Table of Contents

New and Changed

Preface

BGP Commands

B Commands

C Commands

E Commands

F Commands

I Commands

L Commands

M Commands

N Commands

P Commands

R Commands

S Commands

Show Commands

T Commands

V Commands

A Commands

EIGRP Commands

C Commands

D Commands

E Commands

F Commands

I Commands

L Commands

M Commands

R Commands

S Commands

Show Commands

T Commands

A Commands

HSRP Commands

D Commands

F Commands

H Commands

I Commands

P Commands

Show Commands

A Commands

Layer 3 Commands

I Commands

N Commands

R Commands

Show Commands

C Commands

Object Tracking Command

O Commands

Show Commands

T Commands

V Commands

D Commands

OSPF Commands

C Commands

D Commands

F Commands

H Commands

I Commands

L Commands

M Commands

P Commands

R Commands

S Commands

Show Commands

T Commands

V Commands

A Commands

RIP Commands

C Commands

D Commands

F Commands

I Commands

M Commands

R Commands

Show Commands

T Commands

A Commands

RIB and FIB Commands

H Commands

I Commands

Show Commands

T Commands

C Commands

VRRP Commands

C Commands

F Commands

P Commands

S Commands

Show Commands

T Commands

V Commands

A Commands

Title

New and Changed Information

This chapter provides release-specific information for each new and changed feature in the Cisco Nexus 5500 Series NX-OS Unicast Routing Command Reference. The latest version of this document is available at the following Cisco website:

http://www.cisco.com/en/US/products/ps9670/prod_command_reference_list.html

To check for additional information about this Cisco NX-OS Release, see the Cisco Nexus 5500 Series NX-OS Release Notes, Release 6.0 available at the following Cisco website:

http://www.cisco.com/en/US/products/ps9670/prod_release_notes_list.html

New and Changed Information for Cisco NX-OS Releases

This section includes the following topics:

- New and Changed Information for Cisco NX-OS Release 7.0(0)N1(1)

New and Changed Information for Cisco NX-OS Release 7.0(0)N1(1)

There are no new or changed features for Cisco NX-OS Release 7.0(0)N1(1).

Preface

This preface describes the audience, organization, and conventions of the Cisco Nexus 5500 Series NX-OS Unicast Routing Command Reference. It also provides information on how to obtain related documentation.

This preface includes the following sections:

- Audience

- Document Conventions

- Related Documentation

- Obtain Documentation and Submit a Service Request

Audience

This publication is for experienced users who configure and maintain Cisco NX-OS devices.

Document Conventions

Command descriptions use these conventions:

Convention

Description

boldface font

Commands and keywords are in boldface.

italic font

Arguments for which you supply values are in italics.

[ ]

Elements in square brackets are optional.

{x | y | z}

Alternative keywords are grouped in braces and separated by vertical bars.

[ x | y | z ]

Optional alternative keywords are grouped in brackets and separated by vertical bars.

string

A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks.

Screen examples use these conventions:

screen font

Terminal sessions and information that the switch displays are in screen font.

boldface screen font

Information you must enter is in boldface screen font.

italic screen font

Arguments for which you supply values are in italic screen font.

< >

Nonprinting characters, such as passwords, are in angle brackets.

[ ]

Default responses to system prompts are in square brackets.

!, #

An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line.

This document uses the following conventions:

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the manual.

Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.

Related Documentation

Documentation for Cisco Nexus 5500 Series Switches and Cisco Nexus 2000 Series Fabric Extender is available at the following URL:

http://www.cisco.com/en/US/products/ps9670/tsd_products_support_series_home.html

The following are related Cisco Nexus 5500 Series documents:

Release Notes

Cisco Nexus 5500 Series Switch Release Notes

Configuration Guides

Cisco Nexus 5500 Series Configuration Limits for Cisco NX-OS Release 7.0(0)N1(1)

Cisco Nexus 5500 Series NX-OS Fibre Channel over Ethernet Configuration Guide

Cisco Nexus 5500 Series NX-OS Layer 2 Switching Configuration Guide

Cisco Nexus 5500 Series NX-OS Multicast Routing Configuration Guide

Cisco Nexus 5500 Series NX-OS Quality of Service Configuration Guide

Cisco Nexus 5500 Series NX-OS SAN Switching Configuration Guide

Cisco Nexus 5500 Series NX-OS Security Configuration Guide

Cisco Nexus 5500 Series NX-OS System Management Configuration Guide

Cisco Nexus 5500 Series NX-OS Unicast Routing Configuration Guide

Cisco Nexus 5000 Series Switch NX-OS Software Configuration Guide

Cisco Nexus 5500 Series NX-OS Fundamentals Configuration Guide

Cisco Nexus 2000 Series Fabric Extender Software Configuration Guide

Maintain and Operate Guides

Cisco Nexus 5500 Series NX-OS Operations Guide

Installation and Upgrade Guides

Cisco Nexus 5000 Series and Cisco Nexus 5500 Platform Hardware Installation Guide

Cisco Nexus 2000 Series Hardware Installation Guide

Regulatory Compliance and Safety Information for the Cisco Nexus 5000 Series Switches and Cisco Nexus 2000 Series Fabric Extenders

Licensing Guide

Cisco NX-OS Licensing Guide

Command References

Cisco Nexus 5500 Series NX-OS Fundamentals Command Reference

Cisco Nexus 5500 Series NX-OS Layer 2 Interfaces Command Reference

Cisco Nexus 5500 Series NX-OS Multicast Routing Command Reference

Cisco Nexus 5500 Series NX-OS QoS Command Reference

Cisco Nexus 5500 Series NX-OS Security Command Reference

Cisco Nexus 5500 Series NX-OS System Management Command Reference

Cisco Nexus 5500 Series NX-OS Unicast Routing Command Reference

Technical References

Cisco Nexus 5000 Series and Cisco Nexus 2000 Series Fabric Extender MIBs Reference

Error and System Messages

Cisco NX-OS System Messages Reference

Troubleshooting Guide

Cisco Nexus 5500 Troubleshooting Guide

Obtain Documentation and Submit a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation.

To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the What’s New in Cisco Product Documentation RSS feed. The RSS feeds are a free service.

A Commands

This chapter describes the Cisco NX-OS Border Gateway Protocol (BGP) commands that begin with A.

address-family ipv6 unicast

To enter IPv6 unicast address family mode, use the address-family ipv6 unicast command.

address-family ipv6 unicast

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how enter IPv6 unicast address family mode:

switch# configure terminal

switch(config)# router ospfv 1234

switch(config-router)# neighbor 2001:DB8:0:1::55 remote-as 64496

switch(config-router-neighbor)# address-family ipv6 unicast

switch(config-router-af)# next-hop-self

Related Commands

Command

Description

area filter-list (OSPFv3)

Filters prefixes advertised in type 3 link-state advertisements (LSAs) between Open Shortest Path First (OSPF) areas of an Area Border Router (ABR).

address-family (BGP neighbor)

To enter the neighbor address family mode address-family mode and configure submode commands for the Border Gateway Protocol (BGP), use the address-family command. To disable the address family submode for configuring routing protocols, use the no form of this command.

address-family ipv4{multicast | unicast}

no address-family ipv4 {multicast | unicast}

Syntax Description

ipv4

Specifies the IPv4 address family.

multicast

Specifies multicast address support.

unicast

Specifies unicast address support.

Command Default

This command has no default settings.

