t Commands
tacplus
tacplus
Syntax
tacplus server-index
Context
[Tree] (clear tacplus)
Full Context
clear tacplus
Description
This command clears the TACACS+ server state.
Parameters
- server-index
-
Specifies the index for the TACACS+ server.
Platforms
7705 SAR Gen 2
taii-type2-using
taii-type2-using
Syntax
taii-type2-using global-id[:prefix[:ac-id]]
Context
[Tree] (show>service taii-type2-using)
Full Context
show service taii-type2-using
Description
This command displays switch-point information using TAII.
Parameters
- global-id[:prefix[:ac-id]]
-
Specifies the switch-point information using SAII-Type2.
Platforms
7705 SAR Gen 2
Output
The following output is an example of service switch-point information using TAII information.
Output Example*A:Dut-E# show service taii-type2-using 6:10.20.1.6:1
===================================================================
Service Switch-Point Information
===================================================================
SvcId Oper-SdpBind TAII-Type2
-------------------------------------------------------------------
2147483598 17407:4294967195 6:10.20.1.6:1
-------------------------------------------------------------------
Entries found: 1
=====================================================
targ-peer
targ-peer
Syntax
targ-peer [ip-address] [detail]
targ-peer [detail] family
targ-peer resource-failures [family]
Context
[Tree] (show>router>ldp targ-peer)
Full Context
show router ldp targ-peer
Description
This command displays configuration information for the targeted LDP peers.
Parameters
- ip-address
-
Specifies the IP address of a targeted LDP peer for which to display information.
- detail
-
Displays detailed configuration information.
- family
-
Specifies a peer family for which to display information.
- resource-failures
-
Displays resource failure information for targeted LDP peers.
Platforms
7705 SAR Gen 2
Output
The following outputs are examples of LDP targeted peer information, and Output fields: LDP targeted peer describes the output fields.
Output Example*A:Dut-A# show router ldp targ-peer
===============================================================================
LDP IPv4 Targeted Peers
===============================================================================
Peer Adm/ Hello Hold KA KA Auto
Opr Fctr Time Fctr Time Created
-------------------------------------------------------------------------------
No Matching Entries Found
===============================================================================
===============================================================================
LDP IPv6 Targeted Peers
===============================================================================
Peer Adm/ Hello Hold KA KA Auto
Opr Fctr Time Fctr Time Created
-------------------------------------------------------------------------------
3ffe::a0a:203 Up/Up 3 15 3 30 no
-------------------------------------------------------------------------------
No. of IPv6 Targeted Peers: 1
===============================================================================
show router ldp targ-peer 10.20.1.2 detail
===============================================================================
LDP IPv4 Targeted Peers
===============================================================================
-------------------------------------------------------------------------------
10.20.1.2
-------------------------------------------------------------------------------
Admin State : Up Oper State : Up
Last Oper Chg : 0d 00:08:11
Hold Time : 15 Hello Factor : 3
Oper Hold Time : 15
Hello Reduction : Disabled Hello Reduction Fctr : 3
Keepalive Timeout : 30 Keepalive Factor : 3
Active Adjacencies : 1 Last Modified : Never
Auto Created : Yes
Creator : autotx Template Name : N/A
Tunneling : Enabled
Lsp Name : None
Mcast-Tunneling : Disabled
Lsp Name : None
Local LSR : None 32-BitLocalLsr : Disabled
BFD Status : Disabled
===============================================================================
No. of IPv4 Targeted Peers: 1
===============================================================================
The following table describes the LDP targeted peer output fields.
|
Label |
Description |
|---|---|
|
Peer |
The IP address of the peer. |
|
Adm |
Up — The LDP is administratively enabled. Down — The LDP is administratively disabled. |
|
Opr |
Up — The LDP is operationally enabled. Down — The LDP is operationally disabled. |
|
Hello Fctr |
The value by which the hello timeout should be divided to give the hello time, for example, the time interval (in s), between LDP hello messages. LDP uses hello messages to discover neighbors and to detect loss of connectivity with its neighbors. |
|
Hold Time |
The hello time or hold time. The time interval (in seconds) that LDP waits before declaring a neighbor to be down. Hello timeout is local to the system and is sent in the hello messages to a neighbor. |
|
KA Fctr |
The value by which the keepalive timeout is divided to calculate the keepalive time, for example, the time interval (in seconds) between LDP keepalive messages. LDP keepalive messages are sent to keep the LDP session from timing out when no other LDP traffic is being sent between the neighbors. |
|
KA Time |
The time interval (in seconds) that LDP waits before tearing down a session. If no LDP messages are exchanged during this time interval, the LDP session is torn down. Generally, the value is configured to be 3 times the keepalive time (the time interval between successive LDP keepalive messages). |
|
Active Adjacencies |
The number of active adjacencies (established sessions) associated with the LDP instance. |
|
Auth |
Enabled — Authentication using MD5 message-based digest protocol is enabled. Disabled — No authentication is used. |
|
Passive Mode |
The mode used to set up LDP sessions. This value is only applicable to targeted sessions and not to LDP interfaces. True — LDP responds only when it gets a connect request from a peer and will not attempt to actively connect to its neighbors. False — LDP actively tries to connect to its peers. |
|
Auto Created |
Specifies that a targeted peer was automatically created through service manager. For an LDP interface, this value is always false. |
|
Creator |
autorx — The autorx is the creator. autotx — The autotx is the creator. |
|
No. of Peers |
The total number of LDP peers. |
|
Tunneling |
Enabled — Tunneling is enabled. Disabled — No tunneling is used. |
|
LSP |
The LSP name. |
targ-peer-template
targ-peer-template
Syntax
targ-peer-template [peer-template] [community community]
Context
[Tree] (show>router>ldp targ-peer-template)
Full Context
show router ldp targ-peer-template
Description
This command displays the configured parameters of a targeted peer-template.
Parameters
- peer-template
-
Specifies a targeted peer template on this virtual router that participates in the LDP protocol up to 32 characters.
- community
-
The string defining the LDP community assigned to the session. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters excluding double quotes. If the string contains spaces, use double quotes to delimit the start and end of the string.
Platforms
7705 SAR Gen 2
Output
Output Example*A:SRU4>config>router>ldp>egr-stats>fec-pfx# show router ldp targ-peer-template
===============================================================================
LDP Peer Template
===============================================================================
-------------------------------------------------------------------------------
Peer Template "toSR4"
-------------------------------------------------------------------------------
Created at : 01/26/18 22:25:19 Last Modified : 01/26/18 22:25:19
Admin State : Up Index : 5
Hold Time : 15 Hello Factor : 3
Hello Reduction : Enabled Hello Reduction Fa*: 3
Keepalive Timeout : 15 Keepalive Factor : 3
Tunneling : Enabled
Local LSR : None
Local-LSR ID adver*: Enabled
Community : RED
BFD Status : Enabled
-------------------------------------------------------------------------------
targ-peer-template-map
targ-peer-template-map
Syntax
targ-peer-template-map [template-name]
targ-peer-template-map [template-name] peers
Context
[Tree] (show>router>ldp targ-peer-template-map)
Full Context
show router ldp targ-peer-template-map
Description
This command displays targeted peer template mappings to prefix policy.
Parameters
- template-name
-
Specifies the template name, up to 32 characters.
Platforms
7705 SAR Gen 2
Output
Output Example*A:SR1-A# /show router ldp targ-peer-template-map
===============================================================================
LDP Peer Template Map
===============================================================================
-------------------------------------------------------------------------------
Peer Template templ1
-------------------------------------------------------------------------------
Peer Policy 1 : policy1
-------------------------------------------------------------------------------
Peer Template templ2
-------------------------------------------------------------------------------
Peer Policy 1 : policy1
Peer Policy 2 : policy2
Peer Policy 3 : policy3
-------------------------------------------------------------------------------
Peer Template templ3
-------------------------------------------------------------------------------
Peer Policy 1 : policy2
===============================================================================
*A:SR1-A# /show router ldp targ-peer-template-map tldp-peers
===============================================================================
LDP Peer Template Map TLDP Peers
===============================================================================
-------------------------------------------------------------------------------
Peer Template templ1
-------------------------------------------------------------------------------
10.0.10.1 10.0.10.2
10.0.10.3 10.0.10.4
10.0.10.5 10.0.10.6
10.0.10.7 10.0.10.8
10.0.10.9 10.0.10.10
10.0.10.11 10.0.10.12
10.0.10.13 10.0.10.14
10.0.10.15 10.0.10.16
10.0.10.17 10.0.10.18
10.0.10.19 10.0.10.20
10.0.10.21 10.0.10.22
10.0.10.23 10.0.10.24
10.0.10.25 10.0.10.26
10.0.10.27 10.0.10.28
10.0.10.29 10.0.10.30
10.0.10.31 10.0.10.32
10.0.10.33 10.0.10.34
10.0.10.35 10.0.10.36
10.0.10.37 10.0.10.38
10.0.10.39 10.0.10.40
10.0.10.41 10.0.10.42
10.0.10.43 10.0.10.44
10.0.10.45 10.0.10.46
10.0.10.47 10.0.10.48
10.0.10.49 10.0.10.50
-------------------------------------------------------------------------------
Peer Template templ3
-------------------------------------------------------------------------------
10.1.3.5 10.1.3.6
10.1.3.7 10.1.3.8
10.1.3.9 10.1.3.10
10.1.3.11 10.1.3.12
10.1.3.13 10.1.3.14
===============================================================================
targeted-auto-rx
targeted-auto-rx
Syntax
targeted-auto-rx hold-time seconds
Context
[Tree] (clear>router>ldp targeted-auto-rx)
Full Context
clear router ldp targeted-auto-rx
Description
This command clears unneeded automatic T-LDP sessions on all applicable nodes. The operator must run this command during a specific time window on all nodes on which auto-rx is configured. The operator must also ensure that the configured hold-time value should be longer than the hello-timer value plus the time required to run the clear command on all applicable nodes. The configured hold-time value must be a non-zero value.
When the hold timer for this command is in progress, the operator can display the remaining timeout value by using the tools dump router ldp timers command.
This clear command is not synchronized to the standby CPM. Consequently, if the operator configures this command with a large hold-time value and a CPM switchover occurs during this time, the operator must reconfigure this clear command on the newly active CPM.
Parameters
- hold-time
-
Specifies the time window during which this command must be run on all applicable nodes.
- seconds
-
Specifies the hold timer value in seconds.
Platforms
7705 SAR Gen 2
tcp-session-parameters
tcp-session-parameters
Syntax
tcp-session-parameters
tcp-session-parameters [family]
tcp-session-parameters [keychain keychain]
tcp-session-parameters [transport-peer-ip-address]
Context
[Tree] (show>router>ldp tcp-session-parameters)
Full Context
show router ldp tcp-session-parameters
Description
This command displays information about the TCP transport session of an LDP peer.
Parameters
- family
-
Specifies the family type.
- keychain keychain
-
Specifies the authentication keychain name up to 32 characters in length.
- transport-peer-ip-address
-
Specifies the source of the transport address.
Platforms
7705 SAR Gen 2
Output
Output Example*A:Dut-A# show router ldp tcp-session-parameters
===============================================================================
LDP IPv4 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.2
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.3
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv4 Peers: 2
===============================================================================
===============================================================================
LDP IPv6 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:102
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:103
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv6 Peers: 2
===============================================================================
*A:Dut-A# show router ldp tcp-session-parameters ipv4
===============================================================================
LDP IPv4 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.2
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.3
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv4 Peers: 2
===============================================================================
*A:Dut-A# show router ldp tcp-session-parameters ipv6
===============================================================================
LDP IPv6 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:102
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:103
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv6 Peers: 2
===============================================================================
*A:Dut-A# show router ldp tcp-session-parameters keychain "LdpAuth"
===============================================================================
LDP IPv4 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.2
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 10.20.1.3
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv4 Peers: 2
===============================================================================
===============================================================================
LDP IPv6 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:102
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:103
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv6 Peers: 2
===============================================================================
*A:Dut-A# show router ldp tcp-session-parameters
- tcp-session-parameters [family]
- tcp-session-parameters [keychain <keychain>]
- tcp-session-parameters [<transport-peer-ip-address>]
<transport-peer-ip*> : ipv4-address - a.b.c.d
ipv6-address - x:x:x:x:x:x:x:x (eight 16-bit
pieces)
x:x:x:x:x:x:d.d.d.d
x - [0..FFFF]H
d - [0..255]D
<family> : ipv4 | ipv6
<keychain> : auth-keychain name [32 char max]
*A:Dut-A# show router ldp tcp-session-parameters 3ffe::a14:102
===============================================================================
LDP IPv6 TCP Session Parameters
===============================================================================
-------------------------------------------------------------------------------
Peer Transport: 3ffe::a14:102
-------------------------------------------------------------------------------
Authentication Key : Disabled Path MTU Discovery : Disabled
Auth key chain : LdpAuth Min-TTL : 0
===============================================================================
No. of IPv6 Peers: 1
===============================================================================
*A:Dut-A#
te-database
te-database
Syntax
te-database [adv-router adv-router] [ neighbor neighbor] [detail]
Context
[Tree] (tools>dump>router te-database)
Full Context
tools dump router te-database
Description
Commands in this context dump the traffic engineering database.
Parameters
- adv-router
-
Dumps the attributes of a specified traffic engineering database advertising router.
- neighbor
-
Dumps the neighbor of a traffic engineering database advertising router.
- detail
-
Specifies additional detailed traffic engineering database information.
Platforms
7705 SAR Gen 2
Output
The following output is an example of traffic engineering database information.
Output Example*A:Dut-F# tools dump router te-database
====================================================================================
Rtr: 0020.0200.2002 Addr: 2.2.2.2 TE ABR ISIS/0/L1
Rtr: 0030.0300.3003 Addr: 3.3.3.3 ABR ISIS/0/L1
AdvRtr: 0020.0200.2002 Nghb: 0030.0300.3003 ISIS/0/L1
LocIp/Id 10.0.0.9 /0 TE R Status: OK
AdvRtr: 0030.0300.3003 Nghb: 0020.0200.2002 ISIS/0/L1
LocIp/Id 10.0.0.10 /0 TE R Status: OK
====================================================================================
Rtr: 0020.0200.2002 Addr: 2.2.2.2 TE ABR ISIS/0/L2
Rtr: 0030.0300.3003 Addr: 3.3.3.3 ABR ISIS/0/L2
AdvRtr: 0020.0200.2002 Nghb: 0030.0300.3003 ISIS/0/L2
LocIp/Id 10.0.0.9 /0 TE R Status: OK
AdvRtr: 0030.0300.3003 Nghb: 0020.0200.2002 ISIS/0/L2
LocIp/Id 10.0.0.10 /0 TE R Status: OK
================================================================================
te-lspinfo
te-lspinfo
Syntax
te-lspinfo [endpoint ip-address] [sender ip-address] [lspid lsp-id] [detail] [ p2p | p2p-tid tunnel-id]
te-lspinfo [endpoint ip-address] [sender ip-address] [lspid lsp-id] [detail] [ p2mp | p2mp-tid tunnel-id]{ [phops] [ nhops] [s2l ip-address] }}
Context
[Tree] (tools>dump>router>mpls te-lspinfo)
Full Context
tools dump router mpls te-lspinfo
Description
This command displays TE LSP information for MPLS.
Platforms
7705 SAR Gen 2
Output
The following output is an example of MPLS TE LSP information.
