Table Of Contents
K Commands
keepalive
kernel core
key
K Commands
The commands in this chapter apply to the Cisco MDS 9000 Family of multilayer directors and fabric switches. All commands are shown here in alphabetical order regardless of command mode. See the "Command Modes" section to determine the appropriate mode for each command. For more information, refer to the Cisco MDS 9000 Family Configuration Guide.
keepalive
To configure the message keepalive interval for the IKE protocol, use the keepalive command in IKE configuration submode. To revert to the default, use the no form of the command.
keepalive seconds
no keepalive [seconds]
Syntax Description
seconds
|
Specifies the number of seconds for the keepalive interval. The range is 120 to 86400.
|
Defaults
3600 seconds or 1 hour.
Command Modes
IKE configuration submode.
Command History
Release
|
Modification
|
2.0(1b)
|
This command was introduced.
|
Usage Guidelines
The keepalive interface only applies to IKE version 2 tunnels.
To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Examples
The following example shows how to configure the keepalive interval.
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# keepalive 7200
Related Commands
Command
|
Description
|
crypto ike domain ipsec
|
Enters IKE configuration mode.
|
crypto ike enable
|
Enables the IKE protocol.
|
show crypto ike domain ipsec
|
Displays IKE information for the IPsec domain.
|
kernel core
Use the kernel core command to generate a core dump for each module. Use the no form of this command to negate the command or revert to its factory
kernel core {limit number | module slot {force | level {all | header | kernel | ram | used-ram} |
target ipaddress}
no kernel core {limit number | module slot {force | level {all | header | kernel | ram | used-ram}
| target ipaddress}
Syntax Description
limit number
|
Limits the number of modules for which the core is generated. The range is 1 to 6.
|
module slot
|
Configures the module requiring the core generation.
|
force
|
Forces a module to dump kernel core.
|
level
|
Specifies the core dump level for the selected module.
|
all
|
Dumps all the memory (requires 1G of space)
|
header
|
Dumps kernel header only.
|
kernel
|
Dumps all kernel memory pages.
|
ram
|
Dumps all the RAM pages.
|
used-ram
|
Dumps all the used RAM pages.
|
target ipaddress
|
Configures the external server IP address on the same physical LAN.
|
Defaults
Disabled.
Command Modes
Configuration mode.
Command History
Release
|
Modification
|
1.1(1)
|
This command was introduced.
|
Usage Guidelines
Core dumps performed on the supervisor module can lead to packet loss, even in a dual supervisor configuration.
Examples
The following example limits core generation to two modules.
switch(config)# kernel core limit 2
The following example configures module 5 to generate cores.
switch(config)# kernel core module 5
The following example configures module 5 to generate only header-level cores.
switch(config)# kernel core module 5 level header
The following example configures the external server.
switch(config)# kernel core target 10.50.5.5
Related Commands
Command
|
Description
|
show kernel
|
Displays configured kernel core settings.
|
show running-config
|
Displays all switch configurations saved to PSS.
|
key
To configure the preshared key for the IKE protocol, use the key command in IKE configuration submode. To revert to the default, use the no form of the command.
key key-id address ip-address
no key key-id address ip-address
Syntax Description
key-id
|
Specifies the ID for the preshared key. Maximum length is 128 characters.
|
address ip-address
|
Specifies the peer IP address. The format is A.B.C.D.
|
Defaults
None.
Command Modes
IKE configuration submode.
Command History
Release
|
Modification
|
2.0(1b)
|
This command was introduced.
|
Usage Guidelines
To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Examples
The following example shows how to configure the key.
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# key ctct address 10.10.100.231
Related Commands
Command
|
Description
|
crypto ike domain ipsec
|
Enters IKE configuration mode.
|
crypto ike enable
|
Enables the IKE protocol.
|
show crypto ike domain ipsec
|
Displays IKE information for the IPsec domain.
|