Cisco Global Site Selector CLI Commands

Transcription

1 Cisco Global Site Selector CLI Commands CHAPTER 2 This chapter provides detailed information for the following types of Global Site Selector (GSS) CLI commands: General commands that you can enter after you log in to the GSS in user EXEC and privileged EXEC modes. Global configuration commands that you enter after you log in to the GSS in privileged EXEC mode. Interface configuration commands that you enter after logging in to the GSS in privileged EXEC mode. Global server load-balancing configuration commands that you enter after logging in to the GSS in privileged EXEC mode. Domain and source address list commands that you enter after you access the global server load-balancing configuration mode. Answer and answer group commands that you enter after you access the global server load-balancing configuration mode. Domain Name System (DNS) rule configuration commands that you enter after you access the global server load-balancing configuration mode. DNS sticky configuration commands that you enter after you access the global server load-balancing configuration mode. Proximity configuration commands that you enter after you access the global server load-balancing configuration mode. 2-1

2 General Commands Chapter 2 The documentation of each command contains the following information: Command Syntax Information about the correct structure and syntax for the command Detailed information that describes the purpose of the command and its proper application Examples Command syntax as it appears in a CLI session Other CLI commands with a purpose that is closely related to or dependent on the current command For more information about accessing a CLI session and using CLI commands, see Chapter 1, Using the Command-Line Interface. General Commands The following general commands are available to you immediately after you log in to a GSS. The commands that you can access depend on your permission level. User EXEC permission level provides access to the following commands and any associated no forms: cd ls dir ping dnslookup pwd enable scp exit show ftp tail help telnet lls type 2-2

3 Chapter 2 General Commands Privileged EXEC permission level provides access to all general commands. You can also access commands in the following modes: global configuration, interface configuration, global server load-balancing configuration, and subordinate global server load-balancing configuration modes. 2-3

4 General Commands Chapter 2? To display a list of the available commands and syntax options, use the? command.? This command has no keywords or arguments. All command modes This command displays the commands and syntax options available to you at the point at which you enter the command. For additional background on the use of GSS help, see Chapter 1, Using the Command-Line Interface. Examples The following example shows how to display a list of the available commands and syntax options: gss1.example.com>? cd Change directory cnr CNR Related commands dir Directory list ddos DDoS exec commands dnslookupresolve hostname (DNS) enable Turn on privileged commands exit Exit from the EXEC ftp Open FTP session to host help Description of the interactive help system lls list files in long info ls Directory list ping Ping a remote host pwd Show present working directory scp SecureCopy files [scp from to] show Show running system information tail Display last 10 lines of a file telnet Open telnet session to host type View a file 2-4

5 Chapter 2 General Commands host(config)# show? access-group Configure access lists access-list Configure access lists arp Display system ARP cache boot-config Display bootable GSS software images clock Display system clock ddos DDoS exec commands disk Display disk information ftp Display ftp status gslb-config Show configuration for gslb objects gslb-errors Show errors during most recent script-play interface Configure interface inventory Show inventory information ip Display IP information license Show license information logging Configure system logging logs Display GSS system log memory Display memory information ntp NTP service control processes Display processes on system properties Display system properties proximity Display Proximity subsystem information running-config Show running configuration services Display status of basic services snmp Display SNMP information ssh Display SSH status startup-config Show startup configuration statistics Display statistics sticky Display Sticky Database information system-status Report status of GSS tacacs Display TACACS+ configuration tech-support Display information useful to Cisco TAC telnet Display telnet status terminal-lengthdisplay terminal-length uptime Display system uptime user Display user information users Display configured users version Display system version help 2-5

6 General Commands Chapter 2 cd To change the directory, use the cd command. cd directoryname directoryname Name of the directory. User and privileged EXEC Use this command to maneuver between directories and for file management. The directory name becomes the default prefix for all relative paths. Relative paths do not begin with a slash (/). Absolute paths begin with a slash (/). Enter cd.. to move to the directory that is one level higher than the one that you are in. Examples The following example shows the relative path: gss1.example.com> cd local1 The following example shows the absolute path: gss1.example.com> cd /local1 dir lls ls lsof pwd 2-6

7 Chapter 2 General Commands clear To reset GSS statistics for a specific subsystem, use the clear command. clear statistics {boomerang ddos [all attacks drops global ] dns drpagent keepalive {all cra http-head icmp kalap ns tcp} proximity sticky {mesh} tacacs} statistics Resets load-balancing statistics on the GSS. boomerang Resets statistics that relate to the boomerang server component of the GSS. ddos Resets statistics that relate to the Distributed Denial of Service (DDoS) detection and mitigation component of the GSS. global (Optional) Resets global statistics that relate to the GSS DDoS detection and mitigation component. attacks (Optional) Resets attack statistics that relate to the GSS DDoS detection and mitigation component. dns Resets statistics that relate to the Domain Name System (DNS) server component of the GSS, including proximity and sticky DNS rule statistics. dpragent Resets statistics that relate to the DRP agent component of the GSS. keepalive Resets statistics that relate to the keepalive function of the GSS software. all Resets statistics for all keepalive types maintained by the GSS. cra Resets statistics for only content routing agent (CRA)-type keepalives maintained by the GSS. http-head Resets statistics for only the VIP HTTP-HEAD type keepalive maintained by the GSS. icmp Resets statistics for only the VIP ICMP-type keepalive maintained by the GSS 2-7

