Cisco Nexus 7000 Series

To Next Page

To Previous Page

Means reader be careful. In this situation, you might do something that could result in equipment damage

or loss of data.

Caution

Cisco Nexus 7000 Series Security Command Reference

xxiii

Preface

Document Conventions

Main Page

Default Chapter3
- Table of Contents3
- Document Conventions21
- Related Documentation24
- Documentation Feedback25
- Obtaining Documentation and Submitting a Service Request25
- Absolute29
- Accept-Lifetime31
- Access-Class33
- Action35
- Arp Access-List37
- Authentication (LDAP)39
- Aaa Accounting Default41
- Aaa Accounting Dot1X43
- Aaa Authentication Cts Default Group45
- Aaa Authentication Dot1X Default Group47
- Aaa Authentication Eou Default Group49
- Aaa Authentication Login Ascii-Authentication51
- Aaa Authentication Login Chap Enable52
- Aaa Authentication Login Console53
- Aaa Authentication Login Default55
- Aaa Authentication Login Error-Enable57
- Aaa Authentication Login Invalid-Username-Log58
- Aaa Authentication Login Mschap Enable59
  - Aaa Authentication Login Mschapv2 Enable60
  - Aaa Authentication Rejected61
  - Aaa Authorization Commands Default63
  - Aaa Authorization Config-Commands Default65
  - Aaa Authorization Cts Default Group67
  - Aaa Authorization Ssh-Certificate69
  - Aaa Authorization Ssh-Publickey71
  - Aaa Group Server Ldap73
  - Aaa Group Server Radius75
  - Aaa Group Server Tacacs76
  - Aaa User Default-Role77
C Commands79
- Cipher Suite82
- Clear Access-List Counters84
- Clear Accounting Log86
- Clear Copp Statistics87
- Clear Cts Cache88
- Clear Cts Policy89
- Capture Session90
- Cts Dot1X91
- Class (Policy Map)93
- Class-Map Type Control-Plane95
- Clear Aaa Local User Blocked97
- Clear Ldap-Server Statistics98
- Clear Mac Access-List Counters99
- Clear Port-Security101
- Clear Cts Role-Based Counters103
- Clear Dot1X104
- Clear Eou105
- Clear Hardware Rate-Limiter107
- Clear Ip Arp Inspection Log110
- Clear Ip Access-List Counters111
- Clear Ip Arp Inspection Statistics Vlan113
- Clear Ip Device Tracking115
- Clear Ip Dhcp Relay Statistics117
- Clear Ip Dhcp Snooping Binding118
- Clear Ipv6 Access-List Counters120
- Clear Ipv6 Dhcp Relay Statistics122
- Clear Ipv6 Dhcp-Ldra Statistics123
- Clear Vlan Access-List Counters124
- Conf-Offset126
- Copp Copy Profile128
- Copp Profile130
- Crllookup132
- Crypto Ca Authenticate134
- Crypto Ca Crl Request136
- Clear Ldap-Server Statistics138
- Clear Mac Access-List Counters139
- Clear Port-Security141
- Clear Radius-Server Statistics143
- Clear Ssh Hosts144
- Clear Tacacs-Server Statistics145
- Clear User146
- Cts L3 Spi (Global)147
- Cts L3 Spi (Interface)149
- Crypto Ca Enroll151
- Crypto Ca Export153
- Crypto Ca Import155
- Crypto Ca Lookup158
- Crypto Ca Remote Ldap Crl-Refresh-Time160
- Crypto Ca Remote Ldap Server-Group161
- Crypto Ca Test Verify162
- Crypto Ca Trustpoint163
- Crypto Cert Ssh-Authorize165
- Crypto Certificatemap Mapname167
- Cts Cache Enable168
- Cts Device-ID169
