u Commands

ue

ue

Syntax

ue [ieee-address] [detail]

Context

[Tree] (show>call-trace>wlan-gw ue)

Full Context

show call-trace wlan-gw ue

Description

This command gives an overview of either all traces or a specific trace on the WLAN-GW.

Parameters

ieee-address

Displays information about the MAC address of this UE.

detail

Displays detailed information about the job.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Output

The following output is an example of traces of the UE being monitored.

Sample Output 
Node# show call-trace hosts
===============================================================================
Call-trace hosts
===============================================================================
 MAC address Mask-name     Status      Msgs
-------------------------------------------------------------------------------
 00:0a:95:9d:68:16 N/A                running   16
-------------------------------------------------------------------------------
Number of call-trace debug jobs: 1
=============================================================================
Node# show call-trace hosts detail
===============================================================================
Call-trace  detail
===============================================================================
MAC address                            : 00:0a:95:95:34:0a                 Status : running
                   Capture format     : pcap
Nr. of captured msgs   : 4 Time limit            : 86400s
Size of captured msgs : 2620B Data limit             : 10MB
Started : NOV 12 2013, 15:28:17 UTC
Live output : N/A
-------------------------------------------------------------------------------

ue

Syntax

ue [vlan qtag] [mpls-label label] [retail-svc-id service-id] [ssid service-set-id] [previous-access-point ip-address] [bd bridge-id]

ue mac ieee-address [bd bridge-id]

Context

[Tree] (show>subscr-mgmt>wlan-gw ue)

Full Context

show subscriber-mgmt wlan-gw ue

Description

This command displays User Equipment (UE) information.

Parameters

qtag

Displays information about the VLAN Q-tag present in the traffic received from this UE.

Values

1 to 4095

label

Displays information about the MPLS label present in the traffic received from this UE.

service-id

Specifies an existing service ID. If no svc-id is specified then it indicates that the interface is a network interface in the Base router instance.

Values

{id | svc-name}

id:

1 to 2147483647

svc-name:

Specifies an existing service name, up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration)
service-set-id

Displays information about the Service Set ID (SSID) of this UE.

ip-address

Displays information about the IP address of the previous Access Point (AP) of this UE.

bridge-id

Displays specified HLE bridge domain information of this UE.

Values

1 to 4294967295

ieee-address

Displays information about the MAC address of this UE.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following displays WLAN-GW information.

Sample Output 
System# show subscriber-mgmt wlan-gw ue
======================================================================
User Equipments
======================================================================
MAC address                 : 00:02:00:00:00:39
----------------------------------------------------------------------
VLAN Q-tag                  : 1
MPLS label                  : (Not Specified)
Tunnel router               : 50
Tunnel remote IP address    : 20C9::7:1:2
Tunnel local IP address     : 2032::1:1:7
Retail service              : N/A
SSID                        : 1
Previous Access Point IP    : (Not Specified)
IMSI                        : (Not Specified)
Last move time              : 2013/07/02 07:45:31

----------------------------------------------------------------------
No. of UE: 1
======================================================================
System#

ue

Syntax

ue [wlan-gw-group wlan-gw-group-id] [mda mda-id] [next-index index] [summary] [ detail] [bd bridge-id] [ue-mac ieee-address] [ue-vlan vlan] [state-description state] [tunnel-router router-instance] [tunnel-source-ip ip-address] [tunnel-destination-ip ip-address] [tunnel-type tunnel-type] [ue-ip ipv4-address] [dhcp6-addr ipv6-address] [slaac-prefix ipv6-address] [aggregate-summary] [soft-quota-exhausted]

Context

[Tree] (tools>dump>wlan-gw ue)

Full Context

tools dump wlan-gw ue

Description

This command dumps User Equipment (UE) information.

The summary option displays a count of UEs per ISA and the aggregate-summary displays a count of matched UEs over the whole WLAN-GW.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

This command displays UE information.

Sample Output 
/tools dump wlan-gw ue detail ue-mac 00:02:00:00:00:19 
===============================================================================
Matched 1 session on Slot #1 MDA #3
===============================================================================
Bridge Domain   : 0                    
UE-Mac          : 00:02:00:00:00:19     UE-vlan         : 3600                 
UE IP Addr      : N/A
UE Timeout      : N/A                  
DHCPv6 Timeout  : 3598 sec              SLAAC Timeout   : N/A                  
DHCPv6 IA-NA ID : 0x00000001            RA Timeout      : 1303 sec             
DHCPv6 Addr     : 4ffd:100:2d::1
SLAAC Prefix    : N/A
Description     : DSM-user
Auth/CoA-time   : 06/17/2021 07:18:10   Retail Service  : 300
Tunnel MDA/VM   : 1/3                   Tunnel Router   : 50                   
Shaper          : Default              
Tunnel Src IP   : 20c9::2:0:2
Tunnel Dst IP   : 2032::1:1:3
Tunnel Type     : L2TPv3                Tunnel Class    : Access               
L2TPv3 Session  : 0x0                   L2TPv3 Src Port : 1000                 
L2TPv3 Cookie   : 0x5                  
Anchor SAP      : 1/3/nat-out-ip:2049.2
Remote Type     : N/A                   Remote Service  : N/A                  
Remote Src IP   : N/A
Remote Dst IP   : N/A
AP-Mac          : 00:00:00:00:00:05     AP-RSSI         : Unknown              
AP-SSID         : "1"
Last-forward    : 06/17/2021 07:18:12   Last-move       : 06/17/2021 07:18:10  
Session Timeout : 06/17/2021 07:34:52   Idle Timeout    : 1000 sec
Acct Update     : 06/17/2021 07:18:12   Acct Interval   : 300 sec
Acct Session-Id : 01-02-00-00-00-19-00-00-00-01
Acct Policy     : wifi_isa_radius      
NAT Policy      : migrant_nat_300      
Redirect Policy : N/A                  
IP Filter       : N/A                  
App-profile     : N/A                  
Rx Oper PIR     : N/A                   Rx Oper CIR     : N/A                  
Tx Oper PIR     : N/A                   Tx Oper CIR     : N/A                  
Rx Frames       : 4                     Rx Octets       : 628                  
Tx Frames       : 2                     Tx Octets       : 466                  
Quota Direction : Both                 
Hard Octets     : N/A                   Soft Octets     : N/A                  
-------------------------------------------------------------------------------
===============================================================================
No sessions on Slot #1 MDA #4 match the query
No sessions on Slot #2 MDA #1 match the query
No sessions on Slot #2 MDA #2 match the query

un-sid

un-sid

Syntax

un-sid [mt {0 | 2}] [prefix ipv6-prefix[/prefix-length]] [adv-router system-id | hostname] [algo algo-id]

