Internet Enhanced Service

This chapter provides information about Internet Enhanced Services the process overview, and implementation notes.

IES service overview

Internet Enhanced Service (IES) is a routed connectivity service where the subscriber communicates with an IP router interface to send and receive Internet traffic. An IES has one or more logical IP routing interfaces each with a SAP which acts as the access point to the subscriber network.

IES allows IP interfaces to participate in the same routing instance used for service network core routing connectivity. IES services require that the IP addressing scheme used by the subscriber be unique between other provider addressing schemes and potentially the entire Internet. While IES is part of the routing domain, the usable IP address space may be limited. This allows a portion of the service provider address space to be reserved for service IP provisioning, and be administered by a separate, but subordinate address authority.

IP interfaces defined within the context of an IES service must have a SAP associated as the uplink access point to the subscriber network. Multiple IES services are created to segregate subscriber owned IP interfaces.

The following figure shows Internet enhanced service.

Figure 1. Internet Enhanced Service

The IES service provides in-band management connectivity. Other features include:

  • Multiple IES services are created to separate IP interfaces.

  • More than one IES service can be created for a single customer ID.

  • More than one IP interface can be created within a single IES service ID. All IP interfaces created within an IES service ID belong to the same customer.

IES features

This section describes various general service features and any special capabilities or considerations as they relate to IES services.

IP interfaces

IES customer IP interfaces can be configured with most of the options found on the core IP interfaces. The advanced configuration options supported are:

  • VRRP - for IES services with more than one IP interface

  • Secondary IP addresses

  • ICMP Options

NTP broadcase receipt configuration options found on core IP interfaces are not supported on IES IP interfaces.

IPv6 support for IES IP interfaces (in network mode)

IES IPv6 IP interfaces provide IPv6 connectivity in the routing base instance. It can be used to connect IPv6 networks over an IPv4 cloud using 6PE mechanisms. For more information about the 6PE, see the 7210 SAS-Mxp, R6, R12, S, Sx, T Router Configuration Guide.

IPv4 and IPv6 route table lookup entries are shared. Before adding routes for IPv6 destinations, route entries in the routed lookup table needs to be allocated for IPv6 addresses. This can be done using the CLI command configure>system>resource-profile>router max-ipv6-routes and configure>system>global-res-profile>max-ipv6-routes for 7210 SAS-R6 and 7210 SAS-R12. This command allocates route entries for /64 IPv6 prefix route lookups. The system does not allocate any IPv6 route entries by default and user needs to allocate some resources before using IPv6. For the command to take effect the node must be rebooted after making the change. For more information, see the following example and the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide.

A separate route table (or a block in the route table) is used for IPv6 /128-bit prefix route lookup. A limited amount of IPv6 /128 prefixes route lookup entries is supported. The software enables lookups in this table by default (that is, no user configuration is required to enable IPv6 /128-bit route lookup).

In addition, the number IP subnets can be configured by the user using the command configure>system>resource-profile>router>max-ip-subnets and configure>system>global-res-profile>max-ip-subnet for 7210 SAS-R6 and 7210 SAS-R12. Suitable default are assigned to this parameter. Users can increase the number of subnets if they plan to more IPv6 addresses per IPv6 interface.

Following features and restrictions is applicable for IPv6 IES IP interfaces:

  • IPv6 interfaces supports static routing, OSPv3, and IS-IS.

  • A limited amount of IPv6 /128 prefixes route lookup entries is supported on 7210 SAS platforms.

SAPs

This section provides information about SAPs on IES services.

Encapsulations

The following SAP encapsulation is supported on IES services.

  • Ethernet null

  • Ethernet dot1q

  • Ethernet QinQ

Routing protocols

IES IP interfaces are restricted to routing protocols that can be configured on the interface. IES IP interfaces support the following routing protocols:

  • OSPF

  • IS-IS

  • eBGP for the IPv4 and IPv6 address families (MPBGP is not supported)

  • IGMP

  • PIM

  • BFD

Note: The SAP for the IES IP interface is created at the IES service level, but the routing protocols for the IES IP interface are configured at the routing protocol level for the main router instance.

CPE connectivity check

Static routes are used within many IES services. Unlike dynamic routing protocols, there is no way to change the state of routes based on availability information for the associated CPE. CPE connectivity check adds flexibility so that unavailable destinations are removed from the service provider routing tables dynamically and minimize wasted bandwidth.

The availability of the far-end static route is monitored through periodic polling. The polling period is configured. If the poll fails a specified number of sequential polls, the static route is marked as inactive.

An ICMP ping mechanism is used to test the connectivity. If the connectivity check fails and the static route is de-activated, the router continues to send polls and reactivate any routes that are restored.

QoS policies

When applied to 7210 SAS IES services, service ingress QoS policies only create the unicast meters defined in the policy. The multipoint meters are not created on the service. With IES services, service egress QoS policies function as with other services where the class-based queues are created as defined in the policy.

On 7210 SAS ingress, only meters are supported on all the platforms.

Note: QoS policies only create the unicast meters defined in the policy if PIM is not configured on the associated IP interface; if PIM is configured, the multipoint meters are applied as well.

Both MAC and IPv4 criteria can be used in the QoS policies for traffic classification in an IES.

CPU QoS for IES access interfaces in network mode

Traffic bound to CPU received on IES access interfaces are policed/rate-limited and queued into CPU queues. The software allocates a policer per IP application or a set of IP applications, for rate-limiting CPU bound IP traffic from all IES access SAPs. The policers CIR/PIR values are set to appropriate values based on feature scaling and these values are not user configurable. The software allocates a set of queues for CPU bound IP traffic from all IES access SAPs. The queues are either shared by a set of IP applications or in some cases allocated to an IP application. The queues are shaped to appropriate rate based on feature scaling. The shaper rate is not user-configurable.

Note:
  • The instance of queues and policers used for traffic received on network port IP interfaces is different for traffic received from access port IP interfaces. Additionally the network CPU queues receive higher priority than the access CPU queues. This is done to provide better security and mitigate the risk of access traffic affecting the network side.

  • On the 7210 SAS-R6, the user can configure the IP DSCP value for self-generated traffic.

Filter policies

In network mode, only IP filter policies can be applied to IES services.

VRRP support for IES IP interfaces in network mode

Note: VRRP for IPv4 is supported for IES IPv4 interfaces in network mode only.

The Virtual Router Redundancy Protocol (VRRP) for IPv4 is defined in the IETF RFC 3768, Virtual Router Redundancy Protocol. VRRP describes a method of implementing a redundant IP interface shared between two or more routers on a common LAN segment, allowing a group of routers to function as one virtual router. When this IP interface is specified as a default gateway on hosts directly attached to this LAN, the routers sharing the IP interface prevent a single point of failure by limiting access to this gateway address. For more information about use of VRRP, see the 7210 SAS-Mxp, R6, R12, S, Sx, T Router Configuration Guide.

Configuring an IES service with CLI

This section provides information to configure IES services using the CLI.

Basic configuration

The most basic IES service configuration has the following entities:

  • Customer ID (see Configuring customer accounts).

  • An interface to create and maintain IP routing interfaces within IES service ID.

  • A SAP on the interface specifying the access port and encapsulation values.

IES service configuration on ALA-50

*A:ALA-50>config>service# info
----------------------------------------------
ies 1000 customer 50 vpn 1000 create
description "to internet"
interface "to-web" create
address 10.1.1.1/24
sap 1/1/10:100 create
exit
exit
no shutdown
----------------------------------------------
*A:ALA-50>config>service#

Common configuration tasks

This section provides a brief overview of the tasks that must be performed to configure IES services and provides the CLI commands:


  1. Associate an IES service with a customer ID.


  2. Associate customer ID with the service.


  3. Assign an IP address.


  4. Create an interface.


  5. Define SAP parameters on the interface:

    • Select nodes and ports.

    • Optional - select filter policies (configured in the config>filter context).


  6. Enable service.

Configuring IES components

Configuring an IES service

The following example shows basic IES service configuration output.

Basic IES service configuration
A:ALA-48>config>service#
----------------------------------------------
...
ies 1001 customer 1730 create
            description "to-internet"
            no shutdown
exit
----------------------------------------------
A:ALA-48>config>service#

Configuring IES interface parameters

The following example shows an IES configuration with interface parameters.

IES configuration with interface parameters
*A:7210-SAS>config>service>ies>if# info
----------------------------------------------
arp-timeout 10000
allow-directed-broadcasts
icmp
ttl-expired 120 38
exit
ip-mtu 1000
----------------------------------------------
*A:7210-SAS>config>service>ies>if#

Configuring SAP parameters

A SAP is a combination of a port and encapsulation parameters which identifies the service access point on the interface and within the router. Each SAP must be unique within a router.

When configuring IES access SAP parameters, a default QoS policy is applied to each SAP ingress and SAP egress. Additional QoS policies must be configured in the config>qos context. Filter policies are configured in the config>filter context and must be explicitly applied to a SAP. There are no default filter policies.

IES SAP configuration
----------------------------------------------
*A:ALA-A>config>service>ies>if# info
----------------------------------------------
address 10.10.36.2/24
sap 1/1/3:100 create
ingress
qos 101
exit
----------------------------------------------
*A:ALA-A>config>service>ies>if#

Configuring VRRP

Configuring VRRP parameters on an IES interface is optional and is available only in network mode. VRRP can be configured in either an owner or non-owner mode. The owner is the VRRP router whose virtual router IP address is the same as the real interface IP address. This is the router that responds to packets addressed to one of the IP addresses for ICMP pings, TCP connections and related addresses. All other virtual router instances participating in this message domain should have the same VRID configured and cannot be configured as an owner.

IES configuration
*A:ALA-A>config>service>ies>if# info
----------------------------------------------
address 10.10.36.2/24
vrrp 2 owner
backup 10.10.36.2
authentication-type password
authentication-key "3WErEDozxyQ" hash
exit
----------------------------------------------
*A:ALA-A>config>service#

Service management tasks

This section describes the service management tasks.

Modifying IES service parameters

Existing IES service parameters in the CLI or NMS can be modified, added, removed, enabled or disabled. The changes are applied immediately to all services when the charges are applied.

To display a list of customer IDs, use the show service customer command. Enter the parameters (such as description SAP information) and then enter the new information.

Modified service configuration
*A:ALA-A>config>service>ies# info
----------------------------------------------
ies 1000 customer 50 create
           description "This is a new description"
           interface "to-web" create
               address 10.1.1.1/24
               mac 00:dc:98:1d:00:00
               exit
           exit
           no shutdown
exit
----------------------------------------------
*A:ALA-A>config>service#

Deleting an IES service

An IES service cannot be deleted until SAPs and interfaces are shut down and deleted and the service is shutdown on the service level.