- Cts Role-Based Sgt-Map171
- Cts Sgt173
  - Cts L3 Spi (Global)174
  - Cts L3 Spi (Interface)176
  - Cts L3 Spi (Interface)178
  - Cts Manual180
  - Cts Refresh Environment-Data182
  - Cts Refresh Role-Based-Policy183
  - Cts Rekey184
  - Cts Role-Based Access-List185
  - Cts Role-Based Counters Enable187
  - Cts Role-Based Detailed-Logging189
  - Cts Role-Based Enforcement191
  - Cts Role-Based Monitor193
  - Cts Role-Based Policy Priority-Static195
  - Cts Role-Based Sgt196
  - Cts Sxp Allow Default-Route-Sgt198
  - Cts Sxp Connection Peer199
  - Cts Sxp Default Password202
  - Cts Sxp Default Source-Ip204
  - Cts Sxp Enable205
  - Cts Sxp Listener Hold-Time206
  - Cts Sxp Mapping Network-Map208
  - Cts Sxp Node-ID209
  - Cts Sxp Reconcile-Period211
  - Cts Sxp Retry-Period213
  - Cts Sxp Speaker Hold-Time215
D Commands217
- Dot1X Max-Reauth-Req219
- Dot1X Max-Req221
- Dot1X Pae Authenticator223
- Dot1X Port-Control225
- Dot1X Radius-Accounting227
- Dot1X Re-Authentication (EXEC)228
- Dot1X Re-Authentication (Global Configuration and Interface Configuration)229
- Dot1X System-Auth-Control231
- Dot1X Timeout Quiet-Period232
- Dot1X Timeout Ratelimit-Period234
- Dot1X Timeout Re-Authperiod236
- Dot1X Timeout Server-Timeout238
- Dot1X Timeout Supp-Timeout240
- Dot1X Timeout Tx-Period242
- Deadtime244
- Delete Ca-Certificate246
- Delete Certificate247
- Delete Crl249
- Deny (ARP)250
- Deny (Ipv4)254
- Deny (Ipv6)269
- Deny (MAC)285
- Deny (Role-Based Access Control List)288
- Description (Identity Policy)290
- Description (User Role)292
- Destination Interface294
- Device296
- Device-Role298
- Dot1X Default300
- Dot1X Host-Mode301
- Dot1X Initialize303
- Dot1X Mac-Auth-Bypass304
E Commands305
- Encrypt Pause-Frame306
- Encryption Decrypt Type6308
- Encryption Delete Type6309
- Enable310
- Enable Cert-DN-Match312
- Enable Secret314
- Enable User-Server-Group316
- Encryption Re-Encrypt Obfuscated318
- Enrollment Terminal319
- Eou Allow Clientless320
- Eou Default321
- Eou Initialize322
- Eou Logging324
- Eou Max-Retry326
- Eou Port328
- Eou Ratelimit329
- Eou Revalidate (EXEC)331
- Eou Revalidate (Global Configuration and Interface Configuration)333
- Eou Timeout335
F Commands341
- Feature (User Role Feature Group)342
- Feature Cts343
- Feature Dhcp345
- Feature Dot1X347
- Feature Eou348
- Feature Ldap349
- Feature Mka351
- Feature Password Encryption Aes353
- Feature Port-Security354
- Feature Privilege356
- Feature Scp-Server358
- Feature Sftp-Server359
- Feature Ssh360
- Feature Tacacs361
- Feature Telnet362
- Filter363
- Fips Mode Enable365
- Fragments367
G Commands369
H Commands373
- Hardware Access-List Allow Deny Ace374
- Hardware Access-List Capture375
- Hardware Access-List Resource Feature Bank-Mapping377
- Hardware Access-List Resource Pooling378
- Hardware Access-List Update380
- Hardware Rate-Limiter382
- Hop-Limit386
- Host (Ipv4)388
- Host (Ipv6)391
I Commands393
- Identity Policy395
- Identity Profile Eapoudp396
- Interface Policy Deny397
- Ip Access-Class399
