Page 1 Cisco Content Services Switch Administration Guide Software Version 7.50 March 2005 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Text Part Number: OL-5647-02...
Page 2 DAMAGES. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP,...
Page 3 Cisco.com Documentation DVD Ordering Documentation Documentation Feedback xxxi Cisco Product Security Overview xxxi Reporting Security Problems in Cisco Products xxxii Obtaining Technical Assistance xxxii Cisco Technical Support Website xxxiii Submitting a Service Request xxxiii Definitions of Service Request Severity...
Page 4: Table Of Contents
Archiving Scripts 1-27 Clearing the Archive Directory 1-27 Restoring Files from the Archive Directory 1-27 Restoring an Archived Log File 1-28 Restoring an Archived Script File 1-29 Restoring an Archived Startup-Config File 1-29 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 5 Primary Boot Configuration Considerations Specifying the Primary Configuration Path Specifying the Secondary Boot Configuration Specifying the Secondary Boot File Specifying the Secondary Boot Type Secondary Boot Configuration Considerations Specifying the Secondary Configuration Path Cisco Content Services Switch Administration Guide OL-5647-02...
Page 6 C H A P T E R User Profiles Overview User Profile Configuration Quick Start Configuring User Terminal Parameters Configuring Terminal Idle Configuring Terminal Length Configuring the More Terminal Prompt Configuring Terminal Netmask-Format Configuring Terminal Timeout Configuring Idle Timeout Cisco Content Services Switch Administration Guide OL-5647-02...
Page 7 4-14 Disabling Logging to the sys.log File on the Disk 4-14 Specifying a Host for a Log File Destination 4-16 Specifying a Line for a Log File Destination 4-17 Logging CLI Commands 4-18 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 8 Preparing to Configure SNMP on the CSS 5-10 Defining the CSS as an SNMP Agent 5-11 SNMP Agent Configuration Quick Start 5-11 Configuring an SNMP Community 5-14 Configuring an SNMP Contact 5-15 Configuring an SNMP Location 5-15 Cisco Content Services Switch Administration Guide viii OL-5647-02...
Page 9 5-32 Setting RMON Alarms 5-33 CSS SNMP Traps 5-33 CSS MIBs 5-38 Where to Go Next 5-44 Configuring Remote Monitoring (RMON) C H A P T E R RMON Overview RMON Configuration Considerations Cisco Content Services Switch Administration Guide OL-5647-02...
Page 10 Defining a Rising Threshold and Rising Event 6-18 Defining a Falling Threshold and Index 6-19 Defining a Startup Alarm 6-20 Defining the Sampling Interval 6-20 Activating an RMON Alarm 6-21 Suspending an RMON Alarm 6-21 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 11 Creating XML Code XML Document Example Allowing the Transfer of XML Configuration Files on the CSS Parsing the XML Code Publishing the XML Code to the CSS Testing the Output of the XML Code Cisco Content Services Switch Administration Guide OL-5647-02...
Page 12 Using the if Branch Command 8-14 Using the while Branch Command 8-15 Special Variables 8-16 Informational Variables 8-16 CONTINUE_ON_ERROR Variable 8-16 STATUS Variable 8-18 EXIT_MSG Variable 8-19 SOCKET Variable 8-20 Using the show variable Command 8-21 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 13 8-37 socket receive 8-38 socket waitfor 8-39 socket inspect 8-40 socket disconnect 8-40 Socket Administration 8-41 Displaying Scripts 8-42 Script Upgrade Considerations 8-43 Using the showtech Script 8-43 Script Keepalive Examples 8-45 Cisco Content Services Switch Administration Guide xiii OL-5647-02...
Page 14 Configuring an FTP Server Record on the CSS Upgrading Your CSS Software Using the Upgrade Script Automatically Running the Upgrade Script Interactively Using the Upgrade Script Manually Upgrading the CSS Software A-13 Updating MIBs A-16 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 15 Using the Advanced Options B-17 Deleting a Software Version B-18 Using the Security Options B-18 Using the Disk Options B-21 Configuring Disks in a Two-Disk CSS B-26 Rebooting the CSS B-27 N D E X Cisco Content Services Switch Administration Guide OL-5647-02...
Page 16 Contents Cisco Content Services Switch Administration Guide OL-5647-02...
Page 17 Figure 5-2 Top of the MIB Tree Figure 6-1 Supported RMON Functions on the CSS Figure 6-2 Example of Absolute Sampling 6-11 Figure 6-3 Example of Delta Sampling 6-11 Figure B-1 Boot Configuration Flowchart Cisco Content Services Switch Administration Guide OL-5647-02...
Page 18 Figures Cisco Content Services Switch Administration Guide OL-5647-02...
Page 19 Message Fields in a Log Level Debug-7 Logging Message 4-29 Table 4-7 IMM Message Identifiers 4-31 Table 4-8 Cisco 11500 Series CSS Log Messages 4-34 Table 5-1 Quick Start for Defining the CSS as an SNMP Agent 5-11 Table 5-2...
Page 20 6-32 Table 8-1 Field Descriptions for the show cmd-sched Command Table 8-2 Field Descriptions for the show sockets Command 8-41 Table B-1 Offline Diagnostic Monitor Menu Options Table B-2 Boot Configuration Options Cisco Content Services Switch Administration Guide xxii OL-5647-02...
Page 21 Preface This guide provides instructions for the administration of the Cisco 11500 Series Content Services Switches (CSS). It describes how to perform administration tasks on the CSS, including managing the CSS software, upgrading your CSS software, and so on. Information in this guide applies to all CSS models except where noted.
Page 22: How To Use This Guide
Configure SNMP on the CSS. This chapter also Simple Network includes a summary of all CSS Enterprise Management Management Protocol Information Base (MIB) objects. (SNMP) Chapter 6, Configuring Configure RMON on the CSS. Remote Monitoring (RMON) Cisco Content Services Switch Administration Guide xxiv OL-5647-02...
Page 23: Related Documentation
Cisco 11500 series CSS. Cisco 11500 Series This guide provides information for installing, Content Services Switch cabling, and powering the Cisco 11500 series CSS. Hardware Installation In addition, this guide provides information about Guide CSS specifications, cable pinouts, and hardware troubleshooting.
Page 24 Address Resolution Protocol (ARP) • Routing Information Protocol (RIP) • • Internet Protocol (IP) Open Shortest Path First (OSPF) protocol • • Cisco Discovery Protocol (CDP) Dynamic Host Configuration Protocol (DHCP) • relay agent Cisco Content Services Switch Administration Guide xxvi OL-5647-02...
Page 25 • Cisco Content Services This guide describes how to perform CSS Switch Redundancy redundancy configuration tasks, including: Configuration Guide VIP and virtual interface redundancy • • Adaptive session redundancy Box-to-box redundancy • Cisco Content Services Switch Administration Guide xxvii OL-5647-02...
Page 26 This guide uses the following symbols and conventions to identify different types of information. A caution means that a specific action you take could cause a loss of data or Caution adversely impact use of the equipment. Cisco Content Services Switch Administration Guide xxviii OL-5647-02...
Page 27: Obtaining Documentation
Obtaining Documentation Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems. Cisco Content Services Switch Administration Guide...
Page 28: Ordering Documentation
Preface Obtaining Documentation Cisco.com You can access the most current Cisco documentation at this URL: http://www.cisco.com/univercd/home/home.htm You can access the Cisco website at this URL: http://www.cisco.com You can access international Cisco websites at this URL: http://www.cisco.com/public/countries_languages.shtml Documentation DVD Cisco documentation and additional literature are available in a Documentation DVD package, which may have shipped with your product.
Page 29: Documentation Feedback
• Register to receive security information from Cisco. • A current list of security advisories and notices for Cisco products is available at this URL: http://www.cisco.com/go/psirt If you prefer to see advisories and notices as they are updated in real time, you...
Page 30: Reporting Security Problems In Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT: Emergencies —...
Page 31: Submitting A Service Request
URL: http://www.cisco.com/techsupport Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL: http://tools.cisco.com/RPF/register/register.do...
Page 32: Definitions Of Service Request Severity
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
Page 33: Obtaining Additional Publications And Information
Cisco Press publishes a wide range of general networking, training and • certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL: http://www.ciscopress.com Packet magazine is the Cisco Systems technical user magazine for •...
Page 34 Preface Obtaining Additional Publications and Information World-class networking training is available from Cisco. You can view • current offerings at this URL: http://www.cisco.com/en/US/learning/index.html Cisco Content Services Switch Administration Guide xxxvi OL-5647-02...
Page 35 Configuring Disks in a Two-Disk CSS • Unpacking and Removing an ADI • Archiving Files to the Archive Directory • Restoring Files from the Archive Directory • Enabling and Copying Core Dumps • Showing CSS Configurations • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 36: Figure 1-1 Software Version For The Css
Flash memory-based storage device. The CSS software is approximately 50 MB, and you can install a maximum of two software versions. The CSS software image is available from the Cisco Systems website (www.cisco.com) as an ArrowPoint Distribution Image (ADI), network boot ZIP (.zip) image, or GZIP-compressed (adi-gz) image.
Page 37 The software directory also contains the startup-config file. The startup-config is an ASCII file containing commands that the CSS executes at startup. This file is created when you: Finish using the Configuration Script (refer to the Cisco Content Services • Switch Getting Started Guide).
Page 38 Define a keepalive method in which the CSS logs in to an FTP server • Import or export certificates and private keys from or to a Cisco 11500 series • Associate an FTP access mechanism with a service for demand-based •...
Page 39 For example (using an encrypted password), to create an FTP record called arrowrecord, enter: # ftp-record arrowrecord 192.168.19.21 bobo password “secret” /outgoing To delete the FTP record arrowrecord from the CSS, enter: # no ftp-record arrowrecord Cisco Content Services Switch Administration Guide OL-5647-02...
Page 40 CSS, enter an unquoted text string with no spaces and a maximum length of 32 characters. • startup-config - Copies the startup-config file and overwrites the existing configuration file. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 41: Using The Running-Config And Startup-Config Files
In addition, the write memory command also archives the startup configuration file to the archive directory on the CSS (similar to the archive startup-config command, see the “Archiving Files to the Archive Directory” section). Cisco Content Services Switch Administration Guide OL-5647-02...
Page 42: Copying The Running- And Startup-Config Files
The copy startup-config command can copy the startup configuration to an FTP or TFTP server. This command is available in SuperUser mode. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 43: Clearing The Running-Config And Startup-Config Files
# clear running-config To reset the startup configuration to the default configuration, use the clear startup-config command in SuperUser mode. This command takes effect upon the next reboot. For example: # clear startup-config Cisco Content Services Switch Administration Guide OL-5647-02...
Page 44: Showing The Running Configuration
For information about a specific group, enter name as a case-sensitive unquoted text string with a maximum of 16 characters. To see a list of header-field groups, enter show running-config header-field-group ?. Cisco Content Services Switch Administration Guide 1-10 OL-5647-02...
Page 45 Displays the components of the running configuration for a valid existing SSL-proxy list. For information about a specific list, enter list_name as a case-sensitive unquoted text string. Cisco Content Services Switch Administration Guide 1-11 OL-5647-02...
Page 46 10.3.6.1 active service serv2 ip address 10.3.6.2 active !************************ OWNER *********************** owner arrowpoint.com content rule1 ip address 158.3.7.43 protocol tcp port 80 add service Serv1 add service Serv2 active Cisco Content Services Switch Administration Guide 1-12 OL-5647-02...
Page 47: Showing The Startup Configuration
10. keepalive type none 11. active 12. !*********************** OWNER *********************** 13. owner rose 14. content rule-L3 vip address 192.168.128.108 add service s1 active content rule-L5 add service s1 vip address 192.168.128.108 url “/*” active Cisco Content Services Switch Administration Guide 1-13 OL-5647-02...
Page 48: Creating A Running-Config Or Startup-Config File Using A Text Editor
Though the CSS automatically organizes configuration information, the order in which you configure the CSS is important because of interdependencies within CSS functionality. Enter configuration commands for features in the same sequence as they appear in the startup-config file. Cisco Content Services Switch Administration Guide 1-14 OL-5647-02...
Page 49: Finding An Ip Address In The Running-Config File
Content Rule - 192.168.12.1, layer 3, owner: lml, state:Active Content Rule - 192.168.12.1, layer 5, owner: lml, state:Active Service - 192.168.3.6, serv1, state:Active Service - 192.168.3.7, serv3, state:Active Interface - 192.168.1.117. VLAN1 Interface - 192.168.2.117. VLAN1 Cisco Content Services Switch Administration Guide 1-15 OL-5647-02...
Page 50: Configuring Disks In A Two-Disk Css
Advanced Options menu of the Offline DM menu to reformat or set the disk mapping for the disks in slots 0 and 1. Refer to Appendix B, Using the Offline Diagnostic Monitor Menu, for details. Cisco Content Services Switch Administration Guide 1-16 OL-5647-02...
Page 51: Formatting A Disk
If the disk has unrecoverable errors and you • do not reformat it, be aware that the file system may be corrupt and functionality is compromised. Cisco Content Services Switch Administration Guide 1-17 OL-5647-02...
Page 52: Specifying A Disk For Booting, Logging, And Core Dumps
CSS. This command is available only in SuperUser mode. For example, to select the disk in slot 1 as the storage location for the primary boot record, enter: # map primary-boot 1 Cisco Content Services Switch Administration Guide 1-18 OL-5647-02...
Page 53: Selecting A Disk For The Secondary Boot Record
Valid selections are 0 (disk in slot 0) and 1 (disk in slot 1). This command is available only in SuperUser mode. Core dump information is intended for Customer Support use only. Note Cisco Content Services Switch Administration Guide 1-19 OL-5647-02...
Page 54: Selecting A Disk For Logging
For example, to select the disk in slot 1 as the storage location for log files, enter: # map log 1 To return the storage location of log files back to the boot disk, enter: # no map log Cisco Content Services Switch Administration Guide 1-20 OL-5647-02...
Page 55: Copying Files Between Disks
{destination filename} - Copies the specified archive file • from the source disk to the second disk using a different destination filename. archives - Copies all archive files from the source disk to the second disk. • Cisco Content Services Switch Administration Guide 1-21 OL-5647-02...
Page 56: Showing The Disk Mapping Configurations
0 and slot 1 in a CSS. This command displays the disk assignment of the primary-boot record, the secondary-boot record, core dump files, and logging output. This command is available in all modes. For example: (config)# show map MSD Mapping: Primary-Boot: Secondary-Boot: 0 Core: Log: Cisco Content Services Switch Administration Guide 1-22 OL-5647-02...
Page 57: Showing Files From A Disk
- Deletes the specified script from the disk. • archive filename - Deletes the specified archive filename from the disk. • startup-config - Deletes the CSS startup configuration file from the disk. • Cisco Content Services Switch Administration Guide 1-23 OL-5647-02...
Page 58: Unpacking And Removing An Adi
ADI you are currently running, use the version command. To remove an ADI, enter: (config-boot)# remove ap0720001 To remove an ADI from a disk in slot 1 of a dual-disk CSS, enter: (config-boot)# remove ap0720001 1 Cisco Content Services Switch Administration Guide 1-24 OL-5647-02...
Page 59: Archiving Files To The Archive Directory
• Archiving the Running-Config File • Archiving Scripts • If you booted your CSS from a network-mounted system and your hard drive does Note not work, the CSS suspends all archive-related functions. Cisco Content Services Switch Administration Guide 1-25 OL-5647-02...
Page 60: Archiving The Startup-Config File
