Commands

Reference

This guide describes the commands supported in Cisco NCS 1004. For information on Cisco IOS XR commands, see here.

aaa authentication dot1x

To configure IEEE 802.1X authentication method using RADIUS as the protocol, use the aaa authentication dot1x command in global configuration mode.

aaa authentication dot1x default group radius

Syntax Description

default

Uses the listed authentication methods that follow this keyword as the default list of methods for authentication. Only group radius is supported in NCS 1002.

group radius

Specifies a method list that uses the list of all configured RADIUS servers for authentication.

Command Default

No authentication is performed.

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the 802.1X authentication method.


configure
aaa authentication dot1x default group radius
exit
commit

aaa authentication login

To configure authentication, authorization, and accounting (AAA) authentication at login, use the aaa authentication login command in global configuration mode.

aaa authentication login { default | list-name } method-list

Syntax Description

login Sets authentication for login.
default

Uses the listed authentication methods that follow this keyword as the default list of methods for authentication.

list-name

Character string used to name the authentication method list.

method-list

Method used to enable AAA system accounting. Method list types are entered in the preferred sequence. The value is one of the following options:

  • group tacacs+ — Specifies a method list that uses the list of all configured TACACS+ servers for authentication.

  • group radius — Specifies a method list that uses the list of all configured RADIUS servers for authentication.

  • group named-group — Specifies a named subset of TACACS+ or RADIUS servers for authentication.

  • local — Specifies a local username or password database for authentication.

  • line — Specifies a line password or user group for authentication.

Command Default

No authentication is performed.

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following example shows how to specify the default method list for authentication, and also enable authentication.


configure
aaa authentication login default group tacacs+
exit
commit

authentication timer reauthenticate

To specify the period of time between which reauthentication of authorized ports happens, use the authentication timer reauthenticate command in global configuration mode.

authentication timer reauthenticate { seconds| server}

Syntax Description

seconds

The number of seconds between reauthentication attempts. The range is from 60 to 5184000 (in seconds).

server

Specifies that the interval between reauthentication attempts is defined by the Session-Timeout value (RADIUS Attribute 27) on the AAA server.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the 802.1X profile.


configure
dot1x profile reauth
pae both
authentication timer reauthenticate 3600
supplicant eap profile ncs1k
exit
commit

aaa authorization

To create a method list for authorization, use the aaa authorization command in global configuration mode.

aaa authorization {exec | nacm} { default | list-name } {none | local | group tacacs+ | group radius | group group-name }

Syntax Description

exec Configures authorization for an interactive ( EXEC) session.
nacm

Enables the NACM (NETCONF Access Control Model) functionality.
default

Uses the listed authorization methods that follow this keyword as the default list of methods for authorization.

list-name

Character string used to name the list of authorization methods.

none

Uses no authorization. If you specify none, no subsequent authorization method is attempted.

local

Uses local authorization. This method of authorization is not available for command authorization.

group tacacs+

Uses the list of all configured TACACS+ servers for authorization.

group radius

Uses the list of all configured RADIUS servers for authorization. This method of authorization is not available for command authorization.

group group-name

Specifies a named subset of TACACS+ or RADIUS servers for authorization.

Command Default

Authorization is disabled for all actions (equivalent to the method none keyword).

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following example shows how to define the network authorization method list named listname1, which specifies that TACACS+ authorization is used. 


configure
aaa authorization exec listname1 group tacacs+
exit
commit

cipher-suite

To configure the cipher suite for encrypting traffic with MACsec, use the cipher-suite command in MACsec policy configuration mode.

The first portion indicates the encryption method, the second portion indicates the hash or integrity algorithm, and the third portion indicates the length of the cipher.

cipher-suite encryption_suite

Syntax Description

GCM-AES-XPN-256

GCM encryption method; AES encryption algorithm that uses Extended Packet Numbering (XPN) of 64 bits; 256 bit encryption.

Command Default

The default cipher suite chosen for encryption is GCM-AES-XPN-256.

Command Modes

MACsec policy configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Examples

The following example shows how to use the cipher-suite command. 


configure
macsec-policy mac_policy
cipher-suite GCM-AES-XPN-256

clear counters controller

To clear the alarm counters of coherent DSP or optics controller, use the clear counters controller command in XR EXEC mode.

clear counters controller {coherentDSP|optics} R/S/I/P

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the coherent DSP or optics controller.

Command Default

None

Command Modes

XR EXEC

Command History

Release Modification

Release 6.5.1

This command was introduced.

Examples

The following example shows how to clear the alarm counters of coherent DSP or optics controller

RP/0/RP0/CPU0:ios#clear counters controller coherentDSP 0/0/0/6
Fri Jun 29 17:52:25.035 IST
All counters are cleared
RP/0/RP0/CPU0:ios#
RP/0/RP0/CPU0:ios#clear counters controller optics 0/0/0/5
Sat Jun 23 13:39:21.616 IST
All counters are cleared

The following example shows the output of show controllers coherentDSP command before the alarm counters of LOS,LOF,LOM ,OOF,OOM and AIS are reset 

RP/0/RP0/CPU0:ios#show controllers coherentDSP 0/0/0/5
Sat Jun 23 13:36:15.493 IST

Port                                            : CoherentDSP 0/0/0/5
Controller State                                : Up
Inherited Secondary State                       : Normal
Configured Secondary State                      : Normal
Derived State                                   : In Service
Loopback mode                                   : None
BER Thresholds                                  : SF = 1.0E-5  SD = 1.0E-7
Performance Monitoring                          : Enable

Alarm Information:
LOS = 65        LOF = 60        LOM = 0
OOF = 60        OOM = 60        AIS = 0
IAE = 0 BIAE = 0        SF_BER = 0
SD_BER = 0      BDI = 1 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms                                 : None

Bit Error Rate Information
PREFEC  BER                                     : 1.9E-04
POSTFEC BER                                     : 0.0E+00

TTI :
        Remote hostname                         : rosco-fbcvt-002
        Remote interface                        : CoherentDSP 0/0/0/5
        Remote IP addr                          : 0.0.0.0

FEC mode                                        : Soft-Decision 7

AINS Soak                                       : None
AINS Timer                                      : 0h, 0m
AINS remaining time                             : 0 seconds

The following example shows the output of show controllers coherentDSP or optics command after the alarm counters of LOS,LOF,LOM,OOF,OOM,AIS,IAE,BIAE,SF_BER,SD_BER,BDI and TIM are reset. 

RP/0/RP0/CPU0:ios#show controllers coherentDSP 0/0/0/6
Fri Jun 29 17:52:36.871 IST

Port                                            : CoherentDSP 0/0/0/6
Controller State                                : Up
Inherited Secondary State                       : Normal
Configured Secondary State                      : Normal
Derived State                                   : In Service
Loopback mode                                   : None
BER Thresholds                                  : SF = 1.0E-5  SD = 1.0E-7
Performance Monitoring                          : Enable

Alarm Information:
LOS = 0 LOF = 0 LOM = 0 
OOF = 0 OOM = 0 AIS = 0
IAE = 0 BIAE = 0        SF_BER = 0
SD_BER = 0      BDI = 0 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms                                 : BDI

Bit Error Rate Information
PREFEC  BER                                     : 4.2E-04
POSTFEC BER                                     : 0.0E+00

TTI :
        Remote hostname                         : ios
        Remote interface                        : CoherentDSP 0/0/0/13
        Remote IP addr                          : 0.0.0.0

FEC mode                                        : Soft-Decision 20

AINS Soak                                       : None
AINS Timer                                      : 0h, 0m
AINS remaining time                             : 0 seconds

RP/0/RP0/CPU0:ios#show controllers optics 0/0/0/5
Sat Jun 23 13:38:39.262 IST

Controller State: Up

Transport Admin State: In Service

Laser State: On

LED State: Green

Optics Status

         Optics Type:  CFP2_ACO DWDM
         DWDM carrier Info: C BAND, MSA ITU Channel=11, Frequency=195.60THz,
         Wavelength=1532.681nm

         Alarm Status:
         -------------
         Detected Alarms: None


         LOS/LOL/Fault Status:

         Alarm Statistics:

         -------------
         HIGH-RX-PWR = 0            LOW-RX-PWR = 60
         HIGH-TX-PWR = 0            LOW-TX-PWR = 0
         HIGH-LBC = 0               HIGH-DGD = 0
         OOR-CD = 0                 OSNR = 0
         WVL-OOL = 0                MEA  = 0
         IMPROPER-REM = 0
         TX-POWER-PROV-MISMATCH = 0
         Laser Bias Current = 3.0 %
         Actual TX Power = 0.09 dBm
         RX Power = -7.21 dBm
         RX Signal Power = -8.67 dBm
         Frequency Offset = 174 MHz

         Performance Monitoring: Enable

         THRESHOLD VALUES
         ----------------

         Parameter                 High Alarm  Low Alarm  High Warning  Low Warning
         ------------------------  ----------  ---------  ------------  -----------
         Rx Power Threshold(dBm)          4.9      -14.5           0.0          0.0
         Tx Power Threshold(dBm)          3.5      -10.1           0.0          0.0
         LBC Threshold(mA)                N/A        N/A          0.00         0.00

         LBC High Threshold = 98 %
         Configured Tx Power = -1.50 dBm
         Configured CD High Threshold = 70000 ps/nm
         Configured CD lower Threshold = -70000 ps/nm
         Configured OSNR lower Threshold = 0.00 dB
         Configured DGD Higher Threshold = 180.00 ps
         Chromatic Dispersion 17 ps/nm
         Configured CD-MIN -70000 ps/nm  CD-MAX 70000 ps/nm
         Second Order Polarization Mode Dispersion = 164.00 ps^2
         Optical Signal to Noise Ratio = 29.50 dB
         Polarization Dependent Loss = 2.70 dB
         Polarization Change Rate = 2.00 rad/s
         Differential Group Delay = 9.40 ps

Transceiver Vendor Details

         Form Factor            : CFP2-ACO
         Name                   : Oclaro
         Part Number            : 10-3128-05
         Rev Number             : A0
         Serial Number          : OVE210204HS
         PID                    : N/A
         VID                    : N/A
         Date Code(yy/mm/dd)    : 20/17/01
         Fiber Connector Type: LC
         Otn Application Code: Undefined
         Sonet Application Code: Undefined
         Ethernet Compliance Code: Eth-Undefined

Transceiver Temperature : 34 Celsius



AINS Soak                : None
AINS Timer               : 0h, 0m
AINS remaining time      : 0 seconds

conf-offset

To configure the confidentiality offset for MACsec encryption, use the conf-offset command in MACsec policy configuration mode.

conf-offset offset_value

Syntax Description

CONF-OFFSET-0

Does not offset the encryption.

Command Default

The default value is CONF-OFFSET-0.

Command Modes

MACsec policy configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Examples

The following example shows how to use the conf-offset command. 


configure
macsec-policy mac_policy
conf-offset CONF-OFFSET-0

controller coherentDSP

To configure the coherent DSP controller, use the controller coherentDSP command in the Coherent DSP controller configuration mode.

controller coherentDSP R/S/I/P [ pm { 30-sec |15-min | 24-hour} { fec | otn} { report | threshold} value] [ perf-mon { enable | disable } ] | [ loopback { internal | line} ] | [ sec-admin-state maintenance] | [ shutdown ] | [ tti { sent | expected} ascii string ]

To enable the PRBS on the trunk port, you can use the following configuration command at the CoherentDSP controller:

controller coherentDSP R/S/I/Pprbs mode { source | sink | source-sink} pattern { pn31 | pn23 | pn15 | pn11}

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the coherent DSP controller.

pm { 30-sec | 15-min | 24-hour }

Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals.

fec

Configures FEC PM data in 30 second, 15 minute or 24 hour intervals.

otn

Configures OTN PM data in 30 second, 15 minute or 24 hour intervals.

report

Configures TCA reporting status.

threshold

Configures threshold on coherent DSP parameters.

perf-mon { enable | disable }

Enables or disables performance monitoring.

loopback [ internal | line ]

Configures the internal or line loopback mode on the controller.

sec-admin-state maintenance

Configures the administrative state of the controller indicating that the controller is under maintenance.

shutdown

Disables the configuration of the controller.

tti sent ascii string

Configures the Trail Trace Identifier (TTI) ASCII string to be sent. SAPI, DAPI, and operator inputs are not supported.

tti expected ascii string

Configures the expected TTI ASCII string. The TIM alarm is raised if the received TTI string does not match the expected TTI string. SAPI, DAPI, and operator inputs are not supported.

prbs mode

Pseudo Random Binary Sequence (PRBS) mode.

PRBS31

Sequence length is from 231 to 1 bits.

PRBS23

Sequence length is from 223 to 1 bits.

PRBS15

Sequence length is from 215 to 1 bits.

PRBS11

Sequence length is from 211 to 1 bits.

source | sink | source-sink

Command Default

None

Command Modes

Coherent DSP controller configuration

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.3.1

The command was modified to enable PRBS mode.

Examples

The following example shows how to configure the performance monitoring parameters of the Coherent DSP controller in 15 minute intervals. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller coherentDSP 0/0/0/12 pm 15-min otn threshold es-ne

The following example shows how to configure the TTI string. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller coherentDSP 0/0/0/12 tti sent ascii joy

controller GigECtrlr

To configure the Ethernet controller, use the controller GigECtrlr command in the Ethernet controller configuration mode.

controller { TenGigECtrlr | HundredGigECtrlr } R/S/I/P [ pm { 30-sec |15-min | 24-hour} { ether} { report | threshold} value ] | [ perf-mon { enable | disable } ] | [ loopback { internal | line} ] | [ sec-admin-state maintenance] | [ shutdown ] | [ laser-squelch] | [ fec { none | standard } ] | [ holdoff-time trunk-fault timevalue]

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the Ethernet controller.

pm { 30-sec |15-min | 24-hour }

Configures performance monitoring parameters for 30 second, 15 minutes, or 24 hour intervals.

ether

Configures Ethernet PM data in 30 second, 15 minute or 24 hour intervals.

report

Configures TCA reporting status.

threshold

Configures threshold on Ethernet controller parameters.

perf-mon { enable | disable }

Enables or disables performance monitoring.

loopback [ internal | line ]

Configures the internal or line loopback mode on the controller.

sec-admin-state maintenance

Configures the administrative state of the controller indicating that the controller is under maintenance.

shutdown

Disables the configuration of the controller.

laser-squelch

Enables laser squelching so that laser is brought down in the event of trunk faults (LOF, LOS) and a SQUELCHED alarm is raised. For 10G Ethernet controllers, laser squelching is supported only on LR4 and QSFP+ pluggables.

fec { none | standard }

(Only for 100G Ethernet Controllers) Disables FEC or enables standard (Reed-Solomon) FEC.

holdoff-time trunk-fault timevalue

(Only for 100G Ethernet Controllers) When a fault occurs on the trunk port, the user can hold the propagation of Local Fault using this parameter. The range of timevalue is 10 ms to 3 sec.

Command Default

None

Command Modes

Ethernet controller configuration

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.5.1

This command was updated to include the holdoff-time parameter.

Examples

The following example shows how to configure the performance monitoring parameters of the Ethernet controller in 15 minute intervals. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller TenGigECtrlr 0/0/0/0/1 pm 15-min ether report 
1024-1518-octets enable

The following example shows how to configure the internal loopback. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller TenGigECtrlr 0/0/0/0/1 loopback internal

The following example enables IDLE hold off timer in 100G controllers.


RP/0/RP0/CPU0:ios(config)#controller hundredGigECtrlr 0/0/0/4
RP/0/RP0/CPU0:ios (config-eth-ctrlr)# holdoff-time trunk-fault timevalue 3000

controller mACSecCtrlr

To configure the MACSec controller, use the controller mACSecCtrlr command in the MACSec controller configuration mode.

To create a MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx use the following command:

controller mACSecCtrlr R/S/I/P{ pm { 30-sec |15-min | 24-hour} { macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx} { report | threshold { in-out-decrypted | out-oct-decrypted} value} enable

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the MACSec controller.

pm { 30-sec | 15-min | 24-hour }

Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals.

macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx

MACSEC Ether layer counters, MACSEC secy Interface level counters, MACSEC secy Tx layer counters, and MACSEC secy Rx layer counters.

in-out-decrypted | out-oct-decrypted

The number of octets of plaintext recovered from received packets that were integrity protected and encrypted

Command Default

None

Command Modes

MACSec controller configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Release 6.3.1

This commnad was modified with the parameters to enable MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx

Examples

The following example shows how to configure the MACSec controller. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller mACSecCtrlr 0/0/0/4

The following is a sample to configure the MACsec TCA parameters for rx-pkt at macsec-ether level for MACsec controller in 15 min intervals: 

controllers macSecCtrlr 0/0/0/11/1
 pm 15-min macsec-ether report rx-pkt enable
pm 15-min macsec-ether threshold rx-pkt 1000000

The following is a sample to configure the MACsec TCA parameters for rx-util at macsec-ether level for MACsec controller in 15 min intervals: 

controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report rx-util enable
pm 15-min macsec-ether threshold rx-util 10

The following is a sample to configure the MACsec TCA parameters for out-octets at macsec-ether level for MACsec controller in 15 min intervals: 

controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report out-octets enable
pm 15-min macsec-ether threshold out-octets 100000

The following is a sample to configure the MACsec TCA parameters for rx-pkt at MAC-SECy-If controller in 30 sec interval: 

controller MACSecCtrlr0/0/0/4
pm 15-min macsec-ether report rx-pkt enable
pm 15-min macsec-ether threshold rx-pkt 1000

controller optics

To configure the optics controller, use the controller optics command in the optics controller configuration mode.

controller optics R/S/I/P [ cd-max cd-max | cd-min cd-min | cd-low-threshold cd-low | cd-high-threshold cd-high | dgd-high-threshold dgd-value | lbc-high-threshold lbc-value | osnr-low-threshold osnr-value description description | rx-high-threshold rx-high | rx-low-threshold rx-low | tx-high-threshold tx-high | tx-low-threshold tx-low | sec-admin-state maintenance | shutdown | transmit-power transmit-power | perf-mon { enable | disable } | pm [ 30-sec |15-min | 24-hour ] optics [ report | threshold ]

controller optics R/S/I/P pm [ 30-sec |15-min | 24-hour] optics [ report | threshold { cd | dgd | lbc | lbc-pc | opr | opr-dbm | opt | opt-dbm | osnr | pcr | pdl | pn | sopmd]

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the optics controller.

cd-max cd-max

(Only for trunk optics controllers) Maximum chromatic dispersion.