Output ExampleB:Dut-R# tools dump router mpls te-lspinfo
Key P2P: Session(10.10.3.2, 201, 10.3.3.3) Sender(10.3.3.3, 2) PHOP(10.10.3.1),
Flags
0x0
Key P2P: Session(10.10.3.1, 1035, 10.4.4.4) Sender(10.4.4.4, 22) PHOP(10.10.11.2),
Flags
0x0
Key P2MP: Session(0.0.0.0, 1, 10.4.4.4) Sender(10.4.4.4, 52226) PHOP(0.0.0.0) Flags
0x10
S2L [1] Key: endPoint to 10.2.2.2 subGroupId - 1 subGroupOrigId - 10.4.4.4
S2L [2] Key: endPoint to 10.10.2.2 subGroupId - 3 subGroupOrigId - 10.4.4.4
S2L [3] Key: endPoint to 10.10.13.2 subGroupId - 4 subGroupOrigId - 10.4.4.4
Key P2MP: Session(0.0.0.0, 2, 10.4.4.4) Sender(10.4.4.4, 51714) PHOP(0.0.0.0) Flags
0x10
S2L [1] Key: endPoint to 10.2.2.2 subGroupId - 1 subGroupOrigId - 10.4.4.4
S2L [2] Key: endPoint to 10.10.2.2 subGroupId - 3 subGroupOrigId - 10.4.4.4
S2L [3] Key: endPoint to 10.10.13.2 subGroupId - 4 subGroupOrigId - 10.4.4.4
Key P2MP: Session(0.0.0.0, 3, 10.4.4.4) Sender(10.4.4.4, 53250) PHOP(0.0.0.0) Flags
0x10
*A:Dut-T# tools dump router mpls te-lspinfo p2mp-tid 102 nhops
Key P2MP: Session(0.0.0.0, 102, 10.4.4.4) Sender(10.4.4.4, 3074) PHOP(0.0.0.0)
Flags
0x10
--------------------------------------------------------------------------
List of NEXT HOPS
--------------------------------------------------------------------------
NextHop [1] =>
Key: Nhop - isFrr 0, outIf 0, NextHop 0.0.0.0 label - 128843 global Instance 0 is
Leaf node
----------------------------------------------------------------------
Primary NHLFE => outLabel - 0 and NextHop - 0.0.0.0, outIf 0 (0)
Port(NONE) NhIdx 0, ProtNhIdx 0, NumS2L 1
ProtectInstance - 0, ProtectGroup 0
POP
No Backup NHLFEs for this Ltn entry
Mid List : 3428 numS2Ls - 1 (Primary MID),
NextHop [2] =>
Key: Nhop - isFrr 0, outIf 3, NextHop 10.10.13.2 label - 128806 global Instance -
48747
----------------------------------------------------------------------
Primary NHLFE => outLabel - 128806 and NextHop - 10.10.13.2, outIf 3 (126)
Port(9/1/1) NhIdx 4322, ProtNhIdx 2275, NumS2L 1
ProtectInstance - 1, ProtectGroup 126
SWAP
Backup NHLFE => outLabel - 130223 and NextHop - 10.10.3.2, outIf 5 (124)
Port(9/2/3) outPushLabel 128806, NhIdx 5469, ProtNhIdx 0, NumS2L 1
Mid List : 3428 numS2Ls - 1 (Primary MID),
NextHop [3] =>
Key: Nhop - isFrr 0, outIf 4, NextHop 10.10.2.2 label - 128836 global Instance -
48974
----------------------------------------------------------------------
Primary NHLFE => outLabel - 128836 and NextHop - 10.10.2.2, outIf 4 (125)
Port(lag-1) NhIdx 4292, ProtNhIdx 2245, NumS2L 2
ProtectInstance - 1, ProtectGroup 125
SWAP
Backup NHLFE => outLabel - 130223 and NextHop - 10.10.3.2, outIf 5 (124)
Port(9/2/3) outPushLabel 128836, NhIdx 5659, ProtNhIdx 0, NumS2L 2
Mid List : 3428 numS2Ls - 1 (Primary MID), 3471 numS2Ls - 1 (Backup MID),
S2L [1] Key: endPoint to 10.2.2.2 subGroupId - 1 subGroupOrigId - 10.4.4.4
S2L [2] Key: endPoint to 10.3.3.3 subGroupId - 2 subGroupOrigId - 10.4.4.4
S2L [3] Key: endPoint to 10.10.2.2 subGroupId - 3 subGroupOrigId - 10.4.4.4
S2L [4] Key: endPoint to 10.10.13.2 subGroupId - 4 subGroupOrigId - 10.4.4.4
Total TeLspInfo Count : 1
telemetry
telemetry
Syntax
telemetry
Context
[Tree] (show>system telemetry)
Full Context
show system telemetry
Description
Commands in this context display telemetry information.
Platforms
7705 SAR Gen 2
telemetry
template
template
Syntax
template [name]
Context
[Tree] (show>router>route-next-hop-policy template)
Full Context
show router route-next-hop-policy template
Description
This command displays route next-hop policy templates.
Parameters
- name
-
Specifies the template name, up to 32 characters.
Platforms
7705 SAR Gen 2
Output
The following output is an example of route next-hop policy template information.
Output Example*A:Dut-C# show router route-next-hop-policy template
===============================================================================
Route next-hop templates
===============================================================================
Template Description
-------------------------------------------------------------------------------
"myTemplate1" "myNextHopPolicy1"
"myTemplate2" "myNextHopPolicy2"
"myTemplate3" "myNextHopPolicy3"
-------------------------------------------------------------------------------
Templates : 3
===============================================================================
*A:Dut-C#
*A:Dut-C# show router route-next-hop-policy template "myTemplate2"
template "myTemplate2"
description "myNextHopPolicy2"
nh-type tunnel
exit
*A:Dut-C#
template
Syntax
template
Context
[Tree] (show>service template)
Full Context
show service template
Description
Commands in this context display service template information.
Platforms
7705 SAR Gen 2
test-event
test-event
Syntax
test-event [custom-text custom-text]
Context
[Tree] (tools>perform>log test-event)
Full Context
tools perform log test-event
Description
This command generates a test log event.
Parameters
- custom-text
-
Specifies custom text, up to 800 characters. Embedded double quotes are not supported in the custom-text string. There is no special treatment for \n or \r sequences. For example, \n in the custom-text string is output as the backslash character (\) and “n” (the equivalent of ASCII 0x5C and 0x6e).
Platforms
7705 SAR Gen 2
test-oam
test-oam
Syntax
test-oam
Context
[Tree] (show test-oam)
Full Context
show test-oam
Description
Commands in this context display test oam information.
Platforms
7705 SAR Gen 2
test-oam
Syntax
test-oam
Context
[Tree] (clear test-oam)
Full Context
clear test-oam
Description
Commands in this context clear test oam information.
Platforms
7705 SAR Gen 2
test-oam
Syntax
test-oam
Context
[Tree] (tools>dump test-oam)
Full Context
tools dump test-oam
Description
Commands in this context dump test oam information.
Platforms
7705 SAR Gen 2
test-oam
Syntax
test-oam
Context
[Tree] (monitor test-oam)
Full Context
monitor test-oam
Description
Commands in this context display test oam information.
Platforms
7705 SAR Gen 2
tests
tests
Syntax
tests [session session-name] [test-id test-id] [test-type {dm | dmm | lmm | slm | twamp-light}]
Context
[Tree] (show>oam-pm tests)
Full Context
show oam-pm tests
Description
This command displays a list of OAM-PM test types and associated test IDs. The output provides an ordered list by type and ID to help locate available test IDs that may be configured within a specific type. Filters are available to refine the output to the operational need. Multiple filters can be included to further refine the output. The combination of the filters is an AND function. All filters must be true to provide tests output.
Parameters
- session-name
-
Filters output by session name, up to 32 characters.
- test-id
-
Filters output by test ID.
- test-type
-
Filters output by test type.
Platforms
7705 SAR Gen 2
Output
The following output is an example of OAM-PM test type and test ID information. Output fields: OAM-PM tests describes test fields.
Output Exampleshow oam-pm tests
===============================================================================
OAM Performance Monitoring Test Summary
===============================================================================
Test
Type Test ID Admin Oper TxE Sess Type Session
-------------------------------------------------------------------------------
DM 5 Up Up no proactive mpls-dm-rsvp-PE-2-PE-1
DM 6 Up Up no proactive mpls-dm-rsvp-PE-2-PE-1-hop1
DM 100 Up Up no proactive mpls-dm-static-PE-2-PE-1
DM 101 Up Up no proactive mpls-dm-static-PE-2-PE-1-hop1
DM 200 Up Up no proactive mpls-dm-rsvp-auto-PE-2-PE-1
DMM 1 Up Up no proactive eth-port-int-PE-2-P-3
DMM 2 Up Up no proactive eth-circuit-service-epipe1
DMM 3 Up Up no proactive eth-circuit-service-epipe1-2
DMM 4 Up Up no proactive eth-circuit-service-vpls3
DMM 222 Up Up no proactive eth-circuit-service-epipe1-3
LMM 2 Up Up no proactive eth-circuit-service-epipe1
SLM 2 Up Up no proactive eth-circuit-service-epipe1
SLM 3 Up Up no proactive eth-circuit-service-epipe1-2
SLM 4 Up Up no proactive eth-circuit-service-vpls3
SLM 222 Up Up no proactive eth-circuit-service-epipe1-3
SLM 777 Down Down no proactive eth-test-nbn-ireland
TWL 1 Up Up no proactive ip-rtr-int-PE-1-PE-2
TWL 2 Up Up yes proactive ip-circuit-service-vprn2
TWL 3 Up Up no proactive ip-lpb101-RSVP-LSP
TWL 4 Up Up no proactive ip-lpb111-SR-TE-LSP
TWL 100 Up Up no proactive ip-rtr-telemetry-streaming
TWL 999 Up Up no proactive twamp-l-directed
-------------------------------------------------------------------------------
No. of OAM-PM Tests: 22
===============================================================================
TxE=yes: detected an error on the test's most recent packet transmit attempt.
show oam-pm tests session mpls-dm-rsvp-PE-2-PE-1
===============================================================================
OAM Performance Monitoring Test Summary
===============================================================================
Test
Type Test ID Admin Oper TxE Sess Type Session
-------------------------------------------------------------------------------
DM 5 Up Up no proactive mpls-dm-rsvp-PE-2-PE-1
-------------------------------------------------------------------------------
No. of OAM-PM Tests: 1
===============================================================================
TxE=yes: detected an error on the test's most recent packet transmit attempt.
show oam-pm tests test-id 4
===============================================================================
OAM Performance Monitoring Test Summary
===============================================================================
Test
Type Test ID Admin Oper TxE Sess Type Session
-------------------------------------------------------------------------------
DMM 4 Up Up no proactive eth-circuit-service-vpls3
SLM 4 Up Up no proactive eth-circuit-service-vpls3
TWL 4 Up Up no proactive ip-lpb111-SR-TE-LSP
-------------------------------------------------------------------------------
No. of OAM-PM Tests: 3
===============================================================================
TxE=yes: detected an error on the test's most recent packet transmit attempt.
show oam-pm tests test-type twamp-light
===============================================================================
OAM Performance Monitoring Test Summary
===============================================================================
Test
Type Test ID Admin Oper TxE Sess Type Session
-------------------------------------------------------------------------------
TWL 1 Up Up no proactive ip-rtr-int-PE-1-PE-2
TWL 2 Up Up yes proactive ip-circuit-service-vprn2
TWL 3 Up Up no proactive ip-lpb101-RSVP-LSP
TWL 4 Up Up no proactive ip-lpb111-SR-TE-LSP
TWL 100 Up Up no proactive ip-rtr-telemetry-streaming
TWL 999 Up Up no proactive twamp-l-directed
-------------------------------------------------------------------------------
No. of OAM-PM Tests: 6
===============================================================================
TxE=yes: detected an error on the test's most recent packet transmit attempt.
|
Label |
Description |
|---|---|
|
Test Type |
The OAM-PM protocol specific test |
|
Test ID |
The numerical value, between 0 to 2147583647, that is assigned to the protocol specific test. The (auto) tag appears if the test ID was automatically assigned. |
|
Admin |
The administrative state of the test Up – The test has been enabled by configuration Down – The test was not enabled by configuration |
|
Oper |
The operational state of the test Up – The test is administrative Up and currently transmitting, attempting to transmit packets, or ready to transmit packets Down – The test is administratively down or an oam-pm session has been configured with session-type on-demand and has not been enabled using the global CLI oam oam-pm session start command |
|
TxE |
no – There has been no error detected yes – The has been an error detected |
|
Sess Type |
The session type, proactive and on-demand |
|
Session |
The name of the session, up to 32 characters |
thresholds
thresholds
Syntax
thresholds
Context
[Tree] (show>system thresholds)
Full Context
show system thresholds
Description
This command displays system monitoring thresholds. The Threshold Events Log table will keep only the last 201 entries.
Platforms
7705 SAR Gen 2
Output
The following output is an example of system threshold information, and Output fields: system thresholds describes the output fields.
Output ExampleA:bkvm3# show system thresholds
=================================================================
Threshold Alarms
=================================================================
Variable: tmnxCpmFlashUsed.1.10.1
Alarm Id : 1 Last Value : 3192120
Rising Event Id : 1 Threshold : 10
Falling Event Id : 0 Threshold : 0
Sample Interval : 1 SampleType : absolute
Startup Alarm : either Owner : TiMOS CLI
Variable: tmnxCpmFlashUsed.1.10.2
Alarm Id : 2 Last Value : 0
Rising Event Id : 2 Threshold : 20
Falling Event Id : 3 Threshold : 30
Sample Interval : 2 SampleType : absolute
Startup Alarm : either Owner : TiMOS CLI
Variable: tmnxCpmFlashPercentageUsed.1.10.1
Alarm Id : 3 Last Value : 19
Rising Event Id : 4 Threshold : 30
Falling Event Id : 0 Threshold : 0
Sample Interval : 3 SampleType : absolute
Startup Alarm : either Owner : TiMOS CLI
Variable: tmnxCpmFlashPercentageUsed.1.10.2
Alarm Id : 4 Last Value : 0
Rising Event Id : 5 Threshold : 40
Falling Event Id : 6 Threshold : 50
Sample Interval : 4 SampleType : absolute
Startup Alarm : either Owner : TiMOS CLI
=================================================================
=================================================================
Threshold Events
=================================================================
Description: TiMOS CLI - cflash capacity alarm rising event
using percentages
Event Id : 1 Last Sent : 07/23/2015 18:15:46
Action Type : both Owner : TiMOS CLI
Description: TiMOS CLI - cflash capacity warning rising event
Event Id : 2 Last Sent : never
Action Type : both Owner : TiMOS CLI
Description: TiMOS CLI - cflash capacity warning falling event
Event Id : 3 Last Sent : 07/23/2015 18:15:46
Action Type : both Owner : TiMOS CLI
Description: TiMOS CLI - cflash capacity warning rising event
using percentages
Event Id : 4 Last Sent : never
Action Type : both Owner : TiMOS CLI
Description: TiMOS CLI - cflash capacity alarm rising event
using percentages
Event Id : 5 Last Sent : never
Action Type : both Owner : TiMOS CLI
Description: TiMOS CLI - cflash capacity alarm falling event
using percentages
Event Id : 6 Last Sent : 07/23/2015 18:15:46
Action Type : both Owner : TiMOS CLI
=================================================================
=================================================================
Threshold Events Log
=================================================================
Description : TiMOS CLI - cflash capacity alarm rising
event using percentages : value=3192120,
>=10 : alarm-index 1, event-index 1 alarm-
variable OID tmnxCpmFlashUsed.1.10.1
Event Id : 1 Time Sent : 07/23/2015 18:15:46
Description : TiMOS CLI - cflash capacity warning falling
event : value=0, <=30 : alarm-index 2, event-
index 3 alarm-variable OID tmnxCpmFlashUsed.
