuration78
Configuring SF Boot Configuration Pause79
Configuring CLI Confirmation Prompts80
Requiring Confirmation for Specific Exec Mode Commands81
Configuring System Administrative Users82
Configuring Context-Level Administrative Users83
Configuring Context-Level Administrators84
Configuring LI Administrators85
Verifying Context-Level Administrative User Configuration86
Configuring Local-User Administrative Users87
Updating Local-User Database88
Provisioning Lawful Intercept89
Restricting User Access to a Specified Root Directory90
Configuring an SFTP Root Directory91
Configuring TACACS+ for System Administrative Users92
User Account Requirements93
Configuring TACACS+ AAA Services94
Configuring TACACS+ for Non-Local VPN Authentication95
Separating Authentication Methods96
Disable TACACS+ Authentication at the Context Level97
Limit Console Access for AAA-Based Users98
Configuring a New Chassis Key Value99
Quick Setup Wizard100
ASR 5500 System Administration Guide, Staros Release 21.4101
ASR 5500 System Administration Guide, Staros Release 21.4102
Configuring MIO/UMIO/MIO2 Port Redundancy Auto-Recovery103
Verifying Port Redundancy Auto-Recovery104
Verifying Card Configurations105
LAG and Master Port106
Multiple Switches with L2 Redundancy107
Preferred Slot108
Minimum Links109
Redundancy Options110
Faster Data Plane Convergence111
Chapter112
MIO Demux Restrictions113
Configuration114
Chapter115
Requesting an Exclusive-Lock116
Effect of Config Lock on URL Scripts117
Saving a Configuration File118
Show Administrators Command119
ASR 5500 System Administration Guide, Staros Release 21.4120
Management Settings121
Configuring ORBEM Client and Port Parameters122
Verifying ORBEM Parameters123
ASR 5500 System Administration Guide, Staros Release 21.4124
ASR 5500 System Administration Guide, Staros Release 21.4125
SNMP Support126
Verifying SNMP Parameters127
Controlling SNMP Trap Generation128
Verifying and Saving Your Configuration129
Chapter130
Synchronizing File Systems131
ASR 5500 System Administration Guide, Staros Release 21.4132
System Interfaces and Ports133
Viewing and Verifying Contexts134
Creating an Interface135
Viewing and Verifying Port Configuration136
Vlans137
ASR 5500 System Administration Guide, Staros Release 21.4138
System Security139
MIO Synchronization140
Secure Password Encryption141
Support for ICSR Configurations142
Modifying Intercepts143
User Access to Operating System Shell144
Exec Mode Cli Test-Commands145
ASR 5500 System Administration Guide, Staros Release 21.4146
Secure System Configuration File147
Feature Description148
Validate the Digital Signature149
Enable or Disable Signature Verification150
Software Management Operations151
Understanding the Boot.sys File152
Synchronizing the File System153
Copying Files154
Applying Pre-Existing CLI Configuration Files155
Viewing CLI Configuration and Boot.sys Files156
Configuring the Boot Stack157
ASR 5500 System Administration Guide, Staros Release 21.4158
Adding a New Boot Stack Entry159
Configuring the Boot Network160
Configuring Boot Network Delay Time161
Verify Free Space on the /Flash Device162
Transfer Staros Image to /Flash163
Downgrading from Release 20.0164
Configure a Message of the Day Banner165
Synchronize File Systems166
Verify the Running Software Version167
New System License Keys168
Adding License Keys to Configuration Files169
License Expiration Behavior170
Management Card Replacement and License Keys171
Local-User Account Suspensions172
Smart Licensing173
Smart Software Licensing174
Cisco Smart Software Manager175
Software Tags and Entitlement Tags176
Configuring Smart Licensing177
Monitoring and Troubleshooting Smart Licensing178
ASR 5500 System Administration Guide, Staros Release 21.4179
