d Commands
d-path-ignore
d-path-ignore
Syntax
[no] d-path-ignore
Context
[Tree] (config>service>system>bgp-evpn>ad-per-evi-routes d-path-ignore)
Full Context
configure service system bgp-evpn ad-per-evi-routes d-path-ignore
Description
This command makes the router ignore the Domain PATH attribute (D-PATH) when BGP computes the best path selection for received routes.
The no form of this command considers the D-PATH length and value as a tiebreaker in determining the best-path selection. In accordance with draft-sr-bess-evpn-dpath, the router compares the D-PATH attribute received in AD per-EVI routes with the same key as follows:
- The routes with the shortest D-PATH are preferred; therefore, routes not tied for the shortest D-PATH are removed. Routes without D-PATH are considered zero-length D-PATH.
- The routes with the numerically lowest left-most Domain-ID are preferred; therefore, routes not tied for the numerically lowest left-most Domain-ID are removed from consideration.
Default
no d-path-ignore
Platforms
7705 SAR Gen 2
d-path-length-ignore
d-path-length-ignore
Syntax
[no] d-path-length-ignore
Context
[Tree] (config>service>vprn d-path-length-ignore)
[Tree] (config>router>bgp>path-selection d-path-length-ignore)
Full Context
configure service vprn d-path-length-ignore
configure router bgp best-path-selection d-path-length-ignore
Description
This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.
At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.
Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.
The no form of this command disables the ability to ignore the D-PATH domain segment length.
Default
no d-path-length-ignore
Platforms
7705 SAR Gen 2
dad-disable
dad-disable
Syntax
[no] dad-disable
Context
[Tree] (config>service>ies>if>ipv6 dad-disable)
[Tree] (config>service>vprn>if>ipv6 dad-disable)
[Tree] (config>router>if>ipv6 dad-disable)
Full Context
configure service ies interface ipv6 dad-disable
configure service vprn interface ipv6 dad-disable
configure router interface ipv6 dad-disable
Description
This command disables duplicate address detection (DAD) on the interface. When dad-disable is configured on the interface, the router does not perform a DAD check and all IPv6 addresses on the interface immediately enter a preferred state without checking for uniqueness on the interface. This command is useful when an interface enters a looped state during troubleshooting and becomes operationally disabled when the loop is detected; a manual intervention is required to clear the DAD violation.
The no form of this command enables duplicate address detection (DAD) on the interface.
Default
no dad-disable
Platforms
7705 SAR Gen 2
damp-peer-oscillations
damp-peer-oscillations
Syntax
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval error-interval]
Context
[Tree] (config>service>vprn>bgp damp-peer-oscillations)
[Tree] (config>service>vprn>bgp>group damp-peer-oscillations)
[Tree] (config>service>vprn>bgp>group>neighbor damp-peer-oscillations)
Full Context
configure service vprn bgp damp-peer-oscillations
configure service vprn bgp group damp-peer-oscillations
configure service vprn bgp group neighbor damp-peer-oscillations
Description
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
Default
no damp-peer-oscillations
Parameters
- initial-wait
-
Specifies the amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
- second-wait
-
Specifies the period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
- max-wait
-
Specifies the maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
- error-interval
-
Specifies the interval of time, in minutes after a session reset, during which the session must be error-free in to reset the penalty counter and return to idle-hold-time to initial-wait.
Platforms
7705 SAR Gen 2
damp-peer-oscillations
Syntax
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval error-interval]
Context
[Tree] (config>router>bgp>group>neighbor damp-peer-oscillations)
[Tree] (config>router>bgp damp-peer-oscillations)
[Tree] (config>router>bgp>group damp-peer-oscillations)
Full Context
configure router bgp group neighbor damp-peer-oscillations
configure router bgp damp-peer-oscillations
configure router bgp group damp-peer-oscillations
Description
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
Default
no damp-peer-oscillations
Parameters
- initial-wait
-
The amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
- second-wait
-
A period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
- max-wait
-
The maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
- error-interval
-
The interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return from idle-hold-time to initial-wait.
Platforms
7705 SAR Gen 2
dampening
dampening
Syntax
dampening
Context
[Tree] (config>port>ethernet dampening)
Full Context
configure port ethernet dampening
Description
Commands in this context configure exponential port dampening for an Ethernet port.
Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.
Platforms
7705 SAR Gen 2
damping
damping
Syntax
[no] damping
Context
[Tree] (config>service>vprn>bgp damping)
[Tree] (config>service>vprn>bgp>group>neighbor damping)
[Tree] (config>service>vprn>bgp>group damping)
Full Context
configure service vprn bgp damping
configure service vprn bgp group neighbor damping
configure service vprn bgp group damping
Description
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level disables route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
Half-life: 15 minutes
Max-suppress: 60 minutes
Suppress-threshold: 3000
Reuse-threshold: 750
Default
no damping — Learned route damping is disabled.
Platforms
7705 SAR Gen 2
damping
Syntax
[no] damping
Context
[Tree] (config>router>bgp damping)
[Tree] (config>router>bgp>group>neighbor damping)
[Tree] (config>router>bgp>group damping)
Full Context
configure router bgp damping
configure router bgp group neighbor damping
configure router bgp group damping
Description
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level reverts route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
-
Half-life: 15 minutes
-
Max-suppress: 60 minutes
-
Suppress-threshold: 3000
-
Reuse-threshold: 750
Default
no damping
Platforms
7705 SAR Gen 2
damping
Syntax
[no] damping name
Context
[Tree] (config>router>policy-options damping)
Full Context
configure router policy-options damping
Description
This command creates a context to configure a route damping profile to use in route policy entries.
The no form of this command deletes the named route damping profile.
Default
no damping
Parameters
- name
-
Specifies the damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
damping
Syntax
damping {name | none}
no damping
Context
[Tree] (config>router>policy-options>policy-statement>entry>action damping)
[Tree] (config>router>policy-options>policy-statement>default-action damping)
Full Context
configure router policy-options policy-statement entry action damping
configure router policy-options policy-statement default-action damping
Description
This command configures a damping profile used for routes matching the route policy statement entry.
If no damping criteria is specified, the default damping profile is used.
The no form of this command removes the damping profile associated with the route policy entry.
Default
no damping
Parameters
- name
-
The damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes. Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end"," @variable@end", or "start@variable@".
The name specified must already be defined.
- none
-
Disables route damping for the route policy.
Platforms
7705 SAR Gen 2
data
data
Syntax
data [group grp-ip-address] [source ip-address] [detail]
no data
Context
[Tree] (debug>router>pim data)
Full Context
debug router pim data
Description
This command enables debugging for PIM data exception.
The no form of this command disables PIM data exception debugging.
Parameters
- grp-ip-address
-
Debugs information associated with the specified data exception.
- ip-address
-
Debugs information associated with the specified data exception.
- detail
-
Debugs detailed IP data exception information.
Platforms
7705 SAR Gen 2
database-export
database-export
Syntax
database-export [identifier id] [bgp-ls-identifier bgp-ls-id] [reachable-ls-only]
no database-export
Context
[Tree] (config>router>isis database-export)
Full Context
configure router isis database-export
Description
This command configures the population of the extended Traffic Engineering Database (TE-DB) with the link-state information from a specific IGP instance.
This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
Parameters
- id
-
Specifies an entry ID to export. This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. However, because the concept of instance ID defined in IS-IS (RFC 6822) is unique within a routing domain while the one specified for OSPF is local subnet significant (RFC 6549), the user can remove any overlap by configuring the identifier value to be unique within a specific IGP domain when this router sends the IGP link-state information using BGP-LS.
- bgp-ls-id
-
Specifies a BGP-LS ID to export. This parameter is used, along with the Autonomous System Number (ASN) to correlate the BGP-LS NLRI advertisements of multiple BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note: If this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering command is not strictly required because enabling the extended TE-DB populates this information automatically. However, Nokia recommends enabling it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
- reachable-ls-only
-
Keyword to specify that only reachable link-state information is encoded. When this keyword is configured, the router, acting as a BGP-LS producer, must withdraw all link-state objects it has advertised in BGP, in accordance with section 5.9 of RFC 9552. This withdrawal occurs when the node that originated the corresponding LSPs is determined to be unreachable in the IGP based on the failure of a reachability check for that node. This withdrawal operation assists network controllers in assessing a reachable IGP topology, even in networks with segmented areas. For backward compatibility, the default behavior remains unchanged.
Platforms
7705 SAR Gen 2
database-export
Syntax
database-export [identifier id] [bgp-ls-identifier bgp-ls-id] [reachable-ls-only]
no database-export
Context
[Tree] (config>router>ospf database-export)
[Tree] (config>router>ospf3 database-export)
Full Context
configure router ospf database-export
configure router ospf3 database-export
Description
This command enables the population of the extended Traffic Engineering Database (TE-DB) with the link-state information from a specific IGP instance.
This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
Default
no database-export
Parameters
- id
-
Specifies an entry ID to export. This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. The concept of instance ID specified for OSPF is local subnet significant (RFC 6549). The user can remove the router specific overlap by configuring the identifier value to be unique within a specific IGP domain when this router sends the IGP link-state information using BGP-LS.
- bgp-ls-id
-
Specifies a BGP-LS ID to export. This parameter is used, along with the ASN, to correlate the BGP-LS NLRI advertisements of multiple BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note: If this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering command is not strictly required because enabling the extended TE-DB populates this information automatically. However, Nokia recommends enabling it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
- reachable-ls-only
-
Keyword to specify that only reachable link-state information is encoded. When this keyword is configured, the router, acting as a BGP-LS producer, must withdraw all link-state objects it has advertised in BGP, in accordance with section 5.9 of RFC 9552. This withdrawal occurs when the node that originated the corresponding LSPs is determined to be unreachable in the IGP based on the failure of a reachability check for that node. This withdrawal operation assists network controllers in assessing a reachable IGP topology, even in networks with segmented areas. For backward compatibility, the default behavior remains unchanged.
Platforms
7705 SAR Gen 2
database-export-exclude
database-export-exclude
Syntax
[no] database-export-exclude
Context
[Tree] (config>router>isis>level database-export-exclude)
Full Context
configure router isis level database-export-exclude
Description
This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.
The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.
Default
no database-export-exclude
Platforms
7705 SAR Gen 2
database-export-exclude
Syntax
[no] database-export-exclude
Context
[Tree] (config>router>ospf>area database-export-exclude)
[Tree] (config>router>ospf3>area database-export-exclude)
Full Context
configure router ospf area database-export-exclude
configure router ospf3 area database-export-exclude
Description
This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the OSPF or OSPF3 instance level.
Default
no database-export-exclude
Platforms
7705 SAR Gen 2
day-of-month
day-of-month
Syntax
day-of-month {day-number [..day-number] all}
no day-of-month
Context
[Tree] (config>system>cron>sched day-of-month)
Full Context
configure system cron schedule day-of-month
Description
This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.
Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).
The no form of this command removes the specified day-of-month from the list.
Default
no day-of-month
Parameters
- day-number
-
Specifies the positive integers specify the day of the month counting from the first of the month. The negative integers specify the day of the month counting from the last day of the month. For example, configuring day-of-month -5, 5 in a month that has 31 days will specify the schedule to occur on the 27th and 5th of that month.
Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.
- all
-
Specifies all days of the month.
Platforms
7705 SAR Gen 2
db
db
Syntax
db [group grp-ip-address] [source ip-address] [detail]
no db
Context
[Tree] (debug>router>pim db)
Full Context
debug router pim db
Description
This command enables debugging for PIM database.
The no form of this command disables PIM database debugging.
Parameters
- grp-ip-address
-
Debugs information associated with the specified database.
- ip-address
-
Debugs information associated with the specified database.
- detail
-
Debugs detailed IP database information.
Platforms
7705 SAR Gen 2
db
Syntax
db [detail]
no db
Context
[Tree] (debug>router>pcep>pcc db)
[Tree] (debug>router>pcep>pcc>conn db)
Full Context
debug router pcep pcc db
debug router pcep pcc connection db
Description
This command enables debugging for PCC or connection database events.
The no form of this command disables debugging.
Parameters
- detail
-
Keyword used to specify detailed information about PCC or connection database events.
Platforms
7705 SAR Gen 2
ddm-events
ddm-events
Syntax
[no] ddm-events
Context
[Tree] (config>port ddm-events)
Full Context
configure port ddm-events
Description
This command enables Digital Diagnostic Monitoring (DDM) events for the port.
The no form of this command disables DDM events.
Platforms
7705 SAR Gen 2
de-1-out-profile
de-1-out-profile
Syntax
[no] de-1-out-profile
Context
[Tree] (config>qos>sap-ingress>fc de-1-out-profile)
Full Context
configure qos sap-ingress fc de-1-out-profile
Description
This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.
When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the "< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.
All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.
The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.
All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into "out-of-profile” at ingress SAP.
This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.
The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.
Default
no de-1-out-profile
Platforms
7705 SAR Gen 2
de-mark
de-mark
Syntax
de-mark [force de-value]
no demark
Context
[Tree] (config>qos>sap-egress>fc de-mark)
Full Context
configure qos sap-egress fc de-mark
Description
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.
If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.
The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
7705 SAR Gen 2
de-mark
Syntax
de-mark [force de-value]
no de-mark
Context
[Tree] (config>qos>network>egress>fc de-mark)
Full Context
configure qos network egress fc de-mark
Description
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).
Parameters
- de-value
-
Specifies that this value is to be used for all the packets of this forwarding class regardless of their profile status.
If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, use the following rules for a network port (B-SDP):
-
the outer VID follows the rules for regular SDP
-
for packets originating from a local I-VPLS/PBB-Epipe, this command dictates the marking of the DE bit for both the outer (link level) BVID and ITAG; if the command is not used, the DE bit is set to zero.
-
for transit packets (B-SAP/B-SDP to B-SDP), the related ITAG bits are preserved, the same as for BVID.
-
Platforms
7705 SAR Gen 2
de-mark-inner
de-mark-inner
Syntax
de-mark-inner [force de-value]
no de-mark-inner
Context
[Tree] (config>qos>sap-egress>fc de-mark-inner)
Full Context
configure qos sap-egress fc de-mark-inner
Description
This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).
If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.
Remarking the inner DE bit is not supported based on the profile result of egress policing.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
7705 SAR Gen 2
de-mark-outer
de-mark-outer
Syntax
de-mark-outer [force de-value]
no de-mark-outer
Context
[Tree] (config>qos>sap-egress>fc de-mark-outer)
Full Context
configure qos sap-egress fc de-mark-outer
Description
This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
7705 SAR Gen 2
dead-interval
dead-interval
Syntax
dead-interval seconds
no dead-interval
Context
[Tree] (config>service>vprn>ospf3>area>if dead-interval)
[Tree] (config>service>vprn>ospf>area>sham-link dead-interval)
[Tree] (config>service>vprn>ospf>area>virtual-link dead-interval)
[Tree] (config>service>vprn>ospf3>area>virtual-link dead-interval)
[Tree] (config>service>vprn>ospf>area>if dead-interval)
Full Context
configure service vprn ospf3 area interface dead-interval
configure service vprn ospf area sham-link dead-interval
configure service vprn ospf area virtual-link dead-interval
configure service vprn ospf3 area virtual-link dead-interval
configure service vprn ospf area interface dead-interval
Description
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.
The no form of this command reverts to the default value.
Default
dead-interval 40
Parameters
- seconds
-
The dead interval expressed as a decimal integer.
Platforms
7705 SAR Gen 2
dead-interval
Syntax
dead-interval seconds
no dead-interval
Context
[Tree] (config>router>ospf3>area>virtual-link dead-interval)
[Tree] (config>router>ospf3>area>interface dead-interval)
[Tree] (config>router>ospf>area>virtual-link dead-interval)
[Tree] (config>router>ospf>area>interface dead-interval)
Full Context
configure router ospf3 area virtual-link dead-interval
configure router ospf3 area interface dead-interval
configure router ospf area virtual-link dead-interval
configure router ospf area interface dead-interval
Description
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.
The no form of this command reverts to the default value.
Default
dead-interval 40
Parameters
- seconds
-
The dead interval expressed in seconds.
Platforms
7705 SAR Gen 2
dead-timer
dead-timer
Syntax
dead-timer seconds
no dead-timer
Context
[Tree] (config>router>pcep>pcc dead-timer)
Full Context
configure router pcep pcc dead-timer
Description
This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.
The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.
The no form of the command returns the dead timer to the default value.
Default
dead-timer 120
Parameters
- seconds
-
the dead timer value, in seconds
Platforms
7705 SAR Gen 2
debounce
debounce
Syntax
debounce occurrences [within seconds]
no debounce
Context
[Tree] (config>log>event-trigger>event>trigger-entry debounce)
Full Context
configure log event-trigger event trigger-entry debounce
Description
This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.
The no form of this command removes the debounce configuration.
Parameters
- occurrences
-
Specifies the number of times an event must occur for EHS to trigger a response.
- within seconds
-
Specifies the time window within which a specific event must occur a number of times equivalent to the specified occurrences for EHS to trigger a response.
Platforms
7705 SAR Gen 2
debug
debug
Syntax
debug
Context
[Tree] (debug)
Full Context
debug
Description
Commands in this context specify debugging options.
Platforms
7705 SAR Gen 2
debug-save
debug-save
Syntax
debug-save [file-url]
Context
[Tree] (admin debug-save)
Full Context
admin debug-save
Description
This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.
Parameters
- file-url
-
Specifies the file URL location to save the debug configuration. If no file-url is specified then the debug configuration is saved at the same location as the standard configuration file (bof>primary-config/bof>secondary-config/bof>tertiary-config) with the same file name as the standard configuration file but with a .dbg suffix.
Platforms
7705 SAR Gen 2
def-recv-evpn-encap
def-recv-evpn-encap
Syntax
def-recv-evpn-encap {mpls | vxlan}
no def-recv-evpn-encap
Context
[Tree] (config>router>bgp>group>neighbor def-recv-evpn-encap)
[Tree] (config>router>bgp>group def-recv-evpn-encap)
Full Context
configure router bgp group neighbor def-recv-evpn-encap
configure router bgp group def-recv-evpn-encap
Description
This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.
Default
no def-recv-evpn-encap
Parameters
- mpls
-
Specifies that mpls is the default encapsulation value in the case where no RFC 5512 extended community is received in the incoming BGP-EVPN route.
- vxlan
-
Specifies that vxlan is the default encapsulation value.
Platforms
7705 SAR Gen 2
default
default
Syntax
[no] default
Context
[Tree] (config>log>accounting-policy default)
Full Context
configure log accounting-policy default
Description
This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.
If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.
If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.
Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.
The record name must be specified prior to assigning an accounting policy as default.
If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.
The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.
Platforms
7705 SAR Gen 2
default-action
default-action
Syntax
default-action {bypass-host-creation | drop}
no default-action
Context
[Tree] (config>filter>dhcp-filter default-action)
Full Context
configure filter dhcp-filter default-action
Description
This command specifies the default action for DHCP filters when no entries match.
The no form of this command reverts to the default.
Parameters
- bypass-host-creation
-
Specifies to bypass ESM host creation options.
- drop
-
Specifies to drop and not process the DHCP message.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action bypass-host-creation [na] [pd]
default-action drop
no default-action
Context
[Tree] (config>filter>dhcp6-filter default-action)
Full Context
configure filter dhcp6-filter default-action
Description
This command specifies the default action for DHCP6 filters when no entries match.
The no form of this command reverts to the default.
Parameters
- bypass-host-creation
-
Specifies to bypass ESM host creation options.
- drop
-
Specifies to drop and not process the DHCP6 message.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {drop | forward}
no default-action
Context
[Tree] (config>service>vprn>log>filter default-action)
Full Context
configure service vprn log filter default-action
Description
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
Default
default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.
Parameters
- drop
-
The events which are not explicitly forwarded by an event filter match are dropped.
- forward
-
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action fc fc-name profile {in | out}
Context
[Tree] (config>qos>network>ingress default-action)
Full Context
configure qos network ingress default-action
Description
This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.
Multiple default-action commands will overwrite each previous default-action command.
Default
default-action fc be profile out
Parameters
- fc-name
-
Specifies the forwarding class name. All packets with DSCP value or MPLS EXP or dot1p bits that are not defined will be placed in this forwarding class.
- profile {in | out}
-
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command. In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {drop | forward}
Context
[Tree] (config>filter>ip-filter default-action)
[Tree] (config>filter>ipv6-filter default-action)
Full Context
configure filter ip-filter default-action
configure filter ipv6-filter default-action
Description
This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.
Default
default-action drop
Parameters
- drop
-
Specifies the default action is to drop a packet.
- forward
-
Specifies the default action is to forward a packet.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {drop | forward}
no default-action
Context
[Tree] (config>log>filter default-action)
Full Context
configure log filter default-action
Description
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
Default
default-action forward
Parameters
- drop
-
The events which are not explicitly forwarded by an event filter match are dropped.
- forward
-
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {permit | deny | deny-host-unreachable}
Context
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>ip-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>mac-filter default-action)
Full Context
configure system security management-access-filter ipv6-filter default-action
configure system security management-access-filter ip-filter default-action
configure system security management-access-filter mac-filter default-action
Description
This command creates the default action for management access in the absence of a specific management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.
Parameters
- permit
-
Specifies that packets not matching the configured selection criteria in any of the filter entries will be permitted.
- deny
-
Specifies that packets not matching the selection criteria be denied and that an ICMP host unreachable message will not be issued.
- deny-host-unreachable
-
Specifies that packets not matching the selection criteria be denied access and that an ICMP host unreachable message will be issued.
The deny-host-unreachable only applies to ip-filter and ipv6filter.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {deny-all | permit-all | none | read-only-all}
Context
[Tree] (config>system>security>profile default-action)
Full Context
configure system security profile default-action
Description
This command specifies the default action to be applied when no match conditions are met in the list of profile entry match commands. It does not apply in any way to other parts of the profile such as grpc rpc-authorization or netconf base-op-authorization.
When a user is a member of multiple profiles, profiles are evaluated in the order that they are configured. Evaluation stops if there is a match, or when the default action of the profile is deny-all, permit-all, or read-only-all. When the profile default action is none and if no match conditions are met in the profile, the next profile is evaluated. When the default action of the last profile is none and no explicit match is found, the command is denied.
Parameters
- deny-all
-
Sets the default of the profile to deny access to all commands.
- permit-all
-
Sets the default of the profile to permit access to all commands.
Note:In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated "administrative” profile contains rules to access security commands.
- none
-
Sets the default of the profile to no-action. This option is useful to assign multiple profiles to a user.
- read-only-all
-
Sets the default of the profile to allow read-only access to all commands.
Platforms
7705 SAR Gen 2
default-action
Syntax
default-action {accept | next-entry | next-policy | drop | reject}
no default-action
Context
[Tree] (config>router>policy-options>policy-statement default-action)
Full Context
configure router policy-options policy-statement default-action
Description
Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.
The no form of this command deletes the default-action context for the policy statement.
Default
no default-action
Parameters
- accept
-
Specifies that routes not matched by any entry should be allowed or accepted. This parameter provides a context for modifying route properties.
- next-entry
-
Specifies that routes not matched by any entry should be evaluated by the next sequential entry in the policy chain, after route properties are possibly modified by the default action of the current policy.
- next-policy
-
Specifies that routes not matched by any entry should be evaluated by the next sequential policy in the policy chain, after route properties are possibly modified by the default action of the current policy.
- drop
-
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter provides a context for modifying route properties.
- reject
-
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter does not provide a context for modifying route properties.
Platforms
7705 SAR Gen 2
default-domain
default-domain
Syntax
default-domain dns-name
no default-domain
Context
[Tree] (config>service>vprn>dns default-domain)
Full Context
configure service vprn dns default-domain
Description
This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.
The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.
Parameters
- dns-name
-
Specifies the name of the default domain, up to 255 characters. Allowed values for characters are alphabetical (A-Z), numeric (0-9), the minus sign (-), and the period (.). For example, "3gpp-network.org”.
Platforms
7705 SAR Gen 2
default-fc
default-fc
Syntax
default-fc fc-name
no default-fc
Context
[Tree] (config>qos>sap-ingress default-fc)
Full Context
configure qos sap-ingress default-fc
Description
This command configures the default forwarding class for the policy. If an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass if associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy are classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.
The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.
Default
default-fc "be”
Parameters
- fc-name
-
Specify the forwarding class name for the queue. The value specified for fc-name must be one of the predefined forwarding classes in the system.