Context

[Tree] (show>router>isis>srv6 un-sid)

Full Context

show router isis segment-routing-v6 un-sid

Description

This command displays IS-IS SRv6 uN SIDs.

Parameters

ipv6-prefix[/prefix-length]

Displays routes only matching the specified IP address and length.

Values

ipv6-prefix[/prefix]: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

prefix-length: 1 to 128

system-id | hostname

Displays information for the specific IS-IS advertising router. The host name can be up to 38 characters.

algo-id

Displays information for the specified algorithm.

Values

0 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

Output

uN SID Output describes the uN SID output fields.

Use the following command to display uN SID information.

show router isis segment-routing-v6 un-sid
Sample Output 

===============================================================================
Rtr Base ISIS Instance 0 SRv6 uN SID Table
===============================================================================
Prefix                             AdvRtr                        MT     Lvl/Typ
Sid                                Behavior                      Flags  Algo
-------------------------------------------------------------------------------
110::/96                           Dut-A                         0      1/Int.
  110::/96                          End PSP                       -      128
===============================================================================
Table 1. uN SID Output

Label

Description

Prefix

Displays the prefix

AdvRtr

Displays the advanced router information

MT

Displays the MT information

Lvl/Typ

Displays the level or type information

SID

Displays the Segment ID

Behavior

Displays the behavior information

Flags

Displays the flag information

Algo

Displays the algorithm information

uni

uni

Syntax

uni [port-id]

Context

[Tree] (show>elmi uni)

Full Context

show elmi uni

Description

This command displays information about E-LMI mode, status, number of EVCs (SAPs) configured on the port for all of the ports on the service router.

Parameters

port-id

Displays UNI information for the specified port.

Values

slot/mda/port

Platforms

All

Output

The following output is an example of elmi uni information.

Sample Output: show elmi uni 
*A:Dut-C# show elmi uni  
===============================================================================
ELMI UNI-N Table
===============================================================================
Port     Mode  Status   #Evcs Uni Identifier                                   
-------------------------------------------------------------------------------
1/1/1    None  Up       0     10/100 Ethernet TX                               
1/1/2    None  Up       0     port-21                                          
1/1/3    None  Up       0     10/100 Ethernet TX                               
1/1/4    None  Up       0     10/100 Ethernet TX                               
1/1/5    Uni-N Up       2     UNI115                                           
1/1/6    None  Up       0     10/100 Ethernet TX                               
1/1/7    None  Up       0     10/100 Ethernet TX                               
1/1/8    None  Up       0     10/100 Ethernet TX                               
1/1/9    None  Up       0     10/100 Ethernet TX                               
1/1/10   None  Up       0     10/100 Ethernet TX                               
1/1/11   None  Up       0     10/100 Ethernet TX                               
1/1/12   None  Up       0     10/100 Ethernet TX                               
1/1/13   None  Up       0     10/100 Ethernet TX                               
1/1/14   None  Up       0     10/100 Ethernet TX                               
1/1/15   None  Up       0     10/100 Ethernet TX                               
1/1/16   None  Up       0     10/100 Ethernet TX                               
1/1/17   None  Up       0     10/100 Ethernet TX       
... 
===============================================================================
*A:Dut-C#


*A:Dut-C# show elmi uni 1/1/5 
===============================================================================
Uni-N Detailed Information
===============================================================================
Uni Mode      : Uni-N                  Link Status         : Up
Uni Identifier: UNI115
T391          : 10 seconds             T392                : 15 seconds
N393          : 4                      UniType             : Bundling
Rx Enq. Time  : 02/18/2010 17:11:44    Tx Status Time      : 02/18/2010 17:11:44
Rx Enq Msg    : 24                     Tx Status Msg       : 24
Rx Check Time : 02/18/2010 17:12:34   Tx Check Time       : 02/18/2010 17:12:34
Rx Inv. SeqNum: 0                     Tx Async Status Msg : 0
Enq Timeouts  : 0                     Discard Msg         : 0
===============================================================================
*A:Dut-C#

unicast

unicast

Syntax

unicast [router router-instance | service-name service-name]

Context

[Tree] (show>system>ptp unicast)

Full Context

show system ptp unicast

Description

This command displays unicast negotiation information.

Parameters

router-instance

Shows only the information for a specific router instance.

Values

router-name – Base

vprn-svc-id – 1 to 2147483647

service-name

Specifies the service name used to identify the router instance. The name can be up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Output

The following output is an example of PTP unicast information.

