Cisco EPNM Command Reference

This appendix contains necessary information on disk space management for all types of Cisco Evolved Programmable Network Manager (EPNM) deployments and an alphabetical listing of the commands specific to the Cisco EPNM. The Cisco EPNM comprises the following modes:

EXEC
- System-level
- Show
Configuration
- configuration submode
  
  Use EXEC mode system-level config or configure command to access configuration mode.

Each of the commands in this appendix is followed by a brief description of its use, command syntax, any command defaults, command modes, usage guidelines, and one or more examples.

Note

If an error occurs in any command usage, use the debug command to determine the cause of the error.

EXEC Commands

This section lists each EXEC command and each command page includes a brief description of its use, command syntax, any command defaults, command modes, usage guidelines, and an example of the command and any related commands.

application install

To install an application bundle file, use the application install command in EXEC mode. There is no No form of this command.

application install bundle-name remote-repository

Syntax Description


`bundle-name`	Name of the application bundle file. Up to 255 alphanumeric characters.
`remote-repository`	Name of the configured remote repository. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Related Commands


	Description
application start	Starts or enables an application.
show application	Shows application information for the installed application packages on the system.

application remove

To uninstall an application, use the application remove command in EXEC mode. There is no No form of this command.

application remove bundle-name remote-repository

Syntax Description


`bundle-name`	Name of the application bundle file to be removed. Up to 255 alphanumeric characters.
`remote-repository`	Name of the configured remote repository. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Uninstalls an application.

Examples

epnm-ha-imeir-prim/admin# application remove NCS
Continue with application removal? [y/n]

Related Commands


	Description
application start	Starts or enables an application.
show application	Shows application information for the installed application packages on the system.

application reset-config

To reset an application configuration to factory defaults, use the reset-config command in EXEC mode. There is no No form of this command.

application reset-config application-name

Syntax Description


`application-name`	Name of the application that you want to reset. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Related Commands


	Description
application start	Starts or enables an application.
application remove	Uninstalls an application.

application start

To start the application process, use the application start command in EXEC mode. There is no NO form of this command.

application start application-name

Syntax Description


`application-name`	Name of the predefined application that you want to enable (maximum 255 alphanumeric characters).

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Enables an application.

You cannot use this command to start the Cisco EPNM application. If you use this command to start the application, you can see that the Cisco EPNM is already running.

Examples

epnm-system-168/admin# application start NCS
Starting EPNM...
This may take a while (10 minutes or more) ...
EPNM started successfully.
Redirecting to /bin/systemctl restart rsyslog.service
Completed in 1029 seconds

Related Commands


Command	Description
application stop	Stops or disables an application.
show application	Shows the application information for the installed application packages on the system.

application stop

To stop the process, use the application stop command in EXEC mode. There is no No form of this command.

application stop application-name

Syntax Description


`application-name`	Name of the predefined application that you want to disable. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Disables an application.

Examples

EPNM-system-117/admin# application stop NCS
EPNM-system/admin# application stop NCS
Stopping EPNM...
This may take a few minutes...
EPNM successfully shutdown.
Stopping SAM daemon...
Checking for SAM daemon again ...
SAM Daemon not found...
Stopping DA daemon ...
Checking for DA daemon again ...
DA Daemon not found...
Completed shutdown of all services

Related Commands


	Description
application start	Starts or enables an application.
show application	Shows application information for the installed application packages on the system.

application upgrade

To upgrade an application bundle, use the application upgrade command in EXEC mode. There is no No form of this command.

application upgrade bundle-name remote-repository

Syntax Description


`bundle-name`	Name of the application bundle file. Up to 255 alphanumeric characters.
`remote-repository`	Name of the configured remote repository. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Related Commands


	Description
application start	Starts or enables an application.
show application	Shows application information for the installed application packages on the system.

backup

Appliance Backup: To perform a backup (including the Cisco EPNM and Cisco ADE OS data) and place the backup in a repository, use the backup command in EXEC mode.

Application Backup: To perform a backup of only the Cisco EPNM application data without the Cisco ADE OS data, use the application keyword command.

Command for Appliance Backup:

backup backup-name repository repository-name

Command for Application Backup

backup backup-name repository repository-name application application-name

Syntax Description

backup-name

Name of the backup file. Up to 26 alphanumeric characters is recommended.

repository-name

Name of the location where the files should be backed up to. Up to 80 alphanumeric characters.

application-name

Application name. Up to 255 alphanumeric characters.

Note

Enter the application name in uppercase.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Performs a backup of the Cisco EPNM and Cisco ADE OS data and places the backup in a repository.

To perform a backup of only the Cisco EPNM application data without the Cisco ADE OS data, use the application command.

Examples

epnm-system/admin# backup Appliancebkp repository test

DO NOT press ^C while the backup is in progress
Aborting backup with a ^C may terminate the backup operation or the backup file may be corrupted

To restore this backup you will have to enter this password

Password :
Password Again :
  Backup Started at : 11/27/18 19:08:57
  Stage 1 of 7: Database backup ...
  Database size: 7.1G
  -- completed at  11/27/18 19:10:20
  Stage 2 of 7: Database copy ...
  -- completed at  11/27/18 19:10:20
  Stage 3 of 7: Backing up support files ...
  -- completed at  11/27/18 19:10:24
  Stage 4 of 7: Compressing Backup ...
  -- completed at  11/27/18 19:10:46
  Stage 5 of 7: Building backup file ...
  -- completed at  11/27/18 19:11:03
  Stage 6 of 7: Encrypting backup file ...
  -- completed at  11/27/18 19:11:09
  Stage 7 of 7: Transferring backup file ...
  -- completed at 11/27/18 19:11:11
% Backup file created is: Appliancebkp-201203-1035__VER3.10.0.0.164_BKSZ11G_CPU4_MEM3G_RAM11G_SWAP15G_SYS_CK1242187374.tar.gpg

Total Backup duration is: 0h:2m:18s
epnm-system/admin#

************************************************************************************************************************

Examples

epnm-system/admin# backup Applicationbkp repository test application NCS

DO NOT press ^C while the backup is in progress
Aborting backup with a ^C may terminate the backup operation or the backup file may be corrupted

To restore this backup you will have to enter this password

Password :
Password Again :
  Backup Started at : 11/27/18 19:13:33
  Stage 1 of 7: Database backup ...
  Database size: 7.1G
  -- completed at  11/27/18 19:14:17
  Stage 2 of 7: Database copy ...
  -- completed at  11/27/18 19:14:17
  Stage 3 of 7: Backing up support files ...
  -- completed at  11/27/18 19:14:19
  Stage 4 of 7: Compressing Backup ...
  -- completed at  11/27/18 19:14:34
  Stage 5 of 7: Building backup file ...
  -- completed at  11/27/18 19:14:50
  Stage 6 of 7: Encrypting backup file ...
  -- completed at  11/27/18 19:14:55
  Stage 7 of 7: Transferring backup file ...
  -- completed at 11/27/18 19:14:56
% Backup file created is: Applicationbkp-201203-1035__VER3.10.0.0.164_BKSZ11G_CPU4_MEM3G_RAM11G_SWAP15G_APP_CK1242187374.tar.gpg

Total Backup duration is: 0h:1m:26s
epnm-system/admin#


***************************************************************************************************************************************

Related Commands


Command	Description
delete	Deletes a file from the Cisco EPNM server.
repository	Enters the repository submode for configuration of backups.
restore	Restores from backup the file contents of a specific repository.
show backup history	Displays the backup history of the system.
show repository	Displays the available backup files located on a specific repository.

backup-logs

To back up system logs, use the backup-logs command in EXEC mode. There is no no form of this command.

backup-logs backup-name repository repository-name

Syntax Description


`backup-name`	Name of one or more files to back up. Up to 100 alphanumeric characters.
`repository-name`	Location where files should be backed up to. Up to 80 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Backs up system logs.

Examples


EPNM-admin/admin# backup-logs log-backup repository defaultRepo 
% Creating log backup with timestamped filename: log-backup-150621-1618.tar.gz 
  Transferring file ...
  -- complete.
EPNM-system/admin#

Related Commands


Command	Description
repository	Enters the repository submode for configuration of backups.
show repository	Shows the available backup files located on a specific repository.

banner

To set up messages while logging (pre-login) in to CLI, use the banner install pre-login command.

banner install pre-login banner-text-filename repository Repository-name

Syntax Description


`banner-text-filename`	Banner text file name.
`repository-name`	Repository name.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


admin#  banner install pre-login test.txt repository defaultRepo

Related Commands


Command	Description
show banner pre-login	Enables you to display a pre-login banner.

change-password

To change the password you use to log in to CLI interface, use the change-password command.

change-password password

Syntax Description


`password`	New password

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system/admin# change-password 
Changing password for user admin.
Changing password for admin.
(current) UNIX password: 
New password: 
Retype new password: 
passwd: all authentication tokens updated successfully.

clock

To set the system clock, use the clock command in EXEC mode. You cannot remove this function but reset the clock.

clock set [mmm dd hh:mm:ss yyyy]

Syntax Description


`mmm`	Current month of the year by name. Up to three alphabetic characters. For example, Jan for January.
`dd`	Current day (by date) of the month. Value = 0 to 31. Up to two numbers.
`hh:mm:ss`	Current time in hours (24-hour format), minutes, and seconds.
`yyyy`	Current year (no abbreviation).

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Sets the system clock. You must restart the Cisco EPNM server after you reset the clock for the change to take effect.

Examples

epnm-system-208/admin# clock set dec 4 12:00:00 2020
epnm-system-208/admin# show clock
Fri Dec 4 12:00:10 IST 2020
epnm-system-208/admin#

Related Commands


Command	Description
show clock	Displays the time and date set on the system software clock.

configure

To enter configuration mode, use the configure command in EXEC mode. If the replace option is used with this command, copies a remote configuration to the system which overwrites the existing configuration.

configure terminal

Syntax Description


terminal	Executes configuration commands from the terminal.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Use this command to enter configuration mode. Note that commands in this mode write to the running configuration file when you enter them (press Enter ).

To exit configuration mode and return to EXEC mode, enter end , exit , or press Ctrl-z .

To view the changes that you have made to the configuration, use the show running-config command in EXEC mode.

Examples


ncs/admin# configure
Enter configuration commands, one per line.  End with CNTL/Z.
ncs/admin(config)#


ncs/admin# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
ncs/admin(config)#

Related Commands


Command	Description
show running-config	Displays the contents of the currently running configuration file or the configuration.
show startup-config	Displays the contents of the startup configuration file or the configuration.

copy

To copy any file from a source to a destination, use the copy command in EXEC mode.

Syntax Description


running-config	Represents the current running configuration file.
startup-config	Represents the configuration file used during initialization (startup).
`protocol`	See Table 1 for protocol keyword options.
`hostname`	Hostname of destination.
`location`	Location of disk:/<dirpath>.
logs	The system log files.
all	Copies all the Cisco EPNM log files from the system to another location. All logs are packaged as ncslogs.tar.gz and transferred to the specified directory on the remote host.
filename	Allows you to copy a single Cisco EPNM log file and transfer it to the specified directory on the remote host, with its original name.
`log_filename`	Name of the Cisco EPNM log file, as displayed by the show logs command (up to 255 characters).
mgmt	Copies the Cisco EPNM management debug logs and Tomcat logs from the system, bundles them as mgmtlogs.tar.gz, and transfers them to the specified directory on the remote host.
runtime	Copies the Cisco EPNM runtime debug logs from the system, bundles them as runtimelogs.tar.gz, and transfers them to the specified directory on the remote host.

Command Default

No default behavior or values.

Command Modes

EXEC

Running Configuration

The fundamental function of the copy command allows you to copy a file (such as a system image or configuration file) from one location to another location. The source and destination of the file specified uses the Cisco EPN Manager file system, through which you can specify any supported local or remote file location. The file system being used (a local memory source or a remote system) dictates the syntax that is used in the command.

You can enter on the command line all the necessary source and destination information and the username and password to use; or, you can enter the copy command and have the server prompt you for any missing information. You can enter up to a maximum of 2048 characters of source and destination URL information on the command line.

The copy command in the Cisco EPNM copies a configuration (running or startup).

The Cisco EPNM active configuration stores itself in the Cisco EPNM RAM. Every configuration command that you enter resides in the running configuration. If you reboot your Cisco EPNM server, you lose the running configuration. If you make changes that you want to save, you must copy the running configuration to a safe location, such as a network server, or save it as the Cisco EPNM server startup configuration.

You cannot edit a startup configuration directly. All commands that you enter store themselves in the running configuration, which you can copy into the startup configuration.

In other words, when you boot a Cisco EPNM server, the startup configuration becomes the initial running configuration. As you modify the configuration, the two diverge: the startup configuration remains the same; the running configuration reflects the changes that you have made. If you want to make your changes permanent, you must save the running configuration to the startup configuration using the write memory command. The write memory command makes the current running configuration permanent.

Note

If you do not save the running configuration, you will lose all your configuration changes during the next reboot of the Cisco EPNM server. You can also save a copy of the running and startup configurations using the following commands, to recover in case of loss of configuration:

copy startup-config location

copy running-configlocation

Note

The copy command is supported only for the local disk and not for a repository.

Tip

Aliases reduce the amount of typing that you need to do. For example, type copy run start (the abbreviated form of the copy running-config startup-config command).

The entire copying process might take several minutes and differs from protocol to protocol and from network to network.

Use the filename relative to the directory for file transfers.

A possible error is the standard FTP error message.

Table 1. Protocol Prefix Keywords

Keyword

Destination

ftp

URL for FTP network server. The syntax for this alias:

ftp:// location// directory

sftp

URL for an SFTP network server. The syntax for this alias: sftp://location/directory

SFTP Repositories may require the // between the IP address/FQDN and the physical path on the SFTP store. If you find that you cannot access the SFTP repository with single slashes, add the additional slash and try the operation again. For example: url sftp://server//path

Note

The remote sftp servers need to be enabled for 'password authentication’ (keyboard-interactive mode does not work for sftp transfers). See the documentation on sshd server used at the remote end, to enable password authentication.

Depending on the SFTP software used with the remote server, you may need to enable "password authentication” instead of "keyboard-interactive mode”. Enabling “password authentication” is required; copy to remote SFTP servers will not work unless it is enabled. For example: With OpenSSH 6.6x, “keyboard-interactive mode” is the default. To enable “password authentication”, edit the OpenSSH sshd_config file to set the PasswordAuthentication parameter to “yes”, as follows: PasswordAuthentication yes.

tftp

URL for a TFTP network server. The syntax for this alias:

tftp:// location/ directory

Examples


ncs/admin# copy run start
Generating configuration...
ncs/admin#


ncs/admin# copy running-config startup-config
Generating configuration...
ncs/admin#


ncs/admin# copy start run
ncs/admin#


ncs/admin# copy startup-config running-config
ncs/admin#


ncs/admin# copy logs disk:/
 Collecting logs...
ncs/admin#

This command is used to copy the certificate from tftp to pnp.

copy tftp://<EPNM Server IP Address>/server.key disk:/
copy tftp://<EPNM Server IP Address>/server.crt disk:/
	copy tftp://<EPNM Server IP Address>/ncs_server_certificate.crt disk:/

Related Commands


Command	Description
delete	Deletes a file from the Cisco EPN Manager server.
dir	Lists a file from the Cisco EPN Manager server.

debug

To display errors or events for command situations, use the debug command in EXEC mode.

debug{all | application | backup-restore | cdp | config | icmp | copy | locks | logging | snmp | system | transfer | user | utils}

Syntax Description


all	Enables all debugging.
application	Application files. all—Enables all application debug output. Set level between 0 and 7, with 0 being severe and 7 being all. install—Enables application install debug output. Set level between 0 and 7, with 0 being severe and 7 being all. operation—Enables application operation debug output. Set level between 0 and 7, with 0 being severe and 7 being all. uninstall—Enables application uninstall debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
backup-restore	Backs up and restores files. all—Enables all debug output for backup-restore. Set level between 0 and 7, with 0 being severe and 7 being all. backup—Enables backup debug output for backup-restore. Set level between 0 and 7, with 0 being severe and 7 being all. backup-logs—Enables backup-logs debug output for backup-restore. Set level between 0 and 7, with 0 being severe and 7 being all. history—Enables history debug output for backup-restore. Set level between 0 and 7, with 0 being severe and 7 being all. restore—Enables restore debug output for backup-restore. Set level between 0 and 7, with 0 being severe and 7 being all.
cdp	Cisco Discovery Protocol configuration files. all—Enables all Cisco Discovery Protocol configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. config—Enables configuration debug output for Cisco Discovery Protocol. Set level between 0 and 7, with 0 being severe and 7 being all. infra—Enables infrastructure debug output for Cisco Discovery Protocol. Set level between 0 and 7, with 0 being severe and 7 being all.
config	Configuration files. all—Enables all configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. backup—Enables backup configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. clock—Enables clock configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. infra—Enables configuration infrastructure debug output. Set level between 0 and 7, with 0 being severe and 7 being all. kron—Enables command scheduler configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. network—Enables network configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. repository—Enables repository configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all. service—Enables service configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
copy	Copy commands. Set level between 0 and 7, with 0 being severe and 7 being all.
icmp	Internet Control Message Protocol (ICMP) echo response configuration. all—Enable all debug output for ICMP echo response configuration. Set level between 0 and 7, with 0 being severe and 7 being all.
locks	Resource locking. all—Enables all resource locking debug output. Set level between 0 and 7, with 0 being severe and 7 being all. file—Enables file locking debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
logging	Logging configuration files. all—Enables all logging configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
snmp	SNMP configuration files. all—Enables all SNMP configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
system	System files. all—Enables all system files debug output. Set level between 0 and 7, with 0 being severe and 7 being all. id—Enables system ID debug output. Set level between 0 and 7, with 0 being severe and 7 being all. info—Enables system info debug output. Set level between 0 and 7, with 0 being severe and 7 being all. init—Enables system init debug output. Set level between 0 and 7, with 0 being severe and 7 being all.
transfer	File transfer. Set level between 0 and 7, with 0 being severe and 7 being all.
user	User management. all—Enables all user management debug output. Set level between 0 and 7, with 0 being severe and 7 being all. password-policy—Enables user management debug output for password-policy. Set level between 0 and 7, with 0 being severe and 7 being all.
utils	Utilities configuration files. all—Enables all utilities configuration debug output. Set level between 0 and 7, with 0 being severe and 7 being all.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Use the debug command to identify various failures within the Cisco EPNM server; for example, setup failures or configuration failures.

Examples


ncs/admin# debug all
ncs/admin# mkdir disk:/1
ncs/admin# 6 [15347]: utils: vsh_root_stubs.c[2742] [admin]: mkdir operation success

ncs/admin# rmdir disk:/1
6 [15351]: utils: vsh_root_stubs.c[2601] [admin]: Invoked Remove Directory disk:/1 command
6 [15351]: utils: vsh_root_stubs.c[2663] [admin]: Remove Directory operation success
ncs/admin#

ncs/admin# undebug all
ncs/admin#

Related Commands


Command	Description
undebug	Disables the output (display of errors or events) of the debug command for various command situations.

delete

To delete a file from the server, use the delete command in EXEC mode. There is no no form of this command.

delete filename [disk:/path]

Syntax Description


`filename`	Filename.
`disk:/path`	Location.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

If you attempt to delete the configuration file or image, the system prompts you to confirm the deletion. Also, if you attempt to delete the last valid system image, the system prompts you to confirm the deletion.

Examples


ncs/admin# delete disk:/hs_err_pid19962.log
ncs/admin#

Related Commands


Command	Description
dir	Lists all of the files on the Cisco EPNM server.

dir

To list a file from the Cisco EPNM server, use the dir command in EXEC mode. To remove this function, use the no form of this command.

dir [word][recursive]

Syntax Description


`word`	Directory name. Up to 80 alphanumeric characters. Requires disk:/ preceding the directory name.
recursive	Lists a local directory or filename recursively.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system-208/admin# dir
Directory of disk:/

20 Dec 02 2020 09:07:53 crash
4096 Dec 03 2020 10:48:22 defaultRepo/
4096 Dec 04 2020 12:27:33 ftp/
4096 Dec 03 2020 12:18:28 logs/
16384 Dec 01 2020 15:25:15 lost+found/
4096 Dec 02 2020 22:49:13 sftp/
4096 Dec 02 2020 09:06:12 ssh/
4096 Dec 02 2020 09:06:12 telnet/
4096 Dec 02 2020 09:46:31 tftp/

Usage for disk: filesystem
1031405568 bytes total used
42919706624 bytes free
46310408192 bytes available
epnm-system-208/admin#

Related Commands


Command	Description
delete	Deletes a file from the Cisco EPNM server.

exit

To close an active terminal session by logging out of the Cisco EPNM server or to move up one mode level from configuration mode, use the exit command in EXEC mode.

exit

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Use the exit command in EXEC mode to exit an active session (log out of the Cisco EPNM server) or to move up from configuration mode.

