cisco global site selector command reference...contents vi cisco global site selector command...

Cisco Global Site Selector Command ReferenceSoftware Version 1.2November 2004

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000

800 553-NETS (6387)Fax: 408 526-4100

Text Part Number: OL-5692-01

http://www.cisco.com

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco Global Site Selector Command ReferenceCopyright © 2004 Cisco Systems, Inc. All rights reserved.

CCSP, the Cisco Square Bridge logo, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, Registrar, ScriptShare, SlideCast, SMARTnet, StrataView Plus, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0406R)

OL-5692-01

C O N T E N T S

Preface ix

Audience ix

How To Use This Guide x

Related Documentation x

Symbols and Conventions xi

Obtaining Documentation, Obtaining Support, and Security Guidelines xiii

C H A P T E R 1 Command-Line Interface Command Summary 1-1

Using Command-Line Processing 1-2

Command Modes 1-3

EXEC Mode 1-3

Global Configuration Mode 1-4

Interface Configuration Mode 1-5

Global Server Load-Balancing Configuration Mode 1-5

Check Command Syntax 1-6

Controlling Command Output 1-7

Using the Pipe (|) Character 1-7

Using grep 1-7

Using sort 1-8

Using wc 1-9

Using the Redirect (>) Character 1-9

System Help 1-10

Save Configuration Changes 1-10

EXEC Command Summary 1-11

iiiCisco Global Site Selector Command Reference

Contents

Global Configuration Command Summary 1-22

Interface Configuration Command Summary 1-29

Global Server Load-Balancing Configuration Command Summary 1-33

C H A P T E R 2 Cisco Global Site Selector CLI Commands 2-1

? 2-2

aaa 2-4

access-group 2-7

access-list 2-8

autosense 2-11

cd 2-13

certificate set-attributes 2-14

clear statistics 2-16

clock 2-18

configure 2-20

copy 2-21

del 2-23

dir 2-24

disable 2-26

dnslookup 2-27

duplex 2-28

enable 2-30

end 2-31

exec-timeout 2-32

exit 2-33

ftp 2-34

ivCisco Global Site Selector Command Reference

OL-5692-01

Contents

gslb 2-35

gss 2-36

gss tech-report 2-40

gss-communications 2-41

gss-tcp-keepalives 2-42

gssm 2-43

help 2-46

hostname 2-47

install 2-49

interface ethernet 2-50

ip 2-53

ip address 2-55

lls 2-57

logging 2-59

ls 2-62

lsof 2-63

no 2-65

ntp enable 2-67

ntp-server 2-68

ping 2-70

property set 2-71

proximity assign 2-72

proximity database delete all 2-75

proximity database dump 2-77

proximity database load 2-80

proximity database periodic-backup 2-82

proximity group 2-83

vCisco Global Site Selector Command Reference

OL-5692-01

Contents

proximity probe 2-87

proximity start 2-89

proximity stop 2-90

pwd 2-91

reload 2-92

rename 2-93

reset-gui-admin-password 2-94

restore-factory-defaults 2-95

rotate-logs 2-97

scp 2-98

setup 2-100

show access-group 2-103

show access-list 2-104

show arp 2-105

show boot-config 2-106

show clock 2-107

show disk 2-108

show ftp 2-109

show interface 2-110

show ip routes 2-111

show logging 2-112

show logs 2-113

show memory 2-114

show ntp 2-115

show processes 2-116

show properties 2-117

show proximity 2-118

viCisco Global Site Selector Command Reference

OL-5692-01

Contents

show proximity group-name 2-119

show proximity group-summary 2-120

show running-config 2-121

show services 2-122

show snmp 2-123

show ssh 2-124

show startup-config 2-125

show statistics 2-126

show statistics boomerang 2-127

show statistics dns 2-128

show statistics keepalive 2-133

show statistics proximity 2-136

show statistics sticky 2-138

show statistics tacacs 2-140

show sticky 2-141

show sticky database 2-142

show sticky global 2-144

show sticky group-name 2-145

show sticky group-summary 2-146

show sticky mesh 2-147

show system-status 2-149

show tacacs 2-150

show tech-support 2-151

show telnet 2-152

show terminal-length 2-153

show uptime 2-154

show user 2-155

show users 2-156

viiCisco Global Site Selector Command Reference

OL-5692-01

Contents

show version 2-157

shutdown 2-158

snmp 2-159

speed 2-161

ssh enable 2-162

ssh keys 2-164

ssh protocol version 1 2-166

sticky database delete 2-168

sticky database dump 2-171

sticky database load 2-174

sticky database periodic-backup 2-176

sticky group 2-177

sticky start 2-180

sticky stop 2-181

tacacs-server host 2-183

tacacs-server keepalive-enable 2-186

tacacs-server timeout 2-188

tail 2-190

tcpdump 2-192

telnet 2-195

terminal-length 2-197

traceroute 2-198

type 2-199

username 2-201

write 2-203

IN D E X

viiiCisco Global Site Selector Command Reference

OL-5692-01

Preface

This preface describes who should read the Cisco Global Site Selector Command Reference, how it is organized and its document conventions. It contains the following major topics:

• Audience

• How To Use This Guide

• Related Documentation

• Symbols and Conventions

• Obtaining Documentation, Obtaining Support, and Security Guidelines

AudienceThis command reference is for experienced network administrators familiar with TCP/IP networking concepts and router configuration. To use this configuration guide, you should be familiar with the Cisco Global Site Selector (GSS) hardware, which is discussed in the Global Site Selector Hardware Installation Guide. In addition, you should be familiar with basic TCP/IP and networking concepts, router configuration, Domain Name System (DNS), the Berkeley Internet Name Domain (BIND) software, as well as your organization’s unique network configuration.

ixCisco Global Site Selector Command Reference

OL-5692-01

PrefaceHow To Use This Guide

How To Use This GuideThis Command Reference includes the following chapters:

Related DocumentationIn addition to this document, the GSS documentation set includes the following:

Chapter Description

Chapter 1, Command-Line Interface Command Summary

Describes how to use the command-line (CLI) interface and presents the commands and command syntax in tables.

Chapter 2, Cisco Global Site Selector CLI Commands

Lists the Cisco GSS CLI commands in alphabetical order and provides detailed descriptions of their use.

Document Title Provides

Global Site Selector Hardware Installation Guide

Information on installing your Cisco GSS device and getting it ready for operation. It describes how to prepare your site for installation, how to install the Cisco GSS device in an equipment rack, and how to maintain and troubleshoot the system hardware.

Regulatory Compliance and Safety Information for the Cisco Global Site Selector

Regulatory compliance and safety information for the Cisco GSS platform.

Release Note for the Cisco Global Site Selector

Information on operating considerations, caveats, and new CLI commands for the GSS software.

Cisco Global Site Selector Getting Started Guide

Information on getting your Cisco GSS setup, configured, and ready to perform global server load balancing.

xCisco Global Site Selector Command Reference

OL-5692-01

PrefaceSymbols and Conventions

Symbols and ConventionsThis guide uses the following symbols and conventions to emphasize certain information.

Command descriptions use the following conventions:

Cisco Global Site Selector Administration Guide

Procedures necessary to properly set up, manage, and maintain your Cisco GSSM and GSS devices, including login security, software upgrades, GSSM database administration, and logging.

Cisco Global Site Selector Global Server Load-Balancing Configuration Guide

Procedures on how to configure your GSS devices to perform global server load-balancing of the GSS product, such as configuring source address lists, domain lists, answers, answer groups, DNS sticky, network proximity, and DNS rules. This document also provides an overview of the GSS device and global server load balancing as performed by the GSS.

Document Title Provides

boldface font Commands and keywords are in boldface.

italic font Variables for which you supply values are in italics.

[ ] Elements in square brackets are optional.

{x | y | z} Alternative keywords are grouped in braces and separated by vertical bars.

[x | y | z] Optional alternative keywords are grouped in brackets and separated by vertical bars.

string A nonquoted set of characters. Do not use quotation marks around the string, or the string will include the quotation marks.

xiCisco Global Site Selector Command Reference

OL-5692-01

PrefaceSymbols and Conventions

Screen examples use the following conventions:

Graphical user interface elements use the following conventions:

Caution A caution means that a specific action you take could cause a loss of data or adversely impact use of the equipment.

screen font Terminal sessions and information the system displays are in screen font.

boldface screen font

Information you must enter is in boldface screen font.

italic screen font Variables for which you supply values are in italic screen font.

This pointer highlights an important line of text in an example.

^ The symbol ^ represents the key labeled Control—for example, the key combination ^D in a screen display means hold down the Control key while you press the D key.

< > Nonprinting characters, such as passwords, are in angle brackets.

[ ] Default responses to system prompts are in square brackets.

!, # An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line.

boldface text Instructs the user to enter a keystroke or act on a GUI element.

Courier text Indicates text that appears in a command line, including the CLI prompt.

Courier bold

text

Indicates commands and text you enter in a command line.

italic text Directories and filenames are in italic font.

xiiCisco Global Site Selector Command Reference

OL-5692-01

PrefaceObtaining Documentation, Obtaining Support, and Security Guidelines

Note A note provides important related information, reminders, and recommendations.

1. A numbered list indicates that the order of the list items is important.

a. An alphabetical list indicates that the order of the secondary list items is important.

• A bulleted list indicates that the order of the list topics is unimportant.

– An indented list indicates that the order of the list subtopics is unimportant.

Obtaining Documentation, Obtaining Support, and Security Guidelines

For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

xiiiCisco Global Site Selector Command Reference

OL-5692-01

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

PrefaceObtaining Documentation, Obtaining Support, and Security Guidelines

xivCisco Global Site Selector Command Reference

OL-5692-01

Cisco GloOL-5692-01

C H A P T E R 1
Command-Line Interface Command Summary
This chapter provides a summary of the command-line interface (CLI) commands included in the Cisco Global Site Selector (GSS) software. The command summary tables are grouped alphabetically in five categories: user-level EXEC commands, privileged-level EXEC commands, global configuration commands, interface configuration commands, and global server load-balancing configuration commands.

This chapter contains the following major sections:

• Using Command-Line Processing

• Command Modes

• Check Command Syntax

• System Help

• Save Configuration Changes

• Check Command Syntax

• Controlling Command Output

• System Help

• Save Configuration Changes

• EXEC Command Summary

For details about accessing the GSS directly through the console port or remotely by using Telnet or Secure Shell (SSH), refer to the Cisco Global Site Selector Getting Started Guide, Chapter 2, Accessing the GSS CLI.

1-1bal Site Selector Command Reference

Chapter 1 Command-Line Interface Command SummaryUsing Command-Line Processing

Using Command-Line ProcessingGSS software commands are not case sensitive. You can abbreviate commands and parameters as long as they contain enough letters to be different from any other currently available commands or parameters. You can scroll through the last 20 commands stored in the history buffer and enter or edit the command at the prompt. Refer to Table 1-1 for a summary of keystroke combinations supported on the GSS CLI.

Table 1-1 Command-Line Processing Keystroke Combinations

Keystroke Combination Description

Ctrl-A Jumps to the first character of the command line.

Ctrl-B or the Left Arrow key Moves the cursor back one character.

Ctrl-C Escapes and terminates prompts and tasks.

Ctrl-D Deletes the character at the cursor.

Ctrl-E Jumps to the end of the current command line.

Ctrl-F or the Right Arrow key1 Moves the cursor forward one character.

Ctrl-K Deletes from the cursor to the end of the command line.

Ctrl-L Repeats the current command line on a new line.

Ctrl-N or the Down Arrow key1 Enters the next command line in the history buffer.

Ctrl-P or the Up Arrow key1 Enters the previous command line in the history buffer.

Ctrl-T Transposes the character at the cursor with the character to the left of the cursor.

Ctrl-U; Ctrl-X Deletes from the cursor to the beginning of the command line.

1-2Cisco Global Site Selector Command Reference

OL-5692-01

Chapter 1 Command-Line Interface Command SummaryCommand Modes

Command ModesThe GSS CLI support the following four command modes:

• EXEC Mode

• Global Configuration Mode

• Interface Configuration Mode

• Global Server Load-Balancing Configuration Mode

EXEC ModeThe two EXEC access levels are privileged and user. The enable and disable commands switch between the two levels. The user-level EXEC command line is available to users if they enter a valid password. The user-level EXEC commands are a subset of the privileged-level EXEC commands. The user-level EXEC prompt is the host name followed by a right angle bracket (>). The prompt for the privileged-level EXEC command line is the pound sign (#). To execute an EXEC command, enter the command at the EXEC system prompt and press the Return key.

Ctrl-W Deletes the last word typed.

Esc-B Moves the cursor back one word.

Esc-D Deletes from the cursor to the end of the word.

Esc-F Moves the cursor forward one word.

Delete key or Backspace key Erases a mistake when entering a command; reenter the command after using this key.

1. The arrow keys function only on ANSI-compatible terminals such as VT100s.

Table 1-1 Command-Line Processing Keystroke Combinations (continued)

Keystroke Combination Description


OL-5692-01


In the following example, a user accesses the privileged-level EXEC command line from the user level:

gssm1.example.com> enablegssm1.example.com#

Use the Delete or Backspace key sequences to edit commands when you type commands at the EXEC prompt.

As a shortcut, you can abbreviate commands to the fewest letters that make them unique. For example, the letters sho can be entered for the show command.

Certain EXEC commands display multiple screens with the following prompt at the bottom of the screen:

--More--

Press the Spacebar to continue the output, or press Return to display the next line. Press any other key to return to the prompt. Also, at the --More-- prompt, you can enter a ? to display the help message.

To leave EXEC mode, use the exit command at the system prompt:

gssm1.example.com# exit

See the “EXEC Command Summary” section for a summary of EXEC-level commands.

Global Configuration ModeTo enter the global configuration mode, use the configure privileged EXEC command. You must be in global configuration mode to enter global configuration commands.

gssm1.example.com# configuregssm1.example.com(config)#

To exit global configuration mode, use the end global configuration command:

gssm1.example.com(config)# end

You can also exit global configuration mode by entering the exit command or by pressing Ctrl-Z.

See the “Global Configuration Command Summary” section for a summary of Global configuration-level commands.


OL-5692-01


Interface Configuration ModeTo enter interface configuration mode, use the interface global configuration command. The following example demonstrates how to enter interface configuration mode:

gssm1.example.com# configgssm1.example.com(config)# interface ethernet 0gssm1.example.com(config-eth0)#

To exit the interface configuration mode, enter exit to return to global configuration mode:

gssm1.example.com(config-eth0)# exitgssm1.example.com(config)#

See the “Interface Configuration Command Summary” section for a summary of interface configuration-level commands.

Global Server Load-Balancing Configuration ModeTo enter the global server load-balancing configuration mode, use the gslb configuration command. The following example demonstrates how to enter interface configuration mode:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# proximity group ProxyGroup1 ip 192.168.9.0 255.255.255.0

To exit the global server load-balancing configuration mode, enter exit to return to global configuration mode.

gssm1.example.com(config-gslb)# exitgssm1.example.com(config)#

See the “Global Server Load-Balancing Configuration Command Summary” section for a summary of global sever load-balancing configuration-level commands.


OL-5692-01

Chapter 1 Command-Line Interface Command SummaryCheck Command Syntax

Check Command SyntaxThe user interface provides error isolation in the form of an error indicator, a caret symbol (^). The ^ symbol appears at the point in the command string where you have entered an incorrect command, keyword, or argument.

In the following example, a syntax error occurs in the process of setting the device clock. Context-sensitive help is then used to check the syntax for setting the clock and correct the mistake.

gssm1.example.com#clock 20:06:00 26 july 2003 ^

% Invalid input detected at '^' marker.

gssm1.example.com#clock ? set Set the time and date timezone Set timezone

The help output shows that the set keyword is required. Press the Up Arrow to automatically repeat the previous command entr. Add a space and question mark (?) to display the following additional arguments:

gssm1.example.com#clock set ? <0-23>: Current Time (hh:mm:ss)

gssm1.example.com#clock set 20:00:00% Incomplete command.gssm1.example.com#clock set 20:00:00?<0-59> gssm1.example.com#clock set 20:00:00 ? <1-31> Day of Month april august december february january Month of the Year july june march may november october september gssm1.example.com#clock set 20:00:00 july ? <1-31> Day of Monthgssm1.example.com#clock set 20:00:00 july 26 ? <1993-2035> Yeargssm1.example.com#clock set 20:00:00 july 26 2004


OL-5692-01

Chapter 1 Command-Line Interface Command SummaryControlling Command Output

Controlling Command OutputYou can control the output of your GSS CLI commands (filtering it, or saving it to a file) using special operators that are added to your command syntax. The following table presents information on the various command options that allow you to control the output generated by GSS commands.

Keep the following considerations in mind when using the CLI output commands:

• You cannot use certain symbols (such as ‘, ;, or <) when using the | (pipe) or > (redirect) commands

• You can only use a single | (pipe) or a single > (redirect) command. The GSS software does not support the simultaneous use of both output commands.

Using the Pipe (|) CharacterYou can use the pipe (|) character to direct the output of any GSS command to a short list of programs: grep, sort, and wc. For example, to see all logs related to

the GSS keepalive function, enter:

show logs | grep -i KALE

The following sections discuss the use of the grep, sort, and wc commands with the pipe (|) character.

Using grep

The | grep operator filters CLI command output to display only the output containing the lines of text that match the specified text. For example, the following command lists only files containing “log” in a directory:

gssm1.example.com>lsplatform.cfgprops.cfgprops.cfg.startuprunmode-commentrunning.cfgsquidsysMessages.logsyslog-messages.logsysmsgsysout


OL-5692-01


system.logtmptomcattrace.log

gssm1.example.com>ls |grep logsysMessages.logsyslog-messages.logsystem.logtrace.log

For a detailed list of the options supported by the grep command, refer to the documentation provided with the Linux operating system.

Using sort

The | sort operator performs a sort of all files associated with a CLI command. For

example, the following command performs a reverse sort of all files appearing in a

directory:

gssm1.example.com>lsplatform.cfgprops.cfgprops.cfg.startuprunmode-commentrunning.cfgsquidsysMessages.logsyslog-messages.logsysmsgsysoutsystem.logtmptomcattrace.log

gssm1.example.com>ls | sort -rtrace.logsystem.logsysoutsysmsgsyslog-messages.logsysMessages.logsquidtmptomcatrunning.cfg


OL-5692-01


runmode-commentprops.cfg.startupprops.cfgplatform.cfg

For a detailed list of the options supported by the sort command, refer to the documentation provided with the Linux operating system.

Using wc

The | wc operator displays the total number of bytes, words, or lines in a file. For example, the following command shows the number of log messages currently in the main log file (gss.log):

gssm1.example.com> show logs | wc -l2236

For a detailed list of the options supported by the wc command, refer to the documentation provided with the Linux operating system.

Using the Redirect (>) CharacterYou can use the Redirect (>) operator to redirect the output of a command to a file. You may only redirect to a file in the current working directory, as determined using the pwd command.

For example:

gssm1.example.com# show running-config>running-config.txt


OL-5692-01

Chapter 1 Command-Line Interface Command SummarySystem Help

System Help You can obtain help when you enter CLI commands by using the following methods:

• To display a brief description of the context-sensitive help system, enter help.

• To list all commands for a command mode, enter a question mark (?) at the system prompt.

• To obtain a list of commands that start with a particular character set, enter an abbreviated command immediately followed by a question mark (?).

gssm1.example.com# cl?clear clock

• To list the command keywords or arguments, enter a space and a question mark (?) after the command:

gssm1.example.com# clock ? clear Clear the current time from the battery-backed clock save Save the current time into the battery-backed clock set Set the local time and date

Save Configuration ChangesTo avoid losing new configurations, save them to NVRAM using the copy or write commands, as shown in the following example:

gssm1.example.com# copy running-config startup-config

or

gssm1.example.com# write memory

Refer to the copy running-config startup-config command description in Chapter 2, Cisco Global Site Selector CLI Commands for more information.


OL-5692-01

Chapter 1 Command-Line Interface Command SummaryEXEC Command Summary

EXEC Command SummaryThe GSS software EXEC commands are entered in EXEC mode. Table 1-2 lists the user-level EXEC commands. Table 1-3 lists the privileged-level EXEC commands.

Table 1-2 GSS Software User-Level EXEC Commands

User EXEC Command Syntax Description

cd cd directoryname Changes the current directory.

dir dir [directory] Displays files in long list format.

dnslookup dnslookup {hostname | domainname}

Resolves host name (DNS).

enable enable Accesses privileged EXEC commands.

exit exit Exits from terminal session.

ftp ftp {ip_or_host} Opens an FTP session with a remote host device.

help help Provides assistance for command line-interface.

lls lls [directory] Displays directory files in long list format.

ls ls [directory] Displays files in directory.

ping ping {ip_or_host} Sends ICMP echo packets.

pwd pwd Displays path name of the present working directory.

scp scp {source_path [source_filename] target_host:target_path}

scp {source_host:/source_path[source_filename] target_path}

Securely copies files from or to a location.

show arp show arp Displays ARP information.

show boot-config show boot-config Displays the current boot image and boot device.


OL-5692-01


show clock show clock Display the system clock.

show ftp show ftp Displays the operating status of the File Transfer Protocol (FTP) for a GSS.

show ntp show ntp Displays the Network Time Protocol (NTP) configuration.

show services show services Displays the current state of the GSS services, such as FTP, NTP, SSH, TACACS+, Telnet, and SNMP.

show ssh show ssh Displays Secure Shell (SSH) status and configuration information.

show telnet show telnet Displaysthe status of the Telnet option on a GSS.

show terminal-length show terminal-length Displays the terminal length setting for a GSS.

show uptime show uptime Displays how long a GSS has been operational.

show user show user username Displays user information for a specific user.

show users show users Displays information about all GSS users.

show version show version [verbose] Displays version information about the GSS software.

tail tail filename Displays the last 10 lines of the named file.

telnet telnet {hostname | ip-address}[ port ]

Opens a Telnet session.

Table 1-2 GSS Software User-Level EXEC Commands (continued)



OL-5692-01


type type filename Displays the contents of a file.

? ? Generates a list of user EXEC commands.

Table 1-3 GSS Software Privileged-Level EXEC Commands

Privileged EXEC Command Syntax Description

cd cd directoryname Changes the current directory.

clear statistics clear statistics {boomerang | dns | keepalive {all | cra | http-head | icmp | kalap | ns | tcp} | proximity | sticky {mesh} | tacacs}

Resets statistics for the named subsystem.

clock clock {set hh:mm:ss MONTH DD YYYY | timezone timezonename}

Sets the device time or timezone.

configure configure Places the CLI session in configuration mode.

copy copy {disk startup-config filename | running-config [disk filename | startup-config] | startup-config disk filename}

Copies one of the following:

• File from disk to the startup-config

• The startup-config to a file on disk

• The running-config to a file on disk

• Technical support information to a file on disk

del del filename Deletes the named file.

dir dir [directory] Displays files in long list format.

disable disable Turns off privileged EXEC commands.

