Reference
This guide describes the commands supported in Cisco NCS 1004. For information on Cisco IOS XR commands, see here.
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This guide describes the commands supported in Cisco NCS 1004. For information on Cisco IOS XR commands, see here.
To configure IEEE 802.1X authentication method using RADIUS as the protocol, use the aaa authentication dot1x command in global configuration mode.
aaa authentication dot1x default group radius
default |
Uses the listed authentication methods that follow this keyword as the default list of methods for authentication. Only group radius is supported in NCS 1002. |
group radius |
Specifies a method list that uses the list of all configured RADIUS servers for authentication. |
No authentication is performed.
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the 802.1X authentication method.
configure
aaa authentication dot1x default group radius
exit
commit
To configure authentication, authorization, and accounting (AAA) authentication at login, use the aaa authentication login command in global configuration mode.
aaa authentication login { default | list-name } method-list
login | Sets authentication for login. |
default |
Uses the listed authentication methods that follow this keyword as the default list of methods for authentication. |
list-name |
Character string used to name the authentication method list. |
method-list |
Method used to enable AAA system accounting. Method list types are entered in the preferred sequence. The value is one of the following options:
|
No authentication is performed.
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following example shows how to specify the default method list for authentication, and also enable authentication.
configure
aaa authentication login default group tacacs+
exit
commit
To specify the period of time between which reauthentication of authorized ports happens, use the authentication timer reauthenticate command in global configuration mode.
authentication timer reauthenticate { seconds| server}
seconds |
The number of seconds between reauthentication attempts. The range is from 60 to 5184000 (in seconds). |
server |
Specifies that the interval between reauthentication attempts is defined by the Session-Timeout value (RADIUS Attribute 27) on the AAA server. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the 802.1X profile.
configure
dot1x profile reauth
pae both
authentication timer reauthenticate 3600
supplicant eap profile ncs1k
exit
commit
To create a method list for authorization, use the aaa authorization command in global configuration mode.
aaa authorization {exec | nacm} { default | list-name } {none | local | group tacacs+ | group radius | group group-name }
exec | Configures authorization for an interactive ( EXEC) session. |
nacm |
Enables the NACM (NETCONF Access Control Model) functionality. |
default |
Uses the listed authorization methods that follow this keyword as the default list of methods for authorization. |
list-name |
Character string used to name the list of authorization methods. |
none |
Uses no authorization. If you specify none, no subsequent authorization method is attempted. |
local |
Uses local authorization. This method of authorization is not available for command authorization. |
group tacacs+ |
Uses the list of all configured TACACS+ servers for authorization. |
group radius |
Uses the list of all configured RADIUS servers for authorization. This method of authorization is not available for command authorization. |
group group-name |
Specifies a named subset of TACACS+ or RADIUS servers for authorization. |
Authorization is disabled for all actions (equivalent to the method none keyword).
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following example shows how to define the network authorization method list named listname1, which specifies that TACACS+ authorization is used.
configure
aaa authorization exec listname1 group tacacs+
exit
commit
To configure the cipher suite for encrypting traffic with MACsec, use the cipher-suite command in MACsec policy configuration mode.
The first portion indicates the encryption method, the second portion indicates the hash or integrity algorithm, and the third portion indicates the length of the cipher.
cipher-suite encryption_suite
GCM-AES-XPN-256 |
GCM encryption method; AES encryption algorithm that uses Extended Packet Numbering (XPN) of 64 bits; 256 bit encryption. |
The default cipher suite chosen for encryption is GCM-AES-XPN-256.
MACsec policy configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The following example shows how to use the cipher-suite command.
configure
macsec-policy mac_policy
cipher-suite GCM-AES-XPN-256
To clear the alarm counters of coherent DSP or optics controller, use the clear counters controller command in XR EXEC mode.
clear counters controller {coherentDSP|optics} R/S/I/P
R/S/I/P |
Rack/Slot/Instance/Port of the coherent DSP or optics controller. |
None
XR EXEC
Release | Modification |
---|---|
Release 6.5.1 |
This command was introduced. |
The following example shows how to clear the alarm counters of coherent DSP or optics controller
RP/0/RP0/CPU0:ios#clear counters controller coherentDSP 0/0/0/6
Fri Jun 29 17:52:25.035 IST
All counters are cleared
RP/0/RP0/CPU0:ios#
RP/0/RP0/CPU0:ios#clear counters controller optics 0/0/0/5
Sat Jun 23 13:39:21.616 IST
All counters are cleared
The following example shows the output of show controllers coherentDSP command before the alarm counters of LOS,LOF,LOM ,OOF,OOM and AIS are reset
RP/0/RP0/CPU0:ios#show controllers coherentDSP 0/0/0/5
Sat Jun 23 13:36:15.493 IST
Port : CoherentDSP 0/0/0/5
Controller State : Up
Inherited Secondary State : Normal
Configured Secondary State : Normal
Derived State : In Service
Loopback mode : None
BER Thresholds : SF = 1.0E-5 SD = 1.0E-7
Performance Monitoring : Enable
Alarm Information:
LOS = 65 LOF = 60 LOM = 0
OOF = 60 OOM = 60 AIS = 0
IAE = 0 BIAE = 0 SF_BER = 0
SD_BER = 0 BDI = 1 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms : None
Bit Error Rate Information
PREFEC BER : 1.9E-04
POSTFEC BER : 0.0E+00
TTI :
Remote hostname : rosco-fbcvt-002
Remote interface : CoherentDSP 0/0/0/5
Remote IP addr : 0.0.0.0
FEC mode : Soft-Decision 7
AINS Soak : None
AINS Timer : 0h, 0m
AINS remaining time : 0 seconds
The following example shows the output of show controllers coherentDSP or optics command after the alarm counters of LOS,LOF,LOM,OOF,OOM,AIS,IAE,BIAE,SF_BER,SD_BER,BDI and TIM are reset.
RP/0/RP0/CPU0:ios#show controllers coherentDSP 0/0/0/6
Fri Jun 29 17:52:36.871 IST
Port : CoherentDSP 0/0/0/6
Controller State : Up
Inherited Secondary State : Normal
Configured Secondary State : Normal
Derived State : In Service
Loopback mode : None
BER Thresholds : SF = 1.0E-5 SD = 1.0E-7
Performance Monitoring : Enable
Alarm Information:
LOS = 0 LOF = 0 LOM = 0
OOF = 0 OOM = 0 AIS = 0
IAE = 0 BIAE = 0 SF_BER = 0
SD_BER = 0 BDI = 0 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms : BDI
Bit Error Rate Information
PREFEC BER : 4.2E-04
POSTFEC BER : 0.0E+00
TTI :
Remote hostname : ios
Remote interface : CoherentDSP 0/0/0/13
Remote IP addr : 0.0.0.0
FEC mode : Soft-Decision 20
AINS Soak : None
AINS Timer : 0h, 0m
AINS remaining time : 0 seconds
RP/0/RP0/CPU0:ios#show controllers optics 0/0/0/5
Sat Jun 23 13:38:39.262 IST
Controller State: Up
Transport Admin State: In Service
Laser State: On
LED State: Green
Optics Status
Optics Type: CFP2_ACO DWDM
DWDM carrier Info: C BAND, MSA ITU Channel=11, Frequency=195.60THz,
Wavelength=1532.681nm
Alarm Status:
-------------
Detected Alarms: None
LOS/LOL/Fault Status:
Alarm Statistics:
-------------
HIGH-RX-PWR = 0 LOW-RX-PWR = 60
HIGH-TX-PWR = 0 LOW-TX-PWR = 0
HIGH-LBC = 0 HIGH-DGD = 0
OOR-CD = 0 OSNR = 0
WVL-OOL = 0 MEA = 0
IMPROPER-REM = 0
TX-POWER-PROV-MISMATCH = 0
Laser Bias Current = 3.0 %
Actual TX Power = 0.09 dBm
RX Power = -7.21 dBm
RX Signal Power = -8.67 dBm
Frequency Offset = 174 MHz
Performance Monitoring: Enable
THRESHOLD VALUES
----------------
Parameter High Alarm Low Alarm High Warning Low Warning
------------------------ ---------- --------- ------------ -----------
Rx Power Threshold(dBm) 4.9 -14.5 0.0 0.0
Tx Power Threshold(dBm) 3.5 -10.1 0.0 0.0
LBC Threshold(mA) N/A N/A 0.00 0.00
LBC High Threshold = 98 %
Configured Tx Power = -1.50 dBm
Configured CD High Threshold = 70000 ps/nm
Configured CD lower Threshold = -70000 ps/nm
Configured OSNR lower Threshold = 0.00 dB
Configured DGD Higher Threshold = 180.00 ps
Chromatic Dispersion 17 ps/nm
Configured CD-MIN -70000 ps/nm CD-MAX 70000 ps/nm
Second Order Polarization Mode Dispersion = 164.00 ps^2
Optical Signal to Noise Ratio = 29.50 dB
Polarization Dependent Loss = 2.70 dB
Polarization Change Rate = 2.00 rad/s
Differential Group Delay = 9.40 ps
Transceiver Vendor Details
Form Factor : CFP2-ACO
Name : Oclaro
Part Number : 10-3128-05
Rev Number : A0
Serial Number : OVE210204HS
PID : N/A
VID : N/A
Date Code(yy/mm/dd) : 20/17/01
Fiber Connector Type: LC
Otn Application Code: Undefined
Sonet Application Code: Undefined
Ethernet Compliance Code: Eth-Undefined
Transceiver Temperature : 34 Celsius
AINS Soak : None
AINS Timer : 0h, 0m
AINS remaining time : 0 seconds
To configure the confidentiality offset for MACsec encryption, use the conf-offset command in MACsec policy configuration mode.
conf-offset offset_value
CONF-OFFSET-0 |
Does not offset the encryption. |
The default value is CONF-OFFSET-0.
MACsec policy configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The following example shows how to use the conf-offset command.
configure
macsec-policy mac_policy
conf-offset CONF-OFFSET-0
To configure the coherent DSP controller, use the controller coherentDSP command in the Coherent DSP controller configuration mode.
controller coherentDSP R/S/I/P [ pm { 30-sec |15-min | 24-hour} { fec | otn} { report | threshold} value] [ perf-mon { enable | disable } ] | [ loopback { internal | line} ] | [ sec-admin-state maintenance] | [ shutdown ] | [ tti { sent | expected} ascii string ]
To enable the PRBS on the trunk port, you can use the following configuration command at the CoherentDSP controller:
controller coherentDSP R/S/I/Pprbs mode { source | sink | source-sink} pattern { pn31 | pn23 | pn15 | pn11}
R/S/I/P |
Rack/Slot/Instance/Port of the coherent DSP controller. |
pm { 30-sec | 15-min | 24-hour } |
Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals. |
fec |
Configures FEC PM data in 30 second, 15 minute or 24 hour intervals. |
otn |
Configures OTN PM data in 30 second, 15 minute or 24 hour intervals. |
report |
Configures TCA reporting status. |
threshold |
Configures threshold on coherent DSP parameters. |
perf-mon { enable | disable } |
Enables or disables performance monitoring. |
loopback [ internal | line ] |
Configures the internal or line loopback mode on the controller. |
sec-admin-state maintenance |
Configures the administrative state of the controller indicating that the controller is under maintenance. |
shutdown |
Disables the configuration of the controller. |
tti sent ascii string |
Configures the Trail Trace Identifier (TTI) ASCII string to be sent. SAPI, DAPI, and operator inputs are not supported. |
tti expected ascii string |
Configures the expected TTI ASCII string. The TIM alarm is raised if the received TTI string does not match the expected TTI string. SAPI, DAPI, and operator inputs are not supported. |
prbs mode |
Pseudo Random Binary Sequence (PRBS) mode. |
PRBS31 |
Sequence length is from 231 to 1 bits. |
PRBS23 |
Sequence length is from 223 to 1 bits. |
PRBS15 |
Sequence length is from 215 to 1 bits. |
PRBS11 |
Sequence length is from 211 to 1 bits. |
source | sink | source-sink |
|
None
Coherent DSP controller configuration
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.3.1 |
The command was modified to enable PRBS mode. |
The following example shows how to configure the performance monitoring parameters of the Coherent DSP controller in 15 minute intervals.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller coherentDSP 0/0/0/12 pm 15-min otn threshold es-ne
The following example shows how to configure the TTI string.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller coherentDSP 0/0/0/12 tti sent ascii joy
To configure the Ethernet controller, use the controller GigECtrlr command in the Ethernet controller configuration mode.
controller { TenGigECtrlr | HundredGigECtrlr } R/S/I/P [ pm { 30-sec |15-min | 24-hour} { ether} { report | threshold} value ] | [ perf-mon { enable | disable } ] | [ loopback { internal | line} ] | [ sec-admin-state maintenance] | [ shutdown ] | [ laser-squelch] | [ fec { none | standard } ] | [ holdoff-time trunk-fault timevalue]
R/S/I/P |
Rack/Slot/Instance/Port of the Ethernet controller. |
pm { 30-sec |15-min | 24-hour } |
Configures performance monitoring parameters for 30 second, 15 minutes, or 24 hour intervals. |
ether |
Configures Ethernet PM data in 30 second, 15 minute or 24 hour intervals. |
report |
Configures TCA reporting status. |
threshold |
Configures threshold on Ethernet controller parameters. |
perf-mon { enable | disable } |
Enables or disables performance monitoring. |
loopback [ internal | line ] |
Configures the internal or line loopback mode on the controller. |
sec-admin-state maintenance |
Configures the administrative state of the controller indicating that the controller is under maintenance. |
shutdown |
Disables the configuration of the controller. |
laser-squelch |
Enables laser squelching so that laser is brought down in the event of trunk faults (LOF, LOS) and a SQUELCHED alarm is raised. For 10G Ethernet controllers, laser squelching is supported only on LR4 and QSFP+ pluggables. |
fec { none | standard } |
(Only for 100G Ethernet Controllers) Disables FEC or enables standard (Reed-Solomon) FEC. |
holdoff-time trunk-fault timevalue |
(Only for 100G Ethernet Controllers) When a fault occurs on the trunk port, the user can hold the propagation of Local Fault using this parameter. The range of timevalue is 10 ms to 3 sec. |
None
Ethernet controller configuration
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.5.1 |
This command was updated to include the holdoff-time parameter. |
The following example shows how to configure the performance monitoring parameters of the Ethernet controller in 15 minute intervals.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller TenGigECtrlr 0/0/0/0/1 pm 15-min ether report
1024-1518-octets enable
The following example shows how to configure the internal loopback.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller TenGigECtrlr 0/0/0/0/1 loopback internal
The following example enables IDLE hold off timer in 100G controllers.
RP/0/RP0/CPU0:ios(config)#controller hundredGigECtrlr 0/0/0/4
RP/0/RP0/CPU0:ios (config-eth-ctrlr)# holdoff-time trunk-fault timevalue 3000
To configure the MACSec controller, use the controller mACSecCtrlr command in the MACSec controller configuration mode.
