o Commands

Context

[Tree] (oam)

Full Context

oam

Description

Commands in this context use the OAM test suite.

Platforms

7705 SAR Gen 2

Context

[Tree] (debug oam)

Full Context

debug oam

Description

This command enables OAM debugging.

Platforms

7705 SAR Gen 2

Context

[Tree] (oam oam-pm)

Full Context

oam oam-pm

Description

This command allows the operator to start and stop on-demand OAM-PM sessions.

Parameters

session-name

Identifies the session name, up to 32 characters, that the test is associated with.

dm

Specifies the MPLS delay measurement test that is affected by the command.

dmm

Specifies the DMM test that is affected by the command.

lmm

Specifies the LMM test that is affected by the command.

slm

Specifies the SLM test that is affected by the command.

twamp-light

Specifies the TWAMP-light test that is affected by the command.

start

Manually starts the test.

stop

Manually stops the test.

Platforms

7705 SAR Gen 2

Context

[Tree] (config oam-pm)

Full Context

configure oam-pm

Description

This is the top level context that contains the configuration parameters that defines storage parameters (including binning structures), availability/resiliency and the individual proactive, and on-demand tests used to gather the performance/statistical information.

Platforms

7705 SAR Gen 2

Context

[Tree] (debug>certificate ocsp)

Full Context

debug certificate ocsp

Description

This command enables debug output of the OCSP protocol for a CA profile.

The no form of this command disables the debug output.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>security>pki>ca-profile ocsp)

Full Context

configure system security pki ca-profile ocsp

Description

Commands in this context configure OCSP parameters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>dhcp>server>pool offer-time)

[Tree] (config>router>dhcp>server>pool offer-time)

Full Context

configure service vprn dhcp local-dhcp-server pool offer-time

configure router dhcp local-dhcp-server pool offer-time

Description

This command configures the time interval during which a DHCP offer is valid.

The no form of this command reverts to the default.

Default

offer-time min 1

Parameters

time

Specifies the offer time.

Values

min minutes	0 to 10
sec seconds	0 to 59

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>time>dst-zone offset)

Full Context

configure system time dst-zone offset

Description

This command specifies the number of minutes that are added to the time when summer time takes effect. The same number of minutes is subtracted from the time when the summer time ends.

Default

offset 60

Parameters

offset

Specifies the number of minutes added to the time at the beginning of summer time and subtracted at the end of summer time, expressed as an integer.

Values

0 to 60

Default

60

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>rsvp>te-threshold-update on-cac-failure)

Full Context

configure router rsvp te-threshold-update on-cac-failure

Description

This command is used to enable a CAC failure-triggered IGP update.

The no form of this command should reset on-cac-failure to the default value and disable the CAC failure-triggered IGP update.

Default

no on-cac-failure

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>router-advert>if>prefix on-link)

Full Context

configure service vprn router-advertisement interface prefix on-link

Description

This command specifies whether the prefix can be used for onlink determination.

Default

on-link

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>router-advert>if>prefix on-link)

Full Context

configure router router-advertisement interface prefix on-link

Description

This command specifies whether the prefix can be used for on link determination.

Default

on link

Platforms

7705 SAR Gen 2

Context

[Tree] (debug>router>bgp open)

Full Context

debug router bgp open

Description

This command decodes and logs all sent and received open messages in the debug log.

The no form of this command disables debugging.

Parameters

neighbor ip-address

Debugs only events affecting the specified BGP neighbor.

Values

ipv4-address:

• a.b.c.d (host bits must be 0)

ipv6-address:

• x:x:x:x:x:x:x:x [-interface] (eight 16-bit pieces)

• x:x:x:x:x:x:d.d.d.d [-interface]

• x: [0 to FFFF]H

• d: [0 to 255]D

• interface: up to 32 characters for link local addresses

group name

Debugs only events affecting the specified peer group name, up to 64 characters, and associated neighbors.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>epipe oper-group)

Full Context

configure service epipe oper-group

Description

This command associates an operational group to the status of the Epipe. When this oper-group is used in Epipes with static VXLAN or BGP-EVPN, the oper-group behaves as follows:

• The Epipe (and the oper-group) goes down if a SAP or spoke SDP goes operationally down because of an administrative shutdown, service shutdown, or non-DF status as a result of EVPN multi-homing single-active election.

• The Epipe (and oper-group) goes down if the Epipe's EVPN destination is removed (because of an EVPN AD per-EVI route withdrawal, for example).

• The Epipe (and oper-group) does not go down if a static VXLAN destination exists and the egress VTEP is not in the global route table.

The operational group must be monitored in a different service and not in the service where it is defined.

The no version of this command removes the oper-group association.

Parameters

name

Specifies the name of the oper-group, up to 32 characters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vpls>bgp-evpn>mpls oper-group)

[Tree] (config>service>epipe>bgp-evpn>mpls oper-group)

Full Context

configure service vpls bgp-evpn mpls oper-group

configure service epipe bgp-evpn mpls oper-group

Description

This command adds the BGP EVPN MPLS, SRv6, or VXLAN instance or Ethernet Segment (ES) as a member of the operational group.

When configured on an ES, the state of the operational group depends on the state of the SAPs contained in the ES. The operational group transitions to up if at least one SAP in the ES is up. The operational group goes down when all the associated SAPs are operationally down. The ES operational group should be monitored on the LAG associated with the ES, along with single-active multi-homing, so that the NDF state can be signaled to the CE by LAG standby signaling.

When configured on a BGP EVPN instance, the operational group is up when it is either empty (meaning that the operational group has no members) or at least an EVPN destination is created under the EVPN instance added as member. When configured, no other SAP, SDP binding, or BGP EVPN instance can be added to the same operational group within the same or a different service.

The operational group is down when the following apply:

• on a BGP EVPN instance

• the service is disabled

• the BGP EVPN MPLS, VXLAN or SRv6 instance are disabled

• all the EVPN destinations in the instance are removed

Default

no oper-group

Parameters

name

Specifies the name of the operational group, up to 32 characters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>epipe>sap oper-group)

Full Context

configure service epipe sap oper-group

Description

This command configures the operational group identifier.

The no form of this command removes the group name from the configuration.

Parameters

group-name

Specifies the Operational-Group identifier up to 32 characters in length.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vpls>bgp>pw-template-binding oper-group)

[Tree] (config>service>vpls>sap oper-group)

[Tree] (config>service>vpls>spoke-sdp oper-group)

Full Context

configure service vpls bgp pw-template-binding oper-group

configure service vpls sap oper-group

configure service vpls spoke-sdp oper-group

Description

This command associates the context to which it is configured to the operational group specified in the group-name. The oper-group oper-name must be already configured under config>service context before its name is referenced in this command.

The no form of this command removes the association.

Default

no oper-group

Parameters

group-name

Specifies a character string of maximum 32 ASCII characters identifying the group instance.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>ies>if>vrrp oper-group)

Full Context

configure service ies interface vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up and is down for all other VRRP states.

The no form of this command removes the association.

Default

no oper-group

Parameters

group-name

Specifies the operational group identifier up to 32 characters in length.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>if>vrrp oper-group)

[Tree] (config>service>vprn>if>ipv6>vrrp oper-group)

Full Context

configure service vprn interface vrrp oper-group

configure service vprn interface ipv6 vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up and is down for all other VRRP states.

