Manuals / Brands / Computer Equipment / Network Card / ADTRAN / Computer Equipment / Network Card

ADTRAN 5000 Series manual

1 1200

Download 1200 pages, 6.78 Mb

ADTRAN OPERATING SYSTEM (AOS)

Command Reference Guide

AOS Version 11.1

NetVanta 5000 Series Products

November 2005

61200990L1-35E

Contents

Main Trademarks To the Holder of this Manual Software Licensing Agreement Conventions Warranty and Customer Service Product Registration Product Support Information Pre-Sales Inquiries and Applications Support Post-Sales Support Training Export Statement Table of Contents Page REFERENCE GUIDE INTRODUCTION CLI INTRODUCTION Accessing the CLI from your PC Understanding Command Security Levels Understanding Configuration Modes Using CLI Shortcuts Shortcut Description Mode Access by... Sample Prompt With this mode you can... Shortcut Description Performing Common CLI Functions The following table contains descriptions of common CLI commands. Command Description Enable Mode Command Set on page 36 Understanding CLI Error Messages COMMAND DESCRIPTIONS Page BASIC MODE COMMAND SET enable logout ping <address> Page show clock show snmp show version telnet <address> traceroute <address> COMMON COMMANDS alias <text> cross-connect <#> <from interface> <slot/port> <tdm-group#> <to interface> <slot/port> Page Page description <text> do end exit shutdown ENABLE MODE COMMAND SET Page clear access-list <listname> clear arp-cache clear arp-entry <address> clear bridge <group#> clear buffers max-used clear counters [<interface> <interface id>] clear crypto ike sa <policy priority> clear crypto ipsec sa Page clear dump-core clear event-history clear host [ * | <hostname>] clear ip bgp [* | <as-number> | <ip address>] [in | out | soft] Use the clear ip bgp command to clear BGP neighbors as specified. Page clear ip cache clear ip dhcp-server binding [* | <ip address>] clear ip igmp group [<group-address> | <interface>] Page clear ip ospf [process | redistribution] clear ip policy-sessions Page clear ip policy-stats <classname> entry <policy class #> clear ip prefix-list <listname> clear ip route [** | <ip address> <subnet mask>] clear lldp counters clear lldp counters interface <interface> clear lldp neighbors clear pppoe <interface id> clear processes cpu max clear qos map Page clear route-map counters <map> clear sip location [** | <username>] clear sip user-registration clear spanning-tree counters [interface <interface id>] clear spanning-tree detected-protocols [interface <interface id>] clear tacacs+ statistics clear user [console <user number> | ssh <user number> | telnet <user number>] clock auto-correct-dst clock no-auto-correct-dst clock set <time> <day> <month> <year> clock timezone <text> Page Page configure [memory | network | overwrite-network | terminal] copy <source> <destination> copy console <filename> copy flash <destination> copy <filename> in terface <interface> <slot/port> copy tftp <destination> copy xmodem <destination> debug aaa debug access-list <listname> debug auto-config debug bridge debug chat-interfaces <chat interface> Page debug data-call debug demand-routing debug dial-backup debug dialup-interfaces debug dynamic-dns [verbose] debug firewall debug frame-relay [events | llc2 | lmi] debug frame-relay multilink <interface> debug hdlc [errors | verbose] debug interface <interface> debug interface adsl events debug ip bgp [events | in | out | keepalives | updates | updates quiet] debug ip dhcp-client debug ip dhcp-server debug ip dns-client debug ip dns-proxy debug ip icmp [send | recv] debug ip igmp <group-address> debug ip mrouting debug ip ospf Page debug ip pim-sparse debug ip pim-sparse assert [event | state] <address> debug ip pim-sparse hello debug ip pim-sparse joinprune [event | state] <address> debug ip pim-sparse packets [in | out] <interface> <interface id> debug ip pim-sparse register [event | state] <address> debug ip policy debug ip rip [events] debug ip tcp [events] Page debug ip tcp md5 debug ip udp Page debug lldp [rx | tx] verbose debug port-auth [general | packet [both | rx | tx] | auth -sm | bkend-sm | reauth-sm | supp-sm] debug ppp [authentication | errors | negotiation | verbose] debug pppoe client debug radius debug sip [cldu | location | manager | registrar <extension> | registration <extension>] debug sntp debug spanning-tree bpdu [receive | transmit | all] debug spanning-tree [config | events | general | root] debug system debug tacacs+ packets debug tftp [client | server] packets dir dir [<input> | flash | flash <input>] disable enable erase [<filename> | startup-config] events exception report generate logout ping <address> Page reload [cancel | in <delay>] show access-lists <listname> show arp [realtime] show auto-config show bridge <interface> <slot/port> <bridge group #> show buffers [realtime] show buffers users [realtime] Page show clock [detail] show configuration Page show connections show crypto ca [certificates | crls | profiles] show crypto ike Page show crypto ipsec show crypto map Use the show crypto map command to display information regarding crypto map settings. Usage Examples show debugging show demand Page Page show dial-backup interfaces Page show dynamic-dns show event-history show fan-tach show flash show frame-relay fragment [frame-relay <port.sublink>] show frame-relay Page show frame-relay multilink <interface> detailed show hosts [verbose] show interfaces <interface> 276 Page Page show ip access-lists <listname> show ip arp [realtime] show ip as-path-list [<listname>] Page Page show ip bgp community-list <community-list-name> [exact] Page show ip bgp [regexp <expression> | summary] Page Page Page show ip bgp <network ip> [</length> | <network-mask>] show ip bgp neighbors <ip address> Page Page show ip community-list [<community-list-name>] show ip dhcp-client lease <interface> show ip dhcp-server binding <client ip address> show ip igmp groups <group-address> show ip igmp interface <interface> show ip interfaces [<interface> | brief] show ip local policy show ip mroute [<group-address> | <interface>] [summary | all] Use the show ip mroute command to display IP multicasting routing table information. Page show ip ospf show ip ospf database network <ip address> <wildcard> area <area id> on page 1122 Page show ip ospf interface <interface> show ip ospf neighbor <interface> <neighbor id> [detail] show ip ospf summary-address show ip pim-sp arse [interfaces <interface> | neighbor | rp-map | rp-set | state | traffic] Page Page Page show ip policy show ip policy-class <policyname> show ip policy-sessions <policyname> [all] Page show ip policy-stats <policyname> show ip prefix-list [detail | summary] <listname> show ip protocols Page Page show ip traffic [realtime] show lldp show lldp device <system name> show lldp interface <interface> show lldp neighbors [interface <interface> l <interface type> | detail | realtime] Page show lldp neighbors statistics show memory [heap | realtime | uncached-heap] Page show modules [verbose] show output-startup show power supply show pppoe show processes [cpu | cpu realtime | history | queue | stack] Page show qos map Page Page Page show queue <interface> show queuing [fair] show radius statistics show route-map [<name>] Page Page show running-config Page show sip [resources | statistics | trunk-registration | user-registration] show sip location [dynamic | static] show snmp show sntp show spanning-tree <bridgegroup#> Use the show spanning-tree command to display the status of the spanning-tree protocol. show startup-config Page show startup-config checksum show system show tacacs+ statistics show tcp info [realtime] <control block> Page show temperature show thresholds show users [realtime] Page show version sip check-sync telnet <address> terminal length <text> traceroute <address> source <address> undebug all wall <message> write [dynvoice-config | erase | memory | network | terminal] GLOBAL CONFIGURATION MODE COMMAND SET Page Page Page aaa accounting [suppress null-username] aaa accounting update [newinfo | periodic <minutes>] aaa authentication [banner | fail-message | password-prompt | username-prompt] Page Page Page Page Page aaa authorization [config-command | console] aaa group server [radius | tacacs+] <listname> Page aaa on Page aaa processes <threads> arp <ip address> <mac address> arpa auto-config [filename <name> | restart | retry-count <number>| server <name or address>] Page banner [exec | login | motd] <character> <message> <character> boot system flash <filename> [no-backup | <backup filename>] bridge <group#> protocol ieee clock [auto-correct-dst | no-auto-correct-dst] clock set <time> <day> <month> <year> clock timezone <text> Page Page cross-connect <#> <from interface> <slot/port> <tdm-group#> <to interface> <slot/port> Page Page crypto ca authenticate <name> Page crypto ca certificate chain <name> crypto ca enroll <name> Page crypto ca import <name> certificate Page crypto ca import <name> crl crypto ca profile <name> crypto ike Page Page Page crypto ike remote-id Page Page crypto ipsec transform-set <setname> <p arameters> Page crypto map Page data-call [authentication protocol | sent authentication protocol] [chap | pap] data-call [mtu <number> | multilink] enable password [md5] <password> Page event-history on event-history priority [error | fatal | info | notice | warning] Page exception report [filename <filename>] Use the exception report command to specify the output filename for the exception report. ftp authentication <listname> hostname <name> interface <interface> [<slot/port> | <interface id>] [point-to-point] ip access-list extended <listname> Page Page Page Page Page ip access-list standard <listname> [permit | deny] <ip address> Page Page Page ip classless ip crypto ip default-gateway <ip address> ip dhcp-server database local ip dhcp-server excluded-address <start ip> <end ip> ip dhcp-server ping packets <#packets> ip dhcp-server ping timeout <milliseconds> ip dhcp-server pool <name> ip domain-lookup ip domain-name <name> ip domain-proxy ip firewall Page Case 1: Packets from interfaces with a configured policy class to any other interface Case 2: Packets that travel in and out a single interface with a configured policy class Case 3: Packets from interfaces without a configured policy class to interfaces with one Attack Protection: Invalid Traffic Pattern Manually Enabled? AOS Firewall Response Common Attacks Invalid Traffic Pattern Manually Enabled? AOS Firewall Response Common Attacks Application Specific Processing: www.adtran.com. ip firewall alg [ftp | h323 | pptp] ip firewall alg sip udp <port#> ip firewall attack-log threshold <value> ip firewall check reflexive-traffic ip firewall check syn-flood ip firewall check winnuke ip firewall policy-log threshold <value> ip forward-protocol udp <port number> Page ip ftp access-class <policyname> in ip ftp agent ip ftp source-interface <interface> ip host <name> <address1> ip igmp join <group-address> ip load-sharing [per-destination | per-packet] ip local policy route-map <map-name> ip mcast-stub helper-address <ip address> ip multicast-routing ip name-server <server-address1-6> ip policy-class <policyname> max-sessions <number> Page Page Page ip policy-timeout <protocol> <range> <port> <seconds> Syntax Description (Continued) Page ip prefix-list <listname> description <text> Page Page ip radius source-interface <interface> ip route <ip address> <subnet mask> <interface or ip address> <administrative distance> ip routing ip rtp firewall-traversal [policy-timeout <seconds>] ip scp server ip sip [database local | location] <username> <ip address> ip sip proxy ip sip registrar [authenticate | default-expires | max-expires | min-expires | realm] <timevalue> ip snmp agent ip sntp source-interface <interface> ip [ssh-server <port> | telnet-server <port>] ip subnet-zero ip tftp source-interface <interface> line [console | telnet | ssh] <line-number> <ending number> Page Page Page logging console logging email address-list <email address> ; <email address> logging email exception-report address-list <email address>; <email address> logging email on logging email priority-level [error | fatal | info | notice | warning] logging email receiver-ip <ip address> logging email sender logging email source-interface <interface> logging facility <facility type> Page logging forwarding on logging forwarding priority-level [error | fatal | info | notice | warning] logging forwarding receiver-ip <ip address> logging forwarding source-interface <interface> mac address-table aging-time <aging time> mac address-table static <mac address> bridge <bridge id> interface <interface> power-supply shutdown