8 General Commands Chapter 2 kalap ns scripted-kal tcp proximity sticky mesh tacacs Resets statistics for only the VIP KAL-AP-type keepalive maintained by the GSS. Resets statistics for the Name Server-type keepalive maintained by the GSS. Resets statistics for the Scripted-Kal-type keepalive maintained by the GSS. Resets statistics for the IP and port TCP-type keepalive maintained by the GSS. Resets statistics for the network proximity function. Resets statistics for the DNS sticky function. Resets mesh and session statistics for the local GSS node of the global sticky mesh. Resets TACACS+GSSM statistics. Privileged EXEC Use the clear command to reset global server load-balancing statistics for one or more of your GSS components. Clearing the statistics for a GSS component will erase all record of routing activity and performance for that device. Examples The following example shows how to use the clear command: gss1.example.com# clear statistics boomerang Are you sure? (yes/no) yes gss1.example.com# clear statistics dns Are you sure? (yes/no) yes cra keepalive statistics cleared gss1.example.com# clear statistics keepalive kalap Are you sure? (yes/no) yes kal-ap keepalive statistics cleared gss1.example.com# clear statistics proximity Are you sure? (yes/no) yes proximity statistics cleared 2-8

9 Chapter 2 General Commands clear ddos-config To clear the configuration from the Distributed Denial of Service (DDoS) detection and mitigation subsystem, use the clear ddos-config command. clear ddos-config This command has no keywords or arguments. Privileged EXEC Examples The following example shows how to clear the configuration from the DDoS detection and mitigation subsystem: gss1.example.com# clear ddos-config gss1.example.com# 2-9

10 General Commands Chapter 2 clock To perform the following actions, use the clock command: Read the hardware calendar into the system clock Set the current time or time zone for a GSS device Set daylight saving time to some predefined summer time Reset the GSS to synchronize log time stamps to a new time zone Update the hardware calendar from the system clock Set a user-defined daylight saving time Specify a user-defined time zone clock {read-calendar set hh:mm:ss MONTH DD YYYY summer-time timezone timezone timezonename update-calendar user-summer-time summer-time name start time start day start week start month end time end day end week end month offset user-timezone timezone name hour_offset minute_offset} read-calendar Reads the hardware calendar into the system clock. You can use this command when the system clock is reset through NTP and you want to revert back to using the hardware clock. set Sets the device clock to the date and time provided. hh:mm:ss Current time to which the GSS device clock is being reset. Specify one or two digits for the hours, minutes, and seconds. 2-10

11 Chapter 2 General Commands MONTH DD YYYY summer-time timezone timezone Current date to which the GSS device clock is being reset. Specify the full name of the month, one or two digits for the day, and four digits for the year. The following month names are recognized: January February March April May June July August September October November December Sets daylight saving time to some predefined summer times. Name of the predefined time zone. The following time zones are recognized: ADT (Atlantic Daylight Time) AKDT (Alaska Standard Daylight Time) CDT (Central Daylight Time) EDT (Eastern Daylight Time) MDT (Mountain Daylight Time) PDT (Pacific Daylight Time) Resets the GSS to synchronize log time stamps to a new time zone. 2-11

12 General Commands Chapter 2 timezonename update-calendar user-summer-time summer-time name start time start day start week Name of the timezone. Enter? to list all supported time zones, countries, continents, and cities. The following options are available to set the local time zone for your GSS: Standard time zone (for example, GMT, EST, UTC) Country or part of a continent (for example, America, Europe, Egypt) Specific city (for example, New York, Paris) Updates the hardware calendar from the system clock. You can use this command when the system clock is reset through NTP and you want to synchronize the system time with the hardware clock. Sets a user-defined daylight saving time. Name of the user-defined summer time. Start time for the user-defined summer time in hours and minutes. Values from 0 23 are recognized. Start day for the user-defined summer time.the following days are recognized: Friday Saturday Sunday Monday Tuesday Wednesday Thursday Start week for the user-defined summer time. Values from 1 5 are recognized. 2-12

13 Chapter 2 General Commands start month end time end day end week Start month for the user-defined summer time. The following month names are recognized: January February March April May June July August September October November December End time for the user-defined summer time in hours and minutes. Values from 0 23 are recognized. End day for the user-defined summer time. The following days are recognized: Friday Saturday Sunday Monday Tuesday Wednesday Thursday End week for the user-defined summer time. Values from 1 5 are recognized. 2-13

14 General Commands Chapter 2 end month offset user-timezone timezone name hour_offset minute_offset End month for the user-defined summer time. The following month names are recognized: January February March April May June July August September October November December Offset (in minutes) for the user-defined time zone. Values from are recognized. Specifies a user-defined time zone. Name of the user-defined time zone. Hour offset for the user-defined time zone. Values from 23 to +24 are recognized. Minute offset for the user-defined time zone. Values from 0 59 are recognized. Note The clock update-calendar and read-calendar commands allow you to synchronize the hardware clock and system clock without reloading the GSS. Privileged EXEC, global configuration, and interface configuration. 2-14

