New and Deprecated Commands, Parameters, and SNMP OIDs

May 24, 2019

Contributed by: S

Jun 17, 2016

This section lists the new and deprecated commands, parameters, and SNMP OIDS.

New Commands

The following table lists the new commands in release 11.1.

Command Group	Command
Appflow	set appflow collector
Network	set vrID6, set netbridge, bind netProfile, unbind netProfile
NS	flush ns sourceroutecachetable
Protocol	clear protocol httpBand
Router	config router dynamicRouting
SSL	stat ssl vserver
Reputation	set reputation settings, show reputation settings

New Parameters

The following table lists the new parameters in release 11.1.

Command group: Basic

Commands:

rm server \[-removeGSLBSvcOnly\]
add service \[-monConnectionClose\]
show service \[-monConnectionClose\]
add serviceGroup \[-monConnectionClose\]
show serviceGroup \[-monConnectionClose\]
start nstrace \[-skipLocalSSH\]
start nstrace \[-capsslkeys\]
show nstrace \[-skipLocalSSH\]
show nstrace \[-capsslkeys\]

Command group: AAA

Commands:

show aaa session \[-aaaUserConnInfo\]
set aaa radiusParams \[-authservRetry\]
show aaa radiusParams \[-authservRetry\]
set aaa parameter \[-aaaSessionLoglevel\]
show aaa parameter \[-aaaSessionLoglevel\]

Command group: AppFlow

Commands:

add appflow action \[-pageTracking\]
add appflow action \[-securityInsight\]
set appflow action \[-pageTracking\]
set appflow action \[-securityInsight\]
show appflow action \[-pageTracking\]
show appflow action \[-securityInsight\]
set appflow param \[-SecurityInsightRecordInterval\]
set appflow param \[-subscriberAwareness\]
set appflow param \[-SecurityInsightTraffic\]
set appflow param \[-cacheInsight\]
show appflow param \[-SecurityInsightRecordInterval\]
show appflow param \[-SecurityInsightTraffic\]
show appflow param \[-subscriberAwareness\]
show appflow param \[-cacheInsight\]

Command group: Audit

Commands:

add audit syslogAction \[-serverDomainName\]
set audit syslogAction \[-serverDomainName\]
set audit syslogAction \[-domainResolveRetry\]
set audit syslogAction \[-domainResolveNow\]
show audit syslogAction \[-serverDomainName\]
show audit syslogAction \[-IP\]
show audit syslogAction \[-domainResolveRetry\]
add audit nslogAction \[-serverDomainName\]
set audit nslogAction \[-serverDomainName\]
set audit nslogAction \[-domainResolveRetry\]
set audit nslogAction \[-domainResolveNow\]
show audit nslogAction \[-serverDomainName\]
show audit nslogAction \[-domainResolveRetry\]
show audit nslogAction \[-IP\]

Command group: Authentication

Commands:

add authentication radiusAction \[-authservRetry\]
set authentication radiusAction \[-authservRetry\]
show authentication radiusAction \[-authservRetry\]
add authentication negotiateAction \[-NTLMPath\]
set authentication negotiateAction \[-NTLMPath\]
show authentication negotiateAction \[-NTLMPath\]
add authentication samlAction \[-skewTime\]
set authentication samlAction \[-skewTime\]
show authentication samlAction \[-skewTime\]
bind authentication vserver \[-portaltheme\]
unbind authentication vserver \[-portaltheme\]
show authentication vserver \[-portaltheme\]
add authentication samlIdPProfile \[-samlBinding\]
add authentication samlIdPProfile \[-skewTime\]
add authentication samlIdPProfile \[-signAssertion\]
add authentication samlIdPProfile \[-keyTransportAlg\]
set authentication samlIdPProfile \[-samlBinding\]
set authentication samlIdPProfile \[-skewTime\]
set authentication samlIdPProfile \[-signAssertion\]
set authentication samlIdPProfile \[-keyTransportAlg\]
show authentication samlIdPProfile \[-samlBinding\]
show authentication samlIdPProfile \[-skewTime\]
show authentication samlIdPProfile \[-signAssertion\]
show authentication samlIdPProfile \[-keyTransportAlg\]
add authentication loginSchema \[-builtin\]
show authentication loginSchema \[-builtin\]