ASR 5500 System Administration Guide, Staros Release 21.4180
Monitoring the System181
ASR 5500 System Administration Guide, Staros Release 21.4182
Monitoring ASR 5500 Hardware Status183
ASR 5500 System Administration Guide, Staros Release 21.4184
Clearing Statistics and Counters185
ASR 5500 System Administration Guide, Staros Release 21.4186
Bulk Statistics187
Configuring Communication with the Collection Server188
Configuring Optional Settings189
Configuring a Separate Bulkstats Config File190
Verifying Your Configuration191
Saving Your Configuration192
Clearing Bulk Statistics Counters and Information193
Data Types194
ASR 5500 System Administration Guide, Staros Release 21.4195
Bulk Statistics Event Log Messages196
Feature Summary and Revision History197
System Log Types198
Configuring Event Logging Parameters199
Configuring Event Log Filters200
ASR 5500 System Administration Guide, Staros Release 21.4201
Global Configuration Mode Filtering202
Configuring Syslog Servers203
Specifying Facilities204
ASR 5500 System Administration Guide, Staros Release 21.4205
ASR 5500 System Administration Guide, Staros Release 21.4206
ASR 5500 System Administration Guide, Staros Release 21.4207
ASR 5500 System Administration Guide, Staros Release 21.4208
ASR 5500 System Administration Guide, Staros Release 21.4209
ASR 5500 System Administration Guide, Staros Release 21.4210
ASR 5500 System Administration Guide, Staros Release 21.4211
ASR 5500 System Administration Guide, Staros Release 21.4212
Configuring Trace Logging213
Viewing Logging Configuration and Statistics214
Configuring and Viewing Crash Logs215
Configuring Software Crash Log Destinations216
Viewing Abridged Crash Log Information Using the CLI217
Reducing Excessive Event Logging218
Configuring Log Source Thresholds219
Saving Log Files220
ASR 5500 System Administration Guide, Staros Release 21.4221
ASR 5500 System Administration Guide, Staros Release 21.4222
ASR 5500 System Administration Guide, Staros Release 21.4223
ASR 5500 System Administration Guide, Staros Release 21.4224
ASR 5500 System Administration Guide, Staros Release 21.4225
ASR 5500 System Administration Guide, Staros Release 21.4226
ASR 5500 System Administration Guide, Staros Release 21.4227
ASR 5500 System Administration Guide, Staros Release 21.4228
Event Severities229
ASR 5500 System Administration Guide, Staros Release 21.4230
Troubleshooting231
Licensing Issues232
ASR 5500 System Administration Guide, Staros Release 21.4233
Checking the Leds on the MIO Card234
MIO Active LED States235
MIO Redundancy LED States236
MIO Busy LED States237
MIO – Interface Activity LED States238
DPC Run/Fail LED States239
DPC Active LED States240
DPC Redundancy LED States241
FSC Run/Fail LED States242
FSC Active LED States243
FSC Drive N Activity LED States244
Checking the Leds on the SSC245
SSC Active LED States246
SSC Redundancy LED States247
SSC System Service LED States248
Switching Mios249
Migrating a DPC250
Initiate a Card Halt251
Verifying Network Connectivity252
Using the Traceroute or Traceroute6 Command253
Viewing IP Routes254
Using the System Diagnostic Utilities255
Using the Protocol Monitor for a Specific Subscriber256
ASR 5500 System Administration Guide, Staros Release 21.4257
Generating an SSD258
ASR 5500 System Administration Guide, Staros Release 21.4259
ASR 5500 System Administration Guide, Staros Release 21.4260
Feature Information261
Feature Description262
Configuring the Hexdump Module263
ASR 5500 System Administration Guide, Staros Release 21.4264
Configuring the Hexdump File Parameters265
ASR 5500 System Administration Guide, Staros Release 21.4266
ASR 5500 System Administration Guide, Staros Release 21.4267
Enabling or Disabling Hexdump268
Monitoring and Troubleshooting PCAP Trace269