15 Chapter 2 General Commands If you previously enabled NTP on a GSS using the ntp enable command, the GSS prevents you from using the clock set command and displays an error message. If you want to manually set the clock for the GSS, first disable NTP using the no ntp enable command before setting the clock. Examples The following example shows how to set the GSS device time: gss1.example.com# clock set 13:01:05 sept gss1.example.com# clock timezone GMT The following example shows how to set the GSS time zone: gss1.example.com# clock timezone europe paris The following example shows how to set a user-defined time zone on the GSS: gss1.example.com# clock user-timezone EST -5 0 Please restart the GSS (reload) to sync log timestamps to new timezone. The following example shows how to set the user-defined summer time on the GSS: gss1.example.com# clock user-summertime EDT 2:00 Sunday 1 April 2:00 Sunday 5 October 60 Timezone set Please restart the GSS (reload) to sync log timestamps to new timezone. The following example shows how to update the hardware calendar from the system clock: gss1.example.com# clock update-calendar The following example shows how to read the hardware calendar into the system clock: gss1.example.com# clock read-calendar 2-15

16 General Commands Chapter 2 configure To enter global configuration mode, use the configure command. configure This command has no keywords or arguments. Privileged EXEC To exit global configuration mode, use the end or exit commands, or by pressing the Ctrl-Z key sequence. Examples The following example shows how to enter global configuration mode: gss1.example.com# configure gss1.example.com(config)# end exit 2-16

17 Chapter 2 General Commands copy To copy configuration settings to or from the GSS device, use the copy command. copy {ddos-config disk filename disk startup-config filename gslb-config disk filename startup-config disk filename running-config [disk filename startup-config]} ddos-config disk filename disk startup-config gslb-config disk startup-config disk running-config disk running-config startup-config Copies the Distributed Denial of Service (DDoS) configuration file to a named file on disk. Name of the output file containing the GSLB-configuration, startup-configuration or running-configuration information. Loads the GSS device startup configuration settings from a named file located on the GSS. Copies the global server load-balancing configuration to a named file on the GSS. Copies the GSS device startup configuration to a named file on the GSS. Copies the GSS device current running configuration to a named file on the GSS. Copies the GSS device current running configuration as the new startup configuration. Privileged EXEC When supplying an output filename enter the name only. Do not include path information with the filename. 2-17

18 General Commands Chapter 2 Examples The following examples show that the copy command is used to load a new startup configuration to the device from a file and to copy the current running configuration to a file: gss1.example.com# copy disk startup-config configfile gss1.example.com# copy running config disk runconfigfile ftp scp 2-18

19 Chapter 2 General Commands cnr To enter the Cisco Network Registrar (CNR) command line interface (the nrcmd program), use the cnr command. cnr This command has no keywords or arguments. Privileged EXEC Note Before entering nrcmd, you must first install and enable CNR. Upon successful execution of this command, you are prompted for a username and password. See the Cisco Network Registrar CLI Reference Guide v6.2 for instructions about using the CNR configuration mode commands. Examples The following example shows how to enter CNR configuration mode: gssm1.example.com# cnr username: <user_name> password: ****** 100 OK session: cluster = localhost current-vpn = global default-format = user groups = superuser roles = superuser scope-edit-mode = staged user-name = admin visibility =

20 General Commands Chapter 2 zone-edit-mode = synchronous nrcmd> cnr enable cnr install/uninstall cnr shell 2-20

21 Chapter 2 General Commands cnr install/uninstall To install Cisco Network Registrar (CNR) on your GSS, use the cnr install command. To uninstall CNR, use the cnr uninstall command instead. cnr install cnr-package cnr uninstall cnr-package Name of the CNR package. Note You can install CNR without first obtaining the GSS license for the CNR module. It is not mandatory to have both the license file for installing CNR on the GSS and the CNR software package itself. The CNR software package contains the response file for silent installation, config_cnr, which configures the CNR ports that listen to the GSS. Privileged EXEC For information about installing and activating the CNR software, see the Cisco Global Site Selector Administration Guide. Examples The following example shows how to install the CNR package on the GSS: gssm1.example.com# cnr install cnr_pak.tar The following example shows how to uninstall the CNR package: gssm1.example.com# cnr uninstall 2-21

22 General Commands Chapter 2 cnr enable cnr cnr shell 2-22

23 Chapter 2 General Commands cnr shell To enter the restricted Cisco Network Registrar (CNR) shell and execute the available CNR utilities, use the cnr shell command. cnr shell This command has no keywords or arguments. Privileged EXEC Upon successful execution of this command, you can press the Tab key to see the available utilities in the CNR shell. You can then execute any of these utilities by entering the utility name. See the Cisco CNS Network Registrar User s Guide for more information about the available utilities. Examples The following example shows how to enter the CNR shell, display the utilities, and then execute the cnr_tactool utility: gssm1.example.com# cnr shell cnr shell> cnr <Tab> cnr_exim cnr_tactool.origcnrdb_load cnrdb_verify cnr_exim.orig cnrdb_archive cnrdb_printlog cnrservagt cnr_keygen cnrdb_checkpoint cnrdb_recover cnrsnmp cnr_keygen.origcnrdb_deadlock cnrdb_stat cnr_tactool cnrdb_dump cnrdb_upgrade cnr shell > cnr shell cnr shell> cnr shell> cnr_tactool user: password: cnr enable cnr cnr install/uninstall 2-23