To create a MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx use the following command:
controller mACSecCtrlr R/S/I/P{ pm { 30-sec |15-min | 24-hour} { macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx} { report | threshold { in-out-decrypted | out-oct-decrypted} value} enable
R/S/I/P |
Rack/Slot/Instance/Port of the MACSec controller. |
pm { 30-sec | 15-min | 24-hour } |
Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals. |
macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx |
MACSEC Ether layer counters, MACSEC secy Interface level counters, MACSEC secy Tx layer counters, and MACSEC secy Rx layer counters. |
in-out-decrypted | out-oct-decrypted |
The number of octets of plaintext recovered from received packets that were integrity protected and encrypted |
None
MACSec controller configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
Release 6.3.1 |
This commnad was modified with the parameters to enable MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx |
The following example shows how to configure the MACSec controller.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller mACSecCtrlr 0/0/0/4
The following is a sample to configure the MACsec TCA parameters for rx-pkt at macsec-ether level for MACsec controller in 15 min intervals:
controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report rx-pkt enable
pm 15-min macsec-ether threshold rx-pkt 1000000
The following is a sample to configure the MACsec TCA parameters for rx-util at macsec-ether level for MACsec controller in 15 min intervals:
controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report rx-util enable
pm 15-min macsec-ether threshold rx-util 10
The following is a sample to configure the MACsec TCA parameters for out-octets at macsec-ether level for MACsec controller in 15 min intervals:
controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report out-octets enable
pm 15-min macsec-ether threshold out-octets 100000
The following is a sample to configure the MACsec TCA parameters for rx-pkt at MAC-SECy-If controller in 30 sec interval:
controller MACSecCtrlr0/0/0/4
pm 15-min macsec-ether report rx-pkt enable
pm 15-min macsec-ether threshold rx-pkt 1000
To configure the optics controller, use the controller optics command in the optics controller configuration mode.
controller optics R/S/I/P [ cd-max cd-max | cd-min cd-min | cd-low-threshold cd-low | cd-high-threshold cd-high | dgd-high-threshold dgd-value | lbc-high-threshold lbc-value | osnr-low-threshold osnr-value description description | rx-high-threshold rx-high | rx-low-threshold rx-low | tx-high-threshold tx-high | tx-low-threshold tx-low | sec-admin-state maintenance | shutdown | transmit-power transmit-power | perf-mon { enable | disable } | pm [ 30-sec |15-min | 24-hour ] optics [ report | threshold ]
controller optics R/S/I/P pm [ 30-sec |15-min | 24-hour] optics [ report | threshold { cd | dgd | lbc | lbc-pc | opr | opr-dbm | opt | opt-dbm | osnr | pcr | pdl | pn | sopmd]
R/S/I/P |
Rack/Slot/Instance/Port of the optics controller. |
cd-max cd-max |
(Only for trunk optics controllers) Maximum chromatic dispersion. The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G. |
cd-min cd-min |
(Only for trunk optics controllers) Minimum chromatic dispersion. The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G. |
cd-low-threshold cd-low |
(Only for trunk optics controllers) Minimum acceptable chromatic dispersion. The CD-OOR alarm is raised if the chromatic dispersion goes below this value. The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G. |
cd-high-threshold cd-high |
(Only for trunk optics controllers) Maximum acceptable chromatic dispersion. The CD-OOR alarm is raised if the chromatic dispersion exceeds this value. The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G. |
dgd-high-threshold dgd-value |
(Only for trunk optics controllers) Configures the maximum acceptable Differential Group Delay (DGD) value. The HIGH_DGD alarm is raised if DGD exceeds this value. The range is 0 to 18000 (in the units of 0.01 ps). |
lbc-high-threshold lbc-value |
Configures the high laser bias current threshold. The range is 0 to 100% |
osnr-low-threshold osnr-value |
(Only for trunk optics controllers) Configures the minimum acceptable Optical Signal to Noise ratio (OSNR) value. The LOW_OSNR alarm is raised if OSNR goes below this value. The range is 0 to 4000 (in the units of 0.01 dB). |
description description |
Description of the optics controller. |
rx-high-threshold rx-high |
Configures high receive power threshold. The range is -400 to 300 (in the units of 0.1 dBm). |
rx-low-threshold rx-low |
Configures low receive power threshold. The range is -400 to 300 (in the units of 0.1 dBm). |
tx-high-threshold tx-high |
Configures high transmit power threshold. The range is -400 to 300 dBm (in the units of 0.1 dBm). |
tx-low-threshold tx-low |
Configures low transmit power threshold. The range is -400 to 300 dBm (in the units of 0.1 dBm). |
sec-admin-state maintenance |
Configures the administrative state of the controller indicating that the controller is under maintenance. |
shutdown |
Disables the configuration of the controller. |
pm |
Configures performance monitoring parameters for 30 second, 15 minute and 24 hour intervals. |
transmit-power transmit-power |
(Only for trunk optics controllers) Configures the transmit power. The range is -190 to 15 dBm (in the units of 0.1 dBm). The CLI allows to configure the range between -190 to 15 dBm (in the units of 0.1 dBm). See the appropriate CFP pluggable data sheet for the supported range. The default transmit-power is changed from -0.5 dbm to -1.5 dBm in R6.1.2. Hence, if the user upgrades the software from a release prior to R6.1.2 to R6.1.2 or later, the transmit-power is automatically adjusted to -1.5 dbm. Hence, traffic hit is observed for one or two seconds during the upgrade. This issue happens only if the user did not configure the transmit power. |
perf-mon { enable | disable } |
Enables or disables performance monitoring. |
cd |
Configures the chromatic dispersion threshold. |
dgd |
Configures the DGD threshold. |
lbc |
Configures the laser bias current threshold. |
lbc-pc |
Configures the laser bias current threshold in percentage. |
opr |
Configures the optical Rx power threshold in uW. |
opr-dbm |
Configures the optical Rx power threshold in dBm. The unit is 0.01 dBm. For example, if you want to configure 30.00 dBm, enter 3000. |
opt |
Configures the optical Tx power threshold in uW. |
opt-dbm |
Configures the optical Tx power threshold in dBm. The unit is 0.01 dBm. |
osnr |
Configures the OSNR threshold. |
pcr |
Configures the Polarization Change Rate (PCR) threshold. |
pdl |
Configures the Polarization Dependent Loss (PDL) threshold. |
pn |
Configures the Phase Noise (PN) threshold. |
sopmd |
Configures the Second Order Polarization Mode Dispersion (SOPMD) threshold. |
None
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.1.1 |
The opr-dbm and opt-dbm were added. |
Optics controller configuration
The configurations for chromatic dispersion (cd-max, cd-min, cd-low-threshold, and cd-high-threshold) must be performed only after the hw-module configuration. These configurations must be removed before the no hw-module configuration.
The following example shows how to configure the optics controller and set the high power threshold at the transmit and receive side.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# rx-high-threshold 200
RP/0/RP0/CPU0:ios(config-optics)# tx-high-threshold 300
The following example shows how to configure the optics controller and set the ranges for chromatic dispersion when the trunk rate is 200G.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# cd-max 10000
RP/0/RP0/CPU0:ios(config-optics)# cd-min 2000
The following example shows how to configure the optics performance monitoring for 15 minute intervals.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# pm 15-min optics report cd max-tca enable
To authenticate the certification authority (CA) by getting the certificate for the CA server, use the crypto ca authenticate command in global configuration mode.
crypto ca authenticate ca-name
ca-name |
Specifies the name of the CA server. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of authenticating the certificate authority and requesting certificates.
crypto ca authenticate ncs1k
crypto ca enroll ncs1k
exit
commit
To obtain a router certificate from the certification authority (CA) server, use the crypto ca enroll command in global configuration mode.
crypto ca enroll ca-name
ca-name |
Specifies the name of the CA server. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of authenticating the certificate authority and requesting certificates.
crypto ca authenticate ncs1k
crypto ca enroll ncs1k
exit
commit
To enter the trustpoint configuration mode for the specified trustpoint, use the crypto ca trustpoint command in global configuration mode.
crypto ca trustpoint trustpoint-name
trustpoint-name |
Creates a name for the certification authority (CA). (If you previously declared the CA and want to update its characteristics, specify the name you previously created.) |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the trust point.
configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit
To generate Rivest,Shamir, and Adelman (RSA) key pairs,use the crypto key generate rsa command in global configuration mode.
crypto key generate rsa [ usage-keys | general-keys] [ keypair-label]
usage-keys |
Specifies that two RSA special-usage key pairs, one encryption pair and one signature pair, will be generated. |
general-keys |
Specifies that a general-purpose key pair will be generated, which is the default. |
keypair-label |
Specifies the name that is used for an RSA key pair when they are being exported. |
RSA key pairs do not exist.
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of generating the RSA key pair.
configure
crypto key generate rsa ncs1k
exit
commit
To configure the cryptographic algorithm used for authenticating a peer for MACsec encryption, use the cryptographic-algorithm command in keychain configuration mode.
cryptographic-algorithm authentication algorithm
AES-128-CMAC |
Configures the 128-bit AES encryption algorithm. |
AES-256-CMAC |
Configures the 256-bit AES encryption algorithm. |
No default behavior or values.
Keystring configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The following example shows how to use the cryptographic-algorithm command for MACsec encryption.
configure
key chain mac_chain macsec
key 1234abcd5678
key-string 123456781234567812345678123456 cryptographic-algorithm aes-128-cmac
To set the Port Access Entity (PAE) type, use the dot1x pae command in interface configuration mode.
dot1x pae [ supplicant | authenticator | both ]
supplicant |
The interface acts only as a supplicant and will not respond to messages that are meant for an authenticator. |
authenticator |
The interface acts only as an authenticator and will not respond to any messages meant for a supplicant. |
both |
The interface behaves both as a supplicant and as an authenticator and thus will respond to all dot1x messages. |
PAE type is not set.
Interface configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the 802.1X profile.
configure
dot1x pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit
To configure the 802.1X profile, use the dot1x profile command in global configuration mode.
dot1x profile profile-name
profile-name |
Specifies the name of the 802.1X profile. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the 802.1X profile.
configure
dot1x profile reauth
pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit
To assign the EAP-TLS profile to the 802.1X interface,, use the dot1x supplicant eap profile command in interface configuration mode.
dot1x supplicant eap profile profile-name
profile-name |
Specifies the name of the supplicant EAP profile. |
None
Interface configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the 802.1X profile.
configure
dot1x pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit
To configure the wavelength on the trunk port, use the dwdm-carrier command in optics controller configuration mode. To return the wavelength to its default value, use the no form of this command.
dwdm-carrier { 100MHz-grid frequency frequency}
dwdm-carrier { 50Ghz-grid [ frequency frequency | wavelength wavelength | itu-ch channel-number]}
50Ghz-grid | 100MHz-grid |
Configures the wavelength in 50GHz grid and 100MHz (0.1GHz) grid spacing respectively in accordance with ITU definition. |
frequency frequency |
Specifies the frequency for the optics controller. In 50GHz grid spacing, enter the 5-digit frequency value in the range of 19115 to 19610 GHz. For example, enter 19580 to specify 195.8 THz. In 100MHz grid spacing, enter the 7-digit frequency value in the range of 1911500 to 1961000 THz. For example, enter 1913501 to specify 191.3501 THz. |
wavelength wavelength |
Specifies the wavelength for the optics controller. In 50GHz grid spacing, enter the 7-digit wavelength value in the range of 1528773 to 1568362 nm. For example, enter 1532290 to specify 1532.29 nm. |
itu-ch channel-number |
ITU channel number. The range is 1 to 100 for conventional band (C-band). |
No wavelength is configured.
Optics controller configuration
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
The controller must be in the shutdown state before you can use the wavelength command.
Use the show controllers optics Rack/Slot/Instance/Port dwdm-carrrier-map command to display the wavelength and channel mapping for trunk optics controllers. See the show controllers command to view the DWDM carrier map table.
The following example shows how to configure the channel number.
RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid itu-ch 25
The following example shows how to configure the frequency in 50GHz grid spacing.
RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid frequency 19265
The following example shows how to configure the frequency in 100MHz grid spacing.
RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 100MHz-grid frequency 1911501
The following example shows how to configure the wavelength in 50GHz grid spacing.
RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid wavelength 1560200
To configure the EAP profile, use the eap profile command in global configuration mode.
eap profile profile-name
profile-name |
Specifies the name of the EAP profile. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the EAP profile.
configure
eap profile ncs1k
identity PRO67
method tls pki-trustpoint ncs1k
exit
commit
To specify the certification authority location by naming the CA's URL, use the enrollment url command in ca-identity configuration mode.
enrollment url ca-url
ca-url |
Specifies the URL of the CA where your router must send certificate requests, for example, https://ca_server where ca_server is the CA's host DNS name or IP address. |
None
Ca-identity configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of specifying the URL of the CA.
configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit
Use the fault-profile command in the global configuration mode, to create a new fault profile with one or more alarms and user-defined severity.
fault-profile name fault-identifier subsystem XR fault-type { ethernet | sdh_controller | sonet | OPTICS | G709 } fault-tag name sas severity nsas severity
fault-profile name |
Name of the fault profile. |
fault-identifier subsystem XR |
Supports the XR sub-system. |
fault-type |
The component the fault profile is applicable to. The available options are:
|
fault-tag name | The faults that are included as part of the newly created fault profile. |
sas severity nsas severity |
Sets the severity level for:
The available options are:
|
No default behavior or values.
Global Configuration
Release | Modification |
---|---|
Release 7.2.1 |
This command was introduced. |
The following example shows how to use the fault profile command.
RP/0/RP0/CPU0: router (config) # fault profile f1 fault-identifier subsystem XR fault-type HW_OPTICS fault-tag OPTICAL_LO_RXPOWER sas CRITICAL nsas CRITICAL
Use the fault-profile apply command in the global configuration mode, to apply a fault profile at the port level or node level.
fault-profile name apply rack0 slot location
fault-profile name |
Name of the fault profile. |
rack 0 slot location |
Sets the profile at the port level or node level. |
No default behavior or values.
Global Configuration
Release | Modification |
---|---|
Release 7.2.1 |
This command was introduced. |
The following example shows how to use the fault profile apply command at the port level.
RP/0/RP0/CPU0:ios(config)# fault profile f1 apply rack 0 slot LC0 port 1
The following example shows how to use the fault profile apply command at the node level.
RP/0/RP0/CPU0:ios(config)# fault profile f1 apply rack 0 slot ALL
To provision the slice with traffic on the client and trunk ports, use the hw-module command in IOS XR configuration mode.
The slice can be provisioned to send encrypted traffic with client bitrate as 100G and trunk bitrate as 200G.
hw-module location location slice [ slice_number | all {drop-lldp | client bitrate [10G | 40G | 100G | 10G-100G] trunk bitrate [100G | 200G | 250G] fec [softdecision7 | softdecision20] [client-port-ains-soak hours hours minutes minutes] [ encrypted]}] }
location location |
Specifies the location of the optics controller. The location is 0/RP0/CPU0. |
slice [ slice_number | all ] |
Specifies the slice number that is provisioned or all the slices. The range of slice number is 0 to 3. Each slice is a group of five client ports and two trunk ports. |
drop-lldp |
Enables LLDP drop on the specified slice. |
client bitrate [10G | 40G | 100G | 10G-100G] |
Specifies the traffic rate on the client ports. 10G-100G client bitrate is called mixed mode configuration. |
trunk bitrate [100G | 200G | 250G] |
Specifies the traffic rate on the trunk ports. |
fec [softdecision7 | softdecision20] |
Specifies the FEC to configure on the trunk ports. |
client-port-ains-soak hours hours minutes minutes |
Specifies the AINS configuration in hours and minutes. |
encrypted |
Provisions the slice to send encrypted traffic. |
No slice is configured.
You must configure the slice before enabling LLDP drop.
Cisco IOS XR Configuration
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.0.1 |
40G client bit rate was introduced. |
Release 6.1.1 |
encrypted keyword was added. |
Release 6.1.2 |
drop-lldp keyword was added. |
Release 6.3.1 |
10G-100G is supported as one of the client bitrates. |
Release 6.5.1 |
AINS configuration is added. |
When each slice is configured with a specific client bitrate and trunk bitrate, the no hw-module location location slice all command cannot be used to remove all the slice configurations. Use the no hw-module location location slice slice_number command for each slice to remove the slice configuration. Use the no hw-module location location {slice slice_number | all} drop-lldp command to disable LLDP drop the on the configured slice.
The following example shows how to configure slice 0 with client rate as 100G and trunk rate as 200G.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 200G softdecision7
The following example shows how to configure slice 1 with client rate as 100G and trunk rate as 250G.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 1 client bitrate 100G trunk bitrate 250G softdecision20
The following example shows how to configure slice 0 to send encrypted traffic with client rate as 100G and trunk rate as 200G.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 200G softdecision7 encrypted
The following is a sample in which slice 0 is configured in mixed mode, and FEC on the trunk ports is set to softdecision20.
configure
hw-module location 0/RP0/CPU0 slice 0 client bitrate 10G-100G trunk bitrate 200G fec SoftDecision20
commit
The following example shows how to enable LLDP drop at slice 0.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 40G trunk bitrate 200G fec softDecision7
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 drop-lldp
The following is a sample in which slice 0 is configured with AINS with soak time as 30 minutes.
configure
hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 250G fec SoftDecision20
hw-module location 0/RP0/CPU0 slice 0 client-port-ains-soak hours 0 minutes 30
commit
To configure the Access List (ACL), use the following command at the IPv4 interface in the configuration mode:
ipv4 access-group access-list-name { ingress | egress }
access-list-name |
Access list name. Names cannot contain a space or quotation marks. |
ingress |
Specifies an inbound interface. |
egress |
Specifies an outbound interface. |
No IPv4 access list is defined.
Interface Configuration
Release | Modification |
---|---|
Release 6.3.2 |
This command is introduced. |
Use the ipv4 access-list command to configure an IPv4 access list. This command places the system in access list configuration mode, in which the denied or permitted access conditions must be defined with the deny or permit command.
The following examples shows how to configure the Access List at the IPv4 interface in the configuration mode:
interface MgmtEth0/RP0/CPU0/0
ipv4 address 10.1.1.1 255.255.255.0
ipv4 access-group IPV4_ICMP_DENY ingress
ipv4 access-group IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY egress
Sample Configuration for IPv4 Access Lists
ipv4 access-list IPV4_ICMP_DENY
10 deny icmp any any
20 permit ipv4 any any
!
ipv4 access-list IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet
20 permit ipv4 any any
To configure the Access List (ACL), use the following command at the IPv6 interface in the configuration mode:
ipv6 access-group access-list-name { ingress | egress }
access-list-name |
Access list name. Names cannot contain a space or quotation marks. |
ingress |
Specifies an inbound interface. |
egress |
Specifies an outbound interface. |
No IPv6 access list is defined.