Sample Output 
*A:Dut-C# show system ptp unicast                         
===============================================================================
IEEE 1588/PTP Unicast Negotiation Information
===============================================================================
Router                                                       
  IP Address      Dir Type     Rate       Duration State    Time
-------------------------------------------------------------------------------
100
  10.0.0.1        Rx  Announce 1 pkt/2 s  300      Granted  02/07/2014 16:52:35
  10.0.0.1        Rx  Sync     64 pkt/s   300      Granted  02/07/2014 16:52:39
  10.0.0.1        Tx  DelayReq 64 pkt/s   300      Granted  02/07/2014 16:52:39
  10.0.0.1        Rx  DelayRsp 64 pkt/s   300      Granted  02/07/2014 16:52:39
200
  192.168.0.2     Tx  Announce 1 pkt/2 s  300      Granted  02/07/2014 16:50:47
  192.168.0.2     Tx  Sync     64 pkt/s   300      Granted  02/07/2014 16:50:52
  192.168.0.2     Rx  DelayReq 64 pkt/s   300      Granted  02/07/2014 16:50:52
  192.168.0.2     Tx  DelayRsp 64 pkt/s   300      Granted  02/07/2014 16:50:52
-------------------------------------------------------------------------------
PTP Peers               : 2
Total Packet Rate       : 385 packets/second
===============================================================================


A:bksim1618# show system ptp router 1 unicast 
===============================================================================
IEEE 1588/PTP Unicast Negotiation Information
===============================================================================
Router                                                       
  IP Address      Dir Type     Rate       Duration State    Time
-------------------------------------------------------------------------------
1
  10.2.1.20       Rx  Announce 1 pkt/2 s  300      Granted  04/21/2013 19:14:19
  10.2.1.20       Tx  Announce 1 pkt/2 s  300      Granted  04/21/2013 19:13:25
  10.2.1.20       Tx  Sync     64 pkt/s   300      Granted  04/21/2013 19:13:30
  10.2.1.20       Rx  DelayReq 64 pkt/s   300      Granted  04/21/2013 19:13:30
  10.2.1.20       Tx  DelayRsp 64 pkt/s   300      Granted  04/21/2013 19:13:30
  10.3.1.19       Rx  Announce 1 pkt/2 s  300      Granted  04/21/2013 19:13:16
  10.3.1.19       Rx  Sync     64 pkt/s   300      Granted  04/21/2013 19:13:21
  10.3.1.19       Tx  DelayReq 64 pkt/s   300      Granted  04/21/2013 19:13:21
  10.3.1.19       Rx  DelayRsp 64 pkt/s   300      Granted  04/21/2013 19:13:21
-------------------------------------------------------------------------------
PTP Peers               : 2
Total Packet Rate       : 385 packets/second
===============================================================================
*A:bksim1618#

unknown-origin

unknown-origin

Syntax

unknown-origin

Context

[Tree] (show>subscr-mgmt>errors unknown-origin)

Full Context

show subscriber-mgmt errors unknown-origin

Description

This command lists errors of an unknown origin. Errors shown do have a corresponding SAP ID or a SDP ID.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

unsubscribe-from

unsubscribe-from

Syntax

unsubscribe-from log-id log-id

Context

[Tree] (tools>perform>log unsubscribe-from)

Full Context

tools perform log unsubscribe-from

Description

This command cancels the subscription of the current CLI session to the specified CLI log.

Parameters

log-id

Specifies the log ID from which cancellation is requested.

Values

1 to 101

Platforms

All

update-path

update-path

Syntax

update-path {lsp lsp-name path current-path-name new-path new-path-name}

Context

[Tree] (tools>perform>router>mpls update-path)

Full Context

tools perform router mpls update-path

Description

This command enables you to instruct MPLS to replace the path of a primary or secondary LSP. The primary or secondary LSP path is indirectly identified via the current-path-name value. The same path name cannot be used more than once in a given LSP name.

This command applies to both CSPF LSP and to a non-CSPF LSP. This command will only work when the specified current-path-name has the adaptive option enabled. The adaptive option can be enabled at the LSP level or the path level.

The new path must have been configured in the CLI or provided via SNMP. The CLI command for entering the path is

configure router mpls path path-name

The command fails if any of the following conditions exist:

  • The specified current-path-name of this LSP does not have the adaptive option enabled.

  • The specified new-path-name value does not correspond to a previously defined path.

  • The specified new-path-name value exists but is being used by any path of the same LSP, including this one.

When you execute this command, MPLS performs the following procedures:

  • MPLS performs a single MBB attempt to move the LSP path to the new path.

  • If the MBB is successful, MPLS updates the new path

    • MPLS writes the corresponding NHLFE in the data path if this path is the current backup path for the primary.

    • If the current path is the active LSP path, it will update the path, write the new NHLFE in the data path that will cause traffic to switch to the new path.

  • If the MBB is not successful, the path retains its current value.

  • The update-path MBB has the same priority as the manual re-signal MBB.

Platforms

All

uplink

uplink

Syntax

uplink

uplink mgw-address-cache [arec] [snaptr] [srv]

uplink mgw-address-cache apn apn-domain-string

Context

[Tree] (show>router>gtp uplink)

Full Context

show router gtp uplink

Description

This command displays operational information related to the usage of GTP uplink interfaces (Gn, S2a, S2b) in this routing context.

Parameters

arec

Displays A-records.

snaptr

Displays Straightforward-NAPTR information.

srv

Displays SRV records.

apn-domain-string

Specifies the Access Point Name (APN) of this DNS cache entry.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following is an example of GTP uplink information.

Sample Output 
Node# show router 10 gtp uplink mgw-address-cache 
=============================================================================== 
Mobile Gateway address cache 
=============================================================================== 
APN : full.dotted.apn.apn.epc.mnc010.mcc206.3gppnetwork.org 
------------------------------------------------------------------------------- 
Mobile Gateway address : 5.20.1.2 
Time left (s) : 3587 
------------------------------------------------------------------------------- 
No. of cache entries: 1 
No. of Mobile gateways: 1 
===============================================================================

uplink

Syntax

uplink

uplink session imsi imsi apn apn-string

uplink session [peer-address ip-address] [router router-instance] [remote-control-teid teid] [local-control-teid teid] [detail]

uplink session imsi imsi

Context

[Tree] (show>subscr-mgmt>gtp uplink)

Full Context

show subscriber-mgmt gtp uplink

Description

This command displays box-wide operational information related to the GTP uplink interfaces (Gn, S2a, S2b).