Command Modes

Neighbor configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the address-family command to enter various address family configuration modes while configuring BGP routing. When you enter the address-family command from neighbor configuration mode, you enable the neighbor address family and enter the neighbor address family configuration mode. The prompt changes to switch(config-router-neighbor-af)#.

You must configure the address families if you are using route redistribution, load balancing, and other advanced features. IPv4 neighbor sessions support IPv4 unicast and multicast address families.

From the neighbor address family configuration mode, the following parameters are available:

Note This applies to IPv4 multicast or unicast

- advertise-map —Conditionally advertises selected BGP routes.

- default-originate —Configures a BGP routing process to distribute a default route.

- exit —Exits from the current command mode.

- maximum-prefix —Controls how many prefixes can be received from a neighbor.

- no —Negates a command or sets its defaults

- route-reflector-client —Configures the router as a BGP route reflector.

- soft-reconfiguration inbound—Configures the switch software to start storing BGP peer updates.

- suppress-inactive —Advertises only active routes to peer.

This command requires the LAN Enterprise Services license.

Examples

This example shows how to activate IPv4 multicast for neighbor 192.0.2.1 and place the device in neighbor address family configuration mode for the IPv4 multicast address family:

switch(config)# feature bgp

switch(config)# router bgp 64496

switch(config-router)# neighbor 192.0.2.1 remote-as 64496

switch(config-router-neighbor)# address-family ipv4 multicast

switch(config-router-neighbor-af)

Related Commands

Command

Description

advertise-map

Configures BGP conditional advertisement.

default-originate (BGP)

Configures a BGP routing process to distribute a default route.

feature bgp

Enables BGP configuration.

maximum-prefix

Controls how many prefixes can be received from a neighbor.

route-reflector-client

Configures the router as a BGP route reflector.

soft-reconfiguration inbound

Configures the switch software to start storing BGP peer updates.

suppress-inactive

Advertises only active routes to peer.

address-family (BGP router)

To enter the address family mode or a virtual routing and forwarding (VRF) address-family mode and configure submode commands for the Border Gateway Protocol (BGP), use the address-family command. To disable the address family submode for configuring routing protocols, use the no form of this command.

address-family ipv4 {multicast | unicast}

no address-family ipv4 {multicast | unicast}

Syntax Description

ipv4

Specifies the IPv4 address family.

multicast

Specifies multicast address support.

unicast

Specifies unicast address support.

Command Default

This command has no default settings.

Command Modes

Router configuration mode

VRF configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the address-family command to enter various address family configuration modes while configuring BGP routing. When you enter the address-family command from router configuration mode, you enable the address family and enter global address family configuration mode. The prompt changes to switch(config-router-af)#.

You must configure the address families if you are using route redistribution, address aggregation, load balancing, and other advanced features. IPv4 neighbor sessions support IPv4 unicast and multicast address families.

From the address family configuration mode, the following parameters are available:

Note This applies to IPv4 multicast or unicast.

- aggregate-address —Configures BGP aggregate prefixes. See the aggregate-address command for additional information.

- client-to-client reflection —Enables client-to-client route reflection. Route reflection allows a BGP speaker (route reflector) to advertise IBGP learned routes to certain IBGP peers. Use the no form of this command to disable client-to-client route reflection. Default: Enabled.

- dampening [ half-life | route-map name ] —Configures the route flap dampening. Optionally, you can set the time (in minutes) after which a penalty is decreased. Once the route has been assigned a penalty, the penalty is decreased by half after the half-life period (which is 15 minutes by default). The process of reducing the penalty happens every 5 seconds. The default half-life is 15 minutes. Range: 1 to 45. Default: Disabled.

- default-metric metric —Sets the default flap metric of redistributed routes. The default-metric command is used to set the metric value for routes redistributed into BGP with the redistribute command. A default metric can be configured to solve the problem of redistributing routes with incompatible metrics. Assigning the default metric will allow redistribution to occur. This value is the Multi Exit Discriminator (MED) that is evaluated by BGP during the best path selection process. The MED is a non-transitive value that is processed only within the local autonomous system and adjacent autonomous systems. The default metric is not set if the received route has a MED value. Range: 0 to 4294967295.

Note When enabled, the default-metric command applies a metric value of 0 to redistributed connected routes. The default-metric command does not override metric values that are applied with the redistribute command.

- distance ebgp-route ibgp-route local-route —Configures a rating of the trustworthiness of a routing information source, such as an individual router or a group of routers. BGP does not use discard routes for next-hop resolution. In general, the higher the value, the lower the trust rating. An administrative distance of 255 means the routing information source cannot be trusted at all and should be ignored. Use this command if another protocol is known to be able to provide a better route to a node than was actually learned via external BGP (eBGP), or if some internal routes should be preferred by BGP. Range: 1 to 255. Default: EBGP — 20, IBGP—200.

Caution Changing the administrative distance of internal BGP routes is considered dangerous and is not recommended. Improper configuration can introduce routing table inconsistencies and break routing.

- exit —Exits from the current command mode.

- maximum-paths [ ibgp ] parallel-paths —Configures the number of parallel paths to forward packets. The maximum-paths ibgp command is used to configure equal-cost or unequal-cost multipath load sharing for iBGP peering sessions. In order for a route to be installed as a multipath in the BGP routing table, the route cannot have a next hop that is the same as another route that is already installed. The BGP routing process will still advertise a best path to iBGP peers when iBGP multipath load sharing is configured. For equal-cost routes, the path from the neighbor with the lowest router ID is advertised as the best path. To configure equal-cost multipath load sharing, all path attributes must be the same. The path attributes include weight, local preference, autonomous system path (entire attribute and not just the length), origin code, Multi Exit Discriminator (MED), and Interior Gateway Protocol (IGP) distance. The optional ibgp keyword allows you to configure multipath for the IBGP paths. To return to the default, use the no form of this command. The range is from 1 to 16.

- network —Configures an IP prefix to advertise. See the network command for additional information.

- nexthop —Configures next-hop address tracking events for BGP processes.

- no —Negates a command or sets its defaults.

- redistribute —Enables the redistribution of routes learned by other protocols into BGP. Redistribution is supported for both IPv4 routes. To disable the redistribution of routes learned by other protocols into BGP, use the no form of this command.

– direct route-map name—Specifies directly connected routes.

– eigrp AS-num route-map name—Specifies Enhanced Interior Gateway Protocol routes. Range: 1 to 65535.

– ospf src-protocol route-map name—Specifies Open Shortest Path First (OSPF) routes.

– rip src-protocol route-map name—Specifies Routing Information Protocol (RIP) routes.

– static route-map name—Specifies static routes.

- suppress-inactive —Advertises only active routes to peer. See the suppress-inactive command for additional information.

This command requires the LAN Enterprise Services license.

