Command Reference

Syntax Description

Usage Guidelines

Use the burnimg command to update the Cisco  6510 software and write the new version to the system's Flash memory from disk.

To use the default target for the image file, enter burnimg -f /fd0/filename, where filename is the filename of the image file.

When you enter the burnimg command, specify the filename and location of the update file with the -f parameter.

Next, specify where to write the software image. To update the Cisco  6510's BIOS chip with a new ROM BIOS image, specify bios with the -t parameter. To update the auxiliary chips on the Cisco  6510 with the new software image, specify img with the -t command.

Example

SSG  > burnimg -f /fd0/csco6510 -t img 

Reading file /fd0/csco6510 ... 
Reading file is done.
Burning image /fd0/csco6510 to flash memory ... 
Burning Image is Done!

Syntax Description

Usage Guidelines

Syntax Description

Usage Guidelines

Use the config load command to load the settings of a Cisco  6510 configuration file from a floppy disk to RAM. After loading the configuration and making any changes, use the config save command to save the configuration to memory.

Example

SSG  > config load -f /fd0/6510cfg

config load -f /fd0/sample1.cfg
Reading file /fd0/sample1.cfg ...      
Reading file is done.             
Load from Configuration File (/fd0/sample1.cfg) Done.
Reconfiguring Network Interface 0: 
IP=192.168.2.2, Mask=255.255.255.0, GW=192.168.2.1, Name=Host
Reconfiguring Network Interface 1: 
IP=192.168.100.122, Mask=255.255.255.0, GW=, Name=Management
Reconfiguring Network Interface 2: 
IP=192.168.12.3, Mask=255.255.255.0, GW=192.168.12.1, Name=SP
Updating dhcp remote port to 67
DHCPRemotePort = <67>          
Updating dns remote port to 53
DNSRemotePort = <53>          
Updating radius remote port to 1645
RadiusRemotePort = <1645>          
Updating l2f remote port to 1701
L2FRemotePort = <1701>          
Updating accounting remote port to 1646
AccountingRemotePort = <1646>          
Updating ARP parameters: timeout=0 msec, retries=1
arpParam: <Timeout: 0 milliSeconds ( == 0 ticks)> <Retries: 1 times>                     
Updating Accounting parameters: timeout=10 sec, retries=5
AccountingParam: <Timeout: 10 Seconds>                   
                  <Retries: 5 times> 

Syntax Description

Usage Guidelines

Use the config save command to save changes to the Cisco  6510 configuration parameter or back up the configuration file to disk.

Using config save without a switch causes the Cisco  6510 to save configuration changes to memory.

Using config save with the -f /fd0 switch causes the Cisco  6510 to save the configuration to floppy disk using the name specified in filename.

Example

SSG  > config save 

Save to Flash Done.
SSG  > config save -f /fd0/6510cfg

Writing file /fd0/sample1.cfg ...      
Writing file is done.             
Save to Configuration File (/fd0/sample1.cfg) Done.

Usage Guidelines

Use this command to set the Cisco  6510's network configuration settings to their default values. This command is useful if you have changed the configuration and need to reset it to default settings.

Syntax Description

Usage Guidelines

Use the conifg show command to display the current setting for all configuration parameters or a specified configuration parameter.

Example

SSG  > config show AAIP 

AAIP1: <0.0.0.0>
AAIP2: <0.0.0.0>
SSG  > config show Password

DashboardPassword: <secret>
AAAPassword: <secret>
ServicePassword: <secret>

Syntax Description

Usage Guidelines

Use the debug command to enable or disable debugging for a specific debug handler. To enable a debug handler, enter debug enable followed by -h and the name of the handler to enable, -l, and the level of debugging. To disable a debug handler, enter debug disable followed by -h and the name of the handler to disable. If you are disabling a debug handler, you do not need to specify a debug level.

To disable all debugging levels without changing setting levels, enter debug disable. To restore these levels to their previous settings, enter debug enable.

When the handler is enabled, debug messages are output to the device(s) specified by the logtarget command. This can be the terminal device to which the Cisco  6510 is connected or a UNIX syslog server.