Command group: Cluster

Commands:

show cluster instance \[-validMtu\]
show cluster node \[-routeMonitor\]
show cluster node \[-routeMonState\]
show cluster node \[-netmask\]
bind cluster node \[-routeMonitor\]
unbind cluster node \[-routeMonitor\]

Command group: DNS

Command:

show dns naptrRec \[-vServerName\]

Command group: GSLB

Commands:

add gslb site \[-naptrReplacementSuffix\]
set gslb site \[-naptrReplacementSuffix\]
show gslb site \[-naptrReplacementSuffix\]
add gslb service \[-naptrReplacement\]
add gslb service \[-naptrOrder\]
add gslb service \[-naptrServices\]
add gslb service \[-naptrDomainTTL\]
add gslb service \[-naptrPreference\]
set gslb service \[-naptrOrder\]
set gslb service \[-naptrPreference\]
set gslb service \[-naptrServices\]
set gslb service \[-naptrReplacement\]
show gslb service \[-lastresponse\]
show gslb service \[-naptrOrder\]
show gslb service \[-naptrPreference\]
show gslb service \[-naptrServices\]
show gslb service \[-naptrReplacement\]
show gslb service \[-naptrDomainTTL\]
add gslb vserver \[-ECS\]
add gslb vserver \[-ecsAddrValidation\]
set gslb vserver \[-ECS\]
set gslb vserver \[-ecsAddrValidation\]
show gslb vserver \[-ECS\]
show gslb vserver \[-ecsAddrValidation\]

Command group: HA

Command:

show HA node \[-haHeartbeatifaces\]

Command group: ICA Commands:

add ica action \[-latencyprofileName\]
set ica action \[-latencyprofileName\]
show ica action \[-latencyprofileName\]

Command group: IPsec Commands:

add ipsec profile \[-responderOnly\]
show ipsec profile \[-responderOnly\]
set ipsec parameter \[-responderOnly\]
unset ipsec parameter \[-responderOnly\]
show ipsec parameter \[-responderOnly\]

Command group: Load balancing

Commands:

add lb monitor \[-builtin\]
add lb monitor \[-sslProfile\]
set lb monitor \[-sslProfile\]
unset lb monitor \[-sslProfile\]
bind lb monitor \[-certkeyName\]
unbind lb monitor \[-certkeyName\]
show lb monitor \[-builtin\]
show lb monitor \[-sslProfile\]
show lb monitor \[-certkeyName\]
show lb monitor \[-CA\]
show lb monitor \[-crlCheck\]
show lb monitor \[-ocspCheck\]
add lb vserver \[-lbprofilename\]
add lb vserver \[-redirectFromPort\]
add lb vserver \[-httpsRedirectUrl\]
set lb vserver \[-lbprofilename\]
set lb vserver \[-redirectFromPort\]
set lb vserver \[-httpsRedirectUrl\]
unset lb vserver \[-lbprofilename\]
unset lb vserver \[-redirectFromPort\]
unset lb vserver \[-httpsRedirectUrl\]
show lb vserver \[-backupLBMethod\]
show lb vserver \[-preferredLocation\]
show lb vserver \[-lbprofilename\]
show lb vserver \[-redirectFromPort\]
show lb vserver \[-httpsRedirectUrl\]
set lb parameter \[-AllowBoundSvcRemoval\]
set lb parameter \[-retainservicestate\]
show lb parameter \[-AllowBoundSvcRemoval\]
show lb parameter \[-retainservicestate\]