1.10.2
Event Id : 3 Time Sent : 07/23/2015 18:15:46
Description : TiMOS CLI - cflash capacity alarm falling
event using percentages : value=0, <=50 :
alarm-index 4, event-index 6 alarm-variable
OID tmnxCpmFlashPercentageUsed.1.10.2
Event Id : 6 Time Sent : 07/23/2015 18:15:46
=================================================================
|
Label |
Description |
|---|---|
|
Variable |
Displays the variable OID. |
|
Alarm Id |
Displays the numerical identifier for the alarm. |
|
Last Value |
Displays the last threshold value. |
|
Rising Event Id |
Displays the identifier of the RMON rising event. |
|
Threshold |
Displays the identifier of the RMON rising threshold. |
|
Falling Event Id |
Displays the identifier of the RMON falling event. |
|
Threshold |
Displays the identifier of the RMON falling threshold. |
|
Sample Interval |
Displays the polling interval, in seconds, over which the data is sampled and compared with the rising and falling thresholds. |
|
SampleType |
Displays the method of sampling the selected variable and calculating the value to be compared against the thresholds. |
|
Startup Alarm |
Displays the alarm that may be sent when this alarm is first created. |
|
Owner |
Displays the owner of this alarm. |
|
Description |
Displays the event cause. |
|
Event Id |
Displays the identifier of the threshold event. |
|
Last Sent |
Displays the date and time the alarm was sent. |
|
Action Type |
log — An entry is made in the RMON-MIB log table for each event occurrence. trap — An SR OS logger event is generated. The SR OS logger utility then distributes the notification of this event to its configured log destinations, which may be CONSOLE, telnet session, memory log, cflash file, syslog, or SNMP trap destinations logs. both — Both an entry in the RMON-MIB logTable and an SR OS logger event are generated. none — No action is taken. |
|
Owner |
Displays the owner of the event. |
throughput
throughput
Syntax
throughput tunnel-type tunnel-type system [ history-stats-in-count count] [history-stats-in-min minutes] [current]
throughput tunnel-type tunnel-type type type system [history-stats-in-count count] [history-stats-in-min minutes] [ current] [show-oid]
throughput tunnel-type tunnel-type isa mda [history-stats-in-count count] [ history-stats-in-min minutes] [current]
throughput tunnel-type tunnel-type type type isa mda [history-stats-in-count count] [history-stats-in-min minutes] [current] [show-oid]
throughput tunnel-type tunnel-type type type isa mda [history-stats-in-count count] [history-stats-in-min minutes] [current] [show-oid] esa-vm esa-id/vm-id
throughput tunnel-type tunnel-type tunnel-group tunnel-group-id [history-stats-in-count count] [history-stats-in-min minutes] [ current]
throughput tunnel-type tunnel-type [history-stats-in-count count] [history-stats-in-min minutes] [current] esa-vm esa-id/vm-id
throughput tunnel-type tunnel-type type type tunnel-group tunnel-group-id [ history-stats-in-count count] [history-stats-in-min minutes] [current] [ show-oid]
Context
[Tree] (show>isa>stats>ip-tunnel-stats throughput)
Full Context
show isa statistics ip-tunnel-stats throughput
Description
This command displays throughput statistics for the specified tunnel types and scope.
The following scopes are supported:
-
per ISA
-
per tunnel group
-
per system
The statistics include the following information:
-
total packet per second (encapsulated and decapsulated)
-
encapsulated packets per second
-
decapsulated packets per second
-
total bits per second (encapsulated and decapsulated) in Mibits/s
-
encapsulated bits per second in Mibits/s
-
decapsulated bits per second in Mibits/s
Syntax notes:
-
1 Mibits/s, equals 220 bits per second
-
The bits per second counter is an integer which is a rounded down value from the measured value.
The system collects stats every 10 minutes for last the 24 hour per the wall clock. A current value is also included in the output. The value is an average derived value of 10 minutes. The start time indicates the starting timestamp of measurement. The sampling duration indicates the duration of measurement.
Parameters
- tunnel-type
-
Displays the type of tunnel.
- mda
-
Displays the ISA ID.
- tunnel-group-id
-
Displays the ID of the tunnel group.
- type
-
Displays the type of breakdown counter.
- count
-
Displays the number historical values to be included in the output.
- minutes
-
Displays the number of minutes of historical values to be included in output.
- current
-
Displays only the current values.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
- show-oid
-
Specifies to include the SNMP object identifier (OID) and the instance ID for the latest historical value in the output.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show isa statistics throughput ip-tunnel-stats command.
Output Exampleshow>isa>stats>ip-tunnel-stats# throughput tunnel-type gre tunnel-group 1
===============================================================================
STATISTICS FOR ISA TUNNEL GROUP 1
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
ENCAPSULATED GRE TUNNEL THROUGHPUT (PKTS/SEC)
1 (CURRENT) 62 2017/05/22 21:50:00 MIN 6 SEC 24
2 62 2017/05/22 21:40:00 MIN 10
3 62 2017/05/22 21:30:00 MIN 10
4 62 2017/05/22 21:20:00 MIN 10
5 62 2017/05/22 21:10:00 MIN 10
6 87 2017/05/22 21:00:00 MIN 10
7 18 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
20 0 2017/05/22 18:40:00 MIN 10
21 0 2017/05/22 18:30:00 MIN 10
22 0 2017/05/22 18:20:00 MIN 10
23 0 2017/05/22 18:10:00 MIN 10
24 0 2017/05/22 18:00:00 MIN 10
25 0 2017/05/22 17:50:00 MIN 10
26 0 2017/05/22 17:45:12 MIN 4 SEC 49
DECAPSULATED GRE TUNNEL THROUGHPUT (PKTS/SEC)
1 (CURRENT) 249 2017/05/22 21:50:00 MIN 6 SEC 24
2 249 2017/05/22 21:40:00 MIN 10
3 249 2017/05/22 21:30:00 MIN 10
4 249 2017/05/22 21:20:00 MIN 10
5 249 2017/05/22 21:10:00 MIN 10
6 145 2017/05/22 21:00:00 MIN 10
7 18 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
20 0 2017/05/22 18:40:00 MIN 10
21 0 2017/05/22 18:30:00 MIN 10
22 0 2017/05/22 18:20:00 MIN 10
23 0 2017/05/22 18:10:00 MIN 10
24 0 2017/05/22 18:00:00 MIN 10
25 0 2017/05/22 17:50:00 MIN 10
26 0 2017/05/22 17:45:12 MIN 4 SEC 49
ENCAPSULATED AND DECAPSULATED GRE TUNNEL THROUGHPUT (PKTS/SEC)
1 (CURRENT) 312 2017/05/22 21:50:00 MIN 6 SEC 24
2 311 2017/05/22 21:40:00 MIN 10
3 311 2017/05/22 21:30:00 MIN 10
4 311 2017/05/22 21:20:00 MIN 10
5 311 2017/05/22 21:10:00 MIN 10
6 233 2017/05/22 21:00:00 MIN 10
7 37 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
4 2 2017/05/22 21:20:00 MIN 10
5 2 2017/05/22 21:10:00 MIN 10
6 0 2017/05/22 21:00:00 MIN 10
7 0 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
20 0 2017/05/22 18:40:00 MIN 10
21 0 2017/05/22 18:30:00 MIN 10
22 0 2017/05/22 18:20:00 MIN 10
23 0 2017/05/22 18:10:00 MIN 10
24 0 2017/05/22 18:00:00 MIN 10
25 0 2017/05/22 17:50:00 MIN 10
26 0 2017/05/22 17:45:12 MIN 4 SEC 49
DECAPSULATED GRE TUNNEL THROUGHPUT (MIBIT/SEC)
1 (CURRENT) 2 2017/05/22 21:50:00 MIN 6 SEC 24
2 2 2017/05/22 21:40:00 MIN 10
3 2 2017/05/22 21:30:00 MIN 10
4 2 2017/05/22 21:20:00 MIN 10
5 2 2017/05/22 21:10:00 MIN 10
6 0 2017/05/22 21:00:00 MIN 10
7 0 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
20 0 2017/05/22 18:40:00 MIN 10
21 0 2017/05/22 18:30:00 MIN 10
22 0 2017/05/22 18:20:00 MIN 10
23 0 2017/05/22 18:10:00 MIN 10
24 0 2017/05/22 18:00:00 MIN 10
25 0 2017/05/22 17:50:00 MIN 10
26 0 2017/05/22 17:45:12 MIN 4 SEC 49
ENCAPSULATED AND DECAPSULATED GRE TUNNEL THROUGHPUT (MIBIT/SEC)
1 (CURRENT) 4 2017/05/22 21:50:00 MIN 6 SEC 24
2 4 2017/05/22 21:40:00 MIN 10
3 4 2017/05/22 21:30:00 MIN 10
4 4 2017/05/22 21:20:00 MIN 10
5 4 2017/05/22 21:10:00 MIN 10
6 1 2017/05/22 21:00:00 MIN 10
7 0 2017/05/22 20:50:00 MIN 10
8 0 2017/05/22 20:40:00 MIN 10
9 0 2017/05/22 20:30:00 MIN 10
10 0 2017/05/22 20:20:00 MIN 10
11 0 2017/05/22 20:10:00 MIN 10
12 0 2017/05/22 20:00:00 MIN 10
13 0 2017/05/22 19:50:00 MIN 10
14 0 2017/05/22 19:40:00 MIN 10
15 0 2017/05/22 19:30:00 MIN 10
16 0 2017/05/22 19:20:00 MIN 10
17 0 2017/05/22 19:10:00 MIN 10
18 0 2017/05/22 19:00:00 MIN 10
19 0 2017/05/22 18:50:00 MIN 10
20 0 2017/05/22 18:40:00 MIN 10
21 0 2017/05/22 18:30:00 MIN 10
22 0 2017/05/22 18:20:00 MIN 10
23 0 2017/05/22 18:10:00 MIN 10
24 0 2017/05/22 18:00:00 MIN 10
25 0 2017/05/22 17:50:00 MIN 10
26 0 2017/05/22 17:45:12 MIN 4 SEC 49
-------------------------------------------------------------------------------
NO. OF ENTRIES: 156
===============================================================================
throughput
Syntax
throughput gateway name [history-stats-in-count count] [history-stats-in-min min] [current]
throughput [history-stats-in-count count] [history-stats-in-min min] [ current] esa-vm esa-id/vm-id
throughput type type gateway name [history-stats-in-count count] [ history-stats-in-min min] [current] [show-oid]
throughput type type [history-stats-in-count count] [history-stats-in-min min] [current] [ show-oid] esa-vm esa-id/vm-id
throughput isa mda [history-stats-in-count count] [history-stats-in-min min] [current]
throughput type type isa mda [history-stats-in-count count] [ history-stats-in-min min] [current] [show-oid]
throughput system [history-stats-in-count count] [history-stats-in-min min] [ current]
throughput type type system [history-stats-in-count count] [history-stats-in-min min] [current] [ show-oid]
throughput tunnel-group tunnel-group-id [ history-stats-in-count count] [history-stats-in-min min] [current]
throughput type type tunnel-group tunnel-group-id [history-stats-in-count count] [ history-stats-in-min min] [current] [show-oid]
Context
[Tree] (show>isa>stats>ipsec-stats throughput)
Full Context
show isa statistics ipsec-stats throughput
Description
This command displays IPsec throughput statistics for the specified scope.
The system collects statistics every 10 minutes for the last 24 hours per wall clock. A current value is included in the output.
This command supports following the scopes:
-
per system
-
per ISA
-
per tunnel group
-
per IPsec GW
The statistics include:
-
The number of bidirectional encrypted and decrypted per second
-
The number of encrypted packets per second
-
The number of decrypted packets per second
-
The number of bidirectional (encrypted and decrypted) bits per second (in Mibits/s)
-
The number of bidirectional encrypted bits per second (in Mibits/s)
-
The number of bidirectional decrypted bits per second (in Mibits/s)
Syntax notes:
-
1 Mibits/s equals 220 bits per second
-
The bits per second counter is an integer, which is a value rounded down from the measured value.
Parameters
- mda
-
Displays information about the specified ISA.
- tunnel-group-id
-
Displays information about the specified tunnel group ID.
- name
-
Displays information about the name of the IPsec GW up to 32 characters in length.
- count
-
Displays information about the number of historical values to be included in the output.
- min
-
Displays information about the number of minutes of historical values to be included in output.
- current
-
Displays information about the current value.
- show-oid
-
Displays information about include SNMP OID and instance ID for the latest historical value in the output, for a specified type of counter.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show isa statistics ipsec-stats throughput command.