Use the following syntax to delete an IES service.

config>service# 
    [no] ies service-id
    shutdown
    [no] interface ip-int-name
    shutdown
        [no] sap sap-id
        shutdown

Disabling an IES service

Use the following syntax to shut down an IES service without deleting the service parameters.

config>service> ies service-id 
    shutdown

Re-enabling an IES service

Use the following syntax to re-enable an IES service that was shut down.

config>service> ies service-id 
    [no] shutdown
Re-enabling an IES service
config>service# ies 2000 
    config>service>ies# no shutdown
    config>service>ies# exit

IES services command reference

Command hierarchies

Interface commands

config
    - service
        - ies service-id [customer customer-id] [create] [vpn vpn-id]
            - [no] interface ip-int-name [create]
                - address {ip-address/mask | ip-address netmask}
                - no address
                - arp-timeout seconds
                - no arp-timeout
                - bfd transmit-interval [receive receive-interval] [multiplier multiplier] [echo-receive echo-interval] 
                - no bfd
                - dhcp
                    - delayed-enable seconds [init-only]
                    - no delayed-enable
                    - description description-string
                    - no description
                    - gi-address ip-address [src-ip-addr]
                    - no gi-address 
                    - [no] option
                        - action {replace | drop | keep}
                        - no action
                        - [no] circuit-id [ascii-tuple | ifindex | sap-id | vlan-ascii-tuple]
                        - [no] remote-id [mac | string string]
                        - [no] vendor-specific-option
                            - [no] client-mac-address
                            - [no] sap-id
                            - [no] service-id
                            - string text
                            - no string
                            - [no] system-id
                    - no relay-plain-bootp
                    - relay-plain-bootp
                    - no server
                    - server server1 [server2...(upto 8 max)]
                    - [no] shutdown
                    - [no] trusted
                - description description-string
                - no description
                - icmp
                    - redirects [number seconds]
                    - no redirects
                    - ttl-expired [number seconds]
                    - no ttl-expired
                    - unreachables [number seconds]
                    - no unreachables
                - ip-mtu octets 
                - no ip-mtu
                - [no] loopback
                - [no] sap sap-id [create]
                - secondary {ip-address/mask | ip-address netmask} [broadcast {all-ones | host-ones}] [igp-inhibit]
                - no secondary {ip-address/mask | ip-address netmask}
                - [no] shutdown
                - [no] static-arp ip-address

Interface SAP commands

config
    - service
        - ies service-id [customer customer-id] [create]
            - [no] interface ip-int-name
                - [no] sap sap-id [create]
                    - accounting-policy acct-policy-id
                    - no accounting-policy
                    - collect-stats
                    - no collect-stats
                    - description description-string 
                    - no description
                    - dist-cpu-protection policy-name
                    - no dist-cpu-protection
                    - ingress
                        - meter-override
                        - no meter-override
                            - meter meter-id [create]
                            - no meter meter-id
                                - adaptation-rule [pir adaptation-rule] [cir adaptation-rule]
                                -  cbs size [kbits | bytes | kbytes] 
                                - no cbs
                                - mbs size [kbits | bytes | kbytes] 
                                - no mbs
                                - mode mode
                                - no mode
                                - rate cir cir-rate [pir pir-rate]
                        - queue-override
                            - queue queue-id [create]
                                - adaptation-rule [pir adaptation-rule] [cir adaptation-rule]
                                - no port-parent
                                - port-parent [cir-level cir-level]  [pir-weight pir-weight]
                                - queue-mgmt name
                                - no queue-mgmt
                                - no rate
                                - rate [cir cir-rate] [pir pir-rate]
                    - statistics
                        - ingress
                            - counter-mode {in-out-profile-count| forward-drop-count}
                    - [no] tod-suite tod-suite-name 
                    - [no] shutdown

Interface SAP filter and QoS commands

config
    - service
        - ies service-id [customer customer-id] [vpn vpn-id] [create]
            - [no] interface ip-int-name
                - [no] sap sap-id [create]
                    - egress 
                        - agg-rate-limit agg-rate 
                        - no agg-rate-limit 
                        - aggregate-meter-rate rate-in-kbps [burst burst-in-kbits] [enable-stats]
                        - no aggregate-meter-rate
                        - filter ip ip-filter-id
                        - filter ipv6 ipv6 -filter-id 
                        - no filter [ip ip-filter-id] [ipv6 ipv6 -filter-id] 
                        - qos policy-id 
                        - no qos
                    - ingress 
                        - aggregate-meter-rate rate-in-kbps [burst burst-in-kbits] 
                        - no aggregate-meter-rate
                        - filter ip ip-filter-id
                        - filter ipv6 ipv6-filter-id
                        - no filter [ip ip-filter-id] [ ipv6 ipv6-filter-id] 
                        - qos policy-id [enable-table-classification] 
                        - no qos

VRRP commands (applicable only for network mode)

config 
    - service
        - ies service-id [customer customer-id] [vpn vpn-id]
            - interface ip-int-name
                - vrrp virtual-router-id [owner]
                - no vrrp virtual-router-id 
                    - authentication-key {authentication-key | hash-key} [hash | hash2]
                    - no authentication-key
                    - [no] backup ip-address
                    - [no] init-delay [service-id] interface interface-name dst-ip ip-address
                    - init-delay seconds
                    - no init-delay
                    - mac ieee-address
                    - no mac
                    - [no] master-int-inherit
                    - message-interval {[seconds] [milliseconds milliseconds]}
                    - no message-interval
                    - [no] ping-reply
                    - policy vrrp-policy-id
                    - no policy
                    - [no] preempt
                    - priority priority
                    - no priority
                    - [no] shutdown
                    - [no] ssh-reply
                    - [no] standby-forwarding
                    - [no] telnet-reply
                    - [no] traceroute-reply

Show commands

show
    - service
        - customer [customer-id] [site customer-site-name]
        - id service-id
            - all
            - arp [ip-address] | [mac ieee-address] | [sap sap-id] | [interface ip-int-name]
            - base
            - dhcp
                - statistics [sap sap-id] | [sdp sdp-id:vc-id] | [interface interface-name]
                - summary [interface interface-name | saps]
            - interface [ip-address | ip-int-name] [detail]
        - sap-using [sap sap-id]
        - sap-using interface [ip-address | ip-int-name]
        - sap-using [ingress | egress] filter filter-id
        - sap-using [ingress] qos-policy qos-policy-id
        - service-using [ies] [customer customer-id]

Command descriptions

Configuration commands

Generic commands
shutdown
Syntax

[no] shutdown

Context

config>service>ies

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of entities contained within. Many objects must be shut down before they may be deleted.

Services are created in the administratively down (shutdown) state. When a no shutdown command is entered, the service becomes administratively up and then tries to enter the operationally up state. Default administrative states for services and service entities is described as follows in Special Cases.

Note:
  • See the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for information about how to allocate addresses toward IP subnets using the configure system resource-profile router max-ip-subnets and config system global-res-profile max-ip-subnets CLI commands for the 7210 SAS-R6 and 7210 SAS-R12.

  • Before using IPv6, resources for IPv6 routes must be allocated. See the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for more information about how to use the configure system resource-profile router max-ipv6-routes and config system global-res-profile max-ipv6-routes CLI commands for the 7210 SAS-R6 and 7210 SAS-R12.

The no form of this command places the entity into an administratively enabled state.

Special Cases
IES

The default administrative status of an IES service is down. While the service is down, all its associated virtual router interfaces are operationally down. The administrative state of the service is not reflected in the administrative state of the virtual router interface; for example, if:

  • IES service is operational and an associated interface is shut down

  • IES service is administratively shutdown and brought back up

  • interface shutdown remains in administrative shutdown state

A service is regarded as operational as long as one IP Interface is operational.

IES IP Interfaces

When the IP interface is shut down, it enters the administratively and operationally down states. For a SAP bound to the IP interface, no packets are transmitted out the SAP and all packets received on the SAP are dropped while incrementing the packet discard counter.

description
Syntax

description long description-string

no description

Context

config>service>ies

config>service>ies>if>dhcp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies a text description stored in the configuration file for a configuration context.

The description command associates a text string with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters
string

Specifies the description character string. Allowed values are any string up to 80 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

dhcp
Syntax

dhcp

Context

config>service>ies >if

config>service>vprn >if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure DHCP parameters.

gi-address
Syntax

gi-address ip-address [src-ip-addr]

no gi-address

Context

config>service>ies>if>dhcp

config>service>vprn >if>dhcp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the gateway interface address for the DHCP relay. A subscriber interface can include multiple group interfaces with multiple SAPs. When the router functions as a DHCP relay, the GI address is needed to distinguish between different interfaces.

By default, the GI address used in the relayed DHCP packet is the primary IP address of a normal IES interface. Specifying the GI address allows the user to choose a secondary address. For group interfaces, a GI address must be specified in the group interface DHCP context or subscriber-interface DHCP context for DHCP to function.

Default

no gi-address

Parameters
ip-address

Specifies the host IP address to be used for DHCP relay packets.

src-ip-address

Specifies that this GI address is to be the source IP address for DHCP relay packets.

action
Syntax

action {replace | drop | keep}

no action

Context

config>service>ies >if>dhcp>option

config>service>vprn >if>dhcp>option

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures Relay Agent Information Option (Option 82) processing.

The no form of this command reverts to the default value.

Default

no action

Parameters
replace

Keyword to specify that, in the upstream direction (from the user), the Option 82 field from the router is inserted in the packet (overwriting any existing Option 82 field). In the downstream direction (toward the user) the Option 82 field is stripped (in accordance with RFC 3046).

drop

Keyword to specify the DHCP packet is dropped if an Option 82 field is present, and a counter is incremented.

keep

Keyword to specify that existing information is kept in the packet and the router does not add more information. In the downstream direction, the Option 82 field is not stripped and is forwarded toward the client.

The behavior is slightly different in case of Vendor Specific Options (VSOs). When the keep parameter is specified, the router inserts its VSO into the Option 82 field. This is done only when the incoming message already has an Option 82 field.

If no Option 82 field is present, the router does not create the Option 82 field. In this case, no VSO is added to the message.

circuit-id
Syntax

circuit-id [ascii-tuple | ifindex | sap-id | vlan-ascii-tuple]

no circuit-id

Context

config>service>ies >if>dhcp>option

config>service>vprn >if>dhcp>option

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the router to send either an ASCII tuple or the interface index (If Index) on the specified SAP ID in the circuit-id sub-option of the DHCP packet.

If disabled, the circuit-id sub-option of the DHCP packet is left empty.

The no form of this command reverts to the default value.

Default

circuit-id ascii-tuple

Parameters
ascii-tuple

Specifies that the ASCII-encoded concatenated tuple is used, which consists of the access-node-identifier, service-id, and interface-name, separated by ‟|”.

ifindex

Specifies that the interface index is used. Display the If Index of a router interface using the show router if detail command.

sap-id

Specifies that the SAP ID is used.

vlan-ascii-tuple

Specifies that the format includes VLAN ID, dot1p bits in addition to what is already included in the ascii-tuple. The format is supported on dot1q and qinq ports only. Therefore, when the Option 82 bits are stripped, dot1p bits are copied to the Ethernet header of an outgoing packet.

option
Syntax

[no] option

Context

config>service>ies >if>dhcp

config>service>vprn >if>dhcp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables DHCP Option 82 (Relay Agent Information Option) parameters processing and enables the context for configuring Option 82 sub-options.

The no form of this command reverts to the default value.

Default

no option

remote-id
Syntax

remote-id [mac | string string]

no remote-id

Context

config>service>ies >if>dhcp>option

config>service>vprn >if>dhcp>option

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command identifies the host at the other end of the circuit. When enabled, the router sends the MAC address of the remote end (typically the DHCP client) in the remote-id sub-option of the DHCP packet.

If disabled, the remote-id sub-option of the DHCP packet is left empty.

The no form of this command reverts to the default value.

