---
title: Configuration-Mode Commands
slug: ps/help/en_us/sd/25x/cli/configuration-mode-commands
docTags: 
createdAt: 2026-10-06T15:00:39.014Z
---

## Entering configuration mode

:::Paragraph{indent="1"}
You can perform configuration tasks while in configuration mode. Only administrator users can perform configuration mode and enable mode commands. All commands available in user mode and enable mode are also available in configuration mode. Monitor users cannot perform configuration tasks.
:::

:::Paragraph{indent="1"}
To enter configuration-mode:
:::

1. Connect to the CLI and enter the following commands:

```bash
login as: admin
Services Director
Last login: Wed Jan 20 13:02:09 2010 from 10.0.1.1
amnesiac > enable
amnesiac # configure terminal
amnesiac (config) #
```

:::Paragraph{indent="1"}
You are now in configuration mode.
:::

2. To exit configuration mode, enter exit. For information about the exit command, see [ping](docId\:q-wP5fTzpWO2TO-RsyDPo)

:::hint{type="info"}
For an alphabetical list of Configuration-Mode commands, see the Contents page of this book.
:::

## Configuration-Mode Commands

:::Paragraph{indent="1"}
The following section contains the Services Director commands.
:::

:::Paragraph{indent="1"}
For an alphabetical list of Configuration-Mode commands, see the Table of Contents for this guide.
:::

### access enable

:::Paragraph{indent="1"}
Enables secure access to an appliance using an internal management Access Control List (ACL).
:::

### Syntax

```bash
[no] access enable
Usage Guidelines
```

:::Paragraph{indent="1"}
Appliances are subject to the network policies defined by corporate security policy, particularly in large networks. Using an internal management ACL you can:
:::

:::Paragraph{listStyleType="disc" indent="2"}
restrict access to certain interfaces or protocols of an appliance.
:::

:::Paragraph{listStyleType="disc" indent="2"}
restrict inbound IP access to an appliance, protecting it from access by hosts that do not have permission without using a separate device (such as a router or firewall).
:::

:::Paragraph{listStyleType="disc" indent="2"}
specify which hosts or groups of hosts can access and manage an appliance by IP address, simplifying the integration of appliances into your network. You can also restrict access to certain interfaces or protocols.
:::

:::Paragraph{indent="1"}
This feature provides the following safeguards to prevent accidental disconnection from the appliance.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It detects the IP address you are connecting from and displays a warning if you add a rule that denies connections to that address.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It always allows the default appliance ports 7800, 7801, 7810, 7820, and 7850.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It always allows a previously-connected appliance to connect and tracks any changes to the IP address of the CMC to prevent disconnection.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It converts well-known port and protocol combinations such as SSH, Telnet, HTTP, HTTPS, SNMP, and SOAP into their default management service and protects these services from disconnection. For example, if you specify protocol 6 (TCP) and port 22, the management ACL converts this port and protocol combination into SSH and protects it from denial.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It tracks changes to default service ports and automatically updates any references to changed ports in the access rules.
:::

:::Paragraph{listStyleType="disc" indent="2"}
You can also change the standard port for HTTPS (443) to match your management standards using [web prefs log lines](docId:2xtd8nOKdlgsAEu6GI3W6) and [web httpd listen enable](docId:2xtd8nOKdlgsAEu6GI3W6).
:::

### Examples

```bash
amnesiac (config) # access enable
```

### Related Commands

:::Paragraph{indent="1"}
[show access status](docId\:q-wP5fTzpWO2TO-RsyDPo), [show access inbound rules](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### access inbound rule add

:::Paragraph{indent="1"}
Adds a secure access inbound rule.
:::

### Syntax

```bash
[no] access inbound rule add [allow | deny] protocol protocol-number service service dstport port srcaddr ip-addr interface interface rulenum rulenum | [log [on | off] ] | [override]
```

### Parameters

```bash
allow | deny
Specify the action on the rule:
```

:::Paragraph{listStyleType="disc" indent="3"}
allow: Allows a matching packet access to the appliance. This is the default action.
:::

:::Paragraph{listStyleType="disc" indent="3"}
deny: Denies access to any matching packets.
:::

```bash
protocol protocol-number
Specify all, icmp, tcp, udp, or protocol number (1, 6, 17) in IP packet header. The default setting is all.
service service
Optionally, specify the service name: http, https, snmp, ssh, soap, telnet
dstport port
Optionally, specify the destination port of the inbound packet.
You can also specify port ranges: 1000-30000
srcaddr ip-addr
Optionally, specify the source subnet of the inbound packet; for example, 1.2.3.0/24
interface interface
Optionally, specify an interface name: primary, aux, inpath0_0.
rulenum rulenum
Optionally, specify a rule number from 1 to N, start, or end.
```

:::Paragraph{indent="1"}
The appliances evaluate rules in numerical order starting with rule **1**. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule do not match, the system consults the next rule. For example, if the conditions of rule **1** do not match, rule **2** is consulted. If rule **2** matches the conditions, it is applied, and no further rules are consulted.
:::

```bash
description
```

:::Paragraph{indent="1"}
Optionally, specify a description to facilitate communication about network administration.
:::

```bash
log [on | off]
```

:::Paragraph{indent="1"}
Optionally, specify to track denied packets in the log. By default, packet logging is enabled.
:::

```bash
override
```

:::Paragraph{indent="1"}
Specify to ignore the warning and force the rule modification. If you add, delete, edit, or move a rule that could disconnect you from the appliance, a warning message appears. You can specify **override** to ignore the warning and force the rule modification. Use caution when you override a disconnect warning.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The management ACL contains rules that define a match condition for an inbound IP packet. You set a rule to allow or deny access to a matching inbound IP packet. When you add a rule on the appliance, the destination specifies the appliance itself, and the source specifies a remote host.
:::

:::Paragraph{indent="1"}
The ACL rules list contains default rules that allow you to use the management ACL with the RiOS features PFS, DNS caching, and RSP. These default rules allow access to certain ports required by these features. The list also includes a default rule that allows access to the CMC. If you delete the default ACL rules for one of these features and need to restore it.
:::

### Examples

```bash
amnesiac (config) # access inbound rule add allow protocol tcp/udp
dstport 1234 srcaddr 10.0.0.1/16 interface primary rulenum 2
```

### Related Commands

:::Paragraph{indent="1"}
[show access inbound rules](docId\:q-wP5fTzpWO2TO-RsyDPo), [show access status](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### access inbound rule edit rulenum

:::Paragraph{indent="1"}
Modifies a secure access inbound rule.
:::

### Syntax

```bash
[no] access inbound rule edit rulenum rulenum action [allow | deny] [protocol protocol-number service service dstport port | srcaddr subnet | interface interface |] | log [on | off] | [override]
```

### Parameters

```bash
rulenum rulenum
```

:::Paragraph{indent="1"}
Optionally, specify a rule number from **1** to **N**, **start**, or **end**.
:::

:::Paragraph{indent="1"}
appliances evaluate rules in numerical order starting with rule **1**. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule do not match, the system consults the next rule. For example, if the conditions of rule **1** do not match, rule **2** is consulted. If rule **2** matches the conditions, it is applied, and no further rules are consulted.
:::

```bash
action [allow | deny]
```

:::Paragraph{indent="1"}
Specify the action on the rule:
:::

```bash
allow
```

:::Paragraph{indent="1"}
Allows a matching packet access to the appliance. This is the default action.
:::

```bash
deny
```

:::Paragraph{indent="1"}
Denies access to and logs any matching packets.
:::

```bash
protocol protocol-number
```

:::Paragraph{indent="1"}
Specify **all**, **icmp**, **tcp**, **udp**, or protocol number (**1**, **6**, **17**) in IP packet header. The default setting is **all**.
:::

```bash
service service
```

:::Paragraph{indent="1"}
Optionally, specify the service name: **http**, **https**, **snmp**, **ssh**, **telnet**
:::

```bash
dstport port
```

:::Paragraph{indent="1"}
Specify the destination port.
:::

:::Paragraph{indent="1"}
You can also specify port ranges: 1000-30000
:::

```bash
srcaddr subnet
```

:::Paragraph{indent="1"}
Specify the source subnet.
:::

:::Paragraph{indent="1"}
For the subnet address, use the format XXX.XXX.XXX.XXX/XX.
:::

```bash
interface interface
```

:::Paragraph{indent="1"}
Specify the interface: **primary**, **aux**, **inpath0\_0**
:::

```bash
description
```

:::Paragraph{indent="1"}
Optionally, specify a description to facilitate communication about network administration.
:::

```bash
log [on | off]
```

:::Paragraph{indent="1"}
Optionally, specify to enable or disable log in on this command.
:::

```bash
override
```

:::Paragraph{indent="1"}
Specify to ignore the warning and force the rule modification. If you add, delete, edit, or move a rule that could disconnect you from the appliance, a warning message appears. You can specify **override** to ignore the warning and force the rule modification. Use caution when overriding a disconnect warning.
:::

### Examples

```bash
amnesiac (config) # access inbound rule edit action allow dstport 1234 srcaddr 10.0.0.1/16 service http interface primary rulenum 2
```

### Related Commands

:::Paragraph{indent="1"}
[ssh client generate identity user](docId\:LLjz7el7U_q1thWAbTl0A), [show access inbound rules](docId\:q-wP5fTzpWO2TO-RsyDPo), [show access status](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### access inbound rule move

:::Paragraph{indent="1"}
Moves a secure access inbound rule.
:::

### Syntax

```bash
[no] access inbound rule move rulenum to rulenum [override]
```

### Parameters

```bash
rulenum rulenum
```

:::Paragraph{indent="1"}
Specify a rule number from **1** to **N**, **start**, or **end**.
:::

:::Paragraph{indent="1"}
Appliances evaluate rules in numerical order starting with rule **1**. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule do not match, the system consults the next rule. For example, if the conditions of rule **1** do not match, rule **2** is consulted. If rule **2** matches the conditions, it is applied, and no further rules are consulted.
:::

```bash
override
```

:::Paragraph{indent="1"}
Specify to ignore the warning and force the rule modification. If you add, delete, edit, or move a rule that could disconnect you from the appliance, a warning message appears. You can specify **override** to ignore the warning and force the rule modification. Use caution when overriding a disconnect warning.
:::

### Examples

```bash
amnesiac (config) # access inbound rule move 2 to 4
```

### Related Commands

:::Paragraph{indent="1"}
[ssh client generate identity user](docId\:LLjz7el7U_q1thWAbTl0A), [show access inbound rules](docId\:q-wP5fTzpWO2TO-RsyDPo), [show access status](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarm clear

:::Paragraph{indent="1"}
Clears the specified alarm type.
:::

### Syntax

```bash
alarm type clear
```

### Parameters

```bash
type
```

:::Paragraph{indent="1"}
See [alarm enable](docId:2rhKUtqx7Iti1A_X79KfL) for a complete listing and description of alarm types.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use this command to clear the status of the specified alarm type. If you clear an alarm and the error condition still exists, the alarm might be triggered again immediately. If you need to clear an alarm permanently, use the **no alarm enable** command.
:::

