d Commands
d-path-ignore
d-path-ignore
Syntax
[no] d-path-ignore
Context
[Tree] (config>service>system>bgp-evpn>ad-per-evi-routes d-path-ignore)
Full Context
configure service system bgp-evpn ad-per-evi-routes d-path-ignore
Description
This command makes the router ignore the Domain PATH attribute (D-PATH) when BGP computes the best path selection for received routes.
The no form of this command considers the D-PATH length and value as a tiebreaker in determining the best-path selection. In accordance with draft-sr-bess-evpn-dpath, the router compares the D-PATH attribute received in AD per-EVI routes with the same key as follows:
- The routes with the shortest D-PATH are preferred; therefore, routes not tied for the shortest D-PATH are removed. Routes without D-PATH are considered zero-length D-PATH.
- The routes with the numerically lowest left-most Domain-ID are preferred; therefore, routes not tied for the numerically lowest left-most Domain-ID are removed from consideration.
Default
no d-path-ignore
Platforms
All
d-path-length-ignore
d-path-length-ignore
Syntax
[no] d-path-length-ignore
Context
[Tree] (config>service>vprn>bgp>path-selection d-path-length-ignore)
[Tree] (config>service>vprn d-path-length-ignore)
[Tree] (config>router>bgp>path-selection d-path-length-ignore)
Full Context
configure service vprn bgp best-path-selection d-path-length-ignore
configure service vprn d-path-length-ignore
configure router bgp best-path-selection d-path-length-ignore
Description
This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.
At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.
Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.
The no form of this command disables the ability to ignore the D-PATH domain segment length.
Default
no d-path-length-ignore
Platforms
All
dack-timeout
dack-timeout
Syntax
dack-timeout dack-timeout
no dack-timeout
Context
[Tree] (config>app-assure>group>tcp-optimizer dack-timeout)
Full Context
configure application-assurance group tcp-optimizer dack-timeout
Description
This command configures a delayed ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.
The no form of this command disables the delayed acknowledgment timeout.
Default
no dack-timeout
Parameters
- dack-timeout
-
Specifies the delayed acknowledgment timeout in ms.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dad-disable
dad-disable
Syntax
[no] dad-disable
Context
[Tree] (config>router>if>ipv6 dad-disable)
[Tree] (config>service>ies>if>ipv6 dad-disable)
[Tree] (config>service>vprn>if>ipv6 dad-disable)
Full Context
configure router interface ipv6 dad-disable
configure service ies interface ipv6 dad-disable
configure service vprn interface ipv6 dad-disable
Description
This command disables duplicate address detection (DAD) on the interface. When dad-disable is configured on the interface, the router does not perform a DAD check and all IPv6 addresses on the interface immediately enter a preferred state without checking for uniqueness on the interface. This command is useful when an interface enters a looped state during troubleshooting and becomes operationally disabled when the loop is detected; a manual intervention is required to clear the DAD violation.
The no form of this command enables duplicate address detection (DAD) on the interface.
Default
no dad-disable
Platforms
All
dad-snooping
dad-snooping
Syntax
[no] dad-snooping
Context
[Tree] (config>service>ies>sub-if>grp-if>ipv6>nd dad-snooping)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>nd dad-snooping)
Full Context
configure service ies subscriber-interface group-interface ipv6 nd dad-snooping
configure service vprn subscriber-interface group-interface ipv6 nd dad-snooping
Description
This command allows the router to populate the neighbor discovery table through snooping subscribers’ duplicate address detection messages.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
damp-peer-oscillations
damp-peer-oscillations
Syntax
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]
Context
[Tree] (config>service>vprn>bgp>group damp-peer-oscillations)
[Tree] (config>service>vprn>bgp damp-peer-oscillations)
[Tree] (config>service>vprn>bgp>group>neighbor damp-peer-oscillations)
Full Context
configure service vprn bgp group damp-peer-oscillations
configure service vprn bgp damp-peer-oscillations
configure service vprn bgp group neighbor damp-peer-oscillations
Description
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
Default
no damp-peer-oscillations
Parameters
- initial-wait
-
Specifies the amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
- second-wait
-
Specifies the period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
- max-wait
-
Specifies the maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
- minutes
-
Specifies the interval of time, in minutes after a session reset, during which the session must be error-free in to reset the penalty counter and return to idle-hold-time to initial-wait.
Platforms
All
damp-peer-oscillations
Syntax
damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]
Context
[Tree] (config>router>bgp>group damp-peer-oscillations)
[Tree] (config>router>bgp damp-peer-oscillations)
[Tree] (config>router>bgp>group>neighbor damp-peer-oscillations)
Full Context
configure router bgp group damp-peer-oscillations
configure router bgp damp-peer-oscillations
configure router bgp group neighbor damp-peer-oscillations
Description
This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).
The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.
Default
no damp-peer-oscillations
Parameters
- initial-wait
-
The amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.
- second-wait
-
A period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.
- max-wait
-
The maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.
- minutes
-
The interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return from idle-hold-time to initial-wait.
Platforms
All
dampening
dampening
Syntax
dampening
Context
[Tree] (config>port>ethernet dampening)
Full Context
configure port ethernet dampening
Description
Commands in this context configure exponential port dampening for an Ethernet port.
Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.
Platforms
All
damping
damping
Syntax
[no] damping
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy damping)
Full Context
configure subscriber-mgmt bgp-peering-policy damping
Description
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route the policy definition.
The no form of this command used at the global level disables route damping.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
Half-life: |
15 minutes |
Max-suppress: |
60 minutes |
Suppress-threshold: |
3000 |
Reuse-threshold |
750 |
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
damping
Syntax
[no] damping
Context
[Tree] (config>service>vprn>bgp>group damping)
[Tree] (config>service>vprn>bgp damping)
[Tree] (config>service>vprn>bgp>group>neighbor damping)
Full Context
configure service vprn bgp group damping
configure service vprn bgp damping
configure service vprn bgp group neighbor damping
Description
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level disables route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
Half-life: 15 minutes
Max-suppress: 60 minutes
Suppress-threshold: 3000
Reuse-threshold: 750
Default
no damping — Learned route damping is disabled.
Platforms
All
damping
Syntax
[no] damping
Context
[Tree] (config>router>bgp>group>neighbor damping)
[Tree] (config>router>bgp>group damping)
[Tree] (config>router>bgp damping)
Full Context
configure router bgp group neighbor damping
configure router bgp group damping
configure router bgp damping
Description
This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.
The no form of this command used at the global level reverts route damping.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:
-
Half-life: 15 minutes
-
Max-suppress: 60 minutes
-
Suppress-threshold: 3000
-
Reuse-threshold: 750
Default
no damping
Platforms
All
damping
Syntax
[no] damping name
Context
[Tree] (config>router>policy-options damping)
Full Context
configure router policy-options damping
Description
This command creates a context to configure a route damping profile to use in route policy entries.
The no form of this command deletes the named route damping profile.
Default
no damping
Parameters
- name
-
Specifies the damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
damping
Syntax
damping {name | none}
no damping
Context
[Tree] (config>router>policy-options>policy-statement>default-action damping)
[Tree] (config>router>policy-options>policy-statement>entry>action damping)
Full Context
configure router policy-options policy-statement default-action damping
configure router policy-options policy-statement entry action damping
Description
This command configures a damping profile used for routes matching the route policy statement entry.
If no damping criteria is specified, the default damping profile is used.
The no form of this command removes the damping profile associated with the route policy entry.
Default
no damping
Parameters
- name
-
The damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end"," @variable@end", or "start@variable@".
The name specified must already be defined.
- none
-
Disables route damping for the route policy.
Platforms
All
data
data
Syntax
data [group grp-ip-address] [source ip-address] [detail]
no data
Context
[Tree] (debug>router>pim data)
Full Context
debug router pim data
Description
This command enables debugging for PIM data exception.
The no form of this command disables PIM data exception debugging.
Parameters
- grp-ip-address
-
Debugs information associated with the specified data exception.
- ip-address
-
Debugs information associated with the specified data exception.
- detail
-
Debugs detailed IP data exception information.
Platforms
All
data
Syntax
[no] data
Context
[Tree] (config>subscr-mgmt>git>trigger-packet data)
Full Context
configure subscriber-mgmt group-interface-template trigger-packet data
Description
This command enables data-trigger packets to be processed on dynamic SAPs. Data-trigger packets must also be enabled on the capture SAP.
The no form of this command disables the processing of data-trigger packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
data-delay-interval
data-delay-interval
Syntax
data-delay-interval seconds
no data-delay-interval
Context
[Tree] (config>service>vpls>provider-tunnel>inclusive data-delay-interval)
[Tree] (config>service>vpls>provider-tunnel>selective data-delay-interval)
Full Context
configure service vpls provider-tunnel inclusive data-delay-interval
configure service vpls provider-tunnel selective data-delay-interval
Description
This command configures the I-PMSI or S-PMSI data delay timer.
When used in I-PMSI trees, this delay timer allows time for the RSVP control plane to signal and bring up the S2L sub-LSP to each destination PE participating in the VPLS or B-VPLS service. The delay timer starts as soon as the P2MP LSP instance becomes operationally up under the inclusive node, for example, as soon as the first S2L sub-LSP is up. This occurs after configuring the configure service vpls provider-tunnel inclusive no shutdown command.
In general, it is started when the P2MP LSP instance transitions from the operationally down state to the up state.
For a mLDP P2MP LSP, the delay timer is started as soon as the P2MP FEC corresponding to the I-PMSI is resolved and installed at the root node. The user must factor in the value configured in the data-delay-interval at the root node, as well as any delay configured in the IGP-LDP sync timer on interfaces over the network, using the configure router interface ldp-sync-timer command.
This is because the mLDP P2MP LSP may move to a different interface at the expiry of this timer since the routing upstream of the LDP Label Mapping message may change when this timer expires and the interface metric is restored.
At the expiry of this timer, the VPLS or B-VPLS begins forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up.
When used for EVPN S-PMSI trees, the data delay interval determines the time the router takes to switch over the traffic from the Ingress Replication binds to the wildcard S-PMSI or from the wildcard S-PMSI to the S-PMSI, after the S-PMSI is created. This time should account for the time it takes for BGP to propagate the S-PMSI A-D route to the downstream PEs and the time it takes the downstream PEs to join the tree all the way up to the root.
The no form of this command reinstates the default value for this delay timer.
Parameters
- seconds
-
Specifies the delay time value in seconds
Platforms
All
data-delay-interval
Syntax
data-delay-interval value
no data-delay-interval
Context
[Tree] (config>service>vprn>mvpn>pt>selective data-delay-interval)
Full Context
configure service vprn mvpn provider-tunnel selective data-delay-interval
Description
This command specifies the interval, in seconds, before a PE router connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.
This command is not applicable to multi-stream S-PMSI.
The no form of this command reverts the value to the default.
Default
data-delay-interval 3
Parameters
- value
-
Specifies the data delay interval, in seconds.
Platforms
All
data-delay-interval
Syntax
data-delay-interval value
no data-delay-interval
Context
[Tree] (config>router>gtm>provider-tunnel>selective data-delay-interval)
Full Context
configure router gtm provider-tunnel selective data-delay-interval
Description
This command specifies the interval, in seconds, before a PBR connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.
This command is not applicable to multi-stream S-PMSIs.
The no form of this command reverts the value to the default.
Default
data-delay-interval 3
Parameters
- value
-
Specifies the data delay interval, in seconds.
Platforms
All
data-encapsulation
data-encapsulation
Syntax
[no] data-encapsulation
Context
[Tree] (config>service>vprn>msdp data-encapsulation)
Full Context
configure service vprn msdp data-encapsulation
Description
This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.
Default
data-encapsulation
Platforms
All
data-encapsulation
Syntax
[no] data-encapsulation
Context
[Tree] (config>router>msdp data-encapsulation)
Full Context
configure router msdp data-encapsulation
Description
This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.
Default
data-encapsulation
Platforms
All
data-pattern
data-pattern
Syntax
data-pattern
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl data-pattern)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-payload data-pattern
Description
Commands in this context configure the data pattern to populate the payload portion of the frame generated by the service activation testhead.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
data-threshold
data-threshold
Syntax
data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}
no data-threshold c-grp-ipv6-addr/prefix-length
Context
[Tree] (config>service>vprn>mvpn>pt>selective data-threshold)
[Tree] (config>service>vpls>provider-tunnel>selective data-threshold)
Full Context
configure service vprn mvpn provider-tunnel selective data-threshold
configure service vpls provider-tunnel selective data-threshold
Description
When used along with MVPN, this command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PE thresholds to create or delete ng-MVPN S-PMSI may also be specified. Omitting the PE thresholds, preserves the currently set value (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.
This command is not applicable to multi-stream S-PMSI.
This command for S-PMSI trees can also be used in EVPN services. The data-threshold command options are used in the same way as in MVPN when applied to EVPN, in particular the rate and PE thresholds.
The no form of this command removes the values from the configuration.
Default
no data-threshold
Parameters
- group-address/mask
-
Specifies a multicast group address and netmask length.
- c-grp-ip-addr/mask | c-grp-ip-addr netmask
-
Specifies an IPv4 multicast group address and netmask length or network mask.
- c-grp-ipv6-addr/prefix-length
-
Specifies an IPv6 multicast group address and prefix length.
- s-pmsi-threshold
-
Specifies the rate, in kb/s. If the rate for a (C-S, C-G)) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel. Threshold 0 is supported. When threshold 0 is configured, the (C-S, C-G) switches to S-PMSI as soon as it is learned in the MVPN and without traffic flowing for that (C-S, C-G).
- s-pmsi-threshold-add
-
Specifies the number of receiver PEs for creating S-PMSI. When the number of receiver PEs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.
- s-pmsi-threshold-delete
-
Specifies the number of receiver PEs for deleting S-PMSI. When the number of receiver PEs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold, to avoid re-signaling of S-PMSI as the receiver PE count fluctuates.
Platforms
All
data-threshold
Syntax
data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]
no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}
no data-threshold c-grp-ipv6-addr/prefix-length
Context
[Tree] (config>router>gtm>provider-tunnel>selective data-threshold)
Full Context
configure router gtm provider-tunnel selective data-threshold
Description
This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PBR thresholds for creating or deleting NG-MVPN S-PMSI may also be specified. Omitting the PBR thresholds preserves currently set values (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.
This command is not applicable to multi-stream S-PMSIs.
The no form of this command removes the values from the configuration.
Default
no data-threshold
Parameters
- c-grp-ip-addr/mask | c-grp-ip-addr netmask
-
Specifies an IPv4 multicast group address and netmask length or network mask.
- c-grp-ipv6-addr/prefix-length
-
Specifies an IPv6 multicast group address and prefix length.
- s-pmsi-threshold
-
Specifies the rate, in kb/s. If the rate for a (C-S, C-G) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel.
- s-pmsi-threshold-add
-
Specifies the number of receiver PBRs for creating S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.
- s-pmsi-threshold-delete
-
Specifies the number of receiver PBRs for deleting S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold to avoid re-signaling of S-PMSI as the receiver PBR count fluctuates.
Platforms
All
data-tlv-size
data-tlv-size
Syntax
data-tlv-size octets
no data-tlv-size
Context
[Tree] (config>oam-pm>session>ethernet>slm data-tlv-size)
[Tree] (config>oam-pm>session>ethernet>dmm data-tlv-size)
Full Context
configure oam-pm session ethernet slm data-tlv-size
configure oam-pm session ethernet dmm data-tlv-size
Description
This command allows the operator to add an optional Data TLV to PDU and increase the frame on the wire by the specified amount. Note that this command only configures the size of the padding added to the PDU, and does not configure the total size of the frame on the wire.
The no form of this command removes the optional TLV.
Parameters
- octets
-
Specifies the size, in octets, of the optional Data TLV.
Platforms
All
data-trigger
data-trigger
Syntax
data-trigger
Context
[Tree] (config>service>vprn>sub-if>grp-if data-trigger)
[Tree] (config>service>ies>sub-if>grp-if data-trigger)
Full Context
configure service vprn subscriber-interface group-interface data-trigger
configure service ies subscriber-interface group-interface data-trigger
Description
Commands in this context configure data-triggered subscriber management entities.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
data-triggered
data-triggered
Syntax
[no] data-triggered
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)
Full Context
configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered
configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered
Description
This command enables learning of MAC addresses from data packets.
The no form of this command disables learning of MAC addresses from data packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
data-triggered
Syntax
[no] data-triggered
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state data-triggered)
Full Context
configure subscriber-mgmt wlan-gw ue-query state data-triggered
Description
This command enables matching on UEs currently in a data-triggered state. This query only filters UEs that are currently authenticating due to a data trigger, not UEs that were originally authenticated due to data trigger, such as those in an ESM, DSM, or portal state.
The no form of this command disables matching on UEs in a data-triggered state, unless all state matching is disabled.
Default
no data-triggered
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
data-triggered-ue-creation
data-triggered-ue-creation
Syntax
data-triggered-ue-creation [arp] [ospf]
no data-triggered-ue-creation
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation
Description
This command enables data-triggered subscriber creation for Wi-Fi subscribers. Data-triggered UE creation only works upon receival of TCP and UDP packets.
The no form of this command disables the data-triggered subscriber creation for Wi-Fi subscribers.
Default
no data-triggered-ue-creation
Parameters
- arp
-
Keyword to enable the router to authenticate ARP packets from an unknown UE.
- ospf
-
Keyword to enable the system to trigger UE authentication based on OSPFv2 or OSPFv3 packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
data-triggers
data-triggers
Syntax
[no] data-triggers
Context
[Tree] (debug>dynsvc data-triggers)
Full Context
debug dynamic-services data-triggers
Description
Commands in this context configure dynamic services data trigger capture SAP debugging. The no form of this command removes all dynamic services data trigger capture SAP debug configurations.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
database
database
Syntax
database [group grp-ip-address] [source ip-address] [detail]
no database
Context
[Tree] (debug>service>id>pim-snooping database)
Full Context
debug service id pim-snooping database
Description
This command enables or disables debugging for the PIM database.
Parameters
- grp-ip-address
-
Debugs information associated with all PIM modules
- ip-address
-
Debugs information associated with the specified database
Platforms
All
database-export
database-export
Syntax
database-export [identifier id] [bgp-ls-identifier bgp-ls-id]
no database-export
Context
[Tree] (config>router>isis database-export)
Full Context
configure router isis database-export
Description
This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.
The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
Parameters
- identifier
-
This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SRÂ OS. However, given that the concept of instance ID defined in IS-IS (RFC 6822) is unique within a routing domain while the one specified for OSPF is local subnet significant (RFC 6549), the user can remove any overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.
- id
-
Specifies an entry ID to export.
- bgp-ls-identifier
-
This parameter is used, along with the Autonomous System Number (ASN) to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
- bgp-ls-id
-
Specifies a BGP LS ID to export.
Platforms
All
database-export
Syntax
database-export [identifier id] [bgp-ls-identifier bgp-ls-id]
no database-export
Context
[Tree] (config>router>ospf3 database-export)
[Tree] (config>router>ospf database-export)
Full Context
configure router ospf3 database-export
configure router ospf database-export
Description
This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.
The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.
The no form of this command disables database exportation.
Default
no database-export
Parameters
- identifier
-
Identifies the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SRÂ OS. The concept of instance ID specified for OSPF is local subnet significant (RFC 6549). The user can remove router specific overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.
- id
-
Specifies an entry ID to export.
- bgp-ls-identifier
-
This parameter is used, along with the Autonomous System Number (ASN), to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.
The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.
Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.
- bgp-ls-id
-
Specifies a BGP LS ID to export.
Platforms
All
database-export-exclude
database-export-exclude
Syntax
[no] database-export-exclude
Context
[Tree] (config>router>isis>level database-export-exclude)
Full Context
configure router isis level database-export-exclude
Description
This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.
The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.
Default
no database-export-exclude
Platforms
All
database-export-exclude
Syntax
[no] database-export-exclude
Context
[Tree] (config>router>ospf3>area database-export-exclude)
[Tree] (config>router>ospf>area database-export-exclude)
Full Context
configure router ospf3 area database-export-exclude
configure router ospf area database-export-exclude
Description
This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the OSPF or OSPF3 instance level.
Default
no database-export-exclude
Platforms
All
datapath-cpu-high-wmark
datapath-cpu-high-wmark
Syntax
datapath-cpu-high-wmark high-watermark
datapath-cpu-high-wmark max
Context
[Tree] (config>app-assure datapath-cpu-high-wmark)
Full Context
configure application-assurance datapath-cpu-high-wmark
Description
This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.
Default
datapath-cpu-high-wmark 95
Parameters
- high-watermark
-
Specifies the high watermark for datapath CPU usage alarms.
- max
-
Disables the high watermark for datapath CPU usage alarms
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
datapath-cpu-low-wmark
datapath-cpu-low-wmark
Syntax
datapath-cpu-low-wmark low-watermark
Context
[Tree] (config>app-assure datapath-cpu-low-wmark)
Full Context
configure application-assurance datapath-cpu-low-wmark
Description
This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.
Default
datapath-cpu-low-wmark 90
Parameters
- low-watermark
-
Specifies the low watermark for datapath CPU usage alarms.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
day-of-month
day-of-month
Syntax
day-of-month {day-number [..day-number] all}
no day-of-month
Context
[Tree] (config>system>cron>sched day-of-month)
Full Context
configure system cron schedule day-of-month
Description
This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.
Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).
The no form of this command removes the specified day-of-month from the list.
Default
no day-of-month
Parameters
- day-number
-
Specifies the positive integers specify the day of the month counting from the first of the month. The negative integers specify the day of the month counting from the last day of the month. For example, configuring day-of-month -5, 5 in a month that has 31 days will specify the schedule to occur on the 27th and 5th of that month.
Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.
- all
-
Specifies all days of the month.
Platforms
All
db
db
Syntax
db [group grp-ip-address] [source ip-address] [detail]
no db
Context
[Tree] (debug>router>pim db)
Full Context
debug router pim db
Description
This command enables debugging for PIM database.
The no form of this command disables PIM database debugging.
Parameters
- grp-ip-address
-
Debugs information associated with the specified database.
- ip-address
-
Debugs information associated with the specified database.
- detail
-
Debugs detailed IP database information.
Platforms
All
db
Syntax
db [detail]
no db
Context
[Tree] (debug>router>pcep>pcc>conn db)
[Tree] (debug>router>pcep>pcc db)
Full Context
debug router pcep pcc connection db
debug router pcep pcc db
Description
This command enables debugging for PCC or connection database events.
The no form of this command disables debugging.
Parameters
- detail
-
Keyword used to specify detailed information about PCC or connection database events.
Platforms
All
db
Syntax
db [detail]
no db
Context
[Tree] (debug>router>pcep>pce db)
[Tree] (debug>router>pcep>pce>conn db)
Full Context
debug router pcep pce db
debug router pcep pce connection db
Description
This command enables debugging for PCE or connection database events.
The no form of this command disables debugging.
Parameters
- detail
-
Keyword used to specify detailed information about PCE or connection database events.
Platforms
VSR-NRC
dbw-accounting
dbw-accounting
Syntax
[no] dbw-accounting
Context
[Tree] (config>router>rsvp dbw-accounting)
Full Context
configure router rsvp dbw-accounting
Description
This command enables dark bandwidth accounting and enters the context to configure the associated parameters. When dark bandwidth accounting is enabled, the system polls the dark bandwidth counters, performs sample and average rate computations, and generates IGP-TE updates if required. To enable dark bandwidth accounting, auxiliary MPLS statistics must first be enabled using the command config>router>mpls>aux-stats.
The no form of this command disables dark bandwidth accounting, resets all global parameters to their default values, and results in an immediate IGP-TE update for which dark bandwidth is null.
Default
no dbw-accounting
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
dbw-down-threshold
dbw-down-threshold
Syntax
dbw-down-threshold percent-change [bw absolute-change]
no dbw-down-threshold
Context
[Tree] (config>router>rsvp>interface dbw-down-threshold)
Full Context
configure router rsvp interface dbw-down-threshold
Description
This command sets the minimum change (in percent of the latest advertised value) above which an decrease in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
Parameters
- percent-change
-
Specifies the minimum decrease in MRLB/MRB, expressed in percent.
- absolute-change
-
Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
dbw-multiplier
dbw-multiplier
Syntax
dbw-multiplier percent
Context
[Tree] (config>router>rsvp>dbw-accounting dbw-multiplier)
Full Context
configure router rsvp dbw-accounting dbw-multiplier
Description
This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
Default
dbw-multiplier 100
Parameters
- percent
-
Specifies the multiplier, expressed in percent.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
dbw-multiplier
Syntax
dbw-multiplier percent
no dbw-multiplier
Context
[Tree] (config>router>rsvp>interface dbw-multiplier)
Full Context
configure router rsvp interface dbw-multiplier
Description
This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
Parameters
- percent
-
Specifies the multiplier, expressed in percent.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
dbw-up-threshold
dbw-up-threshold
Syntax
dbw-up-threshold percent-change [bw absolute-change]
no dbw-up-threshold
Context
[Tree] (config>router>rsvp>interface dbw-up-threshold)
Full Context
configure router rsvp interface dbw-up-threshold
Description
This command sets the minimum change (in percent of the latest advertised value) above which an increase in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change uses the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.
Parameters
- percent-change
-
Specifies the minimum increase in MRLB/MRB, expressed in percent.
- absolute-change
-
Specifies the minimum increase in MRLB/MRB, expressed in Mb/s.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
ddm-events
ddm-events
Syntax
[no] ddm-events
Context
[Tree] (config>port ddm-events)
Full Context
configure port ddm-events
Description
This command enables Digital Diagnostic Monitoring (DDM) events for the port.
The no form of this command disables DDM events.
Platforms
All
de-1-out-profile
de-1-out-profile
Syntax
[no] de-1-out-profile
Context
[Tree] (config qos sap-ingress fc de-1-out-profile)
Full Context
configure qos sap-ingress fc de-1-out-profile
Description
This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.
When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the "< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.
All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.
The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.
All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into "out-of-profile” at ingress SAP.
This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.
The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.
Default
no de-1-out-profile
Platforms
All
de-mark
de-mark
Syntax
de-mark [force de-value]
no demark
Context
[Tree] (config>qos>sap-egress>fc de-mark)
Full Context
configure qos sap-egress fc de-mark
Description
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.
If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.
The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
All
de-mark
Syntax
de-mark [force de-value]
no de-mark
Context
[Tree] (config>qos>network>egress>fc de-mark)
Full Context
configure qos network egress fc de-mark
Description
This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).
Parameters
- de-value
-
Specifies that this value is to be used for all the packets of this forwarding class regardless of their profile status.
If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
In the PBB case, use the following rules for a network port (B-SDP):
-
the outer VID follows the rules for regular SDP
-
for packets originating from a local I-VPLS/PBB-Epipe, this command dictates the marking of the DE bit for both the outer (link level) BVID and ITAG; if the command is not used, the DE bit is set to zero.
-
for transit packets (B-SAP/B-SDP to B-SDP), the related ITAG bits are preserved, the same as for BVID.
-
Platforms
All
de-mark-inner
de-mark-inner
Syntax
de-mark-inner [force de-value]
no de-mark-inner
Context
[Tree] (config>qos>sap-egress>fc de-mark-inner)
Full Context
configure qos sap-egress fc de-mark-inner
Description
This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).
If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.
Remarking the inner DE bit is not supported based on the profile result of egress policing.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
All
de-mark-outer
de-mark-outer
Syntax
de-mark-outer [force de-value]
no de-mark-outer
Context
[Tree] (config>qos>sap-egress>fc de-mark-outer)
Full Context
configure qos sap-egress fc de-mark-outer
Description
This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.
If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.
If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.
This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.
If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.
Parameters
- de-value
-
Specifies the DE marking value.
Platforms
All
dead-interval
dead-interval
Syntax
dead-interval seconds
no dead-interval
Context
[Tree] (config>service>vprn>ospf3>area>if dead-interval)
[Tree] (config>service>vprn>ospf>area>sham-link dead-interval)
[Tree] (config>service>vprn>ospf>area>if dead-interval)
[Tree] (config>service>vprn>ospf3>area>virtual-link dead-interval)
[Tree] (config>service>vprn>ospf>area>virtual-link dead-interval)
Full Context
configure service vprn ospf3 area interface dead-interval
configure service vprn ospf area sham-link dead-interval
configure service vprn ospf area interface dead-interval
configure service vprn ospf3 area virtual-link dead-interval
configure service vprn ospf area virtual-link dead-interval
Description
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.
The no form of this command reverts to the default value.
Default
dead-interval 40
Parameters
- seconds
-
The dead interval expressed as a decimal integer.
Platforms
All
dead-interval
Syntax
dead-interval seconds
no dead-interval
Context
[Tree] (config>router>ospf3>area>virtual-link dead-interval)
[Tree] (config>router>ospf3>area>interface dead-interval)
[Tree] (config>router>ospf>area>interface dead-interval)
[Tree] (config>router>ospf>area>virtual-link dead-interval)
Full Context
configure router ospf3 area virtual-link dead-interval
configure router ospf3 area interface dead-interval
configure router ospf area interface dead-interval
configure router ospf area virtual-link dead-interval
Description
This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.
The no form of this command reverts to the default value.
Default
dead-interval 40
Parameters
- seconds
-
The dead interval expressed in seconds.
Platforms
All
dead-timer
dead-timer
Syntax
dead-timer seconds
no dead-timer
Context
[Tree] (config>router>pcep>pce dead-timer)
[Tree] (config>router>pcep>pcc dead-timer)
Full Context
configure router pcep pce dead-timer
configure router pcep pcc dead-timer
Description
This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.
The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.
The no form of the command returns the dead timer to the default value.
Default
dead-timer 120
Parameters
- seconds
-
the dead timer value, in seconds
Platforms
VSR-NRC
- configure router pcep pce dead-timer
All
- configure router pcep pcc dead-timer
debounce
debounce
Syntax
[no] debounce
Context
[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path debounce)
[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path debounce)
Full Context
configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path debounce
configure redundancy multi-chassis peer mc-ring ring in-band-control-path debounce
Description
This command enables the inband control path debouncing. The no form of this command disables inband control path debouncing.
The no form of this command reverts to the default.
Default
debounce
Platforms
All
debounce
Syntax
debounce occurrences [within seconds]
no debounce
Context
[Tree] (config>log>event-trigger>event>trigger-entry debounce)
Full Context
configure log event-trigger event trigger-entry debounce
Description
This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.
The no form of this command removes the debounce configuration.
Parameters
- occurrences
-
Specifies the number of times an event must occur for EHS to trigger a response.
- within seconds
-
Specifies the time window within which a specific event must occur a number of times equivalent to the specified occurrences for EHS to trigger a response.
Platforms
All
debug
debug
Syntax
debug
Context
[Tree] (debug)
Full Context
debug
Description
Commands in this context specify debugging options.
Platforms
All
debug-output
debug-output
Syntax
[no] debug-output
Context
[Tree] (config>call-trace>trace-profile debug-output)
Full Context
configure call-trace trace-profile debug-output
Description
This command enables output to the debug log. Traced messages are decoded as text and sent to debug logging. This allows for real-time debugging but is not recommended on live systems because of the decode overhead.
This command disables logging to the compact flash. The debug-output and live-output commands are mutually exclusive.
The no form of this command disables output to the debug log.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
debug-save
debug-save
Syntax
debug-save [file-url]
Context
[Tree] (admin debug-save)
Full Context
admin debug-save
Description
This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.
Parameters
- file-url
-
Specifies the file URL location to save the debug configuration. If no file-url is specified then the debug configuration is saved at the same location as the standard configuration file (bof>primary-config/bof>secondary-config/bof>tertiary-config) with the same file name as the standard configuration file but with a .dbg suffix.
Note:IPv6-address applies only to 7750 SR and 7950 XRS.
Platforms
All
decrypt-key
decrypt-key
Syntax
decrypt-key key | hash-key | hash2-key [hash | hash2 | custom]
no decrypt-key
Context
[Tree] (config>app-assure>group>url-list decrypt-key)
Full Context
configure application-assurance group url-list decrypt-key
Description
In case the file is encrypted this command is used to configure the decryption key used to read the file.
The no form of this command removes the url-list object.
Default
no decrypt-key
Parameters
- key | hash-key | hash2-key
-
Specifies the Application-Assurance url-list decryption key.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
def-app-profile
def-app-profile
Syntax
def-app-profile app-profile-name
no def-app-profile
Context
[Tree] (config subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile)
[Tree] (config service vprn sub-if grp-if sap-parameters sub-sla-mgmt def-app-profile)
[Tree] (config service ies sub-if grp-if sap sub-sla-mgmt def-app-profile)
[Tree] (config service vpls sap sub-sla-mgmt def-app-profile)
[Tree] (config service vprn sub-if grp-if sap sub-sla-mgmt def-app-profile)
[Tree] (config service ies sub-if grp-if sap-parameters sub-sla-mgmt def-app-profile)
Full Context
configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
configure service vpls sap sub-sla-mgmt def-app-profile
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
Description
This command specifies the default application profile to be used by a subscriber host.
The no form of this command removes the application profile name from the configuration.
Parameters
- app-profile-name
-
Specifies an existing application profile to be mapped to the subscriber profile by default up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
- configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile
- configure service vpls sap sub-sla-mgmt def-app-profile
- configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
- configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
def-app-profile
Syntax
def-app-profile profile-name
no def-app-profile
Context
[Tree] (config service ies sub-if grp-if wlan-gw ranges range dsm def-app-profile)
[Tree] (config service vprn sub-if grp-if wlan-gw ranges range dsm def-app-profile)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile
Description
This command configures the default application profile.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
def-app-profile
Syntax
def-app-profile app-profile-name
no def-app-profile
Context
[Tree] (config app-assure group transit-ip-policy def-app-profile)
Full Context
configure application-assurance group transit-ip-policy def-app-profile
Description
This command configures a default application profile.
Default
no def-app-profile
Parameters
- app-profile-name
-
Specifies the application profile name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
def-instance-sharing
def-instance-sharing
Syntax
def-instance-sharing {per-sap | per-session}
Context
[Tree] (config>subscr-mgmt>sla-prof def-instance-sharing)
Full Context
configure subscriber-mgmt sla-profile def-instance-sharing
Description
This command configures the default SPI sharing method for IPoE or PPPoE sessions from the same subscriber, having the same SLA profile associated, that are active on the same SAP. SPI sharing can be per-SAP or a dedicated SPI per-session.
Default
def-instance-sharing per-sap
Parameters
- per-sap
-
Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP share an SPI.
- per-session
-
Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP obtain a dedicated SPI per session.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
def-inter-dest-id
def-inter-dest-id
Syntax
def-inter-dest-id string string
def-inter-dest-id {use-top-q}
no def-inter-dest-id
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-inter-dest-id)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)
Full Context
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id
configure subscriber-mgmt msap-policy sub-sla-mgmt def-inter-dest-id
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id
Description
This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.
The no form of this command removes the default subscriber identification string from the configuration.
Parameters
- string
-
A RADIUS VSA (Alc-Int-Dest-Id-Str, type 28) obtained during the subscriber authentication phase contains the destination string name that is matched against the string defined under the Vport. In this fashion the subscriber host is associated with the corresponding Vport.
Alternatively, the destination string can be defined in LUDB.
- use-top-q
-
This is applicable only to Ethernet ports.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
def-inter-dest-id
Syntax
def-inter-dest-id {string string | use-top-q}
no def-inter-dest-id
Context
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-inter-dest-id)
Full Context
configure service vpls sap sub-sla-mgmt def-inter-dest-id
Description
This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.
The no form of this command removes the default subscriber identification string from the configuration.
no def-sub-id
Default
no def-inter-dest-id
Parameters
- use-top-q
-
Specifies to derive the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation
- string string
-
Specifies the subscriber identification applicable for a subscriber host.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
def-recv-evpn-encap
def-recv-evpn-encap
Syntax
def-recv-evpn-encap {mpls | vxlan}
no def-recv-evpn-encap
Context
[Tree] (config>router>bgp>group>neighbor def-recv-evpn-encap)
[Tree] (config>router>bgp>group def-recv-evpn-encap)
Full Context
configure router bgp group neighbor def-recv-evpn-encap
configure router bgp group def-recv-evpn-encap
Description
This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.
Default
no def-recv-evpn-encap
Parameters
- mpls
-
Specifies that mpls is the default encapsulation value in the case where no RFC5512 extended community is received in the incoming BGP-EVPN route.
- vxlan
-
Specifies that vxlan is the default encapsulation value.
Platforms
All
def-sla-profile
def-sla-profile
Syntax
def-sla-profile default-sla-profile-name
no def-sla-profile
Context
[Tree] (config service vprn sub-if grp-if sap sub-sla-mgmt def-sla-profile)
[Tree] (config subscr-mgmt msap-policy sub-sla-mgmt def-sla-profile)
[Tree] (config service ies sub-if grp-if sap-parameters sub-sla-mgmt def-sla-profile)
[Tree] (config service ies sub-if grp-if sap sub-sla-mgmt def-sla-profile)
[Tree] (config service vprn sub-if grp-if sap-parameters sub-sla-mgmt def-sla-profile)
[Tree] (config service vpls sap sub-sla-mgmt def-sla-profile)
Full Context
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
configure service vpls sap sub-sla-mgmt def-sla-profile
Description
This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context.
If a subscriber is not explicitly associated with an SLA profile during the authentication phase, a default profile will be assigned to it.
The no form of this command removes the default SLA profile from the SAP configuration.
Parameters
- default-sla-profile-name
-
Specifies a default SLA profile for this SAP.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
- configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
- configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
- configure service vpls sap sub-sla-mgmt def-sla-profile
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
- configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
def-sub-id
def-sub-id
Syntax
def-sub-id use-auto-id
def-sub-id use-sap-id
def-sub-id string sub-id
no def-sub-id
Context
[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-id)
[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)
[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-id)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)
Full Context
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-id
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-id
configure service vpls sap sub-sla-mgmt def-sub-id
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sub-id
Description
This command specifies the explicit default sub-id for dynamic subscriber hosts (including ARP hosts) in case that the sub-id string is not supplied through RADIUS or LUDB.
The sub-id is assigned to a new subscriber host in the following order of priority:
-
RADIUS
-
LUDB
-
Explicit default – The def-sub-id command is used to explicitly set the sub-id name of the host as one of the following:
-
The SAP ID to which the new host is associated
-
An explicit string
-
An auto-generated string consisting of the concatenated subscriber identification fields defined under the subscr-mgmt>auto-sub-id-key node. The fields are taken in the order in which they are configured and are separated by a '|'character. The subscriber host identification fields are separately defined for IPoE and PPPoE host types.
-
-
Implicit default – If the sub-id string is not returned via RADIUS or LUDB and there is no def-sub-id configured, the sub-id name is generated as a random 10 character encoded string based on the auto-sub-id-keys. This 10 characters encoded string is unique per chassis as well as in dual-homed environment. It is generated based on auto-sub-id-keys. If auto-sub-id-keys are not explicitly configured, the default ones are:
-
mac, sap-id, or session-id for PPP type hosts
-
mac or sap-id for IPoE type hosts.
-
This command does not apply to static subscribers.
The no form of this command reverts to the default.
Parameters
- use-sap-id
-
Specifies the sub-id name-id on which the original request for host creation arrived (DHCP Discover, or PADI or ARP Request).
- sub-id
-
Explicitly configured sub-id name up to 32 characters.
- use-auto-id
-
Specifies the concatenated string of auto-sub-id-keys separated by a "| ” character.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
def-sub-id
Syntax
def-sub-id string sub-id
def-sub-id use-auto-id
no def-sub-id
Context
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)
Full Context
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id
Description
This command configures the default subscriber ID. The default is used if no other source (like RADIUS) provides a subscriber identification string.
Parameters
- sub-id
-
Specifies the default subscriber identification up to 32 characters.
- use-auto-id
-
Specifies that the auto-generated subscriber identification string, is used as the default subscriber identification string.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
def-sub-profile
def-sub-profile
Syntax
def-sub-profile default-subscriber-profile-name
Context
[Tree] (config subscr-mgmt msap-policy sub-sla-mgmt def-sub-profile)
Full Context
configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-profile
Description
This command specifies a default subscriber profile for an MSAP.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile.
The no form of this command removes the default SLA profile from the SAP configuration.
Parameters
- default-sub-profile
-
Specifies a default subscriber profile for this SAP up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
def-sub-profile
Syntax
def-sub-profile default-subscriber-profile-name
Context
[Tree] (config service vprn sub-if grp-if sap-parameters sub-sla-mgmt def-sub-profile)
[Tree] (config service ies sub-if grp-if sap sub-sla-mgmt def-sub-profile)
[Tree] (config service ies if sap sub-sla-mgmt def-sub-profile)
[Tree] (config service ies sub-if grp-if sap-parameters sub-sla-mgmt def-sub-profile)
Full Context
configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile
configure service ies interface sap sub-sla-mgmt def-sub-profile
configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
Description
This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.
The no form of this command removes the default SLA profile from the SAP configuration.
Parameters
- default-sub-profile
-
Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
- configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile
def-sub-profile
Syntax
def-sub-profile default-subscriber-profile-name
Context
[Tree] (config service vpls sap sub-sla-mgmt def-sub-profile)
Full Context
configure service vpls sap sub-sla-mgmt def-sub-profile
Description
This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.
The no form of this command removes the default SLA profile from the SAP configuration.
Parameters
- default-sub-profile
-
Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default
default
Syntax
[no] default
Context
[Tree] (config>log>accounting-policy default)
Full Context
configure log accounting-policy default
Description
This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.
If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.
If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.
Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.
The record name must be specified prior to assigning an accounting policy as default.
If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.
The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.
Platforms
All
default-accounting-server-policy
default-accounting-server-policy
Syntax
default-accounting-server-policy policy-name
no default-accounting-server-policy
Context
[Tree] (config>service>vprn>radius-proxy>server default-accounting-server-policy)
[Tree] (config>router>radius-proxy>server default-accounting-server-policy)
Full Context
configure service vprn radius-proxy server default-accounting-server-policy
configure router radius-proxy server default-accounting-server-policy
Description
This command specifies the default radius-server-policy for RADIUS accounting. This policy is used when there is no specific match based on username.
The no form of this command removes the policy name from the configuration.
Parameters
- policy-name
-
Specifies the name of the default RADIUS server policy associated with this RADIUS Proxy server for accounting purposes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-action
default-action
Syntax
default-action {bypass-host-creation | drop}
no default-action
Context
[Tree] (config>filter>dhcp-filter default-action)
Full Context
configure filter dhcp-filter default-action
Description
This command specifies the default action for DHCP filters when no entries match.
The no form of this command reverts to the default.
Parameters
- bypass-host-creation
-
Specifies to bypass ESM host creation options.
- drop
-
Specifies to drop and not process the DHCP message.
Platforms
All
default-action
Syntax
default-action bypass-host-creation [na] [pd]
default-action drop
no default-action
Context
[Tree] (config>filter>dhcp6-filter default-action)
Full Context
configure filter dhcp6-filter default-action
Description
This command specifies the default action for DHCP6 filters when no entries match.
The no form of this command reverts to the default.
Parameters
- bypass-host-creation
-
Specifies to bypass ESM host creation options.
- drop
-
Specifies to drop and not process the DHCP6 message.
Platforms
All
default-action
Syntax
default-action {drop | forward}
no default-action
Context
[Tree] (config>subscr-mgmt>isa-filter default-action)
[Tree] (config>subscr-mgmt>isa-filter>ipv6 default-action)
Full Context
configure subscriber-mgmt isa-filter default-action
configure subscriber-mgmt isa-filter ipv6 default-action
Description
This command specifies what should happen to packets that do not match any of the configured entries.
The no form of this command reverts to the default value.
Default
default-action drop
Parameters
- drop
-
Specifies that packets matching the filter entry are dropped.
- forward
-
Specifies that packets matching the filter entry are forwarded.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {block | allow}
Context
[Tree] (config>service>mrp>mrp-policy default-action)
Full Context
configure service mrp mrp-policy default-action
Description
This command specifies the action to be applied to the MMRP attributes (Group B-MACs) whose ISIDs do not match the specified criteria in all of the entries of the mrp-policy.
When multiple default-action commands are entered, the last command will overwrite the previous command.
Default
default-action allow
Parameters
- block
-
Specifies that all MMRP attributes will not be declared or registered unless there is a specific mrp-policy entry which causes them to be allowed on this SAP or SDP.
- allow
-
Specifies that all MMRP attributes will be declared and registered unless there is a specific mrp-policy entry which causes them to be blocked on this SAP or SDP.
Platforms
All
default-action
Syntax
default-action {drop | forward}
no default-action
Context
[Tree] (config>service>vprn>log>filter default-action)
Full Context
configure service vprn log filter default-action
Description
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
Default
default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.
Parameters
- drop
-
The events which are not explicitly forwarded by an event filter match are dropped.
- forward
-
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms
All
default-action
Syntax
default-action {permit | deny} [event-log event-log-name]
Context
[Tree] (config>app-assure>group>sess-fltr default-action)
Full Context
configure application-assurance group session-filter default-action
Description
This command specifies the default action to take for packets that do not match any filter entries.
The no form of this command reverts the default action to the default value (forward).
Default
default-action deny
Parameters
- deny
-
Indicates that packets matching the criteria are denied.
- permit
-
Indicates that packets matching the criteria are permitted.
- event-log-name
-
Specifies the event log name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action direction direction [create]
no default-action direction direction
Context
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg default-action)
Full Context
configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type default-action
Description
This command configures a TCA for the counter capturing hits for the specified GTP filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action direction direction [create]
no default-action direction direction
Context
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg-gtpv2 default-action)
Full Context
configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type-gtpv2 default-action
Description
This command configures a TCA for the counter capturing hits due to the default action specified for the GTPv2 message type filter. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action direction direction [create]
no default-action direction direction
Context
[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>imsi-apn default-action)
Full Context
configure application-assurance group statistics threshold-crossing-alert gtp-filter imsi-apn default-action
Description
This command configures a TCA for the counter capturing hits for the specified GTP IMSI-APN filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
default-action
Syntax
default-action direction direction [create]
Context
[Tree] (config>app-assure>group>statistics>tca>sctp-fltr>ppid default-action)
Full Context
configure application-assurance group statistics threshold-crossing-alert sctp-filter ppid default-action
Description
This command configures a TCA for the counter capturing hits for the specified SCTP filter default PPID. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action direction direction [create]
no default-action direction direction
Context
[Tree] (config>app-assure>group>statistics>tca>session-filter default-action)
Full Context
configure application-assurance group statistics threshold-crossing-alert session-filter default-action
Description
This command configures a TCA for the counter capturing hits for the specified session filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {permit | deny}
Context
[Tree] (config>app-assure>group>gtp>gtp-fltr>imsi-apn-fltr default-action)
Full Context
configure application-assurance group gtp gtp-filter imsi-apn-filter default-action
Description
This command configures the default action for the IMSI-APN filter.
Default
default-action permit
Parameters
- permit
-
Specifies to permit packets that do not match any message entries.
- deny
-
Specifies to deny packets that do not match any message entries.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {permit | deny}
Context
[Tree] (config>app-assure>group>gtp>gtp-fltr>msg default-action)
[Tree] (config>app-assure>group>gtp>gtp-fltr>msg-gtpv2 default-action)
Full Context
configure application-assurance group gtp gtp-filter message-type default-action
configure application-assurance group gtp gtp-filter message-type-gtpv2 default-action
Description
This command configures the default action for all GTP message types.
Default
default-action permit
Parameters
- permit
-
Specifies to permit packets that do not match any message entries.
- deny
-
Specifies to deny packets that do not match any message entries.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {permit | deny}
Context
[Tree] (config>app-assure>group>sctp-fltr>ppid default-action)
Full Context
configure application-assurance group sctp-filter ppid default-action
Description
This command configures the default action for all SCTP PPIDs.
Default
default-action permit
Parameters
- permit
-
Specifies to permit packets that do not match any PPID entries.
- deny
-
Specifies to deny packets that do not match any PPID entries.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action allow
default-action block-all
default-action block-http-redirect http-redirect-name
no default-action
Context
[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter default-action)
Full Context
configure application-assurance group policy app-qos-policy entry action url-filter default-action
Description
This command configures the default action to take when the ICAP server is unreachable.
Default
no default-action
Parameters
- allow
-
Allows all requests.
- block-all
-
Blocks all requests.
- block-http-redirect http-redirect-name
-
Blocks and redirects requests.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {dnat | forward} [ip-address ip-address]
Context
[Tree] (config>service>nat>nat-classifier default-action)
Full Context
configure service nat nat-classifier default-action
Description
This command specifies the default action to take for packets in this nat-classifier. The default-action will apply to packet that do not match any configured criteria within nat-classifier. The no form of this command equals action forward.
Default
default-action forward
Parameters
- dnat
-
Performs the DNAT function. The destination IP address of the packet traversing the router in the direction from inside to outside is replaced by the configured IP address. Destination port is not translated. In the opposite direction (from outside to inside), the source address in the returning packet is restored to the original value.
- forward
-
The forward action will ensure that the packet is transparently passed through the nat-classifier.
- ip-address ip-address
-
The destination IP address that will replace the original IP address in the packet traveling from inside to outside.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-action
Syntax
default-action {accept | discard}
Context
[Tree] (config>router>mcac>policy default-action)
Full Context
configure router mcac policy default-action
Description
This command specifies the action to be applied to multicast streams (channels) when the streams do not match any of the multicast addresses defined in the MCAC policy.
When multiple default-action commands are entered, the last command will overwrite the previous command.
Default
default-action discard
Parameters
- accept
-
Specifies multicast streams (channels) not defined in the MCAC policy will be accepted.
- discard
-
Specifies multicast streams (channels) not defined in the MCAC policy will be dropped.
Platforms
All
default-action
Syntax
default-action fc fc-name profile {in | out}
Context
[Tree] (config>qos>network>ingress default-action)
Full Context
configure qos network ingress default-action
Description
This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.
Multiple default-action commands will overwrite each previous default-action command.
Default
default-action fc be profile out
Parameters
- fc-name
-
Specifies the forwarding class name. All packets with DSCP value or MPLS EXP or dot1p bits that are not defined will be placed in this forwarding class.
- profile {in | out}
-
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command. In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Platforms
All
default-action
Syntax
default-action {drop | forward}
Context
[Tree] (config>filter>ip-filter default-action)
[Tree] (config>filter>mac-filter default-action)
[Tree] (config>filter>ipv6-filter default-action)
Full Context
configure filter ip-filter default-action
configure filter mac-filter default-action
configure filter ipv6-filter default-action
Description
This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.
Default
default-action drop
Parameters
- drop
-
Specifies the default action is to drop a packet.
- forward
-
Specifies the default action is to forward a packet.
Platforms
All
default-action
Syntax
default-action {drop | forward}
no default-action
Context
[Tree] (config>log>filter default-action)
Full Context
configure log filter default-action
Description
The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.
When multiple default-action commands are entered, the last command overwrites the previous command.
The no form of this command reverts the default action to the default value (forward).
Default
default-action forward
Parameters
- drop
-
The events which are not explicitly forwarded by an event filter match are dropped.
- forward
-
The events which are not explicitly dropped by an event filter match are forwarded.
Platforms
All
default-action
Syntax
default-action {permit | deny | deny-host-unreachable}
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>ip-filter default-action)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter default-action)
Full Context
configure system security management-access-filter mac-filter default-action
configure system security management-access-filter ip-filter default-action
configure system security management-access-filter ipv6-filter default-action
Description
This command creates the default action for management access in the absence of a specific management access filter match.
The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.
Parameters
- permit
-
Specifies that packets not matching the configured selection criteria in any of the filter entries will be permitted.
- deny
-
Specifies that packets not matching the selection criteria be denied and that an ICMP host unreachable message will not be issued.
- deny-host-unreachable
-
Specifies that packets not matching the selection criteria be denied access and that an ICMP host unreachable message will be issued.
The deny-host-unreachable only applies to ip-filter and ipv6filter.
Platforms
All
default-action
Syntax
default-action {accept | drop}
Context
[Tree] (config>system>security>cpm-filter default-action)
Full Context
configure system security cpm-filter default-action
Description
This command specifies the action to take on the traffic when there are no filter entry matches. If there are no filter entries defined, the packets received are either dropped or forwarded based on that default action.
Default
default-action accept
Parameters
- accept
-
Specifies that packets matching the filter entry are forwarded.
- drop
-
Specifies that packets matching the filter entry are dropped.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
default-action
Syntax
default-action {deny-all | permit-all | none | read-only-all}
Context
[Tree] (config>system>security>profile default-action)
Full Context
configure system security profile default-action
Description
This command specifies the default action to be applied when no match conditions are met.
Parameters
- deny-all
-
Sets the default of the profile to deny access to all commands.
- permit-all
-
Sets the default of the profile to permit access to all commands.
Note:In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated "administrative” profile contains rules to access security commands.
- none
-
Sets the default of the profile to no-action. This option is useful to assign multiple profiles to a user.
- read-only-all
-
Sets the default of the profile to allow read-only access to all commands.
Platforms
All
default-action
Syntax
default-action {accept | next-entry | next-policy | drop | reject}
no default-action
Context
[Tree] (config>router>policy-options>policy-statement default-action)
Full Context
configure router policy-options policy-statement default-action
Description
Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.
The no form of this command deletes the default-action context for the policy statement.
