diff --git a/cli/documentation/en_US/aaa/aaa-accounting b/cli/documentation/en_US/aaa/aaa-accounting
new file mode 100755
index 0000000..61706fa
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting
@@ -0,0 +1,3 @@
+Configure accounting (logging for user CLI events).
+Accounting is configured for a specific role, via a specific channel,
+for specific events, using one or more accounting services.
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-example b/cli/documentation/en_US/aaa/aaa-accounting-example
new file mode 100755
index 0000000..85b0720
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-example
@@ -0,0 +1,13 @@
+aaa accounting exec default none
+  Turn off accounting services for SSH CLI accesses.
+  The native (/var/log) accounting cannot be disabled.
+
+no aaa accounting exec default
+  Reset the accounting services for SSH CLI accesses to defaults.
+  This disables all accounting services, with the exception
+  of native (/var/log) accounting, which is always enabled.
+
+aaa accounting exec default start-stop group tacacs+
+  Configure the currently-defined set of TACACS+ servers
+  as an accounting service for SSH CLI login and logout.
+
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec b/cli/documentation/en_US/aaa/aaa-accounting-exec
new file mode 100755
index 0000000..7909537
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec
@@ -0,0 +1 @@
+Configure accounting services for exec mode (CLI access).
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec-use-default b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-default
new file mode 100755
index 0000000..f536ed7
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-default
@@ -0,0 +1,5 @@
+Configure accounting services while connecting via the default channel
+(currently SSH).
+
+Reset the accounting services (currently to native /var/log logging)
+with the 'no' version of this command.
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec-use-none b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-none
new file mode 100755
index 0000000..7620c19
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-none
@@ -0,0 +1,3 @@
+Disable accounting services for this role and channel.
+
+Note that local (/var/log) accounting is always enabled.
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec-use-server-group b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-server-group
new file mode 100755
index 0000000..2b0ce79
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-server-group
@@ -0,0 +1,2 @@
+Configure accounting services to use a specific group of accounting
+servers.
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec-use-start-stop b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-start-stop
new file mode 100755
index 0000000..f3842ed
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-start-stop
@@ -0,0 +1,2 @@
+Configure accounting services to record 'start' (login)
+and 'stop' (logout) events.
diff --git a/cli/documentation/en_US/aaa/aaa-accounting-exec-use-tacacs b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-tacacs
new file mode 100755
index 0000000..342e567
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-accounting-exec-use-tacacs
@@ -0,0 +1,2 @@
+Configure the currently-defined TACACS+ servers (the 'tacacs+' group)
+as an accounting service.
diff --git a/cli/documentation/en_US/aaa/aaa-authentication b/cli/documentation/en_US/aaa/aaa-authentication
new file mode 100755
index 0000000..6df1b62
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication
@@ -0,0 +1,3 @@
+Configure authentication (user password validation).  Users are
+authenticated for a specific task and via a specific channel, using one
+or more authentication sources.
diff --git a/cli/documentation/en_US/aaa/aaa-authentication-example b/cli/documentation/en_US/aaa/aaa-authentication-example
new file mode 100755
index 0000000..edca25d
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication-example
@@ -0,0 +1,14 @@
+aaa authentication login default group tacacs+
+  Use TACACS+ for authenticating SSH CLI logins
+
+aaa authentication login default local
+  Use local UNIX /etc/passwd for authenticating SSH CLI logins.
+
+aaa authentication login default group tacacs+ local
+  Use both TACACS+ and /etc/passwd for login.
+
+no aaa authentication login default
+  Reset authentication sources for SSH CLI login.
+
+
+
diff --git a/cli/documentation/en_US/aaa/aaa-authentication-login b/cli/documentation/en_US/aaa/aaa-authentication-login
new file mode 100755
index 0000000..47d6bcf
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication-login
@@ -0,0 +1 @@
+Configure authentication sources for CLI login.
diff --git a/cli/documentation/en_US/aaa/aaa-authentication-login-use-default b/cli/documentation/en_US/aaa/aaa-authentication-login-use-default
new file mode 100755
index 0000000..824546a
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication-login-use-default
@@ -0,0 +1,5 @@
+Configure authentication sources while logging into the CLI
+via the default channel (currently SSH).
+
+Reset the authentication sources (currently to 'local' only) with
+the 'no' version of this command.
diff --git a/cli/documentation/en_US/aaa/aaa-authentication-login-use-local b/cli/documentation/en_US/aaa/aaa-authentication-login-use-local
new file mode 100755
index 0000000..43111ca
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication-login-use-local
@@ -0,0 +1,2 @@
+Configure the local password database (UNIX /etc/passwd)
+as an authentication mechanism.
diff --git a/cli/documentation/en_US/aaa/aaa-authentication-login-use-tacacs b/cli/documentation/en_US/aaa/aaa-authentication-login-use-tacacs
new file mode 100755
index 0000000..6e7e2bc
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authentication-login-use-tacacs
@@ -0,0 +1,2 @@
+Use the set of all defined TACACS+ servers (the 'tacacs+' group)
+as an authentication source.
diff --git a/cli/documentation/en_US/aaa/aaa-authorization b/cli/documentation/en_US/aaa/aaa-authorization
new file mode 100755
index 0000000..ea4decc
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization
@@ -0,0 +1,2 @@
+Configure authorization (user privileges).  Users are authorized for a specific role
+and via a specific channel, using one or more authorization sources.
diff --git a/cli/documentation/en_US/aaa/aaa-authorization-example b/cli/documentation/en_US/aaa/aaa-authorization-example
new file mode 100755
index 0000000..64dfedd
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization-example
@@ -0,0 +1,14 @@
+aaa authorization exec default group tacacs+
+  Use TACACS+ for authorizing CLI access
+
+aaa authorization exec default local
+  Use local UNIX /etc/passwd for authorizing CLI access
+
+aaa authorization exec default group tacacs+ local
+  Use both TACACS+ and /etc/passwd for CLI authorization
+
+no aaa authorization exec default
+  Reset authorization sources for SSH CLI access.
+
+
+
diff --git a/cli/documentation/en_US/aaa/aaa-authorization-exec b/cli/documentation/en_US/aaa/aaa-authorization-exec
new file mode 100755
index 0000000..dd5835b
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization-exec
@@ -0,0 +1 @@
+Configure authorization sources for exec mode (CLI access).
diff --git a/cli/documentation/en_US/aaa/aaa-authorization-exec-use-default b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-default
new file mode 100755
index 0000000..9a39051
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-default
@@ -0,0 +1,5 @@
+Configure authorization sources while connecting via the default channel
+(currently SSH).
+
+Reset the authorization sources (currently to 'local' only) with
+the 'no' version of this command.
diff --git a/cli/documentation/en_US/aaa/aaa-authorization-exec-use-local b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-local
new file mode 100755
index 0000000..9540a14
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-local
@@ -0,0 +1,2 @@
+Configure the local password database (UNIX /etc/passwd)
+as an authorization mechanism.
diff --git a/cli/documentation/en_US/aaa/aaa-authorization-exec-use-tacacs b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-tacacs
new file mode 100755
index 0000000..bbddc6c
--- /dev/null
+++ b/cli/documentation/en_US/aaa/aaa-authorization-exec-use-tacacs
@@ -0,0 +1,2 @@
+Use the set of all defined TACACS+ servers (the 'tacacs+' group)
+as an authorization source.
diff --git a/cli/documentation/en_US/address-space/active b/cli/documentation/en_US/address-space/active
new file mode 100755
index 0000000..aba5aea
--- /dev/null
+++ b/cli/documentation/en_US/address-space/active
@@ -0,0 +1,2 @@
+Set the address-space active. If an address-space is inactive the
+controller will not use it or its rules.
diff --git a/cli/documentation/en_US/address-space/active-example b/cli/documentation/en_US/address-space/active-example
new file mode 100755
index 0000000..88b1a43
--- /dev/null
+++ b/cli/documentation/en_US/address-space/active-example
@@ -0,0 +1,6 @@
+active
+  Within an address-space config sub-mode,
+  set this address-space as active
+
+no active
+  Deactivate the currently-configured address space
diff --git a/cli/documentation/en_US/address-space/address-space b/cli/documentation/en_US/address-space/address-space
new file mode 100755
index 0000000..f4e3fcb
--- /dev/null
+++ b/cli/documentation/en_US/address-space/address-space
@@ -0,0 +1,4 @@
+Set up or tear down address space definitions.
+
+Specifying an address space by name enters the address-space
+configuration sub-mode.
diff --git a/cli/documentation/en_US/address-space/address-space-example b/cli/documentation/en_US/address-space/address-space-example
new file mode 100755
index 0000000..1ee811c
--- /dev/null
+++ b/cli/documentation/en_US/address-space/address-space-example
@@ -0,0 +1,5 @@
+addres-space MY-ADDRESS
+  Define a new address space, and enter its configuration submode
+
+no address-space MY-ADDRESS
+  Delete an address space by name
diff --git a/cli/documentation/en_US/address-space/description b/cli/documentation/en_US/address-space/description
new file mode 100755
index 0000000..f3d87a7
--- /dev/null
+++ b/cli/documentation/en_US/address-space/description
@@ -0,0 +1 @@
+A user provided textual description for this address-space.
diff --git a/cli/documentation/en_US/address-space/description-example b/cli/documentation/en_US/address-space/description-example
new file mode 100755
index 0000000..ea2b5e8
--- /dev/null
+++ b/cli/documentation/en_US/address-space/description-example
@@ -0,0 +1,2 @@
+description "THIS IS MY ADDRESS-SPACE"
+  Associate a textual description with this address-space
diff --git a/cli/documentation/en_US/address-space/id-active b/cli/documentation/en_US/address-space/id-active
new file mode 100755
index 0000000..b01dcd8
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-active
@@ -0,0 +1 @@
+Configure this address space identifier rule as 'active'
\ No newline at end of file
diff --git a/cli/documentation/en_US/address-space/id-active-example b/cli/documentation/en_US/address-space/id-active-example
new file mode 100755
index 0000000..b688fda
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-active-example
@@ -0,0 +1,5 @@
+active
+  Configure this address space identifier rule as active
+
+no active
+  Deactivate this address space identifier rule
diff --git a/cli/documentation/en_US/address-space/id-description b/cli/documentation/en_US/address-space/id-description
new file mode 100755
index 0000000..3f10bfa
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-description
@@ -0,0 +1 @@
+A user provided textual description for this identifier-rule.
diff --git a/cli/documentation/en_US/address-space/id-description-example b/cli/documentation/en_US/address-space/id-description-example
new file mode 100755
index 0000000..fd923de
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-description-example
@@ -0,0 +1,2 @@
+description "This is rule42"
+  Provide a description for the currently-defined address-space identifier rule
diff --git a/cli/documentation/en_US/address-space/id-priority b/cli/documentation/en_US/address-space/id-priority
new file mode 100755
index 0000000..234e07e
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-priority
@@ -0,0 +1,3 @@
+The prirority of this identifier-rule. Higher numeric values represent
+higher priority. The highest priority identifier-rule that matches a
+given packet will be choosen. 
diff --git a/cli/documentation/en_US/address-space/id-priority-example b/cli/documentation/en_US/address-space/id-priority-example
new file mode 100755
index 0000000..91da1f6
--- /dev/null
+++ b/cli/documentation/en_US/address-space/id-priority-example
@@ -0,0 +1,2 @@
+priority 100
+  Set the priority for the currently-defined address-space identifier rule
diff --git a/cli/documentation/en_US/address-space/identifier b/cli/documentation/en_US/address-space/identifier
new file mode 100755
index 0000000..1637896
--- /dev/null
+++ b/cli/documentation/en_US/address-space/identifier
@@ -0,0 +1,3 @@
+This is the name of the address-space.  The address-space name "default"
+represents the default address space that will be used if no other
+address-space matches.
diff --git a/cli/documentation/en_US/address-space/identifier-rule b/cli/documentation/en_US/address-space/identifier-rule
new file mode 100755
index 0000000..36d5180
--- /dev/null
+++ b/cli/documentation/en_US/address-space/identifier-rule
@@ -0,0 +1,2 @@
+Set an address-space identifier rule and enter submode. Devices are
+assigned into address-spaces based on identifier-rules. 
diff --git a/cli/documentation/en_US/address-space/identifier-rule-example b/cli/documentation/en_US/address-space/identifier-rule-example
new file mode 100755
index 0000000..b813033
--- /dev/null
+++ b/cli/documentation/en_US/address-space/identifier-rule-example
@@ -0,0 +1,7 @@
+identifier-rule rule42
+  Define a new identifier rule for this address-space definition,
+  and enter the identifier-rule submode
+
+no identifier-rule rule42
+  Delete an identifier rule associated with the
+  currently-define address-space
diff --git a/cli/documentation/en_US/address-space/match b/cli/documentation/en_US/address-space/match
new file mode 100755
index 0000000..9e73720
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match
@@ -0,0 +1,2 @@
+Configure a match for this identifier rule. If multiple matches are
+configured they will be logically AND'ed.
diff --git a/cli/documentation/en_US/address-space/match-switch b/cli/documentation/en_US/address-space/match-switch
new file mode 100755
index 0000000..e805cc0
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-switch
@@ -0,0 +1,3 @@
+Associate a switch or set of switch interfaces with this identifier
+rule. Devices present on the specified switch/interfaces will be
+matched. 
diff --git a/cli/documentation/en_US/address-space/match-switch-example b/cli/documentation/en_US/address-space/match-switch-example
new file mode 100755
index 0000000..9a3d4b1
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-switch-example
@@ -0,0 +1,12 @@
+match switch 00:00:11:22:33:44:55:66
+    Matches all interfaces on the switch with this DPID.
+
+match switch 00:00:11:22:33:44:55:66 Ethernet1
+    Matches interface Ethernet1 on the specified switch.
+
+match switch 00:00:11:22:33:44:55:66 Ethernet1,Ethernet5-10,port2
+    Matches interfaces Ethernet1, Ethernet5, Ethernet6, ... Ethernet10,
+	and port2 on the specified switch.
+
+match switch ToR-1-1 
+    Matches the switch with the alias 'ToR-1-1'
diff --git a/cli/documentation/en_US/address-space/match-switch-ports b/cli/documentation/en_US/address-space/match-switch-ports
new file mode 100755
index 0000000..bb28a43
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-switch-ports
@@ -0,0 +1 @@
+Restrict the match to a switch interface or list/range of switch interfaces
diff --git a/cli/documentation/en_US/address-space/match-tag b/cli/documentation/en_US/address-space/match-tag
new file mode 100755
index 0000000..5417f7e
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-tag
@@ -0,0 +1,2 @@
+Associate a tag or list of tags with this identifier-rule. If a list of
+tags is given *all* tags need to match.
diff --git a/cli/documentation/en_US/address-space/match-tag-example b/cli/documentation/en_US/address-space/match-tag-example
new file mode 100755
index 0000000..43b4f77
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-tag-example
@@ -0,0 +1,5 @@
+match tags org.sdnplatform.tenant=CustomerA
+    Matches devices that match the given tag.
+
+match tags org.sdnplatform.tenant=CustomerA,com.example.type=router
+    Matches devices that match *all* of the given tags.
diff --git a/cli/documentation/en_US/address-space/match-vlan b/cli/documentation/en_US/address-space/match-vlan
new file mode 100755
index 0000000..181d4e9
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-vlan
@@ -0,0 +1,2 @@
+Associate VLANs with identifier-rule. In this software version the
+specified VLAN must be equal to value specified for 'vlan-tag-on-egress'
diff --git a/cli/documentation/en_US/address-space/match-vlan-example b/cli/documentation/en_US/address-space/match-vlan-example
new file mode 100755
index 0000000..a8d4252
--- /dev/null
+++ b/cli/documentation/en_US/address-space/match-vlan-example
@@ -0,0 +1,8 @@
+match vlans 1001
+  Associate one or more VLAN IDs with this identifer rule
+
+no match vlans 1001
+  Remove a VLAN ID association from this identifier rule
+
+no match vlans
+  Remove all VLAN ID associations from this identifier rule
diff --git a/cli/documentation/en_US/address-space/origin b/cli/documentation/en_US/address-space/origin
new file mode 100755
index 0000000..88a8f3a
--- /dev/null
+++ b/cli/documentation/en_US/address-space/origin
@@ -0,0 +1 @@
+Describe the origin of an address space
diff --git a/cli/documentation/en_US/address-space/origin-example b/cli/documentation/en_US/address-space/origin-example
new file mode 100755
index 0000000..63707cc
--- /dev/null
+++ b/cli/documentation/en_US/address-space/origin-example
@@ -0,0 +1,5 @@
+origin rest
+  Note that this address-space was configured via REST
+
+no origin rest
+  Remove the origin notation for this address-space
diff --git a/cli/documentation/en_US/address-space/priority b/cli/documentation/en_US/address-space/priority
new file mode 100755
index 0000000..b7fe9bc
--- /dev/null
+++ b/cli/documentation/en_US/address-space/priority
@@ -0,0 +1,4 @@
+The prirority of this address-space. Higher numeric values represent
+higher priority. All identifier-rules of the highest priority
+address-space will be evaluated before any rules of other
+address-spaces.
diff --git a/cli/documentation/en_US/address-space/priority-example b/cli/documentation/en_US/address-space/priority-example
new file mode 100755
index 0000000..cad7da5
--- /dev/null
+++ b/cli/documentation/en_US/address-space/priority-example
@@ -0,0 +1,6 @@
+priority 100
+  Set the priority of this currently-defined address-space
+
+no priority 100
+  Remove the previous priority declaration,
+  and reset this address-space's priority to the default value
diff --git a/cli/documentation/en_US/address-space/show-id b/cli/documentation/en_US/address-space/show-id
new file mode 100755
index 0000000..95814d3
--- /dev/null
+++ b/cli/documentation/en_US/address-space/show-id
@@ -0,0 +1,4 @@
+This 'show address-space' command variation is used to identify a
+specific address-space (the 'all' token provides display for every
+address-spaceJ), to describe particular operational or configured
+details.
diff --git a/cli/documentation/en_US/address-space/show-id-rules b/cli/documentation/en_US/address-space/show-id-rules
new file mode 100755
index 0000000..61e04f6
--- /dev/null
+++ b/cli/documentation/en_US/address-space/show-id-rules
@@ -0,0 +1,4 @@
+The 'identifier-rules' keyword requests the display of the configured
+identifier-rules for the named adderss-space.  The address-space
+identifier-rules describe the membership rules associated with an
+address-space.
diff --git a/cli/documentation/en_US/address-space/vlan-tag-on-egress b/cli/documentation/en_US/address-space/vlan-tag-on-egress
new file mode 100755
index 0000000..771b901
--- /dev/null
+++ b/cli/documentation/en_US/address-space/vlan-tag-on-egress
@@ -0,0 +1,3 @@
+Associates a VLAN with this address-space. This VLAN is used for
+internal disambiguation and for tagging packets that egress to other
+networks (according to identifier-rule configuration).
diff --git a/cli/documentation/en_US/address-space/vlan-tag-on-egress-example b/cli/documentation/en_US/address-space/vlan-tag-on-egress-example
new file mode 100755
index 0000000..c22ec03
--- /dev/null
+++ b/cli/documentation/en_US/address-space/vlan-tag-on-egress-example
@@ -0,0 +1,4 @@
+vlan-tag-on-egress 42
+  Associate a VLAN tag with this address-space.
+  Each address-space must have an associated VLAN, else this address-space
+  will be ignored by the controller
diff --git a/cli/documentation/en_US/clock/show b/cli/documentation/en_US/clock/show
new file mode 100755
index 0000000..8b5fe49
--- /dev/null
+++ b/cli/documentation/en_US/clock/show
@@ -0,0 +1,2 @@
+The show clock command displays the date and time
+of the connected controller.
diff --git a/cli/documentation/en_US/clock/show-example b/cli/documentation/en_US/clock/show-example
new file mode 100755
index 0000000..63a4fe1
--- /dev/null
+++ b/cli/documentation/en_US/clock/show-example
@@ -0,0 +1,6 @@
+show clock
+      Time     : 21:16:46 UTC Thu Sep 20 2012
+
+show clock details
+    Time     : 21:21:14 UTC Thu Sep 20 2012
+    Timezone : UTC
diff --git a/cli/documentation/en_US/clock/show-format-details b/cli/documentation/en_US/clock/show-format-details
new file mode 100755
index 0000000..2f38b47
--- /dev/null
+++ b/cli/documentation/en_US/clock/show-format-details
@@ -0,0 +1,2 @@
+Ths option requests the timezone
+to be displayed along with the time and date
diff --git a/cli/documentation/en_US/config/show-config b/cli/documentation/en_US/config/show-config
new file mode 100755
index 0000000..e69de29
--- /dev/null
+++ b/cli/documentation/en_US/config/show-config
diff --git a/cli/documentation/en_US/config/show-first b/cli/documentation/en_US/config/show-first
new file mode 100755
index 0000000..4f15268
--- /dev/null
+++ b/cli/documentation/en_US/config/show-first
@@ -0,0 +1,4 @@
+When a pair of configuration files are selected, with
+the 'diff' keyword separating the two files, this
+positional parammeter identifies the first of the
+two config files to diff.
diff --git a/cli/documentation/en_US/config/show-second b/cli/documentation/en_US/config/show-second
new file mode 100755
index 0000000..e42806c
--- /dev/null
+++ b/cli/documentation/en_US/config/show-second
@@ -0,0 +1 @@
+Second configuration file selection.
diff --git a/cli/documentation/en_US/config/show-single b/cli/documentation/en_US/config/show-single
new file mode 100755
index 0000000..d8c5fb9
--- /dev/null
+++ b/cli/documentation/en_US/config/show-single
@@ -0,0 +1,2 @@
+When a single config file is selected, the complete
+contents of the file is displayed
diff --git a/cli/documentation/en_US/connect/connect b/cli/documentation/en_US/connect/connect
new file mode 100755
index 0000000..dcac00d
--- /dev/null
+++ b/cli/documentation/en_US/connect/connect
@@ -0,0 +1,21 @@
+The connect command directs the CLI to issue REST API requests to the
+selected controller.  The CLI uses the controller's REST API to
+perform all configuration, retrieve all the data for show commands,
+and also to generate the running config.  The CLI is an application
+which presents the controller's REST API to the user, and can also
+provide some limited aid to an application write trying to use the
+REST API, since the requests issued by the CLI can be viewed with the
+'debug rest' command (use 'help debug rest' for more details)
+
+When the controller is running as a HA slave, many commands will not
+be available.  If the master has configured port 80 to be available
+(controller-node interface submode's firewall command), then by using
+the connect command to use the master's REST API, ssh can be avoided.
+This would preserve the command history, allowing an easy way to
+re-issue failed commands.
+
+The REST API for the controller is typically configured at port 80.
+
+Completion for the command will display all the currently known
+controllers.  If the connect succeeds, the list of known controllers
+will very likely be different.
diff --git a/cli/documentation/en_US/connect/connect-example b/cli/documentation/en_US/connect/connect-example
new file mode 100755
index 0000000..6151b9d
--- /dev/null
+++ b/cli/documentation/en_US/connect/connect-example
@@ -0,0 +1,8 @@
+connect localhost
+    Connect to the current controller (really a no-op)
+
+connect controller-node-b
+    Connect to the controller identified by an alias
+
+connect 192.168.2.129 port 8000
+    Connect to the identified ip address
diff --git a/cli/documentation/en_US/connect/connect-id b/cli/documentation/en_US/connect/connect-id
new file mode 100755
index 0000000..1f35806
--- /dev/null
+++ b/cli/documentation/en_US/connect/connect-id
@@ -0,0 +1 @@
+The alias or UUID to identfy the controller
diff --git a/cli/documentation/en_US/connect/connect-ip b/cli/documentation/en_US/connect/connect-ip
new file mode 100755
index 0000000..ef2df59
--- /dev/null
+++ b/cli/documentation/en_US/connect/connect-ip
@@ -0,0 +1 @@
+An ip address to identify the controller's REST API
diff --git a/cli/documentation/en_US/connect/connect-port b/cli/documentation/en_US/connect/connect-port
new file mode 100755
index 0000000..dd5e3b4
--- /dev/null
+++ b/cli/documentation/en_US/connect/connect-port
@@ -0,0 +1 @@
+Identify the tcp port number of the REST API
diff --git a/cli/documentation/en_US/controller/alias b/cli/documentation/en_US/controller/alias
new file mode 100755
index 0000000..d988d03
--- /dev/null
+++ b/cli/documentation/en_US/controller/alias
@@ -0,0 +1 @@
+Configure an alias for the controller node.
diff --git a/cli/documentation/en_US/controller/alias-name b/cli/documentation/en_US/controller/alias-name
new file mode 100755
index 0000000..60ac861
--- /dev/null
+++ b/cli/documentation/en_US/controller/alias-name
@@ -0,0 +1 @@
+Specify the name of the alias for the controller node.
diff --git a/cli/documentation/en_US/controller/clock-example b/cli/documentation/en_US/controller/clock-example
new file mode 100755
index 0000000..e9f8fe7
--- /dev/null
+++ b/cli/documentation/en_US/controller/clock-example
@@ -0,0 +1,8 @@
+clock timezone America/Los_Angeles
+  Configure a specific timezone for this controller
+
+no clock timezone
+  Remove any timezone setting; the default is to use UTC.
