Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems A9K24X10GETR show aaa usergroup Command Example, 3-10, aaa usergroup root-system

Models: A9KMOD80TR A9K24X10GETR ASR 9000

1 142

Download 142 pages 58.88 Kb

Page 46

Chapter 3 Configuring General Router Features

Logging In to a Router

F I N A L D R A F T — C i s c o C o n f i d e n t i a l

Groups: root-system, cisco-support

Authenticated using method local

User cisco has the following Task ID(s):

Task:	aaa	: READ	WRITE	EXECUTE	DEBUG
Task:	acl	: READ	WRITE	EXECUTE	DEBUG
Task:	admin	: READ	WRITE	EXECUTE	DEBUG
Task:	ancp	: READ	WRITE	EXECUTE	DEBUG
Task:	atm	: READ	WRITE	EXECUTE	DEBUG
Task:	basic-services	: READ	WRITE	EXECUTE	DEBUG
Task:	bcdl	: READ	WRITE	EXECUTE	DEBUG
Task:	bfd	: READ	WRITE	EXECUTE	DEBUG
Task:	bgp	: READ	WRITE	EXECUTE	DEBUG
Task:	boot	: READ	WRITE	EXECUTE	DEBUG
Task:	bundle	: READ	WRITE	EXECUTE	DEBUG
Task:	cdp	: READ	WRITE	EXECUTE	DEBUG
Task:	cef	: READ	WRITE	EXECUTE	DEBUG
Task:	cisco-support	: READ	WRITE	EXECUTE	DEBUG (reserved)
Task:	config-mgmt	: READ	WRITE	EXECUTE	DEBUG
Task:	config-services	: READ	WRITE	EXECUTE	DEBUG
Task:	crypto	: READ	WRITE	EXECUTE	DEBUG
Task:	diag	: READ	WRITE	EXECUTE	DEBUG
--More--

show aaa usergroup Command: Example

To view the rights assigned to a user group, type the show aaa usergroup group-namecommand:

			RP/0/RSP0/CPU0:router# show		aaa usergroup root-system
			User group 'root-system'
			Inherits from task group 'root-system'
			User group 'root-system' has the following combined set
			of task IDs (including all inherited groups):
			Task:	aaa	: READ	WRITE	EXECUTE	DEBUG
			Task:	acl	: READ	WRITE	EXECUTE	DEBUG
			Task:	admin	: READ	WRITE	EXECUTE	DEBUG
			Task:	ancp	: READ	WRITE	EXECUTE	DEBUG
			Task:	atm	: READ	WRITE	EXECUTE	DEBUG
			Task:	basic-services	: READ	WRITE	EXECUTE	DEBUG
			Task:	bcdl	: READ	WRITE	EXECUTE	DEBUG
			Task:	bfd	: READ	WRITE	EXECUTE	DEBUG
			Task:	bgp	: READ	WRITE	EXECUTE	DEBUG
			Task:	boot	: READ	WRITE	EXECUTE	DEBUG
			Task:	bundle	: READ	WRITE	EXECUTE	DEBUG
			Task:	cdp	: READ	WRITE	EXECUTE	DEBUG
			Task:	cef	: READ	WRITE	EXECUTE	DEBUG
			Cisco ASR 9000 Series Aggregation Services Router Getting Started Guide


	3-10							OL-17502-01
	3-10							OL-17502-01

Image 46

Cisco Systems A9K24X10GETR, ASR 9000, A9KMOD80TR manual show aaa usergroup Command Example, 3-10, aaa usergroup root-system