Examples

This example shows how to place the router in global address family configuration mode for the IPv4 unicast address family:

switch(config)# feature bgp

switch(config)# router bgp 64496

switch(config-router)# address-family ipv4 unicast

switch(config-router-af)#

Related Commands

Command

Description

aggregate-address

Configures BGP summary addresses.

client-to-client reflection

Configures route reflection.

dampening

Configures route flap dampening.

default-metric (BGP)

Configures the default metric for routes redistributed into BGP.

distance (BGP)

Configures the administrative distance.

feature bgp

Enables BGP configuration.

maximum-paths (BGP)

Configures the maximum number of equal-cost paths.

network

Configures an IP prefix to advertise.

nexthop route-map

Configures route policy filtering for next hops.

nexthop trigger-delay

Configures the BGP delay for triggering next-hop calculations.

redistribute (BGP)

Configures route redistribution for BGP.

suppress-inactive

Advertises active routes to a BGP peer.

timers (BGP)

Configures the BGP timers.

advertise-map (BGP)

To configure Border Gateway Protocol (BGP) conditional advertisement, use the advertise-map command. To remove BGP conditional advertisement, use the no form of this command.

advertise-map adv-map {exist-map exist-rmap | non-exist-map nonexist-rmap}

no advertise-map adv-map {exist-map exist-rmap | non-exist-map nonexist-rmap}

Syntax Description

adv-map

Route map with match statements that the route must pass before BGP passes the route to the next route map. The adv-map is a case-sensitive, alphanumeric string up to 63 characters.

exist-map exist-rmap

Specifies a route map with match statements for a prefix list. A prefix in the BGP table must match a prefix in the prefix list before BGP will advertise the route. The exist-rmap is a case-sensitive, alphanumeric string up to 63 characters.

non-exist-map nonexist-rmap

Specifies a route map with match statements for a prefix list. A prefix in the BGP table must not match a prefix in the prefix list before BGP will advertise the route. The nonexist-rmap is a case-sensitive, alphanumeric string up to 63 characters.

Command Default

None

Command Modes

BGP neighbor address family configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the advertise-map command to conditionally advertise selected routes. The routes or prefixes that BGP conditionally advertises are defined in two route maps, the adv-map and an exist-map or nonexist-map. The exist-map or nonexist-map specifies the prefix that the BGP tracks. The adv-map specifies the prefix that BGP advertises to the specified neighbor when the condition is met.

This command requires the LAN Enterprise Services license.

Examples

This example shows how to configure BGP conditional advertisement:

switch# configure terminal

switch(config)# router bgp 65536

switch(config-router)# neighbor 192.0.2.2 remote-as 65537

switch(config-router-neighbor)# address-family ipv4 unicast

switch(config-router-neighbor-af)# advertise-map advertise exist-map exist

switch(config-router-neighbor-af)# exit

switch(config-router-neighbor)# exit

switch(config-router)# exit

switch(config)# route-map advertise

switch(config-route-map)# match as-path pathList

switch(config-route-map)# exit

switch(config)# route-map exit

switch(config-route-map)# match ip address prefix-list plist

switch(config-route-map)# exit

switch(config)# ip prefix-list plist permit 209.165.201.0/27

switch(config)#

Related Commands

Command

Description

feature bgp

Enables BGP.

neighbor

Configures a BGP peer.

show ip bgp

Displays BGP configuration information.

aggregate-address (BGP)

To create a summary address in a Border Gateway Protocol (BGP) routing table, use the aggregate-address command. To remove the summary address, use the no form of this command.

aggregate-address address/length [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name]

no aggregate-address address/mask-length [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name]

Syntax Description

address/length

Aggregate IPv4 address and mask length. Valid value for length is 1 to 32.

advertise-map map-name

(Optional) Specifies the name of the route map used to select attribute information from specific routes.

as-set

(Optional) Generates the autonomous system set path information and community information from the contributing paths.

attribute-map map-name

(Optional) Specifies the name of the route map used to set the attribute information for specific routes. The map-name is an alphanumeric string up to 63 characters.

summary-only

(Optional) Filters all more-specific routes from updates.

suppress-map map-name

(Optional) Specifies the name of the route map used to conditionally filter more specific routes. The map-name is an alphanumeric string up to 63 characters.

Command Default

The atomic aggregate attribute is set automatically when an aggregate route is created with this command unless the as-set keyword is specified.

Command Modes

Command HistoryAddress-family configuration mode

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

You can implement aggregate routing in BGP either by redistributing an aggregate route into BGP, or by using the conditional aggregate routing feature.

The aggregate-address command without keywords creates an aggregate entry in the BGP routing table if any more-specific BGP routes are available that fall within the specified range. (A longer prefix which matches the aggregate must exist in the RIB.) The aggregate route will be advertised as coming from your autonomous system and will have the atomic aggregate attribute set to show that information might be missing. (By default, the atomic aggregate attribute is set unless you specify the as-set keyword.)

The as-set keyword creates an aggregate entry using the same rules that the command follows without this keyword, but the path advertised for this route will be an AS_SET consisting of all elements contained in all paths that are being summarized. Do not use this form of the aggregate-address command when aggregating many paths, because this route must be continually withdrawn and updated as autonomous system path reachability information for the summarized routes changes.

The summary-only keyword not only creates the aggregate route (for example, 192.*.*.*) but also suppresses advertisements of more-specific routes to all neighbors. If you want to suppress only advertisements to certain neighbors, you may use the neighbor distribute-list command, with caution. If a more-specific route leaks out, all BGP routers will prefer that route over the less-specific aggregate you are generating (using longest-match routing).

The suppress-map keyword creates the aggregate route but suppresses advertisement of specified routes. You can use the match clauses of route maps to selectively suppress some more-specific routes of the aggregate and leave others unsuppressed. IP access lists and autonomous system path access lists match clauses are supported.

The advertise-map keyword selects specific routes that will be used to build different components of the aggregate route, such as AS_SET or community. This form of the aggregate-address command is useful when the components of an aggregate are in separate autonomous systems and you want to create an aggregate with AS_SET, and advertise it back to some of the same autonomous systems. You must remember to omit the specific autonomous system numbers from the AS_SET to prevent the aggregate from being dropped by the BGP loop detection mechanism at the receiving router. IP access lists and autonomous system path access lists match clauses are supported.

The attribute-map keyword allows attributes of the aggregate route to be changed. This form of the aggregate-address command is useful when one of the routes forming the AS_SET is configured with an attribute such as the community no-export attribute, which would prevent the aggregate route from being exported. An attribute map route map can be created to change the aggregate attributes.

This command requires the LAN Enterprise Services license.

Examples

AS-Set Example

This example shows how to create an aggregate BGP address in router configuration mode. The path advertised for this route will be an AS_SET consisting of all elements contained in all paths that are being summarized.

switch(config)# router bgp 64496

switch(config-router)# aggregate-address 10.0.0.0 255.0.0.0 as-set

Summary-Only Example

This example shows how to create an aggregate BGP address in address family configuration mode and apply it to the multicast database (SAFI) under the IP Version 4 address family. Because the summary-only keyword is configured, more-specific routes are filtered from updates.

switch(config)# router bgp 64496

switch(config-router)# address-family ipv4 multicast

switch(config-router-af)# aggregate-address 10.0.0.0 255.0.0.0 summary-only

Conditional Aggregation Example

This example shows how to create a route map called MAP-ONE to match on an as-path access list. The path advertised for this route will be an AS_SET consisting of elements contained in paths that are matched in the route map.

switch(config)# ip as-path access-list 1 deny ^1234_

switch(config)# ip as-path access-list 1 permit .*

switch(config)# !

switch(config)# route-map MAP-ONE

switch(config-route-map)# match ip as-path 1

switch(config-route-map)# exit

switch(config)# router bgp 64496

switch(config-router)# address-family ipv4

switch(config-router-af)# aggregate-address 10.0.0.0 255.0.0.0 as-set advertise-map MAP-ONE

switch(config-router-af)# end

Related Commands

Command

Description

route-map

Creates a route map.

