Cisco Nexus 7000 Series

To Next Page

To Previous Page

Examples

This example shows how to display the Cisco TrustSec SGACL policies:

switch# show cts role-based policy

sgt:unknown

dgt:unknown rbacl:deny_ip(Downloaded,Monitored)

deny ip

sgt:101(101)

dgt:102(102) rbacl:rb2(Configured)

deny eigrp

sgt:101(101)

dgt:102(102) rbacl:ise_rbacl_1_ace(Downloaded)

deny gre

Related Commands

DescriptionCommand

Enables the Cisco TrustSec feature.feature cts

Cisco Nexus 7000 Series Security Command Reference

750

Show Commands

show cts role-based policy

Main Page

Default Chapter3
- Table of Contents3
- Document Conventions21
- Related Documentation24
- Documentation Feedback25
- Obtaining Documentation and Submitting a Service Request25
- Absolute29
- Accept-Lifetime31
- Access-Class33
- Action35
- Arp Access-List37
- Authentication (LDAP)39
- Aaa Accounting Default41
- Aaa Accounting Dot1X43
- Aaa Authentication Cts Default Group45
- Aaa Authentication Dot1X Default Group47
- Aaa Authentication Eou Default Group49
- Aaa Authentication Login Ascii-Authentication51
- Aaa Authentication Login Chap Enable52
- Aaa Authentication Login Console53
- Aaa Authentication Login Default55
- Aaa Authentication Login Error-Enable57
- Aaa Authentication Login Invalid-Username-Log58
- Aaa Authentication Login Mschap Enable59
  - Aaa Authentication Login Mschapv2 Enable60
  - Aaa Authentication Rejected61
  - Aaa Authorization Commands Default63
  - Aaa Authorization Config-Commands Default65
  - Aaa Authorization Cts Default Group67
  - Aaa Authorization Ssh-Certificate69
  - Aaa Authorization Ssh-Publickey71
  - Aaa Group Server Ldap73
  - Aaa Group Server Radius75
  - Aaa Group Server Tacacs76
  - Aaa User Default-Role77
C Commands79
- Cipher Suite82
- Clear Access-List Counters84
- Clear Accounting Log86
- Clear Copp Statistics87
- Clear Cts Cache88
- Clear Cts Policy89
- Capture Session90
- Cts Dot1X91
- Class (Policy Map)93
- Class-Map Type Control-Plane95
- Clear Aaa Local User Blocked97
- Clear Ldap-Server Statistics98
- Clear Mac Access-List Counters99
- Clear Port-Security101
- Clear Cts Role-Based Counters103
- Clear Dot1X104
- Clear Eou105
- Clear Hardware Rate-Limiter107
- Clear Ip Arp Inspection Log110
- Clear Ip Access-List Counters111
- Clear Ip Arp Inspection Statistics Vlan113
- Clear Ip Device Tracking115
- Clear Ip Dhcp Relay Statistics117
- Clear Ip Dhcp Snooping Binding118
- Clear Ipv6 Access-List Counters120
- Clear Ipv6 Dhcp Relay Statistics122
- Clear Ipv6 Dhcp-Ldra Statistics123
- Clear Vlan Access-List Counters124
- Conf-Offset126
- Copp Copy Profile128
- Copp Profile130
- Crllookup132
- Crypto Ca Authenticate134
- Crypto Ca Crl Request136
- Clear Ldap-Server Statistics138
- Clear Mac Access-List Counters139
- Clear Port-Security141
- Clear Radius-Server Statistics143
- Clear Ssh Hosts144
- Clear Tacacs-Server Statistics145
- Clear User146
- Cts L3 Spi (Global)147
- Cts L3 Spi (Interface)149
- Crypto Ca Enroll151
- Crypto Ca Export153
- Crypto Ca Import155
- Crypto Ca Lookup158