Default
no default-action
Parameters
- accept
-
Specifies that routes not matched by any entry should be allowed or accepted. This parameter provides a context for modifying route properties.
- next-entry
-
Specifies that routes not matched by any entry should be evaluated by the next sequential entry in the policy chain, after route properties are possibly modified by the default action of the current policy.
- next-policy
-
Specifies that routes not matched by any entry should be evaluated by the next sequential policy in the policy chain, after route properties are possibly modified by the default action of the current policy.
- drop
-
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter provides a context for modifying route properties.
- reject
-
Specifies that routes not matched by any entry should be disallowed or rejected. This parameter does not provide a context for modifying route properties.
Platforms
All
default-action
Syntax
default-action allow
default-action block-all
default-action block-http-redirect http-redirect-name
no default-action
Context
[Tree] (config>app-assure>group>url-filter>web-service default-action)
[Tree] (config>app-assure>group>url-filter>local-filtering default-action)
[Tree] (config>app-assure>group>url-filter>icap default-action)
Full Context
configure application-assurance group url-filter web-service default-action
configure application-assurance group url-filter local-filtering default-action
configure application-assurance group url-filter icap default-action
Description
This command configures a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the following scenarios.
-
In the case of a local URL list, when the URL list is shutdown or the file is not loaded due to an error.
-
In the case of ICAP or web filtering, when all TCP connections are busy or down.
The no form of this command removes the default-action for the URL filter.
Default
no default-action
Parameters
- allow
-
Specifies to allows traffic.
- block-all
-
Specifies to block traffic.
- block-http-redirect http-redirect-name
-
Specifies to block traffic and redirect the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the config>aa>group>url-filter>http-redirect command.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-authentication-server-policy
default-authentication-server-policy
Syntax
default-authentication-server-policy policy-name
no default-authentication-server-policy
Context
[Tree] (config>service>vprn>radius-proxy>server default-authentication-server-policy)
[Tree] (config>router>radius-proxy>server default-authentication-server-policy)
Full Context
configure service vprn radius-proxy server default-authentication-server-policy
configure router radius-proxy server default-authentication-server-policy
Description
This command specifies the default radius-server-policy for RADIUS authentication. This policy is used when there is no specific match based on username.
The no form of this command removes the policy name from the configuration.
Parameters
- policy-name
-
Specifies the name of the default RADIUS server policy associated with this RADIUS proxy server for authentication purposes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-brg-profile
default-brg-profile
Syntax
default-brg-profile profile-name
no default-brg-profile
Context
[Tree] (config service ies sub-if grp-if wlan-gw vlan-ranges range vrgw brg default-brg-profile)
[Tree] (config service vprn sub-if grp-if brg default-brg-profile)
[Tree] (config service ies sub-if grp-if brg default-brg-profile)
[Tree] (config service vprn sub-if grp-if wlan-gw vlan-ranges range vrgw brg default-brg-profile)
[Tree] (config service ies sub-if grp-if wlan-gw ranges range brg default-brg-profile)
[Tree] (config service vprn sub-if grp-if wlan-gw ranges range brg default-brg-profile)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile
configure service vprn subscriber-interface group-interface brg default-brg-profile
configure service ies subscriber-interface group-interface brg default-brg-profile
configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile
configure service ies subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile
configure service vprn subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile
Description
This command indicates that the default BRG profile must be used for new BRGs. This profile can be overridden by RADIUS.
Parameters
- profile-name
-
Specifies the name of the brg-profile to be applied.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-category-map
default-category-map
Syntax
default-category-map category-map-name
no default-category-map
Context
[Tree] (config>subscr-mgmt>credit-control-policy default-category-map)
Full Context
configure subscriber-mgmt credit-control-policy default-category-map
Description
This command configures the default category map.
The no form of this command reverts to the default.
Parameters
- category-map-name
-
Specifies the category map name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-charging-group
default-charging-group
Syntax
default-charging-group charging-group-name
no default-charging-group
Context
[Tree] (config>app-assure>group>policy default-charging-group)
Full Context
configure application-assurance group policy default-charging-group
Description
This command associates a charging group to any applications or app-groups that are not explicitly assigned to a charging group, for an application assurance policy.
The no form of this command deletes the default charging group from the configuration.
Default
no default-charging-group
Parameters
- charging-group-name
-
A string of up to 32 characters uniquely identifying an existing charging group in the system.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-credit
default-credit
Syntax
default-credit volume credits [bytes | kilobytes | megabytes | gigabytes]
default-credit time seconds
no default-credit
Context
[Tree] (config>subscr-mgmt>cat-map>category default-credit)
Full Context
configure subscriber-mgmt category-map category default-credit
Description
This command configures the default credit values for RADIUS credit control and Diameter Gy application credit control.
For RADIUS credit control, this command configures the default time or volume credit for this category. The default credit is used during initial setup when no quota is received from the RADIUS server.
For Diameter Gy credit control, this command specifies the interim credit assigned to this category (rating group) when Extended Failure Handling (EFH) is enabled. This command is ignored when EFH is disabled.
The no form of this command reverts to the default.
Parameters
- volume credits [bytes | kilobytes | megabytes | gigabytes]
-
Specifies the default value for the volume credit and the unit in which the default value is expressed.
- time seconds
-
Specifies the default value for the time credit, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-dnat-ip-address
default-dnat-ip-address
Syntax
default-dnat-ip-address ip-address
no default-dnat-ip-address
Context
[Tree] (config>service>nat>nat-classifier default-dnat-ip-address)
Full Context
configure service nat nat-classifier default-dnat-ip-address
Description
This command configures the IP address to substitute for the destination IP address of the packets
Default
no default-dnat-ip-address
Parameters
- ip-address
-
Specifies the default DNAP IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-dns
default-dns
Syntax
default-dns ip-address [secondary ip-address]
no default-dns
Context
[Tree] (config>service>vprn>sub-if default-dns)
[Tree] (config>service>ies>sub-if default-dns)
Full Context
configure service vprn subscriber-interface default-dns
configure service ies subscriber-interface default-dns
Description
This command configures last resort IP DNS addresses that can be used for name resolution by IPoE hosts (IA_NA, IA_PD and SLAAC) and PPPoE hosts (IA_NA, IA_PD and SLAAC).
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the IP address of the primary DNS server.
- secondary ip-address
-
Specifies the IP address of the secondary DNS server (optional).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-dns
Syntax
default-dns ipv6-address [secondary ipv6-address]
no default-dns
Context
[Tree] (config>service>ies>sub-if>ipv6 default-dns)
[Tree] (config>service>vprn>sub-if>ipv6 default-dns)
Full Context
configure service ies subscriber-interface ipv6 default-dns
configure service vprn subscriber-interface ipv6 default-dns
Description
This command configures last resort IPv6 DNS addresses that can be used for name resolution by IPoEv6 hosts (IA_NA, IA_PD and SLAAC) and PPPoEv6 hosts (IA_NA, IA_PD and SLAAC).
The no form of this command reverts to the default.
Parameters
- ipv6-address
-
Specifies the IPv6 address of the primary DNS server.
- secondary ipv6-address
-
Specifies the IPv6 address of the secondary DNS server (optional).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-domain
default-domain
Syntax
default-domain dns-name
no default-domain
Context
[Tree] (config>service>vprn>dns default-domain)
Full Context
configure service vprn dns default-domain
Description
This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.
The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.
Parameters
- dns-name
-
Specifies the name of the default domain, up to 255 characters. Allowed values for characters are alphabetical (A-Z), numeric (0-9), the minus sign (-), and the period (.). For example, "3gpp-network.org”.
Platforms
All
default-domain
Syntax
default-domain
Context
[Tree] (config>eth-cfm default-domain)
Full Context
configure eth-cfm default-domain
Description
Commands in this context configure MIP creation parameters per index (bridge-identifier bridge-id vlan vlan-id) if the MIP creation statement exists as part of the service connection. The mip creation statement must be present on the connection before any configuration can occur for a MIP under this context. The determining factor for MIP creation is based on the authoritative properties of the eth-cfm domain association configuration. The individual indexes in this table are used for MIP creation only when the association context is not authoritative; this includes the lack of association for a matching index.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
default-fc
default-fc
Syntax
default-fc fc-name
no default-fc
Context
[Tree] (config>qos>sap-ingress default-fc)
Full Context
configure qos sap-ingress default-fc
Description
This command configures the default forwarding class for the policy. If an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass if associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy are classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.
The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.
Default
default-fc "be”
Parameters
- fc-name
-
Specify the forwarding class name for the queue. The value specified for fc-name must be one of the predefined forwarding classes in the system.
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
Platforms
All
default-filter-action
default-filter-action
Syntax
default-filter-action default-action
Context
[Tree] (debug>app-assure>group>http-host>filter default-filter-action)
Full Context
debug application-assurance group http-host-recorder filter default-filter-action
Description
This command configures the recorder filter default action to either record or no-record. This parameter applies to http-host values not matching any expressions defined in the filter context.
Parameters
- default-action
-
Specifies the default action.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-group-interface
default-group-interface
Syntax
default-group-interface ip-int-name service-id service-id
default-group-interface ip-int-name service-name svc-name
no default-group-interface
Context
[Tree] (config>service>vprn>l2tp>group>ppp default-group-interface)
[Tree] (config>router>l2tp>group>tunnel>ppp default-group-interface)
[Tree] (config>router>l2tp>group>ppp default-group-interface)
[Tree] (config>service>vprn>l2tp>group>tunnel>ppp default-group-interface)
Full Context
configure service vprn l2tp group ppp default-group-interface
configure router l2tp group tunnel ppp default-group-interface
configure router l2tp group ppp default-group-interface
configure service vprn l2tp group tunnel ppp default-group-interface
Description
This command configures the group interface where the PPP sessions are established when the authentication server does not specify the group interface.
The no form of this command removes the interface name or service ID from the configuration.
Parameters
- ip-int-name
-
Specifies an IP interface name, up to 32 characters.
- service-id service-id
-
Specifies an existing service identification number.
This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The default-group-interface ip-int-name service-name svc-name variant can be used in all configuration modes.
- service-name svc-name
-
Specifies an existing service name up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-gtp-tunnel-endpoint-limit
default-gtp-tunnel-endpoint-limit
Syntax
default-gtp-tunnel-endpoint-limit direction direction [create]
no default-gtp-tunnel-endpoint-limit direction direction
Context
[Tree] (config>app-assure>group>statistics>tca>gtp-filter default-gtp-tunnel-endpoint-limit)
Full Context
configure application-assurance group statistics threshold-crossing-alert gtp-filter default-gtp-tunnel-endpoint-limit
Description
This command configures a TCA for the counter capturing drops because the GTP endpoint limits create requests exceeding the configured allowed limit (set by the default-tunnel-endpoint-limit command). A default-gtp-tunnel-endpoint-limit drop TCA can be created for traffic generated from the subscriber side of AA (from-sub). The create keyword is mandatory when creating a TCA.
Parameters
- direction
-
Specifies the traffic direction.
- create
-
Keyword used to create the TCA.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-host
default-host
Syntax
default-host ipv4-prefix/mask | ipv6-prefix/prefix-length next-hop ipv4-address | ipv6-address
no default-host ipv4-prefix/mask | ipv6-prefix/prefix-length
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap default-host)
[Tree] (config>service>ies>sub-if>grp-if>sap default-host)
Full Context
configure service vprn subscriber-interface group-interface sap default-host
configure service ies subscriber-interface group-interface sap default-host
Description
This command configures the default-host. More than one default host can be configured per SAP.
The no form of this command removes the values from the configuration.
Parameters
- ipv4prefix/prefix-length
-
Specifies an IPv4 prefix and prefix length.
- ipv6-prefix/prefix-length
-
Specifies an IPv6 prefix and prefix length.
- next-hop
-
Assigns the next hop IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-instance
default-instance
Syntax
[no] default-instance
Context
[Tree] (config>service>vprn>isis>if default-instance)
Full Context
configure service vprn isis interface default-instance
Description
This command enables a non-MI capable router to establish an adjacency and operate with an SRÂ OS in a non-zero instance. If the router does not receive IID-TLVs, it establishes an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router establishes an adjacency in the configured non-zero instance. The router then operates in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
Default
no default-instance
Platforms
All
default-instance
Syntax
[no] default-instance
Context
[Tree] (config>router>isis>interface default-instance)
Full Context
configure router isis interface default-instance
Description
This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.
This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.
The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.
Default
no default-instance
Platforms
All
default-ipv4-multicast-metric
default-ipv4-multicast-metric
Syntax
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context
[Tree] (config>service>vprn>isis>level default-ipv4-multicast-metric)
Full Context
configure service vprn isis level default-ipv4-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv4-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Platforms
All
default-ipv4-multicast-metric
Syntax
default-ipv4-multicast-metric metric
no default-ipv4-multicast-metric
Context
[Tree] (config>router>isis>level default-ipv4-multicast-metric)
Full Context
configure router isis level default-ipv4-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv4-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).
Platforms
All
default-ipv6-multicast-metric
default-ipv6-multicast-metric
Syntax
default-ipv6-multicast-metric metric
no default-ipv6-multicast-metric
Context
[Tree] (config>service>vprn>isis>level default-ipv6-multicast-metric)
Full Context
configure service vprn isis level default-ipv6-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv6-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).
1 to 16777215
Platforms
All
default-ipv6-multicast-metric
Syntax
default-ipv6-multicast-metric metric
no default-ipv6-multicast-metric
Context
[Tree] (config>router>isis>level default-ipv6-multicast-metric)
Full Context
configure router isis level default-ipv6-multicast-metric
Description
This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).
The no form of this command deletes the specified default metric and reverts to using the system default of 10.
Default
default-ipv6-multicast-metric 10
Parameters
- metric
-
Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).
1 to 16777215
Platforms
All
default-ipv6-unicast-metric
default-ipv6-unicast-metric
Syntax
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context
[Tree] (config>service>vprn>isis>level default-ipv6-unicast-metric)
Full Context
configure service vprn isis level default-ipv6-unicast-metric
Description
This command specifies the default metric for IPv6 unicast.
Default
default-ipv6-unicast-metric 10
Parameters
- ipv6-metric
-
Specifies the default metric for IPv6 unicast.
Platforms
All
default-ipv6-unicast-metric
Syntax
default-ipv6-unicast-metric ipv6 metric
no default-ipv6-unicast-metric
Context
[Tree] (config>router>isis>level default-ipv6-unicast-metric)
Full Context
configure router isis level default-ipv6-unicast-metric
Description
This command specifies the default metric for IPv6 unicast.
The no form of this command reverts to the default value.
Default
default-ipv6-unicast-metric 10
Parameters
- ipv6-metric
-
Specifies the default metric for IPv6 unicast.
Platforms
All
default-label-preference
default-label-preference
Syntax
default-label-preference [ebgp ebgp label preference] [ibgp ibgp label preference]
no default-label-preference
Context
[Tree] (config>router>bgp>group default-label-preference)
[Tree] (config>router>bgp>group>neighbor default-label-preference)
[Tree] (config>router>bgp default-label-preference)
Full Context
configure router bgp group default-label-preference
configure router bgp group neighbor default-label-preference
configure router bgp default-label-preference
Description
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.
The preference value assigned by the default-label-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.
The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.
Default
no default-label-preference
Parameters
- ebgp label preference
-
Specifies the EBGP default preference label value.
- ibgp label preference
-
Specifies the IBGP default preference label value.
Platforms
All
default-metric
default-metric
Syntax
default-metric metric
no default-metric
Context
[Tree] (config>aaa>route-downloader default-metric)
Full Context
configure aaa route-downloader default-metric
Description
This command sets the default metric that routes imported by the RTM acquires.
The no form of this command removes the metric.
Default
default-metric 2
Parameters
- metric
-
Specifies the default metric of the routes imported.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-metric
Syntax
default-metric ipv4 metric
no default-metric
Context
[Tree] (config>service>vprn>isis>level default-metric)
Full Context
configure service vprn isis level default-metric
Description
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
Default
default-metric 10
Parameters
- ipv4 metric
-
Specifies the default metric for IPv4 unicast.
Platforms
All
default-metric
Syntax
default-metric metric
no default-metric
Context
[Tree] (config>service>vprn>ospf>area>stub default-metric)
[Tree] (config>service>vprn>ospf3>area>stub default-metric)
Full Context
configure service vprn ospf area stub default-metric
configure service vprn ospf3 area stub default-metric
Description
This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
Default
default-metric 1
Parameters
- metric
-
The metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Platforms
All
default-metric
Syntax
default-metric ipv4 metric
no default-metric
Context
[Tree] (config>router>isis>level default-metric)
Full Context
configure router isis level default-metric
Description
This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.
The no form of this command reverts to the default value.
Default
default-metric 10
Parameters
- ipv4 metric
-
Specifies the default metric for IPv4 unicast.
Platforms
All
default-metric
Syntax
default-metric metric
no default-metric
Context
[Tree] (config>router>ospf3>area>stub default-metric)
[Tree] (config>router>ospf>area>stub default-metric)
Full Context
configure router ospf3 area stub default-metric
configure router ospf area stub default-metric
Description
This command configures the metric used by the area border router (ABR) for the default route into a stub area.
The default metric should only be configured on an ABR of a stub area.
An ABR generates a default route if the area is a stub area.
The no form of this command reverts to the default value.
Default
default-metric 1
Parameters
- metric
-
Specifies the metric expressed as a decimal integer for the default route cost to be advertised into the stub area.
Platforms
All
default-msap-policy
default-msap-policy
Syntax
default-msap-policy policy-name
no default-msap-policy
Context
[Tree] (config>service>vpls>sap default-msap-policy)
Full Context
configure service vpls sap default-msap-policy
Description
This command specifies the default managed SAP policy to use to create MSAPs when the response from the RADIUS server does not specify a managed SAP policy.
The policy-name parameter is only valid for a SAP with the keywords capture-sap specified in the SAP’s configuration. The capture-sap keyword in the SAP configuration captures the SAP where triggering packets is sent to the CPM. Non-triggering packets captured by the capture SAP is dropped.
The managed SAP policy must already be defined in the config>subscr-mgmt>msap-policy context.
The no form of this command removes the policy-name from the configuration.
Parameters
- policy-name
-
Specifies an existing default managed SAP policy.
Platforms
All
default-pap-password
default-pap-password
Syntax
default-pap-password password [hash | hash2 | custom]
no default-pap-password
Context
[Tree] (config>subscr-mgmt>ppp-policy default-pap-password)
Full Context
configure subscriber-mgmt ppp-policy default-pap-password
Description
This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.
RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.
Parameters
- password
-
Specifies a default PAP password up to 64 characters.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- custom
-
Specifies the custom encryption to management interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-path
default-path
Syntax
default-path path-name
Context
[Tree] (config>router>mpls>lsp-template default-path)
Full Context
configure router mpls lsp-template default-path
Description
A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.
Parameters
- path-name
-
Configures the default path binding
Platforms
All
default-peer
default-peer
Syntax
[no] default-peer
Context
[Tree] (config>aaa>diam>node>peer default-peer)
Full Context
configure aaa diameter node peer default-peer
Description
This command designates a peer as a default peer. Traffic that is destined to realms that are not associated with locally configured peers, is sent to the default-peer. In effect, the default peer becomes a default route for Diameter realms.
This command is mandatory in multi-chassis redundancy where the inter-chassis peer is designated as default peer. Then, the SR with no open connections towards agents or servers, forwards all traffic to the inter-peer which maintains, as part of MCS, open connections with agents and servers.
The no form of this command reverts to the default.
Default
no default-peer
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-peer
Syntax
default-peer
no default-peer
Context
[Tree] (config>service>vprn>msdp>peer default-peer)
[Tree] (config>service>vprn>msdp>group>peer default-peer)
Full Context
configure service vprn msdp peer default-peer
configure service vprn msdp group peer default-peer
Description
Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.
The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.
A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:
-
If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.
-
If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.
-
If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.
-
If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
-
If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
-
If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.
Default
no default-peer
Platforms
All
default-peer
Syntax
[no] default-peer
Context
[Tree] (config>router>msdp>group>peer default-peer)
[Tree] (config>router>msdp>peer default-peer)
Full Context
configure router msdp group peer default-peer
configure router msdp peer default-peer
Description
Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer is accepted without the usual peer-reverse-path-forwarding (RPF) check.
The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check stops source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.
A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:
-
If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.
-
If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.
-
If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.
-
If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
-
If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.
-
If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.
Default
no default-peer (No default peer is established and all active source messages must be RPF checked)
Platforms
All
default-pool
default-pool
Syntax
default-pool pool-name
no default-pool
Context
[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment default-pool)
[Tree] (config>service>vprn>sub-if>local-address-assignment default-pool)
[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment default-pool)
[Tree] (config>service>ies>sub-if>local-address-assignment default-pool)
Full Context
configure service ies subscriber-interface group-interface local-address-assignment default-pool
configure service vprn subscriber-interface local-address-assignment default-pool
configure service vprn subscriber-interface group-interface local-address-assignment default-pool
configure service ies subscriber-interface local-address-assignment default-pool
Description
This command references a default DHCP address pool for local PPPoX pool management in case that the pool-name is not returned via Radius or LUDB.
Parameters
- pool-name
-
Specifies the name of the local DHCP server pool.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-preference
default-preference
Syntax
default-preference [ebgp ebgp preference] [ibgp ibgp preference]
no default-preference
Context
[Tree] (config>router>bgp default-preference)
[Tree] (config>router>bgp>group>neighbor default-preference)
[Tree] (config>router>bgp>group default-preference)
Full Context
configure router bgp default-preference
configure router bgp group neighbor default-preference
configure router bgp group default-preference
Description
This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.
This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.
The preference value assigned by the default-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.
The no form of the command lets BGP route-table preference to be controlled by other means.
Default
no default-preference
Parameters
- ebgp preference
-
Specifies the EBGP default preference value.
- ibgp preference
-
Specifies the IBGP default preference value.
Platforms
All
default-priority
default-priority
Syntax
default-priority {high | low}
no default-priority
Context
[Tree] (config>qos>sap-ingress default-priority)
Full Context
configure qos sap-ingress default-priority
Description
This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.
Default
default-priority low
Parameters
- high
-
Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
All
default-profile
default-profile
Syntax
default-profile profile-name
no default-profile
Context
[Tree] (config app-assure group url-filter web-service default-profile)
Full Context
configure application-assurance group url-filter web-service default-profile
Description
This command configures the default category profile to use when no category profile is explicitly selected for the subscriber.
The no form of this command removes the selected default profile configuration.
Default
no default-profile
Parameters
- profile-name
-
Specifies a configured category profile to use as the default profile name, up to 256 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-result
default-result
Syntax
default-result {revoked | good}
no default-result
Context
[Tree] (config>ipsec>trans-mode-prof>dyn>cert>status-verify default-result)
[Tree] (config>service>ies>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn>cert>status-verify default-result)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
[Tree] (config>router>if>ipsec>ipsec-tun>dyn>cert>status-verify default-result)
[Tree] (config>service>vprn>if>sap>ipsec-gw>cert>status-verify default-result)
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)
Full Context
configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result
configure service ies interface sap ipsec-gw cert status-verify default-result
configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
configure service vprn interface sap ipsec-gw cert status-verify default-result
configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
Description
This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.
Default
default-result revoked
Parameters
- good
-
Specifies that the certificate is considered as acceptable.
- revoked
-
Specifies that the certificate is considered as revoked.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
- configure service ies interface sap ipsec-gw cert status-verify default-result
- configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result
- configure service vprn interface sap ipsec-gw cert status-verify default-result
VSR
- configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
- configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
- configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
default-retail-svc-id
default-retail-svc-id
Syntax
default-retail-svc-id service-id
no default-retail-svc-id
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id
Description
This command specifies the id of default retail service if there is no match found in VLAN to retail map configuration (specified by the vlan command). For DSM and migrant, this command is only applicable for non-NAT stacks.
Parameters
- service-id
-
Specifies the identifier of the retail service to be used by default of a value in the retail service map of this interface.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-retail-svc-id
Syntax
default-retail-svc-id service-id
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)
Full Context
configure service ies subscriber-interface group-interface wlan-gw ranges default-retail-svc-id
configure service vprn subscriber-interface group-interface wlan-gw ranges default-retail-svc-id
Description
This command configures the default retailer service for WIFI users.
default-route-tag
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>service>epipe>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>vprn>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>epipe>bgp-evpn>srv6 default-route-tag)
[Tree] (config>service>epipe>bgp-evpn>vxlan default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>mpls default-route-tag)
[Tree] (config>service>vprn>bgp-ipvpn>srv6 default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>srv6 default-route-tag)
[Tree] (config>service>vpls>bgp-evpn>vxlan default-route-tag)
Full Context
configure service epipe bgp-evpn mpls default-route-tag
configure service vprn bgp-evpn mpls default-route-tag
configure service epipe bgp-evpn segment-routing-v6 default-route-tag
configure service epipe bgp-evpn vxlan default-route-tag
configure service vpls bgp-evpn mpls default-route-tag
configure service vprn bgp-ivpn segment-routing-v6 default-route-tag
configure service vpls bgp-evpn segment-routing-v6 default-route-tag
configure service vpls bgp-evpn vxlan default-route-tag
Description
This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.
The following are examples of the conflict priority handling:
-
If a service is configured with both default-route-tag X and proxy-arp>evpn-route-tag Y, EVPN uses route tag Y when sending EVPN proxy-arp routes to the BGP RIB for advertisement.
-
If a given IP-prefix route is tagged in the route-table with tag A and the R-VPLS, in which the route is advertised, uses B as the default-route-tag, then EVPN keeps tag A when sending the route to the BGP RIB.
The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.
The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).
Default
no default-route-tag
Parameters
- tag
-
Specifies the route tag.
Platforms
All
- configure service epipe bgp-evpn vxlan default-route-tag
- configure service epipe bgp-evpn mpls default-route-tag
- configure service vpls bgp-evpn vxlan default-route-tag
- configure service vprn bgp-evpn mpls default-route-tag
- configure service vpls bgp-evpn mpls default-route-tag
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
- configure service vpls bgp-evpn segment-routing-v6 default-route-tag
- configure service epipe bgp-evpn segment-routing-v6 default-route-tag
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>service>vprn>isis default-route-tag)
Full Context
configure service vprn isis default-route-tag
Description
This command configures the route tag for default route for the router or VPRN service.
Parameters
- tag
-
Assigns a default tag.
Platforms
All
default-route-tag
Syntax
default-route-tag tag
no default-route-tag
Context
[Tree] (config>router>isis default-route-tag)
Full Context
configure router isis default-route-tag
Description
This command configures the route tag for default route.
Parameters
- tag
-
Assigns a default tag.
Platforms
All
default-route-target
default-route-target
Syntax
[no] default-route-target
Context
[Tree] (config>router>bgp>group>neighbor default-route-target)
[Tree] (config>router>bgp>group default-route-target)
Full Context
configure router bgp group neighbor default-route-target
configure router bgp group default-route-target
Description
This command originates the default RTC route (zero prefix length) towards the selected peers.
Default
no default-route-target
Platforms
All
default-router
default-router
Syntax
default-router ip-address [ip-address]
no default-router
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options default-router)
[Tree] (config>router>dhcp>server>pool>subnet>options default-router)
[Tree] (config>service>vprn>dhcp6>server>pool>subnet default-router)
Full Context
configure subscriber-mgmt local-user-db ipoe host options default-router
configure router dhcp local-dhcp-server pool subnet options default-router
configure service vprn dhcp6 server pool subnet default-router
Description
This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.
The no form of this command removes the address(es) from the configuration.
Parameters
- ip-address
-
Specifies up to four default router IP addresses. Each address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-sap
default-sap
Syntax
[no] default-sap
Context
[Tree] (config>service>vpls>sap>managed-vlan-list default-sap)
Full Context
configure service vpls sap managed-vlan-list default-sap
Description
This command adds a default SAP to the managed VLAN list.
The no form of this command removes the default SAP to the managed VLAN list.
Platforms
All
default-secure-service
default-secure-service
Syntax
default-secure-service service-id interface ip-int-name
no default-secure-service
Context
[Tree] (config>service>ies>if>sap>ipsec-gateway default-secure-service)
[Tree] (config>service>vprn>if>sap>ipsec-gateway default-secure-service)
Full Context
configure service ies interface sap ipsec-gateway default-secure-service
configure service vprn interface sap ipsec-gateway default-secure-service
Description
This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.
Parameters
- service-id
-
Specifies a default secure service.
- ip-int-name
-
The name of private IPsec tunnel interface.
default-set
default-set
Syntax
default-set set-id
no default-set
Context
[Tree] (config>router>mpls>class-forwarding-policy default-set)
Full Context
configure router mpls class-forwarding-policy default-set
Description
This command configures the default forwarding set.
Parameters
- set-id
-
Specifies the class forwarding set.
Platforms
All
default-size
default-size
Syntax
default-size
Context
[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets default-size)
Full Context
configure qos fp-resource-policy aggregate-shapers queue-sets default-size
Description
Commands in this context configure the default queue-set size for individual object types.
Platforms
7750 SR-1, 7750 SR-s
default-tag
default-tag
Syntax
default-tag tag
no default-tag
Context
[Tree] (config>aaa>route-downloader default-tag)
Full Context
configure aaa route-downloader default-tag
Description
This command sets the default tag that routes processed by the AAA route downloader will take.
Any route received with a specific tag retains the specific tag. The tag value is passed to the Route Table Manager and is available as match condition on the export statement of other routing protocols.
The no form of this command reverts to the default.
Default
default-tag 0
Parameters
- tag
-
Specifies the default tag of the routes imported.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-tunnel-endpoint-limit
default-tunnel-endpoint-limit
Syntax
default-tunnel-endpoint-limit default-endpoint
no default-tunnel-endpoint-limit
Context
[Tree] (config>app-assure>group>gtp>gtp-fltr>gtp-tunnel-database default-tunnel-endpoint-limit)
Full Context
configure application-assurance group gtp gtp-filter gtp-tunnel-database default-tunnel-endpoint-limit
Description
This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type.
The validate-gtp-tunnels command must be enabled before using this command.
The no form of this command sets the limit to 4294967295 (the maximum number of GTP endpoints supported by AA FW minus one).
Default
no default-tunnel-endpoint-limit
Parameters
- default-endpoint
-
Specifies the limit.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
default-tunnel-template
default-tunnel-template
Syntax
default-tunnel-template ipsec-template-identifier
no default-tunnel-template
Context
[Tree] (config>service>ies>if>sap>ipsec-gateway default-tunnel-template)
[Tree] (config>service>vprn>if>sap>ipsec-gateway default-tunnel-template)
Full Context
configure service ies interface sap ipsec-gateway default-tunnel-template
configure service vprn interface sap ipsec-gateway default-tunnel-template
Description
This command configures a default tunnel policy template for the gateway.
default-user-name
default-user-name
Syntax
default-user-name ppp-username
no default-user-name
Context
[Tree] (config>subscr-mgmt>ppp-policy default-user-name)
Full Context
configure subscriber-mgmt ppp-policy default-user-name
Description
This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).
The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.
Parameters
- ppp-username
-
Specifies a default username up to 253 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
default-value
default-value
Syntax
default-value value-name
no default-value
Context
[Tree] (config>app-assure>group>policy>aso>char default-value)
Full Context
configure application-assurance group policy app-service-options characteristic default-value
Description
This command assigns one of the characteristic values as default.
When a default value is specified, app-profile entries that do not explicitly include this characteristic inherit the default value and use it as part of the AQP match criteria based on that app-profile.
A default-value is required for each characteristic. This is evaluated at commit time.
The no form of this command removes the default value for the characteristic.
Parameters
- value-name
-
Specifies the name of an existing characteristic value.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
defaults
defaults
Syntax
defaults
Context
[Tree] (config>router>dhcp6>server defaults)
Full Context
configure router dhcp6 local-dhcp-server defaults
Description
Commands in this context configure server default timer and option parameters. These can be overridden on a per-pool and per-prefix basis.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
defaults
Syntax
defaults
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn defaults)
Full Context
configure subscriber-mgmt gtp apn-policy apn defaults
Description
Commands in this context configure default parameters for the GTP connection that can be used when the parameters are not returned in authentication.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
delay
delay
Syntax
delay
Context
[Tree] (config>router>if>if-attribute delay)
Full Context
configure router interface if-attribute delay
Description
Commands in this context configure or apply delay interface attributes such as static delay.
Platforms
All
delay
Syntax
delay interval
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator delay)
Full Context
configure system management-interface cli md-cli environment progress-indicator delay
Description
This command sets the delay before the progress indicator is displayed in the MD-CLI.
Default
delay 500
Parameters
- interval
-
Specifies the delay interval, in milliseconds.
Platforms
All
delay
Syntax
delay delay-measurement-type
Context
[Tree] (config>test-oam>link-meas>template delay)
Full Context
configure test-oam link-measurement measurement-template delay
Description
This command configures the type of delay measurement statistic used in both the sample window and aggregate sample window.
The no form of this command reverts to the default value.
Default
delay min
Parameters
- delay-measurement-type
-
Specifies the type of delay measurement that is used for comparison and reporting.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-event
delay-event
Syntax
delay-event {forward | backward | round-trip} lowest-bin bin-number thresholdraise-threshold [clear clear-threshold]
no delay-event {forward | backward | round-trip}
Context
[Tree] (config>oam-pm>bin-group>bin-type delay-event)
Full Context
configure oam-pm bin-group bin-type delay-event
Description
This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.
The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.
Parameters
- forward
-
Specifies the threshold is applied to the forward direction bin.
- backward
-
Specifies the threshold is applied to the backward direction bin.
- round-trip
-
Specifies the threshold is applied to the roundtrip direction bin.
- bin-number
-
Specifies the number of the bin that the threshold is applied to. This bin and all higher bins are monitored to determine if the sum total results in these bins have reached or crossed the configured threshold.
- raise-threshold
-
Specifies the rising numerical value in the range that determines when the event is to be generated, when value reached.
- clear-threshold
-
Specifies an optional numerical value in the range threshold used to indicate stateful behavior that allows the operator to configure a lower value than the rising threshold that determines when the clear event should be generated. Clear is generated when the end of measurement interval count is less than or equal to the configured value. If this option is not configured the behavior is stateless. Zero means no results can exist in the lower bin or any higher.
Platforms
All
delay-event-exclusion
delay-event-exclusion
Syntax
delay-event-exclusion {forward | backward | round-trip} lowest-bin bin-number
no delay-event-exclusion {forward | backward | round-trip}
Context
[Tree] (config>oam-pm>bin-group>bin-type delay-event-exclusion)
Full Context
configure oam-pm bin-group bin-type delay-event-exclusion
Description
This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.
The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.
The no form of this command does not exclude any values from the configured TCA threshold.
Default
no delay-event-exclusion forward
no delay-event-exclusion backward
no delay-event-exclusion round-trip
Parameters
- forward
-
Specifies the forward direction bin.
- backward
-
Specifies the backward direction bin.
- round-trip
-
Specifies the round-trip direction bin.
- bin-number
-
Specifies the number of the lowest bin that the exclusion is applied to. This bin and all higher bins are excluded from the delay-event (TCA) count. If no bin numbers are configured, this command is ignored.
Platforms
All
delay-events
delay-events
Syntax
[no] delay-events
Context
[Tree] (config>oam-pm>session>measurement-interval>event-mon delay-events)
Full Context
configure oam-pm session measurement-interval event-mon delay-events
Description
This enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shutdown all the tests in the session.
The no form of this command disables the monitoring of all configured delay events.
delay-on-boot
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>grpc delay-on-boot)
Full Context
configure system grpc delay-on-boot
Description
This command configures the delay timer for gRPC connections. When the timer expires, gRPC becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that connections are accepted after the system boots and gRPC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
All
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>netconf delay-on-boot)
Full Context
configure system netconf delay-on-boot
Description
This command configures the delay timer for NETCONF connections. When the timer expires, NETCONF becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that connections are accepted after the system boots and NETCONF becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
All
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>grpc-tunnel delay-on-boot)
Full Context
configure system grpc-tunnel delay-on-boot
Description
This command configures the delay timer for gRPC tunnels. When the timer expires, gRPC tunnels become operational and connections are accepted. This delay prevents automation from trying to initiate gRPC tunnels while it is still converging.
The no form of this command specifies that gRPC tunnels are initiated after the system boots and gPRC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
All
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>management-interface>remote-management delay-on-boot)
Full Context
configure system management-interface remote-management delay-on-boot
Description
This command configures the delay timer for remote management connections over gRPC. When the timer expires, remote management becomes operational and connections are accepted. This delay prevents automation from managing the system while it is still converging.
The no form of this command specifies that remote management connections are accepted after the system boots and gRPC becomes operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
All
delay-on-boot
Syntax
delay-on-boot delay
no delay-on-boot
Context
[Tree] (config>system>telemetry>persistent-subscriptions delay-on-boot)
Full Context
configure system telemetry persistent-subscriptions delay-on-boot
Description
This command configures the delay timer for gRPC telemetry persistent subscriptions. When the timer expires, gRPC telemetry persistent subscriptions become operational and connections are initiated. This delay prevents the system from trying to establish gRPC persistent subscriptions while it is still converging.
The no form of this command specifies that gRPC telemetry persistent subscriptions are initiated after the system boots and gRPC is operational.
Default
no delay-on-boot
Parameters
- delay
-
Specifies the delay, in seconds.
Platforms
All
delay-selection
delay-selection
Syntax
delay-selection {static | dynamic | static-preferred | dynamic-preferred}
no delay-selection
Context
[Tree] (config>router>if>if-attr>delay delay-selection)
Full Context
configure router interface if-attribute delay delay-selection
Description
This command selects the delay source to be advertised by the IGP for this interface.
The no form of this command reverts to the default value.
Default
delay-selection static-preferred
Parameters
- static
-
Keyword to use only statically configured delay and ignore dynamic delay measurements generated by link-measurement.
- dynamic
-
Keyword to use only dynamic delay measurements generated by link-measurement and ignore statically configured delay.
- static-preferred
-
Keyword to prefer the configured static delay over the dynamic delay. If static delay is not configured, the delay reported using link-measurement is used.
- dynamic-preferred
-
Keyword to prefer the dynamic reported delay over the statically configured delay. If no dynamic delay has been reported using link-measurement, the statically configured delay is used.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-start-time
delay-start-time
Syntax
delay-start-time delay
no delay-start-time
Context
[Tree] (config>subscr-mgmt>acct-plcy delay-start-time)
Full Context
configure subscriber-mgmt radius-accounting-policy delay-start-time
Description
It is recommended to only use this command when session-accounting is used. By default, a dual stack subscriber generates a RADIUS accounting interim message for each new host update (IPv4, IPv6 WAN, and IPv6 PD). This command delays the trigger of a RADIUS accounting start message and allows all hosts to connect first. When the delay timer expires, a single RADIUS accounting start message containing all the host currently connected to the BNG is sent to the server. Subsequent host connections will trigger interim-updates if host-update is enabled on session-accounting. For all other accounting modes, this command will delay the trigger of an accounting start when a host connects.
The no form of this command reverts to the default.
Default
no delay-start-time
Parameters
- delay
-
Specifies the accounting start delay, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
delay-template
delay-template
Syntax
delay-template delay-template-name
no delay-template
Context
[Tree] (config>oam-pm>session>ethernet>dmm delay-template)
Full Context
configure oam-pm session ethernet dmm delay-template
Description
This command specifies a reference to a config>oam-pm>streaming delay-template for the Ethernet DMM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, the streaming of the results is not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
Default
no delay-template
Parameters
- delay-template-name
-
Specifies the delay template name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-template
Syntax
delay-template delay-template-name
no delay-template
Context
[Tree] (config>oam-pm>session>ip>twamp-light delay-template)
Full Context
configure oam-pm session ip twamp-light delay-template
Description
This command specifies a reference to a config>oam-pm>streaming delay-template for the IP TWAMP LIGHT test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
Default
no delay-template
Parameters
- delay-template-name
-
Specifies the delay template name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-template
Syntax
delay-template delay-template-name
no delay-template
Context
[Tree] (config>oam-pm>session>mpls>dm delay-template)
Full Context
configure oam-pm session mpls dm delay-template
Description
This command specifies a reference to a config>oam-pm>streaming delay-template for the MPLS DM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.
The no form of this command deletes the delay template from the test.
Default
no delay-template
Parameters
- delay-template-name
-
Specifies the delay template name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-template
Syntax
delay-template template-name [create]
no delay-template template-name
Context
[Tree] (config>oam-pm>streaming delay-template)
Full Context
configure oam-pm streaming delay-template
Description
This command specifies a template for streaming delay metrics that can be referenced under the oam-pm>session technology delay style test.
The delay-template must be configured under the technology delay test oam-pm>session to allow the delay specific test to stream results using the configured template attributes.
The no form of this command deletes the specified delay template.
Parameters
- template-name
-
Specifies the template name, up to 64 characters.
- create
-
Creates the template.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delay-threshold
delay-threshold
Syntax
delay-threshold microseconds
no delay-threshold
Context
[Tree] (config>test-oam>sath>accept-crit-tmpl delay-threshold)
Full Context
configure test-oam service-activation-testhead acceptance-criteria-template delay-threshold
Description
This command configures a delay value that is compared to the measured delay at the end of the test to declare the test result. If the measured value is greater than the configured value, the test fails; otherwise, it passes. A measured delay value of zero also causes the test to fail.
The no form of this command disables the comparison and ignores the threshold value when declaring the test result.
Default
no delay-threshold
Parameters
- microseconds
-
Specifies the delay value, in microseconds, to compare with the measured value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
delay-var-threshold
delay-var-threshold
Syntax
delay-var-threshold microseconds
no delay-var-threshold
Context
[Tree] (config>test-oam>sath>accept-crit-tmpl delay-var-threshold)
Full Context
configure test-oam service-activation-testhead acceptance-criteria-template delay-var-threshold
Description
This command configures a delay variation value that is compared to the measured delay variation at the end of the test to declare the test result. If the measured value is greater than the configured value, the test fails; otherwise, it passes.
The no form of this command disables the comparison ignores the threshold value when declaring the test result.
Default
no delay-var-threshold
Parameters
- microseconds
-
Specifies the delay variation value, in microseconds, to compare with the measured value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
delegated-ipv6-prefix
delegated-ipv6-prefix
Syntax
[no] delegated-ipv6-prefix
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute delegated-ipv6-prefix)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute delegated-ipv6-prefix
Description
This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.
The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
delegated-prefix-length
delegated-prefix-length
Syntax
delegated-prefix-length [minimum prefix-length] [maximum prefix-length]
no delegated-prefix-length
Context
[Tree] (config>service>vprn>dhcp6>server>pool delegated-prefix-length)
[Tree] (config>router>dhcp6>server>pool delegated-prefix-length)
Full Context
configure service vprn dhcp6 local-dhcp-server pool delegated-prefix-length
configure router dhcp6 local-dhcp-server pool delegated-prefix-length
Description
This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.
The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.
The no form of this command reverts to the default.
Default
delegated-prefix-length 64 minimum 48 maximum 64
Parameters
- prefix-length
-
Specifies the minimum or maximum allowed prefix length, in bits.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
delegated-prefix-length
Syntax
delegated-prefix-length bits
delegated-prefix-length variable
no delegated-prefix-length
Context
[Tree] (config>service>vprn>sub-if>ipv6 delegated-prefix-length)
[Tree] (config>service>ies>sub-if>ipv6 delegated-prefix-length)
Full Context
configure service vprn subscriber-interface ipv6 delegated-prefix-length
configure service ies subscriber-interface ipv6 delegated-prefix-length
Description
This command configures the subscriber interface level setting for delegated prefix length. The delegated prefix length for a subscriber- interface can be either set to a fixed value that is explicitly configured under the subscriber interface CLI hierarchy or a variable value that can be obtained from various sources. This command can be changed only when no IPv6 prefixes are configured under the subscriber-interface context.
The no form of this command reverts to the default.
Default
no delegated-prefix-length (the delegated prefix length is 64)
Parameters
- bits
-
Specifies the delegated prefix length in bits. This value is applicable to the entire subscriber interface. In case that the delegated prefix length is also supplied via other means (LUDB, RADIUS or DHCP Server), such supplied value must match the value configured under the subscriber-interface context. Otherwise, the prefix instantiation in the router fails.
- variable
-
Specifies that the delegated prefix value can be of any length between 48 to 64. The value itself can vary between the prefixes and is provided at the time of prefix instantiation. The order of priority for the source of the delegated prefix length is:
-
LUDB
-
RADIUS
-
DHCPv6 server
-
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
delete
delete
Syntax
delete file-url [force] [no-redirect] [client-tls-profile profile] [proxy proxy-url]
Context
[Tree] (file delete)
Full Context
file delete
Description
This command deletes the specified file.
The optional wildcard (*) can be used to delete multiple files that share a common (partial) prefix and/or (partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches the wildcard:
"Delete file <filename> (y/n)?”
Parameters
- file-url
-
Specifies the file name to delete.
- force
-
Forces an immediate deletion of the specified file(s). The command file delete * force deletes all the wildcard matching files without displaying a user prompt message. This command also automatically accepts HTTP redirects unless overridden by the no-redirect parameter.
- profile
-
Specifies the TLS client profile configured under config>system>security>tls>client-tls-profile to use.
- proxy-url
-
Specifies the URL of an HTTP proxy. For example, http://proxy.mydomain.com:8000. This URL must be an HTTP URL and not an HTTPS URL.
- no-redirect
-
Specifies to automatically refuse any HTTP redirects without prompting the user.
Platforms
All
delete
Syntax
delete [line]
Context
[Tree] (candidate delete)
Full Context
candidate delete
Description
This command deletes the selected CLI node (which includes all sub-branches). The deleted lines are also copied into a temporary buffer that can be used for a subsequent insert.
Parameters
- line
-
Indicates which line to delete.
Platforms
All
delete
Syntax
delete [{checkpoint-id | rescue | latest-rb}]
Context
[Tree] (admin>rollback delete)
Full Context
admin rollback delete
Description
This command deletes a rollback checkpoint and causes the suffixes to be adjusted (decremented) for all checkpoints older that the one that was deleted (to close the hole in the list of checkpoint files and create room to create another checkpoint).
If config redundancy rollback-sync is enabled, a rollback delete will also delete the equivalent checkpoint on the standby CF and shuffle the suffixes on the standby CF.
It is not advised to manually delete a rollback checkpoint (for example, using a file delete command). If a rollback checkpoint file is manually deleted without using the admin rollback delete command then the suffixes of the checkpoint files are not shuffled, nor is the equivalent checkpoint file deleted from the standby CF. This manual deletion creates a hole in the checkpoint file list until enough new checkpoints have been created to roll the hole off the end of the list.
Parameters
- checkpoint-id
-
An ID indicating a specific rollback checkpoint. A checkpoint-id of 1 indicates the rollback checkpoint file (at the configured rollback location) with *.rb.1 as the suffix, 2 for file *.rb.2, and so on.
- latest-rb
-
Specifies the most recently created rollback checkpoint (corresponds to the file-url.rb rollback checkpoint file).
- rescue
-
Deletes the rescue checkpoint. No checkpoint suffix numbers are changed.
Platforms
All
delete-config
delete-config
Syntax
[no] delete-config
Context
[Tree] (configure>system>security>profile>netconf>base-op-authorization delete-config)
Full Context
configure system security profile netconf base-op-authorization delete-config
Description
This command enables the NETCONF delete-config operation.
The no form of this command disables the operation.
Default
no delete-config
The operation is enabled by default in the built-in system-generated administrative profile.
Platforms
All
delete-pending
delete-pending
Syntax
[no] delete-pending
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state delete-pending)
Full Context
configure subscriber-mgmt wlan-gw ue-query state delete-pending
Description
This command enables matching on UEs that are in a delete-pending state.
The no form of this command disables matching on UEs in a delete pending-state, unless all state matching is disabled.
Default
no delete-pending
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
delivery-service
delivery-service
Syntax
delivery-service service-id
delivery-service name service-name
no delivery-service
Context
[Tree] (config>service>vprn>if>sap>ip-tunnel delivery-service)
[Tree] (config>service>ies>if>sap>ip-tunnel delivery-service)
Full Context
configure service vprn interface sap ip-tunnel delivery-service
configure service ies interface sap ip-tunnel delivery-service
Description
This command sets the delivery service for GRE encapsulated packets associated with a particular GRE tunnel. This is the IES or VPRN service where the GRE encapsulated packets are injected and terminated. The delivery service may be the same service that owns the private tunnel SAP associated with the GRE tunnel. The GRE tunnel does not come up until a valid delivery service is configured.
The no form of this command deletes the delivery-service from the GRE tunnel configuration.
Parameters
- service-id
-
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.
This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The delivery-service name service-name variant can be used in all configuration modes.
- service-name
-
Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.
Platforms
All
delta-consumed-agg-rate
delta-consumed-agg-rate
Syntax
delta-consumed-agg-rate percent percent-of-delta-consumed-agg-rate
no delta-consumed-agg-rate
Context
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-agg-rate)
Full Context
configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-agg-rate
Description
This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the aggregate rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.
The no form of this command reverts the delta-consumed-agg-rate percent to its default value.
Default
delta-consumed-agg-rate 20.00
Parameters
- percent-of-delta-consumed-agg-rate
-
Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed aggregate rate that can be given to a queue.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delta-consumed-higher-tier-rate
delta-consumed-higher-tier-rate
Syntax
delta-consumed-higher-tier-rate percent percent-of-delta-consumed-high-tier-rate
no delta-consumed-higher-tier-rate
Context
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-higher-tier-rate)
Full Context
configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-higher-tier-rate
Description
This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the higher tier rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. Higher tier refers to the Vport aggregate rate and port scheduler level, group, and maximum rates.
This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.
The no form of this command reverts the delta-consumed-higher-tier-rate percent to its default value.
Default
delta-consumed-higher-tier-rate 5.00
Parameters
- percent-of-delta-consumed-high-tier-rate
-
Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed higher tier rate that can be given to a queue.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
delta-in-use-limit
delta-in-use-limit
Syntax
delta-in-use-limit limit
no delta-in-use-limit
Context
[Tree] (config>vrrp>policy delta-in-use-limit)
Full Context
configure vrrp policy delta-in-use-limit
Description
This command sets a lower limit on the virtual router in-use priority that can be derived from the delta priority control events.
Each vrrp-priority-id places limits on the delta priority control events to define the in-use priority of the virtual router instance. Setting this limit prevents the sum of the delta priority events from lowering the in-use priority value of the associated virtual router instances below the configured value.
The limit has no effect on explicit priority control events. Explicit priority control events are controlled by setting the in-use priority to any value between 1 and 254.
Only non-owner virtual router instances can be associated with VRRP priority control policies and their priority control events.
Once the total sum of all delta events is calculated and subtracted from the base priority of the virtual router instance, the result is compared to the delta-in-use-limit value. If the result is less than the limit, the delta-in-use-limit value is used as the virtual router in-use priority value. If an explicit priority control event overrides the delta priority control events, the delta-in-use-limit has no effect.
Setting the limit to a higher value than the default of 1 limits the effect of the delta priority control events on the virtual router instance base priority value. This allows for multiple priority control events while minimizing the overall effect on the in-use priority.
Changing the in-use-priority-limit causes an immediate re-evaluation of the in-use priority values for all virtual router instances associated with this vrrp-policy-id based on the current sum of all active delta control policy events.
The no form of the command reverts to the default value.
Default
delta-in-use-limit 1 — Specifies the lower limit of 1 for the in-use priority, as modified, by delta priority control events.
Parameters
- limit
-
Specifies the lower limit of the in-use priority base, as modified by priority control policies. The in-use-priority-limit has the same range as the non-owner virtual router instance base-priority parameter. If the result of the total delta priority control events minus the virtual router instances base-priority, is less than the in-use-priority-limit, the in-use-priority-limit value is used as the virtual router instances in-use priority value.
Setting the in-use-priority-limit to a value equal to or larger than the virtual router instance base-priority prevents the delta priority control events from having any effect on the virtual router instance in-use priority value.
Platforms
All
dent-threshold
dent-threshold
Syntax
dent-threshold threshold
no dent-threshold
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>hd dent-threshold)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>sd dent-threshold)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>pip dent-threshold)
Full Context
configure mcast-management multicast-info-policy video-policy video-interface hd dent-threshold
configure mcast-management multicast-info-policy video-policy video-interface sd dent-threshold
configure mcast-management multicast-info-policy video-policy video-interface pip dent-threshold
Description
This command sets the threshold value below which the FCC server will dent/drop unicast data sent to the FCC client during a fast channel change. Within the RTP extension header, the packet priority (PRI) (2 bits) and the fine-grained priority (FPRI) (3 bits) indicate the "importance” of the frame as to how essential it is to the video stream.
This parameter is only applicable if the FCC server mode is dent.
The no form of the command returns the parameter to the default value.
Default
dent-threshold 16 (only B frames are dropped)
Parameters
- threshold
-
Specifies the threshold value is used by the FCC server to compare with the concatenation of the PRI and FPRI to determine whether to send the packet to the FCC client. If the PRI and FPRI expressed as a decimal integer is greater than or equal to the threshold value, the packet will be sent.
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
deny-list
deny-list
Syntax
[no] deny-list deny-list-name
Context
[Tree] (config>app-assure>group>url-filter>local-filtering deny-list)
Full Context
configure application-assurance group url-filter local-filtering deny-list
Description
This command adds a deny-list URL list to the local URL filter policy.
The no form of this command removes the URL list object.