Output Exampleshow>isa>stats>ipsec-stats# throughput tunnel-group 1
===============================================================================
STATISTICS FOR ISA TUNNEL GROUP 1
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
ENCRYPTED IPSEC TRAFFIC THROUGHPUT (PKTS/SEC)
1 (CURRENT) 99 2017/05/23 22:00:00 MIN 7 SEC 51
2 72 2017/05/23 21:50:00 MIN 10
3 0 2017/05/23 21:40:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
13 0 2017/05/23 20:00:00 MIN 10
14 0 2017/05/23 19:50:00 MIN 10
15 0 2017/05/23 19:40:00 MIN 10
16 0 2017/05/23 19:30:00 MIN 10
17 0 2017/05/23 19:20:00 MIN 10
18 0 2017/05/23 19:10:00 MIN 10
19 0 2017/05/23 19:00:00 MIN 10
20 0 2017/05/23 18:50:00 MIN 10
21 0 2017/05/23 18:40:00 MIN 10
22 0 2017/05/23 18:30:00 MIN 10
23 0 2017/05/23 18:20:00 MIN 10
24 0 2017/05/23 18:10:00 MIN 10
25 0 2017/05/23 18:00:00 MIN 10
26 0 2017/05/23 17:50:48 MIN 9 SEC 12
DECRYPTED IPSEC TRAFFIC THROUGHPUT (PKTS/SEC)
1 (CURRENT) 99 2017/05/23 22:00:00 MIN 7 SEC 51
2 72 2017/05/23 21:50:00 MIN 10
3 0 2017/05/23 21:40:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
13 0 2017/05/23 20:00:00 MIN 10
14 0 2017/05/23 19:50:00 MIN 10
15 0 2017/05/23 19:40:00 MIN 10
16 0 2017/05/23 19:30:00 MIN 10
17 0 2017/05/23 19:20:00 MIN 10
18 0 2017/05/23 19:10:00 MIN 10
19 0 2017/05/23 19:00:00 MIN 10
20 0 2017/05/23 18:50:00 MIN 10
21 0 2017/05/23 18:40:00 MIN 10
22 0 2017/05/23 18:30:00 MIN 10
23 0 2017/05/23 18:20:00 MIN 10
24 0 2017/05/23 18:10:00 MIN 10
25 0 2017/05/23 18:00:00 MIN 10
26 0 2017/05/23 17:50:48 MIN 9 SEC 12
ENCRYPTED AND DECRYPTED IPSEC TRAFFIC THROUGHPUT (PKTS/SEC)
1 (CURRENT) 199 2017/05/23 22:00:00 MIN 7 SEC 51
2 145 2017/05/23 21:50:00 MIN 10
3 0 2017/05/23 21:40:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
13 0 2017/05/23 20:00:00 MIN 10
14 0 2017/05/23 19:50:00 MIN 10
15 0 2017/05/23 19:40:00 MIN 10
16 0 2017/05/23 19:30:00 MIN 10
17 0 2017/05/23 19:20:00 MIN 10
18 0 2017/05/23 19:10:00 MIN 10
19 0 2017/05/23 19:00:00 MIN 10
20 0 2017/05/23 18:50:00 MIN 10
21 0 2017/05/23 18:40:00 MIN 10
22 0 2017/05/23 18:30:00 MIN 10
23 0 2017/05/23 18:20:00 MIN 10
24 0 2017/05/23 18:10:00 MIN 10
25 0 2017/05/23 18:00:00 MIN 10
26 0 2017/05/23 17:50:48 MIN 9 SEC 12
DECRYPTED IPSEC TRAFFIC THROUGHPUT (MIBIT/SEC)
1 (CURRENT) 3 2017/05/23 22:00:00 MIN 7 SEC 51
2 2 2017/05/23 21:50:00 MIN 10
3 0 2017/05/23 21:40:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
13 0 2017/05/23 20:00:00 MIN 10
14 0 2017/05/23 19:50:00 MIN 10
15 0 2017/05/23 19:40:00 MIN 10
16 0 2017/05/23 19:30:00 MIN 10
17 0 2017/05/23 19:20:00 MIN 10
18 0 2017/05/23 19:10:00 MIN 10
19 0 2017/05/23 19:00:00 MIN 10
20 0 2017/05/23 18:50:00 MIN 10
21 0 2017/05/23 18:40:00 MIN 10
22 0 2017/05/23 18:30:00 MIN 10
23 0 2017/05/23 18:20:00 MIN 10
24 0 2017/05/23 18:10:00 MIN 10
25 0 2017/05/23 18:00:00 MIN 10
26 0 2017/05/23 17:50:48 MIN 9 SEC 12
ENCRYPTED AND DECRYPTED IPSEC TRAFFIC THROUGHPUT (MIBIT/SEC)
1 (CURRENT) 7 2017/05/23 22:00:00 MIN 7 SEC 51
2 5 2017/05/23 21:50:00 MIN 10
3 0 2017/05/23 21:40:00 MIN 10
4 0 2017/05/23 21:30:00 MIN 10
5 0 2017/05/23 21:20:00 MIN 10
6 0 2017/05/23 21:10:00 MIN 10
7 0 2017/05/23 21:00:00 MIN 10
8 0 2017/05/23 20:50:00 MIN 10
9 0 2017/05/23 20:40:00 MIN 10
10 0 2017/05/23 20:30:00 MIN 10
11 0 2017/05/23 20:20:00 MIN 10
12 0 2017/05/23 20:10:00 MIN 10
13 0 2017/05/23 20:00:00 MIN 10
14 0 2017/05/23 19:50:00 MIN 10
15 0 2017/05/23 19:40:00 MIN 10
16 0 2017/05/23 19:30:00 MIN 10
17 0 2017/05/23 19:20:00 MIN 10
18 0 2017/05/23 19:10:00 MIN 10
19 0 2017/05/23 19:00:00 MIN 10
20 0 2017/05/23 18:50:00 MIN 10
21 0 2017/05/23 18:40:00 MIN 10
22 0 2017/05/23 18:30:00 MIN 10
23 0 2017/05/23 18:20:00 MIN 10
24 0 2017/05/23 18:10:00 MIN 10
25 0 2017/05/23 18:00:00 MIN 10
26 0 2017/05/23 17:50:48 MIN 9 SEC 12
-------------------------------------------------------------------------------
NO. OF ENTRIES: 156
===============================================================================
show>isa>stats>ipsec-stats# throughput type bidir-bps isa 1/2 show-oid
-------------------------------------------------------------------------------
CURRENT STATISTIC INFO
-------------------------------------------------------------------------------
OID: TMNXIPSECISAHISTSTATSVALUE10.1.1.2.105.2
-------------------------------------------------------------------------------
===============================================================================
STATISTICS FOR ISA 1/2
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
ENCRYPTED AND DECRYPTED IPSEC TRAFFIC THROUGHPUT (MIBIT/SEC)
1 (CURRENT) 7 2017/05/23 22:10:00 MIN 1 SEC 9
2 7 2017/05/23 22:00:00 MIN 10
3 5 2017/05/23 21:50:00 MIN 10
4 0 2017/05/23 21:40:00 MIN 10
5 0 2017/05/23 21:30:00 MIN 10
6 0 2017/05/23 21:20:00 MIN 10
7 0 2017/05/23 21:10:00 MIN 10
8 0 2017/05/23 21:00:00 MIN 10
9 0 2017/05/23 20:50:00 MIN 10
10 0 2017/05/23 20:40:00 MIN 10
11 0 2017/05/23 20:30:00 MIN 10
12 0 2017/05/23 20:20:00 MIN 10
13 0 2017/05/23 20:10:00 MIN 10
14 0 2017/05/23 20:00:00 MIN 10
15 0 2017/05/23 19:50:00 MIN 10
16 0 2017/05/23 19:40:00 MIN 10
17 0 2017/05/23 19:30:00 MIN 10
18 0 2017/05/23 19:20:00 MIN 10
19 0 2017/05/23 19:10:00 MIN 10
20 0 2017/05/23 19:00:00 MIN 10
21 0 2017/05/23 18:50:00 MIN 10
22 0 2017/05/23 18:40:00 MIN 10
23 0 2017/05/23 18:30:00 MIN 10
24 0 2017/05/23 18:20:00 MIN 10
25 0 2017/05/23 18:10:00 MIN 10
26 0 2017/05/23 18:00:00 MIN 10
27 0 2017/05/23 17:50:48 MIN 9 SEC 12
-------------------------------------------------------------------------------
NO. OF ENTRIES: 27
===============================================================================
time
time
Syntax
time
Context
[Tree] (show>system time)
Full Context
show system time
Description
This command displays the system time and zone configuration parameters.
Platforms
7705 SAR Gen 2
Output
The following output is an example of system time information, and Output fields: system time describes the output fields.
Output ExampleA:ALA-1# show system time
===============================================================================
Date & Time
===============================================================================
Current Date & Time : 2006/05/05 23:03:13 DST Active : yes
Current Zone : PDT Offset from UTC : -7:00
-------------------------------------------------------------------------------
Non-DST Zone : PST Offset from UTC : -8:00
Zone type : standard
-------------------------------------------------------------------------------
DST Zone : PDT Offset from Non-DST : 01:00
Starts : first sunday in april 02:00
Ends : last sunday in october 02:00
============================================================================
A:ALA-1#
A:ALA-1# show system time (with no DST zone configured)
===============================================================================
Date & Time
===============================================================================
Current Date & Time : 2006/05/12 11:12:05 DST Active : no
Current Zone : APA Offset from UTC : -8:00
-------------------------------------------------------------------------------
Non-DST Zone : APA Offset from UTC : -8:00
Zone Type : non-standard
-------------------------------------------------------------------------------
No DST zone configured
===============================================================================
A:ALA-1#
|
Label |
Description |
|---|---|
|
Date & Time |
The system date and time using the current time zone. |
|
DST Active |
Yes — Daylight Savings Time is currently in effect. No — Daylight Savings Time is not currently in effect. |
|
Zone |
The zone names for the current zone, the non-DST zone, and the DST zone if configured. |
|
Current Time Zone |
Indicates the process currently controlling the system time. SNTP, NTP, PTP or NONE. |
|
Zone type |
Non-standard — The zone is user-defined. Standard — The zone is system defined. |
|
Offset from UTC |
The number of hours and minutes added to universal time for the zone, including the DST offset for a DST zone. |
|
Offset from Non-DST |
The number of hours (always 0 to 1) and minutes (0 to 59) added to the time at the beginning of Daylight Saving Time and subtracted at the end Daylight Saving Time. |
|
Starts |
The date and time Daylight Saving Time begins. |
|
Ends |
The date and time Daylight Saving Time ends. |
time
Syntax
time
Context
[Tree] (show time)
Full Context
show time
Description
This command displays the current day, date, time and time zone.
The time is displayed either in the local time zone or in UTC depending on the setting of the root level time-display command for the console session.
Platforms
7705 SAR Gen 2
Output
The following output is an example of time information.
Output ExampleA:ALA-49# show time
Tue Oct 31 12:17:15 GMT 2006
timers
timers
Syntax
timers [session ip-addr[label-space]]
Context
[Tree] (tools>dump>router>ldp timers)
Full Context
tools dump router ldp timers
Description
This command dumps information for LDP timers.
Platforms
7705 SAR Gen 2
tls
tls
Syntax
tls
Context
[Tree] (show>system>security tls)
Full Context
show system security tls
Description
Commands in this context display TLS-related information.
Platforms
7705 SAR Gen 2
topology
topology
Syntax
topology [ipv4-unicast | ipv6-unicast | ipv4-multicast | ipv6-multicast | mt mt-id-number] [ lfa] [detail] [flex-algo {flex-algo-id | all}]
Context
[Tree] (show>router>isis topology)
Full Context
show router isis topology
Description
This command shows IS-IS topology information.
Parameters
- ipv4-unicast
-
Displays IPv4 unicast parameters.
- ipv6-unicast
-
Displays IPv6 unicast parameters.
- ipv4-multicast
-
Displays IPv4 multicast parameters.
- ipv6-multicast
-
Displays IPv6 multicast parameters.
- mt mt-id-number
-
Displays multi-topology parameters.
- lfa
-
Displays loop free alternative (LFA) information. This information corresponds to the backup next hops for IP links and nodes written in RTM by the base LFA feature.
- detail
-
Displays detailed topology information.
- flex-algo flex-algo-id
-
Displays information about the specified algorithm only based on the flex-algo-id filter.
- all
-
Displays topology information for all the flexible algorithms.
Platforms
7705 SAR Gen 2
Output
The following output is an example of router IS-IS topology output, and Output fields: IS-IS topology describes the output fields.
Output Example*A:Dut-A# show router isis topology
===============================================================================
Rtr Base ISIS Instance 0 Topology Table
===============================================================================
Node Interface Nexthop
-------------------------------------------------------------------------------
IS-IS IP paths (MT-ID 0), Level 1
-------------------------------------------------------------------------------
Dut-B.00 ip-3FFE::A0A:101 Dut-B
Dut-B.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.00 ip-3FFE::A0A:101 Dut-B
Dut-CA.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.02 ip-3FFE::A0A:101 Dut-B
Dut-CA.05 ip-3FFE::A0A:101 Dut-B
Dut-DA.00 ip-3FFE::A0A:101 Dut-B
Dut-DA.01 ip-3FFE::A0A:101 Dut-B
Dut-E.00 ip-3FFE::A0A:101 Dut-B
Dut-F.00 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.01 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.02 ies-1-3FFE::A0A:1501 Dut-F
-------------------------------------------------------------------------------
IS-IS IPv6 paths (MT-ID 2), Level 1
-------------------------------------------------------------------------------
Dut-B.00 ip-3FFE::A0A:101 Dut-B
Dut-B.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.00 ip-3FFE::A0A:101 Dut-B
Dut-CA.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.02 ip-3FFE::A0A:101 Dut-B
Dut-CA.05 ip-3FFE::A0A:101 Dut-B
Dut-DA.00 ip-3FFE::A0A:101 Dut-B
Dut-DA.01 ip-3FFE::A0A:101 Dut-B
Dut-E.00 ip-3FFE::A0A:101 Dut-B
Dut-F.00 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.01 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.02 ies-1-3FFE::A0A:1501 Dut-F
-------------------------------------------------------------------------------
IS-IS IP paths (MT-ID 0), Level 2
-------------------------------------------------------------------------------
Dut-B.00 ip-3FFE::A0A:101 Dut-B
Dut-B.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.00 ip-3FFE::A0A:101 Dut-B
Dut-CA.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.02 ip-3FFE::A0A:101 Dut-B
Dut-CA.05 ip-3FFE::A0A:101 Dut-B
Dut-DA.00 ip-3FFE::A0A:101 Dut-B
Dut-DA.01 ip-3FFE::A0A:101 Dut-B
Dut-E.00 ip-3FFE::A0A:101 Dut-B
Dut-F.00 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.01 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.02 ies-1-3FFE::A0A:1501 Dut-F
-------------------------------------------------------------------------------
IS-IS IPv6 paths (MT-ID 2), Level 2
-------------------------------------------------------------------------------
Dut-B.00 ip-3FFE::A0A:101 Dut-B
Dut-B.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.00 ip-3FFE::A0A:101 Dut-B
Dut-CA.01 ip-3FFE::A0A:101 Dut-B
Dut-CA.02 ip-3FFE::A0A:101 Dut-B
Dut-CA.05 ip-3FFE::A0A:101 Dut-B
Dut-DA.00 ip-3FFE::A0A:101 Dut-B
Dut-DA.01 ip-3FFE::A0A:101 Dut-B
Dut-E.00 ip-3FFE::A0A:101 Dut-B
Dut-F.00 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.01 ies-1-3FFE::A0A:1501 Dut-F
Dut-F.02 ies-1-3FFE::A0A:1501 Dut-F
===============================================================================
*A:Dut-A#
A:Dut-A# show router isis 0 topology
===============================================================================
Rtr Base ISIS Instance 0 Topology Table
===============================================================================
Node Interface Nexthop
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
IS-IS IP paths (MT-ID 0), Level 2
-------------------------------------------------------------------------------
Dut-B.00 To_B Dut-B
Dut-C.00 To_C Dut-C
===============================================================================
A:Dut-A#
A:Dut-A#
A:Dut-A# show router isis 0 topology flex-algo 128
===============================================================================
Rtr Base ISIS Instance 0 Flex-Algo 128 Topology Table
===============================================================================
Node Interface Nexthop
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
IS-IS IP paths (MT-ID 0), Level 2
-------------------------------------------------------------------------------
Dut-B.00 To_C Dut-C
Dut-C.00 To_C Dut-C
===============================================================================
|
Label |
Description |
|---|---|
|
Node |
Displays the IP address. |
|
Interface |
Displays the interface name. |
|
Nexthop |
Displays the nexthop IP address. |
|
LFA Interface |
Displays the LFA interface name. |
|
LFA Nexthop |
Displays the LFA nexthop IP address. |
traffic-forward
traffic-forward
Syntax
traffic-forward tunnel-type tunnel-type [ type type] isa mda
traffic-forward tunnel-type tunnel-type [ type type] esa-vm esa-id/vm-id
Context
[Tree] (show>isa>stats>ip-tunnel-stats traffic-forward)
Full Context
show isa statistics ip-tunnel-stats traffic-forward
Description
This command displays traffic forward statistics for the specified tunnel-type on the specified ISA.
The statistics includes the following information:
-
The number of bidirectional (encapsulated and decapsulated) packets
-
The number of encapsulated packets
-
The number of decapsulated packets
-
The number of bidirectional (encapsulated and decapsulated) kilobytes
-
The number of kilobytes for encapsulated traffic
-
The number of kilobytes for decapsulated traffic
In the output, 1 kilobyte equals 210 bytes.
Parameters
- tunnel-type
-
Displays the type of the tunnel.
- mda
-
Displays the ISA ID.
- type
-
Displays the type of breakdown counter.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show router statistics ip-tunnel-stats traffic-forward command.
Output Exampleshow>isa>stats>ip-tunnel-stats# traffic-forward tunnel-type gre isa 1/2
===============================================================================
STATISTICS FOR ISA 1/2
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
NUMBER OF ENCAPED GRE TUNNEL PACKETS
1 (CURRENT) 367,474 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
NUMBER OF DECAPED GRE TUNNEL PACKETS [0/1874]
1 (CURRENT) 1,310,402 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
NUMBER OF ENCAPED AND DECAPED GRE TUNNEL PACKETS
1 (CURRENT) 1,677,876 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
NUMBER OF KIBIBYTES IN THE ENCAPED GRE TUNNEL PACKETS
1 (CURRENT) 1,544,351 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
NUMBER OF KIBIBYTES IN THE DECAPED GRE TUNNEL PACKETS
1 (CURRENT) 1,573,014 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
NUMBER OF KIBIBYTES IN THE ENCAPED AND DECAPED GRE TUNNEL PACKETS
1 (CURRENT) 3,117,365 2017/05/22 17:45:12 HRS 4 MIN 45 SEC 46
-------------------------------------------------------------------------------
NO. OF ENTRIES: 6
===============================================================================
traffic-forward
Syntax
traffic-forward [type type] esa-vm esa-id/vm-id
traffic-forward [type type] gateway name
traffic-forward [type type] isa mda
traffic-forward [type type] gateway name dynamic-tunnel ip-address:port
traffic-forward [type type] tunnel ipsec-tunnel-name
Context
[Tree] (show>isa>stats>ipsec-stats traffic-forward)
Full Context
show isa statistics ipsec-stats traffic-forward
Description
This command displays traffic forward statistics of the specified scope.
This command supports following scopes:
-
per system
-
per ISA
-
per tunnel group
-
per IPsec GW
The statistics include:
-
The number of bidirectional encrypted and decrypted packets
-
The number of encrypted packets
-
The number of decrypted packets per second
-
The number of bidirectional (encrypted and decrypted) in kilobytes
-
The number of bidirectional encrypted bits in kilobytes
-
The number of bidirectional decrypted bits in kilobytes
1 kilobyte equals 210 bytes
The start time indicates the starting timestamp of the measurement. The sampling duration indicates the duration of the measurement.
Parameters
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
- name
-
Displays information about the name of the IPsec GW up to 32 characters in length.
- mda
-
Displays information about the specified ISA.