- Crypto Ca Remote Ldap Crl-Refresh-Time160
- Crypto Ca Remote Ldap Server-Group161
- Crypto Ca Test Verify162
- Crypto Ca Trustpoint163
- Crypto Cert Ssh-Authorize165
- Crypto Certificatemap Mapname167
- Cts Cache Enable168
- Cts Device-ID169
- Cts Role-Based Sgt-Map171
- Cts Sgt173
  - Cts L3 Spi (Global)174
  - Cts L3 Spi (Interface)176
  - Cts L3 Spi (Interface)178
  - Cts Manual180
  - Cts Refresh Environment-Data182
  - Cts Refresh Role-Based-Policy183
  - Cts Rekey184
  - Cts Role-Based Access-List185
  - Cts Role-Based Counters Enable187
  - Cts Role-Based Detailed-Logging189
  - Cts Role-Based Enforcement191
  - Cts Role-Based Monitor193
  - Cts Role-Based Policy Priority-Static195
  - Cts Role-Based Sgt196
  - Cts Sxp Allow Default-Route-Sgt198
  - Cts Sxp Connection Peer199
  - Cts Sxp Default Password202
  - Cts Sxp Default Source-Ip204
  - Cts Sxp Enable205
  - Cts Sxp Listener Hold-Time206
  - Cts Sxp Mapping Network-Map208
  - Cts Sxp Node-ID209
  - Cts Sxp Reconcile-Period211
  - Cts Sxp Retry-Period213
  - Cts Sxp Speaker Hold-Time215
D Commands217
- Dot1X Max-Reauth-Req219
- Dot1X Max-Req221
- Dot1X Pae Authenticator223
- Dot1X Port-Control225
- Dot1X Radius-Accounting227
- Dot1X Re-Authentication (EXEC)228
- Dot1X Re-Authentication (Global Configuration and Interface Configuration)229
- Dot1X System-Auth-Control231
- Dot1X Timeout Quiet-Period232
- Dot1X Timeout Ratelimit-Period234
- Dot1X Timeout Re-Authperiod236
- Dot1X Timeout Server-Timeout238
- Dot1X Timeout Supp-Timeout240
- Dot1X Timeout Tx-Period242
- Deadtime244
- Delete Ca-Certificate246
- Delete Certificate247
- Delete Crl249
- Deny (ARP)250
- Deny (Ipv4)254
- Deny (Ipv6)269
- Deny (MAC)285
- Deny (Role-Based Access Control List)288
- Description (Identity Policy)290
- Description (User Role)292
- Destination Interface294
- Device296
- Device-Role298
- Dot1X Default300
- Dot1X Host-Mode301
- Dot1X Initialize303
- Dot1X Mac-Auth-Bypass304
E Commands305
- Encrypt Pause-Frame306
- Encryption Decrypt Type6308
- Encryption Delete Type6309
- Enable310
- Enable Cert-DN-Match312
- Enable Secret314
- Enable User-Server-Group316
- Encryption Re-Encrypt Obfuscated318
- Enrollment Terminal319
- Eou Allow Clientless320
- Eou Default321
- Eou Initialize322
- Eou Logging324
- Eou Max-Retry326
- Eou Port328
- Eou Ratelimit329
- Eou Revalidate (EXEC)331
- Eou Revalidate (Global Configuration and Interface Configuration)333
- Eou Timeout335
F Commands341
- Feature (User Role Feature Group)342
- Feature Cts343
- Feature Dhcp345
- Feature Dot1X347
- Feature Eou348
- Feature Ldap349
- Feature Mka351
- Feature Password Encryption Aes353
- Feature Port-Security354
- Feature Privilege356
- Feature Scp-Server358
- Feature Sftp-Server359
- Feature Ssh360
- Feature Tacacs361
- Feature Telnet362
- Filter363
- Fips Mode Enable365
- Fragments367
G Commands369
H Commands373
- Hardware Access-List Allow Deny Ace374
- Hardware Access-List Capture375
- Hardware Access-List Resource Feature Bank-Mapping377
- Hardware Access-List Resource Pooling378
- Hardware Access-List Update380