Default
no deny-list
Parameters
- deny-list-name
-
Specifies the URL list name.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
depleted-event
depleted-event
Syntax
[no] depleted-event
Context
[Tree] (config>router>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)
Full Context
configure router dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
configure service vprn dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event
Description
This command enables the system to send out a warning when the prefix with a configured length is no longer available in the provisioned prefix.
For example, if the prefix 2001:0:0:ffe0::/50 is created at the pool level using the pd and wan-host parameters, and the threshold for the prefix length is 64, configuring this command enables the system to send out a warning when there is no available /64 that can be allocated out of 2001:0:0:ffe0::/50.
The no form of this command disables the warnings.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
depleted-event
Syntax
[no] depleted-event
Context
[Tree] (config>router>dhcp6>server>pool>thresholds>minimum-free depleted-event)
[Tree] (config>service>vprn>dhcp6>server>pool>thresholds>minimum-free depleted-event)
Full Context
configure router dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
configure service vprn dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event
Description
This command enables the system to send out warnings when the prefix with the configured length is no longer available in the pool.
The no form of this command disables the warnings.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
derived-id
derived-id
Syntax
derived-id derived-id-string
no derived-id
Context
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident derived-id)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident derived-id)
Full Context
configure subscriber-mgmt local-user-db ppp host host-identification derived-id
configure subscriber-mgmt local-user-db ipoe host host-identification derived-id
Description
This command configures an ASCII string that uniquely identifies a host and is derived by a Python script from packet content available during a DHCP transaction or PPPoE session establishment.
This command is only used when derived-id is configured as one of the match-list parameters.
The no form of this command removes the derived-id from the configuration.
Parameters
- derived-id-string
-
Specifies the host ID to be derived by a python script from DHCP or PPPoE packets, up to 255 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
description
description
Syntax
description tiny-description-string
no description
Context
[Tree] (config>ipsec>static-sa description)
Full Context
configure ipsec static-sa description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- tiny-description-string
-
Specifies the description character string. Allowed values are any string, up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
description
Syntax
description short-description-string
no description
Context
[Tree] (config>service>vprn>if>sap description)
[Tree] (config>service>vprn>rip description)
[Tree] (config>service>vprn>static-route-entry>next-hop description)
[Tree] (config>filter>mac-filter description)
[Tree] (config>port>ethernet>access>egr>vport description)
[Tree] (config>service>ies>if>dhcp description)
[Tree] (config>service>vprn>rip>group>neighbor description)
[Tree] (config>filter>match-list>ipv6-prefix-list description)
[Tree] (config>service>vprn>if>dhcp description)
[Tree] (config>subscr-mgmt>pfcp-association description)
[Tree] (config>router>dhcp6>server>pool description)
[Tree] (config>port>ethernet>access>egr>qgrp description)
[Tree] (config>qos>match-list>port-list description)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay description)
[Tree] (config>qos>network-queue description)
[Tree] (config>lag>link-map-profile description)
[Tree] (config>service>ies>sub-if>grp-if>pppoe description)
[Tree] (config>filter>match-list>protocol-list description)
[Tree] (config>system>satellite>eth-sat description)
[Tree] (config>filter>ipv6-filter>entry description)
[Tree] (config>service>ies>sub-if>grp-if>dhcp description)
[Tree] (config>service>ies>if>ipv6>dhcp6-relay description)
[Tree] (config>filter>match-list>ip-prefix-list description)
[Tree] (config>router>static-route-entry>indirect description)
[Tree] (config>card>fp>ingress>access>queue-group description)
[Tree] (config>system>grpc-tunnel>tunnel description)
[Tree] (config>router>rip>group description)
[Tree] (config>subscr-mgmt>ppp-policy description)
[Tree] (config>router>static-route-entry>next-hop description)
[Tree] (config>isa>tunnel-group description)
[Tree] (config>router>mcac>policy>bundle description)
[Tree] (config>system>satellite>tdm-sat description)
[Tree] (config>router>bgp>group description)
[Tree] (config>service>vpls>endpoint description)
[Tree] (config>service>vprn>spoke-sdp description)
[Tree] (config>service>vprn>bgp description)
[Tree] (config>subscr-mgmt>git description)
[Tree] (config>service>vprn>sub-if>grp-if>pppoe description)
[Tree] (config>redundancy>multi-chassis>peer description)
[Tree] (config>router>route-next-hop-policy>template description)
[Tree] (config>service>vprn>bgp>group description)
[Tree] (config>service>cpipe description)
[Tree] (config>service>epipe description)
[Tree] (config>filter>redirect-policy>destination description)
[Tree] (config>filter>ip-exception description)
[Tree] (config>router>mcac>policy description)
[Tree] (config>service>ies>aarp-interface>spoke-sdp description)
[Tree] (config>service>ies>if>spoke-sdp description)
[Tree] (config>subscr-mgmt>rip-plcy description)
[Tree] (config>service>ies>if>sap>eth-cfm>mep description)
[Tree] (config>service>epipe>spoke-sdp description)
[Tree] (config>ipsec>client-db>client description)
[Tree] (config>filter>ip-exception>entry description)
[Tree] (config>ipsec>tnl-temp description)
[Tree] (config>router>bgp description)
[Tree] (config>service>vprn>aarp-interface>spoke-sdp description)
[Tree] (config>router>mcac>if-policy description)
[Tree] (config>ipsec>client-db description)
[Tree] (config>port>ethernet>network>egr>qgrp description)
[Tree] (config>service>vprn>rip>group description)
[Tree] (config>service>ipipe>endpoint description)
[Tree] (config>service>vprn>static-route-entry>indirect description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>router>ripng description)
[Tree] (config>system>cron>sched description)
[Tree] (config>system>persistence>nat-fwd description)
[Tree] (config>qos>policer-control-policy description)
[Tree] (config>router>bgp>group>neighbor description)
[Tree] (config>service>epipe>endpoint description)
[Tree] (config>router>static-route-entry>black-hole description)
[Tree] (config>subscr-mgmt>acct-plcy description)
[Tree] (config>service>vprn>ripng description)
[Tree] (config>router>network-domains>network-domain description)
[Tree] (config>bmp>station description)
[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep description)
[Tree] (config>eth-tunnel>path>eth-cfm>mep description)
[Tree] (config>system>satellite>port-template description)
[Tree] (config>system>persistence>python-policy-cache description)
[Tree] (config>service>ipipe description)
[Tree] (config>filter>ipv6-exception description)
[Tree] (config>service>ies description)
[Tree] (config>filter>ipv6-filter description)
[Tree] (config>system>persistence>ancp description)
[Tree] (config>filter>log description)
[Tree] (config>filter>redirect-policy description)
[Tree] (config>port>ethernet>access>ing>qgrp description)
[Tree] (config>system>script-control>script description)
[Tree] (config>port>ethernet>eth-cfm>mep description)
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel description)
[Tree] (config>isa>ipsec-group description)
[Tree] (config>router>if>eth-cfm>mep description)
[Tree] (config>system>management-interface>remote-management>manager description)
[Tree] (config>router>pcp-server>server description)
[Tree] (config>router>dhcp>server>pool description)
[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep description)
[Tree] (config>filter>ipv6-exception>entry description)
[Tree] (config>ipsec>trans-mode-prof description)
[Tree] (config>service>vprn>red-if>spoke-sdp description)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel description)
[Tree] (config>app-assure>group>policy>chrg-fltr>entry description)
[Tree] (config>port>ethernet>egress>hs-sec-shaper description)
[Tree] (config>qos>post-policer-mapping description)
[Tree] (config>qos>match-list>ip-prefix-list description)
[Tree] (config>router>origin-validation>rpki-session description)
[Tree] (config>system>persistence>dhcp-server description)
[Tree] (config>eth-tunnel>path description)
[Tree] (config>filter>ip-filter description)
[Tree] (config>filter>match-list>port-list description)
[Tree] (config>port-xc>pxc description)
[Tree] (config>filter>dhcp-filter description)
[Tree] (config>router>if>dhcp description)
[Tree] (config>service>vprn>ripng>group description)
[Tree] (config>router>rip description)
[Tree] (config>service>sdp>binding>pw-port description)
[Tree] (config>system>bluetooth>device description)
[Tree] (config>card>fp>ingress>network>queue-group description)
[Tree] (config>router>fad>flex-algo description)
[Tree] (config>service>ies>sub-if>dhcp description)
[Tree] (config>qos>hw-agg-shap-sched-plcy description)
[Tree] (config>service>ipipe>spoke-sdp description)
[Tree] (config>system>satellite>local-forward>sap description)
[Tree] (config>service>cpipe>endpoint description)
[Tree] (config>qos>fp-resource-policy description)
[Tree] (config>service>vprn>ripng>group>neighbor description)
[Tree] (config>service>ies>sub-if>grp-if>srrp description)
[Tree] (config>service>ies>if>sap>ip-tunnel description)
[Tree] (config>router>dhcp>server description)
[Tree] (config>subscr-mgmt>loc-user-db description)
[Tree] (config>router>if>vrrp description)
[Tree] (config>ipsec>ike-policy description)
[Tree] (config>service>vprn>bgp>group>neighbor description)
[Tree] (config>subscr-mgmt>sap-template description)
[Tree] (config>service>vpls>sap>ipoe-session description)
[Tree] (config>qos>policer-control-policy>tier>arbiter description)
[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay description)
[Tree] (config>system>grpc-tunnel>destination-group description)
[Tree] (config>system>satellite>local-forward description)
[Tree] (config>service>vprn>static-route-entry>grt description)
[Tree] (config>system>software-repository description)
[Tree] (config>router>dhcp6>server description)
[Tree] (config>service>vprn>static-route-entry>black-hole description)
[Tree] (config>fwd-path-ext>fpe description)
[Tree] (config>filter>mac-filter>entry description)
[Tree] (config>subscr-mgmt>gtp>peer-profile description)
[Tree] (config>isa>tunnel-mem-pool description)
[Tree] (config>service>vprn>l2tp description)
[Tree] (config>filter>ip-filter>entry description)
[Tree] (config>router>rip>group>neighbor description)
[Tree] (config>filter>gre-tun-tmp description)
[Tree] (config>router>ripng>group>neighbor description)
[Tree] (config>qos>match-list>ipv6-prefix-list description)
[Tree] (config>router>ripng>group description)
[Tree] (config>system>persistence>sub-mgmt description)
Full Context
configure service vprn interface sap description
configure service vprn rip description
configure service vprn static-route-entry next-hop description
configure filter mac-filter description
configure port ethernet access egress vport description
configure service ies interface dhcp description
configure service vprn rip group neighbor description
configure filter match-list ipv6-prefix-list description
configure service vprn interface dhcp description
configure subscriber-mgmt pfcp-association description
configure router dhcp6 local-dhcp-server pool description
configure port ethernet access egress queue-group description
configure qos match-list port-list description
configure service vprn subscriber-interface ipv6 dhcp6 relay description
configure qos network-queue description
configure lag link-map-profile description
configure service ies subscriber-interface group-interface pppoe description
configure filter match-list protocol-list description
configure system satellite eth-sat description
configure filter ipv6-filter entry description
configure service ies subscriber-interface group-interface dhcp description
configure service ies interface ipv6 dhcp6-relay description
configure filter match-list ip-prefix-list description
configure router static-route-entry indirect description
configure card fp ingress access queue-group description
configure system grpc-tunnel tunnel description
configure router rip group description
configure subscriber-mgmt ppp-policy description
configure router static-route-entry next-hop description
configure isa tunnel-group description
configure router mcac policy bundle description
configure system satellite tdm-sat description
configure router bgp group description
configure service vpls endpoint description
configure service vprn spoke-sdp description
configure service vprn bgp description
configure subscriber-mgmt group-interface-template description
configure service vprn subscriber-interface group-interface pppoe description
configure redundancy multi-chassis peer description
configure router route-next-hop-policy template description
configure service vprn bgp group description
configure service cpipe description
configure service epipe description
configure filter redirect-policy destination description
configure filter ip-exception description
configure router mcac policy description
configure service ies aarp-interface spoke-sdp description
configure service ies interface spoke-sdp description
configure subscriber-mgmt rip-policy description
configure service ies interface sap eth-cfm mep description
configure service epipe spoke-sdp description
configure ipsec client-db client description
configure filter ip-exception entry description
configure ipsec tunnel-template description
configure router bgp description
configure service vprn aarp-interface spoke-sdp description
configure router mcac if-policy description
configure ipsec client-db description
configure port ethernet network egress queue-group description
configure service vprn rip group description
configure service ipipe endpoint description
configure service vprn static-route-entry indirect description
configure service vprn interface sap ip-tunnel description
configure router ripng description
configure system cron schedule description
configure system persistence nat-port-forwarding description
configure qos policer-control-policy description
configure router bgp group neighbor description
configure service epipe endpoint description
configure router static-route-entry black-hole description
configure subscriber-mgmt radius-accounting-policy description
configure service vprn ripng description
configure router network-domains network-domain description
configure bmp station description
configure service ies subscriber-interface group-interface sap eth-cfm mep description
configure eth-tunnel path eth-cfm mep description
configure system satellite port-template description
configure system persistence python-policy-cache description
configure service ipipe description
configure filter ipv6-exception description
configure service ies description
configure filter ipv6-filter description
configure system persistence ancp description
configure filter log description
configure filter redirect-policy description
configure port ethernet access ingress queue-group description
configure system script-control script description
configure port ethernet eth-cfm mep description
configure service vprn static-route-entry ipsec-tunnel description
configure isa ipsec-group description
configure router interface eth-cfm mep description
configure system management-interface remote-management manager description
configure router pcp-server server description
configure router dhcp local-dhcp-server pool description
configure service ies interface spoke-sdp eth-cfm mep description
configure filter ipv6-exception entry description
configure ipsec ipsec-transport-mode-profile description
configure service vprn redundant-interface spoke-sdp description
configure service vprn interface sap ipsec-tunnel description
configure application-assurance group policy charging-filter entry description
configure port ethernet egress hs-secondary-shaper description
configure qos post-policer-mapping description
configure qos match-list ip-prefix-list description
configure router origin-validation rpki-session description
configure system persistence dhcp-server description
configure eth-tunnel path description
configure filter ip-filter description
configure filter match-list port-list description
configure port-xc pxc description
configure filter dhcp-filter description
configure router interface dhcp description
configure service vprn ripng group description
configure router rip description
configure service sdp binding pw-port description
configure system bluetooth device description
configure card fp ingress network queue-group description
configure router flexible-algorithm-definitions flex-algo description
configure service ies subscriber-interface dhcp description
configure qos hw-agg-shaper-scheduler-policy description
configure service ipipe spoke-sdp description
configure system satellite local-forward sap description
configure service cpipe endpoint description
configure qos fp-resource-policy description
configure service vprn ripng group neighbor description
configure service ies subscriber-interface group-interface srrp description
configure service ies interface sap ip-tunnel description
configure router dhcp local-dhcp-server description
configure subscriber-mgmt local-user-db description
configure router interface vrrp description
configure ipsec ike-policy description
configure service vprn bgp group neighbor description
configure subscriber-mgmt sap-template description
configure service vpls sap ipoe-session description
configure qos policer-control-policy tier arbiter description
configure service ies subscriber-interface ipv6 dhcp6 relay description
configure system grpc-tunnel destination-group description
configure system satellite local-forward description
configure service vprn static-route-entry grt description
configure system software-repository description
configure router dhcp6 local-dhcp-server description
configure service vprn static-route-entry black-hole description
configure fwd-path-ext fpe description
configure filter mac-filter entry description
configure subscriber-mgmt gtp peer-profile description
configure isa tunnel-member-pool description
configure service vprn l2tp description
configure filter ip-filter entry description
configure router rip group neighbor description
configure filter gre-tunnel-template description
configure router ripng group neighbor description
configure qos match-list ipv6-prefix-list description
configure router ripng group description
configure system persistence subscriber-mgmt description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- short-description-string
-
Specifies the description entered as a character string up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
- configure service ipipe spoke-sdp description
- configure qos match-list ipv6-prefix-list description
- configure service vprn rip group description
- configure filter redirect-policy description
- configure router mcac policy description
- configure service ies description
- configure router rip group neighbor description
- configure router ripng group neighbor description
- configure service ies interface sap ip-tunnel description
- configure router mcac policy bundle description
- configure service epipe spoke-sdp description
- configure service ipipe description
- configure lag link-map-profile description
- configure service epipe endpoint description
- configure service vprn ripng group description
- configure service vprn bgp description
- configure filter redirect-policy destination description
- configure service vprn spoke-sdp description
- configure service ies interface spoke-sdp description
- configure service ipipe endpoint description
- configure filter gre-tunnel-template description
- configure service vpls endpoint description
- configure system script-control script description
- configure filter ip-filter entry description
- configure router static-route-entry indirect description
- configure router flexible-algorithm-definitions flex-algo description
- configure router origin-validation rpki-session description
- configure filter mac-filter entry description
- configure filter log description
- configure router mcac if-policy description
- configure system cron schedule description
- configure router route-next-hop-policy template description
- configure router ripng group description
- configure filter match-list ipv6-prefix-list description
- configure router bgp group neighbor description
- configure router rip group description
- configure port-xc pxc description
- configure qos network-queue description
- configure port ethernet access ingress queue-group description
- configure port ethernet network egress queue-group description
- configure filter match-list port-list description
- configure service vprn interface sap description
- configure service vprn static-route-entry grt description
- configure router network-domains network-domain description
- configure filter ipv6-filter description
- configure system management-interface remote-management manager description
- configure service vprn bgp group neighbor description
- configure router static-route-entry next-hop description
- configure service vprn bgp group description
- configure filter ip-filter description
- configure router bgp description
- configure system persistence python-policy-cache description
- configure system grpc-tunnel tunnel description
- configure service ies interface dhcp description
- configure filter dhcp-filter description
- configure router interface dhcp description
- configure service vprn ripng description
- configure router bgp group description
- configure router rip description
- configure filter match-list ip-prefix-list description
- configure service vprn rip group neighbor description
- configure router static-route-entry black-hole description
- configure qos match-list ip-prefix-list description
- configure service ies interface ipv6 dhcp6-relay description
- configure system grpc-tunnel destination-group description
- configure service vprn interface sap ip-tunnel description
- configure port ethernet access egress queue-group description
- configure service epipe description
- configure service vprn static-route-entry ipsec-tunnel description
- configure system persistence ancp description
- configure fwd-path-ext fpe description
- configure filter mac-filter description
- configure service vprn static-route-entry indirect description
- configure bmp station description
- configure filter ipv6-filter entry description
- configure service vprn static-route-entry next-hop description
- configure port ethernet access egress vport description
- configure router interface vrrp description
- configure filter match-list protocol-list description
- configure router ripng description
- configure service vprn interface dhcp description
- configure redundancy multi-chassis peer description
- configure service vprn ripng group neighbor description
- configure service vprn rip description
- configure service sdp binding pw-port description
- configure service vprn static-route-entry black-hole description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface dhcp description
- configure subscriber-mgmt pfcp-association description
- configure subscriber-mgmt group-interface-template description
- configure system persistence subscriber-mgmt description
- configure service vprn l2tp description
- configure service vprn subscriber-interface group-interface pppoe description
- configure service vpls sap ipoe-session description
- configure service vprn redundant-interface spoke-sdp description
- configure service ies subscriber-interface group-interface dhcp description
- configure service ies subscriber-interface group-interface srrp description
- configure router dhcp local-dhcp-server description
- configure subscriber-mgmt rip-policy description
- configure service ies subscriber-interface ipv6 dhcp6 relay description
- configure service ies subscriber-interface group-interface pppoe description
- configure router dhcp6 local-dhcp-server description
- configure service vprn subscriber-interface ipv6 dhcp6 relay description
- configure subscriber-mgmt radius-accounting-policy description
- configure subscriber-mgmt local-user-db description
- configure router dhcp local-dhcp-server pool description
- configure subscriber-mgmt ppp-policy description
- configure subscriber-mgmt sap-template description
- configure system persistence dhcp-server description
- configure router dhcp6 local-dhcp-server pool description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure qos match-list port-list description
- configure system satellite port-template description
- configure service ies interface spoke-sdp eth-cfm mep description
- configure eth-tunnel path description
- configure system satellite local-forward description
- configure system software-repository description
- configure service cpipe endpoint description
- configure router interface eth-cfm mep description
- configure eth-tunnel path eth-cfm mep description
- configure port ethernet eth-cfm mep description
- configure system satellite local-forward sap description
- configure service cpipe description
- configure service ies interface sap eth-cfm mep description
- configure system satellite eth-sat description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
- configure qos policer-control-policy tier arbiter description
- configure card fp ingress access queue-group description
- configure card fp ingress network queue-group description
- configure qos policer-control-policy description
- configure qos post-policer-mapping description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn interface sap ipsec-tunnel description
- configure ipsec client-db client description
- configure ipsec ike-policy description
- configure service vprn aarp-interface spoke-sdp description
- configure ipsec ipsec-transport-mode-profile description
- configure isa tunnel-member-pool description
- configure ipsec tunnel-template description
- configure router pcp-server server description
- configure isa tunnel-group description
- configure ipsec client-db description
- configure application-assurance group policy charging-filter entry description
- configure system persistence nat-port-forwarding description
- configure service ies aarp-interface spoke-sdp description
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure system satellite tdm-sat description
VSR
- configure filter ipv6-exception description
- configure filter ipv6-exception entry description
- configure filter ip-exception description
- configure filter ip-exception entry description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service ies subscriber-interface group-interface sap eth-cfm mep description
7750 SR-7/12/12e
- configure port ethernet egress hs-secondary-shaper description
7750 SR-1, 7750 SR-s, 7950 XRS-20e
- configure system bluetooth device description
7750 SR-1, 7750 SR-s
- configure qos hw-agg-shaper-scheduler-policy description
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
- configure qos fp-resource-policy description
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt gtp peer-profile description
description
Syntax
description short-description-string
no description
Context
[Tree] (config>oam-pm>bin-group description)
[Tree] (config>subscr-mgmt>isa-filter>entry description)
[Tree] (config>router>radius-proxy>server description)
[Tree] (config>aaa>diam>node description)
[Tree] (config>qos>sap-ingress>ip-criteria>entry description)
[Tree] (config>app-assure>group>http-redirect description)
[Tree] (config>service>vpls>wlan-gw description)
[Tree] (config>service>vpls>mesh-sdp description)
[Tree] (config>app-assure>aarp description)
[Tree] (config>router>firewall>domain>prefix description)
[Tree] (config>service>vprn>firewall>domain>prefix description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)
[Tree] (config>subscr-mgmt>sub-ident-pol description)
[Tree] (config>app-assure>group>tcp-validate description)
[Tree] (config>aaa>acct-on-off-grp description)
[Tree] (config>app-assure>group>transit-prefix-policy description)
[Tree] (config>service>nat>firewall-policy description)
[Tree] (config>li>li-filter>li-mac-filter description)
[Tree] (config>router>nat>outside>pool description)
[Tree] (config>qos>sap-ingress>mac-criteria>entry description)
[Tree] (config>service>nat>up-nat-policy description)
[Tree] (config>aaa>radius-script-policy description)
[Tree] (config>service>nat>nat-policy description)
[Tree] (config>app-assure>group>certificate-profile description)
[Tree] (config>aaa>isa-radius-plcy description)
[Tree] (config>app-assure>group>policer description)
[Tree] (config>subscr-mgmt>sub-mcac-policy description)
[Tree] (config>li>li-filter>li-ipv6-filter>entry description)
[Tree] (config>service>vpls>igmp-snooping>mvr description)
[Tree] (config>subscr-mgmt>sub-profile description)
[Tree] (config>app-assure>group>cflowd>collector description)
[Tree] (config>service>mac-list description)
[Tree] (config>service>vprn>twamp-light>reflector description)
[Tree] (config>mcast-mgmt>mcast-rprt-dest description)
[Tree] (config>service>vpls>gsmp>group description)
[Tree] (config>service>vpls description)
[Tree] (config>service>vpls>sap>dhcp description)
[Tree] (config>app-assure>group>statistics>aa-sub description)
[Tree] (config>python>py-policy description)
[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp description)
[Tree] (config>app-assure>group>http-enrich description)
[Tree] (config>qos>sap-egress>policer description)
[Tree] (config>li>li-filter>li-ipv6-filter description)
[Tree] (config>test-oam>link-meas>template description)
[Tree] (config>app-assure>group>policy>app-filter>entry description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw description)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry description)
[Tree] (config>router>twamp-light>reflector>prefix description)
[Tree] (config>qos>sap-egress description)
[Tree] (config>li>li-filter-block-reservation>li-reserved-block description)
[Tree] (config>app-assure>group>policy>app-profile description)
[Tree] (config>qos>network>egress>ipv6-criteria>entry description)
[Tree] (config>router>twamp-light>reflector description)
[Tree] (config>li>log>log-id description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw description)
[Tree] (cfg>qos>qgrps>ing>qgrp description)
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile description)
[Tree] (config>service>vpls>gsmp>group>neighbor description)
[Tree] (config>service>vprn>sub-if>grp-if>wpp description)
[Tree] (config>service>vprn>nat>outside>pool>address-range description)
[Tree] (config>service>ipfix>ipfix-export-policy description)
[Tree] (config>mcast-mgmt>bandwidth-policy description)
[Tree] (config>service>nat>pcp-server-policy description)
[Tree] (config>service>vprn>if>sap>ip-tunnel description)
[Tree] (config>subscr-mgmt>host-lockout-plcy description)
[Tree] (config>app-assure>group>ip-prefix-list description)
[Tree] (config>isa>nat-group description)
[Tree] (config>oam-pm>session description)
[Tree] (config>router>policy-options>policy-statement description)
[Tree] (config>router>radius-server>server description)
[Tree] (config>li>li-filter>li-ip-filter>entry description)
[Tree] (config>system>persistence>application-assurance description)
[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)
[Tree] (config>app-assure>group>session-filter>entry description)
[Tree] (config>app-assure>rad-acct-plcy description)
[Tree] (config>qos>network>egress>ip-criteria>entry description)
[Tree] (config>app-assure>group>policy>custom-protocol description)
[Tree] (config>service>upnp>upnp-policy description)
[Tree] (config>service>dynsvc>ladb>user description)
[Tree] (config>service>nat>nat-classifier description)
[Tree] (config>esa>vm description)
[Tree] (config>app-assure>group>cflowd>direct-export>collector description)
[Tree] (config>router>policy-options>policy-statement>entry description)
[Tree] (config>service>vprn>nat>outside>pool description)
[Tree] (config>app-assure>group>http-notification description)
[Tree] (config>port>ethernet>access>egress description)
[Tree] (config>qos>sap-ingress>policer description)
[Tree] (config>subscr-mgmt>credit-cntrl-plcy description)
[Tree] (config>isa>aa-group description)
[Tree] (config>pw-port description)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry description)
[Tree] (config>app-assure>group>policy>app-grp description)
[Tree] (config>test-oam>twamp>server>prefix description)
[Tree] (config>li>x-interfaces>lics>lic description)
[Tree] (config>isa>wlan-gw-group description)
[Tree] (config>cflowd>collector description)
[Tree] (config>service>vprn>gsmp>group>neighbor description)
[Tree] (config>mirror>mirror-dest description)
[Tree] (config>aaa>route-downloader description)
[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters description)
[Tree] (config>app-assure>group>url-filter>icap>server description)
[Tree] (config>subscr-mgmt>steering-profile description)
[Tree] (config>subscr-mgmt>accu-stats-policy description)
[Tree] (config>app-assure>group>session-filter description)
[Tree] (config>service>vpls>mld-snooping>mvr description)
[Tree] (config>service>nat>nat-classifier>entry description)
[Tree] (cfg>qos>qgrps>ing>qgrp>policer description)
[Tree] (config>qos>sap-ingress description)
[Tree] (config>subscr-mgmt>isa-filter description)
[Tree] (config>subscr-mgmt>isa-policer description)
[Tree] (config>app-assure>group>url-filter description)
[Tree] (config>call-trace>trace-profile description)
[Tree] (config>app-assure>group>event-log>syslog description)
[Tree] (config>app-assure>group>policer>tod-override description)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)
[Tree] (config>app-assure>group>policy>application description)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry description)
[Tree] (config>mirror>mirror-dest>endpoint description)
[Tree] (config>app-assure>group>policy>charging-group description)
[Tree] (config>li>li-filter>li-mac-filter>entry description)
[Tree] (config>app-assure>group>url-list description)
[Tree] (cfg>qos>qgrps>egr>qgrp>policer description)
[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter description)
[Tree] (config>python>python-script description)
[Tree] (config>subscr-mgmt>sla-profile description)
[Tree] (config>subscr-mgmt>authentication-policy description)
[Tree] (config>router>nat>inside>subscriber-id description)
[Tree] (config>macsec>connectivity-association description)
[Tree] (config>app-assure>group description)
[Tree] (config>service>vpls>split-horizon-group description)
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry description)
[Tree] (config>app-assure>group>dns-ip-cache description)
[Tree] (config>saa>test description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle description)
[Tree] (config>service>nat>map-domain>mapping-rule description)
[Tree] (config>app-assure>group>gtp>gtp-filter description)
[Tree] (config>aaa>l2tp-acct-plcy description)
[Tree] (config>subscr-mgmt>pppoe-client-policy description)
[Tree] (config>subscr-mgmt>cat-map>category description)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)
[Tree] (config>service>vprn>sub-if>grp-if>sap description)
[Tree] (config>service>vprn>sub-if>grp-if>srrp description)
[Tree] (config>app-assure>group>policy>app-qos-policy>entry description)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry description)
[Tree] (config>vrrp>policy description)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry description)
[Tree] (config>qos>network description)
[Tree] (config>app-assure>protocol description)
[Tree] (config>service>dynsvc>ladb description)
[Tree] (config>app-assure>group>sctp-filter description)
[Tree] (config>li>li-filter>li-ip-filter description)
[Tree] (config>service>ies>sub-if>grp-if>sap-parameters description)
[Tree] (config>service>vpls>sap description)
[Tree] (config>service>vprn>radius-server>server description)
[Tree] (config>app-assure>group>port-list description)
[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter description)
[Tree] (cfg>qos>qgrps>egr>qgrp description)
[Tree] (config>esa description)
[Tree] (config>service>vprn description)
[Tree] (config>aaa>wpp>portal-groups>portal-group description)
[Tree] (config>app-assure>group>http-error-redirect description)
[Tree] (config>service>vprn>gsmp>group description)
[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt description)
[Tree] (config>mcast-mgmt>multicast-info-policy description)
[Tree] (config>service>vpls>spoke-sdp description)
[Tree] (config>subscr-mgmt>diam-appl-plcy description)
[Tree] (config>qos>network>ingress>ip-criteria>entry description)
[Tree] (config>router>nat>outside>pool>address-range description)
[Tree] (config>aaa>radius-srv-plcy description)
[Tree] (config>service>vprn>sub-if>grp-if>arp-host description)
[Tree] (config>card>fp>ingress>mcast-mgmt description)
[Tree] (config>qos>sap-egress>ip-criteria>entry description)
[Tree] (config>service>vprn>twamp-light>reflector>prefix description)
[Tree] (config>router>vrgw>lanext description)
[Tree] (config>subscr-mgmt>mld-policy description)
[Tree] (config>oam-pm>streaming>delay-template description)
[Tree] (config>app-assure>group>url-filter>web-service>profile description)
[Tree] (config>service>vprn>radius-proxy>server description)
[Tree] (config>app-assure>group>policy>transit-ip-policy description)
[Tree] (config>subscr-mgmt>isa-svc-chain>evpn description)
[Tree] (config>service>dynsvc>policy description)
[Tree] (config>subscr-mgmt>cat-map description)
[Tree] (config>isa description)
[Tree] (config>subscr-mgmt>pim-policy description)
[Tree] (config>subscr-mgmt>host-tracking description)
[Tree] (config>subscr-mgmt>ipoe-session-policy description)
Full Context
configure oam-pm bin-group description
configure subscriber-mgmt isa-filter entry description
configure router radius-proxy server description
configure aaa diameter node description
configure qos sap-ingress ip-criteria entry description
configure application-assurance group http-redirect description
configure service vpls wlan-gw description
configure service vpls mesh-sdp description
configure application-assurance aarp description
configure router firewall domain prefix description
configure service vprn firewall domain prefix description
configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description
configure subscriber-mgmt sub-ident-policy description
configure application-assurance group tcp-validate description
configure aaa acct-on-off-group description
configure application-assurance group transit-prefix-policy description
configure service nat firewall-policy description
configure li li-filter li-mac-filter description
configure router nat outside pool description
configure qos sap-ingress mac-criteria entry description
configure service nat up-nat-policy description
configure aaa radius-script-policy description
configure service nat nat-policy description
configure application-assurance group certificate-profile description
configure aaa isa-radius-policy description
configure application-assurance group policer description
configure subscriber-mgmt sub-mcac-policy description
configure li li-filter li-ipv6-filter entry description
configure service vpls igmp-snooping mvr description
configure subscriber-mgmt sub-profile description
configure application-assurance group cflowd collector description
configure service mac-list description
configure service vprn twamp-light reflector description
configure mcast-management mcast-reporting-dest description
configure service vpls gsmp group description
configure service vpls description
configure service vpls sap dhcp description
configure application-assurance group statistics aa-sub description
configure python python-policy description
configure service vprn ip-mirror-interface spoke-sdp description
configure application-assurance group http-enrich description
configure qos sap-egress policer description
configure li li-filter li-ipv6-filter description
configure test-oam link-measurement measurement-template description
configure application-assurance group policy app-filter entry description
configure service ies subscriber-interface group-interface wlan-gw description
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description
configure router twamp-light reflector prefix description
configure qos sap-egress description
configure li li-filter-block-reservation li-reserved-block description
configure application-assurance group policy app-profile description
configure qos network egress ipv6-criteria entry description
configure router twamp-light reflector description
configure li log log-id description
configure service vprn subscriber-interface group-interface wlan-gw description
configure qos queue-group-templates ingress queue-group description
configure subscriber-mgmt vrgw brg brg-profile description
configure service vpls gsmp group neighbor description
configure service vprn subscriber-interface group-interface wpp description
configure service vprn nat outside pool address-range description
configure service ipfix ipfix-export-policy description
configure mcast-management bandwidth-policy description
configure service nat pcp-server-policy description
configure service vprn interface sap ip-tunnel description
configure subscriber-mgmt host-lockout-policy description
configure application-assurance group ip-prefix-list description
configure isa nat-group description
configure oam-pm session description
configure router policy-options policy-statement description
configure router radius-server server description
configure li li-filter li-ip-filter entry description
configure system persistence application-assurance description
configure service vprn subscriber-interface group-interface ipoe-session description
configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext description
configure application-assurance group session-filter entry description
configure application-assurance radius-accounting-policy description
configure qos network egress ip-criteria entry description
configure application-assurance group policy custom-protocol description
configure service upnp upnp-policy description
configure service dynamic-services local-auth-db user-name description
configure service nat nat-classifier description
configure esa vm description
configure application-assurance group cflowd direct-export collector description
configure router policy-options policy-statement entry description
configure service vprn nat outside pool description
configure application-assurance group http-notification description
configure port ethernet access egress description
configure qos sap-ingress policer description
configure subscriber-mgmt credit-control-policy description
configure isa aa-group description
configure pw-port description
configure qos sap-ingress ipv6-criteria entry description
configure application-assurance group policy app-group description
configure test-oam twamp server prefix description
configure li x-interfaces lics lic description
configure isa wlan-gw-group description
configure cflowd collector description
configure service vprn gsmp group neighbor description
configure mirror mirror-dest description
configure aaa route-downloader description
configure service vprn subscriber-interface group-interface sap-parameters description
configure application-assurance group url-filter icap server description
configure subscriber-mgmt steering-profile description
configure subscriber-mgmt accu-stats-policy description
configure application-assurance group session-filter description
configure service vpls mld-snooping mvr description
configure service nat nat-classifier entry description
configure qos queue-group-templates ingress queue-group policer description
configure qos sap-ingress description
configure subscriber-mgmt isa-filter description
configure subscriber-mgmt isa-policer description
configure application-assurance group url-filter description
configure call-trace trace-profile description
configure application-assurance group event-log syslog description
configure application-assurance group policer tod-override description
configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description
configure application-assurance group policy application description
configure qos network ingress ipv6-criteria entry description
configure mirror mirror-dest endpoint description
configure application-assurance group policy charging-group description
configure li li-filter li-mac-filter entry description
configure application-assurance group url-list description
configure qos queue-group-templates egress queue-group policer description
configure application-assurance group policy app-qos-policy entry action url-filter description
configure python python-script description
configure subscriber-mgmt sla-profile description
configure subscriber-mgmt authentication-policy description
configure router nat inside subscriber-id description
configure macsec connectivity-association description
configure application-assurance group description
configure service vpls split-horizon-group description
configure subscriber-mgmt isa-filter ipv6 entry description
configure application-assurance group dns-ip-cache description
configure saa test description
configure mcast-management multicast-info-policy bundle description
configure service nat map-domain mapping-rule description
configure application-assurance group gtp gtp-filter description
configure aaa l2tp-accounting-policy description
configure subscriber-mgmt pppoe-client-policy description
configure subscriber-mgmt category-map category description
configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext description
configure service vprn subscriber-interface group-interface sap description
configure service vprn subscriber-interface group-interface srrp description
configure application-assurance group policy app-qos-policy entry description
configure qos sap-egress ipv6-criteria entry description
configure vrrp policy description
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description
configure qos network description
configure application-assurance protocol description
configure service dynamic-services local-auth-db description
configure application-assurance group sctp-filter description
configure li li-filter li-ip-filter description
configure service ies subscriber-interface group-interface sap-parameters description
configure service vpls sap description
configure service vprn radius-server server description
configure application-assurance group port-list description
configure subscriber-mgmt isa-service-chaining vas-filter description
configure qos queue-group-templates egress queue-group description
configure esa description
configure service vprn description
configure aaa wpp portal-groups portal-group description
configure application-assurance group http-error-redirect description
configure service vprn gsmp group description
configure service vprn subscriber-interface group-interface sap sub-sla-mgmt description
configure mcast-management multicast-info-policy description
configure service vpls spoke-sdp description
configure subscriber-mgmt diameter-application-policy description
configure qos network ingress ip-criteria entry description
configure router nat outside pool address-range description
configure aaa radius-server-policy description
configure service vprn subscriber-interface group-interface arp-host description
configure card fp ingress mcast-management description
configure qos sap-egress ip-criteria entry description
configure service vprn twamp-light reflector prefix description
configure router vrgw lanext description
configure subscriber-mgmt mld-policy description
configure oam-pm streaming delay-template description
configure application-assurance group url-filter web-service profile description
configure service vprn radius-proxy server description
configure application-assurance group policy transit-ip-policy description
configure subscriber-mgmt isa-service-chaining evpn description
configure service dynamic-services dynamic-services-policy description
configure subscriber-mgmt category-map description
configure isa description
configure subscriber-mgmt pim-policy description
configure subscriber-mgmt host-tracking description
configure subscriber-mgmt ipoe-session-policy description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- short-description-string
-
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
- configure qos network egress ip-criteria entry description
- configure service vpls mesh-sdp description
- configure qos network ingress ipv6-criteria entry description
- configure service vprn gsmp group neighbor description
- configure li li-filter li-ip-filter entry description
- configure saa test description
- configure service vpls sap description
- configure service vpls gsmp group neighbor description
- configure qos queue-group-templates egress queue-group description
- configure router policy-options policy-statement entry description
- configure port ethernet access egress description
- configure qos sap-egress ipv6-criteria entry description
- configure service vpls description
- configure li li-filter li-ipv6-filter description
- configure qos network ingress ip-criteria entry description
- configure mcast-management multicast-info-policy bundle description
- configure service vpls gsmp group description
- configure li li-filter li-ipv6-filter entry description
- configure mirror mirror-dest description
- configure li log log-id description
- configure service vprn gsmp group description
- configure vrrp policy description
- configure li li-filter li-mac-filter entry description
- configure li li-filter li-mac-filter description
- configure service vpls igmp-snooping mvr description
- configure mirror mirror-dest endpoint description
- configure qos network description
- configure service ipfix ipfix-export-policy description
- configure qos sap-ingress description
- configure macsec connectivity-association description
- configure cflowd collector description
- configure service mac-list description
- configure qos sap-ingress ip-criteria entry description
- configure qos sap-ingress ipv6-criteria entry description
- configure service vpls split-horizon-group description
- configure service vpls mld-snooping mvr description
- configure qos queue-group-templates ingress queue-group description
- configure pw-port description
- configure service vpls spoke-sdp description
- configure qos sap-ingress mac-criteria entry description
- configure service vprn ip-mirror-interface spoke-sdp description
- configure router policy-options policy-statement description
- configure li li-filter li-ip-filter description
- configure python python-policy description
- configure qos network egress ipv6-criteria entry description
- configure oam-pm session description
- configure qos sap-egress description
- configure python python-script description
- configure qos sap-egress ip-criteria entry description
- configure service vprn description
- configure oam-pm bin-group description
- configure service vprn interface sap ip-tunnel description
- configure mcast-management mcast-reporting-dest description
- configure service vpls sap dhcp description
- configure mcast-management multicast-info-policy description
- configure li li-filter-block-reservation li-reserved-block description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface srrp description
- configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description
- configure subscriber-mgmt host-lockout-policy description
- configure router radius-server server description
- configure subscriber-mgmt category-map category description
- configure service vprn subscriber-interface group-interface sap description
- configure aaa radius-script-policy description
- configure service vprn subscriber-interface group-interface arp-host description
- configure aaa acct-on-off-group description
- configure subscriber-mgmt diameter-application-policy description
- configure subscriber-mgmt vrgw brg brg-profile description
- configure subscriber-mgmt isa-policer description
- configure service vprn subscriber-interface group-interface sap sub-sla-mgmt description
- configure service dynamic-services local-auth-db description
- configure service dynamic-services local-auth-db user-name description
- configure subscriber-mgmt authentication-policy description
- configure service vprn radius-proxy server description
- configure subscriber-mgmt sub-profile description
- configure subscriber-mgmt isa-filter description
- configure subscriber-mgmt sub-ident-policy description
- configure subscriber-mgmt category-map description
- configure aaa diameter node description
- configure subscriber-mgmt mld-policy description
- configure aaa wpp portal-groups portal-group description
- configure subscriber-mgmt steering-profile description
- configure subscriber-mgmt sla-profile description
- configure service dynamic-services dynamic-services-policy description
- configure subscriber-mgmt isa-filter ipv6 entry description
- configure subscriber-mgmt pim-policy description
- configure subscriber-mgmt ipoe-session-policy description
- configure subscriber-mgmt isa-filter entry description
- configure aaa l2tp-accounting-policy description
- configure aaa route-downloader description
- configure service vprn subscriber-interface group-interface wpp description
- configure subscriber-mgmt credit-control-policy description
- configure service vprn subscriber-interface group-interface ipoe-session description
- configure service vprn radius-server server description
- configure subscriber-mgmt accu-stats-policy description
- configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description
- configure aaa radius-server-policy description
- configure router radius-proxy server description
- configure call-trace trace-profile description
- configure subscriber-mgmt pppoe-client-policy description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure application-assurance group http-notification description
- configure application-assurance group policy application description
- configure application-assurance protocol description
- configure application-assurance group tcp-validate description
- configure system persistence application-assurance description
- configure service nat nat-policy description
- configure application-assurance group certificate-profile description
- configure application-assurance group transit-prefix-policy description
- configure router nat outside pool address-range description
- configure application-assurance group policer description
- configure application-assurance group cflowd collector description
- configure application-assurance group url-filter description
- configure router nat outside pool description
- configure application-assurance group cflowd direct-export collector description
- configure application-assurance group dns-ip-cache description
- configure application-assurance group url-filter web-service profile description
- configure application-assurance group policy app-qos-policy entry description
- configure application-assurance group event-log syslog description
- configure service vprn nat outside pool address-range description
- configure service nat pcp-server-policy description
- configure application-assurance group description
- configure service vprn nat outside pool description
- configure application-assurance group session-filter description
- configure service nat nat-classifier description
- configure application-assurance group policer tod-override description
- configure service nat up-nat-policy description
- configure application-assurance group sctp-filter description
- configure application-assurance group url-filter icap server description
- configure application-assurance group policy custom-protocol description
- configure subscriber-mgmt isa-service-chaining vas-filter description
- configure application-assurance group http-enrich description
- configure isa description
- configure application-assurance group url-list description
- configure application-assurance group statistics aa-sub description
- configure service upnp upnp-policy description
- configure application-assurance group policy app-profile description
- configure application-assurance group http-error-redirect description
- configure application-assurance group http-redirect description
- configure application-assurance group ip-prefix-list description
- configure application-assurance group policy app-qos-policy entry action url-filter description
- configure application-assurance group port-list description
- configure application-assurance group policy app-group description
- configure subscriber-mgmt isa-service-chaining evpn description
- configure application-assurance aarp description
- configure isa nat-group description
- configure application-assurance group gtp gtp-filter description
- configure application-assurance group session-filter entry description
- configure application-assurance radius-accounting-policy description
- configure application-assurance group policy charging-group description
- configure aaa isa-radius-policy description
- configure application-assurance group policy app-filter entry description
- configure service nat nat-classifier entry description
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap-parameters description
- configure service vprn subscriber-interface group-interface sap-parameters description
- configure service nat firewall-policy description
- configure isa wlan-gw-group description
- configure service vprn subscriber-interface group-interface wlan-gw description
- configure router vrgw lanext description
- configure service vpls wlan-gw description
- configure router firewall domain prefix description
- configure service ies subscriber-interface group-interface wlan-gw description
- configure service vprn firewall domain prefix description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure subscriber-mgmt sub-mcac-policy description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure test-oam twamp server prefix description
- configure oam-pm streaming delay-template description
- configure service vprn twamp-light reflector prefix description
- configure li x-interfaces lics lic description
- configure router twamp-light reflector description
- configure router twamp-light reflector prefix description
- configure test-oam link-measurement measurement-template description
- configure service vprn twamp-light reflector description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR
- configure qos queue-group-templates ingress queue-group policer description
- configure qos sap-egress policer description
- configure qos queue-group-templates egress queue-group policer description
- configure qos sap-ingress policer description
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
- configure mcast-management bandwidth-policy description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s
- configure esa description
- configure esa vm description
VSR
- configure service nat map-domain mapping-rule description
description
Syntax
description short-description-string
no description
Context
[Tree] (config>system>security>pki>ca-profile description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video description)
[Tree] (config>log>event-handling>handler>action-list>entry description)
[Tree] (config>test-oam>sath>svc-test description)
[Tree] (config>isa>video-group description)
[Tree] (config>service>pw-template>split-horizon-group description)
[Tree] (config>qos>slope-policy description)
[Tree] (config>test-oam>sath>accept-crit-tmpl description)
[Tree] (config>log>accounting-policy description)
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry description)
[Tree] (config>test-oam>sath>svc-test>svc-stream description)
[Tree] (config>service>mrp>mrp-policy>entry description)
[Tree] (config>sys>security>cpm-filter>ipv6-filter>entry description)
[Tree] (config>log>event-handling>handler description)
[Tree] (config>service>pw-template description)
[Tree] (config>service>mrp>mrp-policy description)
[Tree] (config>service>vprn>video-interface>channel description)
[Tree] (config>qos>hs-port-pool-policy description)
[Tree] (config>qos>hs-pool-policy description)
[Tree] (config>connection-profile-vlan description)
[Tree] (config>service>vprn>video-interface description)
[Tree] (config>log>log-id description)
[Tree] (config>system>telemetry>persistent-subscriptions>subscription description)
[Tree] (config>system>security>user>public-keys>ecdsa>ecdsa-key description)
[Tree] (config>system>telemetry>sensor-groups>sensor-group description)
[Tree] (config>log>event-trigger>event>trigger-entry description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video description)
[Tree] (config>system>security>keychain description)
[Tree] (config>service>cust>multi-service-site description)
[Tree] (config>system>security>user>public-keys>rsa>rsa-key description)
[Tree] (config>qos>shared-queue description)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry description)
[Tree] (config>service>ies>video-interface description)
[Tree] (config>log>syslog description)
[Tree] (config>eth-ring>path description)
[Tree] (config>qos>port-scheduler-policy description)
[Tree] (config>system>security>keychain>direction>uni>send>entry description)
[Tree] (config>qos>hs-scheduler-policy description)
[Tree] (config>qos>scheduler-policy>tier>scheduler description)
[Tree] (config>grp-encryp>encryp-keygrp description)
[Tree] (config>sys>security>cpu-protection>policy description)
[Tree] (config>system>security>dist-cpu-protection>policy description)
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry description)
[Tree] (config>qos>scheduler-policy description)
[Tree] (config>service>ies>video-interface>channel description)
[Tree] (config>log>filter description)
[Tree] (config>qos>adv-config-policy description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video>analyzer description)
[Tree] (config>log>snmp-trap-group description)
[Tree] (config>qos>hs-attachment-policy description)
[Tree] (config>log>event-trigger>event description)
[Tree] (config>service>sdp description)
[Tree] (config>sys>security>cpm-filter>ip-filter>entry description)
[Tree] (config>log>filter>entry description)
[Tree] (config>eth-ring>path>eth-cfm>mep description)
[Tree] (config>system>security>keychain>direction>bi>entry description)
[Tree] (config>eth-ring description)
[Tree] (config>service>cust description)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video description)
[Tree] (config>system>telemetry>destination-group description)
[Tree] (cfg>sys>sec>cpm>mac-filter>entry description)
[Tree] (config>log>file-id description)
[Tree] (config>system>security>keychain>direction>uni>receive>entry description)
Full Context
configure system security pki ca-profile description
configure mcast-management multicast-info-policy bundle channel source-override video description
configure log event-handling handler action-list entry description
configure test-oam service-activation-testhead service-test description
configure isa video-group description
configure service pw-template split-horizon-group description
configure qos slope-policy description
configure test-oam service-activation-testhead acceptance-criteria-template description
configure log accounting-policy description
configure system security management-access-filter ip-filter entry description
configure test-oam service-activation-testhead service-test service-stream description
configure service mrp mrp-policy entry description
configure system security cpm-filter ipv6-filter entry description
configure log event-handling handler description
configure service pw-template description
configure service mrp mrp-policy description
configure service vprn video-interface channel description
configure qos hs-port-pool-policy description
configure qos hs-pool-policy description
configure connection-profile-vlan description
configure service vprn video-interface description
configure log log-id description
configure system telemetry persistent-subscriptions subscription description
configure system security user public-keys ecdsa ecdsa-key description
configure system telemetry sensor-groups sensor-group description
configure log event-trigger event trigger-entry description
configure mcast-management multicast-info-policy bundle video description
configure system security keychain description
configure service customer multi-service-site description
configure system security user public-keys rsa rsa-key description
configure qos shared-queue description
configure system security management-access-filter ipv6-filter entry description
configure service ies video-interface description
configure log syslog description
configure eth-ring path description
configure qos port-scheduler-policy description
configure system security keychain direction uni send entry description
configure qos hs-scheduler-policy description
configure qos scheduler-policy tier scheduler description
configure group-encryption encryption-keygroup description
configure system security cpu-protection policy description
configure system security dist-cpu-protection policy description
configure system security management-access-filter mac-filter entry description
configure qos scheduler-policy description
configure service ies video-interface channel description
configure log filter description
configure qos adv-config-policy description
configure mcast-management multicast-info-policy bundle channel video analyzer description
configure log snmp-trap-group description
configure qos hs-attachment-policy description
configure log event-trigger event description
configure service sdp description
configure system security cpm-filter ip-filter entry description
configure log filter entry description
configure eth-ring path eth-cfm mep description
configure system security keychain direction bi entry description
configure eth-ring description
configure service customer description
configure mcast-management multicast-info-policy bundle channel video description
configure system telemetry destination-group description
configure system security cpm-filter mac-filter entry description
configure log file-id description
configure system security keychain direction uni receive entry description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
No description is associated with the configuration context.