Interface Configuration
Release | Modification |
---|---|
Release 6.3.2 |
This command is introduced. |
Use the ipv6 access-list command to configure an IPv6access list. This command places the system in access list configuration mode, in which the denied or permitted access conditions must be defined with the deny or permit command.
The following examples shows how to configure the Access List at the IPv6 interface in the configuration mode
interface MgmtEth0/RP0/CPU0/0
ipv6 address 1000::1/64
ipv6 access-group IPV6_SSH_DENY ingress
ipv6 access-group IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY egress
Sample Configuration for IPv6 Access Lists
ipv6 access-list IPV6_SSH_DENY
10 deny tcp any any eq ssh
20 permit ipv6 any any
!
ipv6 access-list IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet
20 permit ipv6 any any
!
To create or modify a keychain key, use the key command in keychain configuration mode.
key key-id
key-id |
64-character hexadecimal string. |
No default behavior or values.
Key chain configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The key name must be of even number of characters and must match on both the sides.
The following example shows how to use the key command.
configure
key chain mac_chain macsec
key 1234abcd5678
To create or modify a keychain, use the key chain command in global configuration mode.
key chain key-chain-name
key-chain-name |
Specifies the name of the keychain that can be up to 32 characters. |
No default behavior or values.
Global configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how you can configure a key chain for MACsec encryption.
configure
key chain mac_chain macsec
To configure the preference for a device to serve as the key server for MACsec encryption, use the key-server-priority command in MACsec policy configuration mode.
key-server-priority value
value |
Indicates the priority for a device to become the key server. Lower the value, higher the preference. The range is 0 to 255. |
The default value is 16.
MACsec policy configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The following example shows how to use the key-server-priority command.
configure
macsec-policy mac_policy
key-server-priority 0
To specify the text string for the key, use the key-string command in keychain configuration mode.
key-string [ clear | password] key-string-text
clear |
Specifies the key string in clear-text form. |
password |
Specifies the key in encrypted form. |
key-string-text |
Text string for the key, which is encrypted before being saved to the configuration. The text string has the following character limitations.
|
The default value is clear.
Key chain configuration
Release | Modification |
---|---|
Release 6.1.1 |
This command was introduced. |
The following example shows how to use the keystring command.
configure
key chain mac_chain macsec
key 1234abcd5678
key-string 12345678123456781234567 cryptographic-algorithm aes-128-cmac
Configures the validity period for the MACsec key.
The lifetime period (validity period of the key) can be configured, with a duration in seconds, as a validity period between two dates (for example, Jan 01 2016 to Dec 31 2016), or with infinite validity.
The key is valid from the time you configure (in HH:MM:SS format). The duration is configured in seconds.
lifetime start_time start_date { end_time end_date | duration validity | infinite }
start_time |
Start time in hh:mm:ss from which the key becomes valid. The range is from 0:0:0 to 23:59:59. |
start_date |
The date in DD month YYYY format that the key becomes valid. |
end_time |
End time in hh:mm:ss at which point the key becomes invalid. The range is from 0:0:0 to 23:59:59. |
end_date |
The date in DD month YYYY format that the key becomes invalid. |
duration validity |
The key chain is valid for the duration you configure. You can configure duration in seconds. |
infinite |
The key chain is valid indefinitely. |
No default behavior or values
Keychain configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how to use the lifetime command.
configure
key chain mac_chain macsec
key 1234abcd5678
key-string 123456781234567812345678 cryptographic-algorithm aes-128-cmac
lifetime 05:00:00 20 july 2016 12:00:00 30 september 2016
To apply the MACsec key chain and policy configuration on the MACsec controller, use the macsec command in controller configuration mode.
macsec psk-keychain key-chain-name [ policy policy-name]
key-chain-name |
Specifies the name of the keychain that can be up to 32 characters. |
policy_name |
Name of the MACsec policy for encryption. |
No default behavior or values.
Controller configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how to use the macsec psk-keychain command.
configure
controller MACSecCtrl 0/0/0/3
macsec psk-keychain mac_chain policy mac_policy
exit
commit
To configure EAP on MACsec Controller, use the macsec eap command in global configuration mode.
macsec eap [ policy macsec-policy-name ]
macsec-policy-name |
Specifies the name of the MACsec policy for encryption. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring MACsec EAP and 802.1X profile on the MACsec controller.
configure
controller MACSecCtrl 0/0/0/24
dot1x profile reauth
macsec eap
exit
commit
To create a MACsec policy for MACsec encryption, use the macsec-policy command in global configuration mode.
macsec-policy policy_name
policy_name |
Name of the MACsec policy for encryption. |
No default behavior or values.
Global configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how to use the macsec-policy command.
configure
macsec-policy mac_policy
To create a MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx.
controllers macsecCtrlr R/S/P { pm { 30-sec |15-min | 24-hour} { macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx} { report | threshold { in-out-decrypted | out-oct-decrypted} value} enable
R/S/I/P |
Rack/Slot/Instance/Port of the coherent DSP controller. |
pm { 30-sec | 15-min | 24-hour } |
Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals. |
macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx |
MACSEC Ether layer counters, MACSEC secy Interface level counters, MACSEC secy Tx layer counters, and MACSEC secy Rx layer counters. |
in-out-decrypted | out-oct-decrypted |
The number of octets of plaintext recovered from received packets that were integrity protected and encrypted |
No default behavior or values.
Global configuration
Release | Modification |
---|---|
R6.3.1 |
This command was introduced. |
The following example shows to configure the MACsec TCA parameters for rx-util at macsec-ether level for MACsec controller in 15 min intervals:.
controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report rx-util enable
pm 15-min macsec-ether threshold rx-util 10
To specify the configured pki trustpoint name, use the pki-trustpoint command in global configuration mode.
pki-trustpoint trustpoint-name
trustpoint-name |
Specifies the configured pki trustpoint name. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the EAP profile.
configure
eap profile ncs1k
identity PRO67
method tls pki-trustpoint ncs1k
exit
commit
To configure the performance monitoring parameters of the optics, Ethernet, and coherent DSP controllers, use the pm command in the controller configuration mode.
pm [ 15-min | 24-hour] [ optics | ether | fec | otn] [ report | threshold] value
15-min | 24-hour |
Configures performance monitoring parameters for 15 minute or 24 hour intervals. |
optics | ether | fec | otn |
Specifies whether to configure performance monitoring parameters for the optics, Ethernet, or coherent DSP controllers. |
report |
Configures optics TCA reporting status. |
threshold |
Configures threshold on optics parameters. |
value |
Value of the reporting or threshold parameters. |
None
Optics controller configuration
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.0.1 | The IN_DROP_OTHER, OUT-OCTET, TX_UNDERSIZED_PKT, TX_OVERSIZED_PKT, TX_FRAGMENTS, TX_JABBER, TX_BAD_FCS statistics were introduced. |
The following table describes the optics PM parameters.
Parameter |
Description |
---|---|
cd |
Chromatic dispersion TCA reporting status or threshold |
dgd |
Differential group delay TCA reporting status or threshold |
lbc |
lbc TCA reporting status or threshold |
lbc-pc |
lbc percentage TCA reporting status or threshold |
opr |
opr TCA reporting status or threshold |
opt |
opt TCA reporting status or threshold |
osnr |
Optical Signal to Noise Ratio TCA reporting status or threshold |
pcr |
Polarization Change Rate TCA reporting status or threshold |
pdl |
Polarization Dependent Loss TCA reporting status or threshold |
pn |
Phase Noise TCA reporting status or threshold |
sopmd |
Second Order Polarization Mode Dispersion TCA reporting status or threshold |
The following table describes the OTN PM parameters.
Parameter |
Description |
---|---|
ES-NE |
Error seconds in the near end |
ESR-NE |
Error seconds ratio in the near end |
SES-NE |
Severely error seconds in the near end |
SESR-NE |
Severely error seconds ratio in the near end |
UAS-NE |
Unavailable seconds in the near end |
BBE-NE |
Background block errors in the near end |
BBER-NE |
Background block errors ratio in the near end |
FC-NE |
Failure counts in the near end |
ES-FE |
Error seconds in the far end |
ESR-FE |
Error seconds ratio in the far end |
SES-FE |
Severely error seconds in the far end |
SESR-FE |
Severely error seconds ratio in the far end |
UAS-FE |
Unavailable seconds in the far end |
BBE-FE |
Background block errors in the far end |
BBER-FE |
Background block errors ratio in the far end |
FC-FE |
Failure counts in the far end |
The following table describes the Ethernet PM parameters.
![]() Note |
You can view details of the undersized and fragmented packets that are dropped in the ingress side in the 100G mode in the STAT-UNDERSIZED-PKT and IN_ERROR_FRAGMENTS ingress counters. These details are not available on the egress counters such as TX_UNDERSIZED_PKT and TX_FRAGMENTS. All the dropped packets are counted as part of the IN_DROP_OTHER drop counter. |
Parameter |
Description |
---|---|
RX-UTIL |
Bandwidth utilization of port at the ingress side in percentage. |
TX-UTIL |
Bandwidth utilization of port at egress side in percentage. |
RX-PKT |
Number of received packets |
STAT-PKT |
Status of received packets |
OCTET-STAT |
Total number of octets of data received in the network |
OVERSIZE-PKT |
Total number of packets received that were longer than 1518 octets and were otherwise well formed |
JABBER-STATS |
Total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error) |
IN_PKT_64_OCTET |
Total number of packets received that were 64 octets in length |
IN_PKT_65_127_OCTET |
Total number of packets received that were between 65 and 127 octets in length |
IN_PKT_128_255_OCTET |
Total number of packets received that were between 128 and 255 octets in length |
IN_PKT_256_511_OCTET |
Total number of packets received that were between 256 and 511 octets in length |
IN_PKT_512_1023_OCTET |
Total number of packets received that were between 512 and 1023 octets in length |
IN_PKT_1024_1518_OCTET |
Total number of packets received that were between 1024 and 1518 octets in length |
IN-UCAST |
Total number of unicast frames received error-free |
IN-MCAST |
Total number of multicast frames received error-free |
IN-BCAST |
Total number of broadcast frames received error-free |
OUT-UCAST |
Total number of unicast frames transmitted error-free |
OUT-BCAST |
Total number of broadcast frames transmitted error-free |
OUT-MCAST |
Total number of multicast frames transmitted error-free |
TX-PKT |
Number of transmitted packets |
OUT-OCTET |
Total number of octets transmitted out of the interface, including framing characters |
STAT-MULTICAST-PKT |
Status of multicast packets |
STAT-BROADCAST-PKT |
Status of broadcast packets |
STAT-UNDERSIZED-PKT |
Number of good packets received that are shorter than 64 bytes. |
IN_ERROR_FRAGMENTS |
Number of bad packets received that are shorter than 64 bytes. |
IN_DROP_OTHER | Total number of packets dropped. In the 100 G mode, undersized and fragmented packets are dropped |
OUT-OCTET | Total number of bytes transmitted |
TX_UNDERSIZED_PKT | Total number of packets transmitted that are shorter than 64 bytes. |
TX_OVERSIZED_PKT | Total number of oversized packets transmitted. |
TX_FRAGMENTS | Total number of fragmented packets transmitted. |
TX_JABBER | Total number of Jabber packets transmitted. |
TX_BAD_FCS | Total number of bad FCS packets transmitted. |
The following table describes the FEC PM parameters.
Parameter |
Description |
---|---|
ec-bits |
Number of bit errors that are corrected by the system |
uc-words |
Number of words that are not corrected by the system |
The following example shows how to set the maximum TCA reporting status for the chromatic dispersion.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0 pm 15-min optics report cd max-tca enable
The following example shows how to set the maximum threshold for the chromatic dispersion.
RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0 pm 15-min optics threshold cd max
To specify a RADIUS server host, use the radius-server host command in global configuration mode.
radius-server host { IPv4 address of RADIUS server} [ auth-port port-number] [ acct-port port-number] [ key string]
auth-port port-number |
Specifies the User Datagram Protocol (UDP) destination port for authentication requests. The port-number argument specifies the port number for authentication requests. The host is not used for authentication if this value is set to 0. The default value is 1645. |
acct-port port-number |
Specifies the UDP destination port for accounting requests. The port-number argument specifies the port number for accounting requests. The host is not used for accounting services if this value is set to 0. The default value is is 1646. |
key string |
Specifies the authentication and encryption key that is used between the router and the RADIUS daemon running on the RADIUS server. This key overrides the global setting of the radius-server key command. If no key string is specified, the global value is used. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the RADIUS server.
configure
radius-server host 209.165.200.225 auth-port 1645 acct-port 1646 key cisco
radius-server vsa attribute ignore unknown
exit
commit
To specify the unknown vsa ignore configuration for RADIUS server, use the radius-server vsa attribute ignore unknown command in the global configuration mode.
radius-server vsa attribute ignore unknown
vsa attribute ignore unknown |
Specifies the unknown vsa (vendor specific attributes) ignore configuration for RADIUS server. Otherwise, authentication failure may occur. |
None
Global configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of configuring the RADIUS server.
configure
radius-server host 209.165.200.225 auth-port 1645 acct-port 1646 key cisco
radius-server vsa attribute ignore unknown
exit
commit
To specify a named Rivest, Shamir, and Adelman (RSA) key pair for this trustpoint, use the rsakeypair command in trustpoint configuration mode.
rsakeypair keypair-label
keypair-label |
RSA key pair label that names the RSA key pairs. |
If the RSA key pair is not specified, the default RSA key is used for this trustpoint.
Trustpoint configuration
Release | Modification |
---|---|
R6.3.2 |
This command was introduced. |
The following is a sample of specifying a RSA key pair for the trustpoint.
configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit
To configure the type of data (encrypted data or all data) that is allowed through the controller configured with MACsec, use the security-policy command in MACsec policy configuration mode.
security-policy { should-secure | must-secure}
should-secure |
Configures the controller on which the MACsec policy is applied, to permit all data. |
must-secure |
Configures the controller on which the MACsec policy is applied, to permit only MACsec encrypted data. |
The default value is must-secure that indicates unencrypted packets cannot be transmitted or received except MKA control protocol packets.
MACsec policy configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how to use the security-policy command.
configure
macsec-policy mac_policy
security-policy must-secure
To display alarms in brief or detail, use the show alarms command in XR EXEC mode or Administration EXEC mode.
show alarms brief [card [ location location ] | rack | system ] [ active | history ] ]
show alarms detail [card [ location location ]| rack | system ] [ active | clients | history | stats ] ]
brief |
Displays alarms in brief. |
card |
Displays card scope alarms related data. |
rack |
Displays rack scope alarms related data. |
system |
Displays system scope alarms related data. |
location location |
Specifies the target location in the rack/slot notation. |
active |
Displays active alarms. |
history |
Displays alarm history. |
detail |
Displays alarms in detail. |
clients |
Displays clients associated with the service. |
stats |
Displays service statistics. |
None
XR EXEC
Administration EXEC
Release | Modification |
---|---|
Release 6.0 .0 |
This command was introduced. |
This command displays the alarms in brief or detail. The command displays only the administration alarms in admin EXEC mode and all the alarms in XR EXEC mode.