- Ip Access-Group401
- Ip Access-List404
- Ip Arp Inspection Filter406
- Ip Arp Inspection Log-Buffer408
- Ip Arp Inspection Trust410
- Ip Arp Inspection Validate411
- Ip Arp Inspection Vlan413
- Ip Dhcp Packet Strict-Validation415
- Ip Dhcp Redirect-Response417
- Ip Dhcp Relay418
- Ip Dhcp Relay Address420
- Ip Dhcp Relay Information Option422
- Ip Dhcp Relay Information Option Vpn424
- Ip Dhcp Relay Subnet-Broadcast426
- Ip Dhcp Relay Sub-Option Type Cisco428
- Ip Dhcp Smart-Relay430
- Ip Dhcp Smart-Relay Global432
- Ip Dhcp Snooping434
- Ip Dhcp Snooping Information Option436
- Ip Dhcp Snooping Trust438
- Ip Dhcp Snooping Verify Mac-Address440
- Ip Dhcp Snooping Vlan442
- Ip Forward-Protocol Udp444
- Ip Port Access-Group445
- Ip Radius Source-Interface448
- Ip Source Binding449
- Ip Tacacs Source-Interface451
- Ip Udp Relay Addrgroup452
- Ip Udp Relay Subnet-Broadcast453
- Ip Verify Source Dhcp-Snooping-Vlan455
- Ip Verify Unicast Source Reachable-Via456
- Ipv6 Access-Class458
- Ipv6 Access-Class460
- Ipv6 Access-List462
- Ipv6 Dhcp-Ldra464
- Ipv6 Dhcp Guard Policy465
- Ipv6 Dhcp-Ldra (Interface)466
- Ipv6 Dhcp Relay467
- Ipv6 Dhcp-Ldra Attach Policy (Interface)469
- Ipv6 Dhcp-Ldra Attach-Policy Vlan471
- Ipv6 Dhcp Relay Address472
- Ipv6 Nd Raguard Attach-Policy474
- Ipv6 Nd Raguard Policy476
- Ipv6 Neighbor Binding478
- Ipv6 Neighbor Binding Logging480
- Ipv6 Neighbor Binding Max-Entries481
- Ipv6 Neighbor Tracking483
- Ipv6 Port Traffic-Filter485
- Ipv6 Snooping Attach-Policy488
- Ipv6 Traffic-Filter489
Chapter 9 K Commands492
- Key492
L Commands505
- Ldap-Server Deadtime506
- Ldap-Server Host507
- Ldap-Server Port510
- Ldap-Server Timeout511
- Ldap Search-Map512
- Logging Drop Threshold514
M Commands519
- Mac Access-List520
- Mac Packet-Classify522
- Mac Port Access-Group524
- Macsec Keychain Policy526
- Macsec Policy528
- Managed-Config-Flag530
- Match (Class-Map)531
- Match (VLAN Access-Map)533
- Monitor Session535
N Commands537
- Nac Enable538
- Neq539
O Commands541
- Object-Group (Identity Policy)542
- Object-Group Ip Address544
- Object-Group Ip Port546
- Object-Group Ipv6 Address548
- Object-Group Udp Relay Ip Address550
- Other-Config-Flag551
P Commands553
- Password Secure-Mode554
- Password Strength-Check555
- Periodic557
- Permit (ACL)560
- Permit (ARP)563
- Permit (Ipv4)567
- Permit (Ipv6)582
- Permit (MAC)598
- Permit (Role-Based Access Control List)601
- Permit Interface603
- Permit Vlan605
- Permit Vrf607
- Platform Access-List Update609
- Platform Rate-Limit611
- Police (Policy Map)613
- Policy616
- Policy-Map Type Control-Plane618
- Preference619
- Propagate-Sgt620
R Commands623
- Radius Abort624
- Radius Commit625
- Radius Distribute626
- Radius-Server Deadtime627
- Radius-Server Directed-Request629
- Radius-Server Host630
- Radius-Server Key633
- Radius-Server Retransmit635
- Radius-Server Test636
- Radius-Server Timeout638
- Range639
- Rate-Limit Cpu Direction641
- Remark643
- Replay-Protection645
- Resequence647