A Commands

This chapter describes the Cisco NX-OS Enhanced Interior Gateway Routing Protocol (EIGRP) commands that begin with A.

address-family (EIGRP)

To configure an address family for the Enhanced Interior Gateway Routing Protocol (EIGRP), use the address-family command. To remove an address family, use the no form of this command.

address-family ipv4 unicast

no address-family ipv4 unicast

Syntax Description

ipv4

Specifies the IPv4 address family.

unicast

Specifies unicast address support.

Command Default

None

Command Modes

Router configuration mode

Address family configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

This command requires the LAN Base Services license.

Examples

This example shows how to set the IPv4 unicast address family for an EIGRP instance:

switch(config)# router eigrp 201

switch(config-router)# address-family ipv4 unicast

switch(config-router)#

Related Commands

Command

Description

default-information

Controls the distribution of a default route.

default-metric

Configures the default metric for routes redistributed into EIGRP.

distance

Configures the administrative distance.

maximum-paths

Configures the maximum number of equal-cost paths.

redistribute

Configures route redistribution for EIGRP.

router-id

Configures the router ID.

show ip eigrp

Displays EIGRP information.

timers

Configures the EIGRP timers.

authentication key-chain (EIGRP)

To enable authentication for the Enhanced Interior Gateway Routing Protocol (EIGRP) packets and to specify the set of keys that can be used on an interface, use the authentication key-chain command. To prevent authentication, use the no form of this command.

authentication key-chain name-of-chain

no authentication key-chain name-of-chain

Syntax Description

name-of-chain

Group of keys that are valid.

Command Default

No authentication is provided for EIGRP packets.

Command Modes

Router configuration mode

Address family configuration mode

VRF configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Set the authentication mode using the authentication mode command in VRF configuration mode. You must separately configure a key chain using the key-chain command to complete the authentication configuration for an interface.

This command requires the LAN Base Services license.

Examples

This example shows how to configure the interface to accept and send any key that belongs to the key-chain trees:

switch(config)# router eigrp 209

switch(config-router)# vrf red

switch(config-router-vrf)# authentication key-chain trees

Related Commands

Command

Description

authentication mode (EIGRP)

Sets the authentication mode for EIGRP in a VRF.

ip authentication key-chain eigrp

Enables authentication for EIGRP and specifies the set of keys that can be used on an interface.

key-chain

Creates a set of keys that can be used by an authentication method.

show ip eigrp

Displays EIGRP information.

authentication mode (EIGRP)

To specify the type of authentication used in the Enhanced Interior Gateway Routing Protocol (EIGRP) packets, use the authentication mode command. To remove authentication, use the no form of this command.

authentication mode md5

no authentication mode md5

Syntax Description

md5

Specifies Message Digest 5 (MD5) authentication.

Command Default

None

Command Modes

Router configuration mode

Address family configuration mode

VRF configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

This command requires the LAN Base Services license.

Examples

This example shows how to configure the interface to use MD5 authentication:

switch(config)# router eigrp 209

switch(config-router)# vrf red

switch(config-router-vrf)# authentication mode md5

switch(config-router-vrf)#

Related Commands

Command

Description

authentication key-chain eigrp

Enables authentication for EIGRP and specifies the set of keys that can be used on an interface.

ip authentication mode eigrp

Configures the authentication mode for EIGRP on an interface.

key chain

Creates a set of keys that can be used by an authentication method.

show ip eigrp

Displays EIGRP information.

autonomous-system

To configure the autonomous system (AS) number for an Enhanced Interior Gateway Routing Protocol (EIGRP) address family, use the autonomous-system command. To revert to default, use the no form of this command.

autonomous-system as-number

no autonomous-system [as-number]

Syntax Description

as-number

Autonomous system number. The range is from 1 to 65535.

Command Default

None

Command Modes

Address family configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the autonomous-system command to set a common AS number for all EIGRP instances in an address family.

This command requires the LAN Base Services license.

Examples

This example shows how to set an AS number for EIGRP for IPv4 unicast:

switch(config)# router eigrp 201

switch(config-router)# address-family ipv4 unicast

switch(config-router-af)# autonomous-system 64496

switch(config-router-af)#

Related Commands

Command

Description

address-family (EIGRP)

Enters the address family configuration mode for EIGRP.

A Commands

This chapter describes the Cisco NX-OS Hot Standby Router Protocol (HSRP) commands that begin with A.

authentication (HSRP)

To configure authentication for the Hot Standby Router Protocol (HSRP), use the authentication command. To disable authentication, use the no form of this command.

authentication {string | md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]} | text string}

no authentication {string | md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]} | text string}

Syntax Description

md5

Specifies the Message Digest 5 (MD5) authentication.

key-chain key-chain

Identifies a group of authentication keys.

key-string

Specifies the secret key for MD5 authentication.

0

Specifies a clear text string.

7

Specifies an encrypted string.

text

Secret key for MD5 authentication. The range is from 1 to 255 characters. We recommend that you use at least 16 characters.

timeout seconds

(Optional) Specifies the authentication timeout value. The range is from 0 to 32767.

text string

Specifies an authentication string. The range is from 1 to 255 characters. The default string is “cisco”.

Command Default

Disabled

Command Modes

HSRP configuration or HSRP template mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the authentication text command to prevent misconfigured routers from participating in HSRP groups that they are not intended to participate in. The authentication string is sent unencrypted in all HSRP messages. The same authentication string must be configured on all routers in the same group to ensure interoperation. HSRP protocol packets that do not authenticate are ignored.

Caution If you configure two routers with identical HSRP IP addresses but with different authentication strings, then neither router is aware of the duplication.

Examples

This example shows how to configure an authentication string for HSRP group 2:

switch# configure terminal

switch(config)# interface ethernet 0/1

switch(config-if)# no switchport

switch(config-if)# ip address 10.0.0.1 255.255.255.0

switch(config-if)# hsrp 2

switch(config-if-hsrp)# priority 110

switch(config-if-hsrp)# preempt

switch(config-if-hsrp)# authentication text sanjose

switch(config-if-hsrp)# ip 10.0.0.3

switch(config-if-hsrp)# end

switch(config-if-hsrp)#

Related Commands

Command

Description

feature hsrp

Enables HSRP and enters HSRP configuration mode.

hsrp group

Creates an HSRP group.