Default

remote-id

Parameters
mac

Specifies that the MAC address of the remote end is encoded in the sub-option.

string string

Specifies the remote-id.

vendor-specific-option
Syntax

[no] vendor-specific-option

Context

config>service>ies >if>dhcp>option

config>service>vprn >if>dhcp>option

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the vendor-specific sub-option of the DHCP relay packet.

client-mac-address
Syntax

[no] client-mac-address

Context

config>service>ies >if>dhcp>option>vendor

config>service>vprn >if>dhcp>option>vendor

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the sending of the MAC address in the vendor-specific sub-option of the DHCP relay packet.

The no form of this command disables the sending of the MAC address in the vendor-specific sub-option of the DHCP relay packet.

sap-id
Syntax

[no] sap-id

Context

config>service>ies >if>dhcp>option>vendor

config>service>vprn >if>dhcp>option>vendor

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the sending of the SAP ID in the vendor-specific suboption of the DHCP relay packet.

The no form of this command disables the sending of the SAP ID in the vendor-specific suboption of the DHCP relay packet.

IES global commands
ies
Syntax

ies service-id customer customer-id [create] [vpn vpn-id]

no ies service-id

Context

config>service

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command creates or edits an IES service instance.

If the service-id does not exist, a context for the service is created. If the service-id exists, the context for editing the service is entered.

IP interfaces defined within the context of an IES service ID must have a SAP created.

When a service is created, the customer keyword and customer-id must be specified that associates the service with a customer. The customer-id must already exist, having been created using the customer command in the service context. When a service has been created with a customer association, it is not possible to edit the customer association. The service must be deleted and recreated with a new customer association.

When a service is created, the use of the customer customer-id parameter is optional for navigating into the service configuration context. Attempting to edit a service with the incorrect customer-id specified results in an error.

More than one IP interface may be created within a single IES service ID.

By default, no IES service instances exist until they are explicitly created.

The no form of this command deletes the IES service instance with the specified service-id. The service cannot be deleted until all the IP interfaces defined within the service ID have been shutdown and deleted.

Parameters
service-id

Specifies the service identification number or string for the service in the service domain. This ID must be unique to this service and may not be used for another service of any type. The service-idmust be the same number used for every router on which this service is defined.

Values

1 to 2147483648

customer customer-id

Specifies the customer ID number to be associated with the service. This parameter is required during service creation and optional for service editing or deleting.

Values

1 to 2147483647

vpn vpn-id

Specifies the VPN ID assigned to the service.

Values

1 to 2147483647

service-name
Syntax

service-name service-name

no service-name

Context

config>service>epipe

config>service>ies

config>service>vpls

config>service>vprn

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures an optional service name that adds a name identifier to a specific service to then use that service name in configuration references, as well as display and use service names in show commands throughout the system. This helps the service provider or administrator to identify and manage services within the 7210 SAS platforms.

All services are required to assign a service ID to initially create a service; however, either the service ID or the service name can be used to identify and reference a specific service when it is initially created.

Parameters
service-name

Specifies a unique service name, of up to 64 characters, to identify the service. Service names may not begin with an integer (0 to 9).

IES interface IPv6 commands
ipv6
Syntax

[no] ipv6

Context

config>service>ies>if

config>service>vprn>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables IPv6 for an IES interface.

address
Syntax

address ipv6-address/prefix-length [eui-64]

no address ipv6-address/prefix-length

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns an IPv6 address to the IES interface.

Parameters
ipv6-address/prefix-length

Specify the IPv6 address on the interface.

Values

ipv6-address/prefix: ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

  • x:x:x:x:x:x:d.d.d.d
  • x [0 — FFFF]H
  • d [0 — 255]D
  • prefix-length 1 to 128
eui-64

Keyword to specify that a complete IPv6 address from the supplied prefix and 64-bit interface identifier is formed. The 64-bit interface identifier is derived from MAC address on Ethernet interfaces. For interfaces without a MAC address, for example ATM interfaces, the Base MAC address of the chassis is used.

icmp6
Syntax

icmp6

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures ICMPv6 parameters for the IES interface.

packet-too-big
Syntax

packet-too-big [number seconds]

no packet-too-big

Context

config>service>ies>if>ipv6>icmp6

config>service>vprn>if>ipv6>icmp6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies whether ‟packet-too-big” ICMPv6 messages should be sent. When enabled, ICMPv6 ‟packet-too-big” messages are generated by this interface.

The no form of this command disables the sending of ICMPv6 ‟packet-too-big” messages.

Default

100 10

Parameters
number

Specifies the number of ‟packet-too-big” ICMPv6 messages to send in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time frame in seconds that is used to limit the number of ‟packet-too-big” ICMPv6 messages issued.

Values

1 to 60

Default

10

param-problem
Syntax

param-problem [number seconds]

no packet-too-big

Context

config>service>ies>if>ipv6>icmp6

config>service>vprn>if>ipv6>icmp6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies whether ‟parameter-problem” ICMPv6 messages should be sent. When enabled, ‟parameter-problem” ICMPv6 messages are generated by this interface.

The no form of this command disables the sending of ‟parameter-problem” ICMPv6 messages.

Default

100 10

Parameters
number

Specifies the number of ‟parameter-problem” ICMPv6 messages to send in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time frame in seconds that is used to limit the number of ‟parameter-problem” ICMPv6 messages issued.

Values

1 to 60

Default

10

redirects
Syntax

redirects [number seconds]

no redirects

Context

config>service>ies>if>ipv6>icmp6

config>service>vprn>if>ipv6>icmp6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures ICMPv6 redirect messages. When enabled, ICMPv6 redirects are generated when routes are not optimal on this router, and another router on the same subnetwork has a better route to alert the node that a better route is available.

When disabled, ICMPv6 redirects are not generated.

Default

redirects 100 10

Parameters
number

Specifies the number of version 6 redirects that are to be issued in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time frame in seconds that is used to limit the number of version 6 redirects issued.

Values

1 to 60

Default

10

time-exceeded
Syntax

time-exceeded [number seconds]

no time-exceeded

Context

config>service>ies>if>ipv6>icmp6

config>service>vprn>if>ipv6>icmp6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies whether ‟time-exceeded” ICMPv6 messages should be sent. When enabled, ICMPv6 ‟time-exceeded” messages are generated by this interface.

When disabled, ICMPv6 ‟time-exceeded” messages are not sent.

Default

time-exceeded 100 10

Parameters
number

Specifies the number of ‟time-exceeded” ICMPv6 messages that are to be issued in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time frame in seconds that is used to limit the number of ‟time-exceeded” ICMPv6 message to be issued.

Values

1 to 60

Default

10

unreachables
Syntax

unreachables [number seconds]

no unreachables

Context

config>service>ies>if>ipv6>icmp6

config>service>vprn>if>ipv6>icmp6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies that ICMPv6 host and network unreachable messages are generated by this interface.

When disabled, ICMPv6 host and network unreachable messages are not sent.

Default

unreachables 100 10

Parameters
number

Specifies the number of destination unreachable ICMPv6 messages that are issued in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time frame in seconds that is used to limit the number of destination unreachable ICMPv6 messages to be issued.

Values

1 to 60

Default

10

link-local-address
Syntax

link-local-address ipv6-address [preferred]

no link-local-address

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the IPv6 link local address.

local-proxy-nd
Syntax

[no] local-proxy-nd

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables local proxy neighbor discovery on the interface.

The no form of this command disables local proxy neighbor discovery.

proxy-nd-policy
Syntax

proxy-nd-policy policy-name [policy-name...(up to 5 max)]

no proxy-nd-policy

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command applies a proxy neighbor discovery policy for the interface.

Parameters
policy-name

Specifies an existing neighbor discovery policy name. Allowed values are any string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. The specified policy names must already be defined.

neighbor
Syntax

neighbor ipv6-address mac-address

no neighbor ipv6-address

Context

config>service>ies>if>ipv6

config>service>vprn>if>ipv6

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures IPv6-to-MAC address mapping on the IES interface.

Parameters
ipv6-address

Specifies the IPv6 address of the interface for which to display information.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

  • x: [0 to FFFF]H
  • d: [0 to 255]D
  • prefix-length [1 to 128]
mac-address

Specifies the 48-bit MAC address for the IPv6-to-MAC address mapping in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

IES interface commands
interface
Syntax

interface ip-int-name

no interface ip-int-name

Context

config>service>ies

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command creates a logical IP routing interface for an IES. When created, attributes like an IP address and service access point (SAP) can be associated with the IP interface.

The interface command, under the context of services, is used to create and maintain IP routing interfaces within IES service IDs. The interface command can be executed in the context of an IES service ID. The IP interface created is associated with the service core network routing instance and default routing

Interface names are case sensitive and must be unique within the group of defined IP interfaces defined for the config service ies interface command (that is, the network core router instance). Interface names must not be in the dotted decimal notation of an IP address. For example, the name ‟1.1.1.1” is not allowed, but ‟int-1.1.1.1” is allowed. Show commands for router interfaces use either interface names or the IP addresses. Use unique IP address values and IP address names to maintain clarity. It could be unclear to the user if the same IP address and IP address name values are used. Although not recommended, duplicate interface names can exist in different router instances.

When a new name is entered, a new logical router interface is created. When an existing interface name is entered, the user enters the router interface context for editing and configuration.

No default IP interface names are defined within the system; all IES IP interfaces must be explicitly defined. Interfaces are created in an enabled state.

Note:
  • See the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for information about allocating addresses toward IP subnets using the configure system resource-profile router max-ip-subnets command.

  • Before using IPv6, resources for IPv6 routes must be allocated. See the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for information about how to use the configure system resource-profile router max-ipv6-routes command

The no form of this command removes the IP interface and all the associated configuration. The interface must be administratively shutdown before issuing the no interface command.

For IES services, the IP interface must be shut down before the SAP on that interface may be removed.

Parameters
ip-int-name

Specifies the name of the IP interface. Interface names must be unique within the group of defined IP interfaces for config router interface and config service ies interface commands. An interface name cannot be in the form of an IP address. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

If ip-int-name already exists within the service ID, the context is changed to maintain that IP interface. If ip-int-name already exists within another service ID, an error occurs and the context are not changed to that IP interface. If ip-int-name does not exist, the interface is created and context is changed to that interface for further command processing.

Values

1 to 32 alphanumeric characters

address
Syntax

address {ip-address/mask | ip-address netmask}

address ip-address mask

no address

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns an IP address IP subnet, to an IES IP router interface. Only one IP address can be associated with an IP interface. An IP address must be assigned to each IES IP interface. An IP address and a mask are used together to create a local IP prefix. The defined IP prefix must be unique within the context of the routing instance. It cannot overlap with other existing IP prefixes defined as local subnets on other IP interfaces in the same routing context.

The IP address for the interface can be entered in either CIDR (Classless Inter-Domain Routing) or traditional dotted-decimal notation. The show commands display CIDR notation and is stored in configuration files.

By default, no IP address or subnet association exists on an IP interface until it is explicitly created.

Use the no form of this command to remove the IP address assignment from the IP interface. When the no address command is entered, the interface becomes operationally down.

The operational state is a read-only variable and the only controlling variables are the address and admin states. The address and admin states are independent and can be set independently. If an interface is in an administratively up state and an address is assigned, it becomes operationally up.

Parameters
ip-address

Specifies the IP address of the IP interface. The ip-address portion of the address command specifies the IP host address that will be used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted decimal notation.