The no form of this command removes the association.

Default

no oper-group — No operational group is configured.

Parameters

group-name

Specifies the operational group identifier, up to 32 characters in length.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>if>ipv6>vrrp oper-group)

[Tree] (config>router>if>vrrp oper-group)

Full Context

configure router interface ipv6 vrrp oper-group

configure router interface vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up; the operational group is down for all other VRRP states.

The no form of the command removes the association.

Default

no oper-group — No operational group is configured.

Parameters

group-name

Specifies the operational group identifier, up to 32 characters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service oper-group)

Full Context

configure service oper-group

Description

This command creates a system-wide group (operational group) name which can be used to associate a number of service objects (for example, SAPs or pseudowires). The status of the group is derived from the status of its members. The status of the group can then be used to influence the status of non-member objects. For example, when a group status is marked as down, the object(s) that monitor the group change their status accordingly.

The no form of the command removes the group. All the object associations need to be removed before the no form of the command can be executed.

Default

no oper-group

Parameters

group-name

Specifies the operational group identifier up to 32 characters in length.

create

This keyword is required when first creating the configuration context. Once the context is created, it is possible to navigate into the context without the create keyword.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>isis>link-group>level oper-members)

Full Context

configure service vprn isis link-group level oper-members

Description

This command sets the threshold for the minimum number of operational links for the associated link-group. If the number of operational links drops below this threshold, the configured offsets are applied. For example, oper-members=3. The metric of the member interfaces is increased when the number of interfaces is lower than 3.

The no form of this command reverts the oper-members limit to 1.

Default

no oper-members

Parameters

oper-members

Specifies the number of operational members.

Values

0 to 8

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis>link-group>level oper-members)

Full Context

configure router isis link-group level oper-members

Description

This command sets the threshold for the minimum number of operational links for the associated link-group. If the number of operational links drops below this threshold, the configured offsets are applied. For example, oper-members=3. The metric of the member interfaces is increased when the number of interfaces is lower than 3.

The no form of this command reverts the oper-members limit to 1.

Default

oper-members 1

Parameters

value

Specifies the threshold for operational members.

Values

1 to 8

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>management-interface operations)

Full Context

configure system management-interface operations

Description

Commands in this context configure parameters associated with operational commands in model-driven interfaces.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>port>transceiver optical-line-system)

Full Context

configure port transceiver optical-line-system

Description

This command enables the QSFP-LS pluggable optical line system, used in conjunction with 400G ZR/ZR+ coherent pluggable modules.

The no form of this command reverts to the default.

Default

no optical-line-system

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>bgp optimal-route-reflection)

Full Context

configure router bgp optimal-route-reflection

Description

This command creates the optimal route reflection context.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>filter>dhcp-filter>entry option)

Full Context

configure filter dhcp-filter entry option

Description

This command configures match criteria for the DHCP filter policy entry.

The no form of this command reverts to the default.

Parameters

dhcp-option-number

Specifies the DHCP option number.

Values

0 to 255

present

Specifies that the related DHCP option must be present.

absent

Specifies that the related DHCP option must be absent.

hex-string

Specifies that the option must partially match a specified hex string.

Values

0x0 to 0xFFFFFFFF (up to 254 hex nibbles)

ascii-string

Specifies that the option must partially match a specified ASCII string, up to 127 characters.

exact

Specifies that this option requires an exact match of a hex or ASCII string.

invert-match

Requires the option not to partially match.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>filter>dhcp6-filter>entry option)

Full Context

configure filter dhcp6-filter entry option

Description

This command configures match criteria for the DHCP6 filter policy entry.

The no form of this command reverts to the default.

Parameters

dhcp-option-number

Specifies the DHCP6 option number.

Values

0 to 255

present

Specifies that the related DHCP6 option must be present.

absent

Specifies that the related DHCP6 option must be absent.

match hex hex-string

Specifies that the option must (partially) match a specified hex string.

Values

0x0 to 0xFFFFFFFF (up to 254 hex nibbles)

match string ascii-string

Specifies that the option must partially match a specified ASCII string, up to 127 characters.

exact

Specifies that this option requires an exact match of a hex or ASCII string.

invert-match

Requires the option not to partially match.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>if>ipv6>dhcp6-relay option)

[Tree] (config>service>ies>if>ipv6>dhcp6-relay option)

Full Context

configure service vprn interface ipv6 dhcp6-relay option

configure service ies interface ipv6 dhcp6-relay option

Description

Commands in this context configure DHCPv6 relay information options.

The no form of this command disables DHCPv6 relay information options.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>ies>if>dhcp option)

[Tree] (config>service>vpls>sap>dhcp option)

[Tree] (config>service>vprn>if>dhcp option)

[Tree] (config>router>if>dhcp option)

Full Context

configure service ies interface dhcp option

configure service vpls sap dhcp option

configure service vprn interface dhcp option

configure router interface dhcp option

Description

This command enables DHCP Option 82 (Relay Agent Information Option) parameters processing and enters the context for configuring Option 82 sub-options.

The no form of this command reverts to the default.

Default

no option

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>security>keychain>direction>bi>entry option)

Full Context

configure system security keychain direction bi entry option

Description

This command configures allows options to be associated with the authentication key.

Parameters

basic

Specifies that IS-IS should use RFC 5304 encoding of the authentication information. It is only applicable if used with the IS-IS protocol. All other protocols should ignore this configuration command.

isis-enhanced

Specifies that IS-IS should use RFC 5310 encoding of the authentication information. It is only applicable if used with the IS-IS protocol. All other protocols should ignore this configuration command.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>filter>ip-filter>entry>match option-present)

Full Context

configure filter ip-filter entry match option-present

Description

This command configures matching packets that contain any IP options in the IP header as an IP filter match criterion.

The no form of the command removes the checking of IP options in the IP header as a match criterion.

Default

no option-present

Parameters

true

Specifies matching on all IP packets that contain any IP options in the IP header. A match occurs for all packets that have any IP option present. An option field of zero is considered as no option present.

false

Specifies matching on IP packets that do not have any IP option present in the IP header. (an option field of zero). An option field of zero is considered as no option present.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident option60)

Full Context

configure subscriber-mgmt local-user-db ipoe host host-identification option60

Description

This command specifies the Vendor-Identifying Vendor Option to match. Option 60 is encoded as Type-Length-Value (TLV). The hex-string portion of Option 60 in the received DHCP request is used for matching. Only the first 32 bytes can be defined here. If Option 60 from the message is longer, those bytes are ignored.

The no form of this command removes option60 from the configuration.

Parameters

hex-string

Specifies the hexadecimal format for this option.