C Commands

This chapter describes the Cisco NX-OS Layer 3 interfaces commands that begin with C.

clear ip arp

To clear the Address Resolution Protocol (ARP) information, use the clear ip arp command.

clear ip arp [ip-addr | {[event-history | all | cli | client-errors | client event | control | errors | event | ha | lcache | lcache-errors | packet | snmp | sync-event]} | [force-delete | statistics] | [mgmt mgmt-inteface-number] | [statistics] | [tunnel-statistics] | [vlan vlan-interface-number] | [vpc-statistics] | [vrf vrf-name | all | default | management]

Syntax Description

ip-addr

(Optional) IPv4 source address. The format is x.x.x.x.

event-history

(Optional) Clears the event history buffers.

all

(Optional) Clears all event history buffers.

cli

(Optional) Clears CLI logs.

client-errors

(Optional) Clears client_error logs.

client-event

(Optional) Clears client_event logs.

control

(Optional) Clears ARP control event logs.

errors

(Optional) Clears inst error logs.

event

(Optional) Clears internal event logs.

ha

(Optional) Clears HA and GR logs.

lcache

(Optional) Clears lcache logs.

lcache-errors

(Optional) Clears lcache_error logs.

packet

(Optional) Inst packet logs.

snmp

(Optional) SNMP logs.

sync-event

(Optional) CFS and MCECM related event logs.

force-delete

(Optional) Clears the entries from the ARP table without a refresh.

mgmt mgmt-inteface-number

(Optional) Management interface

statistics

(Optional) Clears ARP statistics.

ethernet

(Optional) Ethernet IEEE 802.3z

loopback

(Optional) Loopback interface

mgmt

(Optional) Management Interface

port-channel

(Optional) Port channel interface

vlan

(Optional) VLAN interface

vrf

(Optional) Displays per-VRF information

tunnel-statistics

(Optional) Clears ARP statistics for tunneled packets

vlan vlan-interface-number

(Optional) VLAN interface

vpc-statistics

(Optional) Clears ARP vPC statistics

vrf vrf-name

(Optional) Specifies the virtual routing and forwarding (VRF) context name. The name can be any case-sensitive, alphanumeric string up to 32 characters.

all

(Optional) Clears the ARP information from all VRF entries.

default

(Optional) Clears the ARP information from the default VRF.

management

(Optional) Clears the ARP information from the management VRF.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modification

6.0(2)N1(2)

Support for the QSFP+ GEM was added.

5.2(1)N1(1)

This command was introduced.

Examples

Displays information about ARP.

clear ip interface statistics

To clear IP interface statistics, use the clear ip interface statistics command.

clear ip interface statistics

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to clear the IP interface statistics:

switch# clear ip interface statistics

Related Commands

Command

Description

show ip interface

Displays IP interface information.

clear ipv6 icmp interface statistics

To clear statistics about ICMPv6, use the clear ipv6 icmp interface statistics command.

clear ipv6 icmp interface statistics [type number]

Syntax Description

type

(Optional) Interface type. Use ? to see the list of supported interfaces.

number

(Optional) Interface number. Use ? to see the range.

Defaults

None

Command Modes

Any command mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to clear the ICMPv6 statistics:

switch(config-if)# clear ipv6 icmp interface statistics

Related Commands

Command

Description

ipv6 icmp

Configures ICMPv6 on an interface.

clear ipv6 nd interface statistics

To clear information about Neighbor Discovery (ND), use the clear ipv6 nd interface statistics command.

clear ipv6 nd interface statistics [type number]

Syntax Description

type

(Optional) Interface type. Use ? to see the list of supported interfaces.

number

(Optional) Interface number. Use ? to see the range.

Defaults

None

Command Modes

Any command mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

This command does not require a license.

Examples

This example shows how to clear the ND information:

switch(config-if)# clear ipv6 nd interface statistics

Related Commands

Command

Description

ipv6 nd

Configures ICMPv6 ND on an interface.

clear ipv6 neighbor [type number] [force-clear] [vrf vrf-name]

Syntax Description

type

(Optional) Interface type. Use ? to see the list of supported interfaces.

number

(Optional) Interface number. Use ? to see the range.

force-clear

(Optional) Clears the IPv6 neighbor cache withouth a refresh.

vrf vrf-name

(Optional) Specifies the virtual router context (VRF) name. The name can be any case-sensitive, alphanumeric string up to 63 characters.

Defaults

None

Command Modes

Any command mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the clear ipv6 neighbor command to clear the IPv6 adjacency table.

This command does not require a license.

Examples

D Commands

This chapter describes the Cisco NX-OS object tracking commands that begin with D.

delay

To delay a state change for object tracking, use the delay command. To disable this function, use the no form of this command.

delay {up up-time [down down-time] | down down-time [up up-time]}

no delay

Syntax Description

up up-time

Delays the object track state change for an up condition. The range is from 0 to 180 seconds.

down down-time

Delays the object track state change for a down condition. The range is from 0 to 180 seconds.

Command Default

None

Command Modes

Object track mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the delay command to delay when object tracking detects an up or down state change for a tracked object or track list. This delay helps to prevent state flapping.

Examples

This example shows how to configure the delay timer for a tracked object:

switch(config)# configure terminal

switch(config)# track 1 interface ethernet 1/2 line-protocol

switch(config-track)# delay up 30 down 30

switch(config-track)#

Related Commands

Command

Description

track

Configures a tracked object or track list.

A Commands

This chapter describes the Cisco NX-OS Open Shortest Path First (OSPF) commands that begin with A.

area authentication (OSPF)

To enable authentication for an Open Shortest Path First (OSPF) area, use the area authentication command. To remove authentication for an area, use the no form of this command.

area area-id authentication [message-digest]

no area area-id authentication [message-digest]

Syntax Description

area-id

Identifier for the OSPF area where you want to enable authentication. Specify as either a positive integer value or an IP address.

message-digest

(Optional) Enables Message Digest 5 (MD5) authentication on the area specified by the area-id argument.

Command Default

No authentication

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area authentication command to configure the authentication mode for the entire OSPF area.

The authentication type and authentication password must be the same for all OSPF devices in an area. Use the ip ospf authentication-key command in interface configuration mode to specify this password.

If you enable MD5 authentication with the message-digest keyword, you must configure a password with the ip ospf message-digest-key command in interface configuration mode.

This command requires the LAN Base Services license.

Examples

This example shows how to configure authentication for area 0 of OSPF routing process 201:

switch(config)# router ospf 201

switch(config-router)# area 0 authentication message-digest

switch(config-router)# interface ethernet 1/1

switch(config-if)# no switchport

switch(config-if)# ip ospf area 0

switch(config)-if# ip ospf message-digest-key 10 md5 0 adcdefgh

Related Commands

Command

Description

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

ip ospf authentication-key

Assigns a password for simple password authentication for OSPF.

ip ospf message-digest-key

Assigns a password for OSPF MD5 authentication.

show ip ospf interface

Displays OSPF interface-related information.

area default-cost (OSPF)

To specify a cost for the default summary route sent into an Open Shortest Path First (OSPF) stub or not-so-stubby area (NSSA), use the area default-cost command. To remove the assigned default route cost, use the no form of this command.

area area-id default-cost cost

no area area-id default-cost cost

Syntax Description

area-id

Identifier for the OSPF area where you want to configure the default cost. The area ID can be from 0 to 4294967295 or an IP address.

cost

Cost for the default summary route used for a stub or NSSA. The range is from 0 to 16777215.

Command Default

The summary route cost is based on the area border router that generated the summary route.

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area default-cost command on an Area Border Router (ABR) attached to a stub or NSSA to configure the metric for the summary default route generated by the ABR into the stub area.

This command requires the LAN Base Services license.

Examples

This example shows how to set a default cost of 20 to stub network 192.0.2.0:

switch(config)# router ospf 201

switch(config-router)# area 192.0.2.0 stub

switch(config-router)# area 192.0.2.0 default-cost 20

switch(config-router)#

Related Commands

Command

Description

area stub

Defines an area as a stub area.

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

show ip ospf

Displays OSPF information.

area filter-list (OSPF)

To filter prefixes advertised in type 3 link-state advertisements (LSAs) between Open Shortest Path First (OSPF) areas of an Area Border Router (ABR), use the area filter-list command. To change or cancel the filter, use the no form of this command.

area area-id filter-list route-map map-name {in | out}

no area area-id filter-list route-map map-name {in | out}

Syntax Description

area-id

Identifier for the OSPF area where you want to configure filtering. Specify as either a positive integer value or an IP address.

route-map map-name

Specifies the name of a route map used as the filter policy. The map-name argument can be any alphanumeric string of up to 63 characters.

in

Filters networks sent to this area.

out

Filters networks sent from this area.