- Hardware Rate-Limiter382
- Hop-Limit386
- Host (Ipv4)388
- Host (Ipv6)391
I Commands393
- Identity Policy395
- Identity Profile Eapoudp396
- Interface Policy Deny397
- Ip Access-Class399
- Ip Access-Group401
- Ip Access-List404
- Ip Arp Inspection Filter406
- Ip Arp Inspection Log-Buffer408
- Ip Arp Inspection Trust410
- Ip Arp Inspection Validate411
- Ip Arp Inspection Vlan413
- Ip Dhcp Packet Strict-Validation415
- Ip Dhcp Redirect-Response417
- Ip Dhcp Relay418
- Ip Dhcp Relay Address420
- Ip Dhcp Relay Information Option422
- Ip Dhcp Relay Information Option Vpn424
- Ip Dhcp Relay Subnet-Broadcast426
- Ip Dhcp Relay Sub-Option Type Cisco428
- Ip Dhcp Smart-Relay430
- Ip Dhcp Smart-Relay Global432
- Ip Dhcp Snooping434
- Ip Dhcp Snooping Information Option436
- Ip Dhcp Snooping Trust438
- Ip Dhcp Snooping Verify Mac-Address440
- Ip Dhcp Snooping Vlan442
- Ip Forward-Protocol Udp444
- Ip Port Access-Group445
- Ip Radius Source-Interface448
- Ip Source Binding449
- Ip Tacacs Source-Interface451
- Ip Udp Relay Addrgroup452
- Ip Udp Relay Subnet-Broadcast453
- Ip Verify Source Dhcp-Snooping-Vlan455
- Ip Verify Unicast Source Reachable-Via456
- Ipv6 Access-Class458
- Ipv6 Access-Class460
- Ipv6 Access-List462
- Ipv6 Dhcp-Ldra464
- Ipv6 Dhcp Guard Policy465
- Ipv6 Dhcp-Ldra (Interface)466
- Ipv6 Dhcp Relay467
- Ipv6 Dhcp-Ldra Attach Policy (Interface)469
- Ipv6 Dhcp-Ldra Attach-Policy Vlan471
- Ipv6 Dhcp Relay Address472
- Ipv6 Nd Raguard Attach-Policy474
- Ipv6 Nd Raguard Policy476
- Ipv6 Neighbor Binding478
- Ipv6 Neighbor Binding Logging480
- Ipv6 Neighbor Binding Max-Entries481
- Ipv6 Neighbor Tracking483
- Ipv6 Port Traffic-Filter485
- Ipv6 Snooping Attach-Policy488
- Ipv6 Traffic-Filter489
Chapter 9 K Commands492
- Key492
L Commands505
- Ldap-Server Deadtime506
- Ldap-Server Host507
- Ldap-Server Port510
- Ldap-Server Timeout511
- Ldap Search-Map512
- Logging Drop Threshold514
M Commands519
- Mac Access-List520
- Mac Packet-Classify522
- Mac Port Access-Group524
- Macsec Keychain Policy526
- Macsec Policy528
- Managed-Config-Flag530
- Match (Class-Map)531
- Match (VLAN Access-Map)533
- Monitor Session535
N Commands537
- Nac Enable538
- Neq539
O Commands541
- Object-Group (Identity Policy)542
- Object-Group Ip Address544
- Object-Group Ip Port546
- Object-Group Ipv6 Address548
- Object-Group Udp Relay Ip Address550
- Other-Config-Flag551
P Commands553
- Password Secure-Mode554
- Password Strength-Check555
- Periodic557
- Permit (ACL)560
- Permit (ARP)563
- Permit (Ipv4)567
- Permit (Ipv6)582
- Permit (MAC)598
- Permit (Role-Based Access Control List)601
- Permit Interface603
- Permit Vlan605
- Permit Vrf607
- Platform Access-List Update609
- Platform Rate-Limit611
- Police (Policy Map)613
- Policy616
- Policy-Map Type Control-Plane618
- Preference619
- Propagate-Sgt620
R Commands623
- Radius Abort624
- Radius Commit625
- Radius Distribute626
- Radius-Server Deadtime627
- Radius-Server Directed-Request629
- Radius-Server Host630
- Radius-Server Key633
- Radius-Server Retransmit635
- Radius-Server Test636
- Radius-Server Timeout638