Examples

epnm-system/admin# exit
Connection closing...Socket close.
Connection closed by foreign host.
Disconnected from remote host(10.197.71.160:22) at 10:51:43.

Related Commands


Command	Description
end	Exits the configuration mode.
exit	Exits the configuration mode or EXEC mode.
Ctrl-z	Exits configuration mode.

forceout

To force users out of an active terminal session by logging them out of the Cisco EPNM server, use the forceout command in EXEC mode.

forceout username

Syntax Description


`username`	The name of the user. Up to 31 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# forceout user1
ncs/admin#

Related Commands


	Description
show users	Displays the list of users logged in to the Cisco EPNM server.

halt

To shut down and power off the system, use the halt command in EXEC mode.

halt

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Before you enter the halt command, ensure that the Cisco EPNM is not performing any backup, restore, installation, upgrade, or remove operation. If you enter the halt command while the Cisco EPNM is performing any of these operations, you get one of the following warning messages:


WARNING: A backup or restore is currently in progress! Continue with halt?

WARNING: An install/upgrade/remove is currently in progress! Continue with halt?

If you get any of these warnings, enter yes to halt the operation, or enter no to cancel the halt.

If no processes are running when you use the halt command or if you enter Yes in response to the warning message displayed, the Cisco EPNM asks you to respond to the following option:


Do you want to save the current configuration ?

Enter YES to save the existing Cisco EPNM configuration. The Cisco EPNM displays the following message:


Saved the running configuration to startup successfully

Examples


epnm-system/admin# halt
Save the current ADE-OS running configuration? (yes/no) [yes] ? yes
Generating configuration...
Saved the ADE-OS running configuration to startup successfully
Continue with shutdown? [y/n] y
Broadcast message from root (pts/0) (Wed May  5 18:37:02 2010):
The system is going down for system halt NOW!
Server is shutting down...

Related Commands


Command	Description
reload	Reboots the system.

mkdir

To create a new directory on the Cisco EPNM server, use the mkdir command in EXEC mode.

mkdir directory-name [disk:/path]

Syntax Description


`directory-name`	The name of the directory to create. Up to 80 alphanumeric characters.
`disk:/path`	Use `disk:/path` with the directory name.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Use disk :/path with the directory name; otherwise, an error appears that indicates that the disk :/path must be included.

Examples


ncs/admin# mkdir disk:/test
ncs/admin# dir

Directory of disk:/

       4096 May 06 2010 13:34:49  activemq-data/
       4096 May 06 2010 13:40:59  logs/
      16384 Mar 01 2010 16:07:27  lost+found/
       4096 May 06 2010 13:42:53  target/
       4096 May 07 2010 12:26:04  test/

           Usage for disk: filesystem
                  181067776 bytes total used
                19084521472 bytes free
                20314165248 bytes available
ncs/admin#

Related Commands


Command	Description
dir	Displays a list of files on the Cisco EPNM server.
rmdir	Removes an existing directory.

ncs certvalidation certificate-check

To enable or disable the certificate validation, use ncs certvalidation certificate-check command in EXEC mode.

ncs certvalidation certificate-check { disable | enable | trust-on-first-use } trustzone trustzone_name

Syntax Description


`disable`	Disable certificate validation
`enable`	Enable certificate validation
`trust-on-first-use`	Trust and pin the host certificate on first use
`trustzone_name`	Name of the trustzone

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-system/admin# ncs certvalidation certificate-check trust-on-first-use trustzone system


ncs certvalidation certificate-check enable trustzone system

ncs certvalidation custom-ocsp-responder

To configure a custom OCSP responder, use ncs certvalidation custom-ocsp-responder command in EXEC mode.

ncs certvalidation custom-ocsp-responder { clear url | disable | enable | set url }

Syntax Description


clear	Clear OCSP responder URL
disable	Disable custom OCSP responder
enable	Enable custom OCSP responder
set	Set OCSP responder URL

Note

You must restart the EPNM after using any of the above ncs certvalidation entries.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system/admin# ncs certvalidation custom-ocsp-responder enable 
epnm-system/admin# ncs certvalidation custom-ocsp-responder set url1 http://10.104.119.201
epnm-system/admin# ncs certvalidation custom-ocsp-responder clear url1
epnm-system/admin# ncs certvalidation custom-ocsp-responder disable

ncs certvalidation revocation-check

To enable or disable revocation check using OCSP or CRL, use ncs certvalidation revocation-check command in EXEC mode.

ncs certvalidation revocation-check { disable | enable } trustzone { devicemgmt | pubnet | system | user }

Syntax Description


`disable`	Disable certificate revocation
`enable`	Enable certificate revocation

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system/admin# ncs certvalidation revocation-check enable trustzone system 
epnm-system/admin#

ncs certvalidation tofu-certs

To view and delete the certificates trusted on the first use, use ncs certvalidation tofu-certs command in EXEC mode.

ncs certvalidation tofu-certs { listcerts | deletecert host host_name }

Syntax Description


`deletecert`	Delete a trust-on-first-use cert for a host
`listcerts`	List certificates trusted on first use

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1: listcert

epnm-system/admin# ncs certvalidation tofu-certs listcerts 
Host certificate are automatically added to this list on first connection, if
trust-on-first-use is configured - ncs certvalidation certificate-check ...
host=10.197.71.121_8082; subject= /C=US/ST=CA/L=SJ/O=Cisco Systems/OU=EPNM/CN=epnm-system-121
epnm-system/admin#

Example 2: deletecerts

epnm-system/admin# ncs certvalidation tofu-certs deletecert host 10.197.71.121_8082
Deleted entry for 10.197.71.121_8082
epnm-system/admin#

ncs certvalidation trusted-ca-store

To configure a trusted CA certificate store, use ncs certvalidation trusted-ca-store command in EXEC mode.

ncs certvalidation trusted-ca-store { auto-ca-update { enable | disable truststore truststore_name } | deletecacert alias { alias_name truststore truststore_name { devicemgmt | pubnet | system | user } } | importcacert alias alias_name repository repository_name truststore truststore_name | listcacerts truststore trustsore_name }

Syntax Description


`auto-ca-update`	Auto update list of trusted CA certs during software update
`deletecacert`	Enable certificate validation
`importcacert`	Import a certificate to the trust store
`listcacerts`	List all trusted CA certificates
`truststore_name`	Name of the truststore
devicemgmt	Trust store used for validating cert from managed devices
pubnet	Trust store used for validating cert from public internet
system	Trust store used for validating cert from other peer systems
user	Trust store used for validating cert for user login

Command Default

No default behavior or values.

Command Modes

Configuration

Examples

Example 1: auto-ca-upadate

epnm-system/admin# ncs certvalidation trusted-ca-store auto-ca-update enable truststore system 
epnm-system/admin# ncs certvalidation trusted-ca-store auto-ca-update disable truststore system 
epnm-system/admin#

Example 2: deletecacert

epnm-system/admin# ncs certvalidation trusted-ca-store deletecacert alias quovadisroot truststore system 
Deleted CA certificate from trust store. Changes will take affect on the next server restart
epnm-system/admin#

Example 3: importcacert

epnm-system/admin# ncs certvalidation trusted-ca-store importcacert alias ALIAS repository defaultRepo epnm.cer truststore system
Imported CA certificate to trust store. Changes will take affect on the next server restart
epnm-system/admin#

Example 3: listcacert

epnm-system/admin# ncs certvalidation trusted-ca-store listcacerts truststore pubnet
ciscoeccrootca, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 52:EC:7D:BB:5C:65:11:DD:C1:C5:46:DB:BC:29:49:B5:AB:E9:D0:EE
ciscorootcam2, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 93:3D:63:3A:4E:84:0D:A4:C2:8E:89:5D:90:0F:D3:11:88:86:F7:A3
ciscorootca2048, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): DE:99:0C:ED:99:E0:43:1F:60:ED:C3:93:7E:7C:D5:BF:0E:D9:E5:FA
ciscorootcam1, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 45:AD:6B:B4:99:01:1B:B4:E8:4E:84:31:6A:81:C2:7D:89:EE:5C:E7
quovadisrootca2, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): CA:3A:FB:CF:12:40:36:4B:44:B2:16:20:88:80:48:39:19:93:7C:F7
ciscorootca2099, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): AC:1E:DE:2E:1C:97:0F:ED:3E:E8:5F:8C:3A:CF:E2:BA:C0:4A:13:76
ciscolicensingrootca, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 5C:A9:5F:B6:E2:98:0E:C1:5A:FB:68:1B:BB:7E:62:B5:AD:3F:A8:B8
verisignclass3publicprimarycertificationauthorityg5, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 4E:B6:D5:78:49:9B:1C:CF:5F:58:1E:AD:56:BE:3D:9B:67:44:A5:E5
ciscorxcr2, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): 2C:8A:FF:CE:96:64:30:BA:04:C0:4F:81:DD:4B:49:C7:1B:5B:81:A0
digicertglobalrootca, Nov 28, 2018, trustedCertEntry, 
Certificate fingerprint (SHA1): A8:98:5D:3A:65:E5:E5:C4:B2:D7:D6:6D:40:C6:DD:2F:B1:9C:54:36
epnm-system/admin#

ncs cleanup

To clean up the data that are listed below and reclaim the disk space, use the ncs cleanup command in EXEC mode.

Files under /opt/backup
*.m-n.logs, *.n.logs, *.log.n log files under /opt/CSCOlumos/logs
Regular files under /localdisk
.hprof file under opt/CSCOlumos/crash
Matlab*.log under /opt/tmp/
.trm and .trc files under /opt/oracle/base/diag/rdbms/*/*/trace
Older expired Archive logs and backup set under /opt/oracle/base/fast_recovery_area/WCS

ncs cleanup

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

When the Cisco EPNM does not have enough disk space, an alarm is raised to free up and reclaim the disk space. If you enter the ncs cleanup command, you see the following confirmation message:

Do you want to delete all the files in the local disk partition? (Y/N)

Examples


epnm-system-117/admin# ncs cleanup
Starting Cleanup: Wed Feb 28 01:50:44 IST 2019
===================================================
{Wed Aug 12 01:50:47 IST 2019} Removing all files in backup staging directory
{Wed Aug 12 01:50:47 IST 2019} Removing all Matlab core related files
 {Wed Aug 12 01:50:47 IST 2019} Removing all older log files
 {Wed Aug 12 01:50:47 IST 2019} Cleaning older archive logs
 {Wed Aug 12 01:51:03 IST 2019} Cleaning database backup and all archive logs
 {Wed Aug 12 01:51:03 IST 2019} Cleaning older database trace files
 {Wed Aug 12 01:51:03 IST 2019} Removing all user local disk files
 {Wed Aug 12 01:51:03 IST 2019} Cleaning database
{Wed Aug 12 01:51:05 IST 2019} Stopping server
 {Wed Aug 12 01:52:05 IST 2019} Not all server processes stop. Attempting to stop \ remaining
 {Wed Aug 12 01:52:05 IST 2019} Stopping database
 {Wed Aug 12 01:52:07 IST 2019} Starting database
 {Wed Aug 12 01:52:20 IST 2019} Starting database clean
 {Wed Aug 12 01:58:50 IST 2019} Completed database clean
 {Wed Aug 12 01:58:50 IST 2019} Stopping database
 {Wed Aug 12 01:59:14 IST 2019} Starting server
===================================================
 Completed Cleanup
 Start Time: Mon Aug 28 01:50:44 IST 2019
Completed Time: Mon Aug 28 02:07:07 IST 2019
epnm-system-117/admin#

ncs ha authkey

To enter the authentication key for high availability (HA), use the ncs ha authkey command in EXEC mode.

ncs ha authkey authorization key

Syntax Description


`authorization key`	The authorization key for high availability. Up to 80 alphanumeric characters, must contain a combination of characters that include lowercase letters, uppercase letters, and digits.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

The ncs ha authkey command changes the authorization for the health monitor.

Examples

This example shows how to set up the authorization key for high availability:

epnm-system/admin#ncs ha authkey cisco123
Going to update primary authentication key
Successfully updated primary authentication key
Successfully intimated  Primary updated  authentication key to Secondary Server
epnm-system/admin#

Related Commands


Command	Description
ncs ha remove	Removes the high availability configuration settings from Cisco EPN Manager.
ncs ha status	Provides the current status of high availability.

Note

After changing the HA authentication key using the ncs ha authkey command, the HA readiness check may fail with the error Authentication key does not match between primary and secondary servers, even though the key is correct. This occurs because the readiness check might be referencing outdated or cached information.

To resolve this issue,

if the servers are unpaired, run the ncs ha authkey command on both the primary and secondary servers with the same password, and restart both servers.
If the servers are paired, run the command only on the primary server.

ncs ha configure

To control high availability (HA) operations, use the ncs ha configure command in EXEC mode.

ncs ha configure

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

To control HA operations.

If you enter the ncs ha configure command, you see the following sub-commands:

epnm-dev-vm-54/admin# ncs ha configure ?
  dgtimeout             Update the DataGuard Time out for high availability
  hbinterval            Update the HM interval for high availability
  hbretry               Update the HM retry for high availability
  sqlexpiretime         Update the DB SqlExpireTime for high availability
  sqlinboundtimeout     Update the DB SqlInBoundTimeout for high availability
  tcpkeepaliveintvl     Update the Tcp Keep Alive Intvl for high availability
  tcpkeepaliveprobes    Update the Tcp Keep Alive Probes for high availability
  tcpkeepalivetime      Update the Tcp Keep Alive Time for high availability
  updatecheckreadiness  Update CheckReadiness

Related Commands


Command	Description
ncs ha authkey	Allows you to enter the authentication key for high availability in Cisco EPNM. This command also changes the authorization for the health monitor.
ncs ha remove	Removes the high availability configuration.

ncs ha monitor interface add

You can add interface to high availability monitoring using ncs ha monitor interface add command in EXEC mode.

ncs ha monitor interface add [ GigabitEthernet | Team ] [ interface number ]

Command Default

No default behavior or values.

Command Modes

EXEC

ncs ha monitor interface del

You can delete interface from high availability monitoring using ncs ha monitor interface del command in EXEC mode.

ncs ha monitor interface del [ GigabitEthernet | Team ] [ interface number ] }

Command Default

No default behavior or values.

Command Modes

EXEC

ncs ha northbound interface

You can set northbound interface using ncs ha northbound interface command in EXEC mode.

ncs ha northbound interface [ GigabitEthernet | Team ] [ interface number ]

Command Default

Default mode is GigabitEthernet 0.

Command Modes

EXEC

ncs ha remove

To remove the high availability configuration settings from Cisco EPNM, use the ncs ha remove command in EXEC mode.

ncs ha remove

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

The ncs ha remove command removes the high availability configuration settings from the Cisco EPNM. If you enter this command, you will see the following confirmation message:

High availability configuration will be removed.
Do you wish to continue? (Y/N)

Examples



epnm-system/admin# ncs ha remove
High availability configuration will be removed
Do you wish to continue? (y/N)  y

Removing primary configuration will remove all database information
Primary is attempting to remove high availability configuration from both primary    \
and secondary
Successfully removed high availability configuration
epnm-system/admin#

Related Commands


Command	Description
ncs ha authkey	Allows you to enter the authentication key for high availability in Cisco EPNM. This command also changes the authorization for the health monitor.
ncs ha status	Provides the current status of high availability.

ncs ha status

To display the current status of high availability (HA), use the ncs ha status command in EXEC mode.

ncs ha status

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Displays the current status of HA.

If you enter the ncs ha status command, you see the following response:

Examples



epnm-system/admin# ncs ha status
[Role] Primary [State] HA not Configured
epnm-systems/admin#

In Primary server:



epnm-system/admin# ncs ha status
[Role] Primary [Secondary Server] 10.197.71.162(10.197.71.162) [State] Primary       
Active [Failover Type] Automatic
epnm-system/admin#

In Secondary server:



epnm-system/admin# ncs ha status
[Role] Secondary [Primary Server] epnm-system-161(10.197.71.161) [State] Secondary     
Syncing [Failover Type] Automatic
epnm-system/admin#

Related Commands


Command	Description
ncs ha authkey	Allows you to enter the authentication key for high availability in Cisco EPNM. This command also changes the authorization for the health monitor.
ncs ha remove	Removes the high availability configuration.

ncs key genkey

To generate a new RSA key and self-signed certificate, use the ncs key genkey command. You can use this command in the following ways:

ncs key genkey -newdn -csr csrfilename repository repositoryname

Syntax Description


genkey	Generates a new RSA key and self-signed certificate. You can use the following options with this command: -csr: Generates Certificate Signing Request (CSR) file. -newdn: Generates a new RSA key and self-signed certificate with domain information. <cr>: Carriage return.
-newdn	Generates a new RSA key and self-signed cert with domain information. You can use the following options with this command: -csr: Generates Certificate Signing Request(CSR) file. <cr>: Carriage return.
-csr	Generates a new CSR certificate file. You can use the following option with this command: <WORD>: Types in a certificate file name (Max Size - 80).
csrfilename	CSR filename.
repository	Repository command. This option is available when you use the -csr option.
repositoryname	Location where the files should be backed up to. Up to 80 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to generate a new rsa key and certificate files in the Cisco EPNM server:

epnm-cluster-88/admin# ncs key genkey -newdn -csr test.csr repository defaultRepo

Changes will take affect on the next server restart
  Enter the fully qualified domain name of the server !!!!: epnm-cluster-88.cisco.com
  Enter the name of your organization unit !!!!!!!!!!!!!!!: cisco      
  Enter the name of your organization !!!!!!!!!!!!!!!!!!!!: hcl          
  Enter the name of your city or locality !!!!!!!!!!!!!!!!: chennai
  Enter the name of your state or province !!!!!!!!!!!!!!!: tn  
  Enter the two letter code for your country !!!!!!!!!!!!!: US
    Specify subject alternate names. 
    If none specified, CN will be used.
  Use comma seperated list - DNS:<name>,IP:<address> !!!!!:                         \
DNS:epnm-cluster-88.cisco.com,IP:10.126.168.88

  Specify the public key algorithm [rsa/ec] !!!!!!!!!!!!!!: rsa
  Specify the RSA key size [2048/4096/8192] !!!!!!!!!!!!!!: 4096
  Specify the signature algorithm [sha256/sha512] !!!!!!!!: sha256

Key and CSR/Certificate will be generated with following details
  Subject                :                                                          \
/C=US/ST=tn/L=chennai/O=hcl/OU=cisco/CN=epnm-cluster-88.cisco.com
  Subject Alternate Name : DNS:epnm-cluster-88.cisco.com,IP:10.126.168.88
  Public Key Alg         : rsa, 4096
  Signature Alg          : sha256

Continue [yes] : yes
Generating...
Completed generating new key...Changes will take affect on the next server restart
Note: You can provide comma separated list of FQDN and IP of EPNM servers where you want to import the same certificate received from CA.
To import same CA in other server, you need to import the key from the server where you generate CSR and them import the CA certiifcates.

Note

You will get a csr file generated in the location where the repository is pointing. Use that csr file get a CA certificate or signed certificate from any CA agent.

Related Commands


Command	Description
ncs key importsignedcert	Applies an RSA key and signed certificate to Cisco EPNM.
ncs key importkey	Applies an RSA key and certificate to Cisco EPNM.

Note

After entering this command, enter the ncs stop and ncs start command to restart the Cisco EPNM server.

ncs key importkey

To apply an RSA key and signed certificate to the Cisco EPNM, use the ncs key importkey command in EXEC mode.

To export key:

ncs key exportkey key-filename cert-filename repository repositoryname

To import key:

ncs key importkey key-filename cert-filename repository repositoryname

Syntax Description


key-filename	RSA private key file name.
cert-filename	Certificate file name.
repository	Repository command
repositoryname	The repository name configured in the Cisco EPNM where the key-file and cert-file are hosted.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to apply the new RSA key and certificate files to the server.

ncs key exportkey private.key server.cer repository defaultRepo


ncs key importkey keyfile certfile repository ncs-sftp-repo

Note

After applying this command, enter the ncs stop and ncs start command to restart the server.

Related Commands


Command	Description
ncs key genkey	Generates a new RSA key and a self-signed certificate.
ncs key importsignedcert	Applies an RSA key and signed certificate to Cisco EPNM.

ncs key importsignedcert

To apply an RSA key and signed certificate, use the ncs key importsignedcert command EXEC mode.

ncs key importsignedcert signed-cert-filename repository repositoryname

Syntax Description


signed-cert-filename	Signed certificate filename.
repository	Repository command
repositoryname	The repository name that is configured in Cisco EPNM where the key-file and cert-file is hosted.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to apply signed certificate files to the Cisco EPNM server:


>	ncs key importsignedcert signed-certfile repository ncs-sftp-repo

Note

After applying this command, enter the ncs stop and the ncs start command to restart the Cisco EPNM server to make changes take effect.

Related Commands


Command	Description
ncs key genkey	Generates a new RSA key and self-signed certificate.
ncs key importkey	Applies an RSA key and signed certificate to Cisco EPNM.

ncs password ftpuser

To change the FTP username and password, use the ncs password ftpuser command in EXEC mode.