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
Platforms
7705 SAR Gen 2
default-instance
default-instance
Syntax
[no] default-instance
Context
[Tree] (config>service>vprn>isis>if default-instance)
Full Context
configure service vprn isis interface default-instance
Description
This command enables a non-MI capable router to establish an adjacency and operate with an SR OS in a non-zero instance. If the router does not receive IID-TLVs, it establishes an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router establishes an adjacency in the configured non-zero instance. The router then operates in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
Default
no default-instance
Platforms
7705 SAR Gen 2
default-instance
Syntax
[no] default-instance
Context
[Tree] (config>router>isis>interface default-instance)
Full Context
configure router isis interface default-instance
Description
This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
Default
no default-instance
Platforms
7705 SAR Gen 2
default-ipv4-multicast-metric
default-ipv4-multicast-metric
Syntax
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context
[Tree] (config>service>vprn>isis>level default-ipv4-multicast-metric)
Full Context
configure service vprn isis level default-ipv4-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv4-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Platforms
7705 SAR Gen 2
default-ipv4-multicast-metric
Syntax
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context
[Tree] (config>router>isis>level default-ipv4-multicast-metric)
Full Context
configure router isis level default-ipv4-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv4-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Platforms
7705 SAR Gen 2
default-ipv6-multicast-metric
default-ipv6-multicast-metric
Syntax
default-ipv6-multicast-metric metric
no default-ipv6-multicast-metric
Context
[Tree] (config>router>isis>level default-ipv6-multicast-metric)
Full Context
configure router isis level default-ipv6-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv6-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).
1 to 16777215
Platforms
7705 SAR Gen 2
default-ipv6-unicast-metric
default-ipv6-unicast-metric
Syntax
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context
[Tree] (config>service>vprn>isis>level default-ipv6-unicast-metric)
Full Context
configure service vprn isis level default-ipv6-unicast-metric
Description
This command specifies the default metric for IPv6 unicast.
Default
default-ipv6-unicast-metric 10
Parameters
- ipv6-metric
-
Specifies the default metric for IPv6 unicast.
Platforms
7705 SAR Gen 2
default-ipv6-unicast-metric
Syntax
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context
[Tree] (config>router>isis>level default-ipv6-unicast-metric)
Full Context
configure router isis level default-ipv6-unicast-metric
Description
This command specifies the default metric for IPv6 unicast.
The no form of this command reverts to the default value.
Default
default-ipv6-unicast-metric 10
Parameters
- ipv6-metric
-
Specifies the default metric for IPv6 unicast.
Platforms
7705 SAR Gen 2
default-label-preference
default-label-preference
Syntax
default-label-preference [ebgp ebgp label preference] [ibgp ibgp label preference]
no default-label-preference
Context
[Tree] (config>router>bgp>group>neighbor default-label-preference)
[Tree] (config>router>bgp>group default-label-preference)
[Tree] (config>router>bgp default-label-preference)
Full Context
configure router bgp group neighbor default-label-preference
configure router bgp group default-label-preference
configure router bgp default-label-preference
Description
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.
The preference value assigned by the default-label-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.
The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.
Default
no default-label-preference
Parameters
- ebgp label preference
-
Specifies the EBGP default preference label value.
- ibgp label preference
-
Specifies the IBGP default preference label value.
Platforms
7705 SAR Gen 2
default-metric
default-metric
Syntax
default-metric ipv4 metric
no default-metric
Context
[Tree] (config>service>vprn>isis>level default-metric)
Full Context
configure service vprn isis level default-metric
Description
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
Default
default-metric 10
Parameters
- ipv4 metric
-
Specifies the default metric for IPv4 unicast.
Platforms
7705 SAR Gen 2
default-metric
Syntax
default-metric metric
no default-metric
Context
[Tree] (config>service>vprn>ospf3>area>stub default-metric)
[Tree] (config>service>vprn>ospf>area>stub default-metric)
Full Context
configure service vprn ospf3 area stub default-metric
configure service vprn ospf area stub default-metric
Description
This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
Default
default-metric 1
Parameters
- metric
-
The metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Platforms
7705 SAR Gen 2
default-metric
Syntax
default-metric ipv4 metric
no default-metric
Context
[Tree] (config>router>isis>level default-metric)
Full Context
configure router isis level default-metric
Description
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
The no form of this command reverts to the default value.
Default
default-metric 10
Parameters
- ipv4 metric
-
Specifies the default metric for IPv4 unicast.
Platforms
7705 SAR Gen 2
default-metric
Syntax
default-metric metric
no default-metric
Context
[Tree] (config>router>ospf3>area>stub default-metric)
[Tree] (config>router>ospf>area>stub default-metric)
Full Context
configure router ospf3 area stub default-metric
configure router ospf area stub default-metric
Description
This command configures the metric used by the area border router (ABR) for the default route into a stub area.
The default metric should only be configured on an ABR of a stub area.
An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
Default
default-metric 1
Parameters
- metric
-
Specifies the metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Platforms
7705 SAR Gen 2
default-path
default-path
Syntax
default-path path-name
Context
[Tree] (config>router>mpls>lsp-template default-path)
Full Context
configure router mpls lsp-template default-path
Description
A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.
Parameters
- path-name
-
Configures the default path binding
Platforms
7705 SAR Gen 2
default-preference
default-preference
Syntax
default-preference [ebgp ebgp preference] [ibgp ibgp preference]
no default-preference
Context
[Tree] (config>router>bgp>group default-preference)
[Tree] (config>router>bgp>group>neighbor default-preference)
[Tree] (config>router>bgp default-preference)
Full Context
configure router bgp group default-preference
configure router bgp group neighbor default-preference
configure router bgp default-preference
Description
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.
The preference value assigned by the default-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.
The no form of the command lets BGP route-table preference to be controlled by other means.
Default
no default-preference
Parameters
- ebgp preference
-
Specifies the EBGP default preference value.
- ibgp preference
-
Specifies the IBGP default preference value.
Platforms
7705 SAR Gen 2
default-priority
default-priority
Syntax
default-priority {high | low}
no default-priority
Context
[Tree] (config>qos>sap-ingress default-priority)
Full Context
configure qos sap-ingress default-priority
Description
This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.
Default
default-priority low
Parameters
- high
-
Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
7705 SAR Gen 2
default-result
default-result
Syntax
default-result {revoked | good}
no default-result
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>ipsec>trans-mode-prof>dyn>cert>status-verify default-result)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
[Tree] (config>service>ies>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn>cert>status-verify default-result)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
[Tree] (config>router>if>ipsec>ipsec-tun>dyn>cert>status-verify default-result)
Full Context
configure service vprn interface sap ipsec-gw cert status-verify default-result
configure ipsec ipsec-transport-mode-profile dynamic-keying cert status-verify default-result
configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure service ies interface sap ipsec-gw cert status-verify default-result
configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
Description
This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.
Default
default-result revoked
Parameters
- good
-
Specifies that the certificate is considered as acceptable.
- revoked
-
Specifies that the certificate is considered as revoked.
Platforms
7705 SAR Gen 2
default-result
Syntax
default-result certificate-tls-status
no default-result
Context
[Tree] (config>system>security>tls>client-tls-profile>status-verify default-result)
[Tree] (config>system>security>tls>server-tls-profile>status-verify default-result)
Full Context
configure system security tls client-tls-profile status-verify default-result
configure system security tls server-tls-profile status-verify default-result
Description
This command configures the default result of the entity certificate verification in the TLS client or server profile. This command overwrites the EE certificate revocation verification for the TLS client or server profile.
The no form of this command leaves the configured default result unchanged.
Default
default-result revoked
Parameters
- certificate-tls-status
-
Specifies the certificate status.
Platforms
7705 SAR Gen 2
default-route-tag
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>service>vprn>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>epipe>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>mpls default-route-tag)
Full Context
configure service vprn bgp-evpn mpls default-route-tag
configure service epipe bgp-evpn mpls default-route-tag
configure service vpls bgp-evpn mpls default-route-tag
Description
This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.
The following are examples of the conflict priority handling:
-
If a service is configured with both default-route-tag X and proxy-arp>evpn-route-tag Y, EVPN uses route tag Y when sending EVPN proxy-arp routes to the BGP RIB for advertisement.
-
If a given IP-prefix route is tagged in the route-table with tag A and the R-VPLS, in which the route is advertised, uses B as the default-route-tag, then EVPN keeps tag A when sending the route to the BGP RIB.
The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.
The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).
Default
no default-route-tag
Parameters
- tag
-
Specifies the route tag.
Platforms
7705 SAR Gen 2
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>service>vprn>isis default-route-tag)
Full Context
configure service vprn isis default-route-tag
Description
This command configures the route tag for default route for the router or VPRN service.
Parameters
- tag
-
Assigns a default tag.
Platforms
7705 SAR Gen 2
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>router>isis default-route-tag)
Full Context
configure router isis default-route-tag
Description
This command configures the route tag for default route.
Parameters
- tag
-
Assigns a default tag.
Platforms
7705 SAR Gen 2
default-route-target
default-route-target
Syntax
[no] default-route-target
Context
[Tree] (config>router>bgp>group default-route-target)
[Tree] (config>router>bgp>group>neighbor default-route-target)
Full Context
configure router bgp group default-route-target
configure router bgp group neighbor default-route-target
Description
This command originates the default RTC route (zero prefix length) towards the selected peers.
Default
no default-route-target
Platforms
7705 SAR Gen 2
default-router
default-router
Syntax
default-router ip-address [ip-address]
no default-router
Context
[Tree] (config>router>dhcp>server>pool>subnet>options default-router)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options default-router)
Full Context
configure router dhcp local-dhcp-server pool subnet options default-router
configure subscriber-mgmt local-user-db ipoe host options default-router
Description
This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.
The no form of this command removes the address(es) from the configuration.
Parameters
- ip-address
-
Specifies up to four default router IP addresses. Each address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
Platforms
7705 SAR Gen 2
default-sap
default-sap
Syntax
[no] default-sap
Context
[Tree] (config>service>vpls>sap>managed-vlan-list default-sap)
Full Context
configure service vpls sap managed-vlan-list default-sap
Description
This command adds a default SAP to the managed VLAN list.
The no form of this command removes the default SAP to the managed VLAN list.
Platforms
7705 SAR Gen 2
default-secure-service
default-secure-service
Syntax
default-secure-service service-id ip-int-name
no default-secure-service
Context
[Tree] (config>service>ies>if>sap>ipsec-gw default-secure-service)
[Tree] (config>service>vprn>if>sap>ipsec-gw default-secure-service)
Full Context
configure service ies interface sap ipsec-gw default-secure-service
configure service vprn interface sap ipsec-gw default-secure-service
Description
This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.
Parameters
- service-id
-
Specifies a default secure service.
- ip-int-name
-
The name of private IPsec tunnel interface.
Platforms
7705 SAR Gen 2
default-tunnel-template
default-tunnel-template
Syntax
default-tunnel-template ipsec-template-identifier
no default-tunnel-template
Context
[Tree] (config>service>ies>if>sap>ipsec-gw default-tunnel-template)
[Tree] (config>service>vprn>if>sap>ipsec-gw default-tunnel-template)
Full Context
configure service ies interface sap ipsec-gw default-tunnel-template
configure service vprn interface sap ipsec-gw default-tunnel-template
Description
This command configures a default tunnel policy template for the gateway.
Platforms
7705 SAR Gen 2
delay
delay
Syntax
delay
Context
[Tree] (config>router>if>if-attribute delay)
Full Context
configure router interface if-attribute delay
Description
Commands in this context configure or apply delay interface attributes such as static delay.
Platforms
7705 SAR Gen 2
delay
Syntax
delay interval
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator delay)
Full Context
configure system management-interface cli md-cli environment progress-indicator delay
Description
This command sets the delay before the progress indicator is displayed in the MD-CLI.
Default
delay 500
Parameters
- interval
-
Specifies the delay interval, in milliseconds.
Platforms
7705 SAR Gen 2
delay-event
delay-event
Syntax
delay-event {forward | backward | round-trip} lowest-bin bin-number thresholdraise-threshold [clear clear-threshold]
no delay-event {forward | backward | round-trip}
Context
[Tree] (config>oam-pm>bin-group>bin-type delay-event)
Full Context
configure oam-pm bin-group bin-type delay-event
Description
This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.
The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.
Parameters
- forward
-
Specifies the threshold is applied to the forward direction bin.
- backward
-
Specifies the threshold is applied to the backward direction bin.
- round-trip
-
Specifies the threshold is applied to the roundtrip direction bin.
- bin-number
-
Specifies the number of the bin that the threshold is applied to. This bin and all higher bins are monitored to determine if the sum total results in these bins have reached or crossed the configured threshold.
- raise-threshold
-
Specifies the rising numerical value in the range that determines when the event is to be generated, when value reached.
- clear-threshold
-
Specifies an optional numerical value in the range threshold used to indicate stateful behavior that allows the operator to configure a lower value than the rising threshold that determines when the clear event should be generated. Clear is generated when the end of measurement interval count is less than or equal to the configured value. If this option is not configured the behavior is stateless. Zero means no results can exist in the lower bin or any higher.
Platforms
7705 SAR Gen 2
delay-event-exclusion
delay-event-exclusion
Syntax
delay-event-exclusion {forward | backward | round-trip} lowest-bin bin-number
no delay-event-exclusion {forward | backward | round-trip}
Context
[Tree] (config>oam-pm>bin-group>bin-type delay-event-exclusion)
Full Context
configure oam-pm bin-group bin-type delay-event-exclusion
Description
This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.
The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.
The no form of this command does not exclude any values from the configured TCA threshold.
Default
no delay-event-exclusion forward
no delay-event-exclusion backward
no delay-event-exclusion round-trip
Parameters
- forward
-
Specifies the forward direction bin.
- backward
-
Specifies the backward direction bin.
- round-trip
-
Specifies the round-trip direction bin.
- bin-number
-
Specifies the number of the lowest bin that the exclusion is applied to. This bin and all higher bins are excluded from the delay-event (TCA) count. If no bin numbers are configured, this command is ignored.
Platforms
7705 SAR Gen 2
delay-events
delay-events
Syntax
[no] delay-events
Context
[Tree] (config>oam-pm>session>meas-intvl>event-mon delay-events)
Full Context
configure oam-pm session meas-interval event-mon delay-events
Description
This command enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shut down all the tests in the session.
The no form of this command disables the monitoring of all configured delay events.
Platforms
7705 SAR Gen 2
delay-metric-limit
delay-metric-limit
Syntax
delay-metric-limit delay-metric-limit
no delay-metric-limit
Context
[Tree] (config>router>mpls>lsp>secondary delay-metric-limit)
[Tree] (config>router>mpls>lsp>primary delay-metric-limit)
Full Context
configure router mpls lsp secondary delay-metric-limit
configure router mpls lsp primary delay-metric-limit
Description
This command configures the upper limit of the delay metric used by the local CSPF in the LSP path computation. The configured limit is used only if the configured metric type is delay. (The metric type is configured using the configure router mpls lsp metric-type or configure router mpls lsp-template metric-type command.)
The no form of this command causes the computation to select the lowest latency path if the configured metric type is delay.
Default
no delay-metric-limit
Parameters
- delay-metric-limit
-
Specifies the limit, in microseconds.
Platforms
7705 SAR Gen 2
delay-normalization
delay-normalization
Syntax
[no] delay-normalization
Context
[Tree] (config>router>isis>interface delay-normalization)
Full Context
configure router isis interface delay-normalization
Description
Commands in this context configure delay normalization for the interface within the IGP instance.
When configured, the normalized delay is used by the respective TLVs within the IGP link-state packets.
The no form of this command removes the delay normalization configuration. When unconfigured, the measured delay is used by the respective TLVs within the IGP link-state packets.
Default
no delay-normalization
Platforms
7705 SAR Gen 2
delay-normalization
Syntax
[no] delay-normalization
Context
[Tree] (config>router>ospf>area>interface delay-normalization)
Full Context
configure router ospf area interface delay-normalization
Description
Commands in this context configure delay normalization for the interface within the IGP instance.
When configured, the normalized delay is used by the respective TLVs within the IGP link-state packets.
The no form of this command removes the delay normalization configuration. When unconfigured, the measured delay is used by the respective TLVs within the IGP link-state packets.
Default
no delay-normalization
Platforms
7705 SAR Gen 2
delay-on-boot
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>grpc delay-on-boot)
Full Context
configure system grpc delay-on-boot
Description
This command configures the delay timer for gRPC connections. When the timer expires, gRPC becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that connections are accepted after the system boots and gRPC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
7705 SAR Gen 2
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>netconf>listen delay-on-boot)
Full Context
configure system netconf listen delay-on-boot
Description
This command configures the delay timer for NETCONF connections. When the timer expires, NETCONF becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that connections are accepted after the system boots and NETCONF becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
7705 SAR Gen 2
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>grpc-tunnel delay-on-boot)
Full Context
configure system grpc-tunnel delay-on-boot
Description
This command configures the delay timer for gRPC tunnels. When the timer expires, gRPC tunnels become operational and connections are accepted. This delay prevents automation from trying to initiate gRPC tunnels while it is still converging.
The no form of this command specifies that gRPC tunnels are initiated after the system boots and gPRC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
7705 SAR Gen 2
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>management-interface>remote-management delay-on-boot)
Full Context
configure system management-interface remote-management delay-on-boot
Description
This command configures the delay timer for remote management connections over gRPC. When the timer expires, remote management becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that remote management connections are accepted after the system boots and gRPC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
7705 SAR Gen 2
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>telemetry>persistent-subscriptions delay-on-boot)
Full Context
configure system telemetry persistent-subscriptions delay-on-boot
Description
This command configures the delay timer for gRPC telemetry persistent subscriptions. When the timer expires, gRPC telemetry persistent subscriptions become operational and connections are initiated. This delay prevents the system from trying to establish gRPC persistent subscriptions while it is still converging.
The no form of this command specifies that gRPC telemetry persistent subscriptions are initiated after the system boots and gRPC is operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
7705 SAR Gen 2
delay-tolerance-interval
delay-tolerance-interval
Syntax
delay-tolerance-interval [delay-tolerance-interval]
no delay-tolerance-interval
Context
[Tree] (config>router>isis>if>delay-normalization delay-tolerance-interval)
Full Context
configure router isis interface delay-normalization delay-tolerance-interval
Description
This command configures the interval, in microseconds, used by the IGP between two delay values.
The no form of this command reverts to the default.
Default
10 usec
Parameters
- delay-tolerance-interval
-
Specifies the delay tolerance interval, in microseconds.
Platforms
7705 SAR Gen 2
delay-tolerance-interval
Syntax
delay-tolerance-interval [delay-tolerance-interval]
no delay-tolerance-interval
Context
[Tree] (config>router>ospf>area>if>delay-normalization delay-tolerance-interval)
Full Context
configure router ospf area interface delay-normalization delay-tolerance-interval
Description
This command configures the interval used by the IGP between two delay values on the interface.
The no form of this command reverts to the default.
Default
10 usec
Parameters
- delay-tolerance-interval
-
Specifies the delay tolerance interval, in microseconds.
Platforms
7705 SAR Gen 2
delegated-prefix-length
delegated-prefix-length
Syntax
delegated-prefix-length [minimum prefix-length] [maximum prefix-length]
no delegated-prefix-length
Context
[Tree] (config>service>vprn>dhcp6>server>pool delegated-prefix-length)
[Tree] (config>router>dhcp6>server>pool delegated-prefix-length)
Full Context
configure service vprn dhcp6 local-dhcp-server pool delegated-prefix-length
configure router dhcp6 local-dhcp-server pool delegated-prefix-length
Description
This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.
The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.
The no form of this command reverts to the default.
Default
delegated-prefix-length 64 minimum 48 maximum 64
Parameters
- prefix-length
-
Specifies the minimum or maximum allowed prefix length, in bits.
Platforms
7705 SAR Gen 2
delete
delete
Syntax
delete file-url [force] [no-redirect] [client-tls-profile profile] [proxy proxy-url]
Context
[Tree] (file delete)
Full Context
file delete
Description
This command deletes the specified file.
The optional wildcard (*) can be used to delete multiple files that share a common (partial) prefix and/or (partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches the wildcard:
"Delete file <filename> (y/n)?”
Parameters
- file-url
-
Specifies the file name to delete.
- force
-
Forces an immediate deletion of the specified file(s). The command file delete * force deletes all the wildcard matching files without displaying a user prompt message. This command also automatically accepts HTTP redirects unless overridden by the no-redirect parameter.
- profile
-
Specifies the TLS client profile configured under config>system>security>tls>client-tls-profile to use.
- proxy-url
-
Specifies the URL of an HTTP proxy. For example, http://proxy.mydomain.com:8000. This URL must be an HTTP URL and not an HTTPS URL.
- no-redirect
-
Specifies to automatically refuse any HTTP redirects without prompting the user.
Platforms
7705 SAR Gen 2
delete
Syntax
delete [line]
Context
[Tree] (candidate delete)
Full Context
candidate delete
Description
This command deletes the selected CLI node (which includes all sub-branches). The deleted lines are also copied into a temporary buffer that can be used for a subsequent insert.
Parameters
- line
-
Indicates which line to delete.
Platforms
7705 SAR Gen 2
delete
Syntax
delete [{checkpoint-id | rescue | latest-rb}]
Context
[Tree] (admin>rollback delete)
Full Context
admin rollback delete
Description
This command deletes a rollback checkpoint and causes the suffixes to be adjusted (decremented) for all checkpoints older that the one that was deleted (to close the hole in the list of checkpoint files and create room to create another checkpoint).
If config redundancy rollback-sync is enabled, a rollback delete will also delete the equivalent checkpoint on the standby CF and shuffle the suffixes on the standby CF.
It is not advised to manually delete a rollback checkpoint (for example, using a file delete command). If a rollback checkpoint file is manually deleted without using the admin rollback delete command then the suffixes of the checkpoint files are not shuffled, nor is the equivalent checkpoint file deleted from the standby CF. This manual deletion creates a hole in the checkpoint file list until enough new checkpoints have been created to roll the hole off the end of the list.
Parameters
- checkpoint-id
-
An ID indicating a specific rollback checkpoint. A checkpoint-id of 1 indicates the rollback checkpoint file (at the configured rollback location) with *.rb.1 as the suffix, 2 for file *.rb.2, and so on.
- latest-rb
-
Specifies the most recently created rollback checkpoint (corresponds to the file-url.rb rollback checkpoint file).
- rescue
-
Deletes the rescue checkpoint. No checkpoint suffix numbers are changed.
Platforms
7705 SAR Gen 2
delete-config
delete-config
Syntax
[no] delete-config
Context
[Tree] (configure>system>security>profile>netconf>base-op-authorization delete-config)
Full Context
configure system security profile netconf base-op-authorization delete-config
Description
This command enables the NETCONF <delete-config> RPC.
The no form of this command disables the RPC.
Default
no delete-config
The operation is enabled by default in the built-in system-generated administrative profile.
Platforms
7705 SAR Gen 2
delivery-service
delivery-service
Syntax
delivery-service service-id
delivery-service name service-name
no delivery-service
Context
[Tree] (config>service>vprn>if>sap>ip-tunnel delivery-service)
[Tree] (config>service>ies>if>sap>ip-tunnel delivery-service)
Full Context
configure service vprn interface sap ip-tunnel delivery-service
configure service ies interface sap ip-tunnel delivery-service
Description
This command sets the delivery service for GRE encapsulated packets associated with a particular GRE tunnel. This is the IES or VPRN service where the GRE encapsulated packets are injected and terminated. The delivery service may be the same service that owns the private tunnel SAP associated with the GRE tunnel. The GRE tunnel does not come up until a valid delivery service is configured.
The no form of this command deletes the delivery-service from the GRE tunnel configuration.
Parameters
- service-id
-
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.
This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The delivery-service name service-name variant can be used in all configuration modes.
- service-name
-
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.
Platforms
7705 SAR Gen 2
delta-in-use-limit
delta-in-use-limit
Syntax
delta-in-use-limit limit
no delta-in-use-limit
Context
[Tree] (config>vrrp>policy delta-in-use-limit)
Full Context
configure vrrp policy delta-in-use-limit
Description
This command sets a lower limit on the virtual router in-use priority that can be derived from the delta priority control events.
Each vrrp-priority-id places limits on the delta priority control events to define the in-use priority of the virtual router instance. Setting this limit prevents the sum of the delta priority events from lowering the in-use priority value of the associated virtual router instances below the configured value.
The limit has no effect on explicit priority control events. Explicit priority control events are controlled by setting the in-use priority to any value between 1 and 254.
Only non-owner virtual router instances can be associated with VRRP priority control policies and their priority control events.
Once the total sum of all delta events is calculated and subtracted from the base priority of the virtual router instance, the result is compared to the delta-in-use-limit value. If the result is less than the limit, the delta-in-use-limit value is used as the virtual router in-use priority value. If an explicit priority control event overrides the delta priority control events, the delta-in-use-limit has no effect.
Setting the limit to a higher value than the default of 1 limits the effect of the delta priority control events on the virtual router instance base priority value. This allows for multiple priority control events while minimizing the overall effect on the in-use priority.
Changing the in-use-priority-limit causes an immediate re-evaluation of the in-use priority values for all virtual router instances associated with this vrrp-policy-id based on the current sum of all active delta control policy events.