Table 1-2 GSS Software User-Level EXEC Commands (continued)



OL-5692-01


dnslookup dnslookup {hostname | domainname}

Resolves host name (DNS).

enable enable Accesses privileged EXEC commands.

exit exit Exits from the EXEC and configuration command levels to user level.

ftp ftp {ip_or_host} Opens an FTP session with a remote host device.

gss gss {disable | enable {gssm-primary | gssm-standby {gssm_hostname | gssm_IP_address} | gss {gssm_hostname | gssm_IP_address}} | restart | start | status [verbose] | stop}

Manages your GSS devices.

gss tech-report gss tech-report filename Generates a detailed report for use by Cisco Technical Assistance Center (TAC).

gssm gssm {backup full filename} | database {invalidate | maintain | purge-log-records {count number_records | days number_days} | report | status | validate}| primary-to-standby | restore filename | standby-to-primary}

Manages your Global Site Selector Manager and its embedded database.

install install filename Installs a new version of the GSS software.

lls lls [directory] Displays directory files in long list format.

ls ls [directory] Displays files in directory.

lsof lsof Lists all open files.

Table 1-3 GSS Software Privileged-Level EXEC Commands (continued)



OL-5692-01


ping ping {ip_or_host} Sends ICMP echo packets.

proximity database delete proximity database delete all Removes all entries from the PDB.

proximity database dump proximity database dump {filename} format {binary | xml} [entry-type {all | assigned | probed}] [entry-address {ip-address} netmask {netmask}]

Dumps entries contained in the proximity database to a named file.

proximity database load proximity database load filename format binary [override]

Loads and merges a proximity database from file into GSS memory.

proximity database periodic-backup

proximity database periodic-backup now

Forces an immediate backup of the proximity database residing in GSS memory.

proximity probe proximity probe {dproxy_address} {network_mask} [zone {zoneId | all}]

Initiates direct probing to a specific D-proxy IP address.

proximity start proximity start Enables proximity for a single GSS.

proximity stop proximity stop Disables proximity for a single GSS. Use this command when you need to locally override the global proximity enable option for purposes of troubleshooting.

pwd pwd Displays path name of the present working directory.

reload reload Halts the GSS and performs a cold restart of the device.

rename rename source_filename new_filename

Modifies the name of a specified file in a GSS directory or subdirectory.




OL-5692-01


reset-gui-admin-password reset-gui-admin-password [password text]

Restores the default Administration password used to log in to the primary GSSM GUI from nonvolatile random access memory (NVRAM) or allows you to change the Administration password login to access the GSSM GUI.

restore factory-defaults restore factory-defaults Sets the GSS configuration to the factory-default state.

rotate-logs rotate-logs [delete-rotated-logs] Forces the GSS to save all existing log files and replace them with fresh log files.

scp scp {source_path [source_filename] user@target_IP_address:target_path | user@source_IP_address:/source_path [source_filename] target_path}

Securely copies files from or to a location.

setup setup Initiates operation of a setup script that guides you through the initial configuration of a GSS device.

show access group show access group Displays a list of the access lists associated with your GSS interfaces Ethernet 0 and Ethernet 1.

show access-list show access-list Displays a list of the access lists configured on a GSS device.







OL-5692-01


show disk show disk Displays information about the GSS hard disk.


show interface show interface Displays GSS hardware interface information.

show ip routes show ip routers Displays the IP routing table for a GSS.

show logging show logging Displays the system message log configuration.

show logs show logs Sends the log activity to your current session.

show memory show memory Displays memory blocks and statistics.


show processes show processes Displays a list of internal GSS device processes.

show properties show properties Displays a list of configuration property settings for the GSS device.

show proximity show proximity Displays general status information about the proximity subsystem.

show proximity show proximity {group-name {groupname} | group-summary}

Displays statistics for created proximity groups.

show running-config show running-config Displays the current running configuration of a GSS.




OL-5692-01



show snmp show snmp Displays Simple Network Management Protocol (SNMP) operating status.


show startup-config show startup-config Displays the startup configuration.

show statistics show statistics boomerang {domain domain_name | global}

Displays statistics related to the boomerang server component of the GSS.

show statistics show statistics dns {answer {list | answer_name} | answer-group {list | group_name [verbose] } | domain {list | domain_name} | domain-list {list | domain_list_name [verbose] } | global | proximity rule | rule {list | rule_name} | source-address {list | sa_name} | source-address-list {list | sa_list_name [verbose]} | sticky rule}

Displays statistics from the domain name server (DNS) component of the GSS.

show statistics show statistics keepalive {cra {IP_address | all | list} | global | http-head {IP_address | all | list} | icmp {IP_address | all | list} | kalap {IP_address | all | list} | ns {IP_address | all | list} | tcp {IP_address | all | list}

Displays statistics about the keepalive component of the GSS software.




OL-5692-01


show statistics show statistics proximity {database | group-name {name} | group-summary | lookup | probes {detailed}}

Displays statistics about the network proximity operation of your GSS.

show statistics show statistics sticky {global | group-name {name} | group-summary | mesh}

Displays general statistics about the sticky database.

show statistics show statistics tacacs Displays the current TACACS+ statistics.

show sticky show sticky Displays general status information about the sticky subsystem.

show sticky show sticky database {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip-address} netmask {netmask} | rule {rule_name}}

Displays sticky database entries.

show sticky show sticky global [verbose] Displays global sticky operating status and statistics about each GSS peer in the mesh.

show sticky show sticky {group-name {groupname} | group-summary}

Displays statistics for created sticky groups.

show sticky show sticky mesh {session {session_id} [verbose]} | [verbose]

Displays global sticky operating status and statistics about each GSS peer in the mesh.

show system-status show system-status Displays a report on the current operating status of a GSS.

show tacacs show tacacs Displays the TACACS configuration on a GSS.




OL-5692-01


show tech-support show tech-support [config | core-files]

Display a report on the current operating configuration of a GSS that can be used by Cisco technical support representatives for troubleshooting.

show telnet show telnet Displays the status of the Telnet option on a GSS.






shutdown shutdown Halts the GSS device and puts it in a powered-down state.

sticky database delete sticky database delete {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip-address} netmask {netmask} | rule {rule_name}}

Removes entries from the sticky database.

sticky database dump sticky database dump {filename} format {binary | xml} entry-type {all | group | ip}

Instructs the GSS to dump sticky entries to an output file on the GSS disk.

sticky database load sticky database load filename Loads a sticky database from file into GSS memory, replacing the existing sticky database entries.




OL-5692-01


sticky database periodic-backup

sticky database periodic-backup now

Forces an immediate backup of the sticky database residing in GSS memory.

sticky start sticky start Enables DNS sticky for a single GSS.

sticky stop sticky stop Disables sticky for a single GSS. Use this command when you need to locally override the global sticky enable option for purposes of troubleshooting.

tail tail filename Displays the last 10 lines of the named file.

tcpdump tcpdump interface {any | eth0 | eth1} | protocol {any | icmp | tcp | udp} | host {any | ip_or_host} | port {any | port} | network {any | ip-address ip-subnet} | file {filename}

Outputs all traffic to and from a particular GSS interface.

telnet telnet {ip_or_host} [ port ] Opens a Telnet session.

traceroute traceroute {ip_or_host} Displays the route a packet took to reach the host destination.

type type filename Displays the contents of a file.

write write memory Copies the running configuration as the new startup configuration.




OL-5692-01

Chapter 1 Command-Line Interface Command SummaryGlobal Configuration Command Summary

Global Configuration Command SummaryThe GSS global configuration commands are entered in the global configuration mode. Table 1-4 lists the global configuration commands.

Table 1-4 GSS Software Global Configuration Commands

Global Configuration Command Syntax Description

aaa aaa {authentication {ftp | gui | login | ssh} [local] | authorization commands | accounting {commands | gui}}

Enables TACACS+ authentication, authorization, and accounting.

access-group access-group name interface {eth0 | eth1}

Assigns an access list to a GSS network interface.

access-list access-list name {permit | deny} protocol [source-address source-netmask | host source-address | any] operator port [port] [destination-port operator port [port]]

Configures access lists on the GSS.

certificate set-attributes certificate set-attributes Customizes the X.509 fields, extensions, and properties found on the security certificate issued by Cisco Systems.

end end Exits global configuration and privileged EXEC modes.

exec-timeout exec-timeout timeout Configures the length of time that an inactive Telnet session remains open.

exit exit Exits global configuration and privileged EXEC modes.

ftp ftp {enable | {ip_or_host} Enables or disables FTP on the GSS device, or opens an FTP session with a remote host device.


OL-5692-01


gslb gslb Places the CLI session in global server load-balancing mode.

help help Provides assistance for the CLI.

hostname hostname name Configures the system’s network name.

interface ethernet interface ethernet {0 | 1} {autosense | duplex {auto | full | half} | ip address {ip-address netmask} | no | gss-communications | gss-tcp-keepalives | shutdown | speed {mbits | auto}

Configures the Ethernet interface on the GSS device.

ip ip {default-gateway ip-address | name-server ip-addresses | route destination_address netmask gateway}

Configures the network device IP configuration settings.

logging logging {disk {enable | priority loglevel | subsystem name priority loglevel} | {host {enable | ip ip_addresses | priority loglevel | subsystem name priority loglevel}}

Configures system logging (syslog).

no no {aaa | access-group | access-list | certificate | copy | exec-timeout | ftp | gslb | gss | help | hostname | interface | ip | logging | ntp | ntp-server | property | show | snmp | ssh | tacacs-server | telnet | terminal-length | username | write}

Negates a command or sets the command to its default settings.

ntp ntp enable Enables the Network Time Protocol (NTP) service.

Table 1-4 GSS Software Global Configuration Commands (continued)



OL-5692-01


ntp-server ntp-server {ip_or_host} Configures NTP server IP address.

property set property set property_name property_value

Enables, disables, or modifies one of a variety of GSS system configuration options. Use this command only under the direct supervision of Cisco Technical Support.















OL-5692-01






show proximity show proximity Displays general status information about the proximity subsystem.

show proximity show proximity {group-name {groupname} | group-summary}

Displays statistics for created proximity groups.











OL-5692-01


show statistics show statistics dns {answer {list | answer_name} | answer-group {list | group_name [verbose] } | domain {list | domain_name} | domain-list {list | domain_list_name [verbose] } | global | proximity rule | rule {list | rule_name} | source-address {list | sa_name} | source-address-list {list | sa_list_name [verbose]} | sticky rule}




show statistics show statistics proximity {database | group-name {name} | group-summary | lookup | probes {detailed}}

Displays statistics about the network proximity operation of your GSS.

show statistics show statistics sticky {global | group-name {name} | group-summary | mesh}

Displays general statistics about the sticky database.

show statistics show statistics tacacs Displays the current TACACS+ statistics.

show sticky show sticky Displays general status information about the sticky subsystem.




OL-5692-01


show sticky show sticky database {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip-address} netmask {netmask} | rule {rule_name}}

Displays sticky database entries.

show sticky show sticky global [verbose] Displays global sticky operating status and statistics about each GSS peer in the mesh.

show sticky show sticky {group-name {groupname} | group-summary}

Displays statistics for created sticky groups.

show sticky show sticky mesh {session {session_id} [verbose]} | [verbose]

Displays global sticky operating status and statistics about each GSS peer in the mesh.


show tacacs show tacacs Displays the TACACS configuration on a GSS.








OL-5692-01





snmp snmp {community-string | contact | enable | location}

Enables or disables Simple Network Management Protocol (SNMP) on your GSS device.

ssh enable ssh enable Configures SSH service parameters.

ssh keys ssh keys Globally enable remote access to copied private and public keys on the GSS.

ssh protocol version 1 ssh protocol version 1 Enables SSH protocol version 1 for the GSS.

tacacs-server tacacs-server {host ip_or_host [port port] [key encryption_key]} | keepalive-enable | timeout {seconds}

Specifies the names of the IP host or hosts maintaining the TACACS+ server, enables the use of TCP keepalives with the configured TACACS+ servers, and defines a global TACACS+ timeout period for use with the configured TACACS+ servers.

telnet telnet {enable | {ip_or_host} | [port]

Enables or disables Telnet or opens a new Telnet session.

terminal-length terminal-length number Sets the number of rows displayed on a terminal, between 0 (meaning no pauses in screen output) and 512.




OL-5692-01

Chapter 1 Command-Line Interface Command SummaryInterface Configuration Command Summary

Interface Configuration Command SummaryThe interface configuration commands are entered in the interface configuration mode. Table 1-5 lists the interface configuration commands.

username username name {delete | password password privilege {user | admin}}

Creates or removes a user account.

write write memory Copies the running configuration as the new startup configuration.



Table 1-5 GSS Software Interface Configuration Commands

Interface Command Syntax Description

autosense autosense Sets current interface to autosense.

duplex duplex {auto | full | half} Sets current interface to duplex mode.

exit exit Exits from interface mode.

gss-communications gss-communications Configures the interface for communication between GSS devices

gss-tcp-keepalives gss-tcp-keepalives Configures the interface for use receiving TCP keepalive information.

help help Provides assistance for the CLI.

ip address ip {address ip-address ip-subnet} Configures the Internet Protocol parameters for the specified interface.

no no {autosense | duplex | ip | show | shutdown | speed}

Negates a command or sets its defaults.


OL-5692-01
















Table 1-5 GSS Software Interface Configuration Commands (continued)



OL-5692-01









show statistics show statistics dns {answer {list | answer_name} | answer-group {list | group_name [verbose] } | domain {list | domain_name} | domain-list {list | domain_list_name [verbose] } | global | rule {list | rule_name} | source-address {list | sa_name} | source-address-list {list | sa_list_name [verbose]}}







OL-5692-01











shutdown shutdown Shuts down the specified interface.

speed speed {mbits | auto} Sets specified interface line speed (10, 100, 1000 Mbps, or autonegotiate).




OL-5692-01

Chapter 1 Command-Line Interface Command SummaryGlobal Server Load-Balancing Configuration Command Summary

Global Server Load-Balancing Configuration Command Summary

The CLI commands for proximity static entries, proximity groups, and sticky groups are entered in the global server load-balancing configuration mode. Table 1-6 lists the global server load-balancing configuration mode commands.

Table 1-6 GSS Software Global Server Load-Balancing Commands

gslb Command Syntax Description

exit exit Exits from global server load-balancing configuration mode.

no no {proximity | show} Negates a command or sets its defaults.

proximity assign proximity assign {group {groupname}} | ip {entryaddress} | [probe-target {ip-address} | zone-data {“zoneId:RTT”}]

Adds static proximity entries in the proximity database of a GSS device in your network.

proximity group proximity group {groupname} ip {ip-address} {prefix | netmask}

Groups multiple D-proxy IP addresses as a single entry in the proximity database.

sticky group sticky group {groupname} ip {ip-address} {prefix | netmask}

Groups multiple D-proxy IP addresses as a single entry in the sticky database.

show show running-config Displays running-configuration file information.


OL-5692-01

Chapter 1 Command-Line Interface Command SummaryGlobal Server Load-Balancing Configuration Command Summary


OL-5692-01

Cisco GloOL-5692-01

C H A P T E R 2
Cisco Global Site Selector CLI Commands
This chapter provides an alphabetical listing of the command-line interface (CLI) commands for the Cisco Global Site Selector (GSS). User EXEC, privileged EXEC, global configuration, and interface configuration commands are all included in this chapter.

Documentation of each command contains some combination of the following information:

• Command Syntax—Information on the correct structure and syntax for the command

• Usage Guidelines—Detailed information that describes the purpose of the command and its proper application

• Examples—Command syntax as it appears in a CLI session

• Related Commands—Other CLI commands with a purpose that is closely related to or dependent on the current command

For more information on accessing a CLI session, or the different CLI command modes, see Chapter 1, Command-Line Interface Command Summary.

2-1bal Site Selector Command Reference

Chapter 2 Cisco Global Site Selector CLI Commands?

?To display a list of the available commands and syntax options, use the ? command. For example:

?

Syntax Description This command has no arguments or keywords.

Defaults No default behavior or values

Command Modes All command modes

Usage Guidelines This command displays the commands and syntax options available to you at the point at which you enter the command. For additional background on the use of GSS help, refer to Chapter 1, Command-Line Interface Command Summary.

Examples gss1.example.com> ? cd Change directory dir Directory list dnslookup Resolve hostname (DNS) enable Turn on privileged commands exit Exit from the EXEC ftp Open FTP session to host help Description of the interactive help system lls list files in long info ls Directory list ping Ping a remote host pwd Show present working directory scp SecureCopy files [scp from to] show Show running system information tail Display last 10 lines of a file telnet Open telnet session to host type View a file


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commands?

host(config)# show ? aaa Configure TACACS+ settings access-group Configure access lists access-list Configure access lists certificate Administer Certificates copy Copy configuration or image data end Exit from configure mode exec-timeout Configure Exec timeout exit Exit from configure mode ftp File transfer operations gslb Configure Global Server Load Balancing gss GSS commands help Assistance for command line interface hostname Assign hostname (DNS hostname) interface Configure interface ip Internet Protocol Configuration commands logging Configure system logging no Negate a command or set its defaults ntp NTP service control ntp-server Set the Network Time Protocol(NTP) Server IP address/hostname property Set configuration properties show Show running system information snmp Enable/Disable SNMP ssh Configure ssh tacacs-server TACACS+ configuration telnet Telnet operations terminal-length Set Terminal commands username Establish User Name Authentication write Copy current configuration

Related Commands help


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsaaa

aaaTo enable TACACS+ authentication, authorization, and accounting (AAA), use the aaa command. To disable a specific TACACS+ function, use the no form of this command.

aaa {authentication {ftp | gui | login | ssh} [local] | authorization commands | accounting {commands | gui}}

no aaa {authentication {ftp | gui | login | ssh} [local] | authorization commands | accounting {commands | gui}}

Syntax Description authentication Enables TACACS+ authentication for the specific access method. Choose from the various remote GSS authentication methods, including direct console connection, Telnet, Secure Shell (SSH), File Transfer Protocol (FTP), or primary GSSM GUI. You can also select the option to have the GSS fall back to local authentication through either the console port or a Telnet connection if the GSS cannot remotely contact another specified TACACS+ server.

ftp Enables the TACACS+ authentication service for a File Transfer Protocol (FTP) remote access connection.

gui Enables the TACACS+ authentication service for a primary GSSM GUI connection.

login Enables the TACACS+ authentication service for the login service, using either a direct connection to the GSS console port or through a Telnet remote access connection.

ssh Enables the TACACS+ authentication service for a Secure Shell (SSH) remote access connection.

local (Optional) Used when you want the GSS to fall back to local authentication if TACACS+ authentication fails. The local option is always enabled for the login (console port or Telnet) access method.


OL-5692-01



authorization commands

Enables you to set parameters that restrict user access to specific GSS CLI commands, as defined by the TACACS+ server. Use the aaa authorization commands command to enable the TACACS+ authorization service to limit a user’s access to specific GSS CLI commands. The aaa authorization commands command applies to the user-level and privileged-level EXEC mode commands entered on the GSS. The command authorizes all attempts to use user-level and privileged-level EXEC mode commands, including global configuration and interface configuration commands.

accounting Enables the TACACS+ accounting service. AAA accounting enables you to monitor GSS CLI commands or primary GSSM GUI pages and user actions executed in the GSS. The information is contained in an accounting record and is transmitted from the GSS to the TACACS+ server. Each record can include a number of fields such as user name, the executed CLI commandd, the accessed primary GSSM GUI page and the performed action, and the time of execution.

commands Enables the TACACS+ accounting service for monitoring the use of GSS CLI commands. The commands option applies to the user-level and privileged-level EXEC mode commands that a user enters. Command accounting generates accounting records for all user-level and privileged-level EXEC mode commands, including global configuration and interface configuration commands.

gui Enables the TACACS+ accounting service for monitoring access to the primary GSSM GUI pages and the actions performed on those pages.


OL-5692-01


Command Modes Global configuration

Usage Guidelines Ensure that you enable remote access on the GSS device (SSH, Telnet, or FTP) before you enable TACACS+ authentication for the specific GSS access method. Refer to the Cisco Global Site Selector Getting Started Guide for details. Only one access list can be assigned to an interface at a time.

Before you enable the TACACS+ accounting service, ensure that you enable logging for accounting reports on the TACACS+ server and that you select the attributes that you wish to log. For general guidelines on the recommended setup of a TACACS+ server for accounting, refer to the Cisco Global Site Selector Administration Guide, Chapter 4, Managing GSS Accounts Through a TACACS+ Server.

Examples To enable TACACS+ authentication for an SSH remote access connection with fallback to local authentication, enter:

gss1.example.com(config)# aaa authentication ssh local

To enable TACACS+ authorization for the GSS CLI, enter:

gss1.example.com(config)# aaa authorization commands

To enable TACACS+ accounting for the GSS CLI, enter:

gss1.example.com(config)# aaa accounting commands

Related Commands show tacacs

tacacs-server host

tacacs-server keepalive-enable

tacacs-server timeout


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsaccess-group

access-groupTo assign a pre-existing access list to an interface on your GSS, use the access-group command. To disassociate access lists from an interface, use the no form of this command.

access-group name interface {eth0 | eth1}

no access-group

Syntax Description



Usage Guidelines To assign an access list to a GSS interface use the access-group command. An access list is a set of rules used to filter traffic to the GSS. If no access list is assigned to an interface, that interface will permit all packets to pass to the GSS.

Only one access list can be assigned to an interface at a time.

Examples gss1.example.com(config)# access-group icmp-rule eth0

Related Commands access-list

interface ethernet

name Name of a pre-existing access list.

interface Specifies an interface on the GSS to which the access list will be assigned.

eth0 Identifies the first Ethernet interface on the GSS device.

eth1 Identifies the second Ethernet interface on the GSS device.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsaccess-list

access-listTo configure access lists on the GSS that allow you to permit or deny packets access based on criteria that you establish such as protocol type, source address, or destination port, use the access-list command. To modify or delete access lists from your GSS, use the no form of this command.

access-list name {permit | deny} protocol [source-address source-netmask | host source-address | any] operator port [port] [destination-port operator port [port]]

no access-list name {permit | deny} protocol [source-address source-netmask | host source-address | any] operator port [port] [destination-port operator port [port]]

Syntax Description

name Alphanumeric name used to identify the access list you are creating.

permit When attached to an access condition, allows a connection when a packet matches the condition. All provisions of the condition must be met to make a match.

deny When attached to an access condition, prevents a connection when a packet matches the condition. All provisions of the condition must be met to make a match.

protocol The protocol for the traffic type. Recognized IP protocols include:

• tcp—Transmission Control Protocol

• udp—User Datagram Protocol

• icmp—Internet Control Message Protocol

source-address Network IP address from which the packet originated. The software uses the source-address and source-netmask arguments to match the incoming packet to a source network.


OL-5692-01


Defaults This command has no default behavior or values.


Usage Guidelines To accept or deny packets arriving at the GSS based on criteria such as the transfer protocol used and the packet source address, use the access-list command. An access list is a set of rules used to filter traffic to the GSS device. Rules can be used to either permit or deny packets and are associated with a particular interface using the aaa command. Each access list consists of one or more conditions. The GSS examines each packet to determine whether to forward or drop the packet based on the criteria you specified within the access lists.

source-netmask Subnet mask for the network from which the packet originated. The software uses the source-address and source-netmask arguments to match the incoming packet to a source network.

host Host machine that is the source of the packet

source-address IP address of the device that is the source of the packet

any Wildcard value for the packet source. With any used in place of either the source-address, source-netmask, or host source-address values, packets from all incoming sources will match.

operator Compares arbitrary bytes within the packet. Can be one of the following values:

• eq—equal

• neq—not equal

• range—range

port Source or destination port of the packet.

destination-port Compares the destination port of the packet with the access condition.