The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G.

cd-min cd-min

(Only for trunk optics controllers) Minimum chromatic dispersion.

The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G.

cd-low-threshold cd-low

(Only for trunk optics controllers) Minimum acceptable chromatic dispersion. The CD-OOR alarm is raised if the chromatic dispersion goes below this value.

The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G.

cd-high-threshold cd-high

(Only for trunk optics controllers) Maximum acceptable chromatic dispersion. The CD-OOR alarm is raised if the chromatic dispersion exceeds this value.

The range is -70000 to +70000 ps/nm when the trunk bit rate is 100G. The range is -20000 to +20000 ps/nm when the trunk bit rate is 200G or 250G.

dgd-high-threshold dgd-value

(Only for trunk optics controllers) Configures the maximum acceptable Differential Group Delay (DGD) value. The HIGH_DGD alarm is raised if DGD exceeds this value.

The range is 0 to 18000 (in the units of 0.01 ps).

lbc-high-threshold lbc-value

Configures the high laser bias current threshold.

The range is 0 to 100%

osnr-low-threshold osnr-value

(Only for trunk optics controllers) Configures the minimum acceptable Optical Signal to Noise ratio (OSNR) value. The LOW_OSNR alarm is raised if OSNR goes below this value.

The range is 0 to 4000 (in the units of 0.01 dB).

description description

Description of the optics controller.

rx-high-threshold rx-high

Configures high receive power threshold. The range is -400 to 300 (in the units of 0.1 dBm).

rx-low-threshold rx-low

Configures low receive power threshold. The range is -400 to 300 (in the units of 0.1 dBm).

tx-high-threshold tx-high

Configures high transmit power threshold. The range is -400 to 300 dBm (in the units of 0.1 dBm).

tx-low-threshold tx-low

Configures low transmit power threshold. The range is -400 to 300 dBm (in the units of 0.1 dBm).

sec-admin-state maintenance

Configures the administrative state of the controller indicating that the controller is under maintenance.

shutdown

Disables the configuration of the controller.

pm

Configures performance monitoring parameters for 30 second, 15 minute and 24 hour intervals.

transmit-power transmit-power

(Only for trunk optics controllers) Configures the transmit power. The range is -190 to 15 dBm (in the units of 0.1 dBm).

The CLI allows to configure the range between -190 to 15 dBm (in the units of 0.1 dBm). See the appropriate CFP pluggable data sheet for the supported range.

The default transmit-power is changed from -0.5 dbm to -1.5 dBm in R6.1.2. Hence, if the user upgrades the software from a release prior to R6.1.2 to R6.1.2 or later, the transmit-power is automatically adjusted to -1.5 dbm. Hence, traffic hit is observed for one or two seconds during the upgrade. This issue happens only if the user did not configure the transmit power.

perf-mon { enable | disable }

Enables or disables performance monitoring.

cd

Configures the chromatic dispersion threshold.

dgd

Configures the DGD threshold.

lbc

Configures the laser bias current threshold.

lbc-pc

Configures the laser bias current threshold in percentage.

opr

Configures the optical Rx power threshold in uW.

opr-dbm

Configures the optical Rx power threshold in dBm. The unit is 0.01 dBm. For example, if you want to configure 30.00 dBm, enter 3000.

opt

Configures the optical Tx power threshold in uW.

opt-dbm

Configures the optical Tx power threshold in dBm. The unit is 0.01 dBm.

osnr

Configures the OSNR threshold.

pcr

Configures the Polarization Change Rate (PCR) threshold.

pdl

Configures the Polarization Dependent Loss (PDL) threshold.

pn

Configures the Phase Noise (PN) threshold.

sopmd

Configures the Second Order Polarization Mode Dispersion (SOPMD) threshold.

Command Default

None

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.1.1

The opr-dbm and opt-dbm were added.

Command Modes

Optics controller configuration

Usage Guidelines

The configurations for chromatic dispersion (cd-max, cd-min, cd-low-threshold, and cd-high-threshold) must be performed only after the hw-module configuration. These configurations must be removed before the no hw-module configuration.

Examples

The following example shows how to configure the optics controller and set the high power threshold at the transmit and receive side. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# rx-high-threshold 200
RP/0/RP0/CPU0:ios(config-optics)# tx-high-threshold 300

The following example shows how to configure the optics controller and set the ranges for chromatic dispersion when the trunk rate is 200G. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# cd-max 10000
RP/0/RP0/CPU0:ios(config-optics)# cd-min 2000

The following example shows how to configure the optics performance monitoring for 15 minute intervals. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP/0/RP0/CPU0:ios(config-optics)# pm 15-min optics report cd max-tca enable

crypto ca authenticate

To authenticate the certification authority (CA) by getting the certificate for the CA server, use the crypto ca authenticate command in global configuration mode.

crypto ca authenticate ca-name

Syntax Description

ca-name

Specifies the name of the CA server.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of authenticating the certificate authority and requesting certificates.


crypto ca authenticate ncs1k
crypto ca enroll ncs1k
exit
commit

crypto ca enroll

To obtain a router certificate from the certification authority (CA) server, use the crypto ca enroll command in global configuration mode.

crypto ca enroll ca-name

Syntax Description

ca-name

Specifies the name of the CA server.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of authenticating the certificate authority and requesting certificates.


crypto ca authenticate ncs1k
crypto ca enroll ncs1k
exit
commit

crypto ca trustpoint

To enter the trustpoint configuration mode for the specified trustpoint, use the crypto ca trustpoint command in global configuration mode.

crypto ca trustpoint trustpoint-name

Syntax Description

trustpoint-name

Creates a name for the certification authority (CA). (If you previously declared the CA and want to update its characteristics, specify the name you previously created.)

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the trust point. 


configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit

crypto key generate rsa

To generate Rivest,Shamir, and Adelman (RSA) key pairs,use the crypto key generate rsa command in global configuration mode.

crypto key generate rsa [ usage-keys | general-keys] [ keypair-label]

Syntax Description

usage-keys

Specifies that two RSA special-usage key pairs, one encryption pair and one signature pair, will be generated.

general-keys

Specifies that a general-purpose key pair will be generated, which is the default.

keypair-label

Specifies the name that is used for an RSA key pair when they are being exported.

Command Default

RSA key pairs do not exist.

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of generating the RSA key pair.


configure
crypto key generate rsa ncs1k
exit
commit

cryptographic-algorithm

To configure the cryptographic algorithm used for authenticating a peer for MACsec encryption, use the cryptographic-algorithm command in keychain configuration mode.

cryptographic-algorithm authentication algorithm

Syntax Description

AES-128-CMAC

Configures the 128-bit AES encryption algorithm.

AES-256-CMAC

Configures the 256-bit AES encryption algorithm.

Command Default

No default behavior or values.

Command Modes

Keystring configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Examples

The following example shows how to use the cryptographic-algorithm command for MACsec encryption. 


configure
key chain mac_chain macsec
key 1234abcd5678
key-string 123456781234567812345678123456 cryptographic-algorithm aes-128-cmac

dot1x pae

To set the Port Access Entity (PAE) type, use the dot1x pae command in interface configuration mode.

dot1x pae [ supplicant | authenticator | both ]

Syntax Description

supplicant

The interface acts only as a supplicant and will not respond to messages that are meant for an authenticator.
authenticator

The interface acts only as an authenticator and will not respond to any messages meant for a supplicant.
both

The interface behaves both as a supplicant and as an authenticator and thus will respond to all dot1x messages.

Command Default

PAE type is not set.

Command Modes

Interface configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the 802.1X profile. 


configure
dot1x pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit

dot1x profile

To configure the 802.1X profile, use the dot1x profile command in global configuration mode.

dot1x profile profile-name

Syntax Description

profile-name

Specifies the name of the 802.1X profile.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the 802.1X profile.


configure
dot1x profile reauth
pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit

dot1x supplicant eap profile

To assign the EAP-TLS profile to the 802.1X interface,, use the dot1x supplicant eap profile command in interface configuration mode.

dot1x supplicant eap profile profile-name

Syntax Description

profile-name

Specifies the name of the supplicant EAP profile.

Command Default

None

Command Modes

Interface configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the 802.1X profile. 


configure
dot1x pae both
authenticator timer reauth-time 3600
supplicant eap profile ncs1k
exit
commit

dwdm-carrier

To configure the wavelength on the trunk port, use the dwdm-carrier command in optics controller configuration mode. To return the wavelength to its default value, use the no form of this command.

dwdm-carrier { 100MHz-grid frequency frequency}

dwdm-carrier { 50Ghz-grid [ frequency frequency | wavelength wavelength | itu-ch channel-number]}

Syntax Description

50Ghz-grid | 100MHz-grid

Configures the wavelength in 50GHz grid and 100MHz (0.1GHz) grid spacing respectively in accordance with ITU definition.

frequency frequency

Specifies the frequency for the optics controller.

In 50GHz grid spacing, enter the 5-digit frequency value in the range of 19115 to 19610 GHz. For example, enter 19580 to specify 195.8 THz. In 100MHz grid spacing, enter the 7-digit frequency value in the range of 1911500 to 1961000 THz. For example, enter 1913501 to specify 191.3501 THz.

wavelength wavelength

Specifies the wavelength for the optics controller.

In 50GHz grid spacing, enter the 7-digit wavelength value in the range of 1528773 to 1568362 nm. For example, enter 1532290 to specify 1532.29 nm.

itu-ch channel-number

ITU channel number. The range is 1 to 100 for conventional band (C-band).

Command Default

No wavelength is configured.

Command Modes

Optics controller configuration

Command History

Release Modification
Release 6.0.0

This command was introduced.

Usage Guidelines

The controller must be in the shutdown state before you can use the wavelength command.

Use the show controllers optics Rack/Slot/Instance/Port dwdm-carrrier-map command to display the wavelength and channel mapping for trunk optics controllers. See the show controllers command to view the DWDM carrier map table.

Examples

The following example shows how to configure the channel number. 


RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid itu-ch 25

The following example shows how to configure the frequency in 50GHz grid spacing. 


RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid frequency 19265

The following example shows how to configure the frequency in 100MHz grid spacing. 


RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 100MHz-grid frequency 1911501

The following example shows how to configure the wavelength in 50GHz grid spacing. 


RP/0/RP0/CPU0:ios# config
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0
RP0/0/CPU0:ios(config-optics)# dwdm-carrier 50GHz-grid wavelength 1560200

eap profile

To configure the EAP profile, use the eap profile command in global configuration mode.

eap profile profile-name

Syntax Description

profile-name

Specifies the name of the EAP profile.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the EAP profile. 


configure
eap profile ncs1k
identity PRO67
method tls pki-trustpoint ncs1k
exit
commit

enrollment url

To specify the certification authority location by naming the CA's URL, use the enrollment url command in ca-identity configuration mode.

enrollment url ca-url

Syntax Description

ca-url

Specifies the URL of the CA where your router must send certificate requests, for example, https://ca_server where ca_server is the CA's host DNS name or IP address.

Command Default

None

Command Modes

Ca-identity configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of specifying the URL of the CA.


configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit

fault-profile

Use the fault-profile command in the global configuration mode, to create a new fault profile with one or more alarms and user-defined severity.

fault-profile name fault-identifier subsystem XR fault-type { ethernet | sdh_controller | sonet | OPTICS | G709 } fault-tag name sas severity nsas severity

Syntax Description

fault-profile name

Name of the fault profile.

fault-identifier subsystem XR

Supports the XR sub-system.

fault-type

The component the fault profile is applicable to. The available options are:

  • ethernet

  • sdh_controller

  • sonet

  • OPTICS

  • G709

fault-tag name The faults that are included as part of the newly created fault profile.
sas severity nsas severity

Sets the severity level for:

  • sas (service affecting; impacts traffic)

  • nsas (non-service affecting; does not impact traffic)

The available options are:

  • Critical

  • Major

  • Minor

  • Non-faulted

  • Non-reported

Command Default

No default behavior or values.

Command Modes

Global Configuration

Command History

Release Modification

Release 7.2.1

This command was introduced.

Examples

The following example shows how to use the fault profile command. 

RP/0/RP0/CPU0: router (config) # fault profile f1 fault-identifier subsystem XR fault-type HW_OPTICS fault-tag OPTICAL_LO_RXPOWER sas CRITICAL nsas CRITICAL

fault-profile apply

Use the fault-profile apply command in the global configuration mode, to apply a fault profile at the port level or node level.

fault-profile name apply rack0 slot location

Syntax Description

fault-profile name

Name of the fault profile.

rack 0 slot location

Sets the profile at the port level or node level.

Command Default

No default behavior or values.

Command Modes

Global Configuration

Command History

Release Modification

Release 7.2.1

This command was introduced.

Examples

The following example shows how to use the fault profile apply command at the port level. 

RP/0/RP0/CPU0:ios(config)# fault profile f1 apply rack 0 slot LC0 port 1

The following example shows how to use the fault profile apply command at the node level. 

RP/0/RP0/CPU0:ios(config)# fault profile f1 apply rack 0 slot ALL

hw-module

To provision the slice with traffic on the client and trunk ports, use the hw-module command in IOS XR configuration mode.

The slice can be provisioned to send encrypted traffic with client bitrate as 100G and trunk bitrate as 200G.

hw-module location location slice [ slice_number | all {drop-lldp | client bitrate [10G | 40G | 100G | 10G-100G] trunk bitrate [100G | 200G | 250G] fec [softdecision7 | softdecision20] [client-port-ains-soak hours hours minutes minutes] [ encrypted]}] }

Syntax Description

location location

Specifies the location of the optics controller. The location is 0/RP0/CPU0.

slice [ slice_number | all ]

Specifies the slice number that is provisioned or all the slices. The range of slice number is 0 to 3. Each slice is a group of five client ports and two trunk ports.

drop-lldp

Enables LLDP drop on the specified slice.

client bitrate [10G | 40G | 100G | 10G-100G]

Specifies the traffic rate on the client ports. 10G-100G client bitrate is called mixed mode configuration.
trunk bitrate [100G | 200G | 250G]

Specifies the traffic rate on the trunk ports.

fec [softdecision7 | softdecision20]

Specifies the FEC to configure on the trunk ports.

client-port-ains-soak hours hours minutes minutes

Specifies the AINS configuration in hours and minutes.
encrypted

Provisions the slice to send encrypted traffic.

Command Default

No slice is configured.

You must configure the slice before enabling LLDP drop.

Command Modes

Cisco IOS XR Configuration

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.0.1

40G client bit rate was introduced.

Release 6.1.1

encrypted keyword was added.

Release 6.1.2

drop-lldp keyword was added.

Release 6.3.1

10G-100G is supported as one of the client bitrates.

Release 6.5.1

AINS configuration is added.

Usage Guidelines

When each slice is configured with a specific client bitrate and trunk bitrate, the no hw-module location location slice all command cannot be used to remove all the slice configurations. Use the no hw-module location location slice slice_number command for each slice to remove the slice configuration. Use the no hw-module location location {slice slice_number | all} drop-lldp command to disable LLDP drop the on the configured slice.

Examples

The following example shows how to configure slice 0 with client rate as 100G and trunk rate as 200G. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 200G softdecision7

The following example shows how to configure slice 1 with client rate as 100G and trunk rate as 250G. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 1 client bitrate 100G trunk bitrate 250G softdecision20

The following example shows how to configure slice 0 to send encrypted traffic with client rate as 100G and trunk rate as 200G. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 200G softdecision7 encrypted

The following is a sample in which slice 0 is configured in mixed mode, and FEC on the trunk ports is set to softdecision20. 


configure
hw-module location 0/RP0/CPU0 slice 0 client bitrate 10G-100G trunk bitrate 200G fec SoftDecision20
commit

The following example shows how to enable LLDP drop at slice 0. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 client bitrate 40G trunk bitrate 200G fec softDecision7
RP/0/RP0/CPU0:ios(config)# hw-module location 0/RP0/CPU0 slice 0 drop-lldp

The following is a sample in which slice 0 is configured with AINS with soak time as 30 minutes.


configure
hw-module location 0/RP0/CPU0 slice 0 client bitrate 100G trunk bitrate 250G fec SoftDecision20
hw-module location 0/RP0/CPU0 slice 0 client-port-ains-soak hours 0 minutes 30
commit

ipv4 access-group

To configure the Access List (ACL), use the following command at the IPv4 interface in the configuration mode:

ipv4 access-group access-list-name { ingress | egress }

Syntax Description

access-list-name

Access list name. Names cannot contain a space or quotation marks.
ingress

Specifies an inbound interface.

egress

Specifies an outbound interface.

Command Default

No IPv4 access list is defined.

Command Modes

Interface Configuration

Command History

Release Modification
Release 6.3.2

This command is introduced.

Usage Guidelines

Use the ipv4 access-list command to configure an IPv4 access list. This command places the system in access list configuration mode, in which the denied or permitted access conditions must be defined with the deny or permit command.

Examples

The following examples shows how to configure the Access List at the IPv4 interface in the configuration mode:

interface MgmtEth0/RP0/CPU0/0
ipv4 address 10.1.1.1 255.255.255.0
ipv4 access-group IPV4_ICMP_DENY ingress
ipv4 access-group IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY egress

Sample Configuration for IPv4 Access Lists

ipv4 access-list IPV4_ICMP_DENY
10 deny icmp any any
20 permit ipv4 any any
!
ipv4 access-list IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet
20 permit ipv4 any any

ipv6 access-group

To configure the Access List (ACL), use the following command at the IPv6 interface in the configuration mode:

ipv6 access-group access-list-name { ingress | egress }

Syntax Description

access-list-name

Access list name. Names cannot contain a space or quotation marks.
ingress

Specifies an inbound interface.

egress

Specifies an outbound interface.

Command Default

No IPv6 access list is defined.

Command Modes

Interface Configuration

Command History

Release Modification
Release 6.3.2

This command is introduced.

Usage Guidelines

Use the ipv6 access-list command to configure an IPv6access list. This command places the system in access list configuration mode, in which the denied or permitted access conditions must be defined with the deny or permit command.

