When accessing Avi Vantage’s CLI, an administrator needs to SSH via port 22 to the IP address of an Avi Controller or the cluster IP.
Avi Controller runs on Ubuntu Linux, which means there are two levels of CLI access. When an administrator logs into the CLI, the admin is first admitted to Linux. From there, the admin may access the Avi shell via a second step, outlined below. In some authentication modes, non-admin accounts may not access Linux, and are instead forwarded directly to the Avi shell.
- CLI Guide
- CLI Top-Level Commands
- SSH Key-based Login to Avi Controller (new for Avi Vantage release 16.3)
Access the Controller CLI
To access the command line interface, either SSH (port 22) to the Vantage Controller IP or cluster IP, or access the Controller via the console from an orchestrator such as vCenter. Some user accounts may default into Linux bash. For these accounts, enter the Vantage shell by typing:
Similarly, to exit the Vantage shell into Linux, type:
> Note: While it is possible to directly access the CLI of a Service Engine, it is not recommended, and may only be used for basic troubleshooting. All configuration management must be done from the Controller.
Access Using Remote Authentication
When accessing the CLI on a system configured with remote authentication such as LDAP or TACACS, only two accounts are open. These are admin and cli. The admin account is the standard administrative account for the system, and is maintained as a locally-authenticated account, even in a system configured for remote auth. The cli account has no password. Any non-admin account should use the account name cli, which will then forward the user through Linux to the Avi shell. From the shell the user must log in via their standard account. Non-admin accounts do not have access to Linux.
Local Avi Shell
For Mac and Linux clients, an Avi CLI package may be installed on the local computer.