+
+clock set 17:30:00 1 January 1970
+  Set the clock manually
diff --git a/cli/documentation/en_US/controller/clock-set b/cli/documentation/en_US/controller/clock-set
new file mode 100755
index 0000000..3bd1832
--- /dev/null
+++ b/cli/documentation/en_US/controller/clock-set
@@ -0,0 +1,12 @@
+Configure the clock for a controller instance.
+Within the controller-node configuration sub-mode, the user can
+configure set the clock.
+
+When operating in HA mode with multiple controllers, setting the clock
+of the controllers to different values will have an effect on database
+reconciliation.   Since time stamps are used to determine which of the
+shared items are more up-to-date, if the time between controllers is
+very skewed, the any database updates applied may or may no be aplied
+correctly.   It is better to try to deal with time skew in the multiple
+controller enviromenment by using ntpdate.
+
diff --git a/cli/documentation/en_US/controller/clock-set-example b/cli/documentation/en_US/controller/clock-set-example
new file mode 100755
index 0000000..38ab142
--- /dev/null
+++ b/cli/documentation/en_US/controller/clock-set-example
@@ -0,0 +1,2 @@
+clock set 17:30:00 1 January 1970
+  Set the clock manually
diff --git a/cli/documentation/en_US/controller/clock-timezone b/cli/documentation/en_US/controller/clock-timezone
new file mode 100755
index 0000000..0a78822
--- /dev/null
+++ b/cli/documentation/en_US/controller/clock-timezone
@@ -0,0 +1,3 @@
+Configure the timezone for a controller instance's clock.
+Within the controller-node configuration sub-mode, the user can
+configure the local timezone for the node.
diff --git a/cli/documentation/en_US/controller/clock-timezone-example b/cli/documentation/en_US/controller/clock-timezone-example
new file mode 100755
index 0000000..b428119
--- /dev/null
+++ b/cli/documentation/en_US/controller/clock-timezone-example
@@ -0,0 +1,5 @@
+clock timezone America/Los_Angeles
+  Configure a specific timezone for this controller
+
+no clock timezone
+  Remove any timezone setting; the default is to use UTC.
diff --git a/cli/documentation/en_US/controller/controller-node b/cli/documentation/en_US/controller/controller-node
new file mode 100755
index 0000000..a866a76
--- /dev/null
+++ b/cli/documentation/en_US/controller/controller-node
@@ -0,0 +1 @@
+Enter a submode to configure the settings for the controller node.
diff --git a/cli/documentation/en_US/controller/controller-node-example b/cli/documentation/en_US/controller/controller-node-example
new file mode 100755
index 0000000..f11978a
--- /dev/null
+++ b/cli/documentation/en_US/controller/controller-node-example
@@ -0,0 +1,5 @@
+controller-node localhost
+  Enter configuration sub-mode for the current controller
+
+controller-node 39df9a30-0ce7-423b-98ba-86d543aecf05
+  Enter configuration sub-mode for a specific (possibly remote) controller
diff --git a/cli/documentation/en_US/controller/controller-node-name b/cli/documentation/en_US/controller/controller-node-name
new file mode 100755
index 0000000..e3fffd1
--- /dev/null
+++ b/cli/documentation/en_US/controller/controller-node-name
@@ -0,0 +1 @@
+Specify the name of one of the nodes in the controller cluster.
diff --git a/cli/documentation/en_US/controller/firewall b/cli/documentation/en_US/controller/firewall
new file mode 100755
index 0000000..a2f65ee
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall
@@ -0,0 +1,2 @@
+Configure a firewall rule to allow traffic to the specified port number
+and protocol (tcp, udp, or vrrp) of the controller node.
diff --git a/cli/documentation/en_US/controller/firewall-allow b/cli/documentation/en_US/controller/firewall-allow
new file mode 100755
index 0000000..2e9e96a
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-allow
@@ -0,0 +1,3 @@
+The 'allow' keyword configures a firewall rule which
+describes a match condition for traffic.  When the condition
+is satisfied, the traffic is allowed.
diff --git a/cli/documentation/en_US/controller/firewall-local-ip b/cli/documentation/en_US/controller/firewall-local-ip
new file mode 100755
index 0000000..809b09f
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-local-ip
@@ -0,0 +1,2 @@
+Associate the firewall rule with a specific destination ip address.
+The rule will apply only to ip frames for this destination ip address.
diff --git a/cli/documentation/en_US/controller/firewall-openflow b/cli/documentation/en_US/controller/firewall-openflow
new file mode 100755
index 0000000..182a200
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-openflow
@@ -0,0 +1 @@
+The 'openflow' keyword identifies port 6633.
diff --git a/cli/documentation/en_US/controller/firewall-port b/cli/documentation/en_US/controller/firewall-port
new file mode 100755
index 0000000..4cc3892
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-port
@@ -0,0 +1,4 @@
+Specify the port to which traffic is allowed in the firewall rule.
+The port can be an explicit port number or one of the following
+named ports: 'openflow' (port 6633), 'web' (port 80),
+'ssl' (port 443) or 'ssh' (port 22).
diff --git a/cli/documentation/en_US/controller/firewall-protocol b/cli/documentation/en_US/controller/firewall-protocol
new file mode 100755
index 0000000..ee8df4a
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-protocol
@@ -0,0 +1,2 @@
+Specify the ip protocol for the firewall rule. The value can be
+either 'udp', 'tcp', or 'vrrp'.
diff --git a/cli/documentation/en_US/controller/firewall-src-ip b/cli/documentation/en_US/controller/firewall-src-ip
new file mode 100755
index 0000000..073cd11
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-src-ip
@@ -0,0 +1,2 @@
+Associate the firewall rule with a specific source ip address.
+The rule will apply only to ip frames with this originating ip address.
diff --git a/cli/documentation/en_US/controller/firewall-ssh b/cli/documentation/en_US/controller/firewall-ssh
new file mode 100755
index 0000000..21bcac2
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-ssh
@@ -0,0 +1 @@
+The 'ssh' keyword identified port 22.
diff --git a/cli/documentation/en_US/controller/firewall-ssl b/cli/documentation/en_US/controller/firewall-ssl
new file mode 100755
index 0000000..67896d4
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-ssl
@@ -0,0 +1 @@
+The 'ssl' keyword identifies port 443.
diff --git a/cli/documentation/en_US/controller/firewall-tcp b/cli/documentation/en_US/controller/firewall-tcp
new file mode 100755
index 0000000..0c09a8d
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-tcp
@@ -0,0 +1,2 @@
+By selecting the 'tcp' keyword, the matched ip protocol is tcp.  A port number
+must be included for this selection.
diff --git a/cli/documentation/en_US/controller/firewall-udp b/cli/documentation/en_US/controller/firewall-udp
new file mode 100755
index 0000000..e24915d
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-udp
@@ -0,0 +1,2 @@
+By selecting the 'udp' keyword, the matched ip protocol is udp.  A port number
+must be included for this selection.
diff --git a/cli/documentation/en_US/controller/firewall-vrrp b/cli/documentation/en_US/controller/firewall-vrrp
new file mode 100755
index 0000000..5852f98
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-vrrp
@@ -0,0 +1 @@
+The 'vrrp' keyword identifies the rule match for the vrrp ip protocol.
diff --git a/cli/documentation/en_US/controller/firewall-web b/cli/documentation/en_US/controller/firewall-web
new file mode 100755
index 0000000..2e58aee
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-web
@@ -0,0 +1,2 @@
+The 'web' keyword identifies port 80.  This is not only the typical web interface,
+but also the port for REST API requests.
diff --git a/cli/documentation/en_US/controller/id b/cli/documentation/en_US/controller/id
new file mode 100755
index 0000000..24803c9
--- /dev/null
+++ b/cli/documentation/en_US/controller/id
@@ -0,0 +1 @@
+Specify the id or alias of the controller node.
diff --git a/cli/documentation/en_US/controller/interface b/cli/documentation/en_US/controller/interface
new file mode 100755
index 0000000..8168d8d
--- /dev/null
+++ b/cli/documentation/en_US/controller/interface
@@ -0,0 +1 @@
+Enter a submode to configure a network interface of the controller node.
diff --git a/cli/documentation/en_US/controller/interface-number b/cli/documentation/en_US/controller/interface-number
new file mode 100755
index 0000000..60e596c
--- /dev/null
+++ b/cli/documentation/en_US/controller/interface-number
@@ -0,0 +1 @@
+Specify the number of the network interface.
diff --git a/cli/documentation/en_US/controller/interface-type b/cli/documentation/en_US/controller/interface-type
new file mode 100755
index 0000000..de3aa87
--- /dev/null
+++ b/cli/documentation/en_US/controller/interface-type
@@ -0,0 +1 @@
+Specify the type of the network interface, e.g. Ethernet.
diff --git a/cli/documentation/en_US/controller/ip b/cli/documentation/en_US/controller/ip
new file mode 100755
index 0000000..e66b0b2
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip
@@ -0,0 +1 @@
+Configure the IP-related settings of the controller node.
diff --git a/cli/documentation/en_US/controller/ip-address b/cli/documentation/en_US/controller/ip-address
new file mode 100755
index 0000000..b3327ec
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-address
@@ -0,0 +1,3 @@
+Specify the IP address as either an address and netmask pair
+(e.g. 192.168.1.1 255.255.255.0) or a CIDR address
+(e.g. 192.168.1.1/24). This value is only used if the ip mode is set to 'static'.
diff --git a/cli/documentation/en_US/controller/ip-address-cidr b/cli/documentation/en_US/controller/ip-address-cidr
new file mode 100755
index 0000000..f5cde13
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-address-cidr
@@ -0,0 +1,2 @@
+Specify the statically-configured CIDR address of the controller node
+(e.g. 192.168.1.1/24).
diff --git a/cli/documentation/en_US/controller/ip-address-netmask b/cli/documentation/en_US/controller/ip-address-netmask
new file mode 100755
index 0000000..3cc6596
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-address-netmask
@@ -0,0 +1,2 @@
+Specify the statically-configured IP netmask of the controller node
+(e.g. 255.255.255.0).
diff --git a/cli/documentation/en_US/controller/ip-address-value b/cli/documentation/en_US/controller/ip-address-value
new file mode 100755
index 0000000..29ca996
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-address-value
@@ -0,0 +1,2 @@
+Specify the statically-configured IP address of the controller node
+(e.g. 192.168.1.1).
diff --git a/cli/documentation/en_US/controller/ip-default-gateway b/cli/documentation/en_US/controller/ip-default-gateway
new file mode 100755
index 0000000..ce8e90c
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-default-gateway
@@ -0,0 +1 @@
+Configure the default gateway for the controller.
diff --git a/cli/documentation/en_US/controller/ip-default-gateway-value b/cli/documentation/en_US/controller/ip-default-gateway-value
new file mode 100755
index 0000000..4cd2a79
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-default-gateway-value
@@ -0,0 +1 @@
+Specify the IP address of the default gateway.
diff --git a/cli/documentation/en_US/controller/ip-domain b/cli/documentation/en_US/controller/ip-domain
new file mode 100755
index 0000000..9b4c932
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-domain
@@ -0,0 +1 @@
+Configure DNS-related settings for the controller node.
diff --git a/cli/documentation/en_US/controller/ip-domain-lookups b/cli/documentation/en_US/controller/ip-domain-lookups
new file mode 100755
index 0000000..ce8704a
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-domain-lookups
@@ -0,0 +1 @@
+Configure whether or not DNS lookups are enabled on the controller node.
diff --git a/cli/documentation/en_US/controller/ip-domain-name b/cli/documentation/en_US/controller/ip-domain-name
new file mode 100755
index 0000000..c933270
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-domain-name
@@ -0,0 +1 @@
+Specify the default domain name for the controller.
diff --git a/cli/documentation/en_US/controller/ip-mode b/cli/documentation/en_US/controller/ip-mode
new file mode 100755
index 0000000..029fbe4
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-mode
@@ -0,0 +1,3 @@
+Specify the mode for configuring the IP address, either 'static' to
+specify an explicit IP address or 'dhcp' to obtain the IP address
+from a DHCP server.
diff --git a/cli/documentation/en_US/controller/ip-name-server b/cli/documentation/en_US/controller/ip-name-server
new file mode 100755
index 0000000..7de39c5
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-name-server
@@ -0,0 +1,3 @@
+Configure a DNS server for the controller. The priority of the DNS
+servers is in the order they were entered, i.e. the first one
+entered is the primary DNS server.
diff --git a/cli/documentation/en_US/controller/ip-name-server-value b/cli/documentation/en_US/controller/ip-name-server-value
new file mode 100755
index 0000000..f68bc9d
--- /dev/null
+++ b/cli/documentation/en_US/controller/ip-name-server-value
@@ -0,0 +1 @@
+Specify the IP address of the DNS server.
diff --git a/cli/documentation/en_US/controller/logging b/cli/documentation/en_US/controller/logging
new file mode 100755
index 0000000..bdf856e
--- /dev/null
+++ b/cli/documentation/en_US/controller/logging
@@ -0,0 +1,3 @@
+The controller-node logging command allows configuration
+of outgoing syslog messages associated with the current
+controller
diff --git a/cli/documentation/en_US/controller/logging-enable b/cli/documentation/en_US/controller/logging-enable
new file mode 100755
index 0000000..b77793e
--- /dev/null
+++ b/cli/documentation/en_US/controller/logging-enable
@@ -0,0 +1 @@
+Using the 'on' keyword in this command enables syslog logging.
diff --git a/cli/documentation/en_US/controller/logging-example b/cli/documentation/en_US/controller/logging-example
new file mode 100755
index 0000000..0dd1ec6
--- /dev/null
+++ b/cli/documentation/en_US/controller/logging-example
@@ -0,0 +1,13 @@
+logging on
+  Enable logging
+
+no logging on
+  Disable logging
+
+logging server 1.2.3.4
+  Send syslog records to a specific server or domain name
+
+logging server 1.2.2.4 level warning
+  Send syslog messages at a specific level (numeric or symbolic)
+
+no logging server 1.2.3.4
diff --git a/cli/documentation/en_US/controller/logging-level b/cli/documentation/en_US/controller/logging-level
new file mode 100755
index 0000000..b59e11c
--- /dev/null
+++ b/cli/documentation/en_US/controller/logging-level
@@ -0,0 +1,4 @@
+The logging level allows configuration of the syslog logging level.
+The keywords provided directly map to the syslog levels, although
+the command keywords are abbreviated versions of the typical syslog
+levels.
diff --git a/cli/documentation/en_US/controller/logging-server b/cli/documentation/en_US/controller/logging-server
new file mode 100755
index 0000000..585788b
--- /dev/null
+++ b/cli/documentation/en_US/controller/logging-server
@@ -0,0 +1 @@
+The 'server' keyword prefixes the ip address of the syslog server.
diff --git a/cli/documentation/en_US/controller/ntp b/cli/documentation/en_US/controller/ntp
new file mode 100755
index 0000000..37e2f36
--- /dev/null
+++ b/cli/documentation/en_US/controller/ntp
@@ -0,0 +1 @@
+Configure the NTP server for the controller node.
diff --git a/cli/documentation/en_US/controller/ntp-example b/cli/documentation/en_US/controller/ntp-example
new file mode 100755
index 0000000..2cbf1c8
--- /dev/null
+++ b/cli/documentation/en_US/controller/ntp-example
@@ -0,0 +1,5 @@
+ntp server 1.2.3.4
+  Set the NTP server address
+
+no ntp server
+  Disable the NTP server
diff --git a/cli/documentation/en_US/controller/ntp-server b/cli/documentation/en_US/controller/ntp-server
new file mode 100755
index 0000000..3f92096
--- /dev/null
+++ b/cli/documentation/en_US/controller/ntp-server
@@ -0,0 +1 @@
+Specify the host name or ip address of the NTP server.
diff --git a/cli/documentation/en_US/controller/show b/cli/documentation/en_US/controller/show
new file mode 100755
index 0000000..dd114f1
--- /dev/null
+++ b/cli/documentation/en_US/controller/show
@@ -0,0 +1,5 @@
+Show controller-node displays operational details for 
+the identified controller nodes.  Among the items
+displayed are the controller-alias, the HA role,
+and also a column labeled '@' to identify the controller
+currently connected to the CLI
diff --git a/cli/documentation/en_US/controller/show-alias b/cli/documentation/en_US/controller/show-alias
new file mode 100755
index 0000000..a5f23d6
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-alias
@@ -0,0 +1 @@
+Show the alias for the specified controller node.
diff --git a/cli/documentation/en_US/controller/show-detail b/cli/documentation/en_US/controller/show-detail
new file mode 100755
index 0000000..69028c0
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-detail
@@ -0,0 +1 @@
+Specify the detail level for the show command. Value is either 'detail' or 'brief'.
diff --git a/cli/documentation/en_US/controller/show-details b/cli/documentation/en_US/controller/show-details
new file mode 100755
index 0000000..95d78b5
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-details
@@ -0,0 +1,2 @@
+Show controller node associated information, for example 
+the interfaces or switches related to a controller.
diff --git a/cli/documentation/en_US/controller/show-firewall b/cli/documentation/en_US/controller/show-firewall
new file mode 100755
index 0000000..a36b9c7
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-firewall
@@ -0,0 +1 @@
+Show the firewall rules for the specified controller node.
diff --git a/cli/documentation/en_US/controller/show-id b/cli/documentation/en_US/controller/show-id
new file mode 100755
index 0000000..24803c9
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-id
@@ -0,0 +1 @@
+Specify the id or alias of the controller node.
diff --git a/cli/documentation/en_US/controller/show-interfaces b/cli/documentation/en_US/controller/show-interfaces
new file mode 100755
index 0000000..1453853
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-interfaces
@@ -0,0 +1 @@
+Display all the interfaces associated with the specified controller-node.
diff --git a/cli/documentation/en_US/controller/show-interfaces-number b/cli/documentation/en_US/controller/show-interfaces-number
new file mode 100755
index 0000000..4f30750
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-interfaces-number
@@ -0,0 +1 @@
+Specify the number of the network interface to show.
diff --git a/cli/documentation/en_US/controller/show-interfaces-type b/cli/documentation/en_US/controller/show-interfaces-type
new file mode 100755
index 0000000..03ba698
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-interfaces-type
@@ -0,0 +1 @@
+Specify the type of the network interface to show, e.g. Ethernet.
diff --git a/cli/documentation/en_US/controller/show-stats b/cli/documentation/en_US/controller/show-stats
new file mode 100755
index 0000000..672208d
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats
@@ -0,0 +1 @@
+Show statistics for the specified controller node.
diff --git a/cli/documentation/en_US/controller/show-stats-data-format b/cli/documentation/en_US/controller/show-stats-data-format
new file mode 100755
index 0000000..4171d66
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-data-format
@@ -0,0 +1 @@
+Show either the actual value or the rate of change of the value for the specified stats type.
diff --git a/cli/documentation/en_US/controller/show-stats-display b/cli/documentation/en_US/controller/show-stats-display
new file mode 100755
index 0000000..ff353f0
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-display
@@ -0,0 +1 @@
+Show the specified stats as either the latest value, graph or table.
diff --git a/cli/documentation/en_US/controller/show-stats-duration b/cli/documentation/en_US/controller/show-stats-duration
new file mode 100755
index 0000000..5fcec00
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-duration
@@ -0,0 +1,2 @@
+Specify the duration for which to display stats. If this value is specified
+you should specify either the start-time or end-time but not both.
diff --git a/cli/documentation/en_US/controller/show-stats-end-time b/cli/documentation/en_US/controller/show-stats-end-time
new file mode 100755
index 0000000..d171757
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-end-time
@@ -0,0 +1 @@
+Specify the end time for displaying the controller stats.
diff --git a/cli/documentation/en_US/controller/show-stats-sample-count b/cli/documentation/en_US/controller/show-stats-sample-count
new file mode 100755
index 0000000..cbb1519
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-sample-count
@@ -0,0 +1 @@
+Specify the number of data points to show across the specified time range.
diff --git a/cli/documentation/en_US/controller/show-stats-sample-interval b/cli/documentation/en_US/controller/show-stats-sample-interval
new file mode 100755
index 0000000..291a62b
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-sample-interval
@@ -0,0 +1 @@
+Specify the interval between sample points.
diff --git a/cli/documentation/en_US/controller/show-stats-sample-window b/cli/documentation/en_US/controller/show-stats-sample-window
new file mode 100755
index 0000000..762c958
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-sample-window
@@ -0,0 +1,2 @@
+Specify the sample window for showing the stats. The sample window is the
+number of raw stat values to average around a down-sampled data point.
diff --git a/cli/documentation/en_US/controller/show-stats-start-time b/cli/documentation/en_US/controller/show-stats-start-time
new file mode 100755
index 0000000..88b49cc
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-start-time
@@ -0,0 +1 @@
+Specify the start time for displaying the stats.
diff --git a/cli/documentation/en_US/controller/show-stats-type b/cli/documentation/en_US/controller/show-stats-type
new file mode 100755
index 0000000..ad2d263
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-stats-type
@@ -0,0 +1 @@
+Specify the type of controller stats to show.
diff --git a/cli/documentation/en_US/controller/show-summary b/cli/documentation/en_US/controller/show-summary
new file mode 100755
index 0000000..2224a66
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-summary
@@ -0,0 +1 @@
+Show a summary of the configuration for the specified controller node.
diff --git a/cli/documentation/en_US/controller/show-switches b/cli/documentation/en_US/controller/show-switches
new file mode 100755
index 0000000..04267da
--- /dev/null
+++ b/cli/documentation/en_US/controller/show-switches
@@ -0,0 +1 @@
+Show the switches connected to the specified controller node.
diff --git a/cli/documentation/en_US/copy/copy b/cli/documentation/en_US/copy/copy
new file mode 100755
index 0000000..2031b80
--- /dev/null
+++ b/cli/documentation/en_US/copy/copy
@@ -0,0 +1,5 @@
+The copy command with one parameters copies the contents
+of the configuraion file out for display.
+
+The copy command with two parameters copies the contents
+of the requested source into the dessination.
diff --git a/cli/documentation/en_US/copy/copy-dest b/cli/documentation/en_US/copy/copy-dest
new file mode 100755
index 0000000..9dc2cbc
--- /dev/null
+++ b/cli/documentation/en_US/copy/copy-dest
@@ -0,0 +1,14 @@
+Destination specifier for the copy
+
+The keyword 'running-config' can be used to specify the controller's
+current state (that is, overwrite the running state).
+
+The 'config://' URI scheme can be used to save config files
+to the local controller's disk.
+
+The 'http://' and 'ftp://' URI schemes can be used to reference remote
+resources.
+
+If the destination specifier is omitted, the resource referenced
+by the source specifier is sent to the Cli console.
+
diff --git a/cli/documentation/en_US/copy/copy-example b/cli/documentation/en_US/copy/copy-example
new file mode 100755
index 0000000..bde5c90
--- /dev/null
+++ b/cli/documentation/en_US/copy/copy-example
@@ -0,0 +1,6 @@
+ copy running-config
+   Variation of the 'show running-config' command
+
+ copy running-config config://xyz
+  Copy the current running config into the configuration 
+  target named config://xyz
diff --git a/cli/documentation/en_US/copy/copy-source b/cli/documentation/en_US/copy/copy-source
new file mode 100755
index 0000000..dc9bbd5
--- /dev/null
+++ b/cli/documentation/en_US/copy/copy-source
@@ -0,0 +1,11 @@
+Source specifier for the copy
+
+The keyword 'running-config' can be used to specify the controller's
+current state.
+
+The 'config://' URI scheme can be used to reference saved config files
+from a previous 'copy' command.
+
+The 'http://' and 'ftp://' URI schemes can be used to reference remote
+resources.