### Examples

```bash
amnesiac (config) # alarm secure_vault_unlocked clear
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarm clear-threshold

:::Paragraph{indent="1"}
Sets the threshold to clear the specified alarm type.
:::

### Syntax

```bash
[no] alarm type clear-threshold threshold-level
```

### Parameters

```bash
type
```

:::Paragraph{indent="1"}
See [alarm enable](docId:2rhKUtqx7Iti1A_X79KfL) for a complete listing and description of alarm types.
:::

```bash
threshold-level
```

:::Paragraph{indent="1"}
Specify the threshold level. The threshold level depends on the alarm type, as do the possible values.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use this command to set the threshold at which the alarm is cleared.
:::

### Examples

```bash
amnesiac (config) # alarm cpu_util_indiv clear-threshold 70
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarm enable

:::Paragraph{indent="1"}
Enables the specified alarm.
:::

### Syntax

```bash
[no] alarm type enable
```

### Parameters

```bash
type
```

:::Paragraph{indent="1"}
The alarm type:
:::

:::Paragraph{listStyleType="disc" indent="3"}
autolicense\_error: This alarm triggers on a virtual appliance when the Ivanti Licensing Portal cannot respond to a license request with valid licenses.
:::

:::Paragraph{listStyleType="disc" indent="3"}
autolicense\_info: This alarm triggers if the Ivanti Licensing Portal has information regarding licenses for a virtual appliance.
:::

:::Paragraph{listStyleType="disc" indent="3"}
`backup_generate_fail: `This alarm triggers when the generation of a Services Director backup fails.
:::

:::Paragraph{listStyleType="disc" indent="3"}
`backup_transfer_fail: `This alarm triggers when the transfer of a generated Services Director backup fails.
:::

:::Paragraph{listStyleType="disc" indent="3"}
cpu\_util\_indiv: This alarm indicates whether the system has reached the CPU threshold for any of the CPUs in the system. If the system has reached the CPU threshold, check your settings. If your alarm thresholds are correct, reboot the appliance.
:::

:::Paragraph{listStyleType="disc" indent="3"}
flash\_error: This alarm indicates that the system has detected an error with the flash drive hardware. At times, the USB flash drive that holds the system images might become unresponsive; the appliance continues to function normally. When this error triggers you cannot perform a software upgrade, as the appliance is unable to write a new upgrade image to the flash drive without first power cycling the system. To reboot the appliance, enter the reload command to automatically power cycle the appliance and restore the flash drive to its proper function.
:::

:::Paragraph{listStyleType="disc" indent="3"}
fs\_mnt: This alarm indicates that one of the mounted partitions is full or almost full. The alarm is triggered when only 7% of free space is remaining.
:::

:::Paragraph{listStyleType="disc" indent="3"}
hardware: This alarm indicates the overall health of the hardware.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ipmi: This alarm indicates that the system has detected an Intelligent Platform Management (IPMI) event. This alarm is not supported on all appliance models.
:::

:::Paragraph{listStyleType="disc" indent="3"}
license\_expired: This alarm triggers if any feature has at least one license installed, but all of them are expired.
:::

:::Paragraph{listStyleType="disc" indent="3"}
license\_expiring: This alarm triggers if one or more features is going to expire within two weeks. The license expiring and license expired alarms are triggered per feature; for example, if you install two license keys for a feature, LK1-FOOxxx (expired) and LK1-FOO-yyy (not expired), the alarms do not trigger, because the feature has one valid license.
:::

:::Paragraph{listStyleType="disc" indent="3"}
licensing: This alarm is the parent licensing alarm and triggers if any of the appliance\_unlicensed alarms are active.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_duplex: This alarm is triggered when an interface was not configured for half-duplex negotiation but has negotiated half-duplex mode. Half-duplex significantly limits the optimization service results. This alarm is enabled by default.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_io\_errors: This alarm is triggered when the link error rate exceeds 0.1% while either sending or receiving packets. This threshold is based on the observation that even a small link error rate reduces TCP throughput significantly. A properly configured LAN connection should experience very few errors. The alarm clears when the rate drops below 0.05%. This alarm is enabled by default.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:aux\:half\_duplex: Interface aux Half-Duplex.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:aux\:io\_errors: Interface aux Errors.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:aux\:link\_error: Interface aux Down.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:primary\:half\_duplex: Interface primary Half-Duplex.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:primary\:io\_errors: Interface primary Errors.
:::

:::Paragraph{listStyleType="disc" indent="3"}
link\_state\:primary\:link\_error: Interface primary Down.
:::

:::Paragraph{listStyleType="disc" indent="3"}
linkstate: This alarm indicates that the system has detected a link that is down. The system notifies you through SNMP traps, email, and alarm status. By default, this alarm is not enabled. The no alarm linkstate enable command disables the link state alarm.
:::

:::Paragraph{listStyleType="disc" indent="3"}
local\_db\_fail: Local Database Failure.
:::

:::Paragraph{listStyleType="disc" indent="3"}
local\_ssc\_fail: Local SSC Failure.
:::

:::Paragraph{listStyleType="disc" indent="3"}
master\_password\_fail: This alarm triggers when the Services Director is not running because the master password is corrupt/unavailable/waiting for user input.
:::

:::Paragraph{listStyleType="disc" indent="3"}
paging: This alarm indicates whether the system has reached the memory paging threshold. If 100 pages are swapped approximately every two hours the appliance is functioning properly. If thousands of pages are swapped every few minutes, then reboot the system. If rebooting does not solve the problem, contact Ivanti Support.
:::

:::Paragraph{listStyleType="disc" indent="3"}
peer\_ssc\_fail: Peer SSC Connectivity Failure.
:::

:::Paragraph{listStyleType="disc" indent="3"}
secure\_vault: This alarm indicates a general secure vault error.
:::

:::Paragraph{listStyleType="disc" indent="3"}
secure\_vault\_unlocked: This alarm indicates whether the secure vault is unlocked. When the vault is unlocked, SSL traffic is not optimized and you cannot encrypt a data store.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ssc\_ha\_event: hwCluster errors.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ssl: This alarm indicates whether the system has detected an SSL error.
:::

:::Paragraph{listStyleType="disc" indent="3"}
sticky\_staging\_dir: This alarm indicates that the system has detected an error while trying to create a process dump.
:::

:::Paragraph{listStyleType="disc" indent="3"}
upgrade: This alarm indicates the status of an upgrade.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Enabling alarms is optional.
:::

:::Paragraph{indent="1"}
Th&#x65;**&#x20;no** command option disables all statistical alarms. Th&#x65;**&#x20;no alarm \<type>enable** command disables specific statistical alarms.
:::

### Examples

```bash
amnesiac # alarm hardware enable
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarm error-threshold

:::Paragraph{indent="1"}
Sets a threshold to trigger an alarm.
:::

### Syntax

```bash
[no] alarm type error-threshold threshold-level
```

### Parameters

```bash
type
```

:::Paragraph{indent="1"}
See [alarm enable](docId:2rhKUtqx7Iti1A_X79KfL) for a complete listing and description of alarm types.
:::

```bash
threshold-level
```

:::Paragraph{indent="1"}
Specify the threshold level. The threshold level and possible values depend on the alarm type.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** version of the command resets the threshold to the default level.
:::

### Examples

```bash
amnesiac (config) # alarm cpu_util_indiv error-threshold 80
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarm rate-limit

:::Paragraph{indent="1"}
Sets the alarm rate-limit values.
:::

### Syntax

```bash
alarm type rate-limit [email | snmp] term {long | medium | short} {count value | window duration-seconds}
```

### Parameters

```bash
type
```

:::Paragraph{indent="1"}
See [alarm enable](docId:2rhKUtqx7Iti1A_X79KfL) for a complete listing and description of alarm types.
:::

```bash
email
```

:::Paragraph{indent="1"}
Sets rules for email.
:::

```bash
snmp
```

:::Paragraph{indent="1"}
Sets rules for SNMP.
:::

```bash
term
```

:::Paragraph{indent="1"}
Sets the alarm event rate-limit term value. Valid choices are:
:::

:::Paragraph{listStyleType="disc" indent="3"}
long
:::

:::Paragraph{listStyleType="disc" indent="3"}
medium
:::

:::Paragraph{listStyleType="disc" indent="3"}
short
:::

```bash
count value
```

:::Paragraph{indent="1"}
Sets the count value. The default values are 50 (long), 20 (medium), and 5 (short).
:::

```bash
window duration-seconds
```

:::Paragraph{indent="1"}
Sets the duration of time, in seconds, that the window remains open. The default values are 604,800 (long), 86,400 (medium), and 3600 (short).
:::

### Usage Guidelines

:::Paragraph{indent="1"}
There are three term values--long, medium, and short. Each has a window, which is a number of seconds, and a maximum count. If, for any term value, the number of alarm events exceeds the maximum count during the window, the corresponding email/SNMP notifications are not sent.
:::

### Examples

```bash
amnesiac (config) # alarm cpu_util_indiv rate-limit email term short window 30
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### alarms reset-all

:::Paragraph{indent="1"}
Globally sets all alarms to their default settings.
:::

### Syntax

```bash
alarms reset-all
```

### Usage Guidelines

:::Paragraph{indent="1"}
Use this command to reset all the alarms to their default settings.
:::

### Examples

```bash
amnesiac (config) # alarms reset-all
All alarms reset to default settings
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo), [show alarms](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### arp

:::Paragraph{indent="1"}
Creates static ARP entries in the ARP table.
:::

### Syntax

```bash
[no] arp ip-addr MAC-addr
```

### Parameters

```bash
ip-addr
```

:::Paragraph{indent="1"}
Specify the IP address of the appliance.
:::

```bash
MAC-addr
```

:::Paragraph{indent="1"}
Specify the MAC address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables ARP static entries.
:::

### Examples

```bash
amnesiac (config) # arp 10.0.0.1 00:07:E9:55:10:09
```

### Related Commands

:::Paragraph{indent="1"}
[show arp](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### authentication policy enable

:::Paragraph{indent="1"}
Enables the authentication policy for account control.
:::

### Syntax

```bash
[no] authentication policy enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
An authentication policy enables you to define a set of policies to enforce user login behavior and password strength. Passwords are mandatory when account control is enabled.
:::

:::Paragraph{indent="1"}
After you enable the authentication policy, the current passwords for all users expire. At the next login, each user is prompted to change their password, placing the new password under the account control authentication policy.
:::

:::Paragraph{indent="1"}
When account control is enabled and an administrator uses the **username password 7** command, the password automatically expires. Because the encrypted password cannot be checked against the configured password policy, the user is prompted to change their password at login.
:::

### Examples

```bash
amnesiac (config) # authentication policy enable
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)[username password 7](docId:2xtd8nOKdlgsAEu6GI3W6)
:::

### authentication policy login max-failures

:::Paragraph{indent="1"}
Sets the maximum number of unsuccessful login attempts before temporarily locking the user’s access to the appliance.
:::