OL-5692-01


Each additional criteria statement that you enter is appended to the end of the access list statements. Also note that you cannot delete individual statements after they have been created. You can only delete an entire access list.

The order of access list statements is important. When the GSS is deciding whether to forward or block a packet, the software tests the packet against each criteria statement in the order the statements were created. After a match is found, no more criteria statements are checked.

If you create a criteria statement that explicitly permits all traffic, no statements added later will ever be checked. If you need additional statements, you must delete the access list and retype it with the new entries.

Examples gss1.example.com(config)# access-list rule1 1.2.3.4 255.255.255.240 type redirectgss1.example.com(config)# access-list rule2 permit udp any destination-port eq 80gss1.example.com(config)# access-list rule3 permit tcp host 1.2.3.4 gss1.example.com(config)# no access-list rule4 permit udp any destination-port eq 80

Related Commands aaa


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsautosense

autosenseTo enable autosense on an interface, use the autosense command. To disable this function, use the no form of this command.

autosense

no autosense


Defaults Autosense is enabled by default.

Command Modes Interface configuration

Usage Guidelines The autosense feature allows the current GSS interface to select the proper duplex mode (for example, full-duplex, half-duplex) for communicating with other network devices. The GSS automatically detects the network line speed (Fast Ethernet only) and duplex of incoming signals, and synchronizes those parameters during data transfer. Auto-negotiation enables the GSS and the other devices on the link to achieve the maximum common level of operation.

The autosense command is part of the suite of interface commands for the GSS and can only be used along with the interface ethernet command. Make sure that autosense is disabled before configuring an Ethernet interface. When autosense is on, manual configurations are overridden.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the autosense command.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsautosense

Examples gss1.example.com(config)# interface eth0 gss1.example.com(config-eth0)# autosense

gss1.example.com(config-eth0)# no autosense

Related Commands interface ethernet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandscd

cdTo change directory, use the cd command.

cd directoryname

Syntax Description


Command Modes User and privileged EXEC

Usage Guidelines Use this command to maneuver between directories and for file management. The directory name becomes the default prefix for all relative paths. Relative paths do not begin with a slash “/”. Absolute paths begin with a slash “/”.

Enter cd .. to move to the directory that is one level higher than the one you are in.

Examples Relative path:

gss1.example.com> cd local1

Absolute path:

gss1.example.com> cd /local1

Related Commands dir

lls

ls

lsof

pwd

directoryname Name of the directory.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandscertificate set-attributes

certificate set-attributesTo modify the attributes for the security certificate provided by Cisco Systems and installed on the primary GSSM, use the certificate set-attributes command. Use the no form of the command to return the attributes for the security certificate to the default settings.

certificate set-attributes

no certificate set-attributes




Usage Guidelines You can customize the X.509 fields, extensions, and properties found on the security certificate entered by Cisco Systems. The attribute changes that you make affect the fields on the Details tab of the certificate. When you enter the certificate set-attributes command, the GSS software displays a series of prompts related to the fields on the certificate. You must go though all of the prompts and make changes only to those fields that you want to modify. When completed, the software prompts you to save your changes. If you save your changes, a new certificate is generated. When you access the GSSM GUI, the Security Alert dialog box appears informing you that the certificate is invalid. At that point you can either reinstall the updated certificate or close the dialog box and continue GSSM GUI operation.

All fields displayed for each software prompt have a maximum character limit of 64, except for Country Code which has a maximum character limit of two.

Modifications to the certificate cannot occur while the GUI is active on the GSSM. You must enter the gss stop command before executing the certificate set-attributes command.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandscertificate set-attributes

Examples gss1.example.com(config)# certificate set-attributesCountry code (2 chars) [US]: State [California]: MACity [San Jose]: Boston Organization [Cisco Systems, Inc.]: New OrganizationOrganization Unit [ISBU]: e-Mail Address [[email protected]]: [email protected]

USMABostonNew [email protected]

Save these values? (y/n): y

Related Commands gss


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsclear statistics

clear statisticsTo reset GSS statistics for a specific subsystem, use the clear command.

clear statistics {boomerang | dns | keepalive {all | cra | http-head | icmp | kalap | ns | tcp} | proximity | sticky {mesh} | tacacs}

Syntax Description statistics Resets load balancing statistics on the GSS.

boomerang Resets statistics relating to the boomerang server component of the GSS.

dns Resets statistics relating to the DNS server component of the GSS, including proximity and sticky DNS rule statistics.

keepalive Resets statistics relating to the keepalive function of the GSS software.

all Resets statistics for all keepalive types maintained by the GSS.

cra Resets statistics for only CRA-type keepalives maintained by the GSS.

http-head Resets statistics for only the VIP HTTP-HEAD type keepalive maintained by the GSS.

icmp Resets statistics for only the VIP ICMP-type keepalive maintained by the GSS

kalap Resets statistics for only the VIP KAL-AP-type keepalive maintained by the GSS.

ns Resets statistics for the Name Server -type keepalive maintained by the GSS.

tcp Resets statistics for the IP and port TCP-type keepalive maintained by the GSS.

proximity Resets statistics for the network proximity function.

sticky Resets statistics for the DNS sticky function.

mesh Resets mesh and session statistics for the local GSS node of the global sticky mesh.

tacacs Resets the TACACS+ statistics.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsclear statistics


Command Modes Privileged EXEC

Usage Guidelines Use the clear command to reset global server load balancing statistics for one or more of your GSS components. Clearing the statistics for a GSS component will erase all record of routing activity and performance for that device.

Examples gss1.example.com# clear statistics boomerangAre you sure? (yes/no) yesgss1.example.com# clear statistics dnsAre you sure? (yes/no) yescra keepalive statistics clearedgss1.example.com# clear statistics keepalive kalapAre you sure? (yes/no) yeskal-ap keepalive statistics clearedgss1.example.com# clear statistics proximity Are you sure? (yes/no) yes proximity statistics cleared


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsclock

clockTo set the current time or time zone for a GSS device, use the clock command.

clock {set hh:mm:ss MONTH DD YYYY | timezone timezonename}

Syntax Description set Sets the device clock to the date and time provided.

hh:mm:ss Current time to which the GSS device clock is being reset. Specify one or two digits for the hours, minutes, and seconds.

MONTH DD YYYY Current date to which the GSS device clock is being reset. Specify the full name of the month, one or two digits for the day, and four digits for the year. The following month names are recognized:

• January

• February

• March

• April

• May

• June

• July

• August

• September

• October

• November

• December


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsclock


Command Modes Privileged EXEC, global configuration, and interface configuration.

Usage Guidelines If you previously enabled NTP on a GSS using the ntp enable command, the GSS prevents you from using the clock set command and displays an error message. If you want to manually set the clock for the GSS, first disable NTP using the no ntp enable command before setting the clock.

Examples In the following examples, the clock command is used to set the GSS device time and timezone:

gss1.example.com# clock set 13:01:05 sept 15 2004gss1.example.com# clock timezone GMT

or

gss1.example.com# clock timezone europe paris

timezone Resets the GSS to synchronize log timestamps to a new timezone.

timezonename The name of the timezone. Enter ? to list all supported timezones, countries, continents, and cities. There are a number of options available to set the local time zone for your GSS:

• Standard time zone (for example, GMT, EST, UTC).

• Country or part of a continent (for example, America, Europe, Egypt)

• Specific city (for example, New-York, Paris)


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsconfigure

configureTo enter global configuration mode, use the configure command.

configure




Usage Guidelines To exit global configuration mode, use the end or exit commands, or by pressing the Ctrl-Z key sequence.

Examples gss1.example.com# configure gss1.example.com(config)#

Related Commands Ctrl-Z

end

exit


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandscopy

copyTo copy configuration settings to or from the GSS device, use the copy command.

copy {disk startup-config filename | startup-config disk filename | running-config [disk filename | startup-config]}

Syntax Description



Usage Guidelines When supplying an output filename enter the name only. Do not include path information with the file name.

disk startup-config Loads the GSS device startup configuration settings from a named file located on the GSS.

startup-config disk Copies the GSS device startup configuration to a named file on the GSS.

running-config disk Copies the GSS device current running configuration to a named file on the GSS.

running-config startup-config Copies the GSS device current running configuration as the new startup configuration.

filename Name of the output file containing the startup- configuration or running-configuration information.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandscopy

Examples In the following examples, the copy command is used to load a new startup configuration to the device from a file, and to copy the current running configuration to a file:

gss1.example.com# copy disk startup-config configfilegss1.example.com# copy running config disk runconfigfile

Related Commands ftp

scp


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsdel

delTo delete files from your GSS device, use the del command.

del filename

Syntax Description



Examples gss1.example.com> enablegss1.example.com# del oldtechrept.tgzgss1.example.com#

Related Commands copy

dir

lls

ls

filename Name of the file to be deleted


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsdir

dirTo view a long list of files in a directory, use the dir command.

dir [directory]

Syntax Description

Defaults Current directory


Usage Guidelines Use this command to view a detailed list of files contained within the working directory, including names, sizes, and time created. The equivalent command is lls.

Examples gss1.example.com# dir

total 2249436drwxrwxrwx 10 root root 4096 Jul 26 17:28 .drwxrwxrwx 20 root root 4096 Jul 27 13:08 ..-rw------- 1 root root 204 Jul 26 14:47 .Xauthority-rw------- 1 root root 10661 Jul 27 11:46 .bash_history-rw-r--r-- 1 root users 24 Jun 15 12:38 .bash_logout-rw-r--r-- 1 root users 191 Jun 15 12:38 .bash_profile-rw-r--r-- 1 root users 124 Jun 15 12:38 .bashrc-rw-r--r-- 1 root users 847 Jun 15 12:38 .emacsdrwxr-xr-x 3 root root 4096 Apr 7 10:42 .emacs.d-rw------- 1 root root 419 Jul 27 11:47 .psql_historydrwx------ 2 root root 4096 May 13 13:15 .ssh-rw-r--r-- 1 root root 1537 Jun 1 14:06 Environment.console-rw-r--r-- 1 root root 1566 Jun 1 14:07 Environment.ssh-rw-r--r-- 1 root root 16999 Jul 26 10:19 FooBar.full-rw-r--r-- 1 root root 2467987 Jun 7 11:02 Foobar.tgz

directory (Optional) Name of the directory to list.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsdir

-rw-r--r-- 1 root root 21081 Jul 6 18:45 GSS1-1.2-2.full-rw-r--r-- 1 root root 20055 Jul 1 14:59 GSS1-1.2.full-rw-r--r-- 1 root root 18441 Jul 23 10:47 GSS1-bak.full-rw-r--r-- 1 root root 212 Jan 5 2004 PropsTest.ptkdb-rw-r--r-- 1 root root 16851 Apr 5 16:55 Resource.pm-rw-r--r-- 1 root root 41431310 Jun 14 15:08 acr.tar.gz-rw-r--r-- 1 root root 41431310 Jun 14 15:09 acr.tar.gz.2-rw-r--r-- 1 root root 137665 Jan 21 2004 arpwatch-2.1a11-7.9.1.i386.rpm...

Related Commands lls

ls

pwd


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsdisable

disableTo turn off privileged EXEC mode, use the disable command.

disable




Usage Guidelines The disable command places you in user EXEC mode. To turn privileged EXEC mode back on, use the enable command.

Examples gss1.example.com# disablegss1.example.com>

Related Commands enable

exit


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsdnslookup

dnslookupTo resolve a host or domain name to an IP address, use the dnslookup command.

dnslookup {hostname | domainname}

Syntax Description



Examples In the following examples, the dnslookup command is used to resolve the host name myhost.cisco.com to IP address 172.31.69.11, cisco.com to IP address 192.168.219.25, and the IP address 10.86.209.210 to gss.cisco.com.:

gss1.example.com# dnslookup myhost.cisco.comServer: mydnsserver.cisco.comAddress: 172.16.69.12

Name: myhost.cisco.comAddress: 172.16.69.11

gss1.example.com# dnslookup cisco.comServer: dns-bxb.cisco.comAddress: 161.44.124.122

Name: www.cisco.comAddress: 198.168.219.25

gss1.example.com# dnslookup 10.86.209.210Server: dns-bxb.cisco.comAddress: 161.44.124.122

Name: gss.cisco.comAddress: 10.86.209.210

hostname Name of host on the network.

domainname Domain name.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsduplex

duplexTo configure an interface for autonegotitate, full-duplex, or half-duplex operation, use the duplex command. To disable this function, use the no form of this command.

duplex {auto | full | half}

no duplex

Syntax Description

Defaults The default duplex for a GSS interface is autonegotiate.


Usage Guidelines Use this command to configure an interface for duplex operation. Full duplex allows data to travel in both directions at the same time through an interface or a cable. A half-duplex setting ensures that data only travels in one direction at any given time. Although full duplex is faster, the interfaces sometimes cannot operate effectively in this mode. If you encounter excessive collisions or network errors, configure the interface for half duplex rather than full duplex.

auto Resets the Fast Ethernet and Gigabit Ethernet ports to automatically negotiate port speed and duplex of incoming signals.

full Configures an interface for full-duplex operation. Full duplex allows data to travel in both directions at the same time through an interface or a cable.

half Configures an interface for half-duplex operation. A half-duplex setting ensures that data only travels in one direction at any given time.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsduplex

The duplex command cannot be set for full- or half-duplex until you specify an interface bandwidth (Mbps) using the speed command. If you enter a duplex command (other than auto) without a specified speed setting, the following error message appears:

Duplex will not be set until speed is set to a non-auto value.

The duplex command is part of the suite of interface commands for the GSS and can only be used along with the interface ethernet command.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the duplex command.

Examples gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# duplex full

gss1.example.com(config-eth0)# no duplex


speed


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsenable

enableTo access privileged EXEC commands, use the enable command.

enable




Usage Guidelines To access privileged EXEC mode from user EXEC mode, use the enable command. The disable command takes you from privileged EXEC mode to user EXEC mode.

Examples gss1.example.com> enablegss1.example.com#

Related Commands disable

exit


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsend

endTo exit the EXEC or global configuration command shell, use the end command.

end



Command Modes EXEC and global configuration

Usage Guidelines Use the end command in any configuration mode to return to EXEC mode. This is equivalent to the Ctrl-Z or the exit command.

The end command entered in the user-level EXEC shell terminates the console or Telnet session.

Examples gss1.example.com(config)# endgss1.example.com# endgss1.example.com>


exit


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsexec-timeout

exec-timeoutTo modify the length of time that must expire before a GSS device automatically logs off an inactive user, use the exec-timeout command. To remove the exec-timeout setting and restore the default timeout value of 150 minutes on the GSS device, use the no form of this command.

exec-timeout minutes

no exec-timeout

Defaults The default timeout for a GSS device is 150 minutes.


Usage Guidelines Use the exec-timeout command to lengthen or shorten the period for which a user logged on to a GSS device in EXEC-mode must be idle before the session is automatically terminated. Users logged on to GSS devices in the global configuration mode are not affected by the exec-timeout command setting.

Examples gss1.example.com(config)# exec-timeout 10

minutes Length of time, in minutes, that accounts must be inactive before they are timed out (1 to 44,640 minutes).


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsexit

exitTo access the EXEC command shell from the global or interface configuration command shells, use the exit command.

exit



Command Modes All command modes

Usage Guidelines Use the exit command in any configuration mode to return to EXEC mode. This is equivalent to the end command or pressing Ctrl-Z.

The exit command entered in the user-level EXEC shell terminates the console or Telnet session.

Examples gss1.example.com(config)# exitgss1.example.com# exitgss1.example.com>

Related Commands end

Ctrl-Z


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsftp

ftp To enable the File Transfer Protocol (FTP) or launch an FTP session on your GSS device, use the ftp command. Use the no form of this command to disable FTP on your GSS device.

ftp {enable | {ip_or_host}

no ftp enable

Syntax Description

Defaults FTP is disabled on your GSS device by default.

Command Modes User EXEC, privileged EXEC, and global configuration

Usage Guidelines Use the ftp enable command in global configuration mode to enable the FTP server on the selected device. Use the ftp command in EXEC or global configuration mode to launch the FTP client, which can be used to transfer a file to and from remote machines.

Examples gss1.example.com(config)# ftp enablegss1.example.com# ftp 192.168.0.1

Related Commands show disk

telnet

scp

enable Allows FTP server access on the selected device.

ip_or_host IP address or host name of the FTP server you want to access. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or a mnemonic host name (for example, myhost.mydomain.com).


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgslb

gslbTo enter global server load-balancing configuration mode, use the gslb command.

gslb




Usage Guidelines To exit global server load-balancing configuration mode, use the end or exit commands or press the Ctrl-Z key sequence.

Examples gss1.example.com# configure gss1.example.com(config)# gslbgss1.example.com(config-gslb)#


end

exit


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgss

gssTo manage your GSS devices, use the gss command.

gss {disable | enable {gssm-primary | gssm-standby {primary_GSSM_hostname | primary_GSSM_IP_address} | gss {primary_GSSM_hostname | primary_GSSM_IP_address}}} | restart | start | status [verbose] | stop}

Syntax Description disable Disables the selected device (GSSM or GSS) and removes any existing configuration, including deleting the GSSM database from the GSS device and removing certificate attributes specified using the certificate set-attributes command. This option returns the GSS device to the initial, disabled state. Disabling a GSS device is only necessary when you want to switch the role of a GSS within a network (for example, change a GSS to a GSSM or if you need to move a GSS or GSSM to a different network of GSS devices.

enable Enables the selected device to act as the type of device you specify: either a GSSM or GSS This option creates the embedded database on the primary GSSM that stores and manages configuration information for the GSS network. It also performs all of the other initialization processes to enable the device in a network of GSS devices. Enabling a GSS device is a one-time initialization step that is required only when you first set up the device within a network of GSS devices.

gssm-primary Configures the selected device to act as the primary GSSM for your GSS network, responsible for maintaining status information on GSS devices as well load balancing information that is distributed to devices on the network


OL-5692-01


gssm-standby Configures the selected device to act as a standby GSSM which will take over GSS network management should the primary GSSM go offline

primary_GSSM_hostname The DNS hostname of the device currently serving as the primary GSSM

primary_GSSM_IP_address The network address of the device currently serving as the primary GSSM

gss Indicates that the selected device should function as a GSS on the GSS network

restart Stops and restarts the GSS software on the selected device

start Starts the GSS software on the selected device following initial configuration or a software upgrade.

status Displays detailed information on the current operating state of the GSS device including online status, software version, and start date or time for the various components. The equivalent command is show system-status.

verbose Displays the same detailed information on the current operating state of the GSS device as with the gss status command, including CPU utilization.

Note The process for calculating CPU Utilization can take additional time when using the gss status verbose command. On a busy system, the gss status verbose command can take approximately 10 seconds to complete. If you do not require calculation of the CPU Utilization operating parameter, then we recommend that you use the gss status command.

stop Stops the GSS software prior to a software upgrade, maintenance, or troubleshooting activities


OL-5692-01




Usage Guidelines The gss command provides a variety of options for managing your GSSs and GSSMs, including:

• Designating individual devices to act as a GSS, primary GSSM, or standby GSSM using the gss, gssm-primary, or gssm-standby options of the gss command

• Controlling the GSS servers on the device so that you can perform required maintenance and software upgrades using the start, stop, and restart commands

Examples gss1.example.com# gss stopgss1.example.com# gss statusCisco GSS - 1.2(1) - Main branch GSSM - primary [Tue Jul 27 13:54:35 EDT 2004]

Normal Operation [runmode = 5]

START SERVER 13:54 Boomerang 13:54 Config Agent (crdirector) 13:53 Config Server (crm) 13:54 DNS Server 13:53 Database 13:53 GUI Server (tomcat) 13:54 Keepalive Engine 13:53 Node Manager 13:54 Proximity 13:54 Sticky Jul16 Syslog 13:54 Web Server (apache)


OL-5692-01


gss1.example.com# gss status verbose Cisco GSS - 1.2(1) - Main branch GSSM - primary [Tue Jul 27 13:54:35 EDT 2004]

Normal Operation [runmode = 5]

START SERVER 13:54 Boomerang 13:54 Config Agent (crdirector) 13:53 Config Server (crm) 13:54 DNS Server 13:53 Database 13:53 GUI Server (tomcat) 13:54 Keepalive Engine 13:53 Node Manager 13:54 Proximity 13:54 Sticky Jul16 Syslog 13:54 Web Server (apache)

Related Commands gss tech-report

gssm

gss-tcp-keepalives

show sticky

show sticky global


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgss tech-report

gss tech-reportTo generate a detailed report for use by Cisco Technical Assistance Center (TAC) representatives in troubleshooting persistent GSS problems, use the gss tech-report command.

gss tech-report filename

Syntax Description



Usage Guidelines The file generated is a tar- format archive file with a .tgz extension.

Examples gss1.example.com# gss stopgss1.example.com# gss tech-report gss_techrpt1

Creating report for Cisco TAC. This may take a few minutes...Created debug package: /home/techrpt1.tgzUse scp/ftp to retrieve.

filename The user-assigned name for the report generated by the gss tech-report command


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgss-communications

gss-communicationsTo designate the current interface as the interface to be used for GSS inter-device communication, use the gss-communications command.

gss-communications

Syntax Description No arguments or keywords.

Defaults The first Ethernet interface (eth0) is used for inter-device communications by default.


Usage Guidelines The gss-communications command is part of the suite of interface commands for the GSS and can only be used along with the interface ethernet command.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the gss-communications command.

Examples gss1.example.com(config)# interface eth0 gss1.example.com(config-eth0)# gss-communications


gss-tcp-keepalives

interface ethernet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgss-tcp-keepalives

gss-tcp-keepalivesTo designate the current interface as the interface that will be used for GSS keepalive communication, use the gss-tcp-keepalives command.

gss-tcp-keepalives

Syntax Description No arguments or keywords.

Defaults The first Ethernet interface (eth0) is used for keepalive traffic by default.


Usage Guidelines The gss-tcp-keepalives command is part of the suite of interface commands for the GSS and can only be used along with the interface ethernet command.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the gss-tcp-keepalives command.

Examples gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# gss-tcp-keepalives


gss tech-report

interface ethernet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsgssm

gssmTo manage your primary and standby GSSM and your GSS database, use the gssm command.

gssm backup full filename | database {invalidate | maintain | purge-log-records {count number_records| days number_days} | report | status | validate}| primary-to-standby | restore filename | standby-to-primary

Syntax Description backup Performs a backup of GSSM data on the GSS device.

full Performs a back up of both the database component of the GSSM and its network and device configuration information. The primary GSSM backup does .not include user files that reside in the /home directory.

filename Name of the database backup file. This can be the target file for a database backup action, or the source file for a database restore action.

database Creates, configures, or removes the embedded database on the GSSM.

invalidate Invalidates GSSM database records.

maintain Cleans up the GSSM database by defragmenting and optimizing space allocation.

purge-log-records Purges system log messages from the GSSM database for a specified number or period of time. This option removes the system log messages appearing on the primary GSSM GUI, the System Log list page of the Tools navigation tab.

count Purges a quantity of database records up to the last n records.

number_records The number of database system log records, starting back from the last record, that will be retained when the database is purged.

days Purges records covering a set time period up to n days before today.


