ACS 命令行常用手册.docx

1、ACS 命令行常用手册ACS 命令行常用手册ACS命令行可以通过”？”查看可以执行的命令以及命令的作用。本文档列出运维常用命令，其他命令可以查看Cisco的命令手册CLI Reference Guide for Cisco Secure Access Control System 5.3查看当前时间：Gree-ACS-1/admin# show clock sTue Jul 3 16:04:28 CST 2012查看NTP同步状态：Gree-ACS-1/admin# show ntp Primary NTP : 10.1.1.3synchronised to local net at stra

2、tum 11 time correct to within 12 ms polling server every 1024 s remote refid st t when poll reach delay offset jitter=*127.127.1.0 LOCAL(0) 10 l 13 64 377 0.000 0.000 0.001 10.1.1.3 .LOCL. 1 u 992 1024 377 0.442 764.600 60.381Warning: Output results may conflict during periods of changing synchroniz

3、ation.域名查询命令：Gree-ACS-1/admin# nslookup Trying ; -HEADER- opcode: QUERY, status: NOERROR, id: 46407; flags: qr aa rd; QUERY: 1, ANSWER: 17, AUTHORITY: 0, ADDITIONAL: 6; QUESTION SECTION:;. IN ANY; ANSWER SECTION:. 600 IN A 172.62.2.1. 600 IN A 172.74.1.1. 600 IN A 10.1.1.1. 600 IN A 10.1.1.3. 600 IN

4、 A 10.1.1.219. 600 IN A 10.1.1.2. 600 IN A 10.1.1.4. 600 IN A 10.1.1.168. 3600 IN NS zhuhai-. 3600 IN NS zhuhai-. 3600 IN NS . 3600 IN NS . 3600 IN NS gree-. 3600 IN NS cq-. 3600 IN NS . 3600 IN SOA . . 355304 900 600 86400 3600. 3600 IN MX 6 .; ADDITIONAL SECTION:zhuhai-. 1200 IN A 10.1.1.219. 3600

5、 IN A 10.1.1.223. 1200 IN A 10.1.1.168cq-. 1200 IN A 192.168.2.222. 1200 IN A 10.1.1.220. 1200 IN A 10.1.1.163Received 502 bytes from 10.1.1.223#53 in 26 ms查看接口状态：Gree-ACS-1/admin# show interface gigabitEthernet 0eth0 Link encap:Ethernet HWaddr E4:1F:13:F1:C1:FD inet addr:10.2.12.249 Bcast:10.2.12.2

6、55 Mask:255.255.255.0 inet6 addr: fe80:e61f:13ff:fef1:c1fd/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:195870 errors:0 dropped:0 overruns:0 frame:0 TX packets:139481 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:187723968 (179.0 MiB) TX b

7、ytes:37285083 (35.5 MiB) Interrupt:169 Memory:e8100000-e8110000 查看版本信息：Gree-ACS-1/admin# show version Cisco Application Deployment Engine OS Release: 1.2ADE-OS Build Version: 1.2.0.228ADE-OS System Architecture: i386Copyright (c) 2005-2009 by Cisco Systems, Inc.All rights reserved.Hostname: Gree-ACS

8、-1Version information of installed applications- Cisco ACS VERSION INFORMATION-Version : 5.3.0.40.5Internal Build ID : B.839Patches : 5-3-0-40-5查看ACS版本信息：Gree-ACS-1/admin# show application version acsCisco ACS VERSION INFORMATION-Version : 5.3.0.40.5Internal Build ID : B.839Patches : 5-3-0-40-5查看ACS

9、运行状态：Gree-ACS-1/admin# sh application status acsACS role: PRIMARYProcess database runningProcess management runningProcess runtime runningProcess adclient runningProcess view-database runningProcess view-jobmanager runningProcess view-alertmanager runningProcess view-collector runningProcess view-lo

10、gprocessor running重启ACS服务：application stop acs /停止ACS服务application start acs /启动ACS服务查看路由信息：Gree-ACS-1/admin# show ip route Kernel IP routing tableDestination Gateway Genmask Flags Metric Ref Use Iface10.2.12.0 0.0.0.0 255.255.255.0 U 0 0 0 eth00.0.0.0 10.2.12.254 0.0.0.0 UG 0 0 0 eth0查看磁盘空间：Gree-AC

11、S-1/admin# show disks disk: 1% used (335320 of 65539868)temp. space 1% used (58060 of 8063408)Internal filesystems: all internal filesystems have sufficient free space查看CPU信息：Gree-ACS-1/admin# show cpu processor : 0model : Intel(R) Core(TM)2 Quad CPU Q9400 2.66GHzspeed(MHz): 2000.000cache size: 3072

12、 KBprocessor : 1model : Intel(R) Core(TM)2 Quad CPU Q9400 2.66GHzspeed(MHz): 2000.000cache size: 3072 KBprocessor : 2model : Intel(R) Core(TM)2 Quad CPU Q9400 2.66GHzspeed(MHz): 2000.000cache size: 3072 KBprocessor : 3model : Intel(R) Core(TM)2 Quad CPU Q9400 2.66GHzspeed(MHz): 2000.000cache size: 3

13、072 KB查看CPU统计信息：Gree-ACS-1/admin# show cpu statistics user time: 82681kernel time: 6111idle time: 4705080i/o wait time: 6623irq time: 705保存配置：Gree-ACS-1/admin# write memory Generating configuration.查看当前运行的配置：Gree-ACS-1/admin# show running-config Generating configuration.! hostname Gree-ACS-1! ip dom

14、ain-name ! interface GigabitEthernet 0 ip address 10.2.12.249 255.255.255.0! interface GigabitEthernet 1 shutdown! interface GigabitEthernet 2 shutdown! interface GigabitEthernet 3 shutdown! ip name-server 10.1.1.223 10.1.1.220 /DNS服务器! ip default-gateway 10.2.12.254 /默认网关! clock timezone Asia/Chong

15、qing /时区! ntp server 10.1.1.3 /NTP服务器!username admin password hash $1$DyhR.5Lc$xWJT1OXhSqKVMjA/j.YjZ. role admin !service sshd /开启SSH服务!repository acs-upgrade-repo /外部资源，用于升级或者备份 url disk:repository backup url ftp:/172.16.17.201/gree/backup/ user terry password hash 4e070e0fdb362e732fc777c7c9d964768

16、481d14crepository tftp url tftp:/172.16.16.8repository upgrade url ftp:/10.2.12.100/acs/ user terry password hash 4e070e0fdb362e732fc777c7c9d964768481d14crepository upgrade_to_5.3 url ftp:/172.16.17.202 user liyx password hash 9e240d7c08b7043227dfc497a14ae25a795bfe12!logging localhost /记录日志的位置logging loglevel 6 /记录日志的等级!kron policy-list policyList_acs_config cli acs scheduled_backup acs_config repository tftp!kron occurrence occurrence_acs_config at 12:00 Tuesday recurring policy-list policyList_acs_config!icmp echo on /允许ping!