EXEC mode command details

enable

Enables EXEC PRIVILEGED mode for access to advanced commands.

Prompts for the enable-secret password, which is the system password initially set during installation. Entering the correct password changes the command line prompt from > to #.

Example  

> enable

Password:

#

See also enable secret

exit

Exits the EXEC mode and closes the terminal window.

help

Displays a description of the interactive help system, including:

  • Auto-completion keys
  • Movement keys
  • Deletion keys

See Help commands.

host

Queries Internet name servers to perform a DNS lookup. Specify one of the following parameters:

Table 3.  host command parameters

Parameter

Description

hostname

The hostname of the destination server to look up.

IP address

The IP address of the destination server to look up.

This command returns the hostname of the server if you specify an IP address. It returns the IP address if you specify the hostname.

This command executes the Linux command nslookup. See Linux man pages for more information.

Example  

>host yahoo.com

Server: 172.16.0.1

Address: 172.16.0.1#53

 

Non-authoritative answer:

Name: yahoo.com

Address: 98.137.149.56

Name: yahoo.com

Address: 98.139.180.149

Name: yahoo.com

 

Address: 209.191.122.70

Name: yahoo.com

Address: 72.30.2.43

logout

Exits from the EXEC mode and closes the terminal window.

ping

This command sends echo messages (pings) to the destination server that the parameter specifies.

Specify one of the following parameters:

Table 4.  ping command parameters

Parameter

Description

hostname

The destination’s host name.

IP address

The destination’s IP address.

Example  

>ping yahoo.com

show banner

Displays the banner that was displayed when you logged on to the command line interface.

Example  

>show banner

************************************************************

* Ivanti Core CLI *

* *

* *

************************************************************

Welcome user it is Tue Dec 13 21:27:03 UTC 2011

show clock

Displays the current system date, time, and time zone.

Example  

> show clock

Displaying system clock details

Tue Dec 13 21:25:12 UTC 2011

show common_criteria_mode_status

Displays whether Common Criteria mode is enabled.

Example  

> show common_criteria_mode_status

Common Criteria Mode is enabled.

>

show fips

Displays whether FIPS mode is enabled.

Example  

> show fips

FIPS 140 mode is disabled.

>

show hostname

Displays the hostname for Core.

Example  

>show hostname

appname.domain.com

show interfaces

Displays the configuration of the network interfaces configured for Core.

Example  

>show interfaces

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000

link/ether 00:0c:29:6b:c6:23 brd ff:ff:ff:ff:ff:ff

3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000

link/ether 00:0c:29:6b:c6:2d brd ff:ff:ff:ff:ff:ff

4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000

link/ether 00:0c:29:6b:c6:37 brd ff:ff:ff:ff:ff:ff

5: eth3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000

link/ether 00:0c:29:6b:c6:41 brd ff:ff:ff:ff:ff:ff

show ip

Displays IP information.

Specify one of the following parameters:

Table 5.  show ip command parameters

Parameter

Description

arp

Displays the physical network address that corresponds to the IP address of Core. ARP is Address Resolution Protocol, a low-level network protocol.

domain-name

Displays the domain name of Core.

interface brief

Displays IP interface status and configuration. Add the following parameters to the command:

<ifacename> <interfaceid>

The <ifacename> is either GigabitEthernet or VLAN.

The <interfaceid> has the value 1 to 6 for GigabitEthernet and 1 - 4094 for VLAN.

These interfaces are configured using the System Manager in the Admin Portal, described in “Managing network interfaces” in the Core System Manager Guide.

name-server

Displays the IP address of the Internet name servers that Core uses.

These interfaces are configured using the System Manager in the Admin Portal, described in “DNS and Hostname” in the Core System Manager Guide.

route

Displays the routing table of Core. These static network routes are configured using the System Manager in the Admin Portal, described in “Routes” in the Core System Manager Guide.