OL-5692-01




Usage Guidelines Use the gssm database command to manage the embedded GSS database. The various command options allow you to monitor the status of your database as well as perform standard maintenance tasks such as backing up and restoring the database, validating database content, and purging records.

Use the gssm restore command option to restore an earlier version of the GSSM from a full backup image.

number_days The number of days back, starting from today, for which database system log records will be retained when the database is purged.

report Generates and displays a report that identifies invalidated database records in the GSSM database.

status Reports the current running status of GSSM database.

validate Validates GSSM database records.

primary-to-standby Changes the role of the GSSM from primary to standby GSSM.

restore Restores the GSSM from a full backup file.

filename The name of the GSSM backup image that will be used to restore the device.

standby-to-primary Changes the role of the GSSM from standby to GSSM.


OL-5692-01


Use the gssm standby-to-primary and primary-to-standby command options to switch the role of the selected GSSM in your GSS network. You must make sure that your original primary GSSM is offline before attempting to enable the standby GSSM as the new primary GSSM. Having two primary GSSMs active at the same time may result in the inadvertent loss of configuration changes for your GSS network. If this dual primary GSSM configuration occurs, the two primary GSSMs revert to standby mode and you will need to reconfigure one of the GSSMs as the primary GSSM.

The standby GSSM is capable of temporarily taking over the role as the primary GSSM is the event that the primary GSSM is unavailable (for example, you need to move the primary GSSM or you want to take it offline for repair or maintenance). The switching of roles between the designated primary GSSM and the standby GSSM is intended to be a temporary GSS network configuration until the original primary GSSM is back online. The interim primary GSSM can be used to monitor GSS behavior and make configuration changes if necessary. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network as described in the Cisco Global Site Selector Administration Guide.

Examples In the following examples, the gssm database command is used to check the running status of the GSSM embedded database, back up the database to a file, purge all database records except for the last 50, and delete the database:

gss1.example.com# gssm database report GSSM database validation report written to validation.loggss1.example.com# gssm database statusGSSM database is running.gss1.example.com# gssm database validateGSSM database passed validation.gss1.example.com# gssm primary-to-standbyStandby GSSM enabled.gss1.example.com# gssm standby-to-primaryStandby GSSM disabled.


gss tech-report

gss-tcp-keepalives


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandshelp

helpTo obtain online help for the GSS CLI, use the help command.

help



Command Modes User EXEC, privileged EXEC, and global configuration

Usage Guidelines You can get help at any point when specifying a CLI command by entering a question mark (?). If nothing matches, the help list will be empty, and you must back up until entering a ? shows the available options.

Two methods of help are provided at the CLI:

• Full help is available when you are ready to enter a command argument (for example, show ?) and describes each possible argument.

• Partial help is provided when you enter an abbreviated command and you want to know what arguments match the input (for example, show clock ?).

Examples gss1.example.com# helpgss1.example.com# help copy ?


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandshostname

hostnameTo configure the network name of the GSS device, use the hostname command. To reset the host name to the default setting, use the no form of this command.

hostname name

no hostname name

Syntax Description

Defaults The default host name is localhost.localdomain.


Usage Guidelines Use this command to configure the host name for the GSS device. The command requires a fully qualified hostname, which requires at least one “.” in the name (for example, hostname.foo.com). The host name is used for the command prompts and default configuration filenames. The no form of this command erases the configured host name and restores the default value.

For the purposes of GSS inter-device communications, the hostname should be configured on the same interface (eth0 or eth1) that is being used for GSS communications, as was set using the gss-communications command.

Examples The following example changes the host name to gss1.cisco.com:

localhost.localdomain(config)# hostname gss1.cisco.comgss1.cisco.com(config)#

The following example removes the host name:

gss1.cisco.com(config)# no hostname gss1.cisco.comlocalhost.localdomain(config)#

name New host name for the GSS device; the name is case sensitive (for example, hostname.foo.com). The name may be from 1 to 22 alphanumeric characters.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandshostname

Related Commands gss tech-report

interface ethernet

ip


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsinstall

installTo install a new version of the GSS software on your GSS device, use the install command.

install filename

Syntax Description


Usage Guidelines Use this command to install a new image of the GSS software on the Cisco GSS hardware. The upgrade file must be present on the Cisco GSS before you execute this command.

The install command cannot be executed while the Cisco GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the install command.

Examples The following example installs an updated version of the GSS software:

gss1.example.com# install /gss.upg

Related Commands show version

filename The name of the software update file.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsinterface ethernet

interface ethernetTo configure a GSS Ethernet interface, use the interface ethernet command.

interface ethernet {0 | 1}{autosense | duplex {auto | full | half} | ip address {ip-address netmask} | no | gss-communications | gss-tcp-keepalives | shutdown | speed {mbits | auto}

Syntax Description ethernet Specifies which of the Global Site Selector’s two Ethernet interfaces is configured.

0 Specifies the first network Ethernet interface on the GSS.

1 Specifies the second network Ethernet interface on the GSS.

autosense Sets the interface to automatically detect the network line speed (Fast Ethernet only) and duplex of incoming signals, and synchronizes those parameters during data transfer.

duplex Configures an interface for autonegotiate, full-duplex, or half-duplex operation.

auto Resets the Fast Ethernet and Gigabit Ethernet ports to automatically negotiate port speed and duplex of incoming signals.

full Configures an interface for full-duplex operation. Full duplex allows data to travel in both directions at the same time through an interface or a cable.

half Configures an interface for half-duplex operation. A half-duplex setting ensures that data only travels in one direction at any given time.

exit Exits interface configuration mode and returns you to configuration mode.

ip address Sets IP address and subnet mask of the Ethernet interface.


OL-5692-01



Command Modes Global configuration and interface configuration

Usage Guidelines Use the interface command to configure your GSS device Ethernet interfaces (0 or 1). Commands can be entered directly from global configuration mode, or you can use the interface command to enable interface configuration mode, which makes it easier to configure multiple interface parameters.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the interface command.

ip-address The IP address of the Ethernet interface. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).

netmask The subnet mask of the interface. The subnet mask of the interface in dotted-decimal notation (for example, 255.255.255.0).

no Negates the selected command or restores its default values.

gss-communications Sets the current interface as the primary interface for the device, which is used for all GSS-related communications.

gss-tcp-keepalives Designates the current interface as the interface that is used for GSS keepalive communication.

shutdown Shuts down the specified interface.

speed Sets the bandwidth of the specified interface.

mbits Bandwidth of interface in megabits per second (10, 100, or 1000 Mbps).

auto Enables the autonegotiate speed configuration.


OL-5692-01


To display the interface identifiers (for example, interface Ethernet 0), use the show running-config or show startup-config commands. The autosense, duplex, ip, shutdown, and speed commands are listed separately in this command reference.

The duplex command cannot be set for full- or half-duplex until you specify an interface bandwidth speed (Mbps) using the speed command. If you enter a duplex command (other than auto) without an explicit speed setting, the following error message appears:

Duplex will not be set until speed is set to a non-auto value.

Examples The following example configures an attribute of GSS interface Ethernet 0 with a single CLI command.

gss1.example.com(config)# interface eth0 speed auto

An interface can be configured in a sequence of CLI commands as follows.

gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# speed 100gss1.example.com(config-eth0)# duplex fullgss1.example.com(config-eth0)# exitgss1.example.com(config)#

Related Commands show interface

show running-config

show startup-config


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsip

ipTo change initial network device IP configuration settings, use the ip command. To delete or disable these settings, use the no form of this command.

ip {default-gateway ip-address | name-server ip-addresses | route destination_address netmask gateway}

no ip {default-gateway ip-address | name-server ip-addresses | route destination_address netmask gateway}

Syntax Description



default-gateway Specifies the default gateway (if not routing IP).

ip-address IP address of default gateway. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).

name-server Specifies the address of the name server.

ip-addresses IP addresses of name servers (up to a maximum of 8). Enter each IP address in dotted-decimal notation.

route Specifies the network route.

destination_address Destination IP route address. Enter the IP address in dotted-decimal notation.

netmask A subnet mask in dotted-decimal notation (for example, 255.255.255.0).

gateway Gateway address. Enter the IP address in dotted-decimal notation.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsip

Usage Guidelines To define a default gateway, use the ip default-gateway command. To delete the IP default gateway, use the no form of this command. The GSS uses the default gateway to route IP packets when there is no specific route found to the destination.

To define a default domain name, use the ip domain-name command. To remove the IP default domain name, use the no form of this command. The GSS appends the configured domain name to any host name that does not contain a domain name. The appended name is resolved by the DNS server and then added to the host table. The GSS must have at least one domain name server specified for the host name resolution to work correctly.

To specify the address of one or more name servers to use for name and address resolution, use the ip name-server command. You can specify up to eight name servers for the GSS device. To disable IP name servers, use the no form of this command.

To configure static IP routing, use the ip route command. To disable an IP routing, use the no form of this command.

Use the ip route command to add a specific static route for a network host. Any IP packet designated for the specified host uses the configured route.

Examples gss1.example.com(config)# ip default-gateway 192.168.7.18

gss1.example.com(config)# no ip default-gateway

gss1.example.com(config)# ip route 172.16.227.128 172.16.227.250

gss1.example.com(config)# no ip route 172.16.227.128 172.16.227.250

gss1.example.com(config)# ip domain-name cisco.com

gss1.example.com(config)# no ip domain-name

gss1.example.com(config)# ip name-server 10.11.12.13

gss1.example.com(config)# no ip name-server 10.11.12.14

Related Commands show ip routes


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsip address

ip addressTo configure the IP address of a GSS device network interface, use the ip address command. To disable a specific network address, use the no form of this command.

ip address {ip-address ip-subnet}

no ip address {ip-address ip-subnet}

Syntax Description



Usage Guidelines Use this command to set or change the IP address and subnet mask of the GSS network interfaces.

The ip address command is part of the suite of interface commands for the GSS and can only be used along with the interface command.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the ip address command.

The ip address interface configuration command allows configuration of secondary IP addresses for a specified interface as follows:

gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)#ip address ip-address ip-subnet

ip-address IP address. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).

ip-subnet IP subnet mask.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsip address

The same IP address cannot be assigned to more than one interface. The following command configures the IP address for the GSS communications interface:

gss1.example.com(config-eth0)# ip address ip-address ip-subnet gss-communications

Use the no form of the command to disable a specific IP address:

gss1.example.com(config-eth0)# no ip address ip-address ip-subnet

Note No two interfaces can have IP addresses in the same subnet.

Examples gss1.example.com(config-eth0)# ip address 172.16.10.10 255.255.0.0

gss1.example.com(config-eth0)# no ip address


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandslls

llsTo view a long list of files in a directory, use the lls command.

lls [directory]

Syntax Description


Command Modes User EXEC and privileged EXEC

Usage Guidelines Use this command to view a detailed list of files contained within the working directory, including names, sizes, and time created. The equivalent command is dir.

Examples gss1.example.com# llstotal 2249436drwxrwxrwx 10 root root 4096 Jul 26 17:28 .drwxrwxrwx 20 root root 4096 Jul 27 13:08 ..-rw------- 1 root root 204 Jul 26 14:47 .Xauthority-rw------- 1 root root 10661 Jul 27 11:46 .bash_history-rw-r--r-- 1 root users 24 Jun 15 12:38 .bash_logout-rw-r--r-- 1 root users 191 Jun 15 12:38 .bash_profile-rw-r--r-- 1 root users 124 Jun 15 12:38 .bashrc-rw-r--r-- 1 root users 847 Jun 15 12:38 .emacsdrwxr-xr-x 3 root root 4096 Apr 7 10:42 .emacs.d-rw------- 1 root root 419 Jul 27 11:47 .psql_historydrwx------ 2 root root 4096 May 13 13:15 .ssh-rw-r--r-- 1 root root 1537 Jun 1 14:06 Environment.console-rw-r--r-- 1 root root 1566 Jun 1 14:07 Environment.ssh-rw-r--r-- 1 root root 16999 Jul 26 10:19 FooBar.full-rw-r--r-- 1 root root 2467987 Jun 7 11:02 Foobar.tgz

directory (Optional) Name of the directory to list.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandslls

-rw-r--r-- 1 root root 21081 Jul 6 18:45 GSS1-1.2-2.full-rw-r--r-- 1 root root 20055 Jul 1 14:59 GSS1-1.2.full-rw-r--r-- 1 root root 18441 Jul 23 10:47 GSS1-bak.full-rw-r--r-- 1 root root 212 Jan 5 2004 PropsTest.ptkdb-rw-r--r-- 1 root root 16851 Apr 5 16:55 Resource.pm-rw-r--r-- 1 root root 41431310 Jun 14 15:08 acr.tar.gz-rw-r--r-- 1 root root 41431310 Jun 14 15:09 acr.tar.gz.2-rw-r--r-- 1 root root 137665 Jan 21 2004 arpwatch-2.1a11-7.9.1.i386.rpm...


ls

lsof

pwd


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandslogging

loggingTo configure system logging on your GSS device, use the logging command. To disable logging functions, use the no form of this command.

logging {disk {enable | priority loglevel | subsystem name priority loglevel} | {host {enable | ip ip_addresses | priority loglevel | subsystem name priority loglevel}}

no logging {disk {enable | priority loglevel | subsystem name priority loglevel} | {host {enable | ip ip_addresses | priority loglevel | subsystem name priority loglevel}}

Syntax Description disk Sets log to disk file.

enable Enables log to disk or host.

priority Sets which priority level messages to log.

loglevel Identifies the threshold that system messages must meet to be logged. Messages with lower priorities than the specified loglevel cannot be logged. Use one of the following keywords when selecting the loglevel, listed in order of priority:

• emergencies—System is unusable. Priority 0.

• alerts—Immediate action needed. Priority 1.

• critical—Immediate action needed. Priority 2.

• errors—Error conditions. Priority 3.

• warnings—Warning conditions. Priority 4.

• notifications—Normal but significant conditions. Priority 5.

• informational—Informational messages. Priority 6.

• debugging—Debugging messages. Priority 7.

subsystem Sets the log for a named GSS subsystem. Each subsystem can have a different log level applied for its messages.


OL-5692-01


Defaults Logging to disk: Enabled

Priority of message for disk: 5

Priority of message for host: 4

Log filename: /state/gss.log

Log file recycle size: 10 Mbytes

Maximum number of log files: 25


name Name of the GSS subsystem. Use one of the following keywords:

• boomerang—Boomerang logging messages.

• crm—GSSM logging messages.

• crdirector—CrDirector logging messages.

• dnsserver—Domain Name System (DNS) logging messages.

• keepalive—KeepAlive Engine logging messages.

• nodemgr—Node manager logging messages.

• proximity—Proximity logging messages.

• sticky—Sticky manager logging message.

• system—System logging messages.

• tacacs—TACACS+ logging messages.

host Sets log to a remote host machine.

ip Sets the remote host or hosts that will receive GSS log files.

ip_addresses Address or addresses of the remote logging hosts.


OL-5692-01


Usage Guidelines Use this command to set specific parameters of the system log file. Decisions about what level of logging to use can be made globally, or configured on a subsystem-by-subsystem basis. For example, you could configure the GSSM to log all error-level messages, but the node manager (nodemgr) to log a larger set of all notice-level messages.

To configure the GSS to send varying levels of event messages to an external syslog host, use the logging host subsystem option. Logging can be configured to send various levels of messages to disk using the logging disk subsystem option.

Examples gss1.example.com(config)# logging disk priority errorgss1.example.com(config)# logging host 172.16.2.3 priority notice

gss1.example.com(config)# logging disk subsystem crdirector priority informationgss1.example.com(config)# logging host subsystem kale priority error

gss1.example.com(config)# no logging disk priority error

Related Commands show logging


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsls

lsTo view a list of files or subdirectory names within a directory, use the ls command.

ls [directory]

Syntax Description



Usage Guidelines To list the filenames and subdirectories within a particular directory, use the ls directory command; to list the filenames and subdirectories of the current working directory, use the ls command. To view the present working directory, use the pwd command.

Examples gss1.example.com# lsgss-1.0.2.0.2-k9.upg id_rsa.pub megara.back.1_0.full rpmsgss-1.0.904.0.1-k9.upg gss_sample.full megara.back.1_1.full

Related Commandsg dir

lls

lsof

pwd

directory (Optional) Name of the directory for which you want a list of files.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandslsof

lsofTo view a list of all open files on your GSS device, use the lsof command.

lsof




Usage Guidelines To list the names, file properties, and locations of all files that are currently open on your GSS device, use the lsof command.

Examples gss1.example.com# lsof

COMMAND PID USER FD TYPE DEVICE SIZE NODE NAMEinit 1 root cwd DIR 8,7 4096 2 /init 1 root rtd DIR 8,7 4096 2 /init 1 root txt REG 8,7 25968 492 /sbin/initinit 1 root mem REG 8,7 341331 29 /lib/ld-2.1.3.soinit 1 root mem REG 8,7 4105868 36 /lib/libc-2.1.3.soinit 1 root 0u unix 0xf7f86f40 5851 socketinit 1 root 10u FIFO 8,8 4098 /rw/dev/initctlkflushd 2 root cwd DIR 8,7 4096 2 /kflushd 2 root rtd DIR 8,7 4096 2 /kflushd 2 root 0u unix 0xf7f86f40 5851 socket


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandslsof

kflushd 2 root 10u FIFO 8,8 4098 /rw/dev/initctlkupdate 3 root cwd DIR 8,7 4096 2 /kupdate 3 root rtd DIR 8,7 4096 2 /kupdate 3 root 0u unix 0xf7f86f40 5851 socketkupdate 3 root 10u FIFO 8,8 4098 /rw/dev/initctlkswapd 4 root cwd DIR 8,7 4096 2 /kswapd 4 root rtd DIR 8,7 4096 2 /kswapd 4 root 0u unix 0xf7f86f40 5851 socketkswapd 4 root 10u FIFO 8,8 4098 /rw/dev/initctlkeventd 5 root cwd DIR 8,7 4096 2 /keventd 5 root rtd DIR 8,7 4096 2 /keventd 5 root 0u unix 0xf7f86f40 5851 socketkeventd 5 root 10u FIFO 8,8 4098 /rw/dev/initctl...


ls

lls

pwd


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsno

noTo negate a CLI command or set it to its default settings, use the no command. Some GSS CLI commands do not have a no form.

no command

Syntax Description aaa Disables a specific TACACS+ function.

access-group Disassociates access lists from a specified Ethernet interface.

access-list Modifies or deletes access lists from the GSS.

autosense Disables autosense for a GSS Ethernet interface.

certificate set-attributes

Returns the attributes for the security certificate to the default settings.

copy Disables the copying of GSS configuration information or technical support information.

duplex Disables an Ethernet interface for autonegotiate, full-duplex, or half-duplex operation.

exec-timeout Removes the exec-timeout setting and restores the default timeout value of 150 minutes on the GSS device.

ftp Disables the File Transfer Protocol (FTP) on a GSS device.

gslb Disables proximity static entries, proximity groups, and sticky groups.

hostname Resets the host name to the default setting.

interface ethernet Disables a GSS Ethernet interface.

ip Disables or deletes network device IP configuration

settings.

logging Disables system logging (syslog).

ntp enable Disables the Network Time Protocol (NTP).

ntp-server Disables the NTP source.

property set Disables a system configuration property for the GSS

network.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsno


Command Modes Interface configuration, global, and global server load-balancing configuration

Usage Guidelines Use the no command to disable functions or negate a command. If you need to negate a specific command, such as the default gateway IP address, you must include the specific string in your command, such as no ip default-gateway ip-address.

Examples gss1.example.com(config)# no ip name-server 10.11.12.14

gss1.example.com(config)# no ntp-server 172.16.22.44

proximity Deletes a proximity group or deletes static entries from the proximity database (global server load-balancing mode).

snmp Disables Simple Network Management Protocol (SNMP) on a GSS device.

speed Restores default values for a GSS Ethernet interface.

ssh Disables Secure Shell (SSH) on the GSS device.

sticky Disables the sticky group function (global server load-balancing mode).

tacacs-server Disables a specific TACACS+ server function.

telnet Disables Telnet operations on the GSS device.

terminal-length Restore the default terminal length, 23 lines.

username Disables username authentication on the GSS device.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsntp enable

ntp enableTo enable the Network Time Protocol (NTP) service, use the ntp enable command. To disable NTP, use the no form of this command.

ntp enable

no ntp enable


Defaults NTP is disabled on your GSS device by default.


Usage Guidelines Use this command in conjunction with the ntp-server command to synchronize the GSS clock with the specified NTP server.

Examples gss1.example.com(config)# ntp enable

Related Commands clock

ntp-server

show ntp


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsntp-server

ntp-serverTo configure the Network Time Protocol (NTP) and to allow the system clock to be synchronized by a time server, use the ntp-server command. To disable an NTP time server, use the no form of this command.

ntp-server {ip_or_host}

no ntp-server {ip_or_host}

Syntax Description



Usage Guidelines Use this command to synchronize the GSS clock with the specified NTP server. When specifying more than one server, separate the NTP server addresses using spaces. The default NTP version number is 3. To disable NTP you must unconfigure all NTP servers using the no ntp-server {ip_or_host} command.

If you set the clock using the clock set command, this setting overrides the NTP clock adjustments made with the ntp-server command.

Examples gss1.example.com(config)# ntp enable gss1.example.com(config)# ntp-server 161.16.22.44 161.100.10.17gss1.example.com(config)# no ntp-server 161.16.22.44

ip_or_host The IP address or host name of the time server providing the clock synchronization (maximum of 4). Enter the IP address in dotted-decimal notation (for example, 192.168.11.1) or a mnemonic host name (for example, myhost.mydomain.com).


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsntp-server


ntp enable

show clock

show ntp


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsping

pingTo send ICMP echo packets for diagnosing basic network connectivity on networks, use the ping command.

ping {hostname | ip-address}

Syntax Description



Usage Guidelines To use this command with the hostname argument, be sure that the DNS functionality is configured on your GSS. To force the timeout of a nonresponsive host, or to eliminate a loop cycle, press the Ctrl-C key sequence.

Examples gss1.example.com# ping gss.cisco.comPING 172.16.0.0 (172.16.0.0) from 10.1.13.5 : 56(84) bytes of data.64 bytes from gss.cisco.com (172.16.0.0): icmp_seq=0 ttl=35 time=57.3 ms64 bytes from gss.cisco.com (172.16.0.0): icmp_seq=1 ttl=35 time=55.8 ms64 bytes from gss.cisco.com (172.16.0.0): icmp_seq=2 ttl=35 time=55.5 ms64 bytes from gss.cisco.com (172.16.0.0): icmp_seq=3 ttl=35 time=57.6 ms64 bytes from gss.cisco.com (172.16.0.0): icmp_seq=4 ttl=35 time=55.3 ms

hostname Host name of system to send an ICMP echo packet.

ip-address IP address of system to send an ICMP echo packet.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproperty set

property setTo manually adjust a system configuration property for your GSS network, use the property command.

property set property_name property_value

Syntax Description



Usage Guidelines We recommend that you use the property set command to modify only the ServerConfig.dnsserver.returnError property for your GSS network. When the ServerConfig.dnsserver.returnError property is set, the GSS generates a DNS error response packet that includes error types (for example, NX_DOMAIN, NO_DATA, or SERV_FAIL). When the ServerConfig.dnsserver.returnError property is not set, no error response packet is returned, and a timeout occurs.