- The filename of the log to archive. To see a list of log files, • enter archive log ?. archive_filename - (Optional) The name you want to assign to the archive file. • Enter an unquoted text string with a maximum of 32 characters. Cisco Content Services Switch Administration Guide 1-26 OL-5647-02...
Page 61: Archiving Scripts
The archive directory resides on the CSS disk (hard or Flash disk) to store logs, scripts, and startup-config files. Use the restore command to restore files previously archived in the CSS archive directory. The syntax for this command is: restore archive_filename [log {log_filename} |script {script_filename}|startup-config] Cisco Content Services Switch Administration Guide 1-27 OL-5647-02...
Page 62: Restoring An Archived Log File
Enter an unquoted text string with a maximum of 32 characters. For example, to restore the log file arrowlog to the log subdirectory and rename the log file to arrowpointlog, enter: # restore arrowlog log arrowpointlog Cisco Content Services Switch Administration Guide 1-28 OL-5647-02...
Page 63: Restoring An Archived Script File
Enter the archived startup-config filename as an unquoted text string. To see a list of archived files, enter restore ?. For example, to restore the archived startup-config file arrowstart as the current startup-config file, enter: # restore arrowstart startup-config Cisco Content Services Switch Administration Guide 1-29 OL-5647-02...
Page 64: Enabling And Copying Core Dumps
• Note Core dump information is for Cisco Technical Assistance Center (TAC) use only. When the CSS experiences a fatal error and core dumps are disabled, the CSS reboots automatically. The CSS does not write information to the hard disk or the Flash disk.
Page 65: Enabling And Disabling Core Dumps
To see a list of core dumps, enter the copy core ? command. The CSS FTP server supports only the active (normal) FTP mode of operation. It Note does not support the passive FTP mode of operation. Cisco Content Services Switch Administration Guide 1-31 OL-5647-02...
Page 66: Copying Core Dumps To An Ftp Server
- The name you want to assign to the file on the FTP server. Include • the full path to the file. Enter an unquoted text string with no spaces and a maximum of 32 characters. For example: # copy core dumpfile ftp ftpserv1 starlogthurs Cisco Content Services Switch Administration Guide 1-32 OL-5647-02...
Page 67: Copying Core Dumps To A Tftp Server
To display the list of show commands, enter: (config)# show ? This section includes the following topics: Showing Software Information • Showing Hardware Information • Showing System Resources • Showing System Uptime • Showing Disk Information • Cisco Content Services Switch Administration Guide 1-33 OL-5647-02...
Page 68: Showing Software Information
For example: # show version Version: sg0730002 (7.30.0.02) Network Path: e:/adi_directory/ Config Path: e:/adi_directory/ Flash (Locked): 7.20.0.03 Flash (Operational):7.30.0.02 Type: PRIMARY License Cmd Set(s): Standard Feature Set Enhanced Feature Set SSH Server Cisco Content Services Switch Administration Guide 1-34 OL-5647-02...
Page 69: Showing Hardware Information
- Displays the weight and power summary • of the session processors in the CSS chassis. For example, to view a summary of the CSS chassis configuration, enter: # show chassis Cisco Content Services Switch Administration Guide 1-35 OL-5647-02...
Page 70: Table 1-1 Field Descriptions For The Show Chassis Command
The name of the interface port on the CSS 11501 or the module installed in the CSS 11503 or CSS 11506. Status The operational status of the interface port/module. The possible states are as follows: Online • Offline • Cisco Content Services Switch Administration Guide 1-36 OL-5647-02...
Page 71: Table 1-2 Field Descriptions For The Show Chassis Slot Command
The operational status of the module. The possible states are as follows: primary • backup • powered-off • powered-on • • • unknown empty slot • Port Number The Ethernet port number. Cisco Content Services Switch Administration Guide 1-37 OL-5647-02...
Page 72 The status of the port. The possible states are as follows: • online offline-ok • offline-bad • • going-online • going-offline • inserted • post • • post-ok post-fail • post-bad-comm • • unknown-state • Cisco Content Services Switch Administration Guide 1-38 OL-5647-02...
Page 73: Table 1-3 Field Descriptions For The Show Chassis Verbose Command
Type The name and product number of the installed module. Serial Number The serial number of the module. Number of Ports The total number of ports in an I/O module. Cisco Content Services Switch Administration Guide 1-39 OL-5647-02...
Page 74 The status of the port. The possible states are as follows: online • • offline-ok offline-bad • • going-online • going-offline • inserted • post • post-ok • • post-fail post-bad-comm • • unknown-state • Cisco Content Services Switch Administration Guide 1-40 OL-5647-02...
Page 75: Table 1-4 Field Descriptions For The Show Chassis Flash Command
The number of the CSS 11501 chassis slot in which the module resides. Part The name of the board in the CSS 11501 chassis. Module/Part Name The name of the module installed in the CSS. Serial The serial number of the module. Cisco Content Services Switch Administration Guide 1-41 OL-5647-02...
Page 76: Table 1-6 Field Descriptions For The Show Chassis Session-Processor Command
0. A weight of 0 prevents the SP from performing any session processing. Power Percentage A value calculated from an SP-assigned weight relative value that represents the session processor share of the total session processing capacity in the chassis. Cisco Content Services Switch Administration Guide 1-42 OL-5647-02...
Page 77: Showing System Resources
The current number of available buffers in the buffer pool Failures The number of failures to obtain a buffer from the buffer pool Low Buffer Count The lowest recorded number of available buffers Cisco Content Services Switch Administration Guide 1-43 OL-5647-02...
Page 78: Showing System Uptime
CSS 11506, this command shows the length of time each module has been running. To display how long the CSS has been running, enter: # show uptime Uptime: 10 days 03:25:22 Cisco Content Services Switch Administration Guide 1-44 OL-5647-02...
Page 79: Showing Disk Information
The number of files on the disk Folders The number of folders on the disk Total Bytes in Files The total number of bytes in all of the files found on the disk Cisco Content Services Switch Administration Guide 1-45 OL-5647-02...
Page 80: Showing User Information
Identifies if console port authentication of locally defined usernames and passwords logging in to the CSS in enabled. Username The name of the user. Privilege Level The privilege level of the user. Cisco Content Services Switch Administration Guide 1-46 OL-5647-02...
Page 81 If the field is blank, the user is neither an administrator nor a technician. Note The username-offdm command is for use by system administrative personnel only. The username-technician command is for use by technical personnel only. Cisco Content Services Switch Administration Guide 1-47 OL-5647-02...
Page 82: Showing Current Logins
Use the show lines command to display currently connected lines or sessions. A connected line is a console or Telnet session. This command is available in all modes. To display currently connected lines or sessions, enter: (config)# show lines Cisco Content Services Switch Administration Guide 1-48 OL-5647-02...
Page 83: Where To Go Next
Configuration, provides information on how to setup the boot configuration for the CSS, including configuring an FTP record and specifying the primary and secondary location from which the CSS accesses the boot image. Cisco Content Services Switch Administration Guide 1-49 OL-5647-02...
Page 84 Chapter 1 Managing the CSS Software Where to Go Next Cisco Content Services Switch Administration Guide 1-50 OL-5647-02...
Page 85: Chapter 2 Specifying The Css Boot Configuration
Booting the CSS from a Network Drive As an alternate procedure for managing the CSS boot configuration from the CLI, you can use the Offline DM menu. Refer to Appendix B, Using the Offline Diagnostic Monitor Menu, for details. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 86: Boot Setup Quick Start
Exit from boot mode. (config-boot)# exit Save your configuration changes to the startup-config file (recommended). If you do not save the running configuration, all configuration changes are lost upon reboot. (config)# copy running-config startup-config Cisco Content Services Switch Administration Guide OL-5647-02...
Page 87: Accessing Boot Mode
Use the primary boot-file command to specify the primary boot file. Enter the primary boot file as an unquoted text string with no spaces and a maximum of 64 characters. To specify the primary boot filename, enter: (config-boot)# primary boot-file ap0720002 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 88: Specifying The Primary Boot Type
The ftp_record variable is the name of the FTP record file that contains the FTP server IP address, username, and password. Enter an unquoted text string with no spaces. Refer to Chapter 1, Managing the CSS Software, for details on creating an FTP record. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 89: Primary Boot Configuration Considerations
Locate the remote system on the network where you will copy the CSS software. Make sure the CSS can access the system via FTP. – Copy the CSS software Zip file from www.cisco.com onto the designated – network server. Create a directory and unzip the file in to the directory. This directory –...
Page 90: Specifying The Primary Configuration Path
- Specifies the secondary boot file • • secondary boot-type - Specifies the boot method: local disk or FTP secondary config-path - Specifies the path to a network configuration using • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 91: Specifying The Secondary Boot File
CSS disk. The CSS accesses the ADI or GZIP file containing the CSS software from an FTP server, copies the file to the disk, and unpacks it. The CSS then boots from the disk. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 92: Secondary Boot Configuration Considerations
• software. Make sure the CSS can access the system via FTP. – Copy the CSS software Zip file from www.cisco.com onto the designated – network server. Create a directory and unzip the file in to the directory. This directory –...
Page 93: Specifying The Secondary Configuration Path
Enter the configuration pathname as an unquoted text string with no spaces and a maximum of 64 characters. To configure the secondary configuration path, enter: (config-boot)# secondary config-path f:/bootdir/ To remove the secondary network configuration path, enter: (config-boot)# no secondary config-path Cisco Content Services Switch Administration Guide OL-5647-02...
Page 94: Configuring A Boot Configuration Record For The Passive Scm
Configuring the Passive SCM Primary Boot Type • Configuring the Passive SCM Primary Configuration Path • • Configuring the Passive SCM Secondary Boot File Configuring the Passive SCM Secondary Boot Type • Cisco Content Services Switch Administration Guide 2-10 OL-5647-02...
Page 95: Configuring The Passive Scm Gateway Address
SCM. Enter the filename of the primary boot image for the passive SCM as an unquoted text string with no spaces and a maximum of 64 characters. To display a list of filenames, enter passive primary boot-file ?. Cisco Content Services Switch Administration Guide 2-11 OL-5647-02...
Page 96: Configuring The Passive Scm Primary Boot Type
The ftp_record variable is the name of the FTP record file that contains the FTP server IP address, username, and password. Enter an unquoted text string with no spaces. Refer to Chapter 1, Managing the CSS Software, for details on creating an FTP record. Cisco Content Services Switch Administration Guide 2-12 OL-5647-02...
Page 97: Configuring The Passive Scm Primary Configuration Path
64 characters. To display a list of boot filenames, enter passive secondary boot-file ?. For example: (config-boot)# passive secondary boot-file ap0720001 Cisco Content Services Switch Administration Guide 2-13 OL-5647-02...
Page 98: Configuring The Passive Scm Secondary Boot Type
IP address, username, and password. Enter an unquoted text string with no spaces. Refer to Chapter 1, Managing the CSS Software, for details on creating an FTP record. For example: (config-boot)# passive secondary boot-type boot-via-disk Cisco Content Services Switch Administration Guide 2-14 OL-5647-02...
Page 99: Configuring The Passive Scm Secondary Configuration Path
(config-boot)# no passive secondary config-path Configuring the Passive SCM Subnet Mask Use the passive subnet mask command to configure the system boot subnet mask for the passive SCM. For example: (config-boot)# passive subnet mask 255.255.0.0 Cisco Content Services Switch Administration Guide 2-15 OL-5647-02...
Page 100: Copying Configuration Information From The Active Scm To The Passive Scm
CSS 11506, enter: (config-boot)# passive sync To copy the boot configuration record from the active SCM to the passive SCM in a CSS 11506, enter: (config-boot)# passive sync boot-config Cisco Content Services Switch Administration Guide 2-16 OL-5647-02...
Page 101: Showing The Boot Configuration
Network booting enables you to boot the CSS from a network drive using a .zip file of the CSS software version located on www.cisco.com. When you configure the CSS for network boot, the CSS must contain an operational disk (hard or Flash).
Page 102: Configuring Network Boot For A Primary Scm
The CSS must be able to access the configuration path through the FTP server as defined in the FTP record. For example: (config-boot)# primary config-path e:/adi_directory/ Cisco Content Services Switch Administration Guide 2-18 OL-5647-02...
Page 103: Configuring Network Boot For A Passive Scm
Your FTP daemon must support the drive mapping. Also, the CSS must be able to access the configuration path through the FTP server as defined in the FTP record. For example: (config-boot)# primary config-path e:/adi_directory/ Cisco Content Services Switch Administration Guide 2-19 OL-5647-02...
Page 104: Showing Network Boot Configurations
255.0.0.0 ip address 192.168.4.226 Where to Go Next Chapter 3, Configuring User Profiles, provides information about how to configure CSS user profiles in the default-profile file. Cisco Content Services Switch Administration Guide 2-20 OL-5647-02...
Page 105: Chapter 3 Configuring User Profiles
Configuring Idle Timeout • Using Expert Mode • Changing the CLI Prompt • Modifying the History Buffer • Configuring a Pre-Login Banner • Configuring a Login Banner • Copying and Saving User Profiles • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 106: User Profiles Overview
To access the CSS disk, FTP to the CSS. Use the appropriate commands to access the scripts directory and list the contents of the default-profile file. When logged into the CSS, use the show profile command to display either the default-profile file or your username-profile file. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 107: User Profile Configuration Quick Start
Set the length of time a session can be idle before the CSS terminates a console or Telnet session. # terminal idle 15 Set the number of output lines the CLI displays on the terminal screen. # terminal length 35 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 108 Copy the running profile from the CSS to the default-profile file, an FTP server, a TFTP server, or your user-profile file. For example: # copy profile default-profile This command is available only in SuperUser mode. Note Cisco Content Services Switch Administration Guide OL-5647-02...
Page 109: Configuring User Terminal Parameters
Enter an idle time between 0 and 65535 minutes. The default value is 0 (disabled). To set a terminal idle time, enter: # terminal idle 15 To restore the terminal idle time to the default state of disabled, enter: # no terminal idle Cisco Content Services Switch Administration Guide OL-5647-02...
Page 110: Configuring Terminal Length
You can also toggle the terminal more function on and off within a session by using the Esc-M key sequence. To enable support for the --More-- terminal prompt, enter: # terminal more To disable support for the --More-- terminal prompt, enter: # no terminal more Cisco Content Services Switch Administration Guide OL-5647-02...
Page 111: Configuring Terminal Netmask-Format
For example, to set the terminal timeout value to 30 minutes, enter: # terminal timeout 30 To restore the terminal timeout value to the default state of disabled, enter: # no terminal timeout Cisco Content Services Switch Administration Guide OL-5647-02...
Page 112: Configuring Idle Timeout
(config)# no idle timeout To set an idle timeout value for all active web management sessions, enter: (config)# idle timeout web-mgmt 15 To disable the web management timeout period, enter: (config)# no idle timeout web-mgmt Cisco Content Services Switch Administration Guide OL-5647-02...
Page 113: Using Expert Mode