- tunnel-group-id
-
Displays information about the specified tunnel group ID.
- ip-address:port
-
Displays information about the IP address and port of the peer for dynamic tunneling.
- ipsec-tunnel-name
-
Specifies the name of the static LAN-to-LAN tunnel up to 32 characters in length.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show isa stats ipsec-stats traffic forward isa command.
Output Exampleshow>isa>stats>ipsec-stats# traffic-forward isa 1/2
===============================================================================
STATISTICS FOR ISA 1/2
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
NUMBER OF ENCRYPTED IPSEC PACKETS
1 (CURRENT) 770,881 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
NUMBER OF DECRYPTED IPSEC PACKETS
1 (CURRENT) 770,881 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
NUMBER OF ENCRYPTED AND DECRYPTED IPSEC PACKETS
1 (CURRENT) 1,541,762 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
NUMBER OF KIBIBYTES IN THE ENCRYPTED IPSEC PACKETS
1 (CURRENT) 3,785,141 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
NUMBER OF KIBIBYTES IN THE DECRYPTED IPSEC PACKETS
1 (CURRENT) 3,785,141 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
NUMBER OF KIBIBYTES IN THE ENCRYPTED AND DECRYPTED IPSEC PACKETS
1 (CURRENT) 7,570,282 2017/05/23 17:50:48 HRS 6 MIN 33 SEC 57
-------------------------------------------------------------------------------
NO. OF ENTRIES: 6
===============================================================================
show>isa>stats>ipsec-stats# traffic-forward gateway "rw" dynamic-tunnel 10.1.1.100:500
===============================================================================
STATISTICS FOR IPSEC REMOTE USER TUNNEL "10.1.1.100:500"
===============================================================================
INDEX VALUE START TIME SAMPLING DURATION
-------------------------------------------------------------------------------
NUMBER OF ENCRYPTED IPSEC PACKETS
1 (CURRENT) 676,774 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
NUMBER OF DECRYPTED IPSEC PACKETS
1 (CURRENT) 676,774 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
NUMBER OF ENCRYPTED AND DECRYPTED IPSEC PACKETS
1 (CURRENT) 1,353,548 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
NUMBER OF KIBIBYTES IN THE ENCRYPTED IPSEC PACKETS
1 (CURRENT) 3,323,066 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
NUMBER OF KIBIBYTES IN THE DECRYPTED IPSEC PACKETS
1 (CURRENT) 3,323,066 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
NUMBER OF KIBIBYTES IN THE ENCRYPTED AND DECRYPTED IPSEC PACKETS
1 (CURRENT) 6,646,132 2017/05/23 22:36:15 HRS 1 MIN 52 SEC 49
-------------------------------------------------------------------------------
NO. OF ENTRIES: 6
===============================================================================
transform
transform
Syntax
transform [transform-id]
Context
[Tree] (show>ipsec transform)
Full Context
show ipsec transform
Description
This command displays information of the specified IPsec transform or lists all configured IKE transform information when the IKE transform ID is not specified.
Parameters
- transform-id
-
Specifies an IPsec transform entry.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show ipsec transform command.
Output ExampleNODE# show ipsec transform
=============================================================================
IPSEC TRANSFORMS
=============================================================================
TRANSFORMID ESPAUTH ESPENCRYPTION PFS IPSEC
ALGORITHM ALGORITHM DH GROUP LIFETIME (SEC)
-----------------------------------------------------------------------------
1 SHA256 AES128 INHERIT INHERIT
10 SHA256 AES256 14 20000
99 SHA1 AES192 15 30000
100 SHA1 AES128 INHERIT INHERIT
-----------------------------------------------------------------------------
NO. OF IPSEC TRANSFORMS: 4
=============================================================================
transport-mode
transport-mode
Syntax
transport-mode tunnel-type {gre} [saved-key] esa-vm esa-id/vm-id
transport-mode tunnel-type {gre} isa mda [saved-key]
transport-mode tunnel-type {gre} tunnel-name tunnel-name [saved-key]
Context
[Tree] (clear>ipsec transport-mode)
Full Context
clear ipsec transport-mode
Description
This command clears transport-mode tunnels data.
Parameters
- tunnel-name
-
Clears data associated with the specified tunnel, up to 32 characters.
- mda
-
Clears all static tunnels terminated on the specified ISA.
- saved-key
-
Clears the saved IKE and ESP keys for the specified tunnel.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
Platforms
7705 SAR Gen 2
trap-suppress
trap-suppress
Syntax
trap-suppress number-of-traps time-interval
Context
[Tree] (tools>perform>router>mpls trap-suppress)
Full Context
tools perform router mpls trap-suppress
Description
This command modifies thresholds for trap suppression. The time-interval parameter is used to suppress traps after a certain number of traps have been raised within the time-interval period of time. By executing this command, there will be no more than number-of-traps within time-interval.
Parameters
- number-of-traps
-
Specifies to the number of traps raised within a period of time before suppression occurs.
- time-interval
-
Specifies the period of time before trap-suppression can occur, depending upon the number of traps received in that period of time.
Platforms
7705 SAR Gen 2
trust-anchor-profile
trust-anchor-profile
Syntax
trust-anchor-profile [trust-anchor-profile] association
trust-anchor-profile [trust-anchor-profile]
Context
[Tree] (show>ipsec trust-anchor-profile)
Full Context
show ipsec trust-anchor-profile
Description
This command displays trust anchor profile information.
Parameters
- trust-anchor-profile
-
Specifies the trust anchor profile name up to 32 characters in length.
- association
-
Displays information for which this trust anchor profile is associated.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show ipsec trust-anchor-profile command.
Output Example*A:Dut-A# show ipsec trust-anchor-profile
==================================================================
Trust Anchor Profile Information
==================================================================
Name CA Profiles Down
------------------------------------------------------------------
CA0wCMPv2 0
CA1wCMPv2 0
CA2wCMPv2 0
CA3wCMPv2 0
CA4wCMPv2 0
CA5wCMPv2 0
CA6wCMPv2 0
CA7wCMPv2 0
CA8wCMPv2 0
CA9wCMPv2 0
CA10wCMPv2 0
==================================================================
*A:Dut-A#
*A:Dut-A# show ipsec trust-anchor-profile
==================================================================
Trust Anchor CA-profile List
==================================================================
CA Profile Admin/Oper State
------------------------------------------------------------------
CA6 up/up
CMPv2 up/up
==================================================================
*A:Dut-A#
trust-anchor-profile
Syntax
trust-anchor-profile [trust-anchor-profile]
trust-anchor-profile trust-anchor-profile association
Context
[Tree] (show>system>security>tls trust-anchor-profile)
Full Context
show system security tls trust-anchor-profile
Description
This command displays information about server and client profiles that are using the specified TLS trust anchor profile.
Parameters
- trust-anchor-profile
-
Specifies the trust anchor profile, up to 32 characters maximum.
Platforms
7705 SAR Gen 2
Output
The following output is an example of trust anchor profile information.
Output Example*A:Dut-C> show system security tls trust-anchor-profile
===============================================================================
Trust Anchor Profile Information
===============================================================================
Name CA Profiles Down
-------------------------------------------------------------------------------
tap 0
tap-alt1 0
tap-alt2 0
tap-empty 0
===============================================================================
*A:Dut-C> show system security tls trust-anchor-profile "tap"
===============================================================================
CA-profile List for Trust Anchor "tap"
===============================================================================
CA Profile Name AdminState OperState
-------------------------------------------------------------------------------
chainA_l1 up up
revChainA_l1 up up
===============================================================================
*A:Dut-C>show>tls#
ts-list
ts-list
Syntax
ts-list [list-name]
ts-list list-name association
ts-list list-name local-entry [1 to 32]
ts-list list-name remote-entry [1 to 32]
ts-list list-name {local | remote}
Context
[Tree] (show>ipsec ts-list)
Full Context
show ipsec ts-list
Description
This command displays IPsec traffic-selector list (TS-list) information.
Entering this command without a parameter will list all configured TS-lists.
Entering this command with the association parameter will list all IPsec gateways that use the specified TS-list.
Entering this command with the local or local-entry parameter will list all or specified local entries of the specified TS-list.
Entering this command with the remote or remote-entry parameter will list all or specified remote entries of the specified TS-list.
Parameters
- list-name
-
The traffic-selector list name.
- association
-
Displays all associations of the TS-list.
- local-entry [1 to 32]
-
The entry ID of a local entry.
- remote-entry [1 to 32]
-
The entry ID of a remote entry.
- local
-
Displays all local entries.
- remote
-
Displays all remote entries.
Platforms
7705 SAR Gen 2
Output
The following output is an example of TS-list information.
Output Exampleshow ipsec ts-list
===============================================================================
Traffic Selector List
===============================================================================
TS-List
-------------------------------------------------------------------------------
fullts
===============================================================================
*A:vsim-02-cpm# show ipsec ts-list "fullts"
===============================================================================
TS-List "fullts" Local Entries Information
===============================================================================
Entry ID : 1
Status : Invalid
Protocol ID : Not Specified
Protocol Port Range: Not Specified
Prefix/Len : 10.10.10.1/32
-------------------------------------------------------------------------------
Entry ID : 2
Status : Valid
Protocol ID : tcp
Protocol Port Range: 80 - 80
Prefix/Len : 10.10.10.2/32
-------------------------------------------------------------------------------
No. of entries: 2
===============================================================================
===============================================================================
TS-List "fullts" Remote Entries Information
===============================================================================
Entry ID : 1
Status : Valid
Protocol ID : tcp
Protocol Port Range: any
Prefix/Len : 0.0.0.0/0
-------------------------------------------------------------------------------
No. of entries: 1
===============================================================================
tunnel
tunnel
Syntax
tunnel ipsec-tunnel-name
tunnel
tunnel count
tunnel state state
Context
[Tree] (show>ipsec tunnel)
Full Context
show ipsec tunnel
Description
This command displays IPsec tunnel information.
Parameters
- ipsec-tunnel-name
-
Specifies the name of the tunnel up to 32 characters.
- state
-
Specifies one of up, down, or limited
Platforms
7705 SAR Gen 2
tunnel
Syntax
tunnel ipsec-tunnel-name [temp-mtu]
tunnel esa-vm esa-id/vm-id [saved-key]
tunnel isa mda [saved-key]
tunnel ipsec-tunnel-name [saved-key]
tunnel ipsec-tunnel-name [stats] [saved-key]
Context
[Tree] (clear>ipsec tunnel)
Full Context
clear ipsec tunnel
Description
This command clears static IPsec tunnel states.
Parameters
- ipsec-tunnel-name
-
Specifies the name of the IPsec tunnel, up to 32 characters. If the stats, saved-key or temp-mdu parameters are not specified, the IPsec tunnel is cleared.
- saved-key
-
Clears the saved IKE and ESP keys for the specified tunnel.
- temp-mtu
-
Clears the temporary MTU from MTU propagation for the specified tunnel.
- stats
-
Clears the statistics counter for the specified tunnel.
- mda
-
Clears all static tunnels terminated on the specified ISA.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
Platforms
7705 SAR Gen 2
tunnel
Syntax
tunnel [in-label in-label]
Context
[Tree] (tools>dump>router>sr tunnel)
Full Context
tools dump router segment-routing tunnel
Description
This command displays segment routing tunnel information.
Parameters
- in-label
-
Specifies the filter to match against the ingress label.
Platforms
7705 SAR Gen 2
Output
The following outputs are examples of segment routing tunnel operational information, and the following table describes the output fields.