+
diff --git a/cli/documentation/en_US/core/boot b/cli/documentation/en_US/core/boot
new file mode 100755
index 0000000..05922da
--- /dev/null
+++ b/cli/documentation/en_US/core/boot
@@ -0,0 +1,3 @@
+This command allows you to configure system boot parameters.  At the
+moment, you can restore the controller to its factory default
+configuration using the 'factory-default' parameter. 
\ No newline at end of file
diff --git a/cli/documentation/en_US/core/boot-example b/cli/documentation/en_US/core/boot-example
new file mode 100755
index 0000000..ecf93e5
--- /dev/null
+++ b/cli/documentation/en_US/core/boot-example
@@ -0,0 +1,17 @@
+Reset controller to its factory default settings.
+    node1(config)# boot factory-default
+    Re-setting controller to factory defaults ...
+    Warning: This will reset your controller to factory-default state
+             and reboot it.  You will lose all node/controller
+             configuration and the logs
+    Do you want to continue [no]? yes
+    Resetting cassandra state ...
+    Removing existing log files ...
+    rsyslog stop/waiting
+    Resetting system state ...
+    
+    Current default time zone: 'Etc/UTC'
+    Local time is now:      Wed Oct 24 00:05:41 UTC 2012.
+    Universal Time is now:  Wed Oct 24 00:05:41 UTC 2012.
+    
+    passwd: password expiry information changed.
diff --git a/cli/documentation/en_US/core/factory-default b/cli/documentation/en_US/core/factory-default
new file mode 100755
index 0000000..7a67cce
--- /dev/null
+++ b/cli/documentation/en_US/core/factory-default
@@ -0,0 +1,13 @@
+Reset the controller to the factory default configuration.  This will
+wipe out all configuration and logs files and restore the controller
+to its initial default configuration.
+
+This will require rebooting the controller node.  When the controller
+finishes rebooting, you will need to go through the normal "first time
+setup" process, including reconfiguring the network interface
+configuration.
+
+Note that if you have customized the controller base image through
+debug facilities, then some configuration may not be restored through
+this command.  If this is the case, it is recommended that you start
+with a fresh controller image.
\ No newline at end of file
diff --git a/cli/documentation/en_US/core/reload b/cli/documentation/en_US/core/reload
new file mode 100755
index 0000000..e7bdb25
--- /dev/null
+++ b/cli/documentation/en_US/core/reload
@@ -0,0 +1,10 @@
+This command will restart this controller node.  If you are running as
+part of a high availability cluster, this will trigger a failover to
+the remaining nodes, but you may wish to manually trigger this first
+using the "ha failover" command.
+
+Rebooting the controller will allow you to access the boot menu if you
+wish to revert to an older version of the controller software
+following an upgrade.  If you wish to do this, select the appropriate
+image from the boot loader prompt from the controller console to
+choose a different image version.
diff --git a/cli/documentation/en_US/core/reload-example b/cli/documentation/en_US/core/reload-example
new file mode 100755
index 0000000..8d566f4
--- /dev/null
+++ b/cli/documentation/en_US/core/reload-example
@@ -0,0 +1,3 @@
+Reboot the controller
+    node1(config)# reload 
+    Confirm Reload (yes to continue) yes
diff --git a/cli/documentation/en_US/core/upgrade b/cli/documentation/en_US/core/upgrade
new file mode 100755
index 0000000..5fd6524
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade
@@ -0,0 +1,41 @@
+Upgrade the controller from an uploaded controller image. To perform 
+upgrade, you will first need to upload an upgrade image package by 
+scping the file using the "images" user. 
+
+	
+Upgrade image package is a file with name of format 
+"upgrade-YYYY.MM.DD.XXXX.pkg".
+Following is an example to prepare upgrade for controller with IP 
+address 192.168.67.141:"
+
+	
+scp $path/upgrade-2013.02.13.0921.pkg images@192.168.67.141:"
+
+	
+After you run the upgrade, the new controller image will be installed
+on the second image partition, and will be configured as the default
+boot image.  Running the "reload" command will boot the current node	
+If you are upgrading a cluster with multiple nodes, begin by upgrading
+the slave nodes followed by the master node.  You can find out which
+slave is the master by running "show controller-node all".  You should
+upgrade each node by running the upgrade, then reloading the
+controller node.
+
+	
+For example, if you have two nodes in your cluster, node1 (the current
+master) and node2 (the current slave), you should:	
+
+
+  # Upgrade node2 using the "upgrade" command\\
+  # Reboot node2 using the "reload" command\\
+  # Upgrade node1 using the "upgrade" command\\
+  # Reboot node1 using the "reload" command\\
+
+
+Note that when you reboot the master controller node1 there may be a
+brief disruption in your network.	
+
+
+Please refer to the section on upgrading in the user guide for more
+detailed information, including information on how to revert if the
+upgrade fails.	
diff --git a/cli/documentation/en_US/core/upgrade-abort b/cli/documentation/en_US/core/upgrade-abort
new file mode 100755
index 0000000..7141eda
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade-abort
@@ -0,0 +1,8 @@
+If you've already run an upgrade operation on this controller node,
+but want to abort the upgrade before you reboot into the new
+partition, run the "upgrade abort" command to configure the controller
+to boot by default from the current-active partition and set the
+controller status back to "Ready."
+
+This can allow you to restart a failed upgrade process, for example
+if a node failure occurs while attempting to upgrade.
diff --git a/cli/documentation/en_US/core/upgrade-abort-example b/cli/documentation/en_US/core/upgrade-abort-example
new file mode 100755
index 0000000..668ccf1
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade-abort-example
@@ -0,0 +1,2 @@
+upgrade abort
+  Abort an in-progress or requested upgrade
diff --git a/cli/documentation/en_US/core/upgrade-details b/cli/documentation/en_US/core/upgrade-details
new file mode 100755
index 0000000..df92241
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade-details
@@ -0,0 +1,3 @@
+The "details" option will cause verbose information to be printed out
+during each upgrade step.  This may be helpful in diagnosing failures
+during the upgrade process.
diff --git a/cli/documentation/en_US/core/upgrade-example b/cli/documentation/en_US/core/upgrade-example
new file mode 100755
index 0000000..9e35720
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade-example
@@ -0,0 +1,20 @@
+Upgrade the controller node using an uploaded upgrade package
+    node1> enable	
+    node1# upgrade	
+    Upgrade controller from image '/home/images/upgrade.pkg'?	
+    (yes to continue) yes	
+    Executing upgrade...	
+    1 - Verifying package checksum
+      Succeeded
+    2 - Verifying connectivity to other nodes via ping
+      Succeeded
+    3 - Checking minimum system requirements
+      Succeeded
+    4 - Copying configuration
+      Succeeded
+    5 - Creating new filesystem
+      Succeeded
+    Controller node upgrade complete.
+    Upgrade will not take effect until system is rebooted. Use 'reload' to
+    reboot this controller node. To revert, select the appropriate image 
+    from the boot menu
diff --git a/cli/documentation/en_US/core/upgrade-force b/cli/documentation/en_US/core/upgrade-force
new file mode 100755
index 0000000..e4681ea
--- /dev/null
+++ b/cli/documentation/en_US/core/upgrade-force
@@ -0,0 +1,6 @@
+The "force" option will run the upgrade but will ignore any validation
+errors.  These errors include validating the package checksum, minimum
+system requirements, and connectivity.  Note that if you choose this
+option, there is an increased chance that your controller upgrade will
+be unsuccessful.
+
diff --git a/cli/documentation/en_US/core/version b/cli/documentation/en_US/core/version
new file mode 100755
index 0000000..cda73c0
--- /dev/null
+++ b/cli/documentation/en_US/core/version
@@ -0,0 +1,4 @@
+Switch to a specific version of command syntax.
+
+This command is reserved for future use
+(there are currently no alternate versions).
diff --git a/cli/documentation/en_US/core/version-example b/cli/documentation/en_US/core/version-example
new file mode 100755
index 0000000..9576092
--- /dev/null
+++ b/cli/documentation/en_US/core/version-example
@@ -0,0 +1,2 @@
+version XYZ
+  Switch to version XYZ.
diff --git a/cli/documentation/en_US/core/write b/cli/documentation/en_US/core/write
new file mode 100755
index 0000000..de65063
--- /dev/null
+++ b/cli/documentation/en_US/core/write
@@ -0,0 +1,2 @@
+Write command allows you to view the current configuration or restore
+the system to its default configuration.
diff --git a/cli/documentation/en_US/core/write-example b/cli/documentation/en_US/core/write-example
new file mode 100755
index 0000000..bceb3f3
--- /dev/null
+++ b/cli/documentation/en_US/core/write-example
@@ -0,0 +1,12 @@
+Display the current running-config:
+    node1# write terminal 
+    !
+    ! SDNOS 1.0 - custom version
+    ! Current Time: 2012-10-23.20:37:51
+    !
+    ...
+
+Reset to factory defaults:
+    node1# write erase 
+    Re-setting controller to factory defaults ...
+    ...
diff --git a/cli/documentation/en_US/core/write-terminal b/cli/documentation/en_US/core/write-terminal
new file mode 100755
index 0000000..6cde1e2
--- /dev/null
+++ b/cli/documentation/en_US/core/write-terminal
@@ -0,0 +1,2 @@
+Display the current active configuration on the terminal.  Equivalent
+to "show running-config".
\ No newline at end of file
diff --git a/cli/documentation/en_US/debug/bash b/cli/documentation/en_US/debug/bash
new file mode 100755
index 0000000..31ad385
--- /dev/null
+++ b/cli/documentation/en_US/debug/bash
@@ -0,0 +1 @@
+The bash choices opens a nested bash shell.
diff --git a/cli/documentation/en_US/debug/cli b/cli/documentation/en_US/debug/cli
new file mode 100755
index 0000000..cbc7df1
--- /dev/null
+++ b/cli/documentation/en_US/debug/cli
@@ -0,0 +1,12 @@
+cli choices for the debug command enables various
+different cli features.  First the cli will
+provide details about internal failures, which is
+intended to provide a detailed description for
+some failure.  Failures may occur not only in the
+execution of commands, but while building the
+command, for example during the generation of
+completion choices.  Second, the cli option also
+enables direct editing of many of the underlying
+models (database tables) exported by the REST API.
+This feature is intended to provide a way to view
+or modify the internal contents of the database.
diff --git a/cli/documentation/en_US/debug/cli-backtrace b/cli/documentation/en_US/debug/cli-backtrace
new file mode 100755
index 0000000..fad29c3
--- /dev/null
+++ b/cli/documentation/en_US/debug/cli-backtrace
@@ -0,0 +1,5 @@
+The cli-backtrace enables additional output during
+cli failures, displaying a backtrace.  The
+difference between cli-backtrace and the cli
+choice is that the model (database tables) editing
+features are not enabled
diff --git a/cli/documentation/en_US/debug/cli-batch b/cli/documentation/en_US/debug/cli-batch
new file mode 100755
index 0000000..bcc761c
--- /dev/null
+++ b/cli/documentation/en_US/debug/cli-batch
@@ -0,0 +1,2 @@
+The batch choice enables batch mode within the
+cli.   No prompts will be requested from the user
diff --git a/cli/documentation/en_US/debug/debug-cli b/cli/documentation/en_US/debug/debug-cli
new file mode 100755
index 0000000..9bc4f7a
--- /dev/null
+++ b/cli/documentation/en_US/debug/debug-cli
@@ -0,0 +1,7 @@
+The debug command enables and disables various settings intended to 
+describe the cli's own behavior.   In addition, some of the choices
+allow nested invocation of various other tools, intended to debug
+various related controller components, for example, 'debug cassandra-cli'
+is intended to enter the cassandra cli to view internal database state,
+and 'debug bash' is intended to enter a bash subshell to gain access to
+the internal environment of the controller.  
diff --git a/cli/documentation/en_US/debug/debug-cli-example b/cli/documentation/en_US/debug/debug-cli-example
new file mode 100755
index 0000000..e5a2c6a
--- /dev/null
+++ b/cli/documentation/en_US/debug/debug-cli-example
@@ -0,0 +1,11 @@
+debug rest
+  Enable rest api output
+
+debug rest detail
+  Enable rest api output, and also display replies from the rest api calls
+
+debug cli
+  Enable debugging mode for the cli
+
+debug bash
+  Open a bash subshell
diff --git a/cli/documentation/en_US/debug/description b/cli/documentation/en_US/debug/description
new file mode 100755
index 0000000..5262201
--- /dev/null
+++ b/cli/documentation/en_US/debug/description
@@ -0,0 +1,7 @@
+The description choice enables additional output
+to display the internal execution of command
+descriptions.  The option is intended to help
+debug the cli's command descriptions.  It will not
+only enable output for command execution, but also
+enable output while performing command completion
+choices for commands.
diff --git a/cli/documentation/en_US/debug/rest b/cli/documentation/en_US/debug/rest
new file mode 100755
index 0000000..e031896
--- /dev/null
+++ b/cli/documentation/en_US/debug/rest
@@ -0,0 +1,5 @@
+The rest choice enables printing of additional
+output when the cli issues any REST API calls.
+The command is valuable since it can provide an
+indication of what operations are being performed
+by the cli to perform the requested command.
diff --git a/cli/documentation/en_US/external-ports/show b/cli/documentation/en_US/external-ports/show
new file mode 100755
index 0000000..713b7d1
--- /dev/null
+++ b/cli/documentation/en_US/external-ports/show
@@ -0,0 +1,2 @@
+The external-ports command displays the set of switch ports
+connected to external L2 networks.
diff --git a/cli/documentation/en_US/feature b/cli/documentation/en_US/feature
new file mode 100755
index 0000000..9120b05
--- /dev/null
+++ b/cli/documentation/en_US/feature
@@ -0,0 +1 @@
+Enable a named feature for the controller image
\ No newline at end of file
diff --git a/cli/documentation/en_US/feature-example b/cli/documentation/en_US/feature-example
new file mode 100755
index 0000000..3d3c921
--- /dev/null
+++ b/cli/documentation/en_US/feature-example
@@ -0,0 +1,5 @@
+feature netvirt
+  Enable the network virtualization feature
+
+no feature netvirt
+  Disable the network virtualization feature
diff --git a/cli/documentation/en_US/feature-flow-pusher b/cli/documentation/en_US/feature-flow-pusher
new file mode 100755
index 0000000..90ebc9f
--- /dev/null
+++ b/cli/documentation/en_US/feature-flow-pusher
@@ -0,0 +1 @@
+Enable the static flow pusher feature
\ No newline at end of file
diff --git a/cli/documentation/en_US/feature-netvirt b/cli/documentation/en_US/feature-netvirt
new file mode 100755
index 0000000..07bccb7
--- /dev/null
+++ b/cli/documentation/en_US/feature-netvirt
@@ -0,0 +1 @@
+Configure this controller with network virtualization support
\ No newline at end of file
diff --git a/cli/documentation/en_US/feature-performance-monitor b/cli/documentation/en_US/feature-performance-monitor
new file mode 100755
index 0000000..4322f9f
--- /dev/null
+++ b/cli/documentation/en_US/feature-performance-monitor
@@ -0,0 +1 @@
+Configure the performance monitoring feature for this controller
\ No newline at end of file
diff --git a/cli/documentation/en_US/firewall-rule/show-controller b/cli/documentation/en_US/firewall-rule/show-controller
new file mode 100755
index 0000000..8baa828
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-controller
@@ -0,0 +1 @@
+Filter the show command output to the indicateed controller.
diff --git a/cli/documentation/en_US/firewall-rule/show-local-ip b/cli/documentation/en_US/firewall-rule/show-local-ip
new file mode 100755
index 0000000..c96a397
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-local-ip
@@ -0,0 +1 @@
+Select the rules which match this local ip address.
diff --git a/cli/documentation/en_US/firewall-rule/show-number b/cli/documentation/en_US/firewall-rule/show-number
new file mode 100755
index 0000000..166d42f
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-number
@@ -0,0 +1 @@
+Filter the show command output by the indicated interface number.
diff --git a/cli/documentation/en_US/firewall-rule/show-port b/cli/documentation/en_US/firewall-rule/show-port
new file mode 100755
index 0000000..bc01e10
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-port
@@ -0,0 +1 @@
+Filter the show command output by the indicated filtered port.
diff --git a/cli/documentation/en_US/firewall-rule/show-proto b/cli/documentation/en_US/firewall-rule/show-proto
new file mode 100755
index 0000000..c6c7189
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-proto
@@ -0,0 +1 @@
+Filter the show command output by the indicated protocol.
diff --git a/cli/documentation/en_US/firewall-rule/show-src-ip b/cli/documentation/en_US/firewall-rule/show-src-ip
new file mode 100755
index 0000000..f39f93e
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-src-ip
@@ -0,0 +1 @@
+Select the rules which match this source ip address.
diff --git a/cli/documentation/en_US/firewall-rule/show-type b/cli/documentation/en_US/firewall-rule/show-type
new file mode 100755
index 0000000..bcfff97
--- /dev/null
+++ b/cli/documentation/en_US/firewall-rule/show-type
@@ -0,0 +1 @@
+Filter the show command output by the indicated interface type
diff --git a/cli/documentation/en_US/flow-entry/active b/cli/documentation/en_US/flow-entry/active
new file mode 100755
index 0000000..7915369
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/active
@@ -0,0 +1 @@
+Enable or disable this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/active-example b/cli/documentation/en_US/flow-entry/active-example
new file mode 100755
index 0000000..fd03a0a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/active-example
@@ -0,0 +1,5 @@
+active True
+  Make active
+
+active False
+  Make inactive
diff --git a/cli/documentation/en_US/flow-entry/active-field-False b/cli/documentation/en_US/flow-entry/active-field-False
new file mode 100755
index 0000000..fd55ace
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/active-field-False
@@ -0,0 +1 @@
+Make this flow entry inactive
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/active-field-True b/cli/documentation/en_US/flow-entry/active-field-True
new file mode 100755
index 0000000..aad527a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/active-field-True
@@ -0,0 +1 @@
+Make this flow entry active
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/cookie b/cli/documentation/en_US/flow-entry/cookie
new file mode 100755
index 0000000..856c2db
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/cookie
@@ -0,0 +1 @@
+Assign a cookie value (32-bit integer) to the flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/cookie-example b/cli/documentation/en_US/flow-entry/cookie-example
new file mode 100755
index 0000000..4e71b17
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/cookie-example
@@ -0,0 +1,2 @@
+cookie 42
+  Assign a cookie value to this entry
diff --git a/cli/documentation/en_US/flow-entry/dst-ip b/cli/documentation/en_US/flow-entry/dst-ip
new file mode 100755
index 0000000..0a013e0
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-ip
@@ -0,0 +1 @@
+Associate a destination IP address with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/dst-ip-example b/cli/documentation/en_US/flow-entry/dst-ip-example
new file mode 100755
index 0000000..8ba4862
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-ip-example
@@ -0,0 +1,5 @@
+dst-ip 1.2.3.4
+  Associate a specific host address with this flow entry
+
+dst-ip 1.2.3.4/24
+  Associate a destination address range with this flow entry
diff --git a/cli/documentation/en_US/flow-entry/dst-ip-field b/cli/documentation/en_US/flow-entry/dst-ip-field
new file mode 100755
index 0000000..6f72033
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-ip-field
@@ -0,0 +1 @@
+Enter an IP address or CIDR address range
diff --git a/cli/documentation/en_US/flow-entry/dst-mac b/cli/documentation/en_US/flow-entry/dst-mac
new file mode 100755
index 0000000..0f02b6f
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-mac
@@ -0,0 +1 @@
+Associate a destination MAC address with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/dst-mac-example b/cli/documentation/en_US/flow-entry/dst-mac-example
new file mode 100755
index 0000000..76bd57a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-mac-example
@@ -0,0 +1,5 @@
+dst-mac 00:00:00:00:00:01
+  Associate a host by MAC address
+
+dst-mac my-computer
+  Associate a host alias with this flow entry
diff --git a/cli/documentation/en_US/flow-entry/dst-mac-field b/cli/documentation/en_US/flow-entry/dst-mac-field
new file mode 100755
index 0000000..13727b5
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-mac-field
@@ -0,0 +1 @@
+Enter a MAC address or host alias
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/dst-port b/cli/documentation/en_US/flow-entry/dst-port
new file mode 100755
index 0000000..f36a2c1
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-port
@@ -0,0 +1 @@
+Associate a TCP or UDP port with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/dst-port-example b/cli/documentation/en_US/flow-entry/dst-port-example
new file mode 100755
index 0000000..1331dad
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-port-example
@@ -0,0 +1,5 @@
+dst-port 80
+  Associate a port by number
+
+dst-port https
+  Associate a port by service name
diff --git a/cli/documentation/en_US/flow-entry/dst-port-field b/cli/documentation/en_US/flow-entry/dst-port-field
new file mode 100755
index 0000000..0a9a114
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/dst-port-field
@@ -0,0 +1 @@
+Enter a TCP or UDP port number, or well-known service name
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/ether-type b/cli/documentation/en_US/flow-entry/ether-type
new file mode 100755
index 0000000..706b13e
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ether-type
@@ -0,0 +1 @@
+Match flow entries by ether type
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/ether-type-example b/cli/documentation/en_US/flow-entry/ether-type-example
new file mode 100755
index 0000000..082d768
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ether-type-example
@@ -0,0 +1,5 @@
+ether-type 0x88a2
+  Match AOE frames
+
+ether-type arp
+  Match ARP frames
diff --git a/cli/documentation/en_US/flow-entry/ether-type-field b/cli/documentation/en_US/flow-entry/ether-type-field
new file mode 100755
index 0000000..6751baa
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ether-type-field
@@ -0,0 +1 @@
+Specify an ether by by number or by alias
diff --git a/cli/documentation/en_US/flow-entry/flow-entry b/cli/documentation/en_US/flow-entry/flow-entry
new file mode 100755
index 0000000..d0a33e2
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/flow-entry
@@ -0,0 +1 @@
+Define a flow-entry and enter its configuration sub-mode
diff --git a/cli/documentation/en_US/flow-entry/flow-entry-example b/cli/documentation/en_US/flow-entry/flow-entry-example
new file mode 100755
index 0000000..b444be6
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/flow-entry-example
@@ -0,0 +1,5 @@
+flow-entry example-1
+  Define a new flow entry
+
+no flow-entry example-1
+  Delete a flow entry by name
diff --git a/cli/documentation/en_US/flow-entry/hard-timeout b/cli/documentation/en_US/flow-entry/hard-timeout
new file mode 100755
index 0000000..6593aec
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/hard-timeout
@@ -0,0 +1 @@
+Associate a hard timeout with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/hard-timeout-example b/cli/documentation/en_US/flow-entry/hard-timeout-example
new file mode 100755
index 0000000..47a4d3f
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/hard-timeout-example
@@ -0,0 +1,2 @@
+hard-timeout 30
+  Time out this flow after 30s
diff --git a/cli/documentation/en_US/flow-entry/hard-timeout-field b/cli/documentation/en_US/flow-entry/hard-timeout-field
new file mode 100755
index 0000000..c11f7c9
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/hard-timeout-field
@@ -0,0 +1 @@
+Specify a timeout in seconds
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/idle-timeout b/cli/documentation/en_US/flow-entry/idle-timeout
new file mode 100755
index 0000000..b67dad3
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/idle-timeout
@@ -0,0 +1 @@
+Set an idle timeout for this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/idle-timeout-example b/cli/documentation/en_US/flow-entry/idle-timeout-example
new file mode 100755
index 0000000..83d098d
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/idle-timeout-example
@@ -0,0 +1,2 @@
+idle-timeout 30
+  Set the idle timeout for 30 seconds
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/idle-timeout-field b/cli/documentation/en_US/flow-entry/idle-timeout-field
new file mode 100755
index 0000000..ff0de69
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/idle-timeout-field
@@ -0,0 +1 @@
+Specify a timeout value in seconds
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/ingress-port b/cli/documentation/en_US/flow-entry/ingress-port
new file mode 100755
index 0000000..600b35b
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ingress-port
@@ -0,0 +1 @@
+Associate an OF ingress port with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/ingress-port-example b/cli/documentation/en_US/flow-entry/ingress-port-example
new file mode 100755
index 0000000..92c2c7a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ingress-port-example
@@ -0,0 +1,2 @@
+ingress-port 32
+  Assiciate an ingress port by number
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/ingress-port-field b/cli/documentation/en_US/flow-entry/ingress-port-field
new file mode 100755
index 0000000..4e5cb0a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/ingress-port-field
@@ -0,0 +1 @@
+Specify an OF ingress port (16-bit number)
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/priority b/cli/documentation/en_US/flow-entry/priority
new file mode 100755
index 0000000..1ef031b
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/priority
@@ -0,0 +1 @@
+Assign a priority to this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/priority-example b/cli/documentation/en_US/flow-entry/priority-example
new file mode 100755
index 0000000..faf2982
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/priority-example
@@ -0,0 +1,2 @@
+priority 1000
+  Give this flow entry a fixed priority
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/priority-field b/cli/documentation/en_US/flow-entry/priority-field
new file mode 100755
index 0000000..ef03e21
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/priority-field
@@ -0,0 +1 @@
+Specify the priority as a 16-bit integer
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/protocol b/cli/documentation/en_US/flow-entry/protocol
new file mode 100755
index 0000000..0ac4554
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/protocol
@@ -0,0 +1 @@
+Associate a specific prototype type to this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/protocol-example b/cli/documentation/en_US/flow-entry/protocol-example
new file mode 100755
index 0000000..0a97b4b
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/protocol-example
@@ -0,0 +1,2 @@
+prototol 17
+  Associate TCP packets with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/protocol-field b/cli/documentation/en_US/flow-entry/protocol-field
new file mode 100755
index 0000000..02cbcea
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/protocol-field
@@ -0,0 +1 @@
+Specify a protocol by number
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-ip b/cli/documentation/en_US/flow-entry/src-ip
new file mode 100755
index 0000000..e9e627c
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-ip
@@ -0,0 +1 @@
+Associate a source IP address or range with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-ip-example b/cli/documentation/en_US/flow-entry/src-ip-example
new file mode 100755
index 0000000..6f7d71f
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-ip-example
@@ -0,0 +1,5 @@
+src-ip 1.2.3.4
+  Match a specific address
+
+src-ip 1.2.3.4/23
+  Match an IP address range
diff --git a/cli/documentation/en_US/flow-entry/src-ip-field b/cli/documentation/en_US/flow-entry/src-ip-field
new file mode 100755
index 0000000..f22dd02
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-ip-field
@@ -0,0 +1 @@
+Specify an IP address or address range
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-mac b/cli/documentation/en_US/flow-entry/src-mac
new file mode 100755
index 0000000..2a4119b
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-mac
@@ -0,0 +1 @@
+Associate a source MAC address with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-mac-example b/cli/documentation/en_US/flow-entry/src-mac-example
new file mode 100755
index 0000000..112eefb
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-mac-example
@@ -0,0 +1,6 @@
+src-mac 00:00:00:00:00:02
+  Specify a host by MAC address
+
+src-mac my-server
+  Specify a host by alias
+
diff --git a/cli/documentation/en_US/flow-entry/src-mac-field b/cli/documentation/en_US/flow-entry/src-mac-field
new file mode 100755
index 0000000..24b3e62
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-mac-field
@@ -0,0 +1 @@
+Specify a MAC address or host alias
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-port b/cli/documentation/en_US/flow-entry/src-port
new file mode 100755
index 0000000..5d20637
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-port
@@ -0,0 +1 @@
+Associate a source TCP or UDP port with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/src-port-example b/cli/documentation/en_US/flow-entry/src-port-example
new file mode 100755
index 0000000..6c11f34
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-port-example
@@ -0,0 +1,5 @@
+src-port 119
+  Associate a port by number
+
+src-port ftp-data
+  Associate a port by service name
diff --git a/cli/documentation/en_US/flow-entry/src-port-field b/cli/documentation/en_US/flow-entry/src-port-field
new file mode 100755
index 0000000..e774491
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/src-port-field
@@ -0,0 +1 @@
+Specify a TCP or UDP port by number or service name
diff --git a/cli/documentation/en_US/flow-entry/tos-bits b/cli/documentation/en_US/flow-entry/tos-bits
new file mode 100755
index 0000000..967a9d5
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/tos-bits
@@ -0,0 +1 @@
+Associate packets with this flow entry by TOS bits
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/tos-bits-example b/cli/documentation/en_US/flow-entry/tos-bits-example
new file mode 100755
index 0000000..84a563a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/tos-bits-example
@@ -0,0 +1,2 @@
+tos-bits 6
+  Match specific TOS bits
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/tos-bits-field b/cli/documentation/en_US/flow-entry/tos-bits-field
new file mode 100755
index 0000000..544cf97
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/tos-bits-field
@@ -0,0 +1 @@
+Specify TOS bits as a numeric mask
diff --git a/cli/documentation/en_US/flow-entry/vlan-id b/cli/documentation/en_US/flow-entry/vlan-id
new file mode 100755
index 0000000..d0fc54a
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-id
@@ -0,0 +1 @@
+Match packets to this flow entry with a specific VLAN id
diff --git a/cli/documentation/en_US/flow-entry/vlan-id-example b/cli/documentation/en_US/flow-entry/vlan-id-example
new file mode 100755
index 0000000..8dbd523
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-id-example
@@ -0,0 +1,2 @@
+vlan-id 10
+  Match a specific VLAN id
diff --git a/cli/documentation/en_US/flow-entry/vlan-id-field b/cli/documentation/en_US/flow-entry/vlan-id-field
new file mode 100755
index 0000000..a4a1106
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-id-field
@@ -0,0 +1 @@
+Specify a VLAN id (12-bit integer)
diff --git a/cli/documentation/en_US/flow-entry/vlan-priority b/cli/documentation/en_US/flow-entry/vlan-priority
new file mode 100755
index 0000000..278cd3b
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-priority
@@ -0,0 +1 @@
+Match packets with a specific VLAN priority field
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/vlan-priority-example b/cli/documentation/en_US/flow-entry/vlan-priority-example
new file mode 100755
index 0000000..deacbe4
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-priority-example
@@ -0,0 +1,2 @@
+vlan-priority 4
+  Match packets with by priority field (in the VLAN header)
diff --git a/cli/documentation/en_US/flow-entry/vlan-priority-field b/cli/documentation/en_US/flow-entry/vlan-priority-field
new file mode 100755
index 0000000..6ad0c02
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/vlan-priority-field
@@ -0,0 +1 @@
+Specify a priority field as a 3-bit integer
diff --git a/cli/documentation/en_US/flow-entry/wildcards b/cli/documentation/en_US/flow-entry/wildcards
new file mode 100755
index 0000000..03e01de
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/wildcards
@@ -0,0 +1 @@
+Associate a wildcard value with this flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/wildcards-example b/cli/documentation/en_US/flow-entry/wildcards-example
new file mode 100755
index 0000000..75ed0f2
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/wildcards-example
@@ -0,0 +1,2 @@
+wildcards 1000
+  Associate a wildcard value with the currently-defined flow entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/flow-entry/wildcards-field b/cli/documentation/en_US/flow-entry/wildcards-field
new file mode 100755
index 0000000..5b1ac12
--- /dev/null
+++ b/cli/documentation/en_US/flow-entry/wildcards-field
@@ -0,0 +1 @@
+Specify a wildcard value (32-bit integer)
diff --git a/cli/documentation/en_US/format/brief b/cli/documentation/en_US/format/brief
new file mode 100755
index 0000000..781901f
--- /dev/null
+++ b/cli/documentation/en_US/format/brief
@@ -0,0 +1,2 @@
+The brief keywork requests a less verbose version
+of output for various show commands.
