A10 - ACOS System Configuration & Administration Cheat Sheet (2024)

Standard. Configure a standard Access Control List (ACL) to permit or deny source IP addresses.

Extended. Configure an extended Access Control List (ACL) to permit or deny traffic based on source and destin­ation IP addresses, IP protocol, and TCP/UDP ports.

Configure TACACS+ as the accounting method for recording inform­ation about user activi­ties.

Configure an admin account for management access to ACOS.

Set lockout parameters for admin sessions.

Clear current ACOS admin sessions.

Create a static ARP entry.

Change the aging timer for dynamic ARP entries.

Configure command auditing.

Configure a console authen­tic­ation type.

Config­uration authen­tic­ation of admin enable (Privi­leged mode) access.

Place admins into the CLI directly at the Privileged EXEC level following successful authen­tic­ation. The admin does not need to navigate to the Privileged EXEC level from the User EXEC level.

Enable tiered authen­tic­ation.

Configure support for multiple concurrent admin sessions using the same account.

Set the authen­tic­ation method used to authen­ticate admini­str­ative access to ACOS.

Configure author­ization for contro­lling access to functions in the CLI. The ACOS device can use TACACS+ for author­izing commands executed under a specified privilege level. This command also allows you to specify the level for author­ization debugging.

Configure log backup options and save a backup of the system log.

Configure and save file access inform­ation for backup. When you back up system inform­ation, you can save typing by specifying the name of the store instead of the options in the store.

Back up the system. The startu­p-c­onfig file, and SSL certif­icates and keys will be backed up to a tar file.

Schedule periodic backups.

Set the banners to be displayed when an admin logs onto the CLI or accesses the Privileged EXEC mode.

Enables echo support for Bidire­ctional Forwarding Detection (BFD).

Globally enable BFD packet proces­sing.

Configure BFD timers.

The commands in this section apply globally to the BGP process running on the ACOS device.

Specify the boot image location from which to load the system image the next time the Thunder Series is rebooted.

Repair the master boot record (MBR) on the hard drive or compact flash.

Configure a bridge VLAN group for VLAN-t­o-VLAN bridging.

This command configures DDoS packet capture so that the packets causing DDoS violations can be reviewed and analyzed.

Configure a class list.

Convert config­uration profile from version 3.0/3.1 to 3.2.

Copy a runnin­g-c­onfig or startu­p-c­onfig.

Configure DDoS Mitigation settings.

Delete an axdebug capture file.

Display a side-b­y-side comparison of the commands in a pair of locally stored config­ura­tions.

Disable fail-safe monitoring for softwa­re-­related errors.

Disable management access to specific protocols on specific Ethernet interf­aces.

Run a Privileged EXEC level command from a config­uration level prompt, without leaving the config­uration level.

Create a domain classi­fic­ation list.

Change the file size of core dumps.

Enable management access to specific protocols on specific Ethernet interf­aces.

Set the enable password, which secures access to the Privileged EXEC level of the CLI.

Return to the Privileged EXEC level of the CLI.

Configure the temper­ature condition under which a log is generated.

Configure the hardware polling interval for fault detection and log genera­tion.

Erase the startu­p-c­onfig file. This command returns the device to its factory default config­uration after the next reload or reboot.

Return to the Privileged EXEC level of the CLI.

Export a file to a remote site using the specified transport method.

Export file to a remote site period­ically.

Configure fail-safe automatic recovery.

Control fan speed setting.

Configure a Global Limit ID (GLID). A GLID is a set of traffic limits that can be used with other features, such as DDoS Mitiga­tion.

Enable hard disk monitoring on your ACOS device.

Set the ACOS device’s hostname.

Configure ICMPv6 rate limiting for IPv6 to protect against denial­-of­-se­rvice (DoS) attacks.

Configure ICMP rate limiting, to protect against denial­-of­-se­rvice (DoS) attacks.

Get a file from a remote site.

Get files from a remote site period­ically.

Access the CLI config­uration level for an interface.

Configure global IP settings.

Configure Intell­igent Platform Management Interface (IPMI) settings on the ACOS device.

Configure global IPv6 settings.

Configure a key chain for use by routing authen­tic­ation features.

Configure an LACP tunnel for LACP passth­rough. This feature allows the ACOS device to forward traffic on one trunk that originates on another trunk that is down. With this feature, if an LACP trunk goes down, the other trunk is used to continue connec­tivity for the traffic.

Set the Link Aggreg­ation Control Protocol (LACP) priority.

Set Lightw­eight Directory Access Protocol (LDAP) parameters for authen­tic­ating admini­str­ative access to the ACOS device.