Values

0x0 to 0xFFFFFFFF(maximum 64 hex nibbles)

ascii-string

Specifies the string format for this option, up to 32 characters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>dhcp>server>pool options)

[Tree] (config>service>vprn>dhcp6>server>pool options)

[Tree] (config>router>dhcp6>server>pool options)

[Tree] (config>router>dhcp>server>pool options)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host options)

[Tree] (config>router>dhcp6>server>pool>prefix options)

[Tree] (config>router>dhcp>server>pool>subnet options)

[Tree] (config>service>vprn>dhcp6>server>pool>prefix options)

Full Context

configure service vprn dhcp local-dhcp-server pool options

configure service vprn dhcp6 local-dhcp-server pool options

configure router dhcp6 local-dhcp-server pool options

configure router dhcp local-dhcp-server pool options

configure subscriber-mgmt local-user-db ipoe host options

configure router dhcp6 local-dhcp-server pool prefix options

configure router dhcp local-dhcp-server pool subnet options

configure service vprn dhcp6 local-dhcp-server pool prefix options

Description

Commands in this context configure pool options. The options defined here can be overruled by defining the same option in the local user database.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>persistence options)

Full Context

configure system persistence options

Description

This command enables the CLI context to configure persistence options parameters.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vpls>sap>dhcp6>ldra options)

Full Context

configure service vpls sap dhcp6 ldra options

Description

Commands in this context configure forwarding path options.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host options6)

Full Context

configure subscriber-mgmt local-user-db ipoe host options6

Description

Commands in this context configure IPv6 DNS server information in the local user database.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>policy-options>policy-statement>entry>from origin)

Full Context

configure router policy-options policy-statement entry from origin

Description

This command configures the match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes.

• Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with the aaa, dynamic, or static options, depending on the address assignment method. For CUPS hosts, the pfcp option is used for the origin attribute. Host routes can also be distinguished using the sub-mgmt option for the protocol command.

• Dynamically provisioned prefixes or loopback addresses carry the origin attribute with the aaa or pfcp options, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

• Statically configured prefixes under the subscriber interface do not have an origin attribute.These routes can be distinguished using the direct option for the protocol command.

• Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use the pfcp option for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

These values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Default

no origin

Parameters

igp

Specifies path-matching information that originates within the local AS.

egp

Specifies path-matching information that originates in another AS.

incomplete

Configures path-matching information learned by another method.

any

Specifies to ignore this criteria.

aaa

Specifies to use the subscriber-host address that originates from AAA.

Values

IPv4 — subscriber-management /32 host routes that originate from the RADIUS framed-ip-address VSA other than 255.255.255.254. The 255.255.255.254 returned by the RADIUS indicates that the BNG (NAS) should assign an IP address from its own pool.

IPv6 — subscriber-management routes that originate through framed-ipv6-prefix (SLAAC), delegated-ipv6-prefix (IA_PD) or alc-ipv6-address (IA_NA) RADIUS attributes. It is also applicable to VSA Alc-IPv6-Sub-If-Prefix, where the subscriber interface prefix can originate from RADIUS. This is valid for IPoE and PPPoE type hosts.

dynamic

Specifies to use the subscriber host address that originates from DHCP, DHCPv6, or the local address server.

Values

IPv4 — subscriber-management /32 host routes that originate from the DHCP server (local or remote) or RADIUS framed-ip-address=255.255.255.254 (RFC 2865).

IPv6 — subscriber-management routes that are assigned via local DHCPv6 server pools whose name is obtained through the Alc-Delegated-IPv6-Pool (PD pool) and Framed-IPv6-Pool (NA pool) RADIUS attributes, or the local address server whose name is obtained through the Alc-SLAAC-IPv6-Pool (SLAAC pool) RADIUS attribute. This is valid for IPoE and PPPoE type hosts.

For IPoEv6 only, the pool name can also be obtained from ipv6-delegated-prefix-pool (PD pool) and ipv6-wan-address-pool (NA pool) from the LUDB.

static

Specifies to use the subscriber-host address that originates from the local user database.

Values

IPv4 — subscriber-management /32 host routes that originate from the LUDB and also covers the RADIUS fallback category (RADIUS falls back to system defaults or to the LUDB).

IPv6 — subscriber-management routes that originate from the LUDB from ipv6-address (IA_NA) or ipv6-prefix (IA_PD), or ipv6-slaac-prefix (SLAAC).

bonding

Specifies to use bonding.

pfcp

Specifies to use routes learned using the PFCP protocol.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>policy-options>policy-statement>default-action origin)

[Tree] (config>router>policy-options>policy-statement>entry>action origin)

Full Context

configure router policy-options policy-statement default-action origin

configure router policy-options policy-statement entry action origin

Description

This command sets the BGP origin assigned to routes exported into BGP.

If the routes are exported into protocols other than BGP, this option is ignored.

The no form of this command disables setting the BGP origin for the route policy entry.

Default

no origin

Parameters

igp

Sets the path information as originating within the local AS.

egp

Sets the path information as originating in another AS.

incomplete

Sets the path information as learned by some other means.

param-name

The origin parameter variable name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes. Policy parameters must start and end with at-signs (@); for example, "@variable@”.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>bgp>best-path-selection origin-invalid-unusable)

Full Context

configure service vprn bgp best-path-selection origin-invalid-unusable

Description

When this command is configured, all VPRN BGP routes that have an origin validation state of "Invalid” are considered unusable by the best path selection algorithm, meaning they are not used for forwarding, not advertised to BGP peers, and not eligible for export as a VPN-IP route.

With the default value, VPRN BGP routes with an origin validation state of "Invalid” are usable if they are selected.

Default

no origin-invalid-unusable

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>bgp>best-path-selection origin-invalid-unusable)

Full Context

configure router bgp best-path-selection origin-invalid-unusable

Description

When origin-invalid-unusable is configured, all routes that have an RPKI origin validation state of 'Invalid’ are considered unusable by the best path selection algorithm, meaning they are not used for forwarding and not advertised to BGP peers.

With the default of no origin-invalid-unusable, routes with an RPKI origin validation state of 'Invalid’ are compared to other 'usable’ routes for the same prefix according to the BGP decision process.

Default

no origin-invalid-unusable

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router origin-validation)

Full Context

configure router origin-validation

Description

Commands in this context display origin validation information.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>policy-options>policy-statement>entry>from origin-validation-state)

Full Context

configure router policy-options policy-statement entry from origin-validation-state

Description

This command is used to match BGP routes on the basis of origin validation state:

• Valid (0)

• Not-Found (1)

• Invalid (2)

Default

no origin-validation-state

Parameters

valid

Marks the route as having an origin validation state of valid.

notFound

Marks the route as having an origin validation state of Not Found.

invalid

Marks the route as having an origin validation state of invalid.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>policy-options>policy-statement>default-action origin-validation-state)

[Tree] (config>router>policy-options>policy-statement>entry>action origin-validation-state)

Full Context

configure router policy-options policy-statement default-action origin-validation-state

configure router policy-options policy-statement entry action origin-validation-state

Description

This command is used to mark BGP IPv4 and IPv6 routes matching the default-action or a specific entry of a route policy with one of the 3 following origin validation states:

• Valid (0)

• Not-Found (1)

• Invalid (2)

Default

no origin-validation-state

Parameters

state

Specifies the default operational origin validation state for this policy statement.

Values

valid — Marks the route as having an origin validation state of valid.

notFound — Marks the route as having an origin validation state of Not Found.

invalid — Marks the route as having an origin validation state of invalid.

param-name

Specifies the origin parameter variable name. Allowed values are any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes. Policy parameters must start and end with at-signs (@); for example, "@variable@”.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf>area>nssa originate-default-route)

[Tree] (config>service>vprn>ospf3>area>nssa originate-default-route)

Full Context

configure service vprn ospf area nssa originate-default-route

configure service vprn ospf3 area nssa originate-default-route

Description

This command specifies whether when configuring an NSSA with no summaries, the Area Border Router (ABR) injects a type-7 LSA default route into the NSSA area. The default behavior is to inject a type-3 LSA default route, but some older implementations expect a type-7 LSA default route.