Parameters
- short-description-string
-
Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
- configure log filter description
- configure log event-handling handler action-list entry description
- configure system security dist-cpu-protection policy description
- configure service mrp mrp-policy description
- configure system security user public-keys ecdsa ecdsa-key description
- configure log log-id description
- configure connection-profile-vlan description
- configure qos adv-config-policy description
- configure qos slope-policy description
- configure system security user public-keys rsa rsa-key description
- configure log event-handling handler description
- configure system telemetry persistent-subscriptions subscription description
- configure service sdp description
- configure log filter entry description
- configure log accounting-policy description
- configure log syslog description
- configure system security management-access-filter ip-filter entry description
- configure system telemetry sensor-groups sensor-group description
- configure system security keychain direction bi entry description
- configure system security management-access-filter mac-filter entry description
- configure qos shared-queue description
- configure qos port-scheduler-policy description
- configure qos scheduler-policy tier scheduler description
- configure service customer multi-service-site description
- configure system security keychain direction uni receive entry description
- configure service pw-template description
- configure log file-id description
- configure system telemetry destination-group description
- configure system security pki ca-profile description
- configure service pw-template split-horizon-group description
- configure log event-trigger event description
- configure service customer description
- configure system security management-access-filter ipv6-filter entry description
- configure service mrp mrp-policy entry description
- configure log event-trigger event trigger-entry description
- configure qos scheduler-policy description
- configure system security keychain direction uni send entry description
- configure system security keychain description
- configure log snmp-trap-group description
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
- configure mcast-management multicast-info-policy bundle channel video description
- configure service ies video-interface channel description
- configure service ies video-interface description
- configure mcast-management multicast-info-policy bundle channel video analyzer description
- configure isa video-group description
- configure mcast-management multicast-info-policy bundle channel source-override video description
- configure mcast-management multicast-info-policy bundle video description
- configure service vprn video-interface description
- configure service vprn video-interface channel description
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
- configure test-oam service-activation-testhead service-test service-stream description
- configure test-oam service-activation-testhead acceptance-criteria-template description
- configure test-oam service-activation-testhead service-test description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure system security cpm-filter mac-filter entry description
- configure system security cpm-filter ip-filter entry description
- configure system security cpm-filter ipv6-filter entry description
- configure eth-ring path description
- configure eth-ring path eth-cfm mep description
- configure eth-ring description
7750 SR-7/12/12e
- configure qos hs-port-pool-policy description
- configure qos hs-scheduler-policy description
- configure qos hs-attachment-policy description
- configure qos hs-pool-policy description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure group-encryption encryption-keygroup description
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
- configure system security cpu-protection policy description
description
Syntax
description medium-description-string
no description
Context
[Tree] (config>port>tdm>e3 description)
[Tree] (config>service>epipe>sap description)
[Tree] (config>port>tdm>ds1>channel-group description)
[Tree] (config>service>ies>aarp-interface description)
[Tree] (config>port>tdm>e1>channel-group description)
[Tree] (config>service>ies>interface>sap description)
[Tree] (config>service>ipipe>sap description)
[Tree] (config>port>sonet-sdh>path description)
[Tree] (config>service>ies>sub-if>grp-if>sap description)
[Tree] (config>port>tdm>ds3 description)
[Tree] (config>service>cpipe>sap description)
Full Context
configure port tdm e3 description
configure service epipe sap description
configure port tdm ds1 channel-group description
configure service ies aarp-interface description
configure port tdm e1 channel-group description
configure service ies interface sap description
configure service ipipe sap description
configure port sonet-sdh path description
configure service ies subscriber-interface group-interface sap description
configure port tdm ds3 description
configure service cpipe sap description
Description
This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- medium-description-string
-
Specifies the description character string. Allowed values are any string, up to 160 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure port tdm ds1 channel-group description
- configure port tdm e3 description
- configure port tdm e1 channel-group description
- configure port tdm ds3 description
All
- configure service epipe sap description
- configure service ipipe sap description
- configure service ies interface sap description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies aarp-interface description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure port sonet-sdh path description
- configure service cpipe sap description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap description
description
Syntax
description medium-description-string
no description
Context
[Tree] (config>service>ies>aa-interface>sap description)
[Tree] (config>service>vprn>aa-interface>sap description)
Full Context
configure service ies aa-interface sap description
configure service vprn aa-interface sap description
Description
This command creates a text description which is stored in the configuration file to help identify the content of the entity.
The no form of this command removes the string from the configuration.
Parameters
- medium-description-string
-
Specifies the text string to describe the entity, up to 160 characters. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
description
Syntax
description long-description-string
no description
Context
[Tree] (config>service>vprn>isis>link-group description)
[Tree] (config>router>isis>link-group description)
[Tree] (config>open-flow>of-switch description)
Full Context
configure service vprn isis link-group description
configure router isis link-group description
configure open-flow of-switch description
Description
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Default
no description
Parameters
- long-description-string
-
Specifies the description character string. Allowed values are any string, up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
description
Syntax
description long-description-string
no description
Context
[Tree] (config>router>if description)
[Tree] (config>service>ies>interface description)
[Tree] (config>service>ies>aa-interface description)
[Tree] (config>service>vprn>nw-if description)
[Tree] (config>service>vprn>aarp-interface description)
[Tree] (config>port description)
[Tree] (config>service>ies>redundant-interface description)
[Tree] (config>service>vpls>interface description)
[Tree] (config>service>ies>sub-if>grp-if description)
[Tree] (config>service>vprn>sub-if>grp-if description)
[Tree] (config>service>vpls>sap>dhcp6 description)
[Tree] (config>lag description)
[Tree] (config>service>vprn>ip-mirror-interface description)
[Tree] (config>service>vprn>subscriber-interface description)
[Tree] (config>service>vprn>red-if description)
[Tree] (config>service>vprn>if description)
[Tree] (config>service>ies>sub-if description)
[Tree] (config>service>vprn>aa-interface description)
Full Context
configure router interface description
configure service ies interface description
configure service ies aa-interface description
configure service vprn network-interface description
configure service vprn aarp-interface description
configure port description
configure service ies redundant-interface description
configure service vpls interface description
configure service ies subscriber-interface group-interface description
configure service vprn subscriber-interface group-interface description
configure service vpls sap dhcp6 description
configure lag description
configure service vprn ip-mirror-interface description
configure service vprn subscriber-interface description
configure service vprn redundant-interface description
configure service vprn interface description
configure service ies subscriber-interface description
configure service vprn aa-interface description
Description
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the content in the configuration file.
The no form of this command removes the string from the configuration.
Parameters
- long-description-string
-
Specifies the description character string. Allowed values are any string up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
- configure service vprn network-interface description
- configure lag description
- configure service vpls sap dhcp6 description
- configure service vprn ip-mirror-interface description
- configure router interface description
- configure service ies interface description
- configure port description
- configure service vpls interface description
- configure service vprn interface description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn aarp-interface description
- configure service ies aa-interface description
- configure service vprn aa-interface description
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface description
- configure service vprn redundant-interface description
- configure service ies subscriber-interface description
- configure service ies subscriber-interface group-interface description
- configure service vprn subscriber-interface description
- configure service ies redundant-interface description
description
Syntax
description medium-description-string
no description
Context
[Tree] (config>eth-tunnel description)
Full Context
configure eth-tunnel description
Description
This command adds a text description for the eth-tunnel.
The no form of this command removes the text description.
Default
Eth-tunnel
Parameters
- medium-description-string
-
Specifies the text description up to 160 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
description
Syntax
description description-string
no description
Context
[Tree] (config>subscr-mgmt>up-resiliency>fsg-template description)
[Tree] (config>port-policy description)
[Tree] (config>isa>lns-group description)
Full Context
configure subscriber-mgmt up-resiliency fate-sharing-group-template description
configure port-policy description
configure isa lns-group description
Description
This command creates a text description which is stored in the configuration file to help identify the content of the entity.
The no form of the command removes the string from the configuration.
Parameters
- string
-
Specifies the description character string. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on.), the entire string must be enclosed within double quotes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt up-resiliency fate-sharing-group-template description
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure isa lns-group description
- configure port-policy description
description
Syntax
[no] description
Context
[Tree] (config>service>nat>pcp-server-policy>option description)
Full Context
configure service nat pcp-server-policy option description
Description
This command enables/disables support for the description option.
Default
no description
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
description
Syntax
description description-string
no description
Context
[Tree] (config>bfd>seamless-bfd>reflector description)
Full Context
configure bfd seamless-bfd reflector description
Description
This command specifies a description of a S-BFD reflector.
Parameters
- description-string
-
Specifies the S-BFD reflector description.
Platforms
All
description
Syntax
description description-string
no description
Context
[Tree] (config>system>alarm-contact-input description)
Full Context
configure system alarm-contact-input description
Description
This command configures a text description of an alarm contact input pin. The description is stored in the CLI configuration file. It indicates the usage or attribute of the pin, and helps the user to identify the purpose of the pin. The description is included in the log event when the pin changes state.
The no form of this command reverts the description string to the default.
Parameters
- description-string
-
Specifies a printable character string, up to 80 characters.
Platforms
7750 SR-a
designated-role
designated-role
Syntax
designated-role {standby | active}
no designated-role
Context
[Tree] (config>redundancy>multi-chassis>ipsec-domain designated-role)
Full Context
configure redundancy multi-chassis ipsec-domain designated-role
Description
This command sets the designated role for the tunnel group in the IPsec domain.
The no form of this command reverts to the default value.
Default
designated-role standby
Parameters
- standby
-
Sets the designated role to standby.
- active
-
Sets the designated role to active.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dest-class
dest-class
Syntax
dest-class dest-class
no dest-class
Context
[Tree] (config>router>policy-options>policy-statement>default-action dest-class)
[Tree] (config>router>policy-options>policy-statement>entry dest-class)
Full Context
configure router policy-options policy-statement default-action dest-class
configure router policy-options policy-statement entry dest-class
Description
This command specifies the policy accounting destination class index to associate with matched routes.
Default
no dest-class
Parameters
- dest-class
-
Specifies the destination class.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
- configure router policy-options policy-statement default-action dest-class
All
- configure router policy-options policy-statement entry dest-class
dest-global-id
dest-global-id
Syntax
dest-global-id dest-global-id
no dest-global-id
Context
[Tree] (config>router>mpls>lsp dest-global-id)
Full Context
configure router mpls lsp dest-global-id
Description
This optional command configures the MPLS-TP Global ID of the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. Global ID values of 0 indicate that the local node’s configured global ID is used. If the local global-id is 0, then the dest-global-id must also be 0. The dest-global-id cannot be changed if an LSP is in use by an SDP.
Default
dest-global-id 0
Parameters
- dest-global-id
-
Specifies the destination global ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dest-ip
dest-ip
Syntax
[no] dest-ip ip-address
Context
[Tree] (config>service>vprn>if>sap>ip-tunnel dest-ip)
[Tree] (config>service>ies>if>sap>ip-tunnel dest-ip)
[Tree] (config>service>vprn>sap>ipsec-tunnel dest-ip)
Full Context
configure service vprn interface sap ip-tunnel dest-ip
configure service ies interface sap ip-tunnel dest-ip
configure service vprn sap ipsec-tunnel dest-ip
Description
This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).
Unnumbered interfaces are not supported.
The no form of this command deletes the destination IP of the tunnel.
Parameters
- ip-address
-
Specifies the private IPv4 or IPv6 address of the remote IP tunnel endpoint. If this remote IP address is not within the subnet of the IP interface associated with the tunnel then the tunnel will not come up.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dest-ip-addr
dest-ip-addr
Syntax
dest-ip-addr ip-address
no dest-ip-addr
Context
[Tree] (config>mcast-mgmt>mcast-rprt-dest dest-ip-addr)
Full Context
configure mcast-management mcast-reporting-dest dest-ip-addr
Description
This command specifies the IP address of the external node to which IGMP events are exported. The destination IP address can only be reachable from the global routing table (no vrf access).
The no form of this command removes the destination address from the configuration.
Parameters
- ip-addr
-
Specifies the IP address of the multicast reporting destination.
Platforms
All
dest-mac
dest-mac
Syntax
dest-mac {nearest-bridge | nearest-non-tpmr | nearest-customer}
Context
[Tree] (config>port>ethernet>lldp dest-mac)
Full Context
configure port ethernet lldp dest-mac
Description
This command configures destination MAC address parameters.
Default
dest-mac nearest-bridge
Parameters
- nearest-bridge
-
Specifies to use the nearest bridge.
- nearest-non-tpmr
-
Specifies to use the nearest non-Two-Port MAC Relay (TPMR).
- nearest-customer
-
Specifies to use the nearest customer.
Platforms
All
dest-mac
Syntax
dest-mac ieee-address
no dest-mac
Context
[Tree] (config>oam-pm>session>ethernet dest-mac)
Full Context
configure oam-pm session ethernet dest-mac
Description
This command defines the destination MAC address of the peer MEP and sets the destination MAC address in the layer two header to match. This must be a unicast address.
The no form of this command removes session parameter.
Parameters
- ieee-address
-
Specifies the Layer 2 unicast MAC address of the destination MEP.
Platforms
All
dest-mac-address
dest-mac-address
Syntax
dest-mac-address mac-address [create]
no dest-mac-address mac-address
Context
[Tree] (config>macsec>mac-policy dest-mac-address)
Full Context
configure macsec mac-policy dest-mac-address
Description
This command specifies the destination MAC address.
The no form of this command removes the MAC address.
Parameters
- mac-address
-
Specifies the value of the MAC address policy.
- create
-
Mandatory to create the configuration.
Platforms
All
dest-mac-rewrite
dest-mac-rewrite
Syntax
dest-mac-rewrite ieee-address
no dest-mac-rewrite
Context
[Tree] (config>service>vpls>sap>egress dest-mac-rewrite)
Full Context
configure service vpls sap egress dest-mac-rewrite
Description
This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.
The no form disables the option.
Default
no dest-mac-rewrite
Parameters
- ieee-address
-
Specifies the MAC address
Platforms
All
dest-realm-learning
dest-realm-learning
Syntax
[no] dest-realm-learning
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gy dest-realm-learning)
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx dest-realm-learning)
Full Context
configure subscriber-mgmt diameter-application-policy gy dest-realm-learning
configure subscriber-mgmt diameter-application-policy gx dest-realm-learning
Description
This command configures destination realm learning that is used in outgoing Gx and Gy Credit Control Request (CCR) messages. Destination realm is a mandatory configuration parameter.
The configured destination realm is always used in the initial CCR-I message. The consecutive request message of a Gx or Gy session can use the destination realm as learned from replies within a DIAMETER session (if learning is enabled), or they can ignore the realm from the reply and always use the configured destination realm in Gx and Gy request messages (learning is disabled).
The no form of this command ignores the realm from the reply.
Default
dest-realm-learning
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dest-tunnel-number
dest-tunnel-number
Syntax
dest-tunnel-number dest-tunnel-number
no dest-tunnel-number
Context
[Tree] (config>router>mpls>lsp dest-tunnel-number)
Full Context
configure router mpls lsp dest-tunnel-number
Description
This optional command configures the MPLS-TP tunnel number of the LSP at the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. If it is not entered, then the system will take the dest-tunnel-number to be the same as the src-tunnel-num for the LSP.
Default
The default value is the configured src-tunnel-num.
Parameters
- dest-tunnel-number
-
Specifies the destination tunnel number.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dest-udp-port
dest-udp-port
Syntax
dest-udp-port udp-port-number
no dest-udp-port
Context
[Tree] (config>oam-pm>session>ip dest-udp-port)
Full Context
configure oam-pm session ip dest-udp-port
Description
This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.
The no form of this command removes the destination UDP port setting.
Parameters
- udp-port-number
-
Specifies the UDP source port.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dest-udp-port
Syntax
dest-udp-port port-number
Context
[Tree] (config>test-oam>link-meas>template>twl dest-udp-port)
Full Context
configure test-oam link-measurement measurement-template twamp-light dest-udp-port
Description
This command configures the destination UDP port used by the link measurement tests.
Default
dest-udp-port 862
Parameters
- port-number
-
Specifies the destination UDP port copied into the UDP header of each Echo request packet launched for each link measurement test belonging to the specified template.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
destination
destination
Syntax
destination ip-address
no destination
Context
[Tree] (config>oam-pm>session>ip destination)
Full Context
configure oam-pm session ip destination
Description
This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.
The no form of this command removes the destination parameters.
Parameters
- ip-address
-
Specifies the IP address of the IP peer to which the packet is directed.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
destination
Syntax
destination ip-address [create]
no destination ip-address
Context
[Tree] (config>filter>redirect-policy destination)
Full Context
configure filter redirect-policy destination
Description
This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.
The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.
Default
no destination
Parameters
- ip-address
-
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address to send the redirected traffic to.
Platforms
All
destination
Syntax
destination memory num-entries
destination syslog syslog-id
no destination
Context
[Tree] (config>filter>log destination)
Full Context
configure filter log destination
Description
This command configures the destination for filter log entries for the filter log ID.
Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).
If the filter log destination is memory, the maximum number of entries in the log must be specified.
The no form of the command deletes the filter log association.
Default
destination memory 1000
Parameters
- memory num-entries
-
Specifies the destination of the filter log ID is a memory log. The num-entries value is the maximum number of entries in the filter log expressed as a decimal integer.
- syslog syslog-id
-
Specifies the destination of the filter log ID is a Syslog server. The syslog-id parameter is the number of the Syslog server definition.
Platforms
All
destination
Syntax
destination {ip-address | fqdn} port port [create]
no destination {ip-address | fqdn} port port
Context
[Tree] (config>system>telemetry>destination-group destination)
[Tree] (config>system>grpc-tunnel>destination-group destination)
Full Context
configure system telemetry destination-group destination
configure system grpc-tunnel destination-group destination
Description
This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).
The no form of this command removes the destination from the destination group.
Parameters
- ip-address
-
Specifies the IPv4 address (in dotted decimal notation) or IPv6 address.
- fqdn
-
Specifies the FQDN.
- port
-
Specifies the TCP destination port number.
- create
-
Keyword used to create a destination.
Platforms
All
destination
Syntax
destination ip-address
no destination
Context
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 destination)
Full Context
configure router interface if-attribute delay dynamic twamp-light ipv4 destination
Description
This command configures the unicast IPv4 destination address for the TWAMP Light test packet. When this command is not configured, the destination IPv4 address is auto-assigned for interfaces configured with a prefix length of 30 and 31. All other interface prefix lengths and unnumbered interfaces are unable to auto- assign the destination IPv4 address. If the interface does not use a prefix length of 30 or 31, the destination must be configured.
Deleting a configured destination removes the specified address and causes the source address to be auto-assigned for prefix length of 30 and 31.
Configuration modifications are allowed without administratively disabling the IPv4 protocol.
The no form of this command removes the IPv4 address from the configuration.
Default
no destination
Parameters
- ip-address
-
Specifies the IPv4 destination address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
destination
Syntax
destination ipv6-address
no destination
Context
[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 destination)
Full Context
configure router interface if-attribute delay dynamic twamp-light ipv6 destination
Description
This command configures the IPv6 destination address of the TWAMP Light test packet. When this command is not configured, no destination address is present and an error is raised to prevent the transmission of the test packet.
The IPv6 protocol can be enabled without addressing. However, the test does not transmit packets.
The link local address must be in the form fe80::/60 in accordance with RFC 4291, IP Version 6 Addressing Architecture.
The no form of this command removes the IPv6 address from the configuration.
Default
no destination
Parameters
- ipv6-address
-
Specifies the TWAMP Light IPv6 destination address
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
destination-address
destination-address
Syntax
[no] destination-address ip-address
Context
[Tree] (config>filter>gre-tun-tmp>ipv4 destination-address)
Full Context
configure filter gre-tunnel-template ipv4 destination-address
Description
This command defines one or more destinations for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet.
Traffic matching the associated IPv4 or IPv6 filter are hashed across all available destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured.
The no form of this command removes the specified destination IP address configuration from the associated GRE tunnel template.
Parameters
- ip-address
-
Specifies up to 16 IPv4 addresses to be used as the destination address.
Platforms
All
destination-address
Syntax
destination-address ip-address
no destination-address
Context
[Tree] (config>service>ies>if>ping-template destination-address)
[Tree] (config>service>vprn>if>ping-template destination-address)
Full Context
configure service ies interface ping-template destination-address
configure service vprn interface ping-template destination-address
Description
This command configures the address to where the ICMP echo requests are
directed to test connectivity. The source of the ICMP echo request is the
primary IPv4 address of the interface under which the ping-template is
configured. The destination address must be on the same subnet as the source
IP address. A configuration warning message displays if the primary IPv4
address and the destination are not on the same subnet, INFO: PIP
#2092 Ping template misconfiguration - destination-address and primary
IP address should fall in the same subnet
. Unnumbered
interfaces and loopback addresses are not supported.
The config>service>ies|vprn>interface>ping-template must be in the no shutdown state to remove or change the destination-address ip-address.
The no form of this command removes the destination address from the configuration.
Parameters
- ip-address
-
Specifies the destination address to where the ICMP echo requests are directed to test connectivity, in a.b.c.d format.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
destination-class
destination-class
Syntax
destination-class index
no destination-class index
no destination-class all
Context
[Tree] (config>router>policy-acct-template destination-class)
Full Context
configure router policy-acct-template destination-class
Description
Commands in this context create a destination class index for the template.
The no form of this command removes the index from the configuration.
Parameters
- index
-
Specifies the destination index value.
- all
-
Deletes all destination class indexes from this configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
destination-class
Syntax
destination-class dest-index
no destination-class [dest-index]
Context
[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel destination-class)
[Tree] (config>service>vprn>static-route-entry>indirect destination-class)
Full Context
configure service vprn static-route-entry ipsec-tunnel destination-class
configure service vprn static-route-entry indirect destination-class
Description
This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.
The no form of this command removes the associated destination-class from the associated static route nexthop.
Default
no destination-class
Parameters
- dest-index
-
The destination index integer value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
destination-class
Syntax
destination-class dest-index
no destination-class
Context
[Tree] (config>filter>ipv6-filter>entry>match destination-class)
[Tree] (config>filter>ip-filter>entry>match destination-class)
Full Context
configure filter ipv6-filter entry match destination-class
configure filter ip-filter entry match destination-class
Description
This command configures the BGP destination-class value match criterion. Filtering egress traffic on destination-class requires the destination-class-lookup command to be enabled on the interface that the packet ingresses on.
The no form of the command removes the destination-class value match criterion.
Default
no destination-class
Parameters
- dest-index
-
Specifies the destination index integer value.
Platforms
All
destination-class
Syntax
destination-class dest-index
no destination-class [dest-index]
Context
[Tree] (config>router>static-route-entry>indirect destination-class)
[Tree] (config>router>static-route-entry>next-hop destination-class)
Full Context
configure router static-route-entry indirect destination-class
configure router static-route-entry next-hop destination-class
Description
This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.
The no form of this command removes the associated destination-class from the associated static route next hop.
Default
no destination-class
Parameters
- dest-index
-
Specifies the destination index integer value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
destination-class-lookup
destination-class-lookup
Syntax
[no] destination-class-lookup
Context
[Tree] (config>service>ies>if>ingress destination-class-lookup)
Full Context
configure service ies interface ingress destination-class-lookup
Description
This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.
Default
no destination-class-lookup
Platforms
All
destination-class-lookup
Syntax
[no] destination-class-lookup
Context
[Tree] (config>service>vprn>if>ingress destination-class-lookup)
Full Context
configure service vprn interface ingress destination-class-lookup
Description
This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces and VPRN network interfaces.
Default
no destination-class-lookup
Platforms
All
destination-class-lookup
Syntax
[no] destination-class-lookup
Context
[Tree] (config>router>if>ingress destination-class-lookup)
Full Context
configure router interface ingress destination-class-lookup
Description
This command enables BGP destination-class lookup for packets on this interface ingress. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.
The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.
The no form of this command reverts to the default value.
Default
no destination-class-lookup
Platforms
All
destination-group
destination-group
Syntax
destination-group name [create]
no destination-group name
Context
[Tree] (config>system>telemetry destination-group)
[Tree] (config>system>grpc-tunnel destination-group)
Full Context
configure system telemetry destination-group
configure system grpc-tunnel destination-group
Description
Commands in this context configure commands for destination groups.
The no form of this command removes the destination group name.
Parameters
- name
-
Specifies the destination group name, up to 32 characters.
- create
-
Keyword used to create a destination group.
Platforms
All
destination-group
Syntax
destination-group name
no destination-group
Context
[Tree] (config>system>grpc-tunnel>tunnel destination-group)
Full Context
configure system grpc-tunnel tunnel destination-group
Description
This command assigns the specified destination group to a gRPC tunnel.
The no form of this command removes the specified destionation group from the gRPC tunnel.
Default
no destination-group
Parameters
- name
-
Specifies the destination group name, up to 32 characters
Platforms
All
destination-group
Syntax
destination-group name
no destination-group
Context
[Tree] (config>system>telemetry>persistent-subscriptions>subscription destination-group)
Full Context
configure system telemetry persistent-subscriptions subscription destination-group
Description
This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.
The no form of this command removes the destination group name from the persistent subscription.
Parameters
- name
-
Specifies the destination group name, up to 32 characters.
Platforms
All
destination-ip
destination-ip
Syntax
[no] destination-ip
Context
[Tree] (config>service>nat>syslog>syslog-export-policy>include destination-ip)
Full Context
configure service nat syslog syslog-export-policy include destination-ip
Description
This command includes the destination IP address in the flow log. The destination-ip is significant in Destination Based NAT (DNAT) where the foreign IP address is translated. A foreign IP address is the original IP address toward the destination node and in DNAT it is replaced by the destination-ip. More clearly, on the inside (private side), the IP address of the destination node is referred to as foreign IP (original destination IP), and once this address is translated by DNAT, it is referred to as destination IP (translated destination IP) on the outside (public side).
The no form of the command disables the feature.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
destination-port
destination-port
Syntax
destination-port [destination-port]
Context
[Tree] (config>service>nat>syslog>syslog-export-policy>collector destination-port)
Full Context
configure service nat syslog syslog-export-policy collector destination-port
Description
This command configures the destination port (collector port) to which UDP stream containing the syslog flow records are sent.
Default
destination-port 514
Parameters
- destination-port
-
Specifies the destination port to which UDP streams are sent.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
destination-prefix
destination-prefix
Syntax
destination-prefix ip-prefix/length [nat-policy nat-policy-name]
no destination-prefix ip-prefix/length
Context
[Tree] (config>service>vprn>nat>inside destination-prefix)
[Tree] (config>router>nat>inside destination-prefix)
Full Context
configure service vprn nat inside destination-prefix
configure router nat inside destination-prefix
Description
This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).
Parameters
- ip-prefix
-
Specifies the IP prefix; host bits must be zero (0).
- length
-
Specifies the prefix length.
- nat-policy-name
-
Specifies the NAT policy name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
destination-prefix
Syntax
[no] destination-prefix
Context
[Tree] (config>cflowd>collector>aggregation destination-prefix)
Full Context
configure cflowd collector aggregation destination-prefix
Description
This command specifies that the aggregation data is based on destination prefix information.
The no form removes this type of aggregation from the collector configuration.
Platforms
All
detail-level
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>router>ip>dhcp6 detail-level)
[Tree] (debug>router>ip>dhcp detail-level)
[Tree] (debug>router>local-dhcp-server detail-level)
Full Context
debug router ip dhcp6 detail-level
debug router ip dhcp detail-level
debug router local-dhcp-server detail-level
Description
This command debugs the DHCP tracing detail level.
Parameters
- low
-
Displays a low detail level for DHCP debugging.
- medium
-
Displays a medium detail level for DHCP debugging.
- high
-
Displays a high detail level for DHCP debugging.
Platforms
All
- debug router ip dhcp6 detail-level
- debug router ip dhcp detail-level
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- debug router local-dhcp-server detail-level
detail-level
Syntax
detail-level detail-level
Context
[Tree] (debug>router>l2tp>packet detail-level)
[Tree] (debug>router>l2tp>group>packet detail-level)
[Tree] (debug>router>l2tp>assignment-id>packet detail-level)
Full Context
debug router l2tp packet detail-level
debug router l2tp group packet detail-level
debug router l2tp assignment-id packet detail-level
Description
This command configures the L2TP packet debugging level of detail.
Parameters
- detail-level
-
Specifies the detail level.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>ppp>packet detail-level)
Full Context
debug service id ppp packet detail-level
Description
This command specify the detail level of PPP packet debug output.
The no form of this command disables debugging.
Parameters
- low | medium | high
-
Specifies the detail level of PPP packet debug output.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>router>radius detail-level)
Full Context
debug router radius detail-level
Description
This command specifies the output detail level of command debug router radius.
Default
detail-level medium
Parameters
- low
-
Specifies that the output includes packet type, server address, length, radius-server-policy name.
- medium
-
Specifies all output in low level including the RADIUS attributes in the packet.
- high
-
Specifies all output in medium level including the hex packet dump.
Platforms
All
detail-level
Syntax
detail-level detail-level
Context
[Tree] (debug>router>wpp>portal>packet detail-level)
[Tree] (debug>router>wpp>packet detail-level)
Full Context
debug router wpp portal packet detail-level
debug router wpp packet detail-level
Description
This command specifies the detail level of WPP packet debugging.
Parameters
- detail-level
-
specifies the detail level of WPP packet debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
detail-level
Syntax
detail-level {low | medium | high}
Context
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id detail-level)
Full Context
debug subscriber-mgmt vrgw brg pppoe-client brg-id detail-level
Description
This command specifies the amount of detail present in debugging the specified PPPoE client.
Default
detail-level high
Parameters
- low
-
Specifies a low level of detail during debugging.
- medium
-
Specifies a medium level of detail during debugging.
- high
-
Specifies a high level of detail during debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>igmp-snooping detail-level)
Full Context
debug service id igmp-snooping detail-level
Description
This command enables and configures the IGMP tracing detail level.
The no form of this command disables the IGMP tracing detail level.
Platforms
All
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>mld detail-level)
Full Context
debug service id mld-snooping detail-level
Description
This command enables and configures the MLD tracing detail level.
The no form of this command disables the MLD tracing detail level.
Platforms
All
detail-level
Syntax
detail-level {low | medium | high}
no detail-level
Context
[Tree] (debug>service>id>dhcp detail-level)
Full Context
debug service id dhcp detail-level
Description
This command configures the DHCP tracing detail level.
The no form of the command disables debugging.
Parameters
- low
-
Displays a low detail level for DHCP debugging.
- medium
-
Displays a medium detail level for DHCP debugging.
- high
-
Displays a high detail level for DHCP debugging.
Platforms
All
detail-level
Syntax
detail-level detail-level
Context
[Tree] (debug>router>pcp>pcp-server>packet detail-level)
Full Context
debug router pcp pcp-server packet detail-level
Description
This command configures the packet debugging level of detail.
Parameters
- detail-level
-
Specifies the detail level.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
detailed-acct-attributes
detailed-acct-attributes
Syntax
[no] detailed-acct-attributes
Context
[Tree] (config>subscr-mgmt>acct-plcy>include detailed-acct-attributes)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute detailed-acct-attributes
Description
This command enables detailed reporting of per queue and per policer octet and packet counters using RADIUS VSAs. Enabled by default. It can be enabled simultaneously with aggregate counters (std-acct-attributes).
The no form of this command excludes the detailed counter VSAs from the RADIUS accounting messages.
Default
detailed-acct-attributes
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
detect
detect
Syntax
detect num-moves num-moves window minutes [trusted-mac-move-factor factor]
Context
[Tree] (config>service>vpls>bgp-evpn>mac-duplication detect)
Full Context
configure service vpls bgp-evpn mac-duplication detect
Description
This command modifies the behavior of the mac-duplication command, which is always enabled by default. It monitors the number of moves of a MAC address for a period of time (window).
Default
detect num-moves 5 window 3 trusted-mac-move-factor 1
Parameters
- num-moves
-
Identifies the number of MAC moves in a VPLS service. The counter is incremented when a specified MAC is locally relearned in the FDB or flushed from the FDB due to the reception of a better remote EVPN route for that MAC.
- minutes
-
Specifies the length of the window in minutes.
- factor
-
Specifies the multiplying value used to calculate a MAC duplication event. The num-moves value is multiplied by this value to determine the number of moves needed to declare a trusted MAC as duplicate.
For example, if num-moves=5 and factor=3, five moves within the window is enough to declare a non-trusted MAC as duplicate. However, 15 moves are needed to declare a trusted MAC as duplicate.
By default, the value of factor is 1, which means the factor for a trusted MAC is the same as for a non-trusted MAC. This provides a backwards compatible solution upon upgrade of the node.
Platforms
All
detect-seen-ip
detect-seen-ip
Syntax
[no] detect-seen-ip
Context
[Tree] (config>app-assure>group>transit-ip-policy detect-seen-ip)
Full Context
configure application-assurance group transit-ip-policy detect-seen-ip
Description
This command enables the detection of transit subscribers based on the IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
detection-time
detection-time
Syntax
detection-time seconds
no detection-time
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dynamic-parameters detection-time)
Full Context
configure system security dist-cpu-protection policy protocol dynamic-parameters detection-time
Description
When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.
Default
detection-time 30
Parameters
- seconds
-
Specifies the detection time.
Platforms
All
detection-time
Syntax
detection-time seconds
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer detection-time)
Full Context
configure system security dist-cpu-protection policy static-policer detection-time
Description
When a policer is declared as in an "exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an "exceed” state.
Default
detection-time 30
Parameters
- seconds
-
Specifies the detection time.
Platforms
All
deterministic
deterministic
Syntax
deterministic
Context
[Tree] (config>router>nat>inside deterministic)
[Tree] (config>service>vprn>nat>inside deterministic)
Full Context
configure router nat inside deterministic
configure service vprn nat inside deterministic
Description
Commands in this context configure deterministic NAT.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
deterministic
Syntax
deterministic
Context
[Tree] (config>service>vprn>nat>outside>pool deterministic)
Full Context
configure service vprn nat outside pool deterministic
Description
This command configures deterministic NAT for this pool.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
deterministic-med
deterministic-med
Syntax
[no] deterministic-med
Context
[Tree] (config>service>vprn>bgp>best-path-selection deterministic-med)
Full Context
configure service vprn bgp best-path-selection deterministic-med
Description
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
Default
no deterministic-med
Platforms
All
deterministic-med
Syntax
[no] deterministic-med
Context
[Tree] (config>router>bgp>best-path-selection deterministic-med)
Full Context
configure router bgp best-path-selection deterministic-med
Description
This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.
Default
no deterministic-med
Platforms
All
deterministic-script
deterministic-script
Syntax
deterministic-script
Context
[Tree] (config>service>nat deterministic-script)
Full Context
configure service nat deterministic-script
Description
This command configures the script generated for deterministic NAT.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
device
device
Syntax
device ieee-address [create]
no device ieee-address
Context
[Tree] (config>system>bluetooth device)
Full Context
configure system bluetooth device
Description
This command is used to add and remove devices from the Bluetooth allowlist or to enter the context to configure the MAC. The router only accepts pairing requests with devices that are in the allowlist. The devices are identified through their IEEE 802 MAC addresses. Up to six devices can be defined in the allowlist.
The create keyword must be used to add a new device.
The no form of this command removes the indicated device from the allowlist.
Parameters
- ieee-address
-
Specifies the MAC address of the external Bluetooth device.
Platforms
7750 SR-1, 7750 SR-s, 7950 XRS-20e
device-label
device-label
Syntax
device-label name
no device-label
Context
[Tree] (config>system>management-interface>remote-management device-label)
Full Context
configure system management-interface remote-management device-label
Description
This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.
If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.
The no form of this command causes an empty string to be used.
Parameters
- name
-
Specifies the device-label name, up to 64 characters.
Platforms
All
device-label
Syntax
device-label name
no device-label
Context
[Tree] (config>system>management-interface>remote-management>manager device-label)
Full Context
configure system management-interface remote-management manager device-label
Description
This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).
Parameters
- name
-
Specifies the device-label name, up to 64 characters.
Platforms
All
device-name
device-name
Syntax
device-name name
no device-name
Context
[Tree] (config>system>management-interface>remote-management device-name)
Full Context
configure system management-interface remote-management device-name
Description
This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.
If this command is also configured for a specific manager in the config>system>management-interface>remote-management> manager context, that configuration takes precedence.
The no form of this command causes the system to use the default device name (system-name).
Default
system-name
Parameters
- name
-
Specifies the device name, up to 64 characters.
Platforms
All
device-name
Syntax
device-name name
no device-name
Context
[Tree] (config>system>management-interface>remote-management>manager device-name)
Full Context
configure system management-interface remote-management manager device-name
Description
This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.
This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).
The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).
Default
system-name
Parameters
- name
-
Specifies the device name, up to 64 characters.
Platforms
All
df-bit-lac
df-bit-lac
Syntax
df-bit-lac {always | never}
no df-bit-lac
Context
[Tree] (config>router>l2tp df-bit-lac)
[Tree] (config>service>vprn>l2tp df-bit-lac)
Full Context
configure router l2tp df-bit-lac
configure service vprn l2tp df-bit-lac
Description
By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped.
The no form of this command reverts to the default.
Default
df-bit-lac always
Parameters
- always
-
Specifies that the LAC sends all L2TP packets with the DF bit set to 1.
- never
-
Specifies that the LAC sends all L2TP packets with the DF bit set to 0.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
df-bit-lac
Syntax
df-bit-lac {always | never | default}
no df-bit-lac
Context
[Tree] (config>service>vprn>l2tp>group df-bit-lac)
[Tree] (config>router>l2tp>group>tunnel df-bit-lac)
[Tree] (config>service>vprn>l2tp>group>tunnel df-bit-lac)
[Tree] (config>router>l2tp>group df-bit-lac)
Full Context
configure service vprn l2tp group df-bit-lac
configure router l2tp group tunnel df-bit-lac
configure service vprn l2tp group tunnel df-bit-lac
configure router l2tp group df-bit-lac
Description
By default, the LAC df-bit-lac is set to default and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped. The configuration of the df-bit can be overridden at different levels: l2tp, tunnel, and group. The configuration at the tunnel level overrides the configuration on both the group and l2tp levels. The configuration at the group level overrides the configuration on l2tp.
The no form of this command reverts to the default.
Default
df-bit-lac default
Parameters
- always
-
Specifies that the LAC sends all L2TP packets with the DF bit set to 1.
- never
-
Specifies that the LAC sends all L2TP packets with the DF bit set to 0.
- default
-
Follows the DF-bit configuration specified on upper levels.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dh-group
dh-group
Syntax
dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}
Context
[Tree] (config>ipsec>ike-transform dh-group)
Full Context
configure ipsec ike-transform dh-group
Description
This command specifies the Diffie-Hellman group to be used in this IKE transform instance.
Default
dh-group 2 (1024-bit — More Modular Exponential (MODP))
Parameters
- dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}
-
Specifies which Diffie-Hellman group to use for calculating session keys. More bits provide a higher level of security, but require more processing. Three groups are supported with IKE-v1:
Group 1: 768 bits
Group 2: 1024 bits
Group 5: 1536 bits
Group 14: 2048 bits
Group 15: 3072 bits
Group 19: P-256 ECC Curve, 256 bits
Group 20: P-384 ECC Curve, 384 bits
Group 21: P-512 ECC Curve, 512 bits
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp
dhcp
Syntax
dhcp
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only-sap-parameters dhcp)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp
Description
Commands in this context configure DHCP parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp
Syntax
dhcp
Context
[Tree] (config>service>ies>sub-if dhcp)
[Tree] (config>service>vpls>spoke-sdp dhcp)
[Tree] (config>service>ies>if dhcp)
[Tree] (config>service>vprn>sub-if>grp-if dhcp)
[Tree] (config>service>vprn>sub-if dhcp)
[Tree] (config>service>vprn dhcp)
[Tree] (config>service>vpls>sap dhcp)
[Tree] (config>service>ies>sub-if>grp-if dhcp)
[Tree] (config>service>vpls>mesh-sdp dhcp)
[Tree] (config>service>vprn>if dhcp)
Full Context
configure service ies subscriber-interface dhcp
configure service vpls spoke-sdp dhcp
configure service ies interface dhcp
configure service vprn subscriber-interface group-interface dhcp
configure service vprn subscriber-interface dhcp
configure service vprn dhcp
configure service vpls sap dhcp
configure service ies subscriber-interface group-interface dhcp
configure service vpls mesh-sdp dhcp
configure service vprn interface dhcp
Description
Commands in this context configure DHCP parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface dhcp
- configure service vprn dhcp
- configure service ies subscriber-interface dhcp
- configure service vprn subscriber-interface dhcp
- configure service vprn subscriber-interface group-interface dhcp
All
- configure service vprn interface dhcp
- configure service vpls sap dhcp
- configure service vpls mesh-sdp dhcp
- configure service ies interface dhcp
- configure service vpls spoke-sdp dhcp
dhcp
Syntax
[no] dhcp [interface ip-int-name]
[no] dhcp mac ieee-address
[no] dhcp sap sap-id
Context
[Tree] (debug>router>ip dhcp)
Full Context
debug router ip dhcp
Description
This command enables DHCP debugging.
The no form of this command disables debugging.
Parameters
- ip-int-name
-
Specifies the name of the IP interface, up to 32 characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
- ieee-address
-
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
- sap-id
-
Specifies the physical port identifier portion of the SAP definition.
Platforms
All
dhcp
Syntax
dhcp type direction {ingress | egress} script script
no dhcp type direction {ingress | egress}
Context
[Tree] (config>python>py-policy dhcp)
Full Context
configure python python-policy dhcp
Description
This command specifies the Python script for the specified DHCPv4 packet type in the specified direction.
Multiple dhcp command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
Parameters
- type
-
Specifies the message type of the event.
- direction {ingress | egress}
-
Specifies whether the packet is being received by the system or being sent by the system.
- script script
-
Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.
Platforms
All
dhcp
Syntax
dhcp
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp)
Full Context
configure service ies subscriber-interface group-interface wlan-gw ranges dhcp
configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp
Description
Commands in this context create DHCP configuration for WLAN-GW ISA subscribers (such as migrant subscribers).
dhcp
Syntax
[no] dhcp
Context
[Tree] (debug>service>id dhcp)
Full Context
debug service id dhcp
Description
Commands in this context perform DHCP debugging.
The no form of the command disables DHCP debugging.
Platforms
All
dhcp
Syntax
dhcp
Context
[Tree] (config>app-assure>group>transit-ip-policy dhcp)
Full Context
configure application-assurance group transit-ip-policy dhcp
Description
This command enables dynamic DHCP-based management of transit aa-subs for the transit-ip-policy. This is mutually exclusive to other types management of transit subs for a given transit-ip-policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp
Syntax
[no] dhcp
Context
[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp)
[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp)
Full Context
configure service ies interface sap ipsec-gateway dhcp
configure service vprn interface sap ipsec-gateway dhcp
Description
Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.
DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).
Default
no dhcp
dhcp
Syntax
dhcp
Context
[Tree] (config>router>if dhcp)
Full Context
configure router interface dhcp
Description
Commands in this context configure DHCP parameters.
Platforms
All
dhcp
Syntax
dhcp [include-user-class] [timeout timeout]
dhcp client-id [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context
[Tree] (bof>autoconfigure>ipv4 dhcp)
Full Context
bof autoconfigure ipv4 dhcp
Description
This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.
The no form of this command disables IPv4 DHCP OOB management.
Default
no dhcp
Parameters
- include-user-class
-
Specifies to include Option 77 user class data in the offer.
- client-id
-
Specifies to include the client ID for IPv4 Option 61 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
- timeout
-
Specifies the DHCP offer timeout, in seconds.
- ascii-string
-
Specifies the string format for this option, up to 127 characters.
- hex-string
-
Specifies the hexadecimal format for this option, up to 254 hex nibbles.
Platforms
7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s
dhcp
Syntax
dhcp [include-user-class] [timeout timeout]
dhcp client-id duid-type [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]
no dhcp
Context
[Tree] (bof>autoconfigure>ipv6 dhcp)
Full Context
bof autoconfigure ipv6 dhcp
Description
This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.
The no form of this command disables IPv6 DHCP client OOB management.
Default
no dhcp
Parameters
- include-user-class
-
Specifies to include Option 15 user class data in the offer.
- client-id
-
Specifies to include the client ID for IPv6 DHCP Option 1 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.
- seconds
-
Specifies the DHCP client ID timeout, in seconds.
- duid-type
-
Specifies the type code of the server DUID.
- ascii-string
-
Specifies the string format for this option, up to 124 characters.
- hex-string
-
Specifies the hexadecimal format for this option, up to 248 hex nibbles.
- timeout
-
Specifies the DHCP offer timeout, in seconds.
Platforms
7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s
dhcp
Syntax
[no] dhcp
Context
[Tree] (config>sys>security>cpu-protection>ip>included-protocols dhcp)
Full Context
configure system security cpu-protection ip-src-monitoring included-protocols dhcp
Description
This command includes the extracted IPv4 DHCP packets for ip-src-monitoring. IPv4 DHCP packets will be subject to the per-source-rate of CPU protection policies.
Default
dhcp (Note this is different from the other protocols)
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
dhcp-client
dhcp-client
Syntax
[no] dhcp-client
Context
[Tree] (debug>router>l2tp>group>packet dhcp-client)
[Tree] (debug>router>l2tp>packet dhcp-client)
[Tree] (debug>router>l2tp>assignment-id>packet dhcp-client)
[Tree] (debug>router>l2tp>peer>packet dhcp-client)
Full Context
debug router l2tp group packet dhcp-client
debug router l2tp packet dhcp-client
debug router l2tp assignment-id packet dhcp-client
debug router l2tp peer packet dhcp-client
Description
This command enables debugging for DHCP client packet.
The no form of this command disables debugging for DHCP client packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-client
Syntax
dhcp-client [terminate-only]
no dhcp-client
Context
[Tree] (debug>service>id>ppp>event dhcp-client)
Full Context
debug service id ppp event dhcp-client
Description
This command enable PPP event debug for DHCP client.
The no form of this command disables PPP event debugging for the DHCP client.
Parameters
- terminate-only
-
Enables debug for local terminated PPP session.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-client
Syntax
[no] dhcp-client
Context
[Tree] (debug>service>id>ppp>packet dhcp-client)
Full Context
debug service id ppp packet dhcp-client
Description
This command enables debugging for specific DHCP client packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-client
Syntax
dhcp-client
Context
[Tree] (config>service>ies>sub-if>grp-if>pppoe dhcp-client)
[Tree] (config>service>vprn>sub-if>grp-if>pppoe dhcp-client)
Full Context
configure service ies subscriber-interface group-interface pppoe dhcp-client
configure service vprn subscriber-interface group-interface pppoe dhcp-client
Description
Commands in this context configure the PPPoE-to-DHCP options.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-filter
dhcp-filter
Syntax
dhcp-filter filter-id [create]
no dhcp-filter
Context
[Tree] (config>filter dhcp-filter)
Full Context
configure filter dhcp-filter
Description
Commands in this context create and configure the specified DHCP filter policy.
Parameters
- filter-id
-
Specifies the DHCP filter policy ID expressed as a decimal integer.
- create
-
Keyword required to create the configuration context.
Platforms
All
dhcp-leasetime-threshold
dhcp-leasetime-threshold
Syntax
dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]
no dhcp-leasetime-threshold
Context
[Tree] (config>system>persistence>options dhcp-leasetime-threshold)
Full Context
configure system persistence options dhcp-leasetime-threshold
Description
This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.
The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.
The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).
The no form of the command disables the DHCP lease time threshold.
Default
no dhcp-leasetime-threshold
Parameters
- days
-
Specifies the threshold in days.
- hours
-
Specifies the threshold in hours.
- minutes
-
Specifies the threshold in minutes.
- seconds
-
Specifies the threshold in seconds.
Platforms
All
dhcp-leasetime-threshold
Syntax
dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]
no dhcp-leasetime-threshold
Context
[Tree] (config>redundancy>multi-chassis>options>sub-mgmt dhcp-leasetime-threshold)
Full Context
configure redundancy multi-chassis options sub-mgmt dhcp-leasetime-threshold
Description
This command configures the DHCP lease time threshold to be eligible for MCS synchronization.
DHCP leases for the sub-mgmt MCS applications are eligible to skip synchronization if the committed lease time is less than the active threshold on a multi-chassis peer. The active threshold is the minimum value of the thresholds configured on the nodes at each end of a multi-chassis peer. The threshold is inactive when it is unconfigured on at least one end of the multi-chassis peer.
The no form of the command disables the DHCP lease time threshold.
Default
no dhcp-leasetime-threshold
No threshold is active and all sub-mgmt DHCP leases are synchronized.
Parameters
- days
-
Specifies the threshold in days.
- hours
-
Specifies the threshold in hours.
- minutes
-
Specifies the threshold in minutes.
- seconds
-
Specifies the threshold in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-options
dhcp-options
Syntax
[no] dhcp-options
Context
[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-options)
Full Context
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-options
Description
This command enables insertion of RADIUS VSA containing all DHCP options from DHCP discover (or DHCP request) message. The VSA contains all DHCP options in a form of the string. If required (the total length of all DHCP options exceeds 255B), multiple VSAs are included.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-options
Syntax
[no] dhcp-options
Context
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-options)
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-options)
Full Context
configure aaa isa-radius-policy acct-include-attributes dhcp-options
configure aaa isa-radius-policy auth-include-attributes dhcp-options
Description
This command enables insertion of RADIUS VSA containing all dhcp-options from dhcp-discover (or dhcp-request) message. The VSA contains all dhcp-options in a form of the string. If required (the total length of all dhcp-options exceeds 255B), multiple VSAs are included.
Default
no dhcp-options
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp-pool
dhcp-pool
Syntax
dhcp-pool
Context
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile dhcp-pool)
Full Context
configure subscriber-mgmt vrgw brg brg-profile dhcp-pool
Description
Commands in this context configure per-subscriber IPv4 address pool parameters to be used for address allocation. Pools for different subscribers can overlap. Specific pool parameters can be overridden by RADIUS.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-python-policy
dhcp-python-policy
Syntax
dhcp-python-policy policy-name
no dhcp-python-policy
Context
[Tree] (config>service>vpls>sap dhcp-python-policy)
Full Context
configure service vpls sap dhcp-python-policy
Description
This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy name context.
The no form of this command reverts to the default.
Parameters
- policy-name
-
Specifies a Python policy name, up to 32 characters.
Platforms
All
dhcp-server
dhcp-server
Syntax
dhcp-server
Context
[Tree] (config>system>persistence dhcp-server)
Full Context
configure system persistence dhcp-server
Description
This command configures DHCP server persistence parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-triggered
dhcp-triggered
Syntax
[no] dhcp-triggered
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dhcp-triggered)
Full Context
configure subscriber-mgmt wlan-gw ue-query state dhcp-triggered
Description
This command enables matching on UEs currently in a DHCP-triggered state. This query only filters UEs that are currently authenticating due to a DHCP, DHCPv6, or RS trigger, not RADIUS-authenticated UEs in an ESM, DSM, or portal state that were originally authenticated due to a DHCP, DHCPv6, or RS trigger.
The no form of this command disables matching on UEs in a DHCP-triggered state, unless all state matching is disabled.
Default
no dhcp-triggered
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp-user-db
dhcp-user-db
Syntax
dhcp-user-db local-user-db-name
no dhcp-user-db
Context
[Tree] (config>service>vpls>sap dhcp-user-db)
Full Context
configure service vpls sap dhcp-user-db
Description
This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.
Parameters
- local-user-db
-
Specifies the name of the local user database name up to 32 characters.
Platforms
All
dhcp-vendor-class-id
dhcp-vendor-class-id
Syntax
[no] dhcp-vendor-class-id
Context
[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute dhcp-vendor-class-id)
[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-vendor-class-id)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute dhcp-vendor-class-id
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-vendor-class-id
Description
This command includes the [26-6527-36] Alc-DHCP-Vendor-Class-Id attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp-vendor-class-id
Syntax
[no] dhcp-vendor-class-id
Context
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-vendor-class-id)
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-vendor-class-id)
Full Context
configure aaa isa-radius-policy auth-include-attributes dhcp-vendor-class-id
configure aaa isa-radius-policy acct-include-attributes dhcp-vendor-class-id
Description
This command includes the "[26-6527-36] Alc-DHCP-Vendor-Class-Id” attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.
Default
no dhcp-vendor-class-id
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp6
dhcp6
Syntax
dhcp6
Context
[Tree] (config>service>ies>sub-if>grp-if>ipv6 dhcp6)
[Tree] (config>service>vpls>sap dhcp6)
[Tree] (config>service>vprn>interface dhcp6)
[Tree] (config>service>vpls>mesh-sdp dhcp6)
[Tree] (config>service>vprn>sub-if dhcp6)
[Tree] (config>service>vprn dhcp6)
[Tree] (config>service>ies>if dhcp6)
[Tree] (config>service>ies>sub-if>grp-if dhcp6)
[Tree] (config>service>vprn>sub-if>grp-if dhcp6)
[Tree] (config>service>ies>sub-if dhcp6)
[Tree] (config>service>vpls>spoke-sdp dhcp6)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6 dhcp6)
Full Context
configure service ies subscriber-interface group-interface ipv6 dhcp6
configure service vpls sap dhcp6
configure service vprn interface dhcp6
configure service vpls mesh-sdp dhcp6
configure service vprn subscriber-interface dhcp6
configure service vprn dhcp6
configure service ies interface dhcp6
configure service ies subscriber-interface group-interface dhcp6
configure service vprn subscriber-interface group-interface dhcp6
configure service ies subscriber-interface dhcp6
configure service vpls spoke-sdp dhcp6
configure service vprn subscriber-interface group-interface ipv6 dhcp6
Description
Commands in this context configure DHCPv6 parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface dhcp6
- configure service vprn dhcp6
- configure service vprn subscriber-interface group-interface dhcp6
- configure service ies subscriber-interface dhcp6
- configure service ies subscriber-interface group-interface ipv6 dhcp6
- configure service vprn subscriber-interface group-interface ipv6 dhcp6
- configure service vprn subscriber-interface dhcp6
All
- configure service vpls mesh-sdp dhcp6
- configure service vpls sap dhcp6
- configure service ies interface dhcp6
- configure service vpls spoke-sdp dhcp6
- configure service vprn interface dhcp6
dhcp6
Syntax
dhcp6
Context
[Tree] (config>system dhcp6)
Full Context
configure system dhcp6
Description
Commands in this context configure system-wide DHCPv6 parameters.
