Internet Enhanced Service
This chapter provides information about Internet Enhanced Services when 7210 SAS-T is operated in network mode and in access-uplink mode, and 7210 SAS-Mxp, 7210 SAS-Sx/S 1/10GE, and 7210 SAS-Sx 10/100GE is operated in Network mode, the process overview, and implementation notes.
For 7210 SAS platforms operating in network mode, IES can provide services or in-band management of the node.
For 7210 SAS platforms operating in access-uplink mode, IES is designed for in-band management of the node only.
This chapter explicitly notes if a feature is supported on 7210 SAS platforms operating in network or access-uplink mode.
IES service overview
Internet Enhanced Service (IES) is a routed connectivity service where the subscriber communicates with an IP router interface to send and receive Internet traffic. An IES has one or more logical IP routing interfaces each with a SAP which acts as the access point to the subscriber network.
For 7210 SAS platforms operating in access-uplink mode, IES is designed only for in-band management of the node.
IES allows IP interfaces to participate in the same routing instance used for service network core routing connectivity. IES services require that the IP addressing scheme used by the subscriber be unique between other provider addressing schemes and potentially the entire Internet. While IES is part of the routing domain, the usable IP address space may be limited. This allows a portion of the service provider address space to be reserved for service IP provisioning, and be administered by a separate, but subordinate address authority.
IP interfaces defined within the context of an IES service must have a SAP associated as the uplink access point to the subscriber network. Multiple IES services are created to segregate subscriber owned IP interfaces.
The following figure shows a diagram of Internet enhanced service.
The IES service provides in-band management connectivity. Other features include:
Multiple IES services are created to separate IP interfaces.
More than one IES service can be created for a single customer ID.
More than one IP interface can be created within a single IES service ID. All IP interfaces created within an IES service ID belong to the same customer.
In access-uplink mode, the IES services provide IP connectivity to the node for in-band management of the node. Most of the management tasks supported with the out-of-band management port are supported with in-band management.
IES features
This section describes various general service features and any special capabilities or considerations as they relate to IES services.
IP interfaces
IES customer IP interfaces can be configured with most of the options found on the core IP interfaces. The advanced configuration options supported are:
VRRP - for IES services with more than one IP interface (available only in network mode)
Secondary IP addresses (available only on 7210 SAS-T (network mode), 7210 SAS-Mxp, 7210 SAS-Sx/S 1/10GE, and 7210 SAS-Sx 10/100GE platforms)
ICMP Options
In network mode, configuration options found on core IP interfaces not supported on IES IP interfaces are:
NTP broadcast receipt
IPv6 support for IES IP interfaces (access-uplink operating mode)
IPv6 addressing is supported for IES IP interfaces in access-uplink mode.
In access-uplink mode, IES IP interfaces associated with access-uplink SAPs support IPv6 addressing. IPv6 can be used for in-band management of the node using the IES IP interface.
IPv6 IES IP interfaces on access-uplink SAPs are only supported on 7210 SAS-T operating in access-uplink mode.
IPv4 and IPv6 route table lookup entries are shared. Before adding routes for IPv6 destinations, route entries in the routed lookup table needs to be allocated for IPv6 addresses. This can be done using the CLI command config> system> resource-profile> router> max-ipv6-routes. This command allocates route entries for /64 IPv6 prefix route lookups. The system does not allocate any IPv6 route entries by default and user needs to allocate some resources before using IPv6. For the command to take effect the node must be rebooted after making the change. For more information, see the following example and the 7210 SAS-Mxp, R6, R12, S, Sx, T Interface Configuration Guide.
A separate route table (or a block in the route table) is used for IPv6 /128-bit prefix route lookup. A limited amount of IPv6 /128 prefixes route lookup entries is supported. The software enables lookups in this table by default (that is no user configuration is required to enable Ipv6 /128-bit route lookup).
IPv6 interfaces can be created without allocating IPv6 route entries.
Following features and restrictions is applicable for IPv6 IES IP interfaces:
IPv6 interfaces supports only static routing.
Only port-based ingress QoS policies are supported.
IPv6 filter policies can be used on SAP ingress and egress.
Routing protocols, such as OSPFv3, and others are not supported.
A limited amount of IPv6 /128 prefixes route lookup entries is supported.
IPv6 support for IES IP interfaces (network operating mode)
IES IPv6 IP interfaces provide IPv6 connectivity in the routing base instance. It can be used to connect IPv6 networks over an IPv4 cloud using 6PE mechanisms. For more information about the 6PE, refer to the 7210 SAS-Mxp, R6, R12, S, Sx, T Routing Protocols Guide.
IPv4 and IPv6 route table lookup entries are shared. Before adding routes for IPv6 destinations, route entries in the routed lookup table needs to be allocated for IPv6 addresses. This can be done using the CLI command config> system> resource-profile> router> max-ipv6-routes. This command allocates route entries for /64 IPv6 prefix route lookups. The system does not allocate any IPv6 route entries by default and user needs to allocate some resources before using IPv6. For the command to take effect the node must be rebooted after making the change. For more information, see the following example and the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide.
A separate route table (or a block in the route table) is used for IPv6 /128-bit prefix route lookup. A limited amount of IPv6 /128 prefixes route lookup entries is supported. The software enables lookups in this table by default (that is no user configuration is required to enable Ipv6 /128-bit route lookup).
In addition, the number IP subnets can be configured by the user using the command configure> system>resource-profile>router>max-ip-subnets. Suitable default are assigned to this parameter. Users can increase the number of subnets if they plan to more IPv6 addresses per IPv6 interface.
Following features and restrictions is applicable for IPv6 IES IP interfaces:
IPv6 interfaces supports static routing, OSPv3, and IS-IS.
A limited amount of IPv6 /128 prefixes route lookup entries is supported on 7210 SAS platforms.
Encapsulations
The following SAP encapsulation is supported on IES services in both network mode and access-uplink mode:
Ethernet null
Ethernet dot1q
Ethernet QinQ
In 7210 SAS-T access-uplink mode, the following access-uplink SAP encapsulations are supported:
Ethernet QinQ (access-uplink QinQ SAP)
Routing protocols
IES IP interfaces are restricted to routing protocols that can be configured on the interface. IES IP interfaces support the following routing protocols:
RIP (only supported on the 7210 SAS-Mxp)
OSPF
IS-IS
eBGP for the IPv4 and IPv6 address families (MPBGP is not supported)
IGMP
PIM
BFD
The SAP for the IES IP interface is created at the IES service level, but the routing protocols for the IES IP interface are configured at the routing protocol level for the main router instance.
CPE connectivity check
Static routes are used within many IES services. Unlike dynamic routing protocols, there is no way to change the state of routes based on availability information for the associated CPE. CPE connectivity check adds flexibility so that unavailable destinations will be removed from the service provider routing tables dynamically and minimize wasted bandwidth.
The availability of the far-end static route is monitored through periodic polling. The polling period is configured. If the poll fails a specified number of sequential polls, the static route is marked as inactive.
An ICMP ping mechanism is used to test the connectivity. If the connectivity check fails and the static route is de-activated, the router will continue to send polls and reactivate any routes that are restored.
QoS policies
When applied to 7210 SAS IES services, service ingress QoS policies only create the unicast meters defined in the policy. The multipoint meters are not created on the service. With IES services, service egress QoS policies function as with other services where the class-based queues are created as defined in the policy.
On 7210 SAS ingress, only meters are supported on all the platforms.
QoS policies only create the unicast meters defined in the policy if PIM is not configured on the associated IP interface; if PIM is configured, the multipoint meters are applied as well.
In access-uplink mode, IES IP interface associated with an access SAP supports use of service ingress QoS policies. IES IP interface associated with an access-uplink SAP does not support use of service ingress QoS policies. IES IP interfaces associated with an access-uplink SAP share the port based ingress and egress QoS policies.
Note that both MAC and IPv4 criteria can be used in the QoS policies for traffic classification in an IES.
CPU QoS for IES interfaces in access-uplink mode
In access-uplink mode, IES IP interface bound to routed VPLS services, IES IP interface on access SAPs and IES IP interface on access-uplink SAPs are designed for use with inband management of the node. Consequently, they share a common set of queues for CPU bound management traffic. All CPU bound traffic is policed to predefined rates before being queued into CPU queues for application processing. The system uses meters per application or a set of applications. It does not allocate meters per IP interface. The possibility of CPU overloading has been reduced by use of these mechanisms. Users must use appropriate security policies either on the node or in the network to ensure that this does not happen.
CPU QoS for IES access interfaces in network mode
Traffic bound to CPU received on IES access interfaces are policed/rate-limited and queued into CPU queues. The software allocates a policer per IP application or a set of IP applications, for rate-limiting CPU bound IP traffic from all IES access SAPs. The policers CIR/PIR values are set to appropriate values based on feature scaling and these values are not user configurable. The software allocates a set of queues for CPU bound IP traffic from all IES access SAPs. The queues are either shared by a set of IP applications or in some cases allocated to an IP application. The queues are shaped to appropriate rate based on feature scaling. The shaper rate is not user configurable.
The instance of queues and policers used for traffic received on network port IP interfaces is different for traffic received from access port IP interfaces. Additionally, the network CPU queues are accorded higher priority than the access CPU queues. This is done to provide better security and mitigate the risk of access traffic affecting network traffic.
The 7210 SAS-Mxp allows the user to configure the IP differentiated services code point (DSCP) value for self-generated traffic. On the 7210 SAS-T, 7210 SAS-Sx/S 1/10GE, and 7210 SAS-Sx 10/100GE, IP DSCP marking of self-generated traffic is not user-configurable and is assigned by software.
Filter policies
In network mode, only IP filter policies can be applied to IES services.
In access-uplink mode, only IP filter policies can be applied to IES service when either access SAP or access-uplink SAP is associated with the service.
VRRP support for IES IP interfaces in network operating mode
IPv4 is supported for IES IPv4 interfaces in network operating mode only.
VRRP is not supported in access-uplink operating mode.
For IPv6 interfaces, VRRP is not supported in both network and access-uplink operating mode.
The Virtual Router Redundancy Protocol (VRRP) for IPv4 is defined in the IETF RFC 3768, Virtual Router Redundancy Protocol. VRRP describes a method of implementing a redundant IP interface shared between two or more routers on a common LAN segment, allowing a group of routers to function as one virtual router. When this IP interface is specified as a default gateway on hosts directly attached to this LAN, the routers sharing the IP interface prevent a single point of failure by limiting access to this gateway address. For more information about use of VRRP, refer to the 7210 SAS-Mxp, R6, R12, S, Sx, T Router Configuration Guide.
Configuring an IES service with CLI
This section provides information to configure IES services using the command line interface.
Basic configuration
The most basic IES service configuration has the following entities:
customer ID (refer to Configuring customers accounts)
an interface to create and maintain IP routing interfaces within IES service ID
a SAP on the interface specifying the access port and encapsulation values
The following is a sample configuration output of an IES service on ALA-48 on an access-uplink SAP (applicable for access-uplink mode only).
*A:ALA-48>config>service# info
----------------------------------------------
ies 1000 customer 50 create
description "to internet"
interface "to-web" create
address 10.1.1.1/24
sap 1/1/5:0.* create
exit
exit
no shutdown
----------------------------------------------
*A:ALA-48>config>service#
The following is a sample basic IES service configuration for IPv6, along with the use of max-ipv6-routes on the 7210 SAS.
The following is a sample allocation of IPv6 routes on the node.
*A:7210SAS>config>system>res-prof# info
----------------------------------------------
max-ipv6-routes 1000
----------------------------------------------
NOTE: the node must be rebooted after the above change.
*A:ALA-50>config>service# info
----------------------------------------------
ies 1000 customer 50 vpn 1000 create
description "to inband-mgmt"
interface "to-mgmt" create
ipv6
address 2001:db8::1/24
sap 1/1/10:100.* create
exit
exit
no shutdown
----------------------------------------------
*A:ALA-50>config>service#
The following is a sample configuration output of an IES service on ALA-50.
*A:ALA-50>config>service# info
----------------------------------------------
ies 1000 customer 50 vpn 1000 create
description "to internet"
interface "to-web" create
address 10.1.1.1/24
sap 1/1/10:100 create
exit
exit
no shutdown
----------------------------------------------
*A:ALA-50>config>service#
Common configuration tasks
This section provides a brief overview of the tasks that must be performed to configure IES services and provides the CLI commands:
Associate an IES service with a customer ID.
Associate customer ID with the service.
Assign an IP address.
Create an interface.
Define SAP parameters on the interface
Select nodes and ports.
Optionally, select filter policies (configured in the config>filter context).
Enable service.
Configuring IES Components
Configuring an IES service
Use the following syntax to create an IES service.
The following is a sample basic IES service configuration output.
A:ALA-48>config>service#
----------------------------------------------
...
ies 1001 customer 1730 create
description "to-internet"
no shutdown
exit
----------------------------------------------
A:ALA-48>config>service#
Configuring IES interface parameters
Network mode
The following is a sample IES configuration output with interface parameters in network mode.
*A:7210-SAS>config>service>ies>if# info
----------------------------------------------
arp-timeout 10000
allow-directed-broadcasts
icmp
ttl-expired 120 38
exit
arp-populate
ip-mtu 1000
host-connectivity-verify interval 500 timeout 50 retry-count 15
delayed-enable 150
bfd 150 receive 300 multiplier 15 echo-receive 3000
local-proxy-arp
remote-proxy-arp
loopback
*A:7210-SAS>config>service>ies>if#
----------------------------------------------
Access-uplink mode
The following is a sample IES configuration with interface parameters in access-uplink mode.
*A:7210-SAS>config>service>ies>if# info
----------------------------------------------
arp-timeout 10000
allow-directed-broadcasts
icmp
ttl-expired 120 38
exit
ip-mtu 1000
----------------------------------------------
*A:7210-SAS>config>service>ies>if#
Configuring IES SAP parameters
A SAP is a combination of a port and encapsulation parameters which identifies the service access point on the interface and within the router. Each SAP must be unique within a router.
When configuring IES access SAP parameters, a default QoS policy is applied to each SAP ingress. Additional QoS policies must be configured in the config>qos context. Filter policies are configured in the config>filter context and must be explicitly applied to a SAP. There are no default filter policies.
The following is a sample IES SAP configuration output.
