AAA Commands - Cisco Nexus 9000 Series NX-API CLI, Release 9.3(x)

show aaa accounting

show aaa accounting


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa accounting",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa accounting",
        "msg": "Success",
        "code": "200",
        "body": {
          "TABLE_acctMethods": {
            "ROW_acctMethods": {
              "service": "default",
              "methods": "local"
            }
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa accounting command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa accounting default: local`

show aaa authentication

show aaa authentication


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authentication",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authentication",
        "msg": "Success",
        "code": "200",
        "body": {
          "TABLE_AuthenMethods": {
            "ROW_AuthenMethods": [
              {
                "service": "default",
                "method": "local"
              },
              {
                "service": "console",
                "method": "local"
              }
            ]
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authentication command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authentication default: local console: local`

show aaa authentication login ascii-authentication


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authentication login ascii-authentication",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authentication login ascii-authentication",
        "msg": "Success",
        "code": "200",
        "body": {
          "ascii_authen_status": "disabled"
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authentication login ascii-authentication command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authentication login ascii-authentication ascii-authentication is disabled`

show aaa authentication login error-enable


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authentication login error-enable",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authentication login error-enable",
        "msg": "Success",
        "code": "200",
        "body": {
          "status": "disabled"
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authentication login error-enable command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authentication login error-enable error-enable is disabled`

show aaa authentication login invalid-username-log


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authentication login invalid-username-log",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authentication login invalid-username-log",
        "msg": "Success",
        "code": "200",
        "body": {
          "status": "disabled"
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authentication login invalid-username-log command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authentication login invalid-username-log aaa authentication login invalid username log is disabled`

show aaa authentication login mschap


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authentication login mschap",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authentication login mschap",
        "msg": "Success",
        "code": "200",
        "body": {
          "mschap_status": "disabled"
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authentication login mschap command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authentication login mschap MSCHAP is disabled`

show aaa authorization

show aaa authorization


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authorization",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authorization",
        "msg": "Success",
        "code": "200",
        "body": {
          "pki_ssh_cert_author": "local",
          "pki_ssh_pubkey_author": "local"
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authorization command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa authorization pki-ssh-cert: local pki-ssh-pubkey: local`

show aaa authorization all

show aaa authorization all


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa authorization all",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa authorization all",
        "msg": "Success",
        "code": "200",
        "body": {
          "pki_ssh_cert_author": "local",
          "pki_ssh_pubkey_author": "local",
          "TABLE_cmd_methods": {
            "ROW_cmd_methods": [
              {
                "appl_subtype": "default",
                "cmd_type": "config-commands",
                "methods": "local"
              },
              {
                "appl_subtype": "default",
                "cmd_type": "commands",
                "methods": "local"
              },
              {
                "appl_subtype": "console",
                "cmd_type": "config-commands",
                "methods": "local "
              },
              {
                "appl_subtype": "console",
                "cmd_type": "commands",
                "methods": "local "
              }
            ]
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa authorization all command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output

CLI Output
`Switch# show aaa authorization all pki-ssh-cert: local pki-ssh-pubkey: local AAA command authorization: default authorization for config-commands: local default authorization for commands: local console authorization for config-commands: local console authorization for commands: local`

Switch# show aaa authorization all
         pki-ssh-cert: local
         pki-ssh-pubkey: local
AAA command authorization:
         default authorization for config-commands: local
         default authorization for commands: local
         console authorization for config-commands: local
         console authorization for commands: local

show aaa bypass-user

show aaa bypass-user


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa bypass-user",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa bypass-user",
        "msg": "Success",
        "code": "200",
        "body": {
          "num_bypass_users": 1,
          "TABLE_bypassUsers": {
            "ROW_bypassUsers": {
              "username": "test",
              "account": "ENABLED",
              "author": "ENABLED"
            }
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa bypass-user command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output

CLI Output
`Switch# show aaa bypass-user ------------------------------------------------------------------------ Information about Bypass user configuration Number of bypass users (Max: 8): 1 ------------------------------------------------------------------------ Username Accounting Bypass Authorization bypass ------------------------------------------------------------------------ test ENABLED ENABLED`

Switch# show aaa bypass-user
------------------------------------------------------------------------
Information about Bypass user configuration
Number of bypass users (Max: 8): 1
------------------------------------------------------------------------
Username        Accounting Bypass       Authorization bypass
------------------------------------------------------------------------
test               ENABLED               ENABLED

show aaa groups

show aaa groups


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa groups",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa groups",
        "msg": "Success",
        "code": "200",
        "body": {
          "TABLE_groups": {
            "ROW_groups": {
              "group": "radius"
            }
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa groups command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa groups radius`

show aaa user default-role

show aaa user default-role


import json

"""
Modify these please
"""
url='http://<IP_Address>/ins'
switchuser='<User_ID>'
switchpassword='<Password>'

myheaders={'content-type':'application/json'}
payload={
  "ins_api":{
  "version": "1.0",
  "type": "cli_show",
  "chunk": "0",
  "sid": "1",
  "input": "show aaa user default-role",
  "output_format": "json"
}

response = requests.post(url,data=json.dumps(payload), headers=myheaders,auth=(switchuser,switchpassword)).json()
output = json.dumps(response, indent=4, sort_keys=True)


{

  "ins_api": {
    "type": "cli_show",
    "version": "1.0",
    "sid": "eoc",
    "outputs": {
      "output": {
        "input": "show aaa user default-role",
        "msg": "Success",
        "code": "200",
        "body": {
          "default_role_status": {
            "udr_status": "enabled"
          }
        }
      }
    }
  }
}

The CLI output example below corresponds to the payload example in the code pane on the right. For more information about the show aaa user default-role command, see the CLI command reference:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html

Note: This example was added in Cisco NX-OS Release 9.2(1).

CLI Output
`Switch# show aaa user default-role User default role status : enabled`