Platforms
All
dhcp6
Syntax
[no] dhcp6 [ip-int-name]
[no] dhcp6 client-identifier duid duid-hex-string [mask mask-hex-string]
[no] dhcp6 client-identifier link-layer-address lla-hex-string
[no] dhcp6 interface ip-int-name
[no] dhcp6 sap sap-id
Context
[Tree] (debug>router>ip dhcp6)
Full Context
debug router ip dhcp6
Description
This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.
The no form of this command disables debugging.
Parameters
- ip-int-name
-
Specifies the name of an existing IP interface, up to 32 characters. Up to four DHCPv6 interface match criteria can be specified per routing instance.
- client-identifier
-
Specifies a client identifier option match criteria.
- duid duid-hex-string
-
Specifies a hexadecimal value for an opaque match on the client DUID in the client identifier option. When the actual length of the client DUID is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
- mask mask-hex-string
-
Specifies an optional substring match criteria. When a mask is specified, both hex-string lengths must be equal.
- link-layer-address lla-hex-string
-
Specifies a hexadecimal value for a link layer address field match of a type 1 (DUID-LLT) or type 3 (DUID-LL) client DUID in the client identifier option. When the actual length of the link layer address field is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.
- sap-id
-
Specifies an existing SAP identifier. Up to four DHCPv6 SAP match criteria can be specified per routing instance.
Platforms
All
dhcp6
Syntax
dhcp6 type direction {ingress | egress} script script
no dhcp6 type direction {ingress | egress}
Context
[Tree] (config>python>py-policy dhcp6)
Full Context
configure python python-policy dhcp6
Description
This command specifies the Python script for the specified DHCPv6 packet type in the specified direction.
Multiple dhcps command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
Parameters
- type
-
Specifies the message type of the event.
- direction {ingress | egress}
-
Specifies whether the event is incoming or outgoing.
- script
-
Specifies the name of the Python script, up to 32 characters, that will be used to handle the specified message.
Platforms
All
dhcp6
Syntax
dhcp6
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp6)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp6)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp6
configure service ies subscriber-interface group-interface wlan-gw ranges dhcp6
Description
Commands in this context create DHCPv6 configuration for WLAN-GW ISA subscribers.
dhcp6
Syntax
[no] dhcp6
Context
[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp6)
[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp6)
Full Context
configure service vprn interface sap ipsec-gateway dhcp6
configure service ies interface sap ipsec-gateway dhcp6
Description
Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.
The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.
DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.
Default
no dhcp6
dhcp6-address
dhcp6-address
Syntax
dhcp6-address ipv6-address
no dhcp6-address
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query dhcp6-address)
Full Context
configure subscriber-mgmt wlan-gw ue-query dhcp6-address
Description
This command enables matching on UEs with the specified DHCPv6 IA-NA address.
The no form of this command disables matching on the IA-NA address.
Default
no dhcp6-address
Parameters
- ipv6-address
-
Specifies the IA-NA address.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp6-filter
dhcp6-filter
Syntax
dhcp6-filter filter-id [create]
no dhcp6-filter
Context
[Tree] (config>filter dhcp6-filter)
Full Context
configure filter dhcp6-filter
Description
Commands in this context create and configure the specified DHCPv6 filter policy.
The no form of this command reverts to the default.
Parameters
- filter-id
-
Specifies the DHCPv6 filter policy ID expressed as a decimal integer.
- create
-
Keyword required to create the configuration context.
Platforms
All
dhcp6-options
dhcp6-options
Syntax
[no] dhcp6-options
Context
[Tree] (config>subscr-mgmt>auth-plcy>include dhcp6-options)
Full Context
configure subscriber-mgmt authentication-policy include-radius-attribute dhcp6-options
Description
This command copies DHCPv6 options from received DHCPv6 messages on ingress access and pass them to the RADIUS server in Accept-Request. The messages is carried in the RADIUS VSA Alc-ToServer-Dhcp6-Options.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcp6-options
Syntax
[no] dhcp6-options
Context
[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp6-options)
Full Context
configure aaa isa-radius-policy acct-include-attributes dhcp6-options
Description
If a DHCPv6 stack is active for a UE, this attribute defines if options received in the last DHCPv6 message should be reflected.
Default
no dhcp6-options
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp6-options
Syntax
[no] dhcp6-options
Context
[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp6-options)
Full Context
configure aaa isa-radius-policy auth-include-attributes dhcp6-options
Description
If authentication was triggered by DHCPv6, this knob defines if options received in that DHCPv6 message should be reflected in the radius Access-Request.
Default
no dhcp6-options
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcp6-python-policy
dhcp6-python-policy
Syntax
dhcp6-python-policy policy-name
no dhcp6-python-policy
Context
[Tree] (config>service>vpls>sap dhcp6-python-policy)
Full Context
configure service vpls sap dhcp6-python-policy
Description
This command specified the Python policy for DHCPv6 packets sent/received on the capture SAP.
The no form of this command removes the policy name from the configuration.
Parameters
- policy name
-
Specifies an existing Python policy name, up to 256 characters.
Platforms
All
dhcp6-relay
dhcp6-relay
Syntax
[no] dhcp6-relay
Context
[Tree] (config>service>ies>if>ipv6 dhcp6-relay)
[Tree] (config>service>vprn>if>ipv6 dhcp6-relay)
Full Context
configure service ies interface ipv6 dhcp6-relay
configure service vprn interface ipv6 dhcp6-relay
Description
Commands in this context configure DHCPv6 relay parameters for the interface.
The no form of this command disables DHCPv6 relay.
Platforms
All
dhcp6-server
dhcp6-server
Syntax
[no] dhcp6-server
Context
[Tree] (config>service>vprn>if>ipv6 dhcp6-server)
[Tree] (config>service>ies>if>ipv6 dhcp6-server)
Full Context
configure service vprn interface ipv6 dhcp6-server
configure service ies interface ipv6 dhcp6-server
Description
Commands in this context configure DHCPv6 server parameters for the interface.
The no form of this command disables the DHCP6 server.
Platforms
All
dhcp6-user-db
dhcp6-user-db
Syntax
dhcp6-user-db local-user-db
no dhcp6-user-db
Context
[Tree] (config>service>vpls>sap dhcp6-user-db)
Full Context
configure service vpls sap dhcp6-user-db
Description
This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.
The no form of this command reverts to the default.
Parameters
- local-user-db
-
Specifies the name of the local-user-database, up to 32 characters.
Platforms
All
dhcpv4
dhcpv4
Syntax
dhcpv4
Context
[Tree] (config>service>vprn>subscriber-mgmt dhcpv4)
[Tree] (config>router>subscriber-mgmt dhcpv4)
Full Context
configure service vprn subscriber-mgmt dhcpv4
configure router subscriber-mgmt dhcpv4
Description
Commands in this context configure DHCPv4 parameters that apply to this routing instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dhcpv4-nat
dhcpv4-nat
Syntax
dhcpv4-nat
Context
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)
Full Context
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat
Description
This node enables address pools for DHCPv4 NAT inside addresses. This configuration is only available in wholesale interfaces.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dhcpv6-client
dhcpv6-client
Syntax
dhcpv6-client
Context
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager dhcpv6-client)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager dhcpv6-client)
Full Context
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client
Description
This command configures the DHCPv6 client for the pool manager.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
diameter
diameter
Syntax
diameter type direction {ingress | egress} script script
no diameter type direction {ingress | egress}
Context
[Tree] (config>python>py-policy diameter)
Full Context
configure python python-policy diameter
Description
This command specifies the Python script to use for the specified Diameter message type in the specified direction.
Multiple diameter command configurations are allowed in the same Python policy.
The no form of this command reverts to the default.
Parameters
- type
-
Specifies the message type.
Message type
Application
Direction
aaa – AA Answer
Nasreq
ingress
aar – AA Request
Nasreq
egress
asa – Abort Session Answer
Gx, Gy
egress
asr – Abort Session Request
Gx, Gy
ingress
cca – Credit Control Answer
Gx, Gy
ingress
ccr – Credit Control Request
Gx, Gy
egress
cea – Capabilities Exchange Answer
Base
ingress
cer – Capabilities Exchange Request
Base
egress
dpa – Disconnect Peer Answer
Base
ingress/egress
dpr – Disconnect Peer Request
Base
ingress/egress
dwa – Device Watchdog Answer
Base
ingress/egress
dwr – Device Watchdog Request
Base
ingress/egress
raa – Re-Authentication Answer
Gx, Gy
egress
rar – Re-Authentication Request
Gx, Gy
ingress
- direction {ingress | egress}
-
Specifies if the message is incoming or outgoing.
- script
-
Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.
Platforms
All
diameter
Syntax
diameter
Context
[Tree] (config>aaa diameter)
Full Context
configure aaa diameter
Description
Commands in this context configure Diameter parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter
Syntax
[no] diameter
Context
[Tree] (debug diameter)
Full Context
debug diameter
Description
This command enables debugging for diameter.
The no form of this command disables debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter
Syntax
diameter
Context
[Tree] (config>app-assure>group>transit-ip diameter)
Full Context
configure application-assurance group transit-ip-policy diameter
Description
Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
diameter-application-policy
diameter-application-policy
Syntax
diameter-application-policy policy-name
no diameter-application-policy
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-application-policy)
[Tree] (config>service>vpls>sap diameter-application-policy)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-application-policy)
[Tree] (config>service>vprn>sub-if>grp-if diameter-application-policy)
[Tree] (config>service>ies>sub-if>grp-if diameter-application-policy)
Full Context
configure subscriber-mgmt local-user-db ipoe host diameter-application-policy
configure service vpls sap diameter-application-policy
configure subscriber-mgmt local-user-db ppp host diameter-application-policy
configure service vprn subscriber-interface group-interface diameter-application-policy
configure service ies subscriber-interface group-interface diameter-application-policy
Description
This command applies the diameter-application-policy to the processing of the host attachment requests.
The no form of this command reverts to the default value.
Parameters
- policy-name
-
Specifies the name of the diameter policy, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface diameter-application-policy
- configure subscriber-mgmt local-user-db ipoe host diameter-application-policy
- configure subscriber-mgmt local-user-db ppp host diameter-application-policy
- configure service ies subscriber-interface group-interface diameter-application-policy
All
- configure service vpls sap diameter-application-policy
diameter-application-policy
Syntax
diameter-application-policy application-policy-name [create]
no diameter-application-policy application-policy-name
Context
[Tree] (config>subscr-mgmt diameter-application-policy)
Full Context
configure subscriber-mgmt diameter-application-policy
Description
Commands in this context create and configure diameter application policy.
The no form of this command reverts to the default.
Parameters
- application-policy-name
-
Specifies the name of the diameter policy, up to 32 characters.
- create
-
Specifies the keyword used to create a diameter application policy. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter-auth-policy
diameter-auth-policy
Syntax
diameter-auth-policy name
no diameter-auth-policy
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-auth-policy)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-auth-policy)
Full Context
configure subscriber-mgmt local-user-db ipoe host diameter-auth-policy
configure subscriber-mgmt local-user-db ppp host diameter-auth-policy
Description
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default.
Parameters
- name
-
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter-auth-policy
Syntax
diameter-auth-policy diameter-authentication-policy-name
no diameter-auth-policy
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn diameter-auth-policy)
Full Context
configure subscriber-mgmt gtp apn-policy apn diameter-auth-policy
Description
This command configures the Diameter authentication policy with which the GTP connection is authenticated.
The no form of this command removes the authentication policy. Only new session setups are affected.
Default
no diameter-auth-policy
Parameters
- diameter-authentication-policy-name
-
Specifies the name of the authentication policy to be used, up to 32 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
diameter-auth-policy
Syntax
diameter-auth-policy name
no diameter-auth-policy
Context
[Tree] (config>service>vpls>sap diameter-auth-policy)
Full Context
configure service vpls sap diameter-auth-policy
Description
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default value.
Parameters
- name
-
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter-auth-policy
Syntax
diameter-auth-policy name
no diameter-auth-policy
Context
[Tree] (config>service>ies>sub-if>grp-if diameter-auth-policy)
[Tree] (config>service>vprn>sub-if>grp-if diameter-auth-policy)
Full Context
configure service ies subscriber-interface group-interface diameter-auth-policy
configure service vprn subscriber-interface group-interface diameter-auth-policy
Description
This command is used to configure the Diameter NASREQ application policy to use for authentication.
The no form of this command reverts to the default.
Parameters
- name
-
Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diameter-node
diameter-node
Syntax
diameter-node origin-host-string destination-realm destination-realm-string
no diameter-node
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy diameter-node)
Full Context
configure subscriber-mgmt diameter-application-policy diameter-node
Description
This command configures the Diameter node for this Diameter application policy.
Parameters
- origin-host-string
-
Specifies the Origin-Host AVP used by this Diameter policy, up to 80 characters.
- destination-realm-string
-
Specifies the Destination-Realm AVP used by this Diameter policy peer, up to 80 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
diff
diff
Syntax
diff
Context
[Tree] (config>app-assure>group>policy diff)
Full Context
configure application-assurance group policy diff
Description
This command compares the newly configured policy against the operational policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
diffserv-te
diffserv-te
Syntax
diffserv-te [mam | rdm]
no diffserv-te
Context
[Tree] (config>router>rsvp diffserv-te)
Full Context
configure router rsvp diffserv-te
Description
This command enabled Diff-Serv TE on the node.
When this command is enabled, IS-IS and OSPF will start advertising available bandwidth for each TE class configured under the diffserv-te node. This command will only have effect if the operator has already enabled TE at the IS-IS and/or OSPF routing protocol levels:
config>router>isis>traffic-engineering
and/or:
config>router>ospf>traffic-engineering
IGP will advertise for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP will continue to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the config>router>rsvp>interface context.
The user configures the following parameters for the operation of Diff-Serv:
-
Definition of TE classes, TE Class = {Class Type (CT), LSP priority}.
-
Mapping of the system forwarding classes to the Diff-Serv Class Type (CT).
-
Configuration of the percentage of RSVP interface bandwidth each CT shares, that is, the Bandwidth Constraint (BC).
When Diff-Serv TE is enabled, the system will automatically enable the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link. This is the only Admission Control Policy supported in this release.
Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.
The sum of all BC values across all CTs will not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:
SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7
An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:
B <= Unreserved Bandwidth for TE-Class[i]
where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:
Reserved(CTc) = Reserved(CTc) + B
Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h
Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p
The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.
The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.
The RDM model is defined using the following equations:
SUM (Reserved (CTc)) <= BCb,
where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.
BC0= Max-Reservable-Bandwidth, so that
SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,
where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).
When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.
The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.
The no form of this command reverts to the default value.
Default
no diffserv-te
Parameters
- mam
-
Defines the default admission control policy for Diff-Serv LSPs.
- rdm
-
Defines Russian doll model for the admission control policy of Diff-Serv LSPs.
Platforms
All
digest-type
digest-type
Syntax
digest-type {default | none | md5 | sha1}
no digest-type
Context
[Tree] (config>service>vprn>l2tp>l2tpv3 digest-type)
[Tree] (config>service>vprn>l2tp>group>l2tpv3 digest-type)
Full Context
configure service vprn l2tp l2tpv3 digest-type
configure service vprn l2tp group l2tpv3 digest-type
Description
This command configures the hashing algorithm used to calculate the message digest.
The no form of this command returns the digest-type to none.
Default
no digest-type
Parameters
- none
-
Specifies that no digest should be used.
- md5
-
Specifies that the MD5 algorithm should be used.
- sha1
-
Specifies that the SHA1 algorithm should be used.
- default
-
When specified within the config>service>vprn>l2tp>group>l2tpv3 context, this is referencing to the digest-type configuration within the config>service>vprn>l2tp>l2tpv3 context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
digital-coherent-optics
digital-coherent-optics
Syntax
[no] digital-coherent-optics
Context
[Tree] (config>port>transceiver digital-coherent-optics)
Full Context
configure port transceiver digital-coherent-optics
Description
This command specifies if a digital coherent optics module is used for this port.
The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.
Default
no digital-coherent-optics
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dir
dir
Syntax
dir [file-url] [sort-order { d | n | s}] [reverse]
Context
[Tree] (file dir)
Full Context
file dir
Description
This command displays a list of files and subdirectories in a directory.
Parameters
- file-url
-
Specifies the path or directory name.
Use the file-url with the optional wildcard (*) to reduce the number of files to list.
- sort-order {d | n | s}
-
Specifies the sort order.
- reverse
-
Reverses the sort order.
Platforms
All
Output
The following output is an example of directory information.
Output ExampleA:cses-E12>file cf3:\ # dir
- dir [<file-url>] [sort-order { d | n | s}] [reverse]
<file-url> : <local-url> | <remote-url>
local-url - [<cflash-id>/][<file-path>]
200 chars max, including cflash-id
directory length 99 chars max each
remote-url - [ftp://<login>:<pswd>@<remote-locn>/
][<file-path>]
255 chars max
directory length 99 chars max each
remote-locn - [ <hostname> | <ipv4-address> |
[<ipv6-address>]]
ipv4-address - a.b.c.d
ipv6-address - x:x:x:x:x:x:x:x[-interface]
x:x:x:x:x:x:d.d.d.d[-interface]
x - [0..FFFF]H
d - [0..255]D
interface - 32 chars max, for link
local addresses
cflash-id - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|
cf2-B:|cf3:|cf3-A:|cf3-B:
< d | n | s> : Sort order: d - date, n - name, s - size
<reverse> : keyword - reverse order
A:cses-E12>file cf3:\ # dir
direction
direction
Syntax
direction direction
Context
[Tree] (debug>router>l2tp>peer>packet direction)
[Tree] (debug>router>l2tp>assignment-id>packet direction)
[Tree] (debug>router>l2tp>packet direction)
[Tree] (debug>router>l2tp>group>packet direction)
Full Context
debug router l2tp peer packet direction
debug router l2tp assignment-id packet direction
debug router l2tp packet direction
debug router l2tp group packet direction
Description
This command enables debugging for packet direction.
Parameters
- direction
-
Specifies the packet direction.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
direction
Syntax
direction {ingress | egress | both}
Context
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id direction)
Full Context
debug subscriber-mgmt vrgw brg pppoe-client brg-id direction
Description
This command specifies if debugging should only include ingress, egress or all messages.
Default
direction both
Parameters
- ingress
-
Specifies that debugging only includes ingress messages.
- egress
-
Specifies that debugging only includes egress messages.
- both
-
Specifies that debugging includes both ingress and egress messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
direction
Syntax
direction ipsec-direction
no direction
Context
[Tree] (config>ipsec>static-sa direction)
Full Context
configure ipsec static-sa direction
Description
This command configures the direction for an IPsec manual SA.
The no form of this command reverts to the default value.
Default
direction bidirectional
Parameters
- ipsec-direction
-
Identifies the direction to which this static SA entry can be applied.
Platforms
All
direction
Syntax
direction direction
Context
[Tree] (debug>router>pcp>pcp-server>packet direction)
Full Context
debug router pcp pcp-server packet direction
Description
This command enables debugging for packet direction.
Parameters
- direction
-
Specifies the packet direction.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
direction
Syntax
direction
Context
[Tree] (config>system>security>keychain direction)
Full Context
configure system security keychain direction
Description
This command specifies the data type that indicates the TCP stream direction to apply the keychain.
Platforms
All
direction-bit
direction-bit
Syntax
[no] direction-bit
Context
[Tree] (config>mirror>mirror-dest>encap>layer-3-encap direction-bit)
Full Context
configure mirror mirror-dest encap layer-3-encap direction-bit
Description
This command is used to steal one bit from the intercept-id in the LI-Shim and use it to indicate the direction of traffic flow for an LI session. Using a direction bit may be used by a LI Mediation Gateway to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror-dest, intercept-id and session-id. If the direction bit is enabled then the Mirror Header Version (2 bit mhv) in the LI-Shim will be set to binary 01, and the next bit after the mhv is set to 0 for ingress traffic and 1 for egress traffic.
For NAT based LI, ingress means the traffic is arriving at the node from the subscriber host (applies to the 7450 ESS and 7750 SR).
No changes are allowed to the direction-bit configuration once a gateway is configured.
Platforms
All
direction-bit
Syntax
[no] direction-bit
Context
[Tree] (config>li>mirror-dest-template>layer-3-encap direction-bit)
Full Context
configure li mirror-dest-template layer-3-encap direction-bit
Description
This command enables and disables the use of one bit from the interception ID field in the LI-Shim header to be used to indicate the direction of mirrored traffic flow for an LI session. An LI Mediation Gateway can use a direction bit to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror destination, interception ID, and session ID. If the direction bit is enabled, the Mirror Header Version (2-bit MHV) in the LI-Shim header will be set to binary 01, and the next bit after the MHV is set to 0 for ingress traffic and 1 for egress traffic.
For NAT-based LI, ingress traffic arrives at the node from the subscriber host. No changes are allowed to the direction bit configuration after a gateway is configured.
The no form of this command disables the use of the bit as a direction indicator.
Platforms
All
disable
disable
Syntax
[no] disable
Context
[Tree] (config>call-trace>location disable)
Full Context
configure call-trace location disable
Description
When configured, the specified compact flash will not be used by call-trace. The no form of this command enables the compact flash for use by call-trace.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-4byte-asn
disable-4byte-asn
Syntax
[no] disable-4byte-asn
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-4byte-asn)
Full Context
configure subscriber-mgmt bgp-peering-policy disable-4byte-asn
Description
This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.
If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer.
The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-4byte-asn
Syntax
[no] disable-4byte-asn
Context
[Tree] (config>service>vprn>bgp>group>neighbor disable-4byte-asn)
[Tree] (config>service>vprn>bgp disable-4byte-asn)
[Tree] (config>service>vprn>bgp>group disable-4byte-asn)
Full Context
configure service vprn bgp group neighbor disable-4byte-asn
configure service vprn bgp disable-4byte-asn
configure service vprn bgp group disable-4byte-asn
Description
This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.
If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).
The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.
Platforms
All
disable-4byte-asn
Syntax
[no] disable-4byte-asn
Context
[Tree] (config>router>bgp>group>neighbor disable-4byte-asn)
[Tree] (config>router>bgp>group disable-4byte-asn)
[Tree] (config>router>bgp disable-4byte-asn)
Full Context
configure router bgp group neighbor disable-4byte-asn
configure router bgp group disable-4byte-asn
configure router bgp disable-4byte-asn
Description
This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.
If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.
The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.
Default
no disable-4byte-asn
Platforms
All
disable-aging
disable-aging
Syntax
[no] disable-aging
Context
[Tree] (config>service>vpls>sap disable-aging)
[Tree] (config>service>template>vpls-template disable-aging)
[Tree] (config>service>vpls>spoke-sdp disable-aging)
[Tree] (config>service>vpls>vxlan disable-aging)
[Tree] (config>service>vpls disable-aging)
Full Context
configure service vpls sap disable-aging
configure service template vpls-template disable-aging
configure service vpls spoke-sdp disable-aging
configure service vpls vxlan disable-aging
configure service vpls disable-aging
Description
This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).
The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.
When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.
The no form of this command enables aging on the VPLS service.
Default
no disable-aging
Except for VXLAN instances, where the disable-aging is the default mode
Platforms
All
- configure service template vpls-template disable-aging
- configure service vpls disable-aging
- configure service vpls spoke-sdp disable-aging
- configure service vpls sap disable-aging
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vpls vxlan disable-aging
disable-aging
Syntax
[no] disable-aging
Context
[Tree] (config>service>pw-template disable-aging)
Full Context
configure service pw-template disable-aging
Description
This command disables MAC address aging across a service.
The no form of this command enables aging.
Default
no disable-aging
Platforms
All
disable-capability-negotiation
disable-capability-negotiation
Syntax
[no] disable-capability-negotiation
Context
[Tree] (config>service>vprn>bgp>group disable-capability-negotiation)
[Tree] (config>service>vprn>bgp>group>neighbor disable-capability-negotiation)
Full Context
configure service vprn bgp group disable-capability-negotiation
configure service vprn bgp group neighbor disable-capability-negotiation
Description
This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
Default
no disable-capability-negotiation
Platforms
All
disable-capability-negotiation
Syntax
[no] disable-capability-negotiation
Context
[Tree] (config>router>bgp>group>neighbor disable-capability-negotiation)
[Tree] (config>router>bgp>group disable-capability-negotiation)
Full Context
configure router bgp group neighbor disable-capability-negotiation
configure router bgp group disable-capability-negotiation
Description
This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.
The no form of this command removes this command from the configuration and restores the normal behavior.
Default
no disable-capability-negotiation
Platforms
All
disable-client-reflect
disable-client-reflect
Syntax
[no] disable-client-reflect
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-client-reflect)
Full Context
configure subscriber-mgmt bgp-peering-policy disable-client-reflect
Description
This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.
The no form re-enables client reflection of routes to all client peers.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-client-reflect
Syntax
[no] disable-client-reflect
Context
[Tree] (config>service>vprn>bgp disable-client-reflect)
[Tree] (config>service>vprn>bgp>group disable-client-reflect)
[Tree] (config>service>vprn>bgp>group>neighbor disable-client-reflect)
Full Context
configure service vprn bgp disable-client-reflect
configure service vprn bgp group disable-client-reflect
configure service vprn bgp group neighbor disable-client-reflect
Description
This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.
The no form re-enables client reflection of routes.
Default
no disable-client-reflect
Platforms
All
disable-client-reflect
Syntax
[no] disable-client-reflect
Context
[Tree] (config>router>bgp>group disable-client-reflect)
[Tree] (config>router>bgp>group>neighbor disable-client-reflect)
[Tree] (config>router>bgp disable-client-reflect)
Full Context
configure router bgp group disable-client-reflect
configure router bgp group neighbor disable-client-reflect
configure router bgp disable-client-reflect
Description
This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.
The no form enables client reflection of routes.
Default
no disable-client-reflect
Platforms
All
disable-communities
disable-communities
Syntax
disable-communities [standard] [extended]
no disable-communities
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-communities)
Full Context
configure subscriber-mgmt bgp-peering-policy disable-communities
Description
This command configures BGP to disable sending communities.
The no form of this command reverts to the default.
Parameters
- standard
-
Specifies standard communities that existed before VPRNs or 2547.
- extended
-
Specifies BGP communities used were expanded after the concept of 2547 was introduced, to include handling the VRF target.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-communities
Syntax
disable-communities [standard] [extended] [ large]
no disable-communities
Context
[Tree] (config>service>vprn>bgp>group>neighbor disable-communities)
[Tree] (config>service>vprn>bgp>group disable-communities)
[Tree] (config>service>vprn>bgp disable-communities)
Full Context
configure service vprn bgp group neighbor disable-communities
configure service vprn bgp group disable-communities
configure service vprn bgp disable-communities
Description
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.
Default
no disable-communities
Parameters
- standard
-
Specifies that standard 4-byte communities should be removed.
- extended
-
Specifies that 8-byte extended communities (of all types) should be removed.
- large
-
Specifies that 12-byte large communities should be removed.
Platforms
All
disable-communities
Syntax
disable-communities [standard] [extended] [large]
no disable-communities
Context
[Tree] (config>router>bgp disable-communities)
[Tree] (config>router>bgp>group>neighbor disable-communities)
[Tree] (config>router>bgp>group disable-communities)
Full Context
configure router bgp disable-communities
configure router bgp group neighbor disable-communities
configure router bgp group disable-communities
Description
This command configures BGP to disable sending standard, extended, or large communities to specific peers.
By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.
Default
no disable-communities
Parameters
- standard
-
Advertise the Communities attribute to peers.
- extended
-
Advertise the Extended Communities attribute to peers.
- large
-
Advertise the Large Communities attribute to peers.
Platforms
All
disable-cookies
disable-cookies
Syntax
[no] disable-cookies
Context
[Tree] (config>subscr-mgmt>ppp-policy disable-cookies)
Full Context
configure subscriber-mgmt ppp-policy disable-cookies
Description
This command disables the use of cookies.
The no form of this command enables cookies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-explicit-null
disable-explicit-null
Syntax
[no] disable-explicit-null
Context
[Tree] (config>router>bgp>label-allocation>label-ipv6 disable-explicit-null)
Full Context
configure router bgp label-allocation label-ipv6 disable-explicit-null
Description
This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.
When this command is enabled (no disable-explicit-null), the following behaviors apply:
-
during the times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to IPv6 explicit null (value 2), forcing a POP behavior for received packets.
-
received label-unicast IPv6 routes never create tunnels in TTM that can be used to resolve other BGP routes (with an IPv6 next-hop).
-
a received label-unicast IPv6 route can be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)
When this command is disabled (disable-explicit-null), the following behaviors apply:
-
during those times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to a proper value in the dynamic label range and programs a POP or SWAP operation for that label, depending on the origin of the route and various import policy actions that could apply to the route
-
received label-unicast IPv6 routes that have a prefix length of 128 bits are automatically installed in TTM so that they can be used to resolve other (non-labeled-unicast) BGP routes (with an IPv6 next-hop)
-
a received label-unicast ipv6 route cannot be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)
-
the label-ipv6 routes used for ECMP towards an IPv6 destination cannot be a mix of routes with regular label values and routes with special (IPv6 explicit null) label values
Changes in the operational status do not cause the BGP sessions of the base router to reset.
Platforms
All
disable-fast-external-failover
disable-fast-external-failover
Syntax
[no] disable-fast-external-failover
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-fast-external-failover)
Full Context
configure subscriber-mgmt bgp-peering-policy disable-fast-external-failover
Description
This command configures BGP fast external failover.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-fast-external-failover
Syntax
[no] disable-fast-external-failover
Context
[Tree] (config>service>vprn>bgp disable-fast-external-failover)
[Tree] (config>service>vprn>bgp>group>neighbor disable-fast-external-failover)
[Tree] (config>service>vprn>bgp>group disable-fast-external-failover)
Full Context
configure service vprn bgp disable-fast-external-failover
configure service vprn bgp group neighbor disable-fast-external-failover
configure service vprn bgp group disable-fast-external-failover
Description
This command configures BGP fast external failover.
Platforms
All
disable-fast-external-failover
Syntax
[no] disable-fast-external-failover
Context
[Tree] (config>router>bgp disable-fast-external-failover)
[Tree] (config>router>bgp>group disable-fast-external-failover)
[Tree] (config>router>bgp>group>neighbor disable-fast-external-failover)
Full Context
configure router bgp disable-fast-external-failover
configure router bgp group disable-fast-external-failover
configure router bgp group neighbor disable-fast-external-failover
Description
This command configures BGP fast external failover.
Default
no disable-fast-external-failover
Platforms
All
disable-graceful-shutdown
disable-graceful-shutdown
Syntax
[no] disable-graceful-shutdown
Context
[Tree] (config>system>login-control>ssh disable-graceful-shutdown)
Full Context
configure system login-control ssh disable-graceful-shutdown
Description
This command enables graceful shutdown of SSH sessions.
The no form of this command disables graceful shutdown of SSH sessions.
Platforms
All
disable-ldp-sync
disable-ldp-sync
Syntax
[no] disable-ldp-sync
Context
[Tree] (config>router>isis disable-ldp-sync)
Full Context
configure router isis disable-ldp-sync
Description
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
Default
no disable-ldp-sync
Platforms
All
disable-ldp-sync
Syntax
[no] disable-ldp-sync
Context
[Tree] (config>router>ospf3 disable-ldp-sync)
[Tree] (config>router>ospf disable-ldp-sync)
Full Context
configure router ospf3 disable-ldp-sync
configure router ospf disable-ldp-sync
Description
This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.
The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.
Default
no disable-ldp-sync
Platforms
All
disable-learning
disable-learning
Syntax
[no] disable-learning
Context
[Tree] (config>service>vpls>sap disable-learning)
[Tree] (config>service>vpls>vxlan disable-learning)
[Tree] (config>service>vpls disable-learning)
[Tree] (config>service>template>vpls-template disable-learning)
[Tree] (config>service>vpls>spoke-sdp disable-learning)
Full Context
configure service vpls sap disable-learning
configure service vpls vxlan disable-learning
configure service vpls disable-learning
configure service template vpls-template disable-learning
configure service vpls spoke-sdp disable-learning
Description
This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.
When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.
When no disable-learning is specified for a VPLS on a 7450 ESS, it is possible to disable learning for specific SAPs and/or spoke SDPs by entering the disable-learning command at the appropriate level.
When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
Default
no disable-learning
Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.
Platforms
All
- configure service template vpls-template disable-learning
- configure service vpls sap disable-learning
- configure service vpls disable-learning
- configure service vpls spoke-sdp disable-learning
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vpls vxlan disable-learning
disable-learning
Syntax
[no] disable-learning
Context
[Tree] (config>service>pw-template disable-learning)
Full Context
configure service pw-template disable-learning
Description
This command enables learning of new MAC addresses.
This parameter is mainly used in conjunction with the discard-unknown command.
The no form of this command enables learning of MAC addresses.
Default
no disable-learning (Normal MAC learning is enabled)
Platforms
All
disable-route-table-install
disable-route-table-install
Syntax
[no] disable-route-table-install
Context
[Tree] (config>router>bgp disable-route-table-install)
Full Context
configure router bgp disable-route-table-install
Description
This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).
The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.
Default
no disable-route-table-install
Platforms
All
disable-route-table-install
Syntax
[no] disable-route-table-install
Context
[Tree] (config>router>policy-options>policy-statement>default-action disable-route-table-install)
[Tree] (config>router>policy-options>policy-statement>entry>action disable-route-table-install)
Full Context
configure router policy-options policy-statement default-action disable-route-table-install
configure router policy-options policy-statement entry action disable-route-table-install
Description
This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.
This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.
Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.
The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.
Default
no disable-route-table-install
Platforms
All
disable-router-alert-check
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vprn>mld>group-interface disable-router-alert-check)
[Tree] (config>router>mld>group-interface disable-router-alert-check)
[Tree] (config>router>igmp>if disable-router-alert-check)
[Tree] (config>service>vprn>igmp>group-interface disable-router-alert-check)
[Tree] (config>router>igmp>group-interface disable-router-alert-check)
Full Context
configure service vprn mld group-interface disable-router-alert-check
configure router mld group-interface disable-router-alert-check
configure router igmp interface disable-router-alert-check
configure service vprn igmp group-interface disable-router-alert-check
configure router igmp group-interface disable-router-alert-check
Description
This command disables router alert checking for IGMP/MLD messages received on this interface.
The no form of this command enables router alert checking.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure router igmp group-interface disable-router-alert-check
- configure service vprn mld group-interface disable-router-alert-check
- configure service vprn igmp group-interface disable-router-alert-check
- configure router mld group-interface disable-router-alert-check
All
- configure router igmp interface disable-router-alert-check
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>router>mld>if disable-router-alert-check)
Full Context
configure router mld interface disable-router-alert-check
Description
This command enables router alert checking for MLD messages received on this interface.
The no form of this command disables router alert checking.
Platforms
All
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>subscr-mgmt>igmp-policy disable-router-alert-check)
Full Context
configure subscriber-mgmt igmp-policy disable-router-alert-check
Description
This command disables router alert checking for IGMP messages received on this interface.
The no form of this command reverts to the default value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)
Full Context
configure service vprn subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check
Description
This command disables the IGMP router alert check option.
The no form of this command enables the router alert check.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>subscr-mgmt>mld-policy disable-router-alert-check)
Full Context
configure subscriber-mgmt mld-policy disable-router-alert-check
Description
This command disables router alert checking for MLD messages received on this interface.
The no form of this command enables router alert checking.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vpls>mesh-sdp>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>spoke-sdp>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>igmp-snooping disable-router-alert-check)
[Tree] (config>service>vpls>mesh-sdp>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>mld-snooping disable-router-alert-check)
[Tree] (config>service>vpls>sap>igmp-host-tracking disable-router-alert-check)
[Tree] (config>service>vpls>spoke-sdp>igmp-snooping disable-router-alert-check)
Full Context
configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
configure service vpls spoke-sdp mld-snooping disable-router-alert-check
configure service vpls sap igmp-snooping disable-router-alert-check
configure service vpls mesh-sdp mld-snooping disable-router-alert-check
configure service vpls sap mld-snooping disable-router-alert-check
configure service vpls sap igmp-host-tracking disable-router-alert-check
configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
Description
This command disables the IGMP or MLD router alert check option.
The no form of this command enables the router alert check.
Default
no disable-router-alert-check
Platforms
All
- configure service vpls spoke-sdp igmp-snooping disable-router-alert-check
- configure service vpls sap igmp-snooping disable-router-alert-check
- configure service vpls spoke-sdp mld-snooping disable-router-alert-check
- configure service vpls mesh-sdp mld-snooping disable-router-alert-check
- configure service vpls sap mld-snooping disable-router-alert-check
- configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vpls sap igmp-host-tracking disable-router-alert-check
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)
[Tree] (config>service>vprn>igmp>if disable-router-alert-check)
Full Context
configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check
configure service vprn igmp interface disable-router-alert-check
Description
This command disables the IGMP router alert check option.
The no form of this command enables the router alert check.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check
All
- configure service vprn igmp interface disable-router-alert-check
disable-router-alert-check
Syntax
[no] disable-router-alert-check
Context
[Tree] (config>service>vprn>mld>if disable-router-alert-check)
Full Context
configure service vprn mld interface disable-router-alert-check
Description
This command disables router alert checking for MLD messages received on this interface.
The no form of this command enables the router alert checking.
Platforms
All
disable-selective-fib
disable-selective-fib
Syntax
[no] disable-selective-fib
Context
[Tree] (config>service>vprn disable-selective-fib)
Full Context
configure service vprn disable-selective-fib
Description
This command specifies whether the system level selective FIB setting is overridden on this instance.
The no form of this command enables the selective FIB.
Default
no disable-selective-fib
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
disable-selective-fib
Syntax
[no] disable-selective-fib
Context
[Tree] (config>router disable-selective-fib)
Full Context
configure router disable-selective-fib
Description
This command disables the selective FIB.
The no form of this command enables the selective FIB.
Default
no disable-selective-fib
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
disable-send-bvpls-evpn-flush
disable-send-bvpls-evpn-flush
Syntax
[no] disable-send-bvpls-evpn-flush
Context
[Tree] (config>service>vpls>sap disable-send-bvpls-evpn-flush)
[Tree] (config>service>vpls>spoke-sdp disable-send-bvpls-evpn-flush)
Full Context
configure service vpls sap disable-send-bvpls-evpn-flush
configure service vpls spoke-sdp disable-send-bvpls-evpn-flush
Description
This command disables the ISID-based C-MAC flush indication when the corresponding SAP or spoke-SDP enters the operationally down state.
If the send-bvpls-evpn-flush is properly enabled, the no version of the command enables B-MAC/ISID route updates to be sent when the SAP or spoke-SDP is operationally down.
Default
no disable-send-bvpls-evpn-flush
Platforms
All
disable-shcv
disable-shcv
Syntax
[no] disable-shcv [alarm] [hold-time seconds]
Context
[Tree] (config>subscr-mgmt>ancp>policy>port-dwn disable-shcv)
Full Context
configure subscriber-mgmt ancp ancp-policy port-down disable-shcv
Description
When this command is configured, the node suspends SHCV for the hosts defined with this ANCP policy until the access node sends a port-up message. When the hold-time parameter is used, the node suspends SHCV for the period of time defined. If the hold-time parameter is not defined the node will suspend SHCV until a port-up message is received.
If the optional alarm flag is used, the node sends a SHCV alarm before suspending.
The no form of this command reverts to the default.
Parameters
- alarm
-
Specifies that the node sends an alarm before suspending SHCV.
- seconds
-
Specifies the time that the node suspends SHCV.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-soft-reset-extension
disable-soft-reset-extension
Syntax
[no] disable-soft-reset-extension
Context
[Tree] (config>lag>bfd disable-soft-reset-extension)
Full Context
configure lag bfd disable-soft-reset-extension
Description
This command disables the automatic extension of BFD timers during an IOM/IMM soft-reset. Normally, BFD session timers are automatically extended during a soft-reset operation on the IOMs and IMMs to avoid BFD sessions timing out and causing protocol events. However, in some cases this behavior is not desired as it could delay fast re-route transitions if the timers are in place. The disable-soft-reset-extension command controls this behavior.
Default
no disable-soft-reset-extension
Platforms
All
disable-stickiness
disable-stickiness
Syntax
[no] disable-stickiness
Context
[Tree] (config>aaa>radius-srv-plcy>servers disable-stickiness)
Full Context
configure aaa radius-server-policy servers disable-stickiness
Description
This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
disable-targeted-session
disable-targeted-session
Syntax
[no] disable-targeted-session
Context
[Tree] (config>router>ldp>targ-session disable-targeted-session)
Full Context
configure router ldp targeted-session disable-targeted-session
Description
This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.
The no form of this command enables the set up of any targeted sessions.
Default
no disable-targeted-session
Platforms
All
disallow-igp
disallow-igp
Syntax
[no] disallow-igp
Context
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop disallow-igp)
Full Context
configure router static-route-entry indirect tunnel-next-hop disallow-igp
Description
This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.
When configured, the associated static route will not be resolved to an available IGP route in the RTM.
The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.
Default
no disallow-igp
Platforms
All
discard
discard
Syntax
discard [now]
Context
[Tree] (candidate discard)
Full Context
candidate discard
Description
This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.
Parameters
- now
-
Avoids a confirmation prompt for the discard.
Platforms
All
discard-changes
discard-changes
Syntax
[no] discard-changes
Context
[Tree] (configure>system>security>profile>netconf>base-op-authorization discard-changes)
Full Context
configure system security profile netconf base-op-authorization discard-changes
Description
This command enables the NETCONF discard-changes operation.
The no form of this command disables the operation.
Default
no discard-changes
The operation is enabled by default in the built-in system-generated administrative profile.
Platforms
All
discard-eligible
discard-eligible
Syntax
discard-eligible {true | false}
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>s-tag discard-eligible)
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>c-tag discard-eligible)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet s-tag discard-eligible
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet c-tag discard-eligible
Description
This command configures the marking of the discard eligibility (DEI) bit in the VLAN header.
Default
discard-eligible false
Parameters
- true
-
Keyword to indicate that the frame is discard eligible.
- false
-
Keyword to indicate that the frame is not discard eligible.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
discard-rx-pause-frames
discard-rx-pause-frames
Syntax
[no] discard-rx-pause-frames
Context
[Tree] (config>port>ethernet discard-rx-pause-frames)
Full Context
configure port ethernet discard-rx-pause-frames
Description
This command discards received pause frames. Pause frames are used for local link flow control.
The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.
Default
no discard-rx-pause-frames
Platforms
All
discard-unknown
discard-unknown
Syntax
[no] discard-unknown
Context
[Tree] (config>service>template>vpls-template discard-unknown)
[Tree] (config>service>vpls discard-unknown)
Full Context
configure service template vpls-template discard-unknown
configure service vpls discard-unknown
Description
By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).
The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.
Default
no discard-unknown
Platforms
All
discard-unknown-source
discard-unknown-source
Syntax
[no] discard-unknown-source
Context
[Tree] (config>service>template>vpls-template discard-unknown-source)
[Tree] (config>service>vpls>sap discard-unknown-source)
[Tree] (config>service>vpls>vxlan discard-unknown-source)
[Tree] (config>service>vpls>spoke-sdp discard-unknown-source)
[Tree] (config>service>template>vpls-sap-template discard-unknown-source)
Full Context
configure service template vpls-template discard-unknown-source
configure service vpls sap discard-unknown-source
configure service vpls vxlan discard-unknown-source
configure service vpls spoke-sdp discard-unknown-source
configure service template vpls-sap-template discard-unknown-source
Description
When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.
Default
no discard-unknown-source
Platforms
All
- configure service vpls sap discard-unknown-source
- configure service template vpls-template discard-unknown-source
- configure service template vpls-sap-template discard-unknown-source
- configure service vpls spoke-sdp discard-unknown-source
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vpls vxlan discard-unknown-source
discard-unknown-source
Syntax
[no] discard-unknown-source
Context
[Tree] (config>service>pw-template discard-unknown-source)
Full Context
configure service pw-template discard-unknown-source
Description
When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.
When disabled, the packets are forwarded based on the destination MAC addresses.
The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.
Default
no discard-unknown-source
Platforms
All
disconnect
disconnect
Syntax
disconnect [address ip-address | session-id session-id | username user-name | {console | bluetooth | telnet | ftp | ssh | netconf | grpc}]
Context
[Tree] (admin disconnect)
Full Context
admin disconnect
Description
This command disconnects a user from a session.
Issuing the disconnect command without any parameters will disconnect the session in which the command was executed.
If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, then only the respective sessions are affected.
If no session type options are specified, then all sessions from the IP address or from the specified user are disconnected.
Any task that the user is executing is terminated. FTP files accessed by the user will not be removed.
A major severity security log event is created specifying what was terminated and by whom.
Parameters
- ip-address
-
Specifies the IP address to disconnect, specified in dotted decimal notation.
Note:IPv6 is supported on the 7750 SR and 7950 XRS.
- session-id
-
The model-driven session ID. Can be obtained using the show system management-interface datastore-locks [detail] command.
- user-name
-
Specifies the name of the user. The name can be up to 32 characters.
- console
-
Disconnects the console session.
- bluetooth
-
Disconnects the bluetooth session.
- telnet
-
Disconnects the Telnet session.
- ftp
-
Disconnects the FTP session.
- ssh
-
Disconnects the SSH session.
- netconf
-
Disconnects the NETCONF session.
- grpc
-
Disconnects the GRPC session.
Platforms
All
discover-delay
discover-delay
Syntax
discover-delay delay
no discover-delay
Context
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel discover-delay)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel discover-delay)
Full Context
configure service ies subscriber-interface group-interface dhcp offer-selection discover-delay
configure service vprn subscriber-interface group-interface dhcp offer-selection discover-delay
configure service vprn subscriber-interface dhcp offer-selection discover-delay
Description
This command configures the default time to delay DHCP Discover messages. The delay is applied to all DHCP Discover messages for which no per DHCP server or per client MAC delay is configured.
The no form of this command removes the delay.
Parameters
- delay
-
Specifies the default time to delay DHCP Discover messages, in deciseconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
discover-delay
Syntax
discover-delay delay
no discover-delay
Context
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel>clnt-mac discover-delay)
Full Context
configure service vprn subscriber-interface group-interface dhcp offer-selection client-mac discover-delay
configure service ies subscriber-interface group-interface dhcp offer-selection client-mac discover-delay
configure service vprn subscriber-interface dhcp offer-selection client-mac discover-delay
Description
This command configures the amount of time to delay DHCP Discover messages from odd or even source MAC addresses.
The no form of this command removes the delay.
Parameters
- delay
-
Specifies the amount of time to delay DHCP Discover messages from odd or even source MAC addresses, in deciseconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
discover-delay
Syntax
discover-delay delay
no discover-delay
Context
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>srvr discover-delay)
[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>srvr discover-delay)
[Tree] (config>service>vprn>sub-if>dhcp>osel>srvr discover-delay)
Full Context
configure service vprn subscriber-interface group-interface dhcp offer-selection server discover-delay
configure service ies subscriber-interface group-interface dhcp offer-selection server discover-delay
configure service vprn subscriber-interface dhcp offer-selection server discover-delay
Description
This command configures the amount of time to delay DHCP Discover messages relayed to the server.
The no form of this command removes the delay.
Parameters
- delay
-
Specifies the amount of time to delay DHCP Discover messages relayed to the server, in deciseconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
discovery
discovery
Syntax
discovery [padi] [pado] [padr] [pads] [padt]
no discovery
Context
[Tree] (debug>service>id>ppp>packet discovery)
Full Context
debug service id ppp packet discovery
Description
This command enables debugging for specific PPP discovery packets.
Parameters
- padi
-
Enables debugging for PADI PPP discovery packets.
- pado
-
Enables debugging for PADO PPP discovery packets.
- padr
-
Enables debugging for PADR PPP discovery packets.
- pads
-
Enables debugging for PADS PPP discovery packets.
- padt
-
Enables debugging for PADT PPP discovery packets.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
discovery
Syntax
discovery [padi] [pado] [padr] [pads] [ padt]
Context
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id discovery)
Full Context
debug subscriber-mgmt vrgw brg pppoe-client brg-id discovery
Description
This command, limits debugging only to the specified messages in the discovery phase.
Parameters
- padi
-
Limits debugging only to padi messages.
- pado
-
Limits debugging only to pado messages.
- padr
-
Limits debugging only to padr messages.
- pads
-
Limits debugging only to pads messages.
- padt
-
Limits debugging only to padt messages.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
discovery
Syntax
discovery
Context
[Tree] (config>port>ethernet>efm-oam discovery)
Full Context
configure port ethernet efm-oam discovery
Description
This is the top level of the hierarchy containing various discovery parameters that allow the operator to control certain aspects of the negotiation process as well as what action to take when there is a mismatch in peer capabilities.
Platforms
All
discovery-interval
discovery-interval
Syntax
discovery-interval interval-secs [boot interval-secs]
no discovery-interval
Context
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec discovery-interval)
Full Context
configure redundancy multi-chassis peer mc-ipsec discovery-interval
Description
This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.
Default
discovery-interval 300 boot 300
Parameters
- interval-secs
-
Specifies the maximum duration, in seconds, of the discovery interval during which a newly activated multi- chassis IPsec tunnel-group will remain dormant while trying to contact its redundant peer. Groups held dormant in this manner will neither pass traffic nor negotiate security keys. This interval ends when either the redundant peer is contacted and a master election occurs, or when the maximum duration expires.
- boot interval-secs
-
Specifies the maximum duration of an interval immediately following system startup. When the normal discovery interval for a group would expire while the post-boot discovery interval is still active, then the group's discovery interval is extended until the post-boot discovery interval expires. This allows an extension to the normal discovery stage of groups following a chassis reboot, to account for the larger variance in routing.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
discovery-interval
Syntax
discovery-interval seconds
Context
[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-interval)
Full Context
configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-interval
Description
This command configures the frequency at which IPv6 peer discovery packets are transmitted when the discovery-timer is active.
The no form of the command reverts to the default value.
Default
discovery-interval 10
Parameters
- seconds
-
Specifies transmission frequency of the discovery packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
discovery-timer
discovery-timer
Syntax
discovery-timer seconds
Context
[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-timer)
Full Context
configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-timer
Description
This command configures the amount of time to transmit peer discovery packets at the discovery-interval. The timer starts when the IPv6 protocols is enabled under the config>router>if>if-attribute>delay>dynamic> twamp-light>ipv6 context. At the expiration of the discovery-interval or when a peer is discovered, the probe interval changes to the value configured for the update-interval.
The no form of the command reverts to the default value.
Default
discovery-interval 60
Parameters
- seconds
-
Specifies transmission frequency of the discovery packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
discriminator
discriminator
Syntax
discriminator discriminator
no discriminator
Context
[Tree] (config>bfd>seamless-bfd>reflector discriminator)
Full Context
configure bfd seamless-bfd reflector discriminator
Description
This command specifies the S-BFD discriminator.
The no form of this command removes the discriminator.
Parameters
- discriminator
-
Specifies the discriminator value.
Platforms
All
discriminator
Syntax
discriminator discriminator
no discriminator
Context
[Tree] (config>router>bfd>seamless-bfd>peer discriminator)
Full Context
configure router bfd seamless-bfd peer discriminator
Description
This command specifies the seamless BFD reflector discriminator for the remote peer node in the mapping table used by seamless BFD sessions initiated on the router.
The no form of this command removes the discriminator.
Parameters
- discriminator
-
Specifies the discriminator of the remote node.
Platforms
All
disjointness-reference
disjointness-reference
Syntax
[no] disjointness-reference
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-reference)
Full Context
configure router pcep pcc pce-associations diversity disjointness-reference
Description
This command configures the value conveyed in the P-flag of the DISJOINTNESS-CONFIGURATION TLV. When enabled, it indicates that this LSP path is the reference path for the disjoint set of paths. The PCE must first compute the path of this LSP and then apply the requested disjointness type to compute the path of all other paths in the same diversity association ID.
The no form of this command sets the P-flag to false.
Default
P-flag to false
Platforms
All
disjointness-type
disjointness-type
Syntax
disjointness-type {loose | strict}
no disjointness-type
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-type)
Full Context
configure router pcep pcc pce-associations diversity disjointness-type
Description
This command configures the disjointness type for the association group.
The no form of this command reverts to the default value.
Default
disjointness-type loose
Parameters
- loose
-
Keyword to specify the loose disjointness type.
- strict
-
Keyword to specify the strict disjointness type.
Platforms
All
dispersion
dispersion
Syntax
dispersion dispersion
Context
[Tree] (config>port>dwdm>coherent dispersion)
Full Context
configure port dwdm coherent dispersion
Description
This command configures the residual chromatic dispersion to be compensated when the coherent receiver is operating in manual dispersion control mode.
Default
0
Parameters
- dispersion
-
Specifies the dispersion compensation.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
display
display
Syntax
display type {type} url-string format {format} [password [32 chars max]]
Context
[Tree] (admin>certificate display)
Full Context
admin certificate display
Description
This command displays the content of an input file in plain text.
When displaying the key file content, only the key size and type are displayed.
The following list summarizes the formats supported by this command:
-
System
-
system format
-
PKCS #12
-
PKCS #7 PEM encoded
-
PKCS #7 DER encoded
-
RFC4945
-
-
Certificate Request
-
PKCS #10
-
-
Key
-
system format
-
PKCS #12
-
-
CRL
-
system format
-
PKCS #7 PEM encoded
-
PKCS #7 DER encoded
-
RFC4945
-
Parameters
- url-string
-
Specifies the local CF card url of the input file.
- type
-
Specifies the type of input file.