Parameters

imsi

Specifies the IMSI (International Mobile Subscriber Identity) of this UE.

apn-string

Specifies the APN (Access Point Name).

ip-address

Specifies the IP address of the Mobile Gateway (PGW or GGSN).

router-instance

Specifies the identifier of the virtual router instance where the GTP tunnel is terminated.

remote-control-teid teid

Specifies the remote control plane Tunnel Endpoint Identifier (TEID).

local-control-teid teid

Specifies the local control plane TEID.

detail

Displays detailed information.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following is an example of GTP uplink information

Sample Output 
Node# show subscriber-mgmt gtp uplink session detail 
=============================================================================== 
GTP sessions 
=============================================================================== 
IMSI : 206100000000041 
APN : full.dotted.apn.mnc010.mcc206.gprs 
------------------------------------------------------------------------------- 
Mobile Gateway router : "Base" 
Mobile Gateway address : 5.20.1.2 
Remote control TEID : 1119232 
Local control TEID : 4293918976 
Bearer 5 rem TEID : 1074861061 
Bearer 5 loc TEID : 4293919013 
------------------------------------------------------------------------------- 
No. of GTP sessions: 1 
===============================================================================

uplink

Syntax

uplink

Context

[Tree] (clear>router>gtp uplink)

Full Context

clear router gtp uplink

Description

This command clears information related to the GTP uplink state for the routing context.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

upnp

upnp

Syntax

upnp

Context

[Tree] (show>service upnp)

Full Context

show service upnp

Description

Commands in this context display UPnP policy parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

upnp-mappings

upnp-mappings

Syntax

upnp-mappings subscriber sub-ident-string protocol {tcp | udp} outside-port port-number

upnp-mappings subscriber sub-ident-string

Context

[Tree] (clear>nat upnp-mappings)

Full Context

clear nat upnp-mappings

Description

This command remove UPnP mappings for the specified subscriber. If protocol and outside-port are not specified, then all UPnP mappings of subscriber will be removed.

Parameters

subscriber sub-ident-string

clears mappings for the specified subscriber.

protocol {tcp | udp}

Clears the mappings for the specified protocol.

outside-port port-number

Clears mappings for the specified outside-port.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

upnp-policy

upnp-policy

Syntax

upnp-policy policy-name

upnp-policy policy-name statistics

upnp-policy

Context

[Tree] (show>service>upnp upnp-policy)

Full Context

show service upnp upnp-policy

Description

This commands displays upnp-policy related information.

Without any parameters the system outputs a list of configured UPnP policies.

Parameters

policy-name

The system displays the configuration of the specified policy.

statistics

The system displays statistics for the specified policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following is sample output for this command.

Sample Output 
show service upnp upnp-policy 
===============================================================================
UPnP policies
===============================================================================
Policy                           Description
-------------------------------------------------------------------------------
test                             
-------------------------------------------------------------------------------
No. of UPnP policies: 1
===============================================================================

show service upnp upnp-policy "test" 
===============================================================================
UPnP Policy test
===============================================================================
Description                 : (Not Specified)
Mapping limit               : 256
Strict mode                 : false
HTTP listening port         : 5000
Last Mgmt Change            : 01/26/2015 19:23:41
-------------------------------------------------------------------------------
Active mappings             : 2
Mapped subscribers          : 1
Associated subscribers      : 1
===============================================================================


show service upnp upnp-policy "test" statistics 
===============================================================================
UPnP Policy test Statistics
===============================================================================
rx SSDP M-SEARCH                                        : 109
rx HTTP GET device description                          : 0
rx HTTP GET service description                         : 109
rx UPnP AddPortMapping                                  : 6
rx UPnP ClearPortMapping                                : 0
rx UPnP DeletePortMapping                               : 1
rx UPnP ForceTermination                                : 0
rx UPnP GetConnectionTypeInfo                           : 0
rx UPnP GetExternalAddress                              : 6
rx UPnP GetGenericPortMappingEntry                      : 43
rx UPnP GetNATRSIPStatus                                : 8
rx UPnP GetSpecificPortMappingEntry                     : 1
rx UPnP GetStatusInfo                                   : 49
rx UPnP RequestConnection                               : 0
rx UPnP SetConnectionType                               : 0
rx UPnP unsupported optional action                     : 6
rx UPnP invalid request                                 : 0
tx SSDP M-SEARCH                                        : 109
tx TCP reset                                            : 0
tx HTTP OK                                              : 109
tx UPnP OK                                              : 101
tx UPnP error                                           : 19
drop no memory                                          : 0
portmapping created                                     : 4
portmapping updated                                     : 1
portmapping failed: conflict with other host            : 0
portmapping failed: conflict with pinhole               : 0
portmapping failed: hit limits                          : 0
portmapping failed: other reason                        : 0
rx HTTP (UN)SUBSCRIBE                                   :  0
tx HTTP 501 Not Implemented                             : 0
drop rate limited                                       : 0

===============================================================================

upnp-policy-statistics

upnp-policy-statistics

Syntax

upnp-policy-statistics policy-name

Context

[Tree] (clear>nat upnp-policy-statistics)

Full Context

clear nat upnp-policy-statistics

Description

This command clears UPnP policy statistics.

Parameters

policy-name

Clears UPnP policy statistics for the specified policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

uptime

uptime

Syntax

uptime

Context

[Tree] (show uptime)

Full Context

show uptime

Description

This command displays the time since the system started.

Platforms

All

Output

The following output is an example of uptime information, and Uptime Output describes the output field.