Show { Hexdump-Module | Cdr } File-Space-Usage270
Show Hexdump-Module Statistics271
ASR 5500 System Administration Guide, Staros Release 21.4272
ASR 5500 System Administration Guide, Staros Release 21.4273
ASR 5500 System Administration Guide, Staros Release 21.4274
Chapter275
Accessing the Boot CLI276
Enter CLI Mode277
Boot Using a Specified Configuration File278
Access Control Lists279
Understanding Acls280
ASR 5500 System Administration Guide, Staros Release 21.4281
Rule Order282
Configuring Action and Criteria for Subscriber Traffic283
Verifying the ACL Configuration284
ASR 5500 System Administration Guide, Staros Release 21.4285
Applying the ACL to an Interface286
Verifying the ACL Configuration on an Interface287
Applying an ACL to All Traffic Within a Context288
Applying an ACL to a RADIUS-Based Subscriber289
Applying an ACL to an Individual Subscriber290
Applying an ACL to the Subscriber Named Default291
Verifying the ACL Configuration to the Subscriber Named Default292
Applying an ACL to Service-Specified Default Subscriber293
Applying a Single ACL to Multiple Subscribers294
Applying an ACL to Multiple Subscriber Via Apns295
Verifying the ACL Configuration to Apns296
Overview297
Configuring Congestion Control298
Configuring Service Congestion Policies299
Enabling Congestion Control Redirect Overload Policy300
ASR 5500 System Administration Guide, Staros Release 21.4301
ASR 5500 System Administration Guide, Staros Release 21.4302
Routing Policies303
Creating IP Prefix Lists304
Creating Route Maps305
Adding Static Routes to a Context306
OSPF Version 2 Overview307
Basic Ospfv2 Configuration308
Confirming OSPF Configuration Parameters309
Enabling Ospfv6 over a Specific Interface310
BGP-4 Routing311
Configuring BGP312
BGP Communities and Extended Communities313
Setting the Community Attribute314
Setting the Extended Community Attribute315
Configurable BGP Route Advertisement Interval for ICSR316
ASR 5500 System Administration Guide, Staros Release 21.4317
Confirming BGP Configuration Parameters318
Overview of BFD Support319
Configuring a BFD Context320
Configuring BFD for Single Hop321
Scaling of BFD322
Enabling BFD on OSPF Interfaces323
Enable Primary Chassis BFD Monitoring324
Enable BFD Multihop Fall-Over325
Ip Routev6 Command326
Overview327
Saving the Configuration328
ASR 5500 System Administration Guide, Staros Release 21.4329
ASR 5500 System Administration Guide, Staros Release 21.4330
Vlans331
Overlapping IP Address Pool Support – GGSN332
APN Support – PDN Gateway (P-GW)333
Configuring Subscriber VLAN Associations334
Verify the Subscriber Profile Configuration335
ASR 5500 System Administration Guide, Staros Release 21.4336
ASR 5500 System Administration Guide, Staros Release 21.4337
ASR 5500 System Administration Guide, Staros Release 21.4338
BGP MPLS Vpns339
MPLS-CE Connected to PE340
Overview341
ASR 5500 System Administration Guide, Staros Release 21.4342
Ipv6 Support for BGP MPLS Vpns343
Sample Configuration344
ASR 5500 System Administration Guide, Staros Release 21.4345
VPN-Related CLI Commands346
ASR 5500 System Administration Guide, Staros Release 21.4347
ASR 5500 System Administration Guide, Staros Release 21.4348
ASR 5500 System Administration Guide, Staros Release 21.4349
ASR 5500 System Administration Guide, Staros Release 21.4350
Content Service Steering351
Configuring Internal Content Service Steering352
Applying an ACL to an Individual Subscriber (Optional)353
ASR 5500 System Administration Guide, Staros Release 21.4354
Session Recovery355
ASR 5500 System Administration Guide, Staros Release 21.4356
ASR 5500 System Administration Guide, Staros Release 21.4357
Additional ASR 5500 Hardware Requirements358
Enabling Session Recovery359
Disabling the Session Recovery Feature360