24 General Commands Chapter 2 ddos peacetime Different Domain Name System (DNS) zones may exhibit different behavior. A high traffic rate on one D-proxy may be perfectly normal for another. A peacetime learning process is required on the GSS. To configure peacetime learning in the GSS, use the ddos peacetime command and its related commands. ddos peacetime [apply [increment overwrite] database erase save filename show [filename status] start stop] apply [increment overwrite] database erase See the ddos peacetime apply command for a detailed syntax description. See the ddos peacetime database erase command for a detailed syntax description. save filename See the ddos peacetime save command for a detailed syntax description. show [filename status] See the ddos peacetime show command for a detailed syntax description. start stop See the ddos peacetime show command for a detailed syntax description. See the ddos peacetime stop command for a detailed syntax description. 2-24

25 Chapter 2 General Commands ddos peacetime apply To apply values learned during the peacetime learning process to the rate-limit database, use the ddos peacetime apply command. ddos peacetime apply [increment overwrite] increment overwrite Specifies that you want to apply the peacetime learned values incrementally to the database. Specifies that you want to restore all the values in the rate-limit database to their defaults and then update them with the values learned during peacetime. Privileged EXEC This command updates the rate-limit database with the peacetime learned values. The peacetime database location is specified in the (config-ddos) peacetime database command. If you do not specify this command, the in-memory database is used instead. Examples The following example shows how to apply values learned during the peacetime learning process to the rate-limit database: gssm1.example.com# ddos peacetime apply increment gssm1.example.com# ddos peacetime database erase ddos peacetime save ddos peacetime show ddos peacetime stop ddos restore-defaults 2-25

26 General Commands Chapter 2 ddos peacetime database erase To erase peacetime learning, use the ddos peacetime database erase command. ddos peacetime database erase This command has no keywords or arguments. Privileged EXEC Examples The following example shows how to erase peacetime learning: gssm1.example.com# ddos peacetime database erase gssm1.example.com# ddos peacetime apply ddos peacetime save ddos peacetime show ddos peacetime stop ddos restore-defaults 2-26

27 Chapter 2 General Commands ddos peacetime save To save peacetime learning to the memory or to a file on a disk, use the ddos peacetime save command in privileged EXEC mode. ddos peacetime save filename filename Name of the file on the disk to which you want to save peacetime learning. Privileged EXEC Examples The following example shows how to save peacetime learning: gssm1.example.com# ddos peacetime save samplefile gssm1.example.com# ddos peacetime apply ddos peacetime database erase ddos peacetime show ddos peacetime stop ddos restore-defaults 2-27

28 General Commands Chapter 2 ddos peacetime show To show values learned during the peacetime learning process or show the peacetime learning status, use the ddos peacetime show command. ddos peacetime show [filename status] filename status (Optional) Filename of the peacetime learning process that you want do display values. (Optional) Specifies that you want to display the current peacetime learning status. Privileged EXEC Examples The following example shows how to display the peacetime status: gssm1.example.com# ddos peacetime show status DDoS Peacetime Learning is running. gssm1.example.com# ddos peacetime apply ddos peacetime database erase ddos peacetime save ddos peacetime show ddos peacetime stop ddos restore-defaults 2-28

29 Chapter 2 General Commands ddos peacetime start To start the peacetime learning process, use the ddos peacetime start command. ddos peacetime start This command has no keywords or arguments. Privileged EXEC This command incrementally updates the values in the peacetime database. Examples The following example shows how to start peacetime learning: gssm1.example.com# ddos peacetime start gssm1.example.com# ddos peacetime apply ddos peacetime database erase ddos peacetime save ddos peacetime stop ddos peacetime show ddos restore-defaults 2-29

30 General Commands Chapter 2 ddos peacetime stop To stop peacetime learning, use the ddos peacetime stop command. ddos peacetime stop This command has no keywords or arguments. Privileged EXEC Examples The following example shows how to stop peacetime learning: gssm1.example.com# ddos peacetime stop gssm1.example.com# ddos peacetime apply ddos peacetime database erase ddos peacetime save ddos peacetime show ddos peacetime start ddos restore-defaults 2-30

31 Chapter 2 General Commands ddos restore-defaults To restore the default rate-limit values in the rate-limit database, use the ddos restore-defaults command. ddos restore-defaults ipaddress ipaddress D-proxy IP address. Indicates that you want to restore the rate limit of the designated D-proxy to the default rate and the state to Unknown. Privileged EXEC Examples The following example shows how to restore the defaults in the rate-limit database: gssm1.example.com# ddos restore-defaults gssm1.example.com# ddos peacetime apply ddos peacetime database erase ddos peacetime save ddos peacetime show ddos peacetime stop ddos peacetime start 2-31

32 General Commands Chapter 2 del To delete files from your GSS device, use the del command. del filename filename Name of the file to be deleted. Privileged EXEC Examples The following example shows how to delete files from your GSS device: gss1.example.com> enable gss1.example.com# del oldtechrept.tgz gss1.example.com# copy dir lls ls 2-32