Task ID | Operation |
---|---|
fault |
read |
The following example shows the output of the show alarms command.
sysadmin-vm:0_RP0# show alarms
Thu Dec 17 02:15:12.873 UTC
-----------------------------------------------------------------------------------------------------------------
Active Alarms
-----------------------------------------------------------------------------------------------------------------
Location Severity Group Set time Description
-----------------------------------------------------------------------------------------------------------------
0/PM0 major environ 12/16/15 21:43:19 Power Module
Output Disabled
(PM_OUTPUT_EN_PIN_HI)
0 major environ 12/16/15 21:43:19 Power Shelf
redundancy lost
RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active
Thu Dec 17 02:20:34.592 UTC
--------------------------------------------------------------------------------
Active Alarms (Brief) for 0/RP0
--------------------------------------------------------------------------------
Location Severity Group Set Time Description
--------------------------------------------------------------------------------
0/0 Minor Controller 12/16/2015 21:45:42 Optics0/0/0
/2 - Optics Low Receive Power
--------------------------------------------------------------------------------
History Alarms (Brief) for 0/RP0
--------------------------------------------------------------------------------
Location Severity Group Set Time Description
Clear Time
--------------------------------------------------------------------------------
0/0 Minor Controller 12/16/2015 21:45:42 Optics0/0/0
/12 - Optics High Differential Group Delay
12/16/2015 21:45:53
0/0 Minor Controller 12/16/2015 21:45:42 Optics0/0/0
/12 - Optics Out of Range Chromatic Dispersion
RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active
Mon Oct 24 11:57:16.591 UTC
------------------------------------------------------------------------------------
Active Alarms
------------------------------------------------------------------------------------
Location Severity Group Set Time Description
------------------------------------------------------------------------------------
0/RP0/CPU0 Minor Power 10/24/2016 11:56:46 UTC patch-panel power redundancy lost
RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active
Mon Oct 24 11:58:45.596 UTC
------------------------------------------------------------------------------------
Active Alarms
------------------------------------------------------------------------------------
Location Severity Group Set Time Description
------------------------------------------------------------------------------------
0/RP0/CPU0 Minor Software 10/24/2016 11:58:25 UTC Not able to communicate with patch-panel
To display status and configuration information about the interfaces on a specific node, use the show controllers command in XR EXEC mode.
show controllers [ description] controllertype R/S/I/P [ description] [ headless-stats] | [ dwdm-carrier-map flexi-grid] | [ pm { current | history} { 30 sec | 15-min | 24-hour} { optics | ether} linenumber { otn | fec} ] | [ lldp-snoop] | [ stats] | [ summary]
show controllers [ description] coherentDSPR/S/I/Ppm { current | history} [ description] { 15-min | 24-hour} prbs
Use the following command to view the MACsec performance monitoring at MACsec ether layer, MACsec-secy-if, MACsec-secy-Tx, and /or MACsec-secy-Rx:
show controllers macSecCtrlr R/S/I/P { pm { current | history} { 30 sec| 15-min | 24-hour} { macsec-ether | macsec-secy-if| macsec-secy-tx| macsec-secy-rx}
description |
Displays the name, status, and port description of all the configured controllers or of the specified controller. |
controllertype |
Type of the controller. The possible values are HundredGigECtrlr, TenGigECtrlr, maCSecCtrlr, CoherentDSP, and Optics. |
R/S/I/P/L |
Rack/Slot/Instance/Port/Lane number of the controller. If the controller type is TenGigECtrlr, include the lane number after the port number. |
headless-stats |
Displays the statistics collected during the last headless operation. The collected statistics is preserved for a slice until the hw-module configuration is removed or changed on that slice or until the next headless operation. The statistics is also preserved across process restarts. |
dwdm-carrier-map |
(only for trunk optics controllers) Displays the wavelength and channel mapping. |
flexi-grid |
(only for trunk optics controllers) Enables GMPLS UNI flexible grid channel spacing. |
pm |
Displays performance monitoring parameters for the controller. |
current |
Displays the current performance monitoring data in 15 minute and 24 hour intervals. |
history |
Displays the historical performance monitoring data in 15 minute and 24 hour intervals. |
optics | ether |
optics to display the PM data for Optics controller and ether to display the PM data for Ethernet controller. |
linenumber |
Line number to display performance monitoring data. The range is 1 to 12. |
otn | fec |
Displays OTN PM data or FEC PM data for CoherentDSP controller. |
lldp-snoop |
Displays the MAC address and other details about the LLDP neighbor from Release 6.0.1. Verify that the MAC address displayed is same as the MAC address of the traffic generating port. |
stats |
Displays the cumulative statistics of the controller port. |
summary |
Displays brief information about MACSecCtrlrs in a tabular format. This parameter cannot be used with the stats parameter. |
prbs mode |
Pseudo Random Binary Sequence (PRBS) mode. |
![]() Note |
For 10G/40G/100G Ethernet Controller, the stats option displays the cumulative statistics of the Ethernet Controller port. However, the Egress accounting does not support packet size based classification (All output packets * bytes counter). |
Statistics are not preserved across Cisco IOS XR or system reloads. Up to five seconds of data is lost when the mxp-driver process restarts. The stats output also includes the statistics collected when the system is in headless mode.
When the FEC counters (Corrected Codeword Count and UnCorrected Codeword Count) displays 0 values in the output of show controllers hundredGigECtrlr command, it indicates that the FEC counters are not supported or the value is not valid.
Total TX Power and Total RX Power: For multi-lane controller optics, total power is calculated by converting each lane power value from dBm to mW, and adding each lane power. Total power in mW must then be converted to dBm.
Total power in mW = [(Lane 1 power in mW) + (Lane 2 power in mW) + (Lane 3 power in mW) + (Lane 4 power in mW)]
Total power in dBm = Converted value of total power in mW to dBm
The status and configuration information of all the interfaces is displayed.
XR EXEC
Release | Modification |
---|---|
6.0.0 |
This command was introduced. |
6.0.1 |
The display for LLDP snooping was expanded to include more details about the LLDP neighbor. A new keyword stats was introduced to display the cumulative statistics of the Ethernet controller port. |
6.1.1 |
MACSecCtrlr was introduced as one of the controller types. |
6.1.2 |
The output of lldp-snoop keyword is updated. |
6.2.1 |
The wildcard character support is introduced. |
6.3.2 |
The flex-grid and description keywords are introduced. The PRBS mode is introduced. The MACSec performance monitoring is introduced. |
6.5.1 |
The output was updated to include QSA vendor details. |
For QSFP-40G-SR-BD and QSFP-100G-AOC pluggables, the output of show controllers optics command does not display the transmit and receive optics parameters such as transmit and receive power. These pluggables do not support Digital Optical Monitoring.
When breakout patch panel is used, the output of show controllers TenGigECtrlr command displays the LED status of the patch panel instead of LED status of the physical port. When breakout patch panel is not used, the output displays the alarm status of the Ethernet layer or controller.
RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13
Tue Feb 13 15:42:38.708 UTC
Port : CoherentDSP 0/0/0/13
Controller State : Up
Secondary State : Normal
Derived State : In Service
Loopback mode : None
BER Thresholds : SF = 1.0E-5 SD = 1.0E-7
Performance Monitoring : Enable
Alarm Information:
LOS = 1 LOF = 0 LOM = 1
OOF = 0 OOM = 0 AIS = 0
IAE = 0 BIAE = 0 SF_BER = 0
SD_BER = 0 BDI = 0 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms : None
OTU TTI Sent
OPERATOR SPECIFIC ASCII :
:
OPERATOR SPECIFIC HEX : 00000000000000000000000000000000
: 00000000000000000000000000000000
OTU TTI Received
OPERATOR SPECIFIC ASCII :
:
OPERATOR SPECIFIC HEX : 20202020202020202020202020202020
: 00000000000000000000000000000000
OTU TTI Expected
OPERATOR SPECIFIC ASCII :
:
OPERATOR SPECIFIC HEX : 00000000000000000000000000000000
: 00000000000000000000000000000000
FEC mode : Soft-Decision 7
Network SRLG values : Not Configured
The table below describes the significant fields shown in the above example.
Field |
Description |
---|---|
Port |
Rack/Slot/Instance/Port of the coherent DSP controller. |
Controller State |
State of the controller that can be one of the following:
|
Secondary State |
Secondary state of the controller that can be one of the following:
|
Derived State |
Derived state of the controller that can be one of the following:
|
Loopback mode |
Loopback mode of the controller that can be one of the following:
|
BER Thresholds |
Bit Error Rate (BER) that can be one of the following:
|
Performance Monitoring |
Specifies if performance monitoring is enabled or not:
|
Alarm Information |
Summarizes the alarm details:
|
Detected Alarms |
Summarizes the detected alarms:
|
OTU TTI Sent |
Specifies the sent OTU Trail Trace Identifier (TTI) |
OTU TTI Received |
Specifies the received OTU TTI. |
OTU TTI Expected |
Specifies the expected OTU TTI. |
FEC mode |
Specifies the FEC mode:
|
Network SRLG |
Shared Risk Link Groups (SRLGs). Not supported on NCS 1002 |
RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/8
Tue Jun 26 17:36:09.270 IST
Controller State: Up
Transport Admin State: In Service
Laser State: On
LED State: Green
Optics Status
Optics Type: 10G SFP+ LR
Alarm Status:
-------------
Detected Alarms: None
LOS/LOL/Fault Status:
Alarm Statistics:
-------------
HIGH-RX-PWR = 0 LOW-RX-PWR = 0
HIGH-TX-PWR = 0 LOW-TX-PWR = 0
HIGH-LBC = 0 HIGH-DGD = 0
OOR-CD = 0 OSNR = 0
WVL-OOL = 0 MEA = 0
IMPROPER-REM = 0
TX-POWER-PROV-MISMATCH = 0
Performance Monitoring: Enable
THRESHOLD VALUES
----------------
Parameter High Alarm Low Alarm High Warning Low Warning
------------------------ ---------- --------- ------------ -----------
Rx Power Threshold(dBm) 4.9 -12.0 0.0 0.0
Tx Power Threshold(dBm) 3.5 -10.1 0.0 0.0
LBC Threshold(mA) N/A N/A 0.00 0.00
LBC High Threshold = 98 %
Polarization parameters not supported by optics
Total TX Power = -1.14 dBm
Total RX Power = -5.36 dBm
Lane Laser Bias TX Power RX Power Output Frequency
---- ---------- ---------- ---------- ----------------
1 24.5 % -1.14 dBm -5.36 dBm 228.84 THz
2 0.0 % -40.00 dBm -40.00 dBm 0.00 THz
3 0.0 % -40.00 dBm -40.00 dBm 0.00 THz
4 0.0 % -40.00 dBm -40.00 dBm 0.00 THz
Transceiver Vendor Details
Form Factor : SFP+
Name : CISCO-SUMITOMO
Part Number : 10-2618-01
Rev Number : C
Serial Number : SPC1907074R
PID : SFP-10G-LR
VID : V01
Date Code(yy/mm/dd) : 15/02/11
Fiber Connector Type: SC
Otn Application Code: Undefined
Sonet Application Code: Undefined
Ethernet Compliance Code: 10GBASE-LR
Transceiver Temperature : 28 Celsius
QSA Vendor Details
------------------
Adapter type : CAZADERO_QSFP_SFP_Adapter
Name : CISCO-DNI
Part Number : 74-9474-01
Rev Number : 03
Serial Number : DTY2142058L
PID : CVR-QSFP-SFP10G
VID : V01
AINS Soak : None
AINS Timer : 0h, 0m
AINS remaining time : 0 seconds
RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/11 headless-stats
This command displays the Ethernet controller statistics in headless mode. The headless start time, headless end time, and packet statistics in Tx, Rx are displayed.
Thu May 4 08:58:23.491 UTC
Started in Stateful mode: Yes
Headless Start Time: Thu May 4 08:43:54 2017
Headless End Time: Thu May 4 08:45:15 2017
Ethernet Headless Statistics
RxPktsOverSized : 37633208
RxPktsBadFcs : 0
RxErrorJabbers : 0
RxPktsMulticast : 0
RxPktsBroadcast : 37633208
RxPktsUnicast : 0
RxPktsUnderSized : 0
RxPkts : 37633208
RxBytesGood : 361278796800
RxPktsGood : 37633208
Rx8021QPkts : 0
RxLldpkts : 10
RxRecvFragments : 0
RxPkts64Bytes : 0
RxPkts65To127Bytes : 0
RxPkts128to255Bytes : 0
RxPkts256To511Bytes : 0
RxPkts512To1023Bytes : 0
RxPkts1024To1518Bytes : 0
RxTotalBytes : 361278791752
RxPktsDrop : 0
RxPause : 0
TxPkts : 37633202
TxTotalBytes : 361278732768
TxGoodPkts : 0
TxGoodBytes : 0
TxPktsUndersized : 0
TxPktsOversized : 37633202
TxPktsFragments : 0
TxPktsJabber : 0
TxPktsBadFcs : 0
TxPause : 0
RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/13 dwdm-carrier-map flexi-grid
This command provides mapping of DWDM wavelength and frequency in 6.25 Ghz spacing. The output of this command has G.694.1 channel number, frequency, and wavelength and has 776 entries in this channel spacing.
DWDM Carrier Band:: OPTICS_C_BAND
Frequency range supported: 196.10000 THz ~ 191.25630 THz
DWDM Carrier Map table
----------------------------------------------------
Channel G.694.1 Frequency Wavelength
index Ch Num (THz) (nm)
----------------------------------------------------
1 480 196.10000 1528.773
----------------------------------------------------
2 479 196.09380 1528.822
----------------------------------------------------
3 478 196.08750 1528.871
----------------------------------------------------
4 477 196.08130 1528.919
----------------------------------------------------
5 476 196.07500 1528.968
----------------------------------------------------
6 475 196.06880 1529.017
----------------------------------------------------
7 474 196.06250 1529.066
----------------------------------------------------
8 473 196.05630 1529.114
----------------------------------------------------
9 472 196.05000 1529.163
----------------------------------------------------
10 471 196.04380 1529.212
----------------------------------------------------
11 470 196.03750 1529.261
----------------------------------------------------
12 469 196.03130 1529.309
----------------------------------------------------
13 468 196.02500 1529.358
----------------------------------------------------
14 467 196.01880 1529.407
----------------------------------------------------
15 466 196.01250 1529.456
----------------------------------------------------
16 465 196.00630 1529.504
----------------------------------------------------
17 464 196.00000 1529.553
----------------------------------------------------
18 463 195.99380 1529.602
----------------------------------------------------
19 462 195.98750 1529.651
----------------------------------------------------
20 461 195.98130 1529.699
----------------------------------------------------
21 460 195.97500 1529.748
----------------------------------------------------
22 459 195.96880 1529.797
----------------------------------------------------
23 458 195.96250 1529.846
----------------------------------------------------
24 457 195.95630 1529.894
----------------------------------------------------
25 456 195.95000 1529.944
----------------------------------------------------
26 455 195.94380 1529.992
----------------------------------------------------
27 454 195.93750 1530.041
----------------------------------------------------
28 453 195.93130 1530.090
----------------------------------------------------
29 452 195.92500 1530.139
----------------------------------------------------
30 451 195.91880 1530.187
----------------------------------------------------
31 450 195.91250 1530.236
----------------------------------------------------
32 449 195.90630 1530.285
----------------------------------------------------
33 448 195.90000 1530.334
----------------------------------------------------
34 447 195.89380 1530.383
----------------------------------------------------
35 446 195.88750 1530.432
----------------------------------------------------
36 445 195.88130 1530.480
----------------------------------------------------
37 444 195.87500 1530.529
----------------------------------------------------
38 443 195.86880 1530.578
----------------------------------------------------
39 442 195.86250 1530.627
----------------------------------------------------
40 441 195.85630 1530.676
----------------------------------------------------
41 440 195.85000 1530.725
----------------------------------------------------
42 439 195.84380 1530.773
----------------------------------------------------
43 438 195.83750 1530.823
----------------------------------------------------
44 437 195.83130 1530.871
----------------------------------------------------
45 436 195.82500 1530.920
----------------------------------------------------
46 435 195.81880 1530.969
----------------------------------------------------
47 434 195.81250 1531.018
----------------------------------------------------
48 433 195.80630 1531.066
----------------------------------------------------
49 432 195.80000 1531.116
----------------------------------------------------
50 431 195.79380 1531.164
----------------------------------------------------
51 430 195.78750 1531.213
----------------------------------------------------
52 429 195.78130 1531.262
----------------------------------------------------
53 428 195.77500 1531.311
----------------------------------------------------
54 427 195.76880 1531.360
----------------------------------------------------
55 426 195.76250 1531.409
----------------------------------------------------
56 425 195.75630 1531.458
----------------------------------------------------
57 424 195.75000 1531.507
----------------------------------------------------
58 423 195.74380 1531.555
----------------------------------------------------
59 422 195.73750 1531.605
----------------------------------------------------
60 421 195.73130 1531.653
----------------------------------------------------
61 420 195.72500 1531.702
----------------------------------------------------
62 419 195.71880 1531.751
----------------------------------------------------
63 418 195.71250 1531.800
----------------------------------------------------
64 417 195.70630 1531.849
----------------------------------------------------
65 416 195.70000 1531.898
----------------------------------------------------
66 415 195.69380 1531.947
----------------------------------------------------
67 414 195.68750 1531.996
----------------------------------------------------
68 413 195.68130 1532.044
----------------------------------------------------
69 412 195.67500 1532.094
----------------------------------------------------
70 411 195.66880 1532.142
----------------------------------------------------
71 410 195.66250 1532.192
----------------------------------------------------
72 409 195.65630 1532.240
----------------------------------------------------
73 408 195.65000 1532.290
----------------------------------------------------
74 407 195.64380 1532.338
----------------------------------------------------
75 406 195.63750 1532.387
----------------------------------------------------
76 405 195.63130 1532.436
----------------------------------------------------
77 404 195.62500 1532.485
----------------------------------------------------
78 403 195.61880 1532.534
----------------------------------------------------
79 402 195.61250 1532.583
----------------------------------------------------
80 401 195.60630 1532.632
----------------------------------------------------
81 400 195.60000 1532.681
----------------------------------------------------
82 399 195.59380 1532.730
----------------------------------------------------
83 398 195.58750 1532.779
----------------------------------------------------
84 397 195.58130 1532.828
----------------------------------------------------
85 396 195.57500 1532.877
----------------------------------------------------
86 395 195.56880 1532.926
----------------------------------------------------
87 394 195.56250 1532.975
----------------------------------------------------
88 393 195.55630 1533.024
----------------------------------------------------
89 392 195.55000 1533.073
----------------------------------------------------
90 391 195.54380 1533.122
----------------------------------------------------
91 390 195.53750 1533.171
----------------------------------------------------
92 389 195.53130 1533.220
----------------------------------------------------
93 388 195.52500 1533.269
----------------------------------------------------
94 387 195.51880 1533.318
----------------------------------------------------
95 386 195.51250 1533.367
----------------------------------------------------
96 385 195.50630 1533.416
----------------------------------------------------
97 384 195.50000 1533.465
----------------------------------------------------
98 383 195.49380 1533.514
----------------------------------------------------
99 382 195.48750 1533.563
----------------------------------------------------
100 381 195.48130 1533.612
----------------------------------------------------
----------------------------------------------------
----------------------------------------------------
775 -294 191.26250 1567.440
----------------------------------------------------
776 -295 191.25630 1567.491
----------------------------------------------------
RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/14
Tue Feb 13 15:40:30.389 UTC
Operational data for interface HundredGigECtrlr0/0/0/14:
State:
Administrative state: enabled
Operational state: Up
LED state: Red On
Maintenance: Disabled
AINS Soak: None
Phy:
Alarms:
Current:
Loss of Signal
Autonegotiation disabled.