The no form of the command reverts to the default value.
Default
delta-in-use-limit 1 — Specifies the lower limit of 1 for the in-use priority, as modified, by delta priority control events.
Parameters
- limit
-
Specifies the lower limit of the in-use priority base, as modified by priority control policies. The in-use-priority-limit has the same range as the non-owner virtual router instance base-priority parameter. If the result of the total delta priority control events minus the virtual router instances base-priority, is less than the in-use-priority-limit, the in-use-priority-limit value is used as the virtual router instances in-use priority value.
Setting the in-use-priority-limit to a value equal to or larger than the virtual router instance base-priority prevents the delta priority control events from having any effect on the virtual router instance in-use priority value.
Platforms
7705 SAR Gen 2
depleted-event
depleted-event
Syntax
[no] depleted-event
Context
[Tree] (config>router>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
Full Context
configure router dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
configure service vprn dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
Description
This command enables the system to send out a warning when the prefix with a configured length is no longer available in the provisioned prefix.
For example, if the prefix 2001:0:0:ffe0::/50 is created at the pool level using the pd and wan-host parameters, and the threshold for the prefix length is 64, configuring this command enables the system to send out a warning when there is no available /64 that can be allocated out of 2001:0:0:ffe0::/50.
The no form of this command disables the warnings.
Platforms
7705 SAR Gen 2
depleted-event
Syntax
[no] depleted-event
Context
[Tree] (config>service>vprn>dhcp6>server>pool>thresholds>minimum-free depleted-event)
[Tree] (config>router>dhcp6>server>pool>thresholds>minimum-free depleted-event)
Full Context
configure service vprn dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
configure router dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
Description
This command enables the system to send out warnings when the prefix with the configured length is no longer available in the pool.
The no form of this command disables the warnings.
Platforms
7705 SAR Gen 2
description
description
Syntax
description tiny-description-string
no description
Context
[Tree] (config>ipsec>static-sa description)
Full Context
configure ipsec static-sa description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- tiny-description-string
-
Specifies the description character string. Allowed values are any string, up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description short-description-string
no description
Context
[Tree] (config>card>fp>ingress>access>queue-group description)
[Tree] (config>filter>dhcp-filter description)
[Tree] (config>filter>ipv6-filter>entry description)
[Tree] (config>qos>match-list>ipv6-prefix-list description)
[Tree] (config>subscr-mgmt>loc-user-db description)
[Tree] (config>router>dhcp>server description)
[Tree] (config>filter>redirect-policy description)
[Tree] (config>system>persistence>dhcp-server description)
[Tree] (config>system>script-control>script description)
[Tree] (config>filter>redirect-policy>destination description)
[Tree] (config>router>rip>group description)
[Tree] (config>filter>ip-exception>entry description)
[Tree] (config>service>ies>if>sap>ip-tunnel description)
[Tree] (config>qos>network-queue description)
[Tree] (config>service>vprn>bgp>group description)
[Tree] (config>service>vprn>spoke-sdp description)
[Tree] (config>filter>log description)
[Tree] (config>router>static-route-entry>indirect description)
[Tree] (config>router>dhcp6>server>pool description)
[Tree] (config>service>vprn>if>sap description)
[Tree] (config>card>fp>ingress>network>queue-group description)
[Tree] (config>service>epipe description)
[Tree] (config>system>persistence>nat-fwd description)
[Tree] (config>service>vprn>bgp description)
[Tree] (config>router>ripng description)
[Tree] (config>service>vprn>static-route-entry>black-hole description)
[Tree] (config>router>origin-validation>rpki-session description)
[Tree] (config>ipsec>tnl-temp description)
[Tree] (config>port>ethernet>access>egr>qgrp description)
[Tree] (config>filter>ip-exception description)
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel description)
[Tree] (config>service>vprn>bgp>group>neighbor description)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel description)
[Tree] (config>service>ies>if>dhcp description)
[Tree] (config>router>bgp description)
[Tree] (config>port-xc>pxc description)
[Tree] (config>ipsec>trans-mode-prof description)
[Tree] (config>ipsec>client-db description)
[Tree] (config>router>fad>flex-algo description)
[Tree] (config>service>vprn>rip>group description)
[Tree] (config>port>ethernet>network>egr>qgrp description)
[Tree] (config>system>cron>sched description)
[Tree] (config>service>epipe>spoke-sdp description)
[Tree] (config>subscr-mgmt>rip-plcy description)
[Tree] (config>router>ripng>group description)
[Tree] (config>system>persistence>ancp description)
[Tree] (config>router>dhcp6>server description)
[Tree] (config>router>bgp>group description)
[Tree] (config>router>ripng>group>neighbor description)
[Tree] (config>router>if>dhcp description)
[Tree] (config>qos>policer-control-policy description)
[Tree] (config>service>epipe>endpoint description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>service>vprn>ripng>group>neighbor description)
[Tree] (config>filter>ipv6-exception>entry description)
[Tree] (config>filter>match-list>protocol-list description)
[Tree] (config>router>rip description)
[Tree] (config>system>management-interface>remote-management>manager description)
[Tree] (config>service>vprn>static-route-entry>indirect description)
[Tree] (config>router>rip>group>neighbor description)
[Tree] (config>qos>policer-control-policy>tier>arbiter description)
[Tree] (config>service>vprn>static-route-entry>next-hop description)
[Tree] (config>filter>match-list>port-list description)
[Tree] (config>filter>ip-filter>entry description)
[Tree] (config>qos>match-list>ip-prefix-list description)
[Tree] (config>service>vprn>static-route-entry>grt description)
[Tree] (config>system>grpc-tunnel>tunnel description)
[Tree] (config>router>dhcp>server>pool description)
[Tree] (config>isa>tunnel-group description)
[Tree] (config>service>vprn>if>dhcp description)
[Tree] (config>redundancy>multi-chassis>peer description)
[Tree] (config>isa>tunnel-mem-pool description)
[Tree] (config>service>vprn>ripng>group description)
[Tree] (config>ipsec>ike-policy description)
[Tree] (config>service>ies description)
[Tree] (config>service>vprn>ripng description)
[Tree] (config>router>route-next-hop-policy>template description)
[Tree] (config>filter>match-list>ip-prefix-list description)
[Tree] (config>service>vprn>rip>group>neighbor description)
[Tree] (config>filter>ipv6-exception description)
[Tree] (config>router>bgp>group>neighbor description)
[Tree] (config>filter>ipv6-filter description)
[Tree] (config>router>static-route-entry>next-hop description)
[Tree] (config>service>ies>if>spoke-sdp description)
[Tree] (config>port>ethernet>access>ing>qgrp description)
[Tree] (config>system>grpc-tunnel>destination-group description)
[Tree] (config>router>network-domains>network-domain description)
[Tree] (config>service>ies>if>ipv6>dhcp6-relay description)
[Tree] (config>service>vprn>rip description)
[Tree] (config>filter>match-list>ipv6-prefix-list description)
[Tree] (config>filter>ip-filter description)
[Tree] (config>service>vpls>endpoint description)
[Tree] (config>router>static-route-entry>black-hole description)
Full Context
configure card fp ingress access queue-group description
configure filter dhcp-filter description
configure filter ipv6-filter entry description
configure qos match-list ipv6-prefix-list description
configure subscriber-mgmt local-user-db description
configure router dhcp local-dhcp-server description
configure filter redirect-policy description
configure system persistence dhcp-server description
configure system script-control script description
configure filter redirect-policy destination description
configure router rip group description
configure filter ip-exception entry description
configure service ies interface sap ip-tunnel description
configure qos network-queue description
configure service vprn bgp group description
configure service vprn spoke-sdp description
configure filter log description
configure router static-route-entry indirect description
configure router dhcp6 local-dhcp-server pool description
configure service vprn interface sap description
configure card fp ingress network queue-group description
configure service epipe description
configure system persistence nat-port-forwarding description
configure service vprn bgp description
configure router ripng description
configure service vprn static-route-entry black-hole description
configure router origin-validation rpki-session description
configure ipsec tunnel-template description
configure port ethernet access egress queue-group description
configure filter ip-exception description
configure service vprn static-route-entry ipsec-tunnel description
configure service vprn bgp group neighbor description
configure service vprn interface sap ipsec-tunnel description
configure service ies interface dhcp description
configure router bgp description
configure port-xc pxc description
configure ipsec ipsec-transport-mode-profile description
configure ipsec client-db description
configure router flexible-algorithm-definitions flex-algo description
configure service vprn rip group description
configure port ethernet network egress queue-group description
configure system cron schedule description
configure service epipe spoke-sdp description
configure subscriber-mgmt rip-policy description
configure router ripng group description
configure system persistence ancp description
configure router dhcp6 local-dhcp-server description
configure router bgp group description
configure router ripng group neighbor description
configure router interface dhcp description
configure qos policer-control-policy description
configure service epipe endpoint description
configure service vprn interface sap ip-tunnel description
configure service vprn ripng group neighbor description
configure filter ipv6-exception entry description
configure filter match-list protocol-list description
configure router rip description
configure system management-interface remote-management manager description
configure service vprn static-route-entry indirect description
configure router rip group neighbor description
configure qos policer-control-policy tier arbiter description
configure service vprn static-route-entry next-hop description
configure filter match-list port-list description
configure filter ip-filter entry description
configure qos match-list ip-prefix-list description
configure service vprn static-route-entry grt description
configure system grpc-tunnel tunnel description
configure router dhcp local-dhcp-server pool description
configure isa tunnel-group description
configure service vprn interface dhcp description
configure redundancy multi-chassis peer description
configure isa tunnel-member-pool description
configure service vprn ripng group description
configure ipsec ike-policy description
configure service ies description
configure service vprn ripng description
configure router route-next-hop-policy template description
configure filter match-list ip-prefix-list description
configure service vprn rip group neighbor description
configure filter ipv6-exception description
configure router bgp group neighbor description
configure filter ipv6-filter description
configure router static-route-entry next-hop description
configure service ies interface spoke-sdp description
configure port ethernet access ingress queue-group description
configure system grpc-tunnel destination-group description
configure router network-domains network-domain description
configure service ies interface ipv6 dhcp6-relay description
configure service vprn rip description
configure filter match-list ipv6-prefix-list description
configure filter ip-filter description
configure service vpls endpoint description
configure router static-route-entry black-hole description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- short-description-string
-
Specifies the description entered as a character string up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description short-description-string
no description
Context
[Tree] (config>saa>test description)
[Tree] (config>qos>network description)
[Tree] (config>oam-pm>session description)
[Tree] (config>mirror>mirror-dest description)
[Tree] (config>aaa>radius-srv-plcy description)
[Tree] (config>service>vpls>mesh-sdp description)
[Tree] (config>service>vprn>nat>outside>pool>address-range description)
[Tree] (config>service>vpls>sap description)
[Tree] (config>qos>network>egress>ip-criteria>entry description)
[Tree] (config>service>vprn>twamp-light>reflector description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>qos>network>ingress>ip-criteria>entry description)
[Tree] (config>service>vpls>spoke-sdp description)
[Tree] (config>router>policy-options>policy-statement description)
[Tree] (config>qos>sap-egress>ip-criteria>entry description)
[Tree] (config>qos>network>egress>ipv6-criteria>entry description)
[Tree] (config>qos>sap-ingress>policer description)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry description)
[Tree] (config>service>vprn>radius-server>server description)
[Tree] (config>router>radius-server>server description)
[Tree] (config>service>vprn>twamp-light>reflector>prefix description)
[Tree] (config>test-oam>twamp>server>prefix description)
[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp description)
[Tree] (config>router>twamp-light>reflector description)
[Tree] (cfg>qos>qgrps>ing>qgrp>policer description)
[Tree] (config>qos>sap-egress description)
[Tree] (config>service>vprn description)
[Tree] (config>qos>sap-ingress description)
[Tree] (config>vrrp>policy description)
[Tree] (config>service>nat>nat-policy description)
[Tree] (config>oam-pm>bin-group description)
[Tree] (config>router>policy-options>policy-statement>entry description)
[Tree] (config>qos>sap-ingress>mac-criteria>entry description)
[Tree] (config>service>vprn>nat>outside>pool description)
[Tree] (config>mirror>mirror-dest>endpoint description)
[Tree] (config>router>nat>outside>pool description)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry description)
[Tree] (config>qos>sap-ingress>ip-criteria>entry description)
[Tree] (cfg>qos>qgrps>egr>qgrp>policer description)
[Tree] (config>qos>sap-egress>policer description)
[Tree] (config>router>twamp-light>reflector>prefix description)
[Tree] (cfg>qos>qgrps>ing>qgrp description)
[Tree] (config>isa>nat-group description)
[Tree] (config>service>mac-list description)
[Tree] (config>router>nat>outside>pool>address-range description)
[Tree] (cfg>qos>qgrps>egr>qgrp description)
[Tree] (config>service>vpls>sap>dhcp description)
[Tree] (config>service>vpls description)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry description)
[Tree] (config>macsec>connectivity-association description)
[Tree] (config>service>vpls>split-horizon-group description)
Full Context
configure saa test description
configure qos network description
configure oam-pm session description
configure mirror mirror-dest description
configure aaa radius-server-policy description
configure service vpls mesh-sdp description
configure service vprn nat outside pool address-range description
configure service vpls sap description
configure qos network egress ip-criteria entry description
configure service vprn twamp-light reflector description
configure service vprn interface sap ip-tunnel description
configure qos network ingress ip-criteria entry description
configure service vpls spoke-sdp description
configure router policy-options policy-statement description
configure qos sap-egress ip-criteria entry description
configure qos network egress ipv6-criteria entry description
configure qos sap-ingress policer description
configure qos network ingress ipv6-criteria entry description
configure service vprn radius-server server description
configure router radius-server server description
configure service vprn twamp-light reflector prefix description
configure test-oam twamp server prefix description
configure service vprn ip-mirror-interface spoke-sdp description
configure router twamp-light reflector description
configure qos queue-group-templates ingress queue-group policer description
configure qos sap-egress description
configure service vprn description
configure qos sap-ingress description
configure vrrp policy description
configure service nat nat-policy description
configure oam-pm bin-group description
configure router policy-options policy-statement entry description
configure qos sap-ingress mac-criteria entry description
configure service vprn nat outside pool description
configure mirror mirror-dest endpoint description
configure router nat outside pool description
configure qos sap-ingress ipv6-criteria entry description
configure qos sap-ingress ip-criteria entry description
configure qos queue-group-templates egress queue-group policer description
configure qos sap-egress policer description
configure router twamp-light reflector prefix description
configure qos queue-group-templates ingress queue-group description
configure isa nat-group description
configure service mac-list description
configure router nat outside pool address-range description
configure qos queue-group-templates egress queue-group description
configure service vpls sap dhcp description
configure service vpls description
configure qos sap-egress ipv6-criteria entry description
configure macsec connectivity-association description
configure service vpls split-horizon-group description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- short-description-string
-
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description short-description-string
no description
Context
[Tree] (config>qos>scheduler-policy>tier>scheduler description)
[Tree] (config>log>filter>entry description)
[Tree] (config>system>security>keychain description)
[Tree] (config>log>filter description)
[Tree] (config>service>cust description)
[Tree] (config>system>security>pki>ca-profile description)
[Tree] (config>system>telemetry>destination-group description)
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry description)
[Tree] (config>system>security>user>public-keys>ecdsa>ecdsa-key description)
[Tree] (config>qos>port-scheduler-policy description)
[Tree] (config>qos>scheduler-policy description)
[Tree] (config>service>pw-template>split-horizon-group description)
[Tree] (config>log>event-trigger>event>trigger-entry description)
[Tree] (config>log>accounting-policy description)
[Tree] (config>log>snmp-trap-group description)
[Tree] (config>log>syslog description)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry description)
[Tree] (config>connection-profile-vlan description)
[Tree] (config>service>sdp description)
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry description)
[Tree] (config>log>event-handling>handler description)
[Tree] (config>grp-encryp>encryp-keygrp description)
[Tree] (config>log>log-id description)
[Tree] (config>service>cust>multi-service-site description)
[Tree] (config>log>event-trigger>event description)
[Tree] (config>log>file-id description)
[Tree] (config>system>security>dist-cpu-protection>policy description)
[Tree] (config>system>telemetry>persistent-subscriptions>subscription description)
[Tree] (config>log>event-handling>handler>action-list>entry description)
[Tree] (config>system>telemetry>sensor-groups>sensor-group description)
[Tree] (config>system>security>user>public-keys>rsa>rsa-key description)
Full Context
configure qos scheduler-policy tier scheduler description
configure log filter entry description
configure system security keychain description
configure log filter description
configure service customer description
configure system security pki ca-profile description
configure system telemetry destination-group description
configure system security management-access-filter mac-filter entry description
configure system security user public-keys ecdsa ecdsa-key description
configure qos port-scheduler-policy description
configure qos scheduler-policy description
configure service pw-template split-horizon-group description
configure log event-trigger event trigger-entry description
configure log accounting-policy description
configure log snmp-trap-group description
configure log syslog description
configure system security management-access-filter ipv6-filter entry description
configure connection-profile-vlan description
configure service sdp description
configure system security management-access-filter ip-filter entry description
configure log event-handling handler description
configure group-encryption encryption-keygroup description
configure log log-id description
configure service customer multi-service-site description
configure log event-trigger event description
configure log file-id description
configure system security dist-cpu-protection policy description
configure system telemetry persistent-subscriptions subscription description
configure log event-handling handler action-list entry description
configure system telemetry sensor-groups sensor-group description
configure system security user public-keys rsa rsa-key description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
No description is associated with the configuration context.
Parameters
- short-description-string
-
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description medium-description-string
no description
Context
[Tree] (config>service>epipe>sap description)
[Tree] (config>service>ies>interface>sap description)
Full Context
configure service epipe sap description
configure service ies interface sap description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- medium-description-string
-
Specifies the description character string. Allowed values are any string, up to 160 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description long-description-string
no description
Context
[Tree] (config>service>vprn>isis>link-group description)
[Tree] (config>router>isis>link-group description)
Full Context
configure service vprn isis link-group description
configure router isis link-group description
Description
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- long-description-string
-
Specifies the description character string. Allowed values are any string, up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
description
Syntax
description long-description-string
no description
Context
[Tree] (config>port description)
[Tree] (config>router>if description)
[Tree] (config>service>vpls>sap>dhcp6 description)
[Tree] (config>service>ies>interface description)
[Tree] (config>service>vpls>interface description)
[Tree] (config>service>vprn>if description)
[Tree] (config>service>vprn>nw-if description)
[Tree] (config>service>vprn>ip-mirror-interface description)
[Tree] (config>lag description)
Full Context
configure port description
configure router interface description
configure service vpls sap dhcp6 description
configure service ies interface description
configure service vpls interface description
configure service vprn interface description
configure service vprn network-interface description
configure service vprn ip-mirror-interface description
configure lag description
Description
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- long-description-string
-
Specifies the description character string. Allowed values are any string up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
designated-role
designated-role
Syntax
designated-role {standby | active}
no designated-role
Context
[Tree] (config>redundancy>multi-chassis>ipsec-domain designated-role)
Full Context
configure redundancy multi-chassis ipsec-domain designated-role
Description
This command sets the designated role for the tunnel group in the IPsec domain.
The no form of this command reverts to the default value.
Default
designated-role standby
Parameters
- standby
-
Sets the designated role to standby.
- active
-
Sets the designated role to active.
Platforms
7705 SAR Gen 2
dest-ip
dest-ip
Syntax
[no] dest-ip ip-address
Context
[Tree] (config>service>ies>if>sap>ip-tunnel dest-ip)
[Tree] (config>service>vprn>if>sap>ip-tunnel dest-ip)
Full Context
configure service ies interface sap ip-tunnel dest-ip
configure service vprn interface sap ip-tunnel dest-ip
Description
This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).
Unnumbered interfaces are not supported.
The no form of this command deletes the destination IP of the tunnel.
Parameters
- ip-address
-
Specifies the private IPv4 or IPv6 address of the remote IP tunnel endpoint. If this remote IP address is not within the subnet of the IP interface associated with the tunnel then the tunnel will not come up.
Platforms
7705 SAR Gen 2
dest-mac
dest-mac
Syntax
dest-mac {nearest-bridge | nearest-non-tpmr | nearest-customer}
Context
[Tree] (config>port>ethernet>lldp dest-mac)
Full Context
configure port ethernet lldp dest-mac
Description
This command configures destination MAC address parameters.
Default
dest-mac nearest-bridge
Parameters
- nearest-bridge
-
Specifies to use the nearest bridge.
- nearest-non-tpmr
-
Specifies to use the nearest non-Two-Port MAC Relay (TPMR).
- nearest-customer
-
Specifies to use the nearest customer.
Platforms
7705 SAR Gen 2
dest-mac
Syntax
dest-mac {nearest-bridge | nearest-non-tpmr | nearest-customer}
Context
[Tree] (config>lag>lldp-member-template dest-mac)
Full Context
configure lag lldp-member-template dest-mac
Description
This command configures the destination MAC address parameters.
Default
dest-mac nearest-bridge
Parameters
- nearest-bridge
-
Keyword to specify that the nearest bridge should be used.
- nearest-non-tpmr
-
Keyword to specify that the nearest non-Two-Port MAC Relay (TPMR) should be used.
- nearest-customer
-
Keyword to specify that the nearest customer should be used.
Platforms
7705 SAR Gen 2
dest-mac-address
dest-mac-address
Syntax
dest-mac-address mac-address [create]
no dest-mac-address mac-address
Context
[Tree] (config>macsec>mac-policy dest-mac-address)
Full Context
configure macsec mac-policy dest-mac-address
Description
This command specifies the destination MAC address.
The no form of this command removes the MAC address.
Parameters
- mac-address
-
Specifies the value of the MAC address policy.
- create
-
Mandatory to create the configuration.
Platforms
7705 SAR Gen 2
dest-mac-rewrite
dest-mac-rewrite
Syntax
dest-mac-rewrite ieee-address
no dest-mac-rewrite
Context
[Tree] (config>service>vpls>sap>egress dest-mac-rewrite)
Full Context
configure service vpls sap egress dest-mac-rewrite
Description
This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7705 SAR Gen 2 Router Configuration Guide for more details.
The no form disables the option.
Default
no dest-mac-rewrite
Parameters
- ieee-address
-
Specifies the MAC address
Platforms
7705 SAR Gen 2
dest-udp-port
dest-udp-port
Syntax
dest-udp-port udp-port-number
no dest-udp-port
Context
[Tree] (config>oam-pm>session>ip dest-udp-port)
Full Context
configure oam-pm session ip dest-udp-port
Description
This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.
The no form of this command removes the destination UDP port setting.
Parameters
- udp-port-number
-
Specifies the UDP source port.
Platforms
7705 SAR Gen 2
destination
destination
Syntax
destination ip-address
no destination
Context
[Tree] (config>oam-pm>session>ip destination)
Full Context
configure oam-pm session ip destination
Description
This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.
The no form of this command removes the destination parameters.
Parameters
- ip-address
-
Specifies the IP address of the IP peer to which the packet is directed.
Platforms
7705 SAR Gen 2
destination
Syntax
destination ip-address [create]
no destination ip-address
Context
[Tree] (config>filter>redirect-policy destination)
Full Context
configure filter redirect-policy destination
Description
This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.
The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.
Default
no destination
Parameters
- ip-address
-
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address to send the redirected traffic to.
Platforms
7705 SAR Gen 2
destination
Syntax
destination memory num-entries
destination syslog syslog-id
no destination
Context
[Tree] (config>filter>log destination)
Full Context
configure filter log destination
Description
This command configures the destination for filter log entries for the filter log ID.
Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).
If the filter log destination is memory, the maximum number of entries in the log must be specified.
The no form of the command deletes the filter log association.
Default
destination memory 1000
Parameters
- memory num-entries
-
Specifies the destination of the filter log ID is a memory log. The num-entries value is the maximum number of entries in the filter log expressed as a decimal integer.
- syslog syslog-id
-
Specifies the destination of the filter log ID is a Syslog server. The syslog-id parameter is the number of the Syslog server definition.
Platforms
7705 SAR Gen 2
destination
Syntax
destination {ip-address | fqdn} port port [create]
no destination {ip-address | fqdn} port port
Context
[Tree] (config>system>grpc-tunnel>destination-group destination)
[Tree] (config>system>telemetry>destination-group destination)
Full Context
configure system grpc-tunnel destination-group destination
configure system telemetry destination-group destination
Description
This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).
The no form of this command removes the destination from the destination group.
Parameters
- ip-address
-
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address.
- fqdn
-
Specifies the FQDN.
- port
-
Specifies the TCP destination port number.
- create
-
Keyword used to create a destination.
Platforms
7705 SAR Gen 2
destination-group
destination-group
Syntax
destination-group name [create]
no destination-group name
Context
[Tree] (config>system>grpc-tunnel destination-group)
[Tree] (config>system>telemetry destination-group)
Full Context
configure system grpc-tunnel destination-group
configure system telemetry destination-group
Description
Commands in this context configure commands for destination groups.