Output Example*A:Dut-F# tools dump router segment-routing tunnel
====================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) - Duplicate
====================================================================================
-----------------------------------------------------------------------------------+
Prefix |
Sid-Type Fwd-Type In-Label Prot-
Inst |
Next Hop(s) Out-Label(s) Interface/Tunnel-ID |
----------------------------------------------------------------------------------+
10.0.33.3
Node Orig/Transit 70000 OSPF-0
10.0.36.3 40000 DUTF_TO
_DUTC.1.0
(B)10.0.26.2 30998 DUTF_TO
_DUTB.1.0
10.0.44.4
Node Orig/Transit 70001 OSPF-0
10.0.26.2 30001 DUTF_TO
_DUTB.1.0
(B)10.0.56.5 60001 DUTF_TO
_DUTE.1.0
10.0.55.5
Node Orig/Transit 70002 OSPF-0
10.0.56.5 60002 DUTF_TO
_DUTE.1.0
(B)10.0.26.2 30995 DUTF_TO
_DUTB.1.0
Node Terminating 70003 OSPF-0
10.0.11.1
Node Orig/Transit 70004 OSPF-0
10.0.26.2 30004 DUTF_TO
_DUTB.1.0
(B)10.0.36.3 40004 DUTF_TO
_DUTC.1.0
10.0.22.2
Node Orig/Transit 70005 OSPF-0
10.0.26.2 30005 DUTF_TO
_DUTB.1.0
(B)10.0.36.3 40004 DUTF_TO
_DUTC.1.0
20005
10.20.1.3
Node Orig/Transit 70006 OSPF-0
10.0.36.3 40006 DUTF_TO
_DUTC.1.0
(B)10.0.26.2 30004 DUTF_TO
_DUTB.1.0
20006
10.20.1.4
Node Orig/Transit 70007 OSPF-0
10.0.26.2 30007 DUTF_TO
_DUTB.1.0
(B)10.0.56.5 60007 DUTF_TO
_DUTE.1.0
10.20.1.5
Node Orig/Transit 70008 OSPF-0
10.0.56.5 60008 DUTF_TO
_DUTE.1.0
(B)10.0.26.2 30001 DUTF_TO
_DUTB.1.0
50008
Node Terminating 70009 OSPF-0
10.20.1.1
Node Orig/Transit 70010 OSPF-0
10.0.26.2 30010 DUTF_TO
_DUTB.1.0
(B)10.0.36.3 40010 DUTF_TO
_DUTC.1.0
10.20.1.2
Node Orig/Transit 70011 OSPF-0
10.0.26.2 30011 DUTF_TO
_DUTB.1.0
(B)10.0.56.5 60001 DUTF_TO
_DUTE.1.0
50011
Backup Node Transit 70994 OSPF-0
10.0.56.5 60994 DUTF_TO
_DUTE.1.0
Backup Node Transit 70995 OSPF-0
10.0.26.2 30995 DUTF_TO
_DUTB.1.0
Backup Node Transit 70996 OSPF-0
10.0.26.2 30005 DUTF_TO
_DUTB.1.0
Backup Node Transit 70998 OSPF-0
10.0.26.2 30998 DUTF_TO
_DUTB.1.0
Backup Node Transit 70999 OSPF-0
10.0.36.3 40999 DUTF_TO
_DUTC.1.0
Adjacency Transit 262140 OSPF-0
10.0.26.2 3 DUTF_TO
_DUTB.1.0
(B)10.0.36.3 40004 DUTF_TO
_DUTC.1.0
20005
Adjacency Transit 262141 OSPF-0
10.0.56.5 3 DUTF_TO
_DUTE.1.0
Adjacency Transit 262142 OSPF-0
10.0.36.3 3 DUTF_TO
_DUTC.1.0
Adjacency Transit 262143 OSPF-0
10.0.26.2 3 DUTF_TO
_DUTB.1.0
(B)10.0.56.5 60001 DUTF_TO
_DUTE.1.0
50011
*A:Dut-F#
*A:Dut-A# tools dump router segment-routing tunnel
====================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) Duplicate
====================================================================================
------------------------------------------------------------------------------------
Prefix |
Sid-Type Fwd-Type In-Label Prot-Inst |
Next Hop(s) Out-Label(s) Interface/
Tunnel-ID |
------------------------------------------------------------------------------------
Adjacency Transit 262136 ISIS-0
10.10.2.3 3 ip-
10.10.2.1
Adjacency Transit 262137 ISIS-0
10.10.2.3 3 ip-
10.10.2.1
Adjacency Transit 262138 ISIS-0
10.10.1.2 3 ip-
10.10.1.1
Adjacency Transit 262139 ISIS-0
10.10.1.2 3 ip-
10.10.1.1
Node Terminating 474387 ISIS-0
10.20.1.2
Node Orig/Transit 474388 ISIS-0
10.10.1.2 474388 ip-
10.10.1.1
10.20.1.3
Node Orig/Transit 474389 ISIS-0
10.10.2.3 474389 ip-
10.10.2.1
10.20.1.4
Node Orig/Transit 475287 ISIS-0
10.10.1.2 475287 ip-
10.10.1.1
10.20.1.5
Node Orig/Transit 475288 ISIS-0
10.10.2.3 475288 ip-
10.10.2.1
10.20.1.6
Node Orig/Transit 475289 ISIS-0
10.10.1.2 475289 ip-
10.10.1.1
*A:Dut-A#
*A:Dut-C# tools dump router segment-routing tunnel
====================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) -
Duplicate
====================================================================================
------------------------------------------------------------------------------------
Prefix
|
Sid-Type Fwd-Type In-Label Prot-
Inst |
Next Hop(s) Out-
Label(s) Interface/Tunnel-ID |
------------------------------------------------------------------------------------
Adjacency Transit 262129 ISIS-0
10.10.12.2 3 ip-
10.10.12.3
(B)10.10.3.2 3 ip-
10.10.3.3
Adjacency Transit 262130 ISIS-0
10.10.12.2 3 ip-
10.10.12.3
(B)10.10.3.2 3 ip-
10.10.3.3
Adjacency Transit 262133 ISIS-0
10.10.5.5 3 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
Adjacency Transit 262134 ISIS-0
10.10.5.5 3 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
Adjacency Transit 262135 ISIS-0
10.10.3.2 3 ip-
10.10.3.3
(B)10.10.12.2 3 ip-
10.10.12.3
Adjacency Transit 262136 ISIS-0
10.10.3.2 3 ip-
10.10.3.3
(B)10.10.12.2 3 ip-
10.10.12.3
Adjacency Transit 262137 ISIS-0
10.10.2.1 3 ip-
10.10.2.3
Adjacency Transit 262138 ISIS-0
10.10.2.1 3 ip-
10.10.2.3
10.20.1.4
Node Orig/Transit 474389 ISIS-0
10.10.12.2 474389 ip-
10.10.12.3
(B)10.10.5.5 474389 ip-
10.10.5.3
10.20.1.5
Node Orig/Transit 474390 ISIS-0
10.10.5.5 474390 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
10.20.1.6
Node Orig/Transit 474391 ISIS-0
10.10.5.5 474391 ip-
10.10.5.3
(B)10.10.12.2 474391 ip-
10.10.12.3
10.20.1.2
Node Orig/Transit 474392 ISIS-0
10.10.12.2 474392 ip-
10.10.12.3
(B)10.10.3.2 474392 ip-
10.10.3.3
Node Terminating 474393 ISIS-0
*A:Dut-C#
*A:Dut-C# tools dump router segment-routing tunnel
====================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) Duplicate
====================================================================================
------------------------------------------------------------------------------------
Prefix |
Sid-Type Fwd-Type In-Label Prot-Inst
Next Hop(s) Out-Label(s) Interface/Tunnel-ID |
-----------------------------------------------------------------------------------
Adjacency Transit 262129 ISIS-0
10.10.12.2 3 ip-
10.10.12.3
(B)10.10.3.2 3 ip-
10.10.3.3
Adjacency Transit 262130 ISIS-0
10.10.12.2 3 ip-
10.10.12.3
(B)10.10.3.2 3 ip-
10.10.3.3
Adjacency Transit 262133 ISIS-0
10.10.5.5 3 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
Adjacency Transit 262134 ISIS-0
10.10.5.5 3 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
Adjacency Transit 262135 ISIS-0
10.10.3.2 3 ip-
10.10.3.3
(B)10.10.12.2 3 ip-
10.10.12.3
Adjacency Transit 262136 ISIS-0
10.10.3.2 3 ip-
10.10.3.3
(B)10.10.12.2 3 ip-
10.10.12.3
Adjacency Transit 262137 ISIS-0
10.10.2.1 3 ip-
10.10.2.3
Adjacency Transit 262138 ISIS-0
10.10.2.1 3 ip-
10.10.2.3
10.20.1.4
Node Orig/Transit 474389 ISIS-0
10.10.12.2 474389 ip-
10.10.12.3
(B)10.10.5.5 474389 ip-
10.10.5.3
10.20.1.5
Node Orig/Transit 474390 ISIS-0
10.10.5.5 474390 ip-
10.10.5.3
(B)10.10.12.2 474389 ip-
10.10.12.3
474390
10.20.1.6
Node Orig/Transit 474391 ISIS-0
10.10.5.5 474391 ip-
10.10.5.3
(B)10.10.12.2 474391 ip-
10.10.12.3
10.20.1.2
Node Orig/Transit 474392 ISIS-0
10.10.12.2 474392 ip-
10.10.12.3
(B)10.10.3.2 474392 ip-
10.10.3.3
Node Terminating 474393 ISIS-0
*A:Dut-C#
*A:Dut-C>config$ /tools dump router segment-routing tunnel
====================================================================================Legend: (B) - Backup Next-hop for Fast Re-Route
(D) - Duplicate
label stack is ordered from top-most to bottom-most
====================================================================================
-----------------------------------------------------------------------------------+
Prefix |
Sid-Type Fwd-Type In-Label Prot-Inst(algoId) |
Next Hop(s) Out-Label(s) Interface/Tunnel-ID |
-----------------------------------------------------------------------------------+
1.1.1.1
Node Orig/Transit 20601 ISIS-0
1.1.3.1 20601 toA
1.1.1.2
Node Orig/Transit 20602 ISIS-0
1.2.3.2 20602 toB
1.1.1.3
Node Terminating 20603 ISIS-0
1.1.1.4
Node Orig/Transit 20604 ISIS-0
1.2.3.2 20604 toB
1.1.1.5
Node Orig/Transit 20605 ISIS-0
1.3.5.5 20605 toE
1.1.1.6
Node Orig/Transit 20606 ISIS-0
1.3.5.5 20606 toE
1.1.1.1
Node Orig/Transit 20611 ISIS-0 (128)
1.1.3.1 20611 toA
1.1.1.3
Node Terminating 20613 ISIS-0 (128)
1.1.1.4
Node Orig/Transit 20614 ISIS-0 (128)
1.2.3.2 20614 toB
1.1.1.5
Node Orig/Transit 20615 ISIS-0 (128)
1.3.5.5 20615 toE
1.1.1.6
Node Orig/Transit 20616 ISIS-0 (128)
1.3.5.5 20616 toE
1.1.1.1
Node Orig/Transit 20621 ISIS-0 (129)
1.1.3.1 20621 toA
1.1.1.3
Node Terminating 20623 ISIS-0 (129)
1.1.1.4
Node Orig/Transit 20624 ISIS-0 (129)
1.2.3.2 20624 toB
1.1.1.5
Node Orig/Transit 20625 ISIS-0 (129)
1.3.5.5 20625 toE
1.1.1.6
Node Orig/Transit 20626 ISIS-0 (129)
1.3.5.5 20626 toE
1.1.1.1
Node Orig/Transit 20631 ISIS-0 (130)
1.1.3.1 20631 toA
1.1.1.3
Node Terminating 20633 ISIS-0 (130)
1.1.1.4
Node Orig/Transit 20634 ISIS-0 (130)
1.2.3.2 20634 toB
1.1.1.5
Node Orig/Transit 20635 ISIS-0 (130)
1.3.5.5 20635 toE
1.1.1.6
Node Orig/Transit 20636 ISIS-0 (130)
1.3.5.5 20636 toE
1.1.1.1
Node Orig/Transit 20641 ISIS-0 (131)
1.1.3.1 20641 toA
1.1.1.3
Node Terminating 20643 ISIS-0 (131)
1.1.1.4
Node Orig/Transit 20644 ISIS-0 (131)
1.2.3.2 20644 toB
1.1.1.5
Node Orig/Transit 20645 ISIS-0 (131)
1.3.5.5 20645 toE
1.1.1.6
Node Orig/Transit 20646 ISIS-0 (131)
1.3.5.5 20646 toE
1.1.1.1
Node Orig/Transit 20651 ISIS-0 (132)
1.1.3.1 20651 toA
1.1.1.3
Node Terminating 20653 ISIS-0 (132)
1.1.1.4
Node Orig/Transit 20654 ISIS-0 (132)
1.2.3.2 20654 toB
1.1.1.5
Node Orig/Transit 20655 ISIS-0 (132)
1.3.5.5 20655 toE
1.1.1.6
Node Orig/Transit 20656 ISIS-0 (132)
1.3.5.5 20656 toE
3ffe::101:101
Node Orig/Transit 20801 ISIS-0
fe80::ce0f:1ff:fe01:2 20801 toA
3ffe::101:102
Node Orig/Transit 20802 ISIS-0
fe80::ce14:1ff:fe01:3 20802 toB
3ffe::101:103
Node Terminating 20803 ISIS-0
3ffe::101:104
Node Orig/Transit 20804 ISIS-0
fe80::ce14:1ff:fe01:3 20804 toB
3ffe::101:105
Node Orig/Transit 20805 ISIS-0
fe80::ce2c:1ff:fe01:1 20805 toE
3ffe::101:106
Node Orig/Transit 20806 ISIS-0
fe80::ce2c:1ff:fe01:1 20806 toE
3ffe::101:101
Node Orig/Transit 20811 ISIS-0 (128)
fe80::ce0f:1ff:fe01:2 20811 toA
3ffe::101:103
Node Terminating 20813 ISIS-0 (128)
3ffe::101:104
Node Orig/Transit 20814 ISIS-0 (128)
fe80::ce14:1ff:fe01:3 20814 toB
3ffe::101:105
Node Orig/Transit 20815 ISIS-0 (128)
fe80::ce2c:1ff:fe01:1 20815 toE
3ffe::101:106
Node Orig/Transit 20816 ISIS-0 (128)
fe80::ce2c:1ff:fe01:1 20816 toE
3ffe::101:101
Node Orig/Transit 20821 ISIS-0 (129)
fe80::ce0f:1ff:fe01:2 20821 toA
3ffe::101:103
Node Terminating 20823 ISIS-0 (129)
3ffe::101:104
Node Orig/Transit 20824 ISIS-0 (129)
fe80::ce14:1ff:fe01:3 20824 toB
3ffe::101:105
Node Orig/Transit 20825 ISIS-0 (129)
fe80::ce2c:1ff:fe01:1 20825 toE
3ffe::101:106
Node Orig/Transit 20826 ISIS-0 (129)
fe80::ce2c:1ff:fe01:1 20826 toE
3ffe::101:101
Node Orig/Transit 20831 ISIS-0 (130)
fe80::ce0f:1ff:fe01:2 20831 toA
3ffe::101:103
Node Terminating 20833 ISIS-0 (130)
3ffe::101:104
Node Orig/Transit 20834 ISIS-0 (130)
fe80::ce14:1ff:fe01:3 20834 toB
3ffe::101:105
Node Orig/Transit 20835 ISIS-0 (130)
fe80::ce2c:1ff:fe01:1 20835 toE
3ffe::101:106
Node Orig/Transit 20836 ISIS-0 (130)
fe80::ce2c:1ff:fe01:1 20836 toE
3ffe::101:101
Node Orig/Transit 20841 ISIS-0 (131)
fe80::ce0f:1ff:fe01:2 20841 toA
3ffe::101:103
Node Terminating 20843 ISIS-0 (131)
3ffe::101:104
Node Orig/Transit 20844 ISIS-0 (131)
fe80::ce14:1ff:fe01:3 20844 toB
3ffe::101:105
Node Orig/Transit 20845 ISIS-0 (131)
fe80::ce2c:1ff:fe01:1 20845 toE
3ffe::101:106
Node Orig/Transit 20846 ISIS-0 (131)
fe80::ce2c:1ff:fe01:1 20846 toE
3ffe::101:101
Node Orig/Transit 20851 ISIS-0 (132)
fe80::ce0f:1ff:fe01:2 20851 toA
3ffe::101:103
Node Terminating 20853 ISIS-0 (132)
3ffe::101:104
Node Orig/Transit 20854 ISIS-0 (132)
fe80::ce14:1ff:fe01:3 20854 toB
3ffe::101:105
Node Orig/Transit 20855 ISIS-0 (132)
fe80::ce2c:1ff:fe01:1 20855 toE
3ffe::101:106
Node Orig/Transit 20856 ISIS-0 (132)
fe80::ce2c:1ff:fe01:1 20856 toE
fe80::ce0f:1ff:fe01:2-"toA"
Adjacency Transit 524276 ISIS-0
fe80::ce0f:1ff:fe01:2 3 toA
1.1.3.1
Adjacency Transit 524277 ISIS-0
1.1.3.1 3 toA
fe80::ce2c:1ff:fe01:1-"toE"
Adjacency Transit 524278 ISIS-0
fe80::ce2c:1ff:fe01:1 3 toE
1.3.5.5
Adjacency Transit 524279 ISIS-0
1.3.5.5 3 toE
fe80::ce14:1ff:fe01:3-"toB"
Adjacency Transit 524280 ISIS-0
fe80::ce14:1ff:fe01:3 3 toB
1.2.3.2
Adjacency Transit 524281 ISIS-0
1.2.3.2 3 toB
-----------------------------------------------------------------------------------+
No. of Entries: 68
-----------------------------------------------------------------------------------+
*A:Dut-C>config>router>isis$
A:Dut-C# /tools dump router segment-routing tunnel
====================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) - Duplicate
label stack is ordered from top-most to bottom-most
====================================================================================
-----------------------------------------------------------------------------------+
Prefix |
Sid-Type Fwd-Type In-Label Prot-Inst(algoId) |
Next Hop(s) Out-Label(s) |
Interface/ |
Tunnel-ID |
-----------------------------------------------------------------------------------+
10.20.1.1
Node Orig/Transit 524282 BGP-EPE-0
10.11.13.1 3 to_A_1
10.12.13.1 3 to_A_2
10.12.13.1
Adjacency Transit 524283 BGP-EPE-0
10.12.13.1 3 to_A_2
10.11.13.1
Adjacency Transit 524284 BGP-EPE-0
10.11.13.1 3 to_A_1
-----------------------------------------------------------------------------------+
No. of Entries: 3
-----------------------------------------------------------------------------------+
A:Dut-C#
*A:Dut-C# tools dump router segment-routing tunnel
===================================================================================================
Legend: (B) - Backup Next-hop for Fast Re-Route
(D) - Duplicate
label stack is ordered from top-most to bottom-most
===================================================================================================
--------------------------------------------------------------------------------------------------+
Prefix |
Sid-Type Fwd-Type In-Label Prot-Inst(algoId) |
Next Hop(s) Out-Label(s) Interface/Tunnel-ID |
--------------------------------------------------------------------------------------------------+
1.1.1.3
Node Terminating 20003 IGP-Shared
1.1.1.5
Node Orig/Transit 20005 ISIS-0
10.10.10.2 20005 To_1/1/1(E)
10.10.10.2
Adjacency Transit 524287 ISIS-0
10.10.10.2 3 To_1/1/1(E)
--------------------------------------------------------------------------------------------------+
No. of Entries: 3
--------------------------------------------------------------------------------------------------+
*A:Dut-C#
|
Label |
Description |
|---|---|
|
ISA Group |
The ISA group ID |
|
Admin State |
The administrative state of the tunnel group |
|
Oper state |
The operational state of the tunnel group |
|
Responder-Only |
The tunnel setup under the specified tunnel group |
|
Non-Active Members |
The non-active ESA and ESA VM |
|
Required Active Qty |
The number of the required active members |
|
Active Members |
The active ESA and ESA VM |
|
Reassembly (msecs) |
The time of reassembly |
|
ISA Chassis |
The number of ISA chassis |
|
Oper Flags |
The operational status flag of the tunnel |
|
Grp IPsec Tnls |
The number of group IPsec tunnels |
|
Grp IPsec Max Tnls |
The maximum number of group IPsec tunnels |
|
Grp IP Tunnels |
The number of group IP tunnels |
|
Grp IP Max Tunnels |
The maximum number of group IP tunnels |
|
ISA Scale Mode |
The number of tunnels on each ISA of the tunnel group |
|
Statistics Collection |
Specifies whether statistics collection is enabled |
|
CPU Usage |
Specifies whether the CPU usage of all the processes and protocols is enabled |
|
Gw Traffic Forward |
Specifies whether the traffic forwarded on the GW is enabled |
|
IGP-Shared |
Identifies a local node as a shared SID and is programmed in an ILM as such. An ILM can only be programmed once and has a single owner. When a node SID is shared, a local duplicate may exist between instances and the ISIS, OSPF, and OSPF3 protocols. |
tunnel
Syntax
tunnel gre-tunnel-name stats
tunnel gre-tunnel-name temp-mtu
Context
[Tree] (clear>ip tunnel)
Full Context
clear ip tunnel
Description
This command clears IP tunnel statistics.