Examples

The following examples shows how to configure the Access List at the IPv6 interface in the configuration mode

interface MgmtEth0/RP0/CPU0/0
ipv6 address 1000::1/64
ipv6 access-group IPV6_SSH_DENY ingress
ipv6 access-group IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY egress

Sample Configuration for IPv6 Access Lists

ipv6 access-list IPV6_SSH_DENY
10 deny tcp any any eq ssh
20 permit ipv6 any any
!
ipv6 access-list IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet
20 permit ipv6 any any
!

key

To create or modify a keychain key, use the key command in keychain configuration mode.

key key-id

Syntax Description

key-id

64-character hexadecimal string.

Command Default

No default behavior or values.

Command Modes

Key chain configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Usage Guidelines

The key name must be of even number of characters and must match on both the sides.

Examples

The following example shows how to use the key command. 


configure
key chain mac_chain macsec
key 1234abcd5678

key chain

To create or modify a keychain, use the key chain command in global configuration mode.

key chain key-chain-name

Syntax Description

key-chain-name

Specifies the name of the keychain that can be up to 32 characters.

Command Default

No default behavior or values.

Command Modes

Global configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how you can configure a key chain for MACsec encryption. 


configure
key chain mac_chain macsec

key-server-priority

To configure the preference for a device to serve as the key server for MACsec encryption, use the key-server-priority command in MACsec policy configuration mode.

key-server-priority value

Syntax Description

value

Indicates the priority for a device to become the key server. Lower the value, higher the preference. The range is 0 to 255.

Command Default

The default value is 16.

Command Modes

MACsec policy configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Examples

The following example shows how to use the key-server-priority command. 


configure
macsec-policy mac_policy
key-server-priority 0

key-string

To specify the text string for the key, use the key-string command in keychain configuration mode.

key-string [ clear | password] key-string-text

Syntax Description

clear

Specifies the key string in clear-text form.

password

Specifies the key in encrypted form.

key-string-text

Text string for the key, which is encrypted before being saved to the configuration. The text string has the following character limitations.

  • Plain-text key strings—Minimum of 1 character and a maximum of 64 hexadecimal characters for 256-bit encryption. Minimum of 1 character and a maximum of 32 hexadecimal characters for 128-bit encryption.

  • Encrypted key strings—Minimum of 4 characters and no maximum.

Command Default

The default value is clear.

Command Modes

Key chain configuration

Command History

Release Modification
Release 6.1.1

This command was introduced.

Examples

The following example shows how to use the keystring command. 


configure
key chain mac_chain macsec
key 1234abcd5678
key-string 12345678123456781234567 cryptographic-algorithm aes-128-cmac

lifetime

Configures the validity period for the MACsec key.

The lifetime period (validity period of the key) can be configured, with a duration in seconds, as a validity period between two dates (for example, Jan 01 2016 to Dec 31 2016), or with infinite validity.

The key is valid from the time you configure (in HH:MM:SS format). The duration is configured in seconds.

lifetime start_time start_date { end_time end_date | duration validity | infinite }

Syntax Description

start_time

Start time in hh:mm:ss from which the key becomes valid. The range is from 0:0:0 to 23:59:59.

start_date

The date in DD month YYYY format that the key becomes valid.

end_time

End time in hh:mm:ss at which point the key becomes invalid. The range is from 0:0:0 to 23:59:59.

end_date

The date in DD month YYYY format that the key becomes invalid.

duration validity

The key chain is valid for the duration you configure. You can configure duration in seconds.

infinite

The key chain is valid indefinitely.

Command Default

No default behavior or values

Command Modes

Keychain configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how to use the lifetime command. 


configure
key chain mac_chain macsec
key 1234abcd5678
key-string 123456781234567812345678 cryptographic-algorithm aes-128-cmac
lifetime 05:00:00 20 july 2016 12:00:00 30 september 2016

macsec

To apply the MACsec key chain and policy configuration on the MACsec controller, use the macsec command in controller configuration mode.

macsec psk-keychain key-chain-name [ policy policy-name]

Syntax Description

key-chain-name

Specifies the name of the keychain that can be up to 32 characters.

policy_name

Name of the MACsec policy for encryption.

Command Default

No default behavior or values.

Command Modes

Controller configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how to use the macsec psk-keychain command. 


configure
controller MACSecCtrl 0/0/0/3
macsec psk-keychain mac_chain policy mac_policy
exit 
commit

macsec eap

To configure EAP on MACsec Controller, use the macsec eap command in global configuration mode.

macsec eap [ policy macsec-policy-name ]

Syntax Description

macsec-policy-name

Specifies the name of the MACsec policy for encryption.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring MACsec EAP and 802.1X profile on the MACsec controller. 


configure
controller MACSecCtrl 0/0/0/24
dot1x profile reauth
macsec eap
exit
commit

macsec-policy

To create a MACsec policy for MACsec encryption, use the macsec-policy command in global configuration mode.

macsec-policy policy_name

Syntax Description

policy_name

Name of the MACsec policy for encryption.

Command Default

No default behavior or values.

Command Modes

Global configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how to use the macsec-policy command. 


configure
macsec-policy mac_policy

macsec-tca

To create a MACsec Threshold Crossing Alerts at mac-sec ether, secy-rx, secy-if (interace), and secy-tx.

controllers macsecCtrlr R/S/P { pm { 30-sec |15-min | 24-hour} { macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx} { report | threshold { in-out-decrypted | out-oct-decrypted} value} enable

Syntax Description

R/S/I/P

Rack/Slot/Instance/Port of the coherent DSP controller.

pm { 30-sec | 15-min | 24-hour }

Configures performance monitoring parameters for 30 second,15 minute or 24 hour intervals.

macsec-ether | macsec-secy-if | macsec-secy-tx | macsec-secy-rx

MACSEC Ether layer counters, MACSEC secy Interface level counters, MACSEC secy Tx layer counters, and MACSEC secy Rx layer counters.

in-out-decrypted | out-oct-decrypted

The number of octets of plaintext recovered from received packets that were integrity protected and encrypted

Command Default

No default behavior or values.

Command Modes

Global configuration

Command History

Release Modification
R6.3.1

This command was introduced.

Examples

The following example shows to configure the MACsec TCA parameters for rx-util at macsec-ether level for MACsec controller in 15 min intervals:. 

controllers macSecCtrlr 0/0/0/11/1
pm 15-min macsec-ether report rx-util enable
pm 15-min macsec-ether threshold rx-util 10

pki-trustpoint

To specify the configured pki trustpoint name, use the pki-trustpoint command in global configuration mode.

pki-trustpoint trustpoint-name

Syntax Description

trustpoint-name

Specifies the configured pki trustpoint name.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the EAP profile. 


configure
eap profile ncs1k
identity PRO67
method tls pki-trustpoint ncs1k
exit
commit

pm

To configure the performance monitoring parameters of the optics, Ethernet, and coherent DSP controllers, use the pm command in the controller configuration mode.

pm [ 15-min | 24-hour] [ optics | ether | fec | otn] [ report | threshold] value

Syntax Description

15-min | 24-hour

Configures performance monitoring parameters for 15 minute or 24 hour intervals.

optics | ether | fec | otn

Specifies whether to configure performance monitoring parameters for the optics, Ethernet, or coherent DSP controllers.

report

Configures optics TCA reporting status.

threshold

Configures threshold on optics parameters.

value

Value of the reporting or threshold parameters.

Command Default

None

Command Modes

Optics controller configuration

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.0.1 The IN_DROP_OTHER, OUT-OCTET, TX_UNDERSIZED_PKT, TX_OVERSIZED_PKT, TX_FRAGMENTS, TX_JABBER, TX_BAD_FCS statistics were introduced.

Usage Guidelines

The following table describes the optics PM parameters.

Parameter

Description

cd

Chromatic dispersion TCA reporting status or threshold

dgd

Differential group delay TCA reporting status or threshold

lbc

lbc TCA reporting status or threshold

lbc-pc

lbc percentage TCA reporting status or threshold

opr

opr TCA reporting status or threshold

opt

opt TCA reporting status or threshold

osnr

Optical Signal to Noise Ratio TCA reporting status or threshold

pcr

Polarization Change Rate TCA reporting status or threshold

pdl

Polarization Dependent Loss TCA reporting status or threshold

pn

Phase Noise TCA reporting status or threshold

sopmd

Second Order Polarization Mode Dispersion TCA reporting status or threshold

The following table describes the OTN PM parameters.

Parameter

Description

ES-NE

Error seconds in the near end

ESR-NE

Error seconds ratio in the near end

SES-NE

Severely error seconds in the near end

SESR-NE

Severely error seconds ratio in the near end

UAS-NE

Unavailable seconds in the near end

BBE-NE

Background block errors in the near end

BBER-NE

Background block errors ratio in the near end

FC-NE

Failure counts in the near end

ES-FE

Error seconds in the far end

ESR-FE

Error seconds ratio in the far end

SES-FE

Severely error seconds in the far end

SESR-FE

Severely error seconds ratio in the far end

UAS-FE

Unavailable seconds in the far end

BBE-FE

Background block errors in the far end

BBER-FE

Background block errors ratio in the far end

FC-FE

Failure counts in the far end

The following table describes the Ethernet PM parameters.


Note

You can view details of the undersized and fragmented packets that are dropped in the ingress side in the 100G mode in the STAT-UNDERSIZED-PKT and IN_ERROR_FRAGMENTS ingress counters. These details are not available on the egress counters such as TX_UNDERSIZED_PKT and TX_FRAGMENTS. All the dropped packets are counted as part of the IN_DROP_OTHER drop counter.

Parameter

Description

RX-UTIL

Bandwidth utilization of port at the ingress side in percentage.

TX-UTIL

Bandwidth utilization of port at egress side in percentage.

RX-PKT

Number of received packets

STAT-PKT

Status of received packets

OCTET-STAT

Total number of octets of data received in the network

OVERSIZE-PKT

Total number of packets received that were longer than 1518 octets and were otherwise well formed

JABBER-STATS

Total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error)

IN_PKT_64_OCTET

Total number of packets received that were 64 octets in length

IN_PKT_65_127_OCTET

Total number of packets received that were between 65 and 127 octets in length

IN_PKT_128_255_OCTET

Total number of packets received that were between 128 and 255 octets in length

IN_PKT_256_511_OCTET

Total number of packets received that were between 256 and 511 octets in length

IN_PKT_512_1023_OCTET

Total number of packets received that were between 512 and 1023 octets in length

IN_PKT_1024_1518_OCTET

Total number of packets received that were between 1024 and 1518 octets in length

IN-UCAST

Total number of unicast frames received error-free

IN-MCAST

Total number of multicast frames received error-free

IN-BCAST

Total number of broadcast frames received error-free

OUT-UCAST

Total number of unicast frames transmitted error-free

OUT-BCAST

Total number of broadcast frames transmitted error-free

OUT-MCAST

Total number of multicast frames transmitted error-free

TX-PKT

Number of transmitted packets

OUT-OCTET

Total number of octets transmitted out of the interface, including framing characters

STAT-MULTICAST-PKT

Status of multicast packets

STAT-BROADCAST-PKT

Status of broadcast packets

STAT-UNDERSIZED-PKT

Number of good packets received that are shorter than 64 bytes.

IN_ERROR_FRAGMENTS

Number of bad packets received that are shorter than 64 bytes.

IN_DROP_OTHER Total number of packets dropped. In the 100 G mode, undersized and fragmented packets are dropped
OUT-OCTET Total number of bytes transmitted
TX_UNDERSIZED_PKT Total number of packets transmitted that are shorter than 64 bytes.
TX_OVERSIZED_PKT Total number of oversized packets transmitted.
TX_FRAGMENTS Total number of fragmented packets transmitted.
TX_JABBER Total number of Jabber packets transmitted.
TX_BAD_FCS Total number of bad FCS packets transmitted.

The following table describes the FEC PM parameters.

Parameter

Description

ec-bits

Number of bit errors that are corrected by the system

uc-words

Number of words that are not corrected by the system

Examples

The following example shows how to set the maximum TCA reporting status for the chromatic dispersion. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0 pm 15-min optics report cd max-tca enable

The following example shows how to set the maximum threshold for the chromatic dispersion. 


RP/0/RP0/CPU0:ios# configure
RP/0/RP0/CPU0:ios(config)# controller optics 0/0/0/0 pm 15-min optics threshold cd max

radius-server host

To specify a RADIUS server host, use the radius-server host command in global configuration mode.

radius-server host { IPv4 address of RADIUS server} [ auth-port port-number] [ acct-port port-number] [ key string]

Syntax Description

auth-port port-number

Specifies the User Datagram Protocol (UDP) destination port for authentication requests. The port-number argument specifies the port number for authentication requests. The host is not used for authentication if this value is set to 0. The default value is 1645.

acct-port port-number

Specifies the UDP destination port for accounting requests. The port-number argument specifies the port number for accounting requests. The host is not used for accounting services if this value is set to 0. The default value is is 1646.

key string

Specifies the authentication and encryption key that is used between the router and the RADIUS daemon running on the RADIUS server. This key overrides the global setting of the radius-server key command. If no key string is specified, the global value is used.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the RADIUS server. 


configure
radius-server host 209.165.200.225 auth-port 1645 acct-port 1646 key cisco
radius-server vsa attribute ignore unknown
exit
commit

radius-server

To specify the unknown vsa ignore configuration for RADIUS server, use the radius-server vsa attribute ignore unknown command in the global configuration mode.

radius-server vsa attribute ignore unknown

Syntax Description

vsa attribute ignore unknown

Specifies the unknown vsa (vendor specific attributes) ignore configuration for RADIUS server. Otherwise, authentication failure may occur.

Command Default

None

Command Modes

Global configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of configuring the RADIUS server. 


configure
radius-server host 209.165.200.225 auth-port 1645 acct-port 1646 key cisco
radius-server vsa attribute ignore unknown
exit
commit

rsakeypair

To specify a named Rivest, Shamir, and Adelman (RSA) key pair for this trustpoint, use the rsakeypair command in trustpoint configuration mode.

rsakeypair keypair-label

Syntax Description

keypair-label

RSA key pair label that names the RSA key pairs.

Command Default

If the RSA key pair is not specified, the default RSA key is used for this trustpoint.

Command Modes

Trustpoint configuration

Command History

Release Modification
R6.3.2

This command was introduced.

Examples

The following is a sample of specifying a RSA key pair for the trustpoint.


configure
crypto ca trustpoint ncs1k
enrollment url http://209.165.200.226
subject-name CN=ncs1k,OU=BU,O=Govt,L=Newyork,ST=NY,C=US
rsakeypair ncs1k
crl optional
exit
commit

security-policy

To configure the type of data (encrypted data or all data) that is allowed through the controller configured with MACsec, use the security-policy command in MACsec policy configuration mode.

security-policy { should-secure | must-secure}

Syntax Description

should-secure

Configures the controller on which the MACsec policy is applied, to permit all data.

must-secure

Configures the controller on which the MACsec policy is applied, to permit only MACsec encrypted data.

Command Default

The default value is must-secure that indicates unencrypted packets cannot be transmitted or received except MKA control protocol packets.

Command Modes

MACsec policy configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how to use the security-policy command. 


configure
macsec-policy mac_policy
security-policy must-secure

show alarms

To display alarms in brief or detail, use the show alarms command in XR EXEC mode or Administration EXEC mode.

show alarms brief [card [ location location ] | rack | system ] [ active | history ] ]

show alarms detail [card [ location location ]| rack | system ] [ active | clients | history | stats ] ]

Syntax Description

brief

Displays alarms in brief.

card

Displays card scope alarms related data.

rack

Displays rack scope alarms related data.

system

Displays system scope alarms related data.

location location

Specifies the target location in the rack/slot notation.

active

Displays active alarms.

history

Displays alarm history.

detail

Displays alarms in detail.

clients

Displays clients associated with the service.

stats

Displays service statistics.

Command Default

None

Command Modes

XR EXEC

Administration EXEC

Command History

Release Modification
Release 6.0 .0

This command was introduced.

Usage Guidelines

This command displays the alarms in brief or detail. The command displays only the administration alarms in admin EXEC mode and all the alarms in XR EXEC mode.

Task ID

Task ID Operation

fault

read

Examples

The following example shows the output of the show alarms command.

sysadmin-vm:0_RP0# show alarms 


Thu Dec  17 02:15:12.873 UTC

-----------------------------------------------------------------------------------------------------------------
Active Alarms
-----------------------------------------------------------------------------------------------------------------
Location          Severity      Group           Set time            Description
-----------------------------------------------------------------------------------------------------------------
0/PM0             major         environ         12/16/15 21:43:19   Power Module
 																																																																			Output Disabled 
																																																																				(PM_OUTPUT_EN_PIN_HI)

0                 major         environ         12/16/15 21:43:19   Power Shelf
																																																																				redundancy lost

RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active 


Thu Dec 17 02:20:34.592 UTC

--------------------------------------------------------------------------------
Active Alarms (Brief) for 0/RP0
--------------------------------------------------------------------------------
Location        Severity     Group            Set Time               Description
--------------------------------------------------------------------------------
0/0             Minor        Controller       12/16/2015 21:45:42    Optics0/0/0
/2 - Optics Low Receive Power
--------------------------------------------------------------------------------
History Alarms (Brief) for 0/RP0
--------------------------------------------------------------------------------
Location        Severity     Group            Set Time               Description

                                              Clear Time
--------------------------------------------------------------------------------
0/0             Minor        Controller       12/16/2015 21:45:42    Optics0/0/0
/12 - Optics High Differential Group Delay  

                                              12/16/2015 21:45:53
0/0             Minor        Controller       12/16/2015 21:45:42    Optics0/0/0
/12 - Optics Out of Range Chromatic Dispersion

RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active 


Mon Oct 24 11:57:16.591 UTC

------------------------------------------------------------------------------------
Active Alarms 
------------------------------------------------------------------------------------
Location        Severity     Group            Set Time                   Description                                                                                                                                                                                                                                                
------------------------------------------------------------------------------------
0/RP0/CPU0      Minor        Power            10/24/2016 11:56:46 UTC    patch-panel power redundancy lost

RP/0/RP0/CPU0:ios# show alarms brief card location 0/RP0/CPU0 active 


Mon Oct 24 11:58:45.596 UTC

------------------------------------------------------------------------------------
Active Alarms 
------------------------------------------------------------------------------------
Location        Severity     Group            Set Time                   Description                                                                                                                                                                                                                                                
------------------------------------------------------------------------------------
0/RP0/CPU0      Minor        Software         10/24/2016 11:58:25 UTC    Not able to communicate with patch-panel

show controllers

To display status and configuration information about the interfaces on a specific node, use the show controllers command in XR EXEC mode.

show controllers [ description] controllertype R/S/I/P [ description] [ headless-stats] | [ dwdm-carrier-map flexi-grid] | [ pm { current | history} { 30 sec | 15-min | 24-hour} { optics | ether} linenumber { otn | fec} ] | [ lldp-snoop] | [ stats] | [ summary]

To monitor the performance of Pseudo Random Binary Sequence (PRBS) on the CoherentDSP controller, use the show controllers command in XR EXEC mode.

show controllers [ description] coherentDSPR/S/I/Ppm { current | history} [ description] { 15-min | 24-hour} prbs

Use the following command to view the MACsec performance monitoring at MACsec ether layer, MACsec-secy-if, MACsec-secy-Tx, and /or MACsec-secy-Rx:

show controllers macSecCtrlr R/S/I/P { pm { current | history} { 30 sec| 15-min | 24-hour} { macsec-ether | macsec-secy-if| macsec-secy-tx| macsec-secy-rx}

Syntax Description

description

Displays the name, status, and port description of all the configured controllers or of the specified controller.
controllertype

Type of the controller. The possible values are HundredGigECtrlr, TenGigECtrlr, maCSecCtrlr, CoherentDSP, and Optics.