Command group: LSN

Commands:

bind lsn group \[-pcpServer\]
bind lsn group \[-logProfileName\]
unbind lsn group \[-pcpServer\]
unbind lsn group \[-logProfileName\]
show lsn group \[-pcpServer\]
show lsn group \[-logProfileName\]
add lsn logprofile \[-logCompact\]
set lsn logprofile \[-logCompact\]
show lsn logprofile \[-logCompact\]
set lsn parameter \[-subscrSessionRemoval\]
show lsn parameter \[-subscrSessionRemoval\]
show lsn session \[-IPv6Address\]
show lsn deterministicNat \[-network6\]
show lsn deterministicNat \[-natprefix\]
show lsn deterministicNat \[-nattype\]

Command group: Network Commands:

add channel \[-haHeartbeat\]
set channel \[-haHeartbeat\]
show channel \[-haHeartbeat\]
add vrID \[-preemptiondelaytimer\]
show vrID \[-preemptiondelaytimer\]
add vrID6 \[-priority\]
add vrID6 \[-preemption\]
add vrID6 \[-sharing\]
add vrID6 \[-preemptiondelaytimer\]
add vrID6 \[-trackifNumPriority\]
bind vrID6 \[-trackifNum\]
unbind vrID6 \[-trackifNum\]
show vrID6 \[-preemption\]
show vrID6 \[-sharing\]
show vrID6 \[-preemptiondelaytimer\]
show vrID6 \[-trackifNum\]
show vrID6 \[-trackifNumPriority\]
show vrID6 \[-effectivePriority\]
add inat \[-tcpproxy\]
add inat \[-ftp\]
add inat \[-tftp\]
add inat \[-usip\]
add inat \[-usnip\]
add inat \[-proxyIP\]
set inat \[-tcpproxy\]
set inat \[-ftp\]
set inat \[-tftp\]
set inat \[-usip\]
set inat \[-usnip\]
set inat \[-proxyIP\]
show inat \[-proxyIP\]
show inat \[-tcpproxy\]
show inat \[-ftp\]
show inat \[-tftp\]
show inat \[-usip\]
show inat \[-usnip\]
show bridgegroup \[-ownerGroup\]
add netbridge \[-vxlanVlanMap\]

show netbridge [-vxlanVlanMap]

show netProfile [-srcPortRange]

show netProfile [-stateflag]

show netProfile [-flags]

show netProfile [-natRule]

show netProfile [-netmask]

set interface [-haHeartbeat]

set interface [-trunkmode]

set interface [-trunkAllowedVlan]

show interface [-haHeartbeat]

show interface [-trunkmode]

show interface [-trunkAllowedVlan]

set rnat [-connfailover]

unset rnat [-connfailover]

show rnat [-connfailover]

set L2Param [-stopMacMoveUpdate]

show L2Param [-stopMacMoveUpdate]

set L3Param [-ipv6DynamicRouting]

show L3Param [-ipv6DynamicRouting]

add forwardingSession [-sourceroutecache]

set forwardingSession [-sourceroutecache]

show forwardingSession [-sourceroutecache]

add vxlan [-type is introduced]

add vxlan [-innerVlanTagging]

set vxlan [-innerVlanTagging]

show vxlan [-innerVlanTagging]

show vxlan [-type]

show vxlan [-protocol]

Command group: NS

Commands:

