Configures network, VLAN, and service aliases. The aliases defined on this profile applies to all devices using this profile. Aliases can be also defined at the device level.
Note
You can apply overrides to aliases at the device level. Overrides applied at the device level take precedence. For more information on aliases, see alias (global config mode).alias [address-range|encrypted-string|hashed-string|host|network|network-group| network-service|number|string|vlan]
alias address-range <ADDRESS-RANGE-ALIAS-NAME> <STARTING-IP> to <ENDING-IP>
alias encrypted-string <ENCRYPTED-STRING-ALIAS-NAME> <LINE>
alias hashed-string <HASHED-STRING-ALIAS-NAME> <LINE>
alias host <HOST-ALIAS-NAME> <HOST-IP>
alias network <NETWORK-ALIAS-NAME> <NETWORK-ADDRESS/MASK>
alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range|host|network]
alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range <STARTING-IP> to <ENDING-IP>|host <HOST-IP>|network <NETWORK-ADDRESS/MASK>]
alias network-service <NETWORK-SERVICE-ALIAS-NAME>
proto [<0-254>|<WORD>|eigrp| gre|igmp|igp|ospf|vrrp]
{(<1-65535>|<WORD>|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop3|proto|sip|smtp|
sourceport|ssh|telnet|tftp|www)}
alias number <NUMBER-ALIAS-NAME> <0-4294967295>
alias string <STRING-ALIAS-NAME> <LINE>
alias vlan <VLAN-ALIAS-NAME> <1-4094>
alias address-range <ADDRESS-RANGE-ALIAS-NAME> <STARTING-IP> to <ENDING-IP>
| address-range <ADDRESS-RANGE-ALIAS-NAME> | Creates a new address-range alias for this profile. Or associates an existing address-range alias with this profile. An address-range alias maps a name to a range of IP addresses. Use this option to create unique address-range aliases for different deployment scenarios. |
For example, if
an ACL defines a pool of network addresses as 192.168.10.10 through
192.168.10.100 for an entire network, and a remote location‘s network range
is 172.16.13.20 through 172.16.13.110, the remote location‘s ACL can be
overridden using an alias. At the remote location, the ACL works with the
172.16.13.20-110 address range. A new ACL need not be created specifically
for the remote deployment location.
|
|
| <STARTING-IP> to <ENDING-IP> | Associates a
range of IP addresses with this address range alias
Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
alias encrypted-string <ENCRYPTED-STRING-ALIAS-NAME> <LINE>
| encrypted-string <ENCRYPTED-STRING-ALIAS-NAME> | Creates an alias for an encrypted string.
Use this alias for string configuration values that are
encrypted when "password-encryption" is enabled. For
example, in the management-policy, use it to define the
SNMP community string. For more information, see snmp-server (management policy config mode).
Alias name should begin with ‘$‘. |
| <LINE> | Configures the value associated with the
alias name specified in the previous step
Note: If
password-encryption is enabled, in the
show > running-config output, this
clear text is displayed as an encrypted string, as
shown
below:nx9500-6C8809(config)#show running-config !............................... alias encrypted-string $enString 2 fABMK2is7UToNiZE3MQXbgAAAAxB0ZIysdqsEJwr6AH/Da// ! --More-- nx9500-6C8809 In the above output, the ‘2‘ displayed before the encrypted-string alias value indicates that the displayed text is encrypted and not a clear text. However, if password-encryption is disabled the clear text is displayed as is: nx9500-6C8809(config)#show running-config !............................... ! alias encrypted-string $enString 0 test11223344 ! --More-- nx9500-6C8809 For more information on enabling password-encryption, see password-encryption. |
alias hashed-string <HASHED-STRING-ALIAS-NAME> <LINE>
| hashed-string <HASHED-STRING-ALIAS-NAME> | Creates an alias for a hashed string. Use this alias
for configuration values that are hashed strings, such as passwords. For
example, in the management-policy, use it to define the privilege mode
password. For more information, see privilege-mode-password
(management-policy mode).
Alias name should begin with ‘$‘. |
| <LINE> | Configures the hashed-string value
associated with this
alias.nx9500-6C8809(config)#show running-config ! alias encrypted-string $WRITE 2 sBqVCDAoxs3oByF5PCSuFAAAAAd7HT2+EiT/l/BXm9c4SBDv ! alias hashed-string $PriMode 1 faffdde27cb49ad634ea20df4f7c8ef2685894d10ffcb1b2efba054112ecfc75 --More-- nx9500-6C8809 In the above show > running-config output, the ‘1‘ displayed before the hashed-string alias value indicates that the displayed text is hashed and not clear text. |
alias host <HOST-ALIAS-NAME> <HOST-IP>
| host <HOST-ALIAS-NAME> | Creates a new host alias for this profile. Or associates an existing host alias with this profile. A host alias configuration is for a particular host device‘s IP address. Use this option to create unique host aliases for different deployment scenarios. For example, if a central network DNS server is set a static IP address, and a remote location‘s local DNS server is defined, this host can be overridden at the remote location. At the remote location, the network is functional with a local DNS server, but uses the name set at the central network. A new host need not be created at the remote location. This simplifies creating and managing hosts and allows an administrator to better manage specific local requirements.