Values

1.0.0.0 to 223.255.255.255 (with support of /31 subnets)

/

The forward slash is a parameter delimiter and separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-address, the ‟/” and the mask-length parameter. If a forward slash is not immediately following the ip-address, a dotted-decimal mask must follow the prefix.

mask

The subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask-length parameter. The mask length parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. Allowed values are integers in the range 0 to 30. Note that a mask length of 32 is reserved for system IP addresses.

netmask

Specifies the subnet mask in dotted-decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted-decimal mask. The mask parameter indicates the complete mask that is used in a logical ‟AND” function to derive the local subnet of the IP address. Allowed values are dotted-decimal addresses. A mask of 255.255.255.255 is reserved for system IP addresses.

Values

128.0.0.0 to 255.255.255.254

arp-timeout
Syntax

arp-timeout seconds

no arp-timeout

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the minimum time in seconds an ARP entry learned on the IP interface is stored in the ARP table. ARP entries are automatically refreshed when an ARP request or gratuitous ARP is seen from an IP host, otherwise, the ARP entry is aged from the ARP table. If the arp-timeout command is set to a value of zero seconds, ARP aging is disabled.

The no form of this command reverts to the default value.

Default

arp-timeout 14400

Parameters
seconds

Specifies the minimum number of seconds a learned ARP entry is stored in the ARP table, expressed as a decimal integer. A value of zero specifies that the timer is inoperative and learned ARP entries are not aged.

Values

0 to 65535

allow-directed-broadcasts
Syntax

[no] allow-directed-broadcasts

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the forwarding of directed broadcasts out of the IP interface. A directed broadcast is a packet received on a local router interface destined for the subnet broadcast address on another IP interface. This command on an IP interface enables or disables the transmission of packets destined for the subnet broadcast address of the egress IP interface.

When enabled, a frame destined for the local subnet on this IP interface is sent as a subnet broadcast out this interface. Care should be exercised when allowing directed broadcasts because this is a well-known mechanism used for denial-of-service attacks.

When disabled, directed broadcast packets discarded at this egress IP interface are counted in the normal discard counters for the egress SAP.

By default, directed broadcasts are not allowed and are discarded at this egress IP interface.

The no form of this command disables the forwarding of directed broadcasts out of the IP interface.

Default

no allow-directed-broadcasts

delayed-enable
Syntax

delayed-enable seconds [init-only]

no delayed-enable

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command delays making an interface operational by the specified number of seconds.

In environments with many subscribers, it can take time to synchronize the subscriber state between peers when the subscriber interface is enabled (for example, after a reboot). To ensure that the state has time to be synchronized, the delayed-enable timer can be specified. The optional init-only parameter specifies to use the delayed-enable timer only after a reboot.

Default

no delayed-enable

Parameters
seconds

Specifies the number of seconds to delay before the interface is operational.

Values

1 to 1200

init-only

Keyword that delays the initialization of the subscriber interface to give the system time to complete necessary tasks, such as allowing routing protocols to converge or MCS to synchronize the subscriber information. The delay occurs only immediately after a reboot.

ip-mtu
Syntax

ip-mtu octets

no ip-mtu

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the maximum IP transmit unit (packet) for the interface.

The MTU that is advertised from the IES size is:

MINIMUM((SdpOperPathMtu - EtherHeaderSize), (Configured ip-mtu))

By default (for Ethernet network interface) if no ip-mtu is configured, the packet size is (1568 - 14) = 1554.

The no form of this command reverts to the default value.

Default

no ip-mtu

Parameters
octets

Specifies the number of octets in the IP-MTU.

Values

512 to 9000

loopback
Syntax

[no] loopback

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies that the associated interface is a loopback interface that has no associated physical interface. As a result, the associated IES interface cannot be bound to a SAP.

Note that you can configure an IES interface as a loopback interface by issuing the loopback command instead of the sap command. The loopback flag cannot be set on an interface where a SAP is already defined, and a SAP cannot be defined on a loopback interface.

secondary
Syntax

secondary {ip-address/mask | ip-address netmask} [broadcast {all-ones | host-ones}] [igp-inhibit]

no secondary {ip-address/mask | ip-address netmask}

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns up to 64 secondary IP addresses to the interface, including the primary IP address. Each address can be configured in an IP address, IP subnet, or broadcast address format.

Parameters
ip-address

Specifies the IP address of the IP interface. The IP address portion of the address command specifies the IP host address that is used by the IP interface within the subnet. This address must be unique within the subnet and specified in dotted-decimal notation.

Values

1.0.0.0 to 223.255.255.255

/

The forward slash is a parameter delimiter that separates the ip-address portion of the IP address from the mask that defines the scope of the local subnet. No spaces are allowed between the ip-address, the "/" and the mask parameter. If a forward slash does not immediately follow the ip-address, a dotted decimal netmask must follow the prefix.

mask

Specifies the subnet mask length when the IP prefix is specified in CIDR notation. When the IP prefix is specified in CIDR notation, a forward slash (/) separates the ip-address from the mask parameter. The mask parameter indicates the number of bits used for the network portion of the IP address; the remainder of the IP address is used to determine the host portion of the IP address. A mask length of 32 is reserved for system IP addresses.

Values

1 to 32

netmask

Specifies the subnet mask in dotted-decimal notation. When the IP prefix is not specified in CIDR notation, a space separates the ip-address from a traditional dotted-decimal mask. The netmask parameter indicates the complete mask that is used in a logical ‟AND” function to derive the local subnet of the IP address. A netmask of 255.255.255.255 is reserved for system IP addresses.

Values

a.b.c.d (network bits all 1 and host bits all 0)

broadcast {all-ones | host-ones}

This optional parameter overrides the default broadcast address used by the IP interface when sourcing IP broadcasts on the IP interface. If no broadcast format is specified for the IP address, the default value is host-ones, which indicates a subnet broadcast address. Use this parameter to change the broadcast address to all-ones or revert to a broadcast address of host-ones.

The broadcast parameter within the address command does not have a negate feature, which is usually used to revert a parameter to the default value. To change the broadcast type to host-ones after being configured as all-ones, the address command must be executed with the broadcast parameter defined. The broadcast format on an IP interface can be specified when the IP address is assigned or changed.

This parameter does not affect the type of broadcasts that can be received by the IP interface. A host sending either the local broadcast (all-ones) or the valid subnet broadcast address (host-ones) is received by the IP interface

Values

all-ones — Specifies that the broadcast address used by the IP interface for this IP address is 255.255.255.255, also known as the local broadcast. host-ones — Specifies that the broadcast address used by the IP interface for this IP address is the subnet broadcast address. This is an IP address that corresponds to the local subnet described by the ip-address and mask or netmask with all of the host bits set to binary 1. This is the default broadcast address used by an IP interface.

Default

host-ones

igp-inhibit

Specifies that the secondary IP address should not be recognized as a local interface by the running IGP.

static-arp
Syntax

static-arp ip-address ieee-mac-address

no static-arp ip-address

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a static address resolution protocol (ARP) entry associating a subscriber IP address with a MAC address for the core router instance. This static ARP appears in the core routing ARP table. A static ARP can be configured only if it exists on the network attached to the IP interface.

If an entry for a particular IP address already exists and a new MAC address is configured for the IP address, the existing MAC address is replaced with the new MAC address.

The no form of this command removes a static ARP entry.

Parameters
ip-address

Specifies the IP address for the static ARP in IP address dotted-decimal notation.

ieee-mac-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

vpls
Syntax

vpls service-name

Context

config>service

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command binds the IP interface to the specified service name.

The system does not attempt to resolve the service name provided until the IP interface is placed into the administratively up state (no shutdown). When the IP interface is administratively up, the system scans the available VPLS services that have the allow-ip-int-binding flag set for a VPLS service associated with the name. If the service name is bound to the service name when the IP interface is already in the administratively up state, the system immediately attempts to resolve the specific name.

If a VPLS service is found associated with the name and with the allow-ip-int-binding flag set, the IP interface is attached to the VPLS service allowing routing to and from the service virtual ports when the IP interface is operational.

A VPLS service associated with the specified name that does not have the allow-ip-int-binding flag set or a non-VPLS service associated with the name is ignored and is not attached to the IP interface.

If the service name is applied to a VPLS service after the service name is bound to an IP interface and the VPLS service allow-ip-int-binding flag is set at the time the name is applied, the VPLS service is automatically resolved to the IP interface if the interface is administratively up or when the interface is placed in the administratively up state.

If the service name is applied to a VPLS service without the allow-ip-int-binding flag set, the system does not attempt to resolve the applied service name to an existing IP interface bound to the name. To rectify this condition, the flag must first be set, and then the IP interface must enter or reenter the administratively up state.

While the specified service name may be assigned to only one service context in the system, it is possible to bind the same service name to more than one IP interface. If two or more IP interfaces are bound to the same service name, the first IP interface to enter the administratively up state (if currently administratively down) or to reenter the administratively up state (if currently administratively up) when a VPLS service is configured with the name and has the allow-ip-int-binding flag set is attached to the VPLS service. Only one IP interface is allowed to attach to a VPLS service context. No error is generated for the remaining non-attached IP interfaces using the service name.

When an IP interface is attached to a VPLS service, the name associated with the service cannot be removed or changed until the IP interface name binding is removed. Also, the allow-ip-int-binding flag cannot be removed until the attached IP interface is unbound from the service name. Unbinding the service name from the IP interface causes the IP interface to detach from the VPLS service context. The IP interface may then be bound to another service name, or a SAP or SDP binding may be created for the interface using the sap or spoke-sdp commands on the interface.

Parameters
service-name

Required when using the IP interface vpls command and specifies the service name that the system attempts to resolve to an allow-ip-int-binding enabled VPLS service associated with the name. The specified name is expressed as an ASCII string consisting of up to 32 characters. It does not need to already be associated with a service, and the system does not check to ensure that multiple IP interfaces are not bound to the same name.

IES interface ICMP commands
icmp
Syntax

icmp

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure Internet Control Message Protocol (ICMP) parameters on an IES service.

mask-reply
Syntax

[no] mask-reply

Context

config>service>ies>if>icmp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables responses to ICMP mask requests on the router interface.

If a local node sends an ICMP mask request to the router interface, the mask-reply command configures the router interface to reply to the request.

By default, the router instance replies to mask requests.

The no form of this command disables replies to ICMP mask requests on the router interface.

Default

mask-reply

redirects
Syntax

redirects [number seconds]

no redirects

Context

config>service>ies>if>icmp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the rate for ICMP redirect messages issued on the router interface.

When routes are not optimal on this router and another router on the same subnetwork has a better route, the router can issue an ICMP redirect to alert the sending node that a better route is available.

The redirects command enables the generation of ICMP redirects on the router interface. Control the rate at which ICMP redirects are issued using the optional number and seconds parameters by indicating the maximum number of redirect messages that can be issued on the interface for a specific time interval.

By default, generation of ICMP redirect messages is enabled at a maximum rate of 100 per 10-second time interval.

The no form of this command disables the generation of ICMP redirects on the router interface.

Default

redirects 100 10

Parameters
number

Specifies the maximum number of ICMP redirect messages to send. This parameter must be specified with the seconds parameter.

Values

10 to 1000

seconds

Specifies the time frame in seconds used to limit the number of ICMP redirect messages that can be issued.

Values

1 to 60

ttl-expired
Syntax

ttl-expired number seconds

no ttl-expired

Context

config>service>ies>if>icmp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the rate ICMP TTL expired messages are issued by the IP interface.

By default, generation of ICMP TTL expired messages is enabled at a maximum rate of 100 per 10-second time interval.

The no form of this command disables the limiting the rate of TTL expired messages on the router interface.

