-
Cisco MDS 9000 Family Command Reference, Release 3.x
-
New and Changed Information
-
Preface
-
CLI Overview
-
A Commands
-
Advanced Services Modules Commands
-
B Commands
-
C Commands
-
Caching Services Module Commands
-
D Commands
-
Debug Commands
-
E Commands
-
F Commands
-
G Commands
-
H Commands
-
I Commands
-
J Commands
-
K Commands
-
L Commands
-
M Commands
-
N Commands
-
O Commands
-
P Commands
-
Q Commands
-
R Commands
-
S Commands
-
Show Commands
-
T Commands
-
U Commands
-
V Commands
-
W Commands
-
Z Commands
-
Feedback
Table Of Contents
username (iSCSI initiator configuration and iSLB initiator configuration)
U Commands
The commands in this chapter apply to the Cisco MDS 9000 Family of multilayer directors and fabric switches. All commands are shown here in alphabetical order regardless of command mode. See "About the CLI Command Modes" section on page 1-3 to determine the appropriate mode for each command. For more information, refer to the Cisco MDS 9000 Family CLI Configuration Guide.
undebug all
To disable all debugging, use the undebug all command.
undebug all
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
EXEC mode.
Command History
Usage Guidelines
Use this command to turn off all debugging.
Examples
The following example shows how to disable all debugging on the switch.
switch# undebug allRelated Commands
no debug all
Also disables all debug commands configured on the switch.
show debug
Displays all debug commands configured on the switch.
update license
To update an existing license, use the update license command in EXEC mode.
update license {url | bootflash: | slot0: | volatile:} filename
Syntax Description
Command Modes
EXEC mode.
Command History
Examples
The following example updates a specific license.
switch# update license bootflash:sanextn2.lic sanextn1.licUpdating sanextn1.lic:SERVER this_host ANYVENDOR cisco# An example fcports licenseINCREMENT SAN_EXTN_OVER_IP cisco 1.000 permanent 1 HOSTID=VDH=ABCD \NOTICE=<LicFileID>san_extn1.lic</LicFileID><LicLineID>0</LicLineID> \SIGN=33088E76F668with bootflash:/sanextn2.lic:SERVER this_host ANYVENDOR cisco# An example fcports licenseINCREMENT SAN_EXTN_OVER_IP cisco 1.000 permanent 1 HOSTID=VDH=ABCD \NOTICE=<LicFileID>san_extn2.lic</LicFileID><LicLineID>1</LicLineID> \SIGN=67CB2A8CCAC2Do you want to continue? (y/n) yUpdating license ..doneuse-profile
To bind a profile to the FCIP interface, use the use-profile option. To disable a configured profile, use the no form of the option.
use-profile profile-id
no use-profile profile-id
Syntax Description
Defaults
None.
Command Modes
Interface configuration submode.
Command History
Usage Guidelines
Access this command from the switch(config-if)# submode.
This command binds the profile with the FCIP interface.
Examples
switch# config terminalswitch(config)# interface fcip 50switch(config-if)# use-profile 100switch(config-if)# no use-profile 100Related Commands
show interface fcip
Displays an interface configuration for a specified FCIP interface.
show fcip
Displays information about the FCIP profile.
username
To define a user, use the username command in configuration mode. Use the no form of a command to undo the configuration or revert to factory defaults.
username name [expire date | iscsi | password [0 | 5 | 7] user-password [expire date] [role rolename] | role rolename | ssh-cert-dn distinguished-name {dsa | rsa} | sshkey {key-content | file filename}]
no username name [expire date | iscsi | password [0 | 5 | 7] user-password [expire date] [role rolename] | role rolename | ssh-cert-dn distinguished-name {dsa | rsa} | sshkey {key-content | file filename}]
Syntax Description
Defaults
None.
Command Modes
Configuration mode.
Command History
1.0(2)
This command was introduced.
2.0(x)
•
Removed the update_snmpv3 option.
•
3.0(1)
Added the ssh-cert-dn, dsa, and rsa options.
Usage Guidelines
To change the SNMP password, a clear text CLI password is required. You must know the SNMPv3 password to change the password using the CLI.
The password specified in the username command is synchronized as the auth and priv passphrases for the SNMP user.
Deleting a user using either command results in the user being deleted for both SNMP and CLI.
User-role mapping changes are synchronized in SNMP and CLI.