Sample Output 
A:ALA-1# show uptime
System Up Time         : 11 days, 18:32:02.22 (hr:min:sec)

A:ALA-1#
Table 2. Uptime Output

Label

Description

System Up Time

Displays the length of time the system has been up in days, hr:min:sec format.

url-filter

url-filter

Syntax

url-filter [url-filter-name]

url-filter url-filter-name isa mda-id/esa-vm-id [detail]

url-filter url-filter-name web-service [profile profile-name]

Context

[Tree] (show>app-assure>group url-filter)

Full Context

show application-assurance group url-filter

Description

This command displays information about the configured url-filter policy along with some associated raw statistics. These output statistics are:

  • Vlan Id: Vlan id used by the aa interfaces

  • Admin Status: Up / Down

  • Oper Status: Up / Down

  • Oper Flags: adminDown, no-aa-if, aa-if-down, icap-server-down

  • Default Action: default policy action taken by the url-filter

  • ICAP HTTP Redirect: HTTP redirect Policy

  • AQP Referenced: Yes/No

  • HTTP Request: Number of subscriber HTTP requests

  • HTTP Errors: Impossible to send an ICAP request, this can be caused by either no TCP connection available, associated flow with a drop action due to another aqp policy, system resource exhausted

  • ICAP Request: Number of ICAP request sent

  • ICAP Errors: ICAP request timeout, unexpected ICAP response, internal TCP errors.

  • Custom-x-header: Name of the custom-x-header, if configured. If it is not configured, the value is "Not Specified".

In addition to these counters the system will count the type of action taken by the url-filter policy (allow, block, redirect, default) as well as the type of responses received from the icap server (allow, block, redirect, late).

Parameters

url-filter-name

Specifies the name of the url-filter policy.

mda-id/esa-vm-id

Specifies the mda-id/esa-vm-id reference of the ISA card.

detail

Specifies detailed statistics related to the ISA card.

profile-name

Specifies the name of a configured profile for web service, up to 256characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following is an example show output for the url-filter command.

Web-service URL Filter Show Command Field Descriptions describes the output fields.

URL Filter Show Command Sample Output 
# show application-assurance group 1 url-filter "web-serv1" isa 7/2
=============================================================================
Application Assurance Group 1 URL Filter " web-serv1" ISA 7/2
=============================================================================
Description            : Url filter WebService
Admin Status           : Up
Oper Status            : Down
Oper Flags             : web-service-down 
DNS Oper Status        : Down
DNS Oper Flags         : unreachable 
HTTP Request Filtering : all
AQP Referenced         : Yes
-----------------------------------------------------------------------------
URL Stats Summary
-----------------------------------------------------------------------------
Total Requests  : 0                     Default Action  : 0
Requests Allowed: 0                     Reqs Block/Redir: 0
-----------------------------------------------------------------------------
Local Filter
-----------------------------------------------------------------------------
allow-list             : allowlist1
  Admin Status         : Up
  Oper Status          : Up
  Oper Flags           : <none>
  Number of URLs       : 1
  URL-List Lookups     : 0
    Match              : 0
    Miss               : 0
 
deny-list              : denylist1
  Admin Status         : Up
  Oper Status          : Up
  Oper Flags           : <none>
  Number of URLs       : 1
  Default Action       : block-all 
  HTTP Redirect        : (Not Specified)
  URL-List Lookups     : 0
    Match              : 0            
    Miss               : 0
    Default Action     : 0
 
deny-list              : denylist2
  Admin Status         : Up
  Oper Status          : Up
  Oper Flags           : <none>
  Number of URLs       : 1
  Default Action       : block-all 
  HTTP Redirect        : (Not Specified)
  URL-List Lookups     : 0
    Match              : 0
    Miss               : 0
    Default Action     : 0
-----------------------------------------------------------------------------
Web Service Filter
-----------------------------------------------------------------------------
Classifier             : web-service-1
Category-set-id        : 1
default-profile        : prof1
VLAN Id                : 1
FQDN                   : nokia-api.webtitancloud.com
DNS Address            : 12.0.0.100
Default Action         : allow 
HTTP Redirect          : ws
AA Interface           : to_isa_7/2
Service                : VPRN 1
SAP Id                 : 7/2/aa-svc:1
Client IP              : 10.1.1.2/31
 
Web Service Filter Stats
Class Ovrd Lkup : 0                     Class Ovrd match: 0
Cache Lookup    : 0                     Cache size      : 0
Cache match     : 0                     Cache max size  : 20971520
Cache miss      : 0                     
 
URL Request     : 0                     Default Action  : 0
URL Response    : 0                     Late Response   : 0
  Allow         : 0                       Packet Discard: 0
  Block         : 0                       Octet Discard : 0
  Redirect      : 0                     
-----------------------------------------------------------------------------
ISA 7/2 Web Service Connection Stats
-----------------------------------------------------------------------------
Established Connections   : 0 of 0 connections
Request Rate              : 0 per second
Round Trip Time           : 0 microseconds
=============================================================================
Web-service URL Filter Show Command Sample Output 
# show application-assurance group 1 url-filter "testFilter" web-service
-------------------------------------------------------------------------------
Web services for url-filter "testFilter"
-------------------------------------------------------------------------------
Category-set-id    : 1
-------------------------------------------------------------------------------
===============================================================================
Profile Categories
===============================================================================
Profile Name                            Blocked Categories  Allowed Categories
-------------------------------------------------------------------------------
testProfile                             1                   54
===============================================================================