### Syntax

```bash
[no] authentication policy login max-failures count [unlock-time seconds]
```

### Parameters

```bash
count
```

:::Paragraph{indent="1"}
Specify the maximum number of unsuccessful login attempts before a temporary account lockout.
:::

```bash
unlock-time seconds
```

:::Paragraph{indent="1"}
Specify the number of seconds the system waits before the user can log in again after an account lockout. If this optional parameter is not specified, the unlock time defaults to 300 seconds.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no authentication policy login max-failures** command resets the maximum number of unsuccessful login attempts allowed to the default value, which is zero, indicating that the account lockout is disabled. This command takes no parameters.
:::

### Examples

```bash
amnesiac (config) # authentication policy login max-failures 3
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### authentication policy password

:::Paragraph{indent="1"}
Configures the authentication policy password settings for account control.
:::

### Syntax

```bash
[no] authentication policy password {change-days days | dictionary enable | difference count | expire days [warn] | length length | lock days | lower-case count | numeric count | repeat count | reuse-interval count | special count | upper-case count}
```

### Parameters

```bash
change-days days
```

:::Paragraph{indent="1"}
Specify the minimum number of days before which passwords cannot be changed.
:::

```bash
dictionary enable
```

:::Paragraph{indent="1"}
Prevents the use of any word found in the dictionary as a password.
:::

```bash
difference count
```

:::Paragraph{indent="1"}
Specify the minimum number of characters that must change between an old and new password. The default for the strong security template is 4.
:::

:::Paragraph{indent="1"}
If the **authentication policy password difference \<count>** value is set to a value greater than zero, a non-administrator must specify the new and old passwords by entering the **username password \[old-password]** command. Administrators are never required to enter an old password when changing an account password.
:::

```bash
expire days
```

:::Paragraph{indent="1"}
Specify the number of days the current password stays in effect. To set the password expiration to 24 hours, specify 0. To set the password expiration to 48 hours, specify 1. Specify a negative number to turn off password expiration.
:::

```bash
length length
```

:::Paragraph{indent="1"}
Specify the minimum password length. The default setting for the strong security template is 14 alphanumeric characters.
:::

```bash
lock days
```

:::Paragraph{indent="1"}
Specify the number of days before an account with an expired password locks.
:::

```bash
lower-case count
```

:::Paragraph{indent="1"}
Specify the minimum number of lowercase letters required in the password. The default for the strong security template is 1.
:::

```bash
numeric count
```

:::Paragraph{indent="1"}
Specify the minimum number of numeric characters required in the password. The default for the strong security template is 1.
:::

```bash
repeat count
```

:::Paragraph{indent="1"}
Specify the maximum number of times a character can occur consecutively.
:::

```bash
reuse-interval count
```

:::Paragraph{indent="1"}
Specify the number of password changes allowed before a password can be reused. The default for the strong security template is 5.
:::

```bash
special count
```

:::Paragraph{indent="1"}
Specify the minimum number of special characters required in the password. The default for the strong security template is 1.
:::

```bash
upper-case count
```

:::Paragraph{indent="1"}
Specify the minimum number of uppercase letters required in the password. The default for the strong security template is 1.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Passwords are mandatory when account control is enabled. Passwords for all users expire as soon as account control is enabled. This behavior forces the user to create a new password that follows the password characteristics defined in the password policy.
:::

:::Paragraph{indent="1"}
When account control is enabled and an administrator uses the **username password 7** command, the password automatically expires. Because the encrypted password cannot be checked against the configured password policy, the user is prompted to change their password at log in.
:::

:::Paragraph{indent="1"}
Empty passwords are not allowed when account control is enabled.
:::

### Examples

```bash
amnesiac (config) # authentication policy password expire 60 warn 3
```

### Related Commands

:::Paragraph{indent="1"}
[authentication policy template](docId:2rhKUtqx7Iti1A_X79KfL), [username password](docId:2xtd8nOKdlgsAEu6GI3W6), [username password 7](docId:2xtd8nOKdlgsAEu6GI3W6), [show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### authentication policy template

:::Paragraph{indent="1"}
Specify the authentication policy template for password policy configuration.
:::

### Syntax

```bash
authentication policy template {strong | basic}
```

### Parameters

```bash
strong
```

:::Paragraph{indent="1"}
Specifies the strong security policy template.
:::

```bash
basic
```

:::Paragraph{indent="1"}
Specifies the basic security policy template.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Th&#x65;**&#x20;authentication policy template strong** command sets the password policy to more stringent enforcement settings. Selecting this template automatically pre-populates the password policy with stricter settings commonly required by higher security standards, such as for the Department of Defense.
:::

:::Paragraph{indent="1"}
To remove the strong security template and return to the basic password policy, use the **authentication policy template basic** command.
:::

:::Paragraph{indent="1"}
When account control is enabled for the first time, the password policy is set to the basic template.
:::

### Examples

```bash
amnesiac (config) # authentication policy template strong

amnesiac # show authentication policy
Authentication policy enabled: yes
Maximum unsuccessful logins before account lockout: 3
Wait before account unlock: 300 Seconds
Minimum password length: 14
Minimum upper case characters in password: 1
Minimum lower case characters in password: 1
Minimum numerical characters in password: 1
Minimum special characters in password: 1
Minimum interval for password reuse: 5
Minimum characters diff for password change: 4
Prevent dictionary words in password: yes
User passwords expire: 60 days
Warn user of an expiring password: 7 days before
User accounts with expired passwords lock: 305 days

amnesiac (config) # authentication policy template basic
amnesiac # show authentication policy
Authentication policy enabled: yes
Maximum unsuccessful logins before account lockout: none
Wait before account unlock: 300 Seconds
Minimum password length: 6
Minimum upper case characters in password: 0
Minimum lower case characters in password: 0
Minimum numerical characters in password: 0
Minimum special characters in password: 0
Minimum interval for password reuse: 0
Minimum characters diff for password change: 0
Prevent dictionary words in password: yes
User passwords expire: never
Warn user of an expiring password: 7 days before
User accounts with expired passwords lock: never
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### authentication policy user lock never

:::Paragraph{indent="1"}
Configures the user account lock settings for account control management.
:::

### Syntax

```bash
[no] authentication policy user username lock never
```

### Parameters

```bash
username
```

:::Paragraph{indent="1"}
Specify the user login: **admin**, **monitor**, or **shark**.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **authentication policy user lock never** command prevents the user’s account from being locked after the password expires. This command is available only when account control is enabled.
:::

:::Paragraph{indent="1"}
The **no authentication policy user lock never** command allows the user account to be locked after the password expires.
:::

### Examples

```bash
amnesiac (config) # authentication policy user admin lock never
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### authentication policy user login-failures reset

:::Paragraph{indent="1"}
Resets a user account so the user can log in again.
:::

### Syntax

```bash
[no] authentication policy user username login-failures reset
```

### Parameters

```bash
username
```

:::Paragraph{indent="1"}
Specify the user login: **admin**, **monitor**, or **shark**.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
If a user account is locked because of a failed login count exceeding the configured value, the **authentication policy user login-failures reset** command resets the account so the user can log in again. This command resets the login count to zero, which is the default value.
:::

### Examples

```bash
amnesiac (config) # authentication policy user admin login-failures reset
Login failures cleared for user admin
```

### Related Commands

:::Paragraph{indent="1"}
[show alarm](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### banner login

:::Paragraph{indent="1"}
Creates the system log in banner.
:::

### Syntax

```bash
[no] banner login message-string
```

### Parameters

```bash
message-string
```

:::Paragraph{indent="1"}
Specify the login banner message. Enclose the message in quotation marks.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables the login banner.
:::

### Examples

```bash
amnesiac (config) # banner login "reminder: meeting today"
```

### Related Commands

:::Paragraph{indent="1"}
[show bootvar](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### banner motd

:::Paragraph{indent="1"}
Creates the system Message of the Day banner.
:::

### Syntax

```bash
[no] banner motd message-string
```

### Parameters

```bash
message-string
```

:::Paragraph{indent="1"}
Specify the login Message of the Day. Enclose the message in quotation marks.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables the system Message of the Day banner.
:::

### Examples

```bash
amnesiac (config) # banner motd "customer visit today"
```

### Related Commands

:::Paragraph{indent="1"}
[show bootvar](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### boot bootloader password

:::Paragraph{indent="1"}
Sets the password for the bootloader.
:::

### Syntax

```bash
boot bootloader password { password | 0 password | 7 password }
```

### Parameters

```bash
password
```

:::Paragraph{indent="1"}
Specify a bootloader password in clear text. The password must be at least 6 characters. This option functions the same as the **0 \<password>** parameter and is provided for backward compatibility.
:::

```bash
0 password
```

:::Paragraph{indent="1"}
Specify a bootloader password in clear text.
:::

```bash
7 password
```

:::Paragraph{indent="1"}
Specify a bootloader password with an encrypted string. The encrypted string is the hash of the clear text password and is 35 bytes long. The first 3 bytes indicate the hash algorithm and the next 32 bytes are the hash values.
:::

### Examples

```bash
amnesiac (config) # boot bootloader password 0 182roy
amnesiac (config) # boot bootloader password 7 $1$qyP/PKii$2v9FOFcXB5a3emuvLKO3M
```

### Related Commands

:::Paragraph{indent="1"}
[show images](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### boot system

:::Paragraph{indent="1"}
Boots the specified partition the next time the system is rebooted.
:::

### Syntax

```bash
boot system partition
```

### Parameters

```bash
partition
```

:::Paragraph{indent="1"}
Specify the partition to boot: **1** or **2**
:::

### Examples

```bash
amnesiac (config) # boot system 1
```

### Related Commands

:::Paragraph{indent="1"}
[show images](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### cli clear-history

:::Paragraph{indent="1"}
Clears the command history for the current user.
:::

### Syntax

```bash
cli clear-history
```

### Examples

```bash
amnesiac (config) # cli clear-history
```

### Related Commands

:::Paragraph{indent="1"}
[show cli](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### cli default auto-logout

:::Paragraph{indent="1"}
Sets the keyboard inactivity time for automatic log out.
:::

### Syntax

```bash
[no] cli default auto-logout minutes
```

### Parameters

```bash
minutes
```

:::Paragraph{indent="1"}
Specify the number of minutes before log out occurs.
:::

### Usage Guidelines

:::Paragraph{indent="2"}
**To disable timeout:**
:::

```bash
cli default auto-logout 0
```

:::Paragraph{indent="1"}
The **no** command option disables the automatic logout feature.
:::

### Examples

```bash
amnesiac (config) # cli default auto-logout 25
```

### Related Commands

:::Paragraph{indent="1"}
[show cli](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### cli default paging enable

:::Paragraph{indent="1"}
Sets the ability to view text one screen at a time.
:::

### Syntax

```bash
[no] cli default paging enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables paging.
:::

### Examples

```bash
amnesiac (config) # cli default paging enable
```

### Related Commands

:::Paragraph{indent="1"}
[show cli](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### cli session

:::Paragraph{indent="1"}
Sets CLI options for the current session only.
:::

### Syntax

```bash
[no] cli session {auto-logout minutes | paging enable | terminal length lines | terminal type terminal_type | terminal width number-of-characters}
```