- Revocation-Check649
- Role Abort651
- Role Commit652
- Role Distribute653
- Role Feature-Group Name654
- Role Name656
- Router-Preference Maximum658
- Rsakeypair660
- Rule662
S Commands665
- Sak-Expiry-Time666
- Sap Modelist668
- Sap Pmk670
- Send-Lifetime672
- Server674
- Service Dhcp676
- Service-Policy Input678
- Set Cos680
- Set Dscp (Policy Map Class)682
- Set Precedence (Policy Map Class)685
- Source-Interface687
- Ssh689
- Ssh Key691
- Ssh Login-Attempts693
- Ssh Server Enable694
- Ssh6695
- Statistics Per-Entry697
- Storm-Control Level699
- Switchport Port-Security701
- Switchport Port-Security Aging Type703
- Switchport Port-Security Mac-Address705
- Switchport Port-Security Mac-Address Sticky707
- Switchport Port-Security Maximum709
- Switchport Port-Security Violation711
Chapter 1 7 Show Commands715
- Show720
- Show Aaa Accounting721
- Show Aaa Authentication722
- Show Aaa Authorization724
- Show Aaa Groups726
- Show Aaa Local User Blocked727
- Show Aaa User Default-Role728
- Show Access-List Status Module729
- Show Access-Lists730
- Show Accounting Log733
- Show Arp Access-Lists736
- Show Class-Map Type Control-Plane738
- Show Cli Syntax Roles Network-Admin739
- Show Cli Syntax Roles Network-Operator741
- Show Copp Diff Profile743
- Show Copp Profile745
- Show Copp Status747
- Show Crypto Ca Certificates748
- Show Crypto Ca Certstore750
- Show Crypto Ca Crl751
- Show Crypto Ca Remote-Certstore753
- Show Crypto Ca Trustpoints754
- Show Crypto Certificatemap755
- Show Crypto Key Mypubkey Rsa756
- Show Crypto Ssh-Auth-Map757
- Show Cts758
- Show Cts Capability Interface759
- Show Cts Credentials761
- Show Cts Environment-Data762
- Show Cts Interface763
- Show Cts L3 Interface765
- Show Cts L3 Mapping766
- Show Cts Pacs767
- Show Cts Propagate-Status768
- Show Cts Role-Based Access-List770
- Show Cts Role-Based Counters771
- Show Cts Role-Based Disabled-Interface773
- Show Cts Role-Based Enable774
- Show Cts Role-Based Policy775
- Show Cts Role-Based Sgt Vlan777
- Show Cts Role-Based Sgt-Map778
- Show Cts Sap Pmk780
- Show Cts Sxp781
- Show Cts Sxp Connection784
- Show Data-Corruption785
- Show Dot1X786
- Show Dot1X All787
- Show Dot1X Interface Ethernet789
- Show Encryption Service Stat791
- Show Eou792
- Show Fips Status794
- Show Hardware Access-List Feature-Combo795
- Show Hardware Rate-Limiter798
- Show Identity Policy802
- Show Identity Profile803
- Show Ip Access-Lists804
- Show Ip Access-Lists Capture Session807
- Show Ip Arp Inspection808
- Show Ip Arp Inspection Interface810
- Show Ip Arp Inspection Log812
- Show Ip Arp Inspection Statistics813
- Show Ip Arp Inspection Vlan815
- Show Ip Device Tracking817
- Show Ip Dhcp Relay819
- Show Ip Dhcp Relay Address821
- Show Ip Dhcp Relay Statistics823
- Show Ip Dhcp Snooping825
- Show Ip Dhcp Snooping Binding827
- Show Ip Dhcp Snooping Statistics829
- Show Ip Udp Relay831
- Show Ip Verify Source833
- Show Ipv6 Access-Lists835
- Show Ipv6 Dhcp Relay838
- Show Ipv6 Dhcp Relay Statistics839
- Show Ipv6 Dhcp-Ldra840