The no form of this command removes the destination group name.
Parameters
- name
-
Specifies the destination group name, up to 32 characters.
- create
-
Keyword used to create a destination group.
Platforms
7705 SAR Gen 2
destination-group
Syntax
destination-group name
no destination-group
Context
[Tree] (config>system>grpc-tunnel>tunnel destination-group)
Full Context
configure system grpc-tunnel tunnel destination-group
Description
This command assigns the specified destination group to a gRPC tunnel.
The no form of this command removes the specified destionation group from the gRPC tunnel.
Default
no destination-group
Parameters
- name
-
Specifies the destination group name, up to 32 characters
Platforms
7705 SAR Gen 2
destination-group
Syntax
destination-group name
no destination-group
Context
[Tree] (config>system>telemetry>persistent-subscriptions>subscription destination-group)
Full Context
configure system telemetry persistent-subscriptions subscription destination-group
Description
This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.
The no form of this command removes the destination group name from the persistent subscription.
Parameters
- name
-
Specifies the destination group name, up to 32 characters.
Platforms
7705 SAR Gen 2
destination-prefix
destination-prefix
Syntax
destination-prefix ip-prefix/length [nat-policy nat-policy-name]
no destination-prefix ip-prefix/length
Context
[Tree] (config>router>nat>inside destination-prefix)
[Tree] (config>service>vprn>nat>inside destination-prefix)
Full Context
configure router nat inside destination-prefix
configure service vprn nat inside destination-prefix
Description
This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).
Parameters
- ip-prefix
-
Specifies the IP prefix; host bits must be zero (0).
- length
-
Specifies the prefix length.
- nat-policy-name
-
Specifies the NAT policy name, up to 32 characters.
Platforms
7705 SAR Gen 2
detail-level
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>router>ip>dhcp6 detail-level)
[Tree] (debug>router>ip>dhcp detail-level)
[Tree] (debug>router>local-dhcp-server detail-level)
Full Context
debug router ip dhcp6 detail-level
debug router ip dhcp detail-level
debug router local-dhcp-server detail-level
Description
This command debugs the DHCP tracing detail level.
Parameters
- low
-
Displays a low detail level for DHCP debugging.
- medium
-
Displays a medium detail level for DHCP debugging.
- high
-
Displays a high detail level for DHCP debugging.
Platforms
7705 SAR Gen 2
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>router>radius detail-level)
Full Context
debug router radius detail-level
Description
This command specifies the output detail level of command debug router radius.
Default
detail-level medium
Parameters
- low
-
Specifies that the output includes packet type, server address, length, radius-server-policy name.
- medium
-
Specifies all output in low level including the RADIUS attributes in the packet.
- high
-
Specifies all output in medium level including the hex packet dump.
Platforms
7705 SAR Gen 2
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>igmp-snooping detail-level)
Full Context
debug service id igmp-snooping detail-level
Description
This command enables and configures the IGMP tracing detail level.
The no form of this command disables the IGMP tracing detail level.
Platforms
7705 SAR Gen 2
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>mld detail-level)
Full Context
debug service id mld-snooping detail-level
Description
This command enables and configures the MLD tracing detail level.
The no form of this command disables the MLD tracing detail level.
Platforms
7705 SAR Gen 2
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>dhcp detail-level)
Full Context
debug service id dhcp detail-level
Description
This command configures the DHCP tracing detail level.
The no form of the command disables debugging.
Parameters
- low
-
Displays a low detail level for DHCP debugging.
- medium
-
Displays a medium detail level for DHCP debugging.
- high
-
Displays a high detail level for DHCP debugging.
Platforms
7705 SAR Gen 2
detect
detect
Syntax
detect num-moves num-moves window minutes [trusted-mac-move-factor factor]
Context
[Tree] (config>service>vpls>bgp-evpn>mac-duplication detect)
Full Context
configure service vpls bgp-evpn mac-duplication detect
Description
This command modifies the behavior of the mac-duplication command, which is always enabled by default. It monitors the number of moves of a MAC address for a period of time (window).
Default
detect num-moves 5 window 3 trusted-mac-move-factor 1
Parameters
- num-moves
-
Identifies the number of MAC moves in a VPLS service. The counter is incremented when a specified MAC is locally relearned in the FDB or flushed from the FDB due to the reception of a better remote EVPN route for that MAC.
- minutes
-
Specifies the length of the window in minutes.
- factor
-
Specifies the multiplying value used to calculate a MAC duplication event. The num-moves value is multiplied by this value to determine the number of moves needed to declare a trusted MAC as duplicate.
For example, if num-moves=5 and factor=3, five moves within the window is enough to declare a non-trusted MAC as duplicate. However, 15 moves are needed to declare a trusted MAC as duplicate.
By default, the value of factor is 1, which means the factor for a trusted MAC is the same as for a non-trusted MAC. This provides a backwards compatible solution upon upgrade of the node.
Platforms
7705 SAR Gen 2
detection-time
detection-time
Syntax
detection-time seconds
no detection-time
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dynamic-parameters detection-time)
Full Context
configure system security dist-cpu-protection policy protocol dynamic-parameters detection-time
Description
When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.
Default
detection-time 30
Parameters
- seconds
-
Specifies the detection time.
Platforms
7705 SAR Gen 2
detection-time
Syntax
detection-time seconds
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer detection-time)
Full Context
configure system security dist-cpu-protection policy static-policer detection-time
Description
When a policer is declared as in an "exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an "exceed” state.
Default
detection-time 30
Parameters
- seconds
-
Specifies the detection time.
Platforms
7705 SAR Gen 2
deterministic
deterministic
Syntax
deterministic
Context
[Tree] (config>router>nat>inside deterministic)
[Tree] (config>service>vprn>nat>inside deterministic)
Full Context
configure router nat inside deterministic
configure service vprn nat inside deterministic
Description
Commands in this context configure deterministic NAT.
Platforms
7705 SAR Gen 2
deterministic-med
deterministic-med
Syntax
[no] deterministic-med
Context
[Tree] (config>service>vprn>bgp>best-path-selection deterministic-med)
Full Context
configure service vprn bgp best-path-selection deterministic-med
Description
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
Default
no deterministic-med
Platforms
7705 SAR Gen 2
deterministic-med
Syntax
[no] deterministic-med
Context
[Tree] (config>router>bgp>best-path-selection deterministic-med)
Full Context
configure router bgp best-path-selection deterministic-med
Description
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
Default
no deterministic-med
Platforms
7705 SAR Gen 2
device-label
device-label
Syntax
device-label name
no device-label
Context
[Tree] (config>system>management-interface>remote-management device-label)
Full Context
configure system management-interface remote-management device-label
Description
This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.
If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.
The no form of this command causes an empty string to be used.
Parameters
- name
-
Specifies the device-label name, up to 64 characters.
Platforms
7705 SAR Gen 2
device-label
Syntax
device-label name
no device-label
Context
[Tree] (config>system>management-interface>remote-management>manager device-label)
Full Context
configure system management-interface remote-management manager device-label
Description
This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).
Parameters
- name
-
Specifies the device-label name, up to 64 characters.
Platforms
7705 SAR Gen 2
device-name
device-name
Syntax
device-name name
no device-name
Context
[Tree] (config>system>management-interface>remote-management device-name)
Full Context
configure system management-interface remote-management device-name
Description
This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.
If this command is also configured for a specific manager in the config>system>management-interface>remote-management> manager context, that configuration takes precedence.
The no form of this command causes the system to use the default device name (system-name).
Default
system-name
Parameters
- name
-
Specifies the device name, up to 64 characters.
Platforms
7705 SAR Gen 2
device-name
Syntax
device-name name
no device-name
Context
[Tree] (config>system>management-interface>remote-management>manager device-name)
Full Context
configure system management-interface remote-management manager device-name
Description
This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).
Default
system-name
Parameters
- name
-
Specifies the device name, up to 64 characters.
Platforms
7705 SAR Gen 2
dh-group
dh-group
Syntax
dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}
Context
[Tree] (config>ipsec>ike-transform dh-group)
Full Context
configure ipsec ike-transform dh-group
Description
This command specifies the Diffie-Hellman group to be used in this IKE transform instance.
Default
dh-group 2 (1024-bit — More Modular Exponential (MODP))
Parameters
- dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}
-
Specifies which Diffie-Hellman group to use for calculating session keys. More bits provide a higher level of security, but require more processing. Three groups are supported with IKE-v1:
Group 1: 768 bits
Group 2: 1024 bits
Group 5: 1536 bits
Group 14: 2048 bits
Group 15: 3072 bits
Group 19: P-256 ECC Curve, 256 bits
Group 20: P-384 ECC Curve, 384 bits
Group 21: P-512 ECC Curve, 512 bits
Platforms
7705 SAR Gen 2
dhcp
dhcp
Syntax
dhcp
Context
[Tree] (config>service>ies>if dhcp)
[Tree] (config>service>vprn>if dhcp)
[Tree] (config>service>vpls>spoke-sdp dhcp)
[Tree] (config>service>vprn dhcp)
[Tree] (config>service>vpls>sap dhcp)
[Tree] (config>service>vpls>mesh-sdp dhcp)
Full Context
configure service ies interface dhcp
configure service vprn interface dhcp
configure service vpls spoke-sdp dhcp
configure service vprn dhcp
configure service vpls sap dhcp
configure service vpls mesh-sdp dhcp
Description
Commands in this context configure DHCP parameters.
Platforms
7705 SAR Gen 2
dhcp
Syntax
[no] dhcp [interface ip-int-name]
[no] dhcp mac ieee-address
[no] dhcp sap sap-id
Context
[Tree] (debug>router>ip dhcp)
Full Context
debug router ip dhcp
Description
This command enables DHCP debugging.
The no form of this command disables debugging.
Parameters
- ip-int-name
-
Specifies the name of the IP interface, up to 32 characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
- ieee-address
-
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
7705 SAR Gen 2
dhcp
Syntax
[no] dhcp
Context
[Tree] (debug>service>id dhcp)
Full Context
debug service id dhcp
Description
Commands in this context perform DHCP debugging.
The no form of the command disables DHCP debugging.
Platforms
7705 SAR Gen 2
dhcp
Syntax
[no] dhcp
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw dhcp)
[Tree] (config>service>ies>if>sap>ipsec-gw dhcp)
Full Context
configure service vprn interface sap ipsec-gw dhcp
configure service ies interface sap ipsec-gw dhcp
Description
Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.
DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).
Default
no dhcp
Platforms
7705 SAR Gen 2
dhcp
Syntax
dhcp
Context
[Tree] (config>router>if dhcp)
Full Context
configure router interface dhcp
Description
Commands in this context configure DHCP parameters.
Platforms
7705 SAR Gen 2
dhcp
Syntax
dhcp [include-user-class] [timeout timeout]
dhcp client-id [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context
[Tree] (bof>autoconfigure>ipv4 dhcp)
Full Context
bof autoconfigure ipv4 dhcp
Description
This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.
The no form of this command disables IPv4 DHCP OOB management.
Default
no dhcp
Parameters
- include-user-class
-
Specifies to include Option 77 user class data in the offer.
- client-id
-
Specifies to include the client ID for IPv4 Option 61 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
- timeout
-
Specifies the DHCP offer timeout, in seconds.
- ascii-string
-
Specifies the string format for this option, up to 127 characters.
- hex-string
-
Specifies the hexadecimal format for this option, up to 254 hex nibbles.
Platforms
7705 SAR Gen 2
dhcp
Syntax
dhcp [include-user-class] [timeout timeout]
dhcp client-id duid-type [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context
[Tree] (bof>autoconfigure>ipv6 dhcp)
Full Context
bof autoconfigure ipv6 dhcp
Description
This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.
The no form of this command disables IPv6 DHCP client OOB management.
Default
no dhcp
Parameters
- include-user-class
-
Specifies to include Option 15 user class data in the offer.
- client-id
-
Specifies to include the client ID for IPv6 DHCP Option 1 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
- seconds
-
Specifies the DHCP client ID timeout, in seconds.
- duid-type
-
Specifies the type code of the server DUID.
- ascii-string
-
Specifies the string format for this option, up to 124 characters.
- hex-string
-
Specifies the hexadecimal format for this option, up to 248 hex nibbles.
- timeout
-
Specifies the DHCP offer timeout, in seconds.
Platforms
7705 SAR Gen 2
dhcp-filter
dhcp-filter
Syntax
dhcp-filter filter-id [create]
no dhcp-filter
Context
[Tree] (config>filter dhcp-filter)
Full Context
configure filter dhcp-filter
Description
Commands in this context create and configure the specified DHCP filter policy.
Parameters
- filter-id
-
Specifies the DHCP filter policy ID expressed as a decimal integer.
- create
-
Keyword required to create the configuration context.
Platforms
7705 SAR Gen 2
dhcp-leasetime-threshold
dhcp-leasetime-threshold
Syntax
dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]
no dhcp-leasetime-threshold
Context
[Tree] (config>system>persistence>options dhcp-leasetime-threshold)
Full Context
configure system persistence options dhcp-leasetime-threshold
Description
This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.
The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.
The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).
The no form of the command disables the DHCP lease time threshold.
Default
no dhcp-leasetime-threshold
Parameters
- days
-
Specifies the threshold in days.
- hours
-
Specifies the threshold in hours.
- minutes
-
Specifies the threshold in minutes.
- seconds
-
Specifies the threshold in seconds.
Platforms
7705 SAR Gen 2
dhcp-server
dhcp-server
Syntax
dhcp-server
Context
[Tree] (config>system>persistence dhcp-server)
Full Context
configure system persistence dhcp-server
Description
This command configures DHCP server persistence parameters.
Platforms
7705 SAR Gen 2
dhcp-user-db
dhcp-user-db
Syntax
dhcp-user-db local-user-db-name
no dhcp-user-db
Context
[Tree] (config>service>vpls>sap dhcp-user-db)
Full Context
configure service vpls sap dhcp-user-db
Description
This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.
Parameters
- local-user-db
-
Specifies the name of the local user database name up to 32 characters.
Platforms
7705 SAR Gen 2
dhcp6
dhcp6
dhcp6
Syntax
dhcp6
Context
[Tree] (config>system dhcp6)
Full Context
configure system dhcp6
Description
Commands in this context configure system-wide DHCPv6 parameters.
Platforms
7705 SAR Gen 2
dhcp6
Syntax
[no] dhcp6 [ip-int-name]
[no] dhcp6 client-identifier duid duid-hex-string [mask mask-hex-string]
[no] dhcp6 client-identifier link-layer-address lla-hex-string
[no] dhcp6 interface ip-int-name
[no] dhcp6 sap sap-id
Context
[Tree] (debug>router>ip dhcp6)
Full Context
debug router ip dhcp6
Description
This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.
The no form of this command disables debugging.
Parameters
- ip-int-name
-
Specifies the name of an existing IP interface, up to 32 characters. Up to four DHCPv6 interface match criteria can be specified per routing instance.
- client-identifier
-
Specifies a client identifier option match criteria.
- duid duid-hex-string
-
Specifies a hexadecimal value for an opaque match on the client DUID in the client identifier option. When the actual length of the client DUID is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
- mask mask-hex-string
-
Specifies an optional substring match criteria. When a mask is specified, both hex-string lengths must be equal.
- link-layer-address lla-hex-string
-
Specifies a hexadecimal value for a link layer address field match of a type 1 (DUID-LLT) or type 3 (DUID-LL) client DUID in the client identifier option. When the actual length of the link layer address field is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
- sap-id
-
Specifies an existing SAP identifier. Up to four DHCPv6 SAP match criteria can be specified per routing instance.
Platforms
7705 SAR Gen 2
dhcp6
Syntax
[no] dhcp6
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw dhcp6)
[Tree] (config>service>ies>if>sap>ipsec-gw dhcp6)
Full Context
configure service vprn interface sap ipsec-gw dhcp6
configure service ies interface sap ipsec-gw dhcp6
Description
Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.
DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
Default
no dhcp6
Platforms
7705 SAR Gen 2
dhcp6-filter
dhcp6-filter
Syntax
dhcp6-filter filter-id [create]
no dhcp6-filter
Context
[Tree] (config>filter dhcp6-filter)
Full Context
configure filter dhcp6-filter
Description
Commands in this context create and configure the specified DHCPv6 filter policy.
The no form of this command reverts to the default.
Parameters
- filter-id
-
Specifies the DHCPv6 filter policy ID expressed as a decimal integer.
- create
-
Keyword required to create the configuration context.
Platforms
7705 SAR Gen 2
dhcp6-relay
dhcp6-relay
Syntax
[no] dhcp6-relay
Context
[Tree] (config>service>vprn>if>ipv6 dhcp6-relay)
[Tree] (config>service>ies>if>ipv6 dhcp6-relay)
Full Context
configure service vprn interface ipv6 dhcp6-relay
configure service ies interface ipv6 dhcp6-relay
Description
Commands in this context configure DHCPv6 relay parameters for the interface.
The no form of this command disables DHCPv6 relay.
Platforms
7705 SAR Gen 2
dhcp6-user-db
dhcp6-user-db
Syntax
dhcp6-user-db local-user-db
no dhcp6-user-db
Context
[Tree] (config>service>vpls>sap dhcp6-user-db)
Full Context
configure service vpls sap dhcp6-user-db
Description
This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.
The no form of this command reverts to the default.
Parameters
- local-user-db
-
Specifies the name of the local-user-database, up to 32 characters.
Platforms
7705 SAR Gen 2
diffserv-te
diffserv-te
Syntax
diffserv-te [mam | rdm]
no diffserv-te
Context
[Tree] (config>router>rsvp diffserv-te)
Full Context
configure router rsvp diffserv-te
Description
This command enables Diff-Serv TE on the node.
When this command is enabled, IS-IS and OSPF starts advertising available bandwidth for each TE class configured under the diffserv-te node. This command only takes effect if the operator has already enabled TE at the IS-IS, OSPF, or both routing protocol levels:
configure router isis traffic-engineering
and/or:
configure router ospf traffic-engineering
IGP advertises for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP continues to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the configure router rsvp interface context.
The user configures the following parameters for the operation of Diff-Serv:
-
Definition of TE classes, TE Class = {Class Type (CT), LSP priority}.
-
Mapping of the system forwarding classes to the Diff-Serv Class Type (CT).
-
Configuration of the percentage of RSVP interface bandwidth each CT shares, that is, the Bandwidth Constraint (BC).
When Diff-Serv TE is enabled, the system automatically enables the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link.
Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.
The sum of all BC values across all CTs does not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:
SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7
An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:
B <= Unreserved Bandwidth for TE-Class[i]
where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:
Reserved(CTc) = Reserved(CTc) + B
Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h
Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p
The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.
The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.
The RDM model is defined using the following equations:
SUM (Reserved (CTc)) <= BCb,
where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.
BC0= Max-Reservable-Bandwidth, so that
SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,
where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).
When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.
The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.
The no form of this command reverts to the default value.
Default
no diffserv-te
Parameters
- mam
-
Defines the default admission control policy for Diff-Serv LSPs.
- rdm
-
Defines Russian doll model for the admission control policy of Diff-Serv LSPs.
Platforms
7705 SAR Gen 2
digital-coherent-optics
digital-coherent-optics
Syntax
[no] digital-coherent-optics
Context
[Tree] (config>port>transceiver digital-coherent-optics)
Full Context
configure port transceiver digital-coherent-optics
Description
This command specifies if a digital coherent optics module is used for this port.
The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.
Default
no digital-coherent-optics
Platforms
7705 SAR Gen 2
dir
dir
Syntax
dir [file-url] [sort-order { d | n | s}] [reverse]
Context
[Tree] (file dir)
Full Context
file dir
Description
This command displays a list of files and subdirectories in a directory.
Parameters
- file-url
-
Specifies the path or directory name.
Use the file-url with the optional wildcard (*) to reduce the number of files to list.
- sort-order {d | n | s}
-
Specifies the sort order.
- reverse
-
Reverses the sort order.
Platforms
7705 SAR Gen 2
Output
The following output is an example of directory information.
Output ExampleA:cses-E12>file cf3:\ # dir
- dir [<file-url>] [sort-order { d | n | s}] [reverse]
<file-url> : <local-url> | <remote-url>
local-url - [<cflash-id>/][<file-path>]
200 chars max, including cflash-id
directory length 99 chars max each
remote-url - [ftp://<login>:<pswd>@<remote-locn>/
][<file-path>]
255 chars max
directory length 99 chars max each
remote-locn - [ <hostname> | <ipv4-address> |
[<ipv6-address>]]
ipv4-address - a.b.c.d
ipv6-address - x:x:x:x:x:x:x:x[-interface]
x:x:x:x:x:x:d.d.d.d[-interface]
x - [0..FFFF]H
d - [0..255]D
interface - 32 chars max, for link
local addresses
cflash-id - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|
cf2-B:|cf3:|cf3-A:|cf3-B:
< d | n | s> : Sort order: d - date, n - name, s - size
<reverse> : keyword - reverse order
A:cses-E12>file cf3:\ # dir
direction
direction
Syntax
direction ipsec-direction
no direction
Context
[Tree] (config>ipsec>static-sa direction)
Full Context
configure ipsec static-sa direction
Description
This command configures the direction for an IPsec manual SA.
The no form of this command reverts to the default value.
Default
direction bidirectional
Parameters
- ipsec-direction
-
Identifies the direction to which this static SA entry can be applied.
Platforms
7705 SAR Gen 2
direction
Syntax
direction
Context
[Tree] (config>system>security>keychain direction)
Full Context
configure system security keychain direction
Description
This command specifies the data type that indicates the TCP stream direction to apply the keychain.
Platforms
7705 SAR Gen 2
disable-4byte-asn
disable-4byte-asn
Syntax
[no] disable-4byte-asn
Context
[Tree] (config>service>vprn>bgp disable-4byte-asn)
[Tree] (config>service>vprn>bgp>group>neighbor disable-4byte-asn)
[Tree] (config>service>vprn>bgp>group disable-4byte-asn)
Full Context
configure service vprn bgp disable-4byte-asn
configure service vprn bgp group neighbor disable-4byte-asn
configure service vprn bgp group disable-4byte-asn
Description
This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.
If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).
The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.
Platforms
7705 SAR Gen 2
disable-4byte-asn
Syntax
[no] disable-4byte-asn
Context
[Tree] (config>router>bgp disable-4byte-asn)
[Tree] (config>router>bgp>group>neighbor disable-4byte-asn)
[Tree] (config>router>bgp>group disable-4byte-asn)
Full Context
configure router bgp disable-4byte-asn
configure router bgp group neighbor disable-4byte-asn
configure router bgp group disable-4byte-asn
Description
This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.
If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.
The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.
Default
no disable-4byte-asn
Platforms
7705 SAR Gen 2
disable-aging
disable-aging
Syntax
[no] disable-aging
Context
[Tree] (config>service>template>vpls-template disable-aging)
[Tree] (config>service>vpls>spoke-sdp disable-aging)
[Tree] (config>service>vpls>sap disable-aging)
[Tree] (config>service>vpls disable-aging)
Full Context
configure service template vpls-template disable-aging
configure service vpls spoke-sdp disable-aging
configure service vpls sap disable-aging
configure service vpls disable-aging
Description
This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).
The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.
When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.
The no form of this command enables aging on the VPLS service.
Default
no disable-aging
Except for VXLAN instances, where the disable-aging is the default mode
Platforms
7705 SAR Gen 2
disable-aging
Syntax
[no] disable-aging
Context
[Tree] (config>service>pw-template disable-aging)
Full Context
configure service pw-template disable-aging
Description
This command disables MAC address aging across a service.
The no form of this command enables aging.
Default
no disable-aging
Platforms
7705 SAR Gen 2
disable-capability-negotiation
disable-capability-negotiation
Syntax
[no] disable-capability-negotiation
Context
[Tree] (config>service>vprn>bgp>group>neighbor disable-capability-negotiation)
[Tree] (config>service>vprn>bgp>group disable-capability-negotiation)
Full Context
configure service vprn bgp group neighbor disable-capability-negotiation
configure service vprn bgp group disable-capability-negotiation
Description
This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
Default
no disable-capability-negotiation
Platforms
7705 SAR Gen 2
disable-capability-negotiation
Syntax
[no] disable-capability-negotiation
Context
[Tree] (config>router>bgp>group disable-capability-negotiation)
[Tree] (config>router>bgp>group>neighbor disable-capability-negotiation)
Full Context
configure router bgp group disable-capability-negotiation
configure router bgp group neighbor disable-capability-negotiation
Description
This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
Default
no disable-capability-negotiation
Platforms
7705 SAR Gen 2
disable-client-reflect
disable-client-reflect
Syntax
[no] disable-client-reflect
Context
[Tree] (config>service>vprn>bgp>group disable-client-reflect)
[Tree] (config>service>vprn>bgp>group>neighbor disable-client-reflect)
[Tree] (config>service>vprn>bgp disable-client-reflect)
Full Context
configure service vprn bgp group disable-client-reflect
configure service vprn bgp group neighbor disable-client-reflect
configure service vprn bgp disable-client-reflect
Description
This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.