### Parameters

```bash
auto-logout minutes
```

:::Paragraph{indent="1"}
Sets the number of minutes before the CLI automatically logs out the user. The default value is 15 minutes. The **no** command option disables the automatic logout feature.
:::

```bash
paging enable
```

:::Paragraph{indent="1"}
Sets paging. With paging enabled, if there is too much text to fit on the page, the CLI prompts you for the next page of text. The **no** command option disables paging.
:::

```bash
terminal length lines
```

:::Paragraph{indent="1"}
Sets the terminal length. The **no** command option disables the terminal length.
:::

```bash
terminal type terminal_type
```

:::Paragraph{indent="1"}
Sets the terminal type. The **no** command option disables the terminal type.
:::

```bash
terminal width number-of-characters
```

:::Paragraph{indent="1"}
Sets the terminal width. The **no** command option disables the terminal width.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables CLI option settings.
:::

### Examples

```bash
amnesiac (config) # cli session auto-logout 20
```

### Related Commands

:::Paragraph{indent="1"}
[show cli](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### clock timezone

:::Paragraph{indent="1"}
Sets the current time zone.
:::

### Syntax

```bash
clock timezone zone
```

### Parameters

```bash
zone
```

:::Paragraph{indent="1"}
Specify the time zone name: **Africa**, **America**, **Antarctica**, **Arctic**, **Asia**, **Atlantic\_Ocean**, **Australia**, **Europe**, **GMT-offset**, **Indian\_Ocean**, **Pacific\_Ocean**, **UTC**.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The default value is GMT-offset.
:::

### Examples

```bash
amnesiac (config) # clock timezone Africa
```

### Related Commands

:::Paragraph{indent="1"}
[show clock](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration copy

:::Paragraph{indent="1"}
Copies a configuration file.
:::

### Syntax

```bash
configuration copy sourcename new-filename
```

### Parameters

```bash
sourcename
```

:::Paragraph{indent="1"}
Specify the name of the source file.
:::

```bash
new-filename
```

:::Paragraph{indent="1"}
Specify the name of the destination file.
:::

### Examples

```bash
amnesiac (config) # configuration copy westcoast eastcoast
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration delete

:::Paragraph{indent="1"}
Deletes a configuration file.
:::

### Syntax

```bash
configuration delete filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the name of the configuration file to delete.
:::

### Examples

```bash
amnesiac (config) # configuration delete westcoast
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration factory

:::Paragraph{indent="1"}
Creates a new configuration file.
:::

### Syntax

```bash
configuration factory filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the name of the destination file.
:::

### Examples

```bash
amnesiac (config) # configuration factory eastcoast
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration fetch

:::Paragraph{indent="1"}
Downloads a configuration file over the network.
:::

### Syntax

```bash
configuration fetch URL,-scp://, or -ftp://username:password@hostname/path/filename | filename
```

### Parameters

```bash
URL,-scp://, or -ftp://username:password@hostname/path/filename
```

:::Paragraph{indent="1"}
Specify the location of the configuration file to download in URL, scp\://, or ftp\:// format.
:::

```bash
filename
```

:::Paragraph{indent="1"}
Create a new name for the configuration file.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
To copy one configuration file to another appliance:
:::

:::Paragraph{listStyleType="disc" indent="2"}
Fetch the configuration time from the remote:
:::

```bash
configuration fetch <url-to-remote-config> <new-config-name>
```

:::Paragraph{listStyleType="disc" indent="2"}
Activate the newly-fetched configuration
:::

```bash
configuration switch-to <new-config-name>
```

### Examples

```bash
amnesiac (config) # configuration fetch http://domain.com/westcoast newconfig
amnesiac (config) # configuration switch-to newconfig
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration jump-start

:::Paragraph{indent="1"}
Restarts a simple configuration wizard.
:::

### Syntax

```bash
configuration jump-start
```

### Usage Guidelines

:::Paragraph{indent="1"}
The configuration wizard lets you set five basic configuration parameters with a single command. Press Enter to accept the value displayed or enter a new value.
:::

:::Paragraph{indent="1"}
For a Services Director on the AWS platform, you can only set the hostname using the wizard.
:::

### Examples

```bash
*** Services Director on VMware and KVM ***
amnesiac (config) # configuration jump-start
Services Director configuration wizard.

Step 1: Hostname? [host-1234]
Step 2: Use DHCP on primary interface? [no]
Step 3: Primary IP address? [10.62.165.135]
Step 4: Netmask? [255.255.192.0]
Step 5: Default gateway? [10.62.128.1]

You have entered the following information:
1. Hostname: host-1234
2. Use DHCP on primary interface: no
3. Primary IP address: 10.62.165.135
4. Netmask: 255.255.192.0
5. Default gateway: 10.62.128.1

To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
To continue setup, navigate your web browser to the address configured above
*** Services Director on AWS ***
amnesiac (config) # configuration jump-start
Services Director configuration wizard.

Step 1: Hostname? [host-5678]

You have entered the following information:
1. Hostname: host-5678

To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
To continue setup, navigate your web browser to the address configured above
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration merge

:::Paragraph{indent="1"}
Merges common configuration settings from one system to another.
:::

### Syntax

```bash
configuration merge filename new-config-name
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Name of file from which to merge settings.
:::

```bash
new-config-name
```

:::Paragraph{indent="1"}
Specify the new configuration name.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use the **configuration merge** command to deploy a network of appliances. Set up a template for your appliance and merge the template with each appliance in the network.
:::

:::Paragraph{indent="1"}
The following configuration settings are not merged when you run the **configuration merge** command: failover settings, SNMP SysContact and SysLocation, alarm settings, CLI settings, and all network settings (for example, hostname, auxiliary interface, DNS settings, defined hosts, static routing, and in-path routing).
:::

:::Paragraph{indent="1"}
The following configuration settings are merged when you run th&#x65;**&#x20;configuration merge** command: in-path, out-of-path, log settings, protocols, statistics, email, NTP and time, Web, and SNMP.
:::

:::Paragraph{indent="1"}
To merge a configuration file, run the following set of commands:
:::

```bash
configuration write to <new-config-name>
;; this saves the current config to the new name and activates
;; the new configuration
configuration fetch <url-to-remote-config> <temp-config-name>
;; this fetches the configuration from the remote
configuration merge <temp-config-name>
;; this merges the fetched config into the active configuration
;; which is the newly named/created one in step 1 above
configuration delete <temp-config-name>
;; this deletes the fetched configuration as it is no longer
;; needed since you merged it into the active configuration
```

### Examples

```bash
amnesiac (config) # configuration merge tempconfig
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration move

:::Paragraph{indent="1"}
Moves and renames a configuration file.
:::

### Syntax

```bash
configuration move sourcename destname
```

### Parameters

```bash
sourcename
```

:::Paragraph{indent="1"}
Specify the name of the source configuration file.
:::

```bash
destname
```

:::Paragraph{indent="1"}
Specify the name of the new configuration file.
:::

### Examples

```bash
amnesiac (config) # configuration move westcoast eastcoast
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration new

:::Paragraph{indent="1"}
Creates a new, blank configuration file.
:::

### Syntax

```bash
configuration new new-filename | [keep licenses]
```

### Parameters

```bash
new-filename
```

:::Paragraph{indent="1"}
Specify the name of the new configuration file.
:::

```bash
keep licenses
```

:::Paragraph{indent="1"}
Creates a new configuration file with default settings and active licenses.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Ivanti recommends that you use th&#x65;**&#x20;keep licenses** command option. If you do not keep licenses, your new configuration will not have a valid license key.
:::

### Examples

```bash
amnesiac (config) # configuration new westcoast keep licenses
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration revert keep-local

:::Paragraph{indent="1"}
Reverts to the initial configuration but maintains some appliance-specific settings.
:::

### Syntax

```bash
configuration revert keep-local
```

### Examples

```bash
amnesiac (config) # configuration revert keep-local
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration revert saved

:::Paragraph{indent="1"}
Reverts the active configuration to the last saved configuration.
:::

### Syntax

```bash
configuration revert saved
```

### Examples

```bash
amnesiac (config) # configuration revert saved
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration switch-to

:::Paragraph{indent="1"}
Loads a new configuration file and makes it the active configuration.
:::

### Syntax

```bash
configuration switch-to filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename. The default filenames are:
:::

:::Paragraph{listStyleType="disc" indent="3"}
initial: Specify the initial configuration.
:::

:::Paragraph{listStyleType="disc" indent="3"}
initial.bak: Specify the initial backup configuration.
:::

:::Paragraph{listStyleType="disc" indent="3"}
cold: Specify the configuration file before SDR has occurred.
:::

:::Paragraph{listStyleType="disc" indent="3"}
working: Specify the current configuration.
:::

### Examples

```bash
amnesiac (config) # configuration switch-to westcoast
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration upload

:::Paragraph{indent="1"}
Uploads the configuration file.
:::

### Syntax

```bash
configuration upload filename http,-ftp,-or-scp-URL-(e.g.-scp://username:password@host/path) | [active]
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the configuration filename.
:::

```bash
http,-ftp,-or-scp-URL-(e.g.-scp://username:password@host/path)
```

:::Paragraph{indent="1"}
Specify the HTTP, FTP, or scp URL.
:::

```bash
active
```

:::Paragraph{indent="1"}
Sets the uploaded file to the active configuration file.
:::

### Examples

```bash
amnesiac (config) # configuration upload initial scp://test:MyPassword@example/tmp/
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### configuration write

:::Paragraph{indent="1"}
Writes the current, active configuration file to memory.
:::

### Syntax

```bash
configuration write [to filename]
```

### Parameters

```bash
to filename
```

:::Paragraph{indent="1"}
Save the running configuration to a file.
:::

### Examples

```bash
amnesiac (config) # configuration write
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### debug generate dump

:::Paragraph{indent="1"}
Generates a report you can use to diagnose misconfiguration in deployments.
:::

### Syntax

```bash
debug generate dump [full | brief | rsp | stats | all-logs | blockstore | blockstore-fifo] [upload url] ]
```

### Parameters

```bash
full
```

:::Paragraph{indent="1"}
Generate a full system dump.
:::

```bash
brief
```

:::Paragraph{indent="1"}
Generates a brief system dump.
:::

```bash
rsp
```

:::Paragraph{indent="1"}
Generate a full system dump, including VMware Server data.
:::

```bash
stats
```

:::Paragraph{indent="1"}
Generates a full system dump including .dat files.
:::

```bash
all-logs
```

:::Paragraph{indent="1"}
Generate a full system dump with .dat files and all logs.
:::

```bash
blockstore
```

:::Paragraph{indent="1"}
Generate a full system dump with .dat files, all logs, and blockstore phash.
:::

```bash
blockstore-fifo
```

:::Paragraph{indent="1"}
Generate a full system dump with .dat files, all logs, blockstore phash, and fifo.
:::

```bash
upload url
```