Contents

Cisco Systems, Inc 170 West Tasman Drive San Jose, CA F I N A L D R A F T - C i s c o C o n f i d e n t i a lCisco IOS XR Software Release 800 553-NETS Fax 408CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, the Cisco logo, DCE, and Welcome to the Human Network are trademarks Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries F I N A L D R A F T - C i s c o C o n f i d e n t i a lConnecting to the Router Through the Console Port ContentsFeatures and Capabilities Initial Router ConfigurationEntering Configuration Changes Configuring Gigabit Ethernet and 10-Gigabit Ethernet InterfacesWhere to Go Next PrerequisitesViewing Configuration Details Viewing Configuration Error Messages Without DescriptionsSpecifying the Management Ethernet Interface Name in CLI Commands Viewing the Target ConfigurationContents Previewing Rollback Configuration ChangesConfiguring Basic Message Logging Configuration LimitingFiltering show Command Output Using the Question Mark ? to Display On-Screen Command HelpCompleting a Partial Command with the Tab Key Command HistoryDisabling Debugging for All Services Started at All Terminal Sessions Contents A-1Using the ping Command Configuration Error MessagesPattern Alternation Complex Regular Expressions Using Multipliers A-3Parentheses Used for Pattern Recall A-4 Anchor CharactersF I N A L D R A F T - C i s c o C o n f i d e n t i a l ContentsOL-17502-01 Changes to This Document Obtaining Documentation and Submitting a Service Request, pagePreface About This DocumentChapter 6, “Troubleshooting the Cisco IOS XR Software” Chapter 3, “Configuring General Router Features”Chapter 4, “Configuring Additional Router Features” Intended AudienceF I N A L D R A F T - C i s c o C o n f i d e n t i a l Option Network PreferencesObtaining Documentation and Submitting a Service Request boldface fontPreface F I N A L D R A F T - C i s c o C o n f i d e n t i a lOL-17502-01 Features and Capabilities Introducing to the Cisco ASR 9000 Series Aggregation Services RouterContents Router Overview, page System Configurations, pageMulticast, page OAM, page Layer 3 routing, page QoS, page Command-Line Interface, page Extensible Markup Language API, pageCisco IOS XR Software MPLS TE, page Manageability, page Security, pageFlexible Ethernet F I N A L D R A F T - C i s c o C o n f i d e n t i a lMulticast L2VPNF I N A L D R A F T - C i s c o C o n f i d e n t i a l MPLS TE Layer 3 routingMPLS VPN F I N A L D R A F T - C i s c o C o n f i d e n t i a lHigh Availability System ConfigurationsF I N A L D R A F T - C i s c o C o n f i d e n t i a l F I N A L D R A F T - C i s c o C o n f i d e n t i a l The router uses the following line cards 40x1GE Ethernet line cardManageability Management and SecurityF I N A L D R A F T - C i s c o C o n f i d e n t i a l Security Initial Router ConfigurationManagement Interfaces F I N A L D R A F T - C i s c o C o n f i d e n t i a lSimple Network Management Protocol Command-Line InterfaceExtensible Markup Language API 1-10SUMMARY STEPS Connecting to the Router Through the Console Port6. admin 7. show dsc 2. Connect a terminal to the Console port1-12 DETAILED STEPSDocuments” section on page Command or Actionpage Where to Go NextConfiguring Gigabit Ethernet and 10-Gigabit Ethernet Interfaces 1-13Where to Go Next 1-14F I N A L D R A F T - C i s c o C o n f i d e n t i a l Bringing Up Cisco IOS XR Software on the Router Prerequisites, page Bringing Up and Configuring the Router, pageVerifying the System After Initial Boot, page Where to Go Next, page PrerequisitesHardware Prerequisites and Documentation Bringing Up and Configuring the RouterSoftware Requirements F I N A L D R A F T - C i s c o C o n f i d e n t i a lPort” section on page the “Connecting to the Router Through the ConsoleExamples Enter5. show redundancy 6. show environment Verifying the System After Initial