For the property set command to take effect, you must execute the gss stop command followed by the gss start command. You enter the property set command individually for each GSS device whose configuration property you want to set.

Caution With the exception of the ServerConfig.dnsserver.returnError property, modifying system configuration properties can cause the GSS device to restart, or can require a manual restart. In addition, modifying a system configuration property, if done improperly, may adversely affect your GSS network.

Examples gss1.example.com(config)# property set ServerConfig.dnsserver.returnError 1

set Sets the GSS system configuration property

property_name The name of the property you are manually setting

property_value The new property setting


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity assign

proximity assignTo configure static proximity metrics for zones in your GSS network or to assign probing devices to specific D-proxies, use the proximity assign command. Use the no form of the command to delete static entries from the proximity database in GSS memory.

proximity assign {group {groupname}} | ip {entryaddress} | [probe-target {ip-address} | zone-data {“zoneId:RTT”}]

no proximity assign {group {groupname}} | ip {entryaddress} | [probe-target {ip-address} | zone-data {“zoneId:RTT”}]

group groupname Enter a unique alphanumeric name for a group of static entries, up to a maximum of 16 characters. Use only alphanumeric characters and the underscore (“_”) character. Each static proximity group must have a unique name.

ip entryaddress The D-proxy IP address entry to be created in the proximity database.

probe-target ip-address

(Optional) An alternate IP address to probe by the probing device. Normally, the probing device transmits a probe to the requesting D-proxy IP address to calculate RTT. If you find that the D-proxy cannot be probed from the probing device, you can identify the IP address of another device that can be probed to obtain equivalent RTT data.

zone-data “zoneId:RTT”

(Optional) The calculated RTT value for a zone, specified in “zoneId:RTT” format. For example, enter "1:100" to specify zone 3 with an RTT of 100 seconds. Valid entries for zoneID are from 1 to 32, and must match the proximity zone index specified through the primary GSSM GUI. Valid entries for RTT value 0 to 86400 seconds (one day). To specify multiple static zone:RTT pairs in the proximity group, separate each entry within the quotation marks by a comma, but without spaces between the entries (for example, “3:450,22:3890,31:1000”).


OL-5692-01



Command Modes Global server load-balancing configuration

Usage Guidelines Entries in the proximity database can be both dynamic and static. The GSS creates dynamic entries in the proximity database as the result of requests from new D-proxy IP addresses. If you need to configure static proximity metrics for zones in your GSS network or to assign probing devices to specific D-proxies, define a series of static entries in the proximity database by using the proximity assign global server load-balancing configuration mode command. If the same entry, dynamic or static, already exists in the proximity database, the GSS will overwrite that entry with the newly assigned entry.

Static entries in the PDB do not age out and remain in the PDB until you delete them. In addition, static entries are not subject to the automatic database cleanup of least recently used entries when the PDB size is almost at the maximum number of entries. Use the no form of the proximity assign command to delete static entries from the PDB.

Note Ensure that you want to permanently delete static entries from the PDB before you enter the no form of the proximity assign command. You cannot retrieve those static entries once they are deleted.

You can specify permanent RTT values for the static entries. When the GSS uses permanent RTT values, it does not perform active probing with DRP agent. Instead of RTT values, you can specify alternate IP addresses as targets for probing by the probing devices to obtain RTT data. The GSS probes the alternate probe target for requests from D-proxies matching these static entries.

The GSS accepts commands up to 1024 characters long. Ensure that the proximity database-entry create command does not exceed that length when you configure RTT for a large number of proximity zones.


OL-5692-01


Examples To configure static RTT metrics for the proximity group ISP2 using zone indexes created previously through the primary GSSM GUI, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# proximity assign group ISP1 zone-data “1:100,2:200,3:300,4:400,5:500”

To delete static RTT entries for the proximity group ISP1, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no proximity assign group ISP1 zone-data “1:100,2:200,3:300,4:400,5:500”

Related Commands proximity database delete all

proximity database dump

proximity group

proximity probe

show statistics


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database delete all

proximity database delete allTo remove entries from the proximity database, use the proximity database delete all command.

proximity database delete all

Caution Use the proximity database delete all command in special instances when you want to remove all entries from the PDB in order to have an empty database. Ensure that you want to permanently delete entries from the PDB before you enter this command. You cannot retrieve PDB entries once they are deleted.




Usage Guidelines You can remove all PDB entries from GSS memory by using the proximity database delete all CLI command. This command, however, does not delete PDB entries saved as part of an automatic dump to a backup file on disk, which the GSS loads upon a reboot or restart to initialize the PDB. To ensure that you successfully remove all PDB entries from both GSS memory and disk, enter the proximity database delete all command followed by the proximity database periodic-backup now command to force an immediate backup of the empty PDB residing in GSS memory.

The prompt Are you sure? appears to confirm the deletion of all PDB entries. Specify y to delete all entries or n to cancel the deletion operation.

Examples gss1.example.com# proximity database delete allAre you sure? [y/n]


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database delete all

Related Commands proximity assign


proximity database load


proximity group


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database dump

proximity database dump To dump all or selected entries from the proximity database to a named file as a user-initiated backup file, use the proximity database dump command.

proximity database dump {filename} format {binary | xml} [entry-type {all | assigned | probed}] [entry-address {ip-address} netmask {netmask}]

Syntax Description filename The name of the output file containing the proximity database entries on GSS disk. This file resides in the /home directory. The GSS displays a prompt for overwrite confirmation if the filename already exists in the current working directory.

format Dumps the proximity database entries in binary or Extensible Markup Language (XML) format. Select binary-encoding as the format type if you intend to load the contents of the file into the proximity database of another GSS. The allowable entries are:

• binary—Dumps the assigned proximity entries in true binary format. This file can only be used with the proximity database load CLI command.

• xml—Dumps the assigned proximity entries in XML format. The contents of an XML file includes the data fields along with the data descriptions. The contents of this file can be viewed using the type CLI command.

Note Dumping PDB entries in XML format can be a resource intensive operation and may take from two to four minutes to complete depending on the size of the PDB and the GSS platform in use. We recommend that you do not perform a PDB dump in XML format during the routine operation of the GSS to avoid a degradation in performance.


OL-5692-01




Usage Guidelines The GSS automatically dumps proximity database entries to a backup file on disk approximately every hour. The GSS uses this backup file to initialize the proximity database upon system restart or reboot to enable the GSS to recover the contents of the database.

If desired, you can use the proximity database dump command to dump all or selected entries from the proximity database to a named file as a user-initiated backup file. You can then use the ftp command in privileged EXEC mode to launch the FTP client and transfer the file to and from remote machines.

To view the entire contents of the XML proximity database output file from the GSS, use the type command.

entry-type Specifies the type of entries to output from the proximity database. The allowable entries are:

• all—Dump static and dynamic entries from the proximity database (default)

• assigned—Dump statically assigned proximity entries

• probed—Dump dynamically probed proximity entries

entry-address ip-address

The IP address of the proximity database entry.

netmask netmask The subnet mask of the proximity database entry in dotted decimal notation (for example, 255.255.255.0).


OL-5692-01


Examples To dump the dynamic proximity database entries to a file named PDB6_30_04 in binary format, enter:

gss1.example.com# proximity database dump file PDB6_30_04 format binary entry-type probed entry-address 172.23.5.7 netmask 255.255.255.255





proximity group

show statistics


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database load

proximity database loadTo load and merge proximity database entries from a file into the existing proximity database in GSS memory, use the proximity database load command.

proximity database load filename format binary [override]

Syntax Description filename Specifies the name of the proximity database file to load and merge with the existing proximity database on the GSS device. The file must be in binary format to be loaded into GSS memory (see the proximity database dump command). Use the ftp command in privileged EXEC mode to launch the FTP client and transfer the proximity database file to the GSS from a remote GSS.

format binary Loads the assigned proximity file in true binary format. The file must be in binary format to be loaded into GSS memory.

override (Optional) Specifies if the proximity database entries in the file are to override the same entries located in the current GSS proximity database. When you select the override option, static database entries always take priority over dynamic database entries in the database. For the same database entries that exist in both the file and in GSS database memory, the GSS:

• Overwrites dynamic entries with any overlapping static entries

• Overwrites static entries with any overlapping static entries, but does not overwrite those entries with any overlapping dynamic entries

If you do not specify the override option, the GSS loads all the most recent entries into memory, which will replace the older entries of the same type (dynamic or static) in the proximity database. For example, the most recent dynamic entries replace the older dynamic entries in the proximity database.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database load



Usage Guidelines The proximity database load function supports the migration of proximity database entries from one GSS device into the proximity database of another GSS device. The GSS validates the loaded database entries, checks the software version for compatibility, and then replaces the proximity database in memory. The file must be in binary format to be loaded into GSS memory.

Proximity RTT metrics loaded from the file replace overlapping entries that exist in the database and supplement the non-overlapping database entries.

Examples To load and merge the entries from the GSS3PDB file without overriding the existing entries in the GSS proximity database, enter:

gss1.example.com# proximity database load GSS3PDB





proximity group

show statistics


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity database periodic-backup

proximity database periodic-backupTo force an immediate backup of the proximity database residing in GSS memory, use the proximity database periodic-backup command.

proximity database periodic-backup now

Syntax Description



Usage Guidelines You may manually initiate a proximity database dump as a database recovery method to ensure that you store the latest proximity database entries before you shut down the GSS.

The GSS sends the proximity database entries to the system dump file as the proximity database file. Upon a reboot or restart, the GSS reads this file and loads the contents to initialize the proximity database at boot time.

Examples gss1.example.com# proximity database periodic backup now




proximity group

now Instructs the GSS device to immediately initiate the periodic proximity database backup.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity group

proximity groupTo create a proximity group of multiple D-proxy IP addresses, use the proximity group command. Reenter the proximity group command to add multiple IP blocks to a proximity group or create additional proximity groups. Use the no form of the command to delete a previously configured IP address block from a proximity group or to delete a proximity group and all configured IP address blocks.

proximity group {groupname} ip {ip-address} netmask {netmask}

no proximity group {groupname} ip {ip-address} netmask {netmask}

Syntax Description



groupname Enter a unique alphanumeric name for the proximity group, up to a maximum of 80 characters. Use only alphanumeric characters and the underscore (“_”) character.

ip ip-address The IP address block, specified in dotted-decimal notation (for example, 192.168.9.0).

netmask netmask The subnet mask of the IP address block, specified in dotted-decimal notation (for example, 255.255.255.0).


OL-5692-01


Usage Guidelines The primary GSSM supports the creation of proximity groups. A proximity group allows you to configure multiple blocks of D-proxy IP addresses that each GSS device stores in its PDB as a single entry. Instead of multiple PDB entries, the GSS uses only one entry in the PDB for multiple D-proxies. The GSS treats all D-proxies in a proximity group as a single D-proxy when responding to DNS requests with the most proximate answers. Requests from D-proxies within the same proximity group receive the RTT values from the database entry for the group. The benefits of proximity grouping include less probing activities performed by the GSS, less space required for the PDB, and user flexibility in assigning alternative probing targets or static proximity metrics to a group.

You can create proximity groups from the primary GSSM CLI to obtain better scalability of your configuration and to allow for ease of proximity group creation through automation scripts. The proximity groups are saved in the primary GSSM database and all GSS devices in the network receive the same proximity group configuration. You cannot create proximity groups at the CLI of a standby GSSM or individual GSS devices.

The primary GSSM supports a maximum of 5000 proximity groups. Each proximity group contains one to 30 blocks of IP addresses and subnet masks (in dotted-decimal format).

In addition to creating proximity groups of multiple D-proxy IP addresses from the CLI, you can configure a global netmask from the primary GSSM GUI to uniformly group contiguous D-proxies (see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide, Chapter 9, Configuring Network Proximity). The GSS uses the global netmask when no proximity group matches the incoming D-proxy address. The GSS uses the full incoming D-proxy IP address and the global netmask as the key to looking up entries in the proximity database.


OL-5692-01


Examples To create a proximity group called ProxyGroup1 with an IP address block of 192.168.12.0 255.255.255.0, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# proximity group ProxyGroup1 ip 192.168.12.0 netmask 255.255.255.0

To delete a previously configured IP address block from a proximity group, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no proximity group ProxyGroup1 IP 192.168.12.0 netmask 255.255.255.0

To delete a proximity group and all configured IP address blocks, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no proximity group ProxyGroup1


OL-5692-01





proximity probe

show statistics


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity probe

proximity probeTo initiate direct probing to a specific D-proxy IP address or to one or more zones, use the proximity probe command.

proximity probe {dproxy_address} [zone {zoneId | all}]

Syntax Description



Usage Guidelines The GSS sends a probe request to each configured probe device in a specified zone to obtain probe information (RTT values). The GSS uses the obtained probe information from the D-proxy to update the PDB entry if the entry can be found in the PDB.

There may be instances when you need to instruct the probing device in one or all zones (broadcast) to send a probe to a specific D-proxy address, obtain an RTT value, and save the entry in the proximity database.

dproxy_address The IP network address of the D-proxy that you want to probe from the probing device.

zone zoneId (Optional) The ID of the proximity zone containing the probing device that you want to initiate a probe from. Available selections are from 1 to 32.

all (Optional) The GSS instructs the probing devices in all configured zones to transmit a probe to the specified D-proxy IP address.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity probe

Examples To instruct the probing device in zone 1 to send a probe to the D-proxy at 172.16.5.7, enter:

gss1.example.com# proximity probe 172.16.5.7 zone 1



proximity group

show statistics


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity start

proximity startTo locally reenable proximity on a GSS device after locally disabling the function, use the proximity start command.

proximity start




Examples gss1.example.com# proximity start

Related Commands proximity stop


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsproximity stop

proximity stopTo locally disable proximity on a GSS device for purposes of troubleshooting, use the proximity stop command.

proximity stop




Usage Guidelines You can disable proximity for a single GSS when you need to override the GUI-enabled proximity option. You may need to locally disable proximity on a GSS when you need to troubleshoot or debug the device. The GSS does not store the local-disable setting in its running-config file.

When you enter the proximity stop command the GSS immediately stops the following operations:

• Proximity lookups in the proximity database

• Direct probing between the GSS and DRP agents

• Refresh probing to obtain the most up-to-date RTT values

• Periodic proximity database dumps

• The proximity database entry age-out process

Use the proximity start command to locally reenable network proximity on the GSS device.

Examples gss1.example.com# proximity stop

Related Commands proximity start


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandspwd

pwdTo view the present working directory, use the pwd command.

pwd




Usage Guidelines Use this command to display the present working directory of the GSS.

Examples gss1.example.com# pwd/admin

Related Commands cd

dir

lls

ls


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsreload

reloadTo halt and perform a cold restart on your GSS device, use the reload command.

reload




Usage Guidelines To reboot the GSS device, use the reload command. Any open connections with the GSS are dropped after you enter the reload command.

If you did not save a startup-configuration to Flash memory, the GSS prompts you to enter configuration parameters upon restart.

Examples gss1.example.com# reload

Related Commands write


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsrename

renameTo rename a current GSS file, use the rename command.

rename source_filename new_filename

Syntax Description



Usage Guidelines Quotes are not required around filenames. The following special characters are not allowed in the renamed filenames: ‘ (apostrophe), ; (semicolon), * (asterisk), and a space.

Use the dir, lls, or ls commands to view the files available in the current directory or subdirectory.

Examples gss1.example.com# rename startup-config new_startup-config


lls

ls

source_filename Alphanumeric name of the file you want to rename.

new_filename Alphanumeric name you want to assign to the file.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsreset-gui-admin-password

reset-gui-admin-passwordTo restore the default administration password that is used to log in to the primary GSSM GUI, or to change the administration password, use the reset-gui-admin-password command.

reset-gui-admin-password [password text]

Syntax Description

Defaults The default administration password is default.


Usage Guidelines The administrative username and password used to access the primary GSSM GUI are stored in a safe partition of the hard disk to prevent loss of data due to power failures. If you change the administrative password, and then either lose or forget the password, you can reset the password back to “default” by entering the reset-gui-admin-password command.

You can also change the administrative password using the reset-gui-admin-password command.

This command is available only from the primary GSSM and standby GSSM CLI.

Examples gss1.example.com# reset-gui-admin-password password mynewpassword

password text (Optional) Changes the administration password used to log in to the primary GSSM GUI. Enter an unquoted text string with no spaces and a length of 6 to 16 characters.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsrestore-factory-defaults

restore-factory-defaultsTo reset your GSS device to its initial state, restoring all factory default settings, use the restore-factory-defaults command.

restore-factory-defaults




Usage Guidelines If your GSS device is improperly configured or is malfunctioning, you can use the restore-factory-defaults command to restore the device to its initial state, allowing you to properly configure it for use on your network.

The restore-factory-defaults command erases your GSSM database and all of its data and resets all network settings, returning your GSS hardware to the same state it was in when it first arrived from the factory. Before you enter the restore-factory-defaults command, ensure that you back up any vital data in the database component of the primary GSSM, along with its network and device configuration information. Use the gssm backup command to perform a primary GSSM backup. Refer to the Cisco Global Site Selector Administration Guide for details on performing GSS backup.

Note User files will also be deleted as an action of entering the restore-factory-defaults command. If you have any important files in the /home directory that you want to save, use either the scp or ftp commands to copy those files before you enter the restore-factory-defaults command.

You cannot enter the restore-factory-defaults command while the GSS is running (for example, serving DNS requests). You must first enter the gss stop command.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsrestore-factory-defaults

Examples gss1.example.com# restore-factory-defaults


gssm


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsrotate-logs

rotate-logsTo force the GSS device to restart its log files and save archive copies of all existing log files, use the rotate-logs command.

rotate-logs [delete-rotated-logs]

Syntax Description


Usage Guidelines This command forces the GSS device to save archive copies of all existing log files in the / directory and its subdirectories and replaces them with fresh log files. Existing log files are archived locally using the following naming convention:

logfile_name.log.number

where:

• logfile_name.log—Name of the archived log file (for example, gss.log or kale.log)

• number—An incremented number representing the number of times the logs have been rotated (for example, .3). The number of the most recent rotated log file is .1. The maximum number of log files is 25 for the gss.log file.

The delete-rotated-logs option clears all rotated log files in the / directory and its subdirectories except for the active log files.


Examples gss1.example.com# rotate-logs

Related Commands logging

delete-rotated-logs (Optional) Deletes all rotated log files from the / directory and its subdirectories on the GSS disk. The GSS does not delete active log files.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsscp

scpTo securely copy files from a GSS device that you are logged on to, use the scp command.

scp {source_path [source_filename] user@target_host:target_path}

To securely copy files from another device to a GSS device you are logged in to, use the scp command.

scp {user@source_host:/source_path[source_filename] target_path}

Syntax Description



Usage Guidelines After logging in to the CLI for the device that you intend to copy files to or from, enter the scp command following the syntax description provided above. You may be prompted to log in to the remote device before you are allowed to navigate to the target directory.

source_path Relative directory path and file name on the source device of the file that is being transferred.

source_filename (Optional) Name of the file to be copied.

user@target_host Login account name and host name for the device to which you are copying files.

target_path Relative directory path on the target device to which the file is being copied.

user@source_host Login account name and host name for the device from which you are copying files.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsscp

Examples gss1.example.com> scp /tmp/system.log [email protected]:/cisco/state/dump/home

gss1.example.com> scp [email protected]:/cisco/state/mygssmfile.log /cisco/state/dump/home



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssetup

setupTo initiate a special setup script that guides you through the basic process of configuring the GSS, use the setup command.

setup



Command Modes Privileged EXEC and global configuration

Usage Guidelines The setup command configures basic configuration information from the CLI. Use this command when the GSS boots without a startup-configuration file. This may be the case where the GSS is new and the system was not configured upon initial startup. When you enter the setup command, the GSS software displays a series of prompts. You must go though all of the prompts and make changes only to those fields that you want to modify. When completed, the software prompts you to perform one of the following:

• Apply as the Running Configuration—Applies setup configuration changes to the running-configuration file.

• Edit This Configuration—Return to the beginning of setup and edit specific configuration information.

• Discard Configuration and Quit Setup—Cancel making initial configuration changes.

Once configuration setup is complete, the GSS software prompts you to log in to the primary GSSM GUI and finish device setup.

The setup command cannot be executed while the GSS is running. You must enter the gss stop command before executing the setup command.


OL-5692-01


Examples gss1.example.com# setup################################ GSS Initial Setup Script ################################This setup utility will help guide you through the basic configurationnecessary to get a GSS up and running. The script will not make anymodifications on the running system. At the end you will be able toreview and edit the new configuration and before applying it to the running system.

Typing CTRL-C at any prompt quits the script immediately.The values in brackets '[]' are the defaults, and can be selectedby simply hitting <CR>.

This setup script will help with only the basic GSS and GSSM configuration.To configure DNS rules, it will be necessary to log into the Primary GSSMAdmin Webpage.

Do you want to continue? (y/n) [no]: y

Enter the Hostname of this device [host.cisco.com]:

* Interface eth0 (Active - IP: 192.168.1.25 Mask: 255.255.255.0)Do you want to change this? (y/n) [n]:

* Interface eth1 (Inactive)Do you want to change this? (y/n) [n]:

Do you want to configure a default gateway? (y/n) [y]: Enter the default gateway [10.86.208.1]:

Enter the IP addresses for up to 8 Name Servers.Enter a dash ('-') at a blank entry to stop entering Name Servers.At least one Name Server is required for this setup script.Enter Name Server 1 [172.16.124.122]: Enter Name Server 2: 192.168.1.2Enter Name Server 3: 172.16.10.12Enter Name Server 4: -

* Remote AccessDo you want to enable FTP access? (y/n) [y]: Do you want to enable Telnet access? (y/n) [n]: Do you want to enable SSH access? (y/n) [y]:

Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: Do you want to configure this GSSM as the Primary? (y/n) [y]:


OL-5692-01


The following configuration command script was created:-interface ethernet 0 ip address 192.168.1.25 255.255.255.0-hostname host-gss.cisco.comip default-gateway 10.86.208.1ip name-server 172.16.124.122ip name-server 192.168.1.2ip name-server 172.16.10.12---ssh enableftp enable--gss enable gssm-primary-

What would you like to do?1) Apply as the Running Configuration2) Edit this configuration3) Discard Configuration and Quit Setup

Choice: 1


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow access-group

show access-groupTo display a list of the access lists associated with your GSS interfaces Ethernet 0 and Ethernet 1, use the show access-group command.

show access-group



Command Modes Privileged EXEC, global configuration, and interface

Usage Guidelines For information about the fields in the show access-group command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands access-group

access-list

show access-list


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow access-list

show access-listTo display a list of the access lists configured on your GSS device, use the show access-list command.

show access-list




Usage Guidelines The show access-list command displays a list of access lists on your GSS device, regardless of whether they are being used. Access lists must be applied to a particular GSS interface before they can be used to filter GSS traffic.