----------------------------------------------
*A:ALA-A>config>service>ies>if# info
----------------------------------------------
address 10.10.36.2/24
sap 1/1/3:100 create
ingress
qos 101
exit
exit
----------------------------------------------
*A:ALA-A>config>service>ies>if#
Configuring VRRP
Configuring VRRP parameters on an IES interface is optional and is available only in network mode and is not supported in access-uplink mode. VRRP can be configured in either an owner or non-owner mode. The owner is the VRRP router whose virtual router IP address is the same as the real interface IP address. This is the router that responds to packets addressed to one of the IP addresses for ICMP pings, TCP connections and related addresses. All other virtual router instances participating in this message domain should have the same VRID configured and cannot be configured as an owner.
The following is a sample IES configuration output.
*A:ALA-A>config>service>ies>if# info
----------------------------------------------
address 10.10.36.2/24
vrrp 2 owner
backup 10.10.36.2
authentication-type password
authentication-key "3WErEDozxyQ" hash
exit
----------------------------------------------
*A:ALA-A>config>service#
Service management tasks
This section discusses the service management tasks.
Modifying IES service parameters
Existing IES service parameters in the CLI or NMS can be modified, added, removed, enabled or disabled. The changes are applied immediately to all services when the charges are applied.
To display a list of customer IDs, use the show service customer command.
Enter the parameters (such as description SAP information) and then enter the new information.
The following is a sample of the modified service output.
*A:ALA-A>config>service>ies# info
----------------------------------------------
ies 1000 customer 50 create
description "This is a new description"
interface "to-web" create
address 10.1.1.1/24
mac 00:dc:98:1d:00:00
sap 1/1/5:0.* create
exit
exit
no shutdown
exit
----------------------------------------------
*A:ALA-A>config>service#
Deleting an IES service
An IES service cannot be deleted until SAPs and interfaces are shut down and deleted and the service is shutdown on the service level.
Use the following syntax to delete an IES service.
— config>service#
— [no] ies service-id
— shutdown
— [no] interface ip-int-name
— shutdown
— [no] sap sap-id
— shutdown
Disabling an IES service
Use the following syntax to shut down an IES service without deleting the service parameters.
— config>service> ies service-id
— shutdown
Re-enabling an IES service
Use the following syntax to re-enable an IES service that was shut down.
— config>service> ies service-id
— [no] shutdown
- Example:
— config>service# ies 2000— config>service>ies# no shutdown— config>service>ies# exit
IES services command reference
Command hierarchies
IES configuration commands
Global commands
Global IES commands are supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
config
- service
- ies service-id [customer customer-id] [create] [vpn vpn-id]
- no ies service-id
- description description-string
- no description
- service-name service-name
- no service-name
- [no] shutdown
Interface commands (network operating mode)
config
- service
- ies service-id [customer customer-id] [create] [vpn vpn-id]
- [no] interface ip-int-name [create]
- address {ip-address/mask | ip-address netmask} [broadcast all-ones | host-ones]
- no address {ip-address/mask | ip-address netmask}
- arp-timeout seconds
- no arp-timeout
- bfd transmit-interval [receive receive-interval] [multiplier multiplier][echo-receive echo-interval]
- no bfd
- cflowd-parameters
- sampling {unicast|multicast} type {interface} [direction {ingress-only}]
- no sampling {unicast|multicast}
- dhcp
- description description-string
- no description
- gi-address ip-address [src-ip-addr]
- no gi-address
- [no] option
- action {replace | drop | keep}
- no action
- [no] circuit-id [ascii-tuple | ifindex | sap-id | vlan-ascii-tuple]
- [no] remote-id [mac | string string]
- [no] vendor-specific-option
- [no] client-mac-address
- [no] sap-id
- [no] service-id
- string text
- no string
- [no] system-id
- no relay-plain-bootp
- relay-plain-bootp
- no server
- server server1 [server2...(upto 8 max)]
- [no] shutdown
- [no] trusted
- description description-string
- no description
- icmp
- redirects [number seconds]
- no redirects
- ttl-expired [number seconds]
- no ttl-expired
- unreachables [number seconds]
- no unreachables
- ip-mtu octets
- no ip-mtu
- [no] loopback
- [no] sap sap-id [create]
- secondary {ip-address/mask | ip-address netmask} [broadcast {all-ones | host-ones}] [igp-inhibit]
- no secondary {ip-address/mask | ip-address netmask}
- static-arp ip-address ieee-mac-address
- no static-arp ip-address
- [no] static-arp ieee-mac-addr unnumbered
- [no] shutdown
- [no] vrrp virtual-router-id
Interface commands (access-uplink operating mode)
config
- service
- ies service-id [customer customer-id]
- interface ip-int-name [create]
- [no] interface ip-int-name
- address {[ip-address/mask | ip-address netmask} [broadcast all-ones | host-ones]}
- no address
- arp-timeout seconds
- no arp-timeout
- allow-directed-broadcasts
- no allow-directed-broadcasts
- description long description-string
- no description
- dhcp
- description description-string
- no description
- gi-address ip-address [src-ip-addr]
- no gi-address
- [no] option
- action {replace | drop | keep}
- no action
- [no] circuit-id [ascii-tuple | ifindex | sap-id | vlan-ascii-tuple]
- [no] remote-id [mac | string string]
- [no] vendor-specific-option
- [no] client-mac-address
- [no] sap-id
- [no] service-id
- string text
- no string
- [no] system-id
- icmp
- [no] mask-reply
- redirects [number seconds]
- no redirects
- ttl-expired [number seconds]
- no ttl-expired
- unreachables [number seconds]
- no unreachables
- ip-mtu octets
- no ip-mtu
- [no] ipv6
- [no] loopback
- [no] sap sap-id [create]
- [no] shutdown
- [no] static-arp ip-address [ieee-address]
RVPLS commands (network operating mode)
config
- service
- ies service-id [customer customer-id] [vpn vpn-id]
- interface ip-interface-name [create]
- no interface ip-interface-name
- vpls service-name
- no vpls
- ingress
- [no] enable-table-classification
- routed-override-qos-policy policy-id
- no routed-override-qos-policy
- v4-routed-override-filter ip-filter-id
- no v4-routed-override-filter
- v6-routed-override-filter ip-filter-id
- no v6-routed-override-filter
RVPLS commands (access-uplink operating mode)
config
- service
- ies service-id [customer customer-id] [vpn vpn-id]
- interface ip-interface-name [create]
- no interface ip-interface-name
- vpls service-name
- no vpls
- ingress
- v4-routed-override-filter ip-filter-id
- no v4-routed-override-filter
Interface SAP commands (network and access-uplink operating mode)
config
- service
- ies service-id [customer customer-id] [vpn vpn-id] [create]
- [no] interface ip-int-name
- [no] sap sap-id [create]
- accounting-policy acct-policy-id
- no accounting-policy
- collect-stats
- no collect-stats
- description description-string
- no description
- ingress
- meter-override
- no meter-override
- meter meter-id [create]
- no meter meter-id
- adaptation-rule [pir adaptation-rule] [cir adaptation-rule]
- no adaptation-rule
- cbs size [kbits | bytes | kbytes]
- no cbs
- mbs size [kbits | bytes | kbytes]
- no mbs
- mode mode
- no mode
- rate cir cir-rate [pir pir-rate]
- no rate
- statistics
- ingress
- counter-mode {in-out-profile-count | forward-drop-count}
- [no] tod-suite tod-suite-name
- [no] shutdown
IES SAP QoS and filter commands (for 7210 SAS-T, 7210 SAS-Sx/S 1/10GE, and 7210 SAS-Sx 10/100GE)
config
- service
- ies service-id [customer customer-id] [vpn vpn-id] [create]
- [no] interface ip-int-name
- [no] sap sap-id [create]
- egress
- aggregate-meter-rate rate-in-kbps [burst burst-in-kbits] [enable-stats]
- no aggregate-meter-rate
- filter ip ip-filter-id
- filter ipv6 ipv6 -filter-id
- no filter [ip ip-filter-id] [ipv6 ipv6 -filter-id]
- ingress
- aggregate-meter-rate rate-in-kbps [burst burst-in-kbits]
- no aggregate-meter-rate
- filter ip ip-filter-id
- filter [ipv6 ipv6-filter-id]
- no filter [ip ip-filter-id] [ipv6 ipv6-filter-id]
- qos policy-id
- no qos
IES SAP QoS and filter commands (for 7210 SAS-Mxp)
config
- service
- ies service-id [customer customer-id] [vpn vpn-id] [create]
- [no] interface ip-int-name
- [no] sap sap-id [create]
- egress
- agg-rate-limit agg-rate
- no agg-rate-limit
- filter [ip ip-filter-id]
- filter [ipv6 ipv6-filter-id]
- filter [mac mac-filter-id]
- no filter [ip ip-filter-id] [ipv6 ipv6 -filter-id] [mac mac-filter-id]
- qos policy-id
- no qos
- ingress
- aggregate-meter-rate rate-in-kbps [burst burst-in-kbits]
- no aggregate-meter-rate
- filter [ip ip-filter-id]
- filter [ipv6 ipv6-filter-id]
- filter [mac mac-filter-id]
- no filter [ip ip-filter-id] [ipv6 ipv6-filter-id] [mac mac-filter-id]
- qos policy-id [enable-table-classification]
- no qos
VRRP commands
IES VRRP commands are only supported on 7210 SAS platforms operating in network mode.
config
- service
- ies service-id [customer customer-id] [vpn vpn-id]
- interface ip-int-name
- ipv6
- vrrp virtual-router-id [owner]
- no vrrp virtual-router-id
- [no] backup ip-address
- init-delay seconds
- no init-delay
- [no] master-int-inherit
- message-interval {[seconds] [milliseconds milliseconds]}
- no message-interval
- [no] ping-reply
- policy vrrp-policy-id
- no policy
- [no] preempt
- priority priority
- no priority
- [no] shutdown
- [no] standby-forwarding
- [no] telnet-reply
- [no] traceroute-reply
- vrrp virtual-router-id [owner]
- no vrrp virtual-router-id
- authentication-key {authentication-key | hash-key} [hash | hash2]
- no authentication-key
- [no] backup ip-address
- [no] bfd-enable [service-id] interface interface-name dst-ip ip-address
- init-delay seconds
- no init-delay
- [no] master-int-inherit
- message-interval {[seconds] [milliseconds milliseconds]}
- no message-interval
- [no] ping-reply
- policy vrrp-policy-id
- no policy
- [no] preempt
- priority priority
- no priority
- [no] shutdown
- [no] ssh-reply
- [no] standby-forwarding
- [no] telnet-reply
- [no] traceroute-reply
Interface IPv6 commands
config
- service
- ies service-id [customer customer-id] [create]
- [no] interface ip-int-name [create]
- ipv6
- no ipv6
- [no] address ipv6-address/prefix-length [eui-64] [preferred]
- icmp6
- [no] packet-too-big number seconds
- [no] param-problem number seconds
- [no] redirects number seconds
- [no] time-exceeded number seconds
- [no] unreachables number seconds
- [no] link-local-address ipv6-address [preferred]
- [no] local-proxy-nd
- [no] neighbor ipv6-address mac-address
- [no] proxy-nd-policy policy-name [policy-name...(up to 5 max)]
Show commands
show
- service
- customer [customer-id] [site customer-site-name]
- sap-using [sap sap-id]
- sap-using interface [ip-address | ip-int-name]
- sap-using [ingress | egress] filter filter-id
- service-using [ingress] qos-policy qos-policy-id
- service-using [ies] [customer customer-id]
- id service-id
- all
- arp [ip-address] | [mac ieee-address] | [sap sap-id] | [interface ip-int-name]
- base
- interface [ip-address | ip-int-name] [detail]
Command descriptions
IES service configuration commands
Generic commands
description
Syntax
description long description-string
no description
Context
config>service>ies
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
No description associated with the configuration context.
Parameters
- string
The description character string. Allowed values are any string up to 80 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.
shutdown
Syntax
[no] shutdown
Context
config>service>ies
config>service>ies>if
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
config>service>ies>if>vrrp
config>service>ies>if>dhcp
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described as follows in Special Cases.
The no form of this command places the entity into an administratively enabled state.
Special Cases
- IES
The default administrative status of an IES service is down. While the service is down, all its associated virtual router interfaces are operationally down. The administrative state of the service is not reflected in the administrative state of the virtual router interface.
For example if:
1) An IES service is operational and an associated interface is shut down.
2) The IES service is administratively shutdown and brought back up.
3) The interface shutdown remains in administrative shutdown state.
A service is regarded as operational provided that one IP Interface is operational.
- IES IP Interfaces
When the IP interface is shutdown, it enters the administratively and operationally down states. For a SAP bound to the IP interface, no packets are transmitted out the SAP and all packets received on the SAP are dropped while incrementing the packet discard counter.
- VRRP Protocol Handling
On all 7210 SAS platforms, VRRP is created in the no shutdown state.
On the 7210 SAS-Mxp, the protocol is handled as follows.
The configure>service>ies>if>vrrp command instantiates the protocol in the no shutdown state and resources are allocated to enable the node to process the protocol.
To deallocate resources, you must issue the configure>service>ies>if>vrrp>shutdown and configure>service>ies>if>no vrrp commands to allow the node to boot up correctly after the reboot. It is not sufficient to only issue a configure>service>ies>if>vrrp>shutdown command.
Note that the resources for VRRP are allocated when the VRRP context is enabled either in the base routing instance or the VPRN service instance. Resources are deallocated when the configuration of the last VRRP context under either base routing instances or VPRN service is removed or shutdown.
- VRRPv3 Protocol Handling
On all 7210 SAS platforms, VRRPv3 is created in the no shutdown state.
On the 7210 SAS-Mxp, the protocol is handled as follows.
The configure>service>ies>if>ipv6>vrrp command instantiates the protocol in the no shutdown state and resources are allocated to enable the node to process the protocol.
To deallocate resources, you must issue the configure>service>ies>if>ipv6>vrrp>shutdown and configure>service>ies>if>ipv6>no vrrp commands to allow the node to boot up correctly after the reboot. It is not sufficient to only issue a configure>service>ies>if>vrrp>ipv6>shutdown command.
Note that the resources for VRRPv3 are allocated when the VRRPv3 context is enabled either in the base routing instance or the VPRN service instance. Resources are deallocated when the configuration of the last VRRPv3 context under either base routing instances or VPRN service is removed or shutdown.
- DHCP Protocol Handling for 7210 SAS-Mxp
When the no shutdown command is issued in the configure>service>ies>if>dhcp context under the first IPv4 interface configured in the VPRN service instance, resources are allocated to enable the node to process the protocol. The resources are deallocated when you issue the configure>service>ies>if>dhcp>shutdown command for the last IPv4 interface enabled to use DHCP relay IPv4 configured in the VPRN service instance.
