Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Text Part Number: OL-5647-02
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT
NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT
ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR
THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION
PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO
LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work,
Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP,
CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the
Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare,
GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys,
MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Pac ket , PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX,
ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered
trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0502R)
Using the Running-Config and Startup-Config Files 1-7
Saving the Running-Config to the Startup-Config File 1-7
Copying the Running- and Startup-Config Files 1-8
Clearing the Running-Config and Startup-Config Files 1-9
Showing the Running Configuration 1-10
Showing the Startup Configuration 1-13
Creating a Running-Config or Startup-Config File Using a Text Editor 1-14
Finding an IP Address in the Running-Config File 1-15
Configuring Disks in a Two-Disk CSS 1-16
Formatting a Disk 1-17
Specifying a Disk for Booting, Logging, and Core Dumps 1-18
Selecting a Disk for the Primary Boot Record 1-18
Selecting a Disk for the Secondary Boot Record 1-19
Selecting a Disk for Core Dumps 1-19
Selecting a Disk for Logging 1-20
Copying Files Between Disks 1-21
Showing the Disk Mapping Configurations 1-22
Showing Files from a Disk 1-23
Clearing Files from a Disk 1-23
Unpacking and Removing an ADI 1-24
Archiving Files to the Archive Directory 1-25
Archiving the Startup-Config File 1-26
Archiving the Running-Config File 1-26
Archiving a Log File 1-26
Archiving Scripts 1-27
Clearing the Archive Directory 1-27
Restoring Files from the Archive Directory 1-27
Restoring an Archived Log File 1-28
Restoring an Archived Script File 1-29
Restoring an Archived Startup-Config File 1-29
Enabling and Disabling Core Dumps 1-31
Showing Core Dumps 1-31
Copying Core Dumps to an FTP or TFTP Server 1-31
Copying Core Dumps to an FTP Server 1-32
Copying Core Dumps to a TFTP Server 1-33
Showing CSS Configurations 1-33
Showing Software Information 1-34
Showing Hardware Information 1-35
Showing System Resources 1-43
Showing System Uptime 1-44
Showing Disk Information 1-45
Showing User Information 1-46
Contents
CHAPTER
Showing Current Logins 1-48
Where to Go Next 1-49
2Specifying the CSS Boot Configuration 2-1
Boot Setup Quick Start 2-2
Accessing Boot Mode 2-3
Specifying the Primary Boot Configuration 2-3
Specifying the Primary Boot File 2-3
Specifying the Primary Boot Type 2-4
Configuring a Boot Configuration Record for the Passive SCM 2-10
Configuring the Passive SCM Gateway Address 2-11
Configuring the Passive SCM IP Address 2-11
Configuring the Passive SCM Primary Boot File 2-11
Configuring the Passive SCM Primary Boot Type 2-12
Configuring the Passive SCM Primary Configuration Path 2-13
Configuring the Passive SCM Secondary Boot File 2-13
Configuring the Passive SCM Secondary Boot Type 2-14
Configuring the Passive SCM Secondary Configuration Path 2-15
Configuring the Passive SCM Subnet Mask 2-15
Copying Configuration Information from the Active SCM to the Passive
SCM
2-16
Showing the Boot Configuration 2-17
CHAPTER
Booting the CSS from a Network Drive 2-17
Configuring Network Boot for a Primary SCM 2-18
Configuring Network Boot for a Passive SCM 2-19
Showing Network Boot Configurations 2-20
Copying the Running Profile to the Default-Profile 3-14
Copying the Running Profile to a User Profile 3-14
Copying the Running Profile to an FTP Server 3-14
Copying the Running Profile to a TFTP Server 3-15
Where to Go Next 3-15
Contents
CHAPTER
4Using the CSS Logging Features 4-1
Logging Overview 4-2
CSS Logging Quick Start Table 4-4
Specifying Logging Buffer Size 4-6
Configuring Logging for a Subsystem 4-7
Enabling and Disabling Logging for a Subsystem 4-7
Configuring a Log Message for a Subsystem at a Logging Level 4-10
Logging ACL Activity 4-11
Sending Log Messages to an E-Mail Address 4-12
Specifying a Log File Destination 4-13
Specifying a Log File on the Disk 4-14
Disabling Logging to the sys.log File on the Disk 4-14
Specifying a Host for a Log File Destination 4-16
Specifying a Line for a Log File Destination 4-17
DoS Quick Start 5-23
Defining a DoS SNMP Trap-Type 5-24
Displaying DoS Configurations 5-25
Resetting DoS Statistics 5-28
Contents
CHAPTER
Displaying the SNMP Configuration 5-29
Managing SNMP on the CSS 5-29
Enabling SNMP Manager Access to the CSS 5-29
Using the CSS to Look Up MIB Objects 5-30
Useful MIB Information 5-31
Reading Logs 5-32
Setting RMON Alarms 5-33
This guide provides instructions for the administration of the Cisco 11500 Series
Content Services Switches (CSS). It describes how to perform administration
tasks on the CSS, including managing the CSS software, upgrading your CSS
software, and so on. Information in this guide applies to all CSS models except
where noted.
The CSS software is available in a Standard or optional Enhanced feature set. The
Enhanced feature set contains all of the Standard feature set and also includes
Network Address Translation (NAT) Peering, Domain Name Service (DNS),
Demand-Based Content Replication (Dynamic Hot Content Overflow), Content
Staging and Replication, and Network Proximity DNS. Proximity Database and
Secure Management, which includes Secure Shell Host and SSL strong
encryption for the Device Management software, are optional features.