diff --git a/cli/documentation/en_US/format/details b/cli/documentation/en_US/format/details
new file mode 100755
index 0000000..1d0bfc9
--- /dev/null
+++ b/cli/documentation/en_US/format/details
@@ -0,0 +1,2 @@
+The details keyword requests a more verbose version
+of various show commands.
diff --git a/cli/documentation/en_US/format/full-detail b/cli/documentation/en_US/format/full-detail
new file mode 100755
index 0000000..a4d049e
--- /dev/null
+++ b/cli/documentation/en_US/format/full-detail
@@ -0,0 +1,2 @@
+For a few show commands, the 'full-detail' is a request
+to display more information than the 'defails' keyword.
diff --git a/cli/documentation/en_US/format/summary b/cli/documentation/en_US/format/summary
new file mode 100755
index 0000000..ab18377
--- /dev/null
+++ b/cli/documentation/en_US/format/summary
@@ -0,0 +1 @@
+A more terse output format.
diff --git a/cli/documentation/en_US/forwarding/forwarding b/cli/documentation/en_US/forwarding/forwarding
new file mode 100755
index 0000000..8a6189d
--- /dev/null
+++ b/cli/documentation/en_US/forwarding/forwarding
@@ -0,0 +1,2 @@
+The forwarding command configures attributes associated with
+the forwarding service.
diff --git a/cli/documentation/en_US/forwarding/forwarding-access-priority b/cli/documentation/en_US/forwarding/forwarding-access-priority
new file mode 100755
index 0000000..34c92c2
--- /dev/null
+++ b/cli/documentation/en_US/forwarding/forwarding-access-priority
@@ -0,0 +1,2 @@
+This attribute sets the proprity for flows created by
+the forwarding service on an access switch
diff --git a/cli/documentation/en_US/forwarding/forwarding-core-priority b/cli/documentation/en_US/forwarding/forwarding-core-priority
new file mode 100755
index 0000000..183e334
--- /dev/null
+++ b/cli/documentation/en_US/forwarding/forwarding-core-priority
@@ -0,0 +1,2 @@
+This attribute set the proprity for flows created by
+the forwarding service on a core switch
diff --git a/cli/documentation/en_US/forwarding/forwarding-example b/cli/documentation/en_US/forwarding/forwarding-example
new file mode 100755
index 0000000..d445626
--- /dev/null
+++ b/cli/documentation/en_US/forwarding/forwarding-example
@@ -0,0 +1,6 @@
+    forwarding core-priority 100
+        To set priority for forwarding flow-mods on core switches to 100, use:
+
+    forwarding access-priority 100
+        To set priority for forwarding flow-mods on access switches to 100, use:
+
diff --git a/cli/documentation/en_US/forwarding/forwarding-show b/cli/documentation/en_US/forwarding/forwarding-show
new file mode 100755
index 0000000..3aa4baa
--- /dev/null
+++ b/cli/documentation/en_US/forwarding/forwarding-show
@@ -0,0 +1,2 @@
+This command shows the running configuration for
+the forwarding service
diff --git a/cli/documentation/en_US/ha/ha-failover b/cli/documentation/en_US/ha/ha-failover
new file mode 100755
index 0000000..18ee394
--- /dev/null
+++ b/cli/documentation/en_US/ha/ha-failover
@@ -0,0 +1,7 @@
+Configures failover parameters, or triggers a failover event.
+
+The 'failover' token directs the current node to fail over to
+a configured slave controller.
+
+The 'provision' token configures a slave controller by IP address that
+will function as a master controller after a failover event.
diff --git a/cli/documentation/en_US/ha/ha-failover-example b/cli/documentation/en_US/ha/ha-failover-example
new file mode 100755
index 0000000..3d6b73b
--- /dev/null
+++ b/cli/documentation/en_US/ha/ha-failover-example
@@ -0,0 +1,5 @@
+ha failover
+  Fail this controller node, defer to a slave controller
+
+ha provision 1.2.3.4
+  Configure a new controller node to function as a slave
diff --git a/cli/documentation/en_US/ha/ha-vrrp b/cli/documentation/en_US/ha/ha-vrrp
new file mode 100755
index 0000000..093fe12
--- /dev/null
+++ b/cli/documentation/en_US/ha/ha-vrrp
@@ -0,0 +1 @@
+Configure parameters for the VRRP protocol
diff --git a/cli/documentation/en_US/ha/ha-vrrp-example b/cli/documentation/en_US/ha/ha-vrrp-example
new file mode 100755
index 0000000..df69b3b
--- /dev/null
+++ b/cli/documentation/en_US/ha/ha-vrrp-example
@@ -0,0 +1,5 @@
+ha cluster-number 42
+  Set the cluster number (VRRP router ID)
+
+no ha cluster-number
+  Reset the VRRP router ID to the default ('1')
diff --git a/cli/documentation/en_US/host/host b/cli/documentation/en_US/host/host
new file mode 100755
index 0000000..6ee832a
--- /dev/null
+++ b/cli/documentation/en_US/host/host
@@ -0,0 +1,23 @@
+The host command enters a submode which
+allows configuration for the identified device.  The command's
+parameters identify a unique device, which may require
+the use of the optional address-space and vlan parameters.
+
+The identified device does not
+currently need to be known to the controller, providing
+for pre-configuraion of hosts.
+
+Various host configuration within the submode includes
+host-alias, and host security associations.
+
+If completion is requested for the hosts, the resulting 
+entries shown are the collection of currently known hosts,
+and the collection of configured hosts.
+
+The mac address identifying the specific host is
+case insensitive.
+
+The 'no' variation of the host command will remove all configured
+details for the identified device.  If a 'show host' is issued
+afterwards, the host will still appear if the controller has any
+operational state assocaited with the host.
diff --git a/cli/documentation/en_US/host/host-address-space b/cli/documentation/en_US/host/host-address-space
new file mode 100755
index 0000000..c628606
--- /dev/null
+++ b/cli/documentation/en_US/host/host-address-space
@@ -0,0 +1,6 @@
+The optional address-space association for host allows the
+identified mac to be bound to a specific isolated address
+space. 
+
+When this optional parameter is not included, the mac
+is associated with the address-space named 'default'.
diff --git a/cli/documentation/en_US/host/host-alias b/cli/documentation/en_US/host/host-alias
new file mode 100755
index 0000000..4e9dda9
--- /dev/null
+++ b/cli/documentation/en_US/host/host-alias
@@ -0,0 +1,9 @@
+The host-alias command allows associating a more identifiable
+name with the host identified by entering the host submode.
+Host aliases must start with an alphabetic character, and
+can continue with alphanumerics, '_', or '-'.  The maximum length of a
+host alias is 255 characters.
+
+Once an alias is associated with a host, various show commands
+will provide the alias along with, or instead of the mac
+address to identify the host.
diff --git a/cli/documentation/en_US/host/host-alias-example b/cli/documentation/en_US/host/host-alias-example
new file mode 100755
index 0000000..8bae8dd
--- /dev/null
+++ b/cli/documentation/en_US/host/host-alias-example
@@ -0,0 +1,5 @@
+host-alias my-mac-book
+  Associate a friendly name with the current host definition
+
+no host-alias my-mac-book
+  Remove a hostname association from this host
diff --git a/cli/documentation/en_US/host/host-example b/cli/documentation/en_US/host/host-example
new file mode 100755
index 0000000..8cfd89f
--- /dev/null
+++ b/cli/documentation/en_US/host/host-example
@@ -0,0 +1,13 @@
+host 00:00:00:00:00:01
+  Define a host with a specific MAC, and enter its configuration sub-mode
+
+no host 00:00:00:00:00:01
+  Delete a definition for a specific host
+
+host address-space default 00:00:00:00:00:02
+  Define a host and bind it to a specific address space
+
+host vlan 42 00:00:00:00:00:03
+  Define a host and bind it to a specific VLAN.
+  Note here that VLAN associations are only valid with the 'default' address space.
+
diff --git a/cli/documentation/en_US/host/host-vlan b/cli/documentation/en_US/host/host-vlan
new file mode 100755
index 0000000..ef17d3b
--- /dev/null
+++ b/cli/documentation/en_US/host/host-vlan
@@ -0,0 +1,8 @@
+The optional vlan parameter allows the identified mac
+address to be associated with a specific vlan.
+
+When this optional parameter isn't included, no vlan
+is associated with the mac.   
+
+Currently, the vlan may only be associated with a mac
+for the associated address-space 'default'.
diff --git a/cli/documentation/en_US/host/security b/cli/documentation/en_US/host/security
new file mode 100755
index 0000000..0f88358
--- /dev/null
+++ b/cli/documentation/en_US/host/security
@@ -0,0 +1,16 @@
+The security command within the host submode is used to
+bind ip address and attachment points for the hosts
+identified by the submode.
+
+What a host is presented to the controller, the attachment
+point of the host is also identified.   When the security
+command is used to constrain the attachment point, the
+controller can use the configured details to choose whether
+it will allow the host to join the network.
+
+When an ip address is bound to the host, no other host
+may use the indicated ip address.   This is implemented
+by snooping arp's and the dhcp protocol.  It is still
+possible for the host to send frames with spoofed
+src ip address, but the destination will not be able
+to reply to these frames.
diff --git a/cli/documentation/en_US/host/security-attachment-point b/cli/documentation/en_US/host/security-attachment-point
new file mode 100755
index 0000000..d3e67cb
--- /dev/null
+++ b/cli/documentation/en_US/host/security-attachment-point
@@ -0,0 +1,3 @@
+The attachment point portion is intended to
+identify the switch or interface name, otherwise
+the host cannot transmit or receive network traffic.
diff --git a/cli/documentation/en_US/host/security-attachment-point-interface b/cli/documentation/en_US/host/security-attachment-point-interface
new file mode 100755
index 0000000..3aa1379
--- /dev/null
+++ b/cli/documentation/en_US/host/security-attachment-point-interface
@@ -0,0 +1,3 @@
+This field is a regular expression, which is used to
+match against an interface name associated with the
+switch.
diff --git a/cli/documentation/en_US/host/security-attachment-point-switch b/cli/documentation/en_US/host/security-attachment-point-switch
new file mode 100755
index 0000000..23b895a
--- /dev/null
+++ b/cli/documentation/en_US/host/security-attachment-point-switch
@@ -0,0 +1,3 @@
+The switch is part of the attachment point description.
+This can be a switch dpid, or an alias identifying a
+single switch.
diff --git a/cli/documentation/en_US/host/security-bind b/cli/documentation/en_US/host/security-bind
new file mode 100755
index 0000000..677df32
--- /dev/null
+++ b/cli/documentation/en_US/host/security-bind
@@ -0,0 +1,3 @@
+The bind keywork of the security policy command 
+is used to configure various associations 
+restricting the behavior of the host.
diff --git a/cli/documentation/en_US/host/security-example b/cli/documentation/en_US/host/security-example
new file mode 100755
index 0000000..e7df254
--- /dev/null
+++ b/cli/documentation/en_US/host/security-example
@@ -0,0 +1,21 @@
+security policy bind ip-address 10.10.10.1
+  When the host sends any ip frames, the src address
+  of these frames must be 10.10.10.1.  
+
+no security policy bind ip-address 10.10.10.1
+  Remove a source-address binding requirement for this host
+
+security policy bind attachment-point ntgr-7328-3
+  The host identified by this submode can only send
+  and receive traffic when it attached to this switch.
+
+no security policy bind attachment-point ntgr-7328-3
+  Remove an attachment point requirement for this host
+
+security policy bind attachment-point ntgr-7328-3 12
+  The host identified by this submode can only send
+  and receive traffic when it attached to this switch and
+  interface named '12'
+
+no security policy bind attachment-point ntgr-7328-3 12
+  Remove an attachment point/interface requirement for this host
diff --git a/cli/documentation/en_US/host/security-ip-address b/cli/documentation/en_US/host/security-ip-address
new file mode 100755
index 0000000..bd7ebcd
--- /dev/null
+++ b/cli/documentation/en_US/host/security-ip-address
@@ -0,0 +1,2 @@
+This identifies an ip address, it will prevent other host's
+from using any other ip address.
diff --git a/cli/documentation/en_US/host/security-policy b/cli/documentation/en_US/host/security-policy
new file mode 100755
index 0000000..7f59bae
--- /dev/null
+++ b/cli/documentation/en_US/host/security-policy
@@ -0,0 +1,2 @@
+The policy keyword is used to configure security
+policies associated with this host.
diff --git a/cli/documentation/en_US/host/show b/cli/documentation/en_US/host/show
new file mode 100755
index 0000000..9c80b0c
--- /dev/null
+++ b/cli/documentation/en_US/host/show
@@ -0,0 +1,8 @@
+The 'show host' command displays details for hosts,
+including the mac address, the associated host alias,
+the address space, ip address, attachment point,
+configured tags and the last time the host was
+serviced by the controller.
+
+The tag column here only displays a synopsis
+of the associated tags.
diff --git a/cli/documentation/en_US/host/show-host b/cli/documentation/en_US/host/show-host
new file mode 100755
index 0000000..6ec8c2a
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host
@@ -0,0 +1,4 @@
+This command variation allows filtering based on
+the provided mac address.  In addition, the hosts
+can be selected either by the switch of their
+attachment point, or the host's associated ip address
diff --git a/cli/documentation/en_US/host/show-host-address-space b/cli/documentation/en_US/host/show-host-address-space
new file mode 100755
index 0000000..e44c026
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-address-space
@@ -0,0 +1,2 @@
+This positional parameter allows filtering on the
+address space associated with the hosts.
diff --git a/cli/documentation/en_US/host/show-host-all b/cli/documentation/en_US/host/show-host-all
new file mode 100755
index 0000000..df1f462
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-all
@@ -0,0 +1,3 @@
+The 'all' keyword is a positional parameter replacement
+which allows additional parameters to be included.  
+'all' may not be used as a host alias.
diff --git a/cli/documentation/en_US/host/show-host-by-host-last-seen b/cli/documentation/en_US/host/show-host-by-host-last-seen
new file mode 100755
index 0000000..ea61e5a
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-by-host-last-seen
@@ -0,0 +1 @@
+Order the output by the time the host was last seen by the controller
diff --git a/cli/documentation/en_US/host/show-host-by-last-seen b/cli/documentation/en_US/host/show-host-by-last-seen
new file mode 100755
index 0000000..d6acdc7
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-by-last-seen
@@ -0,0 +1 @@
+Order the output by the last seen time of the attachment point
diff --git a/cli/documentation/en_US/host/show-host-by-network-address b/cli/documentation/en_US/host/show-host-by-network-address
new file mode 100755
index 0000000..0aeb157
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-by-network-address
@@ -0,0 +1 @@
+Order the output by the host's associated ip addresses
diff --git a/cli/documentation/en_US/host/show-host-ipv4 b/cli/documentation/en_US/host/show-host-ipv4
new file mode 100755
index 0000000..729cb28
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-ipv4
@@ -0,0 +1,7 @@
+The 'ip-address <ip-address>' keyword pair can be used to 
+restrict the host's displayed by the ip-address associaited
+with the currently known hosts.
+
+If completion is requested after the ip-address keyword, the
+list of ip-addresses displayed are the ip-addresses currently
+associated with the known hosts.
diff --git a/cli/documentation/en_US/host/show-host-items b/cli/documentation/en_US/host/show-host-items
new file mode 100755
index 0000000..fe2960f
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-items
@@ -0,0 +1,10 @@
+This 'show host' variant allows the selection of 
+particular related host details, for example the
+attachment point or the ip address.  
+
+The variant exists to more completely list the
+host's associated attributes.  In the more basic
+version of the command, these columns may have
+abbreviated information (displaying only one
+ip address, for example), to provide a more 
+concise display.
diff --git a/cli/documentation/en_US/host/show-host-mac b/cli/documentation/en_US/host/show-host-mac
new file mode 100755
index 0000000..f8ff48a
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-mac
@@ -0,0 +1 @@
+This positional parameter allows filtering on the mac address.
diff --git a/cli/documentation/en_US/host/show-host-switch b/cli/documentation/en_US/host/show-host-switch
new file mode 100755
index 0000000..ffac535
--- /dev/null
+++ b/cli/documentation/en_US/host/show-host-switch
@@ -0,0 +1,8 @@
+The 'switch <dpid>' keyword pair can be used to restrict the
+hosts displayed by the identified <dpid>.  The hosts displayed
+will all have attachement points associated with the requested
+<dpid>.
+
+If completion is requested after the 'switch' keyword, the
+list of switches displayed are the switches associated with
+the active attachment points of the known hosts.
diff --git a/cli/documentation/en_US/internal b/cli/documentation/en_US/internal
new file mode 100755
index 0000000..e69de29
--- /dev/null
+++ b/cli/documentation/en_US/internal
diff --git a/cli/documentation/en_US/introduction b/cli/documentation/en_US/introduction
new file mode 100755
index 0000000..73a4c2a
--- /dev/null
+++ b/cli/documentation/en_US/introduction
@@ -0,0 +1,94 @@
+h1. CLI concepts
+h2. Access and modes
+The CLI can be accessed through the console window of the virtual machine or by using ssh to connect to the virtual machine. Logging in as the admin user gives access to the CLI.
+
+The admin user will be logged into the CLI in login mode. The prompt will have a > to indicate this mode.
+
+Enter enable mode by typing the enable command. The prompt will have a # to indicate this mode.
+
+Enter config mode by typing the configure command. The prompt will have a (config)# to indicate this mode.
+
+There are a number of config submodes which will be indicated in the prompt as (config-<submode>)#, and each submode allows configuration of a specific type of object in the database.
+
+Type exit to return to the previous mode, or type end to exit all config modes and return to enable mode.