IES global commands
ies
Syntax
ies service-id customer customer-id [create] [vpn vpn-id]
no ies service-id
Context
config>service
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command creates or maintains an Internet Enhanced Service (IES) instance.
If the service-id does not exist, a context for the service is created. If the service-id exists, the context for editing the service is entered.
IP interfaces defined within the context of an IES service ID must have a SAP created.
When a service is created, the customer keyword and customer-id must be specified which associates the service with a customer. The customer-id must already exist having been created using the customer command in the service context. When a service has been created with a customer association, it is not possible to edit the customer association. The service must be deleted and recreated with a new customer association.
When a service is created, the use of the customer customer-id is optional for navigating into the service configuration context. Attempting to edit a service with the incorrect customer-id specified results in an error.
More than one IP interface may be created within a single IES service ID.
For 7210 SAS platforms operating in access-uplink mode, IES is used for in-band management of the node and cannot be used to deliver services. Typically, a single IP interface per IES is sufficient for management purposes.
The no form of this command deletes the IES service instance with the specified service-id. The service cannot be deleted until all the IP interfaces defined within the service ID have been shutdown and deleted.
Default
No IES service instances exist until they are explicitly created.
Parameters
- service-id
Specifies the unique service identification number or string identifying the service in the service domain. This ID must be unique to this service and may not be used for any other service of any type. The service-id must be the same number used for every 7210 SAS on which this service is defined.
- customer customer-id
Specifies the customer ID number to be associated with the service. This parameter is required on service creation and optional for service editing or deleting.
- vpn vpn-id
Specifies the VPN ID assigned to the service. This parameter is only supported on 7210 SAS platforms operating in network mode.
service-name
Syntax
service-name service-name
no service-name
Context
config>service>epipe
config>service>ies
config>service>vpls
config>service>vprn
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures an optional service name, up to 64 characters, which adds a name identifier to a specific service to then use that service name in configuration references as well as display and use service names in show commands throughout the system. This helps the service provider/administrator to identify and manage services within the 7210 SAS platforms.
All services are required to assign a service ID to initially create a service. However, either the service ID or the service name can be used o identify and reference a specific service when it is initially created.
Parameters
- service-name
Specifies a unique service name to identify the service. Service names may not begin with an integer (0-9).
IES interface IPv6 commands
ipv6
Syntax
[no] ipv6
Context
config>service>ies>if
config>service>vprn>if (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command enables IPv6 for an IES interface.
address
Syntax
address ipv6-address/prefix-length [eui-64]
no address ipv6-address/prefix-length
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command assigns an IPv6 address to the IES interface.
Parameters
- ipv6-address/prefix-length
Specifies the IPv6 address on the interface.
- eui-64
When this keyword is specified, a complete IPv6 address from the supplied prefix and 64-bit interface identifier is formed. The 64-bit interface identifier is derived from MAC address on Ethernet interfaces. For interfaces without a MAC address, for example ATM interfaces, the Base MAC address of the chassis is used.
icmp6
Syntax
icmp6
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command configures ICMPv6 parameters for the IES interface.
packet-too-big
Syntax
packet-too-big [number seconds]
no packet-too-big
Context
config>service>ies>if>ipv6>icmp6
config>service>vprn>if>ipv6>icmp6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command specifies whether packet-too-big ICMPv6 messages should be sent. When enabled, ICMPv6 packet-too-big messages are generated by this interface.
The no form of this command disables the sending of ICMPv6 packet-too-big messages.
Default
100 10
Parameters
- number
Specifies the number of packet-too-big ICMPv6 messages to send in the time frame specified by the seconds parameter.
- seconds
Specifies the time frame in seconds that is used to limit the number of packet-too-big ICMPv6 messages issued.
param-problem
Syntax
param-problem [number seconds]
no packet-too-big
Context
config>service>ies>if>ipv6>icmp6
config>service>vprn>if>ipv6>icmp6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command specifies whether parameter-problem ICMPv6 messages should be sent. When enabled', parameter-problem ICMPv6 messages are generated by this interface.
The no form of this command disables the sending of parameter-problem ICMPv6 messages.
Default
100 10
Parameters
- number
Specifies the number of parameter-problem ICMPv6 messages to send in the time frame specified by the seconds parameter.
- seconds
Specifies the time frame in seconds that is used to limit the number of parameter-problem ICMPv6 messages issued.
redirects
Syntax
redirects [number seconds]
no redirects
Context
config>service>ies>if>ipv6>icmp6
config>service>vprn>if>ipv6>icmp6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command configures ICMPv6 redirect messages. When enabled, ICMPv6 redirects are generated when routes are not optimal on this router and another router on the same subnetwork has a better route to alert that node that a better route is available.
The no form of this command disable ICMPv6 redirect messages.
Default
100 10
Parameters
- number
Specifies the number of version 6 redirects to be issued in the time frame specified by the seconds parameter.
- seconds
Specifies the time frame in seconds that is used to limit the number of version 6 redirects issued.
time-exceeded
Syntax
time-exceeded [number seconds]
no time-exceeded
Context
config>service>ies>if>ipv6>icmp6
config>service>vprn>if>ipv6>icmp6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command specifies whether time-exceeded ICMPv6 messages should be sent. When enabled, ICMPv6 time-exceeded messages are generated by this interface.
The no form of this command disables ICMPv6 time-exceeded messages.
Default
100 10
Parameters
- number
Specifies the number of ‟time-exceeded” ICMPv6 messages are to be issued in the time frame specified by the seconds parameter.
- seconds
Specifies the time frame in seconds that is used to limit the number of ‟time-exceeded” ICMPv6 message to be issued.
unreachables
Syntax
unreachables [number seconds]
no unreachables
Context
config>service>ies>if>ipv6>icmp6
config>service>vprn>if>ipv6>icmp6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command specifies that ICMPv6 host and network unreachable messages are generated by this interface.
The no form of this command disables ICMPv6 host and network unreachable messages.
Default
100 10
Parameters
- number
Specifies the number of destination unreachable ICMPv6 messages issued in the time frame specified by the seconds parameter.
- seconds
Specifies the time frame in seconds that is used to limit the number of destination unreachable ICMPv6 messages to be issued.
link-local-address
Syntax
link-local-address ipv6-address [preferred]
no link-local-address
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command configures the IPv6 link local address.
local-proxy-nd
Syntax
[no] local-proxy-nd
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command enables local proxy neighbor discovery on the interface.
The no form of this command disables local proxy neighbor discovery.
proxy-nd-policy
Syntax
proxy-nd-policy policy-name [policy-name...(up to 5 max)]
no proxy-nd-policy
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command applies a proxy neighbor discovery policy for the interface.
Parameters
- policy-name
Specifies an existing neighbor discovery policy name. Allowed values are any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes. The specified policy names must already be defined.
neighbor
Syntax
neighbor ipv6-address mac-address
no neighbor ipv6-address
Context
config>service>ies>if>ipv6
config>service>vprn>if>ipv6 (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command configures IPv6-to-MAC address mapping on the IES interface.
This command is not supported for RVPLS interfaces.
Parameters
- ipv6-address
Specifies the IPv6 address of the interface for which to display information.
- mac-address
Specifies the 48-bit MAC address for the IPv6-to-MAC address mapping in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
IES interface commands
interface
Syntax
interface ip-int-name [create]
no interface ip-int-name
Context
config>service>ies
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command creates a logical IP routing interface for an Internet Enhanced Service (IES). When created, attributes like an IP address and service access point (SAP) can be associated with the IP interface.
The interface command, under the context of services, is used to create and maintain IP routing interfaces within IES service IDs. The interface command can be executed in the context of an IES service ID. The IP interface created is associated with the service core network routing instance and default routing.
Interface names are case sensitive and must be unique within the group of defined IP interfaces defined for config service ies interface (that is, the network core router instance). Interface names must not be in the dotted decimal notation of an IP address. For example, the name ‟1.1.1.1” is not allowed, but ‟int-1.1.1.1” is allowed. Show commands for router interfaces use either interface names or the IP addresses. Use unique IP address values and IP address names to maintain clarity. It could be unclear to the user if the same IP address and IP address name values are used. Although not recommended, duplicate interface names can exist in different router instances.
When a new name is entered, a new logical router interface is created. When an existing interface name is entered, the user enters the router interface context for editing and configuration.
By default, there are no default IP interface names defined within the system. All IES IP interfaces must be explicitly defined. Interfaces are created in an enabled state.
Refer to the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for information about how to allocate addresses toward IP subnets using the following commands:
configure> system> resource-profile> router> max-ip-subnets (applies to the 7210 SAS-T (network mode), 7210 SAS-Mxp, 7210 SAS-Sx/S 1/10GE (standalone), and 7210 SAS-Sx 10/100GE)
configure> system> global-res-prof> router> max-ip-subnets (applies to the 7210 SAS-Sx/S 1/10GE (standalone-VC))
Before using IPv6, resources for IPv6 routes must be allocated. Refer to the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for information about how to use the following commands:
configure> system> resource-profile> router> max-ipv6-routes (applies to the 7210 SAS-T (network mode), 7210 SAS-Mxp, 7210 SAS-Sx/S 1/10GE (standalone), and 7210 SAS-Sx 10/100GE)
configure> system> global-res-prof> router> max-ipv6-routes (applies to the 7210 SAS-Sx/S 1/10GE (standalone-VC))
The no form of this command removes IP the interface and all the associated configuration. The interface must be administratively shutdown before issuing the no interface command.
For IES services, the IP interface must be shutdown before the SAP on that interface may be removed.
Parameters
- ip-int-name
Specifies the name of the IP interface. Interface names must be unique within the group of defined IP interfaces for config router interface and config service ies interface commands. An interface name cannot be in the form of an IP address. Interface names can be from 1 to 32 alphanumeric characters. If the string contains special characters (#, $, spaces, etc.), the entire string must be enclosed within double quotes.
If ip-int-name already exists within the service ID, the context is changed to maintain that IP interface. If ip-int-name already exists within another service ID, an error occurs and context is not changed to that IP interface. If ip-int-name does not exist, the interface is created and context is changed to that interface for further command processing.
address
Syntax
address {ip-address/mask | ip-address netmask}
address ip-address mask
no address
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command assigns an IP address or IP subnet to an IES IP router interface. Only one IP address can be associated with an IP interface. An IP address must be assigned to each IES IP interface. An IP address and a mask are used together to create a local IP prefix. The defined IP prefix must be unique within the context of the routing instance. It cannot overlap with other existing IP prefixes defined as local subnets on other IP interfaces in the same routing context within the 7210 SAS.
The IP address for the interface can be entered in either the Classless Inter-Domain Routing (CIDR) or traditional dotted decimal notation. The show commands display CIDR notation and is stored in configuration files.
The no form of this command removes the IP address assignment from the IP interface. When the no address command is entered, the interface becomes operationally down.
Address |
Admin state |
Oper state |
|---|---|---|
No address |
up |
down |
No address |
down |
down |
1.1.1.1 |
up |
up |
1.1.1.1 |
down |
down |
The operational state is a read-only variable. The address and admin states are the only controlling variable and can be set independently. If an address is assigned to an interface that is in an administratively up state, it becomes operationally up.
Parameters
- ip-address
Specifies the IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that is used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 to 223.255.255.255 (with support of /31 subnets).
- /
The forward slash is a parameter delimiter and separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-address, the ‟/” and the mask-length parameter. If a forward slash is not immediately following the ip-address, a dotted decimal mask must follow the prefix.
- mask
Specifies the subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask-length parameter. The mask length parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. Allowed values are integers in the range 0 – 30. Note that a mask length of 32 is reserved for system IP addresses.
- netmask
Specifies the subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The mask parameter indicates the complete mask that is used in a logical ‛AND’ function to derive the local subnet of the IP address. Allowed values are dotted decimal addresses in the range 128.0.0.0 to 255.255.255.254. A mask of 255.255.255.255 is reserved for system IP addresses.
arp-timeout
Syntax
arp-timeout seconds
no arp-timeout
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the minimum time in seconds an ARP entry learned on the IP interface is stored in the ARP table. ARP entries are automatically refreshed when an ARP request or gratuitous ARP is seen from an IP host, otherwise, the ARP entry is aged from the ARP table. If arp-timeout is set to a value of zero seconds, ARP aging is disabled.
The no form of this command restores arp-timeout to the default value.
Default
14400 seconds
Parameters
- seconds
Specifies the minimum number of seconds a learned ARP entry is stored in the ARP table, expressed as a decimal integer. A value of zero specifies that the timer is inoperative and learned ARP entries is not aged.
cflowd-parameters
Syntax
cflowd-parameters
Context
config>service>ies>interface
Platforms
7210 SAS-Mxp and 7210 SAS-Sx/S 1/10GE (standalone)
Description
Commands in this context configure traffic sampling for the interface.
sampling
Syntax
sampling {unicast|multicast} type {interface} [direction {ingress-only}]
no sampling {unicast|multicast}
Context
config>service>ies>interface>cflowd-parameters
Platforms
7210 SAS-Mxp and 7210 SAS-Sx/S 1/10GE (standalone)
Description
This command enables traffic sampling for the interface. Refer to ‟Configuration Notes” in the 7210 SAS-Mxp, R6, R12, S, Sx, T Router Configuration Guide for more information.
The no form of this command disables traffic sampling for the interface.
Default
no sampling
Parameters
- unicast
Keyword to enable unicast sampling.
- multicast
Keyword to enable multicast sampling.
- type
Keyword to configure the cflowd sampling type.
- interface
Keyword to configure interface cflowd sampling type.
- direction
keyword to configure the direction of the cflowd analysis.
- ingress-only
Keyword to configure the ingress direction only for cflowd analysis.
dhcp
Syntax
dhcp
Context
config>service>ies >if
config>service>vprn >if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
Commands in this context configure DHCP relay parameters.
gi-address
Syntax
gi-address ip-address [src-ip-addr]
no gi-address
Context
config>service>ies>if>dhcp (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the gateway interface address for the DHCP relay. A subscriber interface can include multiple group interfaces with multiple SAPs. The GI address is needed, when the router functions as a DHCP relay, to distinguish between different interfaces.
By default, the GI address used in the relayed DHCP packet is the primary IP address of a normal IES interface. Specifying the GI address allows the user to choose a secondary address. For group interfaces a GI address must be specified under the group interface DHCP context or subscriber-interface DHCP context in order for DHCP to function.
Default
no gi-address
Parameters
- ip-address
Specifies the host IP address to be used for DHCP relay packets.
