|
|
This chapter describes how to use each of the aregcmd commands.
The Cisco Access Registrar aregcmd command is a command-line based configuration tool. It allows you to set any Cisco Access Registrar configurable option, as well as, start and stop the server and check statistics.
Cisco Access Registrar stores its configuration information in a hierarchy. Using the aregcmd command cd (change directory) you can move through this information in the same manner as you would through any hierarchical file system. Or you can supply full path names to these commands to affect another part of the hierarchy, and thus avoid explicitly using the cd command to change to that part of the tree.
The aregcmd command is command-line order dependent; that is, the arguments are interpreted based on their position on the command line. To indicate an empty string as a place holder on the command line, use either single (`) or double quotes (""). In addition, when you use any arguments that contain spaces, you must quote the arguments. For example, when you use the argument, "Local Users," you must enclose the phrase in quotes.
The aregcmd command can contain a maximum of 255 characters when specifying a parameter and 511 characters for the entire command.
The aregcmd command syntax is:
Note, the verbose (-v) and prefix (-p) modes are on by default when you run aregcmd interactively (not running a command from the command line or not running commands from a script file). Verbose and prefix modes are off otherwise.
When you include a command (with the appropriate arguments) on the command line, aregcmd runs only that one command and saves any changes.
The Cisco Access Registrar aregcmd command lets you manipulate configuration objects, which define properties or the behavior of the RADIUS server, such as valid administrators and types of services. For descriptions of the those objects, see "Server Objects."
This section contains the complete list of aregcmd commands. You can use them on the command line or insert them into scripts. The commands are listed alphabetically.
Use the aregcmd command add to create new elements in the configuration. The add command is context sensitive, which means the type of element added is determined by the current context, or the path specified as the first parameter. The add command has one required argument; the name of the element you wish to add. You can also provide other parameters, or you can supply this information after aregcmd has added the new element. The optional second argument is a description of the element.
The syntax is:
Use the aregcmd command cd to change the working context, or level in the configuration hierarchy. When you use the cd command without any parameters, it returns you to the root of the tree. When you use the optional path argument, you can specify a new context. To change to a higher level in the tree hierarchy, use the ".." syntax (as you would in a UNIX file system). When you change to a new context, aregcmd displays the contents of the new location, when you are using the command in interactive mode, or if verbose mode is on.
The syntax is:
Use the aregcmd command delete to remove an element from the configuration hierarchy. You cannot remove properties on an element; you can only remove entire elements. The delete command is recursive; that is, it will remove any subelements contained within an element being removed. When the element is in the current context, you need only provide the name of the element to be deleted. You can provide a complete path to an element elsewhere in the configuration hierarchy.
The syntax is:
Use the aregcmd command exit to terminate your aregcmd session. If you have any unsaved modifications, Cisco Access Registrar asks if you want to save them before exiting. Any modifications you don't choose to save are lost.
The syntax is:
Use the aregcmd command filter to display a selected view of a list. You can use the filter command to present only the elements of a list that have properties equal to the value you specify. You can also use the filter command to restore the view of the list after it has been filtered.
When using the filter command, you must provide a property name and a value, and you can optionally provide the path to the list. Cisco Access Registrar displays a list with only those elements that have a value equal to the specified value. When you want to filter the current context, you can omit the path argument.
The filter command is sticky, in that, after you have filtered a list, you must explicitly unfilter it before you can view the complete list again. To restore the unrestricted view of the list, use the filter command and specify the string all. To restore the list in current context, you can omit the path name.
The syntax is:
or
Use the aregcmd command find to locate a specific item in a list. The find command takes one required argument, which is a full or partial pathname. After you use the command, Cisco Access Registrar displays a page beginning with the entry that most closely matches the pathname you provided.
The syntax is:
Use the aregcmd command help (with no argument specified) to display a brief overview of the command syntax. When you specify the name of a command, Cisco Access Registrar displays help for only that command.
The syntax is:
Use the aregcmd command insert to add an item to an ordered list. The required parameters are the numeric index of the position in the list in which you want to insert the new item, and the item value. When the list to which you are adding is not the current context, you can specify the complete path to the position in the list by prepending the path for the list to the numeric index. After the new value has been inserted into the list, Cisco Access Registrar appropriately renumbers the list.
The syntax is:
This command applies to lists of servers by index and the Resource Managers list in SessionManagers.
Use the aregcmd command login to connect to a cluster, which contains the RADIUS server and definition of the authorized administrators. When you do not specify the cluster, admin name, and password, aregcmd prompts you for them.
When you are currently logged in to a cluster, the login command allows you to connect to another cluster. When you have changes in the current cluster that you have not saved, aregcmd asks if you want to save them before logging into another cluster.
After you successfully log in, and if the server is running, Cisco Access Registrar displays the cluster server's health. Note, to log in to a cluster, the AIC Server Agent for that cluster must be running.
The syntax is:
Use the aregcmd command logout to log out of the current cluster. After you log out, you have to log in to make any modifications to the configuration hierarchy, or to manage the server(s). When you have any unsaved modifications, Cisco Access Registrar asks if you want to save them before logging out. Any modifications you do not choose to save are lost.