Alias name should begin with ‘$‘. |
| <HOST-IP> | Associates the network host‘s IP address with this host alias
Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
alias network <NETWORK-ALIAS-NAME> <NETWORK-ADDRESS/MASK>
| network <NETWORK-ALIAS-NAME> | Creates a new network alias for this profile. Or associates an existing network alias with this profile. A network alias configuration is utilized for an IP address on a particular network. Use this option to create unique Network aliases for different deployment scenarios. For example, if a central network ACL defines a network as 192.168.10.0/24, and a remote location‘s network range is 172.16.10.0/24, the ACL can be overridden at the remote location to suit their local (but remote) requirement. At the remote location, the ACL functions with the 172.16.10.0/24 network. A new ACL need not be created specifically for the remote deployment. This simplifies ACL definition and allows an administrator to better manage specific local requirements.
Alias name should begin with ‘$‘. |
| <NETWORK-ADDRESS/MASK> | Associates a single network with this network alias
Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
alias network-group <NETWORK-GROUP-ALIAS-NAME> [address-range <STARTING-IP> to <ENDING-IP>
{<STARTING-IP> to <ENDING-IP>}|host <HOST-IP> {<HOST-IP>}| network <NETWORK-ADDRESS/MASK>
{<NETWORK-ADDRESS/MASK>}]
| network <NETWORK-GROUP-ALIAS-NAME> | Creates a new network-group alias for this profile. Or associates an existing network-group alias with this profile.
Alias name should begin with ‘$‘. The network-group aliases are used in ACLs, to define the network-specific components. ACLs using aliases can be used across sites by re-defining the network-group alias elements at the device or profile level. After specifying the name, specify the following: a range of IP addresses, host addresses, or a range of network addresses. Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
| address-range <STARTING-IP> to <ENDING-IP> {<STARTING-IP> to <ENDING-IP>} | Associates a range of IP addresses with this network-group alias
|
| host <HOST-IP> {<HOST-IP>} | Associates a single or multiple hosts with this network-group alias
|
| network <NETWORK-ADDRESS/MASK> {<NETWORK-ADDRESS/MASK>} | Associates a single or multiple networks with this network-group alias
|
alias network-service <NETWORK-SERVICE-ALIAS-NAME> proto [<0-254>|<WORD>|eigrp|
gre|igmp|igp|ospf|vrrp] {(<1-65535>|<WORD>|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|
ntp|pop3|proto|sip|smtp|sourceport [<1-65535>|<WORD>]|ssh|telnet|tftp|www)}
| alias network-service <NETWORK-SERVICE-ALIAS-NAME> | Creates a new
network-service alias for this profile. Or associates an existing
network-service alias with this profile. A network service alias is a set of
configurations that consist of protocol and port mappings. Both source and
destination ports are configurable. For each protocol, up to 2 source port
ranges and up to 2 destination port ranges can be configured. A maximum of 4
protocol entries can be configured per network service alias. <NETWORK-SERVICE-ALIAS-NAME> – Specify a network-service alias name. Note: Alias name should begin with ‘$‘.
The network-service aliases are used in ACLs, to define the service-specific components. ACLs using aliases can be used across sites by re-defining the network-service alias elements at the device or profile level. Note: Aliases defined at any given level
can be overridden at the next lower levels. For example, a global alias
can be redefined on a selected set of RF Domains, profiles, or devices.
Overrides applied at the device level take precedence.
|
| proto [<0-254>| <WORD>|eigrp|gre| igmp|igp|ospf|vrrp] | Use one of the following options to associate an Internet protocol with this network-service alias:
|
| {(<1-65535>| <WORD>|bgp|dns| ftp|ftp-data|gopher| https|ldap|nntp|ntp| pop3|proto|sip|smtp| sourceport [<1-65535>| <WORD>]|ssh|telnet| tftp|www)} | After specifying the protocol, you may configure a destination port for this service. These keywords are recursive and you can configure multiple protocols and associate multiple destination and source ports.
|
alias number <NUMBER-ALIAS-NAME> <0-4294967295>
| alias number <NUMBER-ALIAS-NAME> <0-4294967295> | Creates a number alias identified by the
<NUMBER-ALIAS-NAME> keyword. Number aliases map a name to a numeric
value. For example, ‘alias number $NUMBER 100‘. In this exmple,
The value d by alias $NUMBER, wherever used, is 100.