For example, when you enter the command to create an owner and expert mode is off, the CSS prompts you to verify the command, enter: (config)# owner arrowpoint.com Create owner <arrowpoint.com>, [y/n]:y (config-owner[arrowpoint.com])# Cisco Content Services Switch Administration Guide OL-5647-02...
Page 114: Changing The Cli Prompt
# history length 80 To disable the history function (setting of 0), enter: # history length 0 To restore the history buffer to the default of 20 lines, enter: # no history length Cisco Content Services Switch Administration Guide 3-10 OL-5647-02...
Page 115: Displaying The History Buffer
This command has the following syntax: prelogin-banner “filename” The filename variable is the name of the ASCII text file that contains the pre-login banner text. Enter a quoted text string with a maximum of 32 characters. Cisco Content Services Switch Administration Guide 3-11 OL-5647-02...
Page 116: Configuring A Login Banner
CSS script directory. The maximum line width is 80 characters. FTP the banner file to the CSS script directory. See the “Configuring a Pre-Login Banner” section. Cisco Content Services Switch Administration Guide 3-12 OL-5647-02...
Page 117: Copying And Saving User Profiles
Copying the Running Profile to the Default-Profile • Copying the Running Profile to a User Profile • Copying the Running Profile to an FTP Server • Copying the Running Profile to a TFTP Server • Cisco Content Services Switch Administration Guide 3-13 OL-5647-02...
Page 118: Copying The Running Profile To The Default-Profile
- The name you want to assign to the file on the server. Include the • full path to the file. Enter an unquoted text string with no spaces. For example: # copy profile ftp arrowrecord \records\arrowftprecord Cisco Content Services Switch Administration Guide 3-14 OL-5647-02...
Page 119: Copying The Running Profile To A Tftp Server
Features, describes how to enable logging, set up the log buffer, and determine where to send the activity information. This chapter also provides information on interpreting sys.log messages and a description of frequently queried messages. Cisco Content Services Switch Administration Guide 3-15 OL-5647-02...
Page 120 Chapter 3 Configuring User Profiles Where to Go Next Cisco Content Services Switch Administration Guide 3-16 OL-5647-02...
Page 121: Chapter 4 Using The Css Logging Features
• Logging CLI Commands • Showing Log Files • • Copying Log Files to an FTP or TFTP Server Interpreting sys.log Log Messages • Interpreting Undeliverable Messages • Frequently Queried Log Messages • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 122: Chapter 4 Using The Cs Logging Feature
“Showing Log Files” section. For details on the copy log command, see the “Copying Log Files to an FTP or TFTP Server” section. You need SuperUser privileges to use the show log command. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 123: Table 4-1 Css Log File Descriptions
Log information for user-defined Flash disk syslogd subsystem or CLI commands. By VTY1 default, logging is enabled and logs VTY2 subsystem all with level warning. The CSS creates sys.log to record this log information. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 124: Css Logging Quick Start Table
You configure all logging commands from configuration mode except for the clear log command. The clear log command is available only in SuperUser mode at the root prompt (#). Cisco Content Services Switch Administration Guide OL-5647-02...
Page 125 - IP address 192.168.11.3 of the syslog daemon on the host or a host name logging host myhost.domain.com logging line vty1 log line - CSS active session Cisco Content Services Switch Administration Guide OL-5647-02...
Page 126: Specifying Logging Buffer Size
0 to 64000 bytes. The default is 0, where the CSS sends the logging output directly to the log file. To set the buffer size to 1000 bytes, enter: (config)# logging buffer 1000 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 127: Configuring Logging For A Subsystem
(config)# no logging subsystem redundancy The following example enables logging for the chassis subsystem with a critical-2 error level. The CSS logs all critical, alert, and fatal errors for the chassis. (config)# logging subsystem chassis level critical-2 Cisco Content Services Switch Administration Guide OL-5647-02...
Page 128: Table 4-3 Logging Subsystems
Internet Protocol version 4 (IPv4) keepalive Keepalive natmgr NAT manager netman Network management Network Qualifier List (NQL) ospf Open Shortest Path First (OSPF) protocol Proximity CAPP Messaging (PCM) portmapper Port mapper proximity Proximity Cisco Content Services Switch Administration Guide OL-5647-02...
Page 129: Table 4-4 Subsystem Logging Levels
The logging levels are listed in order of severity, with a fatal-0 level being the most severe errors and an info-6 level being the least severe error. Table 4-4 Subsystem Logging Levels Level Definition fatal-0 Fatal errors only. alert-1 Alert errors, including fatal errors. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 130: Configuring A Log Message For A Subsystem At A Logging Level
The variables and options are as follows: name - The name of a CSS subsystem. Enter one of the subsystem names, as • shown in Table 4-3. To see a list of subsystems, enter: cliLogMessage subsystem ? Cisco Content Services Switch Administration Guide 4-10 OL-5647-02...
Page 131: Logging Acl Activity
(config-acl[7])# clause 1 log enable To disable ACL logging for a specific clause, enter: (config-acl[7])#) clause 1 log disable To globally disable logging for all ACL clauses, enter: (config)# no logging subsystem acl Cisco Content Services Switch Administration Guide 4-11 OL-5647-02...
Page 132: Sending Log Messages To An E-Mail Address
Do not insert an @ sign before the domain name. The CSS automatically prepends the @ sign to the domain name. To turn off logging to an e-mail address, enter: (config)# no logging sendmail email_address Cisco Content Services Switch Administration Guide 4-12 OL-5647-02...
Page 133: Specifying A Log File Destination
Specifying a Log File on the Disk • Disabling Logging to the sys.log File on the Disk • Specifying a Host for a Log File Destination • Specifying a Line for a Log File Destination • Cisco Content Services Switch Administration Guide 4-13 OL-5647-02...
Page 134: Specifying A Log File On The Disk
CSS disk (for example, to the Flash disk) or to increase the performance of the CSS. Use the logging to-disk command to disable logging to the sys.log file on the CSS disk (hard or Flash). Cisco Content Services Switch Administration Guide 4-14 OL-5647-02...
Page 135 To disable logging to the CSS sys.log file on the CSS disk (Flash disk or hard disk), enter: (config)# logging to-disk disable To resume logging back to the CSS disk, enter: (config)# logging to-disk enable Cisco Content Services Switch Administration Guide 4-15 OL-5647-02...
Page 136: Specifying A Host For A Log File Destination
(hard or Flash disk) when the logging host command is entered. To disable logging to the sys.log file on the CSS disk, use the logging to-disk disable command (see the “Disabling Logging to the sys.log File on the Disk” section). Cisco Content Services Switch Administration Guide 4-16 OL-5647-02...
Page 137: Specifying A Line For A Log File Destination
*vty1 Login Name: admin Location:10.0.3.35 To send subsystem information to your monitor, enter: (config)# logging line vty1 To turn off logging, enter the no logging line command. (config)# no logging line vty1 Cisco Content Services Switch Administration Guide 4-17 OL-5647-02...
Page 138: Logging Cli Commands
Use the show log command and its options to send the log activity to your current session or to display the contents in a log or trap log file. You can use the show log command in all modes, including User mode. Cisco Content Services Switch Administration Guide 4-18 OL-5647-02...
Page 139 1000 lines), starting at the end of the log file. Enter a number from 1 to 1000. line-numbers - (Optional) Includes the line numbers when displaying the • contents of the log file. Cisco Content Services Switch Administration Guide 4-19 OL-5647-02...
Page 140: Showing Log Lists
Showing Log Lists Use the show log-list command to display a list of all log files. You can use the show log-list command in all modes, including User mode. For example: (config)# show log-list Cisco Content Services Switch Administration Guide 4-20 OL-5647-02...
Page 141: Showing The Log State
Flow Admission Control (FAC) flowagent Flow agent flowmgr Flow manager subsystem fp-driver Fathpath driver Header Field Group (HFG) ipv4 Internet Protocol version 4 (IPv4) keepalive Keepalive natmgr NAT manager netman Network management Cisco Content Services Switch Administration Guide 4-21 OL-5647-02...
Page 142 VLAN manager Virtual pipe manager vrrp Virtual Router Redundancy Protocol Web conversation control Levels: debug Log all errors and messages (Verbose) info Log informational messages, including errors at the notice level Cisco Content Services Switch Administration Guide 4-22 OL-5647-02...
Page 143: Copying Log Files To An Ftp Or Tftp Server
CSS to an FTP server, create an FTP record file containing the FTP server IP address, username, and password. Refer to Chapter 1, Managing the CSS Software, for information on configuring an FTP record. Cisco Content Services Switch Administration Guide 4-23 OL-5647-02...
Page 144: Copying Log Files To A Tftp Server
32 characters. To see a list of log files, enter the copy log ? command. tftp - Copies a log file to a TFTP server. • Cisco Content Services Switch Administration Guide 4-24 OL-5647-02...
Page 145: Interpreting Sys.log Log Messages
You can define a log message for a subsystem at a particular logging level through the cliLogMessage subsystem command. For more information, see the “Configuring a Log Message for a Subsystem at a Logging Level” section. Cisco Content Services Switch Administration Guide 4-25 OL-5647-02...
Page 146: Interpreting Undeliverable Messages
Figure 4-2 Logging Header in a Log Message DEC 18 11:18:12 1/1 2712813 SYSSOFT-4 Time Stamp Slot and subslot Log sequencing number Subsystem and logging level Cisco Content Services Switch Administration Guide 4-26 OL-5647-02...
Page 147: Figure 4-3 Logging Message
By default, the log level for undeliverable messages is Warning-4. These messages occur every two seconds per message queue that is experiencing the problem. The message in the logging messages provides only the following information: Internal Messages Dropped. Cisco Content Services Switch Administration Guide 4-27 OL-5647-02...
Page 148: Figure 4-4 Logging Message Fields
(IMM: Base Class-IPV4_ARP, Identifier 1) from 1/1 (the other CSS) failed to reach destination ‘Ipv4Arp’ on 1/1 (this CSS) Message Type Message Detail: Decoded Name Message Detail: Message Identifier Source Information Destination Information Cisco Content Services Switch Administration Guide 4-28 OL-5647-02...
Page 149: Table 4-6 Message Fields In A Log Level Debug-7 Logging Message
For example: (IMM:Base Class-IPV4_ARP, Identifier 1) Unknown, and the hexadecimal value of the • message type field. For example: (IMM:Base Class- Unknown, unknown type-0x00a00005) Cisco Content Services Switch Administration Guide 4-29 OL-5647-02...
Page 150 This information includes the slot and subslot numbers as they appear in the logging header. For example: failed to reach destination Ipv4Arp on 1/1 (this CSS) Cisco Content Services Switch Administration Guide 4-30 OL-5647-02...
Page 151: Table 4-7 Imm Message Identifiers
4 - Initiates a Chassis Manager timeout to allow • for modules to become operational. The timeout is sent from the Chassis Manager. This Identifier appears during the boot process. Cisco Content Services Switch Administration Guide 4-31 OL-5647-02...
Page 152 IMM message undeliverables or queue drops on the IPv4 Slave SfmForwRx_Q queue residing on the Session Forwarding Manager. This queue receives broadcast/multicast Rx Task traffic, ICMP keepalives, and UDP/TCP fragments. The Identifier is 1 for this message type. Cisco Content Services Switch Administration Guide 4-32 OL-5647-02...
Page 153 SysImmPing commands are issued. The Identifiers for each assigned message type are: 0 - Pings • 1 - Ping acknowledgements • Cisco Content Services Switch Administration Guide 4-33 OL-5647-02...
Page 154: Frequently Queried Log Messages
Frequently Queried Log Messages Table 4-8 lists the frequently queried log messages for the Cisco 11500 series CSS. This table includes information on the possible cause and corrective action, if required. Log messages are divided by logging subsystem, with messages listed alphabetically.
Page 155 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution chassis Subsystem The power supply lost AC power from CHMGR: Missing backup power supply.
Page 156 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS chassis cannot find the power CHMGR: Cannot locate power supply: PS number .
Page 157 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution circuit Subsystem Codes indicate the status of interfaces CIRCUIT-7: Circuit status message for circuit 1023 sent to within VLANs.
Page 158 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution csdpeer Subsystem The number of domain names sent by...
Page 159 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution One of the CSS Ethernet ports FLOWMGR-4: Flow manager received...
Page 160 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS rejects a connection, either FLOWMGR-6: \n FM_UtilGenericTcpFlowReject:...
Page 161 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution For a Layer 5 rule, the CSS is trying to...
Page 162 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution fp-driver The CSS MIPS processor attempts to FP_DRV-4: PrismImmFastPath::Send: Could send a group message, but the not allocate an MCID.
Page 163 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution In the case of software queues, it might FP_DRV-4:...
Page 164 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution ipv4 Subsystem You deleted a circuit but the circuit is...
Page 165 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution An ARP TX task is running on the IPV4-4: Ipv4SfmArpTx: unknown...
Page 166 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution A link became unavailable while an IPV4-4 Ipv4SfmForwTx: unknown...
Page 167 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS is running VIP redundancy IPV4-4: (RIP) VIP Redundancy...
Page 168 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution A CSS Ethernet port became IPV4-4: Ipv4SfmCmDeleteFlow: -1 response from VccRemoveVc, unavailable.
Page 169 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS detects that it has received an IPV4-4: Ipv4SfmProcessArpFrame: bad ARP packet received invalid ARP packet.
Page 170 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution A duplicate IP address has been IPV4-4: Duplicate IP address detected: 192.168.163.129...
Page 171 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution netman Subsystem The CSS is configured to transmit NETMAN-1:...
Page 172 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution Remote access is being initiated to the NETMAN-2: Sshd:do_authenticated:ERROR->...
Page 173 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution EPIF 0 belongs to the first four ports on...
Page 174 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution SNMP Enterprise login failure traps NETMAN-5: Enterprise: Login Failure:vty2 10.6.3.171 Mandy are enabled and an invalid username and password have been entered.
Page 175 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The flow manager tried to reallocate a NETMAN-5: Generic:LINK UP for Virtual Circuit that was already SYSSOFT-7: NP55_connection.c...
Page 176 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution portmapper Subsystem A source group is running out of PORTMAPPER-5: PortUnmap no Port mapping found.
Page 177 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution radius Subsystem The RADIUS server does not have the...
Page 178 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution sntp Subsystem This message indicates potential issues SNTP-6: Sntp Server has incorrect mode 29 with the SNTP server.
Page 179 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS attempts to request the SYSSOFT-4: Invalid Target(0x03087a01) for Chassis sending of a message to a slot and Type, Message being dropped.
Page 180 Chapter 4 Using the CSS Logging Features Frequently Queried Log Messages Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution The CSS was unable to deliver a SYSSOFT-4: Event not...
Page 181: Where To Go Next
Chapter 4 Using the CSS Logging Features Where to Go Next Table 4-8 Cisco 11500 Series CSS Log Messages (continued) Log Message (sys.log: Subsystem Name, Level, and Message) Cause and Resolution vlanmgr Subsystem The VLAN Manager is being asked to...