Operational values:
Speed: 100Gbps
Duplex: Full Duplex
Flowcontrol: None
RP/0/RP0/CPU0:ios# show controllers TenGigECtrlr0/0/0/1/* | inc LED
Tue Oct 25:40:30.389 UTC
LED state: Red On
LED state: Green On
LED state: Green On
LED state: Green On
LED is Red when one or more 10G lanes in the 4x10G QSFP is administratively enabled and down even when certain lanes are administratively enabled and up. LED is Green when one or more 10G lanes in the 4x10G QSFP is administratively disabled and down while the remaining lanes are administratively enabled and up.
RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/1 pm current 15-min optics 1
Mon Jan 28 07:15:43.828 IST
Optics in the current interval [07:15:00 - 07:15:44 Mon Jan 28 2019]
Optics current bucket type : Valid
MIN AVG MAX Operational Configured TCA Operational Configured TCA
Threshold(min) Threshold(min) (min) Threshold(max) Threshold(max) (max)
LBC[% ] : 17.6 17.6 17.6 0.0 NA NO 100.0 NA NO
OPT[dBm] : -0.86 -0.85 -0.85 -30.00 NA NO 63.32 NA NO
OPR[dBm] : 0.53 0.53 0.54 -30.00 NA NO 63.32 NA NO
Last clearing of "show controllers OPTICS" counters never
RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13 pm current 15-min otn
Tue Feb 13 15:43:00.173 UTC
g709 OTN in the current interval [15:30:00 - 15:43:00 Tue Feb 13 2001]
OTN current bucket type : Valid
ES-NE : 0 Threshold : 500 TCA(enable) : YES
ESR-NE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
SES-NE : 0 Threshold : 500 TCA(enable) : YES
SESR-NE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
UAS-NE : 0 Threshold : 500 TCA(enable) : YES
BBE-NE : 0 Threshold : 10000 TCA(enable) : YES
BBER-NE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
FC-NE : 0 Threshold : 10 TCA(enable) : YES
ES-FE : 0 Threshold : 500 TCA(enable) : YES
ESR-FE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
SES-FE : 0 Threshold : 500 TCA(enable) : YES
SESR-FE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
UAS-FE : 0 Threshold : 500 TCA(enable) : YES
BBE-FE : 0 Threshold : 10000 TCA(enable) : YES
BBER-FE : 0.00000 Threshold : 0.00000 TCA(enable) : NO
FC-FE : 0 Threshold : 10 TCA(enable) : YES
Last clearing of "show controllers OTU" counters never
RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13 pm current 15-min fec
Tue Feb 13 15:43:05.054 UTC
g709 FEC in the current interval [15:30:00 - 15:43:05 Tue Feb 13 2001]
FEC current bucket type : Valid
EC-BITS : 407265375460 Threshold : 903330 TCA(enable) : YES
UC-WORDS : 0 Threshold : 5 TCA(enable) : YES
Last clearing of "show controllers OTU" counters never
![]() Note |
The EC-BITS counter value increases continuously although the client traffic is not present. |
The following example shows the details about the LLDP neighbor. These details are available from Release 6.0.1.
RP/0/RP0/CPU0:ios# show controllers FortyGigECtrlr 0/0/0/0 lldp-snoop
Thu Apr 28 09:49:20.684 UTC
Capability codes:R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other
LLDP Neighbor Snoop Data
Local Controller: FortyGigECtrlr0/0/0/0
Source MAC Address: 0010.9400.0044
Chassis ID: 50.1.1.10
Port ID: 0010.9400.0044
Port Description: Spirent Port ROSCO
System Name: Spirent Test CenterROSCO1111111111111
System Description: Spirent Test Center ddddddddddddd
Hold Time(TTL): 20 seconds
System Capabilities: R
Enabled Capabilities: R
Management Address:
IPv4 address: 50.1.1.10
LLDP Packet Drop enabled: TRUE
RX LLDP Packet Count : 0
The following example shows the PM data for Ethernet controller in Release 6.0.1.
RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/3 pm current 15-min ether
Mon Jan 28 07:20:28.170 IST
ETHER in the current interval [07:15:00 - 07:20:29 Mon Jan 28 2019]
ETHER current bucket type : Valid
RX-UTIL[%] : 2.90 Threshold : 0.00 TCA(enable) : NO
TX-UTIL[%] : 2.84 Threshold : 0.00 TCA(enable) : NO
RX-PKT : 78662810 Threshold : 0 TCA(enable) : NO
STAT-PKT : 0 Threshold : 0 TCA(enable) : NO
OCTET-STAT : 117994199787 Threshold : 0 TCA(enable) : NO
OVERSIZE-PKT : 0 Threshold : 0 TCA(enable) : NO
FCS-ERR : 0 Threshold : 0 TCA(enable) : NO
LONG-FRAME : 0 Threshold : 0 TCA(enable) : NO
JABBER-STATS : 0 Threshold : 0 TCA(enable) : NO
64-OCTET : 0 Threshold : 0 TCA(enable) : NO
65-127-OCTET : 0 Threshold : 0 TCA(enable) : NO
128-255-OCTET : 0 Threshold : 0 TCA(enable) : NO
256-511-OCTET : 0 Threshold : 0 TCA(enable) : NO
512-1023-OCTET : 0 Threshold : 0 TCA(enable) : NO
1024-1518-OCTET : 0 Threshold : 0 TCA(enable) : NO
IN-UCAST : 78662799 Threshold : 0 TCA(enable) : NO
IN-MCAST : 11 Threshold : 0 TCA(enable) : NO
IN-BCAST : 0 Threshold : 0 TCA(enable) : NO
OUT-UCAST : 0 Threshold : 0 TCA(enable) : NO
OUT-BCAST : 0 Threshold : 0 TCA(enable) : NO
OUT-MCAST : 0 Threshold : 0 TCA(enable) : NO
TX-PKT : 76889333 Threshold : 0 TCA(enable) : NO
OUT-OCTET : 115333999500 Threshold : 0 TCA(enable) : NO
IFIN-ERRORS : 0 Threshold : 0 TCA(enable) : NO
IFIN-OCTETS : 0 Threshold : 0 TCA(enable) : NO
STAT-MULTICAST-PKT : 0 Threshold : 0 TCA(enable) : NO
STAT-BROADCAST-PKT : 0 Threshold : 0 TCA(enable) : NO
STAT-UNDERSIZED-PKT : 0 Threshold : 0 TCA(enable) : NO
IN_GOOD_BYTES : 117994199787 Threshold : 0 TCA(enable) : NO
IN_GOOD_PKTS : 78662810 Threshold : 0 TCA(enable) : NO
IN_DROP_OTHER : 0 Threshold : 0 TCA(enable) : NO
IN_ERROR_FRAGMENTS : 0 Threshold : 0 TCA(enable) : NO
IN_PKT_64_OCTET : 0 Threshold : 0 TCA(enable) : NO
IN_PKTS_65_127_OCTETS : 11 Threshold : 0 TCA(enable) : NO
IN_PKTS_128_255_OCTETS : 0 Threshold : 0 TCA(enable) : NO
IN_PKTS_256_511_OCTETS : 0 Threshold : 0 TCA(enable) : NO
IN_PKTS_512_1023_OCTETS : 0 Threshold : 0 TCA(enable) : NO
IN_PKTS_1024_1518_OCTETS : 78662799 Threshold : 0 TCA(enable) : NO
TX_UNDERSIZED_PKT : 0 Threshold : 0 TCA(enable) : NO
TX_OVERSIZED_PKT : 0 Threshold : 0 TCA(enable) : NO
TX_FRAGMENTS : 0 Threshold : 0 TCA(enable) : NO
TX_JABBER : 0 Threshold : 0 TCA(enable) : NO
TX_BAD_FCS : 0 Threshold : 0 TCA(enable) : NO
Last clearing of "show controllers ETHERNET" counters never
The following example shows the cumulative statistics for the Ethernet controller in Release 6.0.1.
RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/24 stats
Wed Mar 23 06:43:30.450 UTC
Statistics for interface HundredGigECtrlr0/0/0/24 (cached values):
Ingress:
Input total bytes = 4802100516736
Input good bytes = 4802100516736
Input total packets = 37516410287
Input 802.1Q frames = 0
Input pause frames = 0
Input pkts 64 bytes = 0
Input pkts 65-127 bytes = 0
Input pkts 128-255 bytes = 37516410287
Input pkts 256-511 bytes = 0
Input pkts 512-1023 bytes = 0
Input pkts 1024-1518 bytes = 0
Input pkts 1519-Max bytes = 0
Input good pkts = 37516410287
Input unicast pkts = 37516410287
Input multicast pkts = 0
Input broadcast pkts = 0
Input drop overrun = 0
Input drop abort = 0
Input drop invalid VLAN = 0
Input drop invalid DMAC = 0
Input drop invalid encap = 0
Input drop other = 0
Input error giant = 0
Input error runt = 0
Input error jabbers = 0
Input error fragments = 0
Input error CRC = 0
Input error collisions = 0
Input error symbol = 0
Input error other = 0
Input MIB giant = 0
Input MIB jabber = 0
Input MIB CRC = 0
Egress:
Output total bytes = 4802100500352
Output good bytes = 0
Output total packets = 37516410159
Output 802.1Q frames = 0
Output pause frames = 0
Output pkts 64 bytes = 0
Output pkts 65-127 bytes = 0
Output pkts 128-255 bytes = 0
Output pkts 256-511 bytes = 0
Output pkts 512-1023 bytes = 0
Output pkts 1024-1518 bytes = 0
Output pkts 1519-Max bytes = 0
Output good pkts = 0
Output unicast pkts = 0
Output multicast pkts = 0
Output broadcast pkts = 0
Output drop underrun = 0
Output drop abort = 0
Output drop other = 0
Output error other = 0
The following example shows the output for the MACsec controller.
RP/0/RP0/CPU0:ios# show controllers maCSecCtrlr 0/0/0/4
Mon Nov 14 12:08:24.391 IST
Port: MACSecCtrlr0/0/0/4
-------------------------------------
Interface Status
-------------------------------------
Controller state : Up
ReplayWindowSize : 64
MustSecure : TRUE
-------------------------------------
Encrypted Secure Channel Status
-------------------------------------
ProtectionEnabled : TRUE
SecureChannelID : 0x4000000c8e22a04
ConfidentialityOffset : 0
CipherSuite : GCM-AES-XPN-256
MaxPacketNumber : 18446744073709551615
RecentPacketNumber : 0
-------------------------------------
Encrypted Active Associations
-------------------------------------
AssociationNumber : 0
ShortSecureChannelID : 2
-------------------------------------
Decrypted Secure Channel Status
-------------------------------------
ProtectionEnabled : TRUE
SecureChannelID : 0xb000000c8e22a04
ConfidentialityOffset : 0
CipherSuite : GCM-AES-XPN-256
MaxPacketNumber : 18446744073709551615
RecentPacketNumber : 0
-------------------------------------
Decrypted Active Associations
-------------------------------------
AssociationNumber : 0
ShortSecureChannelID : 1
RP/0/RP0/CPU0:ios# show controllers maCSecCtrlr 0/0/0/11/1 summary
Tue Jan 1 06:55:31.606 UTC
|<------ Secure Channel Status ------>||<--Active |
Replay |Associations->|
MACSecCtrlr Ctrlr Window Must Secure Recent
State Size Secure Channel Channel ID (SCI) Packet number AN Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/11/1 Up 64 TRUE Encrypt 0xb01901452ed9c6c 441617595 2 2
Decrypt 0x1901901452ed9c6c 441617450 2 1
The following examples show the wildcard character support for show controllers command.
RP/0/RP0/CPU0:ios# show controllers macSecCtrlr 0/0/0/* summary
Sun Dec 18 14:28:10.826 IST
|<------ Secure Channel Status ------>||<--Active |
Replay |Associations->|
MACSecCtrlr Ctrlr Window Must Secure Recent
State Size Secure Channel Channel ID (SCI) Packet number AN Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/3 Up 128 TRUE 2 Encrypt 0x300ccea3b562038 0 3 2
Decrypt 0x1100ccea3b562038 0 3 1
0/0/0/4 Up 128 TRUE 2 Encrypt 0x400ccea3b562038 410472853057 3 2
Decrypt 0x1200ccea3b562038 410472758788 3 1
0/0/0/17 Up 128 TRUE 2 Encrypt 0x1100ccea3b562038 0 3 1
Decrypt 0x300ccea3b562038 0 3 2
0/0/0/18 Up 128 TRUE 2 Encrypt 0x1200ccea3b562038 410472653944 3 1
Decrypt 0x400ccea3b562038 410472728753 3 2
RP/0/RP0/CPU0:ios# show controllers macSecCtrlr 0/0/0/11/* summary
This command displays the details of all the four sub-controllers of 0/0/0/11 port.
Sun Dec 18 10:10:03.929 IST
|<------ Secure Channel Status ------>||<--Active |
Replay |Associations->|
MACSecCtrlr Ctrlr Window Must Secure Recent
State Size Secure Channel Channel ID (SCI) Packet number AN Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/11/1 Up 64 TRUE 2 Encrypt 0xb01901452ed9c6c 10776298219 0 2
Decrypt 0x1901901452ed9c6c 10776374039 0 1
0/0/0/11/2 Up 64 TRUE 2 Encrypt 0xb02901452ed9c6c 10776295022 0 2
Decrypt 0x1902901452ed9c6c 10776370709 0 1
0/0/0/11/3 Up 64 TRUE 2 Encrypt 0xb03901452ed9c6c 578387113115 0 2
Decrypt 0x1903901452ed9c6c 10776367512 0 1
0/0/0/11/4 Up 64 TRUE 2 Encrypt 0xb04901452ed9c6c 10776302725 0 2
Decrypt 0x1904901452ed9c6c 10776364171 0 1
The wildcard character support is provided for clear controller command as well. For example, clear controller macSecCtrlr 0/0/0/* stats.
ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 30-sec macsec-secy-if
Displays the current performance monitoring parameters of the controller in macsec-secy-if mode in 30 sec intervals.
Macsec-Secy-If in the current interval [10:18:30 - 10:18:57 Sat Apr 22 2017]
Macsec-Secy-If current bucket type : Valid
InPktsUntagged : 0 Threshold : 0 TCA(enable) : NO
InPktsNoTag : 0 Threshold : 0 TCA(enable) : NO
InPktsBadTag : 0 Threshold : 0 TCA(enable) : NO
InPktsUnknownSCI : 0 Threshold : 0 TCA(enable) : NO
InPktsNoSCI : 0 Threshold : 0 TCA(enable) : NO
InPktsOverrun : 0 Threshold : 0 TCA(enable) : NO
InOctetsValidated : 0 Threshold : 0 TCA(enable) : NO
InOctetsDecrypted : 321909392 Threshold : 0 TCA(enable) : NO
OutPktsUntagged : 0 Threshold : 0 TCA(enable) : NO
OutPktsTooLong : 0 Threshold : 0 TCA(enable) : NO
OutOctetsProtected : 0 Threshold : 0 TCA(enable) : NO
OutOctetsEncrypted : 415501264 Threshold : 0 TCA(enable) : NO
ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 15-min macsec-secy-if
Displays the current performance monitoring parameters of the controller in macsec-secy-if mode in 15 minute intervals.
RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 15-min macsec-secy-if
Sat Apr 22 10:18:40.743 UTC
Macsec-Secy-If in the current interval [10:15:00 - 10:18:40 Sat Apr 22 2017]
Macsec-Secy-If current bucket type : Valid
InPktsUntagged : 0 Threshold : 0 TCA(enable) : NO
InPktsNoTag : 0 Threshold : 0 TCA(enable) : NO
InPktsBadTag : 0 Threshold : 0 TCA(enable) : NO
InPktsUnknownSCI : 0 Threshold : 0 TCA(enable) : NO
InPktsNoSCI : 0 Threshold : 0 TCA(enable) : NO
InPktsOverrun : 0 Threshold : 0 TCA(enable) : NO
InOctetsValidated : 0 Threshold : 0 TCA(enable) : NO
InOctetsDecrypted : 2541082096 Threshold : 0 TCA(enable) : NO
OutPktsUntagged : 0 Threshold : 0 TCA(enable) : NO
OutPktsTooLong : 0 Threshold : 0 TCA(enable) : NO
OutOctetsProtected : 0 Threshold : 0 TCA(enable) : NO
OutOctetsEncrypted : 3279875344 Threshold : 0 TCA(enable) : NO
ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 30-sec macsec-secy-tx
Displays the current performance monitoring parameters of the controller in macsec-secy-tx mode in 30 minute intervals.
Macsec-Secy-Tx in the current interval [10:18:30 - 10:18:59 Sat Apr 22 2017]
Macsec-Secy-Tx current bucket type : Valid
OutPktsProtected : 0 Threshold : 0 TCA(enable) : NO
OutPktsEncrypted : 286527 Threshold : 0 TCA(enable) : NO
OutOctetsProtected : 0 Threshold : 0 TCA(enable) : NO
OutOctetsEncrypted : 430363554 Threshold : 0 TCA(enable) : NO
OutPktsTooLong : 0 Threshold : 0 TCA(enable) : NO
Displays the current performance monitoring parameters of the controller in macsec-secy-tx mode in 24-hour interval.
RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/24/3 pm current 24-hour macsec-secy-tx
Sat Apr 1 15:38:30.158 IST
Macsec-Secy-Tx in the current interval [00:00:00 - 15:38:30 Sat Apr 1 2017]
Macsec-Secy-Tx current bucket type : Valid
OutPktsProtected : 0 Threshold : 0 TCA(enable) : NO
OutPktsEncrypted : 3160983513 Threshold : 0 TCA(enable) : NO
OutOctetsProtected : 0 Threshold : 0 TCA(enable) : NO
OutOctetsEncrypted : 31559259393792 Threshold : 0 TCA(enable) : NO
OutPktsTooLong : 0 Threshold : 0 TCA(enable) : NO
Displays the current performance monitoring parameters of the controller in macsec-secy-rx mode in 24-hour interval.
RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/10/3 pm current 24-hour macsec-secy-rx
Sat Apr 1 15:38:00.820 IST
Macsec-Secy-Rx in the current interval [00:00:00 - 15:38:01 Sat Apr 1 2017]
Macsec-Secy-Rx current bucket type : Valid
InPktsUnchecked : 0 Threshold : 0 TCA(enable) : NO
InPktsDelayed : 0 Threshold : 0 TCA(enable) : NO
InPktsLate : 0 Threshold : 0 TCA(enable) : NO
InPktsInvalid : 0 Threshold : 0 TCA(enable) : NO
InPktsOK : 3159299558 Threshold : 0 TCA(enable) : NO
InPktsNotValid : 0 Threshold : 0 TCA(enable) : NO
InPktsNotUsingSA : 0 Threshold : 0 TCA(enable) : NO
InPktsUnusedSA : 0 Threshold : 0 TCA(enable) : NO
InPktsUntaggedHit : 0 Threshold : 0 TCA(enable) : NO
InOctetsValidated : 0 Threshold : 0 TCA(enable) : NO
InOctetsDecrypted : 31542446787072 Threshold : 0 TCA(enable) : NO
RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/4
This example displays the Ethernet controller statistics with AINS Soak in Running state.
Fri Apr 27 02:49:45.858 UTC
Operational data for interface HundredGigECtrlr0/0/0/4:
State:
Administrative state: enabled
Operational state: Up
LED state: Green On
Maintenance: Disabled
AINS Soak: Running
Total Duration: 0 hour(s) 30 minute(s)
Remaining Duration: 0 hour(s) 29 minute(s) 50 second(s)
Laser Squelch: Disabled
RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/2
This example displays the Optics controller statistics with AINS Soak in Running state.
Fri Jun 8 18:33:46.027 IST
Controller State: Up
Transport Admin State: Automatic In Service
Laser State: On
LED State: Green
Optics Status
Optics Type: 100G QSFP28 LR4
Alarm Status:
-------------
Detected Alarms: None
LOS/LOL/Fault Status:
Alarm Statistics:
-------------
HIGH-RX-PWR = 0 LOW-RX-PWR = 0
HIGH-TX-PWR = 0 LOW-TX-PWR = 0
HIGH-LBC = 0 HIGH-DGD = 0
OOR-CD = 0 OSNR = 0
WVL-OOL = 0 MEA = 0
IMPROPER-REM = 0
TX-POWER-PROV-MISMATCH = 0
Performance Monitoring: Enable
THRESHOLD VALUES
----------------
Parameter High Alarm Low Alarm High Warning Low Warning
------------------------ ---------- --------- ------------ -----------
Rx Power Threshold(dBm) 4.9 -12.0 0.0 0.0
Tx Power Threshold(dBm) 3.5 -10.1 0.0 0.0
LBC Threshold(mA) N/A N/A 0.00 0.00
LBC High Threshold = 98 %
Polarization parameters not supported by optics
Total TX Power = 7.94 dBm
Total RX Power = 7.76 dBm
Lane Laser Bias TX Power RX Power Output Frequency
---- ---------- ---------- ---------- ----------------
1 28.3 % 1.91 dBm 1.30 dBm 231.39 THz
2 27.8 % 1.83 dBm 1.05 dBm 230.59 THz
3 28.2 % 1.93 dBm 2.14 dBm 229.79 THz
4 27.3 % 2.00 dBm 2.32 dBm 228.99 THz
Transceiver Vendor Details
Form Factor : QSFP28
Name : CISCO-FINISAR
Part Number : 10-3146-01
Rev Number : B
Serial Number : FNS20401P4J
PID : QSFP-100G-LR4-S
VID : V01
Date Code(yy/mm/dd) : 16/10/01
Fiber Connector Type: LC
Otn Application Code: Undefined
Sonet Application Code: Undefined
Ethernet Compliance Code: 100GBASE-LR4
Transceiver Temperature : 25 Celsius
AINS Soak : Running
AINS Timer : 0h, 30m
AINS remaining time : 1791 seconds
RP/0/RP0/CPU0:ios#show controllers hundredGigECtrlr 0/0/0/4
This example enables to view the hold off timer configured over 100G client ports.
Mon Jun 11 21:14:37.612 IST
Operational data for interface HundredGigECtrlr0/0/0/4:
State:
Administrative state: enabled
Operational state: Up
LED state: Green On
Maintenance: Disabled
AINS Soak: None
Total Duration: 0 hour(s) 0 minute(s)
Remaining Duration: 0 hour(s) 0 minute(s) 0 second(s)
Laser Squelch: Disabled
Phy:
Media type: Not known
Autonegotiation disabled.
Operational values:
Speed: 100Gbps
Duplex: Full Duplex
Flowcontrol: None
Loopback: None (or external)
BER monitoring:
Not supported
Holdoff Time: 3000ms
To display environmental monitor parameters for the system, use the show environment command in administration EXEC mode.
show environment [ all | fan | power | voltages | current | trace | temperatures ] [ location | location ]
all |
(Optional) Displays information for all the environmental monitor parameters. |
fan |
(Optional) Displays information about the fans. |
power |
(Optional) Displays power supply voltage and current information. |
voltages |
(Optional) Displays system voltage information. |
current |
(Optional) Displays current sensor information. |
temperatures |
(Optional) Displays system temperature information. |
trace |
(Optional) Displays trace data for environment monitoring. |
location | location |
(Optional) Enter the location for which the environmental information needs to be displayed. |
All environmental monitor parameters are displayed.
Administration EXEC
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
The show environment command displays information about the hardware that is installed in the system, including fans, power supply voltage, current information, and temperatures.
Task ID | Operation |
---|---|
system |
read |
The following example shows sample output from the show environment command with the fan keyword.
sysadmin-vm:0_RP0# show environment fan
Thu Nov 12 02:39:46.390 UTC
=====================================
Fan speed (rpm)
Location FRU Type FAN_0
-------------------------------------
0/FT0 NCS1K-FTA 4800
0/FT1 NCS1K-FTA 4800
0/FT2 NCS1K-FTA 4920
0/PM1 NCS1K-2KW-AC 9152
The following example shows sample output from the show environment command with the temperatures keyword.
sysadmin-vm:0_RP0# show environment temperatures location 0/RP0
Tue Feb 27 10:32:38.967 UTC
================================================================================
Location TEMPERATURE Value Crit Major Minor Minor Major Crit
Sensor (deg C) (Lo) (Lo) (Lo) (Hi) (Hi) (Hi)
--------------------------------------------------------------------------------
0/RP0
Thermistor 1 27 -10 0 0 55 55 85
Thermistor 2 28 -10 0 0 55 55 85
Hot Spot Temperature 26 -10 0 0 55 55 85
The following example shows sample output from the show environment command with the power keyword.
sysadmin-vm:0_RP0# show environment power
Thu Nov 12 02:42:40.177 UTC
================================================================================
CHASSIS LEVEL POWER INFO: 0
================================================================================
Total output power capacity (Group 0 + Group 1) : 2000W + 2000W
Total output power required : 975W
// Total power required by NCS 1002 for the current configuration
Total power input : 888W
// Total power currently entering both the NCS 1002 power Modules
Total power output : 818W
// Total power supplied to the NCS 1002 components by both the power modules
Power Group 1:
================================================================================
Power Supply ------Input---- ------Output--- Status
Module Type Volts Amps Volts Amps
================================================================================
0/PM1 2kW-AC 211.0 2.2 12.0 35.9 OK
Total of Power Group 0: 424W/ 2.0A 387W/ 32.0A
// 424W/2.0A is the power/current input to PM0 module from power supply and 387W/32.0A is the power/current output supplied by PM0 module to NCS 1002 components
Total of Power Group 1: 464W/ 2.2A 431W/ 35.9A
// 464W/2.2A is the power/current input to PM1 module from power supply and 431W/35.9A is the power/current output supplied by PM1 module to NCS 1002 components
// 424W(PM0 input) + 464W (PM1 input)= 888W (Total power input)
// 387W (PM0 output) + 431W (PM1 output)= 818W (Total power output)
================================================================================
Location Card Type Power Power Status
Allocated Used
Watts Watts
================================================================================
0/0 NCS1002 70 - RESERVED
0/RP0 NCS1K-CNTLR-K9 35 - ON
0/FT0 NCS1K-FTA 40 - ON
0/FT1 NCS1K-FTA 40 - ON
0/FT2 NCS1K-FTA 40 - ON
The following example shows sample output from the show environment command with the voltages keyword.
sysadmin-vm:0_RP0# show environment voltages location 0/RP0
Thu Nov 12 02:45:49.213 UTC
================================================================================
Location VOLTAGE Value Crit Minor Minor Crit
Sensor (mV) (Lo) (Lo) (Hi) (Hi)
--------------------------------------------------------------------------------
0/RP0
VP1P0_CPU 996 900 950 1050 1100
CPU_CORE_VCC 889 400 450 1350 1400
CPU_CORE_VNN 979 400 450 1350 1400
VP1P1 1067 990 1050 1160 1210
VP1P2 1194 1080 1140 1260 1320
VP1P35_DDR 1344 1220 1280 1420 1490
VP1P35 1338 1220 1280 1420 1490
VP1P5 1495 1350 1430 1580 1650
VP1P8_CPU 1793 1620 1710 1890 1980
VP3P3_STBY 3305 2970 3140 3470 3630
VP3P3 3334 2970 3140 3470 3630
VP5P0 4936 4500 4750 5250 5500
VP12P0 11897 10800 11400 12600 13200
VREF 1216 1190 1200 1240 1250
12V Input Voltage 11178 8000 10000 14000 16000
To display the details of the slice and the Field Programmable Devices (FPDs), use the show hw-module in XR EXEC or administration EXEC mode.
show hw-module { slice [ slicenumber | all ] | fpd}
slice slicenumber |
Displays information for a slice. The slice number is from 0 to 3. |
all |
Displays information for all the slices. |
fpd |
Displays the status of FPDs installed. |
None
XR EXEC
Administration EXEC
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.0.1 |
The output of show hw-module fpd and show hw-module slice were updated. |
Release 6.1.1 |
The output of show hw-module slice was updated. |
Release 6.1.2 |
The output of show hw-module slice was updated. |
Release 6.3.1 |
The output of show hw-module slice was updated. |
If the ISO image has new version of FPD, the Status column in show hw-module fpd command shows NEED UPGD. If the upgrade is required, use the upgrade hw-module location all fpd fpd_device_name command to start the upgrade. When the upgrade starts, the Status column in show hw-module fpd command sequentially shows UPGD PREP, UPGRADING, and the percentage of upgrade completion. After the upgrade is completed, the Status column shows RLOAD REQ if the ISO image requires reload; otherwise the Status column shows CURRENT.
If reload is required:
If the FPGA location is 0/RP0, use the admin hw-module location 0/RP0 reload command. This command reboots only the CPU. Hence, the traffic is not impacted. If the FPGA location is 0/0, use the admin hw-module location all reload command. This command reboots NCS 1002. Hence, the traffic is impacted. After the reload is completed, the new FPGA runs the current version.
The show hw-module slice slicenumber command displays the state of current slice provisioning, client and trunk bit rate, traffic split between coherent DSPs, and version of data path FPGA. If the HW status field displays NEED UPGD, use the upgrade hw-module slice slicenumber re-provision command. The Encryption Supported field indicates whether the slice is provisioned with firmware that supports encryption or not.
Task ID | Operation |
---|---|
system |
read |
You can use the show hw-module slice slicenumber command to check if the upgrade is required after the software is installed.