R/S/I/P/L

Rack/Slot/Instance/Port/Lane number of the controller.

If the controller type is TenGigECtrlr, include the lane number after the port number.

headless-stats

Displays the statistics collected during the last headless operation. The collected statistics is preserved for a slice until the hw-module configuration is removed or changed on that slice or until the next headless operation. The statistics is also preserved across process restarts.

dwdm-carrier-map

(only for trunk optics controllers) Displays the wavelength and channel mapping.

flexi-grid

(only for trunk optics controllers) Enables GMPLS UNI flexible grid channel spacing.
pm

Displays performance monitoring parameters for the controller.

current

Displays the current performance monitoring data in 15 minute and 24 hour intervals.

history

Displays the historical performance monitoring data in 15 minute and 24 hour intervals.

optics | ether

optics to display the PM data for Optics controller and ether to display the PM data for Ethernet controller.

linenumber

Line number to display performance monitoring data. The range is 1 to 12.

otn | fec

Displays OTN PM data or FEC PM data for CoherentDSP controller.

lldp-snoop

Displays the MAC address and other details about the LLDP neighbor from Release 6.0.1. Verify that the MAC address displayed is same as the MAC address of the traffic generating port.

stats

Displays the cumulative statistics of the controller port.

summary

Displays brief information about MACSecCtrlrs in a tabular format. This parameter cannot be used with the stats parameter.

prbs mode

Pseudo Random Binary Sequence (PRBS) mode.

Note
For 10G/40G/100G Ethernet Controller, the stats option displays the cumulative statistics of the Ethernet Controller port. However, the Egress accounting does not support packet size based classification (All output packets * bytes counter).

Usage Guidelines

  • Statistics are not preserved across Cisco IOS XR or system reloads. Up to five seconds of data is lost when the mxp-driver process restarts. The stats output also includes the statistics collected when the system is in headless mode.

  • When the FEC counters (Corrected Codeword Count and UnCorrected Codeword Count) displays 0 values in the output of show controllers hundredGigECtrlr command, it indicates that the FEC counters are not supported or the value is not valid.

  • Total TX Power and Total RX Power: For multi-lane controller optics, total power is calculated by converting each lane power value from dBm to mW, and adding each lane power. Total power in mW must then be converted to dBm.

    Total power in mW = [(Lane 1 power in mW) + (Lane 2 power in mW) + (Lane 3 power in mW) + (Lane 4 power in mW)]

    Total power in dBm = Converted value of total power in mW to dBm

Command Default

The status and configuration information of all the interfaces is displayed.

Command Modes

XR EXEC

Command History

Release Modification
6.0.0

This command was introduced.

6.0.1

The display for LLDP snooping was expanded to include more details about the LLDP neighbor.

A new keyword stats was introduced to display the cumulative statistics of the Ethernet controller port.

6.1.1

MACSecCtrlr was introduced as one of the controller types.

6.1.2

The output of lldp-snoop keyword is updated.

6.2.1

The wildcard character support is introduced.

6.3.2

The flex-grid and description keywords are introduced.

The PRBS mode is introduced.

The MACSec performance monitoring is introduced.

6.5.1

The output was updated to include QSA vendor details.

Usage Guidelines

  • For QSFP-40G-SR-BD and QSFP-100G-AOC pluggables, the output of show controllers optics command does not display the transmit and receive optics parameters such as transmit and receive power. These pluggables do not support Digital Optical Monitoring.

  • When breakout patch panel is used, the output of show controllers TenGigECtrlr command displays the LED status of the patch panel instead of LED status of the physical port. When breakout patch panel is not used, the output displays the alarm status of the Ethernet layer or controller.

Examples

RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13 


Tue Feb 13 15:42:38.708 UTC

Port                                            : CoherentDSP 0/0/0/13
Controller State                                : Up
Secondary State                                 : Normal
Derived State                                   : In Service
Loopback mode                                   : None
BER Thresholds                                  : SF = 1.0E-5  SD = 1.0E-7
Performance Monitoring                          : Enable

Alarm Information:
LOS = 1 LOF = 0 LOM = 1
OOF = 0 OOM = 0 AIS = 0
IAE = 0 BIAE = 0        SF_BER = 0
SD_BER = 0      BDI = 0 TIM = 0
FECMISMATCH = 0 FEC-UNC = 0
Detected Alarms                                 : None

OTU TTI Sent
     OPERATOR SPECIFIC  ASCII                   :
                                                :
     OPERATOR SPECIFIC HEX                      : 00000000000000000000000000000000
                                                : 00000000000000000000000000000000
OTU TTI Received
     OPERATOR SPECIFIC  ASCII                   :
                                                :
     OPERATOR SPECIFIC HEX                      : 20202020202020202020202020202020
                                                : 00000000000000000000000000000000
OTU TTI Expected
     OPERATOR SPECIFIC  ASCII                   :
                                                :
     OPERATOR SPECIFIC HEX                      : 00000000000000000000000000000000
                                                : 00000000000000000000000000000000
FEC mode                                        : Soft-Decision 7
Network SRLG values                             : Not Configured

The table below describes the significant fields shown in the above example.

Field

Description

Port

Rack/Slot/Instance/Port of the coherent DSP controller.

Controller State

State of the controller that can be one of the following:

  • Admin Down

  • Down

  • Up

Secondary State

Secondary state of the controller that can be one of the following:

  • Normal

  • Maintenance

Derived State

Derived state of the controller that can be one of the following:

  • Out Of Service

  • In Service

  • Maintenance

Loopback mode

Loopback mode of the controller that can be one of the following:

  • None

  • Line

  • Internal

BER Thresholds

Bit Error Rate (BER) that can be one of the following:

  • SD_BER—Signal Degrade Bit Error Rate (SD-BER) threshold

  • SF_BER—Signal Fail-Bit Error Rate threshold

Performance Monitoring

Specifies if performance monitoring is enabled or not:

  • Disable

  • Enable

Alarm Information

Summarizes the alarm details:

  • LOS—Loss of Signal

  • LOF—Loss of Frame

  • LOM—Loss of MultiFrame

  • BDI—Backward Defect Indication

  • TIM—Trace Identifier Mismatch

  • SF_BER—SF BER alarm

  • SD_BER—SD BER alarm

  • FECUNC—FEC Uncorrected Word

Detected Alarms

Summarizes the detected alarms:

  • None

  • LOS—Loss of Signal

  • LOF—Loss of Frame

  • LOM—Loss of MultiFrame

  • BDI—Backward Defect Indication

  • TIM—Trace Identifier Mismatch

  • SF_BER—SF BER alarm

  • SD_BER—SD BER alarm

  • FECUNC—FEC Uncorrected Word

OTU TTI Sent

Specifies the sent OTU Trail Trace Identifier (TTI)

OTU TTI Received

Specifies the received OTU TTI.

OTU TTI Expected

Specifies the expected OTU TTI.

FEC mode

Specifies the FEC mode:

  • Soft-Decision 7

  • Soft-Decision 20

Network SRLG

Shared Risk Link Groups (SRLGs). Not supported on NCS 1002

RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/8 


Tue Jun 26 17:36:09.270 IST

 Controller State: Up 

 Transport Admin State: In Service 

 Laser State: On 

 LED State: Green 
 
 Optics Status 

         Optics Type:  10G SFP+ LR

         Alarm Status:
         -------------
         Detected Alarms: None


         LOS/LOL/Fault Status:

         Alarm Statistics:

         -------------
         HIGH-RX-PWR = 0            LOW-RX-PWR = 0          
         HIGH-TX-PWR = 0            LOW-TX-PWR = 0          
         HIGH-LBC = 0               HIGH-DGD = 0          
         OOR-CD = 0                 OSNR = 0          
         WVL-OOL = 0                MEA  = 0          
         IMPROPER-REM = 0          
         TX-POWER-PROV-MISMATCH = 0          

         Performance Monitoring: Enable 

         THRESHOLD VALUES
         ----------------

         Parameter                 High Alarm  Low Alarm  High Warning  Low Warning
         ------------------------  ----------  ---------  ------------  -----------
         Rx Power Threshold(dBm)          4.9      -12.0           0.0          0.0
         Tx Power Threshold(dBm)          3.5      -10.1           0.0          0.0
         LBC Threshold(mA)                N/A        N/A          0.00         0.00

         LBC High Threshold = 98 % 
         Polarization parameters not supported by optics

        Total TX Power = -1.14 dBm 

        Total RX Power = -5.36 dBm 

         Lane  Laser Bias    TX Power    RX Power  Output Frequency
         ----  ----------  ----------  ----------  ----------------
           1      24.5 %   -1.14 dBm   -5.36 dBm  228.84 THz
           2       0.0 %  -40.00 dBm  -40.00 dBm    0.00 THz
           3       0.0 %  -40.00 dBm  -40.00 dBm    0.00 THz
           4       0.0 %  -40.00 dBm  -40.00 dBm    0.00 THz

 Transceiver Vendor Details

         Form Factor            : SFP+
         Name                   : CISCO-SUMITOMO
         Part Number            : 10-2618-01
         Rev Number             : C
         Serial Number          : SPC1907074R
         PID                    : SFP-10G-LR
         VID                    : V01 
         Date Code(yy/mm/dd)    : 15/02/11
         Fiber Connector Type: SC 
         Otn Application Code: Undefined 
         Sonet Application Code: Undefined 
         Ethernet Compliance Code: 10GBASE-LR 

 Transceiver Temperature : 28 Celsius
 

        QSA Vendor Details
        ------------------
         Adapter type           : CAZADERO_QSFP_SFP_Adapter
         Name                   : CISCO-DNI       
         Part Number            : 74-9474-01
         Rev Number             : 03
         Serial Number          : DTY2142058L     
         PID                    : CVR-QSFP-SFP10G   
         VID                    : V01 




 AINS Soak                : None 
 AINS Timer               : 0h, 0m
 AINS remaining time      : 0 seconds

RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/11 headless-stats

This command displays the Ethernet controller statistics in headless mode. The headless start time, headless end time, and packet statistics in Tx, Rx are displayed. 


Thu May  4 08:58:23.491 UTC

Started in Stateful mode: Yes
Headless Start Time: Thu May  4 08:43:54 2017

Headless End   Time: Thu May  4 08:45:15 2017

Ethernet Headless Statistics
    RxPktsOverSized        : 37633208
    RxPktsBadFcs           : 0
    RxErrorJabbers         : 0
    RxPktsMulticast        : 0
    RxPktsBroadcast        : 37633208
    RxPktsUnicast          : 0
    RxPktsUnderSized       : 0
    RxPkts                 : 37633208
    RxBytesGood            : 361278796800
    RxPktsGood             : 37633208
    Rx8021QPkts            : 0
    RxLldpkts              : 10
    RxRecvFragments        : 0
    RxPkts64Bytes          : 0
    RxPkts65To127Bytes     : 0
    RxPkts128to255Bytes    : 0
    RxPkts256To511Bytes    : 0
    RxPkts512To1023Bytes   : 0
    RxPkts1024To1518Bytes  : 0
    RxTotalBytes           : 361278791752
    RxPktsDrop             : 0
    RxPause                : 0
    TxPkts                 : 37633202
    TxTotalBytes           : 361278732768
    TxGoodPkts             : 0
    TxGoodBytes            : 0
    TxPktsUndersized       : 0
    TxPktsOversized        : 37633202
    TxPktsFragments        : 0
    TxPktsJabber           : 0
    TxPktsBadFcs           : 0
    TxPause                : 0

RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/13 dwdm-carrier-map flexi-grid

This command provides mapping of DWDM wavelength and frequency in 6.25 Ghz spacing. The output of this command has G.694.1 channel number, frequency, and wavelength and has 776 entries in this channel spacing. 


DWDM Carrier Band:: OPTICS_C_BAND
Frequency range supported: 196.10000 THz ~ 191.25630 THz

DWDM Carrier Map table
----------------------------------------------------
Channel     G.694.1     Frequency     Wavelength
index      Ch Num        (THz)          (nm)
----------------------------------------------------
     1       480        196.10000      1528.773
----------------------------------------------------
     2       479        196.09380      1528.822
----------------------------------------------------
     3       478        196.08750      1528.871
----------------------------------------------------
     4       477        196.08130      1528.919
----------------------------------------------------
     5       476        196.07500      1528.968
----------------------------------------------------
     6       475        196.06880      1529.017
----------------------------------------------------
     7       474        196.06250      1529.066
----------------------------------------------------
     8       473        196.05630      1529.114
----------------------------------------------------
     9       472        196.05000      1529.163
----------------------------------------------------
    10       471        196.04380      1529.212
----------------------------------------------------
    11       470        196.03750      1529.261
----------------------------------------------------
    12       469        196.03130      1529.309
----------------------------------------------------
    13       468        196.02500      1529.358
----------------------------------------------------
    14       467        196.01880      1529.407
----------------------------------------------------
    15       466        196.01250      1529.456
----------------------------------------------------
    16       465        196.00630      1529.504
----------------------------------------------------
    17       464        196.00000      1529.553
----------------------------------------------------
    18       463        195.99380      1529.602
----------------------------------------------------
    19       462        195.98750      1529.651
----------------------------------------------------
    20       461        195.98130      1529.699
----------------------------------------------------
    21       460        195.97500      1529.748
----------------------------------------------------
    22       459        195.96880      1529.797
----------------------------------------------------
    23       458        195.96250      1529.846
----------------------------------------------------
    24       457        195.95630      1529.894
----------------------------------------------------
    25       456        195.95000      1529.944
----------------------------------------------------
    26       455        195.94380      1529.992
----------------------------------------------------
    27       454        195.93750      1530.041
----------------------------------------------------
    28       453        195.93130      1530.090
----------------------------------------------------
    29       452        195.92500      1530.139
----------------------------------------------------
    30       451        195.91880      1530.187
----------------------------------------------------
    31       450        195.91250      1530.236
----------------------------------------------------
    32       449        195.90630      1530.285
----------------------------------------------------
    33       448        195.90000      1530.334
----------------------------------------------------
    34       447        195.89380      1530.383
----------------------------------------------------
    35       446        195.88750      1530.432
----------------------------------------------------
    36       445        195.88130      1530.480
----------------------------------------------------
    37       444        195.87500      1530.529
----------------------------------------------------
    38       443        195.86880      1530.578
----------------------------------------------------
    39       442        195.86250      1530.627
----------------------------------------------------
    40       441        195.85630      1530.676
----------------------------------------------------
    41       440        195.85000      1530.725
----------------------------------------------------
    42       439        195.84380      1530.773
----------------------------------------------------
    43       438        195.83750      1530.823
----------------------------------------------------
    44       437        195.83130      1530.871
----------------------------------------------------
    45       436        195.82500      1530.920
----------------------------------------------------
    46       435        195.81880      1530.969
----------------------------------------------------
    47       434        195.81250      1531.018
----------------------------------------------------
    48       433        195.80630      1531.066
----------------------------------------------------
    49       432        195.80000      1531.116
----------------------------------------------------
    50       431        195.79380      1531.164
----------------------------------------------------
    51       430        195.78750      1531.213
----------------------------------------------------
    52       429        195.78130      1531.262
----------------------------------------------------
    53       428        195.77500      1531.311
----------------------------------------------------
    54       427        195.76880      1531.360
----------------------------------------------------
    55       426        195.76250      1531.409
----------------------------------------------------
    56       425        195.75630      1531.458
----------------------------------------------------
    57       424        195.75000      1531.507
----------------------------------------------------
    58       423        195.74380      1531.555
----------------------------------------------------
    59       422        195.73750      1531.605
----------------------------------------------------
    60       421        195.73130      1531.653
----------------------------------------------------
    61       420        195.72500      1531.702
----------------------------------------------------
    62       419        195.71880      1531.751
----------------------------------------------------
    63       418        195.71250      1531.800
----------------------------------------------------
    64       417        195.70630      1531.849
----------------------------------------------------
    65       416        195.70000      1531.898
----------------------------------------------------
    66       415        195.69380      1531.947
----------------------------------------------------
    67       414        195.68750      1531.996
----------------------------------------------------
    68       413        195.68130      1532.044
----------------------------------------------------
   69       412        195.67500      1532.094
----------------------------------------------------
    70       411        195.66880      1532.142
----------------------------------------------------
    71       410        195.66250      1532.192
----------------------------------------------------
    72       409        195.65630      1532.240
----------------------------------------------------
    73       408        195.65000      1532.290
----------------------------------------------------
    74       407        195.64380      1532.338
----------------------------------------------------
    75       406        195.63750      1532.387
----------------------------------------------------
    76       405        195.63130      1532.436
----------------------------------------------------
    77       404        195.62500      1532.485
----------------------------------------------------
    78       403        195.61880      1532.534
----------------------------------------------------
    79       402        195.61250      1532.583
----------------------------------------------------
    80       401        195.60630      1532.632
----------------------------------------------------
    81       400        195.60000      1532.681
----------------------------------------------------
    82       399        195.59380      1532.730
----------------------------------------------------
    83       398        195.58750      1532.779
----------------------------------------------------
   84       397        195.58130      1532.828
----------------------------------------------------
    85       396        195.57500      1532.877
----------------------------------------------------
    86       395        195.56880      1532.926
----------------------------------------------------
    87       394        195.56250      1532.975
----------------------------------------------------
    88       393        195.55630      1533.024
----------------------------------------------------
    89       392        195.55000      1533.073
----------------------------------------------------
    90       391        195.54380      1533.122
----------------------------------------------------
    91       390        195.53750      1533.171
----------------------------------------------------
    92       389        195.53130      1533.220
----------------------------------------------------
    93       388        195.52500      1533.269
----------------------------------------------------
    94       387        195.51880      1533.318
----------------------------------------------------
    95       386        195.51250      1533.367
----------------------------------------------------
    96       385        195.50630      1533.416
----------------------------------------------------
    97       384        195.50000      1533.465
----------------------------------------------------
    98       383        195.49380      1533.514
----------------------------------------------------
    99       382        195.48750      1533.563
----------------------------------------------------
   100       381        195.48130      1533.612
----------------------------------------------------
----------------------------------------------------
----------------------------------------------------
   775      -294        191.26250      1567.440
----------------------------------------------------
   776      -295        191.25630      1567.491
----------------------------------------------------

RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/14 


Tue Feb 13 15:40:30.389 UTC
Operational data for interface HundredGigECtrlr0/0/0/14:

State:
    Administrative state: enabled
    Operational state: Up
    LED state: Red On
    Maintenance: Disabled
    AINS Soak: None

Phy:
    Alarms:
        Current:
            Loss of Signal

Autonegotiation disabled.

Operational values:
    Speed: 100Gbps
    Duplex: Full Duplex
    Flowcontrol: None

RP/0/RP0/CPU0:ios# show controllers TenGigECtrlr0/0/0/1/* | inc LED 


Tue Oct 25:40:30.389 UTC
				LED state: Red On
				LED state: Green On
			 LED state: Green On
			 LED state: Green On

LED is Red when one or more 10G lanes in the 4x10G QSFP is administratively enabled and down even when certain lanes are administratively enabled and up. LED is Green when one or more 10G lanes in the 4x10G QSFP is administratively disabled and down while the remaining lanes are administratively enabled and up.

RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/1 pm current 15-min optics 1 


Mon Jan 28 07:15:43.828 IST

Optics in the current interval [07:15:00 - 07:15:44 Mon Jan 28 2019]

Optics current bucket type : Valid
             MIN       AVG       MAX      Operational      Configured      TCA   Operational      Configured     TCA
                                          Threshold(min)   Threshold(min) (min) Threshold(max)   Threshold(max) (max)
LBC[% ]      : 17.6      17.6      17.6     0.0               NA              NO   100.0            NA              NO
OPT[dBm]     : -0.86     -0.85     -0.85    -30.00            NA              NO   63.32            NA              NO
OPR[dBm]     : 0.53      0.53      0.54     -30.00            NA              NO   63.32            NA              NO

Last clearing of "show controllers OPTICS" counters never

RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13 pm current 15-min otn 


Tue Feb 13 15:43:00.173 UTC

g709 OTN in the current interval [15:30:00 - 15:43:00 Tue Feb 13 2001]

OTN current bucket type : Valid
    ES-NE   : 0         Threshold : 500      TCA(enable)  : YES
    ESR-NE  : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    SES-NE  : 0         Threshold : 500      TCA(enable)  : YES
    SESR-NE : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    UAS-NE  : 0         Threshold : 500      TCA(enable)  : YES
    BBE-NE  : 0         Threshold : 10000    TCA(enable)  : YES
    BBER-NE : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    FC-NE   : 0         Threshold : 10       TCA(enable)  : YES

    ES-FE   : 0         Threshold : 500      TCA(enable)  : YES
    ESR-FE  : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    SES-FE  : 0         Threshold : 500      TCA(enable)  : YES
    SESR-FE : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    UAS-FE  : 0         Threshold : 500      TCA(enable)  : YES
    BBE-FE  : 0         Threshold : 10000    TCA(enable)  : YES
    BBER-FE : 0.00000   Threshold : 0.00000  TCA(enable)  : NO
    FC-FE   : 0         Threshold : 10       TCA(enable)  : YES

Last clearing of "show controllers OTU" counters never

RP/0/RP0/CPU0:ios# show controllers coherentDSP 0/0/0/13 pm current 15-min fec 


Tue Feb 13 15:43:05.054 UTC

g709 FEC in the current interval [15:30:00 - 15:43:05 Tue Feb 13 2001]

FEC current bucket type : Valid
    EC-BITS   : 407265375460    Threshold : 903330         TCA(enable)  : YES
    UC-WORDS  : 0               Threshold : 5              TCA(enable)  : YES

Last clearing of "show controllers OTU" counters never

Note

The EC-BITS counter value increases continuously although the client traffic is not present.

The following example shows the details about the LLDP neighbor. These details are available from Release 6.0.1.

RP/0/RP0/CPU0:ios# show controllers FortyGigECtrlr 0/0/0/0 lldp-snoop 


Thu Apr 28 09:49:20.684 UTC
Capability codes:R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device
(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Other
         LLDP Neighbor Snoop Data               
Local Controller:     FortyGigECtrlr0/0/0/0
Source MAC Address:   0010.9400.0044
Chassis ID:           50.1.1.10
Port ID:              0010.9400.0044
Port Description:     Spirent Port ROSCO
System Name:          Spirent Test CenterROSCO1111111111111
System Description:   Spirent Test Center ddddddddddddd
Hold Time(TTL):       20 seconds
System Capabilities:  R
Enabled Capabilities: R
Management Address:
IPv4 address: 50.1.1.10
LLDP Packet Drop enabled: TRUE
RX LLDP Packet Count : 0

The following example shows the PM data for Ethernet controller in Release 6.0.1.

RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/3 pm current 15-min ether


Mon Jan 28 07:20:28.170 IST

ETHER in the current interval [07:15:00 - 07:20:29 Mon Jan 28 2019]

ETHER current bucket type : Valid
RX-UTIL[%]                : 2.90                 Threshold : 0.00         TCA(enable) : NO
TX-UTIL[%]                : 2.84                 Threshold : 0.00         TCA(enable) : NO
RX-PKT                    : 78662810             Threshold : 0            TCA(enable) : NO
STAT-PKT                  : 0                    Threshold : 0            TCA(enable) : NO
OCTET-STAT                : 117994199787         Threshold : 0            TCA(enable) : NO
OVERSIZE-PKT              : 0                    Threshold : 0            TCA(enable) : NO
FCS-ERR                   : 0                    Threshold : 0            TCA(enable) : NO
LONG-FRAME                : 0                    Threshold : 0            TCA(enable) : NO
JABBER-STATS              : 0                    Threshold : 0            TCA(enable) : NO
64-OCTET                  : 0                    Threshold : 0            TCA(enable) : NO
65-127-OCTET              : 0                    Threshold : 0            TCA(enable) : NO
128-255-OCTET             : 0                    Threshold : 0            TCA(enable) : NO
256-511-OCTET             : 0                    Threshold : 0            TCA(enable) : NO
512-1023-OCTET            : 0                    Threshold : 0            TCA(enable) : NO
1024-1518-OCTET           : 0                    Threshold : 0            TCA(enable) : NO
IN-UCAST                  : 78662799             Threshold : 0            TCA(enable) : NO
IN-MCAST                  : 11                   Threshold : 0            TCA(enable) : NO
IN-BCAST                  : 0                    Threshold : 0            TCA(enable) : NO
OUT-UCAST                 : 0                    Threshold : 0            TCA(enable) : NO
OUT-BCAST                 : 0                    Threshold : 0            TCA(enable) : NO
OUT-MCAST                 : 0                    Threshold : 0            TCA(enable) : NO
TX-PKT                    : 76889333             Threshold : 0            TCA(enable) : NO
OUT-OCTET                 : 115333999500         Threshold : 0            TCA(enable) : NO
IFIN-ERRORS               : 0                    Threshold : 0            TCA(enable) : NO
IFIN-OCTETS               : 0                    Threshold : 0            TCA(enable) : NO
STAT-MULTICAST-PKT        : 0                    Threshold : 0            TCA(enable) : NO
STAT-BROADCAST-PKT        : 0                    Threshold : 0            TCA(enable) : NO
STAT-UNDERSIZED-PKT       : 0                    Threshold : 0            TCA(enable) : NO
IN_GOOD_BYTES             : 117994199787         Threshold : 0            TCA(enable) : NO
IN_GOOD_PKTS              : 78662810             Threshold : 0            TCA(enable) : NO
IN_DROP_OTHER             : 0                    Threshold : 0            TCA(enable) : NO
IN_ERROR_FRAGMENTS        : 0                    Threshold : 0            TCA(enable) : NO
IN_PKT_64_OCTET           : 0                    Threshold : 0            TCA(enable) : NO
IN_PKTS_65_127_OCTETS     : 11                   Threshold : 0            TCA(enable) : NO
IN_PKTS_128_255_OCTETS    : 0                    Threshold : 0            TCA(enable) : NO
IN_PKTS_256_511_OCTETS    : 0                    Threshold : 0            TCA(enable) : NO
IN_PKTS_512_1023_OCTETS   : 0                    Threshold : 0            TCA(enable) : NO
IN_PKTS_1024_1518_OCTETS  : 78662799             Threshold : 0            TCA(enable) : NO
TX_UNDERSIZED_PKT         : 0                    Threshold : 0            TCA(enable) : NO
TX_OVERSIZED_PKT          : 0                    Threshold : 0            TCA(enable) : NO
TX_FRAGMENTS              : 0                    Threshold : 0            TCA(enable) : NO
TX_JABBER                 : 0                    Threshold : 0            TCA(enable) : NO
TX_BAD_FCS                : 0                    Threshold : 0            TCA(enable) : NO

Last clearing of "show controllers ETHERNET" counters never

The following example shows the cumulative statistics for the Ethernet controller in Release 6.0.1.

RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/24 stats


Wed Mar 23 06:43:30.450 UTC
Statistics for interface HundredGigECtrlr0/0/0/24 (cached values):

Ingress: 
    Input total bytes           = 4802100516736
    Input good bytes            = 4802100516736

    Input total packets         = 37516410287
    Input 802.1Q frames         = 0
    Input pause frames          = 0
    Input pkts 64 bytes         = 0
    Input pkts 65-127 bytes     = 0
    Input pkts 128-255 bytes    = 37516410287
    Input pkts 256-511 bytes    = 0
    Input pkts 512-1023 bytes   = 0
    Input pkts 1024-1518 bytes  = 0
    Input pkts 1519-Max bytes   = 0

    Input good pkts             = 37516410287
    Input unicast pkts          = 37516410287
    Input multicast pkts        = 0
    Input broadcast pkts        = 0

    Input drop overrun          = 0
    Input drop abort            = 0
    Input drop invalid VLAN     = 0
    Input drop invalid DMAC     = 0
    Input drop invalid encap    = 0
    Input drop other            = 0

    Input error giant           = 0
    Input error runt            = 0
    Input error jabbers         = 0
    Input error fragments       = 0
    Input error CRC             = 0
    Input error collisions      = 0
    Input error symbol          = 0
    Input error other           = 0

    Input MIB giant             = 0
    Input MIB jabber            = 0
    Input MIB CRC               = 0

Egress:
    Output total bytes          = 4802100500352
    Output good bytes           = 0

    Output total packets        = 37516410159
    Output 802.1Q frames        = 0
    Output pause frames         = 0
    Output pkts 64 bytes        = 0
    Output pkts 65-127 bytes    = 0
    Output pkts 128-255 bytes   = 0
    Output pkts 256-511 bytes   = 0
    Output pkts 512-1023 bytes  = 0
    Output pkts 1024-1518 bytes = 0
    Output pkts 1519-Max bytes  = 0

    Output good pkts            = 0
    Output unicast pkts         = 0
    Output multicast pkts       = 0
    Output broadcast pkts       = 0

    Output drop underrun        = 0
    Output drop abort           = 0
    Output drop other           = 0

    Output error other          = 0

The following example shows the output for the MACsec controller.

RP/0/RP0/CPU0:ios# show controllers maCSecCtrlr 0/0/0/4 


Mon Nov 14 12:08:24.391 IST

 Port:    MACSecCtrlr0/0/0/4

-------------------------------------

Interface Status

-------------------------------------
    Controller state       :  Up
    ReplayWindowSize       :  64
    MustSecure             :  TRUE

-------------------------------------

Encrypted Secure Channel Status

-------------------------------------
    ProtectionEnabled      :  TRUE
    SecureChannelID        :  0x4000000c8e22a04
    ConfidentialityOffset  :  0
    CipherSuite            :  GCM-AES-XPN-256
    MaxPacketNumber        :  18446744073709551615
    RecentPacketNumber     :  0

-------------------------------------

Encrypted Active Associations

-------------------------------------
    AssociationNumber      :  0
    ShortSecureChannelID   :  2


-------------------------------------

Decrypted Secure Channel Status

-------------------------------------
    ProtectionEnabled      :  TRUE
    SecureChannelID        :  0xb000000c8e22a04
    ConfidentialityOffset  :  0
    CipherSuite            :  GCM-AES-XPN-256
    MaxPacketNumber        :  18446744073709551615
    RecentPacketNumber     :  0

-------------------------------------

Decrypted Active Associations

-------------------------------------
    AssociationNumber      :  0
    ShortSecureChannelID   :  1

RP/0/RP0/CPU0:ios# show controllers maCSecCtrlr 0/0/0/11/1 summary 


Tue Jan  1 06:55:31.606 UTC

                                        |<------ Secure Channel Status ------>||<--Active     |
                  Replay                                                       |Associations->|
MACSecCtrlr Ctrlr Window Must           Secure             Recent
            State Size   Secure Channel Channel ID (SCI)   Packet number        AN  Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/11/1  Up    64     TRUE   Encrypt 0xb01901452ed9c6c  441617595            2   2
                                Decrypt 0x1901901452ed9c6c 441617450            2   1

The following examples show the wildcard character support for show controllers command.

RP/0/RP0/CPU0:ios# show controllers macSecCtrlr 0/0/0/* summary 

Sun Dec 18 14:28:10.826 IST

                                        |<------ Secure Channel Status ------>||<--Active     |
                  Replay                                                       |Associations->|
MACSecCtrlr Ctrlr Window Must           Secure             Recent
            State Size   Secure Channel Channel ID (SCI)   Packet number        AN  Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/3     Up    128    TRUE   2      Encrypt 0x300ccea3b562038  0                    3   2
                                       Decrypt 0x1100ccea3b562038 0                    3   1

0/0/0/4     Up    128    TRUE   2      Encrypt 0x400ccea3b562038  410472853057         3   2
                                       Decrypt 0x1200ccea3b562038 410472758788         3   1

0/0/0/17    Up    128    TRUE   2      Encrypt 0x1100ccea3b562038 0                    3   1
                                       Decrypt 0x300ccea3b562038  0                    3   2

0/0/0/18    Up    128    TRUE   2      Encrypt 0x1200ccea3b562038 410472653944         3   1
                                       Decrypt 0x400ccea3b562038  410472728753         3   2

RP/0/RP0/CPU0:ios# show controllers macSecCtrlr 0/0/0/11/* summary

This command displays the details of all the four sub-controllers of 0/0/0/11 port. 


Sun Dec 18 10:10:03.929 IST

                                        |<------ Secure Channel Status ------>||<--Active     |
                  Replay                                                       |Associations->|
MACSecCtrlr Ctrlr Window Must           Secure             Recent
            State Size   Secure Channel Channel ID (SCI)   Packet number        AN  Short SCI
----------- ----- ------ ------ ------- ------------------ -------------------- --- -----------
0/0/0/11/1  Up    64     TRUE   2      Encrypt 0xb01901452ed9c6c  10776298219          0   2
                                       Decrypt 0x1901901452ed9c6c 10776374039          0   1

0/0/0/11/2  Up    64     TRUE   2      Encrypt 0xb02901452ed9c6c  10776295022          0   2
                                       Decrypt 0x1902901452ed9c6c 10776370709          0   1

0/0/0/11/3  Up    64     TRUE   2      Encrypt 0xb03901452ed9c6c  578387113115         0   2
                                       Decrypt 0x1903901452ed9c6c 10776367512          0   1

0/0/0/11/4  Up    64     TRUE   2      Encrypt 0xb04901452ed9c6c  10776302725          0   2
                                       Decrypt 0x1904901452ed9c6c 10776364171          0   1

The wildcard character support is provided for clear controller command as well. For example, clear controller macSecCtrlr 0/0/0/* stats.

Examples

ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 30-sec macsec-secy-if

Displays the current performance monitoring parameters of the controller in macsec-secy-if mode in 30 sec intervals.

Macsec-Secy-If in the current interval [10:18:30 - 10:18:57 Sat Apr 22 2017]
Macsec-Secy-If current bucket type : Valid
InPktsUntagged     : 0                    Threshold : 0          TCA(enable) : NO
InPktsNoTag        : 0                    Threshold : 0          TCA(enable) : NO
InPktsBadTag       : 0                    Threshold : 0          TCA(enable) : NO
InPktsUnknownSCI   : 0                    Threshold : 0          TCA(enable) : NO
InPktsNoSCI        : 0                    Threshold : 0          TCA(enable) : NO
InPktsOverrun      : 0                    Threshold : 0          TCA(enable) : NO
InOctetsValidated  : 0                    Threshold : 0          TCA(enable) : NO
InOctetsDecrypted  : 321909392            Threshold : 0          TCA(enable) : NO
OutPktsUntagged    : 0                    Threshold : 0          TCA(enable) : NO
OutPktsTooLong     : 0                    Threshold : 0          TCA(enable) : NO
OutOctetsProtected : 0                    Threshold : 0          TCA(enable) : NO
OutOctetsEncrypted : 415501264            Threshold : 0          TCA(enable) : NO

ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 15-min macsec-secy-if

Displays the current performance monitoring parameters of the controller in macsec-secy-if mode in 15 minute intervals.

RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 15-min macsec-secy-if
Sat Apr 22 10:18:40.743 UTC
Macsec-Secy-If in the current interval [10:15:00 - 10:18:40 Sat Apr 22 2017]
Macsec-Secy-If current bucket type : Valid
 InPktsUntagged     : 0                    Threshold : 0          TCA(enable) : NO
 InPktsNoTag        : 0                    Threshold : 0          TCA(enable) : NO
 InPktsBadTag       : 0                    Threshold : 0          TCA(enable) : NO
 InPktsUnknownSCI   : 0                    Threshold : 0          TCA(enable) : NO
 InPktsNoSCI        : 0                    Threshold : 0          TCA(enable) : NO
 InPktsOverrun      : 0                    Threshold : 0          TCA(enable) : NO
 InOctetsValidated  : 0                    Threshold : 0          TCA(enable) : NO
 InOctetsDecrypted  : 2541082096           Threshold : 0          TCA(enable) : NO
 OutPktsUntagged    : 0                    Threshold : 0          TCA(enable) : NO
 OutPktsTooLong     : 0                    Threshold : 0          TCA(enable) : NO
 OutOctetsProtected : 0                    Threshold : 0          TCA(enable) : NO
 OutOctetsEncrypted : 3279875344           Threshold : 0          TCA(enable) : NO

ios#show controllers macSecCtrlr 0/0/0/16/2 pm current 30-sec  macsec-secy-tx

Displays the current performance monitoring parameters of the controller in macsec-secy-tx mode in 30 minute intervals.


Macsec-Secy-Tx in the current interval [10:18:30 - 10:18:59 Sat Apr 22 2017]
Macsec-Secy-Tx current bucket type : Valid
OutPktsProtected   : 0                    Threshold : 0          TCA(enable) : NO
OutPktsEncrypted   : 286527               Threshold : 0          TCA(enable) : NO
OutOctetsProtected : 0                    Threshold : 0          TCA(enable) : NO
OutOctetsEncrypted : 430363554            Threshold : 0          TCA(enable) : NO
OutPktsTooLong     : 0                    Threshold : 0          TCA(enable) : NO

Displays the current performance monitoring parameters of the controller in macsec-secy-tx mode in 24-hour interval.

RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/24/3 pm current 24-hour macsec-secy-tx
Sat Apr  1 15:38:30.158 IST
Macsec-Secy-Tx in the current interval [00:00:00 - 15:38:30 Sat Apr 1 2017]
Macsec-Secy-Tx current bucket type : Valid
OutPktsProtected   : 0                    Threshold : 0          TCA(enable) : NO
OutPktsEncrypted   : 3160983513           Threshold : 0          TCA(enable) : NO
OutOctetsProtected : 0                    Threshold : 0          TCA(enable) : NO
OutOctetsEncrypted : 31559259393792       Threshold : 0          TCA(enable) : NO
OutPktsTooLong     : 0                    Threshold : 0          TCA(enable) : NO

Displays the current performance monitoring parameters of the controller in macsec-secy-rx mode in 24-hour interval.

RP/0/RP0/CPU0:ios#show controllers macSecCtrlr 0/0/0/10/3 pm current 24-hour macsec-secy-rx
Sat Apr  1 15:38:00.820 IST
Macsec-Secy-Rx in the current interval [00:00:00 - 15:38:01 Sat Apr 1 2017]
Macsec-Secy-Rx current bucket type : Valid
InPktsUnchecked   : 0                    Threshold : 0          TCA(enable) : NO
InPktsDelayed     : 0                    Threshold : 0          TCA(enable) : NO
InPktsLate        : 0                    Threshold : 0          TCA(enable) : NO
InPktsInvalid     : 0                    Threshold : 0          TCA(enable) : NO
InPktsOK          : 3159299558           Threshold : 0          TCA(enable) : NO
InPktsNotValid    : 0                    Threshold : 0          TCA(enable) : NO
InPktsNotUsingSA  : 0                    Threshold : 0          TCA(enable) : NO
InPktsUnusedSA    : 0                    Threshold : 0          TCA(enable) : NO
InPktsUntaggedHit : 0                    Threshold : 0          TCA(enable) : NO
InOctetsValidated : 0                    Threshold : 0          TCA(enable) : NO
InOctetsDecrypted : 31542446787072       Threshold : 0          TCA(enable) : NO

RP/0/RP0/CPU0:ios# show controllers hundredGigECtrlr 0/0/0/4

This example displays the Ethernet controller statistics with AINS Soak in Running state.


Fri Apr 27 02:49:45.858 UTC
Operational data for interface HundredGigECtrlr0/0/0/4:
State:
    Administrative state: enabled
    Operational state: Up
    LED state: Green On
    Maintenance: Disabled
    AINS Soak: Running 
      Total Duration: 0 hour(s) 30 minute(s)
      Remaining Duration: 0 hour(s) 29 minute(s) 50 second(s)
    Laser Squelch: Disabled

RP/0/RP0/CPU0:ios# show controllers optics 0/0/0/2

This example displays the Optics controller statistics with AINS Soak in Running state.


Fri Jun  8 18:33:46.027 IST

Controller State: Up

Transport Admin State: Automatic In Service

Laser State: On

LED State: Green

Optics Status

         Optics Type:  100G QSFP28 LR4

         Alarm Status:
         -------------
         Detected Alarms: None


         LOS/LOL/Fault Status:

         Alarm Statistics:

         -------------
         HIGH-RX-PWR = 0            LOW-RX-PWR = 0
         HIGH-TX-PWR = 0            LOW-TX-PWR = 0
         HIGH-LBC = 0               HIGH-DGD = 0
         OOR-CD = 0                 OSNR = 0
         WVL-OOL = 0                MEA  = 0
         IMPROPER-REM = 0
         TX-POWER-PROV-MISMATCH = 0

         Performance Monitoring: Enable

         THRESHOLD VALUES
         ----------------

         Parameter                 High Alarm  Low Alarm  High Warning  Low Warning
         ------------------------  ----------  ---------  ------------  -----------
         Rx Power Threshold(dBm)          4.9      -12.0           0.0          0.0
         Tx Power Threshold(dBm)          3.5      -10.1           0.0          0.0
         LBC Threshold(mA)                N/A        N/A          0.00         0.00

         LBC High Threshold = 98 %
         Polarization parameters not supported by optics

        Total TX Power = 7.94 dBm

        Total RX Power = 7.76 dBm

         Lane  Laser Bias    TX Power    RX Power  Output Frequency
         ----  ----------  ----------  ----------  ----------------
           1      28.3 %    1.91 dBm    1.30 dBm  231.39 THz
           2      27.8 %    1.83 dBm    1.05 dBm  230.59 THz
           3      28.2 %    1.93 dBm    2.14 dBm  229.79 THz
           4      27.3 %    2.00 dBm    2.32 dBm  228.99 THz

Transceiver Vendor Details

         Form Factor            : QSFP28
         Name                   : CISCO-FINISAR
         Part Number            : 10-3146-01
         Rev Number             : B
         Serial Number          : FNS20401P4J
         PID                    : QSFP-100G-LR4-S
         VID                    : V01
         Date Code(yy/mm/dd)    : 16/10/01
         Fiber Connector Type: LC
         Otn Application Code: Undefined
         Sonet Application Code: Undefined
         Ethernet Compliance Code: 100GBASE-LR4

Transceiver Temperature : 25 Celsius



AINS Soak                : Running
AINS Timer               : 0h, 30m
AINS remaining time      : 1791 seconds

RP/0/RP0/CPU0:ios#show controllers hundredGigECtrlr 0/0/0/4

This example enables to view the hold off timer configured over 100G client ports.


Mon Jun 11 21:14:37.612 IST
Operational data for interface HundredGigECtrlr0/0/0/4:

State:
    Administrative state: enabled
    Operational state: Up
    LED state: Green On
    Maintenance: Disabled
    AINS Soak: None
      Total Duration: 0 hour(s) 0 minute(s)
      Remaining Duration: 0 hour(s) 0 minute(s) 0 second(s)
    Laser Squelch: Disabled

Phy:
    Media type: Not known

Autonegotiation disabled.

Operational values:
    Speed: 100Gbps
    Duplex: Full Duplex
    Flowcontrol: None
    Loopback: None (or external)
    BER monitoring:
        Not supported
    Holdoff Time: 3000ms

show environment

To display environmental monitor parameters for the system, use the show environment command in administration EXEC mode.

show environment [ all | fan | power | voltages | current | trace | temperatures ] [ location | location ]

Syntax Description

all

(Optional) Displays information for all the environmental monitor parameters.

fan

(Optional) Displays information about the fans.

power

(Optional) Displays power supply voltage and current information.

voltages

(Optional) Displays system voltage information.

current

(Optional) Displays current sensor information.

temperatures

(Optional) Displays system temperature information.

trace

(Optional) Displays trace data for environment monitoring.

location | location

(Optional) Enter the location for which the environmental information needs to be displayed.

Command Default

All environmental monitor parameters are displayed.

Command Modes

Administration EXEC

Command History

Release Modification
Release 6.0.0

This command was introduced.

Usage Guidelines

The show environment command displays information about the hardware that is installed in the system, including fans, power supply voltage, current information, and temperatures.

Task ID

Task ID Operation

system

read

Examples

The following example shows sample output from the show environment command with the fan keyword.

sysadmin-vm:0_RP0# show environment fan 


Thu Nov  12 02:39:46.390 UTC
=====================================
                        Fan speed (rpm)
Location     FRU Type           FAN_0
-------------------------------------
0/FT0        NCS1K-FTA           4800
0/FT1        NCS1K-FTA           4800
0/FT2        NCS1K-FTA           4920

0/PM1        NCS1K-2KW-AC        9152

The following example shows sample output from the show environment command with the temperatures keyword.

sysadmin-vm:0_RP0# show environment temperatures location 0/RP0 


Tue Feb  27 10:32:38.967 UTC
================================================================================
Location  					TEMPERATURE             Value   Crit Major Minor Minor Major  Crit
           					Sensor         								(deg C)   (Lo) (Lo)  (Lo)  (Hi)  (Hi)   (Hi)
--------------------------------------------------------------------------------
0/RP0
              Thermistor 1              27    -10     0     0    55    55    85
              Thermistor 2              28    -10     0     0    55    55    85
             Hot Spot Temperature       26    -10     0     0    55    55    85

The following example shows sample output from the show environment command with the power keyword.

sysadmin-vm:0_RP0# show environment power 


Thu Nov  12 02:42:40.177 UTC
================================================================================
CHASSIS LEVEL POWER INFO: 0
================================================================================
   Total output power capacity (Group 0 + Group 1) :       2000W +    2000W
   Total output power required                     :     975W    
// Total power required by NCS 1002 for the current configuration
   Total power input                               :     888W    
// Total power currently entering both the NCS 1002 power Modules
   Total power output                              :     818W    
// Total power supplied to the NCS 1002 components by both the power modules 

Power Group 1:
================================================================================
   Power       Supply     ------Input----   ------Output---      Status
   Module      Type        Volts     Amps    Volts     Amps
================================================================================
   0/PM1       2kW-AC      211.0      2.2     12.0     35.9       OK

Total of Power Group 0:        424W/  2.0A       387W/ 32.0A  
// 424W/2.0A is the power/current input to PM0 module from power supply and 387W/32.0A is the power/current output supplied by PM0 module to NCS 1002 components

Total of Power Group 1:        464W/  2.2A       431W/ 35.9A
// 464W/2.2A is the power/current input to PM1 module from power supply and 431W/35.9A is the power/current output supplied by PM1 module to NCS 1002 components

// 424W(PM0 input) + 464W (PM1 input)= 888W (Total power input)
// 387W (PM0 output) + 431W (PM1 output)= 818W (Total power output)

================================================================================
   Location     Card Type            Power       Power       Status
                                     Allocated   Used
                                     Watts       Watts
================================================================================
   0/0          NCS1002                 70           -       RESERVED
   0/RP0        NCS1K-CNTLR-K9          35           -       ON
   0/FT0        NCS1K-FTA               40           -       ON
   0/FT1        NCS1K-FTA               40           -       ON
   0/FT2        NCS1K-FTA               40           -       ON

The following example shows sample output from the show environment command with the voltages keyword.

sysadmin-vm:0_RP0# show environment voltages location 0/RP0 


Thu Nov  12 02:45:49.213 UTC
================================================================================
Location  VOLTAGE                     Value   Crit Minor Minor  Crit
          Sensor                      (mV)    (Lo) (Lo)  (Hi)   (Hi)
--------------------------------------------------------------------------------
0/RP0
          VP1P0_CPU                     996    900   950  1050  1100
          CPU_CORE_VCC                  889    400   450  1350  1400
          CPU_CORE_VNN                  979    400   450  1350  1400
          VP1P1                        1067    990  1050  1160  1210
          VP1P2                        1194   1080  1140  1260  1320
          VP1P35_DDR                   1344   1220  1280  1420  1490
          VP1P35                       1338   1220  1280  1420  1490
          VP1P5                        1495   1350  1430  1580  1650
          VP1P8_CPU                    1793   1620  1710  1890  1980
          VP3P3_STBY                   3305   2970  3140  3470  3630
          VP3P3                        3334   2970  3140  3470  3630
          VP5P0                        4936   4500  4750  5250  5500
          VP12P0                      11897  10800 11400 12600 13200
          VREF                         1216   1190  1200  1240  1250
          12V Input Voltage           11178   8000 10000 14000 16000

show hw-module

To display the details of the slice and the Field Programmable Devices (FPDs), use the show hw-module in XR EXEC or administration EXEC mode.

show hw-module { slice [ slicenumber | all ] | fpd}

Syntax Description

slice slicenumber

Displays information for a slice. The slice number is from 0 to 3.

all

Displays information for all the slices.

fpd

Displays the status of FPDs installed.

Command Default

None

Command Modes

XR EXEC

Administration EXEC

Command History

Release Modification

Release 6.0.0

This command was introduced.

Release 6.0.1

The output of show hw-module fpd and show hw-module slice were updated.

Release 6.1.1

The output of show hw-module slice was updated.

Release 6.1.2

The output of show hw-module slice was updated.

Release 6.3.1

The output of show hw-module slice was updated.

Usage Guidelines

If the ISO image has new version of FPD, the Status column in show hw-module fpd command shows NEED UPGD. If the upgrade is required, use the upgrade hw-module location all fpd fpd_device_name command to start the upgrade. When the upgrade starts, the Status column in show hw-module fpd command sequentially shows UPGD PREP, UPGRADING, and the percentage of upgrade completion. After the upgrade is completed, the Status column shows RLOAD REQ if the ISO image requires reload; otherwise the Status column shows CURRENT.

If reload is required:

If the FPGA location is 0/RP0, use the admin hw-module location 0/RP0 reload command. This command reboots only the CPU. Hence, the traffic is not impacted. If the FPGA location is 0/0, use the admin hw-module location all reload command. This command reboots NCS 1002. Hence, the traffic is impacted. After the reload is completed, the new FPGA runs the current version.

The show hw-module slice slicenumber command displays the state of current slice provisioning, client and trunk bit rate, traffic split between coherent DSPs, and version of data path FPGA. If the HW status field displays NEED UPGD, use the upgrade hw-module slice slicenumber re-provision command. The Encryption Supported field indicates whether the slice is provisioned with firmware that supports encryption or not.

Task ID

Task ID Operation

system

read

Examples

You can use the show hw-module slice slicenumber command to check if the upgrade is required after the software is installed.

RP/0/RP0/CPU0:ios# show hw-module slice 0 


RP/0/RP0/CPU0:ios#show hw-module slice 0
Thu Sep 22 10:55:35.985 UTC
Slice ID:                0
Status:                  Provisioned
Client Bitrate:          40
Trunk Bitrate:           200
DP FPGA FW Type:         XMG4
DP FPGA FW Version:      01.01
HW Status:               CURRENT
Encryption Supported:    FALSE
LLDP Drop Enable: TRUE
Client Port -   Trunk Port          CoherentDSP0/0/0/6
Traffic Split Percentage
FortyGigECtrlr0/0/0/0                            100
FortyGigECtrlr0/0/0/1                            100
FortyGigECtrlr0/0/0/2                            100
FortyGigECtrlr0/0/0/3                            100
FortyGigECtrlr0/0/0/4                            100

RP/0/RP0/CPU0:ios# show hw-module slice 2

Slice ID:                2
Status:                  Provisioned
Client Bitrate:          10,100
Trunk Bitrate:           200
DP FPGA FW Type:         RMM
DP FPGA FW Version:      04.00
HW Status:               CURRENT

Encryption Supported:    FALSE
LLDP Drop Enabled:       FALSE
Client Port -   Trunk Port          CoherentDSP0/0/0/19  CoherentDSP0/0/0/20
Traffic Split Percentage

HundredGigECtrlr0/0/0/14                         100                   0
HundredGigECtrlr0/0/0/15                         100                   0
HundredGigECtrlr0/0/0/16                           0                 100
TenGigECtrlr0/0/0/17/1                             0                 100
TenGigECtrlr0/0/0/17/2                             0                 100
TenGigECtrlr0/0/0/17/3                             0                 100
TenGigECtrlr0/0/0/17/4                             0                 100
TenGigECtrlr0/0/0/18/1                             0                 100
TenGigECtrlr0/0/0/18/2                             0                 100
TenGigECtrlr0/0/0/18/3                             0                 100
TenGigECtrlr0/0/0/18/4                             0                 100

RP/0/RP0/CPU0:ios# show hw-module slice all 


Thu Aug 11 16:16:58.935 IST
Slice ID:                0
Status:                  Provisioned
Client Bitrate:          100
Trunk Bitrate:           200
DP FPGA FW Type:         M100
DP FPGA FW Version:      02.00
HW Status:               CURRENT

Encryption Supported:    TRUE
Client Port -   Trunk Port          CoherentDSP0/0/0/6
Traffic Split Percentage

HundredGigECtrlr0/0/0/3                    100
HundredGigECtrlr0/0/0/4                    100

Slice ID:                1
Status:                  Provisioned
Client Bitrate:          100
Trunk Bitrate:           200
DP FPGA FW Type:         M100
DP FPGA FW Version:      02.00
HW Status:               CURRENT

Encryption Supported:    TRUE
Client Port -   Trunk Port          CoherentDSP0/0/0/13
Traffic Split Percentage