Command Default

None

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area filter-list command to filter Type 3 LSAs. If you apply the route map with the in keyword, the route map filters all Type 3 LSAs originated by the ABR to this area, including Type 3 LSAs that originated as a result of the area range command in another area.

If you apply the route map with the out keyword, the route map filters all Type 3 LSAs that are advertised by the ABR to all other areas including Type 3 LSAs that originate locally as a result of the area range command configured in this area.

Cisco Nexus 5500 implicitly denies any prefix that does not match an entry in the route map.

This command requires the LAN Base Services license.

Examples

This example shows how to filter prefixes that are sent from all other areas to area 1:

switch(config)# router ospf 202

switch(config-router)# area 1 filter-list route-map FilterExternal in

switch(config-router)#

Related Commands

Command

Description

area range

Consolidates and summarizes routes at an area boundary.

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

route-map

Defines the conditions for redistributing routes from one routing protocol into another.

show ip ospf policy statistics area

Displays OSPF policy statistics for an area.

area nssa (OSPF)

To configure an area as an Open Shortest Path First (OSPF) not-so-stubby (NSSA) area, use the area nssa command. To remove the NSSA area, use the no form of this command.

area area-id nssa [default-information-originate [route-map map-name]] [no-redistribution] [no-summary] [translate type7 [always | never] [suppress-fa]]

no area area-id nssa [default-information-originate [route-map map-name]] [no-redistribution] [no-summary] [translate type7 [always | never] [suppress-fa]]

Syntax Description

area-id

Identifier for the OSPF NSSA area. The area ID can be from 0 to 4294967295 or an IP address.

default-information-

originate

(Optional) Generates a Type 7 default into the NSSA area. This keyword takes effect only on NSSA area border router (ABR) or NSSA autonomous system border router (ASBR).

route-map map-name

(Optional) Filters the Type 7 default generation based on the route map. The map-name argument can be any alphanumeric string up to 63 characters.

no-redistribution

(Optional) Blocks redistributed link-state advertisements (LSAs) from entering this NSSA area. Use this keyword when the router is both an NSSA ASBR and an NSSA ABR and you want the redistribute command to import routes into the normal areas but not into the NSSA area.

no-summary

(Optional) Allows an area to be an NSSA area but not have summary routes injected into it.

translate type7

(Optional) Translates Type 7 LSAs to type 5 LSAs.

always

(Optional) Always translates LSAs.

never

(Optional) Never translates LSAs.

suppress-fa

(Optional) Suppresses the forwarding address in translated LSAs. The ABR uses 0.0.0.0 as the forwarding IPv4 address.

Command Default

None

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area nssa command to create an NSSA area in an OSPF autonomous system. We recommend that you understand the network topology before configuring forwarding address suppression for translated LSAs. Suboptimal routing might result because there might be better paths to reach the destination’s forwarding address.

This command requires the LAN Base Services license.

Examples

This example shows how to configure area 1 as an NSSA area:

switch(config)# router ospf 10

switch(config-router)# area 1 nssa

switch(config-router)#

This example shows how to configure area 1 as an NSSA area and translate Type 7 LSAs from area 1 to Type 5 LSAs, but not place the Type 7 forwarding address into the Type 5 LSAs. (OSPF places 0.0.0.0 as the forwarding address in the Type 5 LSAs.)

switch(config)# router ospf 2

switch(config-router)# area 1 nssa translate type7 suppress-fa

switch(config-router)#

Related Commands

Command

Description

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

redistribute

Redistributes routes learned from one routing protocol to another routing protocol domain.

show ip ospf

Displays OSPF information.

area range (OSPF)

To consolidate and summarize routes at an Open Shortest Path First (OSPF) area boundary, use the area range command. To disable this function, use the no form of this command.

area area-id range ip-prefix [not-advertise]

no area area-id range ip-prefix [not-advertise]

Syntax Description

area-id

Identifier for the OSPF area where you want to summarize routes. The area ID can be from 0 to 4294967295 or an IP address.

ip-prefix

IP prefix specified as IP address/subnet mask length (A.B.C.D/LEN).

not-advertise

(Optional) Sets the address range status to DoNotAdvertise. The Type 3 summary LSA is suppressed, and the component networks remain hidden from other networks.

Command Default

Disabled

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area range command only with Area Border Routers (ABRs) to consolidate or summarize routes for an area. The ABR advertises that a single summary route is advertised to other areas and condenses routing information at area boundaries.

You can configure OSPF to summarize addresses for many different sets of address ranges by configuring multiple area range commands.

This command requires the LAN Base Services license.

Examples

This example shows how to configure one summary route to be advertised by the ABR to other areas for all hosts on network 192.0.2.0:

switch(config-if)# interface ethernet 1/2

switch(config-if)# ip address 192.0.2.201 255.255.255.0

switch(config-if)# ip ospf area 201

switch(config-if)# exit

switch(config)# router ospf 12

switch(config-router)# area 0 range 192.0.2.0 255.255.0.0

switch(config-router)#

Related Commands

Command

Description

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

show ip ospf

Displays OSPF information.

area stub (OSPF)

To define an area as an Open Shortest Path First (OSPF) stub area, use the area stub command. To remove the area, use the no form of this command.

area area-id stub [no-summary]

no area area-id stub [no-summary]

Syntax Description

area-id

Identifier for the OSPF stub area. The area ID can be from 0 to 4294967295 or an IP address.

no-summary

(Optional) Prevents an Area Border Router (ABR) from sending summary link advertisements into the stub area.

Command Default

None

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the area stub command to configure all devices attached to the stub area. Use the area default-cost command on an area border router (ABR) attached to the stub area. The area default-cost command provides the metric for the summary default route generated by the ABR into the stub area.

To further reduce the number of link-state advertisements (LSAs) sent into a stub area, you can configure the no-summary keyword on the ABR to prevent it from sending Summary LSAs (Type 3 LSAs3) into the stub area.

This command requires the LAN Base Services license.

Examples

This example shows how to create stub area 33 in OSPF 209:

switch(config)# router ospf 201

switch(config-router)# area 33 stub

switch(config-router)#

Related Commands

Command

Description

area default-cost

Specifies a cost for the default summary route sent into a stub area.

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

show ip ospf

Displays OSPF information.

area virtual-link (OSPF)

To define an Open Shortest Path First (OSPF) virtual link, use the area virtual-link command. To remove a virtual link, use the no form of this command.

area area-id virtual-link router-id

no area area-id virtual-link router-id

Syntax Description

area-id

Identifier for the OSPF area assigned to the transit area for the virtual link. The area ID can be from 0 to 4294967295 or an IP address.

router-id

Router ID associated with the virtual link neighbor. Specify as an IP address. The router ID appears in the show ip ospf neighbors display.

Command Default

None

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Command History

Usage Guidelines

Use the area virtual-link command to establish a virtual link from a remote area to the backbone area. In OSPF, all areas must be connected to a backbone area. If the connection to the backbone is lost, it can be repaired by establishing a virtual link.