:::Paragraph{indent="1"}
Generate a full system dump upload to the specified URL.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
If the upload URL points to a directory on the upload server, you must specify the trailing slash "/". For example, "ftp\://ftp.xxxxxxxx.com/incoming/" rather than "ftp\://ftp.xxxxxxxx.com/incoming". The file name as it exists on the appliance is renamed to the file name specified in the URL.
:::

:::Paragraph{indent="1"}
After the dump generation, the upload is done in the background so you can exit the command-line interface without interrupting the upload process.
:::

### Examples

```bash
amnesiac (config) # debug generate dump brief
amnesiac (config) # debug generate dump upload ftp://ftp.xxxxxxxxx.com/incoming/
```

### email autosupport enable

:::Paragraph{indent="1"}
Enables automatic email notification of significant alarms and events to Ivanti Support.
:::

### Syntax

```bash
[no] email autosupport enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables automatic email notification.
:::

### Examples

```bash
amnesiac (config) # email autosupport enable
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email domain

:::Paragraph{indent="1"}
Sets the domain for email notifications.
:::

### Syntax

```bash
[no] email domain hostname-or-ip-addr
```

### Parameters

```bash
hostname-or-ip-addr
```

:::Paragraph{indent="1"}
Specify the domain for email notifications (only if the email address does not contain it).
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use the email domain command only if the email address does not contain the domain.
:::

:::Paragraph{indent="1"}
The **no** command option disables the email domain.
:::

### Examples

```bash
amnesiac (config) # email domain example.com
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email from-address

:::Paragraph{indent="1"}
Sets the address from which email messages appear to come.
:::

### Syntax

```bash
[no] email from-address email-addr
```

### Parameters

```bash
email-addr
```

:::Paragraph{indent="1"}
Specify the full user name and domain to appear in the email "From:" address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use the **email from-address** command to override the default email address used in outgoing email messages, do-not-reply@\[hostname].\[domainname].
:::

:::Paragraph{indent="1"}
The **no** command option disables the email address configured and returns to the default email address.
:::

### Examples

```bash
amnesiac (config) # email from-address bean@caffeitaly.com
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email mailhub

:::Paragraph{indent="1"}
Sets the SMTP server for email notifications.
:::

### Syntax

```bash
[no] email mailhub hostname-or-ip-addr
```

### Parameters

```bash
hostname-or-ip-addr
```

:::Paragraph{indent="1"}
Specify the SMTP server for email notifications.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables the SMTP server.
:::

### Examples

```bash
amnesiac (config) # email mailhub mail-server.example.com
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email mailhub-port

:::Paragraph{indent="1"}
Sets the email port for email notifications.
:::

### Syntax

```bash
[no] email mailhub-port port
```

### Parameters

```bash
port
```

:::Paragraph{indent="1"}
Specify the email port for email notifications.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables the email port.
:::

### Examples

```bash
amnesiac (config) # email mailhub-port 135
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email notify events enable

:::Paragraph{indent="1"}
Enables email notification for events.
:::

### Syntax

```bash
[no] email notify events enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables email notification.
:::

### Examples

```bash
amnesiac (config) # email notify events enable
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email notify events recipient

:::Paragraph{indent="1"}
Sets the email address for notification of events.
:::

### Syntax

```bash
[no] email notify events recipient email-addr
```

### Parameters

```bash
email-addr
```

:::Paragraph{indent="1"}
Specify the email address of the user to receive notification of events.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables email address for notification.
:::

### Examples

```bash
amnesiac (config) # email notify events recipient johndoe@example.com
amnesiac (config) # email notify events recipient janedoe@example.com
```

### Related Commands

:::Paragraph{indent="1"}
[show info](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email notify failures enable

:::Paragraph{indent="1"}
Enables email notification of system failures, such as core dumps.
:::

### Syntax

```bash
[no] email notify failures enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables email notification.
:::

### Examples

```bash
amnesiac (config) # email notify failures enable
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email notify failures recipient

:::Paragraph{indent="1"}
Enables email notification of system failures, such as core dumps.
:::

### Syntax

```bash
[no] email notify failures recipient email-addr
```

### Parameters

```bash
recipient email-addr
```

:::Paragraph{indent="1"}
Specify the email address of the user to receive notification of failures.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables email notification.
:::

:::Paragraph{indent="1"}
You must enter separate commands for each email address. Each command line accepts only one email address.
:::

### Examples

```bash
amnesiac (config) # email notify failures recipient johndoe@example.com
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### email send-test

:::Paragraph{indent="1"}
Sends a test email to all configured event and failure recipients.
:::

### Syntax

```bash
email send-test
```

### Usage Guidelines

:::Paragraph{indent="1"}
You can also access this command from enable mode.
:::

### Examples

```bash
amnesiac (config) # email send-test
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### events max-age

:::Paragraph{indent="1"}
Sets the maximum age for keeping history events.
:::

### Syntax

```bash
events max-age period
```

### Parameters

```bash
period
```

:::Paragraph{indent="1"}
Specify the time period to keep events:
:::

:::Paragraph{listStyleType="disc" indent="3"}
minute: Specifies one minute.
:::

:::Paragraph{listStyleType="disc" indent="3"}
hour: Specifies one hour.
:::

:::Paragraph{listStyleType="disc" indent="3"}
day: Specifies one day.
:::

:::Paragraph{listStyleType="disc" indent="3"}
week: Specifies one week.
:::

:::Paragraph{listStyleType="disc" indent="3"}
month: Specifies one month.
:::

:::Paragraph{listStyleType="disc" indent="3"}
year: Specifies one year.
:::

:::Paragraph{listStyleType="disc" indent="3"}
decade: Specifies ten years.
:::

### Examples

```bash
amnesiac (config) # events max-age month
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### events reset

:::Paragraph{indent="1"}
Resets the history daemon and drop-event history tables.
:::

### Syntax

```bash
events reset
```

### Examples

```bash
amnesiac (config) # events reset
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### file debug-dump delete

:::Paragraph{indent="1"}
Deletes the specified debug dump file.
:::

### Syntax

```bash
file debug-dump delete filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename.
:::

### Examples

```bash
amnesiac (config) # file debug-dump delete mydumpfile.txt
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### file debug-dump email

:::Paragraph{indent="1"}
Sends a debug dump file in email to pre-configured recipients.
:::

### Syntax

```bash
file debug-dump email filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename.
:::

### Examples

```bash
amnesiac (config) # file debug-dump email mydumpfile.txt
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### file debug-dump upload

:::Paragraph{indent="1"}
Uploads the specified debug dump file.
:::

### Syntax

```bash
file debug-dump upload filename {ftp,-or-scp://username:password@host/path}
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename.
:::

```bash
ftp, or scp URL (e.g.scp://username:password@host/path)
```

:::Paragraph{indent="1"}
Specify the FTP or scp URL.
:::

### Examples

```bash
amnesiac (config) # file debug-dump upload mydebug.txt
scp://me:test@example.com/mypath
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### file process-dump delete

:::Paragraph{indent="1"}
Deletes the specified crash dump file.
:::

### Syntax

```bash
file process-dump delete filename
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename.
:::

### Examples

```bash
amnesiac (config) # file process-dump delete mycrash.txt
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### file process-dump upload

:::Paragraph{indent="1"}
Uploads the specified crash dump file.
:::

### Syntax

```bash
file process-dump upload filename {https,-http,-ftp,-or-scp-URL:-scp://username:password@hostname/path/filename | case-number}
```

### Parameters

```bash
filename
```

:::Paragraph{indent="1"}
Specify the filename.
:::

```bash
https,-http,-ftp, or -scp URL: scp://username:password@hostname/path/filename
```

:::Paragraph{indent="1"}
Specify the URL.
:::

```bash
case-number
```

:::Paragraph{indent="1"}
Specify the customer case number. The case number is a convenient and intuitive method to upload a crash dump file to Ivanti Technical Support without using a URL. Ivanti Technical Support recommends using a case number. The case number is a numeric string.
:::

### Examples

```bash
amnesiac (config) # file process-dump
upload mycrash.txt scp://mylogin:mypassword@myhostname/path/filename
amnesiac (config) # file process-dump upload mycrash.txt 194170
```

### Related Commands

:::Paragraph{indent="1"}
[show files events config](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### fips enable

:::Paragraph{indent="1"}
Enables FIPS mode.
:::

### Syntax

```bash
[no] fips enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
FIPS is a publicly announced set of validation standards developed by the United States National Institute of Standards and Technology (NIST) for use by government agencies and by government contractors.
:::

:::Paragraph{indent="1"}
FIPS 140-3 is a technical and worldwide standard for the implementation of cryptographic modules. FIPS validation makes the appliance more suitable for use with government agencies that have formal policies requiring use of FIPS 140-3 validated cryptographic software.
:::

:::Paragraph{indent="1"}
Ivanti Services Director uses FIPS-capable OpenSSL cryptographic libraries and ensures that cryptographic operations use FIPS-approved providers and algorithms when FIPS mode is enabled. A valid FIPS license must be installed before enabling FIPS mode.Examples
:::

```bash
amnesiac (config) # fips enable
amnesiac (config) # write memory
amnesiac (config) # reload
```

### Related Commands

:::Paragraph{indent="1"}
[show fips status](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### hardware watchdog enable

:::Paragraph{indent="1"}
Enables the hardware watchdog, which monitors the system for hardware errors.
:::

### Syntax

```bash
[no] hardware watchdog enable
```

### Examples

```bash
amnesiac (config) # hardware watchdog enable
```

### Related Commands

:::Paragraph{indent="1"}
[show hardware error-log](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### hardware watchdog shutdown

:::Paragraph{indent="1"}
Shuts down the hardware watchdog.
:::

### Syntax

```bash
hardware watchdog shutdown
```

### Examples

```bash
amnesiac (config) # hardware watchdog shutdown
```

### Related Commands

:::Paragraph{indent="1"}
[show hardware error-log](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### host-label

:::Paragraph{indent="1"}
Configures host label settings.
:::

### Syntax

```bash
[no] host-label name {hostname hostname [subnet X.X.X.X/XX] | subnet X.X.X.X/XX [hostname hostname]}
```

### Parameters

```bash
name
```

:::Paragraph{indent="1"}
Specify the name of the host label.
:::

:::Paragraph{listStyleType="disc" indent="3"}
Host labels are case sensitive and can be any string consisting of letters, the underscore ( \_ ), or the hyphen ( - ). There cannot be spaces in host labels. There is no limit on the number of host labels you can configure.
:::

:::Paragraph{listStyleType="disc" indent="3"}
To avoid confusion, do not use a number for a host label.
:::

:::Paragraph{listStyleType="disc" indent="3"}
Host labels that are used in QoS rules cannot be deleted.
:::

:::Paragraph{listStyleType="disc" indent="3"}
Host label changes (that is, adding and removing hostnames inside a label) are applied immediately by the rules that use the host labels that you have modified.
:::

```bash
hostname hostname,-.-.-.
```

:::Paragraph{indent="1"}
Specify a hostname or a comma-separated list of hostnames.
:::

:::Paragraph{listStyleType="disc" indent="3"}
Hostnames are case insensitive.
:::

:::Paragraph{listStyleType="disc" indent="3"}
You can configure a maximum of 100 unique hostnames across all host labels.
:::

:::Paragraph{listStyleType="disc" indent="3"}
A maximum of 64 subnets and hostnames per host label is allowed.
:::