Example  

>show ip domain-name

+------------------

Domain Name

+------------------

mydomain.com

 

>show ip interface brief GigabitEthernet 1

+----------------+-----------+--------------+-------------+-------------------

Interface IP Address Mask Hw Addr Admin State

+----------------+-----------+--------------+-------------+-------------------

GigabitEthernet1 10.10.17.152 255.255.0.0 00:50:56:91:22:7e up

 

>show ip route

192.168.57.0/24 via 10.10.1.1 dev eth0

10.10.0.0/16 dev eth0 proto kernel scope link src 10.10.17.80

default via 10.10.1.1 dev eth0

In the show ip route output, default indicates that the network and mask are both 0.0.0.0.

show log

Displays the log file that the parameter specifies.

Consider the following when viewing log files:

  • To navigate within the log, use standard vi commands.
  • To exit the log, enter q to quit.

The log files are in the Linux directory /var/log.

The command takes one parameter that is the name of the log file. The following table lists the available log file names you can use:

Table 6.  show log command available log file names

Log file name

Description

mi.log

A superset of the information in the mics, mifs, and employee logs.

startup.log

Information logged during startup.

cron

All cron jobs run since last reboot.

rpmpkgs

A listing of all the deployed rpm packages on the system.

boot.log

Information collected during boot up.

suspend.log

Not used.

mysqld.log

Information collected during MySQL startup.

messages

All system messages since last restart.

dmesg

Hardware status messages collected during startup.

secure

List of executed commands since last restart.

mivmstat.log

Running log of information about the virtual machine, including, but not limited to, processes, free, buffered, and cached memory, swap, i/o, system, and CPU.

mics.log

WARN, INFO, and ERROR messages from the System Manager.

employee.log

WARN, INFO, and ERROR messages about employee device registration activity.

mifs.log

WARN, INFO, and ERROR messages from the Admin Portal.

mai.log

MAI information, if MAI is enabled.

catalina.out

Stdout for the tomcat1 server. Includes verbose Employee and MIFS logs.

catalina2.out

Stdout for the tomcat2 server. A verbose MIFS log.

catalina3.out

Stdout for the tomcat3 server. A verbose MAI log, if MAI is enabled.

catalina4.out

Stdout for the tomcat4 server. A verbose Atlas log, if Atlas is enabled.

Example  

> show log mifs.log

> --log 'tomcat/mifs.log' --

show logging

Displays the configured syslog server information:

  • IP address
  • log level
  • state

This information is configured in the System Manager, in Settings > Data Export SysLog Servers, described in “Syslog” in the Core System Manager Guide.

The log level values displayed by this command correspond to the configured log levels as follows:

Table 7.  show logging command log levels

Log level value

Log level description

0

Emergency

1

Alert

2

Critical

3

Error

4

Warning

5

Notice

6

Info

7

Debug

Example  

>show logging

+--------------+--------------+---------------

IP Address + Loglevel + State

+--------------+--------------+---------------

myLogserver.com 5 enable

show logtail

Displays the last ten lines (the tail) of the specified log. The command takes one parameter that is the name of the log file. See show log for the list of available log files.

To exit from the show logtail command, enter Ctrl-C.

Example  

>show logtail mifs.log

--log 'tomcat/mifs.log' --tail --

/mi/tomcat2/webapps/mics/WEB-INF/pages/include.jsp

/mi/tomcat2/webapps/mics/WEB-INF/pages/index.jsp

/mi/tomcat2/webapps/mics/WEB-INF/pages/styles

/mi/tomcat2/webapps/mics/WEB-INF/pages/styles/mobir.css

/mi/tomcat2/webapps/mics/WEB-INF/pages/listRadius.jsp

/mi/tomcat2/webapps/mics/WEB-INF/pages/micsLogin.jsp

/mi/tomcat2/webapps/mics/WEB-INF/remoting-servlet.xml

/mi/tomcat-properties/license.properties

/mi/tomcat-properties/datapurge.properties

/mi/tomcat-properties/mifs.properties

show memory

Displays information about free and used memory on Core.

This command executes the Linux command free. See Linux man pages for more information.