The no form re-enables client reflection of routes.
Default
no disable-client-reflect
Platforms
7705 SAR Gen 2
disable-client-reflect
Syntax
[no] disable-client-reflect
Context
[Tree] (config>router>bgp>group disable-client-reflect)
[Tree] (config>router>bgp disable-client-reflect)
[Tree] (config>router>bgp>group>neighbor disable-client-reflect)
Full Context
configure router bgp group disable-client-reflect
configure router bgp disable-client-reflect
configure router bgp group neighbor disable-client-reflect
Description
This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.
The no form enables client reflection of routes.
Default
no disable-client-reflect
Platforms
7705 SAR Gen 2
disable-communities
disable-communities
Syntax
disable-communities [standard] [extended] [ large]
no disable-communities
Context
[Tree] (config>service>vprn>bgp>group>neighbor disable-communities)
[Tree] (config>service>vprn>bgp>group disable-communities)
[Tree] (config>service>vprn>bgp disable-communities)
Full Context
configure service vprn bgp group neighbor disable-communities
configure service vprn bgp group disable-communities
configure service vprn bgp disable-communities
Description
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.
Default
no disable-communities
Parameters
- standard
-
Specifies that standard 4-byte communities should be removed.
- extended
-
Specifies that 8-byte extended communities (of all types) should be removed.
- large
-
Specifies that 12-byte large communities should be removed.
Platforms
7705 SAR Gen 2
disable-communities
Syntax
disable-communities [standard] [extended] [large]
no disable-communities
Context
[Tree] (config>router>bgp>group disable-communities)
[Tree] (config>router>bgp disable-communities)
[Tree] (config>router>bgp>group>neighbor disable-communities)
Full Context
configure router bgp group disable-communities
configure router bgp disable-communities
configure router bgp group neighbor disable-communities
Description
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.
Default
no disable-communities
Parameters
- standard
-
Advertise the Communities attribute to peers.
- extended
-
Advertise the Extended Communities attribute to peers.
- large
-
Advertise the Large Communities attribute to peers.
Platforms
7705 SAR Gen 2
disable-explicit-null
disable-explicit-null
Syntax
[no] disable-explicit-null
Context
[Tree] (config>router>bgp>label-allocation>label-ipv6 disable-explicit-null)
Full Context
configure router bgp label-allocation label-ipv6 disable-explicit-null
Description
This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.
When this command is enabled (no disable-explicit-null), the following behaviors apply:
-
during the times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to IPv6 explicit null (value 2), forcing a POP behavior for received packets.
-
received label-unicast IPv6 routes never create tunnels in TTM that can be used to resolve other BGP routes (with an IPv6 next-hop).
-
a received label-unicast IPv6 route can be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)
When this command is disabled (disable-explicit-null), the following behaviors apply:
-
during those times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to a proper value in the dynamic label range and programs a POP or SWAP operation for that label, depending on the origin of the route and various import policy actions that could apply to the route
-
received label-unicast IPv6 routes that have a prefix length of 128 bits are automatically installed in TTM so that they can be used to resolve other (non-labeled-unicast) BGP routes (with an IPv6 next-hop)
-
a received label-unicast ipv6 route cannot be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)
-
the label-ipv6 routes used for ECMP towards an IPv6 destination cannot be a mix of routes with regular label values and routes with special (IPv6 explicit null) label values
Changes in the operational status do not cause the BGP sessions of the base router to reset.
Platforms
7705 SAR Gen 2
disable-fast-external-failover
disable-fast-external-failover
Syntax
[no] disable-fast-external-failover
Context
[Tree] (config>service>vprn>bgp>group>neighbor disable-fast-external-failover)
[Tree] (config>service>vprn>bgp>group disable-fast-external-failover)
[Tree] (config>service>vprn>bgp disable-fast-external-failover)
Full Context
configure service vprn bgp group neighbor disable-fast-external-failover
configure service vprn bgp group disable-fast-external-failover
configure service vprn bgp disable-fast-external-failover
Description
This command configures BGP fast external failover.
Platforms
7705 SAR Gen 2
disable-fast-external-failover
Syntax
[no] disable-fast-external-failover
Context
[Tree] (config>router>bgp>group>neighbor disable-fast-external-failover)
[Tree] (config>router>bgp disable-fast-external-failover)
[Tree] (config>router>bgp>group disable-fast-external-failover)
Full Context
configure router bgp group neighbor disable-fast-external-failover
configure router bgp disable-fast-external-failover
configure router bgp group disable-fast-external-failover
Description
This command configures BGP fast external failover.
Default
no disable-fast-external-failover
Platforms
7705 SAR Gen 2
disable-graceful-shutdown
disable-graceful-shutdown
Syntax
[no] disable-graceful-shutdown
Context
[Tree] (config>system>login-control>ssh disable-graceful-shutdown)
Full Context
configure system login-control ssh disable-graceful-shutdown
Description
This command enables graceful shutdown of SSH sessions.
The no form of this command disables graceful shutdown of SSH sessions.
Platforms
7705 SAR Gen 2
disable-ldp-sync
disable-ldp-sync
Syntax
[no] disable-ldp-sync
Context
[Tree] (config>router>isis disable-ldp-sync)
Full Context
configure router isis disable-ldp-sync
Description
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
Default
no disable-ldp-sync
Platforms
7705 SAR Gen 2
disable-ldp-sync
Syntax
[no] disable-ldp-sync
Context
[Tree] (config>router>ospf disable-ldp-sync)
[Tree] (config>router>ospf3 disable-ldp-sync)
Full Context
configure router ospf disable-ldp-sync
configure router ospf3 disable-ldp-sync
Description
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
Default
no disable-ldp-sync
Platforms
7705 SAR Gen 2
disable-learning
disable-learning
Syntax
[no] disable-learning
Context
[Tree] (config>service>vpls>spoke-sdp disable-learning)
[Tree] (config>service>vpls disable-learning)
[Tree] (config>service>vpls>sap disable-learning)
[Tree] (config>service>template>vpls-template disable-learning)
Full Context
configure service vpls spoke-sdp disable-learning
configure service vpls disable-learning
configure service vpls sap disable-learning
configure service template vpls-template disable-learning
Description
This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.
When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.
When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
Default
no disable-learning
Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.
Platforms
7705 SAR Gen 2
disable-learning
Syntax
[no] disable-learning
Context
[Tree] (config>service>pw-template disable-learning)
Full Context
configure service pw-template disable-learning
Description
This command enables learning of new MAC addresses.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
Default
no disable-learning (Normal MAC learning is enabled)
Platforms
7705 SAR Gen 2
disable-route-table-install
disable-route-table-install
Syntax
[no] disable-route-table-install
Context
[Tree] (config>router>bgp disable-route-table-install)
Full Context
configure router bgp disable-route-table-install
Description
This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).
The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
Default
no disable-route-table-install
Platforms
7705 SAR Gen 2
disable-route-table-install
Syntax
[no] disable-route-table-install
Context
[Tree] (config>router>policy-options>policy-statement>entry>action disable-route-table-install)
[Tree] (config>router>policy-options>policy-statement>default-action disable-route-table-install)
Full Context
configure router policy-options policy-statement entry action disable-route-table-install
configure router policy-options policy-statement default-action disable-route-table-install
Description
This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.
This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.
Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.
The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.
Default
no disable-route-table-install
Platforms
7705 SAR Gen 2
disable-router-alert-check
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>router>igmp>if disable-router-alert-check)
Full Context
configure router igmp interface disable-router-alert-check
Description
This command disables router alert checking for IGMP/MLD messages received on this interface.
The no form of this command enables router alert checking.
Platforms
7705 SAR Gen 2
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>router>mld>if disable-router-alert-check)
Full Context
configure router mld interface disable-router-alert-check
Description
This command enables router alert checking for MLD messages received on this interface.
The no form of this command disables router alert checking.
Platforms
7705 SAR Gen 2
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vpls>spoke-sdp>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>mesh-sdp>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>spoke-sdp>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>mesh-sdp>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>igmp-snooping disable-router-alert-check)
Full Context
configure service vpls spoke-sdp mld-snooping disable-router-alert-check
configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
configure service vpls sap mld-snooping disable-router-alert-check
configure service vpls mesh-sdp mld-snooping disable-router-alert-check
configure service vpls sap igmp-snooping disable-router-alert-check
Description
This command disables the IGMP or MLD router alert check option.
The no form of this command enables the router alert check.
Default
no disable-router-alert-check
Platforms
7705 SAR Gen 2
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vprn>igmp>if disable-router-alert-check)
Full Context
configure service vprn igmp interface disable-router-alert-check
Description
This command disables the IGMP router alert check option.
The no form of this command enables the router alert check.
Platforms
7705 SAR Gen 2
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vprn>mld>if disable-router-alert-check)
Full Context
configure service vprn mld interface disable-router-alert-check
Description
This command disables router alert checking for MLD messages received on this interface.
The no form of this command enables the router alert checking.
Platforms
7705 SAR Gen 2
disable-stickiness
disable-stickiness
Syntax
[no] disable-stickiness
Context
[Tree] (config>aaa>radius-srv-plcy>servers disable-stickiness)
Full Context
configure aaa radius-server-policy servers disable-stickiness
Description
This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.
Platforms
7705 SAR Gen 2
disable-targeted-session
disable-targeted-session
Syntax
[no] disable-targeted-session
Context
[Tree] (config>router>ldp>targ-session disable-targeted-session)
Full Context
configure router ldp targeted-session disable-targeted-session
Description
This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.
The no form of this command enables the set up of any targeted sessions.
Default
no disable-targeted-session
Platforms
7705 SAR Gen 2
disallow-igp
disallow-igp
Syntax
[no] disallow-igp
Context
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop disallow-igp)
Full Context
configure router static-route-entry indirect tunnel-next-hop disallow-igp
Description
This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.
When configured, the associated static route will not be resolved to an available IGP route in the RTM.
The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.
Default
no disallow-igp
Platforms
7705 SAR Gen 2
disallow-sequence-keys
disallow-sequence-keys
Syntax
disallow-sequence-keys number-of-characters
no disallow-sequence-keys
Context
[Tree] (config>system>sec>passwd>compl disallow-sequence-keys)
Full Context
configure system security password complexity-rules disallow-sequence-keys
Description
This command configures the number of consecutive characters that are not allowed to be entered as part of the password on a U.S. English or Korean keyboard. These characters can be lowercase or uppercase letters, or numbers. Special characters are not taken into account. These consecutive characters can be horizontal (left to right) or (right to left) or diagonal (up to bottom or bottom to top). If the number of consecutive characters is equal to or larger than the configured value, the password is disallowed.
For example, if the user attempts to use the password "dsalkjhgfdsa", with this command configured to 8, the system rejects the password because the first consecutive sequence “dsa” is 3 lowercase letters, which passes the check, but the second consecutive sequence is “lkjhgfdsa”, which consists of 9 consecutive lowercase letters and this does not pass the check.
The no form of this command removes the restriction on the number of characters.
Default
no disallow-sequence-keys
Parameters
- number-of-characters
-
Specifies the number of characters.
Platforms
7705 SAR Gen 2
discard
discard
Syntax
discard [now]
Context
[Tree] (candidate discard)
Full Context
candidate discard
Description
This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.
Parameters
- now
-
Avoids a confirmation prompt for the discard.
Platforms
7705 SAR Gen 2
discard-changes
discard-changes
Syntax
[no] discard-changes
Context
[Tree] (configure>system>security>profile>netconf>base-op-authorization discard-changes)
Full Context
configure system security profile netconf base-op-authorization discard-changes
Description
This command enables the NETCONF <discard-changes> RPC.
The no form of this command disables the RPC.
Default
no discard-changes
The operation is enabled by default in the built-in system-generated administrative profile.
Platforms
7705 SAR Gen 2
discard-rx-pause-frames
discard-rx-pause-frames
Syntax
[no] discard-rx-pause-frames
Context
[Tree] (config>port>ethernet discard-rx-pause-frames)
Full Context
configure port ethernet discard-rx-pause-frames
Description
This command discards received pause frames. Pause frames are used for local link flow control.
The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.
Default
no discard-rx-pause-frames
Platforms
7705 SAR Gen 2
discard-unknown
discard-unknown
Syntax
[no] discard-unknown
Context
[Tree] (config>service>template>vpls-template discard-unknown)
[Tree] (config>service>vpls discard-unknown)
Full Context
configure service template vpls-template discard-unknown
configure service vpls discard-unknown
Description
By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).
The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.
Default
no discard-unknown
Platforms
7705 SAR Gen 2
discard-unknown-source
discard-unknown-source
Syntax
[no] discard-unknown-source
Context
[Tree] (config>service>template>vpls-sap-template discard-unknown-source)
[Tree] (config>service>vpls>sap discard-unknown-source)
[Tree] (config>service>vpls>spoke-sdp discard-unknown-source)
Full Context
configure service template vpls-sap-template discard-unknown-source
configure service vpls sap discard-unknown-source
configure service vpls spoke-sdp discard-unknown-source
Description
When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.
Default
no discard-unknown-source
Platforms
7705 SAR Gen 2
discard-unknown-source
Syntax
[no] discard-unknown-source
Context
[Tree] (config>service>pw-template discard-unknown-source)
Full Context
configure service pw-template discard-unknown-source
Description
When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.
Default
no discard-unknown-source
Platforms
7705 SAR Gen 2
disconnect
disconnect
Syntax
disconnect [address ip-address | session-id session-id | username user-name | {console | bluetooth | telnet | ftp | ssh | netconf | grpc}]
Context
[Tree] (admin disconnect)
Full Context
admin disconnect
Description
This command disconnects a user from a session.
Issuing the disconnect command without any parameters disconnects the session in which the command was executed.
If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, only the respective sessions are affected.
If no session type options are specified, all sessions from the IP address or from the specified user are disconnected.
Any task that the user is executing is terminated. FTP files accessed by the user are not removed.
A major severity security log event is created specifying what was terminated and by whom.
By default, no disconnect options are configured.
Parameters
- ip-address
-
Specifies the IP address to disconnect, specified in dotted decimal notation.
- session-id
-
The model-driven session ID. Can be obtained using the show system management-interface datastore-locks [detail] command.
- user-name
-
Specifies the name of the user. The name can be up to 32 characters.
- console
-
Disconnects the console session.
- bluetooth
-
Disconnects the Bluetooth session.
- telnet
-
Disconnects the Telnet session.
- ftp
-
Disconnects the FTP session.
- ssh
-
Disconnects the SSH session.
- netconf
-
Disconnects the NETCONF session.
- grpc
-
Disconnects the gRPC session.
Platforms
7705 SAR Gen 2
discovery-interval
discovery-interval
Syntax
discovery-interval interval-secs [boot interval-secs]
no discovery-interval
Context
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec discovery-interval)
Full Context
configure redundancy multi-chassis peer mc-ipsec discovery-interval
Description
This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.
Default
discovery-interval 300 boot 300
Parameters
- interval-secs
-
Specifies the maximum duration, in seconds, of the discovery interval during which a newly activated multi- chassis IPsec tunnel-group will remain dormant while trying to contact its redundant peer. Groups held dormant in this manner will neither pass traffic nor negotiate security keys. This interval ends when either the redundant peer is contacted and a master election occurs, or when the maximum duration expires.
- boot interval-secs
-
Specifies the maximum duration of an interval immediately following system startup. When the normal discovery interval for a group would expire while the post-boot discovery interval is still active, then the group's discovery interval is extended until the post-boot discovery interval expires. This allows an extension to the normal discovery stage of groups following a chassis reboot, to account for the larger variance in routing.
Platforms
7705 SAR Gen 2
disjointness-reference
disjointness-reference
Syntax
[no] disjointness-reference
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-reference)
Full Context
configure router pcep pcc pce-associations diversity disjointness-reference
Description
This command configures the value conveyed in the P-flag of the DISJOINTNESS-CONFIGURATION TLV. When enabled, it indicates that this LSP path is the reference path for the disjoint set of paths. The PCE must first compute the path of this LSP and then apply the requested disjointness type to compute the path of all other paths in the same diversity association ID.
The no form of this command sets the P-flag to false.
Default
P-flag to false
Platforms
7705 SAR Gen 2
disjointness-type
disjointness-type
Syntax
disjointness-type {loose | strict}
no disjointness-type
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-type)
Full Context
configure router pcep pcc pce-associations diversity disjointness-type
Description
This command configures the disjointness type for the association group.
The no form of this command reverts to the default value.
Default
disjointness-type loose
Parameters
- loose
-
Keyword to specify the loose disjointness type.
- strict
-
Keyword to specify the strict disjointness type.
Platforms
7705 SAR Gen 2
dispersion
dispersion
Syntax
dispersion dispersion
Context
[Tree] (config>port>dwdm>coherent dispersion)
Full Context
configure port dwdm coherent dispersion
Description
This command configures the residual chromatic dispersion to be compensated when the coherent receiver is operating in manual dispersion control mode.
Default
0
Parameters
- dispersion
-
Specifies the dispersion compensation.
Platforms
7705 SAR Gen 2
display
display
Syntax
display type {type} url-string format {format} [password [32 chars max]]
Context
[Tree] (admin>certificate display)
Full Context
admin certificate display
Description
This command displays the content of an input file in plain text.
The following list summarizes the formats supported by this command:
-
System
-
system format
-
PKCS #12
-
PKCS #7 PEM encoded
-
PKCS #7 DER encoded
-
RFC 4945
-
-
Certificate Request
-
PKCS #10
-
-
Key
-
system format
-
PKCS #12
-
-
CRL
-
system format
-
PKCS #7 PEM encoded
-
PKCS #7 DER encoded
-
RFC 4945
-
Parameters
- url-string
-
Specifies the local CF card url of the input file.
- type
-
Specifies the type of input file.
- format
-
Specifies the format of input file.
- password
-
Specifies the password to decrypt the input file in case that it is an encrypted PKCS#12 file, up to 99 characters.
Platforms
7705 SAR Gen 2
display-config
display-config
Syntax
display-config [detail | index]
Context
[Tree] (admin display-config)
Full Context
admin display-config
Description
This command displays the system’s running configuration.
By default, only non-default settings are displayed.
Specifying the detail option displays all default and non-default configuration parameters.
Parameters
- detail
-
Displays default and non-default configuration parameters.
- index
-
Displays only persistent-indices.
Platforms
7705 SAR Gen 2
display-key
display-key
Syntax
display-key type {ike | esp} gateway name name dynamic-tunnel ip-address: port
display-key type {ike | esp} tunnel ipsec-tunnel-name
Context
[Tree] (admin>ipsec display-key)
Full Context
admin ipsec display-key
Description
This command displays existing IKE-SA or CHILD-SA keys..
This command does not work if config>ipsec>no show-ipsec-keys or no max-history-{esp|ike}-key-records is configured under corresponding ipsec-gw or ipsec-tunnel.
Parameters
- name
-
The name, up to 32 characters.
- ip-address
-
The IP address of the remote client.
- port
-
The port of the remote client.
- ipsec-tunnel-name
-
The IPsec tunnel name, up to 32 characters.
Platforms
7705 SAR Gen 2
Output
The following outputs are examples of the admin ipsec display-key command.
Output Exampleadmin ipsec display-key type ike gateway name "rw" dynamic-tunnel 11.1.1.100:500
===============================================================================
IKE-SA history: max-num-records 3 current-num-saved-records 1
local: 172.16.100.1 remote: 11.1.1.100
record [0]: established time: 01/25/2018 20:51:55
Initiator-SPI: d67ac71d73656496 Responder-SPI: d67ac71d73656496 Ike Version: 2
SK_er: aes128, len: 16, val: a5da1c57f09a7eb7dbe9526cd52e2189
SK_ar: sha1, len: 20, val: c11797bb8ebe5a1fadf46363bf5e763552bb45d0
SK_ei: aes128, len: 16, val: 467124009cc577a8b23882a81ab9df70
SK_ai: sha1, len: 20, val: 7dfef89bad31cb72d1ca8da2c04a9521993c7f9
admin ipsec display-key type esp gateway name "rw" dynamic-tunnel 11.1.1.100:500
ESP-SA history: max-num-records 48 current-num-saved-records 2ynamic-tunnel 11.1.1.100:500
local: 172.16.100.1 remote: 11.1.1.100
record [0]: established time: 01/25/2018 20:54:56
InSpi: 154532(0x00025ba4)
encr-alg: aes128 len: 16 val: 0xd26aa32d8bd328b1e8332fa5c7b5eeaa
auth-alg: sha1 len: 20 val: 0x0b37ddb824a43921d3b0ee81a6910eed065a9845
OutSpi: 3286259439(0xc3e056ef)
encr-alg: aes128 len: 16 val: 0x3acd95376ce04fcded2e0c80cc4289cf
alg: sha1 len: 20 val: 0x9f5a46b5cdc572972b44cdbd36b5f824ab060634
record [1]: established time: 01/25/2018 20:51:55
InSpi: 261186(0x0003fc42)
encr-alg: aes128 len: 16 val: 0x8bf97675d37de3e3f6e634e3e11fc3aa
auth-alg: sha1 len: 20 val: 0xf10c0f0821488cc14f8715cc323441fc967a79dd
OutSpi: 3246917342(0xc18806de)
encr-alg: aes128 len: 16 val: 0xf36aaaa7a3a09734fe4fc6cd0ac9043e
alg: sha1 len: 20 val: 0x40c13a444e4fb1d42a13812f70b17041ed0f56ee
dist-cpu-protection
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>epipe>sap dist-cpu-protection)
Full Context
configure service epipe sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used.
If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vpls>sap dist-cpu-protection)
Full Context
configure service vpls sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
Default
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>ies>if>sap dist-cpu-protection)
Full Context
configure service ies interface sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid DCP policy can be assigned to a SAP or a network interface. This rule does not apply to templates such as an msap-policy.
Default
If no dist-cpu-protection policy is assigned to an SAP, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vprn>nw-if dist-cpu-protection)
Full Context
configure service vprn network-interface dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the network interface. Only a valid created DCP policy can be assigned to a network interface (this rule does not apply to templates such as an msap-policy).
Default
If no dist-cpu-protection policy is assigned to the VPRN network interface, then the default network DCP policy (_default-network-policy) is used.
If no DCP functionality is required on the VPRN network interface then an empty DCP policy can be created and explicitly assigned to the VPRN network interface.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vprn>if>sap dist-cpu-protection)
Full Context
configure service vprn interface sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (This rule does not apply to templates such as an msap-policy).
Default
If no dist-cpu-protection policy is assigned to an SAP policy, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP policy, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>router>if dist-cpu-protection)
Full Context
configure router interface dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (note that this rule does not apply to templates such as an msap-policy).
If the user does not assign a DCP policy to a router interface, the system uses the default network DCP policy.
Default
no dist-cpu-protection
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7705 SAR Gen 2
dist-cpu-protection
Syntax
dist-cpu-protection
Context
[Tree] (config>system>security dist-cpu-protection)
Full Context
configure system security dist-cpu-protection
Description
Commands in this context configure the Distributed CPU Protection (DCP) feature.
Platforms
7705 SAR Gen 2
distinguisher
distinguisher
Syntax
distinguisher id
no distinguisher
Context
[Tree] (conf>router>segment-routing>sr-policies>policy distinguisher)
Full Context
configure router segment-routing sr-policies static-policy distinguisher
Description
This command associates a distinguisher value with a statically defined segment routing policy. This is a mandatory parameter and configuration command for non-local segment routing policies (for which the head-end parameter is set to a value other than "local”). Every non-local segment routing policy must have a unique distinguisher value. When a non-local static segment routing policy is imported into BGP and originated as a BGP route, the configured distinguisher value is copied into the NLRI of the route.
The no form of this command removes the distinguisher association.
Default
no distinguisher
Parameters
- id
-
Specifies the distinguisher ID.
Platforms
7705 SAR Gen 2
distinguisher
Syntax
distinguisher distinguisher-id
no distinguisher
Context
[Tree] (config>router>policy-options>policy-statement>entry>from distinguisher)
Full Context
configure router policy-options policy-statement entry from distinguisher
Description
This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.
The no form of this command removes the distinguisher ID match criterion from the configuration.
Parameters
- distinguisher-id
-
Specifies the SR policy distinguisher ID.
Platforms
7705 SAR Gen 2
diversity
diversity
Syntax
[no] diversity association-name
Context
[Tree] (config>router>pcep>pcc>pce-assoc diversity)
Full Context
configure router pcep pcc pce-associations diversity
Description
This command creates a named diversity association from which the parameters for the specified diversity association are configured.
The no form of the command deletes the specified diversity association.
Parameters
- association-name
-
Specifies the name of the diversity association, up to 32 characters.