For information about the fields in the show access-list command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands access-group

access-list

show access-group


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow arp

show arpTo display ARP information, use the show arp command.

show arp



Command Modes User EXEC, privileged EXEC, global configuration, and interface

Usage Guidelines The show arp command displays the complete ARP resolution table with IP addresses, MAC addresses, and resolution type.

For information about the fields in the show arp command output, refer to the Cisco Global Site Selector Administration Guide.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow boot-config

show boot-configTo display information about the GSS software, such as the current boot image and boot device information, use the show boot-config command.

show boot-config




Usage Guidelines For information about the fields in the show boot-config command output, refer to the Cisco Global Site Selector Administration Guide.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow clock

show clockTo display the system clock, use the show clock command. This command displays date and time information, such as day of the week, month, time (hh:mm:ss), and year in Greenwich mean time (GMT).

show clock




Usage Guidelines For information about the fields in the show clock command output, refer to the Cisco Global Site Selector Getting Started Guide.



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow disk

show diskTo display information about the GSS hard disk, use the show disk command. The information includes the available user space on the disk, the size of the database, and space available.

show disk




Usage Guidelines For information about the fields in the show disk command output, refer to the Cisco Global Site Selector Administration Guide.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow ftp

show ftpTo display the operating status of the File Transfer Protocol (FTP) for your GSS device, use the show ftp command.

show ftp




Usage Guidelines For information about the show access-list command output, refer to the Cisco

Global Site Selector Getting Started Guide.


show telnet

show snmp


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow interface

show interfaceTo display GSS hardware interface information, use the show interface command.

show interface {eth0 | eth1}

Syntax Description



Usage Guidelines For information about the fields in the show interface command output, refer to the Cisco Global Site Selector Getting Started Guide.

Related Commands show interface

show running-config

eth0 First Ethernet interface (eth0) on your GSS device.

eth1 Second Ethernet interface (eth1) on your GSS device.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow ip routes

show ip routesTo display the IP routing table for the GSS, use the show ip routes command.

show ip routes




Usage Guidelines For information about the fields in the show ip routes command output, refer to the Cisco Global Site Selector Getting Started Guide.

Related Commands ip


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow logging

show loggingTo display the system message log configuration, use the show logging command.

show logging




Usage Guidelines For information about the show logging command output, refer to the Cisco

Global Site Selector Administration Guide.



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow logs

show logsTo send the log activity to your current session, use the show log command.

show logs {follow | tail}

Syntax Description


Usage Guidelines Use the show logs command to send the log activity to your current session. The show logs command displays the contents of the gss.log file, which contains information on GSS activity that is most useful to GSS administrators.

For information about the fields in the show logs command output, refer to the Cisco Global Site Selector Administration Guide.


show logging

follow Displays the log file as data that is appended to it.

tail Displays only the last 10 lines of the log file.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow memory

show memoryTo display memory blocks and statistics, use the show memory command.

show memory




Usage Guidelines For information about the fields in the show memory command output, refer to the Cisco Global Site Selector Administration Guide.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow ntp

show ntpTo display the Network Time Protocol (NTP) configuration, use the show ntp command.

show ntp




Usage Guidelines For information about the show ntp command output, refer to the Cisco Global

Site Selector Getting Started Guide.

Related Commands ntp enable

ntp-server


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow processes

show processesTo display a list of internal GSS device processes, use the show processes command.

show processes




Usage Guidelines For information about the fields in the show processes command output, refer to the Cisco Global Site Selector Administration Guide.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow properties

show propertiesTo display a list of configuration property settings for the GSS device, use the show properties command.

show properties




Examples To display the configuration property settings for the GSS, enter:

gss1.example.com# show properties...ServerConfig.dnsserver.returnError: 0...

Related Commands property set


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow proximity

show proximityTo display general status information about the proximity subsystem, use the show proximity command.

show proximity




Usage Guidelines For information about the fields in the show proximity command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.

Related Commands clear statistics

logging

show logs

show proximity group-name

show proximity group-summary

show statistics

show sticky global


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow proximity group-name

show proximity group-nameTo display statistics for a specific proximity group, use the show proximity group-name command.

show proximity group-name groupname

Syntax Description



Usage Guidelines For information about the fields in the show proximity group-name command output, refer to the Cisco Global Site Selector Global Server Load-Balancing

Configuration Guide.

Related Commands show proximity


groupname Enter the exact name of a proximity group to display all proximity database entries related to that group.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow proximity group-summary

show proximity group-summaryTo display a summary of statistics for all configured proximity groups, use the show proximity group-summary command.





Usage Guidelines For information about the fields in the show proximity group-summary command output, refer to the Cisco Global Site Selector Global Server

Load-Balancing Configuration Guide.

Related Commands show proximity



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow running-config

show running-configTo display the current running configuration of the GSS device, use the show running-config command.

show running-config



Command Modes Privileged EXEC, global configuration, interface, and global server load-balancing

Usage Guidelines Use this command in conjunction with the show startup-config command to compare the information in running memory to the startup-configuration file used during the bootup process.

For information about the show running-config command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands configure

copy

show startup-config


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow services

show servicesTo display the current state of the GSS services, such as FTP, NTP, SSH, TACACS+, Telnet, and SNMP, use the show services command.

show services




Usage Guidelines For information about the show services command output, refer to the Cisco


Related Commands show sticky global


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow snmp

show snmpTo display Simple Network Management Protocol (SNMP) operating status, use the show snmp command.

show snmp




Usage Guidelines For information about the show snmp command output, refer to the Cisco Global

Site Selector Administration Guide.

Related Commands snmp


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow ssh

show sshTo display Secure Shell (SSH) status and configuration information, use the show ssh command.

show ssh




Usage Guidelines For information about the show ssh command output, refer to the Cisco Global


Related Commands ssh enable


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow startup-config

show startup-configTo display the startup configuration, use the show startup-config command.

show startup-config

Syntax Description This command has no keywords or arguments.



Usage Guidelines Use this command to display the configuration used during an initial bootup, stored in a safe partition of the hard disk to prevent loss of data due to power failures.

For information about the show startup-config command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands configure

copy

show services


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow statistics

show statisticsTo display GSS load balancing statistics, use the show statistics command. The options for this command are:

• show statistics boomerang—Displays statistics related to the boomerang server component of the GSS

• show statistics dns—Displays statistics from the domain name server (DNS) component of the GSS

• show statistics keepalive—Displays statistics for the keepalive component of the GSS software

• show statistics proximity—Displays statistics about the network proximity operation of your GSS device

• show statistics sticky—Displays general statistics about the sticky database

• show statistics tacacs—Displays the current TACACS+ statistics

Each GSS device includes a comprehensive set of show statistics CLI commands to display content routing and load-balancing statistics for each major component involved in the GSS global server load-balancing operation. The GSS global server load-balancing components include boomerang (CRAs), DNS, and VIP keepalives. You can also monitor advanced traffic management functions such as DNS sticky and network proximity for the GSS device.

For example, you can use the show statistics dns command to view the traffic handled by a particular DNS rule, which matches a D-proxy to an answer, or to analyze the traffic to a particular hosted domain that is managed by a GSS.

Note If you specify the show statistics command after issuing either the gss start command or the reload command, the GSS device can take approximately one minute before the command can take affect and display the requested statistics.

For more information on these options and associated variables, see the following commands.


OL-5692-01


show statistics boomerangTo display statistics related to the boomerang server component of the GSS, use the show statistics boomerang command.

show statistics boomerang {domain domain_name | global}

Syntax Description



Usage Guidelines For information about the fields in the show statistics boomerang command output, refer to the Cisco Global Site Selector Global Server Load-Balancing



logging

show logs

show statistics

domain Displays statistics related to the named domain that is being served by the GSS.

domain_name Specifies the name of the domain.

global Displays statistics across the entire GSS network for the boomerang server.


OL-5692-01


show statistics dnsTo display statistics from the domain name server (DNS) component of the GSS, use the show statistics dns command.

show statistics dns {answer {list | answer_name} | answer-group {list | group_name [verbose] } | domain {list | domain_name} | domain-list {list | domain_list_name [verbose] } | global | proximity rule | rule {list | rule_name} | source-address {list | sa_name} | source-address-list {list | sa_list_name [verbose] } | sticky rule}

Syntax Description answer Displays the accumulated hit count for each configured answer. The statistics also include the per second average hit count calculated during a last-minute interval, a 5-minute interval, a 30-minute interval, and a 4-hour interval.

list Lists the names of all answers configured for the GSS.

answer_name Specifies the name of an answer for which statistics are displayed.

answer-group Displays the total hit count for each configured answer group.

list Lists the names of all answer groups configured for the GSS.

group_name Specifies the name of an answer group for which statistics are displayed.

verbose Allows you to view detailed statistics for each answer that makes up an answer group.

domain Displays the accumulated hit count for each configured host domain. The statistics also include the per second average hit count calculated during a last-minute interval, a 5-minute interval, a 30-minute interval, and a 4-hour interval.

list Lists the names of all domains configured for the GSS.

domain_name Specifies the name of a domain for which statistics are displayed.


OL-5692-01


domain-list Displays the total accumulated hit count for each configured domain list.


domain_list_name Specifies the name of a domain list for which statistics will be displayed.

verbose Allows you to view detailed statistics for each domain that makes up a domain list.

global Displays general DNS statistics for the GSS device in use.

proximity rule Displays all proximity lookups and failures by DNS rule name.

sticky rule Displays all DNS sticky lookups and failures by DNS rule name.

rule Displays the total hit count and success count for each configured DNS rule.

list Lists the names of all DNS rules configured for the GSS.

rule_name Specifies the name of a DNS rule for which statistics are displayed

source-address Displays the accumulated hit count for each configured source address. The statistics also includes the per second average hit count calculated during a last-minute interval, a 5-minute interval, a 30-minute interval, and a 4-hour interval.

list Lists the names of all source addresses configured for the GSS.

sa_name Specifies the name of a source address for which statistics are displayed.

source-address-list Displays the total hit count for each configured source address list. The statistics also include the last minute average, 5 minute average, 30 minute average, and 4 hour average of the hit counts.

list Lists the names of all source addresses.


OL-5692-01


















OL-5692-01




Usage Guidelines For information about the fields in the show statistics dns command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration

Guide.


logging

show logs

show statistics

sa_list_name Specifies the name of a source address list for which statistics are displayed.

verbose Allows you to view detailed statistics for each name in the source address list.


OL-5692-01


show statistics keepaliveTo display statistics about the keepalive component of the GSS software, use the show statistics keepalive command.

show statistics keepalive {cra {IP_address | all | list} | global | http-head {IP_address | all | list} | icmp {IP_address | all | list} | kalap {IP_address | all | list} | ns {IP_address | all | list} | tcp {IP_address | all | list}

Syntax Description cra Displays statistics for configured content routing agent (CRA) keepalive types managed by the keepalive component and used with Boomerang-type answers.

ip_address Specifies the IP address for which statistics are displayed.

all Displays all configured CRA-type keepalives.

list Lists all available IP addresses.

global Displays keepalive statistics across the entire GSS device.

http-head Displays statistics for configured HTTP HEAD keepalive types managed by the GSS and used with VIP-type answers.


all Displays all configured HTTP HEAD-type keepalives.


icmp Displays statistics for configured ICMP keepalive types managed by the GSS and used with VIP-type answers.


all Displays all configured ICMP-type keepalives.



OL-5692-01




Usage Guidelines For information about the fields in the show statistics keepalive command output, refer to the Cisco Global Site Selector Global Server Load-Balancing


kalap Displays statistics for configured KAL-AP keepalive types managed by the GSS and used with VIP-type answers.


all Displays all configured KAL-AP-type keepalives.


ns Displays statistics for configured name server (ns) keepalive types managed by the GSS and used with name server type answers.


all Displays all configured name server-type keepalives.


tcp Displays statistics for configured TCP keepalive types managed by the GSS and used with IP-type answers.


all Displays all configured TCP-type keepalives.



OL-5692-01



logging

show logs

show statistics


OL-5692-01


show statistics proximityTo display statistics about the network proximity operation of your GSS device, use the show statistics proximity command. Network proximity statistics include information about the proximity database on the GSS device, individual zones, probing requests, and RTT coverage.

show statistics proximity {database | group-name {name} | group-summary | lookup | probes {detailed}}

Syntax Description



Usage Guidelines For information about the fields in the show statistics proximity command output, refer to the Cisco Global Site Selector Global Server Load-Balancing


database Displays the overall statistics on the proximity database, such as number of entries currently in the proximity database, the number of entries dropped, and the rate of lookups.

group-name name Display statistics for the specified proximity group.

group-summary Displays a summary of statistics for all configured proximity groups.

lookup Displays statistics about the proximity lookups that have occurred on this GSS.

probes Display general probe success and failure counts.

detailed Displays detailed statistics for the ICMP and TCP probes relative to all configured zones.


OL-5692-01



logging

show logs

show proximity



show statistics


OL-5692-01


show statistics stickyTo displays general statistics about the sticky database, use the show sticky statistics command. Sticky statistics include the total number of hits and misses in the sticky database, number of entries in the sticky database, and total number of lookups.

show statistics sticky {global | group-name {name} | group-summary | mesh}

Syntax Description



Usage Guidelines For information about the fields in the show statistics sticky command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration

Guide.

global Displays a summary of global sticky statistics.

group-name name Displays statistics for the specified sticky group.

group-summary Displays a summary of statistics for all configured sticky groups.

mesh Displays detailed statistics for each GSS device in the global sticky mesh.


OL-5692-01



logging

show logs

show statistics

show sticky

show sticky database

show sticky global

show sticky group-name

show sticky group-summary

show sticky mesh


OL-5692-01


show statistics tacacsTo display the current TACACS+ statistics, use the show statistics tacacs command. Each server is identified by the IP address and port. There is a Pass, Fail, and Error counter for each authentication, authorization, and accounting service.

show statistics tacacs




Usage Guidelines For information about the fields in the show statistics tacacs command output, refer to the Cisco Global Site Selector Administration Guide.


logging

show logs

show statistics

show tacacs


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky

show stickyTo display general status information about the sticky subsystem, use the show sticky command.

show sticky




Usage Guidelines For information about the fields in the show sticky command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide.


show statistics


show sticky global



show sticky mesh


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky database

show sticky databaseTo display sticky database entries by specifying one or more entry matching criteria, use the show sticky database command.

show sticky database {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip_address} netmask {netmask} | rule {rule_name}}

Syntax Description all Displays all entries in the sticky database.

answer name/ip_address

Displays all sticky entries related to a particular answer. Specify the name of the answer. If there is no name for the answer, specify the IP address of the sticky answer in dotted-decimal notation (for example, 192.168.9.0).

domain name Displays all sticky entries related to a domain. Specify the exact name for a previously created domain.

domain-list name Displays all sticky entries related to a domain list. Specify the exact name for a previously created domain list.

group name Displays all sticky entries related to a sticky group. Specify the exact name for a previously created sticky group.

inactive minimum minutes maximum minutes

Displays all sticky entries that have not received a client hit in the time interval between the specified minimum and maximum values, entered in minutes. Enter a value from 0 to 10100 minutes as the specified minimum value and maximum value.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky database



Usage Guidelines For information about the fields in the show sticky database command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration

Guide.


show statistics

show sticky

show sticky global



show sticky mesh

ip ip_address netmask netmask

Displays all sticky entries related to a D-proxy IP address and subnet mask. Specify the IP address of the requesting client's D-proxy in dotted-decimal notation (for example, 192.168.9.0) and specify the subnet mask in dotted-decimal notation (for example, 255.255.255.0).

rule rulename Displays all sticky entries related to a DNS rule. Specify the exact name for a previously created DNS rule.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky global

show sticky globalTo display global sticky operating status and statistics about each GSS peer in the mesh, use the show sticky global command.

show sticky global [verbose]

Syntax Description



Usage Guidelines For information about the fields in the show sticky global command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration

Guide.


show statistics

show sticky global



show sticky mesh

verbose Displays detailed global sticky status and statistics information for each GSS peer.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky group-name

show sticky group-nameTo display statistics for a specific sticky group, use the show sticky group-name command.

show sticky group-name groupname

Syntax Description



Usage Guidelines For information about the fields in the show sticky group-name command output, refer to the Cisco Global Site Selector Global Server Load-Balancing



show statistics


show sticky global


show sticky mesh

groupname Enter the exact name of a sticky group to display all sticky database entries related to that group.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky group-summary

show sticky group-summaryTo display a summary of statistics for all configured sticky groups, use the show sticky group-summary command.





Usage Guidelines For information about the fields in the show sticky group-summary command output, refer to the Cisco Global Site Selector Global Server Load-Balancing



show statistics


show sticky global


show sticky mesh


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky mesh

show sticky meshTo display global sticky operating status and statistics about each GSS peer in the mesh, use the show sticky global command.

show sticky mesh {session {session_id} [verbose]} | [verbose]

Syntax Description



Usage Guidelines For information about the fields in the show sticky global command output, refer to the Cisco Global Site Selector Global Server Load-Balancing Configuration

Guide.

session {session_id Displays operating status information for a specific session ID, which is the point-to-point connection between the local GSS node and a sticky mesh peer. To locate the session ID for a specific GSS peer in the mesh, use the show sticky mesh command.

session session_ID verbose Displays more detailed operating status information for a specific session ID. To locate the session ID for a specific GSS peer in the mesh, use the show sticky mesh command.

verbose Displays detailed operating status information for the entire sticky mesh and for all GSS peers in the mesh.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow sticky mesh


show statistics


show sticky global




OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow system-status

show system-statusTo display a report on the current operating status of your GSS device, including the online status, current software version, and start date or time for the various components, use the show system-status command.

show system-status




Usage Guidelines Use this command to display detailed information on the current operating state of the GSS device including online status, software version, and start date or time for the various components. The equivalent command is gss status.

For information about the fields in the show system-status command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands gss status

gssm database status

gssm database report

show services


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow tacacs

show tacacsTo display the TACACS configuration on your GSS device, use the show tacacs command.

show tacacs




Usage Guidelines For information about the show tacacs command output, refer to the Cisco Global



show statistics

tacacs-server host




OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow tech-support

show tech-supportTo display a report on the current operating configuration of your GSS device that can be used by Cisco technical support representatives to help troubleshoot problems on your GSS network, use the show tech-support command.

show tech-support [config | core-files]

Syntax Description



Usage Guidelines For information about the show tech-support command output, refer to the Cisco


Related Commands tcpdump

config (Optional) Exports the output of all configured fields from the primary GSSM GUI (intended for use by a Cisco technical support representative)

core-files (Optional) Displays a listing of all core files.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow telnet

show telnetTo display the status of the Telnet option on your GSS device, use the show telnet command.

show telnet



Usage Guidelines This command only displays the operating status of Telnet and cannot be used to connect to remote devices.

For information about the show telnet command output, refer to the Cisco Global


Related Commands show disk

show snmp

telnet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow terminal-length

show terminal-lengthTo display the terminal length setting for your GSS device, use the show terminal-length command.

show terminal-length



Usage Guidelines This command displays the maximum number of rows of data that are output at once during a terminal session.

For information about the show terminal-length command output, refer to the Cisco Global Site Selector Administration Guide.

Related Commands terminal-length


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow uptime

show uptimeTo find out how long the GSS device has been operational, use the show uptime command.

show uptime




Usage Guidelines For information about the show uptime command output, refer to the Cisco



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow user

show userTo display user information for a particular user, use the show user command.

show user username

Syntax Description



Usage Guidelines For information about the show user command output, refer to the Cisco Global


Related Commands show users

username Specifies the name of the user that you want to display information.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow users

show usersTo display users, use the show users command.

show users




Usage Guidelines For information about the show users command output, refer to the Cisco Global


Related Commands show user


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshow version

show versionTo display version information about the GSS software, use the show version command.

show version [verbose]

Syntax Description.



Usage Guidelines For information about the show version command output, refer to the Cisco


verbose (Optional) Allows you to view detailed GSS software version information


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsshutdown

shutdownTo shut down the operating system on the GSS device, use the shutdown command. To shut down a particular Ethernet interface on the GSS device, use the shutdown command in interface configuration mode.

shutdown



Command Modes Privileged EXEC, interface configuration

Usage Guidelines The shutdown command performs a shutdown of the GSS operating system or interface. In some cases, the GSS device will also be powered down following a shutdown.

Examples gss1.example.com# shutdown

gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# shutdown


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssnmp

snmp To enable Simple Network Management Protocol (SNMP) on your GSS device, use the snmp command. To disable SNMP on the GSS, use the no form of this command.

snmp {community-string | contact | enable | location}

no snmp {community-string | contact | enable | location}

Syntax Description

Defaults No default behavior or values.

community-string Specifies the SNMP community name for this GSS device. You may specify as many community names as you wish. Enter snmp community-string, then press Return, and the GSS software prompts you to enter a name. Enter an unquoted text string with no space and a maximum length of 12 characters. Use the no form of this command to remove a community name.

contact Specifies the name of the contact person for this GSS device. You can also include information on how to contact the person; for example, a phone number or e-mail address. Enter snmp contact, then press Return, and the GSS software prompts you to enter contact information. Enter an unquoted text string with a maximum of 255 characters including spaces. Use the no form of this command to remove contact information.

enable Enables SNMP on the selected GSS device.

location Specifies the physical location of this GSS device. Enter snmp location, then press Return, and the GSS software prompts you to enter the physical location information. Enter an unquoted text string with a maximum length of 255 characters. Use the no form of this command to remove location information.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssnmp

Command Modes Global configuration.

Examples gss.cisco.com(config)# snmp enablegss.cisco.com(config)# snmp community-string Enter new Community String: gss.cisco.com(config)# snmp contactEnter new Contact Info: Cisco Systems, Inc.gss.cisco.com(config)# snmp locationEnter new Location Info: Boxborough, MA 01719

gss.cisco.com(config)# no snmp enable


ntp enable

ssh enable

telnet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsspeed

speedTo configure an interface bandwidth, use the speed command. To restore default values, use the no form of this command.

speed mbits

no speed

Syntax Description

Defaults The default speed for a GSS interface is autonegotiate.


Usage Guidelines Use this command to set the bandwidth on Fast Ethernet interfaces only. Gigabit Ethernet interfaces run at 1000 Mbps only and are not user-configurable.

Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must enter the gss stop command before executing the speed command.

Examples gss1.example.com(config)# interface eth0gss1.example.com(config-eth0)# speed 100

gss1.example.com(config-eth0)# no speed


mbits Bandwidth size in megabits per second (Mbps). The available ranges include:

• 10—Initiate 10 Mbps operation



• auto—Enable the autonegotiate speed configuration


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh enable

ssh enableTo enable or disable Secure Shell (SSH) on the GSS device, use the ssh enable command. To disable SSH, use the no form of this command.

ssh enable

no ssh enable




Usage Guidelines SSH on the GSS supports the SSH v2 and v1 protocols. For SSH v2, the software provides 128-bit AES, Blowfish, 3DES, CAST128, Arcfour, 192-bit AES, or 256-bit AES. For SSH v1, the software provides encrypted communication using ciphers such as 3DES or Blowfish.