Link the “start­up-­config” token to the specified config­uration profile. By default, “start­up-­config” is linked to “default”, which means the config­uration profile stored in the image area from which the ACOS device most recently rebooted.

Enable the Link Layer Detection Protocol (LLDP). You can enable LLDP to either receive only, transmit only, or transmit and receive.

Specify the hostname or IP address and Ethernet interface to use as the management interface for the LLDP agent on the ACOS device.

Configure the interval between transm­ission of LLDP notifi­cations during normal transm­ission periods. (In the IEEE 802.3AB specif­ica­tion, this the msgTxI­nterval parame­ter.)

Defines the alpha-­numeric string that describes the system in the network.

Defines the string that will be assigned as the system name.

Set the initial value for the txFast variable, which determines the number of LLDP data packets that are transm­itted during a fast transm­ission period. (In the IEEE 802.3AB specif­ica­tion, this the txFastInit parame­ter.)

Configure the LLDP PDU transm­ission interval for fast periods. (In the IEEE 802.3AB specif­ica­tion, this the msgFastTx parame­ter.)

Configure the time to live (TTL) transm­ission interval that is carried in LLDP frames during normal (non-fast) periods. (In the IEEE 802.3AB specif­ica­tion, this the msgTxHold parame­ter.)

Configure the LLDP packet transmit interval. (In the IEEE 802.3AB specif­ica­tion, this the msgTxI­nterval parame­ter.)

Configure the delay between a change to admini­str­ative “disabled” status of LDDP and reinit­ial­ization of the protocol.

Set the locale for the current terminal session.

Configure audit logging to an external server.

Configure the event log on the ACOS device.

Set the logging level for messages sent to the console.

Specify the email addresses to which to send event messages.

Configure log email settings.

Configure a filter for emailing log messages.

Send the messages that are in the event buffer to an external file server.

Enable logging facili­ties.

Specify a Syslog server to which to send event messages.

Set the logging level for messages sent to the terminal monitor.

Set the syslog logging level for events sent to the syslog host.

Set the logging level for traps sent to the SNMP host.

Configure a static MAC address.

Set the aging time for dynamic (learned) MAC entries. An entry that remains unused for the duration of the aging time is removed from the MAC table.

Change the maximum number of paths a route can have in the Forwarding Inform­ation Base (FIB).

Specify a port to receive copies of another port’s traffic.

Specify event thresholds for utiliz­ation of resources.

Enable simult­aneous admin sessions.

Enable use of more than one CPU for control proces­sing.

Specify the maximum amount of time ACOS can hold onto a NetFlow record packet in the queue before sending it to the NetFlow collector. ACOS holds a NetFlow packet in the queue until the packet payload is full of record data or until the queue timer expires.

Configures the algorithm that Netflow uses to sample traffic. The only option is the random algorithm.

Enable ACOS to act as a NetFlow exporter, for monitoring traffic and exporting the data to one or more NetFlow collectors for analysis.

Remove a config­uration command from the running config­ura­tion.

Configure Network Time Protocol (NTP) parame­ters.

Get the status of the NTP servers.

Configure a remote tunnel endpoint for remote sites where protected objects reside. This can be used in conjun­ction with OSPF neighbor adjacency via GRE or VXLAN tunnels.

Deletes a self-s­igned certif­icate or the CSR file.

Set RADIUS parame­ters, for authen­tic­ating admini­str­ative access to the ACOS device.

Restore the startu­p-c­onfig, aFleX policy files, <<when aFlex support is added>> and SSL certif­icates and keys from a .tar file previously created by the backup command. The restored config­uration takes effect following a reboot.

Configure router logging to a local file.

Sends router logs to the logging buffer.

Enter the config­uration mode for a dynamic routing protocol.

Configure a route map.

Enable display of file inform­ation in the runnin­g-c­onfig.

Access the hardware diagno­stics menu.

Configure parameters for sFlow packet sampling.

On the Thunder 14045 device with dual processing modules, this command causes all traffic to be processed by the master only.

Configure a Simple Mail Transfer Protocol (SMTP) server to use for sending emails from the ACOS device.

Configures the time to establish an SSH connec­tion.

Perform an SSHD operation on the system.

Set the global traffic limits for all VLANs. The limit applies system­-wide to all VLANs; collec­tively, all ACOS device VLANs cannot exceed the specified limit.

Enable logging for packet anomaly events. This type of logging applies to system­-wide attacks such as SYN attacks.

Configures fail-safe parameters for the Layer 2/3 ASIC.

Enable logging for DDoS attacks. This type of logging applies to violations of DDoS Mitigation rules.