Use the area virtual-link command to enter the virtual link configuration mode where you can use the following commands:

- authentication [key-chain | message-digest | null]

- authentication-key [0 | 3] key

- dead-interval seconds

- hello-interval seconds

- message-digest-key key-id md5 key

- retransmit-interval seconds

- transmit-delay seconds

See each command for syntax and usage details.

You must configure both sides of a virtual link with the same area ID and the corresponding virtual link neighbor router ID. To see the router ID, use the show ip ospf neighbors command in any mode.

Note You cannot configure a virtual link on a not-so-stubby (NSSA) area.

This command requires the LAN Base Services license.

Examples

This example shows how to establish a virtual link between two devices, A, and B, with default values for all optional parameters:

Device A:

switch(config)# router ospf 1

switch(config-router)# router-id 192.0.2.2

switch(config-router)# area 1 virtual-link 192.0.2.1

switch(config-router-vlink)#

Device B:

switch(config# router ospf 209

switch(config-router)# router-id 192.0.2.1

switch(config-router)# area 1 virtual-link 192.0.2.2

switch(config-router-vlink)#

Related Commands

Command

Description

authentication (OSPF virtual link)

Enables authentication for an OSPF virtual link.

authentication-key (OSPF virtual link)

Assigns a password to be used by neighboring routers that are using the simple password authentication of OSPF.

copy running-config startup-config

Saves the configuration changes to the startup configuration file.

dead-interval (OSPF virtual link)

Configures the dead interval for an OSPF virtual link.

hello-interval (OSPF virtual link)

Configures the hello interval for an OSPF virtual link.

message-digest-key (virtual link)

Enables OSPF MD5 authentication in an OSPF virtual link.

retransmit-interval (OSPF virtual link)

Configures the retransmit interval for an OSPF virtual link.

show ip ospf neighbors

Displays OSPF neighbor information.

show ip ospf virtual-link

Displays OSPF virtual link information.

transmit-delay (OSPF virtual link)

Configures the transmit delay for an OSPF virtual link.

authentication (OSPF virtual link)

To specify the authentication type for an Open Shortest Path First (OSPF) virtual link, use the authentication command. To remove the authentication type for a virtual link, use the no form of this command.

authentication [key-chain key-name | message-digest | null]

no authentication

Syntax Description

key-chain key-name

(Optional) Specifies the key-chain to use. The key-name argument can be any alphanumeric string up to 63 characters.

message-digest

(Optional) Specifies to use message-digest authentication.

null

(Optional) Specifies no authentication is used. Disables authentication if configured for an area.

Command Default

Defaults to password authentication if you configure authentication with none of the optional keywords.

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the authentication command in virtual link configuration mode to configure the authentication method used on the virtual link. Use the message-digest keyword to configure MD5 message digest authentication and use the message-digest-key command to complete this authentication configuration. Use the key-chain keyword to configure password authentication using key chains and use the key chain command to complete this authentication configuration. Use the authentication command with no keywords to configure a password for the virtual link, and use the authentication-key command to complete this authentication configuration.

This command requires the LAN Base Services license.

Examples

This example shows how to enable message-digest authentication:

switch(config)# router ospf 22

switch(config-router)# area 99 virtual-link 192.0.2.12

switch(config-router-vlink)# authentication message-digest

switch(config-router-vlink)# message-digest key 4 md5 0 abcd

Related Commands

Command

Description

area authentication

Enables authentication for an OSPF area.

authentication-key (OSPF virtual link)

Assigns a password to be used by neighboring routers that are using the password authentication of OSPF.

key chain

Creates a key chain for managing authentication keys.

message-digest-key (OSPF virtual link)

Enables OSPF MD5 authentication.

authentication-key (OSPF virtual link)

To assign a password to be used by an Open Shortest Path First (OSPF) virtual link, use the authentication-key command. To remove a previously assigned OSPF password, use the no form of this command.

authentication-key [0 | 3] password

no authentication-key

Syntax Description

0

(Optional) Specifies an unencrypted authentication key.

3

(Optional) Specifies a 3DES encrypted authentication key.

password

Any continuous string of characters that can be entered from the keyboard up to 8 bytes.

Command Default

Unencrypted password

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the authentication-key command to configure the password for password authentication on an OSPF virtual link. All devices on the same virtual link must have the same password to be able to exchange OSPF information.

This command requires the LAN Base Services license.

Examples

This example shows how to enable the authentication key with the string yourpass:

switch(config)# router ospf 22

switch(config-router)# area 99 virtual-link 192.0.2.12

switch(config-router-vlink)# authentication

switch(config-router-vlink)# authentication-key yourpass

Related Commands

Command

Description

authentication (virtual link)

Enables authentication for an OSPF virtual link.

auto-cost (OSPF)

To control how Open Shortest Path First (OSPF) calculates default metrics for an interface, use the auto-cost command. To assign the default reference bandwidth of 40 Gb/s, use the no form of this command.

auto-cost reference-bandwidth bandwidth [Gbps | Mbps]

no auto-cost reference-bandwidth

Syntax Description

reference-bandwidth bandwidth

Sets the reference bandwidth used to calculate the default metrics for an interface. The range depends on whether you use the Gbps or MBps keywords.

Gbps

(Optional) Specifies the rate in Gbps (bandwidth). The range is from 1 to 4000; the default is 40.

Mbps

(Optional) Specifies the rate in Mbps (bandwidth). The range is from 1 to 4000000; the default is 40000.

Command Default

40 Gb/s. The bandwidth defaults to Gb/s if you do not specify the Gpbs or Mbps keyword.

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Command History

Usage Guidelines

Use the auto-cost command to set the reference bandwidth used by the OSPF cost-metric calculation.

The value set by the ip ospf cost command overrides the cost that results from the auto-cost command.

This command requires the LAN Base Services license.

Examples

This example shows how to set the reference bandwidth for all local interfaces in an OSPF instance:

switch(config)# router ospf 201

switch(config-router)# auto-cost reference-bandwidth 10

Related Commands

Command

Description

ip ospf cost

Explicitly specifies the cost of sending a packet on an interface.

A Commands

This chapter describes the Cisco NX-OS Routing Information Protocol (RIP) commands that begin with A.

address-family (RIP)

To configure an address family for the Routing Information Protocol (RIP), use the address-family command in router configuration mode.

address-family ipv4 unicast

Syntax Description

ipv4

Specifies the IPv4 address family.

unicast

Specifies unicast address support.

Command Default

This command has no default settings.

Command Modes

Router configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to set the IPv4 unicast address family for a RIP instance:

switch(config)# router rip Enterprise

switch(config-router)# address-family ipv4 unicast

Related Commands

Command

Description

default-information

Controls the distribution of a default route.

default-metric

Configures the default metric for routes redistributed into RIP.

distance

Configures the administrative distance.

maximum-paths

Configures the maximum number of equal-cost paths.

redistribute

Configures route redistribution for RIP.

show ip rip

Displays a summary of RIP information for all RIP instances.

timers

Configures the RIP timers.

C Commands

This chapter describes the Cisco NX-OS unicast Routing Information Base (RIB) and the Forwarding Information Base (FIB) commands that begin with C.

clear forwarding route

To clear forwarding information, use the clear forwarding route command.

clear forwarding {ip | ipv4} route [* | prefix] [vrf vrf-name]

Syntax Description

ip

Clears an IPv4 route.

ipv4

Clears an IPv4 route.