# show application-assurance group 1 url-filter "testFilter" web-
service profile "testProfile"
-------------------------------------------------------------------------------
Web service profile "testProfile"
-------------------------------------------------------------------------------
Category-set-id    : 1
Description        :
-------------------------------------------------------------------------------
===============================================================================
Blocked Categories
===============================================================================
Category Id         Category Name
-------------------------------------------------------------------------------
25                  Personal Webpages
===============================================================================
===============================================================================
Allowed Categories
===============================================================================
Category Id         Category Name
-------------------------------------------------------------------------------
1                   Compromised
2                   Criminal Skills/Hacking
3                   Hate Speech
4                   Illegal Drugs
5                   Phishing/Fraud
6                   Spyware and Malicious Sites
7                   Nudity
8                   Mature
9                   Pornography/Sex
10                  Violence
11                  Weapons
12                  Anonymizer
13                  Computers and Technology
14                  Download Sites
15                  Translator
16                  Alcohol
17                  Health
18                  Pharmacy
19                  Tobacco
20                  Gambling
21                  Games
22                  Cars/Transportation
23                  Dating & Relationships
24                  Home/Leisure
26                  Restaurants
27                  Sports and Recreation
28                  Travel
29                  Government
30                  Military
31                  Non-profits
32                  Politics and Law
33                  Religion
34                  Education
35                  Art
36                  Entertainment and Videos
37                  Humor
38                  Music
39                  News
40                  Finance
41                  Internet Watch Foundation List
42                  Shopping
43                  Chat/IM
44                  Community Sites
45                  Social Networking
46                  Web-based Email
47                  Portal Sites
48                  Search Engines
49                  Online Ads
50                  Business/Services
51                  Job Search
52                  Real Estate
53                  Spam
54                  Miscellaneous
55                  Uncategorized
===============================================================================
Table 3. Web-service URL Filter Show Command Field Descriptions

Label

Description

Category-set-id

The ID of the category set used for URL categorization.

Description

The description of the web-service profile.

Profile Name

The name of the web-service profile.

Blocked Categories

The blocked categories for the web-service profile.

Allowed Categories

The allowed categories for the web-service profile.

Category Id

The ID of the blocked or allowed category.

Category Name

The name of the blocked or allowed category.

url-list

url-list

Syntax

url-list url-list-name

Context

[Tree] (show>app-assure>group url-list)

Full Context

show application-assurance group url-list

Description

This command displays information about the configured URL list.

Parameters

url-list-name

Specifies the name of the URL list.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following output examples show URL list information.

Output 
# show application-assurance group 1 url-list "allow-list1"
=============================================================================
Application Assurance Group 1 url-list "allow-list1"
=============================================================================
Description : Default Url-list object
Size : standard
Host Expressions : enabled
Admin Status : Up
Oper Status : Up
Oper Flags : <none>
File deployed to ISAs : Yes
-----------------------------------------------------------------------------
Upgrade Statistics
-----------------------------------------------------------------------------
Last Success : 06/19/2020 02:57:06
Deployed
File Name : cf1:/expr_15000.vm.only.expr
URL Entries : 15000 (100.00% full)
URL Characters : 249390 ( 5.08% full)
URL Host Expr Entries: 15000 (100.00% full)
Blank/Comment Lines : 60519
Last Attempt : 06/19/2020 02:57:06
Result : Success

URL List Show Command Field Descriptions describes the URL list show command output fields.

Table 4. URL List Show Command Field Descriptions

Label

Description

Description

The description of the URL list

Size

[standard | extended] Size parameter for the URL list

Host Expressions

If the host is enabled or disabled

Admin Status

[Up | down] - Administrative status of the URL list

Oper Status

[Up | down] - Operational status of the URL list

Oper Flags

[admin-down | file-does-not-exist |invalid-file-format | too-many-urls | switch-over-error]

File Deployed to ISA

[Yes | No] - This flag describes if the file located in the compact flash is the one deployed in the ISA, in the event the file is overwritten and before the admin upgrade command is used this flag will display "No".

Upgrade Statistics

Last Success

Last time the list was successfully upgraded

File Name

File name for the last successful upgrade

URL Entries

Number of URLs loaded at the last success and percentage to full

URL Characters

Number of characters loaded at the last success and percentage to full

URL Host Expr Entries

URL host expression entries

Blank/CommentLines

Number of blank or commented out lines

Last Attempt

Last time the operator tried to upgrade the list

Result

[Success | Failure]. Result of the last upgrade

File Name

File name for the last upgrade attempt

usage-monitor

usage-monitor

Syntax

usage-monitor app-group [app-group-name] count

usage-monitor application [application-name] count

usage-monitor charging-group [charging-group-name] count

usage-monitor count

usage-monitor status

Context

[Tree] (show>app-assure>group>aa-sub usage-monitor)

Full Context

show application-assurance group aa-sub usage-monitor

Description

This command displays per-subscriber usage-monitoring statistics.

Parameters

app-group-name

Specifies an application group name, up to 32 characters.

application-name

Specifies an application name, up to 32 characters.

charging-group-name

Specifies a charging group name, up to 32 characters.

count

Displays counters.

status

Displays the status.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

user

user

Syntax

user [user-id] [detail]

user [user-id] lockout

Context

[Tree] (show>system>security user)

Full Context

show system security user

Description

This command displays user registration information.

If no command line options are specified, summary information for all users displays.

Parameters

user-id

Displays information for the specified user.

Default

All users

detail

Displays detailed user information to the summary output.

lockout

Displays information about any users who are currently locked out.

Platforms

All

Output

The following are examples of user output information.

Show System Security User Output Fields describes user output fields.