Page 182 Chapter 4 Using the CSS Logging Features Where to Go Next Cisco Content Services Switch Administration Guide 4-62 OL-5647-02...
Page 183: Chapter 5 Configuring Simple Network Management Protocol (Snmp)
• • Defining the CSS as an SNMP Agent Configuring Denial of Service (DoS) • Displaying the SNMP Configuration • Managing SNMP on the CSS • CSS SNMP Traps • CSS MIBs • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 184: Snmp Overview
SNMP manager, and also sends management information back to the SNMP manager as events occur. The agent can reside on routers, bridges, hubs, workstations, or printers, to name just a few network devices. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 185: Snmp Manager And Agent Communication
– The SNMP manager requests the agent to change the value of the MIB object. For example, you could run a script or an application on a remote device with a set action. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 186: Figure 5-1 Snmp Manager And Agent Interaction
Figure 5-1 illustrates SNMP manager and agent communication. Figure 5-1 SNMP Manager and Agent Interaction SNMP Manager trap get-next SNMP Agent (CSS) Cisco Content Services Switch Administration Guide OL-5647-02...
Page 187: Management Information Base (Mib) Overview
There are two versions of the MIB tree as defined by ISO: MIB-I and MIB-II. Note MIB-II has more variables than MIB-I. Refer to the MIB-II standard in RFC 1213, “Management Information Base for Network Management of TCP/IP-based Internets: MIB-II.” Cisco Content Services Switch Administration Guide OL-5647-02...
Page 188: Figure 5-2 Top Of The Mib Tree
(3) private (4) enterprises (1) cisco (9) ciscoMgmt (9) = additional branches arrowpoint (368) This section includes the following topics: MIB Variables • MIB Extensions (Enterprise MIBs) • Updating MIB Files • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 189: Mib Variables
The MIB files in this branch comprise the CSS Enterprise MIBs (the highlighted MIB identifier in Figure 5-2). The enterprise MIB files are categorized along functional boundaries. For a list of MIB branches under the CSS Enterprise MIB, see the “CSS MIBs” section. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 190: Updating Mib Files
BRIDGE-MIB • To update the standard MIBs on your management station after you upgrade the CSS software: Transfer the standard MIBs to your management station. Load the standard MIBs into the management application. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 191: Loading The Css Mibs
- Allows read-only access to the MIB tree for devices included in this • community read-write - Allows both read and write access to the MIB tree for devices • included in this community Cisco Content Services Switch Administration Guide OL-5647-02...
Page 192: Preparing To Configure Snmp On The Css
Designate a management station or stations. The CSS is an agent in the • SNMP network scheme. The agent is already embedded in the CSS when you boot up the device. All you need to do is configure the SNMP parameters on the CSS. Cisco Content Services Switch Administration Guide 5-10 OL-5647-02...
Page 193: Defining The Css As An Snmp Agent
GET action) or read-write (for a GET and SET action). This step is required for using SNMP on the CSS. (config)# snmp community public read-only (config)# snmp community private read-write (Optional) Provide the SNMP contact name. (config)# snmp contact “fred n mandy” Cisco Content Services Switch Administration Guide 5-11 OL-5647-02...
Page 194 Enable a specific enterprise trap type. For example, you can set a trap to notify the trap host of failed login attempts. Login failure traps provide the username and source IP address of the person who failed to log in. (config)# snmp trap-type enterprise login-failure Cisco Content Services Switch Administration Guide 5-12 OL-5647-02...
Page 195 “Operations” snmp name “arrowpoint.com” snmp trap-host 172.16.3.6 trap snmp trap-host 172.16.8.4 trap snmp trap-type generic snmp auth-traps snmp trap-type enterprise login-failure snmp reload-enable 100 snmp trap-type enterprise dos-illegal-attack trap-threshold 1 Cisco Content Services Switch Administration Guide 5-13 OL-5647-02...
Page 196: Configuring An Snmp Community
- Allows read-only access for this community. • read-write - Allows read-write access for this community. • For example: (config)# snmp community sqa read-write To remove a community name, enter: (config)# no snmp community sqa Cisco Content Services Switch Administration Guide 5-14 OL-5647-02...
Page 197: Configuring An Snmp Contact
For example: (config)# snmp contact “Fred N. Mandy” To remove the specified SNMP contact name and reset it to the default of “Cisco Systems, Content Network Systems”, enter: (config)# no snmp contact Configuring an SNMP Location To set or modify the SNMP system location, use the snmp location command.
Page 198: Configuring An Snmp Name
- The community name to use when sending traps to the • specified SNMP host. Enter an unquoted text string with no spaces and a maximum of 12 characters. snmpv2 - Specifies that traps be sent in SNMPv2 format. • Cisco Content Services Switch Administration Guide 5-16 OL-5647-02...
Page 199: Configuring Snmp Trap Source
- Uses the Ethernet management port IP address to set the • Agent-Address field of the trap. This option is available only on a Cisco 11500 series CSS. specified source_ip_address - Allows you to enter the IP address to be used •...
Page 200: Configuring Snmp Generic Traps
For details, see the “Configuring SNMP Generic Traps” section. For details on SNMP traps (and associated MIB objects) loaded as part of the CSS Note software, see the “CSS SNMP Traps” section. Cisco Content Services Switch Administration Guide 5-18 OL-5647-02...
Page 201: Configuring Snmp Enterprise Traps
For information on configuring Denial of Service enterprise traps, see the “Configuring Denial of Service (DoS)” section. The syntax for this global configuration mode command is: snmp trap-type enterprise {dos_attack_type {trap-threshold threshold_value}|chmgr-module-transition|chmgr-ps-transition |isc-lifetick-failure|isc-state-transition|login-failure|reload|redundan cy-transition |reporter-transition|service-transition} Cisco Content Services Switch Administration Guide 5-19 OL-5647-02...
Page 202 - Generates SNMP enterprise traps when an ISC LifeTick • failure message occurs on a Cisco 11500 series CSS. A LifeTick message occurs four times a second between ports in an Adaptive Session Redundancy (ASR) configuration. If a port does not receive a LifeTick message within one second from its corresponding port due to a software or hardware failure, an ISC LifeTick failure message occurs.
Page 203: Configuring Snmp Reload-Enable
- Allows an SNMP write equal to the • reload_value to force a CSS reboot. This command requires that you enable enterprise traps first using the Note snmp trap-type enterprise command. See the “Configuring SNMP Enterprise Traps” section. Cisco Content Services Switch Administration Guide 5-21 OL-5647-02...
Page 204: Configuring Denial Of Service (Dos)
DoS attack event occurs. For information, see the “Configuring SNMP Enterprise Traps” section. This section includes the following topics: DoS Quick Start • Defining a DoS SNMP Trap-Type • Displaying DoS Configurations • Cisco Content Services Switch Administration Guide 5-22 OL-5647-02...
Page 205: Dos Quick Start
(config)# snmp trap-type enterprise dos-syn-attack trap-threshold Display information about DoS attacks. (config)# show dos summary (config)# show dos Reset the DoS statistics for a CSS to zero, as required. (config)# zero dos statistics Cisco Content Services Switch Administration Guide 5-23 OL-5647-02...
Page 206: Defining A Dos Snmp Trap-Type
CSS to generate SNMP enterprise traps when a DoS attack event occurs. For information, see the “Configuring SNMP Enterprise Traps” section. The syntax for this global configuration mode command is: snmp trap-type enterprise dos_attack_type {trap-threshold threshold_value} Cisco Content Services Switch Administration Guide 5-24 OL-5647-02...
Page 207: Displaying Dos Configurations
The total number of attacks since booting the CSS • The types of attacks and the maximum number of these attacks per second • The first and last occurrence of an attack • The source and destination IP addresses • Cisco Content Services Switch Administration Guide 5-25 OL-5647-02...
Page 208 Use the show dos summary command to display a summary of information about DoS attacks. For example: (config)# show dos summary Table 5-3 describes the fields in the show dos command output. Cisco Content Services Switch Administration Guide 5-26 OL-5647-02...
Page 209: Table 5-3 Field Descriptions For The Show Dos Command
Smurf Attacks - Pings with a broadcast • destination address First Attack Detected The first time a DoS attack was detected. Last Attack Detected The last time a DoS attack was detected. Cisco Content Services Switch Administration Guide 5-27 OL-5647-02...
Page 210: Resetting Dos Statistics
This command sets the values of the DoS statistics in the fields of the show dos command to zero. For more information about the show dos command, see the “Displaying DoS Configurations” section. Cisco Content Services Switch Administration Guide 5-28 OL-5647-02...
Page 211: Displaying The Snmp Configuration
SNMP in the CSS. See the “Configuring an SNMP Community” section for details. SNMP is not a secure network environment. Do not use SNMP by itself to provide Note security for your network. Cisco Content Services Switch Administration Guide 5-29 OL-5647-02...
Page 212: Using The Css To Look Up Mib Objects
In this case, specify the lookup command with the question mark (?) character, as shown. (config-rmonalarm[1])# lookup apFlowMgrExt? apFlowMgrExtDoSAttackEventType apFlowMgrExtDoSAttackEventCount apFlowMgrExtDoSAttackIndex apFlowMgrExtDosTotalSmurfAttacks apFlowMgrExtDosTotalIllegalSourceAttacks apFlowMgrExtDosTotalZeroPortAttacks apFlowMgrExtDosTotalLandAttacks apFlowMgrExtDosTotalSynAttacks apFlowMgrExtDosTotalAttacks apFlowMgrExtIdleTimer apFlowMgrExtPortIdleValue apFlowMgrExtPortIdle apFlowMgrExtReserveCleanTimer apFlowMgrExtPermanentPort4 apFlowMgrExtPermanentPort3 Cisco Content Services Switch Administration Guide 5-30 OL-5647-02...
Page 213: Useful Mib Information
Table 5-4 CSS MIB Information MIB Name Description RFC 1398 Ethernet statistics RFC 1493 Bridge information RFC 1757 RMON statistics svcExt.mib Service variables (including TCP connections) cntExt.mib Content rule variables (including frame statistics) Cisco Content Services Switch Administration Guide 5-31 OL-5647-02...
Page 214: Reading Logs
By default, the following events generate level critical-2 messages: • Link Up Link Down • • Cold Start Warm Start • Service Down • Service Suspended • All other SNMP traps generate level notice-5 messages by default. Cisco Content Services Switch Administration Guide 5-32 OL-5647-02...
Page 215: Setting Rmon Alarms
Object ID (OID) Generic Specific Parameters coldStart <sysObjectID> –––––––––––––––––– warmStart <sysObjectID –––––––––––––––––– linkDown <sysObjectID> ifIndex 1.3.6.1.2.1.2.2.1.1 ifOperStatus 1.3.6.1.2.1.2.2.1.8 ifAdminStatus 1.3.6.1.2.1.2.2.1.7 linkUp <sysObjectID> ifIndex 1.3.6.1.2.1.2.2.1.1 ifOperStatus 1.3.6.1.2.1.2.2.1.8 ifAdminStatus 1.3.6.1.2.1.2.2.1.7 authenticationFailure <sysObjectID> –––––––––––––––––– egpNeighborLoss <sysObjectID> –––––––––––––––––– Cisco Content Services Switch Administration Guide 5-33 OL-5647-02...
Page 216 (flowMgrExt.mib) 36.1 1.3.6.1.4.1.9.9.368.1.36.28.1.8 apFlowMgrExtDOSAttackEventInterval Count 1.3.6.1.4.1.9.9.368.1.36.28.1.9 apFlowMgrExtDOSAttackEventCount 1.3.6.1.4.1.9.9.368.1.36.28.1.6 apFlowMgrExtDosSmurfTrap 1.3.6.1.4.1.9.9.368.1. apFlowMgrExtDOSAttackEventString (flowMgrExt.mib) 36.1 1.3.6.1.4.1.9.9.368.1.36.28.1.8 apFlowMgrExtDOSAttackEventInterval Count 1.3.6.1.4.1.9.9.368.1.36.28.1.9 apFlowMgrExtDOSAttackEventCount 1.3.6.1.4.1.9.9.368.1.36.28.1.6 apIpv4RedundancyTrap 1.3.6.1.4.1.9.9.368.1. apIpv4TrapEventText (apIpv4.mib) 9.1.1 1.3.6.1.4.1.9.9.368.1.9.34.0 apIpv4RedundancyState 1.3.6.1.4.1.9.9.368.1.9.19.0 apIpv4RedundancyIf 1.3.6.1.4.1.9.9.368.1.9.20.0 apIpv4RedundancyMaster 1.3.6.1.4.1.9.9.368.1.9.21.0 Cisco Content Services Switch Administration Guide 5-34 OL-5647-02...
Page 217 11.1 1.3.6.1.4.1.9.9.368.1.11.3.0 apChassisMgrExtPsTrap 1.3.6.1.4.1.9.9.368.1. apChassisMgrExtTrapPsEventText (chassisMgrExt.mib) 34.1 1.3.6.1.4.1.9.9.368.1.34.24.0 apChassisMgrModuleTrap 1.3.6.1.4.1.9.9.368.1. apChassisMgrExtTrapModuleEventText (chassisMgrExt.mib) 34.1 1.3.6.1.4.1.9.9.368.1.34.25.0 apEnetISCLifetickTrap 1.3.6.1.4.1.9.9.368.1. apEnetISCLifetickEventText (enetExt.mib) 39.1 1.3.6.1.4.1.9.9.368.1.39.8.0 apEnetISCStateTransition 1.3.6.1.4.1.9.9.368.1. apEnetISCEventText (enetExt.mib) 39.1 1.3.6.1.4.1.9.9.368.1.39.13.0 apEnetISCState 1.3.6.1.4.1.9.9.368.1.39.10.0 apEnetISCPortOneFailureReason 1.3.6.1.4.1.9.9.368.1.39.11.0 apEnetISCPortTwoFailureReason 1.3.6.1.4.1.9.9.368.1.39.12.0 Cisco Content Services Switch Administration Guide 5-35 OL-5647-02...
Page 218: Table 5-6 Snmp V2C Traps
1.3.6.1.2.1.2.2.1.8 ifAdminStatus 1.3.6.1.2.1.2.2.1.7 authenticationFailure 1.3.6.1.6.3.1.1.5.5 –––––––––––––––––– egpNeighborLoss 1.3.6.1.6.3.1.1.5.6 –––––––––––––––––– apFlowMgrExtDosSynTrap 1.3.6.1.4.1.9.9.368.1. apFlowMgrExtDOSAttackEventString (flowMgrExt.mib) 36.1.0.1 1.3.6.1.4.1.9.9.368.1.36.28.1.8 apFlowMgrExtDOSAttackEventInterval Count 1.3.6.1.4.1.9.9.368.1.36.28.1.9 apFlowMgrExtDOSAttackEventCount 1.3.6.1.4.1.9.9.368.1.36.28.1.6 apFlowMgrExtDosLandTrap 1.3.6.1.4.1.9.9.368.1. apFlowMgrExtDOSAttackEventString (flowMgrExt.mib) 36.1.0.2 1.3.6.1.4.1.9.9.368.1.36.28.1.8 apFlowMgrExtDOSAttackEventInterval Count 1.3.6.1.4.1.9.9.368.1.36.28.1.9 apFlowMgrExtDOSAttackEventCount 1.3.6.1.4.1.9.9.368.1.36.28.1.6 Cisco Content Services Switch Administration Guide 5-36 OL-5647-02...
Page 219 (apIpv4.mib) 9.1.1.0.1 1.3.6.1.4.1.9.9.368.1.9.34.0 apIpv4RedundancyState 1.3.6.1.4.1.9.9.368.1.9.19.0 apIpv4RedundancyIf 1.3.6.1.4.1.9.9.368.1.9.20.0 apIpv4RedundancyMaster 1.3.6.1.4.1.9.9.368.1.9.21.0 apIpv4RedundancyState 1.3.6.1.4.1.9.9.368.1. apIpv4RedundancyEventText Transition 9.8.1.0.1 1.3.6.1.4.1.9.9.368.1.9.8.9.0 (apIpv4Redundancy.mib) apIpv4RedundancyVRIntAddr 1.3.6.1.4.1.9.9.368.1.9.8.2.1.2 apIpv4RedundancyVRID 1.3.6.1.4.1.9.9.368.1.9.8.2.1.1 apIpv4RedundancyVROperState 1.3.6.1.4.1.9.9.368.1.9.8.2.1.13 apIpv4RedundancyVRFailReason 1.3.6.1.4.1.9.9.368.1.9.8.2.1.14 apIpv4RedundancyVRMasterIP 1.3.6.1.4.1.9.9.368.1.9.8.2.1.8 apSnmpExtReloadTrap 1.3.6.1.4.1.9.9.368.1. apSnmpExtTrapEventText (snmpExt.mib) 22.1.0.1 1.3.6.1.4.1.9.9.368.1.22.27.0 Cisco Content Services Switch Administration Guide 5-37 OL-5647-02...
Page 220: Css Mibs
(Object Identifier 1.3.6.1.4.1.9.9.368). The MIBs listed in this table are a representation of the CSS content-specific MIB objects. To find out how you can look up object information, see the “Using the CSS to Look Up MIB Objects” section. Cisco Content Services Switch Administration Guide 5-38 OL-5647-02...
Page 221 (config)# ospf ? Path First (OSPF) protocol (OID 1.3.6.1.4.1.9.9.368.1.9.3.2) apIpv4Redundancy.mib MIB support for IPv4 redundancy (config-ip)# redundancy ? (OID 1.3.6.1.4.1.9.9.368.1.9.8) apIpv4Rip.mib MIB support for the Routing (config-ip)# rip ? Information Protocol (RIP) (OID 1.3.6.1.4.1.9.9.368.1.9.3.1) Cisco Content Services Switch Administration Guide 5-39 OL-5647-02...
Page 222 Content rule Domain Name (config)# dns hotlist ? Service (DNS) statistics (OID 1.3.6.1.4.1.9.9.368.1.41) cntExt.mib Content rule table (config-owner-content)# ? (OID 1.3.6.1.4.1.9.9.368.1.16) cnthotExt.mib Content rule hot list (config-owner-content)# hotlist ? (OID 1.3.6.1.4.1.9.9.368.1.35) Cisco Content Services Switch Administration Guide 5-40 OL-5647-02...
Page 223 Extension Qualifier Lists (EQLs) (config-eql [name])# (OID 1.3.6.1.4.1.9.9.368.1.42) fileExt.mib File extensions to support network –––––––––––––––––– management movement to/from (OID 1.3.6.1.4.1.9.9.368.1.61) the CSS, and to examine and modify the existing file structure Cisco Content Services Switch Administration Guide 5-41 OL-5647-02...
Page 224 Probe Module functionality (OID 1.3.6.1.4.1.9.9.368.1.55) proxDbExt.mib Tiered Proximity Database (PDB) (config)# proximity db ? functionality; contains all (OID 1.3.6.1.4.1.9.9.368.1.54) configuration, statistic, and metric objects publishExt.mib Publisher and subscriber services (config-service)# publisher ? (OID 1.3.6.1.4.1.9.9.368.1.57) Cisco Content Services Switch Administration Guide 5-42 OL-5647-02...
Page 225 (config)# ssl dhparam ? ssllExt.mib MIB support for SSL proxy list (ssl-proxy-list[name])# element ? elements and cipher suite objects (OID 1.3.6.1.4.1.9.9.368.1.64) for the SSL Acceleration Module subscribeExt.mib CSS Enterprise subscriber (config-service)# subscriber ? (OID 1.3.6.1.4.1.9.9.368.1.58) Cisco Content Services Switch Administration Guide 5-43 OL-5647-02...
Page 226: Where To Go Next
