Cisco NCS 1004 Installation manual

Command Reference for Cisco NCS 1004
First Published: 2019-08-30
Last Modified: 2020-04-14
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2020 Cisco Systems, Inc. All rights reserved.

CONTENTS
Commands 1
CHAPTER 1
Reference 3
aaa authentication login 4
aaa authorization 5
active 6
address 7
cipher-suite 8
controller coherentDSP 9
controller HundredGigECtrlr 11
controller ODU4 13
controller optics 15
destination address 19
destination ipv4 unicast 20
destination transport-method 21
dh 22
dwdm-carrier 23
encryption 24
fault-profile 25
fault-profile apply 27
gmpls optical-uni 28
http-proxy 29
hw-module 30
ikev2 policy 33
ikev2 profile 34
ikev2 proposal 35
integrity 36
Command Reference for Cisco NCS 1004
iii

interface gcc0 37
interface gcc2 38
ipcc routed 39
ipv4 access-group 40
ipv6 access-group 41
keyring 42
license smart register 43
license smart renew 44
license smart deregister 45
lifetime 46
link-id ipv4 unicast 47
lmp 48
match address local 49
match identity remote address 50
neighbor interface-id unnumbered 51
neighbor link-id ipv4 unicast 52
neighbor 53
otnsec policy 54
path-option 55
peer 56
pm 57
pre-shared-key 62
prf 63
router-id ipv4 unicast 64
sak-rekey-interval 65
security-policy 66
session-id 67
show alarms 68
show controllers 70
show access-lists ipv4 80
show access-lists ipv6 82
show environment 84
show hw-module 87
show inventory 90
Command Reference for Cisco NCS 1004
iv
Contents

show led 97
show platform 98
signalling refresh out-of-band interval 101
signalling refresh out-of-band missed 102
tunnel-id 103
tunnel-properties 104
Command Reference for Cisco NCS 1004
v
Contents

Command Reference for Cisco NCS 1004
vi
Contents

Commands
•Reference, on page 3
•aaa authentication login, on page 4
•aaa authorization, on page 5
•active, on page 6
•address, on page 7
•cipher-suite, on page 8
•controller coherentDSP, on page 9
•controller HundredGigECtrlr, on page 11
•controller ODU4, on page 13
•controller optics, on page 15
•destination address, on page 19
•destination ipv4 unicast, on page 20
•destination transport-method, on page 21
•dh, on page 22
•dwdm-carrier, on page 23
•encryption, on page 24
•fault-profile, on page 25
•fault-profile apply, on page 27
•gmpls optical-uni, on page 28
•http-proxy, on page 29
•hw-module, on page 30
•ikev2 policy, on page 33
•ikev2 profile, on page 34
•ikev2 proposal, on page 35
•integrity, on page 36
•interface gcc0, on page 37
•interface gcc2, on page 38
•ipcc routed, on page 39
•ipv4 access-group, on page 40
•ipv6 access-group, on page 41
•keyring, on page 42
•license smart register, on page 43
•license smart renew , on page 44
Command Reference for Cisco NCS 1004
1

•license smart deregister, on page 45
•lifetime, on page 46
•link-id ipv4 unicast, on page 47
•lmp, on page 48
•match address local, on page 49
•match identity remote address, on page 50
•neighbor interface-id unnumbered, on page 51
•neighbor link-id ipv4 unicast, on page 52
•neighbor, on page 53
•otnsec policy, on page 54
•path-option, on page 55
•peer, on page 56
•pm, on page 57
•pre-shared-key, on page 62
•prf, on page 63
•router-id ipv4 unicast, on page 64
•sak-rekey-interval, on page 65
•security-policy, on page 66
•session-id, on page 67
•show alarms, on page 68
•show controllers, on page 70
•show access-lists ipv4, on page 80
•show access-lists ipv6, on page 82
•show environment, on page 84
•show hw-module, on page 87
•show inventory, on page 90
•show led, on page 97
•show platform, on page 98
•signalling refresh out-of-band interval, on page 101
•signalling refresh out-of-band missed, on page 102
•tunnel-id, on page 103
•tunnel-properties, on page 104
Command Reference for Cisco NCS 1004
2
Commands

Reference
This guide describes the commands supported in Cisco NCS 1004. For information on Cisco IOS XR
commands, see here.
Command Reference for Cisco NCS 1004
3
Commands
Reference

aaa authentication login
To configure authentication, authorization, and accounting (AAA) authentication at login, use the aaa
authentication login command in global configuration mode.
aaa authentication login { default | list-name }method-list
Syntax Description Sets authentication for login.login
Uses the listed authentication methods that follow this keyword as the default list of methods
for authentication.
default
Character string used to name the authentication method list.list-name
Method used to enable AAA system accounting. Method list types are entered in the preferred
sequence. The value is one of the following options:
•group tacacs+ — Specifies a method list that uses the list of all configured TACACS+
servers for authentication.
•group radius — Specifies a method list that uses the list of all configured RADIUS
servers for authentication.
•group named-group — Specifies a named subset of TACACS+ or RADIUS servers for
authentication.
•local — Specifies a local username or password database for authentication.
•line — Specifies a line password or user group for authentication.
method-list
Command Default No authentication is performed.
Command Modes Global configuration
Command History ModificationRelease
This command was introduced.R7.0.1
Example
The following example shows how to specify the default method list for authentication, and also
enable authentication.
configure
aaa authentication login default group tacacs+
exit
commit
Command Reference for Cisco NCS 1004
4
Commands
aaa authentication login