When configuring an NSSA with no summaries, the ABR will inject a type 3 LSA default route into the NSSA area. Some older implementations expect a type 7 LSA default route.

The no form of this command disables origination of a default route.

Default

no originate-default-route — A default route is not originated.

Parameters

type-nssa

Specifies that a type 7 LSA should be used for the default route.

Configure this parameter to inject a type 7 LSA default route into an NSSA configured with no summaries, instead of a type 3 LSA.

To revert to a type 3 LSA, execute the originate-default-route command without the type-nssa parameter.

Default

type 3 LSA default route

adjacency-check

Specifies whether adjacency checks are performed before originating a default route. If this parameter is configured, then no area 0 adjacency is required for the ABR to advertise the default route.

Default

Adjacency checks are performed, and an area 0 adjacency is required for the ABR to advertise the default route

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf>area>nssa originate-default-route)

[Tree] (config>router>ospf3>area>nssa originate-default-route)

Full Context

configure router ospf area nssa originate-default-route

configure router ospf3 area nssa originate-default-route

Description

This command enables the generation of a default route and its LSA type (3 or 7) into a Not So Stubby Area (NSSA) by an NSSA Area Border Router (ABR).

When configuring an NSSA with no summaries, the ABR will inject a type 3 LSA default route into the NSSA area. Some older implementations expect a type 7 LSA default route.

The no form of this command disables origination of a default route.

Default

no originate-default-route

Parameters

type-7

Specifies a type 7 LSA should be used for the default route in the config>router> ospf>area>nssa context.

Configure this parameter to inject a type-7 LSA default route instead the type 3 LSA into the NSSA configured with no summaries.

To revert to a type 3 LSA, enter originate-default-route without the type-7 parameter.

Default

Type 3 LSA default route.

type-nssa

Specifies an NSSA-LSA type should be used for the default route in the config>router> ospf3>area>nssa context.

no-adjacency-check

Specifies whether adjacency checks are performed before originating a default route. If this parameter is configured, then no area 0 adjacency is required for the ABR to advertise the default route.

Default

Adjacency checks are performed, and an area 0 adjacency is required for the ABR to advertise the default route.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription originated-qos-marking)

Full Context

configure system telemetry persistent-subscriptions subscription originated-qos-marking

Description

This command configures the QoS marking used for packets carrying telemetry notifications.

The no form of this command removes the QoS marking.

Parameters

dscp-name

Specifies the QoS marking name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names in the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>grpc-tunnel>destination-group>destination originated-qos-marking)

Full Context

configure system grpc-tunnel destination-group destination originated-qos-marking

Description

This command configures the QoS marking used for packets carrying gRPC tunnel packets.

The no form of this command removes the QoS marking.

Default

no originated-qos-marking

Parameters

dscp-name

Specifies the QoS marking name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names in the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7705 SAR Gen 2

Context

[Tree] (config>qos>port-scheduler-policy orphan-override)

Full Context

configure qos port-scheduler-policy orphan-override

Description

This command overrides the default orphan behavior for port schedulers created using the port scheduler policy. The default orphan behavior is to give all orphan queues and schedulers bandwidth after all other properly parented queues and schedulers. Orphans by default do not receive any within-CIR bandwidth and receive above-CIR bandwidth after priority levels 8 through 1 have been allocated. The orphan-override command accepts the same parameters as the port-parent command in the SAP egress and network queue policy contexts. The defined parameters are used as a default port-parent association for any queue or scheduler on the port that the port scheduler policy is applied.

Orphan queues and schedulers are identified as:

• Any queue or scheduler that does not have a port-parent or parent command applied

• Any queue that has a parent command applied, but the specified scheduler name does not exist on the queue’s SAP, MSS, or SLA Profile instance.

A queue or scheduler may be properly parented to an upper level scheduler, but that scheduler may be orphaned. In this case, the queue or scheduler receives bandwidth from its parent scheduler based on the parent schedulers ability to receive bandwidth as an orphan.

Within-CIR Priority Level Parameters

The within-CIR parameters define which port priority level the orphan queues and schedulers should be associated with when receiving bandwidth for the queue or schedulers within-CIR offered load. The within-CIR offered load is the amount of bandwidth the queue or schedulers could use that is equal to or less than its defined or summed CIR value. The summed value is only valid on schedulers and is the sum of the within-CIR offered loads of the children attached to the scheduler. The parameters that control within-CIR bandwidth allocation for orphans are the orphan-override commands cir-level and cir-weight keywords. The cir-level keyword defines the port priority level that the scheduler or queue uses to receive bandwidth for its within-CIR offered load. The cir-weight is used when multiple queues or schedulers exist at the same port priority level for within-CIR bandwidth. The weight value defines the relative ratio that is used to distribute bandwidth at the priority level when more within-CIR offered load exists than the port priority level has bandwidth.

A cir-weight equal to zero (the default value) has special meaning and informs the system that the orphan queues and schedulers do not receive bandwidth from the within-CIR distribution. Instead, all bandwidth for the orphan queues and schedulers must be allocated from the port scheduler’s above-CIR pass.

Above-CIR Priority Level Parameters

The above-CIR parameters define which port priority level the orphan queues and schedulers should be associated with when receiving bandwidth for the queue or schedulers above-CIR offered load. The above-CIR offered load is the amount of bandwidth the queue or schedulers could use that is equal to or less than its defined PIR value (based on the queue or schedulers rate command) less any bandwidth that was given to the queue or scheduler during the above-CIR scheduler pass. The parameters that control above-CIR bandwidth allocation for orphans are the orphan-override commands level and weight keywords. The level keyword defines the port priority level that the scheduler or queue uses to receive bandwidth for its above-CIR offered load. The weight is used when multiple queues or schedulers exist at the same port priority level for above-CIR bandwidth. The weight value defines the relative ratio that is used to distribute bandwidth at the priority level when more above-CIR offered load exists than the port priority level has bandwidth.

The no form of this command removes the orphan override port parent association for the orphan queues and schedulers on port schedulers created with the port scheduler policy. Any orphan queues and schedulers on a port associated with the port scheduler policy will revert to default orphan behavior.

Parameters

level priority-level

Defines the port priority the orphan queues and schedulers will use to receive bandwidth for their above-CIR offered-load.

Values

1 to 8 (8 is the highest priority)

Default

1

weight weight

Defines the weight the orphan queues and schedulers will use in the above-CIR port priority level (defined by the level parameter).

Values

1 to 100

Default

1

cir-level cir-level

Defines the port priority the orphan queues and schedulers will use to receive bandwidth for their within-CIR offered-load. If the cir-weight parameter is set to a value of 0 (the default value), the orphan queues and schedulers do not receive bandwidth during the port scheduler’s within-CIR pass and the cir-level parameter is ignored. If the cir-weight parameter is 1 or greater, the cir-level parameter comes into play.

Values

1 to 8 (8 is the highest level)

cir-weight cir-weight

Defines the weight the orphan queues and schedulers will use in the within-CIR port priority level (defined by the cir-level parameter). When the cir-weight parameter is set to a value of 0 (the default value), the orphan queues and schedulers do not receive bandwidth during the port scheduler’s within-CIR pass and the cir-level parameter is ignored. If the cir-weight parameter is 1 or greater, the cir-level parameter comes into play.