- format
-
Specifies the format of input file.
- password
-
Specifies the password to decrypt the input file in case that it is an encrypted PKCS#12 file, up to 99 characters.
Platforms
All
display-config
display-config
Syntax
display-config [detail | index]
Context
[Tree] (admin display-config)
Full Context
admin display-config
Description
This command displays the system’s running configuration.
By default, only non-default settings are displayed.
Specifying the detail option displays all default and non-default configuration parameters.
Parameters
- detail
-
Displays default and non-default configuration parameters.
- index
-
Displays only persistent-indices.
Platforms
All
display-key
display-key
Syntax
display-key type {ike | esp} gateway name name dynamic-tunnel ip-address: port
display-key type {ike | esp} tunnel ipsec-tunnel-name
Context
[Tree] (admin>ipsec display-key)
Full Context
admin ipsec display-key
Description
This command displays existing IKE-SA or CHILD-SA keys..
This command does not work if config>ipsec>no show-ipsec-keys or no max-history-{esp|ike}-key-records is configured under corresponding ipsec-gw or ipsec-tunnel.
Parameters
- name
-
The name, up to 32 characters.
- ip-address
-
The IP address of the remote client.
- port
-
The port of the remote client.
- ipsec-tunnel-name
-
The IPsec tunnel name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
Output
The following outputs are examples of the admin ipsec display-key command.
Output Exampleadmin ipsec display-key type ike gateway name "rw" dynamic-tunnel 11.1.1.100:500
===============================================================================
IKE-SA history: max-num-records 3 current-num-saved-records 1
local: 172.16.100.1 remote: 11.1.1.100
record [0]: established time: 01/25/2018 20:51:55
Initiator-SPI: d67ac71d73656496 Responder-SPI: d67ac71d73656496 Ike Version: 2
SK_er: aes128, len: 16, val: a5da1c57f09a7eb7dbe9526cd52e2189
SK_ar: sha1, len: 20, val: c11797bb8ebe5a1fadf46363bf5e763552bb45d0
SK_ei: aes128, len: 16, val: 467124009cc577a8b23882a81ab9df70
SK_ai: sha1, len: 20, val: 7dfef89bad31cb72d1ca8da2c04a9521993c7f9
Output Example
admin ipsec display-key type esp gateway name "rw" dynamic-tunnel 11.1.1.100:500
ESP-SA history: max-num-records 48 current-num-saved-records 2ynamic-tunnel 11.1.1.100:500
local: 172.16.100.1 remote: 11.1.1.100
record [0]: established time: 01/25/2018 20:54:56
InSpi: 154532(0x00025ba4)
encr-alg: aes128 len: 16 val: 0xd26aa32d8bd328b1e8332fa5c7b5eeaa
auth-alg: sha1 len: 20 val: 0x0b37ddb824a43921d3b0ee81a6910eed065a9845
OutSpi: 3286259439(0xc3e056ef)
encr-alg: aes128 len: 16 val: 0x3acd95376ce04fcded2e0c80cc4289cf
alg: sha1 len: 20 val: 0x9f5a46b5cdc572972b44cdbd36b5f824ab060634
record [1]: established time: 01/25/2018 20:51:55
InSpi: 261186(0x0003fc42)
encr-alg: aes128 len: 16 val: 0x8bf97675d37de3e3f6e634e3e11fc3aa
auth-alg: sha1 len: 20 val: 0xf10c0f0821488cc14f8715cc323441fc967a79dd
OutSpi: 3246917342(0xc18806de)
encr-alg: aes128 len: 16 val: 0xf36aaaa7a3a09734fe4fc6cd0ac9043e
alg: sha1 len: 20 val: 0x40c13a444e4fb1d42a13812f70b17041ed0f56ee
dist-cpu-protection
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap dist-cpu-protection)
[Tree] (config>subscr-mgmt>msap-policy dist-cpu-protection)
Full Context
configure service vprn subscriber-interface group-interface sap dist-cpu-protection
configure subscriber-mgmt msap-policy dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to an MSAP policy. The DCP policy is automatically assigned to MSAPs created with this policy. A non-existent DCP policy can be assigned to an msap-policy because an MSAP policy is similar to a template that is applied in the MSAP creation. The DCP policy is validated at the time that the MSAP is created, and the MSAP creation is blocked (and an appropriate log event created) if the DCP policy does not exist.
For other types of objects (for example, normal non-MSAP SAPs and network interfaces) the DCP policy must exist before it can be assigned to the SAP.
The no form of this command removes the policy name from the configuration.
If no dist-cpu-protection policy is assigned to an MSAP policy, then the default access DCP policy (_default-access-policy) is used.
If no DCP functionality is required on the MSAP policy, then an empty DCP policy can be created and explicitly assigned to the MSAP policy.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>subscr-mgmt>sap-template dist-cpu-protection)
Full Context
configure subscriber-mgmt sap-template dist-cpu-protection
Description
This command assigns a DCP policy to a SAP template. The policy is automatically assigned to SAPs that are autocreated with this SAP template. The dist-cpu-protection policy must exit before it is assigned to a SAP template.
The no form of this command removes the policy name from the configuration.
If a DCP policy is not assigned to an SAP template, the default access DCP policy (_defaultaccess-policy) is used.
If no DCP functionality is required on the autocreated SAPs, an empty DCP policy can be created and explicitly assigned to the SAP template.
Default
no dist-cpu-protection
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>ipipe>sap dist-cpu-protection)
[Tree] (config>service>epipe>sap dist-cpu-protection)
[Tree] (config>service>cpipe>sap dist-cpu-protection)
Full Context
configure service ipipe sap dist-cpu-protection
configure service epipe sap dist-cpu-protection
configure service cpipe sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used.
If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
All
- configure service epipe sap dist-cpu-protection
- configure service ipipe sap dist-cpu-protection
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap dist-cpu-protection
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vpls>sap dist-cpu-protection)
Full Context
configure service vpls sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).
Default
If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
All
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>ies>sub-if>grp-if>sap dist-cpu-protection)
[Tree] (config>service>ies>if>sap dist-cpu-protection)
Full Context
configure service ies subscriber-interface group-interface sap dist-cpu-protection
configure service ies interface sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid DCP policy can be assigned to a SAP or a network interface. This rule does not apply to templates such as an msap-policy.
Default
If no dist-cpu-protection policy is assigned to an SAP, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap dist-cpu-protection
All
- configure service ies interface sap dist-cpu-protection
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vprn>nw-if dist-cpu-protection)
Full Context
configure service vprn network-interface dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the network interface. Only a valid created DCP policy can be assigned to a network interface (this rule does not apply to templates such as an msap-policy).
Default
If no dist-cpu-protection policy is assigned to the VPRN network interface, then the default network DCP policy (_default-network-policy) is used.
If no DCP functionality is required on the VPRN network interface then an empty DCP policy can be created and explicitly assigned to the VPRN network interface.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
All
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>service>vprn>if>sap dist-cpu-protection)
Full Context
configure service vprn interface sap dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (This rule does not apply to templates such as an msap-policy).
Default
If no dist-cpu-protection policy is assigned to an SAP policy, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP policy, then an empty DCP policy can be created and explicitly assigned to the SAP policy.
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
All
dist-cpu-protection
Syntax
dist-cpu-protection policy-name
no dist-cpu-protection
Context
[Tree] (config>router>if dist-cpu-protection)
Full Context
configure router interface dist-cpu-protection
Description
This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (note that this rule does not apply to templates such as an msap-policy).
If the user does not assign a DCP policy to a router interface, the system uses the default network DCP policy.
Default
no dist-cpu-protection
Parameters
- policy-name
-
Specifies the name of the DCP policy, up to 32 characters in length
Platforms
All
dist-cpu-protection
Syntax
dist-cpu-protection
Context
[Tree] (config>system>security dist-cpu-protection)
Full Context
configure system security dist-cpu-protection
Description
Commands in this context configure the Distributed CPU Protection (DCP) feature.
Platforms
All
dist-lag-rate-shared
dist-lag-rate-shared
Syntax
[no] dist-lag-rate-shared
Context
[Tree] (config>qos>port-scheduler-policy dist-lag-rate-shared)
Full Context
configure qos port-scheduler-policy dist-lag-rate-shared
Description
This command enables sharing of rates when the port on which this port-scheduler-policy is configured is part of a LAG configured in distribute mode.
When enabled, the absolute rate values configured as part of the max-rate, PIR/CIR group rates and PIR/CIR level rates are shared across the member ports of the LAG when configured in distribute mode.
This command does not have any effect when the port on which this port-scheduler-policy is configured is part of a LAG in link or port-fair mode. Similarly, when rates are configured as a percent-rate, this parameter is ignored.
Platforms
All
distinguisher
distinguisher
Syntax
distinguisher id
no distinguisher
Context
[Tree] (conf>router>segment-routing>sr-policies>policy distinguisher)
Full Context
configure router segment-routing sr-policies static-policy distinguisher
Description
This command associates a distinguisher value with a statically defined segment routing policy. This is a mandatory parameter and configuration command for non-local segment routing policies (for which the head-end parameter is set to a value other than "local”). Every non-local segment routing policy must have a unique distinguisher value. When a non-local static segment routing policy is imported into BGP and originated as a BGP route, the configured distinguisher value is copied into the NLRI of the route.
The no form of this command removes the distinguisher association.
Default
no distinguisher
Parameters
- id
-
Specifies the distinguisher ID.
Platforms
All
distinguisher
Syntax
distinguisher distinguisher-id
no distinguisher
Context
[Tree] (config>router>policy-options>policy-statement>entry>from distinguisher)
Full Context
configure router policy-options policy-statement entry from distinguisher
Description
This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.
The no form of this command removes the distinguisher ID match criterion from the configuration.
Parameters
- distinguisher-id
-
Specifies the SR policy distinguisher ID.
Platforms
All
distributed-sub-mgmt
distributed-sub-mgmt
Syntax
distributed-sub-mgmt
Context
[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)
Full Context
configure service vprn wlan-gw distributed-sub-mgmt
Description
Commands in this context configure Distributed Subscriber Management (DSM) for soft GRE group interface and for ranges of IEEE 802.1q VLAN tags in soft GRE group interfaces.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
distributed-sub-mgmt
Syntax
distributed-sub-mgmt
Context
[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)
[Tree] (config>subscr-mgmt>wlan-gw distributed-sub-mgmt)
[Tree] (config>router>wlan-gw distributed-sub-mgmt)
Full Context
configure service vprn wlan-gw distributed-sub-mgmt
configure subscriber-mgmt wlan-gw distributed-sub-mgmt
configure router wlan-gw distributed-sub-mgmt
Description
Commands in this context configure profiles, templates and policies that can be applied to DSM subscribers.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
distributed-sub-mgmt
Syntax
[no] distributed-sub-mgmt
Context
[Tree] (config>isa>wlan-gw-group distributed-sub-mgmt)
Full Context
configure isa wlan-gw-group distributed-sub-mgmt
Description
This command configures the WLAN gateway distributed subscriber management.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
distributed-sub-mgmt
Syntax
distributed-sub-mgmt
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt
Description
Commands in this context configure distributed-sub-mgmt configuration per vlan-range. This also includes vlan-range default, which makes this configuration applicable to the wlan-gw group-interface.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
diversity
diversity
Syntax
[no] diversity association-name
Context
[Tree] (config>router>pcep>pcc>pce-assoc diversity)
Full Context
configure router pcep pcc pce-associations diversity
Description
This command creates a named diversity association from which the parameters for the specified diversity association are configured.
The no form of the command deletes the specified diversity association.
Parameters
- association-name
-
Specifies the name of the diversity association, up to 32 characters.
Platforms
All
diversity
Syntax
[no] diversity diversity-assoc-name
Context
[Tree] (config>router>mpls>lsp-template>pce-assoc diversity)
[Tree] (config>router>mpls>lsp>pce-assoc diversity)
Full Context
configure router mpls lsp-template pce-associations diversity
configure router mpls lsp pce-associations diversity
Description
This command binds the LSP to a named diversity association. The diversity association must exist under the PCC. Up to five diversity associations can be configured per LSP.
The no form of the command removes the LSP binding from the specified diversity association.
Parameters
- diversity-assoc-name
-
Specifies the name of an existing diversity association, up to 32 characters.
Platforms
All
diversity-type
diversity-type
Syntax
diversity-type {link | node | srlg-link | srlg-node}
no diversity-type
Context
[Tree] (config>router>pcep>pcc>pce-assoc>div diversity-type)
Full Context
configure router pcep pcc pce-associations diversity diversity-type
Description
This command configures the diversity type for the association group. This command is mandatory. If the command is not configured, the system does not validate the association configuration.
The no form of the command reverts to the default value.
Default
no diversity-type
Parameters
- link
-
Keyword to specify the link diversity type.
- node
-
Keyword to specify the node diversity type.
- srlg-link
-
Keyword to specify the SRLG-link diversity type.
- srlg-node
-
Keyword to specify the SRLG-node diversity type.
Platforms
All
divert
divert
Syntax
[no] divert
Context
[Tree] (config>app-assure>group>policy>app-profile divert)
Full Context
configure application-assurance group policy app-profile divert
Description
This command enables the redirection of traffic to AA ISA for the system-wide forwarding classes diverted to application assurance (divert-fc) for AA subscribers using this application profile.
The no form of this command stops redirect of traffic to AA ISAs for the AA subscribers using this application profile.
Default
no divert
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
divert-fc
divert-fc
Syntax
[no] divert-fc fc-name
Context
[Tree] (config>isa>aa-grp divert-fc)
Full Context
configure isa application-assurance-group divert-fc
Description
This command selects a forwarding class in the system to be diverted to an application assurance engine for this application assurance group. Only traffic to/from subscribers with application assurance enabled is diverted.
To divert multiple forwarding classes, the command needs to be executed multiple times specifying each forwarding class to be diverted at a time.
The no form of this command stops diverting of the traffic to an application assurance engine for this application assurance group.
Parameters
- fc-name
-
Creates a class instance of the forwarding class fc-name.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dm
dm
Syntax
dm [test-id test-id] [create]
no dm
Context
[Tree] (config>oam-pm>session>mpls dm)
Full Context
configure oam-pm session mpls dm
Description
This command assigns an identifier to the DM test and creates the individual test.
The no form of this command removes the DM test function from the OAM-PM session.
Parameters
- test-id
-
Specifies the value of the 26-bit test identifier sent as session identifier in the DM PDU.
- create
-
Creates the DM test. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dmm
dmm
Syntax
dmm [test-id test-id] [create]
no dmm
Context
[Tree] (config>oam-pm>session>ethernet dmm)
Full Context
configure oam-pm session ethernet dmm
Description
This command defines the test ID to be assigned to the delay test and creates the container to allow the individual test parameters to be configured.
The no form of this command removes the DMM test function from the PM Session.
Parameters
- test-id
-
Specifies the value to be placed in the 4-byte test ID field of an ETH-DMM PDU.
- create
-
Creates the test.
Platforms
All
dmr-prefix
dmr-prefix
Syntax
dmr-prefix dmr-prefix
no dmr-prefix
Context
[Tree] (config>service>nat>map-domain dmr-prefix)
Full Context
configure service nat map-domain dmr-prefix
Description
This command configures the IPv6 prefix of the BR (dmr-prefix), which is used as a default MAP rule (route) in the CEs. Each MAP domain in the VSR has a unique dmr-prefix.
Parameters
- dmr-prefix
-
Specifies the IPv6 prefix associated with a MAP domain in the BR. The prefix represents a dmr-rule in the CE.
Platforms
VSR
dnat
dnat
Syntax
[no] dnat
Context
[Tree] (config>service>nat>nat-policy dnat)
Full Context
configure service nat nat-policy dnat
Description
This command defines context for destination NAT (DNAT) specific configuration under the nat-policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dnat-only
dnat-only
Syntax
dnat-only router router-instance nat-group nat-group-id
no dnat-only
Context
[Tree] (config>service>nat>nat-policy>dnat dnat-only)
Full Context
configure service nat nat-policy dnat dnat-only
Description
This command configures outside routing context and nat-group in which DNAT translation shout take place. This command is mutually exclusive with the pool command in nat-policy. When DNAT-only is enabled, no source and port NAT (SNAPT) is performed. In other words, only the destination IP address (going from inside to outside) is translated while the source IP address and port are not translated.
Parameters
- router router-instance
-
Specifies the routing context on the outside (public side).
- nat-group nat-group-id
-
Specifies the NAT group IP.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dnat-only
Syntax
dnat-only
Context
[Tree] (config>service>vprn>nat>outside dnat-only)
[Tree] (config>router>nat>outside dnat-only)
[Tree] (config>service>vprn>nat>inside dnat-only)
[Tree] (config>router>nat>inside dnat-only)
Full Context
configure service vprn nat outside dnat-only
configure router nat outside dnat-only
configure service vprn nat inside dnat-only
configure router nat inside dnat-only
Description
Commands in this context configure the dnat-only parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dns
dns
Syntax
[no] dns
Context
[Tree] (config>service>vprn dns)
Full Context
configure service vprn dns
Description
Commands in this context configure domain name servers.
The no form of this command disables DNS for this service.
Platforms
All
dns
Syntax
dns target-addr dns-name name-server ip-address [source ip-address] [count send-count] [timeout timeout] [interval interval] [record-type {ipv4-a-record | ipv6-aaaa-record}] [router-instance router-instance]
Context
[Tree] (oam dns)
[Tree] (config>saa>test>type dns)
Full Context
oam dns
configure saa test type dns
Description
This command performs DNS name resolution. If ipv4-a-record is specified, DNS target addresses are queried for A records only. If ipv6-aaaa-record is specified, AAAA records are queried first, and if a successful response is not received, the DNS server is queried for A records (applies to the 7750 SR and 7950 XRS).
Parameters
- dns-name
-
Specifies the DNS domain name, up to 255 characters.
- interval
-
Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.
If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message response corresponding to the outstanding message request.
- ip-address
-
Specifies the IP address of the primary DNS server.
ipv4-address:
a.b.c.d
ipv6-address:
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x:
0 to FFFF]H
d:
[0 to 255]D
- record-type
-
Specifies a record type (applies to the 7750 SR and 7950 XRS only).
- send-count
-
Specifies the number of messages to send. The send-count parameter overrides the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must have expired before the next message request is sent.
- timeout
-
Specifies the time, in seconds, to override the default timeout value and is the amount of time that the router waits for a message response after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.
- router-instance
-
Specifies the preferred method to enter a service name or routing instance from which to launch the DNS query. This value is stored as the service name. This is the only service-linking function allowed for both mixed-mode and model-driven configuration modes.
Platforms
All
dns
Syntax
dns
Context
[Tree] (config>router dns)
Full Context
configure router dns
Description
This command configures the DNS.
Default
dns
Platforms
All
dns
Syntax
dns
Context
[Tree] (config>system dns)
Full Context
configure system dns
Description
This command configures DNS settings.
Platforms
All
dns-domain
dns-domain
Syntax
dns-domain dns-name
no dns-domain
Context
[Tree] (bof dns-domain)
Full Context
bof dns-domain
Description
This command configures the domain name used when performing DNS address resolution. This is a required parameter if DNS address resolution is required. Only a single domain name can be configured. If multiple domain statements are configured, the last one encountered is used.
The no form of this command removes the domain name from the configuration.
Default
no dns-domain
Parameters
- dns-name
-
Specifies the DNS domain name, up to 178 characters.
Platforms
All
dns-ip-cache
dns-ip-cache
Syntax
dns-ip-cache dns-ip-cache-name [create]
no dns-ip-cache dns-ip-cache-name
Context
[Tree] (config>app-assure>group dns-ip-cache)
Full Context
configure application-assurance group dns-ip-cache
Description
This command configures a DNS IP cache used to snoop DNS requests generated by subscribers to populate a cache of IP addresses matching a specified list of domain names. In the context of URL content charging strengthening, it is also mandatory to specify a list of trusted DNS servers to populate the DNS IP cache.
Parameters
- dns-ip-cache-name
-
Specifies the Application Assurance DNS IP cache name, up to 32 characters.
- create
-
Specifies a keyword used to create the DNS IP cache.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dns-ip-cache
Syntax
dns-ip-cache dns-ip-cache-name
Context
[Tree] (config>app-assure>group>sess-fltr>entry>match dns-ip-cache)
Full Context
configure application-assurance group session-filter entry match dns-ip-cache
Description
This command configures a DNS IP cache using session filter DST IP match criteria. It is typically combine with an allow action in the context of captive-redirect.
Parameters
- dns-ip-cache-name
-
Specifies the name of the DNS IP cache name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dns-match
dns-match
Syntax
dns-match
Context
[Tree] (config>app-assure>group>dns-ip-cache dns-match)
Full Context
configure application-assurance group dns-ip-cache dns-match
Description
Commands in this context configure match parameters in the DNS IP cache.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dns-options
dns-options
Syntax
[no] dns-options
Context
[Tree] (config>subscr-mgmt>rtr-adv-plcy dns-options)
Full Context
configure subscriber-mgmt router-advertisement-policy dns-options
Description
Commands in this context configure IPv6 DNS options for SLAAC hosts.
The no form of this command returns the command to the default setting.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dns-options
Syntax
[no] dns-options
Context
[Tree] (config>service>vprn>router-advert dns-options)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>vprn>router-advert>if dns-options)
[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>ies>sub-if>ipv6>rtr-adv dns-options)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv dns-options)
Full Context
configure service vprn router-advertisement dns-options
configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options
configure service vprn router-advertisement interface dns-options
configure service vprn subscriber-interface ipv6 router-advertisements dns-options
configure service ies subscriber-interface ipv6 router-advertisements dns-options
configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options
Description
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>service>vprn>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
Platforms
All
- configure service vprn router-advertisement dns-options
- configure service vprn router-advertisement interface dns-options
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options
- configure service ies subscriber-interface ipv6 router-advertisements dns-options
- configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options
- configure service vprn subscriber-interface ipv6 router-advertisements dns-options
dns-options
Syntax
[no] dns-options
Context
[Tree] (config>router>router-advert>if dns-options)
[Tree] (config>router>router-advert dns-options)
Full Context
configure router router-advertisement interface dns-options
configure router router-advertisement dns-options
Description
Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts. When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>router>router-advert>if>dns-options>include-dns command.
The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.
Platforms
All
dns-server
dns-server
Syntax
dns-server ip-address [ip-address]
no dns-server
Context
[Tree] (config>service>vprn>dhcp>server>pool>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options dns-server)
[Tree] (config>router>dhcp>server>pool>options dns-server)
Full Context
configure service vprn dhcp local-dhcp-server pool options dns-server
configure subscriber-mgmt local-user-db ipoe host options dns-server
configure subscriber-mgmt local-user-db ppp host options dns-server
configure router dhcp local-dhcp-server pool options dns-server
Description
This command configures the IPv4 address of the DNS server.
The no form of this command removes the IPv4 address of the DNS server from the configuration.
Parameters
- ip-address
-
Specifies up to four DNS server IP addresses.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dns-server
Syntax
dns-server ipv6-address [ipv6-address]
no dns-server
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options6 dns-server)
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options6 dns-server)
[Tree] (config>router>dhcp6>server>pool>prefix>options dns-server)
[Tree] (config>router>dhcp6>server>defaults>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>defaults>options dns-server)
[Tree] (config>router>dhcp6>server>pool>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>options dns-server)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options dns-server)
Full Context
configure subscriber-mgmt local-user-db ipoe host options6 dns-server
configure subscriber-mgmt local-user-db ppp host options6 dns-server
configure router dhcp6 local-dhcp-server pool prefix options dns-server
configure router dhcp6 local-dhcp-server defaults options dns-server
configure service vprn dhcp6 local-dhcp-server defaults options dns-server
configure router dhcp6 local-dhcp-server pool options dns-server
configure service vprn dhcp6 local-dhcp-server pool options dns-server
configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
Description
This command configures IPv6 DNS server addresses that can be used for name resolution.
The no form of this command removes the IPv6 address of the DNS server from the configuration.
Parameters
- ipv6-address
-
Specifies up to four IPv6 DNS server addresses.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt local-user-db ipoe host options6 dns-server
- configure router dhcp6 local-dhcp-server pool options dns-server
- configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
- configure service vprn dhcp6 local-dhcp-server pool options dns-server
- configure router dhcp6 local-dhcp-server pool prefix options dns-server
- configure subscriber-mgmt local-user-db ppp host options6 dns-server
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn dhcp6 local-dhcp-server defaults options dns-server
- configure router dhcp6 local-dhcp-server defaults options dns-server
dns-server
Syntax
dns-server ip-address
no dns-server
Context
[Tree] (config>app-assure>group>url-filter>web-service dns-server)
Full Context
configure application-assurance group url-filter web-service dns-server
Description
This command configures the DNS server that is used to resolve the web service host name.
The no form of this command removes the DNS server configuration.
Default
no dns-server
Parameters
- ip-address
-
Specifies the IP address of the DNS server to use.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dnssec
dnssec
Syntax
dnssec
Context
[Tree] (config>system>dns dnssec)
Full Context
configure system dns dnssec
Description
This command configures system Domain Name System Security Extensions (DNSSEC) settings.
Platforms
All
do-not-fragment
do-not-fragment
Syntax
[no] do-not-fragment
Context
[Tree] (config>oam-pm>session>ip do-not-fragment)
Full Context
configure oam-pm session ip do-not-fragment
Description
This command configures the Do Not Fragment (DF) bit in the IPv4 header of the TWAMP Light test packet in order to prevent packet fragmentation. This is only applicable to IPv4. IPv6 does not include the bit as part of the specification. This parameter is ignored but not blocked when the address is IPv6.
The no form of this command allows packet fragmentation.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dod-label-distribution
dod-label-distribution
Syntax
[no] dod-label-distribution
Context
[Tree] (config>router>ldp>session-params>peer dod-label-distribution)
Full Context
configure router ldp session-parameters peer dod-label-distribution
Description
This command enables the use of the LDP Downstream-on-Demand (DoD) label distribution procedures.
When this option is enabled, LDP will set the A-bit in the Label Initialization message when the LDP session to the peer is established. When both peers set the A-bit, they will both use the DoD label distribution method over the LDP session (RFC 5036).
This feature can only be enabled on a link-level LDP session and therefore will apply to prefix labels only, not service labels.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router will immediately send a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages.
However, the router will not advertise any <FEC, label> bindings, including the FEC of its own LSR-id, unless the DoD peer requested it using a Label Request Message.
When the DoD peer sends a label request for any FEC prefix, the router will reply with a <FEC, label> binding for that prefix if the FEC was already activated on the router. If not, the router replies with a notification message containing the status code of "no route.” The router will not attempt in the latter case to send a label request to the next-hop for the FEC prefix when the LDP session to this next-hop uses the DoD label distribution mode. Hence the reference to single-hop LDP DoD procedures.
As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.
Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router immediately sends a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages. Peer address has to be the peer LSR-ID address.
The no form of this command disables the DoD label distribution with an LDP neighbor.
Default
no dod-label-distribution
Platforms
All
domain
domain
Syntax
domain domain-name expression expression
no domain domain-name
Context
[Tree] (config>app-assure>group>dns-ip-cache>dns-match domain)
Full Context
configure application-assurance group dns-ip-cache dns-match domain
Description
This command configures a domain expression to populate the DNS IP cache. Up to 32 domains can be configured.
Parameters
- domain-name
-
Specifies the name of the domain expression entry.
- expression
-
Specifies a domain name expression string, up to 64 characters, used to define a pattern match. This domain expression uses the same syntax as the expressions used in app-filters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
domain
Syntax
domain domain-name [nat-group nat-group-id] [create]
no domain domain-name
Context
[Tree] (config>router>firewall domain)
[Tree] (config>service>vprn>firewall domain)
Full Context
configure router firewall domain
configure service vprn firewall domain
Description
This command configures a domain to contain firewall parameters. Each domain must be assigned to a NAT group where firewall functionality will be performed.
The no form of the command removes the domain.
Parameters
- create
-
Mandatory keyword used when creating the domain.
- domain-name
-
Specifies the name of the domain, up to 32 characters maximum.
- nat-group-id
-
Specifies the ID of the NAT group where the firewall functionality will be performed.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
domain
Syntax
domain router router-name name domain-name
no domain
Context
[Tree] (config>service>nat>firewall-policy domain)
Full Context
configure service nat firewall-policy domain
Description
This command specifies a router and domain to which the firewall policy will be applied. All associated traffic must be part of the prefixes specified by this domain.
The no form of the command removes the domain association from the firewall policy.
Default
no domain
Parameters
- domain-name
-
Specifies the name of the firewall domain in the specified router instance. 32 characters maximum.
- router-name
-
Specifies the name of the router instance to use.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
domain
Syntax
domain md-index [format md-name-format] [name md-name] level level [admin-name admin-name]
domain md-index
no domain md-index
Context
[Tree] (config>eth-cfm domain)
Full Context
configure eth-cfm domain
Description
This command configures Connectivity Fault Management (CFM) Maintenance Domain (MD) parameters.
The no form of this command removes the MD index parameters from the configuration.
Parameters
- md-index
-
Specifies the MD index value.
- md-name-format
-
Specifies a value that represents the type (format).
- md-name
-
Specifies a generic MD name, up to 43 characters.
- level
-
Specifies the integer identifying the MD level. Higher numbers correspond to higher maintenance domains, those with the greatest physical reach, with the highest values for customer CFM packets. Lower numbers correspond to lower maintenance domains, those with more limited physical reach, with the lowest values for single bridges or physical links.
- admin-name
-
Specifies a creation time required parameter that allows the operator to assign a name value to the domain container. This is used for information and migration purposes. This value cannot be modified without destroying the domain. If no admin-name exists, the configured md-index value is converted into a character string to become the admin-name reference. When upgrading from a release that does not include the admin-name configuration option, the md-index is converted into a character string. After an admin-name value is assigned, it cannot be modified.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
domain
Syntax
domain domain
no domain
Context
[Tree] (config>system>ptp domain)
Full Context
configure system ptp domain
Description
This command configures the PTP domain.
Some profiles may require a domain number in a restricted range. The operator must ensure that the value aligns with the expected range for the profile.
The domain cannot be changed unless PTP is shutdown. If the PTP profile setting is changed, the domain is changed to the default domain for the new PTP profile.
The no form of this command reverts to the default configuration. The default value is dependent upon the configured profile, as detailed below.
Default
domain 0 — profile ieee1588-2008
domain 4 — profile g8265dot1-2010
domain 24 — profile g8275dot1-2014
domain 44 — profile g8275dot2-2016
Parameters
- domain
-
Specifies the PTP domain.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
domain
Syntax
domain domain-value
no domain
Context
[Tree] (config>system>ptp>alternate-profile domain)
Full Context
configure system ptp alternate-profile domain
Description
This command configures the domain number of the alternate profile. This value can only be changed when the alternate profile is shut down.
To configure this command, the specified domain number for the alternate profile must be different from the domain number configured for the primary or other alternate profiles.
The no form of this command reverts to the default value. The default value is not dependent on the configured profile.
Default
domain 24
Parameters
- domain-value
-
Specifies the PTP domain.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
domain
Syntax
domain [value] [create]
no domain [value]
Context
[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec domain)
Full Context
configure redundancy multi-chassis peer mc-ipsec domain
Description
This command configures domain information. This command is mutually exclusive to the tunnel-group command.
The no form of this command removes the multi-chassis IPsec domain value.
Parameters
- value
-
Specifies the domain multi-chassis IPsec domain, up to 255 characters.
- create
-
Keyword used to create the command instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
domain-id
domain-id
Syntax
domain-id global-field:local-field
no domain-id
Context
[Tree] (config>service>vprn>bgp domain-id)
[Tree] (config>service>epipe>bgp-evpn>srv6 domain-id)
[Tree] (config>service>epipe>bgp-evpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-ipvpn>srv6 domain-id)
[Tree] (config>service>vprn>bgp-evpn>srv6 domain-id)
[Tree] (config>service>vprn>bgp-ipvpn>mpls domain-id)
[Tree] (config>service>vprn>bgp-evpn>mpls domain-id)
Full Context
configure service vprn bgp domain-id
configure service epipe bgp-evpn segment-routing-v6 domain-id
configure service epipe bgp-evpn mpls domain-id
configure service vprn bgp-ipvpn segment-routing-v6 domain-id
configure service vprn bgp-evpn segment-routing-v6 domain-id
configure service vprn bgp-ipvpn mpls domain-id
configure service vprn bgp-evpn mpls domain-id
Description
This command specifies the domain ID that identifies the network from which a BGP route was received before that route is exported to a different neighbor. The domain ID is part of a domain, represented as domain-id:isf_safi_type in the D-PATH attribute, as described in draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN) or multiple instances of the same owner (for example, VPRN with two BGP-IPVPN instances).
In the following example, consider that a gateway receives prefix P in an EVPN-IFL instance with the following D-PATH from neighbor N:
Seg Len=1 / 65000:1:128
If the router imports the route in VPRN-1, BGP-EVPN SRv6 instance with domain 65000:2, it readvertises it to its BGP-IPVPN MPLS instance as follows:
Seg Len=2 / 65000:2:70 / 65000:1:128
That is, the gateway prepends the local domain ID and family to the D-PATH before readvertising the route into a different instance.
The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best-path selection decisions based on the D-PATH length (shorter D-PATH is preferred).
The command is also supported in Epipe services with two instances. As in the case of multi-instance VPRN services, the configured domain ID in an Epipe instance is prepended to the AD per EVI route redistributed to the other instance.
The no form of this command removes the configured domain ID.
Default
no domain-id
Parameters
- global-field:local-field
-
Specifies the domain ID.
Platforms
All
- configure service vprn bgp-ipvpn mpls domain-id
- configure service vprn bgp domain-id
- configure service epipe bgp-evpn mpls domain-id
- configure service vprn bgp-evpn mpls domain-id
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
- configure service vprn bgp-ipvpn segment-routing-v6 domain-id
- configure service vprn bgp-evpn segment-routing-v6 domain-id
- configure service epipe bgp-evpn segment-routing-v6 domain-id
domain-name
domain-name
Syntax
domain-name domain-name
no domain-name
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options domain-name)
[Tree] (config>router>dhcp6>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options domain-name)
[Tree] (config>router>dhcp6>server>pool>prefix>options domain-name)
[Tree] (config>service>vprn>dhcp6>server>pool>options domain-name)
[Tree] (config>router>dhcp6>server>defaults>options domain-name)
[Tree] (config>router>dhcp>server>pool>options domain-name)
[Tree] (config>service>vprn>dhcp>server>pool>options domain-name)
Full Context
configure subscriber-mgmt local-user-db ipoe host options domain-name
configure router dhcp6 local-dhcp-server pool options domain-name
configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name
configure router dhcp6 local-dhcp-server pool prefix options domain-name
configure service vprn dhcp6 local-dhcp-server pool options domain-name
configure router dhcp6 local-dhcp-server defaults options domain-name
configure router dhcp local-dhcp-server pool options domain-name
configure service vprn dhcp local-dhcp-server pool options domain-name
Description
This command configures the default domain for a DHCP client that the router uses to complete unqualified host names (without a dotted-decimal domain name).
The no form of this command removes the name from the configuration.
Parameters
- domain-name
-
Specifies the domain name for the client, up to 127 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure router dhcp6 local-dhcp-server pool options domain-name
- configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name
- configure service vprn dhcp local-dhcp-server pool options domain-name
- configure router dhcp6 local-dhcp-server pool prefix options domain-name
- configure service vprn dhcp6 local-dhcp-server pool options domain-name
- configure subscriber-mgmt local-user-db ipoe host options domain-name
- configure router dhcp local-dhcp-server pool options domain-name
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure router dhcp6 local-dhcp-server defaults options domain-name
dot1p
dot1p
Syntax
dot1p dot1p-priority [fc fc-name] [priority {low | high}]
no dot1p dot1p-priority
Context
[Tree] (config>qos>sap-ingress dot1p)
Full Context
configure qos sap-ingress dot1p
Description
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override the forwarding class and enqueuing priority based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The no form of this command removes the explicit dot1p classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
Parameters
- dot1p-priority
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- priority
-
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
- high
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
All
dot1p
Syntax
dot1p dot1p-value [dot1p-mask]
no dot1p
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dot1p)
Full Context
configure qos sap-ingress mac-criteria entry match dot1p
Description
The IEEE 802.1p value to be used as the match criterion.
Use the no form of this command to remove the dot1p value as the match criterion.
Default
no dot1p
Parameters
- dot1p-value
-
Specifies the IEEE 802.1p value in decimal.
- dot1pmask
-
This 3-bit mask can be configured using the following formats.
Table 1. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
D
4
Hexadecimal
0xH
0x4
Binary
0bBBB
0b100
To select a range from 4 up to 7, specify p-value of 4 and a mask of 0b100 for value and mask.
Platforms
All
dot1p
Syntax
dot1p dot1p-value [fc fc-name] [profile {in | out | use-de | exceed | inplus}]
no dot1p dot1p-value
Context
[Tree] (config>qos>sap-egress dot1p)
Full Context
configure qos sap-egress dot1p
Description
This command defines a specific dot1p value that must be matched to perform the associated reclassification actions. If an egress packet on the SAP matches the specified dot1p value, the forwarding class or profile may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions.
The dot1p priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.
The reclassification actions from a dot1p reclassification rule may be overridden by a DSCP, IP precedence, or IP flow matching event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new FC, the FC from the dot1p match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the dot1p match will be used.
The no form of this command removes the reclassification rule from the SAP egress QoS policy.
Parameters
- dot1p-value
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the FC name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- profile {in | out | use-de | exceed | inplus}
-
Specifies the profile reclassification action is optional. When specified, packets matching the dot1p value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by a DSCP, IP precedence, IPv6 criteria, or IP criteria reclassification match. To remove the profile reclassification action for the specified dotp1 value, the dot1p command must be re-executed without the profile reclassification action defined.
Platforms
All
dot1p
Syntax
dot1p {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p
Context
[Tree] (config>qos>sap-egress>fc dot1p)
Full Context
configure qos sap-egress fc dot1p
Description
This command explicitly defines the egress IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an IEEE 802.1q or IEEE 802.1p encapsulation use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, the dot1p command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters added to the existing dot1p command adds the capability to mark on an egress SAP the in, out, and exceed-profile status via a certain dot1p combination, similarly with the DE options. All inplus-profile traffic is marked with the same value as in-profile traffic.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic.
The command with the additional structure may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a tag exists. If a new tag is added, the related DE bit is set to 0.
When the previous command (dot1p dot1p-value) is used without the new structure, it means that the dot1p value is used for the entire forwarding class, as it did before. The two versions of the command are mutually exclusive.
The in-profile or out-of-profile/exceed-profile status may be indicated via the DE bit setting if the de-mark command is used. The DE value used for exceed-profile is the same as that used for out-of-profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The commands dot1p-inner and dot1p-outer take precedence over the dot1p command if both are specified in the same policy.
The no form of this command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p
Parameters
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
All
dot1p
Syntax
dot1p dot1p-priority fc fc-name profile {in | out | use-de}
no dot1p
Context
[Tree] (config>qos>network>ingress dot1p)
Full Context
configure qos network ingress dot1p
Description
This command explicitly sets the forwarding class or enqueuing priority and profile of the packet when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override and be assigned to the forwarding class and enqueuing priority and profile of the packet, based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop Quality of Service (QoS) behavior.
The no form of this command removes the explicit dot1p classification rule from the policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
Parameters
- dot1p-priority
-
This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
- fc-name
-
Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
- profile {in | out | use-de}
-
All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command or will use the DE bit to determine the profile of the packets (in-profile is used when DE = 0 and out-of-profile is used when DE = 1). In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.
Platforms
All
dot1p
Syntax
dot1p dot1p-priority
no dot1p
Context
[Tree] (config>qos>network>egress>fc dot1p)
Full Context
configure qos network egress fc dot1p
Description
This command is used whenever the dot1p bits are set to a common value regardless of the internal profile of the packets. Although it is not mandatory, this command should be used in combination with the de-mark command to enable the marking of the DE bit according to the internal profile of the packet.
This command acts as a shortcut for configuring the two existing commands with the same dot1p priority.
The dot1p dot1p-priority command is saved in the configuration as dot1p-in-profile dot1p-priority and dot1p-out-profile dot1p-priority. The inplus-profile traffic is marked with the same value as in-profile traffic. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
Platforms
All
dot1p
Syntax
dot1p dot1p-value [ dot1p-mask]
no dot1p
Context
[Tree] (config>filter>mac-filter>entry>match dot1p)
Full Context
configure filter mac-filter entry match dot1p
Description
Configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.
When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.
The no form of the command removes the criterion from the match entry.
Egress dot1p value matching will only match if the customer payload contains the 802.1p bits. For example, if a packet ingresses on a null encapsulated SAP and the customer packet is IEEE 802.1Q or 802.1p tagged, the 802.1p bits will be present for a match evaluation. On the other hand, if a customer tagged frame is received on a dot1p encapsulated SAP, the tag will be stripped on ingress and there will be no 802.1p bits for a MAC filter match evaluation; in this case, any filter entry with a dot1p match criterion specified will fail.
Default
no dot1p
Parameters
- dot1p-value
-
Specifies the IEEE 802.1p value in decimal.
- dot1p-mask
-
Specifies a 3-bit mask that can be configured using the decimal integer, hexadecimal or binary format.
Table 2. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
D
4
Hexadecimal
0xH
0x4
Binary
0bBBB
0b100
To select a range from 4 up to 7 specify dot1p-value of 4 and a dot1p-mask of 0b100 for value and mask.
Platforms
All
dot1p
Syntax
dot1p dot1p-value [dot1p-mask]
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dot1p)
Full Context
configure system security management-access-filter mac-filter entry match dot1p
Description
This command configures Dot1p match conditions.
Format Style |
Format Syntax |
Example |
---|---|---|
Decimal |
D |
4 |
Hexadecimal |
0xH |
0x4 |
Binary |
0bBBB |
0b100 |
Parameters
- dot1p-value
-
Specifies the IEEE 802.1p value in decimal.
- mask
-
Specifies the 3-bit mask can be configured using the following formats.
Platforms
All
dot1p
Syntax
dot1p dot1p-name
no dot1p
Context
[Tree] (config>test-oam>icmp>ping-template dot1p)
Full Context
configure test-oam icmp ping-template dot1p
Description
This command specifies values of the outer and inner dot1p bits for the VLAN when dot1q or qinq encapsulation is used. This field is not exposed to egress QoS policies.
The no form of this command reverts to the default value.
Default
dot1p 7
Parameters
- dot1p-name
-
Specifies the IEEE 802.1p value in decimal format.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dot1p
Syntax
dot1p dot1p-priority
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>c-tag dot1p)
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth>s-tag dot1p)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet c-tag dot1p
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet s-tag dot1p
Description
This command configures the priority code point (dot1p) value for the VLAN.
Default
dot1p 7
Parameters
- dot1p-priority
-
Specifies the dot1p value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
dot1p-in-profile
dot1p-in-profile
Syntax
dot1p-in-profile dot1p-priority
no dot1p-in-profile
Context
[Tree] (config qos network egress fc dot1p-in-profile)
Full Context
configure qos network egress fc dot1p-in-profile
Description
This command specifies dot1p in-profile mappings. The inplus-profile traffic is marked with the same value as in-profile traffic.
The no form of this command resets the configuration to the default in-profile dot1p-priority setting for policy-id 1.
Parameters
- dot1p-priority
-
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
Platforms
All
dot1p-inner
dot1p-inner
Syntax
dot1p-inner dot1p-value
dot1p-inner in-profiledot1p-value out-profile dot1p-value [exceed-profile dot1p-value]
no dot1p-inner
Context
[Tree] (config>qos>sap-egress>fc dot1p-inner)
Full Context
configure qos sap-egress fc dot1p-inner
Description
This command explicitly configures the egress inner VLAN tag IEEE 802.1p (dot1p) bits marking for the forwarding class name. When the marking is set, all packets of the forwarding class name that have either an inner IEEE 802.1q or IEEE 802.1p encapsulation on a QinQ SAP will use the explicitly defined dot1p-value. If the egress packets for the forwarding class are not IEEE 802.1q or IEEE 802.1p QinQ encapsulated, this command has no effect.
The optional in-profile dot1p-value, out-profile dot1p-value, and exceed-profile dot1p-value parameters on the dot1p-inner command add the capability to mark the in-profile and out-of-profile status on an egress QinQ SAP. The command with the additional parameters may be used on the SAP when the internal in-profile, out-of-profile, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit. When the in-profile keyword is added, the rest of the structure must be specified. All inplus-profile traffic is marked with the same value as in-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if an inner tag exists. If a new inner tag is added, the related DE bit is set to 0. The inplus/in, out, or exceed-profile status may be indicated using the DE bit setting if the de-mark or de-mark-inner command is used.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the configure qos sap-ingress dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the dot1p-inner command in the policy; that is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured. The marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system.
The no form of this command sets the inner IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p-inner
Parameters
- dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
All
dot1p-out-profile
dot1p-out-profile
Syntax
dot1p-out-profile dot1p-priority
no dot1p-out-profile
Context
[Tree] (config qos network egress fc dot1p-out-profile)
Full Context
configure qos network egress fc dot1p-out-profile
Description
This command specifies dot1p out-of-profile mappings.
The exceed-profile traffic is marked with the same value as out-of-profile traffic.
The no form of this command resets the configuration to the default out-profile dot1p-priority setting for policy-id 1.
Parameters
- dot1p-priority
-
Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight dot1p rules are allowed on a single policy.
Platforms
All
dot1p-outer
dot1p-outer
Syntax
dot1p-outer {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}
no dot1p-outer
Context
[Tree] (config>qos>sap-egress>fc dot1p-outer)
Full Context
configure qos sap-egress fc dot1p-outer
Description
This command explicitly defines the egress outer or single VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an outer or single IEEE 802.1q or IEEE 802.1p encapsulation on a qinq or a dot1p SAP, respectively, will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, this command has no effect.
The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters on the dot1p-outer command add the capability to mark the in, out, and exceed-profile status on an egress qinq or dot1p SAP. The command with the additional parameters may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.
When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic. All inplus-profile traffic is marked with the same value as in-profile traffic.
When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a single or outer tag exists. If a new tag is added, the related DE bit is set to 0. The in, out, or exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-outer) command is used. The DE value used for inplus is the same as that used for in-profile and the one used for exceed-profile is the same as that used for out of profile.
In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.
The two versions of the command (with and without parameters) are mutually exclusive.
This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.
The no form of the command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.
Default
no dot1p-outer
Parameters
- dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- in-profile dot1p-value
-
Specifies the 802.1p value to set for in-profile frames in this forwarding class.
- out-profile dot1p-value
-
Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.
- exceed-profile dot1p-value
-
Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.
Platforms
All
dot1q
dot1q
Syntax
dot1q
Context
[Tree] (config>service>system>bgp-evpn>eth-seg dot1q)
Full Context
configure service system bgp-evpn ethernet-segment dot1q
Description
This command creates the dot1q context for q-tag additions to the port or LAG virtual ES.
Platforms
All
dot1q
Syntax
dot1q
Context
[Tree] (config>test-oam>build-packet>header dot1q)
[Tree] (debug>oam>build-packet>packet>field-override>header dot1q)
Full Context
configure test-oam build-packet header dot1q
debug oam build-packet packet field-override header dot1q
Description
This command creates a Dot1Q header and enables the context to define the associated parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dot1q-etype
dot1q-etype
Syntax
dot1q-etype value
no dot1q-etype
Context
[Tree] (config>port>ethernet dot1q-etype)
Full Context
configure port ethernet dot1q-etype
Description
This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.
The no form of this command reverts to the default value.
Parameters
- value
-
Specifies the Ethertype to expect, in either decimal or hex.
Platforms
All
dot1q-etype
Syntax
dot1q-etype dot1q-etype
no dot1q-etype
Context
[Tree] (config>pw-port dot1q-etype)
Full Context
configure pw-port dot1q-etype
Description
This command configures the Dot1q Ethertype on the PW port. The PW port is used to extract a customer's Ethernet traffic that is transported in a tunnel over an IP/MPLS network. The dot1q-etype represents the first two bytes (TPID) in the 802.1Q header of a single-tagged Ethernet frame or the inner 802.1Q header of the double-tagged Ethernet frame inside the tunnel.
The no form of this command removes the configuration.
Parameters
- dot1q-etype
-
The value for the dot1q-etype field, in hexadecimal format.
Platforms
All
dot1x
dot1x
Syntax
dot1x
Context
[Tree] (config>port>ethernet dot1x)
Full Context
configure port ethernet dot1x
Description
This command enables access to the context to configure port-specific 802.1x authentication attributes. This context can only be used when configuring a Fast Ethernet, Gigabit or 10-Gb Ethernet LAN ports on an appropriate MDA.
Platforms
All
dot1x
Syntax
[no] dot1x
Context
[Tree] (config>system>security dot1x)
Full Context
configure system security dot1x
Description
This command creates the context to configure 802.1x network access control on the router.
The no form of this command removes the 802.1x configuration.
Platforms
All
down
down
Syntax
down ip seconds [init-only]
no down ip
down ipv6 seconds [init-only]
no down ipv6
Context
[Tree] (config>service>ies>red-if>hold-time down)
[Tree] (config>router>if>hold-time down)
[Tree] (config>service>vpls>if>hold-time down)
[Tree] (config>service>ies>if>hold-time down)
[Tree] (config>service>ies>sub-if>hold-time down)
[Tree] (config>service>vprn>sub-if>hold-time down)
[Tree] (config>service>vprn>red-if>hold-time down)
[Tree] (config>service>vprn>nw-if>hold-time down)
[Tree] (config>service>vprn>if>hold-time down)
Full Context
configure service ies redundant-interface hold-time down
configure router interface hold-time down
configure service vpls interface hold-time down
configure service ies interface hold-time down
configure service ies subscriber-interface hold-time down
configure service vprn subscriber-interface hold-time down
configure service vprn redundant-interface hold-time down
configure service vprn network-interface hold-time down
configure service vprn interface hold-time down
Description
This command causes a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured. If the init-only option is configured, the delay is only applied when the IP interface is first configured or after a system reboot.
The no form of this command removes the command from the active configuration and removes the delay in activating the associated IP interface. If the configuration is removed during a delay period, the currently running delay will continue until it completes.
Default
no down ip
Parameters
- seconds
-
The time delay, in seconds, to make the interface operational.
- init-only
-
Specifies that the down delay is only applied when the interface is configured or after a reboot.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn redundant-interface hold-time down
- configure service vprn subscriber-interface hold-time down
- configure service ies redundant-interface hold-time down
- configure service ies subscriber-interface hold-time down
All
- configure router interface hold-time down
- configure service vpls interface hold-time down
- configure service vprn network-interface hold-time down
- configure service vprn interface hold-time down
- configure service ies interface hold-time down
down-link
down-link
Syntax
down-link gbr rate mbr rate
no down-link
Context
[Tree] (config>subscr-mgmt>gtp>peer-profile>ggsn>qos down-link)
[Tree] (config>subscr-mgmt>gtp>peer-profile>pgw>qos down-link)
[Tree] (config>subscr-mgmt>gtp>peer-profile>mme>qos down-link)
Full Context
configure subscriber-mgmt gtp peer-profile ggsn qos down-link
configure subscriber-mgmt gtp peer-profile pgw qos down-link
configure subscriber-mgmt gtp peer-profile mme qos down-link
Description
This command configures the down-link bitrate in kb/s to be used in the GTP messages.
The no form of this command reverts to the default.
Default
down-link gbr 2000 mbr 2000
down-link gbr 2000 mbr 2000 - for ggsn
down-link gbr 0 mbr 0 - for mme and pgw
Parameters
- gbr rate
-
Specifies the downlink Guaranteed Bit Rate (GBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).
- mbr rate
-
Specifies the downlink Maximum Bit Rate (MBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
down-on-internal-error
down-on-internal-error
Syntax
down-on-internal-error [tx-disable]
no down-on-internal-error
Context
[Tree] (config>port>ethernet down-on-internal-error)
Full Context
configure port ethernet down-on-internal-error
Description
This command configures the system to bring a port operationally down in the event the system has detected internal MAC transmit errors (Int MAC Tx Errs).
Default
no down-on-internal-error
Parameters
- tx-disable
-
Specifies that the laser should be disabled if an internal MAC transmit error is encountered. When used, this option requires that the operator explicitly cycle the admin state of the port to clear the error and re-enable the laser.
Platforms
All
down-on-peer-tldp-pw-status-faults
down-on-peer-tldp-pw-status-faults
Syntax
down-on-peer-tldp-pw-status-faults
no down-on-peer-tldp-pw-status-faults
Context
[Tree] (config>service>epipe>pw-port down-on-peer-tldp-pw-status-faults)
Full Context
configure service epipe pw-port down-on-peer-tldp-pw-status-faults
Description
This command enables the PW port configured on an Epipe to go locally operationally down if any of the following status bits are received on a mate spoke-SDP across an FPE:
-
0x00000001 - Pseudowire Not Forwarding
-
0x00000002 - Local Attachment Circuit (ingress) Receive Fault
-
0x00000004 - Local Attachment Circuit (egress) Transmit Fault
-
0x00000008 - Local PSN-facing PW (ingress) Receive Fault
-
0x00000010 - Local PSN-facing PW (egress) Transmit Fault
The no form of the command specifies that the mate PW status fault bits are not taken into account in the operational state of the PW port.