automatic qos map <mapname> <sequence number> Page radius-server Page radius-server host route-map <map-name> [ permit | deny ] <sequence number> router bgp router ospf router pim-spars e router rip Page service password-encryption snmp-server chassis-id <id string> snmp-server community <community> view <viewname> [ro | rw] <listname> snmp-server contact [email | pager | phone] <number> snmp-server contact <string> snmp-server enable traps <trap type> [snmp] snmp-server host <address> traps <community> <trap type> [snmp] snmp-server host <address> traps version <version> <community> <trap type> [snmp] snmp-server location <string> snmp-server source-interface <interface> snmp-server view <viewname> <oidtree> [excluded | included] sntp server <address or hostname> version <1-3> spanning-tree edgeport bpdufilter default spanning-tree edgeport bpduguard default spanning-tree edgeport default spanning-tree forward-time <seconds> spanning-tree hello-time <seconds> spanning-tree max-age <seconds> spanning-tree mode [rstp | stp] spanning-tree pathcost method [short | long] spanning-tree priority <value> tacacs-server Threshold settings are applied to ALL DS1s. Page Page LINE (CONSOLE) INTERFACE CONFIG COMMAND SET Page Page databits [7 | 8] flowcontrol [none | software in] Page Page Page Page parity [even | mark | none | odd | space] password [md5] <password> speed <rate> stopbits [1 | 2] LINE (SSH) INTERFACE CONFIG COMMAND SET access-class <listname> in Page Page Page Page Page Page LINE (TELNET) INTERFACE CONFIG COMMAND SET access-class <listname> in Page Page Page Page Page Page password [md5] <password> DSX-1 INTERFACE CONFIGURATION COMMAND SET coding [ami | b8zs] framing [d4 | esf] line-length <value> Page loopback remote line [inband] Page signaling-mode [message-oriented | none | robbed-bit] Page test-pattern [ones | zeros] E1 INTERFACE CONFIGURATION COMMAND SET clock source [internal | line | through] coding [ami | hdb3] framing [crc4] loop-alarm-detect Page loopback remote v54 remote-alarm [rai | ais] Page sa4tx-bit [0 | 1] show test-pattern snmp trap line-status Page snmp trap threshold-reached tdm-group <group number> timeslots <1-31> speed [56 | 64] test-pattern [clear | insert | ones| p215 | p220 | p511 | qrss | zeros] ts16 ETHERNET INTERFACE CONFIGURATION COMMAND SET Page Page Page Page Page arp arpa Page Page Page Page Page Page encapsulation 802.1q full-duplex Page half-duplex Page hardware-address <hardware-address> <type> on page 1152 for a detailed Default Values Page Page Page ip dhcp release ip dhcp renew Page Page Page Page Page ip mcast-stub helper-address <ip address> Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page mac-address <address> Page Page Page Page Page Page spanning-tree bpdufilter [enable | disable] spanning-tree bpduguard [enable | disable] spanning-tree edgeport spanning-tree link-type [auto | point-to-point | shared] spanning-tree pathcost method [short | long] spanning-tree port-priority <priority level> speed [10 | 100 | auto | nonegotiate] traffic-shape rate <rate> <burstrate> vlan-id <vlan id> [native] G.703 INTERFACE CONFIGURATION COMMAND SET coding [ami | hdb3] framing [crc4] Page Page test-pattern [ones | zeros] ts16 HSSI INTERFACE CONFIGURATION COMMAND SET external-loopback-request loopback [dce | dte | line | remote | none] Page T1 INTERFACE CONFIGURATION COMMAND SET clock source [internal | line | through | through <interface id>] coding [ami | b8zs] fdl [ansi | att | none] framing [d4 | esf] lbo [long <-22.5, -15, -7.5, 0> | short <0-655>] Page loopback remote line [fdl | inband] loopback remote payload remote-alarm [rai] Page show test-pattern snmp trap line-status Page snmp trap threshold-reached tdm-group <group number> timeslots <1-24> speed [56 | 64] test-pattern [clear | insert | ones | p215 | p220 | p511 | qrss | zeros] T3 INTERFACE CONFIGURATION COMMAND SET clock source [local | loop] coding [b3zs] framing [m13 | cbit] line-length [short | long] Page loopback remote [line | payload] Page show [bert] Page test-pattern [clear | insert | ones | p215 | p223 | zeros] DEMAND INTERFACE CONFIGURATION COMMAND SET Page Page Page Page Page called-number <DNIS number> caller-number <CLID number> connect-mode [answer | originate | either] connect-order [last-successful | round-robin | sequential] connect-sequence Page connect-sequence attempts <value> connect-sequence interface-recovery [retry-interval <seconds> | max-retries <value>] Page Page demand-hold-queue <packets> timeout <seconds> Page Page Page fast-idle <seconds> Page idle-timeout <seconds> Page ip address negotiated [no-default] Page Page Page Page Page Page Page Page Page Page Page ip policy route-map <mapname> Page Page Page Page Page Page Page Page Page match-interesting [list <acl name> | reverse list <acl name>] [in | out] Page peer default ip address <address> ppp authentication [chap | eap | pap] Page Both ends must have identical passwords. Page ppp chap hostname <hostname> ppp chap password <password> ppp multilink [fragmentation | interleave] ppp pap sent-username <username> password <password> Page resource pool <pool name> Page Page FRAME RELAY INTERFACE CONFIG COMMAND SET Page encapsulation frame-relay ietf Page frame-relay intf-type [dce | dte | nni] frame-relay lmi-n391dce <polls> frame-relay lmi-n391dte <polls> frame-relay lmi-n392dce <threshold> frame-relay lmi-n392dte <threshold> frame-relay lmi-n393dce <counter> frame-relay lmi-n393dte <counter> frame-relay lmi-t391dte <seconds> frame-relay lmi-t392dce <seconds> frame-relay lmi-type [ansi | auto | cisco | none | q933a] Page Page Page Page Page Page Page Page F RAME R ELAY S UB -I NTERFACE C ONFIG C Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page frame-relay bc <committed burst value> frame-relay be <excessive burst value> frame-relay fragment <threshold> frame-relay interface-dlci <dlci> Page hardware-address <hardware-address> <type> on page 1152 for a detailed Page Page Page ip dhcp [release | renew] Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page ip route-cache <address> Page Page Page Page Page spanning-tree bpdufilter [enable | disable] spanning-tree bpduguard [enable | disable] spanning-tree edgeport spanning-tree link-type [auto | point-to-point | shared] spanning-tree path-cost <value> spanning-tree priority <value> HDLC COMMAND SET Page Page Page Page alias link<text> Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page ip proxy-arp <ip address> <subnet mask> Page Page Page Page Page Page Page Page Page Page Page Page Page LOOPBACK INTERFACE CONFIGURATION COMMAND SET Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page PPP INTERFACE CONFIGURATION COMMAND SET Page Page Page Page alias link<text> Page Page bridge-group <group#> bpdufilter [enable | disable] bridge-group <group#> bpduguard [enable | disable] bridge-group <group#> edgeport [disable] bridge-group <group#> link-type [auto | point-to-point | shared] bridge-group <group#> spanning-disabled Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page ip address negotiated [no-default] Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page peer default ip address <address> ppp authentication [chap | pap] Page Page Both ends must have identical passwords. Notice this example has both ends using different sets of passwords. ppp chap hostname <hostname> ppp chap password <password> ppp multilink [fragmentation | interleave] ppp pap sent-username <username> password <password> pppoe ac-name <name> pppoe service-name <name> Page Page Page Page T Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page ip proxy-arp <ip address> <subnet mask> Page Page Page keepalive <period> <retries> Page Page Page Page tunnel checksum tunnel destination <ip address> tunnel key <value> tunnel mode gre tunnel sequence-datagrams tunnel source [<ip address> | <interface>] Page CA PROFILE CONFIGURATION COMMAND SET crl optional email address <email address> enrollment retry [count | period] enrollment terminal enrollment url <url> fqdn <fqdn> ip-address <address> password <password> serial-number subject-name <name> CERTIFICATE CONFIGURATION COMMAND SET certificate <serial-number> certificate ca <serial-number> crl CRYPTO MAP IKE COMMAND SET antireplay ike-policy <policy number> match address <listname> Page set peer <address> set pfs [group1 | group2] set security-association lifetime [kilobytes | seconds] <value> set transform-set <setname1 - setname6> CRYPTO MAP MANUAL