Example

SSG  > debug enable -h dhcp -l error

Debug DHCP: Enabled  [Active Level: ERROR]
SSG  > debug enable -h l2f -l all

Debug L2F: Enabled  [Active Level: ERROR INFO VERBOSE PACKET]
SSG  > debug disable -h radius

Debug     RADIUS: Disabled [Active Level: ERROR ]
SSG  > debug disable

Debug       DHCP: Disabled [Active Level: ERROR ]
Debug        DNS: Disabled [Active Level: ERROR ]
Debug        L2F: Disabled [Active Level: ERROR ]
Debug        PPP: Disabled [Active Level: ERROR ]
Debug     RADIUS: Disabled [Active Level: ERROR ]
Debug ACCOUNTING: Disabled [Active Level: ERROR INFO VERBOSE PACKET ]
Debug        NAT: Disabled [Active Level: ERROR ]
Debug   FAILOVER: Disabled [Active Level: ERROR ]
Debug     SYSTEM: Disabled [Active Level: ERROR ]

TimeSaver To quickly specify all debug levels for a debug handler, use a numeric value between 0 and 15.

Example

To enable error-level debugging for all handlers, enter the following:

SSG  > config set level

Carriage Return to Skip; '.' to quit; 'c' to clear -->
DebugDHCPLevel: <7>:1

DebugDNSLevel: <1>:1

DebugL2FLevel: <1>:1

DebugPPPLevel: <1>:1

DebugRADIUSLevel: <1>:1

DebugACCTLevel: <1>:1

DebugNATLevel: <1>:1

DebugFOVERLevel: <1>:1

DebugSystemLevel: <1>:1

Configuration Transferred to STANDBY

Usage Guidelines

Use the debug show command to display the current debug settings.

Example

SSG  > debug show 

Debug       DHCP: Disabled [Active Level: (None)]
Debug        DNS: Disabled [Active Level: (None)]
Debug        L2F: Disabled [Active Level: (None)]
Debug        PPP: Disabled [Active Level: (None)]
Debug     RADIUS: Enabled  [Active Level: ERROR ]
Debug ACCOUNTING: Disabled [Active Level: (None)]
Debug        NAT: Disabled [Active Level: (None)]
Debug   FAILOVER: Disabled [Active Level: (None)]
Debug     SYSTEM: Enabled  [Active Level: ERROR ]

Syntax Description

Usage Guidelines

Usage Guidelines

Use the failover reset command to reset the failover mechanism for the Cisco  6510. It is necessary to enter this command to activate failover without rebooting, when a serious error is reported for either unit, or in the event that the failover cable becomes disconnected.

To use failover reset, first enter the command on the standby unit. Then, enter the command on the primary unit.

Usage Guidelines

Use the failover set command to set the IP addresses of the active and standby units.

SSG  > failover set 

FailoverActiveIP0 <198.46.3.2>: 
FailoverActiveIP1 <198.46.4.2>: 
FailoverActiveIP2 <198.46.5.2>: 
FailoverStandbyIP0 <0.0.0.0>: 198.46.6.2

FailoverStandbyIP1 <0.0.0.0>: 198.46.7.2

FailoverStandbyIP2 <0.0.0.0>: 198.46.8.2

Syntax Description

Usage Guidelines

Use the failover show command to display information about the active and standby units.

If you enter failover show, the console displays information about whether failover is enabled and the processing status. If you enter failover show IP, the console displays the IP addresses of the active and standby units. If you enter failover show stats, the console displays failover realtime status information.

Syntax Description

Usage Guidelines

Usage Guidelines

Usage Guidelines

Use the hardware command to display the hardware configuration of the Cisco  6510.

Example

SSG  > hardware

INTEL Processor: <GenuineIntel>
            OEM: Pentium II processor, model 3, 300 MHz
Total Memory: 402649 Kbytes
Performing Failover Cable Loopback Test...
loopback test: Tx/Rx 128 characters were dropped
Result = FAILED
Ethernet Cards:
SSG diagnostics: Intel 82557 #0 found at pciDevice number 13
***
82557(0): Intel EtherExpress Pro 10/100 at 0xfcc0 00:A0:C9:CA:AF:04
CSR mem base address = feaff000, Flash mem base address = fed00000
PCI bus no. = 0, device no. = d, function no. = 0, IRQ = 11
Board assembly 689661-003, Physical connectors present: RJ45
Primary interface chip unknown PHY #1.
General self-test: passed.
 Serial sub-system self-test: passed.
 Internal registers self-test: passed.
 ROM checksum self-test: passed (0x24c9f043).
***
SSG diagnostics: Intel 82557 #1 found at pciDevice number 14
***
82557(1): Intel EtherExpress Pro 10/100 at 0xfca0 00:A0:C9:CC:31:17
CSR mem base address = feafe000, Flash mem base address = fec00000
PCI bus no. = 0, device no. = e, function no. = 0, IRQ = 10
Board assembly 689661-003, Physical connectors present: RJ45
Primary interface chip unknown PHY #1.
General self-test: passed.
 Serial sub-system self-test: passed.
 Internal registers self-test: passed.
 ROM checksum self-test: passed (0x24c9f043).