Boot1. show version 2. admin 3. show platform node-id 4. exit F I N A L D R A F T - C i s c o C o n f i d e n t i a lshow version Command Example, page Examples of show Commandsshow version Command Example show platform Command Example, pageshow redundancy Command Example show platform Command ExampleF I N A L D R A F T - C i s c o C o n f i d e n t i a l Verifying the System After Initial Boot show environment Command Exampleshow environment options F I N A L D R A F T - C i s c o C o n f i d e n t i a lF I N A L D R A F T - C i s c o C o n f i d e n t i a l Where to Go NextWhere to Go Next Chapter 2 Bringing Up Cisco IOS XR Software on the RouterConnecting to and Communicating with the Router, page Configuring General Router FeaturesConnecting to and Communicating with the Router Navigating Cisco IOS XR Software Command Modes, pageConnecting Through a Terminal Server, page Connecting Through the Console PortConnecting Through the Console Port, page Connecting Through the Management Ethernet Interface, pagea Router” section on page Connecting Through a Terminal Server5. telnet access-server-address port described in the “CLI Prompt” section on pagesection on page Aggregation Services Router System Management ConfigurationGuide documentation listed in the “Related Documents” section on pagetelnet ManagementEthernetInterfaceIPaddress Connecting Through the Management Ethernet InterfaceLogging In to a Router F I N A L D R A F T - C i s c o C o n f i d e n t i a la port interface. For executing commands from the EXEC prompt Slot in which the RSP is installed. In a Cisco ASR 9000 Series routerEntity on a card that executes user commands or communicates with initial configuration of the router, as described in the “ConfiguringUser Groups, Task Groups, and Task IDs, page User Access PrivilegesUser Groups, Task Groups, and Task IDs Predefined User Groups, pageshow user all Command Example, page show user Command Example, page show user tasks Command Example, pageshow user group Command Example, page show aaa usergroup Command Example, pageshow user group Command Example show user Command Exampleshow user tasks Command Example show user all Command ExampleChapter 3 Configuring General Router Features Logging In to a Router show aaa usergroup Command Example3-10 F I N A L D R A F T - C i s c o C o n f i d e n t i a lCommon Command Modes, page Navigating Cisco IOS XR Software Command ModesIdentifying the Command Mode in the CLI Prompt, page Entering EXEC Commands from a Configuration Mode, page3-12 Identifying the Command Mode in the CLI PromptCommon Command Modes F I N A L D R A F T - C i s c o C o n f i d e n t i a lCommand Mode protocol protocoloptions3-13 F I N A L D R A F T - C i s c o C o n f i d e n t i a l3-14 Entering EXEC Commands from a Configuration ModeF I N A L D R A F T - C i s c o C o n f i d e n t i a l 3-15 Command Mode Navigation ExampleF I N A L D R A F T - C i s c o C o n f i d e n t i a l 3-16 Managing Configuration SessionsF I N A L D R A F T - C i s c o C o n f i d e n t i a l Viewing Active Configuration Sessions, page Entering Configuration ChangesEntering Configuration Changes, page Starting a Configuration Session, page3. commit 1. configure3. end or commit 3-183-19 Viewing Active Configuration Sessions4. end F I N A L D R A F T - C i s c o C o n f i d e n t i a lSimple RSP Configuration Example, page Starting a Configuration SessionSimple RSP Configuration Example Simple Administration Configuration Session Example, pageSimple Administration Configuration Session Example Starting an Exclusive Configuration SessionViewing Configuration Details Viewing the Running Configuration, pageViewing the Target Configuration, page Viewing the Running ConfigurationViewing a Sanitized Version of the Running Configuration, page Viewing a Combined Target and Running Configuration, page3-23 Viewing a Sanitized Version