Platforms
7705 SAR Gen 2
diversity
Syntax
[no] diversity diversity-assoc-name
Context
[Tree] (config>router>mpls>lsp>pce-assoc diversity)
[Tree] (config>router>mpls>lsp-template>pce-assoc diversity)
Full Context
configure router mpls lsp pce-associations diversity
configure router mpls lsp-template pce-associations diversity
Description
This command binds the LSP to a named diversity association. The diversity association must exist under the PCC. Up to five diversity associations can be configured per LSP.
The no form of the command removes the LSP binding from the specified diversity association.
Parameters
- diversity-assoc-name
-
Specifies the name of an existing diversity association, up to 32 characters.
Platforms
7705 SAR Gen 2
diversity-type
diversity-type
Syntax
diversity-type {link | node | srlg-link | srlg-node}
no diversity-type
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div diversity-type)
Full Context
configure router pcep pcc pce-associations diversity diversity-type
Description
This command configures the diversity type for the association group. This command is mandatory. If the command is not configured, the system does not validate the association configuration.
The no form of the command reverts to the default value.
Default
no diversity-type
Parameters
- link
-
Keyword to specify the link diversity type.
- node
-
Keyword to specify the node diversity type.
- srlg-link
-
Keyword to specify the SRLG-link diversity type.
- srlg-node
-
Keyword to specify the SRLG-node diversity type.
Platforms
7705 SAR Gen 2
dns
dns
Syntax
[no] dns
Context
[Tree] (config>service>vprn dns)
Full Context
configure service vprn dns
Description
Commands in this context configure domain name servers.
The no form of this command disables DNS for this service.
Platforms
7705 SAR Gen 2
dns
Syntax
dns
Context
[Tree] (config>router dns)
Full Context
configure router dns
Description
This command configures the DNS.
Default
dns
Platforms
7705 SAR Gen 2
dns
Syntax
dns
Context
[Tree] (config>system dns)
Full Context
configure system dns
Description
This command configures DNS settings.
Platforms
7705 SAR Gen 2
dns-domain
dns-domain
Syntax
dns-domain dns-name
no dns-domain
Context
[Tree] (bof dns-domain)
Full Context
bof dns-domain
Description
This command configures the domain name used when performing DNS address resolution. This is a required parameter if DNS address resolution is required. Only a single domain name can be configured. If multiple domain statements are configured, the last one encountered is used.
The no form of this command removes the domain name from the configuration.
Default
no dns-domain
Parameters
- dns-name
-
Specifies the DNS domain name, up to 178 characters.
Platforms
7705 SAR Gen 2
dns-options
dns-options
Syntax
[no] dns-options
Context
[Tree] (config>service>vprn>router-advert>if dns-options)
[Tree] (config>service>vprn>router-advert dns-options)
Full Context
configure service vprn router-advertisement interface dns-options
configure service vprn router-advertisement dns-options
Description
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>service>vprn>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
Platforms
7705 SAR Gen 2
dns-options
Syntax
[no] dns-options
Context
[Tree] (config>router>router-advert>if dns-options)
[Tree] (config>router>router-advert dns-options)
Full Context
configure router router-advertisement interface dns-options
configure router router-advertisement dns-options
Description
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts. When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>router>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
Platforms
7705 SAR Gen 2
dns-server
dns-server
Syntax
dns-server ip-address [ip-address]
no dns-server
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options dns-server)
[Tree] (config>service>vprn>dhcp>server>pool>options dns-server)
[Tree] (config>router>dhcp>server>pool>options dns-server)
Full Context
configure subscriber-mgmt local-user-db ipoe host options dns-server
configure service vprn dhcp local-dhcp-server pool options dns-server
configure router dhcp local-dhcp-server pool options dns-server
Description
This command configures the IPv4 address of the DNS server.
The no form of this command removes the IPv4 address of the DNS server from the configuration.
Parameters
- ip-address
-
Specifies up to four DNS server IP addresses.
Platforms
7705 SAR Gen 2
dns-server
Syntax
dns-server ipv6-address [ipv6-address]
no dns-server
Context
[Tree] (config>router>dhcp6>server>pool>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options6 dns-server)
[Tree] (config>router>dhcp6>server>pool>prefix>options dns-server)
Full Context
configure router dhcp6 local-dhcp-server pool options dns-server
configure service vprn dhcp6 local-dhcp-server pool options dns-server
configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
configure subscriber-mgmt local-user-db ipoe host options6 dns-server
configure router dhcp6 local-dhcp-server pool prefix options dns-server
Description
This command configures IPv6 DNS server addresses that can be used for name resolution.
The no form of this command removes the IPv6 address of the DNS server from the configuration.
Parameters
- ipv6-address
-
Specifies up to four IPv6 DNS server addresses.
Platforms
7705 SAR Gen 2
dnssec
dnssec
Syntax
dnssec
Context
[Tree] (config>system>dns dnssec)
Full Context
configure system dns dnssec
Description
This command configures system Domain Name System Security Extensions (DNSSEC) settings.
Platforms
7705 SAR Gen 2
do-not-fragment
do-not-fragment
Syntax
[no] do-not-fragment
Context
[Tree] (config>oam-pm>session>ip do-not-fragment)
Full Context
configure oam-pm session ip do-not-fragment
Description
This command configures the Do Not Fragment (DF) bit in the IPv4 header of the TWAMP Light test packet in order to prevent packet fragmentation. This is only applicable to IPv4. IPv6 does not include the bit as part of the specification. This parameter is ignored but not blocked when the address is IPv6.
The no form of this command allows packet fragmentation.
Platforms
7705 SAR Gen 2
dod-label-distribution
dod-label-distribution
Syntax
[no] dod-label-distribution
Context
[Tree] (config>router>ldp>session-params>peer dod-label-distribution)
Full Context
configure router ldp session-parameters peer dod-label-distribution
Description
This command enables the use of the LDP Downstream-on-Demand (DoD) label distribution procedures.
When this option is enabled, LDP will set the A-bit in the Label Initialization message when the LDP session to the peer is established. When both peers set the A-bit, they will both use the DoD label distribution method over the LDP session (RFC 5036).
This feature can only be enabled on a link-level LDP session and therefore will apply to prefix labels only, not service labels.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router will immediately send a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages.
However, the router will not advertise any <FEC, label> bindings, including the FEC of its own LSR-id, unless the DoD peer requested it using a Label Request Message.
When the DoD peer sends a label request for any FEC prefix, the router will reply with a <FEC, label> binding for that prefix if the FEC was already activated on the router. If not, the router replies with a notification message containing the status code of "no route.” The router will not attempt in the latter case to send a label request to the next-hop for the FEC prefix when the LDP session to this next-hop uses the DoD label distribution mode. Hence the reference to single-hop LDP DoD procedures.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router immediately sends a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages. Peer address has to be the peer LSR-ID address.
The no form of this command disables the DoD label distribution with an LDP neighbor.
Default
no dod-label-distribution
Platforms
7705 SAR Gen 2
domain
domain
Syntax
domain [value] [create]
no domain [value]
Context
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec domain)
Full Context
configure redundancy multi-chassis peer mc-ipsec domain
Description
This command configures domain information. This command is mutually exclusive to the tunnel-group command.
The no form of this command removes the multi-chassis IPsec domain value.
Parameters
- value
-
Specifies the domain multi-chassis IPsec domain, up to 255 characters.
- create
-
Keyword used to create the command instance.
Platforms
7705 SAR Gen 2
domain-id
domain-id
Syntax
domain-id global-field:local-field
no domain-id
Context
[Tree] (config>service>epipe>bgp-evpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-ipvpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-evpn>mpls domain-id)
Full Context
configure service epipe bgp-evpn mpls domain-id
configure service vprn bgp-ipvpn mpls domain-id
configure service vprn bgp-evpn mpls domain-id
Description
This command specifies the domain ID that identifies the network from which a BGP route was received before that route is exported to a different neighbor. The domain ID is part of a domain, represented as domain-id:isf_safi_type in the D-PATH attribute, as described in draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN) or multiple instances of the same owner (for example, VPRN with two BGP-IPVPN instances).
In the following example, consider that a gateway receives prefix P in an EVPN-IFL instance with the following D-PATH from neighbor N:
Seg Len=1 / 65000:1:128
If the router imports the route in VPRN-1, BGP-EVPN SRv6 instance with domain 65000:2, it readvertises it to its BGP-IPVPN MPLS instance as follows:
Seg Len=2 / 65000:2:70 / 65000:1:128
That is, the gateway prepends the local domain ID and family to the D-PATH before readvertising the route into a different instance.
The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best-path selection decisions based on the D-PATH length (shorter D-PATH is preferred).
The command is also supported in Epipe services with two instances. As in the case of multi-instance VPRN services, the configured domain ID in an Epipe instance is prepended to the AD per EVI route redistributed to the other instance.
The no form of this command removes the configured domain ID.
Default
no domain-id
Parameters
- global-field:local-field
-
Specifies the domain ID.
Platforms
7705 SAR Gen 2
domain-name
domain-name
Syntax
domain-name domain-name
no domain-name
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options domain-name)
[Tree] (config>router>dhcp>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>options domain-name)
[Tree] (config>router>dhcp6>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp>server>pool>options domain-name)
[Tree] (config>router>dhcp6>server>pool>prefix>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options domain-name)
Full Context
configure subscriber-mgmt local-user-db ipoe host options domain-name
configure router dhcp local-dhcp-server pool options domain-name
configure service vprn dhcp6 local-dhcp-server pool options domain-name
configure router dhcp6 local-dhcp-server pool options domain-name
configure service vprn dhcp local-dhcp-server pool options domain-name
configure router dhcp6 local-dhcp-server pool prefix options domain-name
configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name
Description
This command configures the default domain for a DHCP client that the router uses to complete unqualified host names (without a dotted-decimal domain name).
The no form of this command removes the name from the configuration.
Parameters
- domain-name
-
Specifies the domain name for the client, up to 127 characters.
Platforms
7705 SAR Gen 2
dot1p
dot1p
Syntax
dot1p dot1p-priority [fc fc-name] [priority {low | high}]
no dot1p dot1p-priority
Context
[Tree] (config>qos>sap-ingress dot1p)
Full Context
configure qos sap-ingress dot1p
Description
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override the forwarding class and enqueuing priority based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The no form of this command removes the explicit dot1p classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
Parameters
- dot1p-priority
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- priority
-
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
- high
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p dot1p-value [dot1p-mask]
no dot1p
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dot1p)
Full Context
configure qos sap-ingress mac-criteria entry match dot1p
Description
The IEEE 802.1p value to be used as the match criterion.
Use the no form of this command to remove the dot1p value as the match criterion.
Default
no dot1p
Parameters
- dot1p-value
-
Specifies the IEEE 802.1p value in decimal.
- dot1pmask
-
This 3-bit mask can be configured using the following formats.
Table 1. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
D
4
Hexadecimal
0xH
0x4
Binary
0bBBB
0b100
To select a range from 4 up to 7, specify p-value of 4 and a mask of 0b100 for value and mask.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p dot1p-value [fc fc-name] [profile {in | out | use-de | exceed | inplus}]
no dot1p dot1p-value
Context
[Tree] (config>qos>sap-egress dot1p)
Full Context
configure qos sap-egress dot1p
Description
This command defines a specific dot1p value that must be matched to perform the associated reclassification actions. If an egress packet on the SAP matches the specified dot1p value, the forwarding class or profile may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions.
The dot1p priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The reclassification actions from a dot1p reclassification rule may be overridden by a DSCP, IP precedence, or IP flow matching event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new FC, the FC from the dot1p match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the dot1p match will be used.
The no form of this command removes the reclassification rule from the SAP egress QoS policy.
Parameters
- dot1p-value
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the FC name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- profile {in | out | use-de | exceed | inplus}
-
Specifies the profile reclassification action is optional. When specified, packets matching the dot1p value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by a DSCP, IP precedence, IPv6 criteria, or IP criteria reclassification match. To remove the profile reclassification action for the specified dotp1 value, the dot1p command must be re-executed without the profile reclassification action defined.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p
Context
[Tree] (config>qos>sap-egress>fc dot1p)
Full Context
configure qos sap-egress fc dot1p
Description
This command explicitly defines the egress IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an IEEE 802.1q or IEEE 802.1p encapsulation use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, the dot1p command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters added to the existing dot1p command adds the capability to mark on an egress SAP the in, out, and exceed-profile status via a certain dot1p combination, similarly with the DE options. All inplus-profile traffic is marked with the same value as in-profile traffic.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic.
The command with the additional structure may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a tag exists. If a new tag is added, the related DE bit is set to 0.
When the previous command (dot1p dot1p-value) is used without the new structure, it means that the dot1p value is used for the entire forwarding class, as it did before. The two versions of the command are mutually exclusive.
The in-profile or out-of-profile/exceed-profile status may be indicated via the DE bit setting if the de-mark command is used. The DE value used for exceed-profile is the same as that used for out-of-profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The commands dot1p-inner and dot1p-outer take precedence over the dot1p command if both are specified in the same policy.
The no form of this command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p
Parameters
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p dot1p-priority fc fc-name profile {in | out | use-de}
no dot1p
Context
[Tree] (config>qos>network>ingress dot1p)
Full Context
configure qos network ingress dot1p
Description
This command explicitly sets the forwarding class or enqueuing priority and profile of the packet when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override and be assigned to the forwarding class and enqueuing priority and profile of the packet, based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop Quality of Service (QoS) behavior.
The no form of this command removes the explicit dot1p classification rule from the policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
Parameters
- dot1p-priority
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- profile {in | out | use-de}
-
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command or will use the DE bit to determine the profile of the packets (in-profile is used when DE = 0 and out-of-profile is used when DE = 1). In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p dot1p-priority
no dot1p
Context
[Tree] (config>qos>network>egress>fc dot1p)
Full Context
configure qos network egress fc dot1p
Description
This command is used whenever the dot1p bits are set to a common value regardless of the internal profile of the packets. Although it is not mandatory, this command should be used in combination with the de-mark command to enable the marking of the DE bit according to the internal profile of the packet.
This command acts as a shortcut for configuring the two existing commands with the same dot1p priority.
The dot1p dot1p-priority command is saved in the configuration as dot1p-in-profile dot1p-priority and dot1p-out-profile dot1p-priority. The inplus-profile traffic is marked with the same value as in-profile traffic. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
Platforms
7705 SAR Gen 2
dot1p
Syntax
dot1p dot1p-value [dot1p-mask]
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dot1p)
Full Context
configure system security management-access-filter mac-filter entry match dot1p
Description
This command configures Dot1p match conditions.
|
Format Style |
Format Syntax |
Example |
|---|---|---|
|
Decimal |
D |
4 |
|
Hexadecimal |
0xH |
0x4 |
|
Binary |
0bBBB |
0b100 |
Parameters
- dot1p-value
-
Specifies the IEEE 802.1p value in decimal.
- mask
-
Specifies the 3-bit mask can be configured using the following formats.
Platforms
7705 SAR Gen 2
dot1p-in-profile
dot1p-in-profile
Syntax
dot1p-in-profile dot1p-priority
no dot1p-in-profile
Context
[Tree] (config>qos>network>egress>fc dot1p-in-profile)
Full Context
configure qos network egress fc dot1p-in-profile
Description
This command specifies dot1p in-profile mappings. The inplus-profile traffic is marked with the same value as in-profile traffic.
The no form of this command resets the configuration to the default in-profile dot1p-priority setting for policy-id 1.
Parameters
- dot1p-priority
-
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
Platforms
7705 SAR Gen 2
dot1p-inner
dot1p-inner
Syntax
dot1p-inner dot1p-value
dot1p-inner in-profiledot1p-value out-profile dot1p-value [exceed-profile dot1p-value]
no dot1p-inner
Context
[Tree] (config>qos>sap-egress>fc dot1p-inner)
Full Context
configure qos sap-egress fc dot1p-inner
Description
This command explicitly configures the egress inner VLAN tag IEEE 802.1p (dot1p) bits marking for the forwarding class name. When the marking is set, all packets of the forwarding class name that have either an inner IEEE 802.1q or IEEE 802.1p encapsulation on a QinQ SAP will use the explicitly defined dot1p-value. If the egress packets for the forwarding class are not IEEE 802.1q or IEEE 802.1p QinQ encapsulated, this command has no effect.
The optional in-profile dot1p-value, out-profile dot1p-value, and exceed-profile dot1p-value parameters on the dot1p-inner command add the capability to mark the in-profile and out-of-profile status on an egress QinQ SAP. The command with the additional parameters may be used on the SAP when the internal in-profile, out-of-profile, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit. When the in-profile keyword is added, the rest of the structure must be specified. All inplus-profile traffic is marked with the same value as in-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if an inner tag exists. If a new inner tag is added, the related DE bit is set to 0. The inplus/in, out, or exceed-profile status may be indicated using the DE bit setting if the de-mark or de-mark-inner command is used.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the configure qos sap-ingress dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the dot1p-inner command in the policy; that is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured. The marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system.
The no form of this command sets the inner IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p-inner
Parameters
- dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
7705 SAR Gen 2
dot1p-out-profile
dot1p-out-profile
Syntax
dot1p-out-profile dot1p-priority
no dot1p-out-profile
Context
[Tree] (config>qos>network>egress>fc dot1p-out-profile)
Full Context
configure qos network egress fc dot1p-out-profile
Description
This command specifies dot1p out-of-profile mappings.
The exceed-profile traffic is marked with the same value as out-of-profile traffic.
The no form of this command resets the configuration to the default out-profile dot1p-priority setting for policy-id 1.
Parameters
- dot1p-priority
-
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
Platforms
7705 SAR Gen 2
dot1p-outer
dot1p-outer
Syntax
dot1p-outer {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p-outer
Context
[Tree] (config>qos>sap-egress>fc dot1p-outer)
Full Context
configure qos sap-egress fc dot1p-outer
Description
This command explicitly defines the egress outer or single VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an outer or single IEEE 802.1q or IEEE 802.1p encapsulation on a qinq or a dot1p SAP, respectively, will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, this command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters on the dot1p-outer command add the capability to mark the in, out, and exceed-profile status on an egress qinq or dot1p SAP. The command with the additional parameters may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic. All inplus-profile traffic is marked with the same value as in-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a single or outer tag exists. If a new tag is added, the related DE bit is set to 0. The in, out, or exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-outer) command is used. The DE value used for inplus is the same as that used for in-profile and the one used for exceed-profile is the same as that used for out of profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The no form of the command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p-outer
Parameters
- dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
7705 SAR Gen 2
dot1q-etype
dot1q-etype
Syntax
dot1q-etype value
no dot1q-etype
Context
[Tree] (config>port>ethernet dot1q-etype)
Full Context
configure port ethernet dot1q-etype
Description
This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.
The no form of this command reverts to the default value.
Parameters
- value
-
Specifies the Ethertype to expect, in either decimal or hex.
Platforms
7705 SAR Gen 2
dot1x
dot1x
Syntax
dot1x
Context
[Tree] (config>port>ethernet dot1x)
Full Context
configure port ethernet dot1x
Description
This command enables access to the context to configure port-specific 802.1x authentication attributes. This context can only be used when configuring a Fast Ethernet, Gigabit or 10-Gb Ethernet LAN ports on an appropriate MDA.
Platforms
7705 SAR Gen 2
down
down
Syntax
down ip seconds [init-only]
no down ip
down ipv6 seconds [init-only]
no down ipv6
Context
[Tree] (config>service>ies>if>hold-time down)
[Tree] (config>router>if>hold-time down)
[Tree] (config>service>vprn>nw-if>hold-time down)
[Tree] (config>service>vprn>if>hold-time down)
[Tree] (config>service>vpls>if>hold-time down)
Full Context
configure service ies interface hold-time down
configure router interface hold-time down
configure service vprn network-interface hold-time down
configure service vprn interface hold-time down
configure service vpls interface hold-time down
Description
This command causes a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured. If the init-only option is configured, the delay is only applied when the IP interface is first configured or after a system reboot.
The no form of this command removes the command from the active configuration and removes the delay in activating the associated IP interface. If the configuration is removed during a delay period, the currently running delay will continue until it completes.
Default
no down ip
Parameters
- seconds
-
The time delay, in seconds, to make the interface operational.
- init-only
-
Specifies that the down delay is only applied when the interface is configured or after a reboot.
Platforms
7705 SAR Gen 2
down-on-internal-error
down-on-internal-error
Syntax
down-on-internal-error [tx-disable]
no down-on-internal-error
Context
[Tree] (config>port>ethernet down-on-internal-error)
Full Context
configure port ethernet down-on-internal-error
Description
This command configures the system to bring a port operationally down in the event the system has detected internal MAC transmit errors (Int MAC Tx Errs).
Default
no down-on-internal-error
Parameters
- tx-disable
-
Specifies that the laser should be disabled if an internal MAC transmit error is encountered. When used, this option requires that the operator explicitly cycle the admin state of the port to clear the error and re-enable the laser.
Platforms
7705 SAR Gen 2
down-timeout
down-timeout
Syntax
[no] down-timeout
Context
[Tree] (config>aaa>radius-srv-plcy>servers>health-check down-timeout)
Full Context
configure aaa radius-server-policy servers health-check down-timeout
Description
This command determines the interval to wait for a RADIUS reply message from the RADIUS server before a RADIUS server is declared out-of-service. By default, the value of the down-timeout is the number of retries multiplied by the timeout interval. Each host will use the configured timeout and retry value under the AAA RADIUS server policy.
timeout refers to the waiting period before the next retry attempt.
retry refers the number of times the host will attempt to contact the RADIUS server.
If a RADIUS server is declared out-of-service, the host pending retry attempts will move on to the next RADIUS server.
The no form of this command reverts to the default.
Parameters
- minutes
-
Specifies the timer to wait, in minutes, before declaring the RADIUS server that is down.
- seconds
-
Specifies the timer to wait, in seconds, before declaring the RADIUS server that is down.
Platforms
7705 SAR Gen 2
downstream-ip-filter
downstream-ip-filter
Syntax
downstream-ip-filter filter-id
no downstream-ip-filter
Context
[Tree] (config>router>nat>outside downstream-ip-filter)
[Tree] (config>service>vprn>nat>outside downstream-ip-filter)
Full Context
configure router nat outside downstream-ip-filter
configure service vprn nat outside downstream-ip-filter
Description
This command specifies a filter to apply to the downstream traffic after routing in the outside virtual router instance and before the NAT function; it is useful for traffic that bypasses the egress filters applied in the inside virtual router instance, such as DS-Lite traffic.
The no form of the command removes the filter from the configuration.
Default
no downstream-ip-filter
Parameters
- filter-id
-
Specifies a filter up to 64 characters.
Platforms
7705 SAR Gen 2
dpd
dpd
Syntax
dpd [interval interval] [max-retries max-retries] [reply-only]
no dpd
Context
[Tree] (config>ipsec>ike-policy dpd)
Full Context
configure ipsec ike-policy dpd
Description
This command controls the dead peer detection mechanism.
The no form of this command removes the parameters from the configuration.
Default
no dpd
Parameters
- interval
-
Specifies the DPD interval, in seconds. Since more time is necessary to determine if there is incoming traffic, the actual time needed to bring down the tunnel is larger than the DPD interval multiplied by max-retries.
- max-retries
-
Specifies the maximum number of retries before the tunnel is removed.
- reply-only
-
Specifies whether to initiate a DPD request if there is an incoming ESP or IKE packet. Issuing the command without the reply-only keyword does not initiate a DPD request if there is an incoming ESP packet.
Platforms
7705 SAR Gen 2
drain
drain
Syntax
[no] drain
Context
[Tree] (config>service>vprn>dhcp>server>pool>subnet drain)
Full Context
configure service vprn dhcp local-dhcp-server pool subnet drain
Description
This command means no new leases can be assigned from this subnet and existing leases are cleaned up upon renew/rebind.
The no form of this command means the subnet is active and new leases can be assigned from it.
Platforms
7705 SAR Gen 2
drain
Syntax
[no] drain
Context
[Tree] (config>service>vprn>nat>outside>pool>address-range drain)
[Tree] (config>router>nat>outside>pool>address-range drain)
Full Context
configure service vprn nat outside pool address-range drain
configure router nat outside pool address-range drain
Description
This command starts or stops draining this NAT address range. When an address-range is being drained, it will not be used to serve new hosts. Existing hosts, however, will still be able to use the address that was assigned to them even if it is being drained. An address-range can only be deleted if the parent pool is shut down or if the range itself is effectively drained (hosts are no longer using the addresses).
Platforms
7705 SAR Gen 2
drop
drop
Syntax
drop
drop packet-length {lt | gt | eq} packet-length-value
drop packet-length range packet-length-value packet-length-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop ttl {lt | gt | eq} ttl-value
drop ttl range ttl-value ttl-value
Context
[Tree] (config>filter>ip-filter>entry>action drop)
Full Context
configure filter ip-filter entry action drop
Description
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on pkt-length, packet-length range, ttl, ttl range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, and not the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
-
the expression is left-aligned for odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
-
the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria.