Uniform resource locator qualifier (config-urql [name])# ? lists (URQL) (OID 1.3.6.1.4.1.9.9.368.1.49) Where to Go Next Chapter 6, Configuring Remote Monitoring (RMON), describes how to describes how to configure RMON on the CSS. Cisco Content Services Switch Administration Guide 5-44 OL-5647-02...
Page 227: Chapter 6 Configuring Remote Monitoring (Rmon)
This chapter contains the following major sections: RMON Overview • RMON Configuration Considerations • Configuring an RMON Event • Configuring an RMON Alarm • Configuring an RMON History • Viewing RMON Information • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 228: Rmon Overview
Figure 6-1 Supported RMON Functions on the CSS RMON functions on the CSS Ethernet port SNMP variable monitoring monitoring* Alarm Statistics History Event SNMP trap * Requires user configuration Cisco Content Services Switch Administration Guide OL-5647-02...
Page 229: Rmon Configuration Considerations
For more information on the preconfigured histories and adding more history entries, see the “Configuring an RMON History” section. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 230: Configuring An Rmon Event
For a complete description of each feature and all the options associated with the CLI command, see the sections following Table 6-1. For information on configuring an alarm and associating this event to an alarm, see “Configuring an RMON Alarm” section. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 231: Table 6-1 Rmon Event Configuration Quick Start
The following running-configuration example shows the results of entering the commands in Table 6-1. !************************* RMON EVENT ************************* rmon-event 1 community moonbase_alpha description “This event occurs when service connections exceed 100" owner “Boston Tech Lab” type log-and-trap active Cisco Content Services Switch Administration Guide OL-5647-02...
Page 232: Creating An Index For An Rmon Event
This command is available in the RMON alarm, RMON event, RMON history, and global configuration modes. To delete RMON event 1 and its configuration, enter: (config)# no rmon-event 1 Delete Event <1>,[y/n]:y Cisco Content Services Switch Administration Guide OL-5647-02...
Page 233: Setting The Rmon Event Attributes
? For example, to define the SNMP moonbase_alpha community for this event, enter: (config-rmonevent[1])# community moonbase_alpha To reset the community back to public, enter: (config-rmonevent[1])# no community Cisco Content Services Switch Administration Guide OL-5647-02...
Page 234 (for example, CSS disk log file or session). For information on viewing log files, see the “Viewing Events in a Log File” section. To define the event as a log type (default), enter: (config-rmonevent[1])# type log Cisco Content Services Switch Administration Guide OL-5647-02...
Page 235: Activating An Rmon Event
Note the following when activating an RMON event, once an RMON event is activated and you want to make modifications to certain event attributes, you must first suspend the RMON event. Ensure the RMON event is not assigned to an RMON alarm. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 236: Suspending An Rmon Event
When you associate an event to an alarm and an alarm occurs, the event defines the action the CSS takes when an alarm occurs. For more information on events, see the “Configuring an RMON Event” section. Cisco Content Services Switch Administration Guide 6-10 OL-5647-02...
Page 237: Figure 6-2 Example Of Absolute Sampling
This section includes the following topics: RMON Alarm Configuration Quick Start • Creating an Index for an RMON Alarm • Deleting an RMON Alarm Index • Setting the RMON Alarm Attributes • Cisco Content Services Switch Administration Guide 6-11 OL-5647-02...
Page 238: Rmon Alarm Configuration Quick Start
(config-rmonalarm[1])# sample-type absolute Define the startup alarm type. The options are falling, rising (default), or rising-and-falling. (config-rmonalarm[1])# startup-type rising-and-falling Define the rising threshold. Enter an integer from 0 (default) to 4294967295. (config-rmonalarm[1])# rising-threshold 100 Cisco Content Services Switch Administration Guide 6-12 OL-5647-02...
Page 239 The following running-configuration example shows the results of entering the commands in Table 6-2. !************************* RMON ALARM ************************* rmon-alarm 1 owner “Boston Tech Lab” sample-variable apSvcConnections. sample-type absolute startup-type rising-and-falling rising-threshold 100 rising-event 1 falling-threshold 90 falling-event 2 sample-interval 30 active Cisco Content Services Switch Administration Guide 6-13 OL-5647-02...
Page 240: Creating An Index For An Rmon Alarm
Before you can modify attributes for an active RMON alarm, you must deactivate the alarm. Use the suspend command to deactivate the RMON alarm and make attribute changes. For example: (config-rmonalarm[1])# suspend Cisco Content Services Switch Administration Guide 6-14 OL-5647-02...
Page 241: Deleting An Rmon Alarm Index
Define the owner who configured the RMON alarm and is using the resources assigned to the alarm. To define the owner, use the owner “owner_name” command. You must reassign an owner before you can reactivate the RMON alarm. Cisco Content Services Switch Administration Guide 6-15 OL-5647-02...
Page 242 Use the sample-variable mib_object command to specify the sample variable for this RMON alarm. For example, to define the apSvcConnections MIB object for the current number of service connections, enter: (config-rmonalarm[1])# sample-variable apSvcConnections Cisco Content Services Switch Administration Guide 6-16 OL-5647-02...
Page 243 For example, if you want to know when the number of content rule hits increase by 100,000 as compared to its previous sampling, configure the apCntHits MIB object with delta sampling. apCntHits is an ever-increasing count of hits. Cisco Content Services Switch Administration Guide 6-17 OL-5647-02...
Page 244 To associate the threshold to RMON event 1, enter: (config-rmonalarm[1])# rising-event 1 To see a list of RMON events, enter: (config-rmonalarm[1])# rising-event ? To reset the rising event to 0 (no event is generated), enter: (config-rmonalarm[1])# no rising-event Cisco Content Services Switch Administration Guide 6-18 OL-5647-02...
Page 245 To associate the threshold to RMON event 2, enter: (config-rmonalarm[1])# falling-event 2 To see a list of RMON events, enter: (config-rmonalarm[1])# falling-event ? To reset the falling event to 0, enter: (config-rmonalarm[1])# no falling-event Cisco Content Services Switch Administration Guide 6-19 OL-5647-02...
Page 246: Defining A Startup Alarm
With delta sampling, set the sampling interval short enough so the sampled variable, which has a tendency to go up and down very fast, does not wrap during a single sampling period. To reset the sample interval to 300, enter: (config-rmonalarm[1])# no sample-interval Cisco Content Services Switch Administration Guide 6-20 OL-5647-02...
Page 247: Activating An Rmon Alarm
You can view the statistical information for the history by using the show rmon-history command. For more information about viewing the history, see the “Viewing History” section. Cisco Content Services Switch Administration Guide 6-21 OL-5647-02...
Page 248: Rmon History Configuration Quick Start
Define the data source object for the Ethernet port. The port is identified by an ifIndex data object identifier. (config-rmonhistory[5])# data-source ifIndex.3 Define the time interval for the history. Enter a number from 1 to 3600 seconds. The default is 1800 seconds. (config-rmonhistory[5])# interval 60 Cisco Content Services Switch Administration Guide 6-22 OL-5647-02...
Page 249: Creating An Index For An Rmon History
If you enter this index number, a message similar to the following appears: %% Index internally used. Administrative control not allowed. To create an RMON history identifier 5, access global configuration mode and enter: (config)# rmon-history 5 Cisco Content Services Switch Administration Guide 6-23 OL-5647-02...
Page 250: Modifying The Attributes For An Existing Rmon History Index
For example, to delete RMON history 5 and its configuration, enter: (config)# no rmon-history 5 Delete History <5>,[y/n]:y After you delete the history identifier to change its attributes, recreate it as described in the “Creating an Index for an RMON History” section. Cisco Content Services Switch Administration Guide 6-24 OL-5647-02...
Page 251: Setting The Rmon History Attributes
Use the owner owner_name command to define the owner. The owner_name variable is a quoted text string with a maximum of 32 characters. For example, to define an owner named Boston Tech Lab, enter: (config-rmonhistory[5])# owner “Boston Tech Lab” Cisco Content Services Switch Administration Guide 6-25 OL-5647-02...
Page 252: Activating An Rmon History Entry
The only way to change the history is to delete it, and then recreate it. Before activating this command, you must specify the owner of the RMON history entry. To activate the history, enter: (config-rmonhistory[5])# active Cisco Content Services Switch Administration Guide 6-26 OL-5647-02...
Page 253: Viewing Rmon Information
Gigabit Ethernet ports. You can view RMON statistics either in a CSS CLI session through the show rmon command, the show ether-errors command (refer to the Cisco Content Services Switch Routing and Bridging Configuration Guide), or directly through an SNMP network management station by using ether-stats MIB objects (refer to RFC 1398).
Page 254: Table 6-4 Field Descriptions For The Show Rmon Command
Alignment Error, a bad FCS with a non-integral number of octets. Oversize Packets The total number of received packets that were longer than 1518 octets (excluding framing bits, but including FCS octets) and were otherwise well formed. Cisco Content Services Switch Administration Guide 6-28 OL-5647-02...
Page 255 IEEE-802.3, section 8.2.1.5, 10BASE5, and section 10.3.1.4, 10BASE2. These documents define jabber as the condition where any packet exceeds 20 ms. The allowed range to detect jabber is between 20 and 150 ms. Cisco Content Services Switch Administration Guide 6-29 OL-5647-02...
Page 256 Packets (128-255) octets): Packets (256-511) 0 to 64 • Packets • 65 to 127 (512-1023) 128 to 255 • Packets 256 to 511 • (1024-1518) 512 to 1023 • 1024 to 1518 • Cisco Content Services Switch Administration Guide 6-30 OL-5647-02...
Page 257: Clearing Rmon Statistics
# show rmon-history To display the RMON history for a specified port, enter: • # show rmon-history port_name To see a list of ports in the CSS, enter: # show rmon-history ? Cisco Content Services Switch Administration Guide 6-31 OL-5647-02...
Page 258: Table 6-5 Field Descriptions For The Show Rmon-History Command
The time interval, in seconds, when RMON takes a bucket sample. Buckets The number of discrete sampling intervals over which data is saved for the history. Time The time that the sample was taken. Sample The number of the sample. Cisco Content Services Switch Administration Guide 6-32 OL-5647-02...
Page 259: Viewing Events In A Log File
The notification itself displays the time that the event occurred, the event number, and its configured description in parentheses. For example: FEB 15 15:41:22 EVENT#4 FIRED: (Service Toys exceeded 30,000 connections). Cisco Content Services Switch Administration Guide 6-33 OL-5647-02...
Page 260: Viewing A Traplog File
CSS. To view the events in a log file on the CSS disk, use the show log log_filename command. To view a log file named log1, enter: # show log log1 Cisco Content Services Switch Administration Guide 6-34 OL-5647-02...
Page 261: Chapter 7 Using An Xml Document To Configure The Css
• Allowing the Transfer of XML Configuration Files on the CSS • Parsing the XML Code • Publishing the XML Code to the CSS • Testing the Output of the XML Code • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 262: Creating Xml Code
. In this case, the command request may be rejected or the = My@#Service> special characters may be discarded. You must enclose the special characters within an <action></action> tag set, as described above. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 263 XML file that fails to execute properly. For overview information on the CLI commands you can use in global Note configuration mode and its subordinate modes, refer to the Cisco Content Services Switch Command Reference, Chapter 2, “CLI Commands.” Cisco Content Services Switch Administration Guide...
Page 264: Xml Document Example
<ip_address>10.0.3.1</ip_address> <action>active</action> </service> <service name=”sname2”> <ip_address>10.0.3.2</ip_address> <weight>4</weight> <action>active</action> </service> <service name=”sname3”> <ip_address>10.0.3.3</ip_address> <weight>5</weight> <protocol>udp</protocol> <action>suspend</action> </service> <service name=”nick”> <ip_address>10.0.3.93</ip_address> <action>active</action> </service> <owner name=”test”> <content name=”rule”> <vip_address>10.0.3.100</vip_address> <protocol>udp</protocol> <port>8080</port> <add_service>nick</add_service> <action>active</action> </content> </owner> </config> Cisco Content Services Switch Administration Guide OL-5647-02...
Page 265: Allowing The Transfer Of Xml Configuration Files On The Css
The CSS listens on port 80 for an unsecure connection request. To reset the default behavior to deny the transfer of XML configuration files through an unsecure connection, use the global configuration restrict xml command. For example, enter: (config)# restrict xml Cisco Content Services Switch Administration Guide OL-5647-02...
Page 266: Parsing The Xml Code
When you configure TACACS+ on a CSS, the CSS does not authorize scripts Note through the TACACS+ server. Because the CSS transforms all XML commands into scripts, the CSS also does not authorize XML commands through the TACACS+ server. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 267: Testing The Output Of The Xml Code
XML changes have properly occurred. If the XML changes are incorrect or missing, republish the XML code to the CSS as described in the “Publishing the XML Code to the CSS” section. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 268 Chapter 7 Using an XML Document to Configure the CSS Testing the Output of the XML Code Cisco Content Services Switch Administration Guide OL-5647-02...
Page 269: Chapter 8 Using The Css Scripting Language
The Scripting Language is especially useful for writing scripts used by script keepalives for your specific service requirements. For details on script keepalives, refer to the Cisco Content Services Switch Content Load-Balancing Configuration Guide. Commands shown in the script examples are bolded for clarity.
Page 270: Chapter 8 Using The Cs Scripting Language
SuperUser mode. You can also use this command to pass parameter values to a script. For example, enter: # script play MyScript “Argument1 Argument2” You can display a list of available scripts using the show script command. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 271: Using The Command Scheduler
- The month of the year. Enter an integer from 1 to 12. • weekday - The day of the week. Enter an integer from 1 to 7. Sunday is 1. • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 272 (config)# cmd-sched record periodic_shows 30 21 3 6 1 “show history;show service;show rule;show system-resources” To enable command scheduling, enter: (config)# cmd-sched To disable command scheduling, enter: (config)# no cmd-sched To delete a configuration record, enter: (config)# no cmd-sched periodic_shows Cisco Content Services Switch Administration Guide OL-5647-02...
Page 273: Showing Configured Command Scheduler Records
The configured month of the year to execute the command. WeekdayList The configured day of the week to execute the command. Sunday is 1. The commands you want to execute. Separate multiple commands with a ; (semicolon) character. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 274: Using The Echo Command
Any characters are allowed after a comment symbol, but the entire line must be a comment. In the third line, the script will execute a show variables command because it does not start with an exclamation mark. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 275: Using The "! No Echo" Comment
(“Hello”) to the screen, followed by the output (Hello) of the command. This is usually not a desired result, so you typically start most scripts with the !no echo command as the first line. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 276: Using Variables
0, which is a value. You can set the variable so that it can be used across all CLI sessions. For example, enter: set MyVar “1” session Saving a variable marked with the session keyword to your user profile allows you to use the variable across CLI sessions. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 277: Variable Types