- src-ip-address
Specifies that this GI address is to be the source IP address for DHCP relay packets.
action
Syntax
action {replace | drop | keep}
no action
Context
config>service>ies >if>dhcp>option (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the Relay Agent Information Option (Option 82) processing.
The no form of this command returns the system to the default value.
Default
no action
Parameters
- replace
Specifies that in the upstream direction (from the user), the Option 82 field from the router is inserted in the packet (overwriting any existing Option 82 field). In the downstream direction (toward the user) the Option 82 field is stripped (in accordance with RFC 3046).
- drop
Specifies that the DHCP packet is dropped if an Option 82 field is present, and a counter is incremented.
- keep
Specifies that the existing information is kept in the packet and the router does not add any additional information. In the downstream direction the Option 82 field is not stripped and is forwarded toward the client.
The behavior is slightly different in case of Vendor Specific Options (VSOs). When the keep parameter is specified, the router inserts its own VSO into the Option 82 field. This is only done when the incoming message has already an Option 82 field.
If no Option 82 field is present, the router does not create the Option 82 field. In this case, no VSO is added to the message.
circuit-id
Syntax
circuit-id [ascii-tuple | ifindex | sap-id | vlan-ascii-tuple]
no circuit-id
Context
config>service>ies >if>dhcp>option (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the router to send either an ASCII tuple, or the interface index (If Index), on the specified SAP ID in the circuit-id sub-option of the DHCP packet.
When disabled, the circuit-id sub-option of the DHCP packet is left empty.
The no form of this command returns the system to the default.
Default
circuit-id ascii-tuple
Parameters
- ascii-tuple
Specifies that the ASCII-encoded concatenated tuple is used which consists of the access-node-identifier, service-id, and interface-name, separated by ‟|”.
- ifindex
Specifies that the interface index is used. The If Index of a router interface can be displayed using the command show>router>if>detail.
- sap-id
Specifies that the SAP ID is used.
- vlan-ascii-tuple
Specifies that the format includes VLAN ID, dot1p bits in addition to what is included in ascii-tuple already. The format is supported on dot1q and qinq ports only. Therefore, when the Option 82 bits are stripped, dot1p bits is copied to the Ethernet header of an outgoing packet.
option
Syntax
[no] option
Context
config>service>ies >if>dhcp (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command enables DHCP Option 82 (Relay Agent Information Option) parameters processing and enters the context for configuring Option 82 sub-options.
The no form of this command returns the system to the default.
Default
no option
remote-id
Syntax
remote-id [mac | string string]
no remote-id
Context
config>service>ies >if>dhcp>option (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command sends the MAC address of the remote end (typically the DHCP client) in the remote-id sub-option of the DHCP packet. This command identifies the host at the other end of the circuit.
When disabled, the remote-id sub-option of the DHCP packet is left empty.
The no form of this command returns the system to the default.
Default
remote-id
Parameters
- mac
Specifies the MAC address of the remote end is encoded in the sub-option.
- string string
Specifies the remote-id.
vendor-specific-option
Syntax
[no] vendor-specific-option
Context
config>service>ies >if>dhcp>option (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the vendor specific sub-option of the DHCP relay packet.
client-mac-address
Syntax
[no] client-mac-address
Context
config>service>ies >if>dhcp>option>vendor (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option>vendor (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command sends the MAC address in the vendor specific sub-option of the DHCP relay packet.
The no form of this command disables sending the MAC address in the vendor specific sub-option of the DHCP relay packet.
sap-id
Syntax
[no] sap-id
Context
config>service>ies >if>dhcp>option>vendor (Network and Access-uplink Operating Mode)
config>service>vprn >if>dhcp>option>vendor (not supported in access-uplink operating mode)
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command sends the SAP ID in the vendor specific suboption of the DHCP relay packet.
The no form of this command disables sending the SAP ID in the vendor specific suboption of the DHCP relay packet.
allow-directed-broadcasts
Syntax
[no] allow-directed-broadcasts
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command forwards directed broadcasts out of the IP interface. A directed broadcast is a packet received on a local router interface destined for the subnet broadcast address on another IP interface. The allow-directed-broadcasts command on an IP interface enables or disables the transmission of packets destined to the subnet broadcast address of the egress IP interface.
When enabled, a frame destined to the local subnet on this IP interface is sent as a subnet broadcast out this interface. Care should be exercised when allowing directed broadcasts as it is a well-known mechanism used for denial-of-service attacks.
When disabled, directed broadcast packets discarded at this egress IP interface is counted in the normal discard counters for the egress SAP.
By default, directed broadcasts are not allowed and are discarded at this egress IP interface.
The no form of this command disables forwarding of directed broadcasts out of the IP interface.
Default
no allow-directed-broadcasts — Directed broadcasts are dropped.
delayed-enable
Syntax
delayed-enable seconds [init-only]
no delayed-enable
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode.
Description
This command delays making interface operational by the specified number of seconds. In environments with many subscribers, it can take time to synchronize the subscriber state between peers when the subscriber-interface is enabled (perhaps, after a reboot). To ensure that the state has time to be synchronized, the delayed-enable timer can be specified. The optional parameter init-only can be added to use this timer only after a reboot.
Default
no delayed-enable
Parameters
- seconds
Specifies the number of seconds to delay before the interface is operational.
ip-mtu
Syntax
ip-mtu octets
no ip-mtu
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the maximum IP transmit unit (packet) for the interface.
The MTU that is advertised from the IES size is:
MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))
By default (for Ethernet network interface) if no ip-mtu is configured, the packet size is (1568 - 14) = 1554.
The no form of this command returns the default value.
Default
no ip-mtu
Parameters
- octets
Specifies the number of octets in the IP-MTU.
loopback
Syntax
[no] loopback
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command specifies that the associated interface is a loopback interface that has no associated physical interface. As a result, the associated IES interface cannot be bound to a SAP.
Note that you can configure an IES interface as a loopback interface by issuing the loopback command instead of the sap command. The loopback flag cannot be set on an interface where a SAP is already defined and a SAP cannot be defined on a loopback interface.
secondary
Syntax
secondary {ip-address/mask | ip-address netmask} [broadcast {all-ones | host-ones}] [igp-inhibit]
no secondary {ip-address/mask | ip-address netmask}
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command assigns up to 64 secondary IP addresses to the interface, including the primary IP address. Each address can be configured in an IP address, IP subnet, or broadcast address format.
Default
n/a
Parameters
- ip-address
Specifies the IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that is used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation.
- /
The forward slash is a parameter delimiter that separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-address, the "/" and the mask parameter. If a forward slash does not immediately follow the ip-address, a dotted decimal netmask must follow the prefix.
- mask
Specifies the subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask parameter. The mask parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. Allowed values are integers in the range 1 to 32. A mask length of 32 is reserved for system IP addresses.
- netmask
Specifies the subnet mask in dotted decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted decimal mask. The netmask parameter indicates the complete mask that is used in a logical 'AND' function to derive the local subnet of the IP address. A netmask of 255.255.255.255 is reserved for system IP addresses.
- broadcast {all-ones | host-ones}
The optional broadcast parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones, which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert back to a broadcast address of host-ones.
The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being configured as all-ones, the address command must be executed with the broadcast parameter defined. The broadcast format on an IP interface can be specified when the IP address is assigned or changed.
This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) is received by the IP interface
- igp-inhibit
Specifies that the secondary IP address should not be recognized as a local interface by the running IGP.
static-arp
Syntax
static-arp ip-address ieee-mac-address
no static-arp ip-address
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures a static address resolution protocol (ARP) entry associating a subscriber IP address with a MAC address for the core router instance. This static ARP appears in the core routing ARP table. A static ARP can only be configured if it exists on the network attached to the IP interface.
If an entry for a particular IP address already exists and a new MAC address is configured for the IP address, the existing MAC address is replaced with the new MAC address.
The no form of this command removes a static ARP entry.
Parameters
- ip-address
Specifies the IP address for the static ARP in IP address dotted decimal notation.
- ieee-mac-address
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
static-arp
Syntax
[no] static-arp ieee-mac-addr unnumbered
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures a static address resolution protocol (ARP) entry associating an unnumbered interface with a MAC address for the core router instance. This static ARP appears in the core routing ARP table. A static ARP can only be configured if it exists on the network attached to the unnumbered interface.
If an entry for a particular unnumbered interface already exists, and a new MAC address is configured for the interface, the existing MAC address is replaced with the new MAC address.
The no form of this command removes a static ARP entry.
Parameters
- ieee-mac-addr
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
- unnumbered
Specifies the static ARP MAC for an unnumbered interface. Unnumbered interfaces support dynamic ARP. When this command is configured, it overrides any dynamic ARP.
vpls
Syntax
vpls service-name
Context
config>service
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command, within the IP interface context, is used to bind the IP interface to the specified service name.
The system does not attempt to resolve the service name provided until the IP interface is placed into the administratively up state (no shutdown). When the IP interface is administratively up, the system scans the available VPLS services that have the allow-ip-int-binding flag set for a VPLS service associated with the name. If the service name is bound to the service name when the IP interface is already in the administratively up state, the system immediately attempts to resolve the specific name.
If a VPLS service is found associated with the name and with the allow-ip-int-binding flag set, the IP interface is attached to the VPLS service allowing routing to and from the service virtual ports when the IP interface is operational.
A VPLS service associated with the specified name that does not have the allow-ip-int-binding flag set or a non-VPLS service associated with the name is ignored and is not attached to the IP interface.
If the service name is applied to a VPLS service after the service name is bound to an IP interface and the VPLS service allow-ip-int-binding flag is set at the time the name is applied, the VPLS service is automatically resolved to the IP interface if the interface is administratively up or when the interface is placed in the administratively up state.
If the service name is applied to a VPLS service without the allow-ip-int-binding flag set, the system does not attempt to resolve the applied service name to an existing IP interface bound to the name. To rectify this condition, the flag must first be set and then the IP interface must enter or reenter the administratively up state.
While the specified service name may be assigned to only one service context in the system, it is possible to bind the same service name to more than one IP interface. If two or more IP interfaces are bound to the same service name, the first IP interface to enter the administratively up state (if currently administratively down) or to reenter the administratively up state (if currently administratively up) when a VPLS service is configured with the name and has the allow-ip-intbinding flag set is attached to the VPLS service. Only one IP interface is allowed to attach to a VPLS service context. No error is generated for the remaining non-attached IP interfaces using the service name.
When an IP interface is attached to a VPLS service, the name associated with the service cannot be removed or changed until the IP interface name binding is removed. Also, the allow-ip-int-binding flag cannot be removed until the attached IP interface is unbound from the service name. Unbinding the service name from the IP interface causes the IP interface to detach from the VPLS service context. The IP interface may then be bound to another service name or a SAP or SDP binding may be created for the interface using the sap or spoke-sdp commands on the interface.
Parameters
- service-name
Specifies the service-name parameter is required when using the IP interface vpls command and specifies the service name that the system attempts to resolve to an allow-ip-int-binding enabled VPLS service associated with the name. The specified name is expressed as an ASCII string comprised of up to 32 characters. It does not need to already be associated with a service and the system does not check to ensure that multiple IP interfaces are not bound to the same name.
ingress
Syntax
ingress
Context
config>service>ies>if>vpls
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
The command under the vpls binding context defines the routed ip-filter-id optional filter overrides.
enable-table-classification
Syntax
[no] enable-table-classification
Context
config>service>ies>if>vpls>ingress
Platforms
7210 SAS-Mxp
Description
This command enables and disables the use of IP DSCP table-based classification to assign FC and profile on a per-interface ingress basis.
The match-criteria configured in the service ingress policy, which require CAM resources, are ignored. Only meters from the service ingress policy are used (and the meters still require CAM resources). If an IP DSCP classification policy is configured in the VPLS SAP ingress policy, it is not used to assign FC and profile.
The no form of this command disables table-based classification. When disabled, the IP ingress packets within a VPLS service attached to the IP interface use the SAP ingress QoS policy applied to the virtual port used by the packets, when defined.
Default
no enable-table-classification
routed-override-qos-policy
Syntax
routed-override-qos-policy policy-id
no routed-override-qos-policy
Context
config>service>ies>if>vpls>ingress
Platforms
7210 SAS-Mxp
Description
This command specifies an IP DSCP classification policy that is applied to all ingress packets entering the VPLS service. The DSCP classification policy overrides any existing SAP ingress QoS policy applied to SAPs for packets associated with the routing IP interface. The routed override QoS policy is optional and when it is not defined or it is removed, the IP routed packets use the existing SAP ingress QoS policy configured on the VPLS virtual port.
The no form of this command is used to remove the IP DSCP classification policy from the ingress IP interface. When removed, the IP ingress routed packets within a VPLS service attached to the IP interface use the SAP ingress QoS policy applied to the virtual port used by the packets, when defined.
Default
no routed-override-qos-policy
Parameters
- policy-id
Specifies the ID for the routed override QoS policy. Allowed values are an integer that corresponds to an existing IP DSCP classification policy in the configure>qos>dscp-classification context.
v4-routed-override-filter
Syntax
v4-routed-override-filter ip-filter-id
no v4-routed-override-filter
Context
config>service>ies>if>vpls>ingress
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command specifies an IPv4 filter ID applied to all ingress packets entering the VPLS service. The filter overrides existing ingress IPv4 filters applied to SAPs for packets associated with the routing IP interface. The override filter is optional, and if it is not defined or is removed, the IPv4 routed packets use the existing ingress IP filter on the VPLS virtual ports.
The no form of this command removes the IP routed override filter from the ingress IP interface.
Parameters
- ip-filter-id
Specifies the integer filter ID value for the IPv4 filter policy. The filter ID must already exist within the IPv4 filters created in the configure>filter>ip-filter context.
v6-routed-override-filter
Syntax
v6-routed-override-filter ip-filter-id
no v6-routed-override-filter
Context
config>service>ies>if>vpls>ingress
Platforms
7210 SAS-Mxp
Description
This command specifies an IPv6 filter ID applied to all ingress packets entering the VPLS service. The filter overrides existing ingress IPv6 filters applied to SAPs for packets associated with the routing IP interface. The override filter is optional, and if it is not defined or is removed, the IPv6 routed packets use the existing ingress IP filter on the VPLS virtual ports.
The no form of this command removes the IP routed override filter from the ingress IP interface.
Parameters
- ip-filter-id
Specifies the integer filter ID value for the IPv6 filter policy. The filter ID must already exist within the IPv6 filters created in the configure>filter>ip-filter context.