Sample Output 
show system security user
===============================================================================
Users
===============================================================================
User ID   New  User Permissions                    Password Login   Failed Local
          Pwd  console ftp li snmp  netconf  grpc  Expires  Attempt Logins Conf
-------------------------------------------------------------------------------
admin     n    y       n   n  n              n     never    2       0      y
-------------------------------------------------------------------------------
Number of users : 1
===============================================================================
show system security user detail
===============================================================================
Users
===============================================================================
User ID      New User Permissions                 Password Login   Failed Local
             Pwd console ftp li snmp netconf grpc Expires  Attempt Logins Conf
-------------------------------------------------------------------------------
admin        n   y       y   n  y    y       n    never    2       0      y
-------------------------------------------------------------------------------
Number of users : 1
===============================================================================
===============================================================================
User Configuration Detail
===============================================================================
===============================================================================
user id            : admin
-------------------------------------------------------------------------------
console parameters
-------------------------------------------------------------------------------
new pw required    : no                 cannot change pw   : no
home directory     :
restricted to home : no
save when restrict*: no
login exec file    :
profile            : default
profile            : administrative
locked-out         : no
-------------------------------------------------------------------------------
snmp parameters
-------------------------------------------------------------------------------
auth protocol      : hmac-sha2-512
auth key           : ffb8bb4392ccab627d903db396cd928fdde5ac8cdb78e7b6ecb39bde2c
                     3ec67c8380cd0d91dfe6f30c041d9819a34e297994c3b759e68f2db075
                     4bc408e3a001
privacy protocol   : cfb128-aes-256
privacy key        : ffb8bb4392ccab627d903db396cd928fdde5ac8cdb78e7b6ecb39bde2c
                     3ec67c
group              : moje
===============================================================================
show system security user lockout
===============================================================================
Currently Failed Login Attempts
===============================================================================
User ID Remaining Login attempts Remaining Lockout Time (min:sec)
-------------------------------------------------------------------------------
user123 N/A 9:56
-------------------------------------------------------------------------------
Number of users : 1
===============================================================================
Table 5. Show System Security User Output Fields

Label

Description

User ID

The name of a system user.

Users

New Pwd

y — The user must change their password at the next login.

n — The user does not need to change their password at the next login.

User Permissions

console:

y — The user is authorized for console access.

n — The user is not authorized for console access.

ftp:

y — The user is authorized for FTP access.

n — The user is not authorized for FTP access.

li:

y — The user is authorized for LI access.

n — The user is not authorized for LI access.

snmp:

y — The user is authorized for SNMP access.

n — The user is not authorized for SNMP access.

netconf:

y — The user is authorized for NETCONF access.

n — The user is not authorized for NETCONF access.

grpc:

y — The user is authorized for gRPC access.

n — The user is not authorized for gRPC access.

Password Expires

The number of days after which the user must change their password.

Login Attempts

The number of times that the user has attempted to log in, irrespective of whether the login succeeded or failed.

Failed Logins

The number of unsuccessful login attempts.

Local Conf

y — Password authentication is based on the local password database.

n — Password authentication is not based on the local password database.

Number of users

The total number of listed users.

User Configuration Detail

new pw required

yes — The user must change their password at the next login.

no — The user does not need to change their password at the next login.

cannot change pw

yes — The user does not have the ability to change their password.

no — The user has the ability to change their password.

home directory

The local home directory for the user for both console and FTP access.

restricted to home

yes — The user is not allowed to navigate to a directory higher in the directory tree on the home directory device.

no — The user is allowed to navigate to a directory higher in the directory tree on the home directory device.

save when restricted

Whether configuration save operations are allowed when the user is restricted to home.

login exec file

The user’s login exec file which executes whenever the user successfully logs in to a console session.

profile

The security profiles associated with the user.

locked-out

Whether the user is currently locked out, and, if they are locked out, how much time remains before the user can attempt to log into the node again.

SNMP Parameters

auth protocol

The SNMPv3 authentication protocol.

auth key

The SNMPv3 authentication key.

privacy protocol

The SNMPv3 privacy protocol.

privacy protocol

The SNMPv3 privacy key.

group

The group for which the protocols apply.

Currently Failed Login Attempts

Remaining Login Attempts

The number of login attempts remaining before the user is locked out.

Remaining Lockout Time (min:sec)

The number of minutes and seconds remaining until the lockout expires and the user can attempt to log in again.

With the introduction of the PKI on an SR (SSH Server) the authentication process can be done via PKI or password. SSH client usually authenticate via PKI and password if PKI is configured on the client. In this case PKI takes precedence over password in most clients.

All client authentications are logged and display in the show>system>security>user detail. Pass/Fail Login Attempts shows the rules where pass and fail attempts are logged.

Table 6. Pass/Fail Login Attempts

Authentication Order

Client (such as, putty)

Server (such as, SR)

CLI Show System Security Attempts (SR)

Private Key Programmed

Public Key Configured

Password Configured

Logins Attempts

Failed Logins

1. Public Key

Yes

Yes

N/A

Increment

2. Password

Yes

Yes (No match between client and server. Go to password.)

Yes

Increment

Yes

No

Yes

Increment

No

N/A

Yes

Increment

No

N/A

No

Increment

1. Public Key (only)

Yes

Yes

N/A

Increment

Yes

Yes (No match between client and server. Go to password.)

Increment

Yes

N/A

Increment

No

N/A

Increment

users

users

Syntax

users

Context

[Tree] (show users)

Full Context

show users

Description

Displays console user login and connection information.

Platforms

All

Output

The following is an example of user information.

Show Users Output Fields describes show users output fields.

Sample Console Users Output 
*A:node-1# show users
===============================================================================
User                             Type      Login time           Idle time
  Session ID   From
===============================================================================
                                 Console         --             3d 10:11:02 --
  6            --
admin                            SSHv2     12OCT2018 20:44:15   0d 00:00:50 A-
  83           192.168.0.10
admin                            SSHv2     12OCT2018 21:09:25   0d 00:00:00 --
 #84           192.168.0.10
-------------------------------------------------------------------------------
Number of users: 2
'#' indicates the current active session
'A' indicates user is in admin mode
===============================================================================
Table 7. Show Users Output Fields

Label

Description

User

The user name.

Type

The user is authorized this access type.

From

The originating IP address.

Login time

The time the user logged in.

Idle time

The amount of idle time for a specific login.

Number of users

Displays the total number of users logged in.

utilization

utilization

Syntax

utilization [detail]

Context

[Tree] (show>chassis>power-management utilization)

Full Context

show chassis power-management utilization

Description

This command displays power management utilization.

Parameters

detail

Displays detailed breakdown of devices.

Platforms

7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s, 7950 XRS

Output

The following output is an example of power management utilization information, and Output Fields: show chassis power-management utilization describes the output fields.