This preface contains the following major sections:
•Audience
•How to Use This Guide
•Related Documentation
•Symbols and Conventions
•Obtaining Documentation
•Documentation Feedback
•Cisco Product Security Overview
•Obtaining Technical Assistance
•Obtaining Additional Publications and Information
Copy the running-configuration and
startup-configuration files, specify file storage
locations for a two-disk 11500 series CSS, and unpack
and remove an ArrowPoint Distribution Image (ADI).
This chapter also includes an overview of the CSS
system software.
Set the primary and secondary boot configuration for
the CSS.
Configure user profiles in the default-profile file.
Configure logging for the CSS. This chapter also
provides information displaying and interpreting log
messages.
Configure SNMP on the CSS. This chapter also
includes a summary of all CSS Enterprise Management
Information Base (MIB) objects.
Chapter 7,
Using an XML
Document to
Configure the CSS
Chapter 8,
Using the CSS
Scripting Language
Appendix A,
Upgrading Your CSS
Software
Appendix B, Using the
Offline Diagnostic
Monitor Menu
Related Documentation
In addition to this document, the CSS documentation set includes the following:
Use extended markup language (XML) to configure a
CSS.
Use the CSS scripting language to automate
configuration tasks and create script keepalives. This
chapter includes example scripts.
Upgrade your CSS software manually or use the
upgrade script.
Use the Offline Diagnostic Monitor (Offline DM)
menu.
OL-5647-02
Document TitleDescription
Release Note for the
Cisco 11500 Series
Content Services Switch
Cisco 11500 Series
Content Services Switch
Hardware Installation
Guide
This release note provides information on
operating considerations, caveats, and
command-line interface (CLI) commands for the
Cisco 11500 series CSS.
This guide provides information for installing,
cabling, and powering the Cisco 11500 series CSS.
In addition, this guide provides information about
CSS specifications, cable pinouts, and hardware
troubleshooting.
This guide describes how to use the Device
Management user interface, an HTML-based
Web-based application that you use to configure
and manage your CSS.
OL-5647-02
Preface
Obtaining Documentation
Warning
NoteA note provides important related information, reminders, and recommendations.
A warning describes an action that could cause you physical harm or damage
the equipment.
Bold text indicates a command in a paragraph.
Courier text indicates text that appears on a command line, including the CLI
prompt.
Courier bold text indicates commands and text you enter in a command line.
Italic text indicates the first occurrence of a new term, book title, emphasized text,
and variables for which you supply values.
1.A numbered list indicates that the order of the list items is important.
a. An alphabetical list indicates that the order of the secondary list items is
important.
•A bulleted list indicates that the order of the list topics is unimportant.
–
An indented list indicates that the order of the list subtopics is
unimportant.
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco
also provides several ways to obtain technical assistance and other technical
resources. These sections explain how to obtain technical information from Cisco
Systems.
Cisco documentation and additional literature are available in a Documentation
DVD package, which may have shipped with your product. The Documentation
DVD is updated regularly and may be more current than printed documentation.
The Documentation DVD package is available as a single unit.
Preface
Registered Cisco.com users (Cisco direct customers) can order a Cisco
Documentation DVD (product number DOC-DOCDVD=) from the Ordering tool
or Cisco Marketplace.
Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
Cisco Marketplace:
http://www.cisco.com/go/marketplace/
Ordering Documentation
You can find instructions for ordering documentation at this URL:
•Nonregistered Cisco.com users can order documentation through a local
account representative by calling Cisco Systems Corporate Headquarters
(California, USA) at 408 526-7208 or, elsewhere in North America, by
calling 1 800 553-NETS (6387).
Documentation Feedback
You can send comments about technical documentation to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front
cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883
Documentation Feedback
We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.ht
ml
From this site, you can perform these tasks:
•Report security vulnerabilities in Cisco products.
•Obtain assistance with security incidents that involve Cisco products.
•Register to receive security information from Cisco.
A current list of security advisories and notices for Cisco products is available at
this URL:
http://www.cisco.com/go/psirt
If you prefer to see advisories and notices as they are updated in real time, you
can access a Product Security Incident Response Team Really Simple Syndication
(PSIRT RSS) feed from this URL:
Cisco is committed to delivering secure products. We test our products internally
before we release them, and we strive to correct all vulnerabilities quickly. If you
think that you might have identified a vulnerability in a Cisco product, contact
PSIRT:
•Emergencies— security-alert@cisco.com
•Nonemergencies— psirt@cisco.com
TipWe encourage you to use Pretty Good Privacy (PGP) or a compatible product to
encrypt any sensitive information that you send to Cisco. PSIRT can work from
encrypted information that is compatible with PGP versions 2.x through 8.x.
Never use a revoked or an expired encryption key. The correct public key to use
in your correspondence with PSIRT is the one that has the most recent creation
date in this public key server list:
In an emergency, you can also reach PSIRT by telephone:
•1 877 228-7302
•1 408 525-6532
Obtaining Technical Assistance
For all customers, partners, resellers, and distributors who hold valid Cisco
service contracts, Cisco Technical Support provides 24-hour-a-day,
award-winning technical assistance. The Cisco Technical Support Website on
Cisco.com features extensive online support resources. In addition, Cisco
Technical Assistance Center (TAC) engineers provide telephone support. If you
do not hold a valid Cisco service contract, contact your reseller.