Interface VRRP commands
vrrp
Syntax
vrrp virtual-router-id [owner]
no vrrp virtual-router-id
Context
config>service>ies>if
config>service>ies>if>ipv6 (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures a Virtual Router ID (VRID) on the service IP interface. A VRID is internally represented in conjunction with the IP interface name. This allows the VRID to be used on multiple IP interfaces while representing different virtual router instances.
Two VRRP nodes can be defined on an IP interface. One, both, or none may be defined as owner. The nodal context of vrrp virtual-router-id is used to define the configuration parameters for the VRID.
The no form of this command removes the specified VRID from the IP interface. This terminates VRRP participation for the virtual router and deletes all references to the VRID. The VRID does not need to be shut down to remove the virtual router instance.
Parameters
- virtual-router-id
Specifies a new virtual router ID or one that can be modified on the IP interface.
authentication-key
Syntax
authentication-key [authentication-key | hash-key] [hash | hash2]
no authentication-key
Context
config>service>ies>if>vrrp
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command, within the vrrp virtual-router-id context, is used to assign a simple text password authentication key to generate master VRRP advertisement messages and validate received VRRP advertisement messages.
The authentication-key command is one of the few commands not affected by the presence of the owner keyword. If simple text password authentication is not required, this command is not required. If the command is re-executed with a different password key defined, the new key is used immediately. If a no authentication-key command is executed, the password authentication key is restored to the default value. The authentication-key command may be executed at any time, altering the simple text password used when authentication-type password authentication method is used by the virtual router instance. The authentication-type password command does not need to be executed before defining the authentication-key command.
To change the current in-use password key on multiple virtual router instances:
Identify the current master.
Shutdown the virtual router instance on all backups.
Execute the authentication-key command on the master to change the password key.
Execute the authentication-key command and no shutdown command on each backup key.
The no form of this command restores the default null string to the value of key.
Default
No default. The authentication data field contains the value 0 in all 16 octets.
Parameters
- authentication-key
Specifies the key parameter identifies the simple text password used when VRRP Authentication Type 1 is enabled on the virtual router instance. Type 1 uses a string eight octets long that is inserted into all transmitted VRRP advertisement messages and compared against all received VRRP advertisement messages. The authentication data fields are used to transmit the key.
The key parameter is expressed as a string consisting of up to eight alpha-numeric characters. Spaces must be contained in quotation marks ( ‟ ” ). The quotation marks are not considered part of the string.
The string is case sensitive and is left-justified in the VRRP advertisement message authentication data fields. The first field contains the first four characters with the first octet (starting with IETF RFC bit position 0) containing the first character. The second field holds the fifth through eighth characters. Any unspecified portion of the authentication data field is padded with the value 0 in the corresponding octet.
- hash-key
The hash key. The key can be any combination of ASCII characters up to 22 characters (encrypted). If spaces are used in the string, enclose the entire string in quotation marks (‟ ”).
This is useful when a user must configure the parameter, but, for security purposes, the actual unencrypted key value is not provided.
- hash
Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
- hash2
Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
backup
Syntax
[no] backup ip-address
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures virtual router IP addresses for the interface.
bfd-enable
Syntax
[no] bfd-enable [service-id] interface interface-name dst-ip ip-address
Context
config>service>ies>if>vrrp
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command assigns a bi-directional forwarding (BFD) session, providing a heart-beat mechanism for the VRRP instance. There can only be one BFD session assigned to a specified VRRP instance, but multiple VRRP instances can use the same BFD session. If the specified interface is configured with centralized BFD, the BFD transmit and receive intervals must be 300 ms or longer.
BFD controls the state of the associated interface. By enabling BFD on a protocol interface, the state of the protocol interface is tied to the state of the BFD session between the local node and the remote node. The parameters used for the BFD session are configured using the BFD command under the IP interface. The virtual router initiates the BFD session after the specified interface is configured with BFD.
Parameters
- service-id
Specifies the service ID of the interface that is running BFD.
- interface-name
Specifies the name of the interface that is running BFD.
- ip-address
Specifies the destination address to be used for the BFD session.
init-delay
Syntax
init-delay seconds
no init-delay
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures a VRRP initialization delay timer.
Default
no init-delay
Parameters
- seconds
Specifies the initialization delay timer for VRRP, in seconds.
master-int-inherit
Syntax
[no] master-int-inherit
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command allows the master instance to dictate the master down timer (non-owner context only).
Default
no master-int-inherit
message-interval
Syntax
message-interval {[seconds] [milliseconds milliseconds]}
no message-interval
Context
config>service>ies>if
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode.
Description
This command sets the advertisement timer and indirectly sets the master down timer on the virtual router instance. The message-interval setting must be the same for all virtual routers participating as a virtual router. Any VRRP advertisement message received with an Advertisement Interval field different from the virtual router instance configured message-interval value is silently discarded.
The message-interval command is available in both non-owner and owner vrrp virtual-router-id nodal contexts. If the message-interval command is not executed, the default message interval of 1 second is used.
The no form of this command restores the default message interval value of 1 second to the virtual router instance.
Parameters
- seconds
Specifies the number of seconds that transpire before the advertisement timer expires.
- milliseconds milliseconds
Specifies the milliseconds time interval between sending advertisement messages. This parameter is not supported on single-slot chassis.
ping-reply
Syntax
[no] ping-reply
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command enables the non-owner master to reply to ICMP Echo Requests directed at the virtual router instances IP addresses. The ping request can be received on any routed interface.
Ping must not be disabled at the management security level (either on the parental IP interface or based on the Ping source host address). When ping-reply is not enabled, ICMP Echo Requests to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to ICMP Echo Requests regardless of the setting of ping-reply configuration.
The ping-reply command is only available in non-owner vrrp virtual-router-id nodal context. If the ping-reply command is not executed, ICMP Echo Requests to the virtual router instance IP addresses are silently discarded.
The no form of this command restores the default operation of discarding all ICMP Echo Request messages destined to the non-owner virtual router instance IP addresses.
Default
no ping-reply
policy
Syntax
policy vrrp-policy-id
no policy
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command associates a VRRP priority control policy with the virtual router instance (non-owner context only).
Parameters
- vrrp-policy-id
Specifies a VRRP priority control policy.
preempt
Syntax
preempt
no preempt
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command overrides an existing non-owner master to the virtual router instance. Enabling preempt mode is recommended for correct operation of the base-priority and vrrp-policy-id definitions on the virtual router instance. If the virtual router cannot preempt an existing non-owner master, the affect of the dynamic changing of the in-use priority is greatly diminished.
The preempt command is only available in the non-owner vrrp virtual-router-id nodal context. The owner may not be preempted due to the fact that the priority of non-owners can never be higher than the owner. The owner always preempts all other virtual routers when it is available.
Non-owner virtual router instances only preempts when preempt is set and the current master has an in-use message priority value less than the virtual router instances in-use priority.
A master non-owner virtual router only allows itself to be preempted when the incoming VRRP Advertisement message Priority field value is one of the following:
Greater than the virtual router in-use priority value
Equal to the in-use priority value and the source IP address (primary IP address) is greater than the virtual router instance primary IP address
The no form of this command prevents a non-owner virtual router instance from preempting another, less desirable virtual router. Use the preempt command to restore the default mode.
Default
preempt
priority
Syntax
priority priority
no priority
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures a specific priority value to the virtual router instance. In conjunction with an optional policy command, the base-priority is used to derive the in-use priority of the virtual router instance.
The priority command is only available in the non-owner vrrp virtual-router-id nodal context. The priority of owner virtual router instances is permanently set to 255 and cannot be changed. For non-owner virtual router instances, if the priority command is not executed, the base-priority is set to 100.
The no form of this command restores the default value of 100 to base-priority.
Parameters
- base-priority
Specifies the base-priority parameter configures the base priority used by the virtual router instance. If a VRRP priority control policy is not also defined, the base-priority is the in-use priority for the virtual router instance.
ssh-reply
Syntax
[no] ssh-reply
Context
config>service>ies>if>vrrp
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command enables the non-owner master to reply to SSH Requests directed at the virtual router instance IP addresses. The SSH request can be received on any routed interface. SSH must not have been disabled at the management security level (either on the parental IP interface or based on the SSH source host address). Correct login and CLI command authentication is still enforced.
When the ssh-reply command is not enabled, SSH packets to non-owner master virtual IP addresses are silently discarded. Non-owner backup virtual routers never respond to SSH regardless of the ssh-reply configuration.
The ssh-reply command is only available in non-owner vrrp virtual-router-id nodal context. If the ssh-reply command is not executed, SSH packets to the virtual router instance IP addresses are silently discarded.
The no form of this command restores the default operation of discarding all SSH packets destined to the non-owner virtual router instance IP addresses.
Default
no ssh-reply
standby-forwarding
Syntax
[no] standby-forwarding
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command configures the forwarding of packets by a standby router.
The no form of this command specifies that a standby router should not forward traffic sent to virtual router's MAC address. However, the standby router should forward traffic sent to the standby router real MAC address.
Default
no standby-forwarding
telnet-reply
Syntax
[no] telnet-reply
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command enables the non-owner master to reply to TCP port 23 Telnet Requests directed at the virtual router instance IP addresses. The Telnet request can be received on any routed interface. Telnet must not have been disabled at the management security level (either on the parental IP interface or based on the Telnet source host address). Correct login and CLI command authentication is still enforced.
When the telnet-reply command is not enabled, TCP port 23 Telnet packets to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to Telnet Requests regardless of the telnet-reply configuration.
The telnet-reply command is only available in non-owner VRRP nodal context. If the telnet-reply command is not executed, Telnet packets to the virtual router instance IP addresses are silently discarded.
The no form of this command restores the default operation of discarding all Telnet packets destined to the non-owner virtual router instance IP addresses.
Default
no telnet-reply
traceroute-reply
Syntax
[no] traceroute-reply
Context
config>service>ies>if>vrrp
config>service>ies>if>ipv6>vrrp (7210 SAS-Mxp only)
Platforms
Supported on all 7210 SAS platforms as described in this document, except those operating in access-uplink mode
Description
This command is valid only if the VRRP virtual router instance associated with this entry is a non-owner.
When this command is enabled, a non-owner master can reply to traceroute requests directed to the virtual router instance IP addresses.
A non-owner backup virtual router never responds to such traceroute requests regardless of the trace-route-reply command status.
Default
no traceroute-reply
IES interface ICMP commands
icmp
Syntax
icmp
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
Commands in this context configure Internet Control Message Protocol (ICMP) parameters on an IES service
mask-reply
Syntax
[no] mask-reply
Context
config>service>ies>if>icmp
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command enables responses to Internet Control Message Protocol (ICMP) mask requests on the router interface.
If a local node sends an ICMP mask request to the router interface, the mask-reply command configures the router interface to reply to the request.
By default, the router instance replies to mask requests.
The no form of this command disables replies to ICMP mask requests on the router interface.
Default
mask-reply
redirects
Syntax
redirects [number seconds]
no redirects
Context
config>service>ies>if>icmp
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the rate for Internet Control Message Protocol (ICMP) redirect messages issued on the router interface.
When routes are not optimal on this router and another router on the same subnetwork has a better route, the router can issue an ICMP redirect to alert the sending node that a better route is available.
The redirects command enables the generation of ICMP redirects on the router interface. The rate at which ICMP redirects is issued can be controlled with the optional number and seconds parameters by indicating the maximum number of redirect messages that can be issued on the interface for a specific time interval.
By default, generation of ICMP redirect messages is enabled at a maximum rate of 100 per 10 second time interval.
The no form of this command disables the generation of icmp redirects on the router interface.
Default
redirects 100 10
Parameters
- number
Specifies the maximum number of ICMP redirect messages to send. This parameter must be specified with the seconds parameter.
- seconds
Specifies the time frame in seconds used to limit the number of ICMP redirect messages that can be issued.
ttl-expired
Syntax
ttl-expired number seconds
no ttl-expired
Context
config>service>ies>if>icmp
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the rate Internet Control Message Protocol (ICMP) TTL expired messages are issued by the IP interface.
By default, generation of ICMP TTL expired messages is enabled at a maximum rate of 100 per 10 second time interval.
The no form of this command disables the limiting the rate of TTL expired messages on the router interface.
Default
ttl-expired 100 10
Parameters
- number
Specifies the maximum number of ICMP TTL expired messages to send, expressed as a decimal integer. This parameter must be specified with the seconds parameter.
- seconds
Specifies the time frame in seconds used to limit the number of ICMP TTL expired messages that can be issued, expressed as a decimal integer.
unreachables
Syntax
unreachables [number seconds]
no unreachables
Context
config>service>ies>if>icmp
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command configures the rate for ICMP host and network destination unreachable messages issued on the router interface.
The unreachables command enables the generation of ICMP destination unreachables on the router interface. The rate at which ICMP unreachables is issued can be controlled with the optional number and time parameters by indicating the maximum number of destination unreachable messages which can be issued on the interface for a specific time interval.
By default, generation of ICMP destination unreachable messages is enabled at a maximum rate of 10 per 60 second time interval.
The no form of this command disables the generation of icmp destination unreachable messages on the router interface.
Default
unreachables 100 10
Parameters
- number
Specifies the maximum number of ICMP unreachable messages to send. This parameter must be specified with the seconds parameter.
- seconds
Specifies the time frame in seconds used to limit the number of ICMP unreachable messages that can be issued.
IES SAP commands
sap
Syntax
sap sap-id [create]
no sap sap-id
Context
config>service>ies>if
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters which identifies the service access point on the interface and within the router. Each SAP must be unique.
All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP does not exist on that object.
Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.
A SAP can only be associated with a single service. A SAP can only be defined on a port that has been configured as an access uplink port using the configure port port number ethernet mode access uplink command.
If a port is shutdown, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down although all traffic traversing the service is discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.
The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP is also deleted.
Default
No SAPs are defined.
Special Cases
- IES
A SAP is defined within the context of an IP routed interface. Each IP interface is limited to a single SAP definition. Attempts to create a second SAP on an IP interface fail and generate an error; the original SAP is not affected.
Parameters
- sap-id
Specifies the physical port identifier portion of the SAP definition. See Common CLI command descriptions for command syntax.
- port-id
Specifies the physical port ID in the slot/mda/port format.
If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 1/1/1 specifies port 1 on MDA 1 in slot 1.
The port-id must reference a valid port type. The port must be configured as an uplink access port.
- create
Keyword used to create a SAP instance. The create keyword requirement can be enabled/disabled in the environment>create context.