33 Chapter 2 General Commands dir To view a long list of files in a directory, use the dir command. dir [directory] directory (Optional) Name of the directory to list. User and privileged EXEC Use this command to view a detailed list of files contained within the working directory, including names, sizes, and the time created. The equivalent command is lls. The current directory is the default directory. Examples The following example shows how to view a long list of files in a directory: gss1.example.com# dir total drwxrwxrwx 3 root root 4096 Oct 8 11:09. drwxrwxrwx 19 root root 4096 Oct 8 11:13.. drwx root root 4096 Jan ssh -rw-r--r-- 1 root root Jan ACR_new.upg -rw-r--r-- 1 root root Jan ACR_new1.upg -rw-r--r-- 1 root root Jan ACR_new2.upg -rw-r--r-- 1 root root Jan gss k9.upg -rw-r--r-- 1 root root Jan gss k9.upg -rw-r--r-- 1 root root Oct 8 10:54 gss k9.upg -rw-r--r-- 1 root root 2520 Oct 8 11:09 one -rw-r--r-- 1 root root 3634 Oct 8 11:06 proximityschema.xsd -rw-r--r-- 1 root root 3523 Oct 8 11:07 stickyschema.xsd gss1.example.com# 2-33

34 General Commands Chapter 2 lls ls pwd 2-34

35 Chapter 2 General Commands disable To turn off privileged EXEC mode, use the disable command. disable This command has no keywords or arguments. Privileged EXEC The disable command places you in user EXEC mode. To turn privileged EXEC mode back on, use the enable command. Examples The following example shows how to turn off privileged EXEC mode: gss1.example.com# disable gss1.example.com> enable exit 2-35

36 General Commands Chapter 2 dnslookup To resolve a host or domain name to an IP address, use the dnslookup command. dnslookup {hostname domainname} hostname domainname Name of the host on the network. Domain name. User and privileged EXEC Examples The following examples show how the dnslookup command is used to resolve the hostname myhost.cisco.com to IP address , cisco.com to IP address , and the IP address to gss.cisco.com: gss1.example.com# dnslookup myhost.cisco.com Server: mydnsserver.cisco.com Address: Name: myhost.cisco.com Address: gss1.example.com# dnslookup cisco.com Server: dns-bxb.cisco.com Address: Name: Address: gss1.example.com# dnslookup Server: dns-bxb.cisco.com Address: Name: gss.cisco.com Address:

37 Chapter 2 General Commands enable To access privileged EXEC commands, use the enable command. enable This command has no keywords or arguments. User and privileged EXEC To access privileged EXEC mode from user EXEC mode, use the enable command. The disable command takes you from privileged EXEC mode to user EXEC mode. Examples The following example shows how to access privileged EXEC commands: gss1.example.com> enable gss1.example.com# disable exit 2-37

38 General Commands Chapter 2 end To exit the EXEC or global configuration command shell, use the end command. end This command has no keywords or arguments. EXEC and global configuration Use the end command in any configuration mode to return to EXEC mode. This command is equivalent to pressing Ctrl-Z or using the exit command. The end command entered in the user-level EXEC shell terminates the console or Telnet session. Examples The following example shows how to exit the EXEC or global configuration command shell: gss1.example.com(config)# end gss1.example.com# end gss1.example.com> exit 2-38

39 Chapter 2 General Commands exit To access the EXEC command shell from the global or interface configuration command shells, use the exit command. exit This command has no keywords or arguments. All command modes Use the exit command in any configuration mode to return to EXEC mode. This command is equivalent to the end command or pressing Ctrl-Z. The exit command entered in the user-level EXEC shell terminates the console or Telnet session. Examples The following example shows how to access the EXEC command shell from the global or interface configuration command shells: gss1.example.com(config)# exit gss1.example.com# exit gss1.example.com> end 2-39

40 General Commands Chapter 2 ftp To launch an FTP session on your GSS device, use the ftp command. ftp ip_or_host ip_or_host IP address or hostname of the FTP server that you want to access. Enter an IP address in dotted-decimal notation (for example, ) or a mnemonic hostname (for example, myhost.mydomain.com). User EXEC and privileged EXEC Use the ftp command in EXEC mode to launch the FTP client and transfer a file to and from remote machines. Examples The following example shows how to launch an FTP session on your GSS device: gss1.example.com# ftp ftp enable show telnet telnet scp 2-40

41 Chapter 2 General Commands gss To manage your GSS devices, use the gss command. gss {disable enable {gssm-primary gssm-standby {primary_gssm_hostname primary_gssm_ip_address} gss {primary_gssm_hostname primary_gssm_ip_address} restart start status [verbose] stop} disable Disables the selected device (GSSM or GSS) and removes any existing configuration, including deleting the Global Site Selector Manager (GSSM) database from the GSS device and removing certificate attributes specified using the certificate set-attributes command. This keyword returns the GSS device to the initial, disabled state. Disabling a GSS device is only necessary when you want to switch the role of a GSS within a network (for example, change a GSS to a GSSM or if you need to move a GSS or GSSM to a different network of GSS devices. enable Enables the selected device to act as the type of device that you specify: either a GSSM or GSS. This keyword creates the embedded database on the primary GSSM that stores and manages the configuration information for the GSS network. It also performs all of the other initialization processes to enable the device in a network of GSS devices. Enabling a GSS device is a one-time initialization step that is required only when you first set up the device within a network of GSS devices. 2-41