Values

1 to 100 (100 is the highest weight)

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn ospf)

Full Context

configure service vprn ospf

Description

This command enables access to the context to enable an OSPF protocol instance.

OSPF instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command deletes the OSPF protocol instance removing all associated configuration parameters.

Default

no ospf

Parameters

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. The router-id must be given a dot decimal notation format.

Values

a.b.c.d

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router ospf)

Full Context

configure router ospf

Description

This command creates an OSPF routing instance and then enters the associated context to configure the associated protocol parameters.

Additionally, the router ID can be specified as another parameter of the OSPF command. This parameter is required for all non-base OSPF instances.

The default value for the base instance is inherited from the configuration in the config>router context. When that is not configured, the following apply:

1. the system uses the system interface address (which is also the loopback address)

2. if a system interface address is not configured, it uses the last 32 bits of the chassis MAC address

This is a required command when configuring multiple instances and the instance being configured is not the base instance. When configuring multiple instances of OSPF, there is a risk of loops because networks are advertised by multiple domains configured with multiple interconnections to one another. To prevent this from happening, all routers in a domain should be configured with the same domain ID. Each domain (OSPF-instance) should be assigned a specific bit value in the 32-bit tag mask.

The default value for non-base instances is 0.0.0.0 and is invalid; in this case, the instance of OSPF will not start. When configuring a new router ID, the instance is not automatically restarted with the new router ID. The next time the instance is initialized, the new router ID is used.

Issue the shutdown and no shutdown commands for the instance for the new router ID to be used, or reboot the entire router.

OSPF instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command to reverts to the default value.

Default

no ospf

Parameters

ospf-instance

Specifies a unique integer that identifies a specific instance of a version of the OSPF protocol running in the router instance specified by the router ID.

Values

1 to 31

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. This IP address must be given a dot decimal notation format.

Platforms

7705 SAR Gen 2

Context

[Tree] (debug>router ospf)

Full Context

debug router ospf

Description

Indicates the OSPF instance for debugging purposes.

Parameters

ospf-instance

Debugs the specified OSPF instance.

Values

0 to 31

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system ospf-dynamic-hostnames)

Full Context

configure system ospf-dynamic-hostnames

Description

This command enables OSPF dynamic hostnames.

The router receiving the new Dynamic Hostname within the OSPF Router Information (RI) LSA is instructed to process the received dynamic hostname information.

The no form of this command disables OSPF dynamic hostnames.

Default

no ospf-dynamic-hostnames

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn ospf3)

Full Context

configure service vprn ospf3

Description

This command creates an OSPFv3 routing instance and then enters the associated context to configure associated protocol parameters.

OSPF instances are shutdown when created, so that all parameters can be configured before the instance is enabled.

The no form of this command deletes the OSPFv3 protocol instance, removing all associated configuration parameters.

Default

no ospf3

Parameters

instance-id

Specifies the instance ID for the OSPFv3 instance being created or modified. The instance ID must match the specified range based on the address family.

Values

0 to 31: IPv6 unicast

64 to 95: IPv4 unicast

router-id

Specifies the IP address.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router ospf3)

Full Context

configure router ospf3

Description

This command creates an OSPFv3 routing instance and then enters the associated context to configure associated protocol parameters.

OSPFv3 instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command deletes the OSPFv3 protocol instance, removing all associated configuration parameters.

Parameters

ospf-instance

Specifies the instance ID for the OSPFv3 instance being created or modified. The instance ID must match the specified range based on the address family.

Values

0 to 31: IPV6 unicast

64 to 95: IPV4 unicast

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. This IP address must be given a dot decimal notation format.

Platforms

7705 SAR Gen 2

Context

[Tree] (debug>router ospf3)

Full Context

debug router ospf3

Description

Indicates the OSPF3 instance for debugging purposes.

Parameters

ospf-instance

Debugs the specified OSPF3 instance.

Values

0 to 31 | 64 to 95

0 to 31 — IPv6-unicast address-family

64 to 95 — IPv4-unicast address-family

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>router-advert>if other-stateful-configuration)

Full Context

configure service vprn router-advertisement interface other-stateful-configuration

Description

This command sets the "other configuration" flag. This flag indicates that DHCPv6 is available for auto-configuration of other (non-address) information such as DNS-related information or information on other servers in the network. See RFC 3736, Stateless Dynamic Host Configuration Protocol (DHCP) for IPv6.

The no form of this command removes the flag.

Default

no other-stateful-configuration

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>router-advert>if other-stateful-configuration)

Full Context

configure router router-advertisement interface other-stateful-configuration

Description

This command sets the "Other configuration" flag. This flag indicates that DHCPv6lite is available for autoconfiguration of other (non-address) information such as DNS-related information or information about other servers in the network. See RFC 3736, Stateless Dynamic Host Configuration Protocol (DHCP) for IPv6.

Default

no other-stateful-configuration

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-discarded-count)

Full Context

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record ref-queue e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record queue e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record policer e-counters out-profile-octets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-octets-discarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-discarded-count)

Full Context

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record policer i-counters out-profile-octets-discarded-count

Description

This command includes the out of profile octets discarded count.

The no form of this command excludes the out of profile octets discarded count.

Default

no out-profile-octets-discarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-octets-forwarded-count)

Full Context

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record policer e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-queue e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record queue e-counters out-profile-octets-forwarded-count

Description

This command includes the out of profile octets forwarded count.

The no form of this command excludes the out of profile octets forwarded count.

Default

no out-profile-octets-forwarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>queue>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>i-counters out-profile-octets-forwarded-count)

Full Context

configure log accounting-policy custom-record queue i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record policer i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-queue i-counters out-profile-octets-forwarded-count

Description

This command includes the out of profile octets forwarded count.

The no form of this command excludes the out of profile octets forwarded count.

Default

no out-profile-octets-forwarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-offered-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-offered-count)

Full Context

configure log accounting-policy custom-record policer e-counters out-profile-octets-offered-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-offered-count

Description

This command includes the out of profile octets offered count.

The no form of this command excludes the out of profile octets offered count.

Default

no out-profile-octets-offered-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-offered-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-offered-count)

Full Context

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-offered-count

configure log accounting-policy custom-record policer i-counters out-profile-octets-offered-count

Description

This command includes the out of profile octets offered count.

The no form of this command excludes the out of profile octets offered count.

Default

no out-profile-octets-offered-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-packets-discarded-count)

Full Context

configure log accounting-policy custom-record queue e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record policer e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record ref-queue e-counters out-profile-packets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-packets-discarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-discarded-count)

Full Context

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record policer i-counters out-profile-packets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-packets-discarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-packets-forwarded-count)

Full Context

configure log accounting-policy custom-record ref-queue e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record policer e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record queue e-counters out-profile-packets-forwarded-count

Description

This command includes the out of profile packets forwarded count.

The no form of this command excludes the out of profile packets forwarded count.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>queue>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>i-counters out-profile-packets-forwarded-count)

Full Context

configure log accounting-policy custom-record queue i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record policer i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-queue i-counters out-profile-packets-forwarded-count

Description

This command includes the out of profile packets forwarded count.

The no form of this command excludes the out of profile packets forwarded count.

Default

no out-profile-packets-forwarded-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-offered-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-offered-count)

Full Context

configure log accounting-policy custom-record policer e-counters out-profile-packets-offered-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-offered-count

Description

This command includes the out of profile packets offered count.

