System Security
Test-Commands
Users with Security Administrator or Administrator privilege can enable the display of previously hidden
test-commands. The CLI test-commands mode displays new command keywords for existing commands, as
well as new commands.
Caution
CLI test-commands are intended for diagnostic use only. Access to these commands is not required during
normal system operation. These commands are intended for use by Cisco TAC personnel only. Some of
these commands can slow system performance, drop subscribers, and/or render the system inoperable.
Enabling cli test-commands Mode
To enable access to test-commands, a Security Administrator must log into the Global Configuration mode
and enter cli hidden.
This command sequence is shown below.
[local]
[local]
[local]
By default cli hidden is disabled.
Important
Enabling Password for Access to CLI-test commands
A Security Administrator can set a plain-text or encrypted password for access to CLI test commands. The
password value is stored in /flash along with the boot configuration information. The show configuration
and save configuration commands will never output this value in plain text.
The Global Configuration mode command tech-support test-commands [encrypted] password new_password
[ old-password old_password ] sets an encrypted or plain-text password for access to CLI test-commands.
This command sequence is shown below.
[local]
[local]
old_password ]
[local]
If the new password replaces an existing password, you must enter the old password for the change to be
accepted.
If the old password is not entered or does not match the existing configured value, the following error message
appears: "tech-support password is already configured". A prompt then appears to accept entry of the old
password: "Enter old tech-support password:".
host_name
config
#
host_name
cli hidden
(config)#
host_name
(config)#
Low-level diagnostic and test commands/keywords will now be visible to a user with Administrator or
higher privilege. There is no visual indication on the CLI that the test-commands mode has been enabled.
host_name
config
#
host_name
tech-support test-commands password new_password [ old-password
(config)#
host_name
(config)#
ASR 5500 System Administration Guide, StarOS Release 21.5
Test-Commands
79