Cisco 78-11424-03 User Manual

CHAPTER

Configuring User Profiles and CSS Parameters

This chapter describes how to configure user profiles and CSS parameters. This chapter also contains information on using the Content API and Command Scheduler features. Information in this chapter applies to all models of the CSS except where noted.

This chapter contains the following sections:

• Configuring User Profiles

• Boot Configuration Mode Commands

• Configuring Host Name

• Configuring Idle Timeout

• Configuring the CSS as a Client of a RADIUS Server

• Controlling Remote Access to the CSS

• Restricting Console, FTP, SNMP, Telnet, XML, and Web Management

Access to the CSS

• Configuring Flow Parameters

• Finding an IP Address

• Configuring Content API

• Configuring the Command Scheduler

78-11424-03

Cisco Content Services Switch Basic Configuration Guide

2-1

Configuring User Profiles

The CSS contains a default-profile that resides in the scripts directory on the Internal Disk Module (IDM). This filecontains settings that are user-specific; that is, they apply uniquely to each user when the user logs in.

You can customize the following settings for each user:

• CLI prompt

• Expert mode

• History buffer

• Terminal parameters, including idle time, length, more, netmask format, and

timeout

Though the settings are user-specific,eachdefault setting applies to all users until the user saves the default-profile to a username-profile (where username is the current login username). You may choose to continue using the default-profileso that all users logging into a CSS use the same settings. Refer to “Copying and Saving User Profiles” in this chapter for information on saving the default-profile.

If you change a user setting and want to save it in the scripts directory of the current ADI, use a copy profile command. If you do not, the CSS stores the setting temporarily in a running-profile. If you attempt to log out of the CSS without saving profile changes, the CSS prompts you that profile changes have been made and allows you to save or discard the changes.

When you upgrade the ADI, user profiles, which are saved in the current ADI directory, are deleted. If you wish to save user profiles permanently, use the save_profile command. This command saves the profiles in both the scripts and archive directories in the current ADI. The archive directory is not overwritten during a software upgrade.

To access the CSS IDM, FTP into the CSS. Use the appropriate commands to access the scripts directory and list the contents of the default-profile. When logged into the CSS, use the show profile command to display either the default-profile or your username-profile.

Chapter 2 Configuring User Profiles and CSS Parameters

2-2

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

For example:

# show profile

@prompt CSS11150 @no expert alias all reboot "@configure;boot;rebo" alias all shutdown "@configure;boot;shutd" alias all logon "@configure;logging line \${LINE};exit" alias all logoff "@configure;no logging line \${LINE};exit" alias all aca-load "@script play service-load" alias all dnslookup "@script play dnslookup" alias super save_config "copy running-config startup-config;archive startup-config" alias super setup "script play setup" alias super upgrade "script play upgrade" alias super monitor "script play monitor" alias super save_profile "copy profile user-profile;archive script admin-profile " set CHECK_STARTUP_ERRORS "1" session

This section contains information on:

• Configuring User Terminal Parameters

• Using Expert Mode

• Changing the CLI Prompt

• Modifying the History Buffer

• Copying and Saving User Profiles

Configuring User Profiles

Configuring User Terminal Parameters

To configure terminal parameters, use the terminal command. These parameters control output to the system terminal screen. Terminal parameters are user-specific; that is, they apply uniquely to each CSS user.

Use the copy profile user-profile command to add terminal command parameters to your user profile so that the parameters are used each time you log in. Otherwise you must reenter the commands for the parameters to take effect each time you log in.

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

2-3

Configuring User Profiles

The options for this command are:

• terminal idle - Set the session idle timer.

• terminal length - Set the terminal screen output length.

• terminal more - Enable terminal more support. The default is enabled.

• terminal netmask-format - Control subnet mask display.

• terminal timeout - Set the session maximum login time.

Configuring Terminal Idle

To set the time a session can be idle before the CSS terminates a console or Telnet session, use the terminal idle command. The default value is 0 (disabled). This command is available at the User and SuperUser prompts. Enter an idle time between 0 and 65535 minutes.

To set a terminal idle time, enter:

# terminal idle 15

To revert the terminal idle time to its default of disabled, enter:

# no terminal idle

Chapter 2 Configuring User Profiles and CSS Parameters

Configuring Terminal Length

To set the number of output lines the CLI displays on the terminal screen, use the terminal length command. This command is available at the User and SuperUser prompts. Enter the number of lines you want the CLI to display from 2 to 65535. The default is 25 lines.