+
+h2. Navigation and help
+There are a number of ways users can navigate the CLI and receive help at any time.
+
+For navigation, the CLI implements a Linux/shell-style navigation - for example:
+
+* Ctrl-B - back one character
+* Ctrl-F - forward one character
+* Ctrl-A - move to the start of the line
+* Ctrl-E - move to the end of the line
+* Ctrl-P - display the previous command - can be repeated to go through history
+* Ctrl-R - search for text among previous commands
+Refer to http://tiswww.case.edu/php/chet/readline/readline.html for more information on all keyboard shortcuts and facilities.
+
+Help is also accessible by typing the command help. The output will vary based on the specific mode the user is in.
+
+Command completion at any point can be pressing tab once or twice. Pressing tab once will complete the value if possible, and pressing tab twice will show all possible completions. Type the ? character to show completions at any time.
+
+The CLI will accept shortened versions of commands and options so long as there is no ambiguity in the commands. For example, sh run will be interpreted as show running-config.
+
+CLI conveniences: pipes, watching commands, and other tricks
+The output of any CLI command can be piped to common Unix shell utilities such as grep, awk, wc, tail, more, or less. This can make searching for data or browsing through output significantly easier. For example, to find all the ports of a given switch, type:
+{noformat}
+10.0.2.15> show port | grep :24
+00:0a:00:24:a8:c4:69:00 52    28    00:24:a8:c4:69:cc
+00:0a:00:24:a8:c4:69:00 54    30    00:24:a8:c4:69:ca
+00:0a:00:24:a8:c4:69:00 56    32    00:24:a8:c4:69:c8
+00:0a:00:24:a8:c4:69:00 57    33    00:24:a8:c4:69:c7
+00:0a:00:24:a8:c4:69:00 58    34    00:24:a8:c4:69:c6
+10.0.2.15>
+{noformat}
+The CLI provides begin, include, and exclude as pipe options that may be familiar to administrators of existing network devices. begin is useful for starting to view large output at a particular point. For example, to see just the lsof output of show tech-support, type:
+{noformat}
+10.0.2.15> show tech-support | begin lsof |more
+Executing os command: sudo lsof
+COMMAND    PID       USER   FD      TYPE             DEVICE SIZE/OFF       NODE NAME
+init         1       root  cwd       DIR               8,16     4096          2 /
+init         1       root  rtd       DIR               8,16     4096          2 /
+init         1       root  txt       REG               8,16   125640       4081 /sbin/init
+init         1       root  mem       REG               8,16    51712      19738 /lib/libnss_files-2.12.1.so
+init         1       root  mem       REG               8,16    43552      26679 /lib/libnss_nis-2.12.1.so
+init         1       root  mem       REG               8,16    97256      19579 /lib/libnsl-2.12.1.so
+...
+{noformat}
+The CLI also allows users to repeatedly invoke a command by prepending the command watch. For example, watch show switch <dpid> flow will allow the user to monitor the flows on a specific switch. This may be familiar to Unix users who use top or the corresponding watch command in Unix.
+
+Multiple CLI commands can be entered into the CLI on a single line, separated by a semi-colon. For example, to get all the way into a configuring a flow entry on a specific switch, type:
+{noformat}
+10.0.2.15> enable; conf; switch 00:0a:00:24:a8:c4:69:00; flow-entry foo
+10.0.2.15(config-flow-entry)#
+{noformat}
+Finally, the CLI allows redirecting the output of a command to a local file or to the URL of an HTTP server or an FTP server. The local file is stored in the controller database (as general access to the local filesystem is not given). This is convenient for storing away show output or versions of configurations. For example, to store the output of show host, type:
+{noformat}
+10.0.2.15# show host > config://hostoutput
+user data created
+10.0.2.15# show config
+Name       Length Version Timestamp
+----------|------|-------|-------------------
+hostoutput 1775   1       2010-12-15.08:29:31
+
+10.0.2.15# show config hostoutput | head -10
+MAC Address       Name Switch ID               Ingress Port IP Address     Vendor
+-----------------|----|-----------------------|------------|--------------|----------------------------
+00:0c:29:6a:83:8c      00:0a:00:24:a8:c4:69:00 38           192.168.10.207 VMware, Inc.
+00:21:f7:de:e9:00      00:0c:00:21:f7:de:e9:00 local(65534) 192.168.12.102 ProCurve Networking by HP
+00:25:90:08:94:d5      00:0a:00:21:f7:de:e9:00 2            128.8.109.145  Super Micro Computer, Inc.
+00:30:48:f9:cc:f7      00:00:00:30:48:f9:cc:f7 local(65534) 192.168.2.99   Supermicro Computer, Inc.
+00:30:48:f9:cd:0b      00:00:00:30:48:f9:cd:0b local(65534) 0.0.0.0        Supermicro Computer, Inc.
+00:30:48:f9:cd:0d      00:00:00:00:00:00:00:01 17           192.168.11.2   Supermicro Computer, Inc.
+00:50:8d:65:be:4b      00:00:00:00:00:00:00:01 22           192.168.11.1   ABIT COMPUTER CORPORATION
+10:00:00:67:ad:07      00:00:00:30:48:f9:cc:f7 4            192.168.12.132 unknown
+{noformat}
+h2. Conventions
+Text in courier font indicates either text that should be typed in by the user or output from a command.
+
+Text enclosed in parentheses ( ) indicates a set of required arguments. The options are separated by a vertical bar |.
+
+Text enclosed in square brackets [ ] indicates optional arguments. The options are separated by a vertical bar |.
+
+Text enclosed in angle brackets < > indicates a value that should be entered/substituted by the user.
+
diff --git a/cli/documentation/en_US/ping/ping b/cli/documentation/en_US/ping/ping
new file mode 100755
index 0000000..c68085c
--- /dev/null
+++ b/cli/documentation/en_US/ping/ping
@@ -0,0 +1,3 @@
+The ping command sends ICMP echo requests 
+validates basic network connectivity between the
+CLI and the requested target.
diff --git a/cli/documentation/en_US/ping/ping-count b/cli/documentation/en_US/ping/ping-count
new file mode 100755
index 0000000..28c55f0
--- /dev/null
+++ b/cli/documentation/en_US/ping/ping-count
@@ -0,0 +1,2 @@
+This integer field identifies the number of ping requests
+sent to the target before exiting.  The default value is '5'.
diff --git a/cli/documentation/en_US/ping/ping-example b/cli/documentation/en_US/ping/ping-example
new file mode 100755
index 0000000..8d52b6e
--- /dev/null
+++ b/cli/documentation/en_US/ping/ping-example
@@ -0,0 +1,5 @@
+ping 1.2.3.4
+  Ping a specific host with a default package count (5)
+
+ping 10 1.2.3.4
+  Ping a specific host with a fixed number of packets
diff --git a/cli/documentation/en_US/reserved/all b/cli/documentation/en_US/reserved/all
new file mode 100755
index 0000000..331723a
--- /dev/null
+++ b/cli/documentation/en_US/reserved/all
@@ -0,0 +1,5 @@
+The 'all' token is used in place of an identifier's
+value to request every item associated with the command.
+The 'all' token is reserved, identifiers may not
+use the 'all' token as their name, no switch-alias or
+host-alias may be called 'all'
diff --git a/cli/documentation/en_US/running-config/show b/cli/documentation/en_US/running-config/show
new file mode 100755
index 0000000..fc0fa35
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show
@@ -0,0 +1,15 @@
+The 'show running-config' command displays the complete
+configuration for the controller.   When the controller
+is operating with HA enabled, 'show running-config' displays
+the configuraion of the HA cluster.
+
+The running-config is intended to show the configuration
+necessary to update a default configuration to the current
+configuration.  The running-config then displays deviations
+from the default configuration; configuration whice arises
+from the default configuration will not be shown in the
+running-config
+
+While operating with HA enabled, a replay of the running
+config will not cause a slave to be (re)configured into
+HA-enabled if it is not already operating as HA-enabled.
diff --git a/cli/documentation/en_US/running-config/show-address-space b/cli/documentation/en_US/running-config/show-address-space
new file mode 100755
index 0000000..b17c20f
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-address-space
@@ -0,0 +1,2 @@
+The 'address-space' keyword filters the running-config output
+to only display the address-space related configuration.
diff --git a/cli/documentation/en_US/running-config/show-controller-node b/cli/documentation/en_US/running-config/show-controller-node
new file mode 100755
index 0000000..c312ffa
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-controller-node
@@ -0,0 +1,3 @@
+The 'controller-node' keyword filter the running config
+to only display controller-node configuration.  This includes
+descriptions for the controller node interfaces, and firewall rules.
diff --git a/cli/documentation/en_US/running-config/show-example b/cli/documentation/en_US/running-config/show-example
new file mode 100755
index 0000000..32b5e13
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-example
@@ -0,0 +1,10 @@
+show running-config
+    Show the complete running-config
+
+show running-config swtich 00:00:00:00:00:73:28:03 
+    Show the running cofig details for a particular switch
+
+    !
+    switch 00:00:00:00:00:73:28:03
+      switch-alias ntgr-7328-3
+
diff --git a/cli/documentation/en_US/running-config/show-feature b/cli/documentation/en_US/running-config/show-feature
new file mode 100755
index 0000000..b24fa35
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-feature
@@ -0,0 +1,3 @@
+The 'feature' keyword filters the running-config output
+to display the features enabled or disabled which differ
+from the default features.
diff --git a/cli/documentation/en_US/running-config/show-host b/cli/documentation/en_US/running-config/show-host
new file mode 100755
index 0000000..1625048
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-host
@@ -0,0 +1,3 @@
+The 'host' keyword filters the running-config output to only display
+the host related configuration.  This includes host aliases, and
+any host security associations.
diff --git a/cli/documentation/en_US/running-config/show-network-service b/cli/documentation/en_US/running-config/show-network-service
new file mode 100755
index 0000000..683aeb6
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-network-service
@@ -0,0 +1,2 @@
+The 'network-service' keyword filter the running-config output
+to only display the network-service related configuration.
diff --git a/cli/documentation/en_US/running-config/show-snmp b/cli/documentation/en_US/running-config/show-snmp
new file mode 100755
index 0000000..ea90fae
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-snmp
@@ -0,0 +1,2 @@
+The 'snmp' keyword filters the running-config output to only
+display the snmp configuration.
diff --git a/cli/documentation/en_US/running-config/show-switch b/cli/documentation/en_US/running-config/show-switch
new file mode 100755
index 0000000..0b66c12
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-switch
@@ -0,0 +1,2 @@
+The 'switch' keyword filters the running-config output to
+only display switch related configuration.
diff --git a/cli/documentation/en_US/running-config/show-tag b/cli/documentation/en_US/running-config/show-tag
new file mode 100755
index 0000000..accf6af
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-tag
@@ -0,0 +1,4 @@
+The 'tag' keyword filters the running-config to only
+display the tag submode related configuration.  Uses
+of the tag within vns, address-space, or other submodes
+is not included.
diff --git a/cli/documentation/en_US/running-config/show-vcenter b/cli/documentation/en_US/running-config/show-vcenter
new file mode 100755
index 0000000..d494f6c
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-vcenter
@@ -0,0 +1,3 @@
+The 'vcenter' keyword filters the runnig-config output to
+only vcenter related configuration, including the dvs
+and dvs-port-groups.
diff --git a/cli/documentation/en_US/running-config/show-vns b/cli/documentation/en_US/running-config/show-vns
new file mode 100755
index 0000000..b77baea
--- /dev/null
+++ b/cli/documentation/en_US/running-config/show-vns
@@ -0,0 +1,2 @@
+The 'vns' keyword filters the running-config output to
+only display the vns configuration.
diff --git a/cli/documentation/en_US/set/set b/cli/documentation/en_US/set/set
new file mode 100755
index 0000000..a9e9a02
--- /dev/null
+++ b/cli/documentation/en_US/set/set
@@ -0,0 +1 @@
+Set the terminal height for paging Cli command output.
\ No newline at end of file
diff --git a/cli/documentation/en_US/set/set-example b/cli/documentation/en_US/set/set-example
new file mode 100755
index 0000000..729094d
--- /dev/null
+++ b/cli/documentation/en_US/set/set-example
@@ -0,0 +1,5 @@
+set length 50
+  Set the terminal length to 50 lines.
+
+set length term
+  Set the terminal length to the natural screen height.
diff --git a/cli/documentation/en_US/show-arp b/cli/documentation/en_US/show-arp
new file mode 100755
index 0000000..1ff1e24
--- /dev/null
+++ b/cli/documentation/en_US/show-arp
@@ -0,0 +1 @@
+The 'show arp' command shows the configured static arp table.
\ No newline at end of file
diff --git a/cli/documentation/en_US/show-arp-example b/cli/documentation/en_US/show-arp-example
new file mode 100755
index 0000000..3d4bfdc
--- /dev/null
+++ b/cli/documentation/en_US/show-arp-example
@@ -0,0 +1,7 @@
+localhost# show arp
+
+# Ip       Mac
+
+-|--------|-----------------
+
+1 10.0.0.1 11:22:33:44:55:66
diff --git a/cli/documentation/en_US/show-clock b/cli/documentation/en_US/show-clock
new file mode 100755
index 0000000..b175722
--- /dev/null
+++ b/cli/documentation/en_US/show-clock
@@ -0,0 +1 @@
+The 'show clock' command shows the clock.
diff --git a/cli/documentation/en_US/show-event-history-count b/cli/documentation/en_US/show-event-history-count
new file mode 100755
index 0000000..d422b6e
--- /dev/null
+++ b/cli/documentation/en_US/show-event-history-count
@@ -0,0 +1 @@
+Limit the output to indicated number of lines
diff --git a/cli/documentation/en_US/snmp/show b/cli/documentation/en_US/snmp/show
new file mode 100755
index 0000000..37c624a
--- /dev/null
+++ b/cli/documentation/en_US/snmp/show
@@ -0,0 +1,5 @@
+Display operational parameters of this device's SNMP support.
+
+Show the configurable parameters for the SNMP MIBs,
+and show the status of the network firewall
+(which might be blocking some SNMP requests)
diff --git a/cli/documentation/en_US/snmp/show-example b/cli/documentation/en_US/snmp/show-example
new file mode 100755
index 0000000..92d5483
--- /dev/null
+++ b/cli/documentation/en_US/snmp/show-example
@@ -0,0 +1,2 @@
+show snmp
+  Display SNMP operational state.
diff --git a/cli/documentation/en_US/snmp/snmp-server b/cli/documentation/en_US/snmp/snmp-server
new file mode 100755
index 0000000..07066f4
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server
@@ -0,0 +1,4 @@
+Configure this device to respond to SNMP queries.
+
+Configure SNMP protocol parameters, and configure how
+responses to SNMP queries are composed.
diff --git a/cli/documentation/en_US/snmp/snmp-server-community b/cli/documentation/en_US/snmp/snmp-server-community
new file mode 100755
index 0000000..b871d2c
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server-community
@@ -0,0 +1,4 @@
+Configure the community string for simple read-only SNMP client authentication.
+
+Reset the community string (default empty) with the 'no' version of this command.
+
diff --git a/cli/documentation/en_US/snmp/snmp-server-contact b/cli/documentation/en_US/snmp/snmp-server-contact
new file mode 100755
index 0000000..fa45d9e
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server-contact
@@ -0,0 +1,3 @@
+Configure the adminstrative contact record (the SNMP sysContact MIB) for this device.
+
+Reset the contact information to system defaults with the 'no' version of this command.
diff --git a/cli/documentation/en_US/snmp/snmp-server-enable b/cli/documentation/en_US/snmp/snmp-server-enable
new file mode 100755
index 0000000..eff94d0
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server-enable
@@ -0,0 +1,3 @@
+Enable this device for responding to SNMP.
+
+Use the 'no' version of this command to disable SNMP features.
diff --git a/cli/documentation/en_US/snmp/snmp-server-example b/cli/documentation/en_US/snmp/snmp-server-example
new file mode 100755
index 0000000..a277fe5
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server-example
@@ -0,0 +1,24 @@
+snmp-server enable
+  Enable SNMP support.
+
+no snmp-server enable
+  Disable SNMP support.
+
+snmp-server community ro MY-SNMP
+  Set the community string (for authenticating to this SNMP service)
+  to "MY-SNMP"
+
+no snmp-server community
+  Reset the community string to default (the empty string)
+
+snmp-server location snmp.example.com
+  Set the server location reported during SNMP queries.
+
+no snmp-server location
+  Reset to the system default server location.
+
+snmp-server contact admin@example.com
+  Set the administrative contact reported during SNMP queries.
+
+no snmp-server contact
+  Reset to the system default administrative contact setting.
diff --git a/cli/documentation/en_US/snmp/snmp-server-location b/cli/documentation/en_US/snmp/snmp-server-location
new file mode 100755
index 0000000..3a94220
--- /dev/null
+++ b/cli/documentation/en_US/snmp/snmp-server-location
@@ -0,0 +1,3 @@
+Configure this device's location via the sysLocation SNMP MIB.
+
+Reset the location to the system default with the 'no' version of this command.
diff --git a/cli/documentation/en_US/static-arp b/cli/documentation/en_US/static-arp
new file mode 100755
index 0000000..ec41c35
--- /dev/null
+++ b/cli/documentation/en_US/static-arp
@@ -0,0 +1 @@
+The 'arp' command is used to create static arp <-> ip address bindings.
\ No newline at end of file
diff --git a/cli/documentation/en_US/static-arp-example b/cli/documentation/en_US/static-arp-example
new file mode 100755
index 0000000..0d85ba9
--- /dev/null
+++ b/cli/documentation/en_US/static-arp-example
@@ -0,0 +1,5 @@
+arp 10.0.0.1 11:22:33:44:55:66
+  create a static arp entry
+
+no arp 10.0.0.1 11:22:33:44:55:66
+  remove a static arp entry
\ No newline at end of file
diff --git a/cli/documentation/en_US/switch-cluster/switch-cluster b/cli/documentation/en_US/switch-cluster/switch-cluster
new file mode 100755
index 0000000..acb9e92
--- /dev/null
+++ b/cli/documentation/en_US/switch-cluster/switch-cluster
@@ -0,0 +1,3 @@
+The switch-cluster command displays the clusters which
+have been constructed by the controller, based on the
+discovered topology.
diff --git a/cli/documentation/en_US/switch/alias b/cli/documentation/en_US/switch/alias
new file mode 100755
index 0000000..f3dc9a3
--- /dev/null
+++ b/cli/documentation/en_US/switch/alias
@@ -0,0 +1 @@
+Assign an alias to this switch
diff --git a/cli/documentation/en_US/switch/alias-example b/cli/documentation/en_US/switch/alias-example
new file mode 100755
index 0000000..8ee9006
--- /dev/null
+++ b/cli/documentation/en_US/switch/alias-example
@@ -0,0 +1,5 @@
+alias switch-1
+  Attach a name to this switch
+
+no alias switch-1
+  Remove a switch alias
diff --git a/cli/documentation/en_US/switch/core-switch b/cli/documentation/en_US/switch/core-switch
new file mode 100755
index 0000000..c049cf0
--- /dev/null
+++ b/cli/documentation/en_US/switch/core-switch
@@ -0,0 +1 @@
+This switch is a core switch.
\ No newline at end of file
diff --git a/cli/documentation/en_US/switch/core-switch-example b/cli/documentation/en_US/switch/core-switch-example
new file mode 100755
index 0000000..814c1be
--- /dev/null
+++ b/cli/documentation/en_US/switch/core-switch-example
@@ -0,0 +1,5 @@
+core-switch
+  Configure the currently-configured switch as a core switch
+
+no core-switch
+  Remove the core-switch property
diff --git a/cli/documentation/en_US/switch/interface b/cli/documentation/en_US/switch/interface
new file mode 100755
index 0000000..708ad97
--- /dev/null
+++ b/cli/documentation/en_US/switch/interface
@@ -0,0 +1 @@
+Specify a switch interface by name, and enter its configuration sub-mode
\ No newline at end of file
diff --git a/cli/documentation/en_US/switch/interface-alias b/cli/documentation/en_US/switch/interface-alias
new file mode 100755
index 0000000..f774781
--- /dev/null
+++ b/cli/documentation/en_US/switch/interface-alias
@@ -0,0 +1 @@
+Configure an alias for this switch interface.
\ No newline at end of file
diff --git a/cli/documentation/en_US/switch/interface-alias-example b/cli/documentation/en_US/switch/interface-alias-example
new file mode 100755
index 0000000..9bbcc42
--- /dev/null
+++ b/cli/documentation/en_US/switch/interface-alias-example
@@ -0,0 +1,6 @@
+interface-alias defintf
+  Assign an alias to this switch interface
+
+no interface-alias defintf
+  Remove an alias for this switch interface
+
diff --git a/cli/documentation/en_US/switch/interface-example b/cli/documentation/en_US/switch/interface-example
new file mode 100755
index 0000000..405aa06
--- /dev/null
+++ b/cli/documentation/en_US/switch/interface-example
@@ -0,0 +1,5 @@
+interface Ethernet1
+  Configure a specific port on this switch
+
+no interface Ethernet1
+  Delete a switch interface configuration
diff --git a/cli/documentation/en_US/switch/realtime-aggregate b/cli/documentation/en_US/switch/realtime-aggregate
new file mode 100755
index 0000000..b18af33
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-aggregate
@@ -0,0 +1,4 @@
+The aggregate option displays aggregated flow statistics.
+It is a request for the controller to activly
+query the indicated switch to acquire and display
+the results.
diff --git a/cli/documentation/en_US/switch/realtime-desc b/cli/documentation/en_US/switch/realtime-desc
new file mode 100755
index 0000000..0f5784a
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-desc
@@ -0,0 +1,5 @@
+The desc option is a request for the controller to
+query the indicated switch.  to acquire the switch description.
+The returned values include the switch model and version,
+the switch vendor, serial number, and software version
+currently running.
diff --git a/cli/documentation/en_US/switch/realtime-features b/cli/documentation/en_US/switch/realtime-features
new file mode 100755
index 0000000..d115a4f
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-features
@@ -0,0 +1,3 @@
+The features option is a request for the controller to
+query the indicated switch to acquire details about 
+the interfaces of the switch.
diff --git a/cli/documentation/en_US/switch/realtime-flow b/cli/documentation/en_US/switch/realtime-flow
new file mode 100755
index 0000000..6dd91d3
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-flow
@@ -0,0 +1,2 @@
+The flow selection request the controller to query
+the selected switch for all the flows currently active.
diff --git a/cli/documentation/en_US/switch/realtime-port b/cli/documentation/en_US/switch/realtime-port
new file mode 100755
index 0000000..6445c5c
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-port
@@ -0,0 +1,4 @@
+The port option is a request for the controller to
+send to the indicated switch, the reply is the openflow
+protocol port reply, which lists all the interfaces
+and provides tx and rx statistics.
diff --git a/cli/documentation/en_US/switch/realtime-queue b/cli/documentation/en_US/switch/realtime-queue
new file mode 100755
index 0000000..951a3b8
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-queue
@@ -0,0 +1,4 @@
+The queue option is a request for the controller to
+query the indicated switch  to acquire the switch queue details
+The returned value is an association between the interface names,
+the queue numbers, and some statitics for each of the queues.
diff --git a/cli/documentation/en_US/switch/realtime-table b/cli/documentation/en_US/switch/realtime-table
new file mode 100755
index 0000000..bc1f797
--- /dev/null
+++ b/cli/documentation/en_US/switch/realtime-table
@@ -0,0 +1,4 @@
+The table option is a request for the controller to
+query the indicated switch,  for the switch's table
+details.  The returned values the names of the tables,
+the size of the tables, and some usage statistics
diff --git a/cli/documentation/en_US/switch/show b/cli/documentation/en_US/switch/show
new file mode 100755
index 0000000..750eb26
--- /dev/null
+++ b/cli/documentation/en_US/switch/show
@@ -0,0 +1,2 @@
+The show switch commands displays operational state for
+switches currently connected to the controller.
diff --git a/cli/documentation/en_US/switch/show-interfaces b/cli/documentation/en_US/switch/show-interfaces
new file mode 100755
index 0000000..5537671
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-interfaces
@@ -0,0 +1,4 @@
+The 'interfaces' keyword lists the interfaces on the switch.