```bash
subnet X.X.X.X/XX,. . .
```

:::Paragraph{indent="1"}
Specify an IPv4 subnet for the specified host label or a comma-separated list of IPv4 subnets. Use the format X.X.X.X/XX.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Host labels are names given to lists of hosts (IP addresses, IP subnets, and hostnames) that you can specify to match the source and destination network when configuring QoS rules. For example, you can specify host labels to define a set of hosts for which QoS classification and QoS marking rules apply. You can configure a mixture of subnets and hostnames for each label. A maximum of 64 subnets and hostnames per host label is allowed. You can configure a maximum of 100 unique hostnames across all host labels.
:::

:::Paragraph{indent="1"}
Hostnames referenced in a host label are automatically resolved through a DNS. The system resolves them immediately after you add a new host label or after you edit an existing host label. The system also automatically re-resolves hostnames daily. If you want to resolve a hostname immediately, use th&#x65;**&#x20;resolve host-labels** command.
:::

### Examples

```bash
amnesiac (config) # host-label test hostname xxxxxxxx.com,example.com subnet 192.168.0.1/32, 192.168.0.2/32,10.0.0.0/8
amnesiac (config) # qos basic classification global-app add global-app-name MyGlobalApp class-name Realtime vlan 1 traffic all srcport 123 srcnet test
```

### Related Commands

:::Paragraph{indent="1"}
[show images](docId\:q-wP5fTzpWO2TO-RsyDPo), [show host-label](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### hostname

:::Paragraph{indent="1"}
Sets the hostname for this system.
:::

### Syntax

```bash
[no] hostname hostname
```

### Parameters

```bash
hostname
```

:::Paragraph{indent="1"}
Specify the hostname. Do not include the domain name.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
You cannot change the IP address of a Services Director when:
:::

:::Paragraph{listStyleType="disc" indent="2"}
the Services Director VA is running the Setup Wizard.
:::

:::Paragraph{listStyleType="disc" indent="2"}
the Services Director is already part of an HA pair.
:::

:::Paragraph{indent="1"}
The **no** command option removes the hostname for this appliance.
:::

### Examples

```bash
amnesiac (config) # hostname park
```

### Related Commands

:::Paragraph{indent="1"}
[show hosts](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### image boot

:::Paragraph{indent="1"}
Boots the specified system image by default.
:::

### Syntax

```bash
image boot partition
```

### Parameters

```bash
partition
```

:::Paragraph{indent="1"}
Specify the partition to boot: **1** or **2**.
:::

### Examples

```bash
amnesiac (config) # image boot 1
```

### Related Commands

:::Paragraph{indent="1"}
[show version](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### interface

:::Paragraph{indent="1"}
Configures system interfaces.
:::

### Syntax

```bash
[no] interface interfacename options
```

### Parameters

```bash
interfacename
```

:::Paragraph{indent="1"}
Specify the interface name: **lo**, **aux**, **lan0\_0**, **wan0\_0**, **primary**, **in-path0\_0**. The interface name varies according to the Ivanti product your are configuring. For example: **primary**, **aux**. For details, see the CLI online help.
:::

```bash
options
```

:::Paragraph{indent="1"}
Each interface has the following configuration options:
:::

:::Paragraph{listStyleType="disc" indent="3"}
arp: Adds static entries to the ARP cache - Configure the string of this interface.
:::

:::Paragraph{listStyleType="disc" indent="3"}
dhcp renew: Enables DHCP on the interface or renews DHCP. Setting DHCP on the auxiliary interface only provides an IP lease, and does not update the gateway, routes, and DNS settings.
:::

:::Paragraph{listStyleType="disc" indent="3"}
dhcp dynamicdns: Enables DHCP hostname registration with dynamic DNS.
:::

:::Paragraph{listStyleType="disc" indent="3"}
duplex speed: Specify the duplex speed: **auto**, **full**, **half**. The default value is **auto**.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ip address ipaddr netmask: Specify the IP address and netmask for the interface.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ipv6 address ipv6addr prefix-length: Specify the IPv6 address and prefix length for the interface. Your appliance can have both an IPv4 address and an IPv6 address. You can only configure one IPv6 address per in-path interface. For example:

`amnesiac (config) # interface primary ipv6 address 2001:38dc:52::e9a4:c5:6282 64`
:::

:::Paragraph{listStyleType="disc" indent="3"}
mtu speed: Specify the MTU. The MTU is set on the in-path interface; it propagates automatically to the LAN and the WAN. The **no** command option disables the MTU setting. The default value is 1500.
:::

:::Paragraph{listStyleType="disc" indent="3"}
shutdown: Shuts down the interface.
:::

:::Paragraph{listStyleType="disc" indent="3"}
speed speed: Specify the speed for the interface: **auto**, **10**, **100**, **1000**. The default value is 100.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
You cannot change the IP address of a Services Director when:
:::

:::Paragraph{listStyleType="disc" indent="2"}
the Services Director VA is running the Setup Wizard.
:::

:::Paragraph{listStyleType="disc" indent="2"}
the Services Director is already part of an HA pair.
:::

:::Paragraph{indent="1"}
The **no** command option disables the interface settings.
:::

### Examples

```bash
amnesiac (config) # no interface inpath0_0 fail-to-bypass enable
```

### Related Commands

:::Paragraph{indent="1"}
[show interfaces](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### ip default-gateway

:::Paragraph{indent="1"}
Sets the default gateway for the appliance.
:::

### Syntax

```bash
[no] ip default-gateway ip-addr
```

### Parameters

```bash
ip-addr
```

:::Paragraph{indent="1"}
Specify the IP address of the management interface.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
This command is used to set the default gateway for the entire appliance. It is primarily used for the primary or auxiliary (**aux**) interfaces for management, but can also be used for out-of-path optimization configurations as well as PFS.
:::

:::Paragraph{indent="1"}
Th&#x65;**&#x20;no** command option disables the default gateway IP address.
:::

### Examples

```bash
amnesiac (config) # ip default-gateway 10.0.0.12
```

### Related Commands

:::Paragraph{indent="1"}
[show interfaces](docId\:qW4d1Kj33nMlkR3yej8BD), [ipv6 default-gateway](docId:2rhKUtqx7Iti1A_X79KfL)
:::

### ip domain-list

:::Paragraph{indent="1"}
Adds a domain name to the domain list for resolving hostnames.
:::

### Syntax

```bash
[no] ip domain list domain
```

### Parameters

```bash
domain
```

:::Paragraph{indent="1"}
Specify the domain name.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option removes a domain from the domain list.
:::

### Examples

```bash
amnesiac (config) # ip domain-list example.com
```

### Related Commands

:::Paragraph{indent="1"}
[show hosts](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ip host

:::Paragraph{indent="1"}
Adds an entry to the static host table.
:::

### Syntax

```bash
[no] ip host hostname ip-addr
```

### Parameters

```bash
hostname
```

:::Paragraph{indent="1"}
Specify the hostname.
:::

```bash
ip-addr
```

:::Paragraph{indent="1"}
Specify the IP address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option removes an entry from the static host table.
:::

### Examples

```bash
amnesiac (config) # ip host park 10.10.10.1
```

### Related Commands

:::Paragraph{indent="1"}
[show hosts](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ipv6 default-gateway

:::Paragraph{indent="1"}
Configures a default IPv6 route.
:::

### Syntax

```bash
[no] ipv6 default-gateway ipv6-address
```

### Parameters

```bash
ipv6-address
```

:::Paragraph{indent="1"}
Specify the IPv6 address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Support for IPv6 is enabled by default. The **no** command option removes the default gateway for IPv6 routing.
:::

### Examples

```bash
amnesiac (config) # ipv6 default-gateway 2001:38dc:52::e9a4:c5:6282
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo), [ipv6 route](docId:2rhKUtqx7Iti1A_X79KfL)
:::

### ipv6 in-path-gateway

:::Paragraph{indent="1"}
Configures an in-path IPv6 default gateway.
:::

### Syntax

```bash
[no] ipv6 in-path-gateway interface ipv6-address
```

### Parameters

```bash
interface
```

:::Paragraph{indent="1"}
Specify the interface.
:::

```bash
ipv6-address
```

:::Paragraph{indent="1"}
Specify the IPv6 address of the in-path gateway.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Support for IPv6 is enabled by default. The **no** command option deletes the in-path default gateway for IPv6 routing.
:::

### Examples

```bash
amnesiac (config) # ipv6 in-path-gateway inpath0_0 2001:38dc:52::e9a4:c5:6282
```

### Related Commands

:::Paragraph{indent="1"}
[ipv6 route](docId:2rhKUtqx7Iti1A_X79KfL), [ipv6 default-gateway](docId:2rhKUtqx7Iti1A_X79KfL)
:::

### ipv6 route

:::Paragraph{indent="1"}
Adds IPv6 routes in addition to the default gateway, if needed.
:::

### Syntax

```bash
[no] ipv6 route IPv6-destination prefix-length gateway
```

### Parameters

```bash
IPv6-destination
```

:::Paragraph{indent="1"}
Specify the IPv6 address.
:::

```bash
prefix-length
```

:::Paragraph{indent="1"}
Specify the IPv6 prefix length.
:::

```bash
gateway
```

:::Paragraph{indent="1"}
Specify the IPv6 address of the gateway.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Support for IPv6 is enabled by default. The **no** command option removes the specified IPv6 route.
:::

### Examples

```bash
amnesiac (config) # ipv6 route 2001:38dc:52::e9a4:c5:6282 64 2001:38dc:52::1
```

### Related Commands

:::Paragraph{indent="1"}
[show email](docId\:q-wP5fTzpWO2TO-RsyDPo), [ipv6 default-gateway](docId:2rhKUtqx7Iti1A_X79KfL)
:::

### ip name-server

:::Paragraph{indent="1"}
Adds a DNS name server.
:::

### Syntax

```bash
[no] ip name-server ip-addr
```

### Parameters

```bash
ip-addr
```

:::Paragraph{indent="1"}
Specify the name server IP address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option removes a DNS name server.
:::

### Examples

```bash
amnesiac (config) # ip name-server 10.10.10.1
```

### Related Commands

:::Paragraph{indent="1"}
[show hosts](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ip route

:::Paragraph{indent="1"}
Adds a static route.
:::

### Syntax

```bash
[no] ip route network-prefix netmask netmask-length next-hop-ip-addr
```

### Parameters

```bash
network-prefix
```

:::Paragraph{indent="1"}
Specify the network prefix.
:::

```bash
netmask
```

:::Paragraph{indent="1"}
Specify the netmask. For example: 255.255.255.0
:::

```bash
netmask-length
```

:::Paragraph{indent="1"}
Specify the netmask length. For example: /24
:::

```bash
next-hop-ip-addr
```

:::Paragraph{indent="1"}
Specify the next hop IP address.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables the static route. If **no ip route** is run with only a network prefix and mask, it deletes all routes for that prefix.
:::