RP/0/RP0/CPU0:ios# show hw-module slice 0
RP/0/RP0/CPU0:ios#show hw-module slice 0
Thu Sep 22 10:55:35.985 UTC
Slice ID: 0
Status: Provisioned
Client Bitrate: 40
Trunk Bitrate: 200
DP FPGA FW Type: XMG4
DP FPGA FW Version: 01.01
HW Status: CURRENT
Encryption Supported: FALSE
LLDP Drop Enable: TRUE
Client Port - Trunk Port CoherentDSP0/0/0/6
Traffic Split Percentage
FortyGigECtrlr0/0/0/0 100
FortyGigECtrlr0/0/0/1 100
FortyGigECtrlr0/0/0/2 100
FortyGigECtrlr0/0/0/3 100
FortyGigECtrlr0/0/0/4 100
RP/0/RP0/CPU0:ios# show hw-module slice 2
Slice ID: 2
Status: Provisioned
Client Bitrate: 10,100
Trunk Bitrate: 200
DP FPGA FW Type: RMM
DP FPGA FW Version: 04.00
HW Status: CURRENT
Encryption Supported: FALSE
LLDP Drop Enabled: FALSE
Client Port - Trunk Port CoherentDSP0/0/0/19 CoherentDSP0/0/0/20
Traffic Split Percentage
HundredGigECtrlr0/0/0/14 100 0
HundredGigECtrlr0/0/0/15 100 0
HundredGigECtrlr0/0/0/16 0 100
TenGigECtrlr0/0/0/17/1 0 100
TenGigECtrlr0/0/0/17/2 0 100
TenGigECtrlr0/0/0/17/3 0 100
TenGigECtrlr0/0/0/17/4 0 100
TenGigECtrlr0/0/0/18/1 0 100
TenGigECtrlr0/0/0/18/2 0 100
TenGigECtrlr0/0/0/18/3 0 100
TenGigECtrlr0/0/0/18/4 0 100
RP/0/RP0/CPU0:ios# show hw-module slice all
Thu Aug 11 16:16:58.935 IST
Slice ID: 0
Status: Provisioned
Client Bitrate: 100
Trunk Bitrate: 200
DP FPGA FW Type: M100
DP FPGA FW Version: 02.00
HW Status: CURRENT
Encryption Supported: TRUE
Client Port - Trunk Port CoherentDSP0/0/0/6
Traffic Split Percentage
HundredGigECtrlr0/0/0/3 100
HundredGigECtrlr0/0/0/4 100
Slice ID: 1
Status: Provisioned
Client Bitrate: 100
Trunk Bitrate: 200
DP FPGA FW Type: M100
DP FPGA FW Version: 02.00
HW Status: CURRENT
Encryption Supported: TRUE
Client Port - Trunk Port CoherentDSP0/0/0/13
Traffic Split Percentage
HundredGigECtrlr0/0/0/10 100
HundredGigECtrlr0/0/0/11 100
Slice ID: 2
Status: Provisioned
Client Bitrate: 100
Trunk Bitrate: 200
DP FPGA FW Type: M100
DP FPGA FW Version: 02.00
HW Status: CURRENT
Encryption Supported: TRUE
Client Port - Trunk Port CoherentDSP0/0/0/20
Traffic Split Percentage
HundredGigECtrlr0/0/0/17 100
HundredGigECtrlr0/0/0/18 100
Slice ID: 3
Status: Provisioned
Client Bitrate: 100
Trunk Bitrate: 200
DP FPGA FW Type: M100
DP FPGA FW Version: 02.00
HW Status: CURRENT
Encryption Supported: TRUE
Client Port - Trunk Port CoherentDSP0/0/0/27
Traffic Split Percentage
HundredGigECtrlr0/0/0/24 100
HundredGigECtrlr0/0/0/25 100
RP/0/RP0/CPU0:ios# show hw-module fpd
Tue Apr 12 09:04:14.935 UTC
FPD Versions
=================
Location Card type HWver FPD device ATR Status Running Programd
------------------------------------------------------------------------------
0/0 NCS1002 2.4 CDSP_PORT_05 CURRENT 3.56 3.56
0/0 NCS1002 2.4 CDSP_PORT_06 CURRENT 3.56 3.56
0/0 NCS1002 2.4 CDSP_PORT_12 CURRENT 3.56 3.56
0/0 NCS1002 2.3 CDSP_PORT_13 NEED UPGD 3.55 3.55
0/0 NCS1002 2.4 CDSP_PORT_19 CURRENT 3.56 3.56
0/0 NCS1002 2.4 CDSP_PORT_20 CURRENT 3.56 3.56
0/0 NCS1002 2.4 CDSP_PORT_26 CURRENT 3.56 3.56
0/0 NCS1002 2.4 CDSP_PORT_27 CURRENT 3.56 3.56
0/0 NCS1002 CFP2_PORT_05 NOT READY
0/0 NCS1002 2.0 CFP2_PORT_06 CURRENT 4.38 4.38
0/0 NCS1002 CFP2_PORT_12 NOT READY
0/0 NCS1002 CFP2_PORT_13 NOT READY
0/0 NCS1002 CFP2_PORT_19 NOT READY
0/0 NCS1002 2.1 CFP2_PORT_20 CURRENT 5.19 5.19
0/0 NCS1002 CFP2_PORT_26 NOT READY
0/0 NCS1002 CFP2_PORT_27 NOT READY
0/0 NCS1002 0.1 CTRL_BKP_LOW B CURRENT 1.22
0/0 NCS1002 0.1 CTRL_BKP_UP B CURRENT 1.22
0/0 NCS1002 0.1 CTRL_FPGA_LOW CURRENT 1.22 1.22
0/0 NCS1002 0.1 CTRL_FPGA_UP CURRENT 1.22 1.22
0/RP0 NCS1K-CNTLR-K9 0.1 BIOS_Backup BS CURRENT 13.10
0/RP0 NCS1K-CNTLR-K9 0.1 BIOS_Primary S CURRENT 13.10 13.10
0/RP0 NCS1K-CNTLR-K9 0.1 Daisy_Duke_BKP BS CURRENT 0.15
0/RP0 NCS1K-CNTLR-K9 0.1 Daisy_Duke_FPGA S CURRENT 0.15 0.15
sysadmin-vm:0_RP0# show hw-module fpd
Tue Apr 12 09:28:22.879 UTC
FPD Versions
===============
Location Card type HWver FPD device ATR Status Run Programd
-------------------------------------------------------------------------------
0/0 NCS1002 0.1 CTRL_BKP_LOW B CURRENT 1.22
0/0 NCS1002 0.1 CTRL_BKP_UP B CURRENT 1.22
0/0 NCS1002 0.1 CTRL_FPGA_LOW CURRENT 1.22 1.22
0/0 NCS1002 0.1 CTRL_FPGA_UP CURRENT 1.22 1.22
0/RP0 NCS1K-CNTLR-K9 0.1 BIOS_Backup BS CURRENT 13.10
0/RP0 NCS1K-CNTLR-K9 0.1 BIOS_Primary S CURRENT 13.10 13.10
0/RP0 NCS1K-CNTLR-K9 0.1 Daisy_Duke_BKP BS CURRENT 0.15
0/RP0 NCS1K-CNTLR-K9 0.1 Daisy_Duke_FPGA S CURRENT 0.15 0.15
0/PM0 NCS1K-2KW-AC 0.0 PO-PriMCU NEED UPGD 0.00 0.00
0/PM1 NCS1K-2KW-AC 0.0 PO-PriMCU NEED UPGD 0.00 0.00
To retrieve and display the physical inventory information, use the show inventory command in XR EXEC or administration EXEC mode.
XR EXEC Mode
show inventory [ all | oid | raw | location location ]
Administration EXEC Mode
show inventory [ all | chassis | fan | power | raw | location location ]
all |
(Optional) Displays inventory information for all the physical entities. |
fan |
(Optional) Displays inventory information for the fans. |
power |
(Optional) Displays inventory information for the power supply. |
raw |
(Optional) Displays raw information about the chassis for diagnostic purposes. |
chassis |
(Optional) Displays inventory information for the entire chassis. |
location location |
(Optional) Displays inventory information for a specific node, or for all nodes in the chassis. |
oid |
(Optional) Displays inventory information along with oid. |
All hardware inventory information is displayed.
XR EXEC
Administration EXEC
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Release 6.0.1 |
The output was updated to include 40G pluggables. |
Release 6.5.1 |
The output was updated to include QSA vendor details. |
Enter the show inventory command with the raw keyword to display every RFC 2737 entity installed in NCS 1002, including those without a PID, unique device identifier (UDI), or other physical identification. The raw keyword is primarily intended for troubleshooting problems with the show inventory command itself.
Task ID | Operations |
---|---|
system |
read |
The following examples show sample output from the show inventory command in both EXEC and Administration EXEC modes.
The output of show inventory command does not include the details of breakout patch panel.
sysadmin-vm:0_RP0# show inventory
Tue Feb 13 15:27:30.159 UTC
NAME: "0/0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1002 , VID: V01, SN: CHANGE-ME-
NAME: "0/0-PORT-6", DESCR: "Cisco 100GE CFP2 Pluggable Optics"
PID: ONS-CFP2-WDM , VID: N/A, SN: OUK1936005W
NAME: "0/0-PORT-11", DESCR: "Cisco 40G QSFP+ CSR4 Pluggable Optics Module"
PID: QSFP-40G-CSR4 , VID: V02 , SN: AVP1834S18A
NAME: "0/0-PORT-14", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S , VID: ES1 , SN: AVF1933G116
NAME: "0/0-PORT-16", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S , VID: ES1 , SN: AVF1933G16A
NAME: "0/0-PORT-18", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S , VID: ES1 , SN: AVF1934G04U
NAME: "0/0-PORT-21", DESCR: "Cisco QSFP-100G-LR4-S Pluggable Optics Module"
PID: QSFP-100G-LR4-S , VID: V01 , SN: ECL19250052
NAME: "0/RP0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1002--RP , VID: V01, SN: CHANGE-ME-
NAME: "0/FT0", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
NAME: "0/FT1", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
NAME: "0/FT2", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
RP/0/RP0/CPU0:ios# show inventory
Fri May 18 10:46:51.323 UTC
NAME: "0/0", DESCR: "Network Convergence System 1002 20 QSFP28/QSFP+ slots"
PID: NCS1002-K9 , VID: V03, SN: CAT2116B170
NAME: "0/0-Optics0/0/0/1", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: SPQCELRCDFB , VID: 01 , SN: G9I2011804
NAME: "0/0-Optics0/0/0/4", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: TR-FC13L-N00 , VID: 01 , SN: INGAJ0930306
NAME: "0/0-Optics0/0/0/6", DESCR: "Cisco CFP2 DWDM Pluggable Optics"
PID: ONS-CFP2-WDM , VID: V01 , SN: OUK1936006S
NAME: "0/0-Optics0/0/0/7", DESCR: "Cisco 4x10GE QSFP+ LR-S Pluggable Optics Module"
PID: QSFP-4X10G-LR-S , VID: V02 , SN: INL20410069
NAME: "0/0-Optics0/0/0/8-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR , VID: V01 , SN: SPC1907074N
NAME: "0/0-Optics0/0/0/9", DESCR: "Cisco 40GE QSFP+ SR4 Pluggable Optics Module"
PID: QSFP-40G-SR4 , VID: V03 , SN: JFQ20332088
NAME: "0/0-Optics0/0/0/10", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: SPQCELRCDFB , VID: 01 , SN: GAV2008935
NAME: "0/0-Optics0/0/0/11-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR , VID: V01 , SN: SPC190707YP
NAME: "0/0-Optics0/0/0/8-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR , VID: V01 , SN: SPC1907074R
NAME: "0/0-Optics0/0/0/18", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: FTLC1151RDPL , VID: A0 , SN: UVE1C6C
NAME: "0/0-Optics0/0/0/19", DESCR: "Cisco CFP2 DWDM Pluggable Optics"
PID: ONS-CFP2-WDM , VID: V05 , SN: OVE204404PA
NAME: "0/0-Optics0/0/0/21", DESCR: "Cisco 4x10GE QSFP+ LR-S Pluggable Optics Module"
PID: QSFP-4x10G-LR-S , VID: V01 , SN: INL20200012
NAME: "0/0-Optics0/0/0/22-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR , VID: V01 , SN: SPC190707YS
NAME: "0/0-Optics0/0/0/23", DESCR: "Cisco 40GE QSFP+ SR4 Pluggable Optics Module"
PID: QSFP-40G-SR4 , VID: V03 , SN: JFQ2033201H
NAME: "0/0-Optics0/0/0/24", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: FTLC1151RDPL , VID: A0 , SN: UWD2QMM
NAME: "0/0-Optics0/0/0/25-LANE1", DESCR: "Cisco 10G SFP ER Pluggable Optics Module"
PID: SFP-10G-ER , VID: V02 , SN: ONT213100BW
NAME: "0/RP0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1K-CNTLR , VID: V04, SN: CAT2052B0FZ
NAME: "Rack 0", DESCR: "Network Convergence System 1002 20 QSFP28/QSFP+ slots"
PID: NCS1002-K9 , VID: V03, SN: CAT2116B170
NAME: "0/FT0", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
NAME: "0/FT1", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
NAME: "0/FT2", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA , VID: V01, SN: N/A
NAME: "0/PM0", DESCR: "Network Convergence System 1000 2KW AC PSU"
PID: NCS1K-2KW-AC , VID: V01, SN: POG2041J0BW
NAME: "0/PM1", DESCR: "Network Convergence System 1000 2KW AC PSU"
PID: NCS1K-2KW-AC , VID: V01, SN: POG2041J01C
To display the contents of current IPv4 access lists, use the show access-lists ipv4 command in EXEC mode.
show access-lists ipv4 [ interface MgmtEth R/S/I/P | maximum [ detail] | summary [ access-list-name ] | usage pfilter location { location node-id | all } | access-list-name [ sequence-number | usage pfilter location { location node-id | all } ] ]
R/S/I/P | Rack/Slot/Instance/Port/ number of the interface. |
access-list-name |
(Optional) Name of a particular IPv4 access list. The name cannot contain a space or quotation mark; it may contain numbers. |
location number |
Location of a particular IPv4 access list. |
locationnode-id |
(Optional) Location of a particular IPv4 access list. The node-id argument is entered in the rack/slot/module notation. |
usage |
(Optional) Displays the usage of the access list on a given line card. |
pfilter |
(Optional) Displays the packet filtering usage for the specified line card. |
summary |
Displays a summary of all current IPv4 access lists. |
sequence-number |
(Optional) Sequence number of a particular IPv4 access list. |
maximum |
Displays the current maximum number of configurable IPv4 accesscontrol lists (ACLs) and access control entries (ACEs). |
detail |
(Optional) Displays complete out-of-resource (OOR) details. |
all |
(Optional) Displays the location of all the line cards. |
Displays all IPv4 access lists.
EXEC
Release | Modification |
---|---|
Release 6.3.2 |
This command is introduced. |
Use the show access-lists ipv4 command to display the contents of all IPv4 access lists. To display the contents of a specific IPv4 access list, use the name argument. Use the sequence-number argument to specify the sequence number of the access list.
Use the show access-lists ipv4 summary command to display a summary of all current IPv4 access lists. To display a summary of a specific IPv4 access list, use the name argument.
Use the show access-lists ipv4 maximum detail command to display the OOR details for IPv4 access lists. OOR limits the number of ACLs and ACEs that can be configured in the system. When the limit is reached, configuration of new ACLs or ACEs is rejected.
In the following example, the contents of all IPv4 access lists are displayed:
RP/0/RP0/CPU0:ios# show access-lists ipv4
RP/0/RP0/CPU0:ios#sh access-lists ipv4
Wed Jan 17 09:52:12.448 IST
ipv4 access-list IPV4_ICMP_DENY
10 deny icmp any any (8 matches)
20 permit ipv4 any any (106 matches)
ipv4 access-list IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet (3 matches)
20 permit ipv4 any any (6 matches)
To display the contents of current IPv6 access lists, use the show access-lists ipv6 command in EXEC mode.
show access-lists ipv6 [ interface MgmtEth R/S/I/P | maximum [ detail] | summary [ access-list-name ] | usage pfilter location { location node-id | all } | access-list-name [ sequence-number | usage pfilter location { location node-id | all } ] ]
R/S/I/P | Rack/Slot/Instance/Port/ number of the interface. |
access-list-name |
(Optional) Name of a particular IPv4 access list. The name cannot contain a space or quotation mark; it may contain numbers. |
location number |
Location of a particular IPv4 access list. |
location node-id |
(Optional) Location of a particular IPv4 access list. The node-id argument is entered in the rack/slot/module notation. |
usage |
(Optional) Displays the usage of the access list on a given line card. |
pfilter |
(Optional) Displays the packet filtering usage for the specified line card. |
summary |
Displays a summary of all current IPv4 access lists. |
sequence-number |
(Optional) Sequence number of a particular IPv4 access list. |
maximum |
Displays the current maximum number of configurable IPv4 accesscontrol lists (ACLs) and access control entries (ACEs). |
detail |
(Optional) Displays complete out-of-resource (OOR) details. |
all |
(Optional) Displays the location of all the line cards. |
Displays all IPv6 access lists.
EXEC
Release | Modification |
---|---|
Release 6.3.2 |
This command is introduced. |
The show access-lists ipv6 command is similar to the show access-lists ipv4 command, except that it is IPv6 specific.
Use the show access-lists ipv6 command to display the contents of all IPv6 access lists. To display the contents of a specific IPv6 access list, use the name argument. Use the sequence-number argument to specify the sequence number of the access list.
Use the show access-lists ipv6 summary command to display a summary of all current IPv6 access lists. To display a summary of a specific IPv6 access list, use the name argument.
Use the show access-lists ipv6 maximum detail command to display the OOR details for IPv6 access lists. OOR limits the number of ACLs and ACEs that can be configured in the system. When the limit is reached, configuration of new ACLs or ACEs is rejected.
In the following example, the contents of all IPv6 access lists are displayed:
RP/0/RP0/CPU0:ios#show access-lists ipv6
Wed Jan 17 09:52:14.591 IST
ipv6 access-list IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet (3 matches)
20 permit ipv6 any any (5 matches)
ipv6 access-list IPV6_SSH_DENY
10 deny tcp any any eq ssh (9 matches)
20 permit ipv6 any any (100 matches)
RP/0/RP0/CPU0:PROD_20#
To display the status of various LEDs present in NCS 1002, use the show led command in administration EXEC mode.
show led [ location location ]
location location |
(Optional) Displays LED information for a specific location. |
The status of all the LEDs present in NCS 1002 is displayed.
Administration EXEC
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Enter the show LED command in administration EXEC mode to display the status of all the LEDs present in NCS 1002.
The following example shows sample output from the show led command.
sysadmin-vm:0_RP0# show led
Wed Dec 16 22:39:47.779 UTC
=============================================================
Location LED Name Mode Color
=============================================================
0/0
0/0-Power Status LED WORKING RED
0/0-Fan Status LED WORKING GREEN
0/RP0
0/RP0-Status LED WORKING AMBER
0/RP0-Attention LED WORKING OFF
0/PM0
0/PM0-Status LED WORKING AMBER
0/PM1
0/PM1-Status LED WORKING GREEN
To display terminal-device parameters of the system, use the show terminal-device command in administration EXEC mode.
show terminal-device {internal {adj-list | config-status} | layout | logical-channel {all | number channel-number} | ltrace {all | error | file | hexdump | info | last | location | reverse | stats | tailf | unique | usec | verbose | wide | wrapping} | operational-modes | {all | name word}}
internal |
Displays the internal structure information. |
adj-list |
Displays the adjacency list. |
config-status |
Displays the configuration status. |
layout |
Displays the layout of channels and connections. |
logical-channel |
Displays the logical channel information. |
all |
Displays all logical channels information. |
number channel-number |
Specifies the logical channel number. The range of logical channel is 1 to 100000. |
ltrace {all | error | file | hexdump | info | last | location | reverse | stats | tailf | unique | usec | verbose | wide | wrapping} |
Displays the ltrace data.
|
operational-modes | Displays the supported operational modes. |
optical-channel | Displays the optical channel information. |
all |
Displays information of all optical channels. |
name word | Displays the specified optical channel name. |
None
Administration EXEC
Release | Modification |
---|---|
Release 6.2.1 |
This command was introduced. |
The show terminal-device command displays information about the terminal-device parameters of the system.