of the Running ConfigurationF I N A L D R A F T - C i s c o C o n f i d e n t i a l 3-24 Viewing the Target ConfigurationF I N A L D R A F T - C i s c o C o n f i d e n t i a l 3-25 Viewing a Combined Target and Running ConfigurationF I N A L D R A F T - C i s c o C o n f i d e n t i a l Viewing Configuration Error Messages Without Descriptions Saving the Target Configuration to a FileViewing Configuration Error Messages and Descriptions 3-26Clearing All Changes to a Target Configuration Loading the Target Configuration from a FileLoading an Alternative Configuration at System Startup 3-27commit best-effort Committing Changes to the Running Configurationcommit 3-28The comment option must appear at the end of the command line. If Commandshow configuration commit list detail command Optional Commits the configuration in global configuration mode on a3-30 Reloading a Failed ConfigurationCommitting a Configuration from Global Configuration Mode Example F I N A L D R A F T - C i s c o C o n f i d e n t i a lEnding a Configuration Session Exiting a Configuration SubmodeReturning Directly to Configuration Mode from a Submode 3-313-32 Configuring the RSP HostnameAborting a Configuration Session F I N A L D R A F T - C i s c o C o n f i d e n t i a lrouterconfig# interface MgmtEth0/RSP0/CPU0/0 Configuring the Management Ethernet InterfaceSpecifying the Management Ethernet Interface Name in CLI Commands routerconfig# interface MgmtEth0/RSP1/CPU0/0routerconfig# interface MgmtEth0/0/CPU0/0 routerconfig# interface MgmtEth0/5/CPU0/0routerconfig# interface MgmtEth0/5/CPU1/0 routerconfig# interface MgmtEth0/0/CPU0/1Prerequisites Configuring the Management Ethernet Interface1. configure 2. interface MgmtEthrack/slot/CPU0/port 3. ipv4 address ipv4-address subnet-maskF I N A L D R A F T - C i s c o C o n f i d e n t i a l 0.0.0.0/0 default-gateway3-36 ipv4 address ipv4-address subnet-maskExamples 3-37F I N A L D R A F T - C i s c o C o n f i d e n t i a l Interface and Hardware Component Configuration Guide Manually Setting the Router ClockCisco ASR 9000 Series Aggregation Services Router 6. clock update-calendar 7. show clockExamples 3-39RP/0/RSP0/CPU0routerconfig# clock timezone F I N A L D R A F T - C i s c o C o n f i d e n t i a lManagement Configuration Guide Cisco ASR 9000 Series Aggregation Services Router SystemManagement Command Reference 3-40Configuring the Domain Name and Domain Name Server, page Configuring Additional Router FeaturesConfiguring the Domain Name and Domain Name Server Configuring Telnet and XML Host Services, page1. configure 2. domain name domain-name-of-organization3. domain name-server ipv4-address 4. commit or end 5. show hosts F I N A L D R A F T - C i s c o C o n f i d e n t i a lExamples Configuring Telnet and XML Host ServicesConfiguring Telnet and XML Host Services F I N A L D R A F T - C i s c o C o n f i d e n t i a lF I N A L D R A F T - C i s c o C o n f i d e n t i a l 1. configure 2. telnet ipv4 server max-servers limit 3. end or commitPrerequisites SUMMARY STEPSF I N A L D R A F T - C i s c o C o n f i d e n t i a l ExamplesDETAILED STEPS Previewing Rollback Configuration Changes, page Managing Configuration History and RollbackViewing Configuration Changes Recorded in a CommitID, page Rolling Back the Configuration to a Specific Rollback Point, pageRP/0/RSP1/CPU0router# show configuration commit list Viewing Configuration Changes Recorded in a CommitIDViewing CommitIDs RP/0/RSP1/CPU0routeradmin# show configuration commit changes ?RP/0/RSP1/CPU0router# show configuration rollback changes to ? Previewing Rollback Configuration ChangesRolling Back the Configuration to a Specific Rollback Point RP/0/RSP1/CPU0router# show configuration rollback changes torollback changes command Rolling Back the Configuration over a Specified Number of CommitsLoading CommitID Configuration Changes to the Target