- Range639
- Rate-Limit Cpu Direction641
- Remark643
- Replay-Protection645
- Resequence647
- Revocation-Check649
- Role Abort651
- Role Commit652
- Role Distribute653
- Role Feature-Group Name654
- Role Name656
- Router-Preference Maximum658
- Rsakeypair660
- Rule662
S Commands665
- Sak-Expiry-Time666
- Sap Modelist668
- Sap Pmk670
- Send-Lifetime672
- Server674
- Service Dhcp676
- Service-Policy Input678
- Set Cos680
- Set Dscp (Policy Map Class)682
- Set Precedence (Policy Map Class)685
- Source-Interface687
- Ssh689
- Ssh Key691
- Ssh Login-Attempts693
- Ssh Server Enable694
- Ssh6695
- Statistics Per-Entry697
- Storm-Control Level699
- Switchport Port-Security701
- Switchport Port-Security Aging Type703
- Switchport Port-Security Mac-Address705
- Switchport Port-Security Mac-Address Sticky707
- Switchport Port-Security Maximum709
- Switchport Port-Security Violation711
Chapter 1 7 Show Commands715
- Show720
- Show Aaa Accounting721
- Show Aaa Authentication722
- Show Aaa Authorization724
- Show Aaa Groups726
- Show Aaa Local User Blocked727
- Show Aaa User Default-Role728
- Show Access-List Status Module729
- Show Access-Lists730
- Show Accounting Log733
- Show Arp Access-Lists736
- Show Class-Map Type Control-Plane738
- Show Cli Syntax Roles Network-Admin739
- Show Cli Syntax Roles Network-Operator741
- Show Copp Diff Profile743
- Show Copp Profile745
- Show Copp Status747
- Show Crypto Ca Certificates748
- Show Crypto Ca Certstore750
- Show Crypto Ca Crl751
- Show Crypto Ca Remote-Certstore753
- Show Crypto Ca Trustpoints754
- Show Crypto Certificatemap755
- Show Crypto Key Mypubkey Rsa756
- Show Crypto Ssh-Auth-Map757
- Show Cts758
- Show Cts Capability Interface759
- Show Cts Credentials761
- Show Cts Environment-Data762
- Show Cts Interface763
- Show Cts L3 Interface765
- Show Cts L3 Mapping766
- Show Cts Pacs767
- Show Cts Propagate-Status768
- Show Cts Role-Based Access-List770
- Show Cts Role-Based Counters771
- Show Cts Role-Based Disabled-Interface773
- Show Cts Role-Based Enable774
- Show Cts Role-Based Policy775
- Show Cts Role-Based Sgt Vlan777
- Show Cts Role-Based Sgt-Map778
- Show Cts Sap Pmk780
- Show Cts Sxp781
- Show Cts Sxp Connection784
- Show Data-Corruption785
- Show Dot1X786
- Show Dot1X All787
- Show Dot1X Interface Ethernet789
- Show Encryption Service Stat791
- Show Eou792
- Show Fips Status794
- Show Hardware Access-List Feature-Combo795
- Show Hardware Rate-Limiter798
- Show Identity Policy802
- Show Identity Profile803
- Show Ip Access-Lists804
- Show Ip Access-Lists Capture Session807
- Show Ip Arp Inspection808
- Show Ip Arp Inspection Interface810
- Show Ip Arp Inspection Log812
- Show Ip Arp Inspection Statistics813
- Show Ip Arp Inspection Vlan815
- Show Ip Device Tracking817
- Show Ip Dhcp Relay819
- Show Ip Dhcp Relay Address821
- Show Ip Dhcp Relay Statistics823
- Show Ip Dhcp Snooping825
- Show Ip Dhcp Snooping Binding827
- Show Ip Dhcp Snooping Statistics829
- Show Ip Udp Relay831
- Show Ip Verify Source833
- Show Ipv6 Access-Lists835
- Show Ipv6 Dhcp Relay838