show ns acl \[-aclassociate\]
show ns acl6 \[-aclassociate\]
add ns ip6 \[-vrID6\]
set ns ip6 \[-vrID6\]
show ns ip6 \[-vrID6\]
add ns tcpProfile \[-tcpFastOpen\]
add ns tcpProfile \[-Hystart\]
add ns tcpProfile \[-dupackthresh\]
set ns tcpProfile \[-tcpFastOpen\]
set ns tcpProfile \[-Hystart\]
set ns tcpProfile \[-dupackthresh\]
unset ns tcpProfile \[-tcpFastOpen\]
unset ns tcpProfile \[-Hystart\]
unset ns tcpProfile \[-dupackthresh\]
show ns tcpProfile \[-tcpFastOpen\]
show ns tcpProfile \[-Hystart\]
show ns tcpProfile \[-dupackthresh\]
show ns license \[-isSGwyLic\]
show ns license \[-Rep\]
clear ns config \[-RBAconfig\]
show ns connectiontable \[-maxRcvbuf\]
show ns connectiontable \[-linkmaxRcvbuf\]
show ns connectiontable \[-RxQsize\]
show ns connectiontable \[-linkRxQsize\]
show ns connectiontable \[-maxSndbuf\]
show ns connectiontable \[-linkmaxSndbuf\]
show ns connectiontable \[-TxQsize\]
show ns connectiontable \[-linkTxQsize\]
show ns connectiontable \[-flavor\]
show ns connectiontable \[-linkflavor\]
show ns connectiontable \[-bwEstimate\]
show ns connectiontable \[-linkbwEstimate\]
show ns connectiontable \[-rttMin\]
show ns connectiontable \[-linkrttMin\]
show ns connectiontable \[-name\]
show ns connectiontable \[-linkName\]
show ns connectiontable \[-tcpmode\]
show ns connectiontable \[-linktcpmode\]
show ns connectiontable \[-realTimeRtt\]
show ns connectiontable \[-linkrealTimeRtt\]
show ns connectiontable \[-sndBuf\]
show ns connectiontable \[-linksndBuf\]
show ns connectiontable \[-nsbTcpwaitQ\]
show ns connectiontable \[-linknsbTcpwaitQ\]
show ns connectiontable \[-nsbRetxQ\]
show ns connectiontable \[-linknsbRetxQ\]
show ns connectiontable \[-sackblocks\]
show ns connectiontable \[-linksackblocks\]
show ns connectiontable \[-congstate\]
show ns connectiontable \[-linkcongstate\]
show ns connectiontable \[-sndrecoverle\]
show ns connectiontable \[-linksndrecoverle\]
show ns feature \[-Rep\]
show ns mode \[-ULFD\]
set ns tcpParam \[-tcpFastOpenCookieTimeout\]
show ns tcpParam \[-tcpFastOpenCookieTimeout\]
unset ns pbr6 \[-vxlanVlanMap\]
show ns pbr6 \[-vxlanVlanMap\]
add ns partition \[-pmacInternal\]
show ns partition \[-pmacInternal\]

Command group: Protocol Commands:

show protocol httpBand \[-reqBandSize\]
show protocol httpBand \[-respBandSize\]

Command group: RDP Commands:

add rdp clientprofile \[-redirectComPorts\]
add rdp clientprofile \[-redirectPnpDevices\]
add rdp clientprofile \[-rdpListener\]
set rdp clientprofile \[-redirectComPorts\]
set rdp clientprofile \[-redirectPnpDevices\]
set rdp clientprofile \[-rdpListener\]
show rdp clientprofile \[-redirectComPorts\]
show rdp clientprofile \[-redirectPnpDevices\]
show rdp clientprofile \[-rdpListener\]

Command group: Rewrite Commands:

set rewrite param \[-timeout\]
unset rewrite param \[-timeout\]
show rewrite param \[-timeout\]

Command group: SNMP Commands:

set snmp option \[-snmpTrapLoggingLevel\]
show snmp option \[-snmpTrapLoggingLevel\]

Command group: SSL Commands:

show ssl certKey \[-CertificateType\]
create ssl certReq \[-digestMethod\]
show ssl profile \[-sslpfobjecttype\]

Command group: System

Commands:

add system user \[-maxsession\]
set system user \[-maxsession\]
show system user \[-maxsession\]
set system parameter \[-totalAuthTimeout\]
set system parameter \[-cliLoglevel\]
show system parameter \[-totalAuthTimeout\]
show system parameter \[-cliLoglevel\]
restore system backup \[-skipbackup\]
show system file \[-filesize\]