COMMAND SET antireplay ike-policy <policy number> match address <listname> Page set peer <address> set session-key [inbound | outbound] Page Page Page set transform-set <setname> IKE CLIENT COMMAND SET dns-server <address1> <address2> ip-range <start ip> <end ip> netbios-name-server <address1> <address2> IKE POLICY ATTRIBUTES COMMAND SET authentication [dss-sig | pre-share | rsa-sig] encryption [aes-xxx-cbc | des | 3des] group [1 | 2] hash [md5| sha] lifetime <seconds> IKE POLICY COMMAND SET attribute <policynumber> client authentication host client authentication host xauth-type [generic | otp | radius] client authentication server list <listname> client configuration pool <poolname> initiate [main | aggressive] local-id [address | asn1-dn | fqdn | user-fqdn] <ipaddress or name> Page nat-traversal <version> [allow | disable | force] peer [<ip address> | any] Page respond [main | aggressive | anymode] AS PATH LIST COMMAND SET deny permit BGP CONFIGURATION COMMAND SET bgp fast-external-fallover bgp log-neighbor-changes bgp router-id <ip address> distance bgp <external> <internal> <local> hold-timer <hold time> BGP NEIGHBOR CONFIGURATION COMMAND SET access-list <listname> [in | out] advertisement-interval <seconds> as-path-list <listname> [in | out] ebgp-multihop <hop count> hold-timer <hold time> local-as <as-number> Page next-hop-self password <password> prefix-list <listname> [in | out] remote-as <as-number> route-map <map-name> [in | out] send-community standard soft-reconfiguration inbound update-source <interface> COMMUNITY LIST COMMAND SET deny permit ROUTER (OSPF) CONFIGURATION COMMAND SET area <area id> default-cost <value> area <area id> range <ip address> <network mask> [advertise | not-advertise] area <area id> stub [no-summary] auto-cost reference-bandwidth <rate> default-information-originate [always | metric <value> | metric-type <type>] default-metric <value> maximum paths <number> network <ip address> <wildcard> area <area id> redistribute connected [metric <value> | metric-type <type> | subnets] redistribute rip [metric <value> | metric-type <type> | subnets] redistribute static [metric <value> | metric-type <type> | subnets] summary-address <address> <mask | prefix mask> not-advertise timers lsa-group-pacing <seconds> timers spf <delay> <hold> ROUTER (PIM SPARSE) CONFIGURATION COMMAND SET join-prune-msg-interval <seconds> rp-address <ip address> access-group <access-list-name> Page spt-threshold <packets> infinity ROUTER (RIP) CONFIGURATION COMMAND SET auto-summary default-metric <value> network <address> <subnet mask> passive-interface <interface> redistribute connected [metric <value>] redistribute ospf [metric <value>] redistribute static [metric <value>] timeout-timer <seconds> update-timer <seconds> version [1 | 2] DHCP POOL COMMAND SET client-identifier <identifier> Page client-name <name> default-router <address> <secondary> dns-server <address> <secondary> domain-name <domain> hardware-address <hardware-address> <type> Page host <address> [<subnet mask> or <prefix length>] lease <days> <hours> <minutes> netbios-name-server <address> <secondary> netbios-node-type <type> network <address> [<subnet mask> or <prefix length>] ntp-server <ip address> option <option value> [ascii | hex | ip] <value> tftp-server <server> timezone-offset <offset> QUALITY OF SERVICE (QOS) MAP COMMANDS bandwidth [percent | remaining | <value> ] match priority set dscp <0-63> set precedence <0-7> RADIUS GROUP COMMAND SET server [acct-port <port number>| auth-port <port number>] ROUTE MAP COMMAND SET match as-path <name> match community <name> [exact-match] match ip address <access list name> match ip address prefix-list <prefix-list name> match ip dscp [<value> | afxx | csxx | default | ef] Page match metric <value> match length <minimum> <maximum> set as-path prepend [<number> | last-as <number>] set comm-list <name> delete set local-preference <value> set metric <value> set default interface <interface type> <interface id> set interface <interface type> <interface id> set ip default next-hop <ip address> set ip df set ip dscp [<value> | afxx | csxx | default | ef] set ip next-hop <ip address> Page TACACS+ GROUP CONFIGURATION COMMAND SET server <host> Index