By default, the GSS turns off SSH protocol v1 because it is considred to be cryptographically insecure. If your clients support both SSH protocol v2 and v1, we recommend that you configure the client to use SSH protocol v2 by default. If your remote SSH application cannot support SSH protocol v2 and requires SSH protocol v1, enter the ssh protocol version 1 command.

Examples gss1.example.com(config)# ssh enable

gss1.example.com(config)# no ssh enable


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh enable


ntp enable

snmp

ssh keys

ssh protocol version 1

telnet


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh keys

ssh keysTo globally enable remote access to the copied private and public keys on the GSS, use the ssh keys command. To disable authentication using SSH keys, use the no form of this command.

ssh keys

no ssh keys


Defaults The GSS disables SSH key support.


Usage Guidelines The GSS supports remote login to the GSS over an SSH session that uses private and public key pairs for authentication. With this method of remote connection, use a generated private and public key pair to participate in a secure communication by encrypting and decrypting messages. Use of a private and public key pair bypasses the normal username and password authentication process. This remote access method may be useful when running scripts that connect automatically to the GSS.

You generate the private key and the corresponding public key as a key pair on a server separate from the GSS and then copy the public key to the GSS /home directory.

By default, the GSS disables SSH key support. As a one-time process, after you initially copy the private and public keys onto the GSS, you must enable global access to those keys to remotely log in to the GSS by using the ssh keys CLI command.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh keys

Examples gss1.example.com(config)# ssh keys

gss1.example.com(config)# no ssh keys




OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh protocol version 1

ssh protocol version 1If your remote SSH application cannot support SSH protocol v2 and you require to use SSH protocol v1, use the ssh protocol version 1 command. To disable the use of SSH protocol version 1, use the no form of this command.


no ssh protocol version 1


Defaults The GSS turns off SSH protocol v1.


Usage Guidelines SSH on the GSS supports the SSH v2 and v1 protocols. For SSH v2, the software provides 128-bit AES, Blowfish, 3DES, CAST128, Arcfour, 192-bit AES, or 256-bit AES. For SSH v1, the software provides encrypted communication using ciphers such as 3DES or Blowfish.

By default, the GSS turns off SSH protocol v1 because it is considered to be cryptographically insecure. If your clients support both SSH protocol v2 and v1, we recommend that you configure the client to use SSH protocol v2 by default. If your remote SSH application cannot support SSH protocol v2 and requires SSH protocol v1, enter the ssh protocol version 1 command.

Examples gss1.example.com(config)# ssh protocol version 1

gss1.example.com(config)# no ssh protocol version 1


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsssh protocol version 1


ssh keys


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky database delete

sticky database delete To remove entries from the sticky database, use the sticky database delete command.

sticky database delete {all | answer {name/ip_address} | domain {name} | domain-list {name} | group {name} | inactive minimum {minutes} maximum {minutes} | ip {ip_address} netmask {netmask} | rule {rule_name}}

Caution Use the sticky database delete all command in special instances when you want to remove all entries from the sticky database in order to have an empty database. Ensure that you want to permanently delete entries from the sticky database before you enter this command. You cannot retrieve sticky database entries once they are deleted.

Syntax Description all Removes all entries in the sticky database. The prompt Are you sure? appears to confirm the deletion of all sticky database entries. Specify y to delete all entries or n to cancel the deletion operation.

answer name/ip_address

Displays all sticky entries related to a particular answer. Specify the name of the answer. If there is no name for the answer, specify the IP address of the sticky answer in dotted-decimal notation (for example, 192.168.9.0).

domain name Removes all sticky entries related to a domain. Specify the exact name for a previously created domain.

domain-list name Removes all sticky entries related to a domain list. Specify the exact name for a previously created domain list.

group name Removes all sticky entries related to a sticky group. Specify the exact name for a previously created sticky group.


OL-5692-01




inactive minimum minutes maximum minutes

Removes all sticky entries that have not received a lookup request by a client D-proxy in the specified minimum and maximum time interval. If you do not specify a maximum value, the GSS deletes all entries that have been inactive for the specified minimum value. The GSS returns an error if the following occurs:

• The maximum value is set to a value that is less than the minimum value

• The minimum and maximum values are not within the allowable range of values for the sticky inactivity timeout.

Valid entries are 0 to 10100 minutes.

ip ip_address netmask netmask

Removes all sticky entries related to a D-proxy IP address and subnet mask. Specify the IP address of the requesting client’s D-proxy in dotted-decimal notation (for example, 192.168.9.0) and specify the subnet mask in dotted-decimal notation (for example, 255.255.255.0).

rule rulename Removes all sticky entries related to a DNS rule. Specify the exact name for a previously created DNS rule.


OL-5692-01


Usage Guidelines When operating in a GSS global DNS sticky configuration, the result of the sticky database delete command propagates throughout the GSS mesh to maintain synchronization between the peers in the GSS network.

To view the entries in the sticky database to identify the sticky entries that you want to delete, use the show sticky database command.

Examples To remove the D-proxy IP address 192.168.8.0 and subnet mask of 255.255.255.0, enter:

gss1.example.com# sticky database delete ip 192.168.8.0 netmask 255.255.255.0

To remove the D-proxy IP address 192.168.8.0 and subnet mask 255.255.255.0, enter:

gss1.example.com# sticky database delete ip 192.168.8.0 netmask 255.255.255.0

Related Commands sticky database dump

sticky database load

show sticky

sticky group


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky database dump

sticky database dump To dump all or selected entries from the sticky database to a named file as a user-initiated backup file, use the sticky database dump command.

sticky database dump {filename} format {binary | xml} entry-type {all | group | ip}

Syntax Description filename The name of the output file containing the sticky database entries on GSS disk. This file resides in the /home directory.

format Dumps the sticky database entries in binary or XML format. Select binary-encoding as the format type if you intend to load the contents of the file into the sticky database of another GSS. The allowable entries are:

• binary—Dumps the assigned sticky entries in true binary format. This file can only be used with the sticky database load CLI command.

• xml—Dumps the assigned sticky entries in Extensible Markup Language (XML) format. The contents of an XML file includes the data fields along with the data descriptions. The contents of this file can be viewed using the type CLI command.

Note Dumping sticky database entries in XML format can be a resource intensive operation and may take from two to four minutes to complete depending on the size of the sticky database and the GSS platform in use. We recommend that you do not perform a sticky database dump in XML format during the routine operation of the GSS to avoid a degradation in performance.


OL-5692-01




Usage Guidelines The GSS automatically dumps sticky database entries to a backup file on disk in binary file format approximately every 20 minutes. The GSS uses this backup file to initialize the sticky database upon system restart or reboot to enable the GSS to recover the contents of the database. When global sticky is enabled, the GSS uses the database dump file at reboot if there is no peer in the mesh that can provide a full sticky database.

If desired, you can dump all or selected entries from the sticky database to a named file as a user-initiated backup file. You can then use the ftp command in privileged EXEC mode to launch the FTP client and transfer the file to and from remote machines.

To view the entire contents of the XML sticky database output file from the GSS, use the type command.

entry-type Specifies the type of entries to dump from the sticky database. The available choices are:

• all—Dumps all entries from the sticky database (default)

• group—Dumps all entries that have sticky group IDs from the database

• ip—Dumps all entries that have source IP addresses from the database


OL-5692-01


Examples To dump the D-proxy source IP addresses from the sticky database to the sdb2004_06_30 file in XML format, enter:

gss1.example.com# sticky database dump sdb2004_06_30 format xml typesource

Related Commands show statistics

show sticky

show sticky global

sticky database delete


sticky database periodic-backup

sticky group


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky database load

sticky database loadTo load and merge a sticky database from disk into the existing sticky database in GSS memory, use the sticky database load command.

sticky database load filename

Syntax Description



Usage Guidelines The GSS supports the loading and merging of sticky database entries from a file into the existing sticky database in GSS memory. The sticky database merge capability supports the addition of entries from one GSS into another GSS. The file must be in binary format for loading into GSS memory.

The GSS validates the database loaded, checks the software version for compatibility, and then adds the sticky database entries in memory. The GSS does not overwrite existing, duplicate entries in the sticky database.

If you prefer to load and replace all sticky database entries from a GSS instead of merging the entries with the existing sticky database, first enter the sticky database delete all command to remove all entries from sticky database memory before you enter the sticky database load command.

filename The name of the sticky database file to load and merge with the existing sticky database on the GSS device. The file must be in binary format for loading into GSS memory (see the sticky database dump command). Use the ftp command in privileged EXEC mode to launch the FTP client and transfer the sticky database file to the GSS from a remote GSS.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky database load

Examples To load and merge the entries from the GSS3SDB file with the existing entries in the GSS sticky database, enter:

gss1.example.com# sticky database load GSS3SDB


show sticky

show sticky global


sticky database dump

sticky group


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky database periodic-backup

sticky database periodic-backupTo force an immediate backup of the sticky database residing in GSS memory, use the sticky database periodic-backup command.

sticky database periodic-backup now

Syntax Description



Usage Guidelines You may manually initiate a sticky database dump as a database recovery method to ensure you store the latest sticky database entries prior to shutting down the GSS.

The GSS sends the sticky database entries to the system dump file as the sticky database file. Upon a reboot or restart, the GSS reads this file and loads the contents to initialize the sticky database at boot time.

Examples gss1.example.com# sticky database periodic-backup now

Related Commands sticky database dump

sticky group

now Instructs the GSS device to immediately initiate the periodic sticky database backup.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky group

sticky groupTo create a sticky group of multiple D-proxy IP addresses, use the sticky group command. Reenter the sticky group command to add multiple IP blocks to a sticky group or to create additional sticky groups. Use the no form of the command to delete a previously configured IP address block from a sticky group or to delete a sticky group and all configured IP address blocks.

sticky group groupname ip ip-address netmask netmask

no sticky group groupname ip ip-address netmask netmask

Syntax Description



Usage Guidelines The primary GSSM supports the creation of sticky groups. A sticky group allows you to configure multiple blocks of D-proxy IP addresses that each GSS device stores in its sticky database as a single entry. Instead of multiple sticky database entries, the GSS uses only one entry in the sticky database for multiple D-proxies. The GSS treats all D-proxies in a sticky group as a single D-proxy for purposes of stickiness.

groupname Enter a unique alphanumeric name for the sticky group, up to a maximum of 80 characters. Use only alphanumeric characters and the underscore (“_”) character.

ip ip-address The IP address block, specified in dotted-decimal notation (for example, 192.168.9.0).

netmask netmask The subnet mask of the IP address block, specified in dotted-decimal notation (for example, 255.255.255.0).


OL-5692-01


You can create sticky groups from the primary GSSM CLI to obtain better scalability of your configuration and to allow for ease of sticky group creation through automation scripts. The primary GSSM supports a maximum of 800 sticky groups. Each sticky group contains one to 30 blocks of IP addresses and subnet masks (in dotted-decimal notation).

The grouping of D-proxy IP addresses in the sticky database provides you with a method to address “proxy hopping.” Certain ISPs rotate their D-proxies. A user’s browser may use DNS server A to resolve a hostname, and later use DNS server B to resolve the same name. This technique, known as “proxy hopping,” has implications for DNS sticky because DNS sticky remembers the client's D-proxy IP address and not the IP address of the actual client. In this case, rotating D-proxies appear to the GSS as unique clients. Sticky grouping provides you with a mechanism to globally group sets of D-proxies together to manually solve this problem.

In addition to creating DNS sticky groups of multiple D-proxy IP addresses from the CLI, you can configure a global netmask from the primary GSSM GUI to uniformly group contiguous D-proxies (see the Cisco Global Site Selector Global Server Load-Balancing Configuration Guide, Chapter 8, Configuring DNS Sticky). The global netmask is used by the GSS device when no DNS sticky group matches the incoming D-proxy address. The GSS uses the full incoming D-proxy IP address (255.255.255.255) and the global netmask as the key to lookup in the DNS sticky database.

Examples To create a sticky group called StickyGroup1 with an IP address block of 192.168.9.0 255.255.255.0, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# sticky group StickyGroup1 ip 192.168.9.0 255.255.255.0

To delete a previously configured IP address block from a sticky group, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no sticky group StickyGroup1 ip 192.168.3.0 netmask 255.255.255.0


OL-5692-01


To delete a sticky group, enter:

gssm1.example.com# configgssm1.example.com(config)# gslbgssm1.example.com(config-gslb)# no sticky group StickyGroup1


show sticky

show sticky global


sticky database dump



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky start

sticky startTo locally reenable DNS sticky on a GSS device after locally disabling the function, use the sticky start command.

sticky start




Usage Guidelines When you restart the GSS, and sticky has been globally enabled at the primary GSSM GUI, the GSS reenables the local DNS sticky function.

Examples gss1.example.com# sticky start

Related Commands sticky stop


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky stop

sticky stopTo locally disable DNS sticky on a GSS device for purposes of troubleshooting, use the sticky stop command.

sticky stop




Usage Guidelines You can disable DNS sticky for a single GSS when you need to override the GUI-enabled sticky option. You may need to locally disable sticky on a GSS when you need to troubleshoot or debug the device. The GSS does not store the local-disable setting in its running-config file. When you restart the device, and sticky has been globally enabled, the GSS reenables DNS sticky.

When you enter the sticky stop command, the GSS immediately stops the following operations:

• Sticky lookups in the sticky database

• Accessing the sticky database for new requests

• Periodic sticky database dumps

• Sticky database entry age-out process

The GSS continues to answer DNS requests according to the DNS rules and keepalive status.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandssticky stop

When you disable DNS sticky, the GSS remains locally disabled until you perform one of the following actions:

• Enter the sticky start CLI command

• Enter a gss restart CLI command to restart the GSS software

• Enter a gss reload CLI command to perform a cold restart of the GSS device

If you are using global DNS sticky in your network, upon reentry of the GSS device into the peer mesh, the GSS attempts to synchronize the database entries with the other peers in the mesh. The GSS queries each peer to find the closest up-to-date sticky database. If no update is available from a peer, the GSS initializes the sticky database entries from the previously saved database on disk if a file is present and valid. Otherwise, the GSS starts with an empty sticky database.

Examples gss1.example.com# sticky stop

Related Commands sticky start


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstacacs-server host

tacacs-server hostTo specify the name of the IP hosts maintaining the TACACS+ server, use the tacacs-server host command. Use the no form of this command to delete a server from the running configuration, to delete a specified TCP port, or to delete an encryption key.

tacacs-server host ip_or_host [port port] [key encryption_key]

no tacacs-server host ip_or_host [port port] [key encryption_key]

Syntax Description



ip_or_host IP address or host name of the TACACS+ server you want to access. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or a mnemonic host name (for example, myhost.mydomain.com).

port port The TCP port of the TACACS+ server. The default port is 49. You can enter a port number from 1 to 65535.

key encryption_key The shared secret between the GSS and the TACACS+ server. You must define an encryption key to encrypt TACACS+ packet transactions between the GSS and the TACACS+ server. If you do not define an encryption key, the GSS does not encrypt packets transmitted to the TACACS+ server and they will be in clear text. The range for the encryption key is 1 to 100 alphanumeric characters.


OL-5692-01


Usage Guidelines The TACACS+ server contains the TACACS+ authentication, authorization, and accounting relational databases. You can designate a maximum of three servers on the GSS. However, the GSS uses only one server at a time. To set up a list of preferred TACACS+ security daemons, use the tacacs-server host command.

The TACACS+ software searches for the server hosts in the order you specify through the tacacs-server host command. IThe GSS periodically queries all configured TACACS+ servers with a TCP keepalive to ensure network connectivity and TACACS+ application operation. If the GSS determines that the first TACACS server is down, the GSS attempts to connect to the next server in the list of configured TACACS+ servers as the backup server. If a second (or third) TACACS+ server is available for use, the GSS selects that server as the active TACACS+ server.

The use of TCP keepalives is the default means by the GSS to monitor connectivity with the active TACACS+ server. As a secondary measure should the TCP keepalives fail, or if you disable the use of keepalives, you can use the tacacs-server timeout command to define a global TACACS+ timeout period that the GSS uses to wait for a response to a connection attempt from a TACACS+ server. The timeout value applies to all defined TACACS+ servers.

For recommended guidelines on setting up a TACACS+ server (the Cisco Secure ACS in this example), refer to the Cisco Global Site Selector Administration Guide, Chapter 4, Managing GSS Accounts Through a TACACS+ Server.

Examples To configure three TACACS+ servers as 192.168.1.100:8877, 192.168.1.101:49 (using the default TCP port), and 192.168.1.102:9988 with different shared secrets, enter:

gss1.example.com(config)# tacacs-server host 192.168.1.100 port 8877 key SECRET-123gss1.example.com(config)# tacacs-server host 192.168.1.101 key SECRET-456gss1.example.com(config)# tacacs-server host 192.168.1.102 port 9988 key SECRET-789


OL-5692-01



show statistics

show tacacs




OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstacacs-server keepalive-enable

tacacs-server keepalive-enableTo disable or enable the use of TCP keepalives sent by the GSS to the active TACACS+ server, use the tacacs-server keepalive-enable command. To disable the use of TCP keepalives with the active TACACS+ server, use the no form of this command.


no tacacs-server keepalive-enable


Defaults TCP keepalives enabled


Usage Guidelines By default, the GSS enables the automatic use of TCP keepalives to periodically query all online TACACS+ servers with a TCP keepalive to ensure network connectivity and TACACS+ application operation. If the GSS determines that the first TACACS server is down (offline), the GSS then attempts to connect to the next server in the list of configured TACACS+ servers as the backup server. If a second (or third) TACACS+ server is available for use, the GSS selects that server as the active TACACS+ server.

To disable the use of TCP keepalives with the active TACACS+ server, use the no form of the tacacs-server keepalive-enable command.

Examples To enable TCP keepalives, enter:

gss1.example.com(config)# tacacs-server keepalive-enable


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstacacs-server keepalive-enable


show statistics

show tacacs

tacacs-server host



OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstacacs-server timeout

tacacs-server timeoutTo define a global TACACS+ timeout period, in seconds, that specifies how long the GSS waits for a response to a connection attempt from a TACACS+ server, use the tacacs-server timeout command. The timeout value applies to all defined TACACS+ servers. To reset the timeout period to the default of 5 seconds, use the no form of this command.

tacacs-server timeout {seconds}

no tacacs-server timeout {seconds}

Syntax Description

Defaults Timeout of 5 seconds.


Usage Guidelines As a secondary measure should the TCP keepalives fail, or if you disable the use of keepalives, you can use the tacacs-server timeout command to define a global TACACS+ timeout period, in seconds, that the GSS uses to wait for a response to a connection attempt from a TACACS+ server. The timeout value applies to all defined TACACS+ servers. The default timeout period is five seconds.

Examples To set the timeout period to 60 seconds, enter:

gss1.example.com(config)# tacacs-server timeout 60

seconds Enter a number from 1 to 255 seconds. The default is 5 seconds. The GSS dynamically applies the modified timeout period and the new value takes effect automatically on the next TACACS+ connection.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstacacs-server timeout


show statistics

show tacacs




OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstail

tail To display the last 10 lines of a file, use the tail command.

tail filename

Syntax Description



Usage Guidelines Use this command to display the end of a file within any GSS file directory. This command may be used to monitor features such as transaction logging or system logging (syslog).


Examples gss1.example.com# tail system.logShowing file system.logSep 15 07:11:40 host-css2 rc: Stopping keytable succeededSep 15 07:11:42 host-css2 inet: inetd shutdown succeededSep 15 07:11:45 host-css2 crond: crond shutdown succeededSep 15 07:11:46 host-css2 dd: 1+0 records inSep 15 07:11:46 host-css2 dd: 1+0 records outSep 15 07:11:46 host-css2 random: Saving random seed succeededSep 15 07:11:48 host-css2 kernel: Kernel logging (proc) stopped.Sep 15 07:11:48 host-css2 kernel: Kernel log daemon terminating.Sep 15 07:11:50 host-css2 syslog: klogd shutdown succeededSep 15 07:11:51 host-css2 exiting on signal 15End of file system.log...

filename Name of a file in the GSS file directory.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstail


lls

ls

lsof

type


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstcpdump

tcpdumpTo output all traffic to and from either the default configured Ethernet interface or a specific Ethernet interface, use the tcpdump command.

tcpdump interface {any | eth0 | eth1} | protocol {any | icmp | tcp | udp} | host {any | ip_or_host} | port {any | port} | network {any | ip-address ip-subnet} | file {filename}

Syntax Description interface Outputs all traffic to and from the specified Ethernet interface.

any Instructs the GSS software to accept all selections for an associated option. For example, if you enter tcpdump interface any any, the GSS filters the ICMP, TCP, and UDP IP protocols on Ethernet 0 and 1.

eth0 Outputs all traffic to and from interface Ethernet 0 on the Global Site Selector.

eth1 Outputs all traffic to and from interface Ethernet 1 on the Global Site Selector.

protocol Filters the protocol for the traffic type. Recognized IP protocols include:

• icmp—Internet Control Message Protocol

• tcp—Transmission Control Protocol

• udp—User Datagram Protocol

host ip_or_host Filters the host machine that is the source or destination of the packet. The software uses the IP address or host name of the device that is the source or destination of the packet.

port port Filters the source or destination port of the packet.


OL-5692-01




Usage Guidelines The tcpdump interface command displays a record of all TCP traffic to and from an Ethernet interface to the screen. The command also displays all traffic to and from interface Ethernet 0, the first network interface on the Global Site Selector. If Ethernet 0 is not active, the GSS listens to traffic on Ethernet 1.

If you enter the tcpdump command without any specified options, no filtering is performed. If you want to use the defaults for the remaining tcpdump command parameters, press Enter at each option. No further filtering is performed by the GSS, other than what has been specified. For example, if you enter tcpdump interface eth0 protocol tcp, the GSS performs only IP protocol filtering and does not perform host, port, or network filtering.

This command continuously displays output until you cancel the operation by pressing the Ctrl-C key sequence.

network ip-address ip-subnet

Filters the network IP address from which the packet originated. The software uses the ip-address and ip-subnet arguments to match the incoming packet to a source network.

file filename Enables you to capture raw data to a file. You can open the captured raw data in a Sniffer tool. When capturing data to a file, the entire packet is captured. A maximum of 20,000 filtered packets can be captured to disk. This packet limit prevents you from accidentally filling up the GSS disk when capturing data using the tcpdump command.

If you do not specify a file, the GSS dumps the captured data to a terminal screen. In this case, the GSS displays only header data and there is no limit to number of packets captured.