Default
no down-on-peer-tldp-pw-status-faults
Platforms
All
down-threshold
down-threshold
Syntax
down-threshold percent-change [bw absolute-change]
Context
[Tree] (config>router>rsvp>dbw-accounting down-threshold)
Full Context
configure router rsvp dbw-accounting down-threshold
Description
This command sets the minimum change (in percent of the latest advertised value) above which a decrease in Maximum Reservable Link Bandwidth (MRLB) (IS-IS TE sub-TLV 10) or Maximum Reservable Bandwidth (MRB) (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.
Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both of these thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.
Default
down-threshold 0
Parameters
- percent-change
-
Specifies the minimum decrease in MRLB/MRB, expressed in percent.
- absolute-change
-
Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.
Platforms
7750 SR, 7750 SR-s, 7950 XRS, VSR
down-timeout
down-timeout
Syntax
[no] down-timeout
Context
[Tree] (config>aaa>radius-srv-plcy>servers>health-check down-timeout)
Full Context
configure aaa radius-server-policy servers health-check down-timeout
Description
This command determines the interval to wait for a RADIUS reply message from the RADIUS server before a RADIUS server is declared out-of-service. By default, the value of the down-timeout is the number of retries multiplied by the timeout interval. Each host will use the configured timeout and retry value under the AAA RADIUS server policy.
timeout refers to the waiting period before the next retry attempt.
retry refers the number of times the host will attempt to contact the RADIUS server.
If a RADIUS server is declared out-of-service, the host pending retry attempts will move on to the next RADIUS server.
The no form of this command reverts to the default.
Parameters
- minutes
-
Specifies the timer to wait, in minutes, before declaring the RADIUS server that is down.
- seconds
-
Specifies the timer to wait, in seconds, before declaring the RADIUS server that is down.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
down-when-looped
down-when-looped
Syntax
down-when-looped
Context
[Tree] (config>port>ethernet down-when-looped)
Full Context
configure port ethernet down-when-looped
Description
This command configures Ethernet loop detection attributes.
Platforms
All
downlink
downlink
Syntax
downlink aggregate-rate
downlink arbiter arbiter-name
downlink policer policer-id
downlink queue queue-id
downlink scheduler scheduler-name
no downlink
Context
[Tree] (config>subscr-mgmt>gtp>apn-policy>apn>ambr-qos-mapping downlink)
Full Context
configure subscriber-mgmt gtp apn-policy apn ambr-qos-mapping downlink
Description
When enabled, the downlink rate in the APN-AMBR IE in an incoming GTP message is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.
This override uses standard SR OS QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override.
The no form of this command disables the override mechanism.
Default
no downlink
Parameters
- aggregate-rate
-
Specifies the aggregate rate.
- arbiter-name
-
Specifies the name of the arbiter to be overridden, up to 32 characters.
- policer-id
-
Specifies the ID of the policer to be overridden.
- queue-id
-
Specifies the ID of the queue to be overridden.
- scheduler-name
-
Specifies the name of the scheduler to be overridden, up to 32 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
downlink-mbr-gbr
downlink-mbr-gbr
Syntax
downlink-mbr-gbr aggregate-rate
downlink-mbr-gbr arbiter arbiter-name
downlink-mbr-gbr policer policer-id
downlink-mbr-gbr queue queue-id
downlink-mbr-gbr scheduler scheduler-name
no downlink-mbr-gbr
Context
[Tree] (config>subscr-mgmt>sla-prof>pfcp>seq downlink-mbr-gbr)
Full Context
configure subscriber-mgmt sla-profile pfcp-mappings session-qer downlink-mbr-gbr
Description
This command configures the downlink MBR/GBR to QoS override mapping.
The no form of the command disables the downlink MBR/GBR mapping.
Default
no downlink-mbr-gbr
Parameters
- aggregate-rate
-
Maps the MBR/GBR to a rate override for the aggregate rate.
- arbiter-name
-
Specifies the arbiter target of the MBR/GBR override. The arbiter name can be up to 32 characters.
- policer-id
-
Specifies the policer ID target of the MBR/GBR override.
- queue-id
-
Specifies the queue ID target of the MBR/GBR override.
- scheduler-name
-
Specifies the scheduler name target of the MBR/GBR override. The scheduler name can be up to 32 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
download-interval
download-interval
Syntax
download-interval minutes
no download-interval
Context
[Tree] (config>aaa>route-downloader download-interval)
Full Context
configure aaa route-downloader download-interval
Description
This command sets the time interval, in minutes, that the system waits for between two consecutive runs of the route-download process. The time is counted from the start-time of the run, thus, if an route-download process is still ongoing by the time the timer expires, the process will restart from count=1.
The no form of this command reverts to the default value.
Default
download-interval 720
Parameters
- minutes
-
Specifies the time interval, in minutes, between the start of the last route downloader run and the start of the next route downloader run.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
downstream-ip-filter
downstream-ip-filter
Syntax
downstream-ip-filter filter-id
no downstream-ip-filter
Context
[Tree] (config>service>vprn>nat>inside downstream-ip-filter)
Full Context
configure service vprn nat inside downstream-ip-filter
Description
This command assigns an IPv4 filter policy to the downstream NAT interface. This filter is applied to downstream traffic after the NAT function is applied but before it enters the inside VPRN instance.
The no form of the command removes the filter from the configuration.
Default
no downstream-ip-filter
Parameters
- filter-id
-
Specifies an existing IPv4 filter policy. Values can be expressed either as a decimal integer or as an ASCII string of up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
downstream-ip-filter
Syntax
downstream-ip-filter filter-id
no downstream-ip-filter
Context
[Tree] (config>router>nat>outside downstream-ip-filter)
[Tree] (config>service>vprn>nat>outside downstream-ip-filter)
Full Context
configure router nat outside downstream-ip-filter
configure service vprn nat outside downstream-ip-filter
Description
This command specifies a filter to apply to the downstream traffic after routing in the outside virtual router instance and before the NAT function; it is useful for traffic that bypasses the egress filters applied in the inside virtual router instance, such as DS-Lite traffic.
The no form of the command removes the filter from the configuration.
Default
no downstream-ip-filter
Parameters
- filter-id
-
Specifies a filter up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
downstream-ipv6-filter
downstream-ipv6-filter
Syntax
downstream-ipv6-filter filter-id
no downstream-ipv6-filter
Context
[Tree] (config>router>nat>outside downstream-ipv6-filter)
[Tree] (config>service>vprn>nat>outside downstream-ipv6-filter)
Full Context
configure router nat outside downstream-ipv6-filter
configure service vprn nat outside downstream-ipv6-filter
Description
This command configures the ipv6-filter for downstream traffic. This filter is applied to downstream traffic after it leaves the outside virtual router instance but before the NAT function is applied. This is useful for shared v6 filters that apply to all v6 DSM hosts.
The no form of the command removes the filter from the configuration.
Default
no downstream-ipv6-filter
Parameters
- filter-id
-
Specifies an IPv6 filter up to 64 characters in length.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
downstream-map-tlv
downstream-map-tlv
Syntax
downstream-map-tlv downstream-map-tlv
no downstream-map-tlv
Context
[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy downstream-map-tlv)
Full Context
configure saa test type-multi-line lsp-trace sr-policy downstream-map-tlv
Description
This command configures the downstream mapping TLV that provides a mechanism for the sender and responder nodes to exchange and validate interface and label stack information for each downstream hop in the path of the LDP FEC an RSVP LSP, or a BGP IPv4 or IPv6 label route.
The following downstream mapping TLVs are supported: the original Downstream Mapping (DSMAP) TLV defined in RFC 4379 (obsoleted by RFC 8029) and the Downstream Detailed Mapping (DDMAP) TLV defined in RFC 6424.
The no form of this command removes the configuration.
Parameters
- downstream-map-tlv
-
Specifies which format of the downstream mapping TLV to use in the LSP trace packet. The DSMAP TLV is the original format in RFC 4379 (obsoleted by RFC 8029). The DDMAP is the new enhanced format specified in RFC 6424. The user can also choose not to include the downstream mapping TLV by entering the value none. When lsp-trace is used on a MPLS-TP LSP (static option), it can only be executed if the control-channel is set to none. In addition, the DSMAP/DDMAP TLV is only included in the echo request message if the egress interface is either a numbered IP interface or an unnumbered IP interface. The TLV is not included if the egress interface is of type unnumbered-mpls-tp.
Platforms
All
dpd
dpd
Syntax
dpd [interval interval] [max-retries max-retries] [reply-only]
no dpd
Context
[Tree] (config>ipsec>ike-policy dpd)
Full Context
configure ipsec ike-policy dpd
Description
This command controls the dead peer detection mechanism.
The no form of this command removes the parameters from the configuration.
Default
no dpd
Parameters
- interval
-
Specifies the DPD interval, in seconds. Since more time is necessary to determine if there is incoming traffic, the actual time needed to bring down the tunnel is larger than the DPD interval multiplied by max-retries.
- max-retries
-
Specifies the maximum number of retries before the tunnel is removed.
- reply-only
-
Specifies whether to initiate a DPD request if there is an incoming ESP or IKE packet. Issuing the command without the reply-only keyword does not initiate a DPD request if there is an incoming ESP packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dr-activation-timer
dr-activation-timer
Syntax
dr-activation-timer seconds
Context
[Tree] (config>service>vpls>bind>evpn-mcast-gateway dr-activation-timer)
Full Context
configure service vpls allow-ip-int-bind evpn-mcast-gateway dr-activation-timer
Description
This command configures the designated router (DR) activation timer for the EVPN gateway.
After the DR activation timer expires, each provider edge router (PE) runs the MEG or PEG DR election. The timer allows the PE to collect Inclusive Multicast Ethernet Tag routes from other MEG/PEG gateways and avoid running the DR election multiple times. The DR triggers the MEG/PEG first-hop and last-hop router actions on the router.
Default
dr-activation-timer 3
Parameters
- seconds
-
Specifies DR election wait time, in seconds.
Platforms
All
drain
drain
Syntax
[no] drain
Context
[Tree] (config>service>vprn>dhcp>server>pool>subnet drain)
Full Context
configure service vprn dhcp local-dhcp-server pool subnet drain
Description
This command means no new leases can be assigned from this subnet and existing leases are cleaned up upon renew/rebind.
The no form of this command means the subnet is active and new leases can be assigned from it.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
drain
Syntax
[no] drain
Context
[Tree] (config>router>nat>outside>pool>address-range drain)
[Tree] (config>service>vprn>nat>outside>pool>address-range drain)
Full Context
configure router nat outside pool address-range drain
configure service vprn nat outside pool address-range drain
Description
This command starts or stops draining this NAT address range. When an address-range is being drained, it will not be used to serve new hosts. Existing hosts, however, will still be able to use the address that was assigned to them even if it is being drained. An address-range can only be deleted if the parent pool is shut down or if the range itself is effectively drained (hosts are no longer using the addresses).
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
drop
drop
Syntax
[no] drop
Context
[Tree] (config>app-assure>group>policy>aqp>entry>action drop)
Full Context
configure application-assurance group policy app-qos-policy entry action drop
Description
This command configures the drop action on flows matching this AQP entry. When enabled, all flow traffic matching this AQP entry will be dropped. When drop action is part of a set of multiple actions to be applied to a single flow as result of one or more AQP entry match, drop action will be performed first and no other action will be invoked on that flow.
The no form of this command disables the drop action on flows matching this AQP entry.
Default
no drop
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
drop
Syntax
drop
drop packet-length {lt | gt | eq} packet-length-value
drop packet-length range packet-length-value packet-length-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop ttl {lt | gt | eq} ttl-value
drop ttl range ttl-value ttl-value
Context
[Tree] (config>filter>ip-filter>entry>action drop)
Full Context
configure filter ip-filter entry action drop
Description
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on pkt-length, packet-length range, ttl, ttl range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, and not the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
-
the expression is left-aligned for odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
-
the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria.
Parameters
- packet-length
-
Specifies drop packets matching both the filter entry match criteria and the packet-length value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the packet-length value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
- packet-length-value
-
Specifies the packet length value for the rate limit action.
- range
-
Specifies an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
- expression
-
Specifies the hexadecimal pattern to match; up to eight bytes.
- mask
-
Specifies the mask for the pattern expression, up to eight bytes.
- offset-type
-
Specifies the starting point reference for the offset-value of this pattern.
- offset-value
-
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
- ttl-value
-
Specifies drop packets matching both the filter entry match criteria and the TTL value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the TTL value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
Platforms
All
drop
Syntax
drop
drop hop-limit {lt | gt | eq} hop-limit-value
drop hop-limit range hop-limit-value hop-limit-value
drop pattern expression expression mask mask offset-type offset-type offset-value offset-value
drop payload-length {lt | gt | eq} payload-length-value
drop payload-length range payload-length-value payload-length-value
Context
[Tree] (config>filter>ipv6-filter>entry>action drop)
Full Context
configure filter ipv6-filter entry action drop
Description
This command configures the drop action for the traffic that matches this filter entry.
Traffic can, also, be dropped based on payload-length, payload-length range, hop-limit, hop-limit range, or a pattern of conditional match criteria.
Packets that match the filter entry match criteria, but do not match the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.
For pattern match:
-
the expression is left-aligned for the odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card
-
the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria
Parameters
- hop-limit
-
Specifies the hop-limit value for the drop action.
- hop-limit-value
-
Specifies the hop-limit value for the drop action.
- range
-
Specifies an inclusive range. When the range parameter is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).
- expression
-
Specifies the hexadecimal pattern to match; up to eight bytes.
- mask
-
Specifies the mask for the pattern expression, up to eight bytes.
- offset-type
-
Specifies the starting point reference for the offset-value of this pattern.
- offset-value
-
Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.
- payload-length
-
Specifies drop packets matching both the filter entry match criteria and the payload-length-value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the payload-length-value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.
- payload-length-value
-
Specifies the payload length value for the drop action.
Platforms
All
drop
Syntax
drop
Context
[Tree] (config>filter>mac-filter>entry>action drop)
Full Context
configure filter mac-filter entry action drop
Description
This command sets the MAC filter entry action to drop.
Platforms
All
drop-count
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>service>vprn>static-route-entry>indirect>cpe-check drop-count)
[Tree] (config>service>vprn>static-route-entry>next-hop>cpe-check drop-count)
Full Context
configure service vprn static-route-entry indirect cpe-check drop-count
configure service vprn static-route-entry next-hop cpe-check drop-count
Description
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
Default
drop-count 3
Parameters
- count
-
An integer count value.
Platforms
All
drop-count
Syntax
drop-count consecutive-failures [hold-down seconds]
no drop-count
Context
[Tree] (config>filter>redirect-policy>dest>ping-test drop-count)
Full Context
configure filter redirect-policy destination ping-test drop-count
Description
This command specifies the number of consecutive requests that must fail for the destination to be declared unreachable and the time to hold destination unreachable before repeating tests.
Default
drop-count 3 hold-down 0
Parameters
- consecutive-failures
-
Specifies the number of consecutive ping test failures before declaring the destination down.
- hold-down seconds
-
Specifies the amount of time, in seconds, that the system should be held down if any of the test has marked it unreachable.
Platforms
All
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>router>static-route-entry>next-hop>cpe-check drop-count)
[Tree] (config>router>static-route-entry>indirect>cpe-check drop-count)
Full Context
configure router static-route-entry next-hop cpe-check drop-count
configure router static-route-entry indirect cpe-check drop-count
Description
This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.
Default
drop-count 3
Parameters
- count
-
Specifies the integer count value.
Platforms
All
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check drop-count)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check drop-count)
Full Context
configure service ies subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check drop-count
configure service vprn subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check drop-count
Description
This command configures the number of consecutive ping replies that must be missed to declare the CPE down.
Default
drop-count 3
Parameters
- count
-
Specifies the count value.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
drop-count
Syntax
drop-count count
no drop-count
Context
[Tree] (config>vrrp>policy>priority-event>host-unreachable drop-count)
Full Context
configure vrrp policy priority-event host-unreachable drop-count
Description
This command configures the number of consecutively sent ICMP echo request messages that must fail before the host unreachable priority control event is set.
The drop-count command is used to define the number of consecutive message send attempts that must fail for the host-unreachable priority event to enter the set state. Each unsuccessful attempt increments the event’s consecutive message drop counter. With each successful attempt, the event’s consecutive message drop counter resets to zero.
If the event’s consecutive message drop counter reaches the drop-count value, the host-unreachable priority event enters the set state.
The event’s hold-set value defines how long the event must stay in the set state even when a successful message attempt clears the consecutive drop counter. The event is not cleared until the consecutive drop counter is less than the drop-count value and the hold-set timer has a value of zero (expired).
The no form of the command reverts to the default value.
Default
drop-count 3 — 3 consecutive ICMP echo request failures are required before the host unreachable priority control event is set.
Parameters
- count
-
The number of ICMP echo request message attempts that must fail for the event to enter the set state. It also defines the threshold so a lower consecutive number of failures can clear the event state.
Platforms
All
drop-extracted-traffic
drop-extracted-traffic
Syntax
drop-extracted-traffic
Context
[Tree] (config>filter>ipv6-filter>entry>action drop-extracted-traffic)
[Tree] (config>filter>ip-filter>entry>action drop-extracted-traffic)
Full Context
configure filter ipv6-filter entry action drop-extracted-traffic
configure filter ip-filter entry action drop-extracted-traffic
Description
This command specifies that a packet matching this filter entry is dropped if extracted to the CPM. Packets matching the filter entry match criteria and not extracted to the CPM are forwarded with no further match in the following filter entries.
Platforms
All
drop-routes-with-srv6-tlvs
drop-routes-with-srv6-tlvs
Syntax
[no] drop-routes-with-srv6-tlvs
Context
[Tree] (config>router>bgp>group>srv6>route drop-routes-with-srv6-tlvs)
[Tree] (config>router>bgp>group>neighbor>srv6>route drop-routes-with-srv6-tlvs)
Full Context
configure router bgp group segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs
configure router bgp group neighbor segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs
Description
This command configures the router to drop and not advertise BGP routes (that belong to any address family) with SRv6 TLVs.
The no form of this command configures the router to advertise BGP routes with SRv6 TLVs.
Default
no drop-routes-with-srv6-tlvs
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
drop-tail
drop-tail
Syntax
drop-tail
Context
[Tree] (config>mcast-mgmt>bw-plcy>t2>sec-path>queue drop-tail)
[Tree] (config>mcast-mgmt>bw-plcy>t2>prim-path>queue drop-tail)
Full Context
configure mcast-management bandwidth-policy t2-paths secondary-path queue-parameters drop-tail
configure mcast-management bandwidth-policy t2-paths primary-path queue-parameters drop-tail
Description
Commands in this context configure queue drop-tail parameters.
Platforms
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>ies>if>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>vpls>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>vpls>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>ies>if>sap>egress>queue-override>queue drop-tail)
Full Context
configure service ies interface sap ingress queue-override queue drop-tail
configure service vpls sap ingress queue-override queue drop-tail
configure service vpls sap egress queue-override queue drop-tail
configure service ies interface sap egress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>port>ethernet>network>egr>qgrp>qover>q drop-tail)
[Tree] (config>port>eth>access>ing>qgrp>qover>q drop-tail)
[Tree] (config>port>eth>access>egr>qgrp>qover>q drop-tail)
Full Context
configure port ethernet network egress queue-group queue-overrides queue drop-tail
configure port ethernet access ingress queue-group queue-overrides queue drop-tail
configure port ethernet access egress queue-group queue-overrides queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>epipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>cpipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>ipipe>sap>ingress>queue-override>queue drop-tail)
[Tree] (config>service>cpipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>ipipe>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>epipe>sap>egress>queue-override>queue drop-tail)
Full Context
configure service epipe sap ingress queue-override queue drop-tail
configure service cpipe sap ingress queue-override queue drop-tail
configure service ipipe sap ingress queue-override queue drop-tail
configure service cpipe sap egress queue-override queue drop-tail
configure service ipipe sap egress queue-override queue drop-tail
configure service epipe sap egress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
- configure service ipipe sap egress queue-override queue drop-tail
- configure service epipe sap egress queue-override queue drop-tail
- configure service epipe sap ingress queue-override queue drop-tail
- configure service ipipe sap ingress queue-override queue drop-tail
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap egress queue-override queue drop-tail
- configure service cpipe sap ingress queue-override queue drop-tail
drop-tail
Syntax
drop-tail
Context
[Tree] (config>service>vprn>if>sap>egress>queue-override>queue drop-tail)
[Tree] (config>service>vprn>if>sap>ingress>queue-override>queue drop-tail)
Full Context
configure service vprn interface sap egress queue-override queue drop-tail
configure service vprn interface sap ingress queue-override queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>sap-ingress>queue drop-tail)
[Tree] (config>qos>sap-egress>queue drop-tail)
Full Context
configure qos sap-ingress queue drop-tail
configure qos sap-egress queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>network-queue>queue drop-tail)
Full Context
configure qos network-queue queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue drop-tail)
[Tree] (config>qos>qgrps>ing>qgrp>queue drop-tail)
Full Context
configure qos queue-group-templates egress queue-group queue drop-tail
configure qos queue-group-templates ingress queue-group queue drop-tail
Description
Commands in this context configure queue drop-tail parameters.
Platforms
All
drop-tail
Syntax
drop-tail
Context
[Tree] (config>qos>shared-queue>queue drop-tail)
Full Context
configure qos shared-queue queue drop-tail
Description
Commands in this context configure queue drop tail parameters.
Platforms
All
drop-unidentified-traffic
drop-unidentified-traffic
Syntax
[no] drop-unidentified-traffic
Context
[Tree] (config>service>vprn>nat>inside>subscriber-identification drop-unidentified-traffic)
[Tree] (config>router>nat>inside>subscriber-identification drop-unidentified-traffic)
Full Context
configure service vprn nat inside subscriber-identification drop-unidentified-traffic
configure router nat inside subscriber-identification drop-unidentified-traffic
Description
When this command denies address translation to subscribers that have not been identified via accounting messages sent by BNG and received by Radius accounting proxy. This command has effect only in Subscriber Aware Application.
Default
no drop-unidentified-traffic
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
drop-zero-ipv4-checksum
drop-zero-ipv4-checksum
Syntax
[no] drop-zero-ipv4-checksum
Context
[Tree] (config>service>vprn>nat>inside>nat64 drop-zero-ipv4-checksum)
Full Context
configure service vprn nat inside nat64 drop-zero-ipv4-checksum
Description
This command specifies if UDP datagrams with zero IPv4 checksum are dropped.
If this command is disabled, the system calculates the IPv6 checksum for each such datagram.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
drop-zero-ipv4-checksum
Syntax
[no] drop-zero-ipv4-checksum
Context
[Tree] (config>router>nat>inside>nat64 drop-zero-ipv4-checksum)
[Tree] (config>service>vprn>nat>inside>nat64 drop-zero-ipv4-checksum)
Full Context
configure router nat inside nat64 drop-zero-ipv4-checksum
configure service vprn nat inside nat64 drop-zero-ipv4-checksum
Description
This command enables the NAT64 node to drop received UDP datagrams with zero IPv4 checksum. By default, checksum is re-calculated for non-fragmented datagrams.
The no form of the command disables the command.
Default
disabled
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dropped-only
dropped-only
Syntax
[no] dropped-only
Context
[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id dropped-only)
Full Context
debug subscriber-mgmt vrgw brg pppoe-client brg-id dropped-only
Description
This command specifies that only packets that are dropped by the vRGW will be shown in debugging.
Default
dropped-only
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ds1
ds1
Syntax
[no] ds1 ds1-id
Context
[Tree] (config>port>tdm ds1)
Full Context
configure port tdm ds1
Description
Commands in this context configure digital signal level 1 (DS-1) frame parameters. The T-Carrier system was the first successful system that supported digitized voice transmission. The original transmission rate (1.544 Mb/s) in the T-1 (DS-1) line is commonly used by Internet service providers (ISPs) to connect to the Internet.
North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS- system. Digital signals are carried inside the carrier systems.
T-1 transmits DS-1-formatted data at 1.544 Mb/s through the network. The corresponding European carrier is E-1 with a data rate of 2.048 Mb/s. E-1 and T-1 (DS-1) can be interconnected for international use.
The no form of this command disables DS-1 capabilities.
Parameters
- ds1-id
-
Identifies the DS-1 channel being created.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
ds3
ds3
Syntax
[no] ds3 [sonet-sdh-index]
Context
[Tree] (config>port>tdm ds3)
Full Context
configure port tdm ds3
Description
Commands in this context configure DS-3 parameters. DS-3 lines provide a speed of 44.736 Mb/s and is also frequently used by service providers. DS-3 lines carry 28 DS-1 signals and a 44.736 Mb/s data rate.
A DS-3 connection typically supports data rates of about 43 Mb/s. A T-3 line actually consists of 672 individual channels, each supporting 64 kb/s. T-3 lines are used mainly by Service Providers to connect to the Internet backbone and for the backbone itself.
Depending on the MDA type, the DS-3 parameters must be disabled if clear channel is enabled by default (for example, on the m12-ds3 MDA). Clear channel is a channel that uses out-of-band signaling, not in-band signaling, so the channel's entire bit rate is available. Channelization must be explicitly specified. Note that if DS-3 nodes are provisioned on a channelized SONET/SDH MDA you must provision the parent STS-1 SONET/STM0 SDH path first.
North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS system. Digital signals are carried inside the carrier systems.
The no form of this command disables DS-3 capabilities.
Parameters
- sonet-sdh-index
-
Specifies the components making up the specified SONET/SDH Path. Depending on the type of SONET/SDH port the sonet-sdh-index must specify more path indexes to specify the payload location of the path. The sonet-sdh-index differs for SONET and SDH ports.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
dsap
dsap
Syntax
dsap dsap-value [dsap-mask]
no dsap
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dsap)
Full Context
configure qos sap-ingress mac-criteria entry match dsap
Description
Configures an Ethernet 802.2 LLC DSAP value or range for an ingress SAP QoS policy match criterion.
This is a 1-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.
Use the no form of this command to remove the dsap value as the match criterion.
Default
no dsap
Parameters
- dsap-value
-
The 8-bit dsap match criteria value in hexadecimal.
- dsap-mask
-
This is optional and can be used when specifying a range of dsap values to use as the match criteria.
This 8-bit mask can be configured using the following formats.
Table 4. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDD
240
Hexadecimal
0xHH
0xF0
Binary
0bBBBBBBBB
0b11110000
Platforms
All
dsap
Syntax
dsap dsap-value [dsap-mask]
no dsap
Context
[Tree] (config>filter>mac-filter>entry>match dsap)
Full Context
configure filter mac-filter entry match dsap
Description
Configures an Ethernet 802.2 LLC DSAP value or range for a MAC filter match criterion.
This is a one-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria.
Use the no form of the command to remove the dsap value as the match criterion.
Default
no dsap
Parameters
- dsap-value
-
Specifies the 8-bit dsap match criteria value which can be expressed in decimal integer, hexadecimal or binary format.
- dsap-mask
-
Specifies an optional parameter that may be used when specifying a range of dsap values to use as the match criteria.
This 8 bit mask can be configured using the decimal integer, hexadecimal or binary formats described in the following table.
Table 5. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDD
240
Hexadecimal
0xHH
0xF0
Binary
0bBBBBBBBB
0b11110000
Platforms
All
dsap
Syntax
dsap dsap-value [dsap-mask]
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dsap)
Full Context
configure system security management-access-filter mac-filter entry match dsap
Description
This command configures DSAP match conditions.
Parameters
- dsap-value
-
Specifies the 8-bit DSAP match criteria value in hexadecimal.
- mask
-
Specifies a range of DSAP values to use as the match criteria.
This 8 bit mask can be configured using the formats described in Format Styles:
Table 6. Format Styles Format Style
Format Syntax
Example
Decimal
DDD
240
Hexadecimal
0xHH
0xF0
Binary
0bBBBBBBBB
0b11110000
Platforms
All
dscp
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dscp)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dscp)
Full Context
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dscp
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dscp
Description
This command configures DSCP match conditions.
The no form of this command reverts to the default.
Parameters
- dscp-name
-
Specifies the DSCP name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>service>ies>if>sap>ip-tunnel dscp)
Full Context
configure service ies interface sap ip-tunnel dscp
Description
This command sets the DSCP code-point in the outer IP header of encapsulated packets associated with a particular tunnel.
The no form of this command copies the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
Default
no dscp
Parameters
- dscp
-
Specifies the DSCP code-point to be used.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dscp
Syntax
dscp dscp-name fc fc-name
no dscp dscp-name
Context
[Tree] (config>service>vprn>sgt-qos dscp)
[Tree] (config>router>sgt-qos dscp)
Full Context
configure service vprn sgt-qos dscp
configure router sgt-qos dscp
Description
This command creates a mapping between the DiffServ Code Point (DSCP) of the self-generated traffic and the forwarding class.
Self-generated traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DSCPs to the forwarding class.
All DSCP names that define a DSCP value must be explicitly defined.
The no form of this command removes the DSCP-to-forwarding class association.
Parameters
- dscp-name
-
Specifies the name of the DSCP to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.
- fc fc-name
-
Specifies the forwarding class name. All packets with a DSCP value or MPLS EXP bit that are not defined will be placed in this forwarding class.
Platforms
All
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>service>vprn>if>sap>ip-tunnel dscp)
Full Context
configure service vprn interface sap ip-tunnel dscp
Description
This command sets the DSCP code-point in the outer IP header of GRE encapsulated packets associated with a particular GRE tunnel. The default, set using the no form of this command, is to copy the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.
Default
no dscp
Parameters
- dscp
-
Specifies the DSCP code-point to be used.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dscp
Syntax
dscp in-profile dscp-name out-profile dscp-name
no dscp
Context
[Tree] (config>app-assure>group>policy>aqp>entry>action>remark dscp)
Full Context
configure application-assurance group policy app-qos-policy entry action remark dscp
Description
Commands in this context configure DSCP remark action or actions on flows matching this AQP entry. When enabled, all packets for all flows matching this AQP entry will be remarked to the configured DSCP name.
DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of profile of a given packet for DSCP remark is assessed after all AQP policing and priority remarking actions took place.
The no form of this command stops DSCP remarking action on flows matching this AQP entry.
Default
no dscp
Parameters
- in-profile dscp-name
-
Specifies the DSCP name to use to remark in-profile flows that match this policy.
- out-profile dscp-name
-
Specifies the DSCP name to use to remark out-of-profile flows that match this policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dscp
Syntax
dscp {eq | neq} dscp-name
no dscp
Context
[Tree] (config>app-assure>group>sess-fltr>entry>match dscp)
[Tree] (config>app-assure>group>policy>aqp>entry>match dscp)
Full Context
configure application-assurance group session-filter entry match dscp
configure application-assurance group policy app-qos-policy entry match dscp
Description
This command adds a DSCP name to the match criteria used by this entry.
The no form of this command removes dscp from match criteria for this entry.
Default
no dscp
Parameters
- eq
-
Specifies that the value configured and the value in the flow are equal.
- neq
-
Specifies that the value configured differs from the value in the flow.
- dscp-name
-
Specifies the DSCP name to be used in the match.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>test-oam>build-packet>header>ipv4 dscp)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dscp)
Full Context
configure test-oam build-packet header ipv4 dscp
debug oam build-packet packet field-override header ipv4 dscp
Description
This command defines the DSCP value to be used in the IPv4 header.
The no form of this command reverts to the default.
Default
dscp be
Parameters
- dscp-name
-
Specifies the DSCP value to be used in the IPv4 header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>test-oam>build-packet>header>ipv6 dscp)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dscp)
Full Context
configure test-oam build-packet header ipv6 dscp
debug oam build-packet packet field-override header ipv6 dscp
Description
This command defines the DSCP value to be used in the IPv6 header.
The no form of this command removes the DSCP name.
Parameters
- dscp-name
-
Specifies the DSCP value to be used in the IPv6 header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name
dscp resolve
Context
[Tree] (config>oam-pm>session>ip dscp)
Full Context
configure oam-pm session ip dscp
Description
This command can be used to explicitly configure the DSCP value to the specified dscp-name, or to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
Default
dscp resolve
Parameters
- dscp-name
-
Specifies the Diffserv code point name.
- resolve
-
Specifies to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>oam-pm>session>mpls dscp)
Full Context
configure oam-pm session mpls dscp
Description
This command can be used to explicitly configure the DSCP value that is carried in the DM PDU. This value is not used on the launch point or the reflector to influence the QoS behavior on the network elements. The frame itself has no IP information because it uses the General Associated Channel Header (G-Ach). The fc and profile values are used to influence QoS behavior on the launch point and the responder.
The no form of this command reverts the dscp carried in the DM PDU to default.
Default
dscp be
Parameters
- dscp-name
-
Specifies the Diffserv code point name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name [dscp-name] fc fc-name [priority {low | high}]
no dscp dscp-name [dscp-name]
Context
[Tree] (config>qos>sap-ingress dscp)
Full Context
configure qos sap-ingress dscp
Description
This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with the DiffServ Code Point (DSCP) value contained in the dscp-name. A list of up to eight dscp-names can be entered on a single command. The lists of dscp-names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight dscp-names with the same parameters (fc, priority) will result in multiple lists being created. Conversely, multiple lists with the same parameters (fc, priority) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, then a new list will be created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
Adding a DSCP rule on the policy forces packets that match the DSCP value specified to override the forwarding class and enqueuing priority based on the parameters included in the DSCP rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The DSCP value (referred to here by dscp-name) is derived from the most significant six bits in the IPv4 header ToS byte field (DSCP bits) or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed. The six DSCP bits define 64 DSCP values used to map packets to per-hop Quality of Service (QoS) behavior. The most significant three bits in the IP header ToS byte field are also commonly used in a more traditional manner to specify an IP precedence value, causing an overlap between the precedence space and the DSCP space. Both IP precedence and DSCP classification rules are supported.
DSCP rules have a higher match priority than IP precedence rules and where a dscp-name DSCP value overlaps an ip-prec-value, the DSCP rule takes precedence.
The no form of this command removes the specified the dscp-names from the explicit DSCP classification rule in the SAP ingress policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to eight per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, then the command is aborted at that point with an error message displayed; any DSCP names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
Removing the dscp-name from the policy immediately removes the DSCP name on all ingress SAPs using the policy.
Parameters
- dscp-name
-
The DSCP name is a required parameter that specifies the unique IP header ToS byte DSCP bits value that will match the DSCP rule. If the command is executed multiple times with the same dscp-name, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of 64 DSCP rules are allowed on a single policy and a maximum of eight dscp-names can be specified in a single statement.
The specified name must exist as a dscp-name. SRÂ OS software provides names for the well-known code points; these can be shown using the show qos dscp-table command.
- fc fc-name
-
The value given for fc-name must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (.). If subclass-name does not exist in the context of fc-name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.
- priority
-
This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
- high
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
All
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dscp)
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dscp)
Full Context
configure qos sap-egress ipv6-criteria entry match dscp
configure qos sap-ingress ipv6-criteria entry match dscp
configure qos sap-egress ip-criteria entry match dscp
configure qos sap-ingress ip-criteria entry match dscp
Description
This command configures a DSCP code point to be used as a SAP QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
Default
no dscp
Parameters
- dscp-name
-
Specifies a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point can only be specified by its name.
Platforms
All
dscp
Syntax
dscp dscp-name [dscp-name] [fc fc-name] [profile {in | out | exceed | inplus}]
no dscp dscp-name [dscp-name]
Context
[Tree] (config>qos>sap-egress dscp)
Full Context
configure qos sap-egress dscp
Description
This command defines IP Differentiated Services Code Point (DSCP) names that must be matched to perform the associated reclassification actions. The specified name must exist as a DSCP name. SRÂ OS software provides names for the well-known code points. A list of up to eight DSCP names can be entered on a single command. The lists of DSCP names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight DSCP names with the same parameters (fc and profile) results in multiple lists being created. Conversely, multiple lists with the same parameters (fc and profile) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, a new list is created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.
If an egress packet on the SAP matches an IP DSCP value corresponding to a specified DSCP name, the forwarding class, profile egress queue accounting behavior may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions. Matching a DSCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the traffic class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The reclassification actions from a DSCP reclassification rule may be overridden by an IP flow match event.
The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If an IP criteria match occurs after the DSCP match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new fc, the fc from the dscp match will be used.
The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If an IP criteria match occurs after the DSCP match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the DSCP match will be used.
The no form of this command removes the specified the dscp-names from the reclassification rule in the SAP egress QoS policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to 8 per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, the command is aborted at that point with an error message displayed. Any dscp-names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.
Parameters
- dscp-name
-
The dscp-name parameter is required when defining a DSCP reclassification rule. The specified name must exist as a DSCP name. A maximum of eight DSCP names can be specified in a single statement. SRÂ OS software provides names for the well-known code points, which can be shown using the show qos dscp-table command.
- fc-name:
-
The fc reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the forwarding class specified as fc-name regardless of the ingress classification decision. The explicit forwarding class reclassification may be overwritten by an IP criteria reclassification match. The fc name defined must be one of the eight forwarding classes supported by the system. To remove the forwarding class reclassification action for the specified DSCP value, the dscp command must be re-executed without the fc reclassification action defined.
- counter-id
-
Specifies the counter ID.
- profile
-
The profile reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the specified profile regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by an IPv6 criteria or IP criteria reclassification match. To remove the profile reclassification action for the specified dscp-name, the dscp command must be re-executed without the profile reclassification action defined.
- in
-
Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
- out
-
Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
- exceed
-
Specifies that when exceed is specified, any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
- inplus
-
Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
Platforms
All
dscp
Syntax
dscp {dscp-name | in-profile dscp-name out-profile dscp-name [exceed-profile dscp-name]}
no dscp
Context
[Tree] (config>qos>sap-egress>fc dscp)
Full Context
configure qos sap-egress fc dscp
Description
This command configures a DSCP to be used for remarking packets from the specified FC. If the optional exceed-profile, in-profile, or out-profile keyword is specified, the command will remark different DSCP depending on whether the packet was classified to be exceed, in-profile, or out-of-profile ingress to the node. All inplus-profile traffic is marked with the same value as in-profile traffic.
Default
no dscp
Parameters
- dscp-name
-
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
- exceed-profile dscp-name
-
This optional parameter specifies the DSCP name to be used to remark the traffic that is exceed-profile. If not specified, this defaults to the same value configured for out-profile parameter.
- in-profile dscp-name
-
Specifies the DSCP name to be used to remark the traffic that is in-profile.
- out-profile dscp-name
-
Specifies the DSCP name to be used to remark the traffic that is out-of-profile.
Platforms
All
dscp
Syntax
dscp dscp-name fc fc-name profile {in | out}
no dscp
Context
[Tree] (config>qos>network>ingress dscp)
Full Context
configure qos network ingress dscp
Description
This command creates a mapping between the DiffServ Code Point (DSCP) of the network ingress traffic and the forwarding class.
Ingress traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DiffServ code points to the forwarding class. For undefined code points, packets are assigned to the forwarding class specified under the default-action command.
The no form of this command removes the DiffServ code point-to-forwarding class association. The default-action then applies to that code point value.
Parameters
- dscp-name
-
The name of the DiffServ code point to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.
The system-defined names available are as follows. The system-defined names must be referenced as all lowercase, exactly as shown in the first column in Default DSCP Names to DSCP Value Mapping and Default Class Selector Code Points to DSCP Value Mapping.
Additional names-to-code point value associations can be added using the 'dscp-name dscp-name dscp-value’ command.
The actual mapping is being done on the dscp-value, not the dscp-name that references the dscp-value. If a second dscp-name that references the same dscp-value is mapped within the policy, an error will occur. The second name will not be accepted until the first name is removed.
Table 7. Default DSCP Names to DSCP Value Mapping DSCP Name
DSCP Value Decimal
DSCP Value
Hexadecimal
DSCP Value Binary
nc1
48
0x30
0b110000
nc2
56
0x38
0b111000
ef
46
0x2e
0b101110
af41
34
0x22
0b100010
af42
36
0x24
0b100100
af43
38
0x26
0b100110
af31
26
0x1a
0b011010
af32
28
0x1c
0b011100
af33
30
0x1d
0b011110
af21
18
0x12
0b010010
af22
20
0x14
0b010100
af23
22
0x16
0b010110
af11
10
0x0a
0b001010
af12
12
0x0c
0b001100
af13
14
0x0e
0b001110
default
0
0x00
0b000000
Table 8. Default Class Selector Code Points to DSCP Value Mapping DSCP Name
DSCP Value Decimal
DSCP Value
Hexadecimal
DSCP Value Binary
cs7
56
0x38
0b111000
cs6
48
0X30
0b110000
cs5
40
0x28
0b101000
cs4
32
0x20
0b100000
cs3
24
0x18
0b011000
cs2
16
0x10
0b010000
cs1
08
0x8
0b001000
- fc-name
-
Enter this required parameter to specify the fc-name with which the code point will be associated.
- profile {in | out}
-
Enter this required parameter to indicate whether the DiffServ code point value is the in-profile or out-of-profile value. For every DSCP value defined, the profile must be indicated. If a DSCP value is not mapped, the default-action forwarding class and profile state will be used for that value.
DSCP values mapping to forwarding classes Expedited (ef), High-1 (h1) and Network-Control (nc) can only be set to in-profile.
DSCP values mapping to forwarding class "be” can only be set to out-of-profile.
Platforms
All
dscp
Syntax
dscp dscp-name fc fc-name profile {in | out | exceed | inplus}
no dscp dscp-name
Context
[Tree] (config>qos>network>egress dscp)
Full Context
configure qos network egress dscp
Description
This command configures an IP Differentiated Services Code Point (DSCP) value that must be matched to perform the associated reclassification actions. If an egress packet on an IES/VPRN interface spoke SDP, on a CSC network interface in a VPRN, or on a network interface that the network QoS policy is applied to, matches the specified IP DSCP value, the forwarding class and profile may be overridden.
By default, the forwarding class and profile of the packet are derived from ingress classification and profiling functions. Matching a DHCP-based reclassification rule will override all IP precedence-based reclassification rule actions.
The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.
The configuration of egress DSCP classification and the configuration of an egress IP criteria or IPv6 criteria entry statement within a network QoS policy are mutually exclusive.
The IP precedence- and DSCP-based reclassification are supported on a network interface, on a CSC network interface in a VPRN, and on a PW used in an IES or VPRN spoke interface. The CLI will block the application of a network QoS policy with the egress reclassification commands to the spoke SDP part of a Layer 2 service.
Conversely, the CLI will not allow the user to add the egress reclassification commands to a network QoS policy if the policy is being used by a Layer 2 spoke SDP.
The egress reclassification commands will only take effect if the redirection of the spoke SDP or CSC interface to use an egress port queue group succeeds. For example, the following CLI command would be successful:
config>service>vprn>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>ies>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id
config>service>vprn>nw-if>qos network-policy-id port-redirect-group queue-group-name instance instance-id
If the redirection command fails, the PW will use the network QoS policy assigned to the network IP interface, however any reclassification in the network QoS policy applied to the network interface will be ignored.
The no form of this command removes the egress reclassification rule.
Parameters
- dscp-name
-
be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63
- fc fc-name
-
be, l2, af, l1, h2, ef, h1, nc
- profile {in | out | exceed | inplus}
-
The profile reclassification action is mandatory. When specified, packets matching the DSCP value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. To remove the profile reclassification action for the specified DSCP value, the no dscp command must be executed.
in - Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.
out - Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.
exceed - Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.
inplus - Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.
Platforms
All
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dscp)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dscp)
Full Context
configure qos network ingress ip-criteria entry match dscp
configure qos network egress ipv6-criteria entry match dscp
configure qos network ingress ipv6-criteria entry match dscp
configure qos network egress ip-criteria entry match dscp
Description
This command configures a DSCP to be used as a network QoS policy match criterion.
The no form of this command removes the DSCP match criterion.
Parameters
- dscp-name
-
Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.
Platforms
All
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>filter>ip-filter>entry>match dscp)
[Tree] (config>filter>ipv6-filter>entry>match dscp)
Full Context
configure filter ip-filter entry match dscp
configure filter ipv6-filter entry match dscp
Description
This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.
The no form of the command removes the DSCP match criterion.
Default
no dscp
Parameters
- dscp-name
-
Configures a DSCP name. The DiffServ code point may only be specified by its name.
Platforms
All
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dscp)
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dscp)
Full Context
configure system security cpm-filter ip-filter entry match dscp
configure system security cpm-filter ipv6-filter entry match dscp
Description
This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.
The no form of this command removes the DSCP match criterion.
Default
no dscp
Parameters
- dscp-name
-
Configures a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point may only be specified by its name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name
no dscp
Context
[Tree] (config>test-oam>icmp>ping-template dscp)
Full Context
configure test-oam icmp ping-template dscp
Description
This command specifies the DSCP to be carried in the IP header. This value is not exposed to egress QoS policies. This command uses well-known DSCP names.
The no form of this command reverts to the default value.
Default
dscp nc1
Parameters
- dscp-name
-
Specifies the DSCP name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp
Syntax
dscp dscp-name
Context
[Tree] (config>test-oam>link-meas>template>twl dscp)
Full Context
configure test-oam link-measurement measurement-template twamp-light dscp
Description
This command configures the DSCP to be copied into the IP header of each TWAMP Light echo request packet launched for the test.
Default
dscp nc1
Parameters
- dscp-name
-
Specifies the DSCP code point to be used.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dscp-in-profile
dscp-in-profile
Syntax
dscp-in-profile dscp-name
no dscp-in-profile
Context
[Tree] (config qos network egress fc dscp-in-profile)
Full Context
configure qos network egress fc dscp-in-profile
Description
This command specifies the in-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default in-profile DSCP name setting for policy-id 1.
Parameters
- dscp-name
-
Specifies the system- or user-defined, case-sensitive dscp-name.
Platforms
All
dscp-out-profile
dscp-out-profile
Syntax
dscp-out-profile dscp-name
no dscp-out-profile
Context
[Tree] (config qos network egress fc dscp-out-profile)
Full Context
configure qos network egress fc dscp-out-profile
Description
This command specifies the out-of-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets requiring marking the egress on this forwarding class queue that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default out-of-profile DSCP name setting for policy-id 1.
Default
Policy-id 1: |
Factory setting |
Policy-id 2 to 65535: |
Policy-id setting |
Parameters
- dscp-name
-
Specifies the system- or user-defined, case-sensitive dscp-name.
Platforms
All
dslite-lsn-sub
dslite-lsn-sub
Syntax
[no] dslite-lsn-sub router router-instance b4 ipv6-prefix
Context
[Tree] (config>li>li-source>nat dslite-lsn-sub)
Full Context
configure li li-source nat dslite-lsn-sub
Description
This command configures the Dual-Stack Lite LSN subscriber source.
The no form of this command removes the value from the configuration.
Parameters
- router-instance
-
Specifies the router instance the pool belongs to, either by router name or service ID.
- ipv6-prefix
-
Specifies the IPv6 address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dslite-max-subscriber-limit
dslite-max-subscriber-limit
Syntax
dslite-max-subscriber-limit max
no dslite-max-subscriber-limit
Context
[Tree] (config>router>nat>inside>dslite dslite-max-subscriber-limit)
[Tree] (config>service>vprn>nat>inside dslite-max-subscriber-limit)
Full Context
configure router nat inside dslite dslite-max-subscriber-limit
configure service vprn nat inside dslite-max-subscriber-limit
Description
This command sets the value for the number of high order bits of the source IPv6 address that will be considered as DS-Lite subscriber. The remaining bits of the source IPv6 address will be masked off, effectively aggregation all IPv6 source addresses under the configured prefix length into a single DS-Lite subscriber. Source IPv4 addresses/ports of the traffic carried within the DS-Lite subscriber will be translated into a single outside IPv4 address and the corresponding deterministic port-block (port-blocks can be extended).
The range of values for subscriber-prefix-length in non-deterministic DS-Lite is limited from 32 to 64 (a prefix will be considered as a DS-Lite subscriber) or it can be set to a value of 128 (the source IPv6 address is considered as a DS-Lite subscriber).
In cases where deterministic DS-Lite is enabled in a giver inside routing context, the range of values of the subscriber-prefix-length depends on the value of dslite-max-subscriber-limit parameter as follows:
subscriber-prefix-length – n = [32..64,128]
where n = log2(dslite-max-subscriber-limit)
[or in an alternate form: dslite-max-subscriber-limit = 2^n.]
In other words the largest prefix length for the deterministic DS-Lite subscriber will be 32+n, where n = log2(dslite-max-subscriber-limit). The subscriber prefix length can extend up to 64 bits. Beyond 64 bits for the subscriber prefix length, there only one value is allowed: 128. In the case n must be 0, which means that the mapping between B4 elements (or IPv6 address) and the IPv4 outside addresses is in 1:1 ratio (no sharing of outside IPv4 addresses).
This parameter can be changed only when there are no deterministic prefixes configured in the same routing context.
Default
128
Parameters
- max
-
In non-deterministic DS-Lite this value can be 32 to 64,128, assuming that the deterministic DS-Lite is not concurrently enabled in the same inside routing context.
In case that deterministic DS-Lite is enabled, this value can be within the range [(32+n)..64,128] where n = log2(dslite-max-subscriber-limit). The value of 128 is allowed only when n=0 (each subscriber is mapped to a single outside IPv4 IP address).
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dsm
dsm
Syntax
[no] dsm
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>ue-state dsm)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query ue-state dsm
Description
This command enables matching on DSM UEs.
The no form of this command disables matching on DSM UEs, unless UE state matching is disabled altogether.
Default
no dsm
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dsm
Syntax
[no] dsm
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dsm)
Full Context
configure subscriber-mgmt wlan-gw ue-query state dsm
Description
This command enables matching on UEs in a DSM state.
The no form of this command disables matching on UEs in a DSM state, unless all state matching is disabled.
Default
no dsm
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dsm-ip-filter
dsm-ip-filter
Syntax
dsm-ip-filter dsm-ip-filter-name
no dsm-ip-filter
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter
Description
This command configures an IP filter that is distributed on ISA cards.
This command specifies the IP filter applied to all UEs corresponding to default vlan-range (such as a group-interface) or the specified vlan-range. The IP filter can be created in the config>subscr-mgmt>isa-filter context, and can contain up to 1024 match entries. The IP filter can be overridden per UE from RADIUS via access-accept or COA.
The no form of this command reverts to the default.
Parameters
- dsm-ip-filter-name
-
Specifies the identifier of the distributed-sub-mgmt IP filter.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dsm-subscriber
dsm-subscriber
Syntax
[no] dsm-subscriber mac mac-address
Context
[Tree] (config>li>li-source>wlan-gw dsm-subscriber)
Full Context
configure li li-source wlan-gw dsm-subscriber
Description
This command configures the DSM UE source.
Parameters
- mac-address
-
Specifies the MAC address.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dsmap
dsmap
Syntax
dsmap if-num
no dsmap
Context
[Tree] (config>router>mpls>lsp>protect-tp-path>mep dsmap)
[Tree] (config>router>mpls>lsp>working-tp-path>mep dsmap)
[Tree] (config>router>mpls>lsp>transit-path>forward-path>mip dsmap)
[Tree] (config>router>mpls>lsp>transit-path>reverse-path>mip dsmap)
Full Context
configure router mpls lsp protect-tp-path mep dsmap
configure router mpls lsp working-tp-path mep dsmap
configure router mpls lsp transit-path forward-path mip dsmap
configure router mpls lsp transit-path reverse-path mip dsmap
Description
This command is used to configure the values to use in the DSMAP TLV sent by a node in an LSP Trace echo request for a static MPLS-TP LSP. A node sending a DSMAP TLV will include the in-if-num and out-if-num values. Additionally, it will include the out-label for the LSP in the Label TLV for the DSMAP in the echo request message.
The no form of this command equals to a value 0 (this means no interface validation will be performed).
Default
no dsmap
Parameters
- if-num
-
This is a 32-bit value corresponding to the expected ingress interface if-num used by an MPLS-TP LSP for the next hop downstream.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-ip
dst-ip
Syntax
dst-ip {ipv6-address | prefix-length}
dst-ip {ip-address/mask | ip-address netmask
no dst-ip
Context
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-ip)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-ip)
Full Context
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-ip
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-ip
Description
This command configures the destination IP match condition.
The no form of this command reverts to the default.
Parameters
- ip-address/mask
-
Specifies the IPv4 address and mask.
- netmask
-
Specifies the mask, expressed as a dotted quad.
- ipv6-address
-
Specifies the IPv6 address (applies only to the 7750 SR).
- prefix-length
-
Specifies the prefix length (applies only to the 7750 SR).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip ip-address
no dst-ip
Context
[Tree] (config>redundancy>mc>peer>mcr>node>cv dst-ip)
[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path dst-ip)
[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path dst-ip)
Full Context
configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify dst-ip
configure redundancy multi-chassis peer mc-ring ring in-band-control-path dst-ip
configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path dst-ip
Description
This command specifies the destination IP address used in the inband control connection. If the address is not configured, the ring cannot become operational.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the destination IP address.
Platforms
All
dst-ip
Syntax
dst-ip ip-prefix/length
no dst-ip
Context
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-ip)
[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-ip)
Full Context
configure subscriber-mgmt isa-filter ipv6 entry match dst-ip
configure subscriber-mgmt isa-filter entry match dst-ip
Description
This command specifies that the packet’s destination IP address must match the specified IP prefix and mask.
The no form of this command disables the match on the destination IP.