*

(Optional) Clears all routes.

prefix

(Optional) IPv4 prefix. The IPv4 format is x.x.x.x/length.

vrf vrf-name

(Optional) Specifies a particular virtual routing and forwarding (VRF) instance. The VRF name can be any case-sensitive, alphanumeric string up to 32 characters.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to clears a route from the FIB:

switch# clear forwarding ip 10.0.0.1/8

clear forwarding inconsistency

To clear the Layer 3 inconsistency checker for the Forwarding Information Base (FIB), use the clear forwarding inconsistency command.

clear forwarding inconsistency

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to clear the Layer 3 inconsistency checker for all modules:

switch# clear forwarding inconsistency module all

Related Commands

Command

Description

show forwarding inconsistency

Displays information about the FIB inconsistencies.

test forwarding inconsistency

Triggers the forwarding inconsistency checker.

clear ip adjacency statistics

To clear adjacency statistics, use the clear ip adjacency statistics command.

clear ip adjacency statistics

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to clear the adjacency statistics:

switch# clear ip adjacency statistics

Related Commands

Command

Description

show ip adjacency

Displays adjacency information.

clear ip route

To clear individual routes from the unicast Routing Information Base (RIB), use the clear ip route command.

clear ip route [* | addr | prefix]] [vrf vrf-name]

Syntax Description

*

(Optional) Clears all routes.

addr

(Optional) Clears this route. The format is x.x.x.x.

prefix

(Optional) Clears this prefix. The format is x.x.x.x/length.

vrf vrf-name

(Optional) Specifies the virtual routing and forwarding (VRF) context name. The name can be any case-sensitive, alphanumeric string up to 32 characters.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

Use the clear ip route command to clear individual routes from the route table.

Caution The * keyword is severely disruptive to routing.

Examples

This example shows how to clear the individual route:

switch(config)# clear ip route 192.0.2.1

Related Commands

Command

Description

show ip route

Displays entries in the route table.

clear sockets statistics

To clear the socket statistics, use the clear sockets statistics command.

clear sockets statistics [all | raw | tcp | udp]

Syntax Description

all

(Optional) Clears all the socket statistics.

raw

(Optional) Clears the socket statistic for the raw IPv4 protocols.

tcp

(Optional) Clears the socket statistic for the TCP IPv4 protocols.

udp

(Optional) Clears the socket statistic for the UDP IPv4 protocols.

Command Default

None

Command Modes

Any command mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to clear the TCP socket statistics:

switch# clear sockets statistics tcp

Related Commands

Command

Description

show sockets client

Displays information about the socket client information.

show sockets connection

Displays information about the socket connection.

show sockets statistics

Displays information about the socket statistics.

A Commands

This chapter describes the Cisco NX-OS Virtual Router Redundancy Protocol (VRRP) commands that begin with A.

address (VRRP)

To add a single, primary IP address to a virtual router, use the address command. To remove an IP address from a virtual router, use the no form of this command.

address ip-address [secondary]

no address [ip-address [secondary]]

Syntax Description

ip-address

Virtual router address (IPv4). This address should be in the same subnet as the interface IP address.

secondary

(Optional) Specifies a secondary virtual router address.

Command Default

None

Command Modes

VRRP configuration mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

You can configure one virtual router IP address for a virtual router. If the configured IP address is the same as the interface IP address, this switch automatically owns the IP address. You can configure an IPv4 address only.

The master VRRP router drops the packets addressed to the virtual router's IP address because the virtual router is only intended as a next-hop router to forward packets. In NX-OS devices, some applications require that packets addressed to the virtual router's IP address be accepted and delivered. By using the secondary option to the virtual router IPv4 address, the VRRP router will accept these packets when it is the master.

This command does not require a license.

Examples

This example shows how to configure a virtual router IP address:

switch(config)# interface ethernet 2/1

switch(config-if)# no switchport

switch(config-if)# vrrp 250

switch(config-if-vrrp)# address 10.0.0.10

This example shows how to remove all the IP addresses (primary and secondary) using a single command:

switch(config-if-vrrp)# show running-config interface ethernet 9/10

!Command: show running-config interface Ethernet9/10

!Time: Mon Apr 14 06:04:18 2008

version 5.2(1)N1(1)

interface Ethernet9/10

vrrp 1

address 10.10.10.1/24

no shutdown

switch(config-if-vrrp)# no address

switch(config-if-vrrp)# show running-config interface ethernet 9/10

!Command: show running-config interface Ethernet1/5

!Time: Mon Apr 14 06:07:54 2008

version 5.2(1)N1(1)

interface Ethernet9/10

no switchport

vrrp 1

switch(config-if-vrrp)#

Related Commands

Command

Description

clear vrrp

Clears all the software counters for the specified virtual router.

show vrrp

Displays VRRP configuration information.

vrrp

Configures a VRRP group.

advertisement-interval (VRRP)

To specify the time interval between the advertisement packets that are being sent to other Virtual Router Redundancy Protocol (VRRP) routers in the same group, use the advertisement-interval command. To return to the default interval value of 1 second, use the no form of this command.

advertisement-interval seconds

no advertisement-interval [seconds]

Syntax Description

seconds

Number of seconds between advertisement frames being sent. For IPv4, the range is from 1 to 255 seconds.

Command Default

1 second

Command Modes

VRRP configuration mode

Command History

Release

Modified

5.2(1)N1(1)

This command was introduced.

Usage Guidelines

VRRP advertisements communicate the priority and state of the virtual router master. The advertisements are encapsulated in IP packets and are sent to the IPv4 multicast address that is assigned to the VRRP group.

VRRP uses a dedicated Internet Assigned Numbers Authority (IANA) standard multicast address (224.0.0.18) for VRRP advertisements. This addressing scheme minimizes the number of routers that must service the multicasts and allows test equipment to accurately identify VRRP packets on a segment. The IANA-assigned VRRP IP protocol number is 112.

Examples

This example shows how to specify an advertisement interval of 200 seconds for VRRP group 250:

switch(config)# interface ethernet 2/1

switch(config-if)# no switchport

switch(config-if)# vrrp 250

switch(config-if-vrrp)# advertisement-interval 200

switch(config-if-vrrp)#

Related Commands

Command

Description

clear vrrp

Clears all the software counters for the specified virtual router.

show vrrp

Displays VRRP configuration information.

vrrp

Configures a VRRP group.

authentication (VRRP)

To configure an authentication for the Virtual Router Redundancy Protocol (VRRP), use the authentication command. To disable authentication, use the no form of this command.

authentication text password

no authentication [text password]

Syntax Description

text password

Selects to use simple text password of up to 8 alphanumeric characters.

Command Default

No authentication

Command Modes

VRRP configuration mode

Command History

Release

Modification

5.2(1)N1(1)

This command was introduced.

Examples

This example shows how to configure MD5 authentication for VRRP:

switch# configure terminal

switch(config)# interface ethernet 2/1

switch(config-if)# no switchport

switch(config-if)# vrrp 250

switch(config-if-vrrp)# authentication text mypwasswd

switch(config-if-vrrp)#

Related Commands

Command

Description

clear vrrp

Clears all the software counters for the specified virtual router.

show vrrp

Displays VRRP configuration information.

vrrp

Configures a VRRP group.

Cisco Nexus 5500 Series NX-OS Unicast Routing Command Reference

Cisco NX-OS Release 7.x

First Published: January 29, 2014

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks . Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

Cisco Nexus 5500 Series NX-OS Unicast Routing Command Reference

© 2014 Cisco Systems, Inc. All rights reserved.