+This information is posed by the switch to the controller when
+the switch first connects, and then updated by the switch if
+new interfaces are created or deleted.
diff --git a/cli/documentation/en_US/switch/show-interfaces-alias b/cli/documentation/en_US/switch/show-interfaces-alias
new file mode 100755
index 0000000..7a10aa1
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-interfaces-alias
@@ -0,0 +1,2 @@
+Interfaces may have aliases assigned to them, this keyword
+diesplays any aliases associated with the switch
diff --git a/cli/documentation/en_US/switch/show-switch-alias b/cli/documentation/en_US/switch/show-switch-alias
new file mode 100755
index 0000000..3eb7dca
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-switch-alias
@@ -0,0 +1,2 @@
+This selection displays the alias associated with the
+requested switch (or all the swtiches when all is selected)
diff --git a/cli/documentation/en_US/switch/show-switch-format-brief b/cli/documentation/en_US/switch/show-switch-format-brief
new file mode 100755
index 0000000..ac548ec
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-switch-format-brief
@@ -0,0 +1,2 @@
+The brief keyword requests a less verbose version
+for the output of various show commands
diff --git a/cli/documentation/en_US/switch/show-switch-format-details b/cli/documentation/en_US/switch/show-switch-format-details
new file mode 100755
index 0000000..ae31c3a
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-switch-format-details
@@ -0,0 +1,2 @@
+The details keyword requests a more verbose version
+of the output format.  
diff --git a/cli/documentation/en_US/switch/show-switch-order b/cli/documentation/en_US/switch/show-switch-order
new file mode 100755
index 0000000..e89f3e8
--- /dev/null
+++ b/cli/documentation/en_US/switch/show-switch-order
@@ -0,0 +1,2 @@
+The 'by' keyword describes a sort-by token,  The sort
+selection is the next keyword
diff --git a/cli/documentation/en_US/switch/switch b/cli/documentation/en_US/switch/switch
new file mode 100755
index 0000000..f7c14d9
--- /dev/null
+++ b/cli/documentation/en_US/switch/switch
@@ -0,0 +1,8 @@
+The switch command enters the switch submode for a single
+identified switch.   Within the submode, various configuraion
+can be performed on the switch, including setting the switch-alias,
+enable or disabling the tunnel features.
+
+The 'no' variation of the switch command will not remove swtich's
+currently connected to the controller, instead it will remove
+any user configured details of the identified switch.
diff --git a/cli/documentation/en_US/switch/switch-example b/cli/documentation/en_US/switch/switch-example
new file mode 100755
index 0000000..a8bf743
--- /dev/null
+++ b/cli/documentation/en_US/switch/switch-example
@@ -0,0 +1,5 @@
+switch 00:00:00:00:00:00:00:01
+  Define a new switch, and enter the switch configuration sub-mode
+
+no switch 00:00:00:00:00:00:00:01
+  Delete a switch definition
diff --git a/cli/documentation/en_US/switch/switchport b/cli/documentation/en_US/switch/switchport
new file mode 100755
index 0000000..f06de7c
--- /dev/null
+++ b/cli/documentation/en_US/switch/switchport
@@ -0,0 +1 @@
+Configure this interface to connect to an external network
diff --git a/cli/documentation/en_US/switch/switchport-example b/cli/documentation/en_US/switch/switchport-example
new file mode 100755
index 0000000..70d0d9e
--- /dev/null
+++ b/cli/documentation/en_US/switch/switchport-example
@@ -0,0 +1,6 @@
+switchport mode external
+  Within a switch interface definiton, configure this interface to be
+  connected to an external network
+
+no switchport mode external
+  Remove the external connection attribute for this interface
diff --git a/cli/documentation/en_US/switch/tunnel b/cli/documentation/en_US/switch/tunnel
new file mode 100755
index 0000000..b981951
--- /dev/null
+++ b/cli/documentation/en_US/switch/tunnel
@@ -0,0 +1 @@
+Configure tunnel attributes for this switch
\ No newline at end of file
diff --git a/cli/documentation/en_US/switch/tunnel-example b/cli/documentation/en_US/switch/tunnel-example
new file mode 100755
index 0000000..2b064cd
--- /dev/null
+++ b/cli/documentation/en_US/switch/tunnel-example
@@ -0,0 +1,8 @@
+tunnel termination enabled
+  Enable tunnel termination for this switch
+
+tunnel termination disabled
+  Disable tunnel termination for this switch
+
+no tunnel termination
+  Disable tunnel termination for this switch
diff --git a/cli/documentation/en_US/tacacs/show b/cli/documentation/en_US/tacacs/show
new file mode 100755
index 0000000..384e522
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/show
@@ -0,0 +1,4 @@
+Show TACACS+ aaa operational state.
+
+Print out the global aaa sources and services,
+as well as any configured TACACS+ servers and parameters.
diff --git a/cli/documentation/en_US/tacacs/show-example b/cli/documentation/en_US/tacacs/show-example
new file mode 100755
index 0000000..f4eae1e
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/show-example
@@ -0,0 +1,2 @@
+show tacacs
+  Display the TACACS+ aaa operational state.
diff --git a/cli/documentation/en_US/tacacs/tacacs b/cli/documentation/en_US/tacacs/tacacs
new file mode 100755
index 0000000..9c89268
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs
@@ -0,0 +1,7 @@
+Configure server and protocol parameters for TACACS+.
+Specify remote TACACS+ servers, along with protocol timeouts 
+and security settings.
+
+TACACS+ specific configuration here is enabled by a corresponding
+'aaa' command to enable authentication, authorization, or accounting
+via the TACACS+ protocol.
diff --git a/cli/documentation/en_US/tacacs/tacacs-example b/cli/documentation/en_US/tacacs/tacacs-example
new file mode 100755
index 0000000..e31865c
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-example
@@ -0,0 +1,28 @@
+tacacs server timeout 50
+  Configure the global TACACS+ protocol timeout to 50s.
+
+no tacacs server timeout
+  Configure the default TACACS+ prototol timeout.
+
+tacacs server key SECRET-KEY
+  Configure the (plaintext) key used to communicate with
+  the TACACS+ server, if no key is specified for a given server.
+
+no tacacs server key
+  Reset the global TACACS+ server key.
+  If no key is specified, an empty key is assumed.
+
+tacacs server host AA.BB.CC.DD
+  Add a TACACS+ server with the specified IP address.
+
+no tacacs server host AA.BB.CC.DD
+  Delete the specified TACACS+ server
+
+tacacs server host AA.BB.CC.DD key SECRET-KEY
+  Specify an encryption key for this TACACS+ server.
+
+no tacacs server host AA.BB.CC.DD key
+  Remove any key associated with this server,
+  and use the global TACACS+ key instead.
+
+
diff --git a/cli/documentation/en_US/tacacs/tacacs-host b/cli/documentation/en_US/tacacs/tacacs-host
new file mode 100755
index 0000000..9922385
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-host
@@ -0,0 +1 @@
+Configure TACACS+ servers by IP address for aaa roles.Hosts are not active for aaa rules unless the associated 'aaa' command is used. Delete the host with the 'no' form of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-host-key b/cli/documentation/en_US/tacacs/tacacs-host-key
new file mode 100755
index 0000000..f47592e
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-host-key
@@ -0,0 +1,6 @@
+Specify the TACACS+ encryption key used to communicate with
+this TACACS+ server.  If no key is specified, the global
+key is used.
+
+Reset the per-host key (and fall back to the global key)
+with the 'no' version of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-key b/cli/documentation/en_US/tacacs/tacacs-key
new file mode 100755
index 0000000..2d2e172
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-key
@@ -0,0 +1,8 @@
+Configure the default TACACS+ protocol key used to secure
+the communications channel with the TACACS+ server(s).
+
+The default key is used if there is no key defined
+for an individual server.
+
+The default key can be reset (to an empty key)
+with the 'no' form of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-timeout b/cli/documentation/en_US/tacacs/tacacs-timeout
new file mode 100755
index 0000000..3862e9d
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-timeout
@@ -0,0 +1,9 @@
+Configure the global timeout for communicating with TACACS+ servers.
+The timeout is specified in seconds.
+
+If the timeout expires before the TACACS+ server responds,
+then the TACACS+ aaa action is considered 'failed',
+and other methods can be attempted.
+
+The server timeout is reset to the system default using the 'no' 
+command prefix.
diff --git a/cli/documentation/en_US/tag/match b/cli/documentation/en_US/tag/match
new file mode 100755
index 0000000..795ca02
--- /dev/null
+++ b/cli/documentation/en_US/tag/match
@@ -0,0 +1,3 @@
+The match command is used to tag hosts. MAC-address, VLAN, switch, switch-port are the fields that can be matched to tag hosts. These fields can be matched individually or in conjunction. For instance, if match is specified to match a MAC-Address, VLAN and switch-port, then the logical host that has that MAC-Address, sending packets tagged with that VLAN and connected to that switch-port is tagged. Whereas, if the match is just on a switch, then all the hosts connected to that switch are tagged. Tag-value can be associated with multiple such match statements, thus tagging hosts that match atleast one of the match statements.
+
+The 'no' variation of the match command will remove the match statement and untag all the hosts that were tagged as a result of match on that match statement.
diff --git a/cli/documentation/en_US/tag/match-example b/cli/documentation/en_US/tag/match-example
new file mode 100755
index 0000000..9fc0647
--- /dev/null
+++ b/cli/documentation/en_US/tag/match-example
@@ -0,0 +1,11 @@
+localhost(config)# tag tenant.name=coke
+localhost(config-tag)#
+localhost(config-tag)# match mac 00:00:00:00:00:01
+localhost(config-tag)#
+localhost(config-tag)# match vlan 2
+localhost(config-tag)# match switch 00:00:00:00:00:00:00:01
+localhost(config-tag)# match switch 00:00:00:00:00:00:00:01 eth1
+localhost(config-tag)# match mac 00:00:00:00:00:02 vlan 3
+localhost(config-tag)# match mac 00:00:00:00:00:03 switch 00:00:00:00:00:00:00:02
+localhost(config-tag)# match mac 00:00:00:00:00:03 switch 00:00:00:00:00:00:00:02 eth2
+localhost(config-tag)# match mac 00:00:00:00:00:03 vlan 3 switch 00:00:00:00:00:00:00:02 eth3
\ No newline at end of file
diff --git a/cli/documentation/en_US/tag/show-tag b/cli/documentation/en_US/tag/show-tag
new file mode 100755
index 0000000..d6568cc
--- /dev/null
+++ b/cli/documentation/en_US/tag/show-tag
@@ -0,0 +1 @@
+The show tag command lists all the tags configured. Each tag's namespace, name and value are shown. Also shown is whether this tag is persisted or not, meaning, whether this tag was created internally by the controller itself or the user created this.
diff --git a/cli/documentation/en_US/tag/tag b/cli/documentation/en_US/tag/tag
new file mode 100755
index 0000000..e45f9e3
--- /dev/null
+++ b/cli/documentation/en_US/tag/tag
@@ -0,0 +1,3 @@
+The tag command enters the tag submode for a single tag-value. The tag-value is composed of a tag and the value assigned to it, tag itself is composed of namespace that the tag belongs to and the tag's name itself. The syntax of tag-value - <namespace>.<name>=<value>. Example of tag-value is - "tenant.name=coke".  Within the tag submode, this tag-value can be associated with hosts through match command.
+
+The 'no' variation of the tag command will remove the tag-value and untag the hosts. 
diff --git a/cli/documentation/en_US/tag/tag-example b/cli/documentation/en_US/tag/tag-example
new file mode 100755
index 0000000..b0ea69d
--- /dev/null
+++ b/cli/documentation/en_US/tag/tag-example
@@ -0,0 +1,5 @@
+tag example-com.role=primary
+  Define a tag association, and enter the tag configuration sub-mode
+
+no tag example-com.role=primary
+  Remove a tag definition
diff --git a/cli/documentation/en_US/tech-support/show-tech-support-config b/cli/documentation/en_US/tech-support/show-tech-support-config
new file mode 100755
index 0000000..c2bb955
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/show-tech-support-config
@@ -0,0 +1 @@
+This commands shows customized commands shown in 'show tech-support' output.
\ No newline at end of file
diff --git a/cli/documentation/en_US/tech-support/show-tech-support-config-example b/cli/documentation/en_US/tech-support/show-tech-support-config-example
new file mode 100755
index 0000000..e2bde58
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/show-tech-support-config-example
@@ -0,0 +1,6 @@
+Meis-MacBook-Pro.local(config)# tech-support-config shell date
+Meis-MacBook-Pro.local(config)# show tech-support-config
+Type of command Command name
+---------------|------------
+shell           date
+Meis-MacBook-Pro.local(config)# 
\ No newline at end of file
diff --git a/cli/documentation/en_US/tech-support/tech-support-config b/cli/documentation/en_US/tech-support/tech-support-config
new file mode 100755
index 0000000..e69a2c0
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/tech-support-config
@@ -0,0 +1 @@
+This command sets a specific shell or cli command to be included in the show tech-support output. A 'no' prepended to this command will delete the cli command from the show tech-support output.
diff --git a/cli/documentation/en_US/tech-support/tech-support-config-cli b/cli/documentation/en_US/tech-support/tech-support-config-cli
new file mode 100755
index 0000000..66f7713
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/tech-support-config-cli
@@ -0,0 +1,2 @@
+Include the following as a Cli command in the tech-support output
+
diff --git a/cli/documentation/en_US/tech-support/tech-support-config-example b/cli/documentation/en_US/tech-support/tech-support-config-example
new file mode 100755
index 0000000..da1e61a
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/tech-support-config-example
@@ -0,0 +1,2 @@
+localhost(config)# tech-support-config shell date
+localhost(config)# 
\ No newline at end of file
diff --git a/cli/documentation/en_US/tech-support/tech-support-config-shell b/cli/documentation/en_US/tech-support/tech-support-config-shell
new file mode 100755
index 0000000..eaaea6f
--- /dev/null
+++ b/cli/documentation/en_US/tech-support/tech-support-config-shell
@@ -0,0 +1 @@
+Including the following as a shell command in the tech-support output
diff --git a/cli/documentation/en_US/test/test b/cli/documentation/en_US/test/test
new file mode 100755
index 0000000..68a7e3e
--- /dev/null
+++ b/cli/documentation/en_US/test/test
@@ -0,0 +1,2 @@
+The test command provides various tools to
+help perform root-cause analysis.
diff --git a/cli/documentation/en_US/test/test-packet-in b/cli/documentation/en_US/test/test-packet-in
new file mode 100755
index 0000000..5a70205
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in
@@ -0,0 +1,6 @@
+The 'packet-in' test type provides a tools to
+determine whether a source and dest can transmit
+a frame.   A frame is injected as if it originated
+from the indicated port on a source switch, and 
+is directed to a destination switch and port.  When
+it arrives, the command announces the path traversed.
diff --git a/cli/documentation/en_US/test/test-packet-in-dpid b/cli/documentation/en_US/test/test-packet-in-dpid
new file mode 100755
index 0000000..201a460
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-dpid
@@ -0,0 +1,2 @@
+This parameter identifies a switch by DPID, as part of the description of 
+the attachment point
diff --git a/cli/documentation/en_US/test/test-packet-in-example b/cli/documentation/en_US/test/test-packet-in-example
new file mode 100755
index 0000000..540aeee
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-example
@@ -0,0 +1,29 @@
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02
+  Test packet injection between two hosts
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 src-switch 00:00:00:00:00:00:00:00 32
+  Run the packet-in test, specifying a specific switch physical port
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... vlan 1001
+  Run the packet-in test, tagging packets with a specific VLAN
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... priority 2
+  Run the packet-in test, tagging packets with a specific ether priority
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... src-ip-address 1.2.3.4
+  Run the packet-in test, tagging packets with a specific source IP address
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... dst-ip-address 1.2.3.4
+  Run the packet-in test, tagging packets with a specific destination IP address
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... protocol 6
+  Run the packet-in test, tagging packets with a specific IP protocol number (TCP)
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... tos 7
+  Run the packet-in test, tagging packets with a specific set of TOS bits
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... src-port 80
+  Run the packet-in test, tagging packets with a specific source port number
+
+test packet-in src-host 00:00:00:00:00:01 dst-host 00:00:00:00:00:02 ... dst-port 443
+  Run the packet-in test, tagging packets with a specific destination port number
diff --git a/cli/documentation/en_US/test/test-packet-in-if b/cli/documentation/en_US/test/test-packet-in-if
new file mode 100755
index 0000000..a4706cb
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-if
@@ -0,0 +1,2 @@
+This parameter identifies a physical switch port number, as part of
+the description of the attachment point
diff --git a/cli/documentation/en_US/test/test-packet-in-ip b/cli/documentation/en_US/test/test-packet-in-ip
new file mode 100755
index 0000000..708175a
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-ip
@@ -0,0 +1 @@
+IP address for injected packets
diff --git a/cli/documentation/en_US/test/test-packet-in-mac b/cli/documentation/en_US/test/test-packet-in-mac
new file mode 100755
index 0000000..e6e6b95
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-mac
@@ -0,0 +1,2 @@
+This parameter identifies a host, used to identify an attachment point.
+The parameter's value is a mac address.
diff --git a/cli/documentation/en_US/test/test-packet-in-port b/cli/documentation/en_US/test/test-packet-in-port
new file mode 100755
index 0000000..7cd1078
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-port
@@ -0,0 +1 @@
+Port number for injected packets
\ No newline at end of file
diff --git a/cli/documentation/en_US/test/test-packet-in-priority b/cli/documentation/en_US/test/test-packet-in-priority
new file mode 100755
index 0000000..233c0b4
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-priority
@@ -0,0 +1 @@
+Ether priority for injected packets
diff --git a/cli/documentation/en_US/test/test-packet-in-proto b/cli/documentation/en_US/test/test-packet-in-proto
new file mode 100755
index 0000000..57c68fc
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-proto
@@ -0,0 +1 @@
+Protocol number for injected packets
\ No newline at end of file
diff --git a/cli/documentation/en_US/test/test-packet-in-tos b/cli/documentation/en_US/test/test-packet-in-tos
new file mode 100755
index 0000000..82272de
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-tos
@@ -0,0 +1 @@
+TOS flags for injected packets
\ No newline at end of file
diff --git a/cli/documentation/en_US/test/test-packet-in-vlan b/cli/documentation/en_US/test/test-packet-in-vlan
new file mode 100755
index 0000000..6378f36
--- /dev/null
+++ b/cli/documentation/en_US/test/test-packet-in-vlan
@@ -0,0 +1 @@
+VLAN ID for tagging packets
diff --git a/cli/documentation/en_US/test/test-path b/cli/documentation/en_US/test/test-path
new file mode 100755
index 0000000..0210239
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path
@@ -0,0 +1,9 @@
+The 'test path' command requests the controller to compute
+the path between interfaces on switches, return, and display
+the result.  No attempt it made to validate the connectivity
+between the two endpoints.
+
+To compute the path, and source and a destination needs to
+be provided.   These can be described in a variety of different
+forms:  hosts mac addresses,  ip addresses, or switch and interface
+names.
diff --git a/cli/documentation/en_US/test/test-path-example b/cli/documentation/en_US/test/test-path-example
new file mode 100755
index 0000000..95bbe5a
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path-example
@@ -0,0 +1,9 @@
+ node1> test path src-ip 10.0.0.1 dst-ip 10.0.0.3
+ # Switch                  IF      Rx Bytes Rx Pkts Rx Errs Tx Bytes Tx Pkts Tx Errs
+ -|-----------------------|-------|--------|-------|-------|--------|-------|-------
+ 1 00:00:00:00:00:00:00:06 s6-eth1 860      11      0       4762     74      0      
+ 2 00:00:00:00:00:00:00:06 s6-eth3 2208     35      0       2208     35      0      
+ 3 00:00:00:00:00:00:00:05 s5-eth1 2208     35      0       2208     35      0      
+ 4 00:00:00:00:00:00:00:05 s5-eth2 2208     35      0       2391     38      0      
+ 5 00:00:00:00:00:00:00:07 s7-eth3 2419     38      0       2208     35      0      
+ 6 00:00:00:00:00:00:00:07 s7-eth1 860      11      0       4684     73      0
diff --git a/cli/documentation/en_US/test/test-path-host b/cli/documentation/en_US/test/test-path-host
new file mode 100755
index 0000000..52e45dc
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path-host
@@ -0,0 +1,2 @@
+This parameter identifies the host, used to identify an attachment point.
+The parameter's value is a mac address.
diff --git a/cli/documentation/en_US/test/test-path-if b/cli/documentation/en_US/test/test-path-if
new file mode 100755
index 0000000..d5b2fe7
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path-if
@@ -0,0 +1,2 @@
+This parameter identifies a specific switch's interface (physical port), to
+complete the attachment point description.
diff --git a/cli/documentation/en_US/test/test-path-ip b/cli/documentation/en_US/test/test-path-ip
new file mode 100755
index 0000000..d3b2b15
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path-ip
@@ -0,0 +1 @@
+This parameter identies an ip address used to determine an attachment point
diff --git a/cli/documentation/en_US/test/test-path-switch b/cli/documentation/en_US/test/test-path-switch
new file mode 100755
index 0000000..04d0887
--- /dev/null
+++ b/cli/documentation/en_US/test/test-path-switch
@@ -0,0 +1,2 @@
+This parameter identifies a switch via DPID, as part of the description of 
+the attachment point
diff --git a/cli/documentation/en_US/topology/topology b/cli/documentation/en_US/topology/topology
new file mode 100755
index 0000000..caa31c4
--- /dev/null
+++ b/cli/documentation/en_US/topology/topology
@@ -0,0 +1,2 @@
+The topology command configures attributes associated with
+the toplogy management of the controller.
diff --git a/cli/documentation/en_US/topology/topology-example b/cli/documentation/en_US/topology/topology-example
new file mode 100755
index 0000000..4b3ec8b
--- /dev/null
+++ b/cli/documentation/en_US/topology/topology-example
@@ -0,0 +1,5 @@
+    topology autoportfast
+        Enable autoportfast and suppress link discovery on fast ports.
+
+    no topology autoportfast
+        Do not suppress link discovery on fast ports.
diff --git a/cli/documentation/en_US/traceroute/traceroute b/cli/documentation/en_US/traceroute/traceroute
new file mode 100755
index 0000000..1d98108
--- /dev/null
+++ b/cli/documentation/en_US/traceroute/traceroute
@@ -0,0 +1,3 @@
+Compute the L3 path between the local host and the
+destination by using increasing TTL's, and reporting
+back ICMP timed-out messages
diff --git a/cli/documentation/en_US/traceroute/traceroute-example b/cli/documentation/en_US/traceroute/traceroute-example
new file mode 100755
index 0000000..77fe87f
--- /dev/null
+++ b/cli/documentation/en_US/traceroute/traceroute-example
@@ -0,0 +1,6 @@
+traceroute 1.2.3.4
+  Compute the L3 path the host with IP address 1.2.3.4
+
+traceroute example.com
+  Compute the L3 path the host with a specific hostname
+
diff --git a/cli/documentation/en_US/types/cidr-range b/cli/documentation/en_US/types/cidr-range
new file mode 100755
index 0000000..2ba2ec8
--- /dev/null
+++ b/cli/documentation/en_US/types/cidr-range
@@ -0,0 +1,7 @@
+A cidr-range is an ip-address followed by a slash '/',
+the followed by a decimal number in the range [0..31]
+The cidr-range identifes both a single ip address, and
+a range of ip-address, the trailing number describes
+a netmask, the number indicates the length of 1-bits
+within the mask.  Examples:  192.168.1.1/25, and
+10.0.0.65/24
diff --git a/cli/documentation/en_US/types/domain-name b/cli/documentation/en_US/types/domain-name
new file mode 100755
index 0000000..9b5bc72
--- /dev/null
+++ b/cli/documentation/en_US/types/domain-name
@@ -0,0 +1,2 @@
+A domain-name is a collection of dot (.) separated strings
+used as a more human readable replacement for  an ip-address.
diff --git a/cli/documentation/en_US/types/dpid b/cli/documentation/en_US/types/dpid
new file mode 100755
index 0000000..c1ceb80
--- /dev/null
+++ b/cli/documentation/en_US/types/dpid
@@ -0,0 +1,5 @@
+Dpid's uniquely identify a switch, a dpid is an eight
+hex byte string which the switch announces to the controller,
+In most situations a switch-alias can be used as a replacement
+token for the dpid.   Switch-alias are managed in the switch
+submode within config submode.
diff --git a/cli/documentation/en_US/types/hex-or-decimal-integer b/cli/documentation/en_US/types/hex-or-decimal-integer
new file mode 100755
index 0000000..902cac8
--- /dev/null
+++ b/cli/documentation/en_US/types/hex-or-decimal-integer
@@ -0,0 +1,3 @@
+This is an integer value which can be expressed either
+in decimal or hex.  Hex values must be prefixed by 0x.