(any printable ASCII character). Anything that is not an integer is a character. A variable that is defined as “3.14” is a character because the CLI does not consider a period (.) to be a number. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 278: Removing Variables
You can also issue a set command on the same variable multiple times without using the no set command in between set commands. Example 1: set MyVar “1” no set MyVar set MyVar “2” Example 2: set MyVar “1” set MyVar “2” Cisco Content Services Switch Administration Guide 8-10 OL-5647-02...
Page 279: Using Arithmetic Operators
The following sections describe additional operations you can perform on variables using the modify command. For more information on the modify command, refer to the Cisco Content Services Switch Command Reference. Cisco Content Services Switch Administration Guide 8-11...
Page 280: Using The Increment And Decrement Operators
MyVar “+” 1 With: modify MyVar “++” Both the increment and the decrement operators work only with integer variables. Note If you use them with character variables, such as “CSS11506”, an error occurs. Cisco Content Services Switch Administration Guide 8-12 OL-5647-02...
Page 281: Using Logical And Relational Operators And Branch Commands
LT - Less than • == - Equal to • NEQ - Not equal to • LTEQ - Less than or equal to • GTEQ - Greater than or equal to • Cisco Content Services Switch Administration Guide 8-13 OL-5647-02...
Page 282: Using The If Branch Command
“12” does not satisfy this requirement. You can also test a variable for a NULL value. For example, enter: if MyVar echo “MyVar is equal to ${MyVar}” endbranch Cisco Content Services Switch Administration Guide 8-14 OL-5647-02...
Page 283: Using The While Branch Command
“While Counter is not equal to 5". The expression produces a false result, which causes the loop to terminate. As with the if command, an endbranch command terminates a while command logical block. Cisco Content Services Switch Administration Guide 8-15 OL-5647-02...
Page 284: Special Variables
For example, enter: ! Spell echo incorrectly eco “This will not print” Cisco Content Services Switch Administration Guide 8-16 OL-5647-02...
Page 285 Remember, setting this variable to a value of 0 does not disable it. To disable the variable’s functionality, you must unset it. Cisco Content Services Switch Administration Guide 8-17 OL-5647-02...
Page 286: Status Variable
When writing scripts, keep in mind that the value of the STATUS variable changes Note as each command executes. If you intend to use a STATUS value later in a script, you should save the value of the STATUS variable in another variable. Cisco Content Services Switch Administration Guide 8-18 OL-5647-02...
Page 287: Exit_Msg Variable
In this case, the script performs a no set EXIT_MSG command. This allows the script to terminate normally without printing an exit message to the screen, which would be inappropriate because no error occurred. Cisco Content Services Switch Administration Guide 8-19 OL-5647-02...
Page 288: Socket Variable
${SOCKET} “GET /index.html\n\n” no set EXIT_MSG set EXIT_MSG “Waitfor: Failed” socket waitfor ${OLD_SOCKET} “200 OK” socket waitfor ${SOCKET} “200 OK” ! Finished, cleanup no set EXIT_MSG socket disconnect ${OLD_SOCKET} socket disconnect ${SOCKET} Cisco Content Services Switch Administration Guide 8-20 OL-5647-02...
Page 289: Using The Show Variable Command
You should exercise caution when using this variable. Syntax errors are ignored when it is set. You should set this variable in the script where you expect a command to fail and then disable it with the no set command. Cisco Content Services Switch Administration Guide 8-21 OL-5647-02...
Page 290: Using Arrays
You can print the array like any other variable. For example, enter: echo “Days of the week: ${WeekDays}.” The output is: Days of the week: Sun Mon Tues Wed Thurs Fri Sat. Cisco Content Services Switch Administration Guide 8-22 OL-5647-02...
Page 291: Element Numbers
For example, if you want to know how many days are in a week, enter: set WeekDays “Sun Mon Tues Wed Thurs Fri Sat” echo “There are ${WeekDays}[#] days in a week.” The output is: There are 7 days in a week. Cisco Content Services Switch Administration Guide 8-23 OL-5647-02...
Page 292: Using Var-Shift To Obtain Array Elements
WeekDays “Sun Mon Tues Wed Thurs Fri Sat” while ${WeekDays}[#] “GT” “0” ! Push the 1st element out of the array and shift all ! elements up one position. echo “Day: ${WeekDays}” var-shift WeekDays endbranch Cisco Content Services Switch Administration Guide 8-24 OL-5647-02...
Page 293 Temp By using the Temp variable, you leave the original variable untouched. If you decide you no longer need the Temp variable, remove it from memory with the no set command. Cisco Content Services Switch Administration Guide 8-25 OL-5647-02...
Page 294: Capturing User Input
In the echo command quoted string, you can embed “\n”, a C-programming style character that puts a line feed in the output to make it more readable. Cisco Content Services Switch Administration Guide 8-26 OL-5647-02...
Page 295: Using Command Line Arguments
Finally, the script prints the user’s first name and last name to the screen. For example, to play NameScript, enter: script play NameScript “John Doe” The output is: First Name: John Last Name: Doe Cisco Content Services Switch Administration Guide 8-27 OL-5647-02...
Page 296: Using Functions
“Calling the PrintName function” function PrintName call “John Doe” echo “End” ! Function PrintName: Prints the name John Doe function PrintName begin echo “My Name is ${ARGS}” function PrintName end The output is: Cisco Content Services Switch Administration Guide 8-28 OL-5647-02...
Page 297 Although you use the ARGS variable twice in this script, ARGS had two different values because the function call held its own ARGS variable value independently of the main script’s ARGS variable value. Now you can modularize your scripts for easier reading and maintenance. Cisco Content Services Switch Administration Guide 8-29 OL-5647-02...
Page 298: Using The Script_Play Function
Notice that the fourth bit is common between the values 13 and 10, so the resulting value contains only the common bits. To script this, do the following: set VALUE “13” modify VALUE “BAND” “10” echo “Value is ${VALUE}” The output is: Value is 8 Cisco Content Services Switch Administration Guide 8-30 OL-5647-02...
Page 299: Syntax Errors And Script Termination
For example, if you play a script that issues a socket connect command and the host refuses the connection or there is a host name resolution failure, the script terminates with a syntax error. Cisco Content Services Switch Administration Guide 8-31 OL-5647-02...
Page 300: Script Exit Codes
(success) and non-zero (failure). To ensure a successful exit code, use the exit script command with a value of zero (the default). The integer value is optional with this command. Cisco Content Services Switch Administration Guide 8-32 OL-5647-02...
Page 301 Because the script contains an exit script command with a value of 1, the first echo command returns a STATUS value of 1 to indicate that the script failed. The second echo command returns a STATUS value of 0 because the first echo command executed successfully. Cisco Content Services Switch Administration Guide 8-33 OL-5647-02...
Page 302: Exiting A Script Within Another Script
!no echo show service S1 | grep -u “Keepalive” echo “The first element in the line is: ${UGREP}[1]” The output is: The first element in the line is: Keepalive: Cisco Content Services Switch Administration Guide 8-34 OL-5647-02...
Page 303: Specifying Line Numbers For Search Results
The grep command returns just the opposite. If it finds 14 matches, then the STATUS variable is set to 14. If it finds no matches, then the STATUS variable is set to 0. Cisco Content Services Switch Administration Guide 8-35 OL-5647-02...
Page 304: Using Socket Commands
The syntax for this command is: socket connect host ip_address port number [tcp {timeout} {session} {nowait}|udp {session}] The software can open a maximum of 64 sockets simultaneously across all scripts Note on a CSS. Cisco Content Services Switch Administration Guide 8-36 OL-5647-02...
Page 305: Socket Send
“string” {raw | base64} socket_number - Socket file descriptor (integer form). This descriptor is • returned from the socket connect command. string - Quoted text string with a maximum of 128 characters. • Cisco Content Services Switch Administration Guide 8-37 OL-5647-02...
Page 306: Socket Receive
- The optional keyword that causes the software to interpret the string values as hexadecimal bytes rather than as a simple string. For example, the software converts “0D0A” to “0x0D 0x0A” (carriage return, line feed). Cisco Content Services Switch Administration Guide 8-38 OL-5647-02...
Page 307: Socket Waitfor
- The optional keyword that causes the software to interpret the string • values as hexadecimal bytes rather than as a simple string. For example, the software converts “0D0A” to “0x0D 0x0A” (carriage return, line feed). Cisco Content Services Switch Administration Guide 8-39 OL-5647-02...
Page 308: Socket Inspect
CSS is finished sending data, use the socket disconnect command. The syntax for this command is: socket disconnect socket_number {graceful} socket_number - Socket file descriptor (integer form). This descriptor is • returned by the socket connect command. Cisco Content Services Switch Administration Guide 8-40 OL-5647-02...
Page 309: Socket Administration
This cleanup occurs only after you attempt another transfer on a socket that the remote host has already closed. Otherwise, the socket remains idle. Cisco Content Services Switch Administration Guide 8-41 OL-5647-02...
Page 310: Displaying Scripts
For example, to display a list of all scripts in the CSS script directory, enter: # show script To display the text of the ap-kal-dns keepalive script, including line numbers, enter: # show script ap-kal-dns line-numbers Cisco Content Services Switch Administration Guide 8-42 OL-5647-02...
Page 311: Script Upgrade Considerations
Software. Using the showtech Script To gather information designed to assist the Cisco Technical Assistance Center (TAC) in analyzing your CSS, use the showtech script. The output of the script displays a set of CSS status and configurations settings that the TAC can use for problem resolution.
Page 312 200 exit terminal more set CONTINUE_ON_ERROR “0” exit script 0 Cisco Content Services Switch Administration Guide 8-44 OL-5647-02...
Page 313: Script Keepalive Examples
! The close will be a FIN rather than a RST. If one of the ports fails ! the service will be declared down ! Failure Upon: ! Not establishing a connection with the host on one of the specified ! ports. Cisco Content Services Switch Administration Guide 8-45 OL-5647-02...
Page 314 EXIT_MSG “Connect: Failed to connect to ${SERVICE}:${TCP-PORT}” exit script 1 endbranch endbranch no set EXIT_MSG exit script 0 function SOCKET_CONNECT begin set CONTINUE_ON_ERROR “1” socket connect host ${SERVICE} port ${TCP-PORT} tcp 2000 Cisco Content Services Switch Administration Guide 8-46 OL-5647-02...
Page 315: Default Script Keepalives
Pinglist Keepalive • Finger Keepalive • Time Keepalive • Setcookie Keepalive • HTTP Authentication Keepalive • DNS Keepalive • • Echo Keepalive HTTP Host Tag Keepalive • Mailhost Keepalive • LDAP Keepalive • Cisco Content Services Switch Administration Guide 8-47 OL-5647-02...
Page 316: Smtp Keepalive
! Wait for status code “250” to be returned socket waitfor ${SOCKET} “250” 200 ! We've successfully logged in, the server is up and running. ! The job was done successfully. socket disconnect ${SOCKET} no set EXIT_MSG exit script 0 Cisco Content Services Switch Administration Guide 8-48 OL-5647-02...
Page 317: Netbios Name Query (Microsoft Networking)
! This value will be sent in RAW Hex set EXIT_MSG “Send: Failure” socket send ${SOCKET} 810000442045454550454d454d464a4341434143414341434143414341434143414341 434100” raw ! Wait for a response code of 0x83 set EXIT_MSG “Waitfor: Failure” socket waitfor ${SOCKET} “83” raw Cisco Content Services Switch Administration Guide 8-49 OL-5647-02...
Page 318: Http List Keepalive
EXIT_MSG “Parameter mismatch: hostname present but webpage was not” exit script 1 endbranch set Page “${ARGS}[1]” var-shift ARGS no set EXIT_MSG function HeadUrl call “${Site} ${Page}” endbranch exit script 0 function HeadUrl begin Cisco Content Services Switch Administration Guide 8-50 OL-5647-02...
Page 319: Pop3 Keepalive
! Defines: set HostName “${ARGS}[1]” set UserName “${ARGS}[2]” set Password “${ARGS}[3]” set EXIT_MSG “Connection Failed” ! Connect to the remote host (use default timeout) socket connect host ${HostName} port 110 tcp Cisco Content Services Switch Administration Guide 8-51 OL-5647-02...
Page 320: Imap4 Keepalive
1. Not establishing a connection with the host. 2. Not being able to log in with supplied username/password. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! if ${ARGS}[#] “NEQ” “3” echo “Usage: ap-kal-imap4 \'Hostname UserName Password\'” exit script 1 Cisco Content Services Switch Administration Guide 8-52 OL-5647-02...
Page 321 ${SOCKET} “a2 OK” 200 ! We've successfully logged in, the server is up and going. ! The job was done successfully. socket disconnect ${SOCKET} no set EXIT_MSG exit script 0 Cisco Content Services Switch Administration Guide 8-53 OL-5647-02...
Page 322: Pinglist Keepalive
${ARGS}[1] | grep -u Success if STATUS “NEQ” “0” show variable UGREP | grep 100 if STATUS “==” “0” set EXIT_MSG “Ping: Failure to ping ${ARGS}[1]” exit script 1 endbranch endbranch function PingHost end Cisco Content Services Switch Administration Guide 8-54 OL-5647-02...
Page 323: Finger Keepalive
! Wait for data for 100ms (default) socket waitfor ${SOCKET} “${UserName}” no set EXIT_MSG ! If the data came in, then we are good to quit socket disconnect ${SOCKET} no set EXIT_MSG exit script 0 Cisco Content Services Switch Administration Guide 8-55 OL-5647-02...
Page 324: Time Keepalive
! waitfor any data for 2000ms socket waitfor ${SOCKET} anything 2000 ! If the data came in, then we are good to quit socket disconnect ${SOCKET} no set EXIT_MSG exit script 0 Cisco Content Services Switch Administration Guide 8-56 OL-5647-02...
Page 325: Setcookie Keepalive
! send our request to the host set EXIT_MSG “Send: Failure” socket send ${SOCKET} “GET ${WebPage} HTTP/1.0\n\n” ! Wait for the cookie to come in set EXIT_MSG “Waitfor: Failure” socket waitfor ${SOCKET} “${CookieData}” Cisco Content Services Switch Administration Guide 8-57 OL-5647-02...
Page 326: Http Authentication Keepalive
1 endbranch ! Defines: set HostName “${ARGS}[1]” set WebPage “${ARGS}[2]” set UserPass “${ARGS}[3]” ! Connect to the remote Host set EXIT_MSG “Connection Failure” socket connect host ${HostName} port 80 tcp Cisco Content Services Switch Administration Guide 8-58 OL-5647-02...
Page 327: Dns Keepalive
${ARGS}[#] “NEQ” “1” echo “Usage: ap-kal-finger \'Hostname\'” exit script 1 endbranch set HostName “${ARGS}[1] ! Connect to the remote host set EXIT_MSG “Connection failed” socket connect host ${HostName} port 53 udp Cisco Content Services Switch Administration Guide 8-59 OL-5647-02...
Page 328: Echo Keepalive
! Parameters: HostName [ udp | tcp ] ! Description: This script will send a TCP or UDP echo (depending on what the user has passed to us) that will echo “Hello Cisco” to the remote host, and expect it to come back. The default protocol is TCP.
Page 329: Http Host Tag Keepalive
${SOCKET} “Hello Cisco!\n” set EXIT_MSG “Waitfor: Failed” ! Wait for the reply from the echo (should be the same) socket waitfor ${SOCKET} “Hello Cisco!” 200 ! We've successfully logged in, the server is up and going. ! The job was done successfully.
Page 330: Mailhost Keepalive
2. Not establishing a connection with the host running a POP3 service. 3. Failure to get a good status code after saying 'hello' to SMTP. 4. Failure to login using POP3. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Cisco Content Services Switch Administration Guide 8-62 OL-5647-02...
Page 331 EXIT_MSG “Waitfor: Failed” ! Wait for the OK welcome message for 200ms socket waitfor ${SOCKET} “+OK” 200 set EXIT_MSG “Send: Failed” ! Send the username to the host socket send ${SOCKET} “USER ${UserName}\n” Cisco Content Services Switch Administration Guide 8-63 OL-5647-02...
Page 332: Ldap Keepalive
! Make sure the user has a qualified number of arguments if ${ARGS}[#] “NEQ” “1” echo “Usage: ap-kal-ldap \'Hostname\'” exit script 1 endbranch ! Defines: set HostName “${ARGS}[1]” set EXIT_MSG “Connection Failed” Cisco Content Services Switch Administration Guide 8-64 OL-5647-02...
Page 333 ! Send an exit “Unbind Request” to the remote host so that they ! are not left hanging. socket send ${SOCKET} “30050201034200” raw no set EXIT_MSG socket disconnect ${SOCKET} exit script 0 Cisco Content Services Switch Administration Guide 8-65 OL-5647-02...
Page 334 Chapter 8 Using the CSS Scripting Language Script Keepalive Examples Cisco Content Services Switch Administration Guide 8-66 OL-5647-02...