Command group: Subscriber Commands:

set subscriber param \[-idleTTL\]
set subscriber param \[-idleAction\]
set subscriber param \[-ipv6PrefixLookupList\]
set subscriber param \[-builtin\]
show subscriber param \[-idleTTL\]
show subscriber param \[-idleAction\]
show subscriber param \[-ipv6PrefixLookupList\]
show subscriber param \[-builtin\]
set subscriber gxInterface \[-revalidationTimeout\]
show subscriber gxInterface \[-revalidationTimeout\]

Command group: TM Commands:

add tm sessionPolicy \[-expressionType\]
show tm sessionPolicy \[-stateflag\]
show tm sessionPolicy \[-expressionType\]
show tm sessionPolicy \[-hits\]
show tm sessionPolicy \[-gotoPriorityExpression\]
add tm samlSSOProfile \[-skewTime\]
set tm samlSSOProfile \[-skewTime\]
show tm samlSSOProfile \[-skewTime\]
show tm global \[-gotoPriorityExpression\]

Command group: Utility

Commands:

show callhome \[-proxyAuthService\]
set callhome \[-proxyAuthService\]

Command group: VPN

Commands:

add vpn vserver \[-authnProfile\]
add vpn vserver \[-vserverFqdn\]
set vpn vserver \[-authnProfile\]
set vpn vserver \[-vserverFqdn\]
show vpn vserver \[-authnProfile\]
show vpn vserver \[-vserverFqdn\]
add vpn samlSSOProfile \[-skewTime\]
set vpn samlSSOProfile \[-skewTime\]
show vpn samlSSOProfile \[-skewTime\]
add vpn sessionAction \[-sfGatewayAuthType\]
add vpn sessionAction \[-alwaysONProfileName\]
set vpn sessionAction \[-sfGatewayAuthType\]
set vpn sessionAction \[-alwaysONProfileName\]
show vpn sessionAction \[-sfGatewayAuthType\]
show vpn sessionAction \[-alwaysONProfileName\]
set vpn parameter \[-alwaysONProfileName\]
unset vpn parameter \[-alwaysONProfileName\]
show vpn parameter \[-alwaysONProfileName\]
add vpn alwaysONProfile \[-internetAccess\]
add vpn alwaysONProfile \[-clientControl\]
add vpn alwaysONProfile \[-locationBasedVPN\]
set vpn alwaysONProfile \[-internetAccess\]
set vpn alwaysONProfile \[-clientControl\]
set vpn alwaysONProfile \[-locationBasedVPN\]
show vpn alwaysONProfile \[-internetAccess\]
show vpn alwaysONProfile \[-clientControl\]
show vpn alwaysONProfile \[-locationBasedVPN\]

Command group: Application firewall

Command:

show appfw fieldType \[-all\]

Deprecated Commands

The following table lists the commands that are deprecated in version 11.1.

Command group: Network

Commands:

add vpath
rm vpath
show vpath
stat vpath
set vPathParam
show vPathParam

Deprecated Parameters

The following table lists the parameters that are deprecated in version 11.1.

Command group: VPB

Commands:

add vpn vserver \[-userDomains\]
set vpn vserver \[-userDomains\]
show vpn vserver \[-userDomains\]
add vpn sessionAction \[-clientOptions\]
add vpn sessionAction \[-clientDebug\]
set vpn sessionAction \[-clientOptions\]
set vpn sessionAction \[-clientDebug\]
show vpn sessionAction \[-clientOptions\]
show vpn sessionAction \[-clientDebug\]
set vpn parameter \[-clientOptions\]
set vpn parameter \[-clientDebug\]
set vpn parameter \[-userDomains\]
unset vpn parameter \[-clientOptions\]
unset vpn parameter \[-userDomains\]
show vpn parameter \[-clientOptions\]
show vpn parameter \[-clientDebug\]
show vpn parameter \[-userDomains\]