OL-5692-01


Examples This is an example of the tcpdump interface command and its output.

gss1.example.com# tcpdump interface eth0Kernel filter, protocol ALL, datagram packet sockettcpdump: listening on eth019:20:45.678641 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 2126255246:2126255346(100) ack 4828790 win 32680 (DF) [tos 0x10] 19:20:45.680534 > gssm.cisco.com.49165 > gss.cisco.com.domain: 9217+ PTR? 187.0.1.2.in-addr.arpa. (43)19:20:45.681090 < gss.cisco.com.domain > gssm.cisco.com.49165: 9217 NXDomain* 0/1/0 (111)19:20:45.681421 > gssm.cisco.com.49165 > gss.cisco.com.domain: 9218+ PTR? 172.13.89.10.in-addr.arpa. (42)19:20:45.681984 < gss.cisco.com.domain > gssm.cisco.com.49165: 9218* 1/2/2 PTR gssm.cisco.com. (145)19:20:45.682396 > gssm.cisco.com.49165 > gss.cisco.com.domain: 9219+ PTR? 172.5.89.10.in-addr.arpa. (41)19:20:45.682950 < gss.cisco.com.domain > gssm.cisco.com.49165: 9219* 1/2/2 PTR gss.cisco.com. (142)19:20:45.683218 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 100:376(276) ack 1 win 32680 (DF) [tos 0x10] 19:20:45.683568 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 376:748(372) ack 1 win 32680 (DF) [tos 0x10] 19:20:45.683902 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 748:1120(372) ack 1 win 32680 (DF) [tos 0x10] 19:20:45.688517 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 1120:1372(252) ack 1 win 32680 (DF) [tos 0x10] 19:20:45.696298 B arp who-has 192.168.1.1 tell 192.168.1.219:20:45.696506 > gssm.cisco.com.49165 > gss.cisco.com.domain: 9220+ PTR? 10.128.1.2.in-addr.arpa. (44)19:20:45.697003 < gss.cisco.com.domain > gssm.cisco.com.49165: 9220 NXDomain 0/1/0 (109)19:20:45.697173 > gssm.cisco.com.49165 > gss.cisco.com.domain: 9221+ PTR? 22.128.168.192.in-addr.arpa. (45)19:20:45.697471 < 10.1.2.3.1178 > gssm.cisco.com.ssh: . 1:1(0) ack 0 win 8600 (DF)19:20:45.697649 < gss.cisco.com.domain > gssm.cisco.com.49165: 9221 NXDomain 0/1/0 (110)19:20:45.697922 > gssm.cisco.com.ssh > 10.1.2.3.1178: P 1372:1696(324) ack 1 win 32680 (DF) [tos 0x10]

Related Commands Ctrl-C


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstelnet

telnetTo enable Telnet on the selected GSS device or establish a Telnet connection, use the telnet command. To disable Telnet on your GSS device, use the no form of this command.

telnet {enable | {ip_or_host} | [port]

no telnet enable

Syntax Description

Defaults No default behavior or values.

Command Modes User EXEC, privileged EXEC, and global configuration.

Usage Guidelines Use the telnet enable command in global configuration mode to enable Telnet on the selected device. Use the telnet command in EXEC or global configuration mode to establish a Telnet connection.

SSH and Telnet can run concurrently.

enable Enables Telnet on the selected GSS device. This option is available in global configuration mode only.

ip_or_host Specifies the IP address or host name of the device with which you want to establish a Telnet connection. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or a mnemonic host name (for example, myhost.mydomain.com).

port (Optional) Allows you to change the port number for the Telnet session to a port other than 23 (the Telnet port). Enter a number from 1 to 65535. The default is 23.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstelnet

Examples gss1.example.com(config)# telnet enablegss1.example.com# telnet 10.1.2.3


ntp enable

snmp

ssh enable


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsterminal-length

terminal-lengthTo adjust the amount of screen information that can be displayed at one time on your terminal, use the terminal-length command. To restore the default terminal length, 23 lines, use the no form of this command.

terminal-length number

no terminal-length

Syntax Description

Defaults The default terminal length is 23 lines.


Usage Guidelines The terminal-length command allows you to adjust the number of rows of output that will be sent to your terminal screen at once by the GSS. The maximum number of rows is 512.

When set to 0, the GSS sends all of its data to the screen at once, without pausing (buffering the data).

Examples gss1.example.com(config)# terminal-length 512

gss1.example.com(config)# no terminal-length

Related Commands show terminal-length

number The number of screen rows, between 0 and 512


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstraceroute

traceroute To display the route a packet took to reach the host destination, use the traceroute command.

traceroute {ip_or_host}

Syntax Description



Examples gss1.example.com> traceroute www.cisco.comtraceroute to www.cisco.com (198.133.219.25), 30 hops max, 38 byte packets1 bxb11-bb-gw1 (161.44.33.22) 1.112 ms 0.377 ms 0.353 ms2 bxb11-man-gw2 (10.1.2.3) 0.586 ms 0.342 ms 0.314 ms3 ch2-man-gw2 (10.3.4.5) 4.462 ms 4.135 ms 4.558 ms

4 sjck-rbb-gw2 (161.2.3.4) 75.958 ms 75.953 ms 75.891 ms5 sj-wall-1 (161.5.6.7) 76.292 ms 76.336 ms 75.971 ms6 sjce-dirty-gw1 (128.107.240.197) 77.098 ms 76.664 ms 76.286 ms7 sjck-sdf-ciod-gw2 (128.107.239.102) 77.437 ms 77.845 ms 76.462 ms8 * * *9 * www (198.133.219.25) 78.627 ms *WHAT_ID HOW ===...

ip_or_host Specifies the IP address or host name of device to which you want to trace the packet route. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or a mnemonic host name (for example, myhost.mydomain.com).


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstype

type To display the contents of a file within any GSS file directory, use the type command.

type filename

Syntax Description



Usage Guidelines Use this command to display the contents of a file within any GSS file directory. This command may be used to monitor features such as transaction logging or system logging (syslog).


Examples gss1.example.com# type /audit.logatcr1.cisco.com>type audit.log

# Start logging at Thu July 1 23:59:30 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===

# Start logging at Fri July 2 00:01:25 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===

# Start logging at Sat July 3 14:42:40 GMT 2004#=== WHEN WHAT_TABLE WHAT_ID HOW ===...

filename Name of file.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandstype


lls

ls

lsof

tail


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsusername

usernameTo establish username authentication, use the username command.

username name {delete | password password privilege {user | admin}}

Syntax Description



name Specifies the username you want to assign or change. Enter an unquoted text string with no spaces and a maximum of 32 characters.

delete Deletes the named user or administrative account.

password Establishes the password.

password Specifies the password you want to assign or change. Enter an unquoted text string with no spaces and a maximum length of 8 characters.

privilege Sets user privilege level.

user Sets the user privilege to normal user.

admin Sets the user privilege to administrative user.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandsusername

Usage Guidelines The username global configuration command is used to create users or administrative accounts, change the password and privilege level for existing user accounts, or delete existing accounts.

When specifying the username or password, enter an unquoted text string with no spaces and a length of 6 to 16 characters.

Examples The following example demonstrates how a new account can be set up or removed from a GSS device.

gss1.example.com(config)# username testuser password mypassword privilege usergss1.example.com(config)# exitgss1.example.com# show user username testusertestuser user

gss1.example.com(config)# username testuser delete

Related Commands show user

show users


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandswrite

writeTo save the current running configuration of the GSS as its startup configuration, use the write command.

write memory

Syntax Description



Usage Guidelines Use the write command to save changes to the running configuration of the GSS device as the new startup configuration for the device.

Examples gss1.example.com# write memory

Related Commands copy

memory Saves recent configuration changes to the GSS that are stored in memory as the startup configuration.


OL-5692-01

Chapter 2 Cisco Global Site Selector CLI Commandswrite


OL-5692-01

Cisco GlobOL-5692-01

I N D E X

Symbols

? command 2-2

A

aaa command 2-4

access group

assigning access lists 2-7

displaying 2-103

access-group command 2-7

access list


access-list command 2-8

destination port 2-9

displaying 2-103, 2-104

ICMP traffic filtering 2-8

operator 2-9

order of statements 2-10

source address 2-8

TCP traffic filtering 2-8

UDP traffic filtering 2-8

access-list command 2-8

accounting, assigning (TACACS+) 2-4

administration password, restoring 2-94

answer group statistics 2-126, 2-128

answer statistics 2-126, 2-128

ARP information, displaying 2-105, 2-106, 2-122

audience ix

authentication, assigning (TACACS+) 2-4

authorization, assigning (TACACS+) 2-4

autosense command 2-11

B

Backspace key 1-3

bandwidth

configuring 2-51

specifying 2-161

boomerang


statistics 2-126, 2-127

C

cd command 2-13

certificate

attributes, modifying 2-14

keys, deleting 2-14

modifying 2-14

IN-1al Site Selector Command Reference

Index

certificate set-attributes command 2-14

changing

directory 2-13, 2-16, 2-98

GSSM role 2-44, 2-45

clear command 2-16

CLI

command-line processing 1-2

command syntax 1-6

undoing a command 2-65

clock

synchronizing 2-68

system clock, displaying 2-107

clock command 2-18

command

abbreviating 1-2

history buffer 1-2

keystroke combinations 1-2

keystroke shortcuts 1-2

list all 1-10

modes 1-3

no form of each command 2-65

output 1-7

processing 1-2

scrolling 1-2

summary 1-5, 1-11

syntax 1-6

syntax, checking 1-6

terminating 1-2

undoing 2-65

IN-2Cisco Global Site Selector Command Reference

verbose 2-37

command modes

EXEC 1-4

exiting 2-33

global configuration 1-4, 1-22

gslb configuration 1-5

gslb configuration command 1-33

interface configuration 1-5

interface configuration command 1-29

privileged EXEC commands 1-13

prompt 1-4

user EXEC commands 1-11

command output

redirect character 1-9

sort operator 1-8

wc operator 1-9

community string (SNMP) 2-159

configuration

copying 2-21

save changes 1-10

configure command 2-20, 2-35

console session, terminating 2-33

context sensitive help 1-6

conventions, documentation xi

copy command 2-21

copying

files 2-98

running configuration 2-21, 2-203

CPU or memory processes 2-116

OL-5692-01

Index

CRA


showing statistics 2-133

D

database

backup 2-43

configure 2-43

gssm database command 2-43

invalidate records 2-43

invalidating records 2-43

maintaining 2-43

purging 2-43

records, purging 2-43

report 2-44

report for database, generating 2-44

validate 2-44

date, setting 2-18

del command 2-23

Delete key 1-3

deleting

files 2-23

IP default gateway 2-54

dir command 2-24

directory

changing 2-13, 2-98

copying files 2-98

listing 2-24, 2-57

COL-5692-01

relative paths 2-13

replacing log files 2-97

viewing files 2-62, 2-63

viewing present working directory 2-91

disable

GSS 2-36

primary GSSM 2-36

standby GSSM 2-36

disable command 2-26

disk, displaying information 2-108

display

disk information 2-108

file contents 2-199

last 10 lines of file 2-190

packets 2-198

DNS


hostname, primary GSSM 2-37

resolving a host or domain name 2-27


dnslookup command 2-27

documentation

caution and note overview xii

conventions xi

related x

symbols and conventions xi

domain name

removing 2-54

resolving 2-27

IN-3isco Global Site Selector Command Reference

Index

domain statistics 2-126, 2-128

duplex command 2-28

duplex mode

full-duplex, enabling 2-11

half-duplex, enabling 2-11

E

enable command 2-30

enabling

GSS 2-36

primary GSSM 2-36

standby GSSM 2-36

end command 2-31

escaping a command 1-2

Ethernet

configuring 2-50

Fast Ethernet 2-161

Gigabit 2-161

EXEC

command summary 1-11

mode 1-3

privileged 1-3

user 1-3

exec-timeout command 2-32

exit command 2-33

exiting

global configuration mode 2-33

global server load balancing configuration mode 2-33


interface configuration mode 2-33

F

factory defaults, restoring 2-95

files

copying 2-98

deleting 2-23

displaying contents 2-199

display last 10 lines 2-184, 2-190

listing within directory 2-24, 2-57, 2-149

transferring 2-98

viewing 2-24

filter

output 1-8

traffic 2-7

traffic type 2-8

FTP

caching 2-34

displaying operating status 2-109

ftp command 2-34

full-duplex

interface 2-28

mode 2-11

G

gateway, default IP 2-53

global configuration mode 1-4

OL-5692-01

Index

commands 1-22

entering 2-20

global server load-balancing configuration mode, entering 2-35

global statistics 2-126, 2-128

gslb command 2-35

gslb configuration mode 1-5


entering 1-5

GSS

CPU or memory processes, displaying 2-116

factory defaults, restoring 2-95

GSS keepalive communication 2-42

halt and cold restart, performing 2-92

hard disk information, displaying 2-108

hardware interface status, displaying 2-110

hostname 2-47

install software 2-49

interface bandwidth, setting 2-161

IP address, specifying 2-55

managing 2-36

memory blocks and statistics, displaying 2-114

network troubleshooting with ICMP 2-70

operating configuration, displaying for TAC 2-151

outputting interface traffic 2-192

renaming a file 2-93

restarting 2-37

running configuration, displaying 2-121

COL-5692-01

setup 2-100

shutting down 2-158

starting 2-37

startup configuration, displaying 2-125

status 2-37, 2-149

stopping 2-37

subsystems 2-60

system status, displaying 2-149

system uptime, displaying 2-154

terminal length, adjusting 2-153, 2-197

timeout, setting 2-32

version information 2-157

gss command 2-36, 2-40

GSSM

backup 2-43

change role 2-44, 2-45

enabling 2-36

managing 2-36, 2-43

restore 2-44

standby 2-37

gssm command 2-43

gss-tcp-keepalives command 2-42

H

half-duplex

interface 2-28

mode 2-11

halt and cold restart 2-92


Index

help

? command 2-2

context sensitive 1-6

launching 1-10

list commands 1-10

system 1-10

help command 2-46

history buffer 1-2

host name

configuring 2-47

resolving 2-27

hostname command 2-47

I

ICMP

echo packets, sending 2-70

filtering 2-8

initial network device configuration settings, changing 2-53

install command 2-49

interface


autosense 2-11

bandwidth 2-161

duplex, configuring 2-28

duplex mode 2-11

Fast Ethernet or Gigabit Ethernet 2-50

full-duplex operation 2-28

gss-tcp-keepalives command 2-42


half-duplex operation 2-28, 2-50

hardware interface status, displaying 2-110

identifiers 2-52

keepalive communication 2-42

outputting traffic 2-192

packet filtering 2-6, 2-7

shutting down 2-51, 2-158

speed 2-161

interface command 2-29, 2-41, 2-42, 2-55

interface configuration mode 1-5


entering 1-5

interface ethernet command 2-50

invalidate database records 2-43

IP

address, configuring 2-55

address, GSSM 2-37

configuring 2-53

default gateway 2-53

interface 2-55

ip address command 2-55

route 2-53

routing table, displaying 2-111

ip command 2-53

K

keepalive


OL-5692-01

Index

cra, clear statistics 2-16

GSS keepalive communication 2-42

http-head, clear statistics 2-16

kalap, clear statistics 2-16

ns, clear statistics 2-16


keystroke

combinations, CLI 1-2

shortcuts 1-2

keystroke combinations 1-2

Backspace 1-3

Ctrl-A 1-2

Ctrl-B 1-2

Ctrl-C 1-2

Ctrl-D 1-2

Ctrl-E 1-2

Ctrl-F 1-2

Ctrl-K 1-2

Ctrl-L 1-2

Ctrl-N 1-2

Ctrl-P 1-2

Ctrl-T 1-2

Ctrl-U 1-2

Ctrl-W 1-3

Ctrl-X 1-2

Delete 1-3

Esc-B 1-3

Esc-D 1-3

Esc-F 1-3

COL-5692-01

L

list

commands 1-10

files within directory 2-24, 2-57, 2-149

loading startup configuration settings 2-21

logging

levels 2-59

log activity, displaying 2-113

logs, displaying 2-113

purging log records 2-43

rotating log files 2-97

subsystems 2-60

system logging 2-59

system message log, displaying 2-112

ls command 2-62

lsof command 2-63

M

memory blocks and statistics 2-114

mode

disabling privileged EXEC mode 2-26

EXEC 1-3

EXEC command summary 1-11

global configuration 1-4

global configuration, entering 2-20

global server load-balancing configuration, entering 2-35

gslb configuration 1-5


Index

interface configuration 1-5

N

name server


setting 2-53

network name, configuring 2-47

Network Time Protocol (NTP)

configuring 2-68


enabling on GSS device 2-67

server 2-68

system clock 2-68

no command 2-65

O

online help

? command 2-2

getting help 1-10, 2-46

help command 2-46

operator range 2-9

output

controlling 1-7

displaying last 10 lines 2-190

filter 1-9

interface traffic 2-192

save to file 1-9



P

packet route 2-198

packet route, displaying 2-198

packets

denying 2-8

filtering 2-7

permitting 2-8

password

restoring default administration password 2-94

username authentication, specifying 2-201

ping command 2-70

primary GSSM

changing role 2-44, 2-45

configuring 2-36

hostname 2-37

managing 2-36

private and public key pair, enabling use 2-164

privileged EXEC mode 1-13

command mode 1-3

disabling 2-26

enabling 2-30

prompt

privileged EXEC 1-4

user EXEC mode 1-4

property set command 2-71

proximity

OL-5692-01

Index

alternate probing targets, identifying 2-72


database, loading and merging entries 2-80

database dump, configuring 2-77

entries, deleting all 2-75

general information 2-118

group, creating 2-83

group information 2-119, 2-120

locally disabling 2-90

locally reenabling 2-89

periodic database backup, forcing 2-82

probe, initiating 2-83, 2-87

static entries, assigning 2-72

static entries, removing 2-72

statistics 2-136

proximity assign command 2-72

proximity database delete all command 2-75

proximity database dump command 2-77

proximity database load command 2-80

proximity database periodic-backup command 2-82

proximity group command 2-83

proximity probe command 2-83, 2-87

proximity start command 2-89

proximity stop command 2-90

pwd command 2-91

R

reboot GSS 2-92, 2-95

COL-5692-01

records

invalidate 2-43

purging 2-43

redirect character 1-9

reload command 2-92

remote access using a key pair, enabling 2-164

rename command 2-93

renaming a GSS file 2-93

report for database, generating 2-44

reset-gui-admin-password command 2-94

restarting the GSS 2-37

restore-factory-defaults command 2-95

restoring

default administration password 2-94

factory defaults 2-95

rotate-logs command 2-97

rotating log files 2-97

route

setting 2-53

trace 2-198

running configuration

copying 2-21, 2-203

displaying 2-121

S

saving

command output 1-9

configuration changes 1-10


Index

running configuration 2-21

startup configuration 2-21

scp command 2-98

screen output, controlling 1-4

send echo packets (PING) 2-70

session timeout 2-32

setting up the GSS 2-100

setup command 2-100

setup script 2-100

shortcuts, keyboard 1-2

show commands


show access-list command 2-104

show arp command 2-105, 2-106, 2-122

show clock command 2-107

show disk command 2-108

show ftp command 2-109

show interface command 2-110

show ip routes command 2-111

show logs command 2-113

show memory command 2-114

show ntp command 2-115

show processes command 2-116

show properties command 2-117

show proximity 2-118

show proximity group-name 2-119

show proximity group-summary 2-120

show running-conf command 2-121

show snmp command 2-123


show ssh command 2-124

show startup-config command 2-125

show statistics command 2-126

show sticky 2-141, 2-144

show sticky database 2-142

show sticky group-name 2-145

show sticky group-summary 2-146

show sticky mesh 2-147

show system-status command 2-149

show tacacs command 2-150

show tech-support command 2-151

show telnet command 2-152

show terminal-length command 2-153

show uptime command 2-154

show user command 2-155

show users command 2-156

show version command 2-157

showdown command 2-158

shutting down the GSS operating system 2-158

SNMP

community string 2-159

contact information 2-159


enabling 2-159

location 2-159

setup 2-159

snmp command 2-159

software

installing 2-49

OL-5692-01

Index

shutdown 2-158

sort operator 1-8

source address statistics 2-126, 2-128

speed command 2-161

SSH

enabling 2-162

private and public keys, enabling 2-164

protocol v1, enabling 2-166

status 2-124

ssh enable command 2-162

ssh keys command 2-164

ssh protocol version 1 command 2-166

standby GSSM 2-37

changing role 2-44, 2-45

configuring 2-36

managing 2-36

starting the GSS 2-37

startup-config disk 2-21

startup configuration 2-21

copying 2-21

displaying 2-125

loading 2-21

static IP routing 2-54

statistics

answer group 2-126, 2-128

boomerang 2-126, 2-127

clearing 2-16

DNS rule 2-126

domain 2-126, 2-128

COL-5692-01

domain list 2-126

global 2-126

keepalive 2-133

keepalives 2-126

proximity 2-136

sticky 2-138

TACACS+ 2-140

status of GSS 2-37

sticky

clear global mesh statistics 2-16


database, loading and merging 2-174

database dump, configuring 2-171

database entries, removing 2-168

general status information 2-141, 2-144

global sticky mesh information 2-147

group, creating 2-177

group information 2-145, 2-146

locally reenabling 2-180

periodic database backup, forcing 2-176

statistics 2-138

sticky database entries, displaying 2-142

sticky database delete command 2-168

sticky database dump command 2-171

sticky database load command 2-174

sticky database periodic-backup command 2-176

sticky group command 2-177

sticky start command 2-180

stopping the GSS 2-37


Index

subsystems 2-60

syntax errors, checking 1-6

syslog, configuring 2-59

system

help 1-10

logging 2-59

message log 2-112

status, displaying 2-149

uptime, displaying 2-154

system clock, synchronizing with time server 2-68

T

TAC

displaying GSS operating configuration 2-151

tech report, generating 2-40

TACACS+

aaa command 2-4

accounting, assigning authorization 2-4

authentication, assigning 2-4, 2-183

authorization, assigning 2-4


configuration, displaying 2-150

server timeout period 2-188

specifying IP hosts 2-183

statistics 2-140

tacacs-server host command 2-183


tacacs-server keepalive-enable command 2-186

tacacs-server timeout command 2-188

TCP keepalives, disabling 2-186

TCP keepalives, enabling 2-186

tacacs-server host command 2-183

tacacs-server keepalive-enable command 2-186

tacacs-server timeout command 2-188

tail command 2-190

tcpdump command 2-192

Telnet

enabling 2-195

operating status, displaying 2-152

session, terminating 2-33

telnet command 2-195


terminal-length command 2-197

terminating

command 1-2

console session 2-33

Telnet session 2-33

time, setting 2-18

timeout, setting 2-32

timezone, setting 2-19

traceroute command 2-198

traffic filtering 2-7, 2-8

transferring files 2-98

type command 2-199

OL-5692-01

Index

U

undoing a command 2-65

user EXEC

commands 1-11

mode 1-3

user information, displaying 2-155, 2-156

username

authentication 2-201

privilege 2-201

username command 2-201

V

validate database records 2-44

verbose, use of 2-37

version information 2-157

viewing

files 2-24, 2-57

list of files 2-62, 2-63

present working directory 2-91

VIP

http-head, clear statistics 2-16

icmp, clear statistics 2-16

kal-ap, clear statistics 2-16

load balancing statistics 2-126, 2-133

tcp, clear statistics 2-16

COL-5692-01

W

wc operator 1-9

write command 2-203


Index


OL-5692-01

cisco global site selector command reference...contents vi cisco global site selector command...

Documents