The no form of this command excludes the out of profile packets offered count.

Default

no out-profile-packets-offered-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-offered-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-offered-count)

Full Context

configure log accounting-policy custom-record policer i-counters out-profile-packets-offered-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-offered-count

Description

This command includes the out of profile packets offered count.

The no form of this command excludes the out of profile packets offered count.

Default

no out-profile-packets-offered-count

Platforms

7705 SAR Gen 2

Context

[Tree] (config>qos>sap-ingress>fc out-remark)

Full Context

configure qos sap-ingress fc out-remark

Description

This command is used in a SAP ingress QoS policy to define an explicit out-of-profile remark action for a forwarding class or subclass. While the SAP ingress QoS policy may be applied to any SAP, the remarking functions are only enforced when the SAP is associated with an IP or subscriber interface (in an IES or VPRN). When the policy is applied to a Layer 2 SAP (for example, Epipe or VPLS), the remarking definitions are silently ignored.

In the case where the policy is applied to a Layer 3 SAP, the out-of-profile remarking definition will be applied to packets that have been classified to the forwarding class or subclass. It is possible for a packet to match a classification command that maps the packet to a particular forwarding class or subclass, only to have a more explicit (higher priority match) override the association. Only the highest priority match forwarding class or subclass association will drive the out-of-profile marking.

The out-remark command is only applicable to ingress IP routed packets that are considered out-of-profile. The profile of a SAP ingress packet is affected by either the explicit in-profile/out-of-profile definitions or the ingress policing function applied to the packet. Out-remark Command Effect describes the effect of the out-remark command on received SAP ingress packets. Within the out-of-profile IP packet’s ToS field, either the six DSCP bits or the three precedence bits are remarked.

A packet that is explicitly remarked at ingress will not be affected by any egress remarking decision. Explicit ingress remarking has highest priority.

An explicit dscp name or precedence value must be specified for out-of-profile remarking to be applied.

The no form of this command disables ingress remarking of out-of-profile packets classified to the forwarding class or subclass.

Default

no out-remark

Parameters

dscp dscp-name

Specifies that the matching packet’s DSCP bits should be overridden with the value represented by dscp-name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names defined on the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

prec ip-prec-value

Specifies that the matching packet’s precedence bits should be overridden with the value represented by ip-prec-value.

The value specified by ip-prec-value is used to overwrite the precedence bits within a matching routed packets IP header ToS field.

Values

0 to 7

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>security>vprn-aaa-server outband)

Full Context

configure system security vprn-aaa-server outband

Description

This command configures TACACS+ and RADIUS servers in a VPRN to be used for AAA by that VPRN and by sessions on the console or out-of-band (OOB) Ethernet ports.

The no form of this command disables the use of servers in out-of-band management.

Default

no outband

Parameters

service-id

Specifies the VPRN server for AAA to use for OOB sessions.

Values

service-id: 1 to 2147483648

svc-name: 64 characters maximum

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>login-control>ssh outbound-max-sessions)

[Tree] (config>system>login-control>telnet outbound-max-sessions)

Full Context

configure system login-control ssh outbound-max-sessions

configure system login-control telnet outbound-max-sessions

Description

This parameter limits the number of outbound Telnet and SSH sessions. A maximum of 15 Telnet and SSH connections can be established from the router. The local serial port cannot be disabled.

The no form of this command reverts to the default value.

Default

outbound-max-sessions 5

Parameters

value

Specifies the maximum number of concurrent outbound Telnet sessions, expressed as an integer.

Values

0 to 15

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>bgp>group>neighbor outbound-route-filtering)

[Tree] (config>router>bgp outbound-route-filtering)

[Tree] (config>router>bgp>group outbound-route-filtering)

Full Context

configure router bgp group neighbor outbound-route-filtering

configure router bgp outbound-route-filtering

configure router bgp group outbound-route-filtering

Description

This command opens the configuration tree for sending or accepting BGP filter lists from peers (outbound route filtering).

Default

no outbound-route-filtering

Platforms

7705 SAR Gen 2

Context

[Tree] (debug>router>bgp outbound-route-filtering)

Full Context

debug router bgp outbound-route-filtering

Description

This command enables debugging for all BGP outbound route filtering (ORF) packets. ORF is used to inform a neighbor of targets (using target-list) that it is willing to receive.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry>match outer-tag)

Full Context

configure qos sap-ingress mac-criteria entry match outer-tag

Description

This command configures the matching of the first tag that is carried transparently through the service. Service delimiting tags are stripped from the frame and the outer tag on ingress is the first tag after any service delimiting tags. The outer tag is the first tag before any service delimiting tags on egress. This allows matching VLAN tags for explicit filtering or QoS setting when using default or null encapsulations.

On dot1Q SAPs, the outer tag is the only tag that can be matched. On dot1Q SAPs with exact match (sap 2/1/1:50), the outer tag will be populated with the next tag that is carried transparently through the service or 0 if there is no additional VLAN tags on the frame.

On QinQ SAPs that strip a single service delimiting tag, the outer tag will contain the next tag (which is still the first tag carried transparently through the service.) On SAPs with two service delimiting tags (two tags stripped), the outer-tag will contain 0 even if there are more than two tags on the frame.

The optional vid_mask is defaulted to 4095 (exact match) but may be specified to allow pattern matching. The masking operation is ((value & vid-mask) = = (tag & vid-mask)). A value of 6 and a mask of 7 would match all VIDs with the lower 3 bits set to 6.

For QoS, the VID type cannot be specified on the default QoS policy.

The default vid-mask is set to 4095 for exact match.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>system>security>management-interface output-authorization)

Full Context

configure system security management-interface output-authorization

Description

This command configures the authorization of the configuration and state output in model-driven interfaces and telemetry. When enabled, commands that display configuration or state output authorize every element in the output. If a remote AAA server is configured, this can cause delays in displaying output while it is authorized. If a large amount of output is displayed, for example, when displaying the system configuration, the remote AAA server receives a large number of authorization requests.

Input to edit the configuration is not affected by this command, and is always authorized.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>nat outside)

[Tree] (config>router>nat outside)

Full Context

configure service vprn nat outside

configure router nat outside

Description

Commands in this context configure the outside NAT instance.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>nat>inside>deterministic>address-map outside-range)

[Tree] (config>router>nat>inside>deterministic>address-map outside-range)

Full Context

configure service vprn nat inside deterministic address-map outside-range

configure router nat inside deterministic address-map outside-range

Description

This command configures the mapping of the inside address range of deterministic NAT subscribers to the first IP address in the outside IP address range in the NAT pool.

The last outside IP address is determined by the number of subscribers mapped to an outside IP address via the configure router nat outside pool subscriber-limit and configure service vprn nat outside pool subscriber-limit commands.

The no form of this command removes the configuration.

Default

no outside-range

Parameters

outside-ip-address

Specifies an outside IPv4 address.

Values

a.b.c.d

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ipsec overlapping-reverse-route)

Full Context

configure service vprn ipsec overlapping-reverse-route

Description

This command configures the router to accept overlapping DL2L tunnel reverse routes from different tunnels and install the routes based on the preference, metric, or ECMP configuration.

This command is mutually exclusive with the configure service vprn ipsec allow-reverse-route-override-type command.