IES QoS and filter commands
egress
Syntax
egress
Context
config>service>ies>if>sap
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
Commands in this context apply egress policies and filter policies.
ingress
Syntax
ingress
Context
config>service>ies>if>sap
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
Commands in this context apply ingress policies and filter policies.
filter
Syntax
filter ip ip-filter-id ipv6 ipv6-filter-id
no filter
Context
config>service>ies>if>sap>egress
config>service>ies>if>sap>ingress
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command associates a filter policy with an ingress or egress Service Access Point (SAP). Filter policies control the forwarding and dropping of packets based on the matching criteria.
The filter command is used to associate a filter policy with a specified ip-filter-id with an ingress or egress SAP. The filter policy must already be defined before the filter command is executed. If the filter policy does not exist, the operation fails and an error message returned.
In general, filters applied to SAPs (ingress or egress) apply to all packets on the SAP. One exception is non-IP packets are not applied to the match criteria, so the default action in the filter policy applies to these packets.
The no form of this command removes any configured filter ID association with the SAP. The filter ID is not removed from the system.
Special Cases
- IES
Only IP filters are supported on an IES IP interface, and the filters only apply to routed traffic.
Parameters
- ip ip-filter-id
Specifies the ID for the IP filter policy. Allowed values are an integer in the range of 1 and 65535 that corresponds to a previously created IP filter policy in the configure>filter>ip-filter context.
- ipv6 ipv6-filter-id
Specifies the IPv6 filter policy. The filter ID must already exist within the created IPv6 filters.
qos
Syntax
qos policy-id
qos policy-id [enable-table-classification]
no qos policy-id
Context
config>service>ies>if>sap>egress (7210 SAS-Mxp only)
config>service>ies>if>sap>ingress
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command associates a Quality of Service (QoS) policy with an ingress or egress Service Access Point (SAP) or IP interface. QoS ingress and egress policies are important for the enforcement of SLA agreements. The policy ID must be defined before associating the policy with a SAP or IP interface. If the policy-id does not exist, an error is returned.
The qos command is used to associate both ingress and egress QoS policies. The qos command only allows ingress policies to be associated on SAP or IP interface ingress, and only allows egress policies on SAP or IP interface egress. Attempts to associate a QoS policy of the wrong type returns an error.
Only one ingress and one egress QoS policy can be associated with a SAP or IP interface at one time. Attempts to associate a second policy of same or different type replaces the earlier one with the new policy.
SAP egress QoS policies are only supported on the 7210 SAS-Mxp.
On the 7210 SAS-Mxp (ingress), using the enable-table-classification keyword enables the use of IP DSCP tables to assign FC and profile on a per-SAP ingress basis. The match-criteria configured in the service ingress policy, which require CAM resources, are ignored. Only meters from the service ingress policy are used (and the meters still require CAM resources). The IP DSCP classification policy configured in the SAP ingress policy is used to assign FC and profile. The default FC is assigned from the SAP ingress policy.
By default, no specific QoS policy is associated with the SAP or IP interface for ingress or egress, so the default QoS policy is used.
On the 7210 SAS-Mxp, when the interface is associated with RVPLS, the behavior of the qos command is affected. Refer to the config>service>ies>if>vpls> ingress>enable-table-classification and routed-override-qos-policy commands for more information about classification behavior for RVPLS.
The no form of this command removes the QoS policy association from the SAP or IP interface, and the QoS policy reverts to the default.
Parameters
- policy-id
Specifies the ingress/egress policy ID to associate with SAP or IP interface on ingress/egress. The policy ID must already exist.
- enable-table-classification
Enables the use of table-based classification instead of CAM-based classification at SAP ingress. The FC and profile are taken from the IP DSCP classification policy configured in the ingress policy, along with the meters from the SAP ingress policy. Match-criteria entries in the SAP ingress policy are ignored.
tod-suite
Syntax
tod-suite tod-suite-name
no tod-suite
Context
config>service>ies>if>sap
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
This command applies a time-based policy (filter or QoS policy) to the service SAP. The suite name must already exist in the config>cron context.
Default
no tod-suite
Parameters
- tod-suite-name
Specifies collection of policies (ACLs, QoS) including time-ranges that define the full or partial behavior of a SAP. The suite can be applied to more than one SAP.
IES interface SAP statistics commands
statistics
Syntax
statistics
Context
config>service>ies>if>sap
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
Commands in this context configure the counters associated with SAP ingress and egress.
ingress
Syntax
ingress
Context
config>service>ies>if>sap>statistics
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode.
Description
Commands in this context configure the ingress SAP statistics counters.
counter-mode
Syntax
counter-mode {in-out-profile-count | forward-drop-count}
Context
config>service>ies>if>sap>statistics>ingress
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command sets the counter mode for the counters associated with sap ingress meters or policers. A pair of counters is available with each meter. These counters count different events based on the counter mode value.
The counter mode can be changed if an accounting policy is associated with a SAP. If the counter mode is changed, the counters associated with the meter are reset and the counts are cleared. If an accounting policy is in use when the counter-mode is changed, a new record is written into the current accounting file.
Execute the following sequence of commands on the specified SAP to ensure that the correct statistics are collected when the counter-mode is changed:
Execute the config service ies interface sap no collect-stats command, to disable writing of accounting records for the SAP.
Change the counter mode to the desired option by executing the config service ies interface sap statistics ingress counter-mode {in-out-profile-count | forward-drop-count} command.
Execute the config service ies interface sap collect-stats command, to enable writing of accounting records for the SAP.
The no form of this command reverts the counter mode to the default value.
Default
in-out-profile-count
Parameters
- in-out-profile-count
If the counter mode is specified as in-out-profile-count, one counter counts the total in-profile packets and octets received on ingress of a SAP and another counts the total out-of-profile packets and octets received on ingress of a SAP. A packet is determined to be in-profile or out-of-profile based on the meter rate parameters configured. A packet is dropped by the policer if it exceeds the configured PIR rate. Dropped counts are not maintained in hardware when this mode is used. It is obtained by subtracting the sum of in-profile count and out-of-profile count from the total SAP ingress received count and displayed.
- forward-drop-count
If the counter mode is specified as forward-drop-count, one counter counts the forwarded packets and octets received on ingress of a SAP and another counts the dropped packets. The forwarded count is the sum of in-profile and out-of-profile packets/octets received on SAP ingress. The dropped count is count of packets/octets dropped by the policer. A packet is determined to be in-profile or out-of-profile based on the meter rate parameters configured. A packet is dropped by the policer if it exceeds the configured PIR rate. The in-profile count and out-of-profile count is not individually available when operating in this mode.
Show commands
customer
Syntax
customer [customer-id] [site customer-site-name]
Context
show>service
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays service customer information.
Parameters
- customer-id
Displays only information for the specified customer ID.
- site customer-site-name
Specifies the customer site which is an anchor point for an ingress and egress virtual scheduler hierarchy.
Output
The following output is an example of service customer information, and Output Fields: Customer describes the output fields.
Sample output*A:ALA-12# show service customer
==========================================================
Customers
==========================================================
Customer-ID : 1
Contact : Manager
Description : Default customer
Phone : (123) 555-1212
Customer-ID : 2
Contact : Tech Support
Description : TiMetra Networks
Phone : (234) 555-1212
Customer-ID : 3
Contact : Fred
Description : TiMetra Networks
Phone : (345) 555-1212
Customer-ID : 6
Contact : Ethel
Description : Epipe Customer
Phone : (456) 555-1212
Customer-ID : 7
Contact : Lucy
Description : ABC Customer
Phone : (567) 555-1212
Customer-ID : 8
Contact : Customer Service
Description : IES Customer
Phone : (678) 555-1212
Customer-ID : 274
Contact : Mssrs. Beaucoup
Description : ABC Company
Phone : 650 123-4567
Customer-ID : 94043
Contact : Test Engineer on Duty
Description : TEST Customer
Phone : (789) 555-1212
------------------------------------------------------
Total Customers : 8
-----------------------------------------------------------
*A:ALA-12#
*A:ALA-12# show service customer 274
==============================================================================
Customer 274
==============================================================================
Customer-ID : 274
Contact : Mssrs. Beaucoup
Description : ABC Company
Phone : 650 123-4567
------------------------------------------------------------------------------
Multi Service Site
------------------------------------------------------------------------------
Site : west
Description : (Not Specified)
==============================================================================
*A:ALA-12#
*A:ALA-12# show service customer 274 site west
==============================================================================
Customer 274
==============================================================================
Customer-ID : 274
Contact : Mssrs. Beaucoup
Description : ABC Company
Phone : 650 123-4567
------------------------------------------------------------------------------
Multi Service Site
------------------------------------------------------------------------------
Site : west
Description : (Not Specified)
Assignment : Card 5
I. Sched Pol: SLA1
E. Sched Pol: (Not Specified)
------------------------------------------------------------------------------
Service Association
------------------------------------------------------------------------------
No Service Association Found.
==============================================================================
*A:ALA-12#
|
Label |
Description |
|---|---|
|
|
The ID that uniquely identifies a customer. |
|
|
The name of the primary contact person. |
|
|
Generic information about the customer. |
|
|
The phone/pager number to reach the primary contact person. |
|
|
The total number of customers configured. |
|
Multi-service site |
|
|
|
Multi-service site name. A multi-service customer site is a group of SAPs with common origination and termination points. |
|
|
Information about a specific customer's multi-service site. |
|
|
The port ID, MDA, or card number, where the SAPs that are members of this multi-service site are defined. |
|
|
The ingress QoS scheduler policy assigned to this multi-service site. |
|
|
The egress QoS scheduler policy assigned to this multi-service site. |
|
Service Association |
|
|
|
The ID that uniquely identifies a service. |
|
|
Specifies the SAP assigned to the service. |
sap-using
Syntax
sap-using [sap sap-id]
sap-using interface [ip-address | ip-int-name]
sap-using [ingress | egress] filter filter-id
sap-using [ingress] qos-policy qos-policy-id
Context
show>service
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
Displays SAP information.
If no optional parameters are specified, the command displays a summary of all defined SAPs. The optional parameters restrict output to only SAPs matching the specified properties.
Parameters
- sap sap-id
Specifies the physical port identifier portion of the SAP definition. See Common CLI command descriptions for command syntax.
- ingress
Specifies matching an ingress policy.
- egress
Specifies matching an egress policy.
- filter filter-id
Specifies the ingress or egress filter policy ID for which to display matching SAPs.
- interface
Specifies matching SAPs with the specified IP interface.
- ip-addr
Specifies the IP address of the interface for which to display matching SAPs.
- ip-int-name
Specifies the IP interface name for which to display matching SAPs.
Output
The following output is an example of SAP information, and Output Fields: SAP-using describes the output fields.
Sample output*A:DUT-B# show service sap-using sap 1/1/3:100.*
=========================================================================
Service Access Points
=========================================================================
PortId SvcId Ing. Ing. Egr. Adm Opr
QoS Fltr Fltr
-------------------------------------------------------------------------
1/1/1 6 1 none none Up Down
1/1/2 700 1 none none Up Down
-------------------------------------------------------------------------
Number of SAPs : 2
=========================================================================
*A:DUT-B#
|
Label |
Description |
|---|---|
|
|
The ID of the access port where the SAP is defined. |
|
|
The value that identifies the service. |
|
|
The SAP MTU value. |
|
|
The SAP ingress QoS policy number specified on the ingress SAP. |
|
|
The MAC or IP filter policy ID applied to the ingress SAP. |
|
|
The SAP egress QoS policy number specified on the egress SAP. |
|
|
The MAC or IP filter policy ID applied to the egress SAP. |
|
|
The accounting policy ID assigned to the SAP. |
|
|
The administrative state of the SAP. |
|
|
The actual state of the SAP. |
service-using
Syntax
service-using [ies] [customer customer-id]
Context
show>service
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays the services matching certain usage properties. If no optional parameters are specified, all services defined on the system are displayed.
Parameters
- ies
Displays matching IES services.
- customer customer-id
Displays services only associated with the specified customer ID.
Output
The following output is an example of service information, and Output Fields: Service-using describes the output fields.
Sample outputA:ALA-48# show service service-using ies
===============================================================================
Services [ies]
===============================================================================
ServiceId Type Adm Opr CustomerId Last Mgmt Change
-------------------------------------------------------------------------------
88 IES Up Down 8 07/25/2006 15:46:28
89 IES Up Down 8 07/25/2006 15:46:28
104 IES Up Down 1 07/25/2006 15:46:28
200 IES Up Down 1 07/25/2006 15:46:28
214 IES Up Down 1 07/25/2006 15:46:28
321 IES Up Down 1 07/25/2006 15:46:28
322 IES Down Down 1 07/25/2006 15:46:28
1001 IES Up Down 1730 07/25/2006 15:46:28
-------------------------------------------------------------------------------
Matching Services : 8
-------------------------------------------------------------------------------
A:ALA-48#
|
Label |
Description |
|---|---|
|
|
The value that identifies the service. |
|
|
Specifies the service type configured for the service ID. |
|
|
The administrative state of the service. |
|
|
The operating state of the service. |
|
|
The ID of the customer who owns this service. |
|
|
The date and time of the most recent management-initiated change to this service. |
id
Syntax
id service-id {all | arp | base | sap | interface | mstp-configuration}
Context
show>service
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays information for a particular service-id.
Parameters
- service-id
The unique service identification number to identify the service in the service domain.
- all
Display detailed information about the service.
- arp
Display ARP entries for the service.
- base
Display basic service information.
- interface
Display service interfaces.
- mstp-configuration
Display MSTP information.
- sap
Display SAPs associated to the service.
- split-horizon-group
Display split horizon group information.
all
Syntax
all
Context
show>service>id
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays detailed information for all aspects of the service.
Output
The following output is an example of detailed service information, and Output Fields: Service ID All describes the output fields.