Page 335: Appendix
If the CSS does not update a command syntax change in a startup-config file automatically, a startup error is displayed. Refer to the Release Note for the Cisco Series Content Services Switch for information on which command syntax changes display startup-config file errors.
Page 336: Appendix A Upgrading Your Cs Software
Copying the New CSS Software ArrowPoint Distribution Images (ADIs) of the CSS software versions are located on the Cisco Systems website (www.cisco.com). Use your customer login and password to access this page. From this location, access the page listing the versions of GZIP-compressed software, then click an image to download it.
Page 337 64 characters. base_directory - (Optional) Base directory when using this record. • For example: (config)# ftp-record DEFAULT_FTP 192.168.2.01 eng1 des-password serve You can now upgrade your CSS. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 338: Upgrading Your Css Software
Unpacking the new ADI. • Copying the scripts and user profiles from the older CSS software to the new • software. The copied scripts do not include Cisco-supplied scripts except default-profile. Setting the primary boot file to the new ADI. •...
Page 339: Using The Upgrade Script
Archives the running configuration to the startup configuration. • Copies the new ADI to the CSS boot-image directory. • Unpacks the new ADI. • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 340 For example, enter: # save_profile Rename any Cisco-supplied scripts that you changed. The upgrade script does not overwrite the Cisco-supplied scripts in the script directory of the new software image with the changed versions of the scripts, except the default-profile script.
Page 341 Error: Copy of script_name failed! Script copy failed, upgrade aborted! If an old script has the same name as a Cisco-supplied script but its contents differ, the following message appears: script_name differs between images Cisco Content Services Switch Administration Guide...
Page 342 Upgrading Your CSS Software Upgrading Your CSS Software The upgrade script does not overwrite the Cisco-supplied scripts in the script directory of the new software image with the older versions of the scripts, except the default-profile script. If the upgrade script detects an older version of the default-profile script, the script renames the newer default-profile script as default-profile.new and then copies the older version of the...
Page 343: Interactively Using The Upgrade Script
Cisco-supplied scripts in the script directory of the new software image with the changed versions of the scripts, except the default-profile script. If an old script has the same name as a Cisco-supplied script but its contents differ, the following message appears: script_name differs between images...
Page 344 Enter y to remove the displayed ADI version. • Enter n for the script to display another version to remove. • Enter q to exit from the script. • remove sg0720003 [y n q]? y Attempting to delete sg0720003 Cisco Content Services Switch Administration Guide A-10 OL-5647-02...
Page 345 The upgrade script copies the ADI from the FTP server, then unpacks and installs it. Attempting ftp of sg0740002.adi.gz: copy ftp DEFAULT_FTP ${new_version_adi} boot-image Copying (-) 57,241,012 Completed successfully. (config-boot)# unpack ${new_version_adi} Cisco Content Services Switch Administration Guide A-11 OL-5647-02...
Page 346 Error: Copy of script_name failed! Script copy failed, upgrade aborted! If an old script has the same name as a Cisco-supplied script but its contents differ, the following message appears: script_name differs between images The upgrade script does not overwrite the Cisco-supplied scripts in the script directory of the new software image with the older versions of the scripts, except the default-profile script.
Page 347: Manually Upgrading The Css Software
Remove an older version of the ADI from the CSS if there are two installed versions. Caution Do not remove the ADI currently running on the CSS. Use the version command to see the currently running software version. Cisco Content Services Switch Administration Guide A-13 OL-5647-02...
Page 348 Archive your custom scripts and user-profile files from the CSS scripts directory to the archive directory. Since the upgrade process installs the Cisco-supplied scripts with the new software but does not overwrite the files in the archive directory, archiving your custom script and user-profile files allows you to save them for use with the new software.
Page 349 Set the new ADI as the primary boot file and install it. For example: (config-boot)# primary boot-file sg0730003 Reboot the system. (config)# boot (config-boot)# reboot The CSS automatically performs a Flash upgrade, if necessary, and then boots the new image. Cisco Content Services Switch Administration Guide A-15 OL-5647-02...
Page 350: Updating Mibs
Unload the MIBs from the management application. Load the MIBs into the management application. Refer to Chapter 5, Configuring Simple Network Management Protocol (SNMP), for information on CSS Enterprise MIBs. Cisco Content Services Switch Administration Guide A-16 OL-5647-02...
Page 351: Appendix
Set a password for the Offline DM Main menu – Set an administrative username and password – Reformat the disk and perform a check disk – Configure disks – Reboot the CSS • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 352: Appendix B Using The Offline Diagnostic Monitor Menu
Enter a menu number: 1* Set Boot Configuration 2. Show Boot Configuration 3* Advanced Options 4. Reboot System An asterisk (*) next to a menu option indicates that the option contains a submenu. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 353: Table B-1 Offline Diagnostic Monitor Menu Options
Reboot the CSS. The CSS displays the following message before rebooting: Are you sure you want to reboot? (Y/N) Enter: Y to reboot the CSS • N to continue using the Offline DM Main menu • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 354: Figure B-1 Boot Configuration Flowchart
CSS Begins Boot Process Is Primary Boot Record Configured? Attempt Primary Boot Record Primary Boot Done Succeed? Is Secondary Boot No configuration Record Configured? Attempt Secondary Boot Record Boot Secondary Boot Done Failed Succeed? Cisco Content Services Switch Administration Guide OL-5647-02...
Page 355: Table B-2 Boot Configuration Options
The default location is Clear. 3. Set IP Address and Configures an IP address for the Ethernet management Subnet Mask port and configure a subnet mask. r. Return to previous Displays the Offline DM main menu. menu Cisco Content Services Switch Administration Guide OL-5647-02...
Page 356: Setting Primary Boot Configuration
Specifying a Network-Mounted File System as the Primary Boot Record • Specifying FTP as the Primary Boot Record • Specifying Disk as the Primary Boot Record • Specifying Clear as the Primary Boot Record • Cisco Content Services Switch Administration Guide OL-5647-02...
Page 357 • software. Make sure the CSS can access the system using FTP. – Copy the CSS software .zip file from www.cisco.com onto the designated – network server. Create a directory and unzip the file into it. This directory will contain –...
Page 358 FTP server IP address, login username, and password. For example: Enter the FTP Config Path? [] k:/atlanta-config/ Press <Enter> to continue... Press Enter to display the Boot Configuration menu. Enter r to display the Offline DM Main menu. Cisco Content Services Switch Administration Guide OL-5647-02...
Page 359 The CSS queries if you want to access the boot image directly from the disk at the next reboot (that is, the next time you reboot the CSS after completing the current boot process). Boot from Disk at next reboot? y/n Press <Enter> to continue... Cisco Content Services Switch Administration Guide OL-5647-02...
Page 360 To use the secondary boot record information instead of the primary boot record to boot the CSS: Select Clear as the primary boot record. Press Enter to display the Boot Configuration menu. Cisco Content Services Switch Administration Guide B-10 OL-5647-02...
Page 361: Setting Secondary Boot Configuration
Specifying a Network-Mounted File System as the Secondary Boot Record • Specifying FTP as the Secondary Boot Record • Specifying Disk as the Secondary Boot Record • Specifying Clear as the Secondary Boot Record • Cisco Content Services Switch Administration Guide B-11 OL-5647-02...
Page 362 • software. Make sure the CSS can access the system using FTP. – Copy the CSS software .zip file from www.cisco.com onto the designated – network server. Create a directory and unzip the file into it. This directory will contain –...
Page 363 Enter the FTP Config Path? [] k:/atlanta-config/ Press <Enter> to continue... Press Enter to display the Boot Configuration menu. Enter r to display the Offline DM Main menu. Select option 4 to reboot the CSS. Cisco Content Services Switch Administration Guide B-13 OL-5647-02...
Page 364 FTP the boot image from the FTP server at next reboot. • Press Enter to display the Boot Configuration menu. Press <Enter> to continue... Enter r to display the Offline DM Main menu. Cisco Content Services Switch Administration Guide B-14 OL-5647-02...
Page 365 Press Enter to display the Boot Configuration menu. Enter r to display the Offline DM Main menu. Select option 4 to reboot the CSS. Upon reboot, the CSS uses the primary boot record. Cisco Content Services Switch Administration Guide B-15 OL-5647-02...
Page 366: Setting Ip Address, Subnet Mask, And Default Gateway
Enter Default Gateway: 172.16.11.1 Press Enter to display the Boot Configuration menu. Press <Enter> to continue... Enter r to display the Offline DM Main menu. Select option 4 to reboot the CSS. Cisco Content Services Switch Administration Guide B-16 OL-5647-02...
Page 367: Displaying The Boot Configuration
O P T I O N S Enter the number of a menu selection: 1. Delete a Software Version 2* Security Options 3* Disk Options 4. Set MSD Mapping r. Return to previous menu Cisco Content Services Switch Administration Guide B-17 OL-5647-02...
Page 368: Deleting A Software Version
Setting Password Protection The CSS allows you to password-protect the Offline DM Main menu against unauthorized access. The default is disabled; no password is required to access the Offline DM Main menu. Cisco Content Services Switch Administration Guide B-18 OL-5647-02...
Page 369 If you lose the new password, it cannot be recovered and you cannot access the Offline DM Main menu. At that point, the only solution would be to contact the Cisco Technical Assistance Center (TAC). Refer to the “Obtaining Technical Assistance”...
Page 370 Enter r to return to the Advanced Options menu. Enter r to return to the Offline DM Main menu. Enter 4 to reboot the CSS, or select another option to continue using the Offline DM Main menu. Cisco Content Services Switch Administration Guide B-20 OL-5647-02...
Page 371: Using The Disk Options
Select option 1 from the Disk Options menu. If the CSS contains two disks, you see the following prompt: Format volume in which PCMCIA slot? (0,1): Enter 0 (for slot 0) or 1 (for slot 1). Cisco Content Services Switch Administration Guide B-21 OL-5647-02...
Page 372 If you do not set the primary boot configuration before booting the CSS, the boot process halts at the prompt: Would you like to access the Offline Diagnostic Monitor menu?(y<cr>) You must enter the Offline DM Main menu to set the primary boot configuration. Cisco Content Services Switch Administration Guide B-22 OL-5647-02...
Page 373 CSS disk after using the Format Disk option, contact TAC. To perform a disk check: Select option 2 from the Disk Options menu. The CSS prompts you about correcting errors if discovered. Correct errors if discovered (yes,no): Cisco Content Services Switch Administration Guide B-23 OL-5647-02...
Page 374 - Volume is OK (\) Press <Enter> to continue... Enter r to return to the Advanced Options menu. Enter r to return to the Offline DM Main menu. Select option 4 to reboot the CSS. Cisco Content Services Switch Administration Guide B-24 OL-5647-02...
Page 375 If check disk is currently disabled, to reenable it: Select option 3 from the Disk Options menu. Enter r to return to the Advanced Options menu. Enter r to return to the Offline DM Main menu. Cisco Content Services Switch Administration Guide B-25 OL-5647-02...
Page 376: Configuring Disks In A Two-Disk Css
Enter either 0 for the disk in slot 0 (the default setting) or 1 for the disk in slot 1. The CSS prompts you to specify the disk for the secondary boot record. Set Secondary-Boot to which PCMCIA slot? (0,1): Cisco Content Services Switch Administration Guide B-26 OL-5647-02...
Page 377: Rebooting The Css
Set Core to which PCMCIA slot? (0,1): Enter either 0 for the disk in slot 0 or 1 for the disk in slot 1. Core dump information is intended for Cisco Technical Assistance Center Note (TAC) use only.
Page 378 Appendix B Using the Offline Diagnostic Monitor Menu Rebooting the CSS Cisco Content Services Switch Administration Guide B-28 OL-5647-02...
Page 379: I N D E X
B-19 startup-config 1-26 administrative username startup-config, restoring 1-29 setting B-19 ArrowPoint Distribution Image. See ADI advanced options for Offline Diagnostic audience xxiv Monitor menu B-17 agent CSS as SNMP agent, defining 5-11 Cisco Content Services Switch Administration Guide IN-1 OL-5647-02...
Page 380 XML code messages CSS configurations, displaying 1-33 bridge, viewing statistics 5-31 hierarchy in XML code prompt, changing 3-10 terminal screen output lines, configuring command scheduler caution configuring ADI, removing A-13 displaying records Cisco Content Services Switch Administration Guide IN-2 OL-5647-02...
Page 381 1-35 CSS. See Content Services Switch configurations, displaying 1-33 CSS 11501 disks HTTP server, controlling access configuring from CLI 1-16 idle timeout, configuring formatting from CLI 1-17 logging functions Cisco Content Services Switch Administration Guide IN-3 OL-5647-02...
Page 382 DoS. See Denial of Service disabling logging to 4-14 disabling or enabling check disk B-25 files, displaying 1-23 formatting from CLI 1-17 email address, sending log messages to 4-12 general information, showing 1-45 Cisco Content Services Switch Administration Guide IN-4 OL-5647-02...
Page 383 4-23 A-1, B-9, B-14 record, configuring internal disk module directory structure interpreting sys.log messages 4-25 undeliverable log messages 4-26 Cisco Content Services Switch Administration Guide IN-5 OL-5647-02...
Page 384 4-18 subsystem, disabling for log state 4-21 subsystem, enabling on restoring archived files 1-28 sys.log showing 4-18 to a specific file on disk 4-14 sys.log to host, disabling 4-17 Cisco Content Services Switch Administration Guide IN-6 OL-5647-02...
Page 385 6-16 reformatting the disk B-21 directory setting password protection B-18 enterprise using to configure IP address B-16 looking up objects 5-30, 6-16 using to configure subnet mask B-16 object identifiers Cisco Content Services Switch Administration Guide IN-7 OL-5647-02...
Page 386 1-27 file, specifying 1-17, 1-18, 1-19, 1-20, 2-3 log files 1-28 type, configuring script 1-29 primary boot record startup-config 1-29 destination, configuring from CLI 1-18 destination, configuring from Offline B-26 Cisco Content Services Switch Administration Guide IN-8 OL-5647-02...
Page 387 6-17 6-25 setting attributes viewing information for 6-15 6-31 startup alarm, defining running check disk on the disk 6-20 B-21 RMON event running-config activating archiving 1-27 community, defining clearing Cisco Content Services Switch Administration Guide IN-9 OL-5647-02...
Page 388 8-10 defining 6-17 socket commands 8-36 delta 6-17 special variables 8-16 interval for an RMON alarm 6-20 syntax errors 8-31 RMON alarm example 6-10 terminating a script 8-31 variables Cisco Content Services Switch Administration Guide IN-10 OL-5647-02...
Page 389 4-17 socket commands 8-36 showing software boot information B-17 copying new software to CSS core dumps 1-31 deleting a version from the disk B-18 disk files 1-23 Cisco Content Services Switch Administration Guide IN-11 OL-5647-02...
Page 390 TFTP server subnet mask copying core dumps to 1-33 configuring using Offline Diagnostic copying log files to 4-23 Monitor menu B-16 copying log files to server 4-24 prefix notation, configuring for user Cisco Content Services Switch Administration Guide IN-12 OL-5647-02...
Page 391 CSS user profiles restricting unsecure access to the CSS configuring XML code copying and saving 3-13 CLI command conventions user terminal parameters creating configuring mode hierarchy terminal domain lookup, configuring parsing Cisco Content Services Switch Administration Guide IN-13 OL-5647-02...
Page 392 Index publishing special characters testing using on the CSS XML document example zip file included on Cisco.com using for network boot 2-17 Cisco Content Services Switch Administration Guide IN-14 OL-5647-02...