Note

The value for ftpuser in the above command should always be set to ftp-user.

After you enable the ftp-user, you can FTP files to and from the /localdisk/ftp folder on standalone or, if configured, High Availability primary servers only. You cannot use change directory (cd) or list directory (ls) functionality with ftp-user.

ncs password ftpuser ftp-user password password

Syntax Description


`ftp-user`	The FTP user name

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to change the FTP username and password:


epnm-system-65/admin# ncs password ftpuser ftp-user password Password123
Updating FTP password
Saving FTP account password in credential store
Synching FTP account passwd to database store - location-ftp-user
Synching FTP account password to system store
Completed FTP password update
epnm-system-65/admin#

ncs password root password

To change the root password, use the ncs password root password command in EXEC mode.

ncs password root password userpassword

Syntax Description


`userpassword`	Password for the root user.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to change the root password:


epnm-systems/admin# ncs password root password Userpassword
Password updated for web root user
epnm-systems/admin#

ncs run client-auth

You can enable client certificate authentication on your Cisco EPNM application using ncs run client-auth command.

ncs run client-auth enable

ncs run client-auth disable

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system-117/admin# ncs run client-auth enable

WARNING :

This feature requires the CA certificate to be installed on the system.
Please use the command 'ncs key importcacert ..." to
import the certificate of the CA used to sign the client certificates.
Ignore this warning if the CA certificate is already installed.

Use the 'disable' option of this command, to disable client authentication,
if not required.

client_auth status : enabled
epnm-system-117/admin#

epnm-system-117/admin# ncs run client-auth disable
client_auth status : disabled
epnm-system-117/admin#

ncs run csrf

The cross-site request forgery check can be disabled (not recommended). The CLI provided only for backward compatibility with API clients which are not programmed for CSRF protection. For CSRF protection, this option should be enabled using the following command.

ncs run csrf enable

To disable, use the following command:

ncs run csrf disable

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-cluster-93/admin# ncs run csrf enable


epnm-cluster-93/admin# ncs run csrf disable

ncs run custom-subject-oid-type-regex

You can set custom OID type regular expression using ncs run custom-subject-oid-type-regex command in EXEC mode.

ncs run custom-subject-oid-type-regex { regex }

Command Default

No default behavior or values.

Command Modes

EXEC

ncs run custom-subject-oid-type

You can set custom OID type using ncs run custom-subject-oid-type command in EXEC mode.

ncs run custom-subject-oid-type { disable | cn | sn | serialnumber | c | l | st | s | street | o | ou | t | title | g | gn | e | emailaddress | email | uid | dc }

Command Default

No default behavior or values.

Command Modes

EXEC

ncs run gen-sec-pwd

To generate a secure password, you can use the ncs run gen-sec-pwd command in EXEC mode.

ncs run gen-sec-pwd

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-imeir-ha-prim/admin# ncs run gen-sec-pwd
Ukx(mr0j
epnm-imeir-ha-prim/admin#

ncs run jms

Cisco EPNM can send notifications to a Java Message Server (JMS) whenever there are changes in the inventory or configuration parameters that are a part of an audit you have defined. You can enable or disable this feature using ncs run jms command.

ncs run jms enable

ncs run jms disable

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-cluster-93/admin# ncs run jms enable


epnm-cluster-93/admin# ncs run jms disable
Connectivity to the JMS (message bus) from external servers disabled.
Connectivity is required for external  PnP Gateway servers to interact
with the EPNM server.

Use the 'enable' option of this command, to enable connectivity again.

ncs run list

To display the list of commands associated with NCS, use ncs run list command in EXEC mode.

ncs run list

Command Default

No default behavior or arguments

Command Modes

EXEC

Examples


commands :
  list - prints this list

  test iops - tests the disk write performance
  reset [db|keys] - reset database and keys to default factory settings

  csrf [disable|enable] - enable or disable CSRF protection
  client-auth [disable|enable] - enable or disable client certificate based authentication
  jms [disable|enable] - enable or disable message bus connectivity (port 61617)

  sshclient-nonfips-ciphers [disable|enable] - enable or disable non fips compliant ciphers for outgoing ssh client connections to devices
  ssh-server-legacy-algorithms [disable|enable] - enable or disable legacy algorithms for SSH service.
  tls-server-versions <tls_versions> - set the TLS versions to be enabled for TLS service  - TLSv1.2 TLSv1.1 TLSv1
  tls-server-ciphers <tls_cipher_groups> - set the TLS cipher group to be enabled  for TLS service - tls-ecdhe-sha2 tls-ecdhe-sha1 tls-dhe-sha2 tls-dhe-sha1 tls-static-sha2 tls-static-sha1
  livelogs [all|secure|ade|messages] - view live audit logs
  loghistory [all|secure|ade|messages] - view audit logs
  gen-sec-pwd - Generate secure password
  ssh-server-single-legacy-algorithm [list | reset | algorithms] -algorithms with space seperated
  ocsp-responder [disable|enable] - enable or disable OCSP Responder (requires EPNM restart)
  custom-subject-oid-type [disable|cn|sn|serialnumber|c|l|st|s|street|o|ou|t|title|g|gn|e|emailaddress|email|uid|dc] - custom OID type
  custom-subject-oid-type-regex [regex] - custom OID type regular expression

ncs run livelogs

You can run ncs run livelogs command to view live audit logs.

ncs run livelogs { all | secure | ade | messages }

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system-120/admin# ncs run livelogs
***Available filter options to limit logs - all  secure ade messages***
************Press Ctrl+C for stop logging*****************
2018-02-28T01:48:39.407787+05:30 epnm-system-120 sshd[10309]: pam_unix(sshd:session): \
session closed for user admin
2018-02-28T01:50:14.109435+05:30 epnm-system-120 sshd[32038]:                         \
pam_tally2(sshd:account): option unlock_time=60 allowed in auth phase only
2018-02-28T01:50:14.109456+05:30 epnm-system-120 sshd[32038]:                         \
pam_tally2(sshd:account): unknown option: no_reset
2018-02-28T01:50:14.112152+05:30 epnm-system-120 sshd[32038]: pam_unix(sshd:session): \
session opened for user admin by (uid=0)
2018-02-28T02:00:57.499844+05:30 epnm-system-120 sshd[32038]: pam_unix(sshd:session): \
session closed for user admin
2018-02-28T02:04:28.870085+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-28T02:04:28.976462+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-28T02:21:30.485537+05:30 epnm-system-120 sshd[6381]:                          \
pam_tally2(sshd:account): option unlock_time=60 allowed in auth phase only
2018-02-28T02:21:30.485556+05:30 epnm-system-120 sshd[6381]:                          \
pam_tally2(sshd:account): unknown option: no_reset
2018-02-28T02:21:30.488589+05:30 epnm-system-120 sshd[6381]: pam_unix(sshd:session):  \
session opened for user admin by (uid=0)

2018-02-28T02:25:04.370446+05:30 epnm-system-120 debugd[3229]: [7471]:                \
config:network: sysconfig.c[1116] [admin]: Getting ipaddress for eth1
2018-02-28T02:25:04.377607+05:30 epnm-system-120 debugd[3229]: [7471]:                \
config:network: syscfg_cli.c[1098] [admin]: No ipaddress for interface eth1
2018-02-28T02:25:04.384642+05:30 epnm-system-120 ADEOSShell[7471]: Change Audit       \
Details:SUCCESS:CARS                                                                \
CLI:carsGetIfState::root:/opt/system/bin/carssh:NotFromTerminal:5: 
2018-02-28T02:25:04.384720+05:30 epnm-system-120 debugd[3229]: [7471]:                \
config:network: syscfg_cli.c[1105] [admin]: Interface eth1 is down
2018-02-28T02:25:04.384777+05:30 epnm-system-120 debugd[3229]: [7471]:                \
config:network: syscfg_cli.c[1011] [admin]: Getting dhcpv6 enabled for eth1
2018-02-28T02:25:04.405866+05:30 epnm-system-120 ADEOSShell[7471]: Change Audit       \
Details:SUCCESS:CARS                                                                \
CLI:carsGetNameserver::root:/opt/system/bin/carssh:NotFromTerminal:6: 
2018-02-28T02:25:04.412912+05:30 epnm-system-120 ADEOSShell[7471]: Change Audit       \
Details:SUCCESS:CARS                                                                \
CLI:carsGetNameserver::root:/opt/system/bin/carssh:NotFromTerminal:7: 
2018-02-28T02:25:04.420049+05:30 epnm-system-120 ADEOSShell[7471]: Change Audit       \
Details:SUCCESS:CARS                                                                \
CLI:carsGetNameserver::root:/opt/system/bin/carssh:NotFromTerminal:8: 
2018-02-28T02:25:04.427224+05:30 epnm-system-120 ADEOSShell[7471]: Change Audit       \
Details:SUCCESS:CARS                                                                \
CLI:carsGetGateway::root:/opt/system/bin/carssh:NotFromTerminal:9: 
2018-02-28T02:28:16.411167+05:30 epnm-system-120 ADEOSShell[8312]: Change Audit       \
Details:SUCCESS:CARS CLI:run_command::root:/opt/system/bin/carssh:/dev/pts/1:1: 

2018-02-28T02:21:25.649026+05:30 epnm-system-120 sshd[6381]: Operating in CiscoSSL    \
Common Criteria mode
2018-02-28T02:21:25.654950+05:30 epnm-system-120 sshd[6381]: FIPS mode initialized
2018-02-28T02:21:25.806409+05:30 epnm-system-120 sshd[6381]: Outbound-ReKey for       \
10.77.144.125:16285 [preauth]
2018-02-28T02:21:25.889051+05:30 epnm-system-120 sshd[6381]: Inbound-ReKey for        \
10.77.144.125:16285 [preauth]
2018-02-28T02:21:30.487757+05:30 epnm-system-120 sshd[6381]: Accepted password for    \
admin from 10.77.144.125 port 16285 ssh2
2018-02-28T02:21:30.490420+05:30 epnm-system-120 sshd[6390]: Inbound-ReKey for        \
10.77.144.125:16285
2018-02-28T02:21:30.490437+05:30 epnm-system-120 sshd[6390]: Outbound-ReKey for       \
10.77.144.125:16285
2018-02-28T02:21:32.124237+05:30 epnm-system-120 rsyslogd: [origin                    \
software="rsyslogd" swVersion="5.8.10" x-pid="3216"                                 \
x-info="http://www.rsyslog.com ] rsyslogd was HUPed
2018-02-28T02:25:04.601075+05:30 epnm-system-120 rsyslogd-2177: imuxsock begins to    \
drop messages from pid 3229 due to rate-limiting
2018-02-28T02:25:30.938945+05:30 epnm-system-120 rsyslogd-2177: imuxsock lost 463     \
messages from pid 3229 due to rate-limiting
^CERROR: cmd '/opt/CSCOlumos/bin/run_command.sh livelogs' failed
epnm-system-120/admin#

ncs run loghistory

You can run ncs run loghistory command to view a list of audit logs.

ncs run loghistory { all | secure | ade | messages }

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system-120/admin# ncs run loghistory
***Available filter options to limit logs - all  secure ade messages***
::::::::::::::
/var/log/secure
::::::::::::::
2018-02-25T04:22:03.091312+05:30 epnm-system-120 passwd: pam_unix(passwd:chauthtok):  \
password changed for scpuser
2018-02-25T05:47:52.693460+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T05:47:52.746896+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T07:48:08.551061+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T07:48:08.607276+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T09:48:29.616066+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T09:48:29.675890+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T11:48:49.792055+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T11:48:49.845594+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T13:49:13.712070+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T13:49:13.764692+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T15:49:28.165108+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T15:49:28.231362+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T17:49:46.089296+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T17:49:46.143475+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T19:50:06.775083+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T19:50:06.828332+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T21:50:33.338183+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T21:50:33.393056+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-25T23:50:59.225069+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-25T23:50:59.278849+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-26T01:51:23.433628+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T01:52:00.541797+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T01:52:00.582068+05:30 epnm-system-120 su: pam_unix(su:session): session    \
opened for user oracle by (uid=0)
2018-02-26T01:52:00.635314+05:30 epnm-system-120 su: pam_unix(su:session): session    \
closed for user oracle
2018-02-26T03:30:00.737839+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:01.308384+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:01.318405+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:01.373111+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:01.411957+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:03.176254+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:03.196829+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:03.252549+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:06.105604+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:07.126919+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:07.131747+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
2018-02-26T03:30:14.916295+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
closed for user oracle
2018-02-26T03:30:14.923602+05:30 epnm-system-120 su: pam_unix(su-l:session): session  \
opened for user oracle by (uid=0)
epnm-system-120/admin#

ncs run ocsp-responder

You can enable or disable OCSP Responder (requires EPNM restart) using ncs run ocsp-responder command in EXEC mode.

ncs run ocsp-responder { enable | disable }

Syntax Description


enable	Enables OCSP Responder.
disable	Disables OCSP Responder.

Command Default

No default behavior or values.

Command Modes

EXEC

Note

For the OCSP Responder command to work, it is necessary to enable the ncs run client-auth command. Please refer to ncs run client-auth to enable it.

ncs run reset

You can use ncs run reset command to delete all the private keys from your Cisco EPNM server and to clean a corrupted database. Resetting DB clears all the existing data and replaces it with empty data.

ncs run reset { db | keys }

Syntax Description


db	Resets DB wth empty data.
keys	Deletes all the private keys from Cisco EPNM server.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-system-160/admin# ncs run reset db
 ********************* Warning *********************
This script will delete the existing data in database (network data) and reset
database to default factory settings.
Do you want to proceed [yes/no] [no]? yes
Stopping EPNM...
This may take a few minutes...
EPNM successfully shutdown.
Stopping SAM daemon...
Checking for SAM daemon again ...
SAM Daemon not found...
Stopping DA daemon ...
Checking for DA daemon again ...
DA Daemon not found...
Completed shutdown of all services
Listener wcstns is down.
Listener already stopped.
Database is already stopped. Cannot stop again.
This script is intended to run database configuration utilities
to provision and create the embedded database
Running database network config assistant tool (netca)...
Running oracle ZIP DB creation script...
configuring Oracle memory size
Running standby database creation script...
currentState is ... 
sid being set wcs
SQL*Plus: Release 12.1.0.2.0 Production on Wed Nov 14 11:25:18 2018
Copyright (c) 1982, 2014, Oracle.  All rights reserved.
Connected to an idle instance.
SQL> ORACLE instance started.
Total System Global Area 2147483648 bytes
Fixed Size                  2926472 bytes
Variable Size            1023412344 bytes
Database Buffers         1107296256 bytes
Redo Buffers               13848576 bytes
Database mounted.
Database opened.
SQL> 
User altered.
SQL> Database closed.
Database dismounted.
ORACLE instance shut down.
SQL> Disconnected from Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 -  \
64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
SQL*Plus: Release 12.1.0.2.0 Production on Wed Nov 14 11:25:52 2018
Copyright (c) 1982, 2014, Oracle.  All rights reserved.
Connected to an idle instance.
SQL> ORACLE instance started.
Total System Global Area 1287651328 bytes
Fixed Size                  2934984 bytes
Variable Size             331351864 bytes
Database Buffers          947912704 bytes
Redo Buffers                5451776 bytes
Database mounted.
Database opened.
SQL> 
User altered.
SQL> Database closed.
Database dismounted.
ORACLE instance shut down.
SQL> Disconnected from Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 -  \
64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
Listener wcstns is up
Database is already stopped. Cannot stop again.
INFO: reset db command executed successfully. Please restore the system data from a \
backup file

Examples

This example shows how to delete all private keys in the Cisco EPNM server:

epnm-system-61/admin# ncs run reset keys
This will delete all the private keys and may impact webserver, SSH service etc.
Do you want to proceed [yes/no] [no]? yes

ncs run ssh-server-single-legacy-algorithm

You can enable or disable ssh server legacy algorithms using ncs run ssh-server-single-legacy-algorithm command in EXEC mode.

ncs run ssh-server-single-legacy-algorithm { list | reset | algorithms }

Syntax Description


list	lists all the supported algorithms.
reset	Resets to default settings.
algorithms	Sets algorithms.

Note

If customer has moved to EPNM 3.7.x or 3.8.x via upgrade path, some of the Kex, and Ciphers algorithms would have changed in 3.7.x or 3.8.x upgrade, though the ssh legacy algorithms settings were enabled or disabled in the previous EPNM versions. Now, if you upgrade to 3.9 from 3.7.x or 3.8.x, you can see the same list of Kex, and Ciphers algorithms in 3.9 as available in the 3.7.x or 3.8.x upgrade servers.

The following steps explain the workaround, listing all the required ssh algorithms:

a) When you upgrade from any previous versions to 3.7.x or 3.8.x version, please disable or enable the legacy ssh algorithms. Execute the below commands before upgrading to 3.9.

admin# ncs run ssh-server-legacy-algorithms disable

admin# ncs run ssh-server-legacy-algorithms enable
b) If you upgraded from any previous versions to 3.7.x or 3.8.x and also upgraded to 3.9 version, please execute below commands to disable or enable the ssh legacy ciphers.

admin# ncs run ssh-server-legacy-algorithms disable

admin# ncs run ssh-server-legacy-algorithms enable

ncs run sshclient-nonfips-ciphers

To enable or disable non fips compliant ciphers for outgoing ssh client connections to devices you can use ncs run sshclient-nonfips-ciphers command in EXEC mode.

ncs run sshclient-nonfips-ciphers { enable | disable }

Syntax Description


enable	Enables non fips compliant ciphers for outgoing ssh client connections.
disable	Disables non fips compliant ciphers for outgoing ssh client connections.

Command Default

Default mode is enable.

EXEC

Examples

epnm-ha-imeir-prim/admin# ncs run sshclient-nonfips-ciphers disable

Note

This command is available only in the federal information processing standard (FIPS) mode

ncs run test iops

To test and view the details of the input output operations on your Cisco EPNM, use the ncs run test iops command in the EXEC mode.

ncs run test iops

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-242/admin# ncs run test iops
Testing disk write speed ...
8388608+0 records in
8388608+0 records out
8589934592 bytes (8.6 GB) copied, 33.4561 s, 257 MB/s

ncs run tls-server-ciphers

You can enable a TLS cipher group using ncs run tls-server-ciphers command in EXEC mode.

ncs run tls-server-ciphers { tls-ecdhe-sha2 | tls-ecdhe-sha1 | tls-dhe-sha2 | tls-dhe-sha1 | tls-static-sha2 | tls-static-sha1}

Syntax Description


tls-ecdhe-sha2	Refers to tls cipher group, ecdhe sha2
tls-ecdhe-sha1	Refers to tls cipher group, ecdhe sha1
tls-dhe-sha2	Refers to tls cipher group, dhe sha2
tls-dhe-sha1	Refers to tls cipher group, dhe sha1
tls-static-sha2	Refers to tls cipher group, static sha2
tls-static-sha1	Refers to tls cipher group, static sha1

Command Default

The default cipher group is tls-ecdhe-sha2

EXEC

Examples

epnm/admin# ncs run tls-server-ciphers tls-ecdhe-sha1

Enabled TLS cipher groups are - tls-ecdhe-sha1

Restart is required for the changes to take effect

ncs run tls-server-versions

To set the TLS (Transport Layer Security) version, use the ncs run tls-server-versions command in EXEC mode.

ncs run tls-server-version <TLS version>

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

The following example illustrates the usage of the ncs run set-tls-versions command:

epnm-system-168/admin# ncs run tls-server-versions TLSv1 TLSv1.1 TLSv1.2
Enabled TLS version are - TLSv1,TLSv1.1,TLSv1.2
Restart is required for the changes to take effect
epnm-system-168/admin#

Warning

Running this command requires an immediate software restart. It is suggested you perform a failover and failback so that the changes are reflected in primary and secondary servers.

ncs start

To start the EPNM server, use the ncs start command.

ncs start [verbose]

Syntax Description


verbose	Displays the detailed messages during the start process.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

To see the messages in the console, use the ncs start verbose command.

Examples

This example shows how to start the EPNM server:

Examples



Starting Evolved Programmable Network Manager...

This may take a while (10 minutes or more) ...



Evolved Programmable Network Manager started successfully.

Related Commands


Command	Description
ncs stop	Stops the EPNM server.
ncs status	Displays the current status of the EPNM server.

ncs status

To display the EPNM server status, use the ncs status command in EXEC mode.

ncs status

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

This example shows how to display the status of the EPNM server:


ncs status
Health Monitor Server is running. ( [Role] Primary [State] Primary Active )
Database server is running
Distributed Cache Service is running.
Messaging Service is running.
FTP Service is disabled
TFTP Service is disabled
NMS Server is running.
LCM Monitor is running.
SAM Daemon is running ...
DA Daemon is running ...

Related Commands


Command	Description
ncs start	Starts the EPNM server.
ncs stop	Stops the EPNM server.

ncs stop

To stop the EPNM server, use the ncs stop command in EXEC mode. To see the detailed messages, use the ncs stop verbose command.

ncs stop [verbose]

Syntax Description


verbose	Displays the detailed messages during the stop process.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

To see the detailed messages, use the ncs stop verbose command.