### Examples

```bash
amnesiac (config) # ip route 192 193.166.0/24 10.10.10.1
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### job command

:::Paragraph{indent="1"}
Schedules CLI command execution for a specified time in the future.
:::

### Syntax

```bash
[no] job job-id command sequence-# "cli-command"
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

```bash
sequence-#
```

:::Paragraph{indent="1"}
Specify the sequence number for job execution. The sequence number is an integer that controls the order in which a CLI command is executed. CLI commands are executed from the smallest to the largest sequence number.
:::

```bash
"cli-command"
```

:::Paragraph{indent="1"}
Specify the CLI command. Enclose the command in double-quotes.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
A job includes a set of CLI commands and a time when the job runs. Jobs are run one time only, but they can be reused.
:::

:::Paragraph{indent="1"}
Any number of CLI commands can be specified with a job and are executed in an order specified by sequence numbers. If a CLI command in the sequence fails, no further commands in the job are executed. A job can have an empty set of CLI commands.
:::

:::Paragraph{indent="1"}
The output of all commands executed are viewable after job execution by running the **show job \<job-id>** command. The output of each job is only available for the last run; it is re-written upon each execution.
:::

:::Paragraph{indent="1"}
The job output and any error messages are saved. Jobs can be canceled and rescheduled.
:::

:::Paragraph{indent="1"}
The **no job \<job-id> command \<sequence #>** command option deletes the CLI command from the job.
:::

:::Paragraph{indent="1"}
The **no job \<job-id>** command option removes all statistics associated with the specified job. If the job has not executed, the timer event is canceled. If the job was executed, the results are deleted along with the job statistics.
:::

### Examples

```bash
amnesiac (config) # job 10 command 1 "show info"
amnesiac (config) # job 10 command 2 "show connections"
amnesiac (config) # job 10 command 3 "show version"
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job comment

:::Paragraph{indent="1"}
Adds a comment to the job for display when show jobs is run.
:::

### Syntax

```bash
[no] job job-id comment "<comment>"
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

```bash
comment "<comment>"
```

:::Paragraph{indent="1"}
Specify the comment for the job. Enclose the description in double-quotes.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option deletes the comment.
:::

### Examples

```bash
amnesiac (config) # job 10 "comment this is a test"
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job date-time

:::Paragraph{indent="1"}
Sets the date and time for the job to execute.
:::

### Syntax

```bash
[no] job job-id date-time hh: mm: ss | yyyy/ mm/ dd
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

```bash
hh: mm: ss
```

:::Paragraph{indent="1"}
Specify the time for the job to execute.
:::

```bash
yyyy/ mm/ dd
```

:::Paragraph{indent="1"}
Specify the date for the job to execute.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
If the time specified is in the past, the job does not execute and is in the inactive state.
:::

:::Paragraph{indent="1"}
The **no** command option disables the date and time settings.
:::

### Examples

```bash
amnesiac (config) # job 10 date-time 04:30:23
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job enable

:::Paragraph{indent="1"}
Enables a CLI command job to execute at the date and time specified in the job.
:::

### Syntax

```bash
[no] job job-id enable
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables jobs.
:::

### Examples

```bash
amnesiac (config) # job 10 enable
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job execute

:::Paragraph{indent="1"}
Forces an immediate execution of a job. The timer (if set) is canceled, and the job is moved to the completed state.
:::

### Syntax

```bash
job job-id execute
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
You can also access this command from enable mode.
:::

### Examples

```bash
amnesiac (config) # job 10 execute
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job fail-continue

:::Paragraph{indent="1"}
Executes all commands in a job even if a command in the sequence fails.
:::

### Syntax

```bash
[no] job job-id fail-continue
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables this command.
:::

### Examples

```bash
amnesiac (config) # job 10 fail-continue
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job name

:::Paragraph{indent="1"}
Sets the name for the job.
:::

### Syntax

```bash
[no] job job-id name friendly-name
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

```bash
friendly-name
```

:::Paragraph{indent="1"}
Specify a name for the job.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option deletes the job name.
:::

### Examples

```bash
amnesiac (config) # job 10 name myjob
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### job recurring

:::Paragraph{indent="1"}
Sets the frequency with which to recurrently execute this job.
:::

### Syntax

```bash
[no] job job-id recurring seconds
```

### Parameters

```bash
job-id
```

:::Paragraph{indent="1"}
Specify the job identification number.
:::

```bash
seconds
```

:::Paragraph{indent="1"}
Specify how frequently the recurring job should execute.
:::

### Examples

```bash
amnesiac (config) # job 10 recurring 36000
```

### Related Commands

:::Paragraph{indent="1"}
[show job](docId\:qW4d1Kj33nMlkR3yej8BD), [show jobs](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### license client fetch

:::Paragraph{indent="1"}
Forces the license client to update immediately.
:::

### Syntax

```bash
license client fetch
```

### Usage Guidelines

:::Paragraph{indent="1"}
If there is a change in your account (such as if Ivanti has given you an extra license), and the change will be updated whenever the license client runs next, but you want to force it to run immediately, then you can use the **license client fetch** command.
:::

### Examples

```bash
amnesiac # license client fetch
```

### license client init

:::Paragraph{indent="1"}
Initializes the license client.
:::

### Syntax

```bash
license client init license-number
```

### Parameters

```bash
license-number
```

:::Paragraph{indent="1"}
Specify the license number.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The license client communicates with the license server. It has two main functions:
:::

:::Paragraph{listStyleType="disc" indent="2"}
It periodically contacts the license server and checks out and renews the license or lease.
:::

:::Paragraph{listStyleType="disc" indent="2"}
It enables you to query available features, licenses and other metadata such as serial number.
:::

:::Paragraph{indent="1"}
You can configure the license client to communicate with the license server at the company headquarters or the local license server.
:::

:::Paragraph{indent="1"}
The **no** command option deletes the one-time token or license.
:::

### Examples

```bash
amnesiac (config) # license client init 4
```

### Related Commands

:::Paragraph{indent="1"}
[show licenses](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### license delete

:::Paragraph{indent="1"}
Deletes the specified license key.
:::

### Syntax

```bash
license delete license-number
```

### Parameters

```bash
license-number
```

:::Paragraph{indent="1"}
Specify the license number.
:::

### Examples

```bash
amnesiac (config) # license delete 4
```

### Related Commands

:::Paragraph{indent="1"}
[show licenses](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### license install

:::Paragraph{indent="1"}
Installs a new software license key.
:::

### Syntax

```bash
[no] license install license-key
```

### Parameters

```bash
license-key
```

:::Paragraph{indent="1"}
Specify the license key.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables this command.
:::

### Examples

```bash
amnesiac (config) # license install SH10_B-0000-1-7F14-FC1F
```

### Related Commands

:::Paragraph{indent="1"}
[show licenses](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### license server

:::Paragraph{indent="1"}
Adds a license server.
:::

### Syntax

```bash
[no] license server hostname [port number] [priority number]
```

### Parameters

```bash
hostname
```

:::Paragraph{indent="1"}
Specify the hostname of the computer that contains the license server.
:::

```bash
port number
```

:::Paragraph{indent="1"}
Optionally, specify the port number on which the license server is listening. The default is port 80.
:::

```bash
priority number
```

:::Paragraph{indent="1"}
Specify the order in which the license server is added. 0 is the highest priority and 9 is the lowest priority. The default priority is 9.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The license server provides licenses to Services Director.
:::

:::Paragraph{indent="1"}
The **no** command option deletes the license server specified.
:::

:::Paragraph{indent="1"}
The default license server is the server hosted at Ivanti headquarters.
:::

:::Paragraph{indent="1"}
The **no license server \<hostname> priority** command resets the priority in which the specified license server is added to the default value (9 is the lowest priority).
:::

:::Paragraph{indent="1"}
The **no license server \<hostname> port** command resets the license server port to the default port.
:::

### Examples

```bash
*** create license server, no feedback ***
amnesiac (config) # license server MyLicenseServer port 88 priority 1
*** list license servers to confirm creation***
amnesiac (config) # show license-servers
Server Name Port Priority
--------------- --------------- ---------------
MyLicenseServer 88 1
```

### Related Commands

:::Paragraph{indent="1"}
[show licenses](docId\:qW4d1Kj33nMlkR3yej8BD)
:::

### logging

:::Paragraph{indent="1"}
Adds a remote system log (syslog) server to the system.
:::

### Syntax

```bash
[no] logging ip-addr | [trap log-level]
```

### Parameters

```bash
ip-addr
```

:::Paragraph{indent="1"}
Specify the IP address for the syslog server.
:::

```bash
trap log-level
```

:::Paragraph{indent="1"}
Specify the trap log level of the syslog server:
:::

:::Paragraph{listStyleType="disc" indent="3"}
emerg: Emergency, the system is unusable.
:::

:::Paragraph{listStyleType="disc" indent="3"}
alert: Action must be taken immediately.
:::

:::Paragraph{listStyleType="disc" indent="3"}
critical: Critical conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
err: Error conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
warning: Warning conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
notice: Normal but significant conditions, such as a configuration change. This is the default setting.
:::

:::Paragraph{listStyleType="disc" indent="3"}
info: Informational messages.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
If you have set different log levels for each remote syslog server, this option changes all remote syslog servers to have a single log level.
:::

:::Paragraph{indent="1"}
The **no** command option removes a remote **syslog** server from the system.
:::

### Examples

```bash
amnesiac (config) # logging 10.0.0.2
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging files delete

:::Paragraph{indent="1"}
Deletes the oldest log file or a specified number of the oldest log files.
:::

### Syntax

```bash
logging files delete oldest number
```

### Parameters

```bash
oldest number
```

:::Paragraph{indent="1"}
Specify the number of old log files to delete. The range is 1-10.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
You can also access this command from enable mode.
:::

### Examples

```bash
amnesiac (config) # logging files delete oldest 10
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging files rotation criteria frequency

:::Paragraph{indent="1"}
Sets the frequency of log rotation.
:::

### Syntax

```bash
logging files rotation criteria frequency rotation-frequency
```

### Parameters

```bash
rotation-frequency
```

:::Paragraph{indent="1"}
Specify how often log rotation occurs: monthly, weekly or daily. The size of the log file is checked every 10 minutes.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The size of the log file is checked every 10 minutes. If there is an unusually large amount of logging activity, it is possible for a log file to grow larger than the set limit in that period of time.
:::

### Examples

```bash
amnesiac (config) # logging files rotation criteria frequency weekly
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging files rotation criteria size

:::Paragraph{indent="1"}
Sets the size, in MB, of the log file before rotation occurs.
:::

### Syntax

```bash
logging files rotation criteria size size
```

### Parameters

```bash
size
```

:::Paragraph{indent="1"}
Specify the size of the log file to save in MB. The default value is 0 (unlimited).
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The size of the log file is checked every 10 minutes. If there is an unusually large amount of logging activity, it is possible for a log file to grow larger than the set limit in that period of time.
:::

### Examples

```bash
amnesiac (config) # logging files rotation criteria size 100
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging files rotation force

:::Paragraph{indent="1"}
Rotates logs immediately.
:::

### Syntax