The no form of this command disables the acceptance of overlapping reverse routes. The router handles the overlapping route according to the allow-reverse-route-override-type command configuration. See the 7705 SAR Gen 2 Multiservice ISA and ESA Guide for more information.

Default

no overlapping-reverse-route

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>isis overload)

Full Context

configure service vprn isis overload

Description

This command administratively sets the IS-IS router to operate in the overload state for a specific time period, in seconds, or indefinitely.

During normal operation, the router may be forced to enter an overload state due to a lack of resources. When in the overload state, the router is only used if the destination is reachable by the router and will not be used for other transit traffic.

If a time period is specified, the overload state persists for the configured length of time. If no time is specified, the overload state operation is maintained indefinitely.

The overload command can be useful in circumstances where the router is overloaded or used prior to executing a shutdown command to divert traffic around the router.

The max-metric parameter can be set to advertise transit links with the maximum metric of 0xffffffe (wide metrics) or 0x3f (regular metrics), instead of setting the overload bit when placing the router in overload.

The no form of this command causes the router to exit the overload state.

Default

no overload

Parameters

seconds

Specifies the time, in seconds, that this router must operate in overload state.

Values

60 to 1800

Default

infinity (overload state maintained indefinitely)

max-metric

Set the maximum metric instead of overload.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf overload)

[Tree] (config>service>vprn>ospf3 overload)

Full Context

configure service vprn ospf overload

configure service vprn ospf3 overload

Description

This command changes the overload state of the local router so that it appears to be overloaded. When overload is enabled, the router can participate in OSPF routing, but is not used for transit traffic. Traffic destined for directly attached interfaces continue to reach the router.

To put the IGP in an overload state, enter a timeout value. The IGP enters the overload state until the timeout timer expires or a no overload command is executed.

If the overload command is performed during the execution of an overload-on-boot command, the overload command takes precedence. This could occur as a result of a saved configuration file in which both parameters are saved. When the file is saved by the system, the overload-on-boot command is saved after the overload command.

Use the no form of this command to return to the default. When the no overload command is executed, the overload state is terminated, regardless the reason the protocol entered overload state.

Default

no overload

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

60 to1800

Default

60

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload)

Full Context

configure router isis overload

Description

This command administratively sets the IS-IS router to operate in the overload state for a specific time period, in seconds, or indefinitely.

During normal operation, the router may be forced to enter an overload state because of a lack of resources. When in the overload state, the router is only used if the destination is reachable by the router and is not used for other transit traffic.

If a time period is specified, the overload state persists for the configured length of time. If no time is specified, the overload state operation is maintained indefinitely.

The overload command is cleared from the configuration after a reboot if overload-on-boot is configured with or without a timeout value. To keep the IS-IS router in the overload state indefinitely after rebooting, configure overload-on-boot with no timeout value or configure the overload command with no overload-on-boot command.

The overload command can be useful in circumstances where the router is overloaded or used before executing a shutdown command to divert traffic around the router.

The max-metric parameter can be set to advertise transit links with the maximum metric of 0xffffffe (wide metrics) or 0x3f (regular metrics), instead of setting the overload bit when placing the router in overload.

The no form of this command causes the router to exit the overload state.

Default

no overload

Parameters

seconds

Specifies the time, in seconds, that this router must operate in overload state.

Default

infinity (overload state maintained indefinitely)

Values

60 to 1800

max-metric

Sets the maximum metric instead of overload.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf3 overload)

[Tree] (config>router>ospf overload)

Full Context

configure router ospf3 overload

configure router ospf overload

Description

This command changes the overload state of the local router so that it appears to be overloaded. When overload is enabled, the router can participate in OSPF routing, but is not used for transit traffic. Traffic destined to directly attached interfaces continues to reach the router.

To put the IGP in an overload state enter a timeout value. The IGP will enter the overload state until the timeout timer expires or a no overload command is executed.

If the overload command is encountered during the execution of an overload-on-boot command then this command takes precedence. This could occur as a result of a saved configuration file where both parameters are saved. When the file is saved by the system the overload-on-boot command is saved after the overload command. However, when overload-on-boot is configured under OSPF with no timeout value configured, the router will remain in overload state indefinitely after a reboot.

The no form of this command reverts to the default. When the no overload command is executed, the overload state is terminated regardless of the reason the protocol entered overload state.

Default

no overload

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

1 to 1800 in the following context.

configure router ospf

60 to 1800 in the following context.

configure router ospf3

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>isis overload-export-external)

Full Context

configure service vprn isis overload-export-external

Description

This command enables external routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes external routes to be withdrawn when the router is in overload.

Default

no overload-export-external

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload-export-external)

Full Context

configure router isis overload-export-external

Description

This command enables external routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes external routes to be withdrawn when the router is in overload.

Default

no overload-export-external

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>isis overload-export-interlevel)

Full Context

configure service vprn isis overload-export-interlevel

Description

This command enables inter-level routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes inter-level routes to be withdrawn when the router is in overload.

Default

no overload-export-interlevel

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload-export-interlevel)

Full Context

configure router isis overload-export-interlevel

Description

This command enables inter-level routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes inter-level routes to be withdrawn when the router is in overload.

Default

no overload-export-interlevel

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload-fib-error-notify-only)

[Tree] (config>service>vprn>isis overload-fib-error-notify-only)

Full Context

configure router isis overload-fib-error-notify-only

configure service vprn isis overload-fib-error-notify-only

Description

This command configures the IS-IS router to send a notification when an overload condition occurs when programming the FIB, instead of advertising the overload condition of the router in the IS-IS LSP.

When this command is configured, the IS-IS router enters a suboptimal state where it only sends a notification trap; the router can still be used by transit traffic in this state. The IS-IS router tracks the segment routing prefix SIDs where FIB programming failed. With the retry parameter configured, the router retries programming the segment routing prefix SIDs in the FIB using this tracked information.

When this command is not configured, during normal operation, the system may force the router to enter an overload state because of a lack of FIB resources. In this state, the router is used to terminate traffic and is not used to transit traffic.

The removal of the overload-fib-error-notify-only command configuration causes the system to program the failed entries in the FIB by triggering an immediate SPF.

The no form of this command causes the router to enter the full overload state.

Default

no overload-fib-error-notify-only

Parameters

seconds

Specifies the time, in seconds, this router uses to retry programming the failed entries in the FIB when overload-fib-error-notify-only is configured. The overload-fib-error-notify-only command must be configured to use the retry timer.

Values

10 to 1800

Default

10

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf overload-include-ext-1)

[Tree] (config>service>vprn>ospf3 overload-include-ext-1)

Full Context

configure service vprn ospf overload-include-ext-1

configure service vprn ospf3 overload-include-ext-1

Description

This command controls whether routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-1 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-1

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf3 overload-include-ext-1)

[Tree] (config>router>ospf overload-include-ext-1)

Full Context

configure router ospf3 overload-include-ext-1

configure router ospf overload-include-ext-1

Description

This command controls whether external type-1 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-1 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-1

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf overload-include-ext-2)

[Tree] (config>service>vprn>ospf3 overload-include-ext-2)

Full Context

configure service vprn ospf overload-include-ext-2

configure service vprn ospf3 overload-include-ext-2

Description

This command controls whether external type-2 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-2 routes is advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-2

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf overload-include-ext-2)

[Tree] (config>router>ospf3 overload-include-ext-2)

Full Context

configure router ospf overload-include-ext-2

configure router ospf3 overload-include-ext-2

Description

This command controls whether external type-2 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-2 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-2

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload-include-locators)

Full Context

configure router isis overload-include-locators

Description

This command configures the router to include SRv6 locators when advertising links and prefixes with max-metric if the IS-IS instance goes into overload because of resource depletion or manual configuration.