Examples

This example shows how to stop the EPNM server:


Stopping Evolved Programmable Network Manager...

This may take a few minutes...
Database is not running.
FTP Service is not running.
TFTP Service is not running.
NMS Server is not running!.

Evolved Programmable Network Manager successfully shutdown.

Stopping SAM daemon...
Checking for SAM daemon again ...
SAM Daemon not found...
Stopping DA daemon ...
Checking for DA daemon again ...
DA Daemon not found...
Completed shutdown of all services

Related Commands


Command	Description
ncs start	Starts the EPNM server.
ncs status	Displays the current status of the EPNM server.

nslookup

To look up the hostname of a remote system on the Cisco EPNM server, use the nslookup command in EXEC mode.

nslookup word

Syntax Description


`word`	IPv4 address or hostname of a remote system. Up to 63 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# nslookup 209.165.200.225
Trying "209.165.200.225.in-addr.arpa"
Received 127 bytes from 172.16.168.183#53 in 1 ms
Trying "209.165.200.225.in-addr.arpa"
Host 209.165.200.225.in-addr.arpa. not found: 3(NXDOMAIN)
Received 127 bytes from 172.16.168.183#53 in 1 ms

ncs/admin#


ncs/admin# nslookup 209.165.200.225
Trying "225.200.165.209.in-addr.arpa"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65283
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;225.200.165.209.in-addr.arpa.  IN      PTR

;; ANSWER SECTION:
225.200.165.209.in-addr.arpa. 86400 IN  PTR     209-165-200-225.got.net.

;; AUTHORITY SECTION:
192.168.209.in-addr.arpa. 86400 IN      NS      ns1.got.net.
192.168.209.in-addr.arpa. 86400 IN      NS      ns2.got.net.

Received 119 bytes from 172.16.168.183#53 in 28 ms

ncs/admin#

ocsp responder

Online Certificate Status Protocol (OCSP) enables certificate-based authentication for web clients using OCSP responders. Typically, the OCSP responder’s URL is read from the certificate’s Authority Information Access (AIA). As a failover mechanism, you can configure the same URL on the Cisco EPNM server as well. You can enable or disable a custom OCSP responder, and set/remove OCSP responder URLs using ocsp responder command in EXEC mode.

ocsp responder { remove | set | show }

Syntax Description


clear	Clears the OCSP responder URL.
custom	Enables or disables the custom OCSP responder.
set	Sets the OCSP responder URL.

Command Default

No default behaviour.

Command Modes

EXEC

Examples


ncs/admin# ocsp responder
ncs/admin# ocsp responder custom enable

ncs/admin# ocsp responder set url1 <WORD>
<WORD>  Enter ocsp url (Max Size - 1024)

ncs/admin# ocsp responder clear url1

ping

To diagnose the basic IPv4 network connectivity to a remote system, use the ping command in EXEC mode.

ping {ip-address | hostname} [Dfdf][packetsizepacketsize][pingcountpingcount]

Syntax Description


`ip-address`	IP address of the system to ping. Up to 32 alphanumeric characters.
`hostname`	Hostname of the system to ping. Up to 32 alphanumeric characters.
df	Specification for packet fragmentation.
`df`	Specifies the value as 1 to prohibit packet fragmentation, or 2 to fragment the packets locally, or 3 to not set df.
packetsize	Size of the ping packet.
`packetsize`	Specifies the size of the ping packet; the value can be between 0 and 65507.
pingcount	Number of ping echo requests.
`pingcount`	Specifies the number of ping echo requests; the value can be between 1 and 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

The ping command sends an echo request packet to an address, then awaits a reply. The ping output can help you evaluate path-to-host reliability, delays over the path, and whether you can reach a host.

Examples


ncs/admin# ping 172.16.0.1 df 2 packetsize 10 pingcount 2
PING 172.16.0.1 (172.16.0.1) 10(38) bytes of data.
18 bytes from 172.16.0.1: icmp_seq=0 ttl=40 time=306 ms
18 bytes from 172.16.0.1: icmp_seq=1 ttl=40 time=300 ms

--- 172.16.0.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 300.302/303.557/306.812/3.255 ms, pipe 2
ncs/admin#

Related Commands


Command	Description
ping6	Pings a remote IPv6 address.

ping6

To diagnose the basic IPv6 network connectivity to a remote system, use the ping6 command in EXEC mode.

ping6 {ip-address | hostname} [GigabitEthernetpacketsizepacketsize][pingcountpingcount]

Syntax Description


`ip-address`	IP address of the system to ping. Up to 64 alphanumeric characters.
`hostname`	Hostname of the system to ping. Up to 64 alphanumeric characters.
GigabitEthernet	Selects the ethernet interface.
packetsize	Size of the ping packet.
`packetsize`	Specifies the size of the ping packet; the value can be between 0 and 65507.
pingcount	Number of ping echo requests.
`pingcount`	Specifies the number of ping echo requests; the value can be between 1 and 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

The IPv6 ping6 command sends an echo request packet to an address, then awaits a reply. The ping output can help you evaluate path-to-host reliability, delays over the path, and whether you can reach a host.

The IPv6 ping6 command is similar to the existing IPv4 ping command that does not support the IPv4 ping fragmentation (df in IPv4) options, but allows an optional specification of an interface. The interface option is primarily useful for pinning with link-local addresses that are interface-specific. The packetsize and pingcount options work identically the same as they do with the IPv4 command.

Examples


ncs/admin# ping6 3ffe:302:11:2:20c:29ff:feaf:da05
PING 3ffe:302:11:2:20c:29ff:feaf:da05(3ffe:302:11:2:20c:29ff:feaf:da05) from 3ffe:302:11:2:20c:29ff:feaf:da05 eth0: 56 data bytes
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=0 ttl=64 time=0.599 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=1 ttl=64 time=0.150 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=2 ttl=64 time=0.070 ms
64 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=3 ttl=64 time=0.065 ms

--- 3ffe:302:11:2:20c:29ff:feaf:da05 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3118ms
rtt min/avg/max/mdev = 0.065/0.221/0.599/0.220 ms, pipe 2

ncs/admin#


ncs/admin# ping6 3ffe:302:11:2:20c:29ff:feaf:da05 GigabitEthernet 0 packetsize 10 pingcount 2
PING 3ffe:302:11:2:20c:29ff:feaf:da05(3ffe:302:11:2:20c:29ff:feaf:da05) from 3ffe:302:11:2:20c:29ff:feaf:da05 eth0: 10 data bytes
18 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=0 ttl=64 time=0.073 ms
18 bytes from 3ffe:302:11:2:20c:29ff:feaf:da05: icmp_seq=1 ttl=64 time=0.073 ms

--- 3ffe:302:11:2:20c:29ff:feaf:da05 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1040ms
rtt min/avg/max/mdev = 0.073/0.073/0.073/0.000 ms, pipe 2

ncs/admin#

Related Commands


	Description
ping	Pings a remote IP address.

reload

To reload the Cisco EPNM operating system, use the reload command in EXEC mode.

reload

Syntax Description

This command has no arguments or keywords.

Command Default

The command has no default behavior or values.

Command Modes

EXEC

Usage Guidelines

The reload command reboots the system. Use the reload command after you enter configuration information into a file and save the running-configuration to the persistent startup-configuration on the CLI and save any settings in the web Administration user interface session.

Before you enter the reload command, ensure that the Cisco EPNM is not performing any backup, restore, installation, upgrade, or remove operation. If the Cisco EPNM performs any of these operations and you enter the reload command, you will notice any of the following warning messages:


WARNING: A backup or restore is currently in progress! Continue with reload?

WARNING: An install/upgrade/remove is currently in progress! Continue with reload?

If you get any of these warnings, enter YES to halt the operation, or enter NO to cancel the halt.

If no processes are running when you use the reload command or you enter YES in response to the warning message displayed, the Cisco EPNM asks you to respond to the following option:


Do you want to save the current configuration ?

Enter YES to save the existing Cisco EPNM configuration. The Cisco EPNM displays the following message:


Saved the running configuration to startup successfully

Examples


ncs/admin# reload
Do you want to save the current configuration ? (yes/no) [yes] ? yes
Generating configuration...
Saved the running configuration to startup successfully
Continue with reboot? [y/n] y

Broadcast message from root (pts/0) (Fri Aug  7 13:26:46 2010):

The system is going down for reboot NOW!

ncs/admin#

Related Commands


Command	Description
halt	Disables the system.

restore

To perform a restore of a previous backup, use the restore command in EXEC mode.

Application Backup Restore:

Use the following command to restore data related only to the Cisco EPNM application:

restore filename repository repository-name application application-name

Application Backup Restore

Use the following command to restore data related to the Cisco EPNM application and Cisco ADE OS:

restore filename repository repository-name

Syntax Description

filename

Name of the backed-up file that resides in the repository. Up to 120 alphanumeric characters.

Note

You must add the .tar.gpg extension after the filename (for example, myfile.tar.gpg).

repository

The repository keyword.

repository-name

Name of the repository you want to restore from backup.

application

The application keyword.

application-name

The name of the application data to be restored. Up to 255 alphanumeric characters.

Note

Enter the application name as ‘EPNM’ in upper case.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

A restore operation restores data related to the Cisco EPNM and Cisco ADE OS. To perform a restore of a previous backup of the application data of the Cisco EPNM only, add the application command to the restore command in EXEC mode.

When you use these two commands in the Cisco EPNM, the Cisco EPNM server restarts automatically.

Examples

epnm-system-120/admin# restore epnm-system-173-190908-0334__VER3.7.0.0.159_BKSZ26G_CPU4_MEM3G_RAM11G_SWAP15G_APP_CK218281319.tar.gpg repository defaultRepo application NCS
* NOTE *
If the system console is disconnected or got cleared on session timeout
run 'show restore log' to see the output of the last restore session.
 
Restore will restart the application services. Continue? (yes/no) [yes] ?
 
DO NOT press ^C while the restoration is in progress
Aborting restore with a ^C may leave the system in a unrecoverable state
 
Enter the backup password, if your backup is password protected. Otherwise, press Enter to continue the data restoration.
 
Password :
Initiating restore.  Please wait...
  Restore Started at 08/09/19 22:59:05
  Stage 1 of 9: Transferring backup file ...                      
  -- completed at 08/09/19 22:59:15
  Stage 2 of 9: Decrypting backup file ...                        
  -- completed at  08/09/19 23:02:24
  Stage 3 of 9: Unpacking backup file ...                         
  -- completed at  08/09/19 23:02:25
  Stopping EPNM server ...                                            
  Stage 4 of 9: Decompressing backup ...                            
  -- completed at  08/09/19 23:18:58
  Stage 5 of 9: Restoring Support Files ...                          
  -- completed at  08/09/19 23:19:07
  Stage 6 of 9: Restoring Database Files ...                        
   -- completed at  08/09/19 23:19:43
  Stage 7 of 9: Recovering Database ...                             
  -- completed at  08/09/19 23:28:42
  Stage 8 of 9: Updating Database Schema ...
    This could take long time based on the existing data size.
                  Stage 1 of 5: Pre Migration Schema Upgrade ...                             
                                        -- completed at: 2019-08-09 23:32:46.091, Time Taken : 0 hr, 4 min, 1 sec
                  Stage 2 of 5: Schema Upgrade ...                             
                                        -- completed at: 2019-08-09 23:53:56.668, Time Taken : 0 hr, 21 min, 9 sec
                  Stage 3 of 5: Post Migration Schema Upgrade ...                             
                                        -- completed at: 2019-08-09 23:54:17.489, Time Taken : 0 hr, 0 min, 19 sec
                  Stage 4 of 5: Enabling DB Constraints ...                             
                                        -- completed at: 2019-08-09 23:54:53.179, Time Taken : 0 hr, 0 min, 34 sec
                  Stage 5 of 5: Finishing Up ...                              
                                        -- completed at: 2019-08-09 23:55:12.431, Time Taken : 0 hr, 0 min, 18 sec
  -- completed at  08/09/19 23:55:43
  Stage 9 of 9: Re-enabling Database Settings ...                           
   -- completed at  08/10/19 00:24:32
   Total Restore duration is: 01h:25m:27s
INFO: Restore completed successfully.
 
Starting Evolved Programmable Network Manager...
 
This may take a while (10 minutes or more) ...
 
Evolved Programmable Network Manager started successfully.
 
Redirecting to /bin/systemctl restart rsyslog.service
Completed in 1207 seconds

Related Commands


Command	Description
backup	Performs a backup (Cisco EPNM and Cisco ADE OS) and places the backup in a repository.
show restore	Displays the restore history.
repository	Enters the repository submode for configuration of backups.
show repository	Displays the available backup files located on a specific repository.
show backup history	Displays the backup history of the system.

rmdir

To remove an existing directory, use the rmdir command in EXEC mode.

rmdir directory-name [disk:/path]

Syntax Description


`directory-name`	The name of the directory to create. Up to 80 alphanumeric characters.
`disk:/path`	Use `disk:/path` with the directory name.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# mkdir disk:/test
ncs/admin# dir

Directory of disk:/

       4096 May 06 2010 13:34:49  activemq-data/
       4096 May 06 2010 13:40:59  logs/
      16384 Mar 01 2010 16:07:27  lost+found/
       4096 May 06 2010 13:42:53  target/
       4096 May 07 2010 12:26:04  test/

           Usage for disk: filesystem
                  181067776 bytes total used
                19084521472 bytes free
                20314165248 bytes available
ncs/admin#

ncs/admin# rmdir disk:/test
ncs/admin# dir

Directory of disk:/

       4096 May 06 2010 13:34:49  activemq-data/
       4096 May 06 2010 13:40:59  logs/
      16384 Mar 01 2010 16:07:27  lost+found/
       4096 May 06 2010 13:42:53  target/

           Usage for disk: filesystem
                  181063680 bytes total used
                19084525568 bytes free
                20314165248 bytes available
ncs/admin#

Related Commands


Command	Description
dir	Displays a list of files on the Cisco EPNM server.
mkdir	Creates a new directory.

rsakey

To display a configured RSA key or to set a new RSA public key for user authentication, use rsakey command in EXEC mode. You can also use it to remove a configured RSA key.

rsakey { remove | set | show }

Syntax Description


remove	Remove RSA public key for user authentication.
set	Set RSA public key for user authentication.
show	Show RSA public key for user authentication.

Command Default

No default behaviour.

Command Modes

EXEC

Examples


ncs/admin# rsakey
ncs/admin# rsakey show
No RSA key configured for user 'admin'


ncs/admin# rsakey remove
No RSA key configured for user 'admin


ncs/admin# rsakey set <WORD>
<WORD>  Filename of RSA public key (Max Size - 256)

show

To show the running system information, use the show command in EXEC mode. The show commands are used to display the Cisco EPNM settings and is one of the most useful commands.

The commands that are given in the table Table 1 require the show command to be followed by a keyword; for example, show application status . Some show commands require an argument or variable after the keyword to function. For example, show application version .

For detailed information on all the Cisco EPNM show commands, see show Commands.

show keyword

Syntax Description

Table 2. Summary of show Commands
Command(1)	Description
application (requires keyword)(2)	Displays information about the installed application. For example, the status or version.
backup (requires keyword)	Displays information about the backup.
banner	Displays login banners.
cdp (requires keyword)	Displays information about the enabled Cisco Discovery Protocol interfaces.
clock	Displays the day, date, time, time zone, and year of the system clock.
cpu	Displays CPU information.
disks	Displays file-system information of the disks.
icmp_status	Displays information about the icmp echo response configuration.
interface	Displays statistics for all the interfaces that are configured on the Cisco ADE OS.
inventory	Displays information about the hardware inventory.
ip	Displays IP information.
logging (requires keyword)	Displays system logging information.
logins (requires keyword)	Displays login history.
memory	Displays memory usage by all running processes.
netstat	Displays information about the netstat and firewall.
ntp	Displays the status of the Network Time Protocol (NTP).
ports	Displays all the processes listening on the active ports.
process	Displays information about the active processes of the Cisco EPNM server.
repository (requires keyword)	Displays the file contents of a specific repository.
restore (requires keyword)	Displays the restore history on the Cisco EPNM server.
running-config	Displays the contents of the currently running configuration file on the Cisco EPNM server.
security-status	Displays various information such as services/ports enabled/disabled.
startup-config	Displays the contents of the startup configuration on the Cisco EPNM server.
tech-support	Displays the system and configuration information that you can provide to TAC when you report a problem.
terminal	Displays information about the terminal configuration parameter settings for the current terminal line.
timezone	Displays the time zone of the Cisco EPNM server.
timezones	Displays all the time zones available for use on the Cisco EPNM server.
udi	Displays information about the unique device identifier (UDI) of the Cisco EPNM.
uptime	Displays how long the system you are logged in to has been up and running.
users	Displays information for currently logged in users.
version	Displays information about the installed application version.
¹ ²

¹ (1) The commands in this table require that the show command precedes a keyword; for example, show application.

² (2) Some show commands require an argument or variable after the keyword to function; for example, show application version. This show command displays the version of the application that is installed on the system (see show application ).

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

All show commands require at least one keyword to function.

Examples

epnm-imeir-secon/admin# show version
Cisco Application Deployment Engine OS Release: 6.7
ADE-OS Build Version: 6.7.9.001
ADE-OS System Architecture: x86_64
 
Copyright (c) 2009-2020 by Cisco Systems, Inc.
All rights reserved.
Hostname: erez-esxi-12-vm6
 
 
Version information of installed applications
---------------------------------------------
 
Cisco EPN Manager
********************************************************
Version : 6.0.0 [FIPS not Enabled]
Build : 6.0.0.0.000

ssh

To start an encrypted session with a remote system, use the ssh command in EXEC mode.

Note

An Admin or Operator (user) can use this command (see Table).

ssh [ip-address | hostname] usernameport[number]version[1|2] delete hostkeyword

Syntax Description


`ip-address`	IP address of the remote system. Up to 64 alphanumeric characters.
`hostname`	Hostname of the remote system. Up to 64 alphanumeric characters.
`username`	Username of the user logging in through SSH.
port [`number`]	(Optional) Indicates the port number of the remote host. From 0 to 65,535. Default 22.
version [1 \| 2]	(Optional) Indicates the version number. Default 2.
delete hostkey	Deletes the SSH fingerprint of a specific host.
`word`	IPv4 address or hostname of a remote system. Up to 64 alphanumeric characters.

Command Default

Disabled.

Command Modes

EXEC (Admin or Operator).

Usage Guidelines

The ssh command enables a system to make a secure, encrypted connection to another remote system or server. This connection provides functionality similar to that of an outbound Telnet connection except that the connection is encrypted. With authentication and encryption, the SSH client allows for secure communication over an insecure network.

Examples


ncs/admin# ssh ncs1 admin
admin@ncs1's password:
Last login: Wed Jul 11 05:53:20 2008 from ncs.cisco.com

ncs1/admin#


ncs/admin# ssh delete host ncs
ncs/admin#

tech dumptcp

To dump a Transmission Control Protocol (TCP) package to the console, use the tech dumptcp command in EXEC mode.

tech dumptcp gigabit-ethernet

Syntax Description


`gigabit-ethernet`	Gigabit Ethernet interface number 0 to 1.

Command Default

Disabled.

Command Modes

EXEC

Examples


ncs/admin# tech dumptcp 0
140816:141088(272) ack 1921 win 14144
08:26:12.034630 IP NCS.cisco.com.ssh > dhcp-64-102-82-153.cisco.com.2221: P 141088:141248(160) ack 1921 win 14144
08:26:12.034635 IP dhcp-64-102-82-153.cisco.com.2221 > NCS.cisco.com.ssh: . ack 139632 win 64656
08:26:12.034677 IP NCS.cisco.com.ssh > dhcp-64-102-82-153.cisco.com.2221: P 141248:141520(272) ack 1921 win 14144
08:26:12.034713 IP NCS.cisco.com.ssh > dhcp-64-102-82-153.cisco.com.2221: P 141520:141680(160) ack 1921 win 14144
08:26:12.034754 IP NCS.cisco.com.ssh > dhcp-64-102-82-153.cisco.com.2221: P 141680:141952(272) ack 1921 win 14144
08:26:12.034756 IP dhcp-64-102-82-153.cisco.com.2221 > NCS.cisco.com.ssh: . ack 140064 win 65520
08:26:12.034796 IP NCS.cisco.com.ssh > dhcp-64-102-82-153.cisco.com.2221: P 141952:142112(160) ack 1921 win 14144
1000 packets captured
1000 packets received by filter
0 packets dropped by kernel
ncs/admin#

telnet

To log in to a host that supports Telnet, use the telnet command in operator (user) or EXEC mode.

telnet [ip-address | hostname] port number

Syntax Description


`ip-address`	IP address of the remote system. Up to 64 alphanumeric characters.
`hostname`	Hostname of the remote system. Up to 64 alphanumeric characters.
`port number`	(Optional) Indicates the port number of the remote host. From 0 to 65,535.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# telnet 172.16.0.11 port 23
ncs.cisco.com login: admin
password:
Last login: Mon Jul  2 08:45:24 on ttyS0
ncs/admin#

terminal length

To set the number of lines on the current terminal screen for the current session, use the terminal length command in EXEC mode.

terminal length integer

Syntax Description


`integer`	Number of lines on the screen. Contains between 0 to 511 lines, inclusive. A value of zero (0) disables pausing between screens of output.