Configuration F I N A L D R A F T - C i s c o C o n f i d e n t i a lRP/0/RSP1/CPU0router# show configuration commit changes ? Loading Rollback Configuration Changes to the Target Configuration4-10 F I N A L D R A F T - C i s c o C o n f i d e n t i a lRP/0/RSP0/CPU0routerconfig# load rollback changes to Deleting CommitIDs4-11 RP/0/RSP0/CPU0routerconfig# load rollback changesConfiguring Basic Message Logging, page Configuring Logging and Logging CorrelationAlarm Logging Correlation, page Logging Locations and Severity Levels2. logging ip-address hostname Alarm Logging CorrelationConfiguring Basic Message Logging 3. logging trap severity 4. logging console severityExamples 4-14RP/0/RSP0/CPU0routerconfig# logging buffered F I N A L D R A F T - C i s c o C o n f i d e n t i a lCommand Reference Cisco ASR 9000 Series Aggregation Services Router System MonitoringConfiguration Guide Cisco ASR 9000 Series Aggregation Services Router XML API GuideViewing Details About User Accounts, User Groups, and Task IDs command without a usernamegroup. To display all groups on the system, type the command show aaa userdb usernamesecret 0 5 password Configuring User Accounts1. configure 2. username user-name 3. password 0 7 password or Creating Users and Assigning GroupsConfiguration Guide Cisco ASR 9000 Series Aggregation Services Router System Security4-18 Related DocumentsStatic Route Configuration Limits, page Configuring Software EntitlementConfiguration Limiting IS-IS Configuration Limits, pageshow running-config router static Static Route Configuration LimitsIS-IS Configuration Limits Maximum static IPv4 routesMaximum Interfaces for Each OSPF Instance Example OSPFv2 and v3 Configuration Limitsshow running-config router ospf maximum interfaces n4-22 Maximum Routes Redistributed into OSPF ExampleF I N A L D R A F T - C i s c o C o n f i d e n t i a l Maximum number of RPL lines Routing Policy Language Line and Policy LimitsNumber of Parallel Links max-paths Example 65,536show igmp summary Multicast Configuration Limitsmaximum groups n maximum groups-per-interface nGlobal Configuration MPLS Configuration LimitsOther Configuration Limits DefaultConfiguration Limiting 4-26Chapter 4 Configuring Additional Router Features F I N A L D R A F T - C i s c o C o n f i d e n t i a lWildcards, Templates, and Aliases, page Command History, page Entering Abbreviated CommandsViewing System Information with show Commands, page Entering Abbreviated Commands, pageNote Do not include a space between the command and question mark Using the Question Mark ? to Display On-Screen Command Helppartial-command? Lists all commands available for a particular command modeF I N A L D R A F T - C i s c o C o n f i d e n t i a l The number ranges within the angle brackets are inclusive rangesUsing the no Form of a Command Completing a Partial Command with the Tab KeyIdentifying Command Syntax Errors F I N A L D R A F T - C i s c o C o n f i d e n t i a lCommon show Commands, page Viewing System Information with show CommandsEditing Command Lines that Wrap Browsing Display Output when the --More-- Prompt Appears, pageshow configuration Common show CommandsBrowsing Display Output when the --More-- Prompt Appears show running-config EXEC orshow command file filename Halting the Display of Screen OutputRedirecting Output to a File F I N A L D R A F T - C i s c o C o n f i d e n t i a lUsing Wildcards to Display All Instances of an Interface Narrowing Output from Large ConfigurationsLimiting show Command Output to a Specific Feature or Interface Limiting show Command Output to a Specific Feature or Interface, pageFiltering show Command Output F I N A L D R A F T - C i s c o C o n f i d e n t i a l5-10 Adding a Filter at the --More-- PromptF I N A L D R A F T - C i s c o C o n f i d e n t i a l Creating Configuration Templates, page Aliases, page Show Parser Dump