Sample Output: show chassis power-management utilization 
*A:Dut-A# show chassis power-management utilization 
===============================================================================
Chassis Power Utilization
===============================================================================
              SUPPLY                               PEAK DEMAND 
Power Capacity   : 22000.00 Watts        Fan           :   695.00 Watts (  3%)
Safety Level     : 13203.00 Watts (100%) IO Module     :  7163.09 Watts ( 33%)
Alert Level      :     0.00 Watts        CPM Module    :   392.86 Watts (  2%)
                                         Fabric Module :  1622.25 Watts (  7%)
                                         MDA Module    :  6023.07 Watts ( 27%)+
                                         CCM Module    :    50.82 Watts (  0%)
                                         Peak Util.    :  9924.02 Watts ( 45%)
                                                   CURRENT DEMAND
                                         Current Util. :  9623.01 Watts ( 44%)
===============================================================================
+  Power utilization of device already included in IO Module value
===============================================================================
Sample Output: show chassis power-management utilization detail 
*A:DUT-A# show chassis power-management utilization                
===============================================================================
Chassis Power Zone 1 Utilization
===============================================================================
              SUPPLY                               PEAK DEMAND
Power Capacity   : 24000.00 Watts        Chassis/Fan   :   635.16 Watts (  3%)
                                         IO Module     :   355.67 Watts (  1%)
                                         CPM Module    :   546.64 Watts (  2%)
                                         Fabric Module :   746.00 Watts (  3%)
                                         MDA Module    :   748.69 Watts (  3%)
                                         XIOM Module   :   476.29 Watts (  2%)
                                         Peak Util.    :  3508.45 Watts ( 15%)
 
Mode             :    basic              Current util. :  3356.82 Watts ( 14%)
Reserved Power   :  6000.00 Watts        Safety Level  :  2892.00 Watts ( 20%)
Util. + Reserve  :  9356.82 Watts ( 39%) Safety Alert  : +1000.00 Watts
Remaining Power  : 14643.18 Watts        Alert Level   :  3892.00 Watts ( 26%)
===============================================================================
*A:DUT-A# show chassis power-management utilization detail
===============================================================================
Chassis Power Zone 1 Utilization (detail)
===============================================================================
              SUPPLY                               PEAK DEMAND
Power Capacity   : 24000.00 Watts        Chassis/Fan  
Power Module 1/1 :  6000.00 Watts          1/1         :    86.06 Watts (  0%)
Power Module 1/2 :  6000.00 Watts          1/2         :    77.45 Watts (  0%)
Power Module 1/3 :     0.00 Watts          1/3         :    76.62 Watts (  0%)
Power Module 1/4 :     0.00 Watts          1/4         :    86.06 Watts (  0%)
Power Module 1/5 :     0.00 Watts          1/5         :    76.62 Watts (  0%)
Power Module 1/6 :     0.00 Watts          1/6         :    77.45 Watts (  0%)
Power Module 1/7 :     0.00 Watts          1/7         :    77.45 Watts (  0%)
Power Module 1/8 :     0.00 Watts          1/8         :    77.45 Watts (  0%)
Power Module 1/9 :     0.00 Watts        IO Module    
Power Module 1/10:     0.00 Watts          Slot 2      :   355.67 Watts (  1%)
Power Module 2/1 :  6000.00 Watts        CPM Module   
Power Module 2/2 :  6000.00 Watts          Slot A      :   276.28 Watts (  1%)
Power Module 2/3 :     0.00 Watts          Slot B      :   270.36 Watts (  1%)
Power Module 2/4 :     0.00 Watts        Fabric Module
Power Module 2/5 :     0.00 Watts          Sfm 1       :    94.78 Watts (  0%)
Power Module 2/6 :     0.00 Watts          Sfm 2       :    91.44 Watts (  0%)
Power Module 2/7 :     0.00 Watts          Sfm 3       :    92.56 Watts (  0%)
Power Module 2/8 :     0.00 Watts          Sfm 4       :    94.78 Watts (  0%)
Power Module 2/9 :     0.00 Watts          Sfm 5       :    93.67 Watts (  0%)
Power Module 2/10:     0.00 Watts          Sfm 6       :    91.44 Watts (  0%)
                                           Sfm 7       :    93.67 Watts (  0%)
                                           Sfm 8       :    93.67 Watts (  0%)
                                         MDA Module   
                                           MDA 2/1     :   582.28 Watts (  2%)
                                           MDA 2/x2/1  :    72.63 Watts (  0%)
                                           MDA 2/x2/2  :    93.77 Watts (  0%)
                                         XIOM Module  
                                           XIOM 2/x2   :   476.29 Watts (  2%)
                                         Peak Util.    :  3508.45 Watts ( 15%)
 
Mode             :    basic              Current util. :  3329.57 Watts ( 14%)
Reserved Power   :  6000.00 Watts        Safety Level  :  2892.00 Watts ( 20%)
Util. + Reserve  :  9329.57 Watts ( 39%) Safety Alert  : +1000.00 Watts
Remaining Power  : 14670.43 Watts        Alert Level   :  3892.00 Watts ( 26%)
===============================================================================
*A:DUT-A#
Table 8. Output Fields: show chassis power-management utilization

Label

Description

SUPPLY

Power Capacity

Indicates the total amount of power available to the chassis.

Safety Level

Specifies the configured Power Safety Level, which is a percentage of the worst case power consumption level.

Alert Level

Specifies the configured power level in watts, which causes the system to raise an alarm if the available power level drops below a set level.

DEMAND

Fan

Specifies the amount of power used for the fan tray indicated.

IO Module

Specifies the amount of power used for the IO Module indicated.

CPM Module

Specifies the amount of power used for the CPM indicated.

Fabric Module

Specifies the amount of power used for the SFM indicated.

MDA Module

Specifies the amount of power used for the line card indicated.

Current Util.

Specifies the total amount of power used for all system elements.

Peak Util.

Specifies peak utilization starting from bootup.