Command Default

24 lines.

Command Modes

EXEC

Usage Guidelines

The system uses the length value to determine when to pause during multiple-screen output.

Examples


ncs/admin# terminal length 0
ncs/admin#

terminal session-timeout

To set the inactivity timeout for all sessions, use the terminal session-timeout command in EXEC mode.

terminal session-timeout minutes

Syntax Description


`minutes`	Sets the number of minutes for the inactivity timeout. From 0 to 525,600. Zero (0) disables the timeout.

Command Default

30 minutes.

Command Modes

EXEC

Usage Guidelines

Setting the terminal session-timeout command to zero (0) results in no timeout being set.

Examples


ncs/admin# terminal session-timeout 40
ncs/admin#

Related Commands


Command	Description
terminal session-welcome	Sets a welcome message on the system for all users who log in to the system.

terminal session-welcome

To set a welcome message on the system for all users who log in to the system, use the terminal session-welcome command in EXEC mode.

terminal session-welcome string

Syntax Description


`string`	Welcome message. Up to 2,023 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Specify a message using up to 2048 characters.

Examples


ncs/admin# terminal session-welcome Welcome
ncs/admin#

Related Commands


Command	Description
terminal session-timeout	Sets the inactivity timeout for all sessions.

terminal terminal-type

To specify the type of terminal connected to the current line for the current session, use the terminal terminal-type command in EXEC mode.

terminal terminal-type type

Syntax Description


`type`	Defines the terminal name and type, and permits terminal negotiation by hosts that provide that type of service. Up to 80 alphanumeric characters.

Command Default

VT100.

Command Modes

EXEC

Usage Guidelines

Indicate the terminal type if it is different from the default of VT100.

Examples


ncs/admin# terminal terminal-type vt220
ncs/admin#

traceroute

To discover the routes that packets take when traveling to their destination address, use the traceroute command in EXEC mode.

traceroute [ip-address | hostname]

Syntax Description


`ip-address`	IP address of the remote system. Up to 32 alphanumeric characters.
`hostname`	Hostname of the remote system. Up to 32 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# traceroute 172.16.0.11
traceroute to 172.16.0.11 (172.16.0.11), 30 hops max, 38 byte packets
 1  172.16.0.11 0.067 ms  0.036 ms  0.032 ms

ncs/admin#

undebug

To disable debugging functions, use the undebug command in EXEC mode.

undebug {all | application | backup-restore | cdp | config | copy | icmp | locks | logging | snmp | system | transfer | user | utils}

Syntax Description


all	Disables all debugging.
`application`	Application files. all—Disables all application debug output. install—Disables application install debug output. operation—Disables application operation debug output. uninstall—Disables application uninstall debug output.
`backup-restore`	Backs up and restores files. all—Disables all debug output for backup-restore. backup—Disables backup debug output for backup-restore. backup-logs—Disables backup-logs debug output for backup-restore. history—Disables history debug output for backup-restore. restore—Disables restore debug output for backup-restore.
`cdp`	Cisco Discovery Protocol configuration files. all—Disables all Cisco Discovery Protocol configuration debug output. config—Disables configuration debug output for Cisco Discovery Protocol. infra—Disables infrastructure debug output for Cisco Discovery Protocol.
`config`	Configuration files. all—Disables all configuration debug output. backup—Disables backup configuration debug output. clock—Disables clock configuration debug output. infra—Disables configuration infrastructure debug output. kron—Disables command scheduler configuration debug output. network—Disables network configuration debug output. repository—Disables repository configuration debug output. service—Disables service configuration debug output.
`copy`	Copy commands.
`icmp`	ICMP echo response configuration. all—Disable all debug output for ICMP echo response configuration. Set level between 0 and 7, with 0 being severe and 7 being all.
`locks`	Resource locking. all—Disables all resource locking debug output. file—Disables file locking debug output.
`logging`	Logging configuration files. all—Disables all debug output for logging configuration.
`snmp`	SNMP configuration files. all—Disables all debug output for SNMP configuration.
`system`	System files. all—Disables all system files debug output. id—Disables system ID debug output. info—Disables system info debug output. init—Disables system init debug output.
`transfer`	File transfer.
`user`	User management. all—Disables all user management debug output. password-policy—Disables user management debug output for password-policy.
`utils`	Utilities configuration files. all—Disables all utilities configuration debug output.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# undebug all
ncs/admin#

Related Commands


Command	Description
debug	Displays errors or events for command situations.

write

To copy, display, or erase the Cisco EPNM server configurations, use the write command with the appropriate argument in EXEC mode.

write {erase | memory | terminal}

Syntax Description


`erase`	Erases the startup configuration. This command is disabled by default.
`memory`	Copies the running configuration to the startup configuration.
`terminal`	Copies the running configuration to the console.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

The following is an example of the write command with an erase keyword:


epnm-system/admin# write erase
% Warning: 'write erase' functionality has been disabled by application: NCS
epnm-system/admin#

show Commands

This section lists Cisco EPNM show commands. Each command includes a brief description of its use, any command defaults, command modes, usage guidelines, an example of the command syntax and any related commands.

show application

To show application information of the installed application packages on the system, use the show application command in EXEC mode.

show application [status | version [ app_name]]

Syntax Description


status	Displays the status of the installed application.
version	Displays the application version for an installed application—EPNM.
`app_name`	Name of the installed application.

Table 3. Output Modifier Variables for Count or Last
\|	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the output. Add number after the word count. \|—Output modifier variables. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10. \|—Output modifier variables.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


show application
<name>          <Description>
NCS             EPNM

Related Commands


	Description
application start	Starts or enables an application.
application stop	Stops or disables an application.

show backup history

To display the backup history of the system, use the show backup history command in EXEC mode.

show backup history

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1

erez-esxi-12-vm6/admin# show restore log
Started at: Mon Dec 20 14:30:11 2021
Initiating restore. Please wait ...
Restore Started at 12/20/21 14:30:11
Stage 1 of 9: Transferring backup file ...
- completed at 12/20/21 14:30:11
Stage 2 of 9: Decrypting backup file ...
- completed at 12/20/21 14:30:19
Stage 3 of 9: Unpacking backup file ...
- completed at 12/20/21 14:30:20
Stopping Cisco Evolved Programmable Network Manager server ...
Stage 4 of 9: Decompressing backup ...
- completed at 12/20/21 14:32:13
Stage 5 of 9: Restoring Support Files ...
- completed at 12/20/21 14:32:29
Stage 6 of 9: Restoring Database Files ...
- completed at 12/20/21 14:33:49
Stage 7 of 9: Recovering Database ...
completed at 12/20/21 14:35:23
Stage 8 of 9: Updating Database Schema ...

- completed at 12/20/21 14:35:34
Stage 9 of 9: Re-enabling Database Settings ...
completed at 12/20/21 14:47:22
Total Restore duration is: Oh:17m: 11s
INFO: Restore completed successfully.

Starting Evolved Programmable Network Manager ...

This may take a while (10 minutes or more) ...

Evolved Programmable Network Manager started successfully.

Completed in 2189 seconds
Finished at: Mon Dec 20 15:24:26 2021

Related Commands


Command	Description
backup	Performs a backup (Cisco EPNM) and places the backup in a repository.
restore	Restores the file contents of a specific repository from the backup.
repository	Enters the repository submode for configuration of backups.
show repository	Displays the available backup files located on a specific repository.

show banner pre-login

To display the banner that you installed, use the show banner pre-login command in EXEC mode.

show banner pre-login

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example


epnm-system/admin# show banner pre-login
Banner-Test
epnm-system/admin#

Related Commands


Command	Description
banner	Enables you to install a pre-login banner.

show cdp

To display information about the enabled Cisco Discovery Protocol interfaces, use the show cdp command in EXEC mode.

show cdp {all | neighbors}

Syntax Description


all	Shows all of the enabled Cisco Discovery Protocol interfaces.
neighbors	Shows the Cisco Discovery Protocol neighbors.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1


ncs/admin# show cdp all
CDP protocol is enabled ...
        broadcasting interval is every 60 seconds.
        time-to-live of cdp packets is 180 seconds.

        CDP is enabled on port GigabitEthernet0.
ncs/admin#

Example 2


ncs/admin# show cdp neighbors
CDP Neighbor : 000c297840e5
        Local Interface    : GigabitEthernet0
        Device Type        : L-NCS-1.0-50
        Port               : eth0
        Address            : 172.23.90.114

CDP Neighbor : isexp-esw5
        Local Interface    : GigabitEthernet0
        Device Type        : cisco WS-C3560E-24TD
        Port               : GigabitEthernet0/5
        Address            : 172.23.90.45

CDP Neighbor : 000c29e29926
        Local Interface    : GigabitEthernet0
        Device Type        : L-NCS-1.0-50
        Port               : eth0
        Address            : 172.23.90.115

CDP Neighbor : 000c290fba98
        Local Interface    : GigabitEthernet0
        Device Type        : L-NCS-1.0-50
        Port               : eth0
        Address            : 172.23.90.111

ncs/admin#

Related Commands


Command	Description
cdp holdtime	Specifies the length of time that the receiving device should hold a Cisco Discovery Protocol packet from your router before discarding it.
cdp run	Enables the Cisco Discovery Protocol.
cdp timer	Specifies how often the Cisco EPNM server sends Cisco Discovery Protocol updates.

show clock

To display the day, month, date, time, time zone, and year of the system software clock, use the show clock command in EXEC mode.

show clock

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-system-196/admin# show clock
Tue Jan 28 04:11:38 IST 2020

Note

The show clock output in the previous example includes Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT), Great Britain, or Zulu time.

Related Commands


Command	Description
clock	Sets the system clock for display purposes.

show cpu

To display CPU information, use the show cpu command in EXEC mode.

show cpu [ statistics] [|] [|]

Syntax Description


statistics	Displays CPU statistics.
`\|`	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the output. Add number after the word count. \|—Output modifier variables. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10. \|—Output modifier variables.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1


ncs/admin# show cpu

processor : 0
model     : Intel(R) Xeon(R) CPU           E5320  @ 1.86GHz
speed(MHz): 1861.914
cache size: 4096 KB

ncs/admin#

Example 2


ncs/admin# show cpu statistics
user time:             265175
kernel time:           166835
idle time:            5356204
i/o wait time:         162676
irq time:                4055

ncs/admin#

Related Commands


Command	Description
show disks	Displays the system information of all disks.
show memory	Displays the amount of system memory that each system process uses.

show disks

To display the disks file-system information, use the show disks command in EXEC mode.

show disks [|] [|]

Syntax Description


`\|`	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the output. Add number after the word count. \|—Output modifier variables. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10. \|—Output modifier variables.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Only platforms that have a disk file system support the show disks command.

Examples


ncs/admin# show disks

temp. space 2% used (17828 of 988116)
disk: 3% used (143280 of 5944440)

Internal filesystems:
  all internal filesystems have sufficient free space

ncs/admin#

Related Commands


Command	Description
show cpu	Displays CPU information.
show memory	Displays the amount of system memory that each system process uses.

show icmp_status

To display the Internet Control Message Protocol echo response configuration information, use the show icmp_status command in EXEC mode.

show icmp_status { > file | |}

Syntax Description


`>`	Output direction.
`file`	Name of file to redirect standard output (stdout).
`\|`	Output modifier commands: `begin` —Matched pattern. Up to 80 alphanumeric characters. `count` —Counts the number of lines in the output. Add number after the word count. \|—Output modifier commands. `end` —Ends with line that matches. Up to 80 alphanumeric characters. `exclude` —Excludes lines that match. Up to 80 alphanumeric characters. `include` —Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10. \|—Output modifier commands.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1


ncs/admin# show icmp_status
icmp echo response is turned on
ncs/admin#

Example 2


ncs/admin# show icmp_status
icmp echo response is turned off
ncs/admin#

Related Commands


Command	Description
icmp echo	Configures the Internet Control Message Protocol (ICMP) echo requests.

show ip route

To display details the ip route details of the application, use show ip route command in EXEC mode.

show ip route {| |}

Syntax Description


>	Output redirection
\|	Output modifiers

Command Default

No default behaviour.

Command Modes

EXEC

Examples


ncs/admin# show ip route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.126.168.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         10.126.168.1    0.0.0.0         UG    0      0        0 eth0
Kernel IPv6 routing table
Destination                                 Next Hop                                Flags Metric Ref    Use Iface
2001::/64                                   ::                                      UA    256    0        0 eth0    
fe80::/64                                   ::                                      U     256    0        0 eth0    
::/0                                        fe80::217:dfff:fe29:9800                UGDA  1024   18       0 eth0    
::1/128                                     ::                                      U     0      10127       1 lo      
2001::20c:29ff:fe6c:8f28/128                ::                                      U     0      0        1 lo      
2001::813d:2d75:7d6:564f/128                ::                                      U     0      37       1 lo      
2001::d992:4889:c9e1:f238/128               ::                                      U     0      0        1 lo      
fe80::20c:29ff:fe6c:8f28/128                ::                                      U     0      3        1 lo      
ff00::/8

show interface

To display the usability status of interfaces configured for IP, use the show interface command in EXEC mode.

show interface [GigabitEthernet | Team]

Syntax Description


GigabitEthernet	Shows the Gigabit Ethernet details.
Team	Shows the Team interface (virtual network adapters) details.
`\|`	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the interface. Add number after the word count. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays the last few lines of output. Add number after the word last. Up to 80 lines to display (default 10).

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

In the show interface output, you can find that the interface has three IPv6 addresses. The first internet address (starting with 3ffe) is the result of using the stateless autoconfiguration. For this to work, you must have IPv6 route advertisement enabled on that subnet. The next address (starting with fe80) is a link local address that does not have any scope outside the host. You always see a link local address regardless of the IPv6 autoconfiguration or DHCPv6 configuration. The last address (starting with 2001) is the result that is obtained from an IPv6 DHCP server.

Examples

Example 1


ncs/admin# show interface
eth0      Link encap:Ethernet  HWaddr 00:0C:29:6A:88:C4
          inet addr:172.23.90.113  Bcast:172.23.90.255  Mask:255.255.255.0
          inet6 addr: fe80::20c:29ff:fe6a:88c4/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:48536 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14152 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:6507290 (6.2 MiB)  TX bytes:12443568 (11.8 MiB)
          Interrupt:59 Base address:0x2000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1195025 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1195025 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:649425800 (619.3 MiB)  TX bytes:649425800 (619.3 MiB)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

ncs/admin#

Example 2


ncs/admin# show interface GigabitEthernet 0
eth0      Link encap:Ethernet  HWaddr 00:0C:29:AF:DA:05
          inet addr:172.23.90.116  Bcast:172.23.90.255  Mask:255.255.255.0
          inet6 addr: 3ffe:302:11:2:20c:29ff:feaf:da05/64 Scope:Global
          inet6 addr: fe80::20c:29ff:feaf:da05/64 Scope:Link
          inet6 addr: 2001:558:ff10:870:8000:29ff:fe36:200/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:77848 errors:0 dropped:0 overruns:0 frame:0
          TX packets:23131 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:10699801 (10.2 MiB)  TX bytes:3448374 (3.2 MiB)
          Interrupt:59 Base address:0x2000

Related Commands


Command	Description
interface	Configures an interface type and enters the interface configuration submode.
ipv6 address autoconfig	Enables IPv6 stateless autoconfiguration on an interface.
ipv6 address dhcp	Enables IPv6 address DHCP on an interface.

show inventory

To display information about the hardware inventory, including the Cisco EPNM appliance model and serial number, use the show inventory command in EXEC mode.

show inventory |

Syntax Description


`\|`	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the interface. Add number after the word count. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludse lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-system/admin# show inventory

NAME: "Cisco-VM chassis", DESCR: "Cisco-VM chassis"
PID: Cisco-VM-SPID     , VID: V01 , SN: GITQA6QC26B
Total RAM Memory: 12167972 kB
CPU Core Count: 4
CPU 0: Model Info: Intel(R) Xeon(R) CPU E5-4640 0 @ 2.40GHz
CPU 1: Model Info: Intel(R) Xeon(R) CPU E5-4640 0 @ 2.40GHz
CPU 2: Model Info: Intel(R) Xeon(R) CPU E5-4640 0 @ 2.40GHz
CPU 3: Model Info: Intel(R) Xeon(R) CPU E5-4640 0 @ 2.40GHz
Hard Disk Count(*): 1
Disk 0: Device Name: /dev/sda
Disk 0: Capacity: 322.10 GB
Disk 0: Geometry: 255 heads 63 sectors/track 39162 cylinders
NIC Count: 1
NIC 0: Device Name: eth0
NIC 0: HW Address: 00:0C:29:11:51:83
NIC 0: Driver Descr: e1000: eth0: e1000_probe: Intel(R) PRO/1000 Network Connection

(*) Hard Disk Count may be Logical.
epnm-system-61/admin#

show logging

To display the state of system logging (syslog) and the contents of the standard system logging buffer, use the show logging command in EXEC mode.

show logging {application [ application-name]} {internal} {system} |

Syntax Description


application	Displays application logs.
`application-name`	Application name. Up to 255 alphanumeric characters. tail—Tail system syslog messages. count—Tail last count messages. 0–4,294,967,295. \|—Output modifier variables (see below).
internal	Displays the syslogs configuration.
security	Displays the security syslog messages.
sync-logs	Displays the sync-logs status.
system	Displays the system syslogs.
\|	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the interface. Add number after the word count. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

This command displays the state of syslog error and event logging, including host addresses, and for which, logging destinations (console, monitor, buffer, or host) logging is enabled.

Examples

Example 1


ncs/admin# show logging system
ADEOS Platform log:
-----------------

Aug  5 10:44:32 localhost debugd[1943]: [16618]: config:network: main.c[252] [setup]: Setup is complete
Aug  5 10:45:02 localhost debugd[1943]: [17291]: application:install cars_install.c[242] [setup]: Install initiated with bundle - ncs.tar.gz,
repo - SystemDefaultPkgRepos
Aug  5 10:45:02 localhost debugd[1943]: [17291]: application:install cars_install.c[256] [setup]: Stage area - /storeddata/Installing/.1281030
302
Aug  5 10:45:02 localhost debugd[1943]: [17291]: application:install cars_install.c[260] [setup]: Getting bundle to local machine
Aug  5 10:45:03 localhost debugd[1943]: [17291]: transfer: cars_xfer.c[58] [setup]: local copy in of ncs.tar.gz requested
Aug  5 10:45:46 localhost debugd[1943]: [17291]: application:install cars_install.c[269] [setup]: Got bundle at - /storeddata/Installing/.1281
030302/ncs.tar.gz
Aug  5 10:45:46 localhost debugd[1943]: [17291]: application:install cars_install.c[279] [setup]: Unbundling package ncs.tar.gz
Aug  5 10:47:06 localhost debugd[1943]: [17291]: application:install cars_install.c[291] [setup]: Unbundling done. Verifying input parameters.
..
Aug  5 10:47:06 localhost debugd[1943]: [17291]: application:install cars_install.c[313] [setup]: Manifest file is at - /storeddata/Installing
/.1281030302/manifest.xml
Aug  5 10:47:07 localhost debugd[1943]: [17291]: application:install cars_install.c[323] [setup]: Manifest file appname - ncs
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[386] [setup]: Manifest file pkgtype - CARS
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[398] [setup]: Verify dependency list -
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[410] [setup]: Verify app license -
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[420] [setup]: Verify app RPM's
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[428] [setup]: No of RPM's - 9
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[439] [setup]: Disk - 50
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[325] [setup]: Disk requested = 51200 KB
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[345] [setup]: More disk found Free = 40550400, req_disk = 51200
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[450] [setup]: Mem requested by app - 100
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[369] [setup]: Mem requested = 102400
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[384] [setup]: Found MemFree = MemFree:         13028 kB
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[390] [setup]: Found MemFree value = 13028
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[393] [setup]: Found Inactive = Inactive:       948148 kB
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[399] [setup]: Found Inactive MemFree value = 948148
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[409] [setup]: Sufficient mem found
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install ci_util.c[415] [setup]: Done checking memory...
Aug  5 10:47:09 localhost debugd[1943]: [17291]: application:install cars_install.c[461] [setup]: Verifying RPM's...
--More--
(press Spacebar to continue)

Example 2


ncs/admin# show logging internal

log server:          localhost
Global loglevel:     6
Status:              Enabled
ncs/admin#

Example 3


ncs/admin# show logging internal

log server:          localhost
Global loglevel:     6
Status:              Disabled
ncs/admin#

show logins

To display the state of system logins, use the show logins command in EXEC mode.

show logins cli

Syntax Description


cli	Lists the cli login history.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

Requires the cli keyword; otherwise, an error occurs.