The no form of this command causes the router to stop including the SRv6 locators when advertising links and prefixes with max-metric.

Default

no overload-include-locators

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf overload-include-stub)

[Tree] (config>service>vprn>ospf3 overload-include-stub)

Full Context

configure service vprn ospf overload-include-stub

configure service vprn ospf3 overload-include-stub

Description

This command controls whether the OSPF stub networks should be advertised with a maximum metric value when the system goes into overload state for any reason. When enabled, the system uses the maximum metric value. When this command is enabled and the router is in overload, all stub interfaces, including loopback and system interfaces, are advertised at the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-stub

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf3 overload-include-stub)

[Tree] (config>router>ospf overload-include-stub)

Full Context

configure router ospf3 overload-include-stub

configure router ospf overload-include-stub

Description

This command controls whether the OSPF stub networks should be advertised with a maximum metric value when the system goes into overload state for any reason. When enabled, the system uses the maximum metric value. When this command is enabled and the router is in overload, all stub interfaces, including loopback and system interfaces, are advertised at the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-stub

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>isis overload-on-boot)

Full Context

configure service vprn isis overload-on-boot

Description

When the router is in an overload state, it is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• The timeout timer expires.

• A manual override of the current overload state is entered with the config>router>isis>no overload command.

  The no overload command does not affect the overload-on-boot function.

If no timeout is specified, IS-IS will go into overload indefinitely after a reboot. After the reboot, the IS-IS status will display a permanent overload state:

• L1 LSDB Overload : Manual on boot (Indefinitely in overload)

• L2 LSDB Overload : Manual on boot (Indefinitely in overload)

This state can be cleared with the config>router>isis>no overload command.

When specifying a timeout value, IS-IS will go into overload for the configured timeout after a reboot. After the reboot, the IS-IS status will display the remaining time the system stays in overload:

• L1 LSDB Overload : Manual on boot (Overload Time Left : 17)

• L2 LSDB Overload : Manual on boot (Overload Time Left : 17)

The overload state can be cleared before the timeout expires with the config>router>isis>no overload command.

The no form of this command removes the overload-on-boot functionality from the configuration.

Use the show router isis status command to display the administrative and operational state as well as all timers.

Default

no overload-on-boot

Parameters

timeout seconds

Configure the timeout timer for overload-on-boot in seconds.

Values

60 to 1800

max-metric

Set the maximum metric instead of overload.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>service>vprn>ospf3 overload-on-boot)

[Tree] (config>service>vprn>ospf overload-on-boot)

Full Context

configure service vprn ospf3 overload-on-boot

configure service vprn ospf overload-on-boot

Description

When the router is in an overload state, it is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• The timeout timer expires.

• A manual override of the current overload state is entered with the no overload command.

The no overload command does not affect the overload-on-boot function.

The no form of this command removes the overload-on-boot functionality from the configuration.

Default

no overload-on-boot

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

60 to1800

Default

60

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis overload-on-boot)

Full Context

configure router isis overload-on-boot

Description

When the router is in an overload state, the router is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

1. The timeout timer expires.

2. A manual override of the current overload state is entered with the config>router>isis>no overload command.

The no overload command does not affect the overload-on-boot function.

If no timeout is specified, IS-IS will go into overload indefinitely after a reboot. After the reboot, the IS-IS status will display a permanent overload state:

• L1 LSDB Overload : Manual on boot (Indefinitely in overload)

• L2 LSDB Overload : Manual on boot (Indefinitely in overload)

This state can be cleared with the config>router>isis>no overload command.

When specifying a timeout value, IS-IS will go into overload for the configured timeout after a reboot. After the reboot, the IS-IS status will display the remaining time the system stays in overload:

• L1 LSDB Overload : Manual on boot (Overload Time Left : 17)

• L2 LSDB Overload : Manual on boot (Overload Time Left : 17)

The overload state can be cleared before the timeout expires with the config>router>isis>no overload command.

The no form of this command removes the overload-on-boot functionality from the configuration.

Use the show router isis status command to display the administrative and operational state as well as all timers.

Default

no overload-on-boot

Parameters

seconds

Specifies the timeout timer for overload-on-boot, in seconds.

Values

60 to 1800

max-metric

Sets the maximum metric instead of overload.

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>ospf3 overload-on-boot)

[Tree] (config>router>ospf overload-on-boot)

Full Context

configure router ospf3 overload-on-boot

configure router ospf overload-on-boot

Description

When the router is in an overload state, the router is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• the timeout timer expires

• a manual override of the current overload state is entered with the no overload command

The no overload command does not affect the overload-on-boot function.

The no form of this command removes the overload-on-boot functionality from the configuration.

The default timeout value is 60 seconds, which means after 60 seconds overload status the SR will recover (change back to non-overload status). However, when overload-on-boot is configured under OSPF with no timeout value the router will remain in overload state indefinitely after a reboot.

Default

no overload-on-boot

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

1 to 1800 in the config>router> ospf context

60 to 1800 in the config>router>ospf3 context

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>pim>rp>static>address override)

[Tree] (config>router>pim>rp>ipv6>static>address override)

Full Context

configure router pim rp static address override

configure router pim rp ipv6 static address override

Description

This command changes the precedence of static RP over dynamically-learned Rendezvous Points (RPs).

When enabled, the static group-to-RP mappings take precedence over the dynamically learned mappings.

The no form of this command reverts to the default.

Default

no override

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis>segm-rtng>msd override-bmi)

Full Context

configure router isis segment-routing maximum-sid-depth override-bmi

Description

This command provides the ability to override the announced MSD node Base MPLS Imposition (BMI). The MSD-BMI value announced by a router can be used by recipients to understand the number of MPLS labels that can be imposed inclusive of all service, transport, or special labels.

When override-bmi is not configured, the router announces the node maximum supported BMI assuming the most simple services and Layer 2 encapsulation.

The no form of this command reverts to the default.

Default

no override-bmi

Parameters

values

Specifies the override BMI.

Values

0 to 12

Platforms

7705 SAR Gen 2

Context

[Tree] (config>router>isis>segm-rtng>msd override-erld)

Full Context

configure router isis segment-routing maximum-sid-depth override-erld

Description

This command provides the ability to override the announced MSD node Entropy Readable Label Depth (ERLD). It is useful for ingress LSRs to know each intermediate LSR's capability of reading the maximum label stack depth and performing EL-based load balancing.

When override-erld is not configured, then the router announces the node maximum supported ERLD assuming the most simple Layer 2 encapsulation.

The no form of this command reverts to the default.

Default

no override-erld

Parameters

values

Specifies the override ERLD.

Values

0 to 15

Platforms

7705 SAR Gen 2

Context

[Tree] (config>ipsec>ike-policy own-auth-method)

Full Context

configure ipsec ike-policy own-auth-method

Description

This command configures the authentication method used with this IKE policy on its own side.

Default

no own-auth-method

Platforms

7705 SAR Gen 2