This manual is also suitable for:

11500 series

Cisco 11503 - CSS Content Services Switch Administration Manual

Chapter 2 Specifying the CSS Boot Configuration

Chapter 3 Configuring User Profiles

Chapter 4 Using the CSS Logging Features

Table 4-5 Field Descriptions for the Show Log-State Command

Figure 4-2 Logging Header in a Log Message

Figure 4-1 Undeliverable Message Format

Figure 4-3 Logging Message

Figure 4-4 Logging Message Fields

Table 4-6 Message Fields in a Log Level Debug-7 Logging Message

Table 4-7 IMM Message Identifiers

Table 4-8 Cisco 11500 Series CSS Log Messages

Chapter 5 Configuring Simple Network Management Protocol (SNMP)

Table 5-5 SNMP V1 Traps

Table 5-6 SNMP V2C Traps

Chapter 6 Configuring Remote Monitoring (RMON)

Figure 6-3 Example of Delta Sampling

Figure 6-2 Example of Absolute Sampling

Table 6-2 RMON Alarm Configuration Quick Start

Chapter 7 Using an XML Document to Configure the CSS

Chapter 8 Using the CSS Scripting Language

Using the "! no Echo" Comment

Table 8-2 Field Descriptions for the Show Sockets Command

Quick Links

Related Manuals for Cisco 11503 - CSS Content Services Switch

Summary of Contents for Cisco 11503 - CSS Content Services Switch