Default

ttl-expired 100 10

Parameters
number

Specifies the maximum number of ICMP TTL expired messages to send, expressed as a decimal integer. This parameter must be specified with the seconds parameter.

Values

10 to 1000

seconds

Specifies the time frame in seconds used to limit the number of ICMP TTL expired messages that can be issued, expressed as a decimal integer.

Values

1 to 60

unreachables
Syntax

unreachables [number seconds]

no unreachables

Context

config>service>ies>if>icmp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the rate for ICMP host and network destination unreachable messages issued on the router interface.

This command enables the generation of ICMP destination unreachables on the router interface. Control the rate at which ICMP unreachables are issued using the optional number and time parameters by indicating the maximum number of destination unreachable messages that can be issued on the interface for a specific time interval.

By default, generation of ICMP destination unreachable messages is enabled at a maximum rate of 100 per 10-second time interval.

The no form of this command disables the generation of ICMP destination unreachable messages on the router interface.

Default

unreachables 100 10

Parameters
number

Specifies the maximum number of ICMP unreachable messages to send. This parameter must be specified with the seconds parameter.

Values

10 to 1000

seconds

Specifies the time frame in seconds used to limit the number of ICMP unreachable messages that can be issued.

Values

1 to 60

IES SAP commands
sap
Syntax

sap sap-id [create]

no sap sap-id

Context

config>service>ies>if

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command creates a Service Access Point (SAP) within a service. A SAP is a combination of port and encapsulation parameters that identify the service access point on the interface and within the router. Each SAP must be unique.

All SAPs must be explicitly created. If no SAPs are created within a service or on an IP interface, a SAP does not exist on that object.

Enter an existing SAP without the create keyword to edit SAP parameters. The SAP is owned by the service in which it was created.

A SAP can only be associated with a single service. A SAP can be defined only on a port that has been configured as an access port using the command.

If a port is shut down, all SAPs on that port become operationally down. When a service is shutdown, SAPs for the service are not displayed as operationally down, although all traffic traversing the service is discarded. The operational state of a SAP is relative to the operational state of the port on which the SAP is defined.

The no form of this command deletes the SAP with the specified port. When a SAP is deleted, all configuration parameters for the SAP are also deleted.

Special Cases
IES

A SAP is defined within the context of an IP routed interface. Each IP interface is limited to a single SAP definition. Attempts to create a second SAP on an IP interface fail and generate an error; the original SAP is not affected.

Parameters
sap-id

Specifies the physical port identifier portion of the SAP definition. See Common CLI command descriptions for command syntax.

port-id

Specifies the physical port ID in the slot/mda/port format.

If the card in the slot has Media Dependent Adapters (MDAs) installed, the port-id must be in the slot_number/MDA_number/port_number format. For example 1/1/1 specifies port 1 on MDA 1 in slot 1.

create

Keyword to create a SAP instance. The create keyword requirement can be enabled or disabled in the environment>create context.

accounting-policy
Syntax

accounting-policy acct-policy-id

no accounting-policy

Context

config>service>ies>if>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the accounting policy context that can be applied to a SAP.

An accounting policy must be defined before it can be associated with a SAP. If the policy-id does not exist, an error message is generated.

A maximum of one accounting policy can be associated with a SAP at one time. Accounting policies are configured in the config>log context.

The no form of this command removes the accounting policy association from the SAP, and the accounting policy reverts to the default.

Parameters
acct-policy-id

Specifies the accounting policy-id as configured in the config>log> accounting-policy context.

Values

1 to 99

collect-stats
Syntax

[no] collect-stats

Context

config>service>ies>if>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables accounting and statistical data collection for either the SAP, network port, or IP interface. When applying accounting policies the data, by default, is collected in the appropriate records and written to the designated billing file.

When the no collect-stats command is issued, the statistics are still accumulated by the cards. However, the CPU does not obtain the results and write them to the billing file. If a subsequent collect-stats command is issued, the counters written to the billing file include all the traffic while the no collect-stats command was in effect.

Default

no collect-stats

dist-cpu-protection
Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

config>service>ies>if>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns a valid existing Distributed CPU Protection (DCP) policy to the SAP. By default, no DCP policy is associated with the SAP.

The no form of this command disables the use of DCP policies for the SAP.

Default

no dist-cpu-protection

Parameters
policy-name

Specifies the name of the DCP policy, up to 32 characters.

IES interface filter and QoS policy commands
egress
Syntax

egress

Context

config>service>ies>if>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context apply egress policies.

agg-rate-limit
Syntax

agg-rate-limit agg-rate

no agg-rate-limit

Context

config>service>ies>if>sap>egress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command defines a maximum total rate for all egress queues on a service SAP.

Set the port scheduler to ‟sap-based” scheduling mode before using this command. The egress port scheduler enforces the aggregate queue rate for the SAP as it distributes its bandwidth to all the SAPs configured on the port. The port scheduler stops distributing bandwidth to member queues when it has detected that the aggregate rate limit has been reached.

A SAP aggregate scheduler is created for each instance of the SAP queues created on each of the member ports of the LAG. For a LAG, the port scheduler-mode configured for the primary port is used for all the member ports of the LAG.

Specify the scheduler mode using the scheduler-mode command. To implement the aggregate-rate-limit, the scheduler mode must be specified as ‟sap-based”. For more information about the scheduler-mode command, see the 7210 SAS-Mxp, R6, R12, S, Sx, T Interface Configuration Guide.

The no form of this command removes the aggregate rate limit from the SAP or multi-service site.

Parameters
agg-rate

Specifies the rate, in kilobits-per-second, that the maximum aggregate rate that the queues on the SAP or MSS can operate.

Values

1 to 10000000, max

aggregate-meter-rate
Syntax

aggregate-meter-rate rate-in-kbps [burst burst-in-kbits] [enable-stats]

no aggregate-meter-rate

Context

config>service>ies>if>sap>egress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates a set of two counters to count total forwarded packets and octets and total dropped packets and octets. When the counter is enabled, the amount of resources required increases by twice the amount of resources taken up when counter is not used. If enable-stats keyword is specified during the creation of the meter, the counter is allocated by software, if available. To free up the counter and relinquish its use, the user can use the no aggregate-meter-rate command, and then recreate the meter using the aggregate-meter-rate command.

If egress Frame-based accounting is used, the SAP egress aggregate meter rate accounts for the Ethernet frame overhead. The system accounts for 12 bytes of IFG and 8 bytes of start delimiter. Frame-based counting does not affect the count of octets maintained by the counter, if in use.

Note:
  • Before enabling this command for a SAP, resources must be allocated to this feature from the egress internal TCAM resource pool using the configure system resource-profile egress-internal-tcam egress-sap-aggregate-meter command. See the 7210 SAS-Mxp, R6, R12, S, Sx, T Basic System Configuration Guide for more information.

  • The egress aggregate meter is not FC aware. The forward and drop decisions are taken based on the order the packets are sent out of the SAP by the egress port scheduler.

The no form of this command removes the egress aggregate policer from use.

Default

no aggregate-meter-rate

Parameters
rate-in-kbps

Specifies the rate in kilobits/s.

Values

1 to 100000000 | max

Default

max

burst-in-kbits

Specifies the burst size for the policer in kilobits. The burst size cannot be configured without configuring the rate.

Values

4 to 2146959 | default

Default

512

enable-stats

Specifies whether the counter is to count forwarded and dropped packets must be allocated.

filter
Syntax

filter ip ip-filter-id

filter ipv6 ipv6-filter-id

no filter [ip ip-filter-id] [ipv6 ipv6-filter-id]

Context

config>service>ies>if>sap>egress

config>service>ies>if>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates a filter policy with an ingress or egress SAP. Filter policies control the forwarding and dropping of packets based on the matching criteria.

The filter command is used to associate a filter policy with a specified ip-filter-id with an ingress or egress SAP. The filter policy must already be defined before the filter command is run. If the filter policy does not exist, the operation fails and an error message returned.

In general, filters applied to SAPs (ingress or egress) apply to all packets on the SAP. One exception is non-IP packets are not applied to the match criteria, so the default action in the filter policy applies to these packets.

The no form of this command removes any configured filter ID association with the SAP. The filter ID is not removed from the system.

Special Cases
IES

Only IP filters are supported on an IES IP interface, and the filters only apply to routed traffic.

Parameters
ip

Keyword indicating the filter policy is an IP filter.

ip-filter-id

Specifies the ID for the IP filter policy. Allowed values are an integer in the range of 1 and 65535 that corresponds to a previously created IP filter policy in the configure>filter>ip-filter context.

Values

1 to 65535

ipv6 ipv6-filter-id

Specifies the IPv6 filter policy. The filter ID must already exist within the created IPv6 filters.

Values

1 to 65535

qos
Syntax

qos policy-id

qos policy-id [enable-table-classification]

no qos policy-id

Context

config>service>ies>if>sap>egress

config>service>ies>if>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates a Quality of Service (QoS) policy with an ingress or egress SAP or IP interface.

QoS ingress and egress policies are important for the enforcement of SLA agreements. The policy ID must be defined before associating the policy with a SAP or IP interface. If the policy-id does not exist, an error is returned.

The qos command is used to associate both ingress and egress QoS policies. The qos command only allows ingress policies to be associated on SAP or IP interface ingress, and only allows egress policies on SAP or IP interface egress. Attempts to associate a QoS policy of the wrong type returns an error.

Only one ingress and one egress QoS policy can be associated with a SAP or IP interface at one time. Attempts to associate a second policy of same or different type replaces the earlier one with the new policy.

On the 7210 SAS-R6 and 7210 SAS-R12 (ingress), using the enable-table-classification keyword enables the use of IP DSCP tables to assign FC and profile on a per-SAP ingress basis. The match-criteria configured in the service ingress policy, which require CAM resources, are ignored. Only meters from the service ingress policy are used (and the meters still require CAM resources). The IP DSCP classification policy configured in the SAP ingress policy is used to assign FC and profile. The default FC is assigned from the SAP ingress policy.

By default, no specific QoS policy is associated with the SAP or IP interface for ingress or egress, so the default QoS policy is used.

Note: On the 7210 SAS-R6 and 7210 SAS-R12, when the interface is associated with RVPLS, the behavior of the qos command is affected. See the enable-table-classification and routed-override-qos-policy commands for more information about classification behavior for RVPLS.

The no form of this command removes the QoS policy association from the SAP or IP interface, and the QoS policy reverts to the default.

Parameters
policy-id

Specifies the ingress or egress policy ID to associate with a SAP or IP interface on ingress or egress. The policy ID must already exist.

Values

1 to 65535

enable-table-classification

Keyword to enable the use of table-based classification at SAP ingress instead of CAM-based classification at SAP ingress. The FC and profile are taken from the IP DSCP classification policy configured in the ingress policy, along with the meters from the SAP ingress policy. Match-criteria entries in the SAP ingress policy are ignored.

ingress
Syntax

ingress

Context

config>service>ies>if>sap>egress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure ingress SAP QoS policies and filter policies.

If no sap-ingress QoS policy is defined, the system default sap-ingress QoS policy is used for ingress processing. If no ingress filter is defined, no filtering is performed.

aggregate-meter-rate
Syntax

aggregate-meter-rate rate-in-kbps [burst burst-in-kbits]

no aggregate-meter-rate

Context

config>service>ies>if>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description
Note: The sum of the CIRs of the individual FCs configured under the SAP cannot exceed the PIR rate configured for the SAP. Although the 7210 SAS software does not block this configuration, it is not recommended for use.