Sample output (split horizon group)*A:SAS>show>service# id 10 all
===============================================================================
Service Detailed Information
===============================================================================
Service Id : 10 Vpn Id : 0
Service Type : VPLS
Description : (Not Specified)
Customer Id : 1
Last Status Change: 07/22/2011 11:06:02
Last Mgmt Change : 07/22/2011 11:04:51
Admin State : Up Oper State : Up
MTU : 1450
MTU Check : Enabled
SAP Count : 2 SDP Bind Count : 2
Snd Flush on Fail : Disabled
Uplink Type: : MPLS
-------------------------------------------------------------------------------
Split Horizon Group specifics
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Split Horizon Group : test
-------------------------------------------------------------------------------
Description : test
Instance Id : 1 Last Change : 07/23/2011 11:40:50
-------------------------------------------------------------------------------
Service Destination Points(SDPs)
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Sdp Id 2:10 -(10.20.1.6)
-------------------------------------------------------------------------------
Description : (Not Specified)
SDP Id : 2:10 Type : Spoke
Split Horiz Grp : (Not Specified)
VC Type : VLAN VC Tag : 10
Admin Path MTU : 0 Oper Path MTU : 9186
Far End : 10.20.1.6 Delivery : MPLS
Admin State : Up Oper State : Up
Acct. Pol : None Collect Stats : Disabled
Ingress Label : 131063 Egress Label : 131067
Admin ControlWord : Preferred Oper ControlWord : True
Last Status Change : 07/22/2011 11:07:26 Signaling : TLDP
Last Mgmt Change : 07/22/2011 11:04:51 Force Vlan-Vc : Disabled
Flags : None
Peer Pw Bits : None
Peer Fault Ip : None
Max Nbr of MAC Addr: No Limit Total MAC Addr : 0
Learned MAC Addr : 0 Static MAC Addr : 0
MAC Learning : Enabled Discard Unkwn Srce: Disabled
BPDU Translation : Disabled
L2PT Termination : Disabled
MAC Pinning : Disabled
MAC Pinning : Disabled Block On Mesh Fail: False
KeepAlive Information :
Admin State : Disabled Oper State : Disabled
Hello Time : 10 Hello Msg Len : 0
Max Drop Count : 3 Hold Down Time : 10
Statistics :
I. Fwd. Pkts. : 0 I. Fwd. Octs. : 0
E. Fwd. Pkts. : 1 E. Fwd. Octets : 98
Extra-Tag-Drop-Pkts: n/a Extra-Tag-Drop-Oc*: n/a
Associated LSP LIST :
Lsp Name : toF
Admin State : Up Oper State : Up
-------------------------------------------------------------------------------
Stp Service Destination Point specifics
-------------------------------------------------------------------------------
Stp Admin State : Up Stp Oper State : Up
Core Connectivity : Down
Port Role : Designated Port State : Forwarding
Port Number : 2049 Port Priority : 128
Port Path Cost : 10 Auto Edge : Enabled
Admin Edge : Disabled Oper Edge : True
Link Type : Pt-pt BPDU Encap : Dot1d
Root Guard : Disabled Active Protocol : Rstp
Last BPDU from : N/A
Designated Bridge : This Bridge Designated Port Id: 34817
Fwd Transitions : 1 Bad BPDUs rcvd : 0
Cfg BPDUs rcvd : 0 Cfg BPDUs tx : 0
TCN BPDUs rcvd : 0 TCN BPDUs tx : 0
TC bit BPDUs rcvd : 0 TC bit BPDUs tx : 0
RST BPDUs rcvd : 0 RST BPDUs tx : 44265
-------------------------------------------------------------------------------
Sdp Id 4:10 -(10.20.1.3)
-------------------------------------------------------------------------------
Description : (Not Specified)
SDP Id : 4:10 Type : Spoke
Split Horiz Grp : (Not Specified)
VC Type : VLAN VC Tag : 10
Admin Path MTU : 0 Oper Path MTU : 9182
Far End : 10.20.1.3 Delivery : MPLS
Admin State : Up Oper State : Up
Acct. Pol : None Collect Stats : Disabled
Ingress Label : 131059 Egress Label : 131065
Admin ControlWord : Preferred Oper ControlWord : True
Last Status Change : 07/22/2011 11:07:26 Signaling : TLDP
Last Mgmt Change : 07/22/2011 11:04:51 Force Vlan-Vc : Disabled
Flags : None
Peer Pw Bits : None
Peer Fault Ip : None
Max Nbr of MAC Addr: No Limit Total MAC Addr : 0
Learned MAC Addr : 0 Static MAC Addr : 0
MAC Learning : Enabled Discard Unkwn Srce: Disabled
BPDU Translation : Disabled
L2PT Termination : Disabled
MAC Pinning : Disabled
MAC Pinning : Disabled Block On Mesh Fail: False
KeepAlive Information :
Admin State : Disabled Oper State : Disabled
Hello Time : 10 Hello Msg Len : 0
Max Drop Count : 3 Hold Down Time : 10
Statistics :
I. Fwd. Pkts. : 44285 I. Fwd. Octs. : 3852802
E. Fwd. Pkts. : 0 E. Fwd. Octets : 0
Extra-Tag-Drop-Pkts: n/a Extra-Tag-Drop-Oc*: n/a
Associated LSP LIST :
Lsp Name : toh2_facility
Admin State : Up Oper State : Up
Time Since Last Tr*: 01d00h37m
-------------------------------------------------------------------------------
Stp Service Destination Point specifics
-------------------------------------------------------------------------------
Stp Admin State : Up Stp Oper State : Up
Core Connectivity : Down
Port Role : Root Port State : Forwarding
Port Number : 2050 Port Priority : 128
Port Path Cost : 10 Auto Edge : Enabled
Admin Edge : Disabled Oper Edge : False
Link Type : Pt-pt BPDU Encap : Dot1d
Root Guard : Disabled Active Protocol : Rstp
Last BPDU from : 80:01.00:25:ba:02:de:90
Designated Bridge : 80:01.00:25:ba:02:de:90 Designated Port Id: 34817
Fwd Transitions : 1 Bad BPDUs rcvd : 0
Cfg BPDUs rcvd : 0 Cfg BPDUs tx : 0
TCN BPDUs rcvd : 0 TCN BPDUs tx : 0
TC bit BPDUs rcvd : 2 TC bit BPDUs tx : 2
RST BPDUs rcvd : 44284 RST BPDUs tx : 3
-------------------------------------------------------------------------------
Number of SDPs : 2
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Service Access Points
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
SAP 1/1/2
-------------------------------------------------------------------------------
Service Id : 10
SAP : 1/1/2 Encap : null
Description : (Not Specified)
Admin State : Up Oper State : Down
Flags : PortOperDown
Last Status Change : 07/22/2011 11:04:50
Last Mgmt Change : 07/23/2011 11:42:22
Dot1Q Ethertype : 0x8100 QinQ Ethertype : 0x8100
Split Horizon Group: (Not Specified)
Max Nbr of MAC Addr: No Limit Total MAC Addr : 0
Learned MAC Addr : 0 Static MAC Addr : 0
Admin MTU : 1514 Oper MTU : 1514
Ingr IP Fltr-Id : n/a Egr IP Fltr-Id : n/a
Ingr Mac Fltr-Id : n/a Egr Mac Fltr-Id : n/a
Ingr IPv6 Fltr-Id : n/a Egr IPv6 Fltr-Id : n/a
tod-suite : None
Mac Learning : Enabled Discard Unkwn Srce: Disabled
Mac Aging : Enabled Mac Pinning : Disabled
BPDU Translation : Disabled
L2PT Termination : Disabled
Acct. Pol : None Collect Stats : Disabled
-------------------------------------------------------------------------------
Stp Service Access Point specifics
-------------------------------------------------------------------------------
Stp Admin State : Up Stp Oper State : Up
Core Connectivity : Down
Port Role : Disabled Port State : Discarding
Port Number : 2051 Port Priority : 128
Port Path Cost : 10 Auto Edge : Enabled
Admin Edge : Disabled Oper Edge : False
Link Type : Pt-pt BPDU Encap : Dot1d
Root Guard : Disabled Active Protocol : Rstp
Last BPDU from : N/A
CIST Desig Bridge : N/A Designated Port : 0
Forward transitions: 0 Bad BPDUs rcvd : 0
Cfg BPDUs rcvd : 0 Cfg BPDUs tx : 0
TCN BPDUs rcvd : 0 TCN BPDUs tx : 0
TC bit BPDUs rcvd : 0 TC bit BPDUs tx : 0
RST BPDUs rcvd : 0 RST BPDUs tx : 0
MST BPDUs rcvd : 0 MST BPDUs tx : 0
-------------------------------------------------------------------------------
ARP host
-------------------------------------------------------------------------------
Admin State : outOfService
Host Limit : 1 Min Auth Interval : 15 minutes
-------------------------------------------------------------------------------
QOS
-------------------------------------------------------------------------------
Ingress qos-policy : 1
-------------------------------------------------------------------------------
Aggregate Policer
-------------------------------------------------------------------------------
rate : n/a burst : n/a
-------------------------------------------------------------------------------
Ingress QoS Classifier Usage
-------------------------------------------------------------------------------
Classifiers Allocated: 4 Meters Allocated : 2
Classifiers Used : 2 Meters Used : 2
-------------------------------------------------------------------------------
Sap Statistics
-------------------------------------------------------------------------------
Packets Octets
Ingress Stats: 0 0
Egress Stats: 0 0
Ingress Drop Stats: 0 0
Extra-Tag Drop Stats: n/a n/a
-------------------------------------------------------------------------------
Sap per Meter stats
-------------------------------------------------------------------------------
Packets Octets
Ingress Meter 1 (Unicast)
For. InProf : 0 0
For. OutProf : 0 0
Ingress Meter 11 (Multipoint)
For. InProf : 0 0
For. OutProf : 0 0
-------------------------------------------------------------------------------
SAP 1/1/7:10
-------------------------------------------------------------------------------
Service Id : 10
SAP : 1/1/7:10 Encap : q-tag
Description : (Not Specified)
Admin State : Up Oper State : Up
Flags : None
Last Status Change : 07/22/2011 11:06:02
Last Mgmt Change : 07/22/2011 11:04:51
Dot1Q Ethertype : 0x8100 QinQ Ethertype : 0x8100
Split Horizon Group: (Not Specified)
Max Nbr of MAC Addr: No Limit Total MAC Addr : 2
Learned MAC Addr : 0 Static MAC Addr : 2
Admin MTU : 1518 Oper MTU : 1518
Ingr IP Fltr-Id : n/a Egr IP Fltr-Id : n/a
Ingr Mac Fltr-Id : n/a Egr Mac Fltr-Id : n/a
Ingr IPv6 Fltr-Id : n/a Egr IPv6 Fltr-Id : n/a
tod-suite : None
Mac Learning : Enabled Discard Unkwn Srce: Disabled
Mac Aging : Enabled Mac Pinning : Disabled
BPDU Translation : Disabled
L2PT Termination : Disabled
Acct. Pol : None Collect Stats : Disabled
-------------------------------------------------------------------------------
Stp Service Access Point specifics
-------------------------------------------------------------------------------
Stp Admin State : Up Stp Oper State : Up
Core Connectivity : Down
Port Role : Designated Port State : Forwarding
Port Number : 2048 Port Priority : 128
Port Path Cost : 10 Auto Edge : Enabled
Admin Edge : Disabled Oper Edge : True
Link Type : Pt-pt BPDU Encap : Dot1d
Root Guard : Disabled Active Protocol : Rstp
Last BPDU from : N/A
CIST Desig Bridge : This Bridge Designated Port : 34816
Forward transitions: 1 Bad BPDUs rcvd : 0
Cfg BPDUs rcvd : 0 Cfg BPDUs tx : 0
TCN BPDUs rcvd : 0 TCN BPDUs tx : 0
TC bit BPDUs rcvd : 0 TC bit BPDUs tx : 0
RST BPDUs rcvd : 0 RST BPDUs tx : 44379
MST BPDUs rcvd : 0 MST BPDUs tx : 0
-------------------------------------------------------------------------------
ARP host
-------------------------------------------------------------------------------
Admin State : outOfService
Host Limit : 1 Min Auth Interval : 15 minutes
-------------------------------------------------------------------------------
QOS
-------------------------------------------------------------------------------
Ingress qos-policy : 1
-------------------------------------------------------------------------------
Aggregate Policer
-------------------------------------------------------------------------------
rate : n/a burst : n/a
-------------------------------------------------------------------------------
Ingress QoS Classifier Usage
-------------------------------------------------------------------------------
Classifiers Allocated: 4 Meters Allocated : 2
Classifiers Used : 2 Meters Used : 2
-------------------------------------------------------------------------------
Sap Statistics
-------------------------------------------------------------------------------
Packets Octets
Ingress Stats: 0 0
Egress Stats: 1 68
Ingress Drop Stats: 0 0
Extra-Tag Drop Stats: n/a n/a
-------------------------------------------------------------------------------
Sap per Meter stats
-------------------------------------------------------------------------------
Packets Octets
Ingress Meter 1 (Unicast)
For. InProf : 0 0
For. OutProf : 0 0
Ingress Meter 11 (Multipoint)
For. InProf : 0 0
For. OutProf : 0 0
-------------------------------------------------------------------------------
VPLS Spanning Tree Information
-------------------------------------------------------------------------------
VPLS oper state : Up Core Connectivity : Down
Stp Admin State : Up Stp Oper State : Up
Mode : Rstp Vcp Active Prot. : N/A
Bridge Id : 80:02.00:25:ba:04:37:10 Bridge Instance Id: 2
Bridge Priority : 32768 Tx Hold Count : 6
Topology Change : Inactive Bridge Hello Time : 2
Last Top. Change : 1d 00:38:51 Bridge Max Age : 20
Top. Change Count : 1 Bridge Fwd Delay : 15
Root Bridge : 80:01.00:25:ba:02:de:90
Primary Bridge : N/A
Root Path Cost : 10 Root Forward Delay: 15
Rcvd Hello Time : 2 Root Max Age : 20
Root Priority : 32769 Root Port : 2050
-------------------------------------------------------------------------------
Forwarding Database specifics
-------------------------------------------------------------------------------
Service Id : 10 Mac Move : Disabled
Mac Move Rate : 2 Mac Move Timeout : 10
Mac Move Retries : 3
Table Size : 250 Total Count : 2
Learned Count : 0 Static Count : 2
Remote Age : 900 Local Age : 300
High Watermark : 95% Low Watermark : 90%
Mac Learning : Enabled Discard Unknown : Disabled
Mac Aging : Enabled Relearn Only : False
-------------------------------------------------------------------------------
Service Endpoints
-------------------------------------------------------------------------------
Endpoint name : e1
Description : (Not Specified)
Revert time : 0
Act Hold Delay : 0
Ignore Standby Signaling : false
Suppress Standby Signaling : false
Block On Mesh Fail : false
Tx Active : none
Tx Active Up Time : 0d 00:00:00
Revert Time Count Down : N/A
Tx Active Change Count : 0
Last Tx Active Change : 07/22/2011 11:04:50
-------------------------------------------------------------------------------
Members
-------------------------------------------------------------------------------
No members found.