***
SSG diagnostics: Intel 82557 #2 found at pciDevice number 15
***
82557(2): Intel EtherExpress Pro 10/100 at 0xfc60 00:A0:C9:CC:31:91
CSR mem base address = feafd000, Flash mem base address = feb00000
PCI bus no. = 0, device no. = f, function no. = 0, IRQ = 15
Board assembly 689661-003, Physical connectors present: RJ45
Primary interface chip unknown PHY #1.
General self-test: passed.
 Serial sub-system self-test: passed.
 Internal registers self-test: passed.
 ROM checksum self-test: passed (0x24c9f043).

Syntax Description

Usage Guidelines

Use the ifconfig command to configure an interface card installed in the Cisco  6510. All cards in the Cisco  6510 should be assigned an IP address and subnet mask.

Example

SSG  > ifconfig -u 0 -a 198.46.3.2 -m 255.255.255.0

SSG  > ifconfig -u 1 -a 198.46.4.2 -m 255.255.255.0 -n UCPcard 

SSG  > ifconfig -u 2 -a 198.46.5.2 -m 255.255.255.0 -g 198.46.5.1

Syntax Description

Usage Guidelines

The output devices can include the console device connected to the Cisco  6510 and a syslog file on a system connected to the Cisco  6510.

Syntax Description

Usage Guidelines

Use the logtarget facility command to specify the local device to which the Cisco  6510 writes syslog facility messages.

Example

SSG  > logtarget facility local0

Target0: 192.168.100.24 
Log Facility: LOCAL0

Usage Guidelines

Use the logtarget show command to display a list of log targets where the Cisco  6510 sends logging information.

Example

SSG  > logtarget show 

Target0: 192.168.100.22
Log Facility: LOCAL2 

Usage Guidelines

Use the nhgtable clear command to clear the next hop gateway table profile settings.

Example

SSG  > nhgtable clear 

Syntax Description

Usage Guidelines

Usage Guidelines

Use the nhgtable show command to display the next hop gateway table profile settings.

Example

SSG  > nhgtable show 

Next Hop Gateway Table Loaded from Profile: steve-nhg
Key:          ISP-1     ip: 192.168.12.1             
Key:          ISP-3     ip: 192.168.12.2
Key:          ISP-2     ip: 192.168.12.3
Key:          ISP-9     ip: 192.168.12.4
Key:          ISP-8     ip: 192.168.12.5
Key:         ISP-10     ip: 192.168.12.6
Key:          ISP-5     ip: 192.168.12.7
Key:          ISP-4     ip: 192.168.12.8
Key:          ISP-7     ip: 192.168.12.9
Key:          ISP-6     ip: 192.168.12.10

Usage Guidelines

Use the passwd command to change the password used to access the Cisco  6510 through a Telnet connection (default: admin).

Example

SSG  > passwd

Old Password: *****

New Password: *****

Re-enter New Password: *****

Password changed.

Usage Guidelines

If you forget the Telnet password, use passwd reset to restore the Telnet password to the default setting (default: admin).

Example

SSG  > passwd reset

Usage Guidelines

Enter the reboot command to reboot the Cisco  6510 using the configuration stored in Flash memory.

Example

SSG  > reboot 

System configuration has been modified. Save? [y/n]: y

Proceed with reboot? [y/n]: y

Syntax Description

Usage Guidelines

Use the remoteport set command to specify the ports the Cisco  6510 uses to receive packets from services.

Example

SSG  > remoteport set -h dhcp -p 67 

DHCPRemotePort = <67>

Syntax Description

Example

SSG  > remoteport show -h dhcp 

DHCPRemotePort = <67>
SSG  > remoteport show 

DHCPRemotePort = <67>
DNSRemotePort = <53>
RadiusRemotePort = <1645>
L2FRemotePort = <1701>
AccountingRemotePort = <1646>

Syntax Description

Usage Guidelines

Use the secret aaapassword command to specify the shared secret used for RADIUS communication between the Cisco  6510 and the AA server.