Viewing Recovered Session Information361
Recovery Control Task Statistics362
Show Rct Stats Command363
ASR 5500 System Administration Guide, Staros Release 21.4364
Interchassis Session Recovery365
ASR 5500 System Administration Guide, Staros Release 21.4366
Interchassis Communication367
Show Commands368
AAA Monitor369
ASR 5500 System Administration Guide, Staros Release 21.4370
ICSR Operation371
ASR 5500 System Administration Guide, Staros Release 21.4372
ASR 5500 System Administration Guide, Staros Release 21.4373
Chassis Initialization374
Configuring ICSR375
Configuring the Service Redundancy Protocol (SRP) Context376
Configuring SRP Context Parameters377
SRP Redundancy, AAA and Diameter Guard Timers378
DSCP Marking of SRP Messages379
Allow Non-Volte Traffic During ICSR Switchover380
ASR 5500 System Administration Guide, Staros Release 21.4381
Allow All Data Traffic382
Optimization of Switchover Control Outage Time383
Configuring NACK Generation for SRP Checkpoint Messaging Failures384
Selective Disabling of NACK Messaging385
Verifying SRP Configuration386
Configuring BGP Router and Gateway Address387
Modifying the Destination Context for ICSR388
Verifying BGP Configuration in Destination Context389
Configuring Subscriber State Management Audit Process390
Updating the Operating System391
ASR 5500 System Administration Guide, Staros Release 21.4392
ASR 5500 System Administration Guide, Staros Release 21.4393
ASR 5500 System Administration Guide, Staros Release 21.4394
ASR 5500 System Administration Guide, Staros Release 21.4395
Both ICSR Systems396
Standby ICSR System397
Performing BGP Checks398
Updating the Configuration File399
Waiting for Session Synchronization400
Completing the Software Update401
Fallback Procedure402
Support Data Collector403
Configuring SDR Collection404
Collecting and Storing the SDR Information405
Using Sdrs to Diagnose Problems407
Configuration Commands (Global Configuration Mode)408
Exec Mode Commands409
Engineering Rules411
Packet Data Network (PDN) Interface Rules412
Subscriber Rules415
Access Control List (ACL) Engineering Rules416
Staros Tasks417
Primary Task Subsystems418
Controllers and Managers419
Subsystem Tasks420
High Availability Subsystem421
Resource Manager Subsystem422
Network Processing Unit Subsystem424
Session Subsystem426
Platform Processes435
Management Processes438
NETCONF and Confd441
Overview442
Configuring Confd444
NETCONF Protocol Configuration Mode445
Netconf Notifications Events446
Rest Auth-Policy447
Rest Hostname448
Verifying the Configuration449
Clear Confdmgr Confd Cdb456
YANG Models457
Confd Examples458
Bulkstats459
Exec CLI Model461
CLI Based YANG Model for ECS Commands462
Seeding and Synchronizing the CDB463
CDB Maintenance464
Save Configuration <Url> Confd465
Overview of Checkpointing467
Ggsn_Apn ID Mapping468
Vpnmgr_Id Mapping469
Uncategorized470
DCCA Category471
Sess_Uchkpt_Cmd_Acs_Gx_Li_Info472
Sess_Uchkpt_Cmd_Del_Acs_Sess_Info473
Sess_Uchkpt_Cmd_Dynamic_Chrg_Del_Qg_Info474
Sess_Uchkpt_Cmd_Dynamic_Rule_Info475
Sess_Uchkpt_Cmd_Update_Epdg_Peer_Addr476
Firewall/Ecs Category477
GGSN Category478
Sess_Uchkpt_Cmd_Ggsn_Update_Stats479
Gx Interface Category480
Sess_Uchkpt_Cmd_Gr_Update_Nat_Realms481
Sess_Uchkpt_Cmd_Nat_Sip_Alg_Contact_Ph_Info482
P-GW Category483
Sess_Uchkpt_Cmd_Pgw_Ubr_Mbr_Info484
Sess_Uchkpt_Cmd_Pgw_Update_Pdn_Common_Param485
Sess_Uchkpt_Cmd_Acs_Accounting_Type_Qci_Rf_With_Fc486
S6B Interface Category487
Sess_Uchkpt_Cmd_Cgw_Update_Bearer_Qos488
Sess_Uchkpt_Cmd_Samog_Acct_Start_Info489
Sess_Uchkpt_Cmd_Samog_Gtpv1_Update_Pdn_Info490
Sess_Uchkpt_Cmd_Samog_Li_Prov_Info491
Cisco Secure Boot507
Secure Boot Overview508

Table of Contents

Other manuals for Cisco ASR 5000 Series

Related product manuals