Note: Alias
name should begin with ‘$‘.
|
alias string <STRING-ALIAS-NAME> <LINE>
| alias string <STRING-ALIAS-NAME> | Creates a new string alias for this profile. Or
associates an existing string alias with this profile. String aliases map a
name to an arbitrary string value. Use this option to create unique string
aliases for different deployment scenarios. For example, if the main domain
at a remote location is called loc1.domain.com and at another deployment
location it is called loc2.domain.com, the alias can be overridden at the
remote location to suit the local (but remote) requirement. At one remote
location, the alias functions with the loc1.domain.com domain and at the
other with the loc2.domain.com domain.
Note: Alias
name should begin with ‘$‘.
Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
alias vlan <VLAN-ALIAS-NAME> <1-4094>
| alias vlan <VLAN-ALIAS-NAME> | Creates a new
VLAN alias for this profile. Or associates an existing VLAN alias with this
profile. A VLAN alias maps a name to a VLAN ID. A VLAN alias is a
configuration for optimal VLAN re-use and management for local and remote
deployments. Use this option to create unique VLANs aliases for different
deployment scenarios. For example, if a VLAN ID is set as 10 for the central
network, and the VLAN is set as 26 at a remote location, the VLAN can be
overridden at the remote location using an alias. At the remote location,
the network is functional with an ID of 26, but utilizes the name defined
at the central local network. A new VLAN need not be created specifically
at the remote location.
Note: Alias name should begin
with ‘$‘.
|
| <1-4094> | Maps the VLAN alias to a VLAN ID
Aliases defined at any given level can be overridden at the next lower levels. For example, a global alias can be redefined on a selected set of RF Domains, profiles, or devices. Overrides applied at the device level take precedence. |
The following example shows the global aliases configured. Note the network-service alias ‘$kerberos‘ settings:
nx9500-6C8809(config)#show running-config | include alias alias network-group $NetGrpAlias address-range 192.168.13.7 to 192.168.13.16 192.168.13.20 to 192.168.13.25 alias network-group $NetGrpAlias network 192.168.13.0/24 192.168.16.0/24 alias network $NetworkAlias 192.168.13.0/24 alias host $HostAlias 192.168.13.10 alias address-range $AddRanAlias 192.168.13.10 to 192.168.13.13 alias network-service $kerberos proto tcp 23 proto udp 25 alias vlan $VlanAlias 1 alias string $AREA Ecospace alias string $IN-Blr-EcoSpace-Floor-4 IBEF4 alias encrypted-string $READ 2 CdO6glQ9w29hybKxfbd6JwAAAAa7lKMBMk9EiDQfFRf9kegO alias hashed-string $PriMode 1 faffdde27cb49ad634ea20df4f7c8ef2685894d10ffcb1b2efba054112ecfc75 nx9500-6C8809(config)#
The following examples show the overrides applied to the network-service alias ‘$kerberos‘ at the profile level:
nx9500-6C8809(config-profile-testap505)#alias network-service $kerberos proto tcp 22 proto udp 389
The following example shows the overrides applied to the network-service alias ‘$kerberos‘ at the profile level:
nx9500-6C8809(config-profile-testap505)#show running-config | include alias alias network-group $NetGrpAlias address-range 192.168.13.7 to 192.168.13.16 192.168.13.20 to 192.168.13.25 alias network-group $NetGrpAlias network 192.168.13.0/24 192.168.16.0/24 alias network $NetworkAlias 192.168.13.0/24 alias host $HostAlias 192.168.13.10 alias address-range $AddRanAlias 192.168.13.10 to 192.168.13.13 alias network-service $kerberos proto tcp 22 proto udp 389 alias vlan $VlanAlias 1 alias string $AREA Ecospace alias string $IN-Blr-EcoSpace-Floor-4 IBEF4 alias encrypted-string $READ 2 /Mfbt1Et8XRhybKxfbd6JwAAAAZ9yrIYq7mNl4+gNNiiMIZI alias hashed-string $PriMode 1 faffdde27cb49ad634ea20df4f7c8ef2685894d10ffcb1b2efba054112ecfc75 alias network-service $kerberos proto tcp 88 proto udp 389 nx9500-6C8809(config-profile-testap505)#
| no | Removes a specified alias configuration |