To view the configuration layout of channels, use the following command:
Router#show terminal-device layout
Tue Mar 14 15:39:08.821 IST
Slice Id: 0
Status: Config Accepted
Client Bitrate: 100G
Line Bitrate: 200G
Client [Lane] Logical Channel Logical Channel Optical Channel Line
(Ethernet) (Coherent)
Optics0/0/0/0 [0] 2001 2003 0_0-OpticalChannel0_0_0_5 Optics0/0/0/5
Optics0/0/0/1 [0] 2005 2003 0_0-OpticalChannel0_0_0_5 Optics0/0/0/5
Optics0/0/0/3 [0] 2006 2004 0_0-OpticalChannel0_0_0_6 Optics0/0/0/6
Optics0/0/0/4 [0] 2002 2004 0_0-OpticalChannel0_0_0_6 Optics0/0/0/6
Slice Id: 3
Status: Config Accepted
Client Bitrate: 100G
Line Bitrate: 200G
Client [Lane] Logical Channel Logical Channel Optical Channel Line
(Ethernet) (Coherent)
Optics0/0/0/21 [0] 4001 4003 0_0-OpticalChannel0_0_0_26 Optics0/0/0/26
Optics0/0/0/22 [0] 4005 4003 0_0-OpticalChannel0_0_0_26 Optics0/0/0/26
Optics0/0/0/24 [0] 4006 4004 0_0-OpticalChannel0_0_0_27 Optics0/0/0/27
Optics0/0/0/25 [0] 4002 4004 0_0-OpticalChannel0_0_0_27 Optics0/0/0/27
To view the display graph adjacency list, use the following command:
Router#show terminal-device internal adj-list
Tue Mar 14 15:40:21.024 IST
OC-Optical Adjacency List
Number of Vertices = 44
Number of Logical Channel(s)[Ethernet] = 8
Number of Logical Channel(s)[OTN] = 4
Number of Optical Channel(s) = 4
No VID VName Slice-Id Channels
0 NA Optics0/0/0/0 0 2001
1 NA Optics0/0/0/1 0 2005
2 NA Optics0/0/0/2 0 -----
3 NA Optics0/0/0/3 0 2006
4 NA Optics0/0/0/4 0 2002
5 NA Optics0/0/0/5 0 0_0-OpticalChannel0_0_0_5
6 NA Optics0/0/0/6 0 0_0-OpticalChannel0_0_0_6
7 NA Optics0/0/0/7 1 -----
8 NA Optics0/0/0/8 1 -----
9 NA Optics0/0/0/9 1 -----
10 NA Optics0/0/0/10 1 -----
11 NA Optics0/0/0/11 1 -----
12 NA Optics0/0/0/12 1 -----
13 NA Optics0/0/0/13 1 -----
14 NA Optics0/0/0/14 2 -----
15 NA Optics0/0/0/15 2 -----
16 NA Optics0/0/0/16 2 -----
17 NA Optics0/0/0/17 2 -----
18 NA Optics0/0/0/18 2 -----
19 NA Optics0/0/0/19 2 -----
20 NA Optics0/0/0/20 2 -----
21 NA Optics0/0/0/21 3 4001
22 NA Optics0/0/0/22 3 4005
23 NA Optics0/0/0/23 3 -----
24 NA Optics0/0/0/24 3 4006
25 NA Optics0/0/0/25 3 4002
26 NA Optics0/0/0/26 3 0_0-OpticalChannel0_0_0_26
27 NA Optics0/0/0/27 3 0_0-OpticalChannel0_0_0_27
28 2001 NA 0 Optics0/0/0/0, 2003
29 2003 NA 0 2001, 0_0-OpticalChannel0_0_0_5, 2005
30 2002 NA 0 Optics0/0/0/4, 2004
31 2004 NA 0 2002, 0_0-OpticalChannel0_0_0_6, 2006
32 NA 0_0-OpticalChannel0_0_0_5 0 2003, Optics0/0/0/5
33 NA 0_0-OpticalChannel0_0_0_6 0 2004, Optics0/0/0/6
34 2005 NA 0 Optics0/0/0/1, 2003
35 2006 NA 0 Optics0/0/0/3, 2004
36 4001 NA 3 Optics0/0/0/21, 4003
37 4003 NA 3 4001, 0_0-OpticalChannel0_0_0_26, 4005
38 4002 NA 3 Optics0/0/0/25, 4004
39 4004 NA 3 4002, 0_0-OpticalChannel0_0_0_27, 4006
40 NA 0_0-OpticalChannel0_0_0_26 3 4003, Optics0/0/0/26
41 NA 0_0-OpticalChannel0_0_0_27 3 4004, Optics0/0/0/27
42 4005 NA 3 Optics0/0/0/22, 4003
43 4006 NA 3 Optics0/0/0/24, 4004
To view the logical channel information, use the following command:
Router#show terminal-device logical-channel number 2001
Tue Mar 14 16:13:23.397 IST
Logical Channel Index: 2001
Name: HundredGigECtrlr0/0/0/0
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/0
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 2003
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
To view all the logical channels information, use the following command:
Router#show terminal-device logical-channel all
Tue Mar 14 15:42:29.468 IST
Logical Channel Index: 2001
Name: HundredGigECtrlr0/0/0/0
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/0
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 2003
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 2002
Name: HundredGigECtrlr0/0/0/4
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/4
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 2004
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 2003
Name: CoherentDSP0/0/0/5
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 2
Trib-Rate: Unknown tributary signal rate
Trib-Protocol: Unknown protocol
Protocol-Type: OTN protocol framing
Ingress Client Port: NA
Ingress Physical Channel: 0
TTI Transmit: NA
TTI Expected: NA
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 0
Optical Channel: 0_0-OpticalChannel0_0_0_5
Allocation: 200G
Assignment Type: Optical
Logical Channel Index: 2004
Name: CoherentDSP0/0/0/6
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 2
Trib-Rate: Unknown tributary signal rate
Trib-Protocol: Unknown protocol
Protocol-Type: OTN protocol framing
Ingress Client Port: NA
Ingress Physical Channel: 0
TTI Transmit: NA
TTI Expected: NA
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 0
Optical Channel: 0_0-OpticalChannel0_0_0_6
Allocation: 200G
Assignment Type: Optical
Logical Channel Index: 2005
Name: HundredGigECtrlr0/0/0/1
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/1
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 2003
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 2006
Name: HundredGigECtrlr0/0/0/3
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/3
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 2004
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 4001
Name: HundredGigECtrlr0/0/0/21
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/21
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 4003
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 4002
Name: HundredGigECtrlr0/0/0/25
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/25
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 4004
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 4003
Name: CoherentDSP0/0/0/26
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 2
Trib-Rate: Unknown tributary signal rate
Trib-Protocol: Unknown protocol
Protocol-Type: OTN protocol framing
Ingress Client Port: NA
Ingress Physical Channel: 0
TTI Transmit: NA
TTI Expected: NA
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 0
Optical Channel: 0_0-OpticalChannel0_0_0_26
Allocation: 200G
Assignment Type: Optical
Logical Channel Index: 4004
Name: CoherentDSP0/0/0/27
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 2
Trib-Rate: Unknown tributary signal rate
Trib-Protocol: Unknown protocol
Protocol-Type: OTN protocol framing
Ingress Client Port: NA
Ingress Physical Channel: 0
TTI Transmit: NA
TTI Expected: NA
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 0
Optical Channel: 0_0-OpticalChannel0_0_0_27
Allocation: 200G
Assignment Type: Optical
Logical Channel Index: 4005
Name: HundredGigECtrlr0/0/0/22
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/22
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 4003
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
Logical Channel Index: 4006
Name: HundredGigECtrlr0/0/0/24
Admin-State: Enable
Loopback-Mode: None
Type of Logical Channel: Logical Level 1
Trib-Rate: 100G tributary signal rate
Trib-Protocol: 100G MLG protocol
Protocol-Type: Ethernet protocol framing
Ingress Client Port: Optics0/0/0/24
Ingress Physical Channel: 0
Logical Assignment Index: 1
Logical Assignment Name: NA
Logical Channel: 4004
Optical Channel: NA
Allocation: 100G
Assignment Type: Logical
To view specific optical channel details, use the following command:
Router#show terminal-device optical-channel name 0_0-OpticalChannel0_0_0_5
Tue Mar 14 15:44:41.576 IST
Optical Channel Name: 0_0-OpticalChannel0_0_0_5
Index: 0
Frequency: 0
Power: 0
Operational Mode: 7
Line Port: Optics0/0/0/5
To view all the optical channels details, use the following command:
Router#show terminal-device optical-channel all
Tue Mar 14 15:44:41.254 IST
Optical Channel Name: 0_0-OpticalChannel0_0_0_26
Index: 0
Frequency: 0
Power: 0
Operational Mode: 7
Line Port: Optics0/0/0/26
Optical Channel Name: 0_0-OpticalChannel0_0_0_27
Index: 0
Frequency: 0
Power: 0
Operational Mode: 7
Line Port: Optics0/0/0/27
Optical Channel Name: 0_0-OpticalChannel0_0_0_5
Index: 0
Frequency: 0
Power: 0
Operational Mode: 7
Line Port: Optics0/0/0/5
Optical Channel Name: 0_0-OpticalChannel0_0_0_6
Index: 0
Frequency: 0
Power: 0
Operational Mode: 7
Line Port: Optics0/0/0/6
To view the supported operational modes, use the following command:
Router#show terminal-device operational-modes
Tue Mar 14 15:50:55.289 IST
Operational Mode: 1
Description: FEC Mode 7
Vendor: Cisco Systems, Inc.
Operational Mode: 2
Description: FEC Mode 20
Vendor: Cisco Systems, Inc.
To view the present, past, and partial configuration status and its corresponding time-stamp values, use the following command:
Router#show terminal-device internal config-status
Tue Mar 14 15:51:34.189 IST
Partial Config: Disabled
Slice: 0
Status: Config Accepted
Present Config: 100Gx200G
Present Config Time: Mon Mar 13 23:41:59 2017
Past Config: None
Past Config Time: None
Last Config Error: None
Error Time: None
Slice: 1
Status: Un-Configured
Present Config: None
Present Config Time: None
Past Config: None
Past Config Time: None
Last Config Error: None
Error Time: None
Slice: 2
Status: Un-Configured
Present Config: None
Present Config Time: None
Past Config: None
Past Config Time: None
Last Config Error: None
Error Time: None
Slice: 3
Status: Config Accepted
Present Config: 100Gx200G
Present Config Time: Mon Mar 13 23:41:59 2017
Past Config: None
Past Config Time: None
Last Config Error: None
Error Time: None
To display information and status for each node in the system, use the show platform command in XR EXEC or administration EXEC mode.
Administration EXEC Mode
show platform [{ detail | location | slices} location]
XR EXEC Mode
show platform [ vm | 0/RP0 ]
detail |
(Optional) Displays the details of node type and state. |
location |
(Optional) Displays the location of node. |
slices |
(Optional) Displays the summary information of each slice in the node. |
location |
(Optional) Node location such as 0/FT0, 0/RP0. |
vm |
(Optional) Displays the virtual machine information of node. |
The status and information are displayed for all the nodes in the system.
XR EXEC
Administration EXEC
Release | Modification |
---|---|
Release 6.0.0 |
This command was introduced. |
Enter the show platform command in administration EXEC mode to display the output for the entire system.
Task ID | Operations |
---|---|
system |
read |
The following example shows sample output from the show platform command.
sysadmin-vm:0_RP0# show platform
Wed Dec 16 22:51:27.789 UTC
Location Card Type HW State SW State Config State
----------------------------------------------------------------------------
0/0 NCS1002 OPERATIONAL N/A NSHUT
0/RP0 NCS1K-CNTLR-K9 OPERATIONAL OPERATIONAL NSHUT
0/FT0 NCS1K-FTA OPERATIONAL N/A NSHUT
0/FT1 NCS1K-FTA OPERATIONAL N/A NSHUT
0/FT2 NCS1K-FTA OPERATIONAL N/A NSHUT
The following example shows sample output from the show platform detail command.
sysadmin-vm:0_RP0# show platform detail
Wed Dec 16 22:52:25.551 UTC
Platform Information for 0/0
PID : NCS1002
Description : "Network Convergence System 1000 Controller"
VID/SN : V01
HW Oper State : OPERATIONAL
SW Oper State : N/A
Configuration : "NSHUT RST"
HW Version : 0.1
Last Event : HW_EVENT_OK
Last Event Reason : "HW Event OK"
Platform Information for 0/RP0
PID : NCS1K-CNTLR-K9
Description : "Network Convergence System 1000 Controller"
VID/SN : V01
HW Oper State : OPERATIONAL
SW Oper State : OPERATIONAL
Configuration : "NSHUT RST"
HW Version : 0.1
Last Event : HW_EVENT_OK
Last Event Reason : "HW Event OK"
Platform Information for 0/FT0
PID : NCS1K-FTA
Description : "Network Convergence System 1000 Fan"
VID/SN : V01
HW Oper State : OPERATIONAL
SW Oper State : N/A
Configuration : "NSHUT RST"
HW Version : 0.1
Last Event : HW_EVENT_OK
Last Event Reason : "HW Operational"
Platform Information for 0/FT1
PID : NCS1K-FTA
Description : "Network Convergence System 1000 Fan"
VID/SN : V01
HW Oper State : OPERATIONAL
SW Oper State : N/A
Configuration : "NSHUT RST"
HW Version : 0.1
Last Event : HW_EVENT_OK
Last Event Reason : "HW Operational"
Platform Information for 0/FT2
PID : NCS1K-FTA
Description : "Network Convergence System 1000 Fan"
VID/SN : V01
HW Oper State : OPERATIONAL
SW Oper State : N/A
Configuration : "NSHUT RST"
HW Version : 0.1
Last Event : HW_EVENT_OK
Last Event Reason : "HW Operational"
RP/0/RP0/CPU0:ios# show platform
Wed Dec 16 22:56:35.515 UTC
Node name Node type Node state Admin state Config state
---------------------------------------------------------------------------------------
0/RP0 NCS1K-CNTLR OPERATIONAL UP NSHUT
To enable the transition from CLI configuration to terminal-device configuration, use the terminal-device transition cli-to-yang command in XR EXEC mode or Administration EXEC mode. The transition from CLI to terminal-device must be done via merge-config operation in gRPC.
terminal-device transition cli-to-yang {enable | disable}
enable |
Enables transition from CLI configuration to terminal-device configuration. |
disable |
Disables transition from CLI configuration to terminal-device configuration. |
None
XR EXEC
Administration EXEC
Release | Modification |
---|---|
Release 6.2.1 |
This command was introduced. |
The following example shows how to enable the transition from CLI configuration to terminal-device configuration.
RP/0/RP0/CPU0:ios#terminal-device transition cli-to-yang enable
To disable the laser on the trunk port of the optics controller, use the transmit-shutdown command in the optics controller configuration mode.
controller optics R/S/I/P transmit-shutdown
transmit-shutdown |
Disables the laser on the trunk port of the optics controller |
None
Optics controller configuration
Release | Modification |
---|---|
R6.3.1 |
This command was introduced. |
This command is similar to the shutdown command. Both the commands disable the Tx laser. However, the shutdown command changes the admin state of the controller as well. Hence, the shutdown command affects the tunnel state in case of GMPLS-UNI whereas the transmit-shutdown command does not affect the tunnel state.
The following example shows how to use the transmit-shutdown command.
RP/0/RP0/CPU0:ios#configure
RP/0/RP0/CPU0:ios(config)#controller optics 0/0/0/13
RP/0/RP0/CPU0:ios(config-optics)#transmit-shutdown
To configure the replay protection window size, use the window-size command in MACsec policy configuration mode.
The replay protection window size indicates the number of out-of-sequence frames that can be accepted at the controller configured with MACsec, without being dropped.
window-size value
value |
Number of out-of-sequence frames that can be accepted at the controller without being dropped. The range is 0 to 1024. |
The default value is 64.
MACsec policy configuration
Release | Modification |
---|---|
R6.1.1 |
This command was introduced. |
The following example shows how to use the window-size command.
configure
macsec-policy mac_policy
window-size 64