To set the line number to 35, enter:

# terminal length 35

To set the number of lines to the default of 25 lines, enter:

# no terminal length

Cisco Content Services Switch Basic Configuration Guide

2-4

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

Configuring Terminal More

To enable support for more terminal functions, use the terminal morecommand. This command is available at the User and SuperUser prompts. You can also toggle the more function on and off within a session by using the ESC-M key sequence.

To enable more terminal functions, enter:

# terminal more

To disable support for more terminal functions, enter:

# no terminal more

Configuring Terminal Netmask-Format

To determine how the CSS displays subnet masks in show screens, use the terminal netmask-format command. This command is available at the User and SuperUser prompts. The options for this command are:

• terminal netmask-format bitcount - Displays masks in bitcount (for

example, /24).

• terminal netmask-format decimal - Displays masks in dotted-decimal

format (for example, 255.255.255.0). This is the default format.

• terminal netmask-format hexadecimal - Displays masks in hexadecimal

format (for example, OXFFFFFFOO).

To display subnet masks in bitcount format, enter:

# terminal netmask-format bitcount

Configuring User Profiles

To revert to the default display format (decimal), enter:

# no terminal netmask format

Configuring Terminal Timeout

To set the total amount of time a session can be logged in before the CSS terminates a console or Telnet session, use the terminal timeout command. The defaultvalueis0 (disabled). This command is available at the User and SuperUser prompts. Enter a timeout value between 0 and 65535 minutes.

78-11424-03

Cisco Content Services Switch Basic Configuration Guide

2-5

Configuring User Profiles

To set a terminal timeout value, enter:

# terminal timeout 30

To revert the terminal timeout value to its default (disabled), enter:

# no terminal timeout

Using Expert Mode

Expert mode allows you to turn the CSS confirmationcapability on or off. Expert mode is available at the SuperUser prompt and is off by default. When expert mode is off, the CSS prompts you for confirmation when you:

• Execute commands that could delete or change operating parameters

• Exit a terminal session (console or Telnet) without copying the

running-config to startup-config

• Create services, owners, and content rules

Turning expert mode on prevents the CSS from prompting you for confirmation when you make configuration changes. To prevent the CSS from prompting you for confirmation when you make configuration changes, enter:

# expert

Chapter 2 Configuring User Profiles and CSS Parameters

2-6

To allow the CSS to prompt you for confirmation when you make configuration changes, enter:

# no expert

For example, when you issue the command to create an owner and expert mode is off, the CSS prompts you to verify the command, enter:

(config)# owner arrowpoint.com Create owner <arrowpoint.com>, [y/n]:y (config-owner[arrowpoint.com])#

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

Changing the CLI Prompt

The CLI default prompt displays as the product model number followed by the # symbol. The CSS adds a # sign to the prompt automatically to indicate SuperUser mode. To change the default prompt, enter the prompt command as shown in the following example (maximum of 15 alphanumeric characters):

CSS11800# prompt CSS1-lab CSS1-lab#

To save the new prompt, add it to user or default profiles. To restore the prompt to its default, use the no prompt command.

Modifying the History Buffer

Use the history command to modify the history buffer length. The command line history buffer stores the most recent CLI commands that you enter. Enter the number of lines you want in the history buffer as an integer from 0 to 256. The default is 20. This command is available in SuperUser mode.

To set the history buffer to 80 lines, enter:

# history length 80

Configuring User Profiles

To disable the history function (setting of 0), enter:

# history length 0

To restore the history buffer to the default of 20 lines, enter:

# no history length

Displaying the History Buffer

Use the show history command to display the history buffer. The history buffer is cleared automatically upon reboot.

78-11424-03

Cisco Content Services Switch Basic Configuration Guide

2-7

Configuring User Profiles

For example:

# show history

history show history show ip routes show ip summary show ip stat clock clock date clock time show history

Copying and Saving User Profiles

Use the copy profile command to copy the running profile from the CSS to the default-profile, an FTP server, a TFTP server, or your user-profile. The options are:

• copy profile default-profile - Copy the running profile to the default profile

• copy profile user-profile - Copy the running profile to your user profile

• copy profile ftp - Copy the running profile to an FTP server

• copy profile tftp - Copy the running profile to a TFTP server

Chapter 2 Configuring User Profiles and CSS Parameters

Note If you exit the CSS without copying changes in the running profile

to your username-profile or default-profile, the CSS prompts you that the profile has changed and queries whether or not you want to saveyourchanges.Ifyou respond with y,theCSScopies the running profile to your username-profile or the default-profile.

Refer to the following sections for information on these options.