42 General Commands Chapter 2 gssm-primary gssm-standby primary_gssm_hostname primary_gssm_ip_address gss restart start status Configures the selected device to act as the primary GSSM for your GSS network, responsible for maintaining status information about GSS devices and load-balancing information that is distributed to devices on the network. Configures the selected device to act as a standby GSSM which will take over GSS network management should the primary GSSM go offline. Domain Name System (DNS) hostname of the device currently serving as the primary GSSM. Network address of the device currently serving as the primary GSSM. Indicates that the selected device should function as a GSS on the GSS network. Stops and restarts the GSS software on the selected device. Starts the GSS software on the selected device following the initial configuration or a software upgrade. Displays detailed information about the current operating state of the GSS device including the online status, the software version, and the start date or time for the various components. The equivalent command is the show system-status command. Note The status of the License Manager (LM) and the Distributed Denial of Service (DDoS) prevention module do not appear in the output of the gss status command. Instead, you enter the show ddos status command to obtain DDoS information and the show processes grep license_manager command to obtain the LM status. 2-42

43 Chapter 2 General Commands verbose stop (Optional) Displays the same detailed information about the current operating state of the GSS device as with the gss status command, including the CPU utilization. Note Calculating the CPU utilization can take additional time when using the gss status verbose command. On a busy system, the gss status verbose command can take approximately 10 seconds to complete. If you do not require calculation of the CPU Utilization operating parameter, then we recommend that you use the gss status command. Stops the GSS software before a software upgrade, maintenance, or troubleshooting activities. Privileged EXEC The gss command provides a variety of options for managing your GSSs and GSSMs, including: Designating individual devices to act as a GSS, primary GSSM, or standby GSSM using the gss, gssm-primary, or gssm-standby keywords of the gss command. Controlling the GSS servers on the device so that you can perform the required maintenance and software upgrades using the start, stop, and restart commands. Examples The following example shows how to manage your GSS devices: gssm1.example.com# gss status Cisco GSS - 1.2(2) GSS [Thu Mar 31 21:09:09 UTC 2005] Registered to primary GSSM:

44 General Commands Chapter 2 Normal Operation [runmode = 5] START SERVER Nov30 Boomerang Nov30 Config Agent (crdirector) Nov30 Config Server (crm) Nov30 DNS Server Nov30 Database Nov30 GUI Server (tomcat) Nov30 Keepalive Engine Nov30 Node Manager Nov30 Proximity Nov30 Sticky Nov30 Web Server (apache) Nov30 DRP When the DNS server is ready to serve DNS requests, it generates the following subsystem log message and saves it in the system.log file: Mar 25 10:45:26 gssm1.example.com DNS-5-SELREADYINFO[2073] Selector ready to start serving DNS requests gss tech-report gssm show sticky show sticky global 2-44

45 Chapter 2 General Commands gss tech-report To generate a detailed report for use by Cisco Technical Assistance Center (TAC) representatives in troubleshooting persistent GSS problems, use the gss tech-report command. gss tech-report filename filename User-assigned name for the report generated by the gss tech-report command. Privileged EXEC The file generated is a tar- format archive file with a.tgz extension. Examples The following example shows how to generate a detailed report for use by TAC representatives in troubleshooting persistent GSS problems: gss1.example.com# gss stop gss1.example.com# gss tech-report gss_techrpt1 Creating report for Cisco TAC. This may take a few minutes... Created debug package: /home/techrpt1.tgz Use scp/ftp to retrieve. 2-45

46 General Commands Chapter 2 gssm To manage your primary and standby Global Site Selector Manager (GSSM) (GSSM) and your GSS database, use the gssm command. gssm backup full filename database {invalidate maintain purge-log-records {count number_records days number_days} report status validate} primary-to-standby restore filename standby-to-primary backup Performs a backup of GSSM data on the GSS device. full Performs a backup of both the database component of the GSSM and its network and device configuration information. The primary GSSM backup does not include user files that reside in the /home directory. filename Name of the database backup file. This file can be the target file for a database backup action or the source file for a database restore action. database Creates, configures, or removes the embedded database on the GSSM. invalidate Invalidates GSSM database records. maintain Cleans up the GSSM database by defragmenting and optimizing the space allocation. purge-log-records Purges system log messages from the GSSM database for a specified number or period of time. This keyword removes the system log messages that appear on the primary GSSM GUI, the System Log list page of the Tools navigation tab. count Purges a quantity of database records up to the last n records. number_records Number of database system log records, starting back from the last record, that will be retained when the database is purged. days Purges records that cover a set time period up to n days before today. 2-46

47 Chapter 2 General Commands number_days report status validate primary-to-standby restore filename standby-to-primary Number of days back, starting from today, for which database system log records will be retained when the database is purged. Generates and displays a report that identifies invalidated database records in the GSSM database. Reports the current running status of the GSSM database. Validates GSSM database records. Changes the role of the GSSM from the primary to the standby GSSM. Restores the GSSM from a full backup file. Name of the GSSM backup image that will be used to restore the device. Changes the role of the GSSM from standby to GSSM. Privileged EXEC Use the gssm database command and keyword to manage the embedded GSS database. The various command options allow you to monitor the status of your database and perform standard maintenance tasks such as backing up and restoring the database, validating the database content, and purging records. Use the gssm restore command and keyword to restore an earlier version of the GSSM from a full backup image. 2-47