The syntax is:
Use the aregcmd command ls to list the contents of a level in the configuration hierarchy. This command works much like the UNIX ls command. When you use it without any parameters, it lists the items in the current context. When you specify a path, it lists the elements found in that context. When you use the -R argument, it recursively lists all of the elements in and below the specified (or current) context.
For similar commands, refer to the next and prev commands.
The syntax is:
Use the aregcmd next command to review the remaining pages produced from the ls command. Every time you use the cd command, it automatically invokes the ls command to display the contents of the location. When the output from the ls command is more than one page (a page is about 24 lines) in length, Cisco Access Registrar displays only the first page.
The next command takes an optional path and count. The path specifies the context in which you wish to see the next page and the count specifies the number of lines you wish to see. When you use the next command without the path, Cisco Access Registrar uses the current context. When you do not specify a count, Cisco Access Registrar uses the last count value you used with the next or prev command. If you never specify a count, Cisco Access Registrar uses the default value, which is 20.
Note, the current page for a context is sticky. This means, for example, when you use the next command to view entries 20 through 30, until you use the next or prev command on the same context, you will continue to see these entries even if you use the cd command to change to a different context, then return to the original.
The syntax is:
Use the aregcmd command prev to page backwards through the output of the ls command. It behaves much like the next command, in that it takes an optional path identifying a context to display and a count parameter indicating how many lines to display.
The syntax is:
Use the aregcmd command pwd to display the absolute pathname of the current context (level in the configuration hierarchy).
The syntax is:
Use the aregcmd command query-sessions to query the server about the currently active user sessions. You can request information about all of the active sessions or just those sessions that match the type you specify.
The syntax is:
or
Note, <path> is the path to the server, Session Manager, or Resource Manager to query and with-<type> is one of the following: with-NAS, with-User, with-IP-Address, with-IPX-Network, with-USR-UPN, or with-ID.
Use the aregcmd command quit to terminate your aregcmd session. You can use it interchangeably with the exit command.
The syntax is:
Use the aregcmd command release-sessions to request the server to release one or more currently active user sessions. This command might be useful, for example, in the case where you have taken a NAS off-line, however, the server believes user sessions for that NAS are still active.
The syntax is:
or
Note, <path> is the path to the server, Session Manager, or Resource Manager to query and with-<type> is one of the following: with-NAS, with-User, with-IP-Address, with-IPX-Network, with-USR-VPN, or with-ID.
Use the aregcmd command reload to stop the server (when it is running), and then immediately start the server, forcing it to reread its configuration information. When you have modified the configuration hierarchy, Cisco Access Registrar asks you if you want to save your changes before restarting the server. Note, you must save your changes in order for the reloaded server to be able to use them.
The syntax is:
Use the aregcmd command save to validate the changes you made and commit them to the configuration database, if no errors are found.
The syntax is:
Use the aregcmd command set to provide values for properties on existing configuration elements. You only need to provide the set command with the name of the property you wish to set (or just enough of the name to distinguish it from other properties) and the new value for that property. It also applies to the Profiles attribute list, environments in the Attribute dictionary, and the LDAPtoRadiusMappings and LDAPtoEnvironmentMappings mappings.
The set command can also be used to order servers in a list. To specify a new position in a list for a server, use the set command and provide the numeric position of the server and the server's name.
The syntax is:
When the list is a list of servers by index, the syntax is:
Use the aregcmd command start to enable the server to handle requests. When the configuration hierarchy has been modified, Cisco Access Registrar asks you if you want to save the changes before starting the server.
The syntax is:
Use the aregcmd command stats to provide statistical information on the specified server. You can only issue this command when the server is running.
Note, aregcmd supports the PAGER environment variable. When the aregcmd stats command is used and the PAGER environment variable is set, the stats command output is displayed using the program specified by the PAGER environment variable.
The syntax is:
Use the aregcmd command status to learn whether or not the specified server has been started. When the server is running, Cisco Access Registrar displays its health.
The syntax is:
Use the aregcmd command stop to cause the server to no longer accept requests.
The syntax is:
Use the aregcmd command trace to set the trace level in the specified server to a new value. The trace level governs how much information is displayed about the contents of a packet. When the trace level is zero, no information is displayed. The higher the level, the more information you will see. The maximum tracing level is 4.
When you do not specify a server, Cisco Access Registrar sets the trace level for all of the servers in the current cluster. When you do not specify a value for the trace level, Cisco Access Registrar displays the current value of the trace level. The default is 0.
The syntax is:
Use the aregcmd command unset to remove items from an ordered list. Specify the numeric index of the element to remove. When the ordered list is not the current context, specify the path to the list before specifying the numeric index.
When you remove an item from the list, Cisco Access Registrar renumbers the list.
The syntax is:
This command applies to lists of servers by index, the Profiles attribute list, the environment list in the Attribute dictionary, and the LDAPtoRadiusMappings and LDAPtoEnvironmentMappings mappings.
Use the aregcmd command validate to check the consistency and validity of the specified server's configuration. If Cisco Access Registrar discovers any errors, it displays them.
The syntax is:
Posted: Thu Aug 19 08:14:11 PDT 1999
Copyright 1989-1999©Cisco Systems Inc.