+Examples: 10, 0xabc, 0
diff --git a/cli/documentation/en_US/types/host b/cli/documentation/en_US/types/host
new file mode 100755
index 0000000..bc401d3
--- /dev/null
+++ b/cli/documentation/en_US/types/host
@@ -0,0 +1,4 @@
+Hosts are identified by the use of either a mac-address
+(six hex bytes separated by colons), or a host alias.
+Host alias can be created in the host submode under config,
+bu using the host-alias command.
diff --git a/cli/documentation/en_US/types/identifier b/cli/documentation/en_US/types/identifier
new file mode 100755
index 0000000..74cdb15
--- /dev/null
+++ b/cli/documentation/en_US/types/identifier
@@ -0,0 +1,3 @@
+An Identifier is a strings starting with an alphabetic
+character, followed by a number of alphanumeric characters,
+along with '_' and '-'.  Its used to name some entity.
diff --git a/cli/documentation/en_US/types/ip-address b/cli/documentation/en_US/types/ip-address
new file mode 100755
index 0000000..be1c1c1
--- /dev/null
+++ b/cli/documentation/en_US/types/ip-address
@@ -0,0 +1,4 @@
+An ip-address is four deciman numbers separated by dots (.).
+Each of the deciman numbers can range between 0-255.  
+Ip-address are used to idnetify an ip protocol source
+or destination.  Examples are 192.168.2.129 and 10.11.12.13
diff --git a/cli/documentation/en_US/types/ip-address-or-domain-name b/cli/documentation/en_US/types/ip-address-or-domain-name
new file mode 100755
index 0000000..897f951
--- /dev/null
+++ b/cli/documentation/en_US/types/ip-address-or-domain-name
@@ -0,0 +1,3 @@
+An ip-address or a fully qualified domain name may be used here.
+The ip-address is a dotted quad, while the fully qualiaified domain
+name is a domain name which will resolve to an ip-address
diff --git a/cli/documentation/en_US/types/mac-address b/cli/documentation/en_US/types/mac-address
new file mode 100755
index 0000000..d73ef3b
--- /dev/null
+++ b/cli/documentation/en_US/types/mac-address
@@ -0,0 +1,3 @@
+A mac-address, six hex digits separated by colons ':', used to
+identify a unique entity on an ethernet network.   
+Examples: 00:50:56:ad:fe:bb, 00:1b:a9:3f:2e:6e 
diff --git a/cli/documentation/en_US/types/netmask b/cli/documentation/en_US/types/netmask
new file mode 100755
index 0000000..0d102ac
--- /dev/null
+++ b/cli/documentation/en_US/types/netmask
@@ -0,0 +1,6 @@
+A netmask, associated with an ip-address, used to identify
+an ip address ranges.   An ip-address is within the range
+if the ip-address, binary-and-ed with the mask, matches the
+associated ip-address (which is also binary-and-ed with the
+mask).  Netmasks must be a single group of 1-bits, starting
+with a 1-bit.   Examples are 255.255.255.0 and 255.255.255.128
diff --git a/cli/documentation/en_US/types/obj-type b/cli/documentation/en_US/types/obj-type
new file mode 100755
index 0000000..4b580c0
--- /dev/null
+++ b/cli/documentation/en_US/types/obj-type
@@ -0,0 +1 @@
+An existing object for the associated command
diff --git a/cli/documentation/en_US/types/resolvable-ip-address b/cli/documentation/en_US/types/resolvable-ip-address
new file mode 100755
index 0000000..b296594
--- /dev/null
+++ b/cli/documentation/en_US/types/resolvable-ip-address
@@ -0,0 +1,4 @@
+A dotted-quat ip address (192.168.2.129), or a domain name 
+(localhost, example.com), which can be resolved may be
+included here.  Additionally, switch alias or dpids may also be included 
+if they're currently active (an ip address is associated with the switch)
diff --git a/cli/documentation/en_US/types/string b/cli/documentation/en_US/types/string
new file mode 100755
index 0000000..6caba2f
--- /dev/null
+++ b/cli/documentation/en_US/types/string
@@ -0,0 +1,5 @@
+A collection of characters can be used here, if any
+special characters, space or quotes are included,
+the string must the enclosed in either single (') or
+double quotes (").   Strings length's are bound
+depending on the specific item.
diff --git a/cli/documentation/en_US/vns/active b/cli/documentation/en_US/vns/active
new file mode 100755
index 0000000..18f270a
--- /dev/null
+++ b/cli/documentation/en_US/vns/active
@@ -0,0 +1,2 @@
+Set the VNS active. If a VNS is inactive the controller will not use it
+or its rules.
diff --git a/cli/documentation/en_US/vns/active-example b/cli/documentation/en_US/vns/active-example
new file mode 100755
index 0000000..ae5ed4b
--- /dev/null
+++ b/cli/documentation/en_US/vns/active-example
@@ -0,0 +1,5 @@
+active
+  Activate this VNS instance
+
+no active
+  Deactivate this VNS instance
diff --git a/cli/documentation/en_US/vns/apr-mode-value-drop-if-unknown b/cli/documentation/en_US/vns/apr-mode-value-drop-if-unknown
new file mode 100755
index 0000000..c75e301
--- /dev/null
+++ b/cli/documentation/en_US/vns/apr-mode-value-drop-if-unknown
@@ -0,0 +1 @@
+Drop ARP packets if the destination is unknown.
diff --git a/cli/documentation/en_US/vns/arp-mode b/cli/documentation/en_US/vns/arp-mode
new file mode 100755
index 0000000..55efb68
--- /dev/null
+++ b/cli/documentation/en_US/vns/arp-mode
@@ -0,0 +1 @@
+Configure the ARP behavior for this VNS instance.
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/arp-mode-example b/cli/documentation/en_US/vns/arp-mode-example
new file mode 100755
index 0000000..0a8abfb
--- /dev/null
+++ b/cli/documentation/en_US/vns/arp-mode-example
@@ -0,0 +1,8 @@
+arp-mode always-flood
+  Do not manage ARP packets, just flood them on all interfaces
+
+arp-mode flood-if-unknown
+  Only flood ARP packets for unknown destinations
+
+arp-mode drop-if-unknown
+  Drop ARP packets from unknown destinations
diff --git a/cli/documentation/en_US/vns/arp-mode-value-always-flood b/cli/documentation/en_US/vns/arp-mode-value-always-flood
new file mode 100755
index 0000000..befa374
--- /dev/null
+++ b/cli/documentation/en_US/vns/arp-mode-value-always-flood
@@ -0,0 +1,2 @@
+Always flood ARP packets on all switch interfaces. No active managment
+of ARP, will leak packets across VNS.
diff --git a/cli/documentation/en_US/vns/arp-mode-value-drop-if-unknown b/cli/documentation/en_US/vns/arp-mode-value-drop-if-unknown
new file mode 100755
index 0000000..f32eeb0
--- /dev/null
+++ b/cli/documentation/en_US/vns/arp-mode-value-drop-if-unknown
@@ -0,0 +1 @@
+Drop ARP packets if the host is unknown
diff --git a/cli/documentation/en_US/vns/arp-mode-value-flood-if-unknown b/cli/documentation/en_US/vns/arp-mode-value-flood-if-unknown
new file mode 100755
index 0000000..8255540
--- /dev/null
+++ b/cli/documentation/en_US/vns/arp-mode-value-flood-if-unknown
@@ -0,0 +1,2 @@
+Flood ARP packets if the destination is unknown. Might leak packets
+across VNS.
diff --git a/cli/documentation/en_US/vns/broadcast b/cli/documentation/en_US/vns/broadcast
new file mode 100755
index 0000000..82dc399
--- /dev/null
+++ b/cli/documentation/en_US/vns/broadcast
@@ -0,0 +1 @@
+Configure broadcast characteristics of the VNS instance.
diff --git a/cli/documentation/en_US/vns/broadcast-example b/cli/documentation/en_US/vns/broadcast-example
new file mode 100755
index 0000000..51e4036
--- /dev/null
+++ b/cli/documentation/en_US/vns/broadcast-example
@@ -0,0 +1,9 @@
+broadcast always-flood
+  Miscellaneious broadcast packets are sent on all interfaces
+
+broadcast forward-to-known
+  Miscellaneous broadcast packets are forwarded only to known hosts
+
+broadcast drop
+  Miscellaneous broadcast packets are dropped
+
diff --git a/cli/documentation/en_US/vns/broadcast-value-always-flood b/cli/documentation/en_US/vns/broadcast-value-always-flood
new file mode 100755
index 0000000..1f23c3e
--- /dev/null
+++ b/cli/documentation/en_US/vns/broadcast-value-always-flood
@@ -0,0 +1,2 @@
+Always flood all non-ARP, non-DHCP broadcast packets on all switch
+interfaces. Will leak packets across VNS.
diff --git a/cli/documentation/en_US/vns/broadcast-value-drop b/cli/documentation/en_US/vns/broadcast-value-drop
new file mode 100755
index 0000000..f34b38e
--- /dev/null
+++ b/cli/documentation/en_US/vns/broadcast-value-drop
@@ -0,0 +1 @@
+Drop all non-ARP, non-DHCP broadcast packets. 
diff --git a/cli/documentation/en_US/vns/broadcast-value-forward-to-known b/cli/documentation/en_US/vns/broadcast-value-forward-to-known
new file mode 100755
index 0000000..38203b5
--- /dev/null
+++ b/cli/documentation/en_US/vns/broadcast-value-forward-to-known
@@ -0,0 +1,2 @@
+Forward all non-ARP, non-DHCP broadcast packets to all known hosts in
+this VNS.
diff --git a/cli/documentation/en_US/vns/description b/cli/documentation/en_US/vns/description
new file mode 100755
index 0000000..dc11e31
--- /dev/null
+++ b/cli/documentation/en_US/vns/description
@@ -0,0 +1 @@
+Within a VNS definition sub-mode, declare a friendly descriptor for the VNS instance.
diff --git a/cli/documentation/en_US/vns/description-example b/cli/documentation/en_US/vns/description-example
new file mode 100755
index 0000000..2de14aa
--- /dev/null
+++ b/cli/documentation/en_US/vns/description-example
@@ -0,0 +1,2 @@
+description "this is my first VNS instance"
+  Add a textual description to a VNS
diff --git a/cli/documentation/en_US/vns/dhcp-ip b/cli/documentation/en_US/vns/dhcp-ip
new file mode 100755
index 0000000..263f723
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-ip
@@ -0,0 +1 @@
+Specify the IP address of the local DHCP server or local DHCP relay. Used by dhcp-mode 'static'.
diff --git a/cli/documentation/en_US/vns/dhcp-ip-example b/cli/documentation/en_US/vns/dhcp-ip-example
new file mode 100755
index 0000000..e4297a1
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-ip-example
@@ -0,0 +1,2 @@
+dhcp-ip 1.2.3.4
+  In static DHCP mode, configure the local DHCP server or relay address 
diff --git a/cli/documentation/en_US/vns/dhcp-mode b/cli/documentation/en_US/vns/dhcp-mode
new file mode 100755
index 0000000..c7d85c5
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-mode
@@ -0,0 +1 @@
+Configure VNS handling of DHCP broadcast packets.
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/dhcp-mode-example b/cli/documentation/en_US/vns/dhcp-mode-example
new file mode 100755
index 0000000..e0dc3d5
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-mode-example
@@ -0,0 +1,8 @@
+dhcp-mode static
+  VNS will forward DHCP traffic to a single known host
+
+dhcp-mode flood-if-unknown
+  Flood DHCP packets if the server is not known
+
+dhcp-mode always-flood
+  Do not manage DHCP traffice
diff --git a/cli/documentation/en_US/vns/dhcp-value-always-flood b/cli/documentation/en_US/vns/dhcp-value-always-flood
new file mode 100755
index 0000000..25c3be6
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-value-always-flood
@@ -0,0 +1 @@
+Always flood all DHCP packets. Will leak packets across VNS.
diff --git a/cli/documentation/en_US/vns/dhcp-value-flood-if-unknown b/cli/documentation/en_US/vns/dhcp-value-flood-if-unknown
new file mode 100755
index 0000000..d887ebc
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-value-flood-if-unknown
@@ -0,0 +1,2 @@
+Flood DHCP packets if the DHCP server location is unknown. DHCP server
+location will be discovered.
diff --git a/cli/documentation/en_US/vns/dhcp-value-static b/cli/documentation/en_US/vns/dhcp-value-static
new file mode 100755
index 0000000..27ee111
--- /dev/null
+++ b/cli/documentation/en_US/vns/dhcp-value-static
@@ -0,0 +1 @@
+Forward DHCP packets to the configured local DHCP server or local DHCP relay.
diff --git a/cli/documentation/en_US/vns/gateway-pool b/cli/documentation/en_US/vns/gateway-pool
new file mode 100755
index 0000000..02c5aa9
--- /dev/null
+++ b/cli/documentation/en_US/vns/gateway-pool
@@ -0,0 +1 @@
+gateway pool name
diff --git a/cli/documentation/en_US/vns/interface-router-connected b/cli/documentation/en_US/vns/interface-router-connected
new file mode 100755
index 0000000..9d58a14
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-router-connected
@@ -0,0 +1 @@
+the 'tenant' keyword specifies the named virtual router interface connects to another tenant virtual router.
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/interface-rule b/cli/documentation/en_US/vns/interface-rule
new file mode 100755
index 0000000..8e3ebcb
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule
@@ -0,0 +1,2 @@
+Set a VNS interface rule and enter submode. Devices are
+assigned into VNS based on interface-rules. 
diff --git a/cli/documentation/en_US/vns/interface-rule-active b/cli/documentation/en_US/vns/interface-rule-active
new file mode 100755
index 0000000..7c7f594
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-active
@@ -0,0 +1 @@
+Mark the rule as active. Only active rules will be matched.
diff --git a/cli/documentation/en_US/vns/interface-rule-active-example b/cli/documentation/en_US/vns/interface-rule-active-example
new file mode 100755
index 0000000..03f89c0
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-active-example
@@ -0,0 +1,5 @@
+active
+  Mark this interface rule as active
+
+no active
+  Mark this interface rule as inactive
diff --git a/cli/documentation/en_US/vns/interface-rule-allow-multiple b/cli/documentation/en_US/vns/interface-rule-allow-multiple
new file mode 100755
index 0000000..31557a9
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-allow-multiple
@@ -0,0 +1,2 @@
+If allow-multiple is set devices matching this rule are allowed to be in
+multiple VNS at the same time.
diff --git a/cli/documentation/en_US/vns/interface-rule-allow-multiple-example b/cli/documentation/en_US/vns/interface-rule-allow-multiple-example
new file mode 100755
index 0000000..bdc4ab0
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-allow-multiple-example
@@ -0,0 +1,6 @@
+allow-multiple
+  Devices matching this rule can be in more than one VNS
+
+no allow-multiple
+  Devices matching this rule can be in a single VNS
+
diff --git a/cli/documentation/en_US/vns/interface-rule-description b/cli/documentation/en_US/vns/interface-rule-description
new file mode 100755
index 0000000..9e5c9eb
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-description
@@ -0,0 +1 @@
+A user provided textual description for this interface-rule.
diff --git a/cli/documentation/en_US/vns/interface-rule-description-example b/cli/documentation/en_US/vns/interface-rule-description-example
new file mode 100755
index 0000000..38bc308
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-description-example
@@ -0,0 +1,2 @@
+description "This is my first VNS interface rule"
+  Describe a VNS interface rule
diff --git a/cli/documentation/en_US/vns/interface-rule-example b/cli/documentation/en_US/vns/interface-rule-example
new file mode 100755
index 0000000..01ff26b
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-example
@@ -0,0 +1,5 @@
+interface-rule my-rule-1
+  Define a new interface rule, and enter its configuration sub-mode
+
+no interface-rule my-rule-1
+  Delete an interface rule by name
diff --git a/cli/documentation/en_US/vns/interface-rule-match-ip-subnet b/cli/documentation/en_US/vns/interface-rule-match-ip-subnet
new file mode 100755
index 0000000..c76d8c7
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-ip-subnet
@@ -0,0 +1 @@
+Associate an IP address or IP subnet with interface-rule. 
diff --git a/cli/documentation/en_US/vns/interface-rule-match-ip-subnet-example b/cli/documentation/en_US/vns/interface-rule-match-ip-subnet-example
new file mode 100755
index 0000000..3266118
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-ip-subnet-example
@@ -0,0 +1,2 @@
+match ip-subnet 10.10.10.10
+match ip-subnet 10.42.10.0/24
diff --git a/cli/documentation/en_US/vns/interface-rule-match-mac b/cli/documentation/en_US/vns/interface-rule-match-mac
new file mode 100755
index 0000000..419c71e
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-mac
@@ -0,0 +1 @@
+Associate MAC address (host) with interface-rule. 
diff --git a/cli/documentation/en_US/vns/interface-rule-match-mac-example b/cli/documentation/en_US/vns/interface-rule-match-mac-example
new file mode 100755
index 0000000..25d6f59
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-mac-example
@@ -0,0 +1,2 @@
+match mac 00:00:00:00:00:01
+  Match a specific MAC address
diff --git a/cli/documentation/en_US/vns/interface-rule-match-switch b/cli/documentation/en_US/vns/interface-rule-match-switch
new file mode 100755
index 0000000..1a0f009
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-switch
@@ -0,0 +1,2 @@
+Associate a switch or set of switch interfaces with this interface-rule.
+Hosts present on the specified switch/interfaces will be matched. 
diff --git a/cli/documentation/en_US/vns/interface-rule-match-switch-example b/cli/documentation/en_US/vns/interface-rule-match-switch-example
new file mode 100755
index 0000000..1576f13
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-switch-example
@@ -0,0 +1,9 @@
+match switch 00:00:11:22:33:44:55:66
+    Matches all interfaces on the switch with this DPID.
+match switch 00:00:11:22:33:44:55:66 Ethernet1
+    Matches interface Ethernet1 on the specified switch.
+match switch 00:00:11:22:33:44:55:66 Ethernet1,Ethernet5-10,port2
+    Matches interfaces Ethernet1, Ethernet5, Ethernet6, ... Ethernet10,
+	and port2 on the specified switch.
+match switch ToR-1-1 
+    Matches the switch with the alias 'ToR-1-1'
diff --git a/cli/documentation/en_US/vns/interface-rule-match-tag b/cli/documentation/en_US/vns/interface-rule-match-tag
new file mode 100755
index 0000000..08e6496
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-tag
@@ -0,0 +1,2 @@
+Associate a tag or list of tags with this interface-rule. If a list of
+tags is given *all* tags need to match.
diff --git a/cli/documentation/en_US/vns/interface-rule-match-tag-example b/cli/documentation/en_US/vns/interface-rule-match-tag-example
new file mode 100755
index 0000000..7e397f8
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-tag-example
@@ -0,0 +1,4 @@
+match tags org.sdnplatform.tenant=CustomerA
+    Matches devices that match the given tag.
+match tags org.sdnplatform.tenant=CustomerA,com.example.type=router
+    Matches devices that match *all* of the given tags.
diff --git a/cli/documentation/en_US/vns/interface-rule-match-vlans b/cli/documentation/en_US/vns/interface-rule-match-vlans
new file mode 100755
index 0000000..cea2544
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-vlans
@@ -0,0 +1 @@
+Associate a vlan (or list or range) with this interface rule.
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/interface-rule-match-vlans-example b/cli/documentation/en_US/vns/interface-rule-match-vlans-example
new file mode 100755
index 0000000..bcbacce
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-match-vlans-example
@@ -0,0 +1,2 @@
+match vlans 42
+  Match packets in VLAN 42
diff --git a/cli/documentation/en_US/vns/interface-rule-priority b/cli/documentation/en_US/vns/interface-rule-priority
new file mode 100755
index 0000000..505dffd
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-priority
@@ -0,0 +1,3 @@
+The priority of this interface-rule. Higher numeric values represent
+higher priority. The highest priority interface-rule that matches a
+given packet will be choosen. 
diff --git a/cli/documentation/en_US/vns/interface-rule-priority-example b/cli/documentation/en_US/vns/interface-rule-priority-example
new file mode 100755
index 0000000..a8be5f0
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-rule-priority-example
@@ -0,0 +1,2 @@
+priority 100
+  Assign a priority to this interface rule
diff --git a/cli/documentation/en_US/vns/interface-vns-connected b/cli/documentation/en_US/vns/interface-vns-connected
new file mode 100755
index 0000000..582a9b4
--- /dev/null
+++ b/cli/documentation/en_US/vns/interface-vns-connected
@@ -0,0 +1 @@
+the 'vns' keyword specifies the named virtual router interface connects to a VNS within the same tenant scope.
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/match b/cli/documentation/en_US/vns/match
new file mode 100755
index 0000000..bcabc8c
--- /dev/null
+++ b/cli/documentation/en_US/vns/match
@@ -0,0 +1,2 @@
+Configure a match for this interface rule. If multiple matches are
+configured they will be logically AND'ed.
diff --git a/cli/documentation/en_US/vns/origin b/cli/documentation/en_US/vns/origin
new file mode 100755
index 0000000..4280742
--- /dev/null
+++ b/cli/documentation/en_US/vns/origin
@@ -0,0 +1 @@
+Describe the origin of this VNS instance
diff --git a/cli/documentation/en_US/vns/origin-example b/cli/documentation/en_US/vns/origin-example
new file mode 100755
index 0000000..5a368f6
--- /dev/null
+++ b/cli/documentation/en_US/vns/origin-example
@@ -0,0 +1,2 @@
+origin rest
+  Note that this VNS instance was configured via REST
diff --git a/cli/documentation/en_US/vns/outgoing-interface b/cli/documentation/en_US/vns/outgoing-interface
new file mode 100755
index 0000000..71bc543
--- /dev/null
+++ b/cli/documentation/en_US/vns/outgoing-interface
@@ -0,0 +1 @@
+outgoing interface name
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/priority b/cli/documentation/en_US/vns/priority
new file mode 100755
index 0000000..6fe279b
--- /dev/null
+++ b/cli/documentation/en_US/vns/priority
@@ -0,0 +1 @@
+Assign a priority to this VNS instance
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/priority-example b/cli/documentation/en_US/vns/priority-example
new file mode 100755
index 0000000..b2a505b
--- /dev/null
+++ b/cli/documentation/en_US/vns/priority-example
@@ -0,0 +1,2 @@
+priority 100
+  Within a vns definition, assign a specific priority to this instance
diff --git a/cli/documentation/en_US/vns/show-id b/cli/documentation/en_US/vns/show-id
new file mode 100755
index 0000000..16ebc39
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-id
@@ -0,0 +1,3 @@
+This 'show vns <id>' command variation is used to identify a specific vns or VNSs defined under current tenant mode.
+This 'show vns all'  command variation is used to display all VNSs defined across all tenants.
+Being backward compatible, 'show vns' command under non config-tenant mode is also accepted and displays the VNSs for default tenant only.
diff --git a/cli/documentation/en_US/vns/show-id-access-lists b/cli/documentation/en_US/vns/show-id-access-lists
new file mode 100755
index 0000000..f1d513c
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-id-access-lists
@@ -0,0 +1,5 @@
+The 'access-list' keyword requests display of the 
+configured access-lists associated with the vns.
+The output includes not only the access-list, but
+a brief descripion of the acl rules associated with
+the access-list.
diff --git a/cli/documentation/en_US/vns/show-id-flow b/cli/documentation/en_US/vns/show-id-flow
new file mode 100755
index 0000000..e5baa76
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-id-flow
@@ -0,0 +1,3 @@
+The 'flow' keyword requests the display of all openflow
+flow-match entries inserted into various switches to
+implement the vns isolation.
diff --git a/cli/documentation/en_US/vns/show-id-interface-rules b/cli/documentation/en_US/vns/show-id-interface-rules
new file mode 100755
index 0000000..2c8c6b8
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-id-interface-rules
@@ -0,0 +1,4 @@
+The 'interface-rules' keyword requests the display of
+the configured interface-rules for the named vns.  The
+vns interface-rules describe the membership rules 
+associated with a vns.
diff --git a/cli/documentation/en_US/vns/show-tenant b/cli/documentation/en_US/vns/show-tenant
new file mode 100755
index 0000000..dcf628f
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant
@@ -0,0 +1,2 @@
+This 'show tenant <tenant-name>' command is used to identify a specific tenant, to describe particular configured details.
+'show tenant' command provides display for every defined tenant. 