Example

SSG  > secret aaapassword secret2

Syntax Description

Usage Guidelines

Use the secret dashboardpassword command to specify the shared secret used for the RADIUS communication between the Cisco  6510 and the Cisco SSD.

Example

SSG  > secret dashboardpassword secret1

Syntax Description

Usage Guidelines

If you enter server by itself, the Cisco  6510 will prompt you to enter each IP address. If you enter server followed by the name of the service, the Cisco  6510 will prompt you to enter the IP address for that service.

Example

SSG  > server dhcpip 136.123.56.57

SSG  > server 

DefaultServerIP: <0.0.0.0>: 192.168.1.2

AAIP1: <0.0.0.0>: 171.69.73.151

AAIP2: <0.0.0.0>: 171.69.73.152

AccountingIP1: <0.0.0.0>: 175.63.73.250

AccountingIP2: <0.0.0.0>: 175.63.73.251

DHCPIP: <0.0.0.0>: 136.123.56.57

SNMPIP: <0.0.0.0>: 136.123.56.59

Usage Guidelines

Use the server show command to show the IP addresses for the default server, RADIUS services, and the DHCP server.

Example

SSG  > server show

DefaultServerIP: <192.168.100.24>   (Interface: Network)
AAIP1: <192.168.100.22>
AAIP2: <0.0.0.0>
AccountingIP1: <192.168.100.22>
AccountingIP2: <0.0.0.0>
DHCPIP: <192.168.100.11>
SNMPIP: <136.123.56.59>

Usage Guidelines

To determine whether there is an active Telnet session to the Cisco  6510, use the telnet show command. To terminate the session, use the telnet disconnect command.

This command can only be entered from the Cisco  6510 terminal interface.

Example

SSG  > telnet disconnect

Usage Guidelines

Use the telnet show command to show whether there is an active Telnet session to the Cisco  6510. If there is, you can terminate the session by using the telnet disconnect command.

This command can only be entered from the Cisco  6510 terminal interface.

Example

SSG  > telnet show

Usage Guidelines

Use the tptfilter clear command to clear the transparent passthrough filter settings.

Example

SSG  > tptfilter clear 

Transparent Passthrough service filter is cleared

Syntax Description

Usage Guidelines

Transparent passthrough is designed to allow unauthenticated traffic (users or network devices that have not logged in to the Cisco  6510 through the Cisco SSD) to pass through the SSG (usually to the Internet).

Use the tptfilter download command to download transparent passthrough filter settings. This filter is downloaded from the AAA server and contains filter statements that describe which IP address ranges are permitted and denied.

The filter list is processed from beginning to end until an explicit match is found or until the end of the list is reached. Because there is an implicit deny for the list, the packet will be denied if no IP match is found.

Example

SSG  > tptfilter download PF1

Downloading TPTFilter from Profile (PF1)...
TPTFilter: Profile PF1 is downloaded! 

Usage Guidelines

Use the tptfilter show command to display the transparent passthrough filter settings.

Example

SSG  > tptfilter show 

*** Transparent Passthrough Filter Information ***
Filter info downloaded from Service PF1
5 Filter(s) in the current profile
Filter flag is Src_Dst Permit, Filter_ID is 1
                1.1.1.1/255.255.255.0:20,21
                2.2.101.2/255.255.255.0;0-9999
Filter flag is Src_Dst Permit, Filter_ID is 2
                1.1.2.1/255.255.255.0:20,21
                2.2.102.2/255.255.255.0:0-9999
Filter flag is Src_Dst Permit, Filter_ID is 3
                1.1.3.1/255.255.255.0:20,21
                2.2.103.2/255.255.255.0:0-9999
Filter flag is Src_Dst Deny, Filter_ID is 4
                1.1.4.1/255.255.255.0:20,21
                2.2.104.2/255.255.255.0:0-9999
Filter flag is Src_Dst Deny, Filter_ID is 5
                1.1.5.1/255.255.255.0:20,21
                2.2.105.2/255.255.255.0:0-9999

Usage Guidelines

Use the version command to display the version of the currently installed firmware.

Example

SSG  > version

Service Selection Gateway Version 1.1(0) Build 75, Aug 18 1998, 17:58:57
Copyright (c) 1998 by Cisco Systems, Inc.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is subject to
restrictions as set forth in subparagraph (c) of the Commercial
Computer Software - Restricted Rights clause as FAR sec. 32.227-19
and subparagraph (c) (i) (ii) of the Rights in Technical Data and
Computer Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706