Parameters
- gre-tunnel-name
-
Specifies the GRE tunnel name, up to 32 characters.
- stats
-
Clears the statistics counter for the specified tunnel.
- temp-mtu
-
Clears temporary MTU values from the MTU propagation for the specified tunnel.
Platforms
7705 SAR Gen 2
tunnel
Syntax
tunnel name [destinations | sessions]
Context
[Tree] (show>system>grpc-tunnel tunnel)
Full Context
show system grpc-tunnel tunnel
Description
This command displays gRPC tunnel information.
Parameters
- name
-
Specifies the gRPC tunnel name, up to 32 characters.
- destinations
-
Specifies to display gRPC tunnel destinations.
- sessions
-
Specifies to display gRPC tunnel sessions.
Platforms
7705 SAR Gen 2
Output
The following output is an example of system gRPC tunnel tunnel information.
Output fields: system gRPC tunnel name describes system gRPC tunnel tunnel output fields.
Output example*A:dut-c# show system grpc-tunnel tunnel
===============================================================================
gRPC-Tunnel tunnels
===============================================================================
Name Admin Oper Sessions
-------------------------------------------------------------------------------
t1 Enabled Up 0
-------------------------------------------------------------------------------
No. of tunnels: 1
===============================================================================
Please provide output example|
Label |
Description |
|---|---|
|
Name |
Displays the name of the tunnel. |
|
Admin |
Specifies the administrative state (Enabled, Disabled). |
|
Oper |
Specifies the operational state (Up, Down, Tran). |
|
Sessions |
Displays the number of sessions of the tunnel. |
|
No. of tunnels |
Displays the number of tunnels. |
*A:dut-c# show system grpc-tunnel tunnel "t1"
===============================================================================
gRPC-Tunnel tunnel
===============================================================================
Name : t1
Administrative State : Enabled
Operational State : Up
Oper Down Reason :
Description : (Not Specified)
Destination Group : dg1
Operational Target Name : dut-c
===============================================================================
|
Label |
Description |
|---|---|
|
Name |
Displays the name of the tunnel. |
|
Administrative State |
Specifies the administrative state (Enabled, Disabled). |
|
Operational State |
Specifies the operational state (Up, Down, Transition). |
|
Oper Down Reasons |
Displays the reason for the operational down state. |
|
Description |
Displays the description of the tunnel. |
|
Destination Group |
Displays the destination group of the tunnel. |
|
Operational Target Name |
Displays the operational target name of the tunnel. |
tunnel
Syntax
tunnel count
tunnel ip-tunnel-name
tunnel state state
tunnel
Context
[Tree] (show>ip tunnel)
Full Context
show ip tunnel
Description
This command displays IP related tunnel information.
Parameters
- ip-tunnel-name
-
Specifies the IP tunnel name, up to 32 characters.
- state
-
Specifies the IP tunnel state.
Platforms
7705 SAR Gen 2
tunnel-group
tunnel-group
Syntax
tunnel-group tunnel-group-id association mda mda-id
tunnel-group tunnel-group-id association esa-vm esa-id/vm-id
tunnel-group tunnel-group-id [detail]
tunnel-group [tunnel-group-id]
Context
[Tree] (show>isa tunnel-group)
Full Context
show isa tunnel-group
Description
Commands in this context display tunnel information.
Parameters
- association
-
Keyword that displays association applicable to the specified tunnel group.
- esa-vm
-
Displays information about the configured ESA and ESA VM.
- mda-id
-
Displays information about the specified ISA.
- detail
-
Keyword that displays detailed ESA VM information.
- tunnel-group-id
-
Displays information about the specified tunnel group ID.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the tunnel group information, and Output fields: tunnel group describes the output fields.
Output Example*A:SR-12/Dut-B# show isa tunnel-group 1
=============================================================================
ISA Tunnel Groups (Multi-Active)
=============================================================================
Tunnel Non-Active Required Active Admin Oper
GroupId Members Active Qty Members State State
-----------------------------------------------------------------------------
1 1 esa-1/1 Up Up
-----------------------------------------------------------------------------
No. of ISA Tunnel Groups (Multi-Active): 1
=============================================================================
*A:SR-12/Dut-B# show isa tunnel-group 1 detail
===============================================================================
ISA Tunnel Group Information
===============================================================================
Description : For testing ipsec scenarios in a multi-chassis setup
ISA Group : 1
Member Pool : DS_memberPool
Admin State : Up Oper State : Up
Responder-Only : true
Non-Active Members : (Not Specified)
Required Active Qty : 4
Active Members : esa-1/1 esa-1/2 esa-2/1 esa-2/2
Reassembly (msecs) : 2000 ISA Chassis : 1
Oper Flags : (Not Specified)
Grp IPsec Tnls : 32767 Grp IPsec Max Tnls : 32768
Grp IP Tunnels : 0 Grp IP Max Tunnels : 4096
ISA Scale Mode : tunnel-limit-32k
Strict ESP Seq No Ord: Disabled
SPI Range Index : 2
Statistics Collection
CPU Usage : Disabled
Gw Traffic Forward : Enabled
Last Config Change : 09/21/2024 11:48:15
===============================================================================
Member Weight Hash Slots Active
-------------------------------------------------------------------------------
esa-1/1 367 4 Yes
esa-1/2 669 7 Yes
esa-2/1 193 2 Yes
esa-2/2 755 8 Yes
-------------------------------------------------------------------------------
Number of Configured Entries: 4
Number of Active Entries: 4
===============================================================================
*A:SR-12/Dut-B# show isa tunnel-group 1 association esa-vm 1/1
===============================================================================
Associated IPsec Tunnels
-------------------------------------------------------------------------------
Private Svc Tunnel Host ISA Oper Delivery Svc
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Number of Entries: 0
-------------------------------------------------------------------------------
Associated IP Tunnels
-------------------------------------------------------------------------------
Private Svc Tunnel Host ISA Oper Delivery Svc
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Number of Entries: 0
-------------------------------------------------------------------------------
Associated Remote-User IPsec Tunnels
-------------------------------------------------------------------------------
Public Svc Address:Port Host ISA Private Svc
-------------------------------------------------------------------------------
1052 42.1.1.2:500 esa-1/1 52
1052 42.1.1.3:500 esa-1/1 52
1052 42.1.1.4:500 esa-1/1 52
1052 42.1.1.5:500 esa-1/1 52
1052 42.1.1.6:500 esa-1/1 52
1052 42.1.1.7:500 esa-1/1 52
1052 42.1.1.8:500 esa-1/1 52
1052 42.1.1.9:500 esa-1/1 52
|
Label |
Description |
|---|---|
|
ISA Group |
The ISA group ID |
|
Admin State |
The administrative state of the tunnel group |
|
Oper state |
The operational state of the tunnel group |
|
Responder-Only |
The tunnel setup under the specified tunnel group |
|
Non-Active Members |
The non-active ESA and ESA VM |
|
Required Active Qty |
The number of required active members |
|
Active Members |
The active ESA and ESA VM |
|
Reassembly (msecs) |
The time of reassembly |
|
ISA Chassis |
The number of ISA chassis |
|
Oper Flags |
The operational status flag of the tunnel |
|
Grp IPsec Tnls |
The number of group IPsec tunnels |
|
Grp IPsec Max Tnls |
The maximum number of group IPsec tunnels |
|
Grp IP Tunnels |
The number of group IP tunnels |
|
Grp IP Max Tunnels |
The maximum number of group IP tunnels |
|
ISA Scale Mode |
The number of tunnels on each ISA of the tunnel group |
|
SPI Range Index |
The SPI range index assigned to the tunnel group |
|
Statistics Collection |
Specifies whether statistics collection is enabled |
|
CPU Usage |
Specifies whether the CPU usage of all the processes and protocols is enabled |
|
Gw Traffic Forward |
Specifies whether the traffic forwarded on the Gw is enabled |
|
Member |
The ESA VM members in the tunnel group |
|
Weight |
The weight of the ESA VM for tunnel load balancing |
|
Hash Slots |
The number of hash slots |
|
Active |
The active state of the ESA VM |
tunnel-interface
tunnel-interface
Syntax
tunnel-interface [ip-int-name | mt-int-name | int-ip-address] [group [grp-ip-address] source ip-address] [type {starstarrp | starg | sg}] [detail] [family]
Context
[Tree] (show>router>pim tunnel-interface)
Full Context
show router pim tunnel-interface
Description
This command displays PIM tunnel interface information.
Parameters
- ip-int-name
-
Displays information about the specified IP interface name, up to 32 characters.
- mt-int-name
-
Displays information about the Multicast Tunnel (MT) interface for a VPRN.
- int-ip-address
-
Displays information about the interface IPv4 or IPv6 address.
- grp-ip-address
-
Displays information about the IP multicast group address, or 0.
- ip-address
-
Displays information about the source or RP IPv4 or IPv6 address.
- type
-
Displays information about the type of entry.
- detail
-
Displays detailed interface information.
- family
-
Displays family information.
Platforms
7705 SAR Gen 2
Output
The following output is an example of PIM tunnel interface information.
Output Example*A:Dut-C# show router pim tunnel-interface
==================================================================================
PIM Interfaces ipv4
===============================================================================
Interface Originator Address Adm Opr Transport Type
-------------------------------------------------------------------------------
mpls-if-73728 N/A Up Up Tx-IPMSI
mpls-if-73729 N/A Up Up Tx-IPMSI
mpls-if-73730 N/A Up Up Tx-IPMSI
mpls-if-73735 N/A Up Up Rx-BierInband
mpls-if-73736 N/A Up Up Tx-BierInband
-------------------------------------------------------------------------------
Interfaces : 5
===============================================================================
tunnel-interface
Syntax
tunnel-interface [protocol protocol] [senderAddr senderAddr] [rootNode rootNode]
Context
[Tree] (show>router tunnel-interface)
Full Context
show router tunnel-interface
Description
This command displays tunnel interface information.
Parameters
- protocol
-
Displays information about the specified protocol.
- senderAddr
-
Displays information about the IP address of the sender.
- rootNode
-
Displays information about the root nodes.
Platforms
7705 SAR Gen 2
Output
The following output is an example of router tunnel interface information.
Output Example*A:Dut-C# show router tunnel-interface
===============================================================================
P2MP-RSVP P2MP-LDP Tunnel-Interfaces
===============================================================================
LSP/LDP Type SenderAddr IfIndex RootNode
-------------------------------------------------------------------------------
1 ldp 10.20.1.2 73728 No
2 ldp 10.20.1.2 73729 No
3 ldp 10.20.1.2 73730 No
4 ldp 10.20.1.2 73731 No
5 ldp 10.20.1.2 73732 No
-------------------------------------------------------------------------------
Interfaces : 5
===============================================================================
*A:Dut-B# show router tunnel-interface
===============================================================================
P2MP-RSVP P2MP-LDP Tunnel-Interfaces
===============================================================================
LSP/LDP Type SenderAddr IfIndex RootNode
-------------------------------------------------------------------------------
1 ldp 10.20.1.2 73728 Yes
2 ldp 10.20.1.2 73729 Yes
3 ldp 10.20.1.2 73730 Yes
4 ldp 10.20.1.2 73731 Yes
5 ldp 10.20.1.2 73732 Yes
-------------------------------------------------------------------------------
Interfaces : 5
===============================================================================
tunnel-isa
tunnel-isa
Syntax
tunnel-isa
Context
[Tree] (show>isa>stats tunnel-isa)
Full Context
show isa statistics tunnel-isa
Description
Commands in this context display tunnel ISA statistics including ISA CPU usage and memory allocation failure rates.
Platforms
7705 SAR Gen 2
tunnel-member-pool
tunnel-member-pool
Syntax
tunnel-member-pool [name]
tunnel-member-pool name detail
Context
[Tree] (show>isa tunnel-member-pool)
Full Context
show isa tunnel-member-pool
Description
This command displays a list of configured tunnel member pools.
Parameters
- name
-
Specifies the tunnel member pool name, up to 32 characters.
- detail
-
Keyword that displays detailed information about the specified tunnel member pool.
Platforms
7705 SAR Gen 2
Output
The following output is an example of tunnel member pool information, and Output fields: tunnel member pool describes the output fields.
Output Example*A:node-2>show isa tunnel-member-pool "DS_memberPool" detail
===============================================================================
ISA Tunnel Member Pool : DS_memberPool
Description : (Not Specified)
High Availability : tunnel-limit-32k
Associated Tunnel Grps : 1
Last Config Change : 09/21/2024 11:48:16
===============================================================================
Member Weight Hash Slots Active In Group
-------------------------------------------------------------------------------
esa-1/1 367 4 1
esa-1/2 669 7 1
esa-2/1 193 2 1
esa-2/2 755 8 1
-------------------------------------------------------------------------------
Number of Configured Entries: 4
Number of Active Entries: 4
===============================================================================|
Label |
Description |
|---|---|
|
ISA Tunnel Member Pool |
The name of the ISA tunnel member pool |
|
Description |
The text description for the tunnel member pool |
|
High Availability |
The HA configuration of the tunnel member pool |
|
Associated Tunnel Grps |
The name of the tunnel groups this pool is associated with |
|
Member |
The ISA or ESA members associated with this tunnel member pool |
|
Active In Group |
The tunnel group that the MDA is active in |
|
Last Config Change |
The date and time of the last configuration change |
|
Weight |
The weight of the ESA VM for tunnel load balancing |
|
Hash Slots |
The number of hash slots |
|
Number of Configured Entries |
The number of configured entries |
|
Number of Active Entries |
The number of active entries |
tunnel-setup-rate
tunnel-setup-rate
Syntax
tunnel-setup-rate gateway name [history-stats-in-count count] [history-stats-in-min minutes] [current]
tunnel-setup-rate [history-stats-in-count count] [history-stats-in-min minutes] [ current] esa-vm esa-id/vm-id
tunnel-setup-rate tunnel-type tunnel-type gateway name [history-stats-in-count count] [history-stats-in-min minutes] [ current] [show-oid]
tunnel-setup-rate isa mda [history-stats-in-count count] [history-stats-in-min minutes] [current]
tunnel-setup-rate tunnel-type tunnel-type isa mda [history-stats-in-count count] [history-stats-in-min minutes] [ current] [show-oid]
tunnel-setup-rate system [history-stats-in-count count] [history-stats-in-min minutes] [ current]
tunnel-setup-rate tunnel-type tunnel-type system [ history-stats-in-count count] [history-stats-in-min minutes] [current] [ show-oid]
tunnel-setup-rate tunnel-group tunnel-group-id [ history-stats-in-count count] [history-stats-in-min minutes] [current]
tunnel-setup-rate tunnel-type tunnel-type tunnel-group tunnel-group-id [history-stats-in-count count] [history-stats-in-min minutes] [ current] [show-oid]
tunnel-setup-rate tunnel-type tunnel-type [ history-stats-in-count count] [history-stats-in-min minutes] [current] [ show-oid] esa-vm esa-id/vm-id
Context
[Tree] (show>isa>stats>ipsec-stats tunnel-setup-rate)
Full Context
show isa statistics ipsec-stats tunnel-setup-rate
Description
This command displays IPsec tunnel setup rate statistics of the specified scope.