When the SAP aggregate policer is configured, per FC policer can be only configured in ‟trtcm2” mode (RFC 4115).

The meter modes ‟srtcm” and ‟trtcm1” are used in the absence of an aggregate meter.

The SAP ingress meter counters increment the packet or octet counts based on the final disposition of the packet.

If ingress Frame-based accounting is used, the SAP aggregate meter rate accounts for the Ethernet frame overhead. The system accounts for 12 bytes of IFG and 8 bytes of start delimiter.

The no form of this command removes the aggregate policer from use.

Default

no aggregate-meter-rate

Parameters
rate-in-kbps

Specifies the rate in kilobits per second.

Values

0 to 20000000 | max

Default

max

burst-in-kilobits

Specifies the burst size for the policer in kilobits. The burst size cannot be configured without configuring the rate.

Values

4 to 2146959

Default

512

The following table lists the final disposition of the packet based on the operating rate of the per FC policer and the per-SAP aggregate policer.

Table 1. Final disposition of the packet based on per FC and per SAP policer or meter
Per FC meter operating rate Per FC assigned color SAP aggregate meter operating rate SAP aggregate meter color Final packet color

Within CIR

Green

Within PIR

Green

Green or

In-profile

Within CIR1

Green

Above PIR

Red

Green or

In-profile

Above CIR, Within PIR

Yellow

Within PIR

Green

Yellow or

Out-of-Profile

Above CIR, Within PIR

Yellow

Above PIR

Red

Red or

Dropped

Above PIR

Red

Within PIR

Green

Red or

Dropped

Above PIR

Red

Above PIR

Red

Red or

Dropped

1 This row is not recommended for use. See the note in the aggregate-meter-rate description for more information.
meter-override
Syntax

[no] meter-override

Context

config>service>ies>if>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the context for specific overrides to one or more meters created on the SAP through the sap-ingress QoS policies.

The no form of this command is used to remove any existing meter overrides.

Default

no meter-override

meter
Syntax

meter meter-id [create]

no meter meter-id

Context

config>service>ies>if>sap>ingress>meter-override

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command, within the SAP ingress contexts, creates a CLI node for specific overrides to a specific meter created on the SAP through sap-ingress QoS policies.

The no form of this command removes existing overrides for the specified meter-id.

Parameters
meter-id

Required when executing the meter command within the meter-overrides context. The meter-id must exist within the sap-ingress QoS policy applied to the SAP. If the meter is not currently used by any forwarding class or forwarding type mappings, the meter does not actually exist on the SAP. This does not preclude creating an override context for the meter-id.

create

Keyword required when a meter meter-id override node is being created and the system is configured to expect explicit confirmation that a new object is being created. When the system is not configured to expect explicit confirmation, the create keyword is not required.

adaptation-rule
Syntax

adaptation-rule [pir adaptation-rule [max | min | closest]] [cir adaptation-rule [max | min | closest]]

no adaptation-rule

Context

config>service>ies>if>sap>ingress>meter-override>meter

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command overrides specific attributes of the specified meter adaptation rule parameters. The adaptation rule controls the method used by the system to derive the operational CIR and PIR settings when the meter is provisioned in hardware. For the CIR and PIR parameters individually, the system attempts to find the best operational rate depending on the defined constraint.

The no form of this command removes any explicitly defined constraints used to derive the operational CIR and PIR created by the application of the policy. When a specific adaptation-rule is removed, the default constraints for rate and cir apply.

Default

no adaptation-rule

Parameters
pir

Specifies the constraints enforced when adapting the PIR rate defined within the meter-override meter meter-id command. The pir parameter requires a qualifier that defines the constraint used when deriving the operational PIR for the queue. When the meter-override command is not specified, the default applies.

Note: When the meter mode in use is ‟trtcm2,” this parameter is interpreted as EIR value. See the description and relevant notes for meter modes in the 7210 SAS-Mxp, R6, R12, S, Sx, T Quality of Service Guide for more information.
cir

Defines the constraints enforced when adapting the CIR rate defined within the meter-override meter meter-id command. The cir parameter requires a qualifier that defines the constraint used when deriving the operational CIR for the queue. When the cir parameter is not specified, the default constraint applies.

adaptation-rule

Specifies the criteria to use to compute the operational CIR and PIR values for this meter, while maintaining a minimum offset.

Values

max — The max, min, and closest parameters are mutually exclusive. When max is defined, the operational PIR for the meter is equal to or less than the administrative rate specified using the meter-override command.

Values

min — The min, max, and closest parameters are mutually exclusive. When min is defined, the operational PIR for the queue is equal to or greater than the administrative rate specified using the meter-override command.

Values

closest — The closest, min, and max parameters are mutually exclusive. When closest is defined, the operational PIR for the meter is the rate closest to the rate specified using the meter-override command.

cbs
Syntax

cbs size [kbits | bytes | kbytes]

no cbs

Context

config>service>ies>if>sap>ingress>meter-override>meter

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command overrides the default CBS for the meter. The committed burst size parameter specifies the maximum burst size that can be transmitted by the source while still complying with the CIR. If the transmitted burst is lower than the CBS value, the packets are marked as in-profile by the meter to indicate that the traffic is complying with meter configured parameters.

The no form of this command reverts to the default value.

Default

cbs 32

Parameters
size

Specifies the value in kilobits, bytes, or kilobytes.

Values

kbits: 4 to 2146959 | default

bytes: 512 to 274810752

kbytes: 1 to 268369

mbs
Syntax

mbs size [kbits | bytes | kbytes]

no mbs

Context

config>service>ies>if>sap>ingress>meter-override>meter

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command overrides the default MBS for the meter. The maximum burst size parameter specifies the maximum burst size that can be transmitted by the source while still complying with the CIR. If the transmitted burst is lower than the MBS value, the packets are marked as in-profile by the meter to indicate that the traffic is complying meter configured parameters.

The no form of this command returns the MBS size to the default value.

Default

mbs 512

Parameters
size

Specifies the value in kilobits, bytes, or kilobytes.

Values

kbits: 4 to 2146959 | default

bytes: 512 to 274810752

kbytes: 1 to 268369

mode
Syntax

mode mode

no mode

Context

config>service>ies>if>sap>ingress>meter-override>meter

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command is used to override the sap-ingress QoS policy configured mode parameters for the specified meter-id.

The no form of this command reverts the policy defined metering and profiling mode to a meter.

Parameters
mode

Specifies the rate mode of the meter-override.

Values

trtcm1, trtcm2, srtcm

rate
Syntax

rate cir cir-rate [pir pir-rate]

no rate

Context

config>service>ies>if>sap>ingress>meter-override>meter

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command is used to override the sap-ingress QoS policy configured rate parameters for the specified meter-id.

The max default specifies the amount of bandwidth in kilobits per second (thousand bits per second). The max value is mutually exclusive to the pir-rate value.

The no form of this command reverts the policy defined metering and profiling rate to a meter.

Default

max

Parameters
pir-rate

Specifies the administrative PIR rate, in kilobits, for the queue. When the rate command is run, a valid PIR setting must be explicitly defined. When the rate command has not been run, the default PIR of max is assumed.

Fractional values are not allowed and must be specified as a positive integer.

Note: When the meter mode is set to ‟trtcm2,” the PIR value is interpreted as the EIR value. See the 7210 SAS-Mxp, R6, R12, S, Sx, T Quality of Service Guide for more information.

The actual PIR rate is dependent on the queue adaptation-rule parameters and the hardware where the queue is provisioned.

Values

0 to 20000000 | max

Default

max

cir-rate

The cir parameter overrides the default administrative CIR used by the queue. When the rate command is executed, a CIR setting is optional. When the rate command has not been executed or the cir parameter is not explicitly specified, the default CIR (0) is assumed.

Fractional values are not allowed and must be specified as a positive integer.

Values

0 to 20000000 | max

Default

0

counter-mode
Syntax

counter-mode {in-out-profile-count | forward-drop-count}

Context

config>service>ies>sap>statistics>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command sets the counter mode for the counters associated with sap ingress meters or policers. A pair of counters is available with each meter. These counters count different events based on the counter mode value.

Note:

The counter mode can be changed if an accounting policy is associated with a SAP. If the counter mode is changed, the counters associated with the meter are reset and the counts are cleared. If an accounting policy is in use when the counter mode is changed, a new record is written into the current accounting file.

Perform the following sequence of commands on the specified SAP to ensure the correct statistics are collected when the counter-mode is changed.

  1. Run the config service ies interface sap no collect-stats command, to disable writing of accounting records for the SAP.

  2. Change the counter mode to the desired option by running the config service vprn interface sap counter-mode {in-out-profile-count | forward-drop-count} command.

  3. Run the config service ies interface sap collect-stats command to enable writing of accounting records for the SAP.

The no form of this command restores the counter mode to the default value.

Default

in-out-profile-count

Parameters
in-out-profile-count

Specifies that one counter counts the total in-profile packets and octets received on ingress of a SAP and another counts the total out-of-profile packets and octets received on ingress of a SAP. A packet is determined to be in-profile or out-of-profile based on the meter rate parameters configured. A packet is dropped by the policer if it exceeds the configured PIR rate. Dropped counts are not maintained in hardware when this mode is used. It is obtained by subtracting the sum of in-profile count and out-of-profile count from the total SAP ingress received count and displayed.

forward-drop-count

Specifies that one counter counts the forwarded packets and octets received on ingress of a SAP and another counts the dropped packets. The forwarded count is the sum of in-profile and out-of-profile packets/octets received on SAP ingress. The dropped count is count of packets/octets dropped by the policer. A packet is determined to be in-profile or out-of-profile based on the meter rate parameters configured. A packet is dropped by the policer if it exceeds the configured PIR rate. The in-profile count and out-of-profile count is not individually available when operating in this mode.

tod-suite
Syntax

tod-suite tod-suite-name

no tod-suite

Context

config>service>ies>if>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command applies a time-based policy (filter or QoS policy) to the service SAP. The suite name must already exist in the config>cron context.

Default

no tod-suite

Parameters
tod-suite-name

Specifies collection of policies (ACLs, QoS) including time-ranges that define the full or partial behavior of a SAP. The suite can be applied to more than one SAP.

Routed VPLS commands

ingress
Syntax

ingress

Context

config>service>ies>if>vpls

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context define the routed ip-filter-id optional filter overrides.

enable-table-classification
Syntax

[no] enable-table-classification

Context

config>service>ies>if>vpls>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables and disables the use of IP DSCP table-based classification to assign FC and profile on a per-interface ingress basis.

The match-criteria configured in the service ingress policy, which require CAM resources, are ignored. Only meters from the service ingress policy are used (and the meters still require CAM resources). If an IP DSCP classification policy is configured in the VPLS SAP ingress policy, it is not used to assign FC and profile.

The no form of this command disables table-based classification. When disabled, the IP ingress packets within a VPLS service attached to the IP interface use the SAP ingress QoS policy applied to the virtual port used by the packets, when defined.

Default

no enable-table-classification

routed-override-qos-policy
Syntax

routed-override-qos-policy policy-id

no routed-override-qos-policy

Context

config>service>ies>if>vpls>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies an IP DSCP classification policy that is applied to all ingress packets entering the VPLS service. The DSCP classification policy overrides any existing SAP ingress QoS policy applied to SAPs for packets associated with the routing IP interface. The routed override QoS policy is optional and when it is not defined or it is removed, the IP routed packets use the existing SAP ingress QoS policy configured on the VPLS virtual port.