48 General Commands Chapter 2 Use the gssm standby-to-primary and primary-to-standby command and keywords to switch the role of the selected GSSM in your GSS network. You must make sure that your original primary GSSM is offline before attempting to enable the standby GSSM as the new primary GSSM. Having two primary GSSMs active at the same time may result in the inadvertent loss of configuration changes for your GSS network. If this dual primary GSSM configuration occurs, the two primary GSSMs revert to standby mode and you will need to reconfigure one of the GSSMs as the primary GSSM. The standby GSSM can temporarily take over the role as the primary GSSM if the the primary GSSM is unavailable (for example, you need to move the primary GSSM or you want to take it offline for repair or maintenance). The switching of roles between the designated primary GSSM and the standby GSSM is intended to be a temporary GSS network configuration until the original primary GSSM is back online. The interim primary GSSM can be used to monitor GSS behavior and make configuration changes if necessary. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network as described in the Cisco Global Site Selector Administration Guide. Examples The following examples show that the gssm database command is used to check the running status of the GSSM embedded database, back up the database to a file, purge all database records except for the last 50, and delete the database: gss1.example.com# gssm database report GSSM database validation report written to validation.log gss1.example.com# gssm database status GSSM database is running. gss1.example.com# gssm database validate GSSM database passed validation. gss1.example.com# gssm primary-to-standby Standby GSSM enabled. gss1.example.com# gssm standby-to-primary Standby GSSM disabled. gss gss tech-report gssm 2-48

49 Chapter 2 General Commands help To obtain online help for the GSS CLI, use the help command. help This command has no keywords or arguments. User EXEC, privileged EXEC, and global configuration You can get help at any point when specifying a CLI command by entering a question mark (?). If nothing matches, the help list will be empty, and you must back up until entering a? shows the available options. Two methods of help are provided at the CLI: Full help is available when you are ready to enter a command argument (for example, show?) and describes each possible argument. Partial help is provided when you enter an abbreviated command and you want to know what arguments match the input (for example, show clock?). Examples The following example shows how to obtain online help for the GSS CLI: gss1.example.com# help gss1.example.com# help copy? 2-49

50 General Commands Chapter 2 install To install a new version of the GSS software on your GSS device, use the install command. install filename filename Name of the software update file. Privileged EXEC Use this command to install a new image of the GSS software on the Cisco GSS hardware. The upgrade file must be present on the Cisco GSS before you execute this command. The install command cannot be executed while the Cisco GSS is running (for example, serving Domain Name System [DNS] requests). You must enter the gss stop command before executing the install command. Examples The following example shows how to install an updated version of the GSS software: gss1.example.com# install /gss.upg show version 2-50

51 Chapter 2 General Commands license To install or uninstall a license file on your GSS device, use the license command. license install filename uninstall filename install uninstall filename Installs a license file on the GSS. Uninstalls a license file on the GSS. Name of the license file. Note A valid license file always includes the.lic extension. Otherwise, it is considered invalid and is not installed. Privileged EXEC For information about obtaining and installing a license file, see the Cisco Global Site Selector Administration Guide. Examples The following example shows how to install the Distributed Denial of Service (DDoS) license on the GSS: gssm1.example.com# license install ddos.lic show license 2-51

52 General Commands Chapter 2 lls To view a long list of files in a directory, use the lls command. lls [directory] directory (Optional) Name of the directory to list. User EXEC and privileged EXEC Use this command to view a detailed list of files contained within the working directory, including names, sizes, and the time created. The equivalent command is dir. The current directory is the default directory. Examples The following example shows how to view a long list of files in a directory: gss1.example.com# lls total drwxrwxrwx 3 root root 4096 Oct 8 11:09. drwxrwxrwx 19 root root 4096 Oct 8 11:13.. drwx root root 4096 Jan ssh -rw-r--r-- 1 root root Jan ACR_new.upg -rw-r--r-- 1 root root Jan ACR_new1.upg -rw-r--r-- 1 root root Jan ACR_new2.upg -rw-r--r-- 1 root root Jan gss k9.upg -rw-r--r-- 1 root root Jan gss k9.upg -rw-r--r-- 1 root root Oct 8 10:54 gss k9.upg -rw-r--r-- 1 root root 2520 Oct 8 11:09 one -rw-r--r-- 1 root root 3634 Oct 8 11:06 proximityschema.xsd -rw-r--r-- 1 root root 3523 Oct 8 11:07 stickyschema.xsd gss1.example.com# 2-52

53 Chapter 2 General Commands dir ls lsof pwd 2-53

54 General Commands Chapter 2 ls To view a list of files or subdirectory names within a directory, use the ls command. ls [directory] directory (Optional) Name of the directory for which you want a list of files. User EXEC and privileged EXEC To list the filenames and subdirectories within a particular directory, use the ls directory command; to list the filenames and subdirectories of the current working directory, use the ls command. To view the present working directory, use the pwd command. The current directory is the default directory. Examples The following example shows how to view a list of files or subdirectory names within a directory: gss1.example.com# ls gss k9.upg id_rsa.pub megara.back.1_0.full rpms gss k9.upg gss_sample.full megara.back.1_1.full dir lls lsof pwd 2-54