NEW SNMP OIDs

pbrTotNullDrop,1.3.6.1.4.1.5951.4.1.1.22.5.25
pbr6TotNullDrop,1.3.6.1.4.1.5951.4.1.1.22.7.25
tcpOptimizationEnabled,1.3.6.1.4.1.5951.4.1.1.46.131
tcpOptimizationBypassed,1.3.6.1.4.1.5951.4.1.1.46.132
sslTotECDSAAuthorizations,1.3.6.1.4.1.5951.4.1.1.47.366
nsLsnNAT64GlobalStatsGroup,1.3.6.1.4.1.5951.4.1.1.83.6
lsnTotNAT64RxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.1
lsnTotNAT64RxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.2
lsnTotNAT64TxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.3
lsnTotNAT64TxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.4
lsnCurNAT64sessions,1.3.6.1.4.1.5951.4.1.1.83.6.5
lsnNAT64CurSubscribers,1.3.6.1.4.1.5951.4.1.1.83.6.6
lsnTotNAT64TcpRxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.7
lsnTotNAT64TcpTxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.8
lsnTotNAT64UdpRxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.9
lsnTotNAT64UdpTxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.10
lsnTotNAT64IcmpRxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.11
lsnTotNAT64IcmpTxPkts,1.3.6.1.4.1.5951.4.1.1.83.6.12
lsnTotNAT64TcpRxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.13
lsnTotNAT64TcpTxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.14
lsnTotNAT64UdpRxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.15
lsnTotNAT64UdpTxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.16
lsnTotNAT64IcmpRxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.17
lsnTotNAT64IcmpTxBytes,1.3.6.1.4.1.5951.4.1.1.83.6.18
lsnTotNAT64TcpDrpPkts,1.3.6.1.4.1.5951.4.1.1.83.6.19
lsnTotNAT64UdpDrpPkts,1.3.6.1.4.1.5951.4.1.1.83.6.20
lsnTotnat64IcmpDrpPkts,1.3.6.1.4.1.5951.4.1.1.83.6.21
lsnCurNAT64TcpSessions,1.3.6.1.4.1.5951.4.1.1.83.6.22
lsnCurNAT64UdpSessions,1.3.6.1.4.1.5951.4.1.1.83.6.23
lsnCurNAT64IcmpSessions,1.3.6.1.4.1.5951.4.1.1.83.6.24
lsnNAT64SessionsRate,1.3.6.1.4.1.5951.4.1.1.83.6.25
lsnNAT64TcpSessionsRate,1.3.6.1.4.1.5951.4.1.1.83.6.26
lsnNAT64UdpSessionsRate,1.3.6.1.4.1.5951.4.1.1.83.6.27
lsnNAT64IcmpSessionsRate,1.3.6.1.4.1.5951.4.1.1.83.6.28
ipConflictMacAddr,1.3.6.1.4.1.5951.4.1.10.2.66
gslbSite,1.3.6.1.4.1.5951.4.1.10.2.67
siteIP,1.3.6.1.4.1.5951.4.1.10.2.68
lsnNAT64SubscrIPV6,1.3.6.1.4.1.5951.4.1.10.2.69

Deprecated SNMP OIDs

ifTxCollisions,1.3.6.1.4.1.5951.4.1.1.54.1.14
ifTxExcessCollisions,1.3.6.1.4.1.5951.4.1.1.54.1.15
ifTxLateCollisions,1.3.6.1.4.1.5951.4.1.1.54.1.16
ifTxMultiCollisionErrors,1.3.6.1.4.1.5951.4.1.1.54.1.17
ifErrTxDeferred,1.3.6.1.4.1.5951.4.1.1.54.1.37

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

New and Deprecated Commands, Parameters, and SNMP OIDs

May 24, 2019

Contributed by: S

New and Deprecated Commands, Parameters, and SNMP OIDs

New Commands

New Parameters

Deprecated Commands

Deprecated Parameters

NEW SNMP OIDs

Deprecated SNMP OIDs

New and Deprecated Commands, Parameters, and SNMP OIDs

In this article