Table of Contents

CONTENTS

CONTENTS

Preface ix Who Should Read This Guide ix How to Use This Guide ix How This Guide Is Organized x Document Conventions x Documentation Updates xi Related Documentation xi Obtaining Documentation and Submitting a Service Request xii

CHAPTER 1 Overview of the ACS CLI 1-1 Accessing the ACS Command Environment 1-1 User Accounts and Modes in ACS 1-1 Types of Command Modes in ACS 1-5 EXEC Commands 1-5 EXEC or System-Level Commands 1-5 Show Commands 1-7 ACS Configuration Commands 1-9 Configuration Commands 1-11 CLI Audit 1-12

CHAPTER 2 Using the ACS CLI 2-1 Before Accessing the ACS CLI 2-1 Starting the CSACS-1121 appliance 2-2 Running Setup to Configure ACS 2-2 Accessing the ACS CLI 2-4 Supported Hardware and Software Platforms 2-4 Opening the CLI with Secure Shell 2-5 Opening the CLI Using a Local PC 2-5 Understanding Command Modes 2-6 EXEC Mode 2-6 ACS Configuration Mode 2-7 Configuration Mode 2-8

CLI Reference Guide for Cisco Secure Access Control System 5.4 OL-26227-01 iii Contents

Configuration Submodes 2-9 Navigating the CLI Commands 2-10 Getting Help 2-11 Using the No and Default Forms of Commands 2-11 Command-Line Conventions 2-11 Command-Line Editing Key Conventions 2-12 Command-Line Completion 2-12 Continuing Output at the --More-- Prompt 2-13 Where to Go Next 2-13

CHAPTER 3 ACS Command Reference 3-1 EXEC Commands 3-4 acs (instance) 3-4 acs (process) 3-6 acs backup 3-7 acs-config 3-9 acs config-web-interface 3-13 acs delete core 3-13 acs delete log 3-14 acs patch 3-15 acs reset-config 3-16 acs reset-password 3-17 acs restore 3-18 acs support 3-20 acs troubleshoot adcheck 3-24 acs troubleshoot adinfo 3-25 acs troubleshoot ldapsearch 3-28 acs zeroize-machine 3-30 application install 3-31 application remove 3-32 application reset-config 3-33 application start 3-34 application stop 3-34 application upgrade 3-35 backup 3-36 backup-logs 3-37 clock 3-39 configure 3-39 copy 3-40

CLI Reference Guide for Cisco Secure Access Control System 5.4 iv OL-26227-01 Contents

debug 3-43 delete 3-46 dir 3-46 exit 3-48 forceout 3-48 halt 3-49 help 3-50 mkdir 3-50 nslookup 3-51 ping 3-52 reload 3-54 restore 3-55 rmdir 3-56 show 3-57 shutdown 3-58 ssh 3-59 tech 3-60 telnet 3-61 terminal length 3-62 terminal session-timeout 3-62 terminal session-welcome 3-63 terminal terminal-type 3-63 traceroute 3-64 undebug 3-65 write 3-67 Show Commands 3-69 show acs-config-web-interface 3-69 show acs-cores 3-70 show acs-logs 3-71 show application 3-74 show backup history 3-76 show cdp 3-77 show clock 3-78 show cpu 3-79 show disks 3-81 show icmp_status 3-82 show interface 3-84 show inventory 3-85 show ip route 3-87 show ipv6 route 3-88

CLI Reference Guide for Cisco Secure Access Control System 5.4 OL-26227-01 v Contents

show logging 3-89 show logins 3-90 show memory 3-91 show ntp 3-91 show ports 3-92 show process 3-94 show repository 3-95 show restore 3-96 show running-configuration 3-97 show startup-configuration 3-98 show tech-support 3-99 show terminal 3-100 show timezone 3-101 show timezones 3-102 show udi 3-103 show uptime 3-103 show users 3-104 show version 3-105 ACS Configuration Commands 3-105 access-setting accept-all 3-106 acsview-db-compress 3-107 ad-agent-configuration 3-108 ad-agent-reset-configuration 3-109 debug-adclient 3-109 debug-log 3-110 export-data 3-113 import-data 3-114 import-export-abort 3-116 import-export-status 3-117 no ad-agent-configuration 3-118 no debug-adclient 3-119 no debug-log 3-120 replication force-sync 3-122 replication status 3-123 reset-management-interface-certificate 3-124 show ad-agent-configuration 3-125 show ad-agent-configuration-changes 3-126 show debug-adclient 3-127 show debug-log 3-128 database-compress 3-130

CLI Reference Guide for Cisco Secure Access Control System 5.4 vi OL-26227-01 Contents

Configuration Commands 3-131 backup-staging-url 3-132 cdp holdtime 3-133 cdp run 3-133 cdp timer 3-134 clock timezone 3-135 do 3-137 end 3-139 exit 3-140 host-key sync 3-141 hostname 3-141 icmp echo 3-142 interface 3-143 ip address 3-144 ipv6 address 3-145 ip default-gateway 3-146 ip domain-name 3-147 ip name-server 3-147 ip route 3-148 ipv6 route 3-149 kron occurrence 3-150 kron policy-list 3-151 logging 3-152 ntp server 3-153 password-policy 3-154 repository 3-156 service 3-158 snmp-server community 3-158 snmp-server contact 3-159 snmp-server host 3-160 snmp-server location 3-161 username 3-161

G LOSSARY

I NDEX

CLI Reference Guide for Cisco Secure Access Control System 5.4 OL-26227-01 vii Contents

CLI Reference Guide for Cisco Secure Access Control System 5.4 viii OL-26227-01