Examples


ncs/admin# show logins cli
root     pts/2        10.126.184.230   Fri Aug  9 14:50   still logged in   
admin    pts/3        10.126.184.230   Thu Aug  1 14:41 - 10:25 (3+19:44)   
admin    pts/3        10.126.184.230   Thu Aug  1 12:59 - 13:10  (00:10)    
admin    pts/2        10.126.184.230   Wed Jul 31 19:33 - 10:25 (4+14:51)   
admin    tty1                          Tue Jul 30 20:16 - 08:18  (12:01)    
reboot   system boot  3.10.0-957.21.3. Wed Jul 31 01:01 - 20:17 (12+19:15)  
setup    tty1                          Thu Jul 25 00:59 - 19:31 (5+18:31)   
reboot   system boot  3.10.0-957.21.3. Wed Jul 24 17:48 - 19:31 (6+01:42)   

wtmp begins Wed Jul 24 17:48:44 2019

show memory

To display the memory usage of all of the running processes, use the show memory command in EXEC mode.

show memory

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# show memory
total memory:    1035164 kB
free memory:       27128 kB
cached:           358888 kB
swap-cached:      142164 kB

ncs/admin#

show netstat

To display statistics about your network connection, use show netstat command in EXEC mode.

show netstat{ > | | }

Syntax Description


>	Output redirection.
\|	Output modifiers.

Command Default

No default behavior.

Command Modes

EXEC

Examples


ncs/admin# show netstat
TCP Listeners ------------------------------------------------------------
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 0.0.0.0:65000               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:39949               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:2000              0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:6100                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:2012                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:2013                0.0.0.0:*                   LISTEN      
tcp        0      0 :::61603                    :::*                        LISTEN      
tcp        0      0 :::10755                    :::*                        LISTEN      
tcp        0      0 :::61604                    :::*                        LISTEN      
tcp        0      0 :::31204                    :::*                        LISTEN      
tcp        0      0 :::9992                     :::*                        LISTEN      
tcp        0      0 :::65000                    :::*                        LISTEN      
tcp        0      0 :::8009                     :::*                        LISTEN      
tcp        0      0 :::5001                     :::*                        LISTEN      
tcp        0      0 :::1199                     :::*                        LISTEN      
tcp        0      0 :::111                      :::*                        LISTEN      
tcp        0      0 :::80                       :::*                        LISTEN      
tcp        0      0 :::35088                    :::*                        LISTEN      
tcp        0      0 :::21648                    :::*                        LISTEN      
tcp        0      0 :::16113                    :::*                        LISTEN      
tcp        0      0 :::2001                     :::*                        LISTEN      
tcp        0      0 :::61617                    :::*                        LISTEN      
tcp        0      0 :::1522                     :::*                        LISTEN      
tcp        0      0 :::8082                     :::*                        LISTEN      
tcp        0      0 :::6100                     :::*                        LISTEN      
tcp        0      0 :::21                       :::*                        LISTEN      
tcp        0      0 :::22                       :::*                        LISTEN      
tcp        0      0 :::48504                    :::*                        LISTEN      
tcp        0      0 :::443                      :::*                        LISTEN      
tcp        0      0 :::10555                    :::*                        LISTEN      

TCP Connections ----------------------------------------------------------
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 10.126.168.61:22            10.65.57.243:55027          ESTABLISHED

show ntp

To show the status of the NTP associations, use the show ntp command in EXEC mode.

show ntp

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Related Commands


Command	Description
ntp server	Allows synchronization of the software clock by the NTP server for the system.

show ports

To display information about all of the processes listening on active ports, use the show ports command in EXEC mode.

show ports [|] [|]

Syntax Description


`\|`	Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the interface. Add number after the word count. \|—Output modifier variables. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10. \|—Output modifier variables.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

When you run the show ports command, the port must have an associated active session.

Examples


ncs/admin# show ports
Process : timestensubd (21372)
     tcp: 127.0.0.1:11298
Process : timestenorad (21609)
     tcp: 127.0.0.1:51715
     udp: ::1:28314, ::1:59055, ::1:45113, ::1:49082, ::1:64737, ::1:62570, ::1:19577, ::1:29821
Process : ttcserver (21382)
     tcp: 127.0.0.1:16612, 0.0.0.0:53385
Process : timestenrepd (21579)
     tcp: 127.0.0.1:62504, 0.0.0.0:18047
     udp: ::1:51436
Process : timestend (21365)
     tcp: 0.0.0.0:53384
Process : rpc.statd (2387)
     tcp: 0.0.0.0:873
     udp: 0.0.0.0:867, 0.0.0.0:870
Process : timestensubd (21373)
     tcp: 127.0.0.1:43407
Process : portmap (2350)
     tcp: 0.0.0.0:111
     udp: 0.0.0.0:111
Process : Decap_main (21468)
     tcp: 0.0.0.0:2000
     udp: 0.0.0.0:9993
Process : timestensubd (21369)
     tcp: 127.0.0.1:37648
Process : timestensubd (21374)
     tcp: 127.0.0.1:64211
Process : sshd (2734)
     tcp: 172.23.90.113:22
Process : java (21432)
     tcp: 127.0.0.1:8888, :::2080, :::2020, ::ffff:127.0.0.1:8005, :::8009, :::8905, :::8010, :::2090, :::1099, :::9999, :::61616, :::8080, ::
:80, :::60628, :::8443, :::443
     udp: 0.0.0.0:1812, 0.0.0.0:1813, 0.0.0.0:1700, 0.0.0.0:10414, 0.0.0.0:3799, 0.0.0.0:1645, 0.0.0.0:1646, :::8905, :::8906
Process : monit (21531)
     tcp: 127.0.0.1:2812
Process : java (21524)
     tcp: :::62627
Process : java (21494)
     tcp: ::ffff:127.0.0.1:20515
     udp: 0.0.0.0:20514
Process : tnslsnr (21096)
     tcp: :::1521
Process : ora_d000_ncs1 (21222)
     tcp: :::26456
     udp: ::1:63198
Process : ntpd (2715)
     udp: 172.23.90.113:123, 127.0.0.1:123, 0.0.0.0:123, ::1:123, fe80::20c:29ff:fe6a:123, :::123
Process : ora_pmon_ncs1 (21190)
     udp: ::1:51994
Process : ora_mmon_ncs1 (21218)
     udp: :::38941
Process : ora_s000_ncs1 (21224)
     udp: ::1:49864

ncs/admin#

show process

To display information about active processes, use the show process command in the EXEC mode.

show process |

Syntax Description


`\|`	(Optional) Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counst the number of lines in the interface. Add number after the word count. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includes lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


/admin# show process
USER       PID     TIME TT       COMMAND
root         1 00:00:02 ?        init
root         2 00:00:00 ?        migration/0
root         3 00:00:00 ?        ksoftirqd/0
root         4 00:00:00 ?        watchdog/0
root         5 00:00:00 ?        events/0
root         6 00:00:00 ?        khelper
root         7 00:00:00 ?        kthread
root        10 00:00:01 ?        kblockd/0
root        11 00:00:00 ?        kacpid
root       170 00:00:00 ?        cqueue/0
root       173 00:00:00 ?        khubd
root       175 00:00:00 ?        kseriod
root       239 00:00:32 ?        kswapd0
root       240 00:00:00 ?        aio/0
root       458 00:00:00 ?        kpsmoused
root       488 00:00:00 ?        mpt_poll_0
root       489 00:00:00 ?        scsi_eh_0
root       492 00:00:00 ?        ata/0
root       493 00:00:00 ?        ata_aux
root       500 00:00:00 ?        kstriped
root       509 00:00:07 ?        kjournald
root       536 00:00:00 ?        kauditd
root       569 00:00:00 ?        udevd
root      1663 00:00:00 ?        kmpathd/0
root      1664 00:00:00 ?        kmpath_handlerd
root      1691 00:00:00 ?        kjournald
root      1693 00:00:00 ?        kjournald
root      1695 00:00:00 ?        kjournald
root      1697 00:00:00 ?        kjournald
root      2284 00:00:00 ?        auditd
root      2286 00:00:00 ?        audispd
root      2318 00:00:10 ?        debugd
rpc       2350 00:00:00 ?        portmap
root      2381 00:00:00 ?        rpciod/0

epnm-admin/admin#

Table 4. Show Process Field Descriptions
Field	Description
USER	Logged-in user.
PID	Process ID.
TIME	The time that the command was last used.
TT	Terminal that controls the process.
COMMAND	Type of process or command used.

show repository

To display the file contents of the repository, use the show repository command in EXEC mode.

show repository repository-name

Syntax Description


repository-name	Name of the repository whose contents you want to view. Up to 30 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

EXEC

Related Commands


Command	Description
backup	Performs a backup (Cisco EPNM and Cisco ADE OS) and places the backup in a repository.
restore	Restores from backup the file contents of a specific repository.
repository	Enters the repository submode for configuration of backups.
show backup history	Displays the backup history of the system.

show restore

To display the restore history, use the show restore command in EXEC mode.

show restore {history}

Syntax Description


history	Displays the restore history.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

epnm-system-176/admin# show restore history
Wed Dec 2 21:55:39 IST 2020: restore iol-epnm-discovery-191113-
0832__VER3.7.0.0.159_BKSZ18G_CPU16_MEM3G_RAM15G_SWAP15G_APP_CK2443318487.tar.gpg from repository 
test: success
epnm-system-176/admin#

Related Commands


Command	Description
backup	Performs a backup (Cisco EPNM and Cisco ADE OS) and places the backup in a repository.
restore	Restores from backup the file contents of a specific repository.
repository	Enters the repository submode for configuration of backups.
show backup history	Displays the backup history of the system.

show restore log

To display the last restore operation in the case of Auto logout console, use the show restore log command in EXEC mode. You can run this command even while performing a restore operation and a successful restore operation.

show restore log

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example 1


epnm-system/admin# show restore log
Started at : Thu Aug  1 14:48:08 2019
Initiating restore.  Please wait...
  Restore Started at 08/01/19 14:48:08
  Stage 1 of 9: Transferring backup file ...
  -- completed at 08/01/19 14:48:56
  Stage 2 of 9: Decrypting backup file ...
  -- completed at  08/01/19 14:50:16
  Stage 3 of 9: Unpacking backup file ...
  -- completed at  08/01/19 14:50:19
  Stopping EPNM server ...
  Stage 4 of 9: Decompressing backup ...
  -- completed at  08/01/19 14:52:12
  Stage 5 of 9: Restoring Support Files ...
  -- completed at  08/01/19 14:52:21
  Stage 6 of 9: Restoring Database Files ...
   -- completed at  08/01/19 14:53:04
  Stage 7 of 9: Recovering Database ...
  -- completed at  08/01/19 15:21:01
  Stage 8 of 9: Updating Database Schema ...
    This could take long time based on the existing data size.
  -- completed at  08/01/19 16:10:50
  Stage 9 of 9: Re-enabling Database Settings ...
   -- completed at  08/01/19 16:49:13
   Total Restore duration is: 02h:01m:05s
INFO: Restore completed successfully.

Starting Evolved Programmable Network Manager...

This may take a while (10 minutes or more) ...

Evolved Programmable Network Manager started successfully.

Completed in 1477 seconds
Finished at : Thu Aug  1 17:14:13 2019

Related Commands


Command	Description
restore	Restores from backup the file contents of a specific repository.

show running-config

To display the contents of the currently running configuration file or the configuration, use the show running-config command in EXEC mode.

show running-config

Syntax Description

This command has no arguments or keywords.

Command Default

The show running-config command displays all the configuration information.

Command Modes

EXEC

Examples


ncs/admin# show running-config
Generating configuration...
!
hostname ncs
!
ip domain-name cisco.com
!
interface GigabitEthernet 0
  ip address 172.23.90.113 255.255.255.0
  ipv6 address autoconfig
!
ip name-server 172.16.168.183
!
ip default-gateway 172.23.90.1
!
clock timezone UTC
!
ntp server time.nist.gov
!
username admin password hash $1$JbbHvKVG$xMZ/XL4tH15Knf.FfcZZr. role admin
!
service sshd
!
password-policy
  lower-case-required
  upper-case-required
  digit-required
  no-username
  disable-cisco-passwords
  min-password-length 6
!
logging localhost
logging loglevel 6
!
cdp timer 60
cdp holdtime 180
cdp run GigabitEthernet 0
!
icmp echo on
!

ncs/admin#

Related Commands


Command	Description
configure	Enters configuration mode.
show startup-config	Displays the contents of the startup configuration file or the configuration.

show startup-config

To display the contents of the startup configuration file or the configuration, use the show startup-config command in EXEC mode.

show startup-config

Syntax Description

This command has no arguments or keywords.

Command Default

The show startup-config command displays all the startup configuration information.

Command Modes

EXEC

Examples


ncs/admin# show startup-config
!
hostname ncs
!
ip domain-name cisco.com
!
interface GigabitEthernet 0
  ip address 172.23.90.113 255.255.255.0
  ipv6 address autoconfig
!
ip name-server 172.16.168.183
!
ip default-gateway 172.23.90.1
!
clock timezone UTC
!
ntp server time.nist.gov
!
username admin password hash $1$JbbHvKVG$xMZ/XL4tH15Knf.FfcZZr. role admin
!
service sshd
!
password-policy
  lower-case-required
  upper-case-required
  digit-required
  no-username
  disable-cisco-passwords
  min-password-length 6
!
logging localhost
logging loglevel 6
!
cdp timer 60
cdp holdtime 180
cdp run GigabitEthernet 0
!
icmp echo on
!
ncs/admin#

Related Commands


Command	Description
configure	Enters the configuration mode.
show running-config	Displays the contents of the currently running configuration file or the configuration.

show security-status

To display the security-related configuration information, use the show security-status command in EXEC mode.

show security-status

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

Example

epnm-system/admin# show security-status 

Open TCP Ports  : 21 22 80 443 1522 8078 8080 8082 8087 9992 20828 61617
Open UDP Ports  : 69 162 514 9991

FIPS Mode       : disabled
SSH Legacy
Algorithms      : enabled

TFTP Service    : enabled
FTP Service     : enabled

JMS port(61617) : enabled
Root Access     : enabled

Certificate validation settings for pubnet
Cert check      : enabled
OCSP check      : disabled
Auto CA update  : enabled

Certificate validation settings for system
Cert check      : trust-on-first-use
OCSP check      : disabled
Auto CA update  : disabled

Certificate validation settings for devicemgmt
Cert check      : enabled
OCSP check      : disabled
Auto CA update  : enabled

Certificate validation settings for user
Cert check      : enabled
OCSP check      : disabled
Auto CA update  : disabled

Algorithm settings enabled for SSH service
KexAlgorithms   : diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-s
ha2-nistp256,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman
-group-exchange-sha1,diffie-hellman-group1-sha1
MACs            : hmac-sha2-512,hmac-sha2-256,hmac-sha1
Ciphers         : aes128-gcm@openssh.com,aes128-ctr,chacha20-poly1305@openssh.com,aes256-ctr,aes256-gcm@openssh.com,aes192
-ctr,3des-cbc,aes128-cbc,aes256-cbc

TLS versions    : TLSv1.2
TLS ciphers     : tls-ecdhe-sha1

Note : Shows currently configured values
Changes made after last system start if any,
will be effective after next restart

show tech-support

To display technical support information, including email, use the show tech-support command in EXEC mode.

show tech-support file [ word]

Syntax Description


file	Saves any technical support data as a file in the local disk.
word	Filename to save. Up to 80 alphanumeric characters.

Command Default

Passwords and other security information do not appear in the output.

Command Modes

EXEC

Usage Guidelines

The show tech-support command is useful for collecting a large amount of information about your Cisco EPNM server for troubleshooting purposes. You can then provide output to technical support representatives when reporting a problem.

Examples


ncs/admin# show tech-support
###################################################
Application Deployment Engine(ADE) - 2.0.0.568
Technical Support Debug Info follows...
###################################################


*****************************************
Checking dmidecode Serial Number(s)
*****************************************
  None
 VMware-56 4d 14 cb 54 3d 44 5d-49 ee c4 ad a5 6a 88 c4

*****************************************
Displaying System Uptime...
*****************************************
 12:54:34 up 18:37,  1 user,  load average: 0.14, 0.13, 0.12

*****************************************
Display Memory Usage(KB)
*****************************************
             total       used       free     shared    buffers     cached
Mem:       1035164    1006180      28984          0      10784     345464
-/+ buffers/cache:     649932     385232
Swap:      2040244     572700    1467544

*****************************************
Displaying Processes(ax --forest)...
*****************************************
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:02 init [3]
    2 ?        S<     0:00 [migration/0]
    3 ?        SN     0:00 [ksoftirqd/0]
    4 ?        S<     0:00 [watchdog/0]
    5 ?        S<     0:00 [events/0]
--More--
(press Spacebar to continue)

ncs/admin#

Related Commands


Command	Description
show interface	Displays the usability status of the interfaces.
show process	Displays information about active processes.
show running-config	Displays the contents of the current running configuration.

show terminal

To obtain information about the terminal configuration parameter settings, use the show terminal command in EXEC mode.

show terminal

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# show terminal
TTY: /dev/pts/0 Type: "vt100"
Length: 27 lines, Width: 80 columns
Session Timeout: 30 minutes
ncs/admin#

show terminal describes the fields of the show terminal output.

Table 5. Show Terminal Field Descriptions
Field	Description
TTY: /dev/pts/0	Displays standard output to type of terminal.
Type: “vt100“	Type of current terminal used.
Length: 24 lines	Length of the terminal display.
Width: 80 columns	Width of the terminal display, in character columns.
Session Timeout: 30 minutes	Length of time, in minutes, for a session, after which the connection closes.

show timezone

To display the time zone set on the system, use the show timezone command in EXEC mode.

show timezone

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


epnm-system/admin# show timezone
Asia/Kolkata
epnm-system/admin#

Related Commands


Command	Description
clock timezone	Sets the time zone on the system.
show timezones	Displays the time zones available on the system.

show timezones

To obtain a list of time zones from which you can select, use the show timezones command in EXEC mode.

show timezones

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

See the clock timezone command, for examples of the time zones available for the Cisco EPNM server.

Examples


ncs/admin# show timezones
Africa/Blantyre
Africa/Dar_es_Salaam
Africa/Dakar
Africa/Maputo
Africa/Accra
Africa/Kigali
Africa/Tunis
Africa/Nouakchott
Africa/Ouagadougou
Africa/Windhoek
Africa/Douala
Africa/Johannesburg
Africa/Luanda
Africa/Lagos
Africa/Djibouti
Africa/Khartoum
Africa/Monrovia
Africa/Bujumbura
Africa/Porto-Novo
Africa/Malabo
Africa/Ceuta
Africa/Banjul
Africa/Cairo
Africa/Mogadishu
Africa/Brazzaville
Africa/Kampala
Africa/Sao_Tome
Africa/Algiers
Africa/Addis_Ababa
Africa/Ndjamena
Africa/Gaborone
Africa/Bamako
Africa/Freetown
--More--
(press Spacebar to continue)

ncs/admin#

Related Commands


Command	Description
show timezone	Displays the time zone set on the system.
clock timezone	Sets the time zone on the system.

show udi

To display information about the UDI of the Cisco EPNM appliance, use the show udi command in EXEC mode.

show udi

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

The following output appears when you run the show udi on Gen 2 appliance server.

Example 1


epnm-system/admin# sh udi
PID: EPNM-UCS-APL-K9
VPID: A0
Serial: FCH1842V1EH

epnm-system-117/admin#

show uptime

To display the length of time that you have been logged in to the Cisco EPNM server, use the show uptime command in EXEC mode.

show uptime |

Syntax Description


`\|`	(Optional) Output modifier variables: begin—Matched pattern. Up to 80 alphanumeric characters. count—Counts the number of lines in the output. Add number after the word count. end—Ends with line that matches. Up to 80 alphanumeric characters. exclude—Excludes lines that match. Up to 80 alphanumeric characters. include—Includse lines that match. Up to 80 alphanumeric characters. last—Displays last few lines of output. Add number after the word last. Up to 80 lines to display. Default 10.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples


ncs/admin# show uptime
3 day(s), 18:55:02
ncs/admin#

show users

To display the list of users who are logged in to the Cisco EPNM server, use the show users command in EXEC mode.

show users

Syntax Description


show users status	Displays the details of all users, which include roles, disabled status, and locked status.

Command Default

No default behavior or values.

Command Modes

EXEC

Examples

ncs/admin# show users
 USERNAME    ROLE    HOST         TTY     LOGIN    DATETIME  
 admin       Admin  10.77.137.60  pts/0  Fri0000 Aug 6 09:45:47 2019
ncs/admin#

show version

To display information about the software version of the system, use the show version command in EXEC mode.

show version

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

EXEC

Usage Guidelines

This command displays the version information about the Cisco ADE-OS software running on the Cisco EPNM server, and displays the Cisco EPNM version.