The system collects statistics every hour for the last 24 hour period per wall clock. A current value is also included in the output.
This command supports following scopes:
-
per system
-
per ISA
-
per tunnel group
-
per IPsec GW
The statics include the following setup rates:
-
static tunnel
-
dynamic LAN-to-LAN tunnel
-
remote access tunnel
-
all types of tunnel
The start time indicates the starting timestamp of measurement. The sampling duration indicates the duration of measurement.
Parameters
- name
-
Displays information about the name of the IPsec GW up to 32 characters in length.
- mda
-
Displays information about the specified ISA.
- tunnel-group-id
-
Displays information about the specified tunnel group ID.
- count
-
Displays information for the number of statistics intervals to be displayed (starting with the most recent).
- minutes
-
Displays information about the specified period covered by the statistics to be displayed (starting with the most recent).
- type
-
Displays information about the specified tunnel type associated with this IPsec GW.
- current
-
Displays information about the current statistic value. The values of count and minutes are ignored by the system once this parameter is specified.
- show-oid
-
Displays information about the OID of the current statistical value.
- esa-vm
-
Displays the ID of the configured ESA and ESA VM.
Platforms
7705 SAR Gen 2
tunnel-table
tunnel-table
Syntax
tunnel-table summary [ipv4 | ipv6]
tunnel-table [ip-prefix[/mask]] [ protocol protocol] [alternative] [ ipv4 | ipv6] [detail] [ instance instance-id]
tunnel-table mpls-tp
tunnel-table [ip-prefix[/mask]] sdp sdp-id
Context
[Tree] (show>router tunnel-table)
Full Context
show router tunnel-table
Description
This command displays tunnel table information.
Auto-bind GRE tunnels are not displayed in the show command output. GRE tunnels are not the same as SDP tunnels that use the GRE encapsulation type. When the auto-bind-tunnel command is used when configuring a VPRN service, it means the MP-BGP NH resolution is referring to a core routing instance for IP reachability. For a VPRN service this object specifies the lookup to be used by the routing instance if no SDP to the destination exists.
Parameters
- summary
-
Displays summary tunnel table information.
- ip-prefix[/mask]
-
Displays the specified destination IP address and mask of the table tunnel.
- ipv4
-
Displays only tunnel table information for IPv4 addresses.
- ipv6
-
Displays only tunnel table information for IPv6 addresses.
- protocol
-
Displays LDP protocol information.
- alternative
-
Displays backup route details.
- detail
-
Displays detailed information.
- instance-id
-
Specifies the IGP instance of the tunnel table
- mpls-tp
-
Displays MPLS TP tunnel table information.
- sdp-id
-
Displays information pertaining to the specified SDP.
Platforms
7705 SAR Gen 2
Output
The following outputs are examples of tunnel table information, and Output fields: tunnel table describes the output fields.
Output Example*A:ALA-12>config>service# show router 3 tunnel-table
==============================================================================
Tunnel Table
==============================================================================
Destination Owner Encap Tunnel Id Pref NexthopMetric
-------------------------------------------------------------------------------
10.0.0.1/32 sdp GRE 10 5 10.0.0.1 0
10.0.0.1/32 sdp GRE 21 5 10.0.0.1 0
10.0.0.1/32 sdp GRE 31 5 10.0.0.1 0
10.0.0.1/32 sdp GRE 41 5 10.0.0.1 0
==============================================================================
*A:ALA-12>config>service# show router 3 tunnel-table summary
=============================================================================
Tunnel Table Summary (Router: Base)
=============================================================================
Active Available
------------------------------------------------------------------------------
LDP 1 1
SDP 1 1
==============================================================================
*A:Dut-C# show router tunnel-table protocol srv6-policy ipv6
===============================================================================
IPv6 Tunnel Table (Router: Base)
===============================================================================
Destination Owner Encap TunnelId Pref
Nexthop Color Metric
-------------------------------------------------------------------------------
3ffe::a14:102/128 srv6-pol SRV6 917510 14
fpe_1.a 10 0
-------------------------------------------------------------------------------
Flags: B = BGP or MPLS backup hop available
L = Loop-Free Alternate (LFA) hop available
E = Inactive best-external BGP route
k = RIB-API or Forwarding Policy backup hop
===============================================================================
*A:Dut-C# show router tunnel-table protocol srv6-policy ipv6 detail
===============================================================================
Tunnel Table (Router: Base)
===============================================================================
Destination : 3ffe::a14:102/128
NextHop : fpe_1.a
NextHop Weight : 1
Tunnel Flags : has-color
Age : 00h09m47s Color : 10
CBF Classes : (Not Specified)
Owner : srv6-pol Encap : SRV6
Tunnel ID : 917510 Preference : 14
Tunnel SRV6 SID : 2222:2:2:2:0:a:: Tunnel Metric : 0
Tunnel MTU : - Max Label Stack : 1
-------------------------------------------------------------------------------
Number of tunnel-table entries : 1
Number of tunnel-table entries with LFA : 0
===============================================================================
|
Label |
Description |
|---|---|
|
Destination |
The destination address and mask of the route |
|
Owner |
The tunnel owner |
|
Encap |
The encapsulation type of the tunnel |
|
Tunnel ID |
The tunnel (SDP) identifier |
|
Pref |
The route preference for routes learned from the configured peer or peers |
|
Nexthop |
The next hop for the destination of the route |
|
Metric |
The route metric value for the route |
The following outputs are examples of tunnel-table protocol detail information. Output fields: tunnel table protocol detail describes the output fields.
*B:Dut-C>config>router>mpls# show router tunnel-table protocol sr-te detail
===============================================================================
Tunnel Table (Router: Base)
===============================================================================
Destination : 10.20.1.6/32
NextHop : 10.180.11.4 (524667, ospf (0))
Tunnel Flags : is-over-tunnel entropy-label-capable
Age : 00h00m55s
CBF Classes : (Not Specified)
Owner : sr-te Encap : MPLS
Tunnel ID : 655362 Preference : 8
Tunnel Label : 1048538 Tunnel Metric : 2000
Tunnel MTU : 1492 Max Label Stack : 7
LSP Weight : 4000
-------------------------------------------------------------------------------
Destination : 10.20.1.6/32
NextHop : 10.181.11.4 (524668, ospf (0))
Tunnel Flags : is-over-tunnel entropy-label-capable
Age : 00h00m55s
CBF Classes : (Not Specified)
Owner : sr-te Encap : MPLS
Tunnel ID : 655363 Preference : 8
Tunnel Label : 1048537 Tunnel Metric : 2000
Tunnel MTU : 1492 Max Label Stack : 7
LSP Weight : 80
-------------------------------------------------------------------------------
Destination : 10.20.1.6/32
NextHop : 10.182.11.4 (524669, ospf (0))
Tunnel Flags : is-over-tunnel entropy-label-capable
Age : 00h00m54s
CBF Classes : (Not Specified)
Owner : sr-te Encap : MPLS
Tunnel ID : 655364 Preference : 8
Tunnel Label : 1048536 Tunnel Metric : 2000
Tunnel MTU : 1492 Max Label Stack : 7
LSP Weight : 240
-------------------------------------------------------------------------------
Destination : 10.20.1.6/32
NextHop : 10.183.11.4 (524670, ospf (0))
Tunnel Flags : is-over-tunnel entropy-label-capable
Age : 00h00m53s
CBF Classes : (Not Specified)
Owner : sr-te Encap : MPLS
Tunnel ID : 655365 Preference : 8
Tunnel Label : 1048535 Tunnel Metric : 2000
Tunnel MTU : 1492 Max Label Stack : 7
LSP Weight : 800
-------------------------------------------------------------------------------
Number of tunnel-table entries : 4
Number of tunnel-table entries with LFA : 0
===============================================================================
A:Dut-C# show router tunnel-table protocol bgp-epe detail
===============================================================================
Tunnel Table (Router: Base)
===============================================================================
Destination : 10.11.13.1/32
NextHop : 10.11.13.1
Tunnel Flags : is-adjacency-tunnel
Age : 00h02m02s
CBF Classes : (Not Specified)
Owner : bgp-epe Encap : MPLS
Tunnel ID : 524320 Preference : 0
Tunnel Label : 3 Tunnel Metric : 0
Tunnel MTU : - Max Label Stack : 0
-------------------------------------------------------------------------------
Destination : 10.12.13.1/32
NextHop : 10.12.13.1
Tunnel Flags : is-adjacency-tunnel
Age : 00h02m02s
CBF Classes : (Not Specified)
Owner : bgp-epe Encap : MPLS
Tunnel ID : 524321 Preference : 0
Tunnel Label : 3 Tunnel Metric : 0
Tunnel MTU : - Max Label Stack : 0
-------------------------------------------------------------------------------
Destination : 10.20.1.1/32
NextHop : 10.11.13.1
Tunnel Flags : (Not Specified)
Age : 00h02m02s
CBF Classes : (Not Specified)
Owner : bgp-epe Encap : MPLS
Tunnel ID : 524322 Preference : 0
Tunnel Label : 3 Tunnel Metric : 0
Tunnel MTU : - Max Label Stack : 0
-------------------------------------------------------------------------------
Destination : 10.20.1.1/32
NextHop : 10.12.13.1
Tunnel Flags : (Not Specified)
Age : 00h02m02s
CBF Classes : (Not Specified)
Owner : bgp-epe Encap : MPLS
Tunnel ID : 524322 Preference : 0
Tunnel Label : 3 Tunnel Metric : 0
Tunnel MTU : - Max Label Stack : 0
-------------------------------------------------------------------------------
Number of tunnel-table entries : 4
Number of tunnel-table entries with LFA : 0
===============================================================================
|
Label |
Description |
|---|---|
|
Destination |
The destination address and mask of the route |
|
NextHop |
The next hop for the destination of the route |
|
Tunnel Flags |
The flags set for this tunnel |
|
Age |
The tunnel age |
|
CBF Classes |
The Class-Based Forwarding (CBF) classes for the tunnel |
|
Owner |
The tunnel owner |
|
Encap |
The tunnel encapsulation type |
|
Tunnel ID |
The tunnel (SDP) identifier |
|
Preference |
The route preference for routes learned from the configured peer or peers |
|
Tunnel Label |
The tunnel label |
|
Tunnel Metric |
The route metric value for the route |
|
Tunnel MTU |
The maximum transmission unit (MTU) of the tunnel |
|
Max Label Stack |
The maximum number of labels that can be added onto an existing MPLS header |
|
LSP Weight |
The LSP weight |
tunnel-template
tunnel-template
Syntax
tunnel-template [ipsec-template-identifier]
tunnel-template ipsec-template-identifier association [ all]
Context
[Tree] (show>ipsec tunnel-template)
Full Context
show ipsec tunnel-template
Description
This command displays IPsec tunnel template information.
Parameters
- ipsec template identifier
-
Displays an existing IPsec tunnel template ID.
Platforms
7705 SAR Gen 2
Output
The following output is an example of the show ipsec tunnel-template command.
Output Example*A:ALA-48>config>ipsec# show ipsec tunnel-template 1
===============================================================================
IPsec Tunnel Template
===============================================================================
Id Trnsfrm1 Trnsfrm2 Trnsfrm3 Trnsfrm4 ReverseRoute ReplayWnd
-------------------------------------------------------------------------------
1 1 none none none useSecurityPolicy 128
-------------------------------------------------------------------------------
Number of templates: 1
===============================================================================
*A:ALA-48>config>ipsec#
twamp
twamp
Syntax
twamp
Context
[Tree] (show>test-oam twamp)
Full Context
show test-oam twamp
Description
Commands in this context display TWAMP information.
Platforms
7705 SAR Gen 2
twamp
Syntax
twamp
Context
[Tree] (clear>test-oam twamp)
Full Context
clear test-oam twamp
Description
This command clears Two-Way Active Measurement Protocol statistics.
Platforms
7705 SAR Gen 2
twamp
Syntax
twamp
Context
[Tree] (tools>dump>test-oam twamp)
Full Context
tools dump test-oam twamp
Description
This command dumps TWAMP information.
Platforms
7705 SAR Gen 2
twamp-light
twamp-light
Syntax
twamp-light
Context
[Tree] (show>test-oam>twamp twamp-light)
Full Context
show test-oam twamp twamp-light
Description
Commands in this context display TWAMP-Light information.
Platforms
7705 SAR Gen 2
twamp-light
Syntax
twamp-light
Context
[Tree] (show>router twamp-light)
[Tree] (show>service>id twamp-light)
Full Context
show router twamp-light
show service id twamp-light
Description
This command displays TWAMP Light reflector information for either the base router or a specific service.
Platforms
7705 SAR Gen 2
Output
The following output is an example of TWAMP Light information, and Output fields: TWAMP light describes the output fields.
Output Exampleshow router twamp-light
-------------------------------------------------------------------------------
TWAMP-Light Reflector
-------------------------------------------------------------------------------
Admin State : Up UDP Port : 862
IPv6 UDP Checksum 0 : Allow
Description : (Not Specified)
Up Time : 0d 00:02:24
Test Frames Received : 0 Test Frames Sent : 0
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
TWAMP-Light Reflector Prefixes
-------------------------------------------------------------------------------
Prefix Description
-------------------------------------------------------------------------------
172.16.1.0/24
-------------------------------------------------------------------------------
No. of TWAMP-Light Reflector Prefixes: 1
-------------------------------------------------------------------------------
show service id 500 twamp-light
-------------------------------------------------------------------------------
TWAMP-Light Reflector
-------------------------------------------------------------------------------
Admin State : Up UDP Port : 862
IPv6 UDP Checksum 0 : Disallow
Description : TWAMP Light reflector VPRN 500
Up Time : 0d 01:47:12
Test Frames Received : 6431 Test Frames Sent : 6431
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
TWAMP-Light Reflector Prefixes
-------------------------------------------------------------------------------
Prefix Description
-------------------------------------------------------------------------------
10.2.1.1/32 Process only 10.2.1.1 TWAMP Light
Packets
172.16.1.0/24 Process all 172.16.1.0 TWAMP
Light packets
-------------------------------------------------------------------------------
No. of TWAMP-Light Reflector Prefixes: 2
-------------------------------------------------------------------------------
|
Label |
Description |
|---|---|
|
TWAMP Light Reflector |
|
|
Admin State |
The administrative state of the reflector Up — The server or prefix is administratively enabled (no shutdown) in configuration Down — The server or prefix is administratively disabled (shutdown) in configuration |
|
UDP Port |
The UDP port that the reflector is listening on for test packets |
|
IPv6 UDP Checksum 0 |
The processing of received IPv6 UDP checksum 0 packets is either allowed or disallowed |
|
Up Time |
The time since the server process was started, measured in days (d), hours, minutes, and seconds |
|
Test Frames Received |
The total number of TWAMP Light test packets received from session senders on the reflector |
|
Test Frames Sent |
The total number of TWAMP Light test packets transmitted by the reflector to session senders |
|
Prefix |
A list of prefixes from which the reflector allows TWAMP Light tests |
|
Description |
The configured description for the prefix |
twamp-light
Syntax
twamp-light [interval seconds] [ repeat repeat] [absolute | rate] [delay | loss]
Context
[Tree] (monitor>oam-pm>session twamp-light)
Full Context
monitor oam-pm session twamp-light
Description
This command monitors the IP Two Way Active Measurement Protocol Light (TWAMP Light) statistics for the specified test's raw measurement interval.
Parameters
- seconds
-
Specifies the time interval, in seconds.
- repeat
-
Specifies the number of times the command is repeated.
- absolute
-
Specifies that the raw statistics are displayed, without processing. No calculations are performed on the delta or rate statistics.
- rate
-
Specifies that the rate-per-second is displayed.
- delay
-
Specifies the delay metrics are displayed.
- loss
-
Specifies the loss metrics are displayed.
Platforms
7705 SAR Gen 2
twamp-light
Syntax
twamp-light
Context
[Tree] (show>oam-pm>stats>session twamp-light)
Full Context
show oam-pm statistics session twamp-light
Description
This command selects the session's TWAMP-light test for the statistical display.
Platforms
7705 SAR Gen 2