- Show Ipv6 Dhcp Guard Policy842
- Show Ipv6 Nd Raguard Policy844
- Show Ipv6 Neighbor Binding845
- Show Ipv6 Snooping Capture-Policy847
- Show Ipv6 Snooping Counters849
- Show Ipv6 Snooping Features851
- Show Ipv6 Snooping Policies852
- Show Key Chain854
- Show Ldap-Search-Map856
- Show Ldap-Server858
- Show Ldap-Server Groups859
- Show Ldap-Server Statistics860
- Show Mac Access-Lists862
- Show Macsec Mka864
- Show Macsec Policy868
- Show Password Secure-Mode870
- Show Password Strength-Check871
- Show Policy-Map Interface Control-Plane872
- Show Policy-Map Type Control-Plane876
- Show Port-Security877
- Show Port-Security Address879
- Show Port-Security Interface881
- Show Privilege883
- Show Radius884
- Show Radius-Server886
- Show Role889
- Show Role Feature891
- Show Role Feature-Group893
- Show Role Pending896
- Show Role Pending-Diff897
- Show Role Session898
- Show Role Status899
- Show Run Mka900
- Show Running-Config Aaa902
- Show Running-Config Aclmgr903
- Show Running-Config Copp906
- Show Running-Config Cts908
- Show Running-Config Dhcp909
- Show Running-Config Dot1X911
- Show Running-Config Eou912
- Show Running-Config Ldap913
- Show Running-Config Port-Security914
- Show Running-Config Radius915
- Show Running-Config Security916
- Show Running-Config Tacacs917
- Show Security System State918
- Show Software Integrity919
- Show Ssh Key920
- Show Ssh Server921
- Show Startup-Config Aaa922
- Show Startup-Config Aclmgr923
- Show Startup-Config Copp925
- Show Startup-Config Dhcp927
- Show Startup-Config Dot1X929
- Show Startup-Config Eou930
- Show Startup-Config Ldap931
- Show Startup-Config Port-Security932
- Show Startup-Config Radius933
- Show Startup-Config Security934
- Show Startup-Config Tacacs935
- Show System Internal Access-List Feature Bank-Chain Map936
- Show System Internal Access-List Feature Bank-Class Map938
- Show System Internal Access-List Globals940
- Show System Internal Pktmgr Internal Control Sw-Rate-Limit942
- Show System Internal Udp-Relay Database943
- Show Tacacs945
- Show Tacacs-Server947
- Show Telnet Server950
- Show Time-Range951
- Show User-Account953
- Show Username954
- Show Users956
- Show Vlan Access-List957
- Show Vlan Access-Map959
- Show Vlan Filter961
Chapter 1 8 T Commands963
- Tacacs+ Abort964
- Tacacs+ Commit965
- Tacacs+ Distribute966
- Tacacs-Server Deadtime967
- Tacacs-Server Directed-Request969
- Tacacs-Server Host971
- Tacacs-Server Key974
- Tacacs-Server Test976
- Tacacs-Server Timeout978
- Telnet979
- Telnet Server Enable981
- Telnet6982
- Terminal Verify-Only984
- Test Aaa Authorization Command-Type986
- Time-Range988
- Trustedcert990
Chapter 1 9 U Commands993
- User-Certdn-Match994
- Username996
- Userprofile1001
- User-Pubkey-Match1003
- User-Switch-Bind1005
- Use-Vrf1007
Commands1009
- Vlan Access-Map1010
- Vlan Filter1012
- Vlan Policy Deny1014
- Vrf Policy Deny1016

Cisco Nexus 7000 Series - Page 23

Table of Contents

Other manuals for Cisco Nexus 7000 Series

Related product manuals