Basic Configuration

Login System

By default, the appliances both support serial console-based login and SSH-based login. The default credentials for login are admin/asteros. In the case of SSH login, the user can use the serial console configured management interface IP address.

Serial Login

[Use Cases]

Last login: Tue Jun 10 17:48:41 UTC 2025 from 192.168.200.240 on pts/0
...Entering cli view, please wait...
sonic#

Enter The Command Line Configuration Interface

To use the Klish command line, you need to first enter the Klish view.

sonic-cli

[Command]

sonic-cli

[Purpose]

Enter the Klish command line view

[Notes]

This command is executed in the terminal and use system bash command to exit the CLI view.

[Use Cases]

admin@sonic:~$ sonic-cli
sonic#

help

All commands support help by typing Tab or ”?” to help the user understand the command and its parameters. Tab and ”?” can be used at any level of the command and will show the next possible input command or sub-command. If you have problems using the command line, you can use the help function to get help without having to remember a lot of complicated commands.

When you enter a command, press the Tab key, the system will list the set of keywords that can be matched; enter ”? , the system will give the corresponding keyword hint or explanation of the meaning of the parameter.

Example：

sonic# show <tab>
aaa access-list arp arp-to-host authentication bfd bgp bgpd
clock copp crm dhcp dhcp-relay dns dot1x end
exit filter-list hash igmp-snooping interface ip ipfix ipv6
isisd key l2vpn ldpd lldp local-user location-led log
mac-address mcast-snooping mclag mirror mld-snooping monitor-link-group mpls nat
nd ndp nexthop-group no ntp ospf6d ospfd pbr-map
poe port-group port-isolate-group pseudowire ptp qos qos-map-all quit
radv route-map router router-id show sla snmp-agent snp-sync
ssh stp syslog tacacs telnet time-range traffic user-bind
vlan vlan-group vrf vrrp ztp
sonic# configure terminal
sonic(config)# access-list l3 test ingress <tab>
<cr>
sonic(config)# access-list l3 test <enter>
Syntax error: The command is not completed
sonic(config)# access-list l3 test1 ingress
sonic(config-l3-acl-test1)# ?
end Exit to the exec Mode
exit Exit from current mode
no Negate a command or set its defaults
rule Add an access list entry
show show running-config
sonic(config-l3-acl-test1)# rule ?
String rule ID(0..500,the larger num has higher priority) or rule name(not pure digit)
sonic(config-l3-acl-test1)# rule 1 ?
src-mac Specify source mac address
ethernet-type Specify ethernet protocol type
outer-vlan Specify outer VLAN id
vlan-pri Specify outer VLAN priority
ip-protocol Specify IP protocol
src-ip Specify source IP address(mask)
dst-ip Specify destination IP address(mask)
icmp-type Specify type of ICMP
src-port Specify L4 source port
dst-port Specify L4 destination port
packet-action Specify action of matched packet
ip-type Specify ip type
redirect-action Specify redirect action of matched packet
traffic-behavior Specify a traffic-behavior to bind
<cr>

Description:

• Enter an incorrect command or a command that does not apply to this view will not allow a carriage return to be entered

• If the command line is not entered completely, press the entry key directly, the system will give a prompt

• <cr>Indicates that there are no keywords or parameters in this position, and can be executed by typing directly into the carriage return

exit

[Command]

exit

[Purpose]

Exit a view

[Notes]

This command is executed in any view

show this

[Command]

show this

[Purpose]

Show all configuration commands in the current view

[Usage Scenario]

This command would display the currently running configuration on the device, including all the parameters and settings that are currently in effect.

[Notes]

This command is executed in any view.

[Use Cases]

sonic(config)# interface ethernet 1
sonic(config-if-1)# show this
!
interface ethernet 1
ip address 2022::9110/127
ip address 30.11.13.1/30
speed 1000

Device Upgrade

image update bin-file

[Command]

image update bin-file

[Purpose]

Upgrade system version

[Parameter]

bin-file Software image file name

[View]

System view

[Notes]

Upgrade package storage path:/home/admin. By default, during an upgrade, the system will automatically copy the currently saved configuration file to the new version and load it after the restart. If you need to clear the configuration or save the latest configuration, please execute the appropriate commands before the upgrade.

[Use Cases]

sonic# image update AsterNOS6.1-R0100P03.bin

System Boot Configuration

show running-config

[Command]

show running-config

[Purpose]

Display the currently running configuration information

[View]

System view

[Use Cases]

sonic# show running-config
!
interface ethernet 1
mtu 9210
!
…
!
ip protocol static route-map RM_SET_SRC
!
line vty
!
end

reboot

[Command]

reboot

[Purpose]

Reboot system

[View]

System view

[Use Cases]

sonic# reboot

write

[Command]

write

[Purpose]

Configuration saving

[View]

System view

[Usage Scenario]

Users modify the device’s current configuration via the command line, and these configurations are temporary. To ensure that the current configuration remains effective after the device is rebooted, it’s necessary to save the current configuration to a configuration file before restarting the device.

[Notes]

The configurations will be saved in JSON format in the system’s /etc/sonic directory, with the filename as config_db.json. The file saved during the previous ‘write’ command execution will be renamed in the format config_db_date for record-keeping and rollback purposes.

[Use Cases]

sonic# write
save running-config...

delete startup-config

[Command]

delete startup-config

[Purpose]

Delete saved configuration

[View]

System view

[Notes]

Saved configurations related to the management interface will not be deleted.

[Use Cases]

sonic# delete startup-config