Parameters
- packet-length
-
Specifies drop packets matching both the filter entry match criteria and the packet-length value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the packet-length value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
- packet-length-value
-
Specifies the packet length value for the rate limit action.
- range
-
Specifies an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
- expression
-
Specifies the hexadecimal pattern to match; up to eight bytes.
- mask
-
Specifies the mask for the pattern expression, up to eight bytes.
- offset-type
-
Specifies the starting point reference for the offset-value of this pattern.
- offset-value
-
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
- ttl-value
-
Specifies drop packets matching both the filter entry match criteria and the TTL value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the TTL value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
Platforms
7705 SAR Gen 2
drop
Syntax
drop
drop hop-limit {lt | gt | eq} hop-limit-value
drop hop-limit range hop-limit-value hop-limit-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop payload-length {lt | gt | eq} payload-length-value
drop payload-length range payload-length-value payload-length-value
Context
[Tree] (config>filter>ipv6-filter>entry>action drop)
Full Context
configure filter ipv6-filter entry action drop
Description
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on payload-length, payload-length range, hop-limit, hop-limit range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, but do not match the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
-
the expression is left-aligned for the odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
-
the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria
Parameters
- hop-limit
-
Specifies the hop-limit value for the drop action.
- hop-limit-value
-
Specifies the hop-limit value for the drop action.
- range
-
Specifies an inclusive range. When the range parameter is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
- expression
-
Specifies the hexadecimal pattern to match; up to eight bytes.
- mask
-
Specifies the mask for the pattern expression, up to eight bytes.
- offset-type
-
Specifies the starting point reference for the offset-value of this pattern.
- offset-value
-
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
- payload-length
-
Specifies drop packets matching both the filter entry match criteria and the payload-length-value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the payload-length-value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
- payload-length-value
-
Specifies the payload length value for the drop action.
Platforms
7705 SAR Gen 2
drop-count
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>service>vprn>static-route-entry>indirect>cpe-check drop-count)
[Tree] (config>service>vprn>static-route-entry>next-hop>cpe-check drop-count)
Full Context
configure service vprn static-route-entry indirect cpe-check drop-count
configure service vprn static-route-entry next-hop cpe-check drop-count
Description
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
Default
drop-count 3
Parameters
- count
-
An integer count value.
Platforms
7705 SAR Gen 2
drop-count
Syntax
drop-count consecutive-failures [hold-down seconds]
no drop-count
Context
[Tree] (config>filter>redirect-policy>dest>ping-test drop-count)
Full Context
configure filter redirect-policy destination ping-test drop-count
Description
This command specifies the number of consecutive requests that must fail for the destination to be declared unreachable and the time to hold destination unreachable before repeating tests.
Default
drop-count 3 hold-down 0
Parameters
- consecutive-failures
-
Specifies the number of consecutive ping test failures before declaring the destination down.
- hold-down seconds
-
Specifies the amount of time, in seconds, that the system should be held down if any of the test has marked it unreachable.
Platforms
7705 SAR Gen 2
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>router>static-route-entry>next-hop>cpe-check drop-count)
[Tree] (config>router>static-route-entry>indirect>cpe-check drop-count)
Full Context
configure router static-route-entry next-hop cpe-check drop-count
configure router static-route-entry indirect cpe-check drop-count
Description
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
Default
drop-count 3
Parameters
- count
-
Specifies the integer count value.
Platforms
7705 SAR Gen 2
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>vrrp>policy>priority-event>host-unreachable drop-count)
Full Context
configure vrrp policy priority-event host-unreachable drop-count
Description
This command configures the number of consecutively sent ICMP echo request messages that must fail before the host unreachable priority control event is set.
The drop-count command is used to define the number of consecutive message send attempts that must fail for the host-unreachable priority event to enter the set state. Each unsuccessful attempt increments the event’s consecutive message drop counter. With each successful attempt, the event’s consecutive message drop counter resets to zero.
If the event’s consecutive message drop counter reaches the drop-count value, the host-unreachable priority event enters the set state.
The event’s hold-set value defines how long the event must stay in the set state even when a successful message attempt clears the consecutive drop counter. The event is not cleared until the consecutive drop counter is less than the drop-count value and the hold-set timer has a value of zero (expired).
The no form of the command reverts to the default value.
Default
drop-count 3 — 3 consecutive ICMP echo request failures are required before the host unreachable priority control event is set.
Parameters
- count
-
The number of ICMP echo request message attempts that must fail for the event to enter the set state. It also defines the threshold so a lower consecutive number of failures can clear the event state.
Platforms
7705 SAR Gen 2
drop-extracted-traffic
drop-extracted-traffic
Syntax
drop-extracted-traffic
Context
[Tree] (config>filter>ipv6-filter>entry>action drop-extracted-traffic)
[Tree] (config>filter>ip-filter>entry>action drop-extracted-traffic)
Full Context
configure filter ipv6-filter entry action drop-extracted-traffic
configure filter ip-filter entry action drop-extracted-traffic
Description
This command specifies that a packet matching this filter entry is dropped if extracted to the CPM. Packets matching the filter entry match criteria and not extracted to the CPM are forwarded with no further match in the following filter entries.
Platforms
7705 SAR Gen 2
drop-tail
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>vpls>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>vpls>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>ies>if>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>ies>if>sap>ingress>queue-override>queue drop-tail)
Full Context
configure service vpls sap egress queue-override queue drop-tail
configure service vpls sap ingress queue-override queue drop-tail
configure service ies interface sap egress queue-override queue drop-tail
configure service ies interface sap ingress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>port>eth>access>ing>qgrp>qover>q drop-tail)
[Tree] (config>port>eth>access>egr>qgrp>qover>q drop-tail)
[Tree] (config>port>ethernet>network>egr>qgrp>qover>q drop-tail)
Full Context
configure port ethernet access ingress queue-group queue-overrides queue drop-tail
configure port ethernet access egress queue-group queue-overrides queue drop-tail
configure port ethernet network egress queue-group queue-overrides queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>epipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>epipe>sap>egress>queue-override>queue drop-tail)
Full Context
configure service epipe sap ingress queue-override queue drop-tail
configure service epipe sap egress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>vprn>if>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>vprn>if>sap>ingress>queue-override>queue drop-tail)
Full Context
configure service vprn interface sap egress queue-override queue drop-tail
configure service vprn interface sap ingress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>sap-ingress>queue drop-tail)
[Tree] (config>qos>sap-egress>queue drop-tail)
Full Context
configure qos sap-ingress queue drop-tail
configure qos sap-egress queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>network-queue>queue drop-tail)
Full Context
configure qos network-queue queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
7705 SAR Gen 2
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>qgrps>ing>qgrp>queue drop-tail)
[Tree] (config>qos>qgrps>egr>qgrp>queue drop-tail)
Full Context
configure qos queue-group-templates ingress queue-group queue drop-tail
configure qos queue-group-templates egress queue-group queue drop-tail
Description
Commands in this context configure queue drop-tail parameters.
Platforms
7705 SAR Gen 2
dsap
dsap
Syntax
dsap dsap-value [dsap-mask]
no dsap
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dsap)
Full Context
configure qos sap-ingress mac-criteria entry match dsap
Description
Configures an Ethernet 802.2 LLC DSAP value or range for an ingress SAP QoS policy match criterion.
This is a 1-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.
Use the no form of this command to remove the dsap value as the match criterion.
Default
no dsap
Parameters
- dsap-value
-
The 8-bit dsap match criteria value in hexadecimal.
- dsap-mask
-
This is optional and can be used when specifying a range of dsap values to use as the match criteria.
This 8-bit mask can be configured using the following formats.
Table 3. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDD
240
Hexadecimal
0xHH
0xF0
Binary
0bBBBBBBBB
0b11110000
Platforms
7705 SAR Gen 2
dsap
Syntax
dsap dsap-value [dsap-mask]
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dsap)
Full Context
configure system security management-access-filter mac-filter entry match dsap
Description
This command configures DSAP match conditions.
Parameters
- dsap-value
-
Specifies the 8-bit DSAP match criteria value in hexadecimal.
- mask
-
Specifies a range of DSAP values to use as the match criteria.
This 8 bit mask can be configured using the formats described in Format Styles:
Table 4. Format Styles Format Style
Format Syntax
Example
Decimal
DDD
240
Hexadecimal
0xHH
0xF0
Binary
0bBBBBBBBB
0b11110000
Platforms
7705 SAR Gen 2
dscp
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>service>ies>if>sap>ip-tunnel dscp)
Full Context
configure service ies interface sap ip-tunnel dscp
Description
This command sets the DSCP code-point in the outer IP header of encapsulated packets associated with a particular tunnel.
The no form of this command copies the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
Default
no dscp
Parameters
- dscp
-
Specifies the DSCP code-point to be used.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name fc fc-name
no dscp dscp-name
Context
[Tree] (config>service>vprn>sgt-qos dscp)
[Tree] (config>router>sgt-qos dscp)
Full Context
configure service vprn sgt-qos dscp
configure router sgt-qos dscp
Description
This command creates a mapping between the DiffServ Code Point (DSCP) of the self-generated traffic and the forwarding class.
Self-generated traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DSCPs to the forwarding class.
All DSCP names that define a DSCP value must be explicitly defined.
The no form of this command removes the DSCP-to-forwarding class association.
Parameters
- dscp-name
-
Specifies the name of the DSCP to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.
- fc fc-name
-
Specifies the forwarding class name. All packets with a DSCP value or MPLS EXP bit that are not defined will be placed in this forwarding class.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>service>vprn>if>sap>ip-tunnel dscp)
Full Context
configure service vprn interface sap ip-tunnel dscp
Description
This command sets the DSCP code-point in the outer IP header of GRE encapsulated packets associated with a particular GRE tunnel. The default, set using the no form of this command, is to copy the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
Default
no dscp
Parameters
- dscp
-
Specifies the DSCP code-point to be used.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name
dscp resolve
Context
[Tree] (config>oam-pm>session>ip dscp)
Full Context
configure oam-pm session ip dscp
Description
This command can be used to explicitly configure the DSCP value to the specified dscp-name, or to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
Default
dscp resolve
Parameters
- dscp-name
-
Specifies the Diffserv code point name.
- resolve
-
Specifies to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name [dscp-name] fc fc-name [priority {low | high}]
no dscp dscp-name [dscp-name]
Context
[Tree] (config>qos>sap-ingress dscp)
Full Context
configure qos sap-ingress dscp
Description
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with the DiffServ Code Point (DSCP) value contained in the dscp-name. A list of up to eight dscp-names can be entered on a single command. The lists of dscp-names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight dscp-names with the same parameters (fc, priority) will result in multiple lists being created. Conversely, multiple lists with the same parameters (fc, priority) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, then a new list will be created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
Adding a DSCP rule on the policy forces packets that match the DSCP value specified to override the forwarding class and enqueuing priority based on the parameters included in the DSCP rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The DSCP value (referred to here by dscp-name) is derived from the most significant six bits in the IPv4 header ToS byte field (DSCP bits) or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed. The six DSCP bits define 64 DSCP values used to map packets to per-hop Quality of Service (QoS) behavior. The most significant three bits in the IP header ToS byte field are also commonly used in a more traditional manner to specify an IP precedence value, causing an overlap between the precedence space and the DSCP space. Both IP precedence and DSCP classification rules are supported.
DSCP rules have a higher match priority than IP precedence rules and where a dscp-name DSCP value overlaps an ip-prec-value, the DSCP rule takes precedence.
The no form of this command removes the specified the dscp-names from the explicit DSCP classification rule in the SAP ingress policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to eight per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, then the command is aborted at that point with an error message displayed; any DSCP names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
Removing the dscp-name from the policy immediately removes the DSCP name on all ingress SAPs using the policy.
Parameters
- dscp-name
-
The DSCP name is a required parameter that specifies the unique IP header ToS byte DSCP bits value that will match the DSCP rule. If the command is executed multiple times with the same dscp-name, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of 64 DSCP rules are allowed on a single policy and a maximum of eight dscp-names can be specified in a single statement.
The specified name must exist as a dscp-name. SR OS software provides names for the well-known code points; these can be shown using the show qos dscp-table command.
- fc fc-name
-
The value given for fc-name must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (.). If subclass-name does not exist in the context of fc-name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
- priority
-
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
- high
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dscp)
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dscp)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dscp)
Full Context
configure qos sap-ingress ipv6-criteria entry match dscp
configure qos sap-egress ip-criteria entry match dscp
configure qos sap-ingress ip-criteria entry match dscp
configure qos sap-egress ipv6-criteria entry match dscp
Description
This command configures a DSCP code point to be used as a SAP QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
Default
no dscp
Parameters
- dscp-name
-
Specifies a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point can only be specified by its name.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name [dscp-name] [fc fc-name] [profile {in | out | exceed | inplus}]
no dscp dscp-name [dscp-name]
Context
[Tree] (config>qos>sap-egress dscp)
Full Context
configure qos sap-egress dscp
Description
This command defines IP Differentiated Services Code Point (DSCP) names that must be matched to perform the associated reclassification actions. The specified name must exist as a DSCP name. SR OS software provides names for the well-known code points. A list of up to eight DSCP names can be entered on a single command. The lists of DSCP names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight DSCP names with the same parameters (fc and profile) results in multiple lists being created. Conversely, multiple lists with the same parameters (fc and profile) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, a new list is created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
If an egress packet on the SAP matches an IP DSCP value corresponding to a specified DSCP name, the forwarding class, profile egress queue accounting behavior may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions. Matching a DSCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the traffic class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The reclassification actions from a DSCP reclassification rule may be overridden by an IP flow match event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If an IP criteria match occurs after the DSCP match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new fc, the fc from the dscp match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If an IP criteria match occurs after the DSCP match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the DSCP match will be used.
The no form of this command removes the specified the dscp-names from the reclassification rule in the SAP egress QoS policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to 8 per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, the command is aborted at that point with an error message displayed. Any dscp-names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
Parameters
- dscp-name
-
The dscp-name parameter is required when defining a DSCP reclassification rule. The specified name must exist as a DSCP name. A maximum of eight DSCP names can be specified in a single statement. SR OS software provides names for the well-known code points, which can be shown using the show qos dscp-table command.
- fc-name:
-
The fc reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the forwarding class specified as fc-name regardless of the ingress classification decision. The explicit forwarding class reclassification may be overwritten by an IP criteria reclassification match. The fc name defined must be one of the eight forwarding classes supported by the system. To remove the forwarding class reclassification action for the specified DSCP value, the dscp command must be re-executed without the fc reclassification action defined.
- counter-id
-
Specifies the counter ID.
- profile
-
The profile reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the specified profile regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by an IPv6 criteria or IP criteria reclassification match. To remove the profile reclassification action for the specified dscp-name, the dscp command must be re-executed without the profile reclassification action defined.
- in
-
Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
- out
-
Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
- exceed
-
Specifies that when exceed is specified, any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
- inplus
-
Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp {dscp-name | in-profile dscp-name out-profile dscp-name [exceed-profile dscp-name]}
no dscp
Context
[Tree] (config>qos>sap-egress>fc dscp)
Full Context
configure qos sap-egress fc dscp
Description
This command configures a DSCP to be used for remarking packets from the specified FC. If the optional exceed-profile, in-profile, or out-profile keyword is specified, the command will remark different DSCP depending on whether the packet was classified to be exceed, in-profile, or out-of-profile ingress to the node. All inplus-profile traffic is marked with the same value as in-profile traffic.
Default
no dscp
Parameters
- dscp-name
-
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
- exceed-profile dscp-name
-
This optional parameter specifies the DSCP name to be used to remark the traffic that is exceed-profile. If not specified, this defaults to the same value configured for out-profile parameter.
- in-profile dscp-name
-
Specifies the DSCP name to be used to remark the traffic that is in-profile.
- out-profile dscp-name
-
Specifies the DSCP name to be used to remark the traffic that is out-of-profile.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name fc fc-name profile {in | out}
no dscp
Context
[Tree] (config>qos>network>ingress dscp)
Full Context
configure qos network ingress dscp
Description
This command creates a mapping between the DiffServ Code Point (DSCP) of the network ingress traffic and the forwarding class.
Ingress traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DiffServ code points to the forwarding class. For undefined code points, packets are assigned to the forwarding class specified under the default-action command.
The no form of this command removes the DiffServ code point-to-forwarding class association. The default-action then applies to that code point value.
Parameters
- dscp-name
-
The name of the DiffServ code point to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.
The system-defined names available are as follows. The system-defined names must be referenced as all lowercase, exactly as shown in the first column in Default DSCP Names to DSCP Value Mapping and Default Class Selector Code Points to DSCP Value Mapping.
Additional names-to-code point value associations can be added using the 'dscp-name dscp-name dscp-value’ command.
The actual mapping is being done on the dscp-value, not the dscp-name that references the dscp-value. If a second dscp-name that references the same dscp-value is mapped within the policy, an error will occur. The second name will not be accepted until the first name is removed.
Table 5. Default DSCP Names to DSCP Value Mapping DSCP Name
DSCP Value Decimal
DSCP Value
Hexadecimal
DSCP Value Binary
nc1
48
0x30
0b110000
nc2
56
0x38
0b111000
ef
46
0x2e
0b101110
af41
34
0x22
0b100010
af42
36
0x24
0b100100
af43
38
0x26
0b100110
af31
26
0x1a
0b011010
af32
28
0x1c
0b011100
af33
30
0x1d
0b011110
af21
18
0x12
0b010010
af22
20
0x14
0b010100
af23
22
0x16
0b010110
af11
10
0x0a
0b001010
af12
12
0x0c
0b001100
af13
14
0x0e
0b001110
default
0
0x00
0b000000
Table 6. Default Class Selector Code Points to DSCP Value Mapping DSCP Name
DSCP Value Decimal
DSCP Value
Hexadecimal
DSCP Value Binary
cs7
56
0x38
0b111000
cs6
48
0X30
0b110000
cs5
40
0x28
0b101000
cs4
32
0x20
0b100000
cs3
24
0x18
0b011000
cs2
16
0x10
0b010000
cs1
08
0x8
0b001000
- fc-name
-
Enter this required parameter to specify the fc-name with which the code point will be associated.
- profile {in | out}
-
Enter this required parameter to indicate whether the DiffServ code point value is the in-profile or out-of-profile value. For every DSCP value defined, the profile must be indicated. If a DSCP value is not mapped, the default-action forwarding class and profile state will be used for that value.
DSCP values mapping to forwarding classes Expedited (ef), High-1 (h1) and Network-Control (nc) can only be set to in-profile.
DSCP values mapping to forwarding class "be” can only be set to out-of-profile.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name fc fc-name profile {in | out | exceed | inplus}
no dscp dscp-name
Context
[Tree] (config>qos>network>egress dscp)
Full Context
configure qos network egress dscp
Description
This command configures an IP Differentiated Services Code Point (DSCP) value that must be matched to perform the associated reclassification actions. If an egress packet on an IES/VPRN interface spoke SDP, on a CSC network interface in a VPRN, or on a network interface that the network QoS policy is applied to, matches the specified IP DSCP value, the forwarding class and profile may be overridden.
By default, the forwarding class and profile of the packet are derived from ingress classification and profiling functions. Matching a DHCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The configuration of egress DSCP classification and the configuration of an egress IP criteria or IPv6 criteria entry statement within a network QoS policy are mutually exclusive.
The IP precedence- and DSCP-based reclassification are supported on a network interface, on a CSC network interface in a VPRN, and on a PW used in an IES or VPRN spoke interface. The CLI will block the application of a network QoS policy with the egress reclassification commands to the spoke SDP part of a Layer 2 service.
Conversely, the CLI will not allow the user to add the egress reclassification commands to a network QoS policy if the policy is being used by a Layer 2 spoke SDP.
The egress reclassification commands will only take effect if the redirection of the spoke SDP or CSC interface to use an egress port queue group succeeds. For example, the following CLI command would be successful:
config>service>vprn>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>ies>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>vprn>nw-if>qos network-policy-id port-redirect-group queue-group-name instance instance-id
If the redirection command fails, the PW will use the network QoS policy assigned to the network IP interface, however any reclassification in the network QoS policy applied to the network interface will be ignored.
The no form of this command removes the egress reclassification rule.
Parameters
- dscp-name
-
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63
- fc fc-name
-
be, l2, af, l1, h2, ef, h1, nc
- profile {in | out | exceed | inplus}
-
The profile reclassification action is mandatory. When specified, packets matching the DSCP value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. To remove the profile reclassification action for the specified DSCP value, the no dscp command must be executed.
in - Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
out - Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
exceed - Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
inplus - Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dscp)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dscp)
Full Context
configure qos network ingress ip-criteria entry match dscp
configure qos network ingress ipv6-criteria entry match dscp
configure qos network egress ip-criteria entry match dscp
configure qos network egress ipv6-criteria entry match dscp
Description
This command configures a DSCP to be used as a network QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
Parameters
- dscp-name
-
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
Platforms
7705 SAR Gen 2
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>filter>ipv6-filter>entry>match dscp)
[Tree] (config>filter>ip-filter>entry>match dscp)
Full Context
configure filter ipv6-filter entry match dscp
configure filter ip-filter entry match dscp
Description
This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.
The no form of the command removes the DSCP match criterion.
Default
no dscp
Parameters
- dscp-name
-
Configures a DSCP name. The DiffServ code point may only be specified by its name.
Platforms
7705 SAR Gen 2
dscp-in-profile
dscp-in-profile
Syntax
dscp-in-profile dscp-name
no dscp-in-profile
Context
[Tree] (config>qos>network>egress>fc dscp-in-profile)
Full Context
configure qos network egress fc dscp-in-profile
Description
This command specifies the in-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default in-profile DSCP name setting for policy-id 1.
Parameters
- dscp-name
-
Specifies the system- or user-defined, case-sensitive dscp-name.
Platforms
7705 SAR Gen 2
dscp-out-profile
dscp-out-profile
Syntax
dscp-out-profile dscp-name
no dscp-out-profile
Context
[Tree] (config>qos>network>egress>fc dscp-out-profile)
Full Context
configure qos network egress fc dscp-out-profile
Description
This command specifies the out-of-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets requiring marking the egress on this forwarding class queue that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default out-of-profile DSCP name setting for policy-id 1.
Default
|
Policy-id 1: |
Factory setting |
|
Policy-id 2 to 65535: |
Policy-id setting |
Parameters
- dscp-name
-
Specifies the system- or user-defined, case-sensitive dscp-name.
Platforms
7705 SAR Gen 2
dst-ip
dst-ip
Syntax
dst-ip {ip-address/mask | ip-address [ipv4-address-mask] | ip-prefix-list prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-ip)
Full Context
configure qos sap-ingress ip-criteria entry match dst-ip
configure qos sap-egress ip-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv4 destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 address match criterion.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the destination IPv4 address specified in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- prefix-list-name
-
Specifies the IPv4 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
dst-ip
Syntax
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-ip)
Full Context
configure qos sap-ingress ipv6-criteria entry match dst-ip
configure qos sap-egress ipv6-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv6 destination address, specify the address and its associated mask, for example, 2001:db8:1000::/64.
The no form of this command removes the destination IPv6 address match criterion.
Default
no dst-ip
Parameters
- ipv6-address
-
Specifies the IPv6 address for the IP match criterion in hexadecimal digits.
- prefix-length
-
Specifies the IPv6 prefix length for the IPv6 address expressed as a decimal integer.
- ipv6-address-mask
-
Specifies the IPv6 address mask.
- ipv6-prefix-list-name
-
Specifies the IPv6 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.
Platforms
7705 SAR Gen 2
dst-ip
Syntax
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list ip-prefix-list-name}
dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-ip)
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-ip)
Full Context
configure qos network egress ip-criteria entry match dst-ip
configure qos network ingress ipv6-criteria entry match dst-ip
configure qos network ingress ip-criteria entry match dst-ip
configure qos network egress ipv6-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a network QoS policy match criterion.
To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.
The no form of this command removes the destination IP address match criterion.
Parameters
- ip-address
-
Specifies the source IPv4 address specified in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- ip-prefix-list-name
-
Specifies an IPv4 prefix list which contains IPv4 address prefixes to be matched.
- ipv6-address
-
Specifies the IPv6 prefix for the IP match criterion in hex digits.
- mask
-
Specifies the length of the IPv6 address expressed as a decimal integer.
- ipv6-address-mask
-
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
- ipv6-prefix-list-name
-
Specifies an IPv6 prefix list which contains IPv6 address prefixes to be matched.