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/show-tenant-example b/cli/documentation/en_US/vns/show-tenant-example
new file mode 100755
index 0000000..f2fa1f3
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-example
@@ -0,0 +1,21 @@
+localhost# show tenant all
+
+	# Tenant ID Active Description Router ID
+
+	-|---------|------|-----------|---------
+
+	1 A         True               vrA
+
+	2 default   True
+
+	3 red       True
+
+	4 system    True               vrsystem
+
+localhost# show tenant A
+
+	# Tenant ID Active Description Router ID
+
+	-|---------|------|-----------|---------
+
+1 A         True               vrA
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router b/cli/documentation/en_US/vns/show-tenant-id-router
new file mode 100755
index 0000000..2c76403
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router
@@ -0,0 +1,2 @@
+The 'router' keyword requests the display of
+the configured virtual router for the named or current tenant.  
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router-gwippool b/cli/documentation/en_US/vns/show-tenant-id-router-gwippool
new file mode 100755
index 0000000..64e84af
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router-gwippool
@@ -0,0 +1,3 @@
+The 'gw-address-pool' keyword requests the display of
+the configured gateway ip addresses for all the gateway pools of the named virtual router.  
+
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router-gwpools b/cli/documentation/en_US/vns/show-tenant-id-router-gwpools
new file mode 100755
index 0000000..105e87b
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router-gwpools
@@ -0,0 +1,2 @@
+The 'gateway-pools' keyword requests the display of
+the configured next hop gateway pools for the named virtual router.
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router-interfaces b/cli/documentation/en_US/vns/show-tenant-id-router-interfaces
new file mode 100755
index 0000000..24a5baf
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router-interfaces
@@ -0,0 +1,2 @@
+The 'interfaces' keyword requests the display of
+the configured interfaces for the named virtual router. 
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router-ippool b/cli/documentation/en_US/vns/show-tenant-id-router-ippool
new file mode 100755
index 0000000..00a44ab
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router-ippool
@@ -0,0 +1,2 @@
+The 'ip-address-pool' keyword requests the display of
+the configured ip address/subnet for all the interfaces of the named virtual router.  
diff --git a/cli/documentation/en_US/vns/show-tenant-id-router-route b/cli/documentation/en_US/vns/show-tenant-id-router-route
new file mode 100755
index 0000000..27f3ef1
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-router-route
@@ -0,0 +1,2 @@
+The 'route' keyword requests the display of
+the configured routing rule for the named virtual router. 
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/show-tenant-id-vns b/cli/documentation/en_US/vns/show-tenant-id-vns
new file mode 100755
index 0000000..162c8f2
--- /dev/null
+++ b/cli/documentation/en_US/vns/show-tenant-id-vns
@@ -0,0 +1,2 @@
+The 'vns' keyword requests the display of
+the configured vnss for the named tenant.  
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/src-ip b/cli/documentation/en_US/vns/src-ip
new file mode 100755
index 0000000..7b90b4b
--- /dev/null
+++ b/cli/documentation/en_US/vns/src-ip
@@ -0,0 +1 @@
+An IP address in dotted decimal notation.
diff --git a/cli/documentation/en_US/vns/tenant b/cli/documentation/en_US/vns/tenant
new file mode 100755
index 0000000..d7672e6
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant
@@ -0,0 +1,11 @@
+This submode is used to create a named tenant. Within this submode, properties of
+the tenant can be configured. VNS are configured and managed, which configure the membership of devices.
+Virtual router is configured and managed, which defines the connectivity within and among tenants.
+
+The controller provides a tenant named 'default' to collect devices
+which are not associated with any tenant.
+
+The controller provides a tenant named 'system' to hold system virtual router
+which is used to define the connectivity among all tenants.
+
+The controller provides a tenant named 'external' to hold configuration for external network access.
diff --git a/cli/documentation/en_US/vns/tenant-active b/cli/documentation/en_US/vns/tenant-active
new file mode 100755
index 0000000..778dbcc
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-active
@@ -0,0 +1,2 @@
+Set the tenant active. If a tenant is inactive the controller will not use it
+or its rules.
diff --git a/cli/documentation/en_US/vns/tenant-active-example b/cli/documentation/en_US/vns/tenant-active-example
new file mode 100755
index 0000000..d9eff2b
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-active-example
@@ -0,0 +1,5 @@
+active
+  Activate this tenant instance
+
+no active
+  Deactivate this tenant instance
diff --git a/cli/documentation/en_US/vns/tenant-description b/cli/documentation/en_US/vns/tenant-description
new file mode 100755
index 0000000..52a9a15
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-description
@@ -0,0 +1 @@
+Within a tenant definition sub-mode, declare a friendly descriptor for the tenant instance.
diff --git a/cli/documentation/en_US/vns/tenant-description-example b/cli/documentation/en_US/vns/tenant-description-example
new file mode 100755
index 0000000..2d94514
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-description-example
@@ -0,0 +1,2 @@
+description "this is my first tenant instance"
+  Add a textual description to a tenant
diff --git a/cli/documentation/en_US/vns/tenant-example b/cli/documentation/en_US/vns/tenant-example
new file mode 100755
index 0000000..8c9dcec
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-example
@@ -0,0 +1,6 @@
+tenant my-first-tenant
+  Define a new tenant instance by name,
+  and enter the tenant sub-mode
+
+no tenant my-first-tenant
+  Remove a named tenant
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/tenant-router-active b/cli/documentation/en_US/vns/tenant-router-active
new file mode 100755
index 0000000..4f58af3
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-active
@@ -0,0 +1,2 @@
+Set the tenant virtual router active. If a tenant virtual router is inactive the controller will not use it
+or its rules.
diff --git a/cli/documentation/en_US/vns/tenant-router-active-example b/cli/documentation/en_US/vns/tenant-router-active-example
new file mode 100755
index 0000000..c626eb6
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-active-example
@@ -0,0 +1,5 @@
+localhost(config-tenant-router-intf)# active
+  Activate this interface instance
+
+localhost(config-tenant-router-intf)# no active
+  Deactivate this interface instance
diff --git a/cli/documentation/en_US/vns/tenant-router-description b/cli/documentation/en_US/vns/tenant-router-description
new file mode 100755
index 0000000..89ea234
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-description
@@ -0,0 +1 @@
+Within a tenant virtual router definition sub-mode, declare a friendly descriptor for the virtual router instance.
diff --git a/cli/documentation/en_US/vns/tenant-router-description-example b/cli/documentation/en_US/vns/tenant-router-description-example
new file mode 100755
index 0000000..bd9f779
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-description-example
@@ -0,0 +1,2 @@
+localhost(config-tenant-router)# description "this is the virtual router for testing"
+  Add a textual description to a tenant virtual router
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/tenant-router-gwip b/cli/documentation/en_US/vns/tenant-router-gwip
new file mode 100755
index 0000000..7db55d7
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-gwip
@@ -0,0 +1 @@
+Add an IP address to a gateway pool
diff --git a/cli/documentation/en_US/vns/tenant-router-gwip-example b/cli/documentation/en_US/vns/tenant-router-gwip-example
new file mode 100755
index 0000000..9e4f5dc
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-gwip-example
@@ -0,0 +1,3 @@
+localhost(config-tenant-router-gw)# ip  10.0.1.1/24
+
+localhost(config-tenant-router-gw)# no ip  10.0.1.1/24
diff --git a/cli/documentation/en_US/vns/tenant-router-gwpool b/cli/documentation/en_US/vns/tenant-router-gwpool
new file mode 100755
index 0000000..9f07d6b
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-gwpool
@@ -0,0 +1,2 @@
+This command is used to create a new next hop gateway pool. Any IP address within this gateway pool can be used as a next hop for a routing rule configured with the next hop as this gateway pool.
+
diff --git a/cli/documentation/en_US/vns/tenant-router-gwpool-example b/cli/documentation/en_US/vns/tenant-router-gwpool-example
new file mode 100755
index 0000000..43337f8
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-gwpool-example
@@ -0,0 +1,5 @@
+localhost(config-tenant-router)# gateway-pool pool1
+  create a gateway pool pool1
+
+localhost(config-tenant-router)# no gateway-pool pool1
+  remove the gateway pool named pool1
diff --git a/cli/documentation/en_US/vns/tenant-router-interface b/cli/documentation/en_US/vns/tenant-router-interface
new file mode 100755
index 0000000..138a2f8
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-interface
@@ -0,0 +1,2 @@
+This command is used to create a new virtual router interface and connect the named interface to a defined VNS or another virtual router.
+
diff --git a/cli/documentation/en_US/vns/tenant-router-interface-example b/cli/documentation/en_US/vns/tenant-router-interface-example
new file mode 100755
index 0000000..25f57de
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-interface-example
@@ -0,0 +1,5 @@
+localhost(config-tenant-router)# interface if1 vns A1
+  create a virtual router interface if1 and connect it to VNS A1
+  
+localhost(config-tenant-router)# no interface if1
+  remove the named virtual router interface if1
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/tenant-router-interfaceip b/cli/documentation/en_US/vns/tenant-router-interfaceip
new file mode 100755
index 0000000..d64b903
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-interfaceip
@@ -0,0 +1 @@
+Associate an IP address and IP subnet with an virtual router interface. 
diff --git a/cli/documentation/en_US/vns/tenant-router-interfaceip-example b/cli/documentation/en_US/vns/tenant-router-interfaceip-example
new file mode 100755
index 0000000..a95dea5
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-interfaceip-example
@@ -0,0 +1,3 @@
+localhost(config-tenant-router-intf)# ip  10.0.1.1/24
+
+localhost(config-tenant-router-intf)# no ip  10.0.1.1/24
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/tenant-router-route b/cli/documentation/en_US/vns/tenant-router-route
new file mode 100755
index 0000000..9ff9f6a
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-route
@@ -0,0 +1,2 @@
+This command is used to create a new routing rule for a given tenant virtual router.   
+  
diff --git a/cli/documentation/en_US/vns/tenant-router-route-example b/cli/documentation/en_US/vns/tenant-router-route-example
new file mode 100755
index 0000000..259ff85
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-router-route-example
@@ -0,0 +1,5 @@
+route from tenant A to tenant B permit
+  create a routing rule to permit packets from tenant A to tenant B
+
+no route from tenant A to tenant B permit
+  remove the created routing rule
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/tenant-vrouter b/cli/documentation/en_US/vns/tenant-vrouter
new file mode 100755
index 0000000..b93fd82
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-vrouter
@@ -0,0 +1,2 @@
+This submode is used to create, then describe the connectivity and routing rules for the named virtual router for a given tenant.   
+Within this submode, properties of the virtual router can be configured.   
diff --git a/cli/documentation/en_US/vns/tenant-vrouter-example b/cli/documentation/en_US/vns/tenant-vrouter-example
new file mode 100755
index 0000000..d930dc5
--- /dev/null
+++ b/cli/documentation/en_US/vns/tenant-vrouter-example
@@ -0,0 +1,6 @@
+router my-first-router
+  Define a new router instance by name,
+  and enter the tenant-router sub-mode
+
+no router my-first-router
+  Remove a named router
\ No newline at end of file
diff --git a/cli/documentation/en_US/vns/use-address-space b/cli/documentation/en_US/vns/use-address-space
new file mode 100755
index 0000000..1a9b5a9
--- /dev/null
+++ b/cli/documentation/en_US/vns/use-address-space
@@ -0,0 +1 @@
+Associate this VNS with the specified address-space. 
diff --git a/cli/documentation/en_US/vns/use-address-space-example b/cli/documentation/en_US/vns/use-address-space-example
new file mode 100755
index 0000000..384169a
--- /dev/null
+++ b/cli/documentation/en_US/vns/use-address-space-example
@@ -0,0 +1,5 @@
+use address-space address-space-1
+  Change the association of this VNS from 'default' to 'address-space-1'.
+
+no address-space address-space-1
+  Remove the address space association for this VNS.
diff --git a/cli/documentation/en_US/vns/vns b/cli/documentation/en_US/vns/vns
new file mode 100755
index 0000000..190d8cf
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns
@@ -0,0 +1,11 @@
+This command is used to enter a submode to manage properties
+associated with the virtual switch.  This currently includes
+acl managment, and association of the acls rules to interfaces.
+
+The named vns-id must already exist.  See the vns-definition
+command to create new VNSs.
+
+Withing this submode, two other submodes can be entered.  The
+access-list submode associates specific acl rules with an access list,
+while the interface submode allows association of named access rules
+to specific interfaces.
diff --git a/cli/documentation/en_US/vns/vns-access-group b/cli/documentation/en_US/vns/vns-access-group
new file mode 100755
index 0000000..029bc09
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-group
@@ -0,0 +1 @@
+Associate an access-list configuration with this interface rule. 
diff --git a/cli/documentation/en_US/vns/vns-access-group-direction-in b/cli/documentation/en_US/vns/vns-access-group-direction-in
new file mode 100755
index 0000000..3295471
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-group-direction-in
@@ -0,0 +1 @@
+Apply an access-list to incoming traffic on this VNS interface.
diff --git a/cli/documentation/en_US/vns/vns-access-group-direction-out b/cli/documentation/en_US/vns/vns-access-group-direction-out
new file mode 100755
index 0000000..935679c
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-group-direction-out
@@ -0,0 +1 @@
+Apply an access-list to outgoing traffic on this VNS interface.
diff --git a/cli/documentation/en_US/vns/vns-access-group-example b/cli/documentation/en_US/vns/vns-access-group-example
new file mode 100755
index 0000000..677f5a8
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-group-example
@@ -0,0 +1,5 @@
+access-group pair-blocker in
+  Associate the 'pair-blocker' ACL with input packets to this VNS
+
+no access-group pair-blocker in
+  Remove the input packet ACL for this VNS instance
diff --git a/cli/documentation/en_US/vns/vns-access-list b/cli/documentation/en_US/vns/vns-access-list
new file mode 100755
index 0000000..853d33b
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list
@@ -0,0 +1 @@
+Enter submode to configure VNS access-list. 
diff --git a/cli/documentation/en_US/vns/vns-access-list-cidr-range b/cli/documentation/en_US/vns/vns-access-list-cidr-range
new file mode 100755
index 0000000..41d71d2
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-cidr-range
@@ -0,0 +1 @@
+IP address with prefix length in CIDR format.
diff --git a/cli/documentation/en_US/vns/vns-access-list-description b/cli/documentation/en_US/vns/vns-access-list-description
new file mode 100755
index 0000000..763e127
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-description
@@ -0,0 +1 @@
+A user provided textual description for this access-list.
diff --git a/cli/documentation/en_US/vns/vns-access-list-description-example b/cli/documentation/en_US/vns/vns-access-list-description-example
new file mode 100755
index 0000000..484eea0
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-description-example
@@ -0,0 +1,2 @@
+description "Access list #1"
+  Associate a text description with this access list
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry b/cli/documentation/en_US/vns/vns-access-list-entry
new file mode 100755
index 0000000..e030bdf
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry
@@ -0,0 +1 @@
+Add an entry to this VNS access list
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-action-deny b/cli/documentation/en_US/vns/vns-access-list-entry-action-deny
new file mode 100755
index 0000000..3d366ca
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-action-deny
@@ -0,0 +1 @@
+Deny traffic matching this entry.
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-action-permit b/cli/documentation/en_US/vns/vns-access-list-entry-action-permit
new file mode 100755
index 0000000..2466151
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-action-permit
@@ -0,0 +1 @@
+Permit traffic matching this entry.
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-example b/cli/documentation/en_US/vns/vns-access-list-entry-example
new file mode 100755
index 0000000..1885da2
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-example
@@ -0,0 +1,26 @@
+10 deny ip 10.0.0.1 10.0.0.2
+  Add an ACL rule to deny IP traffic between two hosts
+
+11 allow tcp 10.0.0.3
+  Add an ACL rule to allow TCP traffic from a specific host
+
+12 deny 51
+  Add an ACL rule to deny AH packets
+
+13 deny tcp any eq http
+  Add an ACL rule to deny HTTP traffic
+
+14 deny tcp any eq http
+  Add an ACL rule to deny HTTP traffic
+
+15 deny mac 00:00:00:00:00:01 any
+  Add an ACL rule to deny traffic based on source MAC address
+
+16 deny mac 00:00:00:00:00:01 00:00:00:00:00:02
+  Add an ACL rule to deny traffic between MAC addresses
+
+16 deny mac any any 0x0842
+  Add an ACL rule to deny wake-on-LAN packets
+
+17 deny mac any any vlan 42
+  Add an ACL rule to deny packets from a specific VLAN
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-type-ip b/cli/documentation/en_US/vns/vns-access-list-entry-type-ip
new file mode 100755
index 0000000..3e54b31
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-type-ip
@@ -0,0 +1 @@
+Access list entry for IP packets.
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-type-ip-protocol b/cli/documentation/en_US/vns/vns-access-list-entry-type-ip-protocol
new file mode 100755
index 0000000..8765786
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-type-ip-protocol
@@ -0,0 +1 @@
+An IP protocol number.
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-type-tcp b/cli/documentation/en_US/vns/vns-access-list-entry-type-tcp
new file mode 100755
index 0000000..80ce8fb
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-type-tcp
@@ -0,0 +1 @@
+Access list entry for TCP packets.
diff --git a/cli/documentation/en_US/vns/vns-access-list-entry-type-udp b/cli/documentation/en_US/vns/vns-access-list-entry-type-udp
new file mode 100755
index 0000000..b71bac0
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-entry-type-udp
@@ -0,0 +1 @@
+Access list entry for UDP packets.
diff --git a/cli/documentation/en_US/vns/vns-access-list-ether-type b/cli/documentation/en_US/vns/vns-access-list-ether-type
new file mode 100755
index 0000000..c709dcb
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ether-type
@@ -0,0 +1 @@
+Specify an ether type by number (hex or decimal)
diff --git a/cli/documentation/en_US/vns/vns-access-list-example b/cli/documentation/en_US/vns/vns-access-list-example
new file mode 100755
index 0000000..dbfef41
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-example
@@ -0,0 +1,6 @@
+access-list access-list-1
+  Define a new access list for this VNS,
+  and enter its configuration sub-mode
+
+no access-list access-list-1
+  Remove the definition for this access list
diff --git a/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-ip b/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-ip
new file mode 100755
index 0000000..ef2612f
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-ip
@@ -0,0 +1 @@
+IP address in dotted decimal notation.
diff --git a/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-mask b/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-mask
new file mode 100755
index 0000000..3ca923d
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ip-and-mask-mask
@@ -0,0 +1 @@
+An inverse netmask in dotted decimal notation.
diff --git a/cli/documentation/en_US/vns/vns-access-list-ip-any b/cli/documentation/en_US/vns/vns-access-list-ip-any
new file mode 100755
index 0000000..a598f6f
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ip-any
@@ -0,0 +1 @@
+Represents any IP address.
diff --git a/cli/documentation/en_US/vns/vns-access-list-ip-icmp b/cli/documentation/en_US/vns/vns-access-list-ip-icmp
new file mode 100755
index 0000000..6d49f85
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ip-icmp
@@ -0,0 +1,2 @@
+Filter based on ICMP packet types
+
diff --git a/cli/documentation/en_US/vns/vns-access-list-ip-only b/cli/documentation/en_US/vns/vns-access-list-ip-only
new file mode 100755
index 0000000..ef2612f
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-ip-only
@@ -0,0 +1 @@
+IP address in dotted decimal notation.
diff --git a/cli/documentation/en_US/vns/vns-access-list-mac b/cli/documentation/en_US/vns/vns-access-list-mac
new file mode 100755
index 0000000..0c922c0
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-mac
@@ -0,0 +1 @@
+Filter based on source/destionation MAC addresses, ether types and VLAN IDs
diff --git a/cli/documentation/en_US/vns/vns-access-list-name b/cli/documentation/en_US/vns/vns-access-list-name
new file mode 100755
index 0000000..9005ab3
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-name
@@ -0,0 +1 @@
+The name of the access list
diff --git a/cli/documentation/en_US/vns/vns-access-list-port-hex b/cli/documentation/en_US/vns/vns-access-list-port-hex
new file mode 100755
index 0000000..f129316
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-port-hex
@@ -0,0 +1 @@
+Port number in decimal or hex if prefixed with 0x.
diff --git a/cli/documentation/en_US/vns/vns-access-list-port-op-eq b/cli/documentation/en_US/vns/vns-access-list-port-op-eq
new file mode 100755
index 0000000..1919455
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-port-op-eq
@@ -0,0 +1 @@
+Port number equals.
diff --git a/cli/documentation/en_US/vns/vns-access-list-port-op-neq b/cli/documentation/en_US/vns/vns-access-list-port-op-neq
new file mode 100755
index 0000000..bfa8296
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-port-op-neq
@@ -0,0 +1 @@
+Port number does not equal.
diff --git a/cli/documentation/en_US/vns/vns-access-list-port-type b/cli/documentation/en_US/vns/vns-access-list-port-type
new file mode 100755
index 0000000..99ef139
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-port-type
@@ -0,0 +1 @@
+Specify a port by service name
diff --git a/cli/documentation/en_US/vns/vns-access-list-priority b/cli/documentation/en_US/vns/vns-access-list-priority
new file mode 100755
index 0000000..e816770
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-priority
@@ -0,0 +1 @@
+Within a VNS access list definition, set the priority
diff --git a/cli/documentation/en_US/vns/vns-access-list-priority-example b/cli/documentation/en_US/vns/vns-access-list-priority-example
new file mode 100755
index 0000000..42f65a8
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-access-list-priority-example
@@ -0,0 +1,2 @@
+priority 100
+  Set the priority of this ACL to 100
diff --git a/cli/documentation/en_US/vns/vns-definition b/cli/documentation/en_US/vns/vns-definition
new file mode 100755
index 0000000..5bfb995
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-definition
@@ -0,0 +1,16 @@
+This submode is used to create, then describe the membership of
+devices for the named VNS.   Within this submode, properties of
+the VNS can be configured.   Interface-rules are configured and
+managed, which configure the membership of devices.
+
+The controller provides a VNS named 'default' to collect devices
+which are not associated with any VNS.   
+
+Part of the configuration associated with a VNS includes the
+association of a particular address-space.   When not speficially
+configured, the 'default' address-space is associated with the
+VNS.
+
+Each address-space also has an associated default VNS.  IF the
+address space is called 'yellow', then the default VNS for this
+address space is called 'yellow-default'
diff --git a/cli/documentation/en_US/vns/vns-definition-example b/cli/documentation/en_US/vns/vns-definition-example
new file mode 100755
index 0000000..9f7d17d
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-definition-example
@@ -0,0 +1,6 @@
+vns-definition my-first-vns
+  Define a new VNS instance by name,
+  and enter the VNS definition sub-mode
+
+no vns-definition my-first-vns
+  Remove a named VNS
diff --git a/cli/documentation/en_US/vns/vns-example b/cli/documentation/en_US/vns/vns-example
new file mode 100755
index 0000000..6824e0d
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-example
@@ -0,0 +1,3 @@
+vns my-vns-definition
+  Enter VNS definition sub-mode.
+  The VNS name corresponds to a prior vns-definition identifier.
diff --git a/cli/documentation/en_US/vns/vns-id b/cli/documentation/en_US/vns/vns-id
new file mode 100755
index 0000000..37e1ed6
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-id
@@ -0,0 +1,4 @@
+This is the name of the VNS. The VNS name "default" represents the
+default VNS in the default address space. A VNS name conforming to
+"<address-space-name>-default" represents the default VNS for the
+address-space "address-space-name"
diff --git a/cli/documentation/en_US/vns/vns-interface b/cli/documentation/en_US/vns/vns-interface
new file mode 100755
index 0000000..468b0e9
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-interface
@@ -0,0 +1 @@
+Enter VNS interface submode, manage association to access lists.
diff --git a/cli/documentation/en_US/vns/vns-interface-example b/cli/documentation/en_US/vns/vns-interface-example
new file mode 100755
index 0000000..8402b9a
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-interface-example
@@ -0,0 +1,3 @@
+interface main-interface
+  Enter the VNS interface configuration sub-mode.
+  The interface is named based on a corresponding interface-rule specifier.
diff --git a/cli/documentation/en_US/vns/vns-interface-field b/cli/documentation/en_US/vns/vns-interface-field
new file mode 100755
index 0000000..a20226d
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-interface-field
@@ -0,0 +1,2 @@
+The name of the VNS interface. Interface names are derived from
+interface-rules.
diff --git a/cli/documentation/en_US/vns/vns-show-interface b/cli/documentation/en_US/vns/vns-show-interface
new file mode 100755
index 0000000..1be8e6b
--- /dev/null
+++ b/cli/documentation/en_US/vns/vns-show-interface
@@ -0,0 +1,2 @@
+Show VNS interfaces associated with this VNS and its state and
+configuration.