Example  

> show memory

total used free shared buffers cached

Mem: 2135892 2065440 70452 0 146848 456292

-/+ buffers/cache: 1462300 673592

Swap: 4192956 12 4192944

show ntp status

Displays the currently configured time sources. The time sources are Network Time Protocol (NTP) servers. An NTP server figures out how much the system clock drifts and smoothly corrects it.

You can configure the NTP servers using the System Manager in the Admin Portal, described in “Date and Time (NTP)” in the Core System Manager Guide.

Example  

>show ntp status

+-----------+--------------------+

Index + NTP Server +

+-----------+--------------------+

0 172.16.0.1

show processes

Displays the processes running on Core.

This command executes the Linux command ps auxwww. See Linux man pages for more information.

Example  

>show processes

show service

Displays the status for configured services such as SSH and NTP. You can enable SSH and set the maximum number of sessions using the System Manager in the Admin Portal, described in “CLI” in the Core System Manager Guide. For NTP, see “Date and Time (NTP)” in the same guide.

Example  

>show service

+------------+-----------+---------------

Servicename + Enabled + Max.Sessions

+------------+-----------+---------------

ssh yes 5

ntp yes

show software repository

Displays the currently configured location for Core software updates. This location is configured using the System Manager in Maintenance > Software Updates.

Example  

>show software repository

+------------------------------------------+---------------+-----------

Software repository Username Password

+------------------------------------------+---------------+-----------

myRepositoryServer.com RepositoryUserId

show tcp

Lists information about all active TCP ports. This information provides traffic statistics and can help identify network problems.

This command executes the Linux command netstat -nat. See Linux man pages for more information.

Example  

>show tcp

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address Foreign Address State

tcp 0 0 127.0.0.1:8005 0.0.0.0:* LISTEN

tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN

tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN

.

.

.

The following table describes the information displayed:

Table 8.  show tcp command information display

Column heading

Description

Proto

The protocol. Always TCP.

Recv-Q

The number of bytes not copied by the user program connected to this socket.

Send-Q

The number of bytes not acknowledged by the remote host.

Local Address

The IP address of the local computer and the port number being used. If the port is not yet established, the port number is shown as an asterisk (*).

Foreign Address

The IP address and port number of the remote computer to which the socket is connected. If the port is not yet established, the port number is shown as an asterisk (*).

State

The state of the connection. Possible states are:

LISTEN

SYN-SENT

SYN-RECEIVED

ESTABLISHED

FIN-WAIT-1

FIN-WAIT-2

CLOSE-WAIT

CLOSING

LAST-ACK

TIME-WAIT

These states are further described in http://tools.ietf.org/html/rfc793.

show timeout

Displays the currently configured idle timeout for the CLI in minutes. The value 0 indicates no timeout. The timeout value is configured using the System Manager in the Admin Portal, described in “CLI” in the Core System Manager Guide.

Example  

>show timeout

+---------------------------

Cli Idle Timeout in Minute(s)

+---------------------------

0

show version

Displays the currently installed version of Core software.

Example  

>show version

VSP 4.5.0 Build 47

timeout

Sets the idle timeout for the CLI. Enter the number of minutes between 0 and 9999.

Example  

>timeout 150

You can also set the CLI idle timeout using the System Manager in the Admin Portal, described in “CLI” in the Core System Manager Guide.

traceroute

Displays the network route to the specified destination.

Specify one of the following parameters:

Table 9.  traceroute command parameters

Parameter

Description

hostname

The destination’s host name.

IP address

The destination’s IP address.

Example  

>traceroute 173.194.33.43

traceroute to 173.194.33.43 (173.194.33.43), 30 hops max, 40 byte packets

1 10.10.1.1 (10.10.1.1) 4.808 ms 5.481 ms 6.112 ms

2 * * *

.

.

.

>traceroute google.com

traceroute to google.com (173.194.33.45), 30 hops max, 40 byte packets

1 10.10.1.1 (10.10.1.1) 5.268 ms 5.933 ms 6.564 ms

2 * * *

.

.

.