Platforms
7705 SAR Gen 2
dst-ip
Syntax
IPv4:
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list prefix-list-name}
IPv6:
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list prefix-list-name}
no dst-ip
Context
[Tree] (config>filter>ip-exception>entry>match dst-ip)
[Tree] (config>filter>ipv6-filter>entry>match dst-ip)
[Tree] (config>filter>ipv6-exception>entry>match dst-ip)
[Tree] (config>filter>ip-filter>entry>match dst-ip)
Full Context
configure filter ip-exception entry match dst-ip
configure filter ipv6-filter entry match dst-ip
configure filter ipv6-exception entry match dst-ip
configure filter ip-filter entry match dst-ip
Description
This command configures a destination address range to be used as a filter policy match criterion.
To match on the destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 or IPv6 address match criterion.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the destination IPv4 address in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- ip-prefix-listor ipv6-prefix-list prefix-list-name
-
Specifies to use a list of IP prefixes, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- ipv6-address
-
Specifies the IPv6 prefix for the IP match criterion in hex digits.
- prefix-length
-
Specifies the IPv6 prefix length for the ipv6-address as a decimal integer.
- ipv6-address-mask
-
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
Platforms
7705 SAR Gen 2
dst-mac
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dst-mac)
Full Context
configure qos sap-ingress mac-criteria entry match dst-mac
Description
Configures a destination MAC address or range to be used as a Service Ingress QoS policy match criterion.
The no form of this command removes the destination MAC address as the match criterion.
Default
no dst-mac
Parameters
- ieee-address
-
The MAC address to be used as a match criterion.
- ieee-address-mask
-
A 48-bit mask to match a range of MAC address values.
This 48-bit mask can be configured using the following formats.
Table 7. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDDDDDDDDDDD
281474959933440
Hexadecimal
0xHHHHHHHHHHHH
0xFFFFFF000000
Binary
0bBBBBBBB...B
0b11110000...B
All packets with a source MAC OUI value of 00-03-FA, subject to a match condition, should be specified as: 0003FA000000 0x0FFFFF000000
Platforms
7705 SAR Gen 2
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dst-mac)
Full Context
configure system security management-access-filter mac-filter entry match dst-mac
Description
This command configures the destination MAC match condition.
Parameters
- ieee-address
-
Specifies the MAC address to be used as a match criterion.
- mask
-
Specifies a 48-bit mask to match a range of MAC address values.
Platforms
7705 SAR Gen 2
dst-port
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port range start end
no dst-port
Context
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-port)
Full Context
configure qos sap-egress ip-criteria entry match dst-port
configure qos sap-egress ipv6-criteria entry match dst-port
configure qos sap-ingress ipv6-criteria entry match dst-port
configure qos sap-ingress ip-criteria entry match dst-port
Description
This command configures a destination TCP or UDP port number or port range for a SAP QoS policy match criterion.
The no form of this command removes the destination port match criterion.
Default
no dst-port
Parameters
- {lt | gt | eq} dst-port-number
-
The TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) to the destination port value, specified as a decimal integer.
- range startend
-
The range of TCP or UDP port values to match, specified as between the start and end destination port values inclusive.
Platforms
7705 SAR Gen 2
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range start end
no dst-port
Context
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-port)
Full Context
configure qos network egress ipv6-criteria entry match dst-port
configure qos network ingress ipv6-criteria entry match dst-port
configure qos network egress ip-criteria entry match dst-port
configure qos network ingress ip-criteria entry match dst-port
Description
This command configures a destination TCP or UDP port number, port range, or a port list for a network QoS policy match criterion.
The no form of this command removes the destination port match criterion.
Parameters
- lt
-
Keyword used to specify TCP or UDP port numbers to match that are less than the destination port value.
- gt
-
Keyword used to specify TCP or UDP port numbers to match that are greater than the destination port value.
- eq
-
Keyword used to specify TCP or UDP port numbers to match that are equal to the destination port value.
- dst-port-number
-
Specifies the TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) the destination port value, specified as a decimal integer.
- port-list-name
-
Specifies a port list name, up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- start
-
Specifies the starting range of TCP or UDP port values to match.
- end
-
Specifies the end range of TCP or UDP port values to match.
Platforms
7705 SAR Gen 2
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range dst-port-number dst-port-number
no dst-port
Context
[Tree] (config>filter>ip-filter>entry>match dst-port)
[Tree] (config>filter>ipv6-filter>entry>match dst-port)
[Tree] (config>filter>ipv6-exception>entry>match dst-port)
[Tree] (config>filter>ip-exception>entry>match dst-port)
Full Context
configure filter ip-filter entry match dst-port
configure filter ipv6-filter entry match dst-port
configure filter ipv6-exception entry match dst-port
configure filter ip-exception entry match dst-port
Description
This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter or IP exception match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. Similarly an entry containing the "dst-port eq 0” match criterion, may match non-initial fragments when the destination port value is not present in a packet fragment and other match criteria are also met.
The no form of the command removes the destination port match criterion.
Default
no dst-port
Parameters
- lt
-
Specifies that all port numbers less than the dst-port-number match.
- gt
-
Specifies that all port numbers greater than the dst-port-number match.
- eq
-
Specifies that the dst-port-number must be an exact match.
- dst-port-number
-
Specifies the destination port number to be used as a match criteria expressed as a decimal integer, as well as in hexadecimal or binary format. The following value is for decimal integer format only.
- port-list-name
-
Specifies to use a list of ports referred to by port-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- dst-port-number dst-port-number
-
Specifies inclusive port range between two dst-port-number values.
Platforms
7705 SAR Gen 2
dst-port
Syntax
dst-port value [mask]
no dst-port
Context
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry dst-port)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry dst-port)
Full Context
configure system security management-access-filter ip-filter entry dst-port
configure system security management-access-filter ipv6-filter entry dst-port
Description
This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.
The no form of this command removes the destination port match criterion.
Parameters
- value
-
Specifies the destination TCP or UDP port number as match criteria.
- mask
-
Specifies the mask used to specify a range of destination port numbers as the match criterion.
This 16 bit mask can be configured using the formats described in Format Styles to Configure Mask:
Table 8. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDD
63488
Hexadecimal
0xHHHH
0xF800
Binary
0bBBBBBBBBBBBBBBBB
0b1111100000000000
To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.
Platforms
7705 SAR Gen 2
dst-zone
dst-zone
Syntax
[no] dst-zone {std-zone-name | non-std-zone-name}
Context
[Tree] (config>system>time dst-zone)
Full Context
configure system time dst-zone
Description
This command configures the start and end dates and offset for summer time or daylight savings time to override system defaults or for user defined time zones.
When configured, the time is adjusted by adding the configured offset when summer time starts and subtracting the configured offset when summer time ends.
If the time zone configured is listed in the Time Zones section, then the starting and ending parameters and offset do not need to be configured with this command unless it is necessary to override the system defaults. The command returns an error if the start and ending dates and times are not available either the Time Zones section on or entered as optional parameters in this command.
Up to five summer time zones may be configured, for example, for five successive years or for five different time zones. Configuring a sixth entry will return an error message. If no summer (daylight savings) time is supplied, it is assumed no summer time adjustment is required.
The no form of the command removes a configured summer (daylight savings) time entry.
Parameters
- std-zone-name
-
Specifies the standard time zone name. The standard name must be a system-defined zone in the Time Zones section. For zone names in the table that have an implicit summer time setting, for example MDT for Mountain Daylight Saving Time, the remaining start-date, end-date and offset parameters need to be provided unless it is necessary to override the system defaults for the time zone.
- non-std-zone-name
-
Specifies the non-standard time zone name. Create a user-defined name created using the zone. The name can be a maximum of 5 characters in length.
Platforms
7705 SAR Gen 2
duid-en
duid-en
Syntax
duid-en hex-string
no duid-en
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident duid-en)
Full Context
configure subscriber-mgmt local-user-db ipoe host host-identification duid-en
Description
This command configures the hexadecimal value for use in matching against the concatenation of enterprise number and identifier fields of DHCPv6 option CLIENTID (1) with DUID type = 2 (assigned by the vendor based on the enterprise number) in the DHCPv6 client message.
The no form of this command removes the client ID type duid-en from the configuration.
Default
no duid-en
Parameters
- hex-string
-
Specifies the string in hexadecimal format, up to 254 hex nibbles.
Platforms
7705 SAR Gen 2
duid-ll-llt
duid-ll-llt
Syntax
duid-ll-llt ieee-address
no duid-ll-llt
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident duid-ll-llt)
Full Context
configure subscriber-mgmt local-user-db ipoe host host-identification duid-ll-llt
Description
This command configures the value for use in matching against the link-layer address field of DHCPv6 option CLIENTID (1) with DUID type = 3 (based on link-layer address) or DUID type = 1 (based on link-layer address plus time) and hardware type = 1 (Ethernet) in the DHCPv6 client message. For DUID type = 1, the time field is ignored.
The no form of this command removes the client ID type duid-ll-llt from the configuration.
Default
no duid-ll-llt
Parameters
- ieee-address
-
Specifies the unicast MAC address of the client ID. This value cannot be all zeros.
Platforms
7705 SAR Gen 2
dup-detect
dup-detect
Syntax
dup-detect [anti-spoof-mac mac-address] window minutes num-moves count hold-down [minutes | max]
dup-detect anti-spoof-mac mac-address window minutes num-moves count hold-down [minutes | max] [static-black-hole]
Context
[Tree] (config>service>vpls>proxy-nd dup-detect)
[Tree] (config>service>vpls>proxy-arp dup-detect)
Full Context
configure service vpls proxy-nd dup-detect
configure service vpls proxy-arp dup-detect
Description
This command enables a mechanism that detects duplicate IPs and ARP/ND spoofing attacks. Attempts (relevant to dynamic and EVPN entry types) to add the same IP (different MAC) are monitored for window <minutes>. When <count> is reached within that window, the proxy-ARP/ND entry for the suspected IP is marked as duplicate. An alarm is also triggered. This condition is cleared when hold-down time expires (max does not expire) or a clear command is issued.
If the anti-spoof-mac is configured, the proxy-ARP/ND offending entry's MAC is replaced with this <mac-address> and advertised in an unsolicited GARP/NA for local SAP/SDP-bindings, and in EVPN to remote PEs. This mechanism assumes that the same anti-spoof-mac is configured in all the PEs for the same service and that traffic with destination anti-spoof-mac received on SAPs/SDP-bindings will be dropped. An ingress mac-filter may be configured to drop traffic to the anti-spoof-mac.
The anti-spoof-mac can also be combined with the static-black-hole option. To use a black-hole MAC entry for the anti-spoof-mac function in a proxy-ARP/ND service, the following must be configured:
-
static-black-hole option for the anti-spoof-mac
-
a static black-hole MAC using the same MAC address used for the anti-spoof-mac: static-mac mac <mac-address> create black-hole command.
When both anti-spoof-mac and static-black-hole commands are configured, the MAC is advertised in EVPN as Static. Locally, the MAC will be shown in the FDB as CStatic and associated with a black-hole.
The combination of the anti-spoof-mac and the static-black-hole options ensures that any frame arriving in the system with MAC DA=anti-spoof-mac will be discarded, regardless of the ingress endpoint type (SAP/SDP-binding or EVPN) and without the need for a filter.
If the user wants to redirect the traffic with MAC DA=anti-spoof-mac instead of discarding it, redirect filters should be configured on SAPs/SDP-bindings instead of the static-black-hole option.
If the static-black-hole option is not configured for the anti-spoof-mac, the behavior is as follows:
-
The anti-spoof-mac is not programmed in the FDB.
-
Any attempt to add a Static MAC (or any other MAC) with the anti-spoof-mac value will be rejected by the system.
-
A mac-filter is needed to discard traffic with MAC DA=anti-spoof-mac.
Any changes to the configuration of anti-spoof-mac require proxy-arp or proxy-nd to first be shut down. Refer to "ARP/ND Snooping and Proxy Support” in the 7705 SAR Gen 2 Layer 2 Services and EVPN Guide for more information.
Default
dup-detect window 3 num-moves 5 hold-down 9
Parameters
- window minutes
-
Specifies the window size in minutes.
- count
-
Specifies the number of moves required so that an entry is declared duplicate.
- hold-down minutes
-
Specifies the hold-down time for a duplicate entry.
- hold-down max
-
Specifies permanent hold-down time for a duplicate entry.
- mac-address
-
Specifies the optional anti-spoof-mac to use.
Platforms
7705 SAR Gen 2
duplex
duplex
Syntax
duplex {full | half}
Context
[Tree] (config>port>ethernet duplex)
Full Context
configure port ethernet duplex
Description
This command configures the duplex of a Fast Ethernet port when autonegotiation is disabled.
This configuration command allows for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate this parameter is ignored.
Default
duplex full
Parameters
- full
-
Sets the link to full duplex mode.
- half
-
Sets the link to half duplex mode.
Platforms
7705 SAR Gen 2
duplex
Syntax
duplex {full | half}
Context
[Tree] (bof duplex)
Full Context
bof duplex
Description
This command configures the duplex mode of the CPM management Ethernet port when autonegotiation is disabled in the running configuration and the Boot Option File (BOF). If the port is configured to autonegotiate this parameter will be ignored.
Parameters
- full
-
Sets the link to full duplex mode.
- half
-
Sets the link to half duplex mode.
Platforms
7705 SAR Gen 2
dwdm
dwdm
Syntax
dwdm
Context
[Tree] (config>port dwdm)
Full Context
configure port dwdm
Description
This command configures the Dense Wavelength Division Multiplexing (DWDM) parameters.
Platforms
7705 SAR Gen 2
dynamic
dynamic
Syntax
dynamic ip-address [create]
no dynamic ip-address
Context
[Tree] (config>service>vpls>proxy-nd dynamic)
[Tree] (config>service>vpls>proxy-arp dynamic)
Full Context
configure service vpls proxy-nd dynamic
configure service vpls proxy-arp dynamic
Description
This command creates a dynamic IP that can be associated to a MAC list. The configured dynamic IP is only converted to a dynamic entry when the resolve process for the IP has passed successfully.
A summary of the IP resolution process is as follows:
-
A resolve message is sent for the configured IP as soon as the dynamic IP is configured. The message is sent with a configurable frequency of 1 to 60 minutes (using the resolve command); the default value is 5 minutes. The actual resolve interval is a "tittered” value of the configured interval.
-
The resolve message is an ARP-request or NS message flooded to all the non-EVPN endpoints in the service, irrespective of the status of the unknown-arp-request-flood-evpn or unknown-ns-flood-evpn commands. The router sends resolve messages at the configured frequency until a dynamic entry for the IP is created in the proxy-ARP or proxy-ND table. The IP entry is created only if all of the following conditions are true.
-
An ARP, GARP, or NA message is received for the configured IP.
-
The associated MAC exists in the configured MAC list for the IP.
If the MAC list is empty or not configured, the router does not create an entry for the IP.
-
-
After a dynamic entry is created in the proxy-ARP or proxy-ND table, the IP->MAC entry is advertised in the EVPN.
The no form of the command deletes the dynamic IP and the associated proxy-ARP or proxy-ND entry, if it exists.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address.
Platforms
7705 SAR Gen 2
dynamic-arp-populate
dynamic-arp-populate
Syntax
[no] dynamic-arp-populate
Context
[Tree] (config>service>vpls>proxy-arp dynamic-arp-populate)
Full Context
configure service vpls proxy-arp dynamic-arp-populate
Description
This command enables the addition of dynamic entries to the proxy-ARP table (disabled by default). When executed, the system will populate proxy-ARP entries from snooped GARP/ARP messages on SAPs/SDP-bindings. These entries will be shown as dynamic.
When disabled, dynamic-arp entries will be flushed from the proxy-ARP table. Enabling dynamic-arp-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
Default
no dynamic-arp-populate
Platforms
7705 SAR Gen 2
dynamic-bgp
dynamic-bgp
Syntax
[no] dynamic-bgp
Context
[Tree] (config>router>static-route-entry>black-hole dynamic-bgp)
Full Context
configure router static-route-entry black-hole dynamic-bgp
Description
This optional command controls the behavior of the associated static route so that if a matching BGP route to the same exact prefix is present in BGP, the static route's nexthop is set to the BGP’s nexthop value. If there is no matching active BGP route, the static route's nexthop is set to be a black-hole nexthop.
Default
no dynamic-bgp
Platforms
7705 SAR Gen 2
dynamic-bypass
dynamic-bypass
Syntax
dynamic-bypass [enable | disable]
no dynamic-bypass
Context
[Tree] (config>router>mpls dynamic-bypass)
Full Context
configure router mpls dynamic-bypass
Description
This command disables the creation of dynamic bypass LSPs in FRR. One or more manual bypass LSPs must be configured to protect the primary LSP path at the PLR nodes.
Default
dynamic-bypass enable
Platforms
7705 SAR Gen 2
dynamic-cost
dynamic-cost
Syntax
[no] dynamic-cost
Context
[Tree] (config>lag dynamic-cost)
Full Context
configure lag dynamic-cost
Description
This command enables OSPF or ISIS costing of a Link Aggregation Group (LAG) based on the available aggregated, operational bandwidth.
The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.
If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.
For example: Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.
If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.
If dynamic-cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
The no form of this command removes dynamic costing from the LAG.
Default
no dynamic-cost
Platforms
7705 SAR Gen 2
dynamic-egress-label-limit
dynamic-egress-label-limit
Syntax
[no] dynamic-egress-label-limit
Context
[Tree] (config>service>vpls>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>epipe>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vprn>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vprn>bgp-ipvpn>mpls dynamic-egress-label-limit)
Full Context
configure service vpls bgp-evpn mpls dynamic-egress-label-limit
configure service epipe bgp-evpn mpls dynamic-egress-label-limit
configure service vprn bgp-evpn mpls dynamic-egress-label-limit
configure service vprn bgp-ipvpn mpls dynamic-egress-label-limit
Description
This command relaxes the egress MPLS label limit check when resolving BGP next hops in the tunnel table.
For VPRN services, the OAM label is never computed and, therefore, one more egress label is allowed.
For EVPN (Epipe and VPLS) services, the system only computes the control word and ESI label if they are used. For the control word, the system reduces the egress label limit by one label if the control word is configured in the service. When configured, the ESI label is not counted for Epipes or VPLS services without an ES.
The no form of this command, for EVPN, Epipe, and VPLS services, always accounts for the ESI label and control word.
Default
no dynamic-egress-label-limit
Platforms
7705 SAR Gen 2
dynamic-enforcement-policer-pool
dynamic-enforcement-policer-pool
Syntax
[no] dynamic-enforcement-policer-pool number-of-policers
Context
[Tree] (config>card>fp>ingress>dist-cpu-protection dynamic-enforcement-policer-pool)
Full Context
configure card fp ingress dist-cpu-protection dynamic-enforcement-policer-pool
Description
This command reserves a set of policers for use as dynamic enforcement policers for the Distributed CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a SAP or Network Interface). Any change to this configured value automatically clears the high water mark, timestamp, and failed allocation counts as seen under "show card x fp y dist-cpu-protection” and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this value to below the currently used/allocated number causes all dynamic policers to be returned to the free pool (and traffic returns to the local monitors).
Default
no dynamic-enforcement-policer-pool
Parameters
- number-of-policers
-
specifies the number of policers to be reserved.
Platforms
7705 SAR Gen 2
dynamic-keying
dynamic-keying
Syntax
[no] dynamic-keying
Context
[Tree] (config>router>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel dynamic-keying)
[Tree] (config>ipsec>trans-mode-prof dynamic-keying)
Full Context
configure router interface ipsec ipsec-tunnel dynamic-keying
configure service ies interface ipsec ipsec-tunnel dynamic-keying
configure service vprn interface ipsec ipsec-tunnel dynamic-keying
configure service vprn interface sap ipsec-tunnel dynamic-keying
configure ipsec ipsec-transport-mode-profile dynamic-keying
Description
This command enables dynamic keying for the IPsec tunnel.
The no form of this command disables dynamic keying.
Platforms
7705 SAR Gen 2
dynamic-mbs
dynamic-mbs
Syntax
[no] dynamic-mbs
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue dynamic-mbs)
Full Context
configure qos queue-group-templates egress queue-group queue dynamic-mbs
Description
This command enables support for dynamically modifying the MBS size of a queue using HQoS in order to maintain the maximum latency for traffic in the queue based on the queue’s configured MBS and the ratio of its operational PIR to its administrative PIR. As the HQoS algorithm updates the operational PIR, by reducing or increasing it, the MBS of the queue is adjusted accordingly.
The configuration of dynamic MBS and the configuration of queue depth monitoring (monitor-queue-depth command) are mutually exclusive. Queue depth monitoring is an override on the queue where the queue group is applied.
The no form of this command disables dynamic MBS resizing.
Default
no dynamic-mbs
Platforms
7705 SAR Gen 2
dynamic-nd-populate
dynamic-nd-populate
Syntax
[no] dynamic-nd-populate
Context
[Tree] (config>service>vpls>proxy-nd dynamic-nd-populate)
Full Context
configure service vpls proxy-nd dynamic-nd-populate
Description
This command enables the addition of dynamic entries to the proxy-ND table. The command is disabled by default. When executed, the system will populate proxy-ND entries from snooped Neighbor Advertisement (NA) messages on SAPs/SDP-bindings, in addition to the entries coming from EVPN (if the EVPN is enabled). These entries will be shown as dynamic, as opposed to EVPN entries or static entries.
When disabled, dynamic-ND entries will be flushed from the proxy-ND table. Enabling dynamic-nd-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
Default
no dynamic-nd-populate
Platforms
7705 SAR Gen 2
dynamic-neighbor
dynamic-neighbor
Syntax
dynamic-neighbor
Context
[Tree] (config>service>vprn>bgp>group dynamic-neighbor)
Full Context
configure service vprn bgp group dynamic-neighbor
Description
Commands in this context configure dynamic BGP sessions for a peer group.
Platforms
7705 SAR Gen 2
dynamic-neighbor
Syntax
dynamic-neighbor
Context
[Tree] (config>router>bgp>group dynamic-neighbor)
Full Context
configure router bgp group dynamic-neighbor
Description
Commands in this context configure dynamic BGP sessions for a peer group.
Platforms
7705 SAR Gen 2
dynamic-neighbor-limit
dynamic-neighbor-limit
Syntax
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context
[Tree] (config>service>vprn>bgp>group dynamic-neighbor-limit)
[Tree] (config>service>vprn>bgp dynamic-neighbor-limit)
Full Context
configure service vprn bgp group dynamic-neighbor-limit
configure service vprn bgp dynamic-neighbor-limit
Description
This command configures the maximum number of dynamic BGP sessions that are accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
Default
no dynamic-neighbor-limit
Parameters
- peers
-
Specifies the maximum number of dynamic BGP sessions.
Platforms
7705 SAR Gen 2
dynamic-neighbor-limit
Syntax
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context
[Tree] (config>router>bgp dynamic-neighbor-limit)
[Tree] (config>router>bgp>group dynamic-neighbor-limit)
Full Context
configure router bgp dynamic-neighbor-limit
configure router bgp group dynamic-neighbor-limit
Description
This command configures the maximum number of dynamic BGP sessions that will be accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
Default
no dynamic-neighbor-limit
Parameters
- peers
-
Specifies the maximum number of dynamic BGP sessions.
Platforms
7705 SAR Gen 2
dynamic-parameters
dynamic-parameters
Syntax
dynamic-parameters
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol dynamic-parameters)
Full Context
configure system security dist-cpu-protection policy protocol dynamic-parameters
Description
The dynamic-parameters are used to instantiate a dynamic enforcement policer for the protocol when the associated local-monitoring-policer is considered as exceeding its rate parameters (at the end of a minimum monitoring time of 60 seconds).
Platforms
7705 SAR Gen 2
dynamic-tunnel-redundant-next-hop
dynamic-tunnel-redundant-next-hop
Syntax
dynamic-tunnel-redundant-next-hop ip-address
no dynamic-tunnel-redundant-next-hop
Context
[Tree] (config>service>vprn>if dynamic-tunnel-redundant-next-hop)
[Tree] (config>service>ies>if dynamic-tunnel-redundant-next-hop)
Full Context
configure service vprn interface dynamic-tunnel-redundant-next-hop
configure service ies interface dynamic-tunnel-redundant-next-hop
Description
This command specifies redundant next-hop address on a public or private IPsec interface (with public or private tunnel-sap) for dynamic IPsec tunnel. The specified next-hop address is used by a standby node to shunt traffic to master in case it receives the address.
The next-hop address is resolved in the routing table of a corresponding service.
Default
no dynamic-tunnel-redundant-next-hop
Parameters
- ip-address
-
Specifies the dynamic ISA tunnel redundant next-hop address.
Platforms
7705 SAR Gen 2
dynmldp
dynmldp
Syntax
dynmldp [detail]
no dynmldp
Context
[Tree] (debug>router>pim dynmldp)
Full Context
debug router pim dynmldp
Description
This command enables debugging for dynamic MLDP.
The no form of this command disables dynamic MLDP debugging.
Parameters
- detail
-
Debugs detailed dynamic MLDP information.
Platforms
7705 SAR Gen 2