Copying the Running Profile to the Default-Profile

Use the copy profile default-profile command to copy the running profile to the default profile. This command is available at the SuperUser prompt.

Cisco Content Services Switch Basic Configuration Guide

2-8

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

For example, enter:

# copy profile default-profile

Copying the Running Profile to a User Profile

Use the copy profileuser-profilecommandtoproactivelycopythechanges made to the running profile to the user profile. This command creates a file username-profile if one does not exist (where username is the current username).

For example, enter:

# copy profile user-profile

Copying the Running Profile to an FTP Server

Use the copy profile ftp command to copy the running profile to an FTP server. The syntax is:

copy profile ftp ftp_record filename

Configuring User Profiles

The variables are:

• ftp_record - The name of the FTP record file that contains the server

IP address, username, and password. Enter an unquoted text string with no spaces and a maximum length of 32 characters.

• filename - The name you want to assign to the file on the server. Include the

full path to the file. Enter an unquoted text string with no spaces.

For example, enter:

# copy profile ftp arrowrecord \records\arrowftprecord

Copying the Running Profile to a TFTP Server

Use the copy profiletftp command to copy the running profile to a TFTP server. The syntax is:

copy profile tftp ip_or_host filename

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

2-9

Chapter 2 Configuring User Profiles and CSS Parameters

Boot Configuration Mode Commands

The variables are:

• ip_address or host - The IP address or host name of the server to receive the

file. Enter an IP address in dotted-decimal notation (for example,

192.168.11.1) or in mnemonic host-name format (for example, myhost.mydomain.com).

• filename - The name you want to assign to the file on the server. Include the

full path to the file. Enter an unquoted text string with no spaces and a maximum length of 32 characters.

For example, enter:

# copy profile tftp 192.168.3.6 \home\bobo\bobo-profile

Boot Configuration Mode Commands

Boot configuration mode contains all of the commands necessary to manage booting the CSS and to maintain the software revision. To access this mode, use the boot command from global configuration mode. The prompt changes to (config-boot).

To access boot mode, enter:

(config)# boot

2-10

The CSS enters into boot mode.

(config-boot)#

For information about commands available in boot mode, refer to the following sections:

• Unpacking an ArrowPoint Distribution Image (ADI)

• Removing an ArrowPoint Distribution Image (ADI)

• Specifying the Primary BOOT Configuration

• Specifying the Secondary Boot Configuration

• Configuring a Boot Configuration Record for the Passive SCM

• Showing the BOOT Configuration

• Booting the CSS from a Network Drive

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

Boot Configuration Mode Commands

Unpacking an ArrowPoint Distribution Image (ADI)

Use the unpack command to unpack the ArrowPointDistributionImage(ADI) on the CSS disk. Enter the ADI filename as an unquoted text string with a maximum length of 32 characters. For example, enter:

(config-boot)# unpack ap0500002.adi

Note Before unpacking the ADI, you must first copy the ADI to the CSS

disk. Use the copy ftp ftp_record filename boot-image command to copy the ADI to the CSS disk.

Removing an ArrowPoint Distribution Image (ADI)

Use the remove command to remove an ArrowPoint Distribution Image (ADI) that is not currently running on the CSS. To display a list of ADIs installed on your CSS, enter remove ?. To display the ADI you are currently running, use the version command.

Enter the ADI filename as an unquoted text string with a maximum length of 32 characters.

For example, to remove an ADI, enter:

(config-boot)# remove ap0410008

Specifying the Primary BOOT Configuration

Use the primary command to specify the primary boot configuration.Theoptions for this boot mode command are:

• primary boot-file - Specify the primary boot file

• primary boot-type - Specify the primary boot method, local disk, using FTP,

or a network-mounted file system using FTP

• primary config-path - Specify the path to a network CSS configuration

Refer to the following sections for more information on these options and associated variables.

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

2-11

Boot Configuration Mode Commands

Configuring the Primary Boot-File

Use the primary boot-file command to specify the primary boot file. Enter the primary boot file as an unquoted text string with no spaces and a maximum length of 64 characters.

To specify the primary boot filename, enter:

(config-boot)# primary boot-file ap0500002

To display a list of boot filenames, enter:

(config-boot)# primary boot-file ?

To remove the primary boot file, enter:

(config-boot)# no primary boot-file

Configuring the Primary Boot-Type

Use the primary boot-type command to specify the primary boot method, either from the local disk or using FTP. The syntax and options for this boot mode command are:

• primary boot-type boot-via-disk - Boot the CSS from software currently on

the IDM.