Parameters
- ip-prefix/length
-
Specifies the IP prefix to match.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip ip-address protocol ip-protocol dst-port port-number
dst-ip ip-address protocol ip-protocol dst-port port-number prefix-length prefix-length
no dst-ip ip-address protocol ip-protocol dst-port port-number
Context
[Tree] (config>subscr-mgmt>http-rdr-plcy>fwd-entries dst-ip)
Full Context
configure subscriber-mgmt http-redirect-policy forward-entries dst-ip
Description
This command configures traffic flow to be forwarded via match in the redirect policy.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address to match the destination address in the IP header of the traffic received from the subscriber.
- prefix-length
-
Specifies the length of the prefix specified by the ip-address.
- ip-protocol
-
Specifies the protocol to match the IP protocol in the IP header of the traffic received from the subscriber.
- port-number
-
Specifies the port to match the destination port in the HTTP request.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip {eq | neq} ip-address
dst-ip {eq | neq} ip-prefix-list ip-prefix-list-name
no dst-ip
Context
[Tree] (config>app-assure>group>policy>aqp>entry>match dst-ip)
Full Context
configure application-assurance group policy app-qos-policy entry match dst-ip
Description
This command specifies a destination IP address to use as match criteria.
Default
no dst-ip
Parameters
- eq
-
Specifies that a successful match occurs when the flow matches the specified address or prefix.
- neq
-
Specifies that a successful match occurs when the flow does not match the specified address or prefix.
- ip-address
-
Specifies a valid unicast address.
- ip-prefix-list-name
-
Specifies the name of an IP prefix list, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip ip-address
dst-ip dns-ip-cache dns-ip-cache-name
dst-ip ip-prefix-list ip-prefix-list-name
no dst-ip
Context
[Tree] (config>app-assure>group>sess-fltr>entry>match dst-ip)
Full Context
configure application-assurance group session-filter entry match dst-ip
Description
This command configures the destination IP address to match.
Default
no dst-ip
Parameters
- ip-address
-
Specifies a valid unicast address.
- dns-ip-cache-name
-
Specifies the name of the dns-ip-cache policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip {eq | neq} ip-address
no dst-ip
Context
[Tree] (debug>app-assure>group>traffic-capture>match dst-ip)
Full Context
debug application-assurance group traffic-capture match dst-ip
Description
This command configures debugging on a destination IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-ip
Syntax
dst-ip {ip-address/mask | ip-address ipv4-address-mask}
Context
[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-ip)
Full Context
configure li li-filter li-ip-filter entry match dst-ip
Description
This command configures destination IP address LI filter match criterion.
The no form of this command removes any configured destination IP address. The match criterion is ignored.
Parameters
- ip-address
-
Specifies any address specified as dotted quad.
- mask
-
Specifies eight 16-bit hexadecimal pieces representing bit match criteria.
- ipv4-address-mask
-
Specifies a mask expressed in dotted quad notation.
Platforms
All
dst-ip
Syntax
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask}
no dst-ip
Context
[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-ip)
Full Context
configure li li-filter li-ipv6-filter entry match dst-ip
Description
This command configures destination IPv6 address LI filter match criterion.
The no form of this command removes any configured destination IPv6 address. The match criterion is ignored.
Parameters
- ipv6-address
-
Specifies any IPv6 address entered as:.
- prefix-length
-
Specifies the prefix length.
- ipv6-address-mask
-
Specifies any IPv6 address mask expressed as:
Platforms
All
dst-ip
Syntax
dst-ip {ip-address/mask | ip-address [ipv4-address-mask] | ip-prefix-list prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-ip)
Full Context
configure qos sap-egress ip-criteria entry match dst-ip
configure qos sap-ingress ip-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv4 destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 address match criterion.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the destination IPv4 address specified in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- prefix-list-name
-
Specifies the IPv4 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
dst-ip
Syntax
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-ip)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-ip)
Full Context
configure qos sap-ingress ipv6-criteria entry match dst-ip
configure qos sap-egress ipv6-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a SAP QoS policy match criterion.
To match on the IPv6 destination address, specify the address and its associated mask, e.g. 2001:db8:1000::/64.
The no form of this command removes the destination IPv6 address match criterion.
Default
no dst-ip
Parameters
- ipv6-address
-
Specifies the IPv6 address for the IP match criterion in hexadecimal digits (applies to the 7750 SR and 7950 XRS).
- prefix-length
-
Specifies the IPv6 prefix length for the IPv6 address expressed as a decimal integer (applies to the 7750 SR and 7950 XRS).
- ipv6-address-mask
-
Specifies the IPv6 address mask.
- ipv6-prefix-list-name
-
Specifies the IPv6 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
dst-ip
Syntax
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list ip-prefix-list-name}
dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}
no dst-ip
Context
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-ip)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-ip)
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-ip)
Full Context
configure qos network egress ip-criteria entry match dst-ip
configure qos network ingress ip-criteria entry match dst-ip
configure qos network egress ipv6-criteria entry match dst-ip
configure qos network ingress ipv6-criteria entry match dst-ip
Description
This command configures a destination address range to be used as a network QoS policy match criterion.
To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.
The no form of this command removes the destination IP address match criterion.
Parameters
- ip-address
-
Specifies the source IPv4 address specified in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- ip-prefix-list-name
-
Specifies an IPv4 prefix list which contains IPv4 address prefixes to be matched.
- ipv6-address
-
Specifies the IPv6 prefix for the IP match criterion in hex digits.
- mask
-
Specifies the length of the IPv6 address expressed as a decimal integer.
- ipv6-address-mask
-
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
- ipv6-prefix-list-name
-
Specifies an IPv6 prefix list which contains IPv6 address prefixes to be matched.
Platforms
All
dst-ip
Syntax
IPv4:
dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list prefix-list-name}
IPv6:
dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list prefix-list-name}
no dst-ip
Context
[Tree] (config>filter>ip-exception>entry>match dst-ip)
[Tree] (config>filter>ipv6-filter>entry>match dst-ip)
[Tree] (config>filter>ip-filter>entry>match dst-ip)
[Tree] (config>filter>ipv6-exception>entry>match dst-ip)
Full Context
configure filter ip-exception entry match dst-ip
configure filter ipv6-filter entry match dst-ip
configure filter ip-filter entry match dst-ip
configure filter ipv6-exception entry match dst-ip
Description
This command configures a destination address range to be used as a filter policy match criterion.
To match on the destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.
The no form of this command removes the destination IPv4 or IPv6 address match criterion.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the destination IPv4 address in dotted decimal notation.
- mask
-
Specifies the length in bits of the subnet mask.
- ipv4-address-mask
-
Specifies the subnet mask in dotted decimal notation.
- ip-prefix-listor ipv6-prefix-list prefix-list-name
-
Specifies to use a list of IP prefixes referred to by prefix-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- ipv6-address
-
Specifies the IPv6 prefix for the IP match criterion in hex digits.
- prefix-length
-
Specifies the IPv6 prefix length for the ipv6-address as a decimal integer.
- ipv6-address-mask
-
Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.
Platforms
VSR
- configure filter ip-exception entry match dst-ip
- configure filter ipv6-exception entry match dst-ip
All
- configure filter ip-filter entry match dst-ip
- configure filter ipv6-filter entry match dst-ip
dst-ip
Syntax
dst-ip ip-address/mask
dst-ip ip-address netmask
dst-ip ip-prefix-list ip-prefix-list-name
no dst-ip
Context
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-ip)
Full Context
configure system security cpm-filter ip-filter entry match dst-ip
Description
This command configures a destination IP address range to be used as an IP filter match criterion.
To match on the destination IP address, specify the address and its associated mask, for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.
The no form of this command removes the destination IP address match criterion.
Default
no dst-ip
Parameters
- ip-address
-
Specifies the IP address for the IP match criterion in dotted decimal notation.
- ip-prefix-list
-
Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.
- ip-prefix-list-name
-
A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- mask
-
Specifies the subnet mask length expressed as a decimal integer.
- netmask
-
Specifies the dotted quad equivalent of the mask length.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-ip
Syntax
dst-ip [ipv6-address /prefix-length] [ipv6-prefix-list ipv6-prefix-list-name]
no dst-ip
Context
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-ip)
Full Context
configure system security cpm-filter ipv6-filter entry match dst-ip
Description
This command configures a destination IPv6 address range to be used as an IPv6 filter match criterion.
To match on the destination IPv6 address, specify the address.
The no form of this command removes the destination IP address match criterion.
This command only applies to the 7750 SR and 7950 XRS.
Default
no dst-ip
Parameters
- ipv6-address/prefix-length
-
Specifies the IPv6 address for the IPv6 match criterion in dotted decimal notation. An IPv6 IP address is written as eight 4-digit (16-bit) hexadecimal numbers separated by colons. One string of zeros per address can be left out, so that 2001:db8::0:217A is the same as 2001:db8:0:0:0:0:0:217A.
- ipv6-prefix-list
-
Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.
- ipv6-prefix-list-name
-
Specifies a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-ipv4-address
dst-ipv4-address
Syntax
dst-ipv4-address a.b.c.d
no dst-ipv4-address
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dst-ipv4-address)
[Tree] (config>test-oam>build-packet>header>ipv4 dst-ipv4-address)
Full Context
debug oam build-packet packet field-override header ipv4 dst-ipv4-address
configure test-oam build-packet header ipv4 dst-ipv4-address
Description
This command defines the destination IPv4 address to be used in the IPv4 header.
The no form of this command removes the destination IPv4 address value.
Default
dst-ipv4-address 0.0.0.0
Parameters
- a.b.c.d
-
Specifies the IPv4 destination address to be used in the IPv4 header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-ipv6-address
dst-ipv6-address
Syntax
dst-ipv6-address ipv6-address
no dst-ipv6-address
Context
[Tree] (config>test-oam>build-packet>header>ipv6 dst-ipv6-address)
[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dst-ipv6-address)
Full Context
configure test-oam build-packet header ipv6 dst-ipv6-address
debug oam build-packet packet field-override header ipv6 dst-ipv6-address
Description
This command defines the destination IPv6 address to be used in the IPv6 header.
The no form of this command removes the IPv6 address.
Parameters
- ipv6-address
-
Specifies the IPv6 destination address to be used in the IPv6 header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-mac
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>li>li-filter>li-mac-filter>entry>match dst-mac)
Full Context
configure li li-filter li-mac-filter entry match dst-mac
Description
This command configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the destination mac address as the match criterion.
Parameters
- ieee-address
-
Specifies the 48-bit IEEE mac address to be used as a match criterion.
- ieee-address-mask
-
Specifies a 48-bit mask. The following table describes the format styles to configure the 48-bit mask.
Table 9. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDDDDDDDDDDD
281474959933440
Hexadecimal
0xHHHHHHHHHHHH
0x0FFFFF000000
Binary
0bBBBBBBB...B
0b11110000...B
To configure so that all packets with a destination MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000
Platforms
All
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dst-mac)
Full Context
configure qos sap-ingress mac-criteria entry match dst-mac
Description
Configures a destination MAC address or range to be used as a Service Ingress QoS policy match criterion.
The no form of this command removes the destination MAC address as the match criterion.
Default
no dst-mac
Parameters
- ieee-address
-
The MAC address to be used as a match criterion.
- ieee-address-mask
-
A 48-bit mask to match a range of MAC address values.
This 48-bit mask can be configured using the following formats.
Table 10. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDDDDDDDDDDD
281474959933440
Hexadecimal
0xHHHHHHHHHHHH
0xFFFFFF000000
Binary
0bBBBBBBB...B
0b11110000...B
All packets with a source MAC OUI value of 00-03-FA, subject to a match condition, should be specified as: 0003FA000000 0x0FFFFF000000
Platforms
All
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>filter>mac-filter>entry>match dst-mac)
Full Context
configure filter mac-filter entry match dst-mac
Description
Configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of the command removes the destination mac address as the match criterion.
Default
no dst-mac
Parameters
- ieee-address
-
Specifies the MAC address to be used as a match criterion.
- ieee-address-mask
-
Specifies a 48-bit mask to match a range of MAC address values.
To configure so that all packets with a destination MAC OUI value of 00:03:FA are subject to a match condition then the entry should be specified as: 00:03:FA:00:00:00 FF:FF:FF:00:00:00.
Platforms
All
dst-mac
Syntax
dst-mac ieee-address [ieee-address-mask]
no dst-mac
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dst-mac)
Full Context
configure system security management-access-filter mac-filter entry match dst-mac
Description
This command configures the destination MAC match condition.
Parameters
- ieee-address
-
Specifies the MAC address to be used as a match criterion.
- mask
-
Specifies a 48-bit mask to match a range of MAC address values.
Platforms
All
dst-mac
Syntax
dst-mac ieee-address
no dst-mac
Context
[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>eth dst-mac)
Full Context
configure test-oam service-activation-testhead service-test service-stream frame-payload ethernet dst-mac
Description
This command configures the unicast destination MAC address to use in the frame generated by the service activation testhead.
The no form of this command indicates that the MAC address is not used by the testhead.
Default
no dst-mac
Parameters
- ieee-address
-
Specifies the unicast destination MAC address as a hexadecimal string.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
dst-mac-address
dst-mac-address
Syntax
dst-mac-address ieee-address
no dst-mac-address
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>ethernet dst-mac-address)
[Tree] (config>test-oam>build-packet>header>ethernet dst-mac-address)
Full Context
debug oam build-packet packet field-override header ethernet dst-mac-address
configure test-oam build-packet header ethernet dst-mac-address
Description
This command defines the destination MAC address for the Ethernet header.
The no form of this command deletes the configured MAC address.
Default
dst-mac-address 00:00:00:00:00:00
Parameters
- ieee-address
-
Specifies the destination Ethernet MAC address to be used in the Ethernet header. Specifies the 48-bit MAC address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-port
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port range start end
no dst-port
Context
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-port)
[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-port)
Full Context
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-port
configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-port
Description
This command configures the destination port match condition.
The no form of this command reverts to the default.
Parameters
- lt | gt | eq
-
Specifies the operator.
- dst-port-number
-
Specifies the destination port number as a decimal hex or binary.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port operator port-number
no dst-port
Context
[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-port)
[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-port)
Full Context
configure subscriber-mgmt isa-filter ipv6 entry match dst-port
configure subscriber-mgmt isa-filter entry match dst-port
Description
This command specifies that the packet’s UDP/TCP dst-port must match a specific value. This command is not valid in a match context that is not specific to UDP or TCP.
The no form of this command removes matching of the layer-4 port.
Parameters
- operator
-
Specifies that the only supported value is eq (equal to). The destination port value must be equal to the port-number value.
- port-number
-
Specifies the number of the port to match.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port tcp-port
no dst-port
Context
[Tree] (config>subscr-mgmt>http-rdr-plcy dst-port)
Full Context
configure subscriber-mgmt http-redirect-policy dst-port
Description
This command specifies the port to match the destination port in the HTTP request.
HTTP traffic that does not match this port, is not redirected.
The no form of this command reverts to the default.
Default
dst-port 80
Parameters
- tcp-port
-
Specifies the TCP port.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port {eq | neq} port-num
dst-port {eq | neq} port-list port-list-name
dst-port {eq | neq} range start-port-num end-port-num
no dst-port
Context
[Tree] (config>app-assure>group>policy>aqp>entry>match dst-port)
Full Context
configure application-assurance group policy app-qos-policy entry match dst-port
Description
This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.
The no form of this command removes the parameters from the configuration.
Default
no dst-port
Parameters
- eq
-
Specifies that a successful match occurs when the flow matches the specified port.
- neq
-
Specifies that a successful match occurs when the flow does not match the specified port.
- port-num
-
Specifies the destination port number.
- start-port-num end-port-num
-
Specifies the start or end destination port number.
- port-list-name
-
Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port {eq | gt | lt} port-num
dst-port port-list port-list-name
dst-port range start-port-num end-port-num
no dst-port
Context
[Tree] (config>app-assure>group>sess-fltr>entry>match dst-port)
Full Context
configure application-assurance group session-filter entry match dst-port
Description
This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.
The no form of this command removes the parameters from the configuration.
Default
no dst-port
Parameters
- eq
-
Specifies that a successful match occurs when the flow matches the specified port.
- gt
-
Specifies all port numbers greater than the port-number match.
- lt
-
Specifies all port numbers less than the port-number match.
- port-num
-
Specifies the destination port number.
- start-port-num end-port-num
-
Specifies the start or end destination port number.
- port-list-name
-
Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port {eq | neq} port-num
no dst-port
Context
[Tree] (debug>app-assure>group>traffic-capture>match dst-port)
Full Context
debug application-assurance group traffic-capture match dst-port
Description
This command configures debugging on a destination port.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port range dst-port-number dst-port-number
no dst-port
Context
[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-port)
[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-port)
Full Context
configure li li-filter li-ipv6-filter entry match dst-port
configure li li-filter li-ip-filter entry match dst-port
Description
This command configures a destination TCP or UDP port number or port range for an IP LI filter match criterion. Note that an entry containing Layer 4 match criteria will not match non-initial (second, third, and so on) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
The no form of this command removes the destination port match criterion.
Parameters
- lt
-
Specifies all port numbers less than dst-port-number match.
- gt
-
Specifies all port numbers greater than dst-port-number match.
- eq
-
Specifies that dst-port-number must be an exact match.
- dst-port-number
-
Specifies an inclusive range of port numbers to be used as a match criteria. The destination port numbers start-port and end-port are expressed as decimal integers.
Platforms
All
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port range start end
no dst-port
Context
[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-port)
Full Context
configure qos sap-ingress ipv6-criteria entry match dst-port
configure qos sap-ingress ip-criteria entry match dst-port
configure qos sap-egress ipv6-criteria entry match dst-port
configure qos sap-egress ip-criteria entry match dst-port
Description
This command configures a destination TCP or UDP port number or port range for a SAP QoS policy match criterion.
The no form of this command removes the destination port match criterion.
Default
no dst-port
Parameters
- {lt | gt | eq} dst-port-number
-
The TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) to the destination port value, specified as a decimal integer.
- range startend
-
The range of TCP or UDP port values to match, specified as between the start and end destination port values inclusive.
Platforms
All
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range start end
no dst-port
Context
[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-port)
[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-port)
[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-port)
Full Context
configure qos network ingress ipv6-criteria entry match dst-port
configure qos network egress ip-criteria entry match dst-port
configure qos network ingress ip-criteria entry match dst-port
configure qos network egress ipv6-criteria entry match dst-port
Description
This command configures a destination TCP or UDP port number, port range, or a port list for a network QoS policy match criterion.
The no form of this command removes the destination port match criterion.
Parameters
- lt
-
Keyword used to specify TCP or UDP port numbers to match that are less than the destination port value.
- gt
-
Keyword used to specify TCP or UDP port numbers to match that are greater than the destination port value.
- eq
-
Keyword used to specify TCP or UDP port numbers to match that are equal to the destination port value.
- dst-port-number
-
Specifies the TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) the destination port value, specified as a decimal integer.
- port-list-name
-
Specifies a port list name, up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- start
-
Specifies the starting range of TCP or UDP port values to match.
- end
-
Specifies the end range of TCP or UDP port values to match.
Platforms
All
dst-port
Syntax
dst-port {lt | gt | eq} dst-port-number
dst-port port-list port-list-name
dst-port range dst-port-number dst-port-number
no dst-port
Context
[Tree] (config>filter>ip-filter>entry>match dst-port)
[Tree] (config>filter>ipv6-exception>entry>match dst-port)
[Tree] (config>filter>ip-exception>entry>match dst-port)
[Tree] (config>filter>ipv6-filter>entry>match dst-port)
Full Context
configure filter ip-filter entry match dst-port
configure filter ipv6-exception entry match dst-port
configure filter ip-exception entry match dst-port
configure filter ipv6-filter entry match dst-port
Description
This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter or IP exception match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. Similarly an entry containing the "dst-port eq 0” match criterion, may match non-initial fragments when the destination port value is not present in a packet fragment and other match criteria are also met.
The no form of the command removes the destination port match criterion.
Default
no dst-port
Parameters
- lt
-
Specifies that all port numbers less than the dst-port-number match.
- gt
-
Specifies that all port numbers greater than the dst-port-number match.
- eq
-
Specifies that the dst-port-number must be an exact match.
- dst-port-number
-
Specifies the destination port number to be used as a match criteria expressed as a decimal integer, as well as in hexadecimal or binary format. The following value is for decimal integer format only.
- port-list-name
-
Specifies to use a list of ports referred to by port-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.
- dst-port-number dst-port-number
-
Specifies inclusive port range between two dst-port-number values.
Platforms
All
- configure filter ipv6-filter entry match dst-port
- configure filter ip-filter entry match dst-port
VSR
- configure filter ip-exception entry match dst-port
- configure filter ipv6-exception entry match dst-port
dst-port
Syntax
dst-port value [mask]
no dst-port
Context
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry dst-port)
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry dst-port)
Full Context
configure system security management-access-filter ipv6-filter entry dst-port
configure system security management-access-filter ip-filter entry dst-port
Description
This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.
The no form of this command removes the destination port match criterion.
Parameters
- value
-
Specifies the destination TCP or UDP port number as match criteria.
- mask
-
Specifies the mask used to specify a range of destination port numbers as the match criterion.
This 16 bit mask can be configured using the formats described in Format Styles to Configure Mask:
Table 11. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDD
63488
Hexadecimal
0xHHHH
0xF800
Binary
0bBBBBBBBBBBBBBBBB
0b1111100000000000
To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.
Platforms
All
dst-port
Syntax
dst-port [tcp/udp port-number] [mask]
dst-port port-list port-list-name
dst-port range tcp/udp port-number tcp/udp port-number
no dst-port
Context
[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-port)
[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-port)
Full Context
configure system security cpm-filter ipv6-filter entry match dst-port
configure system security cpm-filter ip-filter entry match dst-port
Description
This command specifies the TCP/UDP port or port name to match the destination-port of the packet.
An entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
The no form of this command removes the destination port match criterion.
Default
no dst-port
Parameters
- tcp/udp port-number
-
Specifies the destination port number to be used as a match criteria expressed as a decimal integer.
- port-list-name
-
Specifies the port list name to be used as a match criteria for the destination port.
- mask
-
Specifies the 16 bit mask to be applied when matching the destination port.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-port-range
dst-port-range
Syntax
dst-port-range start port-number end port-number
no dst-port-range
Context
[Tree] (config>service>nat>nat-classifier>entry>match dst-port-range)
Full Context
configure service nat nat-classifier entry match dst-port-range
Description
This command configures a destination TCP or UDP port number or port range.
Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd,etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.
The no form of the command removes the destination port match criterion.
Default
dst-port-range start 0 end 65535
Parameters
- start port-number
-
Specifies the start of the port range expressed as a decimal integer.
- end port-number
-
Specifies the end of the port range expressed as a decimal integer.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dst-tcp-port
dst-tcp-port
Syntax
dst-tcp-port tcp-port
no dst-tcp-port
Context
[Tree] (config>test-oam>build-packet>header>tcp dst-tcp-port)
Full Context
configure test-oam build-packet header tcp dst-tcp-port
Description
This command defines the destination TCP port to be used in the test TCP header.
The no form of this command reverts to the default.
Default
dst-tcp-port 0
Parameters
- tcp-port
-
Specifies the destination TCP port to be used in the test TCP header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-tcp-port
Syntax
dst-tcp-port tcp-port
no dst-tcp-port
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>tcp dst-tcp-port)
Full Context
debug oam build-packet packet field-override header tcp dst-tcp-port
Description
This command defines the destination TCP port to be used in the TCP header.
The no form of this command reverts to the default.
Default
no override
Parameters
- tcp-port
-
Specifies the destination TCP port to be used in the TCP header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-udp-port
dst-udp-port
Syntax
dst-udp-port udp-port
no dst-udp-port
Context
[Tree] (config>test-oam>build-packet>header>udp dst-udp-port)
Full Context
configure test-oam build-packet header udp dst-udp-port
Description
This command defines the destination TCP port to be used in the test TCP header.
The no form of this command reverts to the default.
Default
dst-udp-port 0
Parameters
- udp-port
-
Specifies the destination UDP port to be used in the test UDP header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-udp-port
Syntax
dst-udp-port udp-port
no dst-udp-port
Context
[Tree] (debug>oam>build-packet>packet>field-override>header>udp dst-udp-port)
Full Context
debug oam build-packet packet field-override header udp dst-udp-port
Description
This command defines the destination TCP port to be used in the TCP header.
The no form of this command reverts to the default.
Default
no override
Parameters
- udp-port
-
Specifies the destination UDP port to be used in the UDP header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dst-zone
dst-zone
Syntax
[no] dst-zone {std-zone-name | non-std-zone-name}
Context
[Tree] (config>system>time dst-zone)
Full Context
configure system time dst-zone
Description
This command configures the start and end dates and offset for summer time or daylight savings time to override system defaults or for user defined time zones.
When configured, the time is adjusted by adding the configured offset when summer time starts and subtracting the configured offset when summer time ends.
If the time zone configured is listed in the Time Zones section, then the starting and ending parameters and offset do not need to be configured with this command unless it is necessary to override the system defaults. The command returns an error if the start and ending dates and times are not available either the Time Zones section on or entered as optional parameters in this command.
Up to five summer time zones may be configured, for example, for five successive years or for five different time zones. Configuring a sixth entry will return an error message. If no summer (daylight savings) time is supplied, it is assumed no summer time adjustment is required.
The no form of the command removes a configured summer (daylight savings) time entry.
Parameters
- std-zone-name
-
Specifies the standard time zone name. The standard name must be a system-defined zone in the Time Zones section. For zone names in the table that have an implicit summer time setting, for example MDT for Mountain Daylight Saving Time, the remaining start-date, end-date and offset parameters need to be provided unless it is necessary to override the system defaults for the time zone.
- non-std-zone-name
-
Specifies the non-standard time zone name. Create a user-defined name created using the zone. The name can be a maximum of 5 characters in length.
Platforms
All
dual-stack-lite
dual-stack-lite
Syntax
dual-stack-lite
Context
[Tree] (config>router>nat>inside dual-stack-lite)
[Tree] (config>service>vprn>nat dual-stack-lite)
Full Context
configure router nat inside dual-stack-lite
configure service vprn nat dual-stack-lite
Description
Commands in this context configure Dual-Stack Lite (DS-Lite) NAT parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dual-stack-lite-address
dual-stack-lite-address
Syntax
dual-stack-lite-address ipv6-address
no dual-stack-lite-address
Context
[Tree] (config>router>pcp-server>server dual-stack-lite-address)
Full Context
configure router pcp-server server dual-stack-lite-address
Description
This command configures the inside dual stack lite AFTR address.
The no form of this command reverts to the default value.
Default
no dual-stack-lite-address
Parameters
- ipv6-address
-
Specifies the IPv6 address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
duid
duid
Syntax
duid duid [iaid iaid]
no duid
Context
[Tree] (config>service>ies>if>ipv6>dhcp6>pfx-delegate>prefix duid)
Full Context
configure service ies interface ipv6 dhcp6-server prefix-delegation prefix duid
Description
This command configures the DHCP Unique Identifier (DUID) of the DHCP client.
The no form of this command reverts to the default.
Default
duid 2
Parameters
- duid
-
Specifies the ID of the requesting router, up to a maximum of 128 hex values. If set to a non-zero value the prefix defined will only be delegated to this router. If set to zero, the prefix is delegated to any requesting router.
- iaid
-
Specifies the identity association identification (IAID) from the requesting router that needs to match to delegate the prefix defined in this row. If set to 0 no match on the received IAID is done.
Platforms
All
dup-detect
dup-detect
Syntax
dup-detect [anti-spoof-mac mac-address] window minutes num-moves count hold-down [minutes | max]
dup-detect anti-spoof-mac mac-address window minutes num-moves count hold-down [minutes | max] [static-black-hole]
Context
[Tree] (config>service>vpls>proxy-nd dup-detect)
[Tree] (config>service>vpls>proxy-arp dup-detect)
Full Context
configure service vpls proxy-nd dup-detect
configure service vpls proxy-arp dup-detect
Description
This command enables a mechanism that detects duplicate IPs and ARP/ND spoofing attacks. Attempts (relevant to dynamic and EVPN entry types) to add the same IP (different MAC) are monitored for window <minutes>. When <count> is reached within that window, the proxy-ARP/ND entry for the suspected IP is marked as duplicate. An alarm is also triggered. This condition is cleared when hold-down time expires (max does not expire) or a clear command is issued.
If the anti-spoof-mac is configured, the proxy-ARP/ND offending entry's MAC is replaced with this <mac-address> and advertised in an unsolicited GARP/NA for local SAP/SDP-bindings, and in EVPN to remote PEs. This mechanism assumes that the same anti-spoof-mac is configured in all the PEs for the same service and that traffic with destination anti-spoof-mac received on SAPs/SDP-bindings will be dropped. An ingress mac-filter may be configured to drop traffic to the anti-spoof-mac.
The anti-spoof-mac can also be combined with the static-black-hole option. To use a black-hole MAC entry for the anti-spoof-mac function in a proxy-ARP/ND service, the following must be configured:
-
static-black-hole option for the anti-spoof-mac
-
a static black-hole MAC using the same MAC address used for the anti-spoof-mac: static-mac mac <mac-address> create black-hole command.
When both anti-spoof-mac and static-black-hole commands are configured, the MAC is advertised in EVPN as Static. Locally, the MAC will be shown in the FDB as CStatic and associated with a black-hole.
The combination of the anti-spoof-mac and the static-black-hole options ensures that any frame arriving in the system with MAC DA=anti-spoof-mac will be discarded, regardless of the ingress endpoint type (SAP/SDP-binding or EVPN) and without the need for a filter.
If the user wants to redirect the traffic with MAC DA=anti-spoof-mac instead of discarding it, redirect filters should be configured on SAPs/SDP-bindings instead of the static-black-hole option.
If the static-black-hole option is not configured for the anti-spoof-mac, the behavior is as follows:
-
The anti-spoof-mac is not programmed in the FDB.
-
Any attempt to add a Static MAC (or any other MAC) with the anti-spoof-mac value will be rejected by the system.
-
A mac-filter is needed to discard traffic with MAC DA=anti-spoof-mac.
Any changes to the configuration of anti-spoof-mac require proxy-arp or proxy-nd to first be shut down. Refer to "ARP/ND Snooping and Proxy Support” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 2 Services and EVPN Guide: VLL, VPLS, PBB, and EVPN for more information.
Default
dup-detect window 3 num-moves 5 hold-down 9
Parameters
- window minutes
-
Specifies the window size in minutes.
- count
-
Specifies the number of moves required so that an entry is declared duplicate.
- hold-down minutes
-
Specifies the hold-down time for a duplicate entry.
- hold-down max
-
Specifies permanent hold-down time for a duplicate entry.
- mac-address
-
Specifies the optional anti-spoof-mac to use.
Platforms
All
duplex
duplex
Syntax
duplex {full | half}
Context
[Tree] (config>port>ethernet duplex)
Full Context
configure port ethernet duplex
Description
This command configures the duplex of a Fast Ethernet port when autonegotiation is disabled.
This configuration command allows for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate this parameter is ignored.
Default
duplex full
Parameters
- full
-
Sets the link to full duplex mode.
- half
-
Sets the link to half duplex mode.
Platforms
All
duplex
Syntax
duplex {full | half}
Context
[Tree] (bof duplex)
Full Context
bof duplex
Description
This command configures the duplex mode of the CPM management Ethernet port when autonegotiation is disabled in the running configuration and the Boot Option File (BOF). If the port is configured to autonegotiate this parameter will be ignored.
Parameters
- full
-
Sets the link to full duplex mode.
- half
-
Sets the link to half duplex mode.
Platforms
All
dwdm
dwdm
Syntax
dwdm
Context
[Tree] (config>port dwdm)
Full Context
configure port dwdm
Description
This command configures the Dense Wavelength Division Multiplexing (DWDM) parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dying-gasp
dying-gasp
Syntax
[no] dying-gasp
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>local-sf-action>info-notification dying-gasp)
Full Context
configure port ethernet efm-oam link-monitoring local-sf-action info-notification dying-gasp
Description
This command sets the dying gasp Flag field in the Information OAM PDU when the local signal failure (sf-threshold) threshold is reached. This will be maintained in all subsequent Information OAM PDUs until the situation is cleared.
Interactions: The signal failure threshold will trigger these actions.
Default
no dying-gasp
Platforms
All
dying-gasp
Syntax
dying-gasp local-port-action {log-only | out-of-service}
Context
[Tree] (config>port>ethernet>efm-oam>peer-rdi-rx dying-gasp)
Full Context
configure port ethernet efm-oam peer-rdi-rx dying-gasp
Description
This command defines how to react to the reception of a dying gasp Flag field set in the informational OAMPDU.
Default
dying-gasp local-port-action out-of-service
Parameters
- local-port-action
-
Defines whether or not the local port will be affected when a dying gasp event is received from a peer.
- log-only
-
Keyword that prevents the port from being affected when the local peer receives a dying gasp. The dying gasp will be logged but the port will remain operational.
- out-of-service
-
Keyword that causes the port to enter a non-operation down state with a port state of link up. The error will be logged upon reception of dying gasp. The port will not be available to service data but will continue to carry Link OAM traffic to ensure the link is monitored.
Platforms
All
dying-gasp-tx-on-reset
dying-gasp-tx-on-reset
Syntax
[no] dying-gasp-tx-on-reset
Context
[Tree] (config>system>ethernet>efm-oam dying-gasp-tx-on-reset)
[Tree] (config>port>ethernet>efm-oam dying-gasp-tx-on-reset)
Full Context
configure system ethernet efm-oam dying-gasp-tx-on-reset
configure port ethernet efm-oam dying-gasp-tx-on-reset
Description
This command enables generation of the Information OAM PDU off-cycle when the soft reset notification is received by the EFM application. The local port state remains under the control of the Soft Reset application and does not change based on this EFM function. If the port is operationally up then the local node will continue to consider the port as available for service data and forwarding. If the upstream node requires notification to route around the local node undergoing the soft reset, notification must be sent to those nodes. This is a disruptive function.
This command is disabled by default at the system level and enabled by default at the port level. The combination of the system-level and port-level configuration determines if the dying gasp on soft reset function is active on individual ports. Both the system-level and port-level commands must be enabled in order to support generation of the Information OAM PDU for soft reset. If either is disabled, dying gasp is not active on those ports. This functionality must be enabled prior to the soft reset.
When both grace-tx-enable and dying-gasp-tx-on-reset are active on the same port, grace-tx-enable takes precedence when a soft reset is invoked if the Peer Vendor OUI being received is 00:16:4d (ALU) or the configured config>port>ethernet>efm-oam grace-vendor-oui value. The grace-tx-enable command should not be configured if the Nokia Vendor Specific Grace TLV is not supported on the remote peer, including Nokia 7750 SR equipment prior to release 11.0 R4.
Default
config>system>ethernet>efm-oam>no dying-gasp-tx-on-reset
config>port>ethernet>efm-oam>dying-gasp-tx-on-reset
Platforms
All
dynamic
dynamic
Syntax
dynamic ip-address [create]
no dynamic ip-address
Context
[Tree] (config>service>vpls>proxy-nd dynamic)
[Tree] (config>service>vpls>proxy-arp dynamic)
Full Context
configure service vpls proxy-nd dynamic
configure service vpls proxy-arp dynamic
Description
This command creates a dynamic IP that can be associated to a MAC list. The configured dynamic IP is only converted to a dynamic entry when the resolve process for the IP has passed successfully.
A summary of the IP resolution process is as follows:
-
A resolve message is sent for the configured IP as soon as the dynamic IP is configured. The message is sent with a configurable frequency of 1 to 60 minutes (using the resolve command); the default value is 5 minutes. The actual resolve interval is a "tittered” value of the configured interval.
-
The resolve message is an ARP-request or NS message flooded to all the non-EVPN endpoints in the service, irrespective of the status of the unknown-arp-request-flood-evpn or unknown-ns-flood-evpn commands. The router sends resolve messages at the configured frequency until a dynamic entry for the IP is created in the proxy-ARP or proxy-ND table. The IP entry is created only if all of the following conditions are true.
-
An ARP, GARP, or NA message is received for the configured IP.
-
The associated MAC exists in the configured MAC list for the IP.
If the MAC list is empty or not configured, the router does not create an entry for the IP.
-
-
After a dynamic entry is created in the proxy-ARP or proxy-ND table, the IP->MAC entry is advertised in the EVPN.
The no form of the command deletes the dynamic IP and the associated proxy-ARP or proxy-ND entry, if it exists.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address.
Platforms
All
dynamic
Syntax
dynamic
Context
[Tree] (config>router>if>if-attr>delay dynamic)
Full Context
configure router interface if-attribute delay dynamic
Description
Commands in this context configure dynamic link measurement delay options for the IP interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
dynamic-arp-populate
dynamic-arp-populate
Syntax
[no] dynamic-arp-populate
Context
[Tree] (config>service>vpls>proxy-arp dynamic-arp-populate)
Full Context
configure service vpls proxy-arp dynamic-arp-populate
Description
This command enables the addition of dynamic entries to the proxy-ARP table (disabled by default). When executed, the system will populate proxy-ARP entries from snooped GARP/ARP messages on SAPs/SDP-bindings. These entries will be shown as dynamic.
When disabled, dynamic-arp entries will be flushed from the proxy-ARP table. Enabling dynamic-arp-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
Default
no dynamic-arp-populate
Platforms
All
dynamic-bgp
dynamic-bgp
Syntax
[no] dynamic-bgp
Context
[Tree] (config>router>static-route-entry>black-hole dynamic-bgp)
Full Context
configure router static-route-entry black-hole dynamic-bgp
Description
This optional command controls the behavior of the associated static route so that if a matching BGP route to the same exact prefix is present in BGP, the static route's nexthop is set to the BGP’s nexthop value. If there is no matching active BGP route, the static route's nexthop is set to be a black-hole nexthop.
Default
no dynamic-bgp
Platforms
All
dynamic-bypass
dynamic-bypass
Syntax
dynamic-bypass [enable | disable]
no dynamic-bypass
Context
[Tree] (config>router>mpls dynamic-bypass)
Full Context
configure router mpls dynamic-bypass
Description
This command disables the creation of dynamic bypass LSPs in FRR. One or more manual bypass LSPs must be configured to protect the primary LSP path at the PLR nodes.
Default
dynamic-bypass enable
Platforms
All
dynamic-cost
dynamic-cost
Syntax
[no] dynamic-cost
Context
[Tree] (config>lag dynamic-cost)
Full Context
configure lag dynamic-cost
Description
This command enables OSPF or ISIS costing of a Link Aggregation Group (LAG) based on the available aggregated, operational bandwidth.
The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.
If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.
For example: Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.
If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.
If dynamic-cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.
The no form of this command removes dynamic costing from the LAG.
Default
no dynamic-cost
Platforms
All
dynamic-egress-label-limit
dynamic-egress-label-limit
Syntax
[no] dynamic-egress-label-limit
Context
[Tree] (config>service>vprn>bgp-ipvpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>epipe>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vpls>bgp-evpn>mpls dynamic-egress-label-limit)
[Tree] (config>service>vprn>bgp-evpn>mpls dynamic-egress-label-limit)
Full Context
configure service vprn bgp-ipvpn mpls dynamic-egress-label-limit
configure service epipe bgp-evpn mpls dynamic-egress-label-limit
configure service vpls bgp-evpn mpls dynamic-egress-label-limit
configure service vprn bgp-evpn mpls dynamic-egress-label-limit
Description
This command relaxes the egress MPLS label limit check when resolving BGP next hops in the tunnel table.
For VPRN services, the OAM label is never computed and, therefore, one more egress label is allowed.
For EVPN (Epipe and VPLS) services, the system only computes the control word and ESI label if they are used. For the control word, the system reduces the egress label limit by one label if the control word is configured in the service. When configured, the ESI label is not counted for Epipes or VPLS services without an ES.
The no form of this command, for EVPN, Epipe, and VPLS services, always accounts for the ESI label and control word.
Default
no dynamic-egress-label-limit
Platforms
All
dynamic-enforcement-policer-pool
dynamic-enforcement-policer-pool
Syntax
[no] dynamic-enforcement-policer-pool number-of-policers
Context
[Tree] (config>card>fp>ingress>dist-cpu-protection dynamic-enforcement-policer-pool)
Full Context
configure card fp ingress dist-cpu-protection dynamic-enforcement-policer-pool
Description
This command reserves a set of policers for use as dynamic enforcement policers for the Distributed CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a SAP or Network Interface). Any change to this configured value automatically clears the high water mark, timestamp, and failed allocation counts as seen under "show card x fp y dist-cpu-protection” and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this value to below the currently used/allocated number causes all dynamic policers to be returned to the free pool (and traffic returns to the local monitors).
Default
no dynamic-enforcement-policer-pool
Parameters
- number-of-policers
-
specifies the number of policers to be reserved.
Platforms
All
dynamic-fields
dynamic-fields
Syntax
[no] dynamic-fields
Context
[Tree] (config>app-assure>group>cflowd>rtp-perf>voice-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>rtp-perf>video-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>comp>template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>rtp-perf>audio-template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>tcp-perf>template dynamic-fields)
[Tree] (config>app-assure>group>cflowd>volume>template dynamic-fields)
Full Context
configure application-assurance group cflowd rtp-performance voice-template dynamic-fields
configure application-assurance group cflowd rtp-performance video-template dynamic-fields
configure application-assurance group cflowd comprehensive template dynamic-fields
configure application-assurance group cflowd rtp-performance audio-template dynamic-fields
configure application-assurance group cflowd tcp-performance template dynamic-fields
configure application-assurance group cflowd volume template dynamic-fields
Description
Commands in this context configure which fields are included in the exported cflowd template.
The no form of this command removes all configured dynamic fields from the template.
This command is only supported if the dynamic option is configured in the field-selection command.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dynamic-keying
dynamic-keying
Syntax
[no] dynamic-keying
Context
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>service>vprn>if>sap>ipsec-tunnel dynamic-keying)
[Tree] (config>router>if>ipsec>ipsec-tunnel dynamic-keying)
[Tree] (config>ipsec>trans-mode-prof dynamic-keying)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel dynamic-keying)
Full Context
configure service vprn interface ipsec ipsec-tunnel dynamic-keying
configure service vprn interface sap ipsec-tunnel dynamic-keying
configure router interface ipsec ipsec-tunnel dynamic-keying
configure ipsec ipsec-transport-mode-profile dynamic-keying
configure service ies interface ipsec ipsec-tunnel dynamic-keying
Description
This command enables dynamic keying for the IPsec tunnel.
The no form of this command disables dynamic keying.
Platforms
VSR
- configure router interface ipsec ipsec-tunnel dynamic-keying
- configure service vprn interface ipsec ipsec-tunnel dynamic-keying
- configure service ies interface ipsec ipsec-tunnel dynamic-keying
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure ipsec ipsec-transport-mode-profile dynamic-keying
- configure service vprn interface sap ipsec-tunnel dynamic-keying
dynamic-mbs
dynamic-mbs
Syntax
[no] dynamic-mbs
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue dynamic-mbs)
Full Context
configure qos queue-group-templates egress queue-group queue dynamic-mbs
Description
This command enables support for dynamically modifying the MBS size of a queue using HQoS in order to maintain the maximum latency for traffic in the queue based on the queue’s configured MBS and the ratio of its operational PIR to its administrative PIR. As the HQoS algorithm updates the operational PIR, by reducing or increasing it, the MBS of the queue is adjusted accordingly.
The configuration of dynamic MBS and the configuration of queue depth monitoring (monitor-queue-depth command) are mutually exclusive. Queue depth monitoring is an override on the queue where the queue group is applied.
The no form of this command disables dynamic MBS resizing.
Default
no dynamic-mbs
Platforms
All
dynamic-nd-populate
dynamic-nd-populate
Syntax
[no] dynamic-nd-populate
Context
[Tree] (config>service>vpls>proxy-nd dynamic-nd-populate)
Full Context
configure service vpls proxy-nd dynamic-nd-populate
Description
This command enables the addition of dynamic entries to the proxy-ND table. The command is disabled by default. When executed, the system will populate proxy-ND entries from snooped Neighbor Advertisement (NA) messages on SAPs/SDP-bindings, in addition to the entries coming from EVPN (if the EVPN is enabled). These entries will be shown as dynamic, as opposed to EVPN entries or static entries.
When disabled, dynamic-ND entries will be flushed from the proxy-ND table. Enabling dynamic-nd-populate is only recommended in networks with a consistent configuration of this command in all the PEs.
Default
no dynamic-nd-populate
Platforms
All
dynamic-neighbor
dynamic-neighbor
Syntax
dynamic-neighbor
Context
[Tree] (config>service>vprn>bgp>group dynamic-neighbor)
Full Context
configure service vprn bgp group dynamic-neighbor
Description
Commands in this context configure dynamic BGP sessions for a peer group.
Platforms
All
dynamic-neighbor
Syntax
dynamic-neighbor
Context
[Tree] (config>router>bgp>group dynamic-neighbor)
Full Context
configure router bgp group dynamic-neighbor
Description
Commands in this context configure dynamic BGP sessions for a peer group.
Platforms
All
dynamic-neighbor-limit
dynamic-neighbor-limit
Syntax
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context
[Tree] (config>service>vprn>bgp>group dynamic-neighbor-limit)
[Tree] (config>service>vprn>bgp dynamic-neighbor-limit)
Full Context
configure service vprn bgp group dynamic-neighbor-limit
configure service vprn bgp dynamic-neighbor-limit
Description
This command configures the maximum number of dynamic BGP sessions that are accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
Default
no dynamic-neighbor-limit
Parameters
- peers
-
Specifies the maximum number of dynamic BGP sessions.
Platforms
All
dynamic-neighbor-limit
Syntax
dynamic-neighbor-limit peers
no dynamic-neighbor-limit
Context
[Tree] (config>router>bgp dynamic-neighbor-limit)
[Tree] (config>router>bgp>group dynamic-neighbor-limit)
Full Context
configure router bgp dynamic-neighbor-limit
configure router bgp group dynamic-neighbor-limit
Description
This command configures the maximum number of dynamic BGP sessions that will be accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.
The no form of this command removes the limit on the number of dynamic sessions.
Default
no dynamic-neighbor-limit
Parameters
- peers
-
Specifies the maximum number of dynamic BGP sessions.
Platforms
All
dynamic-parameters
dynamic-parameters
Syntax
dynamic-parameters
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol dynamic-parameters)
Full Context
configure system security dist-cpu-protection policy protocol dynamic-parameters
Description
The dynamic-parameters are used to instantiate a dynamic enforcement policer for the protocol when the associated local-monitoring-policer is considered as exceeding its rate parameters (at the end of a minimum monitoring time of 60 seconds).
Platforms
All
dynamic-policer
dynamic-policer
Syntax
dynamic-policer
Context
[Tree] (config>qos>sap-ingress dynamic-policer)
[Tree] (config>qos>sap-egress dynamic-policer)
Full Context
configure qos sap-ingress dynamic-policer
configure qos sap-egress dynamic-policer
Description
Commands in this context configure common properties for dynamic-policers. Dynamic policers are instantiated and terminated on demand due to an action request submitted by the policy server (for example, using a Gx interface). The actions types behind dynamic policers are typically related to rate-limiting or volume monitoring. The dynamic-policers can be instantiated on demand at any time during the lifetime of the sla-profile instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-ports
dynamic-ports
Syntax
[no] dynamic-ports
Context
[Tree] (config>service>nat>nat-policy>port-limits dynamic-ports)
Full Context
configure service nat nat-policy port-limits dynamic-ports
Description
This command specifies the maximum number of ports per outside IP address for an LSN44 pool with flexible port allocation. This command limits the number of ports per protocol on an outside IP address for a subscriber regardless of the pool pairing mode.
The no form of this command removes the limit on the number of dynamic ports.
Default
65536
Parameters
- num-ports
-
Specifies the maximum number of ports per outside IP address for an LSN44 pool with flexible port allocation.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dynamic-queue
dynamic-queue
Syntax
dynamic-queue
Context
[Tree] (config>qos>sap-egress dynamic-queue)
Full Context
configure qos sap-egress dynamic-queue
Description
Commands in this context configure dynamically-created queues for subscriber‑management applications such as 5G FWA sessions. The configuration options in this context are the same as for static queues configured in the configure qos sap-egress queue context, but they are automatically applied to dynamically-created queues.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-service
dynamic-service
Syntax
[no] dynamic-service
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range dynamic-service)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range dynamic-service)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dynamic-service
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dynamic-service
Description
This command configures the router to dynamically assign the WLAN-GW subscriber to a VPLS service, based on RADIUS authentication reply attributes. This feature is used in conjunction with the configure service vpls wlan-gw wlan-gw-group command.
The no form of the command disables the router from dynamically assigning the WLAN-GW subscriber to a VPLS service.
See "Dynamic VPLS service" in the 7450 ESS, 7750 SR, and VSR Triple Play Service Delivery Architecture Guide for more information about the dynamic VPLS service feature.
Default
no dynamic-service
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
dynamic-services
dynamic-services
Syntax
dynamic-services
Context
[Tree] (config>service>vpls>sap dynamic-services)
Full Context
configure service vpls sap dynamic-services
Description
Commands in this context configure dynamic services parameters on a capture SAP.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-services
Syntax
dynamic-services
Context
[Tree] (config>service dynamic-services)
Full Context
configure service dynamic-services
Description
Commands in this context configure dynamic data services. Only available on systems with multi-core CPM (CPM3 or up).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-services
Syntax
[no] dynamic-services
Context
[Tree] (debug dynamic-services)
Full Context
debug dynamic-services
Description
Commands in this context configure dynamic services debugging.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-services-policy
dynamic-services-policy
Syntax
dynamic-services-policy dynsrv-policy-name [create]
no dynamic-services-policy dynsrv-policy-name
Context
[Tree] (config>service>dynsvc dynamic-services-policy)
Full Context
configure service dynamic-services dynamic-services-policy
Description
This command creates a new dynamic services policy that can be used to create dynamic data services.
The no form of this command removes the dynamic services policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.
Parameters
- dynsrv-policy-name
-
Specifies a unique name of a dynamic services policy up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-services-policy
Syntax
dynamic-services-policy name
no dynamic-services-policy
Context
[Tree] (config>service>vpls>sap>dyn-svc dynamic-services-policy)
[Tree] (config>service>dynsvc>ladb>user>idx dynamic-services-policy)
Full Context
configure service vpls sap dynamic-services dynamic-services-policy
configure service dynamic-services local-auth-db user-name index dynamic-services-policy
Description
This command specifies the local configured dynamic data service policy to use for provisioning (local authentication database context) or authentication (capture-sap context) of this dynamic service. If not specified, the dynamic services policy with the name default is used. If the default policy does not exist, then the dynamic data service setup or authentication fails.
The no form of this command removes the dynamic services policy from the configuration.
Parameters
- name
-
Specifies a dynamic services policy name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
dynamic-topology-discover
dynamic-topology-discover
Syntax
[no] dynamic-topology-discover
Context
[Tree] (config>service>vpls>gsmp>group>ancp dynamic-topology-discover)
[Tree] (config>service>vprn>gsmp>group>ancp dynamic-topology-discover)
Full Context
configure service vpls gsmp group ancp dynamic-topology-discover
configure service vprn gsmp group ancp dynamic-topology-discover
Description
This command enables the ANCP dynamic topology discovery capability.
The no form of this command disables the feature.
Platforms
All
dynamic-tunnel-redundant-next-hop
dynamic-tunnel-redundant-next-hop
Syntax
dynamic-tunnel-redundant-next-hop ip-address
no dynamic-tunnel-redundant-next-hop
Context
[Tree] (config>service>ies>if dynamic-tunnel-redundant-next-hop)
[Tree] (config>service>vprn>if dynamic-tunnel-redundant-next-hop)
Full Context
configure service ies interface dynamic-tunnel-redundant-next-hop
configure service vprn interface dynamic-tunnel-redundant-next-hop
Description
This command specifies redundant next-hop address on a public or private IPsec interface (with public or private tunnel-sap) for dynamic IPsec tunnel. The specified next-hop address is used by a standby node to shunt traffic to master in case it receives the address.
The next-hop address is resolved in the routing table of a corresponding service.
Default
no dynamic-tunnel-redundant-next-hop
Parameters
- ip-address
-
Specifies the dynamic ISA tunnel redundant next-hop address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
dynmldp
dynmldp
Syntax
dynmldp [detail]
no dynmldp
Context
[Tree] (debug>router>pim dynmldp)
Full Context
debug router pim dynmldp
Description
This command enables debugging for dynamic MLDP.
The no form of this command disables dynamic MLDP debugging.
Parameters
- detail
-
Debugs detailed dynamic MLDP information.
Platforms
All
dynsvc-password
dynsvc-password
Syntax
dynsvc-password password [hash | hash2]
no dynsvc-password
Context
[Tree] (config>system>security>password dynsvc-password)
Full Context
configure system security password dynsvc-password
Description
See also the description for the enable-dynamic-services-config command.
This command allows a user with admin permissions to configure a system wide password which enables a user to enter a special dynamic services configuration mode.
The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password are determined by the complexity command.
The no form of this command removes the dynsvc password from the configuration.
Parameters
- password
-
Configures the password which enables a user to enter a special dynamic services configuration mode. The maximum length can be up to 20 characters if unhashed, 32 characters if hashed, 54 characters if the hash2 keyword is specified.
- hash
-
Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
- hash2
-
Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR