U Commands

ucs-infra ipv6-mgmt-ip

ucs-infra ipv6-mgmt-ip <ipv6_address> [ infra-vlan <infra_vlan_id> ] [ adaptor-vlan <adaptor_vlan_id> ] [ epds-port <epds_port_no> ] | no ucs-infra

Syntax Description

no

Negate a command or set its defaults

ucs-infra

Configure VLAN id and IPV6 address

ipv6-mgmt-ip

Mgmt Ipv6 Address

infra-vlan

(Optional) Infra Vlan ID

infra_vlan_id

(Optional) Vlan ID

adaptor-vlan

(Optional) Adaptor Vlan ID

adaptor_vlan_id

(Optional) Vlan ID

epds-port

(Optional) epds port number

epds_port_no

(Optional) EPDS NO

Command Mode

  • /exec/configure

udf

udf <udf_name> { packet-start | { header { outer | inner } { l3 | l4 } } } <offset> <length> | no udf <udf_name> [ { packet-start | { header { outer | inner } { l3 | l4 } } } <offset> <length> ]

Syntax Description

no

Negate the command

udf

Define the User Defined Field (UDF)

udf_name

Name of the UDF to configure

packet-start

Offset base from packet-start

header

Offset base configuration

outer

Offset base: from outer header

inner

Offset base: from inner header

l3

Offset base: from l3 header

l4

Offset base: from l4 header

offset

Enter Offset in bytes for UDF (from offset base)

length

Enter Length in bytes for UDF (from offset)

Command Mode

  • /exec/configure

udf mpls stack1

udf <udf_name> mpls { stack1 | stack2 } | no udf <udf_name> [ mpls ]

Syntax Description

no

Negate the command

udf

Define the User Defined Field (UDF)

udf_name

Name of the UDF to configure

mpls

Configure UDF for MPLS (Not supported in SVI scenarios)

stack1

Configure UDF for first level (inner) of MPLS encapsulation

stack2

Configure UDF for second level (outer) of MPLS encapsulation

Command Mode

  • /exec/configure

udf netflow-rtp

udf <udf_name> netflow-rtp [ multicast ] | no udf <udf_name> [ netflow-rtp [ multicast ] ]

Syntax Description

no

Negate the command

udf

Define the User Defined Field (UDF)

udf_name

Name of the UDF to configure

netflow-rtp

Configure netflow rtp udf

multicast

(Optional) Enable RTP for multicast-flows

Command Mode

  • /exec/configure

udld aggressive

[no] udld aggressive

Syntax Description

no

Negate a command or set its defaults

udld

UDLD protocol

aggressive

Enable UDLD aggressive mode for interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld aggressive

udld aggressive

Syntax Description

udld

UDLD protocol

aggressive

Enable UDLD aggressive mode on all fiber optic ports

Command Mode

  • /exec/configure

udld aggressive

[no] udld aggressive

Syntax Description

no

Negate a command or set its defaults

udld

UDLD protocol

aggressive

Enable UDLD aggressive mode on all fiber optic ports

Command Mode

  • /exec/configure

udld aggressive

udld aggressive

Syntax Description

udld

UDLD protocol

aggressive

Enable UDLD aggressive mode for interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld disable

[no] udld disable

Syntax Description

no

Negate a command or set its defaults

udld

UDLD protocol

disable

Disable UDLD for fiber interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld disable

udld disable

Syntax Description

udld

UDLD protocol

disable

Disable UDLD for fiber interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld enable

[no] udld enable

Syntax Description

no

Negate a command or set its defaults

udld

UDLD protocol

enable

Enable UDLD for non-fiber interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld enable

udld enable

Syntax Description

udld

UDLD protocol

enable

Enable UDLD for non-fiber interface(s)

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

udld message-time

udld message-time <i0> | no udld message-time

Syntax Description

no

Negate a command or set its defaults

udld

UDLD protocol

message-time

Setting the time in seconds between UDLD probe messages

i0

Enter the message timer value [default = 15]

Command Mode

  • /exec/configure

udld reset

udld reset

Syntax Description

udld

UDLD protocol

reset

Reset all ports shut down by UDLD

Command Mode

  • /exec/configure

udp-echo

[no] udp-echo { <hostname> | <ip-address> } <port> { [ control { disable | enable } ] [ source-ip { <source-ip-hostname> | <source-ip-address> } ] [ source-port <source-port-number> ] } +

Syntax Description

control

(Optional) enable

source-ip

(Optional) <source-ip-hostname>

source-port

(Optional) <source-port-number>

no

(Optional)

udp-echo

UDP Echo Operation

hostname

Destination hostname, broadcast disallowed

ip-address

Destination IP address, broadcast disallowed

port

Port Number (Recommended port range between 1025-65534)

enable

(Optional) Enable control packets exchange (default)

disable

(Optional) Disable control packets exchange

source-ip-hostname

(Optional) source IP hostname, broadcast disallowed

source-ip-address

(Optional) source IP address, broadcast disallowed

source-port-number

(Optional) Port Number (Recommended port range between 1025-65534)

Command Mode

  • /exec/configure/ip-sla

udp-jitter

[no] udp-jitter { <hostname> | <ip-address> } <dest-port> { { [ codec { g711alaw | g711ulaw | g729a } { [ advantage-factor <advantage-num> ] [ codec-interval <codec-int> ] [ codec-numpackets <codec-numpack> ] [ codec-size <codec-bytes> ] } + ] [ control { disable | enable } ] [ source-ip { <source-ip-hostname> | <source-ip-address> } ] [ source-port <src-port> ] } + | { [ interval <packet-interval> ] [ num-packets <num-packets> ] [ control { disable | enable } ] [ source-ip { <source-ip-hostname> | <source-ip-address> } ] [ source-port <src-port> ] } + }

Syntax Description

no

(Optional)

codec

(Optional) g711alaw

codec-numpackets

(Optional) <codec-numpack>

source-port

(Optional) <src-port>

num-packets

(Optional) <num-packets>

source-ip

(Optional) <source-ip-hostname>

udp-jitter

UDP Jitter Operation

hostname

Destination hostname, broadcast disallowed

ip-address

Destination IP address, broadcast disallowed

dest-port

Port Number (Recommended port range between 1025-65534)

g711alaw

(Optional) G.711 A Law 64000 bps

g711ulaw

(Optional) G.711 U Law 64000 bps

g729a

(Optional) G.729 8000 bps

advantage-factor

(Optional) Advantage Factor

codec-interval

(Optional) Inter Packet Interval

codec-size

(Optional) Number of bytes in payload

advantage-num

(Optional) Advantage Factor

codec-int

(Optional) Delay

codec-numpack

(Optional) Number of Packets

codec-bytes

(Optional) Number of bytes in payload

packet-interval

(Optional) Delay (default 20)

num-packets

(Optional) Number of Packets (default 10)

interval

(Optional) Inter Packet Interval

control

(Optional) Enable or disable control packets

enable

(Optional) Enable control packets exchange (default)

disable

(Optional) Disable control packets exchange

source-ip

(Optional) Source address

source-ip-hostname

(Optional) source IP hostname, broadcast disallowed

source-ip-address

(Optional) source IP address, broadcast disallowed

source-port

(Optional) Source Port

src-port

(Optional) Port Number (Recommended port range between 1025-65534)

Command Mode

  • /exec/configure/ip-sla

undebug all

undebug all

Syntax Description

undebug

Disable Debugging functions (See also debug)

all

Disable all debugging

Command Mode

  • /exec

undebug l2rib

undebug l2rib

Syntax Description

undebug

Disable Debugging functions (See also debug)

l2rib

L2RIB debug commands

Command Mode

  • /exec

unidirectional send

unidirectional { send-only | receive-only } | no unidirectional [ send-only | receive-only ]

Syntax Description

no

Negate a command or set its defaults

unidirectional

UDE (Uni-Directional Ethernet)

send-only

Configure UDE TX only for the interface

receive-only

Configure UDE RX only for the interface

Command Mode

  • /exec/configure/if-ethernet-all /exec/configure/if-eth-base

uniq

| uniq [ -c | -d | -f <nb-of-fields> | -s <nb-of-chars> | -u | -w <nb-chars-to-compare> | -i ] +

Syntax Description

|

Pipe command output to filter

uniq

Discard all but one of successive identical lines

-c

(Optional) prefix lines by the number of occurrences

-d

(Optional) only print duplicate lines

-f

(Optional) avoid comparing the first N fields

-s

(Optional) avoid comparing the first N characters

-u

(Optional) only print unique lines

-w

(Optional) compare no more than N characters in lines

-i

(Optional) ignore differences in case when comparing

nb-of-fields

(Optional) number of initial fields to ignore

nb-of-chars

(Optional) number of initial chars to ignore

nb-chars-to-compare

(Optional) max number of chars to compare

Command Mode

  • /output

unmount

unmount { usb1: | usb2: }

Syntax Description

unmount

unmount expansion flash or USB storage

usb1:

Unmount USB drive in port 1

usb2:

Unmount USB drive in port 2

Command Mode

  • /exec

unmount slot0

unmount slot0:

Syntax Description

unmount

unmount expansion flash or USB storage

slot0:

Unmount expansion flash

Command Mode

  • /exec

unsuppress-map

unsuppress-map <unsupp-rmap-name> | { no | default } unsuppress-map [ <unsupp-rmap-name> ]

Syntax Description

no

Negate a command or set its defaults

default

Inherit values from a peer template

unsuppress-map

Route-map to selectively unsuppress suppressed routes

unsupp-rmap-name

Route-map name

Command Mode

  • /exec/configure/router-bgp/router-bgp-neighbor/router-bgp-neighbor-af /exec/configure/router-bgp/router-bgp-neighbor/router-bgp-neighbor-af-vpnv4 /exec/configure/router-bgp/router-bgp-neighbor/router-bgp-neighbor-af-vpnv6 /exec/configure/router-bgp/router-bgp-neighbor/router-bgp-neighbor-af-ipv4-label /exec/configure/router-bgp/router-bgp-neighbor/router-bgp-neighbor-af-ipv6-label

untagged cos

untagged cos <ucos-value> | no untagged cos

Syntax Description

no

Negate a command or set its defaults

untagged

default to use for untagged packets on interface

cos

IEEE 802.1Q class of service for QoS classification

ucos-value

COS value

Command Mode

  • /exec/configure/if-set-qos

update-source

update-source <interface> | no update-source

Syntax Description

no

Negate a command or set its defaults

update-source

Specify source of BMP session and messages

interface

Interface name

Command Mode

  • /exec/configure/router-bgp/router-bgp-bmp-server

update-source

update-source <interface> | { no | default } update-source [ <interface> ]

Syntax Description

no

Negate a command or set its defaults

default

Inherit values from a peer template

update-source

Specify source of BGP session and updates

interface

Interface name

Command Mode

  • /exec/configure/router-bgp/router-bgp-neighbor-sess

update license

update license <uri0> { <license-file> [ force ] | <s0> }

Syntax Description

update

Update license

license

Update a license file

uri0

Specify URL for the new license file

license-file

License file to be updated

force

THIS KEYWORD OR VARIABLE IS NOT SUPPORTED

s0

License file to be updated

Command Mode

  • /exec

update license

update license <uri0> { <license-file> [ force ] | <s0> }

Syntax Description

update

Update license

license

Update a license file

uri0

Specify URL for the new license file

license-file

License file to be updated

force

THIS KEYWORD OR VARIABLE IS NOT SUPPORTED

s0

License file to be updated

Command Mode

  • /exec

use-chunking size

use-chunking size <kbytes> | no use-chunking

Syntax Description

no

Negate a command or set its defaults

use-chunking

Enable chunking

size

Chunk size

kbytes

Specify chunking size in kilobytes

Command Mode

  • /exec/configure/telemetry/destination-group

use-compression gzip

use-compression { gzip } | no use-compression

Syntax Description

no

Negate a command or set its defaults

use-compression

Specify the destination compression method

gzip

GZIP compression algorithm

Command Mode

  • /exec/configure/telemetry/destination-profile

use-compression gzip

use-compression { gzip } | no use-compression

Syntax Description

no

Negate a command or set its defaults

use-compression

Specify the destination compression method

gzip

GZIP compression algorithm

Command Mode

  • /exec/configure/telemetry/destination-group

use-nodeid

use-nodeid <nodeid> | no use-nodeid

Syntax Description

no

Negate a command or set its defaults

use-nodeid

Set the node ID

nodeid

Node ID

Command Mode

  • /exec/configure/telemetry/destination-group/addr

use-nodeid

use-nodeid <nodeid> | no use-nodeid

Syntax Description

no

Negate a command or set its defaults

use-nodeid

Set the node ID (Max size 128)

nodeid

Node ID (Max size 128)

Command Mode

  • /exec/configure/telemetry/destination-profile

use-nodeid

use-nodeid <nodeid> | no use-nodeid

Syntax Description

no

Negate a command or set its defaults

use-nodeid

Set the node ID

nodeid

Node ID

Command Mode

  • /exec/configure/telemetry/destination-group/host

use-retry size

use-retry size <mbytes> | no use-retry

Syntax Description

no

Negate a command or set its defaults

use-retry

Specify send retry details

size

Retry buffer size

mbytes

Buffer size in Mega bytes

Command Mode

  • /exec/configure/telemetry/destination-profile

use-vrf

use-vrf { default | <vrf-cfg-name> } | no use-vrf

Syntax Description

no

Negate a command or set its defaults

use-vrf

Specify the destination vrf

default

Known VRF name

vrf-cfg-name

Configurable VRF name

Command Mode

  • /exec/configure/telemetry/destination-profile

use-vrf

[no] use-vrf { management | default | <vrf_name> }

Syntax Description

no

(Optional) Negate a command or set its defaults

use-vrf

vrf to be used to contact servers in this group

management

management vrf

default

default vrf

vrf_name

name of the vrf

Command Mode

  • /exec/configure/tacacs+

use-vrf

use-vrf { default | <vrf-cfg-name> } | no use-vrf

Syntax Description

no

Negate a command or set its defaults

use-vrf

Specify the destination vrf

default

Known VRF name

vrf-cfg-name

Configurable VRF name

Command Mode

  • /exec/configure/telemetry/destination-group

use-vrf

[no] use-vrf { <vrf-name> | <vrf-known-name> }

Syntax Description

no

(Optional) Negate a command or set its defaults

use-vrf

Display per-VRF information

vrf-name

VRF name

vrf-known-name

Known VRF name

Command Mode

  • /exec/configure/ldap

use-vrf

[no] use-vrf { management | default | <vrf_name> }

Syntax Description

no

(Optional) Negate a command or set its defaults

use-vrf

vrf to be used to contact servers in this group

management

management vrf

default

default vrf

vrf_name

name of the vrf

Command Mode

  • /exec/configure/radius

user-jid password

[no] user-jid <jid> password [ 0 <clear> | 7 <encrypted> | <password> ]

Syntax Description

no

(Optional) Negate a command or set its defaults

user-jid

User Jabber ID

jid

Enter user Jabber ID

password

Password

0

(Optional) Password that follows should be in clear text

clear

(Optional) Password in clear text

7

(Optional) Password that follows should be in encrypted text

encrypted

(Optional) Encrypted password

password

(Optional) Enter password in clear text

Command Mode

  • /exec/configure/fabric-db/server-xmpp

user max-logins

user max-logins <limit>

Syntax Description

user

Configure system-wide user settings

max-logins

maximum simultaneous logins

limit

login session maximum

Command Mode

  • /exec/configure

user max-logins

[no] user max-logins [ <limit> ]

Syntax Description

no

Negate a command or set its defaults

user

Configure system-wide user settings

max-logins

maximum simultaneous logins

limit

(Optional) login session maximum

Command Mode

  • /exec/configure

username

{ username <s0> { shelltype { vsh | bash } } }

Syntax Description

username

Configure user information.

s0

user name

shelltype

Choose shell type for login

vsh

use vsh shell

bash

use bash shell

Command Mode

  • /exec/configure

username

{ [ no ] username <name> }

Syntax Description

username

user name

name

user name

Command Mode

  • /exec/configure/dot1x-cred

username

{ username <s0> [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] [ expire <s5> [ past ] ] [ role <s6> ] } | { username <s0> [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] [ role <s6> ] [ expire <s5> [ past ] ] } | { username <s0> [ expire <s5> [ past ] ] [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] [ role <s6> ] } | { username <s0> [ expire <s5> [ past ] ] [ role <s6> ] [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] } | { username <s0> [ role <s6> ] [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] [ expire <s5> [ past ] ] } | { username <s0> [ role <s6> ] [ expire <s5> [ past ] ] [ password { 0 <s2> [ pbkdf2 | scrypt ] | 5 <s3> | <s4> [ pbkdf2 | scrypt ] | 8 <s9> | 9 <s10> } ] } | { no username <s7> [ role <s8> ] [ force ] }

Syntax Description

no

Negate a command or set its defaults

username

Configure user information.

s0

user name

password

(Optional) Password for the user

0

(Optional) Indicates that the password that follows should be in clear text

s2

(Optional) Password for the user (clear text)

5

(Optional) Indicates that the password that follows should be encrypted

s3

(Optional) strongly encrypted password

s4

(Optional) Password for the user (clear text)

expire

(Optional) Expiry date for this user account(in YYYY-MM-DD format)

s5

(Optional) Expiry in YYYY-MM-DD format

past

THIS KEYWORD OR VARIABLE IS NOT SUPPORTED

role

(Optional) role which the user is to be assigned to

s6

(Optional) role name

s7

user name

s8

(Optional) role name

8

(Optional) Indicates that the password that follows is pbkdf2(type 8) hashed

s9

(Optional) strongly encrypted password

9

(Optional) Indicates that the password that follows is scrypt(type 9) hashed

s10

(Optional) strongly encrypted password

pbkdf2

(Optional) generate hash for password with pbkdf2(type 8)

scrypt

(Optional) generate hash for password with scrypt(type 9)

force

(Optional) Force the user delete

Command Mode

  • /exec/configure

username

[no] username <s0> { sshkey2 { file <uri0> | <line> } }

Syntax Description

no

(Optional) Negate a command or set its defaults

username

Configure user information.

s0

user name

sshkey2

Update ssh key for the user for ssh authentication

file

ssh key file

uri0

file containing host public key for the user

line

ssh key for the user

Command Mode

  • /exec/configure

username keypair export

{ username <s0> keypair export <s1> { dsa | rsa | ecdsa } [ force ] }

Syntax Description

username

Configure user information.

keypair

Use existing ssh keypair

export

Export keypair to Bootflash/Remote directory

force

(Optional) Force the export of keys even if the destination files are present

dsa

Use DSA Keys

rsa

Use RSA Keys

ecdsa

Use ECDSA Keys

s0

user name

s1

Enter filename to export to

Command Mode

  • /exec/configure

username keypair generate

{ username <s0> keypair generate { dsa [ force ] | rsa [ <i0> | <oldrange> ] [ force ] | ecdsa { <i0> } [ force ] } | no username <s0> keypair generate [ { dsa [ force ] | rsa [ <i0> | <oldrange> ] [ force ] | ecdsa [ { <i0> } [ force ] ] } ] }

Syntax Description

no

Negate a command or set its defaults

username

Configure user information.

s0

user name

generate

Generate ssh key pairs

keypair

Generate SSH User Keys

dsa

Generate DSA keys

force

(Optional) Force the generation of keys even if previous ones are present

rsa

Generate RSA keys

i0

(Optional) Enter number of bits (in multiples of 8)

oldrange

THIS KEYWORD OR VARIABLE IS NOT SUPPORTED

ecdsa

Generate ECDSA keys

i0

Enter key size in bits (256, 384 or 521)

force

(Optional) Force the generation of keys even if previous ones are present

Command Mode

  • /exec/configure

username keypair import

{ username <s0> keypair import <s1> { dsa | rsa | ecdsa } [ force ] }

Syntax Description

username

Configure user information.

keypair

Use existing ssh keypair

import

Import keypair from Bootflash/Remote directory

force

(Optional) Force the generation of keys even if previous ones are present

dsa

Use DSA Keys

rsa

Use RSA Keys

ecdsa

Use ECDSA Keys

s0

user name

s1

Enter filename to import

Command Mode

  • /exec/configure

username passphrase

[no] username <username> passphrase { lifetime [ warntime [ gracetime | timevalues ] | gracetime [ warntime | timevalues ] | timevalues ] | warntime [ lifetime [ gracetime | timevalues ] | gracetime [ lifetime | timevalues ] | timevalues ] | gracetime [ lifetime [ warntime | timevalues ] | warntime [ lifetime | timevalues ] | timevalues ] | timevalues }

Syntax Description

no

Negate a command or set its defaults

username

Configure user information.

username

user name

passphrase

user passphrase

lifetime

user passphrase lifetime

warntime

(Optional) user passphrase warningtime

gracetime

(Optional) user passphrase gracetime

timevalues

(Optional) passphrase lifetime, warningtime and gracetime

Command Mode

  • /exec/configure

username passphrase

username <username> passphrase { lifetime <ltime> | warntime <wtime> | gracetime <gtime> } +

Syntax Description

username

Configure user information.

username

user name

passphrase

user passphrase

lifetime

user passphrase lifetime

ltime

lifetime of passphrase (in days)

warntime

user passphrase warningtime

wtime

warning period of passphrase (in days)

gracetime

user passphrase gracetime

gtime

grace period of passphrase (in days)

Command Mode

  • /exec/configure

username password

[no] username <user> password { 0 <pass1> | 5 <pass2> | <pass3> }

Syntax Description

no

(Optional) Negate a command or set its defaults

username

Configure user name

user

Username

password

Password for user

0

Indicates that the password that follows should be in clear text

pass1

Password for the user (clear text)

5

Indicates that the password that follows should be encrypted

pass2

strongly encrypted password

pass3

Password for the user (clear text)

Command Mode

  • /exec/configure/vmt-conn

username ssh-cert-dn dsa

[no] username <s1> ssh-cert-dn <s2> { dsa | rsa }

Syntax Description

no

(Optional) Negate a command or set its defaults

username

Configure user information.

s1

user name

ssh-cert-dn

Update cert dn

s2

distinguished name to be used

dsa

Use dsa algorithm

rsa

Use rsa algorithm

Command Mode

  • /exec/configure

username sshkey

{ username <s0> sshkey { file <uri0> | <line> } | no username <s0> sshkey }

Syntax Description

username

Configure user information.

s0

user name

sshkey

Update ssh key for the user for ssh authentication

file

ssh key file

uri0

file containing host public key for the user

line

ssh key for the user

no

Negate a command or set its defaults

Command Mode

  • /exec/configure

userpassphrase

[no] userpassphrase { default-lifetime | default-warntime | default-gracetime | timevalues }

Syntax Description

no

Negate a command or set its defaults

userpassphrase

user passphrase

default-lifetime

passphrase default lifetime

default-warntime

passphrase default warningtime

default-gracetime

passphrase default gracetime

timevalues

passphrase lifetime, warning time and gracetime

Command Mode

  • /exec/configure

userpassphrase

[no] userpassphrase { min-length | max-length | length }

Syntax Description

no

Negate a command or set its defaults

userpassphrase

user passphrase

min-length

passphrase minimum length

max-length

passphrase maximum length

length

passphrase min and max length

Command Mode

  • /exec/configure

userpassphrase

userpassphrase { default-lifetime <def-ltime> | default-warntime <def-wtime> | default-gracetime <def-gtime> } +

Syntax Description

userpassphrase

user passphrase

default-lifetime

passphrase default lifetime in days

default-warntime

passphrase default warning time in days

default-gracetime

passphrase default gracetime in days

def-ltime

default lifetime of passphrase (in days)

def-wtime

default warning time of passphrase (in days)

def-gtime

default grace time of passphrase (in days)

Command Mode

  • /exec/configure

userpassphrase min-unique

userpassphrase min-unique { <count> }

Syntax Description

userpassphrase

User passphrase

min-unique

Count for the number of passwords that cannot be reused

count

Previous password count

Command Mode

  • /exec/configure

userpassphrase min-unique

[no] userpassphrase min-unique

Syntax Description

no

Negate a command or set its defaults

userpassphrase

User passphrase

min-unique

Count for the number of previous passwords that cannot be reused

Command Mode

  • /exec/configure

userpassphrase min

userpassphrase { min-length <min-len> | max-length <max-len> } +

Syntax Description

userpassphrase

user passphrase

min-length

passphrase minimum length

max-length

passphrase maximum length

min-len

minimum length of passphrase

max-len

maximum length of passphrase

Command Mode

  • /exec/configure

userpassphrase min

[no] userpassphrase { min-length <min-len> | max-length <max-len> } +

Syntax Description

no

Negate a command or set its defaults

userpassphrase

user passphrase

min-length

passphrase minimum length

max-length

passphrase maximum length

min-len

minimum length of passphrase

max-len

maximum length of passphrase

Command Mode

  • /exec/configure

userpassphrase sequence alphabet

[no] userpassphrase sequence alphabet

Syntax Description

no

Negate a command or set its defaults

userpassphrase

user passphrase

sequence

control character sequences in passphrases

alphabet

control runs of sequential alphabetical characters

Command Mode

  • /exec/configure

userpassphrase sequence alphabet length

userpassphrase sequence alphabet length { <max-length> }

Syntax Description

userpassphrase

user passphrase

sequence

control character sequences in passphrases

alphabet

control runs of sequential alphabetical characters

length

maximum number of sequential characters

max-length

Number of sequential characters

Command Mode

  • /exec/configure

userpassphrase sequence keyboard

[no] userpassphrase sequence keyboard

Syntax Description

no

Negate a command or set its defaults

userpassphrase

user passphrase

sequence

control character sequences in passphrases

keyboard

control runs of sequential keyboard characters

Command Mode

  • /exec/configure

userpassphrase sequence keyboard length

userpassphrase sequence keyboard length { <max-length> }

Syntax Description

userpassphrase

user passphrase

sequence

control character sequences in passphrases

keyboard

control runs of sequential keyboard characters

length

maximum number of sequential characters

max-length

Number of sequential characters

Command Mode

  • /exec/configure

userprofile trustedCert CRLLookup user-switch-bind user-certdn-match user-pubkey-match attribute-name search-filter base-DN

{ userprofile | trustedCert | CRLLookup | user-switch-bind | user-certdn-match | user-pubkey-match } attribute-name <s0> search-filter <s1> base-DN <s2>

Syntax Description

userprofile

Set the userprofile

trustedCert

Set the trustedCert

CRLLookup

Set the CRLLookup

user-switch-bind

Set the user-switch-bind

user-certdn-match

Set the certificate matching

user-pubkey-match

Set the pubkey matching

attribute-name

LDAP attribute-name

s0

Search Map attribute-name

search-filter

LDAP search-filter

s1

Search Map search-filter

base-DN

LDAP base-DN

s2

Search Map base-DN Name

Command Mode

  • /exec/configure/ldap/search