```bash
logging files rotation force
```

### Usage Guidelines

:::Paragraph{indent="1"}
The size of the log file is checked every 10 minutes. If there is an unusually large amount of logging activity, it is possible for a log file to grow larger than the set limit in that period of time.
:::

### Examples

```bash
amnesiac (config) # logging files rotation force
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging files rotation max-num

:::Paragraph{indent="1"}
Sets the maximum number of log files to keep locally.
:::

### Syntax

```bash
logging files rotation max-num number
```

### Parameters

```bash
number
```

:::Paragraph{indent="1"}
Specify the number of log files to keep locally. The range is 1-100. The default value is 10.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The size of the log file is checked every 10 minutes. If there is an unusually large amount of logging activity, it is possible for a log file to grow larger than the set limit in that period of time.
:::

### Examples

```bash
amnesiac (config) # logging files rotation max-num 10
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging filter

:::Paragraph{indent="1"}
Sets the minimal level of messages arriving from the specified process to the local subsystem.
:::

### Syntax

```bash
logging filter process level
```

### Parameters

```bash
process
```

:::Paragraph{indent="1"}
Specify the application process:
:::

:::Paragraph{listStyleType="disc" indent="3"}
alarmd: Alarm control and management.
:::

:::Paragraph{listStyleType="disc" indent="3"}
cli: Command-Line Interface.
:::

:::Paragraph{listStyleType="disc" indent="3"}
mgmtd: Device control and management, which directs the entire device management system. It handles message passing between various management daemons, managing system configuration and general application of system configuration on the hardware underneath through the **hald**.
:::

:::Paragraph{listStyleType="disc" indent="3"}
hald: Hardware Abstraction Daemon, which handles access to the hardware.
:::

:::Paragraph{listStyleType="disc" indent="3"}
pm: Process Manager, which handles launching of internal system daemons and keeps them up and running.
:::

:::Paragraph{listStyleType="disc" indent="3"}
sched: Process Scheduler, which handles one-time scheduled events.
:::

:::Paragraph{listStyleType="disc" indent="3"}
rscored: REST Core Services.
:::

:::Paragraph{listStyleType="disc" indent="3"}
rstild: REST Translation Interface.
:::

:::Paragraph{listStyleType="disc" indent="3"}
ssc: Stingray Services Director.
:::

:::Paragraph{listStyleType="disc" indent="3"}
statsd: Statistics Collector, which handles queries and storage of system statistics.
:::

:::Paragraph{listStyleType="disc" indent="3"}
wdt: Watchdog Timer, the motherboard watchdog daemon.
:::

:::Paragraph{listStyleType="disc" indent="3"}
webasd: Web Application Process, which handles the Web user interface.
:::

```bash
level
```

:::Paragraph{indent="1"}
Specify the trap log level:
:::

:::Paragraph{listStyleType="disc" indent="3"}
emerg: Emergency, the system is unusable.
:::

:::Paragraph{listStyleType="disc" indent="3"}
alert: Action must be taken immediately.
:::

:::Paragraph{listStyleType="disc" indent="3"}
critical: Critical conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
err: Error conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
warning: Warning conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
notice: (Default) Normal but significant conditions, such as a configuration change.
:::

:::Paragraph{listStyleType="disc" indent="3"}
info: Informational messages.
:::

:::Paragraph{indent="1"}
If you have set different log levels for each remote **syslog** server, this option changes all remote **syslog** servers to have a single log level.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use this command to capture data when a appliance is not able to sustain the flow of logging data that is being committed to disk.
:::

:::Paragraph{indent="1"}
This command overrides the **logging local** command. This command creates a global setting that controls all output, including remote hosts.
:::

:::Paragraph{indent="1"}
All CIFS protocol related messages are logged at level **debug**, and the remainder at the level **notice**.
:::

:::Paragraph{indent="1"}
All remote logging hosts (if defined) also log at **logging trap** setting and at the logging filter process.
:::

:::Paragraph{indent="1"}
The **no logging filter all** command deletes all filters.
:::

### Examples

```bash
amnesiac (config) # logging filter cli alert
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging local

:::Paragraph{indent="1"}
Sets the minimum severity of log messages saved on the local syslog servers.
:::

### Syntax

```bash
[no] logging local log-level
```

### Parameters

```bash
log-level
```

:::Paragraph{indent="1"}
Specify the logging severity level. The follow severity levels are supported:
:::

:::Paragraph{listStyleType="disc" indent="3"}
emerg: Emergency, the system is unusable.
:::

:::Paragraph{listStyleType="disc" indent="3"}
alert: Action must be taken immediately.
:::

:::Paragraph{listStyleType="disc" indent="3"}
crit: Critical conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
err: Error conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
warning: Warning conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
notice: (Default) Normal but significant conditions, such as a configuration change.
:::

:::Paragraph{listStyleType="disc" indent="3"}
info: Informational messages.
:::

:::Paragraph{indent="1"}
The default value is notice.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option sets the severity level for logging to none (no logs are sent).
:::

### Examples

```bash
amnesiac (config) # logging local notice
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### logging trap

:::Paragraph{indent="1"}
Sets the minimum severity for messages sent to the remote syslog servers.
:::

### Syntax

```bash
[no] logging trap log-level
```

### Parameters

```bash
log-level
```

:::Paragraph{indent="1"}
Specify the logging severity level. The follow severity levels are supported:
:::

:::Paragraph{listStyleType="disc" indent="3"}
emerg: Emergency, the system is unusable.
:::

:::Paragraph{listStyleType="disc" indent="3"}
alert: Action must be taken immediately.
:::

:::Paragraph{listStyleType="disc" indent="3"}
crit: Critical conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
err: Error conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
warning: Warning conditions.
:::

:::Paragraph{listStyleType="disc" indent="3"}
notice: (Default) Normal but significant conditions, such as a configuration change.
:::

:::Paragraph{listStyleType="disc" indent="3"}
info: Informational messages.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option sets the severity level for logging to none.
:::

### Examples

```bash
amnesiac (config) # logging trap notice
```

### Related Commands

:::Paragraph{indent="1"}
[show logging](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ntp authentication

:::Paragraph{indent="1"}
Configures the Network Time Protocol (NTP) authentication settings to authenticate NTP servers and peers.
:::

### Syntax

```bash
[no] ntp authentication key key-id secret {plaintext | 0 plaintext | 7 encrypted-string}
```

### Parameters

```bash
key key-id
```

:::Paragraph{indent="1"}
Specify the key identifier. The key ID values must be in the range 1 - 65534.
:::

```bash
secret {plaintext | 0 plaintext | 7 encrypted-string}
```

:::Paragraph{indent="1"}
Specify the shared secret parameter. Choose one of the following:
:::

:::Paragraph{listStyleType="disc" indent="3"}
plaintext: Specify a shared secret in plain text. This option is the same as the 0 \<plaintext> option and is provided for backward compatibility.
:::

:::Paragraph{listStyleType="disc" indent="3"}
0 plaintext: Specify a shared secret in plain text.
:::

:::Paragraph{listStyleType="disc" indent="3"}
7 encryptedstring: Specify a shared secret with an encrypted string.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** version of the command removes NTP authentication settings.
:::

:::Paragraph{indent="1"}
NTP authentication involves three steps that you can perform in any order:
:::

:::Paragraph{listStyleType="disc" indent="2"}
Configure a key ID using the **ntp authentication** command.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Add the configured key ID to the trusted keys list using the **ntp authentication trusted-keys** command.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Configure the NTP server or peer with the key ID using the **ntp server key** or **ntp peer key** command.
:::

### Examples

```bash
amnesiac (config) # ntp authentication key 56732 secret zza419
```

### Related Commands

:::Paragraph{indent="1"}
[ntp authentication trusted keys](docId:2rhKUtqx7Iti1A_X79KfL), [ntp peer key](docId\:Daj0PxouZD3s712K5TKUW), [ntp server key](docId\:Daj0PxouZD3s712K5TKUW), [show ntp](docId\:q-wP5fTzpWO2TO-RsyDPo), [show ntp authentication](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ntp authentication trusted keys

:::Paragraph{indent="1"}
Adds a configured key ID to the trusted keys list.
:::

### Syntax

```bash
[no] ntp authentication trustedkeys key-id [key id, ...]
```

### Parameters

```bash
key key-id [key id, ...]
```

:::Paragraph{indent="1"}
Specify the key identifier. The key ID values must be in the range 1 - 65534. You can specify multiple key IDs in the same list, separated by commas. When specifying multiple key IDs separated by commas, you must enclose them in quotes.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
Use this command to add the configured key ID to the trusted keys list.
:::

:::Paragraph{indent="1"}
The **no** command removes a key from the trusted key list.
:::

:::Paragraph{listStyleType="disc" indent="2"}
NTP authentication involves three steps that you can perform in any order:
:::

:::Paragraph{listStyleType="disc" indent="2"}
Configure a key ID using the **ntp authentication** command.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Add the configured key ID to the trusted keys list using the **ntp authentication trusted-keys** command.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Configure the NTP server or peer with the key ID using the **ntp server key** or **ntp peer key** command.
:::

### Examples

```bash
amnesiac (config) # ntp authenticatication trustedkeys 56732
```

### Related Commands

:::Paragraph{indent="1"}
[ntp authentication](docId:2rhKUtqx7Iti1A_X79KfL), [ntp peer key](docId\:Daj0PxouZD3s712K5TKUW), [ntp server key](docId\:Daj0PxouZD3s712K5TKUW), [show ntp](docId\:q-wP5fTzpWO2TO-RsyDPo), [show ntp authentication](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ntp disable

:::Paragraph{indent="1"}
Disables NTP support.
:::

### Syntax

```bash
[no] ntp disable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option enables NTP support.
:::

### Examples

```bash
amnesiac (config) # ntp disable
```

### Related Commands

:::Paragraph{indent="1"}
[show ntp](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ntp enable

:::Paragraph{indent="1"}
Enables NTP support.
:::

### Syntax

```bash
[no] ntp enable
```

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables NTP support.
:::

### Examples

```bash
amnesiac (config) # ntp enable
```

### Related Commands

:::Paragraph{indent="1"}
[show ntp](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::

### ntp peer

:::Paragraph{indent="1"}
Enables an NTP peer.
:::

### Syntax

```bash
[no] ntp peer hostname | ip-addr [ version number ]
```

### Parameters

```bash
hostname | ip-addr
```

:::Paragraph{indent="1"}
Specify the NTP peer hostname or IP address.
:::

```bash
version number
```

:::Paragraph{indent="1"}
Specify the NTP version number. You do not need to specify the version number for the **no ntp server** command.
:::

### Usage Guidelines

:::Paragraph{indent="1"}
The **no** command option disables an NTP peer.
:::

### Examples

```bash
amnesiac (config) # ntp peer 10.10.10.1
```

### Related Commands

:::Paragraph{indent="1"}
[show ntp](docId\:q-wP5fTzpWO2TO-RsyDPo), [show ntp active-peers](docId\:q-wP5fTzpWO2TO-RsyDPo)
:::