The SSH X.509 certificate distinguished name (DN) is in fact the subject name in the certificate. You need to extract the subject name from the certificate and specify the subject name as the argument to the username command.
Examples
The following example shows how to define a user.
switch(config)# username knuckles password testpw role bodegaswitch(config)# do show user-accountuser:adminthis user account has no expiry dateroles:network-adminuser:knucklesthis user account has no expiry dateroles:bodegaThe following example configures the name for a user to log in using iSCSI authentication.
switch(config)# username iscsiThe following example places you in the mode for the specified role (techdocs). The prompt indicates that you are now in the role configuration submode. This submode is now specific to the techdocs group.
switch(config)# role name techdocsswitch(config-role)#The following example deletes the role called techdocs.
switch(config)# no role name techdocsThe following example assigns a description to the new role. The description is limited to one line and can contain spaces.
switch(config-role)# description Entire Tech. Docs. groupThe following example resets the description for the Tech. Docs. group.
switch(config-role)# no descriptionThe following example creates or updates the user account (usam) along with a password (abcd) that is set to expire on 2003-05-31.
switch(config)# username usam password abcd expire 2003-05-31The following example creates or updates the user account (msam) along with a password (abcd) specified in clear text (indicated by 0).
switch(config)# username msam password 0 abcd role network-operatorThe following example specifies an encrypted (specified by 5) password (!@*asdsfsdfjh!@df) for the user account (user1).
switch(config)# username user1 password 5!@*asdsfsdfjh!@dfThe following example adds the specified user (usam) to the network-admin role.
switch(config)# username usam role network-adminThe following example deletes the specified user (usam) from the vsan-admin role.
switch(config)# no username usam role vsan-adminThe following example shows how to define a distinguished name on a switch for SSH certificate authentication.
switch# config tswitch(config)# username knuckles ssh-cert-dn /CN=excal-1.cisco.com rsaswitch(config)# do show user-accountuser:adminthis user account has no expiry dateroles:network-adminuser:knucklesthis user account has no expiry dateroles:network-operatorssh cert DN : /CN=excal-1.cisco.com; Algo: x509v3-sign-rsaThe following example specifies the SSH X.509 certificate distinguished name and DSA algorithm for an existing user account (usam).
switch(config)# username usam ssh-cert-dn usam-dn dsaThe following example specifies the SSH X.509 certificate distinguished name and RSA algorithm for an existing user account.
switch(config)# username user1 ssh-cert-dn user1-dn rsaThe following example deletes the SSH X.509 certificate distinguished name for the user account.
switch(config)# no username admin ssh-cert-dnadmin-dn dsaThe following example identifies the contents of the SSH key for the specified user (usam).
switch(config)# username usam sshkey fsafsd2344234234ffgsdfgThe following example deletes the SSH key content identification for the user (usam).
switch(config)# no username usam sshkey fsafsd2344234234ffgsdfgffsdfsfsfssfThe following example updates the SNMPv3 password for the specified user (joe). The local CLI password and the SNMP password are updated. If user Joe does not exist, the command fails.
switch(config)# username joe password wxyz6789 update-snmpv3 abcd1234Related Commands
username (iSCSI initiator configuration and iSLB initiator configuration)
To assign a username for iSCSI login authentication, use the username command in iSCSI initiator configuration submode. To assign a username for iSLB login authentication, use the username command in iSLB initiator configuration submode.To disable this feature, use the no form of the command.
username username
no username username
Syntax Description
Defaults
None.
Command Modes
iSCSI initiator configuration submode.
iSLB initiator configuration submode.Command History
1.3(2)
This command was introduced.
3.0(1)
Added iSLB initiator configuration submode.
Usage Guidelines
None.
Examples
The following example assigns the username for iSCSI login authentication of an iSCSI initiator.
switch# config terminalEnter configuration commands, one per line. End with CNTL/Z.switch(config)# iscsi initiator name iqn.1987-02.com.cisco.initiatorswitch(config-iscsi-init)# username iSCSIloginUsernameswitch(config-iscsi-init)#The following example assigns the username tester for iSLB login authentication of an iSLB initiator.
switch# config tswitch(config)# islb initiator ip-address 100.10.10.10switch(config-iscsi-islb-init)# username ?
<WORD> Enter username <Max Size - 32>
switch(config-iscsi-islb-init)# username tester
The following example removes the username tester for an iSLB initiator.
switch (config-iscsi-islb-init)# no username testerRelated Commands