The no form of this command is used to remove the IP DSCP classification policy from the ingress IP interface. When removed, the IP ingress routed packets within a VPLS service attached to the IP interface use the SAP ingress QoS policy applied to the virtual port used by the packets, when defined.

Default

no routed-override-qos-policy

Parameters
policy-id

Specifies the ID for the routed override QoS policy. Allowed values are an integer in the range of 1 and 65535 that corresponds to a previously created IP DSCP classification policy in the configure>qos>dscp-classification context.

Values

1 to 65535

v4-routed-override-filter
Syntax

v4-routed-override-filter ip-filter-id

no v4-routed-override-filter

Context

config>service>ies>if>vpls>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies an IP filter ID that is applied to all ingress packets entering the VPLS service. The filter overrides any existing ingress IP filter applied to SAPs or SDP bindings for packets associated with the routing IP interface. The override filter is optional and when it is not defined or it is removed, the IP routed packets uses the any existing ingress IP filter on the VPLS virtual port.

The no form of this command is used to remove the IP routed override filter from the ingress IP interface. When removed, the IP ingress routed packets within a VPLS service attached to the IP interface uses the IP ingress filter applied to the packets virtual port when defined.

Parameters
ip-filter-id

Specifies the ID for the IP filter policy. Allowed values are an integer that corresponds to a previously created IP filter policy in the configure>filter>ip-filter context.

Values

1 to 65535

IES show commands

customer
Syntax

customer [customer-id] [site customer-site-name]

Context

show>service

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays service customer information.

Parameters
customer-id

Displays only information for the specified customer ID.

Values

1 to 2147483647

Default

All customer IDs display

site customer-site-name

Specifies the customer site, which is an anchor point for an ingress and egress virtual scheduler hierarchy.

Output

The following output is an example of customer information, and Output fields: customer describes the output fields.

Sample output
*A:ALA-12# show service customer
==========================================================
Customers
==========================================================
Customer-ID : 1
Contact     : Manager
Description : Default customer
Phone       : (123) 555-1212

Customer-ID : 2
Contact     : Tech Support
Description : TiMetra Networks
Phone       : (234) 555-1212

Customer-ID : 3
Contact     : Fred
Description : TiMetra Networks
Phone       : (345) 555-1212

Customer-ID : 6
Contact     : Ethel
Description : Epipe Customer
Phone       : (456) 555-1212

Customer-ID : 7
Contact     : Lucy
Description : ABC Customer
Phone       : (567) 555-1212

Customer-ID : 8
Contact     : Customer Service
Description : IES Customer
Phone       : (678) 555-1212

Customer-ID : 274
Contact     : Mssrs. Beaucoup
Description : ABC Company
Phone       : 650 123-4567

Customer-ID : 94043
Contact     : Test Engineer on Duty
Description : TEST Customer
Phone       : (789) 555-1212

------------------------------------------------------
Total Customers : 8
-----------------------------------------------------------
*A:ALA-12#


*A:ALA-12# show service customer 274
==============================================================================
Customer  274
==============================================================================
Customer-ID : 274
Contact     : Mssrs. Beaucoup
Description : ABC Company
Phone       : 650 123-4567
------------------------------------------------------------------------------
Multi Service Site
------------------------------------------------------------------------------
Site        : west
Description : (Not Specified)
==============================================================================
*A:ALA-12#


*A:ALA-12# show service customer 274 site west
==============================================================================
Customer  274
==============================================================================
Customer-ID : 274
Contact     : Mssrs. Beaucoup
Description : ABC Company
Phone       : 650 123-4567
------------------------------------------------------------------------------
Multi Service Site
------------------------------------------------------------------------------
Site        : west
Description : (Not Specified)
Assignment  : Card 5
I. Sched Pol: SLA1
E. Sched Pol: (Not Specified)
------------------------------------------------------------------------------
Service Association
------------------------------------------------------------------------------
No Service Association Found.
==============================================================================
*A:ALA-12#
Table 2. Output fields: customer
Label Description

Customer-ID

The ID that uniquely identifies a customer.

Contact

The name of the primary contact person.

Description

Generic information about the customer.

Phone

The phone/pager number to reach the primary contact person.

Total Customers

The total number of customers configured.

Multi Service Site

Site

Multi-service site name. A multi-service customer site is a group of SAPs with common origination and termination points.

Description

Information about a specific customer multi-service site.

Assignment

The port ID, MDA, or card number, where the SAPs that are members of this multiservice site are defined.

I. Sched Pol

The ingress QoS scheduler policy assigned to this multiservice site.

E. Sched Pol

The egress QoS scheduler policy assigned to this multiservice site.

Service Association

Service-ID

The ID that uniquely identifies a service.

SAP

Specifies the SAP assigned to the service.

sap-using
Syntax

sap-using [sap sap-id]

sap-using interface [ip-address | ip-int-name]

sap-using [ingress | egress] filter filter-id

sap-using [ingress] qos-policy qos-policy-id

Context

show>service

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays SAP information.

If no optional parameters are specified, the command displays a summary of all defined SAPs. The optional parameters restrict output to only SAPs matching the specified properties.

Parameters
sap sap-id

Specifies the physical port identifier portion of the SAP definition. See Common CLI command descriptions for command syntax.

ingress

Specifies matching an ingress policy.

egress

Specifies matching an egress policy.

filter filter-id

Specifies the ingress or egress filter policy ID for which to display matching SAPs.

Values

1 to 65535

interface

Specifies matching SAPs with the specified IP interface.

ip-addr

Specifies the IP address of the interface for which to display matching SAPs.

Values

a.b.c.d

ip-int-name

Specifies the IP interface name for which to display matching SAPs.

Output

The following output is an example of service SAP information, and Output fields: service SAP describes the output fields.

Sample output
*A:DUT-B# show service sap-using sap 1/1/3:100.*  
=========================================================================
Service Access Points
=========================================================================
PortId                          SvcId      Ing.  Ing.    Egr.   Adm  Opr
                                           QoS   Fltr    Fltr
-------------------------------------------------------------------------
1/1/1                           6          1     none    none   Up   Down
1/1/2                           700        1     none    none   Up   Down
-------------------------------------------------------------------------
Number of SAPs : 2
=========================================================================
*A:DUT-B# 
Table 3. Output fields: service SAP
Label Description

Port ID

The ID of the access port where the SAP is defined.

Svc ID

The value that identifies the service.

SapMTU

The SAP MTU value.

Igr.QoS

The SAP ingress QoS policy number specified on the ingress SAP.

Ing.Fltr

The MAC or IP filter policy ID applied to the ingress SAP.

E.QoS

The SAP egress QoS policy number specified on the egress SAP.

Egr.Fltr

The MAC or IP filter policy ID applied to the egress SAP.

A.Pol

The accounting policy ID assigned to the SAP.

Adm

The administrative state of the SAP.

Opr

The actual state of the SAP.

service-using
Syntax

service-using [ies] [customer customer-id]

Context

show>service

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays the services matching certain usage properties. If no optional parameters are specified, the output displays all services defined on the system.

Parameters
ies

Displays matching IES services.

customer customer-id

Displays services only associated with the specified customer ID.

Values

1 to 2147483647

Default

Services associated with an customer.

Output

The following output is an example of service information, and Output fields: service-using describes the output fields.

Sample output
A:ALA-48# show service service-using ies
===============================================================================
Services [ies]
===============================================================================
ServiceId    Type      Adm    Opr        CustomerId        Last Mgmt Change
-------------------------------------------------------------------------------
88           IES       Up     Down       8                 07/25/2006 15:46:28
89           IES       Up     Down       8                 07/25/2006 15:46:28
104          IES       Up     Down       1                 07/25/2006 15:46:28
200          IES       Up     Down       1                 07/25/2006 15:46:28
214          IES       Up     Down       1                 07/25/2006 15:46:28
321          IES       Up     Down       1                 07/25/2006 15:46:28
322          IES       Down   Down       1                 07/25/2006 15:46:28
1001         IES       Up     Down       1730              07/25/2006 15:46:28
-------------------------------------------------------------------------------
Matching Services : 8
-------------------------------------------------------------------------------
A:ALA-48#
Table 4. Output fields: service-using
Label Description

Service Id

The value that identifies the service.

Type

Specifies the service type configured for the service ID.

Adm

The administrative state of the service.

Opr

The operating state of the service.

CustomerID

The ID of the customer who owns this service.

Last Mgmt Change

The date and time of the most recent management-initiated change to this service.

id
Syntax

id service-id {all | arp | base | sap}

Context

show>service

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays information for a particular service ID.

Parameters
service-id

Specifies the unique service identification number to identify the service in the service domain.

all

Displays detailed information about the service.

arp

Displays ARP entries for the service.

base

Displays basic service information.

sap

Displays SAPs associated with the service.

all
Syntax

all

Context

show>service>id

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays detailed information for all aspects of the service.

Output

Output fields: service ID all describes the show all service-id command output fields.

Sample output
Table 5. Output fields: service ID all
Label Description

Service Detailed Information

Service Id

The service identifier.

VPN Id

The number that identifies the VPN.

Service Type

Displays the type of service.

SDP Id

The SDP identifier.

Description

Generic information about the service.

Customer Id

The customer identifier.

Last Mgmt Change

The date and time of the most recent management-initiated change to this customer.

SAP Count

The number of SAPs specified for this service.

SDP Bind Count

The number of SDPs bound to this service.

Service Destination Points (SDPs)

SDP Id

The SDP identifier.

Type

Indicates whether this Service SDP binding is a spoke or a mesh.

Admin Path MTU

The largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented.

Oper Path MTU

The actual largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented.

Delivery

Specifies the type of delivery used by the SDP: MPLS.

Admin State

The administrative state of this SDP.

Oper State

The operational state of this SDP.

Ingress Label

The label used by the far-end device to send packets to this device in this service by this SDP.

Egress Label

The label used by this device to send packets to the far-end device in this service by this SDP.

Ingress Filter

The ID of the ingress filter policy.

Egress Filter

The ID of the egress filter policy.

Far End

Specified the IP address of the remote end of the MPLS tunnel defined by this SDP.

Last Changed

The date and time of the most recent change to this customer.

Signaling

Specifies the signaling protocol used to obtain the ingress and egress labels used in frames transmitted and received on this SDP.

Admin State

Specifies the operating status of the service.

Oper State

The current status of the service.

Hello Time

Specifies how often the SDP echo request messages are transmitted on this SDP.

Hello Msg Len

Specifies the length of the SDP echo request messages transmitted on this SDP.

Max Drop Count

Specifies the maximum number of consecutive SDP Echo Request messages that can be unacknowledged before the keepalive protocol reports a fault.

Hold Down Time

Specifies the amount of time to wait before the keepalive operating status is eligible to enter the alive state.

SDP Delivery Mechanism

When the SDP type is MPLS, a list of LSPs used to reach the far-end router displays. All the LSPs in the list must terminate at the IP address specified in the far-end field.

Number of SDPs

The total number SDPs applied to this service ID.

Service Access Points

Service Id

The service identifier.

Port Id

The ID of the access port where this SAP is defined.

Description

Generic information about the SAP.

Encap

The value of the label used to identify this SAP on the access port.

Admin State

The desired state of the SAP.

Oper State

The operating state of the SAP.

Last Changed

The date and time of the last change.