• primary boot-type boot-via-ftp ftp_record - Download an ADI file

containing CSS software that you want to install on the IDM. The CSS accesses the ADI or GZIP file containing the CSS software from an FTP server, copies it to the IDM, and unpacks it.

• primary boot-type boot-via-network ftp_record - Use FTP to boot the CSS

from software located on a network-mounted file system on a remote system (such as a PC or UNIX workstation). The CSS boots independently from the IDM and loads the configuration into memory. Instead of the CSS disk, the network file system contains the CSS software.

Enter the ftp_record as the name of the FTP record file that contains the FTP server IP address, username, and password. Enter an unquoted text string with no spaces.

For example, to configure the primary boot-type to boot-via-disk, enter:

(config-boot)# primary boot-type boot-via-disk

Chapter 2 Configuring User Profiles and CSS Parameters

2-12

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

To remove the primary boot type, enter:

(config-boot)# no primary boot-type

Configuring the Primary Config-Path

Use the primary config-path command to specify the alternate path to a network configurationforthenetworkbootmethod.Analternate configurationpathallows multiple CSSs to use the same boot image while keeping their configuration information in separate directories. The CSS must be able to access the configuration path through an FTP server (such as a PC or UNIX workstation) as defined in the FTP record for the network boot method.

When using an alternate configuration path, make sure that the path leads to a directory containing the script, log, and info subdirectories and the startup-config file. These subdirectories must contain the files in the corresponding subdirectories of the unzipped boot image. First, create these subdirectories, then copy the files from the boot image to the subdirectories.

Enter the configuration pathname as an unquoted text string with no spaces and a maximum length of 64 characters.

To configure the primary config path, enter:

(config-boot)# primary config-path f:/bootdir/

Boot Configuration Mode Commands

78-11424-03

To remove the primary network configuration path, enter:

(config-boot)# no primary config-path

Cisco Content Services Switch Basic Configuration Guide

2-13

Chapter 2 Configuring User Profiles and CSS Parameters

Boot Configuration Mode Commands

Specifying the Secondary Boot Configuration

Use the secondary command to specify the secondary boot configuration. The secondary boot configuration is used when the primary configuration fails. The options for this boot mode command are:

• secondary boot-file - Specify the secondary boot file

• secondary boot-type - Specify the boot method, local disk or FTP

• secondary config-path - Specify the path to a network configuration using

FTP

For more information on these options and associated variables, refer to the following sections.

Specifying the Secondary Boot-File

Use the secondary boot-file command to specify the secondary boot file that the CSS uses when the primary boot configuration fails. Enter the boot file as an unquoted text string with no spaces and a maximum length of 64 characters.

To specify the secondary boot filename, enter:

(config-boot)# secondary boot-file ap0410008

2-14

To display a list of secondary boot filenames, enter:

(config-boot)# secondary boot-file ?

To remove the secondary boot file, enter:

(config-boot)# no secondary boot-file

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

Chapter 2 Configuring User Profiles and CSS Parameters

Specifying the Secondary Boot-Type

Use the secondary boot-type command to boot the system using the local disk, FTP, or a network-mounted file system. The FTP record contains the IP address, username, and password for the FTP server. Enter the ftp_record as an unquoted text string with no spaces.

The syntax and options for this boot mode command are:

• secondary boot-type boot-via-disk - Boot the system from local disk.

• secondary boot-type boot-via-ftp ftp_record - Download an ADI file

containing CSS software that you want to install on the IDM. The CSS accesses the ADI or GZIP file containing the CSS software from an FTP server, copies it to the IDM, and unpacks it.

• secondary boot-type boot-via-network ftp_record - Use FTP to boot the

CSS from software located on a network-mounted file system on a remote system (such as a PC or UNIX workstation). The CSS boots independently from the IDM and loads the configuration into memory. Instead of the CSS disk, the network file system contains the CSS software.

For example, to specify the secondary boot type as boot-via-disk, enter:

(config-boot)# secondary boot-type boot-via-disk

Boot Configuration Mode Commands

To remove the secondary boot type, enter:

(config-boot)# no secondary boot-type

Specifying the Secondary Config-Path

Use the secondary config-path command to specify the alternate path to a network configuration for the network boot method. An alternate configuration path allows multiple CSSs to use the same boot image while keeping their configurationinformation in separate directories. The CSS must be able to access the configuration path through an FTP server (such as a PC or UNIX workstation) as defined through the FTP record for the network boot method.

Cisco Content Services Switch Basic Configuration Guide

78-11424-03

2-15

+ 35 hidden pages