HundredGigECtrlr0/0/0/10                    100
HundredGigECtrlr0/0/0/11                    100

Slice ID:                2
Status:                  Provisioned
Client Bitrate:          100
Trunk Bitrate:           200
DP FPGA FW Type:         M100
DP FPGA FW Version:      02.00
HW Status:               CURRENT

Encryption Supported:    TRUE
Client Port -   Trunk Port          CoherentDSP0/0/0/20
Traffic Split Percentage

HundredGigECtrlr0/0/0/17                   100
HundredGigECtrlr0/0/0/18                   100

Slice ID:                3
Status:                  Provisioned
Client Bitrate:          100
Trunk Bitrate:           200
DP FPGA FW Type:         M100
DP FPGA FW Version:      02.00
HW Status:               CURRENT

Encryption Supported:    TRUE
Client Port -   Trunk Port          CoherentDSP0/0/0/27
Traffic Split Percentage

HundredGigECtrlr0/0/0/24                   100
HundredGigECtrlr0/0/0/25                   100

RP/0/RP0/CPU0:ios# show hw-module fpd 


Tue Apr 12 09:04:14.935 UTC
FPD Versions
=================
Location Card type 														HWver FPD device ATR Status 				Running Programd
------------------------------------------------------------------------------
0/0     NCS1002 																		2.4 CDSP_PORT_05        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.4 CDSP_PORT_06        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.4 CDSP_PORT_12        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.3 CDSP_PORT_13        NEED UPGD 	3.55 3.55
0/0     NCS1002 																		2.4 CDSP_PORT_19        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.4 CDSP_PORT_20        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.4 CDSP_PORT_26        CURRENT 			3.56 3.56 
0/0     NCS1002 																		2.4 CDSP_PORT_27        CURRENT 			3.56 3.56 
0/0     NCS1002     																		CFP2_PORT_05        NOT READY 
0/0     NCS1002 																		2.0 CFP2_PORT_06        CURRENT 			4.38 4.38 
0/0     NCS1002     																		CFP2_PORT_12        NOT READY 
0/0     NCS1002     																		CFP2_PORT_13        NOT READY 
0/0     NCS1002     																		CFP2_PORT_19        NOT READY 
0/0     NCS1002 																		2.1 CFP2_PORT_20        CURRENT 			5.19 5.19 
0/0     NCS1002     																		CFP2_PORT_26        NOT READY 
0/0     NCS1002     																		CFP2_PORT_27        NOT READY 
0/0     NCS1002 																		0.1 CTRL_BKP_LOW  B     CURRENT 			1.22 
0/0     NCS1002 																		0.1 CTRL_BKP_UP   B     CURRENT 			1.22 
0/0     NCS1002 																		0.1 CTRL_FPGA_LOW       CURRENT 			1.22 1.22 
0/0     NCS1002 																		0.1 CTRL_FPGA_UP        CURRENT 			1.22 1.22 
0/RP0 NCS1K-CNTLR-K9 													0.1 BIOS_Backup   BS 			CURRENT 			13.10 
0/RP0 NCS1K-CNTLR-K9 													0.1 BIOS_Primary   S 			CURRENT 			13.10 13.10 
0/RP0 NCS1K-CNTLR-K9 													0.1 Daisy_Duke_BKP BS 		CURRENT 			0.15 
0/RP0 NCS1K-CNTLR-K9 													0.1 Daisy_Duke_FPGA S 		CURRENT 			0.15 0.15

sysadmin-vm:0_RP0# show hw-module fpd 


Tue Apr 12 09:28:22.879 UTC
FPD Versions
===============
Location Card type      HWver   FPD device       ATR    Status      Run Programd
-------------------------------------------------------------------------------
0/0     NCS1002         0.1     CTRL_BKP_LOW      B    CURRENT      1.22 
0/0     NCS1002         0.1     CTRL_BKP_UP       B    CURRENT      1.22 
0/0     NCS1002         0.1     CTRL_FPGA_LOW          CURRENT      1.22 1.22 
0/0     NCS1002         0.1     CTRL_FPGA_UP           CURRENT      1.22 1.22 
0/RP0   NCS1K-CNTLR-K9  0.1     BIOS_Backup       BS   CURRENT      13.10 
0/RP0   NCS1K-CNTLR-K9  0.1     BIOS_Primary      S    CURRENT      13.10 13.10 
0/RP0   NCS1K-CNTLR-K9  0.1     Daisy_Duke_BKP    BS   CURRENT      0.15 
0/RP0   NCS1K-CNTLR-K9  0.1     Daisy_Duke_FPGA   S    CURRENT      0.15 0.15 
0/PM0   NCS1K-2KW-AC    0.0     PO-PriMCU              NEED UPGD    0.00 0.00 
0/PM1   NCS1K-2KW-AC    0.0     PO-PriMCU              NEED UPGD    0.00 0.00

show inventory

To retrieve and display the physical inventory information, use the show inventory command in XR EXEC or administration EXEC mode.

XR EXEC Mode

show inventory [ all | oid | raw | location location ]

Administration EXEC Mode

show inventory [ all | chassis | fan | power | raw | location location ]

Syntax Description

all

(Optional) Displays inventory information for all the physical entities.

fan

(Optional) Displays inventory information for the fans.

power

(Optional) Displays inventory information for the power supply.

raw

(Optional) Displays raw information about the chassis for diagnostic purposes.

chassis

(Optional) Displays inventory information for the entire chassis.

location location

(Optional) Displays inventory information for a specific node, or for all nodes in the chassis.

oid

(Optional) Displays inventory information along with oid.

Command Default

All hardware inventory information is displayed.

Command Modes

XR EXEC

Administration EXEC

Command History

Release Modification
Release 6.0.0

This command was introduced.

Release 6.0.1

The output was updated to include 40G pluggables.

Release 6.5.1

The output was updated to include QSA vendor details.

Usage Guidelines

Enter the show inventory command with the raw keyword to display every RFC 2737 entity installed in NCS 1002, including those without a PID, unique device identifier (UDI), or other physical identification. The raw keyword is primarily intended for troubleshooting problems with the show inventory command itself.

Task ID

Task ID Operations

system

read

Examples

The following examples show sample output from the show inventory command in both EXEC and Administration EXEC modes.

The output of show inventory command does not include the details of breakout patch panel.

sysadmin-vm:0_RP0# show inventory 


Tue Feb 13 15:27:30.159 UTC
NAME: "0/0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1002           , VID: V01, SN: CHANGE-ME-

NAME: "0/0-PORT-6", DESCR: "Cisco 100GE CFP2 Pluggable Optics"
PID: ONS-CFP2-WDM      , VID: N/A, SN: OUK1936005W

NAME: "0/0-PORT-11", DESCR: "Cisco  40G QSFP+ CSR4 Pluggable Optics Module"
PID: QSFP-40G-CSR4     , VID: V02 , SN: AVP1834S18A

NAME: "0/0-PORT-14", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S   , VID: ES1 , SN: AVF1933G116

NAME: "0/0-PORT-16", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S   , VID: ES1 , SN: AVF1933G16A

NAME: "0/0-PORT-18", DESCR: "Cisco 100G QSFP28 SR4 Pluggable Optics Module"
PID: QSFP-100G-SR4-S   , VID: ES1 , SN: AVF1934G04U

NAME: "0/0-PORT-21", DESCR: "Cisco QSFP-100G-LR4-S Pluggable Optics Module"
PID: QSFP-100G-LR4-S   , VID: V01 , SN: ECL19250052

NAME: "0/RP0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1002--RP       , VID: V01, SN: CHANGE-ME-

NAME: "0/FT0", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A
NAME: "0/FT1", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A

NAME: "0/FT2", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A

RP/0/RP0/CPU0:ios# show inventory 


Fri May 18 10:46:51.323 UTC
NAME: "0/0", DESCR: "Network Convergence System 1002 20 QSFP28/QSFP+ slots"
PID: NCS1002-K9        , VID: V03, SN: CAT2116B170

NAME: "0/0-Optics0/0/0/1", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: SPQCELRCDFB       , VID: 01 , SN: G9I2011804      

NAME: "0/0-Optics0/0/0/4", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: TR-FC13L-N00      , VID: 01 , SN: INGAJ0930306    

NAME: "0/0-Optics0/0/0/6", DESCR: "Cisco CFP2 DWDM Pluggable Optics"
PID: ONS-CFP2-WDM      , VID: V01 , SN: OUK1936006S

NAME: "0/0-Optics0/0/0/7", DESCR: "Cisco 4x10GE QSFP+ LR-S Pluggable Optics Module"
PID: QSFP-4X10G-LR-S   , VID: V02 , SN: INL20410069     

NAME: "0/0-Optics0/0/0/8-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR        , VID: V01 , SN: SPC1907074N     
          
NAME: "0/0-Optics0/0/0/9", DESCR: "Cisco 40GE QSFP+ SR4 Pluggable Optics Module"
PID: QSFP-40G-SR4      , VID: V03 , SN: JFQ20332088     
          
NAME: "0/0-Optics0/0/0/10", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: SPQCELRCDFB       , VID: 01 , SN: GAV2008935      
          
NAME: "0/0-Optics0/0/0/11-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR        , VID: V01 , SN: SPC190707YP     
          
NAME: "0/0-Optics0/0/0/8-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR        , VID: V01 , SN: SPC1907074R     
          
NAME: "0/0-Optics0/0/0/18", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: FTLC1151RDPL      , VID: A0 , SN: UVE1C6C         
          
NAME: "0/0-Optics0/0/0/19", DESCR: "Cisco CFP2 DWDM Pluggable Optics"
PID: ONS-CFP2-WDM      , VID: V05 , SN: OVE204404PA
          
NAME: "0/0-Optics0/0/0/21", DESCR: "Cisco 4x10GE QSFP+ LR-S Pluggable Optics Module"
PID: QSFP-4x10G-LR-S   , VID: V01 , SN: INL20200012     
          
NAME: "0/0-Optics0/0/0/22-LANE1", DESCR: "Cisco 10G SFP LR Pluggable Optics Module"
PID: SFP-10G-LR        , VID: V01 , SN: SPC190707YS     
          
NAME: "0/0-Optics0/0/0/23", DESCR: "Cisco 40GE QSFP+ SR4 Pluggable Optics Module"
PID: QSFP-40G-SR4      , VID: V03 , SN: JFQ2033201H     
          
NAME: "0/0-Optics0/0/0/24", DESCR: "Non-Cisco QSFP28 100G LR4 Pluggable Optics Module"
PID: FTLC1151RDPL      , VID: A0 , SN: UWD2QMM         
          
NAME: "0/0-Optics0/0/0/25-LANE1", DESCR: "Cisco 10G SFP ER Pluggable Optics Module"
PID: SFP-10G-ER        , VID: V02 , SN: ONT213100BW     
          
NAME: "0/RP0", DESCR: "Network Convergence System 1000 Controller"
PID: NCS1K-CNTLR       , VID: V04, SN: CAT2052B0FZ
          
NAME: "Rack 0", DESCR: "Network Convergence System 1002 20 QSFP28/QSFP+ slots"
PID: NCS1002-K9        , VID: V03, SN: CAT2116B170
          
NAME: "0/FT0", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A        
          
NAME: "0/FT1", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A        
          
NAME: "0/FT2", DESCR: "Network Convergence System 1000 Fan"
PID: NCS1K-FTA         , VID: V01, SN: N/A        
          
NAME: "0/PM0", DESCR: "Network Convergence System 1000 2KW AC PSU"
PID: NCS1K-2KW-AC      , VID: V01, SN: POG2041J0BW
          
NAME: "0/PM1", DESCR: "Network Convergence System 1000 2KW AC PSU"
PID: NCS1K-2KW-AC      , VID: V01, SN: POG2041J01C

show access-lists ipv4

To display the contents of current IPv4 access lists, use the show access-lists ipv4 command in EXEC mode.

show access-lists ipv4 [ interface MgmtEth R/S/I/P | maximum [ detail] | summary [ access-list-name ] | usage pfilter location { location node-id | all } | access-list-name [ sequence-number | usage pfilter location { location node-id | all } ] ]

Syntax Description

R/S/I/P Rack/Slot/Instance/Port/ number of the interface.
access-list-name

(Optional) Name of a particular IPv4 access list. The name cannot contain a space or quotation mark; it may contain numbers.

location number

Location of a particular IPv4 access list.
locationnode-id

(Optional) Location of a particular IPv4 access list. The node-id argument is entered in the rack/slot/module notation.
usage

(Optional) Displays the usage of the access list on a given line card.
pfilter

(Optional) Displays the packet filtering usage for the specified line card.

summary

Displays a summary of all current IPv4 access lists.

sequence-number

(Optional) Sequence number of a particular IPv4 access list.

maximum

Displays the current maximum number of configurable IPv4 accesscontrol lists (ACLs) and access control entries (ACEs).

detail

(Optional) Displays complete out-of-resource (OOR) details.

all

(Optional) Displays the location of all the line cards.

Command Default

Displays all IPv4 access lists.

Command Modes

EXEC

Command History

Release Modification
Release 6.3.2

This command is introduced.

Usage Guidelines

Use the show access-lists ipv4 command to display the contents of all IPv4 access lists. To display the contents of a specific IPv4 access list, use the name argument. Use the sequence-number argument to specify the sequence number of the access list.

Use the show access-lists ipv4 summary command to display a summary of all current IPv4 access lists. To display a summary of a specific IPv4 access list, use the name argument.

Use the show access-lists ipv4 maximum detail command to display the OOR details for IPv4 access lists. OOR limits the number of ACLs and ACEs that can be configured in the system. When the limit is reached, configuration of new ACLs or ACEs is rejected.

Examples

In the following example, the contents of all IPv4 access lists are displayed:

RP/0/RP0/CPU0:ios# show access-lists ipv4


RP/0/RP0/CPU0:ios#sh access-lists ipv4
Wed Jan 17 09:52:12.448 IST
ipv4 access-list IPV4_ICMP_DENY
10 deny icmp any any (8 matches)
20 permit ipv4 any any (106 matches)
ipv4 access-list IPV4_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet (3 matches)
20 permit ipv4 any any (6 matches)

show access-lists ipv6

To display the contents of current IPv6 access lists, use the show access-lists ipv6 command in EXEC mode.

show access-lists ipv6 [ interface MgmtEth R/S/I/P | maximum [ detail] | summary [ access-list-name ] | usage pfilter location { location node-id | all } | access-list-name [ sequence-number | usage pfilter location { location node-id | all } ] ]

Syntax Description

R/S/I/P Rack/Slot/Instance/Port/ number of the interface.
access-list-name

(Optional) Name of a particular IPv4 access list. The name cannot contain a space or quotation mark; it may contain numbers.

location number

Location of a particular IPv4 access list.
location node-id

(Optional) Location of a particular IPv4 access list. The node-id argument is entered in the rack/slot/module notation.
usage

(Optional) Displays the usage of the access list on a given line card.
pfilter

(Optional) Displays the packet filtering usage for the specified line card.

summary

Displays a summary of all current IPv4 access lists.

sequence-number

(Optional) Sequence number of a particular IPv4 access list.

maximum

Displays the current maximum number of configurable IPv4 accesscontrol lists (ACLs) and access control entries (ACEs).

detail

(Optional) Displays complete out-of-resource (OOR) details.

all

(Optional) Displays the location of all the line cards.

Command Default

Displays all IPv6 access lists.

Command Modes

EXEC

Command History

Release Modification
Release 6.3.2

This command is introduced.

Usage Guidelines

The show access-lists ipv6 command is similar to the show access-lists ipv4 command, except that it is IPv6 specific.

Use the show access-lists ipv6 command to display the contents of all IPv6 access lists. To display the contents of a specific IPv6 access list, use the name argument. Use the sequence-number argument to specify the sequence number of the access list.

Use the show access-lists ipv6 summary command to display a summary of all current IPv6 access lists. To display a summary of a specific IPv6 access list, use the name argument.

Use the show access-lists ipv6 maximum detail command to display the OOR details for IPv6 access lists. OOR limits the number of ACLs and ACEs that can be configured in the system. When the limit is reached, configuration of new ACLs or ACEs is rejected.

Examples

In the following example, the contents of all IPv6 access lists are displayed:

RP/0/RP0/CPU0:ios#show access-lists ipv6


Wed Jan 17 09:52:14.591 IST
ipv6 access-list IPV6_ROUTER_FWD_TELNET_TRAFFIC_DENY
10 deny tcp any any eq telnet (3 matches)
20 permit ipv6 any any (5 matches)
ipv6 access-list IPV6_SSH_DENY
10 deny tcp any any eq ssh (9 matches)
20 permit ipv6 any any (100 matches)
RP/0/RP0/CPU0:PROD_20#

show led

To display the status of various LEDs present in NCS 1002, use the show led command in administration EXEC mode.

show led [ location location ]

Syntax Description

location location

(Optional) Displays LED information for a specific location.

Command Default

The status of all the LEDs present in NCS 1002 is displayed.

Command Modes

Administration EXEC

Command History

Release Modification
Release 6.0.0

This command was introduced.

Usage Guidelines

Enter the show LED command in administration EXEC mode to display the status of all the LEDs present in NCS 1002.

Examples

The following example shows sample output from the show led command.

sysadmin-vm:0_RP0# show led 


Wed Dec  16 22:39:47.779 UTC
=============================================================
Location  LED Name                      Mode         Color
=============================================================
0/0
          0/0-Power Status LED          WORKING     RED
          0/0-Fan Status LED            WORKING     GREEN
0/RP0
          0/RP0-Status LED              WORKING     AMBER
          0/RP0-Attention LED           WORKING     OFF
0/PM0
          0/PM0-Status LED              WORKING     AMBER
0/PM1
          0/PM1-Status LED              WORKING     GREEN

show terminal-device

To display terminal-device parameters of the system, use the show terminal-device command in administration EXEC mode.

show terminal-device {internal {adj-list | config-status} | layout | logical-channel {all | number channel-number} | ltrace {all | error | file | hexdump | info | last | location | reverse | stats | tailf | unique | usec | verbose | wide | wrapping} | operational-modes | {all | name word}}

Syntax Description

internal

Displays the internal structure information.

adj-list

Displays the adjacency list.

config-status

Displays the configuration status.

layout

Displays the layout of channels and connections.

logical-channel

Displays the logical channel information.

all

Displays all logical channels information.

number channel-number

Specifies the logical channel number. The range of logical channel is 1 to 100000.

ltrace {all | error | file | hexdump | info | last | location | reverse | stats | tailf | unique | usec | verbose | wide | wrapping}

Displays the ltrace data.