Enhancement FeatureUsing Wildcards to Identify Interfaces in show Commands, page Keystrokes Used as Command Aliases, pagegi0/1 Using Wildcards to Identify Interfaces in show CommandsExample gi0/3/46. show running-config template template-name Creating Configuration Templates2. template template-name $parameter $parameter... config-commands 4. end-template 5. commitRP/0/RSP0/CPU0routerconfig# template tmplt1 5-14$parameter... config-commands RP/0/RSP0/CPU0routerconfig-TPL# end-templateExamples Applying Configuration Templates5-15 ExamplesOriginal command syntax. Valid abbreviations of the original Name of the command alias. An alias name can be a single word orcommand-syntax command syntax can be entered for the command-syntax argumentViewing Previously Entered Commands Command HistoryKeystrokes Used as Command Aliases Recalling Previously Entered CommandsRecalling Deleted Entries Redisplaying the Command LineKey Combinations Key Combinations to Move the Cursor, page5-19 Key Combinations to Move the CursorKeystrokes to Control Capitalization F I N A L D R A F T - C i s c o C o n f i d e n t i a l5-20 Keystrokes to Delete CLI EntriesTransposing Mistyped Characters F I N A L D R A F T - C i s c o C o n f i d e n t i a lBasic Troubleshooting Commands, page Troubleshooting the Cisco IOS XR SoftwareBasic Troubleshooting Commands Configuration Error Messages, pageUsing debug Commands, page Using show Commands to Display System Status and ConfigurationUsing the ping Command ExamplesViewing a List of Debug Features, page Using the traceroute CommandUsing debug Commands Enabling Debugging for a Feature, page Viewing Debugging Status, pageAAA Authentication, Authorization and Accounting Viewing a List of Debug FeaturesEnabling Debugging for a Feature DRP Pairing debug Display debugging messages of drppairingViewing Debugging Status Disabling Debugging for a ServiceF I N A L D R A F T - C i s c o C o n f i d e n t i a l Disabling Debugging for All Services Started at All Terminal Sessions Configuration Error MessagesConfiguration Failures During a Commit Operation Configuration Failures During a Commit Operation, pageUnderstanding Low-Memory Warnings in Configuration Sessions Memory Warnings in Configuration SessionsConfiguration Errors at Startup Understanding Low-Memory Warnings in Configuration Sessions, page“WARNING! MEMORY IS IN MINOR STATE” “ERROR! MEMORY IS IN SEVERE or CRITICAL STATE”Viewing System Memory Information F I N A L D R A F T - C i s c o C o n f i d e n t i a lRemoving Committed Configurations to Free System Memory, page Removing Configurations to Resolve Low-Memory WarningsClearing a Target Configuration, page Rolling Back to a Previously Committed Configuration, pageRolling Back to a Previously Committed Configuration Clearing a Target ConfigurationRemoving Committed Configurations to Free System Memory 6-10Displays the active configuration sessions Clearing Configuration Sessionsshow configuration sessions clear configuration sessions session-id6-12 Verifying System InterfacesF I N A L D R A F T - C i s c o C o n f i d e n t i a l RP/0/RSP0/CPU0router# show running-config interface gi0/2/0/3 6-13Chapter 6 Troubleshooting the Cisco IOS XR Software F I N A L D R A F T - C i s c o C o n f i d e n t i a lF I N A L D R A F T - C i s c o C o n f i d e n t i a l 6-14connection Regular Expressions Complex Regular Expressions Using Multipliers, page A-3Understanding Regular Expressions, Special Characters, and Patterns A P P E N D I X A\$ \ \+ Special CharactersCharacter Pattern Ranges a-dA-Dba?b Complex Regular Expressions Using MultipliersMultiple-Character Patterns A-Za-z0-9+Underscore Wildcard Pattern AlternationAnchor Characters Parentheses Used for Pattern Recalla.bc.\1\2 F I N A L D R A F T - C i s c o C o n f i d e n t i a lF I N A L D R A F T - C i s c o C o n f i d e n t i a l Parentheses Used for Pattern Recall