===============================================================================
Endpoint name : e2
Description : (Not Specified)
Revert time : 0
Act Hold Delay : 0
Ignore Standby Signaling : false
Suppress Standby Signaling : false
Block On Mesh Fail : false
Tx Active : none
Tx Active Up Time : 0d 00:00:00
Revert Time Count Down : N/A
Tx Active Change Count : 0
Last Tx Active Change : 07/22/2011 11:04:50
-------------------------------------------------------------------------------
Members
-------------------------------------------------------------------------------
No members found.
===============================================================================
===============================================================================
Label |
Description |
|---|---|
Service Detailed Information |
|
|
The service identifier. |
|
The number which identifies the VPN. |
|
Specifies the type of service. |
|
The SDP identifier. |
|
Generic information about the service. |
|
The customer identifier. |
|
The date and time of the most recent management-initiated change to this customer. |
|
The number of SAPs specified for this service. |
|
The number of SDPs bound to this service. |
Service Destination Points (SDPs) |
|
|
The SDP identifier. |
|
Indicates whether this Service SDP binding is a spoke or a mesh. |
|
The largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented. |
|
The actual largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented. |
|
Specifies the type of delivery used by the SDP: MPLS. |
|
The administrative state of this SDP. |
|
The operational state of this SDP. |
|
The label used by the far-end device to send packets to this device in this service by this SDP. |
|
The label used by this device to send packets to the far-end device in this service by this SDP. |
|
The ID of the ingress filter policy. |
|
The ID of the egress filter policy. |
|
Specifies the IP address of the remote end of the MPLS tunnel defined by this SDP. |
|
The date and time of the most recent change to this customer. |
|
Specifies the signaling protocol used to obtain the ingress and egress labels used in frames transmitted and received on this SDP. |
|
Specifies the operating status of the service. |
|
The current status of the service. |
|
Specifies how often the SDP echo request messages are transmitted on this SDP. |
|
Specifies the length of the SDP echo request messages transmitted on this SDP. |
|
Specifies the maximum number of consecutive SDP Echo Request messages that can be unacknowledged before the keepalive protocol reports a fault. |
|
Specifies the amount of time to wait before the keepalive operating status is eligible to enter the alive state. |
|
When the SDP type is MPLS, a list of LSPs used to reach the far-end router displays. All the LSPs in the list must terminate at the IP address specified in the far-end field. |
|
The total number SDPs applied to this service ID. |
Service Access Points |
|
|
The service identifier. |
|
The ID of the access port where this SAP is defined. |
|
Generic information about the SAP. |
|
The value of the label used to identify this SAP on the access port. |
|
The desired state of the SAP. |
|
The operating state of the SAP. |
|
The date and time of the last change. |
|
The largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented. |
|
The actual largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented. |
|
The SAP ingress QoS policy ID. |
|
The SAP egress QoS policy ID. |
|
The SAP ingress filter policy ID. |
|
The SAP egress filter policy ID. |
|
Indicates the multi-service site that the SAP is a member. |
|
Indicates the ingress QoS scheduler for the SAP. |
|
Indicates the egress QoS scheduler for the SAP. |
|
Indicates the use of table-based resource classification: Enabled (table-based) or Disabled (CAM-based) |
|
Indicates the DSCP classification policy ID. |
|
Indicates the accounting policy applied to the SAP. |
|
Specifies whether accounting statistics are collected on the SAP. |
SAP Statistics |
|
|
The number of packets or octets dropped. |
|
The number of high priority packets, as determined by the SAP ingress QoS policy. |
|
The number of low priority packets, as determined by the SAP ingress QoS policy. |
|
The number of in-profile packets or octets (rate below CIR) forwarded. |
|
The number of out-of-profile packets or octets (rate above CIR) forwarded. |
Split Horizon Group Specifics |
|
|
Displays the name of the split horizon group. |
|
Displays the description of the split horizon group. |
|
Displays the Instance identifier of the split horizon group. |
|
Displays the date and time of most recent change to the split horizon group. |
|
Displays the name of the split horizon group the SAP or spoke-SDP is associated. |
arp
Syntax
arp [ip-address] | [mac ieee-address] | [sap sap-id] | [interface ip-int-name]
Context
show>service>id
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays the ARP table for the IES instance. The ARP entries for a subscriber interface are displayed uniquely. Each MAC associated with the subscriber interface child group-interfaces are displayed with each subscriber interface ARP entry. They do not reflect actual ARP entries but are displayed along the interfaces ARP entry for easy lookup.
Parameters
- ip-address
Displays only ARP entries in the ARP table with the specified IP address.
- mac ieee-address
Displays only ARP entries in the ARP table with the specified 48-bit MAC address. The MAC address can be expressed in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers.
- sap sap-id
Displays SAP information for the specified SAP ID. See Common CLI command descriptions for command syntax.
- port-id
Specifies the port ID.
- interface
Specifies matching service ARP entries associated with the IP interface.
- ip-address
The IP address of the interface for which to display matching ARP entries.
- ip-int-name
Specifies the IP interface name for which to display matching ARPs.
Output
The following output is an example of ARP table information, and Output Fields: ARP describes the output fields.
Sample output*A:DUT-B# show service id 100 arp
==============================================================================
ARP Table
===============================================================================
IP Address MAC Address Type Expiry Interface SAP
-------------------------------------------------------------------------------
192.168.1.2 00:00:01:00:00:01 Other 00h00m00s HW 1/1/1:10*
195.168.1.1 32:67:01:01:00:03 Other 00h00m00s to7x 1/1/3:10*
195.168.1.2 32:68:01:01:00:02 Dynamic 03h59m58s to7x 1/1/3:10*
===============================================================================
*A:DUT-B#
|
Label |
Description |
|---|---|
|
|
The IP address. |
|
|
The specified MAC address. |
|
|
|
|
|
The age of the ARP entry. |
|
|
The interface applied to the service. |
|
|
The SAP ID. |
base
Syntax
base
Context
show>service>id
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays basic information about this IES service.
Output
The following output is an example of basic IES service information, and Output Fields: Base describes the output fields.
Sample output*A:ALA-A# show service id 100 base
---------------------------------------------------------------
Service Basic Information
---------------------------------------------------------------
Service Id : 100 Vpn Id : 100
Service Type : IES
Description : Default Ies description for service id 100
Customer Id : 1
Last Status Change: 08/29/2006 17:44:28
Last Mgmt Change : 08/29/2006 17:44:28
Admin State : Up Oper State : Up
SAP Count : 2
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier Type AdmMTU OprMTU Adm Opr
-------------------------------------------------------------------------------
sap:1/1/3 null 1514 1514 Up Up
sap:1/1/4 null 1514 1514 Up Up
===============================================================================
*A:ALA-A#
|
Label |
Description |
|---|---|
|
Service Id |
The service identifier. |
|
VPN Id |
The VPN identifier. |
|
Service Type |
The type of service. |
|
Description |
Displays generic information about the service. |
|
Customer Id |
The customer identifier. |
|
Last Status Change |
The date and time of the most recent status change. |
|
Last Mgmt Change |
The date and time of the most recent management-initiated change to this customer. |
|
Admin State |
The administrative state of the service. |
|
Oper State |
The operational state of the service. |
|
SAP Count |
The number of SAPs defined on the service. |
|
Identifier |
Specifies the service access point (SAP). |
|
Type |
The type of SAPs allowed in the service. It also describes the applied processing by the node to the packets received on these SAPs. |
|
AdminMTU |
The largest frame size (in octets) that the SAP can handle. |
|
OprMTU |
The actual largest service frame size (in octets) that can be transmitted through this port, without requiring the packet to be fragmented. |
|
Admin |
The administrative state of the SAP. |
|
Opr |
The operating state of the SAP. |
interface
Syntax
interface [ip-address | ip-int-name] [detail]
Context
show>service>id
Platforms
Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode
Description
This command displays information for the IP interfaces associated with the IES service. If no optional parameters are specified, a summary of all IP interfaces associated to the service are displayed.
Parameters
- ip-address
Specifies the IP address of the interface for which to display information.
- ip-int-name
Specifies the IP interface name for which to display information.
- detail
Displays detailed IP interface information.
Output
The following outputs are example of service ID interface information, and the associated tables describes the output fields.
Sample output — StandardA:ALA-49# show service id 88 interface
===============================================================================
Interface Table
===============================================================================
Interface-Name Adm Opr(v4/v6) Type Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
Sector A Up Down/Down IES 1/1/1.2.2
- -
test Up Down/Down IES 1/1/2:0
10.1.1.1/31 n/a
10.1.1.1/31 n/a
10.1.2.1/31 n/a
test27 Up Up/-- IES Sub subscriber
192.168.10.21/24 n/a
grp-if Up Down/-- IES Grp 1/2/2
Interfaces : 4
===============================================================================
A:ALA-49#
A:ALA-49# show service id 88 interface
===============================================================================
Interface Table
===============================================================================
Interface-Name Adm Opr(v4/v6) Type Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
Sector A Up Down/Down IES 1/1/1.2.2
- -
test Up Down/Down IES 1/1/2:0
10.1.1.1/31 n/a
10.1.1.1/31 n/a
10.1.2.1/31 n/a
test27 Up Up/-- IES Sub subscriber
192.168.10.21/24 n/a
grp-if Up Down/-- IES Grp 1/2/2
Interfaces : 4
===============================================================================
A:ALA-49#
|
Label |
Description |
|---|---|
|
|
The name used to refer to the IES interface. |
|
|
Specifies the interface type. |
|
|
Specifies the IP address/IP subnet/broadcast address of the interface. |
|
|
The administrative state of the interface. |
|
|
The operational state of the interface. |
|
|
The administrative state of the interface. |
|
|
The operational state of the interface. |
|
|
Specifies the IP address/IP subnet/broadcast address of the interface. |
|
|
The index corresponding to this IES interface. The primary index is 1; all IES interfaces are defined in the base virtual router context. |
|
|
Specifies the interface type. |
|
|
Specifies the SAP port ID. |
|
|
Specifies whether SNTP broadcast client mode is enabled or disabled. |
|
|
Specifies the timeout for an ARP entry learned on the interface. |
|
|
Specifies the 48-bit IEEE 802.3 MAC address. |
|
|
Specifies whether ICMP mask reply is enabled or disabled. |
|
|
Specifies whether cflowd collection and analysis on the interface is enabled or disabled. |
|
|
Specifies the rate for ICMP redirect messages. |
|
|
Specifies the rate for ICMP unreachable messages. |
|
|
Specifies the rate for ICMP TTL messages. |
This output is an example of IES routed VPLS interface override on the 7210 SAS-Mxp.
*A:Dut-A# show service id 2000 interface "iesRvplsIngr" detail
===============================================================================
Interface Table
===============================================================================
-------------------------------------------------------------------------------
Interface
-------------------------------------------------------------------------------
If Name : iesRvplsIngr
Admin State : Up Oper (v4/v6) : Down/Down
Down Reason C: assocObjNotReady
Protocols : None
IP Addr/mask : 10.55.55.2/24 Address Type : Primary
IGP Inhibit : Disabled Broadcast Address: Host-ones
HoldUp-Time : 0 Track Srrp Inst : 0
-------------------------------------------------------------------------------
Details
-------------------------------------------------------------------------------
Description : (Not Specified)
If Index : 14 Virt. If Index : 14
Last Oper Chg: 11/07/2017 04:48:25 Global If Index : 206
Mon Oper Grp : None
Srrp En Rtng : Disabled Hold time : N/A
Port Id : rvpls
TOS Marking : Untrusted If Type : IES
SNTP B.Cast : False IES ID : 2000
MAC Address : c4:08:4a:45:c0:e4 Mac Accounting : Disabled
Ingress stats: Disabled IPv6 DAD : Enabled
ARP Timeout : 14400s IPv6 Nbr ReachTi*: 30s
ARP Retry Ti*: 5000ms IPv6 stale time : 14400s
ARP Limit : Disabled IPv6 Nbr Limit : Disabled
ARP Threshold: Disabled IPv6 Nbr Thresho*: Disabled
ARP Limit Lo*: Disabled IPv6 Nbr Log Only: Disabled
IP MTU : (default)
IP Oper MTU : 9198
LdpSyncTimer : None
LSR Load Bal*: system
EGR Load Bal*: both
Vas If Type : none
TEID Load Ba*: Disabled
SPI Load Bal*: Disabled
uRPF Chk : disabled
uRPF Ipv6 Chk: disabled
Mpls Rx Pkts : 0 Mpls Rx Bytes : 0
Mpls Tx Pkts : 0 Mpls Tx Bytes : 0
DHCP6 Relay Details
Description : (Not Specified)
Admin State : Down Lease Populate : 0
Oper State : Down Nbr Resolution : Disabled
If-Id Option : None Remote Id : Disabled
Src Addr : Not configured
Python plcy : (Not Specified)
DHCP6 Server Details
Admin State : Down Max. Lease States: 8000
ICMP Details
Redirects : Number - 100 Time (seconds) - 10
Unreachables : Number - 100 Time (seconds) - 10
TTL Expired : Number - 100 Time (seconds) - 10
Routed VPLS Details
VPLS Name : ingRvpls
Binding Status : Up
Reason : (Not Specified)
Egr Reclass Plcy : 0
Ing Filter : none
Ingr IPv6 Flt : none
EVPN Tunnel : false
Table-based : enabled
Dscp Class Pol Id: 1
Network Domains Associated
default
-------------------------------------------------------------------------------
Admin Groups
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Srlg Groups
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Interfaces : 1
===============================================================================
* indicates that the corresponding row element may have been truncated.
*A:Dut-A#
|
Label |
Description |
|---|---|
|
|
The name used to refer to the IES interface. |
|
|
Specifies the interface type. |
|
|
Specifies the IP address/IP subnet/broadcast address of the interface. |
|
|
The administrative state of the interface. |
|
|
The operational state of the interface. |
|
|
The administrative state of the interface. |
|
|
The operational state of the interface. |
|
|
Specifies the IP address/IP subnet/broadcast address of the interface. |
|
|
The index corresponding to this IES interface. The primary index is 1; all IES interfaces are defined in the base virtual router context. |
|
|
Specifies the interface type. |
|
|
Specifies the SAP port ID. |
|
|
Specifies whether SNTP broadcast client mode is enabled or disabled. |
|
|
Specifies the timeout for an ARP entry learned on the interface. |
|
|
Specifies the 48-bit IEEE 802.3 MAC address. |
|
|
Specifies whether ICMP mask reply is enabled or disabled. |
|
|
Specifies whether cflowd collection and analysis on the interface is enabled or disabled. |
|
|
Specifies the rate for ICMP redirect messages. |
|
|
Specifies the rate for ICMP unreachable messages. |
|
|
Specifies the rate for ICMP TTL messages. |