  • all—Displays all traces.

  • error—Displays error traces.

  • file—Displays the specified file.

  • hexdump—Displays traces in hexadecimal.

  • info—Displays informational traces.

  • last—Displays last <n> entries.

  • location—Displays card location.

  • reverse—Displays latest traces.

  • stats—Displays statistics.

  • tailf—Displays new traces as they are added.

  • unique—Displays unique entries with counts.

  • usec—Displays timestamp of usec.

  • verbose—Displays internal debugging information.

  • wide—Displays ltrace information without buffer name, node name and tid.

  • wrapping—Displays wrapping entries.

operational-modes Displays the supported operational modes.
optical-channel Displays the optical channel information.
all

Displays information of all optical channels.

name word Displays the specified optical channel name.

Command Default

None

Command Modes

Administration EXEC

Command History

Release Modification
Release 6.2.1

This command was introduced.

Usage Guidelines

The show terminal-device command displays information about the terminal-device parameters of the system.

Examples

To view the configuration layout of channels, use the following command: 

Router#show terminal-device layout
Tue Mar 14 15:39:08.821 IST

Slice Id:                      0
Status:                        Config Accepted
Client Bitrate:                100G
Line Bitrate:                  200G

Client [Lane]     Logical Channel Logical Channel Optical Channel     Line
                    (Ethernet)      (Coherent)
Optics0/0/0/0 [0]    2001            2003 0_0-OpticalChannel0_0_0_5    Optics0/0/0/5
Optics0/0/0/1 [0]    2005            2003 0_0-OpticalChannel0_0_0_5    Optics0/0/0/5
Optics0/0/0/3 [0]    2006            2004 0_0-OpticalChannel0_0_0_6    Optics0/0/0/6
Optics0/0/0/4 [0]    2002            2004 0_0-OpticalChannel0_0_0_6    Optics0/0/0/6

Slice Id:                      3
Status:                        Config Accepted
Client Bitrate:                100G
Line Bitrate:                  200G

Client [Lane]     Logical Channel Logical Channel Optical Channel     Line
                    (Ethernet)      (Coherent)
Optics0/0/0/21 [0]    4001          4003 0_0-OpticalChannel0_0_0_26  Optics0/0/0/26
Optics0/0/0/22 [0]    4005          4003 0_0-OpticalChannel0_0_0_26  Optics0/0/0/26
Optics0/0/0/24 [0]    4006          4004 0_0-OpticalChannel0_0_0_27  Optics0/0/0/27
Optics0/0/0/25 [0]    4002          4004 0_0-OpticalChannel0_0_0_27  Optics0/0/0/27

To view the display graph adjacency list, use the following command: 

Router#show terminal-device internal adj-list
Tue Mar 14 15:40:21.024 IST

OC-Optical Adjacency List

Number of Vertices = 44
Number of Logical Channel(s)[Ethernet] = 8
Number of Logical Channel(s)[OTN] = 4
Number of Optical Channel(s) = 4

No    VID      VName        Slice-Id   Channels
0     NA    Optics0/0/0/0        0      2001
1     NA    Optics0/0/0/1        0      2005
2     NA    Optics0/0/0/2        0      -----
3     NA    Optics0/0/0/3        0      2006
4     NA    Optics0/0/0/4        0      2002
5     NA    Optics0/0/0/5        0      0_0-OpticalChannel0_0_0_5
6     NA    Optics0/0/0/6        0      0_0-OpticalChannel0_0_0_6
7     NA    Optics0/0/0/7        1      -----
8     NA    Optics0/0/0/8        1      -----
9     NA    Optics0/0/0/9        1      -----
10    NA    Optics0/0/0/10       1      -----
11    NA    Optics0/0/0/11       1      -----
12    NA    Optics0/0/0/12       1      -----
13    NA    Optics0/0/0/13       1      -----
14    NA    Optics0/0/0/14       2      -----
15    NA    Optics0/0/0/15       2      -----
16    NA    Optics0/0/0/16       2      -----
17    NA    Optics0/0/0/17       2      -----
18    NA    Optics0/0/0/18       2      -----
19    NA    Optics0/0/0/19       2      -----
20    NA    Optics0/0/0/20       2      -----
21    NA    Optics0/0/0/21       3      4001
22    NA    Optics0/0/0/22       3      4005
23    NA    Optics0/0/0/23       3      -----
24    NA    Optics0/0/0/24       3      4006
25    NA    Optics0/0/0/25       3      4002
26    NA    Optics0/0/0/26       3      0_0-OpticalChannel0_0_0_26
27    NA    Optics0/0/0/27       3      0_0-OpticalChannel0_0_0_27
28  2001          NA             0      Optics0/0/0/0, 2003
29  2003          NA             0      2001, 0_0-OpticalChannel0_0_0_5, 2005
30  2002          NA             0      Optics0/0/0/4, 2004
31  2004          NA             0      2002, 0_0-OpticalChannel0_0_0_6, 2006
32    NA          0_0-OpticalChannel0_0_0_5       0     2003, Optics0/0/0/5
33    NA          0_0-OpticalChannel0_0_0_6       0     2004, Optics0/0/0/6
34  2005          NA             0      Optics0/0/0/1, 2003
35  2006          NA             0      Optics0/0/0/3, 2004
36  4001          NA             3      Optics0/0/0/21, 4003
37  4003          NA             3      4001, 0_0-OpticalChannel0_0_0_26, 4005
38  4002          NA             3      Optics0/0/0/25, 4004
39  4004          NA             3      4002, 0_0-OpticalChannel0_0_0_27, 4006
40    NA          0_0-OpticalChannel0_0_0_26       3    4003, Optics0/0/0/26
41    NA          0_0-OpticalChannel0_0_0_27       3    4004, Optics0/0/0/27
42  4005          NA             3      Optics0/0/0/22, 4003
43  4006          NA             3      Optics0/0/0/24, 4004

To view the logical channel information, use the following command: 

Router#show terminal-device logical-channel number 2001
Tue Mar 14 16:13:23.397 IST
Logical Channel Index:      2001
Name:                       HundredGigECtrlr0/0/0/0
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/0
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            2003
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

To view all the logical channels information, use the following command: 

Router#show terminal-device logical-channel all
Tue Mar 14 15:42:29.468 IST
Logical Channel Index:      2001
Name:                       HundredGigECtrlr0/0/0/0
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/0
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            2003
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      2002
Name:                       HundredGigECtrlr0/0/0/4
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/4
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            2004
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      2003
Name:                       CoherentDSP0/0/0/5
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 2
Trib-Rate:                  Unknown tributary signal rate
Trib-Protocol:              Unknown protocol
Protocol-Type:              OTN protocol framing
Ingress Client Port:        NA
Ingress Physical Channel:   0
TTI Transmit:               NA
TTI Expected:               NA
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            0
Optical Channel:            0_0-OpticalChannel0_0_0_5
Allocation:                 200G
Assignment Type:            Optical

Logical Channel Index:      2004
Name:                       CoherentDSP0/0/0/6
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 2
Trib-Rate:                  Unknown tributary signal rate
Trib-Protocol:              Unknown protocol
Protocol-Type:              OTN protocol framing
Ingress Client Port:        NA
Ingress Physical Channel:   0
TTI Transmit:               NA
TTI Expected:               NA
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            0
Optical Channel:            0_0-OpticalChannel0_0_0_6
Allocation:                 200G
Assignment Type:            Optical

Logical Channel Index:      2005
Name:                       HundredGigECtrlr0/0/0/1
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/1
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            2003
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      2006
Name:                       HundredGigECtrlr0/0/0/3
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/3
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            2004
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      4001
Name:                       HundredGigECtrlr0/0/0/21
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/21
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            4003
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      4002
Name:                       HundredGigECtrlr0/0/0/25
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/25
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            4004
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      4003
Name:                       CoherentDSP0/0/0/26
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 2
Trib-Rate:                  Unknown tributary signal rate
Trib-Protocol:              Unknown protocol
Protocol-Type:              OTN protocol framing
Ingress Client Port:        NA
Ingress Physical Channel:   0
TTI Transmit:               NA
TTI Expected:               NA
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            0
Optical Channel:            0_0-OpticalChannel0_0_0_26
Allocation:                 200G
Assignment Type:            Optical

Logical Channel Index:      4004
Name:                       CoherentDSP0/0/0/27
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 2
Trib-Rate:                  Unknown tributary signal rate
Trib-Protocol:              Unknown protocol
Protocol-Type:              OTN protocol framing
Ingress Client Port:        NA
Ingress Physical Channel:   0
TTI Transmit:               NA
TTI Expected:               NA
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            0
Optical Channel:            0_0-OpticalChannel0_0_0_27
Allocation:                 200G
Assignment Type:            Optical

Logical Channel Index:      4005
Name:                       HundredGigECtrlr0/0/0/22
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/22
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            4003
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

Logical Channel Index:      4006
Name:                       HundredGigECtrlr0/0/0/24
Admin-State:                Enable
Loopback-Mode:              None
Type of Logical Channel:    Logical Level 1
Trib-Rate:                  100G tributary signal rate
Trib-Protocol:              100G MLG protocol
Protocol-Type:              Ethernet protocol framing
Ingress Client Port:        Optics0/0/0/24
Ingress Physical Channel:   0
Logical Assignment Index:   1
Logical Assignment Name:    NA
Logical Channel:            4004
Optical Channel:            NA
Allocation:                 100G
Assignment Type:            Logical

To view specific optical channel details, use the following command: 

Router#show terminal-device optical-channel name 0_0-OpticalChannel0_0_0_5
Tue Mar 14 15:44:41.576 IST
Optical Channel Name:       0_0-OpticalChannel0_0_0_5
Index:                      0
Frequency:                  0
Power:                      0
Operational Mode:           7
Line Port:                  Optics0/0/0/5

To view all the optical channels details, use the following command: 

Router#show terminal-device optical-channel all
Tue Mar 14 15:44:41.254 IST
Optical Channel Name:       0_0-OpticalChannel0_0_0_26
Index:                      0
Frequency:                  0
Power:                      0
Operational Mode:           7
Line Port:                  Optics0/0/0/26

Optical Channel Name:       0_0-OpticalChannel0_0_0_27
Index:                      0
Frequency:                  0
Power:                      0
Operational Mode:           7
Line Port:                  Optics0/0/0/27

Optical Channel Name:       0_0-OpticalChannel0_0_0_5
Index:                      0
Frequency:                  0
Power:                      0
Operational Mode:           7
Line Port:                  Optics0/0/0/5

Optical Channel Name:       0_0-OpticalChannel0_0_0_6
Index:                      0
Frequency:                  0
Power:                      0
Operational Mode:           7
Line Port:                  Optics0/0/0/6

To view the supported operational modes, use the following command: 

Router#show terminal-device operational-modes
Tue Mar 14 15:50:55.289 IST
Operational Mode:       1
Description:            FEC Mode 7
Vendor:                 Cisco Systems, Inc.

Operational Mode:       2
Description:            FEC Mode 20
Vendor:                 Cisco Systems, Inc.

To view the present, past, and partial configuration status and its corresponding time-stamp values, use the following command: 

Router#show terminal-device internal config-status
Tue Mar 14 15:51:34.189 IST
Partial Config:         Disabled


Slice:                  0
Status:                 Config Accepted
Present Config:         100Gx200G
Present Config Time:    Mon Mar 13 23:41:59 2017
Past Config:            None
Past Config Time:       None
Last Config Error:      None
Error Time:             None

Slice:                  1
Status:                 Un-Configured
Present Config:         None
Present Config Time:    None
Past Config:            None
Past Config Time:       None
Last Config Error:      None
Error Time:             None

Slice:                  2
Status:                 Un-Configured
Present Config:         None
Present Config Time:    None
Past Config:            None
Past Config Time:       None
Last Config Error:      None
Error Time:             None

Slice:                  3
Status:                 Config Accepted
Present Config:         100Gx200G
Present Config Time:    Mon Mar 13 23:41:59 2017
Past Config:            None
Past Config Time:       None
Last Config Error:      None
Error Time:             None

show platform

To display information and status for each node in the system, use the show platform command in XR EXEC or administration EXEC mode.

Administration EXEC Mode

show platform [{ detail | location | slices} location]

XR EXEC Mode

show platform [ vm | 0/RP0 ]

Syntax Description

detail

(Optional) Displays the details of node type and state.

location

(Optional) Displays the location of node.

slices

(Optional) Displays the summary information of each slice in the node.

location

(Optional) Node location such as 0/FT0, 0/RP0.

vm

(Optional) Displays the virtual machine information of node.

Command Default

The status and information are displayed for all the nodes in the system.

Command Modes

XR EXEC

Administration EXEC

Command History

Release Modification
Release 6.0.0

This command was introduced.

Usage Guidelines

Enter the show platform command in administration EXEC mode to display the output for the entire system.

Task ID

Task ID Operations

system

read

Examples

The following example shows sample output from the show platform command.

sysadmin-vm:0_RP0# show platform 


Wed Dec  16 22:51:27.789 UTC
Location  Card Type               HW State      SW State      Config State
----------------------------------------------------------------------------
0/0       NCS1002                 OPERATIONAL   N/A           NSHUT
0/RP0     NCS1K-CNTLR-K9          OPERATIONAL   OPERATIONAL   NSHUT
0/FT0     NCS1K-FTA               OPERATIONAL   N/A           NSHUT
0/FT1     NCS1K-FTA               OPERATIONAL   N/A           NSHUT
0/FT2     NCS1K-FTA               OPERATIONAL   N/A           NSHUT

The following example shows sample output from the show platform detail command.

sysadmin-vm:0_RP0# show platform detail 


Wed Dec  16 22:52:25.551 UTC

Platform Information for 0/0
 PID :               NCS1002
 Description :       "Network Convergence System 1000 Controller"
 VID/SN :            V01
 HW Oper State :     OPERATIONAL
 SW Oper State :     N/A
 Configuration :     "NSHUT RST"
 HW Version :        0.1
 Last Event :        HW_EVENT_OK
 Last Event Reason : "HW Event OK"

Platform Information for 0/RP0
 PID :               NCS1K-CNTLR-K9
 Description :       "Network Convergence System 1000 Controller"
 VID/SN :            V01
 HW Oper State :     OPERATIONAL
 SW Oper State :     OPERATIONAL
 Configuration :     "NSHUT RST"
 HW Version :        0.1
 Last Event :        HW_EVENT_OK
 Last Event Reason : "HW Event OK"

Platform Information for 0/FT0
 PID :               NCS1K-FTA
 Description :       "Network Convergence System 1000 Fan"
 VID/SN :            V01
 HW Oper State :     OPERATIONAL
 SW Oper State :     N/A
 Configuration :     "NSHUT RST"
 HW Version :        0.1
 Last Event :        HW_EVENT_OK
 Last Event Reason : "HW Operational"

Platform Information for 0/FT1
 PID :               NCS1K-FTA
 Description :       "Network Convergence System 1000 Fan"
 VID/SN :            V01
 HW Oper State :     OPERATIONAL
 SW Oper State :     N/A
 Configuration :     "NSHUT RST"
 HW Version :        0.1
 Last Event :        HW_EVENT_OK
 Last Event Reason : "HW Operational"

Platform Information for 0/FT2
 PID :               NCS1K-FTA
 Description :       "Network Convergence System 1000 Fan"
 VID/SN :            V01
 HW Oper State :     OPERATIONAL
 SW Oper State :     N/A
 Configuration :     "NSHUT RST"
 HW Version :        0.1
 Last Event :        HW_EVENT_OK
 Last Event Reason : "HW Operational"

RP/0/RP0/CPU0:ios# show platform 


Wed Dec 16 22:56:35.515 UTC
Node name         Node type             Node state        Admin state   Config state
---------------------------------------------------------------------------------------
0/RP0             NCS1K-CNTLR           OPERATIONAL       UP            NSHUT

terminal-device transition cli-to-yang

To enable the transition from CLI configuration to terminal-device configuration, use the terminal-device transition cli-to-yang command in XR EXEC mode or Administration EXEC mode. The transition from CLI to terminal-device must be done via merge-config operation in gRPC.

terminal-device transition cli-to-yang {enable | disable}

Syntax Description

enable

Enables transition from CLI configuration to terminal-device configuration.

disable

Disables transition from CLI configuration to terminal-device configuration.

Command Default

None

Command Modes

XR EXEC

Administration EXEC

Command History

Release Modification
Release 6.2.1

This command was introduced.

Examples

The following example shows how to enable the transition from CLI configuration to terminal-device configuration. 


RP/0/RP0/CPU0:ios#terminal-device transition cli-to-yang enable

transmit-shutdown

To disable the laser on the trunk port of the optics controller, use the transmit-shutdown command in the optics controller configuration mode.

controller optics R/S/I/P transmit-shutdown

Syntax Description

transmit-shutdown

Disables the laser on the trunk port of the optics controller

Command Default

None

Command Modes

Optics controller configuration

Command History

Release Modification

R6.3.1

This command was introduced.

Usage Guidelines

This command is similar to the shutdown command. Both the commands disable the Tx laser. However, the shutdown command changes the admin state of the controller as well. Hence, the shutdown command affects the tunnel state in case of GMPLS-UNI whereas the transmit-shutdown command does not affect the tunnel state.

Examples

The following example shows how to use the transmit-shutdown command. 


RP/0/RP0/CPU0:ios#configure
RP/0/RP0/CPU0:ios(config)#controller optics 0/0/0/13
RP/0/RP0/CPU0:ios(config-optics)#transmit-shutdown

window-size

To configure the replay protection window size, use the window-size command in MACsec policy configuration mode.

The replay protection window size indicates the number of out-of-sequence frames that can be accepted at the controller configured with MACsec, without being dropped.

window-size value

Syntax Description

value

Number of out-of-sequence frames that can be accepted at the controller without being dropped. The range is 0 to 1024.

Command Default

The default value is 64.

Command Modes

MACsec policy configuration

Command History

Release Modification
R6.1.1

This command was introduced.

Examples

The following example shows how to use the window-size command. 


configure
macsec-policy mac_policy
window-size 64