Examples

Cisco Application Deployment Engine OS Release: 6.7
ADE-OS Build Version: 6.7.9.001
ADE-OS System Architecture: x86_64
 
Copyright (c) 2009-2020 by Cisco Systems, Inc.
All rights reserved.
Hostname: erez-esxi-12-vm6
 
 
Version information of installed applications
---------------------------------------------
 
Cisco EPN Manager
********************************************************
Version : 6.0.0 [FIPS not Enabled]
Build : 6.0.0.0.000

Configuration Commands

This section lists the configuration commands along with a brief description of their use, command defaults, command syntax, command modes, usage guidelines, command examples, and related commands, where applicable.

Configuration commands include interface and repository .

Note

Some of the configuration commands require you to enter the configuration submode to complete the command configuration.

To access configuration mode, you must use the configure command in EXEC mode.

aaa authentication

To configure an external authentication, use the aaa authentication command in the configuration mode.

aaa authentication tacacs+ server TACACS server address key plain shared-key

Syntax Description


`TACACS server address` `shared-key`	IP address or hostname of the TACACS+ server. Indicates the shared secret text string.

Command Default

No default behavior or values.

Command Modes

Configuration

Examples


admin# aaa authentication tacacs+ server 1.1.1.5 key plain Secret
admin# username tacacsuser password remote role network-admin

Ensure that the TACACS+ server has the same username as that of the Cisco EPNM server, and the Cisco EPNM and TACACS+ servers are integrated properly.

backup-staging-url

You can use this option to configure a Network File System (NFS) share on the Cisco EPNM when partition is low on disk space and a backup cannot be taken. You can do so by using the backup-staging-url command in the configuration mode.

backup-staging-url word

Syntax Description


`word`	NFS URL for staging area. Up to 2048 alphanumeric characters. Use nfs://`server` :`path` .

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

The URL is NFS only. The format of the command is backup-staging-url nfs://server:path.

Caution

Ensure that you secure your NFS server in such a way that the directory can be accessed only by the IP address of the Cisco EPNM server.

Note

The NFS server must be configured to export the relevant file system with no_root_squash option or map the Root user to the current CARS/Admin CLI Admin user UID.

Examples


ncs/admin(config)# backup-staging-url nfs://loc-filer02a:/vol/local1/private1/jdoe
ncs/admin(config)#

cdp holdtime

To specify the amount of time for which the receiving device should hold a Cisco Discovery Protocol packet from the Cisco EPNM server before discarding it, use the cdp holdtime command in configuration mode. To revert to the default setting, use the no form of this command.

[no] cdp holdtime seconds

Syntax Description


`seconds`	Specifies the hold time, in seconds. Value from 10 to 255 seconds.

Command Default

180 seconds

Command Modes

Configuration

Usage Guidelines

Cisco Discovery Protocol packets transmit with a time to live, or hold time, value. The receiving device will discard the Cisco Discovery Protocol information in the Cisco Discovery Protocol packet after the hold time has elapsed.

The cdp holdtime command takes only one argument; otherwise, an error occurs.

Examples


ncs/admin(config)# cdp holdtime 60
ncs/admin(config)#

Related Commands


	Description
cdp timer	Specifies how often the Cisco EPNM server sends Cisco Discovery Protocol updates.
cdp run	Enables the Cisco Discovery Protocol.

cdp run

To enable the Cisco Discovery Protocol, use the cdp run command in configuration mode. To disable the Cisco Discovery Protocol, use the no form of this command.

[no] cdp run [GigabitEthernet | Team]

Syntax Description


`GigabitEthernet`	Specifies the Gigabit Ethernet interface on which the Cisco Discovery Protocol will be enabled.
`Team`	Specifies the Teaming interface on which the Cisco Discovery Protocol will be enabled.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

The command has one optional argument, which is an interface name. Without an optional interface name, the command enables the Cisco Discovery Protocol on all interfaces.

Note

The default for this command is on interfaces that are already up and running. When you are bringing up an interface, stop the Cisco Discovery Protocol first; then, start the Cisco Discovery Protocol again.

Examples


ncs/admin(config)# cdp run GigabitEthernet 0
ncs/admin(config)#

Related Commands


	Description
cdp holdtime	Specifies the length of time that the receiving device should hold a Cisco Discovery Protocol packet from the Cisco EPNM server before discarding it.
cdp timer	Specifies how often the Cisco EPNM server sends Cisco Discovery Protocol updates.

cdp timer

To specify how often the Cisco EPNM server sends Cisco Discovery Protocol updates, use the cdp timer command in configuration mode. To revert to the default setting, use the no form of this command.

[no] cdp timer seconds

Syntax Description


`seconds`	Specifies how often, in seconds, the Cisco EPNM server sends Cisco Discovery Protocol updates. Value from 5 to 254 seconds.

Command Default

60 seconds

Command Modes

Configuration

Usage Guidelines

The cdp timer command takes only one argument; otherwise, an error occurs.

Examples


ncs/admin(config)# cdp timer 60
ncs/admin(config)#

Related Commands


	Description
cdp holdtime	Specifies the amount of time that the receiving device should hold a Cisco Discovery Protocol packet from the Cisco EPNM server before discarding it.
cdp run	Enables the Cisco Discovery Protocol.

clock timezone

To set the time zone, use the clock timezone command in configuration mode. To disable this function, use the no form of this command.

clock timezone timezone

Syntax Description


`timezone`	Name of the time zone visible when in standard time. Up to 64 alphanumeric characters.

Command Default

UTC

Command Modes

Configuration

Usage Guidelines

The system internally keeps time in Coordinated Universal Time (UTC). If you do not know your specific time zone, you can enter the region, country, and city.

Table 6. Common Time Zones
Acronym or name	Time Zone Name
Europe
GMT, GMT0, GMT-0, GMT+0, UTC, Greenwich, Universal, Zulu	Greenwich Mean Time, as UTC
GB	British
GB-Eire, Eire	Irish
WET	Western Europe Time, as UTC
CET	Central Europe Time, as UTC + 1 hour
EET	Eastern Europe Time, as UTC + 2 hours
United States and Canada
EST, EST5EDT	Eastern Standard Time, as UTC -5 hours
CST, CST6CDT	Central Standard Time, as UTC -6 hours
MST, MST7MDT	Mountain Standard Time, as UTC -7 hours
PST, PST8PDT	Pacific Standard Time, as UTC -8 hours
HST	Hawaiian Standard Time, as UTC -10 hours

Table 7. Australia Time Zones
Australia⁽¹⁾
ACT⁽²⁾	Adelaide	Brisbane	Broken_Hill
Canberra	Currie	Darwin	Hobart
Lord_Howe	Lindeman	LHI⁽³⁾	Melbourne
North	NSW⁽⁴⁾	Perth	Queensland
South	Sydney	Tasmania	Victoria
West	Yancowinna

³ (1) Enter the country and city together with a forward slash (/) between them; for example, Australia/Currie.

⁴ (2) ACT = Australian Capital Territory

⁵ (3) LHI = Lord Howe Island

⁶ (4) NSW = New South Wales

Table 8. Asia Time Zones
Asia⁽¹⁾
Aden⁽²⁾	Almaty	Amman	Anadyr
Aqtau	Aqtobe	Ashgabat	Ashkhabad
Baghdad	Bahrain	Baku	Bangkok
Beirut	Bishkek	Brunei	Calcutta
Choibalsan	Chongqing	Columbo	Damascus
Dhakar	Dili	Dubai	Dushanbe
Gaza	Harbin	Hong_Kong	Hovd
Irkutsk	Istanbul	Jakarta	Jayapura
Jerusalem	Kabul	Kamchatka	Karachi
Kashgar	Katmandu	Kuala_Lumpur	Kuching
Kuwait	Krasnoyarsk

⁷ (1) The Asia time zone includes cities from East Asia, Southern Southeast Asia, West Asia, and Central Asia.

⁸ (2) Enter the region and city or country together separated by a forward slash (/); for example, Asia/Aden.

Note

Several more time zones are available to you. On your Cisco EPNM server, enter the show timezones command . A list of all of the time zones available in the Cisco EPNM server appears. Choose the most appropriate one for your time zone.

Examples


epnm-admin/admin(config)# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
epnm-admin/admin(config)# clock timezone Asia/Kolkata
epnm-admin/admin(config)#

Related Commands


	Description
show timezones	Displays a list of available time zones on the system.
show timezone	Displays the current time zone set on the system.

do

To execute an EXEC-level command from configuration mode or any configuration submode, use the do command in any configuration mode.

Syntax Description

This command has no arguments or keywords.

Table 9. Command Options for the Do Command
	Description
application install	Installs a specific application
application remove	Removes a specific application
application start	Starts or enables a specific application
application stop	Stops or disables a specific application
application upgrade	Upgrades a specific application
banner	Sets messages while logging in to CLI (pre-login)
backup	Performs a backup (Cisco EPN Manager and Cisco ADE OS) and places the backup in a repository
backup-logs	Performs a backup of all the logs on the Cisco EPN Manager server to a remote location
change password	Changes the current CLI user password
clock	Sets the system clock on the Cisco EPN Manager server
configure	Enters configuration mode
copy	Copies any file from a source to a destination
debug	Displays any errors or events for various command situations; for example, backup and restore, configuration, copy, resource locking, file transfer, and user management
delete	Deletes a file on the Cisco EPN Manager server
dir	Lists files on the Cisco EPN Manager server
forceout	Forces the logout of all the sessions of a specific Cisco EPN Manager node user
halt	Disables or shuts down the Cisco EPN Manager server
mkdir	Creates a new directory
nslookup	Queries the IPv4 address or hostname of a remote system
patch	Install System or Application patch
ping	Determines the IPv4 network activity on a remote system
ping6	Determines the IPv6 network activity on a IPv6 remote system
reload	Reboots the Cisco EPN Manager server
restore	Performs a restore and retrieves the backup out of a repository
rmdir	Removes an existing directory
rsakey	Displays a configured RSA key or sets a new RSA public key for user authentication
sam	SAM top level command
shell	Executes the root shell
show	Provides information about the Cisco EPN Manager server
ssh	Starts an encrypted session with a remote system
tech	Provides Technical Assistance Center (TAC) commands
telnet	Establishes a Telnet connection to a remote system
terminal length	Sets terminal line parameters
terminal session-timeout	Sets the inactivity timeout for all terminal sessions
terminal session-welcome	Sets the welcome message on the system for all terminal sessions
terminal terminal-type	Specifies the type of terminal that is connected to the current line of the current session
traceroute	Traces the route of a remote IP address
undebug	Disables the output (display of errors or events) of the debug command for various command situations; for example, backup and restore, configuration, copy, resource locking, file transfer, and user management
write	Erases the startup configuration that forces the setup utility to run and prompts the network configuration, copies the running configuration to the startup configuration, and displays the running configuration on the console

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

Use this command to execute EXEC commands (such as show , clear , and debug commands) while configuring your server. After the EXEC command executes, the system will return to the configuration mode that you were using.

Examples


ncs/admin(config)# do show run
Generating configuration...
!
hostname ncs
!
ip domain-name cisco.com
!
interface GigabitEthernet 0
  ip address 172.23.90.113 255.255.255.0
  ipv6 address autoconfig
!
ip name-server 172.16.168.183
!
ip default-gateway 172.23.90.1
!
clock timezone EST
!
ntp server time.nist.gov
!
username admin password hash $1$JbbHvKVG$xMZ/XL4tH15Knf.FfcZZr. role admin
!
service sshd
!
backup-staging-url nfs://loc-filer02a:/vol/local1/private1/jdoe
!
password-policy
  lower-case-required
  upper-case-required
  digit-required
  no-username
  disable-cisco-passwords
  min-password-length 6
!
logging localhost
logging loglevel 6
!
--More--

ncs/admin(config)#

end

To end the current configuration session and return to EXEC mode, use the end command in configuration mode.

end

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

This command brings you back to EXEC mode regardless of what configuration mode or submode you are in.

Use this command when you finish configuring the system and you want to return to EXEC mode to perform verification steps.

Examples


ncs/admin(config)# end
ncs/admin#

Related Commands


Command	Description
exit	Exits the configuration mode.
exit (EXEC)	Closes the active terminal session by logging out of the Cisco EPNM server.

exit

To exit any configuration mode to the next-highest mode in the CLI mode hierarchy, use the exit command in configuration mode.

exit

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

The exit command is used in the Cisco EPNM server to exit the current command mode to the next highest command mode in the CLI mode hierarchy.

For example, use the exit command in configuration mode to return to EXEC mode. Use the exit command in the configuration submodes to return to configuration mode. At the highest level, EXEC mode, the exit command exits the EXEC mode and disconnects from the Cisco EPNM server (see exit, for a description of the exit (EXEC) command).

Examples


ncs/admin(config)# exit
ncs/admin#

Related Commands


Command	Description
end	Exits the configuration mode.
exit (EXEC)	Closes the active terminal session by logging out of the Cisco EPNM server.

hostname

To set the hostname of the system, use the hostname command in configuration mode. To delete the hostname from the system, use the no form of this command, which resets the system to localhost.

[no] hostname word

Syntax Description


`word`	Name of the host. Contains at least 2 to 64 alphanumeric characters and an underscore ( _ ). The hostname must begin with a character that is not a space.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

A single instance type of command, hostname only occurs once in the configuration of the system. The hostname must contain one argument; otherwise, an error occurs.

Examples


ncs/admin(config)# hostname ncs-1
Changing the hostname or IP may result in undesired side effects,
such as installed application(s) being restarted.
Are you sure you want to proceed? [y/n] y
Stopping NCS Monitoring & Troubleshooting Log Processor...
Stopping NCS Monitoring & Troubleshooting Log Collector...
Stopping NCS Monitoring & Troubleshooting Alert Process...
Stopping NCS Application Server...
Stopping NCS Monitoring & Troubleshooting Session Database...
Stopping NCS Database processes...
Starting NCS Database processes...
Starting NCS Monitoring & Troubleshooting Session Database...
Starting NCS Application Server...
Starting NCS Monitoring & Troubleshooting Log Collector...
Starting NCS Monitoring & Troubleshooting Log Processor...
Starting NCS Monitoring & Troubleshooting Alert Process...
Note: NCS Processes are initializing. Use 'show application status ncs'
      CLI to verify all processes are in running state.

ncs-1/admin(config)#

ncs-1/admin# show application status ncs

NCS Database listener is running, PID: 11142
NCS Database is running, number of processes: 29
NCS Application Server is still initializing.
NCS M&T Session Database is running, PID: 11410
NCS M&T Log Collector is running, PID: 11532
NCS M&T Log Processor is running, PID: 11555
NCS M&T Alert Process is running, PID: 11623

ncs-1/admin#

icmp echo

To configure the Internet Control Message Protocol (ICMP) echo responses, use the icmp echo command in configuration mode.

icmp echo { off | on}

Syntax Description


off	Disables ICMP echo response.
on	Enables ICMP echo response.

Command Default

The system behaves as if the ICMP echo response is on (enabled).

Command Modes

Configuration

Examples


ncs/admin(config)# icmp echo off
ncs/admin(config)#

Related Commands


Command	Description
show icmp-status	Display ICMP echo response configuration information.

interface

To configure an interface type and enter interface configuration mode, use the interface command in configuration mode.

Note

VMware virtual machine may have a number of interfaces available. This depends on how many network interfaces (NIC) are added to the virtual machine.

interface GigabitEthernet ip-address

Syntax Description


GigabitEthernet	Configures the Gigabit Ethernet interface.
0 - 3	Number of the Gigabit Ethernet port to configure.
Team	Configures the Team interface.
0 - 255	Number of the Team port to configure.

Note

After you enter the Gigabit Ethernet port number in the interface command, you enter config-GigabitEthernet configuration submode (see the following Syntax Description).


do	EXEC command. Allows you to perform any EXEC commands in this mode (see do).
end	Exits config-{GigabitEthernet\|Team} submode and returns you to EXEC mode.
exit	Exits the config-{GigabitEthernet\|Team} configuration submode.
ip	Sets IP address and netmask for the Ethernet interface (see ip address).
ipv6	Configures the IPv6 autoconfiguration address and IPv6 address from DHCPv6 server. (see ipv6 address autoconfig and ipv6 address dhcp).
no	Negates the command in this mode. Two keywords are available: ip—Sets the IP address and netmask for the interface. shutdown—Shuts down the interface.
shutdown	Shuts down the interface (see shutdown).
virtual-ip	Configures the virtual IP features. Adds an additional sub-interface/ip to the existing IP. Supports all the regular "interface" commands.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

You can use the interface command to configure subinterfaces to support various requirements.

Examples


ncs/admin(config)# interface GigabitEthernet 0
ncs/admin(config-GigabitEthernet)#

Related Commands


Command	Description
show interface	Displays information about the system interfaces.
ip address (interface configuration mode)	Sets the IP address and netmask for the interface.
shutdown (interface configuration mode)	Shuts down the interface (see shutdown).

ipv6 address autoconfig

To enable the IPv6 stateless autoconfiguration, use the ipv6 address autoconfig command in configuration mode. To remove the address from the interface, use the no form of this command.

[no] ipv6 address autoconfig [default] 0

Syntax Description


default	(Optional) If a default router is selected on this interface, the default keyword causes a default route to be installed. The default keyword can be specified only on one interface.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

IPv6 stateless autoconfiguration has the security downfall of having predictable IP addresses. This downfall is resolved with privacy extensions. You can verify that the privacy extensions feature is enabled using the show command.

IPv6 address autoconfiguration is enabled by default in Linux. Cisco ADE shows the IPv6 address autoconfiguration in the running configuration for any enabled interface.

Examples

Example 1


ncs/admin# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
ncs/admin(config)# interface GigabitEthernet 0
ncs/admin(config)# (config-GigabitEthernet)# ipv6 address autoconfig
ncs/admin(config)# (config-GigabitEthernet)# end
ncs/admin#

When the IPv6 autoconfiguration is enabled, the running configuration displays a similar interface settings output:


!
interface GigabitEthernet 0
  ip address 172.23.90.116 255.255.255.0
  ipv6 address autoconfig
!

You can use the show interface command to display the interface settings. In example 2, you can see that the interface has three IPv6 addresses. The first address (starting with 3ffe) is obtained using the stateless autoconfiguration. For the stateless autoconfiguration to work, you must have IPv6 route advertisement enabled on that subnet. The next address (starting with fe80) is a link-local address that does not have any scope outside the host. You will always see a link local address regardless of the IPv6 autoconfiguration or DHCPv6 configuration. The last address (starting with 2001) is obtained from a IPv6 DHCP server.

Example 2


ncs/admin# show interface GigabitEthernet 0
eth0      Link encap:Ethernet  HWaddr 00:0C:29:AF:DA:05
          inet addr:172.23.90.116  Bcast:172.23.90.255  Mask:255.255.255.0
          inet6 addr: 3ffe:302:11:2:20c:29ff:feaf:da05/64 Scope:Global
          inet6 addr: fe80::20c:29ff:feaf:da05/64 Scope:Link
          inet6 addr: 2001:558:ff10:870:8000:29ff:fe36:200/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:77848 errors:0 dropped:0 overruns:0 frame:0
          TX packets:23131 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:10699801 (10.2 MiB)  TX bytes:3448374 (3.2 MiB)
          Interrupt:59 Base address:0x2000

ncs/admin#

To verify that the privacy extensions feature is enabled, you can use the show interface command. You can see two autoconfiguration addresses: address without the privacy extensions and address with the privacy extensions.

In the example 3 below, the MAC is 3ffe:302:11:2:20c:29ff:feaf:da05/64 and the non-RFC3041 address contains the MAC, and the privacy-extension address is 302:11:2:9d65:e608:59a9:d4b9/64.

A displayed output is given in the following example:

Example 3


ncs/admin# show interface GigabitEthernet 0
eth0      Link encap:Ethernet  HWaddr 00:0C:29:AF:DA:05
          inet addr:172.23.90.116  Bcast:172.23.90.255  Mask:255.255.255.0
          inet6 addr: 3ffe:302:11:2:9d65:e608:59a9:d4b9/64 Scope:Global
          inet6 addr: 3ffe:302:11:2:20c:29ff:feaf:da05/64 Scope:Global
          inet6 addr: fe80::20c:29ff:feaf:da05/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:60606 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2771 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:9430102 (8.9 MiB)  TX bytes:466204 (455.2 KiB)
          Interrupt:59 Base address:0x2000

ncs/admin#

Related Commands


Command	Description
show interface	Displays information about the system interfaces.
ip address (interface configuration mode)	Sets the IP address and netmask for the interface.
shutdown (interface configuration mode)	Shuts down the interface (see shutdown).
ipv6 address dhcp	Enables IPv6 address DHCP on an interface.
show running-config	Displays the contents of the currently running configuration file or the configuration.

ipv6 address dhcp

To enable IPv6 address DHCP, use the ipv6 address dhcp command in configuration mode. To remove the address from the interface, use the no form of this command.