Admin MTU

The largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented.

Oper MTU

The actual largest service frame size (in octets) that can be transmitted through this SDP to the far-end router, without requiring the packet to be fragmented.

Ingress qos-policy

The SAP ingress QoS policy ID.

Egress qos-policy

The SAP egress QoS policy ID.

Ingress Filter-Id

The SAP ingress filter policy ID.

Egress Filter-Id

The SAP egress filter policy ID.

Multi Svc Site

Indicates the multi-service site that the SAP is a member.

Ingress sched-policy

Indicates the ingress QoS scheduler for the SAP.

Egress sched-policy

Indicates the egress QoS scheduler for the SAP.

Table-based

Indicates the use of table-based resource classification: Enabled (table-based) or Disabled (CAM-based)

Dscp Class Pol Id

Indicates the DSCP classification policy ID.

Acct. Pol

Indicates the accounting policy applied to the SAP.

Collect Stats

Displays whether accounting statistics are collected on the SAP.

SAP Statistics

Dropped

The number of packets or octets dropped.

Offered Hi Priority

The number of high priority packets, as determined by the SAP ingress QoS policy.

Offered Low Priority

The number of low priority packets, as determined by the SAP ingress QoS policy.

Forwarded In Profile

The number of in-profile packets or octets (rate below CIR) forwarded.

Forwarded Out Profile

The number of out-of-profile packets or octets (rate above CIR) forwarded.

arp
Syntax

arp [ip-address] | [mac ieee-address] | [sap sap-id] | [interface ip-int-name]

Context

show>service>id

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays the ARP table for the IES instance. The ARP entries for a subscriber interface are displayed uniquely. Each MAC associated with the subscriber interface child group-interfaces are displayed with each subscriber interface ARP entry. They do not reflect actual ARP entries but are displayed along the interfaces ARP entry for easy lookup.

Parameters
ip-address

Displays only ARP entries in the ARP table with the specified IP address.

Default

All IP addresses.

mac ieee-address

Displays only ARP entries in the ARP table with the specified 48-bit MAC address. The MAC address can be expressed in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers.

Default

All MAC addresses.

sap sap-id

Displays SAP information for the specified SAP ID. See Common CLI command descriptions for command syntax.

interface ip-int-name

Specifies matching service ARP entries associated with the IP interface.

ip-address

Specifies the IP address of the interface for which to display matching ARP entries.

Values

a.b.c.d

ip-int-name

Specifies the IP interface name for which to display matching ARPs.

Output

The following output is an example of ARP information, and Output fields: service ID ARP describes the output fields.

Sample output
*A:DUT-B# show service id 100 arp 
==============================================================================
ARP Table
===============================================================================
IP Address      MAC Address         Type       Expiry    Interface         SAP      
-------------------------------------------------------------------------------
192.168.1.2     00:00:01:00:00:01  Other     00h00m00s   HW                1/1/1:10*
192.168.1.1     32:67:01:01:00:03  Other     00h00m00s   to7x              1/1/3:10*
192.168.2.2     32:68:01:01:00:02  Dynamic   03h59m58s   to7x              1/1/3:10*
===============================================================================
*A:DUT-B# 
Table 6. Output fields: service ID ARP
Label Description

IP Address

The IP address.

MAC Address

The specified MAC address.

Type

Static — FDB entries created by management

Learned — Dynamic entries created by the learning process

Other — Local entries for the IP interfaces created

Expiry

The age of the ARP entry.

Interface

The interface applied to the service.

SAP

The SAP ID.

base
Syntax

base

Context

show>service>id

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays basic information about this IES service.

Output

The following output is an example of basic IES service information, and Output fields: service ID base describes the output fields.

Sample output
*A:ALA-A# show service id 100 base
---------------------------------------------------------------
Service Basic Information
---------------------------------------------------------------
Service Id        : 100                 Vpn Id            : 100
Service Type      : IES
Description       : Default Ies description for service id 100
Customer Id       : 1
Last Status Change: 08/29/2006 17:44:28
Last Mgmt Change  : 08/29/2006 17:44:28
Admin State       : Up                  Oper State        : Up
SAP Count         : 2
-------------------------------------------------------------------------------
Service Access & Destination Points
-------------------------------------------------------------------------------
Identifier                       Type         AdmMTU  OprMTU  Adm     Opr
-------------------------------------------------------------------------------
sap:1/1/3                        null         1514    1514    Up      Up
sap:1/1/4                        null         1514    1514    Up      Up
===============================================================================
*A:ALA-A#
Table 7. Output fields: service ID base
Label Description

Service Basic Information

Service Id

Service ID number.

Service Type

Type of service.

Description

Generic information about the service.

Customer Id

Customer ID number.

Last Status Change

Date and time of the most recent status change to this service.

Last Mgmt Change

Date and time of the most recent management-initiated change to this service.

Admin State

Configured state of the service.

Oper State

Operating state of the service.

SAP Count

Number of SAPs specified for this service.

Service Access & Destination Points

Identifier

SAP ID.

Type

Signaling protocol used to obtain the ingress and egress labels used in frames transmitted and received.

AdmMTU

Configured largest service frame size (in octets) that can be transmitted to the far-end router without requiring the packet to be fragmented.

OprMTU

Actual largest service frame size (in octets) that can be transmitted to the far-end router without requiring the packet to be fragmented.

Adm

Administrative state of the SAP.

Opr

Operating state of the SAP.

interface
Syntax

interface [ip-address | ip-int-name] [detail]

Context

show>service>id

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command displays information for the IP interfaces associated with the IES service. If no optional parameters are specified, the outputs displays a summary of all IP interfaces associated with the service.

Parameters
ip-address

Specifies the IP address of the interface for which to display information.

Values

ipv4-address: a.b.c.d (host bits must be 0)

ip-int-name

Specifies the IP interface name for which to display information.

Values

32 characters maximum

detail

Displays detailed IP interface information.

Default

IP interface summary output.

Output

The following outputs are examples of IES service interface information, and Output fields: service ID interface describes the output fields.

Sample output
A:ALA-49# show service id 88 interface
===============================================================================
Interface Table
===============================================================================
Interface-Name Adm Opr(v4/v6) Type Port/SapId
IP-Address PfxState
-------------------------------------------------------------------------------
Sector A Up Down/Down IES 1/1/1.2.2
- -
test Up Down/Down IES 1/1/2:0
10.1.1.1/31 n/a
10.1.1.1/31 n/a
10.1.2.1/31 n/a
test27 Up Up/-- IES Sub subscriber
192.168.10.21/24 n/a
grp-if Up Down/-- IES Grp 1/2/2
Interfaces : 4
===============================================================================
A:ALA-49#
Sample output for 7210 SAS-R6 and 7210 SAS-R12

The following output is an example of 7210 SAS-R6 and 7210 SAS-R12 IES routed VPLS interface override.

*A:Dut-A# show service id 2000 interface "iesRvplsIngr" detail 
===============================================================================
Interface Table
===============================================================================
-------------------------------------------------------------------------------
Interface
-------------------------------------------------------------------------------
If Name      : iesRvplsIngr
Admin State  : Up                               Oper (v4/v6)     : Down/Down
Down Reason C: assocObjNotReady
Protocols    : None
IP Addr/mask : 10.55.55.2/24                    Address Type     : Primary
IGP Inhibit  : Disabled                         Broadcast Address: Host-ones
HoldUp-Time  : 0                                Track Srrp Inst  : 0
-------------------------------------------------------------------------------
Details
-------------------------------------------------------------------------------
Description  : (Not Specified)
If Index     : 14                               Virt. If Index   : 14
Last Oper Chg: 11/07/2017 04:48:25              Global If Index  : 206
Mon Oper Grp : None                             
Srrp En Rtng : Disabled                         Hold time        : N/A
Port Id      : rvpls
TOS Marking  : Untrusted                        If Type          : IES
SNTP B.Cast  : False                            IES ID           : 2000
MAC Address  : c4:08:4a:45:c0:e4                Mac Accounting   : Disabled
Ingress stats: Disabled                         IPv6 DAD         : Enabled
ARP Timeout  : 14400s                           IPv6 Nbr ReachTi*: 30s
ARP Retry Ti*: 5000ms                           IPv6 stale time  : 14400s
ARP Limit    : Disabled                         IPv6 Nbr Limit   : Disabled
ARP Threshold: Disabled                         IPv6 Nbr Thresho*: Disabled
ARP Limit Lo*: Disabled                         IPv6 Nbr Log Only: Disabled
IP MTU       : (default)                        
IP Oper MTU  : 9198                             
LdpSyncTimer : None                             
LSR Load Bal*: system                           
EGR Load Bal*: both                             
Vas If Type  : none                             
TEID Load Ba*: Disabled                         
SPI Load Bal*: Disabled                         
uRPF Chk     : disabled                         
uRPF Ipv6 Chk: disabled                         
Mpls Rx Pkts : 0                                Mpls Rx Bytes    : 0
Mpls Tx Pkts : 0                                Mpls Tx Bytes    : 0

DHCP6 Relay Details
Description  : (Not Specified)
Admin State  : Down                             Lease Populate   : 0
Oper State   : Down                             Nbr Resolution   : Disabled
If-Id Option : None                             Remote Id        : Disabled
Src Addr     : Not configured
Python plcy  : (Not Specified)                  

DHCP6 Server Details
Admin State  : Down                             Max. Lease States: 8000

ICMP Details
Redirects    : Number - 100                     Time (seconds)   - 10   
Unreachables : Number - 100                     Time (seconds)   - 10   
TTL Expired  : Number - 100                     Time (seconds)   - 10   

Routed VPLS Details
VPLS Name        : ingRvpls
Binding Status   : Up                   
Reason           : (Not Specified)
Egr Reclass Plcy : 0                    
Ing Filter       : none                 
Ingr IPv6 Flt    : none                 
EVPN Tunnel      : false                
Table-based      : enabled
Dscp Class Pol Id: 1

Network Domains Associated
default

-------------------------------------------------------------------------------
Admin Groups
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
                                      
-------------------------------------------------------------------------------
Srlg Groups
-------------------------------------------------------------------------------
No Matching Entries
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Interfaces : 1
===============================================================================
* indicates that the corresponding row element may have been truncated.
*A:Dut-A#
Table 8. Output fields: service ID interface
Label Description

If Name

The name of the IES interface.

Type

Specifies the interface type.

IP-Address

Specifies the IP address/IP subnet/broadcast address of the interface.

Adm

The administrative state of the interface.

Opr

The operational state of the interface.

Admin State

The administrative state of the interface.

Oper State

The operational state of the interface.

IP Addr/mask

Specifies the IP address/IP subnet/broadcast address of the interface.

If Index

The index corresponding to this IES interface. The primary index is 1; all IES interfaces are defined in the base virtual router context.

If Type

Specifies the interface type.

SAP Id

Specifies the SAP port ID.

SNTP B.Cast

Specifies whether SNTP broadcast client mode is enabled or disabled.

Arp Timeout

Specifies the timeout for an ARP entry learned on the interface.

MAC Address

Specifies the 48-bit IEEE 802.3 MAC address.

ICMP Mask Reply

Specifies whether ICMP mask reply is enabled or disabled.

Cflowd

Specifies whether cflowd collection and analysis on the interface is enabled or disabled.

Redirects

Specifies the rate for ICMP redirect messages.

Unreachables

Specifies the rate for ICMP unreachable messages.

TTL Expired

Specifies the rate for ICMP TTL messages.