- Show Ipv6 Dhcp Relay Statistics839
- Show Ipv6 Dhcp-Ldra840
- Show Ipv6 Dhcp Guard Policy842
- Show Ipv6 Nd Raguard Policy844
- Show Ipv6 Neighbor Binding845
- Show Ipv6 Snooping Capture-Policy847
- Show Ipv6 Snooping Counters849
- Show Ipv6 Snooping Features851
- Show Ipv6 Snooping Policies852
- Show Key Chain854
- Show Ldap-Search-Map856
- Show Ldap-Server858
- Show Ldap-Server Groups859
- Show Ldap-Server Statistics860
- Show Mac Access-Lists862
- Show Macsec Mka864
- Show Macsec Policy868
- Show Password Secure-Mode870
- Show Password Strength-Check871
- Show Policy-Map Interface Control-Plane872
- Show Policy-Map Type Control-Plane876
- Show Port-Security877
- Show Port-Security Address879
- Show Port-Security Interface881
- Show Privilege883
- Show Radius884
- Show Radius-Server886
- Show Role889
- Show Role Feature891
- Show Role Feature-Group893
- Show Role Pending896
- Show Role Pending-Diff897
- Show Role Session898
- Show Role Status899
- Show Run Mka900
- Show Running-Config Aaa902
- Show Running-Config Aclmgr903
- Show Running-Config Copp906
- Show Running-Config Cts908
- Show Running-Config Dhcp909
- Show Running-Config Dot1X911
- Show Running-Config Eou912
- Show Running-Config Ldap913
- Show Running-Config Port-Security914
- Show Running-Config Radius915
- Show Running-Config Security916
- Show Running-Config Tacacs917
- Show Security System State918
- Show Software Integrity919
- Show Ssh Key920
- Show Ssh Server921
- Show Startup-Config Aaa922
- Show Startup-Config Aclmgr923
- Show Startup-Config Copp925
- Show Startup-Config Dhcp927
- Show Startup-Config Dot1X929
- Show Startup-Config Eou930
- Show Startup-Config Ldap931
- Show Startup-Config Port-Security932
- Show Startup-Config Radius933
- Show Startup-Config Security934
- Show Startup-Config Tacacs935
- Show System Internal Access-List Feature Bank-Chain Map936
- Show System Internal Access-List Feature Bank-Class Map938
- Show System Internal Access-List Globals940
- Show System Internal Pktmgr Internal Control Sw-Rate-Limit942
- Show System Internal Udp-Relay Database943
- Show Tacacs945
- Show Tacacs-Server947
- Show Telnet Server950
- Show Time-Range951
- Show User-Account953
- Show Username954
- Show Users956
- Show Vlan Access-List957
- Show Vlan Access-Map959
- Show Vlan Filter961
Chapter 1 8 T Commands963
- Tacacs+ Abort964
- Tacacs+ Commit965
- Tacacs+ Distribute966
- Tacacs-Server Deadtime967
- Tacacs-Server Directed-Request969
- Tacacs-Server Host971
- Tacacs-Server Key974
- Tacacs-Server Test976
- Tacacs-Server Timeout978
- Telnet979
- Telnet Server Enable981
- Telnet6982
- Terminal Verify-Only984
- Test Aaa Authorization Command-Type986
- Time-Range988
- Trustedcert990
Chapter 1 9 U Commands993
- User-Certdn-Match994
- Username996
- Userprofile1001
- User-Pubkey-Match1003
- User-Switch-Bind1005
- Use-Vrf1007
Commands1009
- Vlan Access-Map1010
- Vlan Filter1012
- Vlan Policy Deny1014
- Vrf Policy Deny1016

Cisco Nexus 7000 Series - Page 776

Table of Contents

Other manuals for Cisco Nexus 7000 Series

Related product manuals