55 Chapter 2 General Commands lsof To view a list of all open files on your GSS device, use the lsof command. lsof This command has no keywords or arguments. Privileged EXEC To list the names, file properties, and locations of all files that are currently open on your GSS device, use the lsof command. Examples The following example shows how to view a list of all open files on your GSS device: gss1.example.com# lsof COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME init 1 root cwd DIR 8, / init 1 root rtd DIR 8, / init 1 root txt REG 8, /sbin/init init 1 root mem REG 8, /lib/ld so init 1 root mem REG 8, /lib/libc so init 1 root 0u unix 0xf7f86f socket init 1 root 10u FIFO 8, /rw/dev/initctl kflushd 2 root cwd DIR 8, / kflushd 2 root rtd DIR 8, / kflushd 2 root 0u unix 0xf7f86f socket kflushd 2 root 10u FIFO 8, /rw/dev/initctl 2-55

56 General Commands Chapter 2 kupdate 3 root cwd DIR 8, / kupdate 3 root rtd DIR 8, / kupdate 3 root 0u unix 0xf7f86f socket kupdate 3 root 10u FIFO 8, /rw/dev/initctl kswapd 4 root cwd DIR 8, / kswapd 4 root rtd DIR 8, / kswapd 4 root 0u unix 0xf7f86f socket kswapd 4 root 10u FIFO 8, /rw/dev/initctl keventd 5 root cwd DIR 8, / keventd 5 root rtd DIR 8, / keventd 5 root 0u unix 0xf7f86f socket keventd 5 root 10u FIFO 8, /rw/dev/initctl... dir ls lls pwd 2-56

57 Chapter 2 General Commands no To negate a CLI command or set it to its default settings, use the no command. Some GSS CLI commands do not have a no form. no command copy ftp snmp telnet Disables the copying of GSS configuration information or technical support information. Disables the File Transfer Protocol (FTP) on a GSS device. Disables Simple Network Management Protocol (SNMP) on a GSS device. Disables Telnet operations on the GSS device. Interface configuration, global, and global server load-balancing configuration Use the no command to disable functions or negate a command. If you need to negate a specific command, such as the default gateway IP address, you must include the specific string in your command, such as no ip default-gateway ip-address. Examples The following example shows how to negate a CLI command or set it to its default settings: gss1.example.com(config)# no ip name-server gss1.example.com(config)# no ntp-server

58 General Commands Chapter 2 ping To send ICMP echo packets for diagnosing basic network connectivity on networks, use the ping command. ping {hostname ip-address} hostname ip-address Hostname of the system to send an ICMP echo packet. IP address of the system to send an ICMP echo packet. User and privileged EXEC To use this command with the hostname argument, make sure that the Domain Name System (DNS) functionality is configured on your GSS. To force the timeout of a nonresponsive host, or to eliminate a loop cycle, press the Ctrl-C key sequence. Examples The following example shows how to send ICMP echo packets for diagnosing basic network connectivity on networks: gss1.example.com# ping gss.cisco.com PING ( ) from : 56(84) bytes of data. 64 bytes from gss.cisco.com ( ): icmp_seq=0 ttl=35 time=57.3 ms 64 bytes from gss.cisco.com ( ): icmp_seq=1 ttl=35 time=55.8 ms 64 bytes from gss.cisco.com ( ): icmp_seq=2 ttl=35 time=55.5 ms 64 bytes from gss.cisco.com ( ): icmp_seq=3 ttl=35 time=57.6 ms 64 bytes from gss.cisco.com ( ): icmp_seq=4 ttl=35 time=55.3 ms 2-58

59 Chapter 2 General Commands proximity database delete To remove entries from the proximity database (PDB), use the proximity database delete command. proximity database delete {all assigned group {name} inactive minutes ip {ip-address} netmask {netmask} no-rtt probed} Caution Use the proximity database delete all command in special instances when you want to remove all entries from the PDB in order to have an empty database. Ensure that you want to permanently delete entries from the PDB before you enter this command. You cannot retrieve PDB entries once they are deleted. all assigned group name inactive minutes ip ip_address netmask netmask no-rtt probed Removes all proximity database entries from the GSS memory. Removes all static entries from the PBD. Removes all entries that belong to a named proximity group. Specify the exact name of a previously created proximity group. Removes all dynamic entries that have been inactive for a specified time. Valid values are minutes. Removes all proximity entries related to a D-proxy IP address and subnet mask. Specify the IP address and subnet mask of the requesting client s D-proxy in dotted-decimal notation (for example, ). Removes all entries from the PDB that do not have valid RTT values. Removes all dynamic entries from the PDB. Privileged EXEC 2-59

60 General Commands Chapter 2 You can remove all PDB entries from the GSS memory by using the proximity database delete all CLI command. This command, however, does not delete PDB entries saved as part of an automatic dump to a backup file on a disk, which the GSS loads upon a reboot or restart to initialize the PDB. To ensure that you successfully remove all PDB entries from both the GSS memory and disk, enter the proximity database delete all command followed by the proximity database periodic-backup now command to force an immediate backup of the empty PDB residing in the GSS memory. The prompt Are you sure? appears to confirm the deletion of all PDB entries. Specify y to delete all entries or n to cancel the deletion operation. Examples The following example shows how to remove entries from the proximity database: gss1.example.com# proximity database delete ip proximity database delete proximity database dump proximity database load proximity database periodic-backup (config-gslb) proximity group 2-60