[no] ipv6 address dhcp [rapid-commit] 0

Syntax Description


[rapid-commit]	(Optional) Allows the two-message exchange method for address assignment.
0	GigabitEthernet/Team and virtual-ip port numbers to be configured.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

None.

Examples


ncs/admin# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
ncs/admin(config)# interface GigabitEthernet 0
ncs/admin(config-GigabitEthernet)# ipv6 address dhcp
ncs/admin(config-GigabitEthernet)# end
ncs/admin#

When IPv6 DHCPv6 is enabled, the running configuration shows the interface settings similar to the following:


!
interface GigabitEthernet 0
  ip address 172.23.90.116 255.255.255.0
  ipv6 address dhcp
!

Note

The IPv6 stateless autoconfiguration and IPv6 address DHCP are not mutually exclusive. It is possible to have both IPv6 stateless autoconfiguration and IPv6 address DHCP on the same interface. You can use the show interface to display what IPv6 addresses are in use for a particular interface.

When both the IPv6 stateless autoconfiguration and IPv6 address DHCP are enabled, the running configuration shows the interface settings similar to the following:


!
interface GigabitEthernet 0
  ip address 172.23.90.116 255.255.255.0
  ipv6 address dhcp
!

Related Commands


Command	Description
show interface	Displays information about the system interfaces.
ip address (interface configuration mode)	Sets the IP address and netmask for the interface.
shutdown (interface configuration mode)	Shuts down the interface (see shutdown).
ipv6 address autoconfig	Enables IPv6 stateless autoconfiguration on an interface.
show running-config	Displays the contents of the currently running configuration file or the configuration.

ipv6 address static

To assign static IPv6 address, use the ipv6 address static command in configuration mode. To remove the address from the interface, use the no form of this command.

ipv6 address static [ipv6 address] 0

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

None.

Examples


admin(config-GigabitEthernet)# ipv6 address static 0:0:0:0:0:ffff:a7e:a9d2
admin(config-GigabitEthernet)# ipv6 default-gateway 0:0:0:0:0:ffff:ffff:ffe0

Related Commands


Command	Description
ipv6 address autoconfig	Enables IPv6 stateless autoconfiguration on an interface.
ipv6 address dhcp	Enables IPv6 address DHCP on an interface.

ip address

To set the IP address and netmask for the interface, use the ip address command in interface configuration mode. To remove an IP address or disable IP processing, use the no form of this command.

[no] ip address ip-address netmask

Note

You can configure the same IP address on multiple interfaces. You might want to do this to limit the configuration steps that are needed to switch from using one interface to another.

Syntax Description


ip-address	IPv4 version IP address.
netmask	Mask of the associated IP subnet.

Command Default

Enabled.

Command Modes

Interface configuration

Usage Guidelines

Requires exactly one address and one netmask; otherwise, an error occurs.

Examples


ncs/admin(config)# interface GigabitEthernet 1
ncs/admin(config-GigabitEthernet)# ip address 209.165.200.227 255.255.255.224
Changing the hostname or IP may result in undesired side effects,
such as installed application(s) being restarted.
........
To verify that NCS processes are running, use the
'show application status ncs' command.
ncs/admin(config-GigabitEthernet)#

Related Commands


Command	Description
shutdown (interface configuration mode)	Disables an interface (see shutdown).
ip default-gateway	Sets the IP address of the default gateway of an interface.
show interface	Displays information about the system IP interfaces.
interface	Configures an interface type and enters the interface mode.

ip default-gateway

To define or set a default gateway with an IP address, use the ip default-gateway command in configuration mode. To disable this function, use the no form of this command.

[no] ip default-gateway ip-address

Syntax Description


ip-address	IP address of the default gateway.

Command Default

Disabled.

Command Modes

Configuration

Usage Guidelines

If you enter more than one argument or no arguments at all, an error occurs.

Examples


ncs/admin(config)# ip default-gateway 209.165.202.129
ncs/admin(config)#

Related Commands


Command	Description
ip address (interface configuration mode)	Sets the IP address and netmask for the Ethernet interface.

ip domain-name

To define a default domain name that the Cisco EPNM server uses to complete hostnames, use the ip domain-name command in configuration mode. To disable this function, use the no form of this command.

[no] ip domain-name word

Syntax Description


word	Default domain name used to complete the hostnames. Contains at least 2 to 64 alphanumeric characters.

Command Default

Enabled.

Command Modes

Configuration

Usage Guidelines

If you enter more or fewer arguments, an error occurs.

Examples


ncs/admin(config)# ip domain-name cisco.com
ncs/admin(config)#

Related Commands


	Description
ip name-server	Sets the DNS servers for use during a DNS query.

ip name-server

To set the Domain Name Server (DNS) servers for use during a DNS query, use the ip name-server command in configuration mode. You can configure one to three DNS servers. To disable this function, use the no form of this command.

Note

Using the no form of this command removes all of the name servers from the configuration. Using the no form of this command and one of the IP names removes only that IP name server.

[no] ip name-server ip-address [ip-address*]}

Syntax Description

ip-address

Address of a name server.

ip-address*

(Optional) IP addresses of additional name servers.

Note

You can configure a maximum of three name servers.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

The first name server that is added with the ip name-server command occupies the first position and the system uses that server first to resolve the IP addresses.

You can add name servers to the system one at a time or all at once, until you reach the maximum (3). If you already configured the system with three name servers, you must remove at least one server to add additional name servers.

To place a name server in the first position so that the subsystem uses it first, you must remove all name servers with the no form of this command before you proceed.

Examples


ncs/admin(config)# ip name-server 209.165.201.1


To verify that NCS processes are running, use the
'show application status ncs' command.
ncs/admin(config)#

You can choose not to restart the Cisco EPNM server; nevertheless, the changes will take effect.

Related Commands


Command	Description
ip domain-name	Defines a default domain name that the server uses to complete hostnames.

ip route

To configure the static routes, use the ip route command in configuration mode. To remove static routes, use the no form of this command.

ip route prefix mask gateway ip-address

no ip route prefix mask

Syntax Description


prefix	IP route prefix for the destination.
mask	Prefix mask for the destination.
gateway	Route-specific gateway
ip-address	IP address of the next hop that can be used to reach that network.

Command Default

No default behavior or values.

Configuration.

Usage Guidelines

Static routes are manually configured, which makes them inflexible (they cannot dynamically adapt to network topology changes), but extremely stable. Static routes optimize bandwidth utilization, because no routing updates need to be sent to maintain them. They also make it easy to enforce routing policy.

Examples


ncs/admin(config)# ip route 192.168.0.0 255.255.0.0 gateway 172.23.90.2
ncs/admin(config)#

logging

To enable the system to forward logs to a remote system or to configure the log level, use the logging command in configuration mode. To disable this function, use the no form of this command.

[no] logging {ip-address | hostname} {loglevel level }

Syntax Description


`ip-address`	IP address of remote system to which you forward the logs. Up to 32 alphanumeric characters.
`hostname`	Hostname of remote system to which you forward the logs. Up to 32 alphanumeric characters.
loglevel	The command to configure the log level for the logging command.
security	The command for Security logging.
sync-logs	The command to configure and enable the continuous logs to sync into a repository.
`level`	Number of the desired priority level at which you set the log messages. Priority levels are (enter the number for the keyword): 0-emerg—Emergencies: System unusable 1-alert—Alerts: Immediate action needed 2-crit—Critical: Critical conditions 3-err—Error: Error conditions 4-warn—Warning: Warning conditions 5-notif—Notifications: Normal but significant conditions 6-inform—(Default) Informational messages 7-debug—Debugging messages

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

This command requires an IP address or hostname or the loglevel keyword; an error occurs if you enter two or more of these arguments.

Examples

Example 1


ncs/admin(config)# logging 209.165.200.225
ncs/admin(config)#

Example 2


ncs/admin(config)# logging loglevel 0
ncs/admin(config)#

Related Commands


Command	Description
show logging	Displays the list of logs for the system.

ntp server

To allow for software clock synchronization by the NTP server for the system, use the ntp server command in configuration mode. Allows up to five servers.

ntp server {ntp-server}

For the unauthenticated NTP servers, use the following command:

ntp server {ntp-server}

Syntax Description


`intp-server` \|	IP address or hostname of the server providing the clock synchronization. Arguments are limited to 255 alphanumeric characters.

Command Default

No servers are configured by default.

Command Modes

Configuration

Usage Guidelines

Use this command if you want to allow the system to synchronize with a specified server.

Note

The synchronization process can take up to 20 minutes to complete.

Related Commands


Command	Description
show ntp	Displays the status information about the NTP associations.

Examples


ncs/admin(config)# ntp server 192.0.2.1 10 plain password
ncs/admin(config)# ntp server 192.0.2.2 20 plain pass123

Examples


ncs/admin# sh ntp
epnm-ha-test-237-75/admin# sh ntp
NTP Server 1 : 192.0.2.1 : keyid=10
NTP Server 2 : 192.0.2.2
NTP Server 3 : 192.0.2.3 : keyid=10

unsynchronised
  time server re-starting
   polling server every 64 s

     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
192.0.2.1    .INIT.          16 u    -   64    0    0.000    0.000   0.000
192.0.2.2   .GPS.            1 u   43   64    7  250.340    0.523   1.620
192.0.2.3  192.0.2.2    2 u   41   64    7  231.451    7.517   3.434

Examples


ncs/admin# sh ntp
NTP Server 1 : 192.0.2.1 : keyid=10
NTP Server 2 : 192.0.2.2
NTP Server 3 : 192.0.2.3 : keyid=10

synchronised to NTP server (10.81.254.131) at stratum 2 
   time correct to within 569 ms
   polling server every 64 s

     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
192.0.2.1    .INIT.          16 u    -   64    0    0.000    0.000   0.000
*192.0.2.2   .GPS.            1 u   12   64   37  243.863    3.605   4.240
192.0.2.3  192.0.2.2    2 u    8   64   37  231.451    7.517   3.784

Warning: Output results may conflict during periods of changing synchronization.

password-policy

To enable or configure the passwords on the system, use the password-policy command in configuration mode. To disable this function, use the no form of this command.

[no] password-policy option

Note

The password-policy command requires a policy option (see Syntax Description). You must enter the password-expiration-enabled command before the other password-expiration commands.

Syntax Description


option	Different command options.

Note

After you enter the password-policy command, you can enter config-password-policy configuration submode.

digit-required

Requires a digit in the password.

disable-repeat-characters

Disables the ability of the password to contain more than four identical characters.

disable-cisco-password

Disables the ability to use the word Cisco or any combination as the password.

EXEC command.

end

Exits from configure mode.

exit

Exits from this submode.

lower-case-required

Requires a lowercase letter in the password.

min-password-length

Specifies a minimum number of characters for a valid password. Integer length 8–40.

Negates a command or set its defaults.

no-previous-password

Prevents users from reusing a part of their previous password.

no-username

Prohibits users from reusing their username as a part of a password.

password-expiration-days

Number of days until a password expires. Integer length 1–3600.

password-expiration-enabled

Enables password expiration.

Note

You must enter the password-expiration-enabled command before the other password-expiration commands.

password-expiration-warning

Number of days before expiration that warnings of impending expiration begin. Integer length 0–3600 .

password-lock-enabled

Locks a password after several failures.

password-lock-retry-count

Number of failed attempts before password locks. Integer length 1–20.

Note

This command has a sub-command: lock-time.

lock-time–The amount of time (in minutes) an account remains locked after failed attempts. Integer length 0–120.

upper-case-required

Requires an uppercase letter in the password.

special-required

Requires a special character in the password.

Command Default

No default behavior or values.

Command Modes

Configuration

Examples


ncs/admin(config)# password-policy
ncs/admin(config-password-policy)# password-expiration-days 30
ncs/admin(config-password-policy)# exit
ncs/admin(config)#

repository

To enter the repository submode for configuration of backups, use the repository command in configuration mode.

repository repository-name

Syntax Description


`repository-name`	Name of repository. Up to 80 alphanumeric characters.

Note

After you enter the name of the repository in the repository command, you enter repository configuration submode.


do	EXEC command.
end	Exits repository config submode and returns you to EXEC mode.
exit	Exits this mode.
no	Negates the command in this mode. Two keywords are available: url—Repository URL. user—Repository username and password for access.
url	URL of the repository. Up to 80 alphanumeric characters (see Table 1).
user	Configure the username and password for access. Up to 30 alphanumeric characters.

Table 10. URL Keywords

Keyword

Source of Destination

word

Enter the repository URL, including server and path info. Up to 80 alphanumeric characters.

disk:

Local storage.

You can enter the show repository repository_name command to view all the files in the local repository.

Note

All local repositories are created on the /localdisk partition. When you specify disk:/ in the repository URL, the system creates directories in a path that is relative to /localdisk. For example, if you entered disk:/backup, the directory is created at /localdisk/backup.

ftp:

Source or destination URL for an FTP network server. Use url ftp://server//path(1) .

nfs:

Source or destination URL for an NFS network server. Use url nfs://server:path1.

sftp:

Source or destination URL for an SFTP network server. Use url sftp://server/path1.

Note

SFTP Repositories may require the // between the ip address/FQDN and the physical path on the SFTP store. If you find that you cannot access the SFTP repository with single slashes, add the additional slash and try the operation again.

Example:

Repository SFTP-Store

url sftp://server//path

tftp:

Source or destination URL for a TFTP network server. Use url tftp://server//path1.

Note

You cannot use a TFTP repository for performing a Cisco EPNM upgrade.

Command Default

No default behavior or values.

Command Modes

Configuration

Examples

Example 1


ncs/admin# 
ncs/admin(config)# repository myrepository
ncs/admin(config-Repository)# url sftp://example.com//repository//system1
ncs/admin(config-Repository)# user abcd password plain example
ncs/admin(config-Repository)# exit
ncs/admin(config)# exit
ncs/admin#

Example 2


ncs/admin# configure termainal
ncs/admin(config)# repository myrepository
ncs/admin(config-Repository)# url disk:/
ncs/admin(config-Repository)# exit
ncs/admin(config)# exit

Related Commands


Command	Description
backup	Performs a backup (Cisco EPNM and Cisco ADE OS) and places the backup in a repository.
restore	Performs a restore and takes the backup out of a repository.
show backup history	Displays the backup history of the system.
show repository	Displays the available backup files that are located on a specific repository.

service

To manage a specific service, use the service command in configuration mode. To disable this function, use the no form of this command.

[no] service sshd

Syntax Description


sshd	Secure Shell Daemon. The daemon program for SSH.

Command Default

No default behavior or values.

Command Modes

Configuration

Examples


ncs/admin(config)# service sshd
ncs/admin(config)#

shutdown

To shut down an interface, use the shutdown command in the interface configuration mode. To disable this function, use the no form of this command.

[no] shutdown

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

Interface

Usage Guidelines

When you shut down an interface using this command, you lose connectivity to the Cisco EPNM appliance through that interface (even though the appliance is still powered on). However, if you have configured the second interface on the appliance with a different IP and have not shut down that interface, you can access the appliance through that second interface.

Related Commands


Command	Description
interface	Configures an interface type and enters the interface mode.
ip address (interface configuration mode)	Sets the IP address and netmask for the Ethernet interface.
show interface	Displays information about the system IP interfaces.
ip default-gateway	Sets the IP address of the default gateway of an interface.

snmp-server community

To set up the community access string to permit access to the Simple Network Management Protocol (SNMP), use the snmp-server community command in configuration mode. To disable this function, use the no form of this command.

[no] snmp-server community word ro

Syntax Description


`word`	Accessing string that functions much like a password and allows access to SNMP. No blank spaces allowed. Up to 255 alphanumeric characters.
ro	Specifies read-only access.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

The snmp-server community command requires a community string and the ro argument; otherwise, an error occurs.

Examples


ncs/admin(config)# snmp-server community new ro
ncs/admin(config)#

Related Commands


Command	Description
snmp-server host	Sends traps to a remote system.
snmp-server location	Configures the SNMP location MIB value on the system.
snmp-server contact	Configures the SNMP contact MIB value on the system.

snmp-server contact

To configure the SNMP contact Management Information Base (MIB) value on the system, use the snmp-server contact command in configuration mode. To remove the system contact information, use the no form of this command.

[no] snmp-server contact word

Syntax Description


`word`	String that describes the system contact information of the node. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

None.

Examples


ncs/admin(config)# snmp-server contact Abcd
ncs/admin(config)#

Related Commands


Command	Description
snmp-server host	Sends traps to a remote system.
snmp-server community	Sets up the community access string to permit access to the SNMP.
snmp-server location	Configures the SNMP location MIB value on the system.

snmp-server host

To send SNMP traps to a remote user, use the snmp-server host command in configuration mode. To remove trap forwarding, use the no form of this command.

[no] snmp-server host {ip-address | hostname } version { 1 | 2c} community

Syntax Description


`ip-address`	IP address of the SNMP notification host. Up to 32 alphanumeric characters.
`hostname`	Name of the SNMP notification host. Up to 32 alphanumeric characters.
version {1 \| 2c}	(Optional) Version of the SNMP used to send the traps. Default = 1. If you use the version keyword, specify one of the following keywords: 1—SNMPv1. 2c—SNMPv2C.
`community`	Password-like community string that is sent with the notification operation.

Command Default

Disabled.

Command Modes

Configuration

Usage Guidelines

The command takes arguments as listed; otherwise, an error occurs.

Examples


ncs/admin(config)# snmp-server community new ro
ncs/admin(config)# snmp-server host 209.165.202.129 version 1 password
ncs/admin(config)#

Related Commands


Command	Description
snmp-server community	Sets up the community access string to permit access to SNMP.
snmp-server location	Configures the SNMP location MIB value on the system.
snmp-server contact	Configures the SNMP contact MIB value on the system.

snmp-server location

To configure the SNMP location MIB value on the system, use the snmp-server location command in configuration mode. To remove the system location information, use the no form of this command.

[no] snmp-server location word

Syntax Description


`word`	String that describes the physical location information of the system. Up to 255 alphanumeric characters.

Command Default

No default behavior or values.

Command Modes

Configuration

Usage Guidelines

We recommend that you use underscores (_) or hyphens (-) between the terms within the word string. If you use spaces between terms within the word string, you must enclose the string in quotation marks (“).

Examples

Example 1


ncs/admin(config)# snmp-server location Building_3/Room_214
ncs/admin(config)#

Example 2


ncs/admin(config)# snmp-server location “Building 3/Room 214”
ncs/admin(config)#

Related Commands


Command	Description
snmp-server host	Sends traps to a remote system.
snmp-server community	Sets up the community access string to permit access to SNMP.
snmp-server contact	Configures the SNMP location MIB value on the system.

username

To add a user who can access the Cisco EPNM using SSH, use the username command in configuration mode. If the user already exists, the password, the privilege level, or both change with this command. To delete the user from the system, use the no form of this command.

[no] username username password {hash | plain} password role {user | network-admin | security-admin} [disabled [email email-address]] [email email-address]

For an existing user, use the following command option:

username username password role {user | network-admin | security-admin} password

Syntax Description

username

You should enter only one word which can include hyphen (-), underscore (_), and period (.).

Note

Only alphanumeric characters are allowed at an initial setup.

password

The command to specify the password and user role.

password

Password character length up to 40 alphanumeric characters. You must specify the password for all new users.

hash | plain

Type of password. Up to 34 alphanumeric characters.

role user | network-admin | security-admin

Sets the privilege level for the user.

disabled

Disables the user according to the user’s email address.

email email-address

The user’s email address. For example, user1@example.com.

Command Default

The initial user during setup.

Command Modes

Configuration

Usage Guidelines

The username command requires that the username and password keywords precede the hash | plain and the admin | user options.

Examples

Example 1


ncs/admin(config)# username testuser password hash ###### role network-admin
ncs/admin(config)#

Example 2


ncs/admin(config)# username testuser password plain Secr3tp@swd role network-admin
ncs/admin(config)#

Example 3


ncs/admin(config)# username testuser password plain Secr3tp@swd role network-admin email admin123@example.com
ncs/admin(config)#

Related Commands


	Description
password-policy	Enables and configures the password policy.
show users	Displays a list of users and their privilege level. It also displays a list of logged-in users.

Command Reference Guide for Cisco Evolved Programmable Network Manager 8.0

Bias-Free Language

Results

Chapter: Cisco EPNM Command Reference

Cisco EPNM Command Reference

EXEC Commands

application install

Syntax Description

Command Default

Command Modes

Related Commands

application remove

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Related Commands

application reset-config

Syntax Description

Command Default

Command Modes

Related Commands

application start

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Related Commands

application stop

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Related Commands

application upgrade

Syntax Description

Command Default

Command Modes

Related Commands

backup

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Examples

Related Commands

backup-logs

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Related Commands

banner

Syntax Description

Command Default

Command Modes

Examples

Related Commands

change-password

Syntax Description

Command Default

Command Modes

Examples

clock

Syntax Description

Command Default

Command Modes

Usage Guidelines

Examples

Related Commands

configure

Syntax Description

Command Default

Command Modes

Usage Guidelines