l Commands
l2
l2
Syntax
[no] l2
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>type l2)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query type l2
Description
This command enables matching on Layer 2 tunnels.
The no form of this command disables matching on Layer 2 access points, unless no other tunnel type specifier is configured.
Default
no l2
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2
Syntax
[no] l2
Context
[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state l2)
Full Context
configure subscriber-mgmt wlan-gw ue-query state l2
Description
This command enables matching on UEs in a Layer 2 wholesale state.
The no form of this command disables matching on UEs in a Layer 2 wholesale state, unless all state matching is disabled.
Default
no l2
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-access-id-alias
l2-access-id-alias
Syntax
l2-access-id-alias string
no l2-access-id-alias
Context
[Tree] (config>service>vpls>sap>pfcp l2-access-id-alias)
Full Context
configure service vpls sap pfcp l2-access-id-alias
Description
This command defines a Layer 2 access ID alias for the capture SAP. It replaces the default underlying port-based or LAG-based Layer 2 access ID. Different capture SAPs on the same underlying port or LAG can have different Layer 2 access ID aliases.
The no form of the command removes the configuration.
Parameters
- string
-
Specifies the Layer 2 access ID alias, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2-access-points
l2-access-points
Syntax
l2-access-points
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw l2-access-points)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw l2-access-points)
Full Context
configure service ies subscriber-interface group-interface wlan-gw l2-access-points
configure service vprn subscriber-interface group-interface wlan-gw l2-access-points
Description
Commands in this context configure Layer 2 access points in WLAN gateway group interfaces.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-ap
l2-ap
Syntax
l2-ap sap-id [create]
no l2-ap sap-id
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>l2-access-points l2-ap)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>l2-access-points l2-ap)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw l2-access-points l2-ap
configure service ies subscriber-interface group-interface wlan-gw l2-access-points l2-ap
Description
This command adds a specific SAP where Layer 2 WLAN gateway aggregation is performed. The following SAPs are supported:
-
Ethernet
-
LAG
-
MPLS pseudowire SDPs
This command can be repeated multiple times to create multiple Layer 2 access points.
The no form of this command removes the Layer 2 access point. This is only allowed if the Layer 2 access point SAP is shutdown.
Parameters
- sap-id
-
Specifies SAP to be created.
- create
-
Keyword used to create the Layer 2 WLAN gateway aggregation instance. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-ap-auto-sub-id-fmt
l2-ap-auto-sub-id-fmt
Syntax
l2-ap-auto-sub-id-fmt {include-ap-tags | sap-only}
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw l2-ap-auto-sub-id-fmt)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw l2-ap-auto-sub-id-fmt)
Full Context
configure service ies subscriber-interface group-interface wlan-gw l2-ap-auto-sub-id-fmt
configure service vprn subscriber-interface group-interface wlan-gw l2-ap-auto-sub-id-fmt
Description
This command configures the contents of the auto-generated subscriber ID when the ipoe-sub-id-key command is set to include sap-id and the def-sub-id command is configured with use-auto-id. The VLANs must be configured so that the subscriber ID length is not exceeded.
This command can include either the SAP or the SAP + AP delimiting tags.
The no form of this command reverts to the default configuration.
Default
l2-ap-auto-sub-id-fmt include-ap-tags
Parameters
- include-ap-tags
-
Specifies that the SAP + AP delimiting tags is used.
- sap-only
-
Specifies that the SAP only is used.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-ap-encap-type
l2-ap-encap-type
Syntax
l2-ap-encap-type {null | dot1q | qinq}
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw l2-ap-encap-type)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw l2-ap-encap-type)
Full Context
configure service ies subscriber-interface group-interface wlan-gw l2-ap-encap-type
configure service vprn subscriber-interface group-interface wlan-gw l2-ap-encap-type
Description
This parameter specifies the number of AP identifying VLAN tags for an AP. This is the default value that can be overridden per SAP. This value must be at least equal to the number of VLANs configured in the SAP or enabling a SAP will fail.
A SAP VLAN is explicitly configured, for example l2-ap 1/1/1:25. Other VLANs on the same port can still be used in other contexts.
The number of VLAN tags Epiped to the WLAN gateway IOM equals the l2-ap-encap-type minus the encaps of the SAP. Upon receipt of a packet, these VLANs are stored as a Layer 2 tunnel identifier, and are only used in context of WLAN gateway.
The no form of this command sets the default value.
Default
l2-ap-encap-type null
Parameters
- null
-
Both the SAP and the AP are not VLAN-tagged.
- dot1q
-
Either the AP or the SAP uses one VLAN tag.
- qinq
-
Up to two VLAN tags are used by the AP or SAP.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware
l2-aware
Syntax
l2-aware
Context
[Tree] (config>service>vprn>nat>inside l2-aware)
Full Context
configure service vprn nat inside l2-aware
Description
Commands in this context configure parameters specific to Layer2-Aware NAT.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware
Syntax
l2-aware
Context
[Tree] (config>router>nat>inside l2-aware)
Full Context
configure router nat inside l2-aware
Description
Commands in this context configure Layer2-Aware NAT.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware
Syntax
l2-aware subscriber sub-ident-string ip ip-address protocol {tcp | udp} [port port] [outside-ip ip-address] [outside-port port] [nat-policy policy-name] [member member-id] [port-range-start port]
no l2-aware subscriber sub-ident-string ip ip-address protocol {tcp | udp port port
Context
[Tree] (config>service>nat>fwd l2-aware)
Full Context
configure service nat port-forwarding l2-aware
Description
This command creates NAT static port forwards for Layer2-Aware subscribers. The ESM subscriber must be present in the system before this command is executed. The no form of the command deletes NAT static port forwards for Layer2-Aware subscribers.
Parameters
- subscriber sub-ident-string
-
This mandatory parameter specifies the ESM subscriber for which the SPF is to be created; ESM subscriber must be present in the system before the SPF can be created.
- ip ip-address
-
This mandatory parameter specifies the source IPv4/IPv6 address for which SPF will be created.
- protocol {tcp | udp}
-
This mandatory parameter specifies the protocol to use, either TCP or UDP.
- port port
-
This optional parameter specifies a source port.
- outside-ip ipv4-address
-
This mandatory parameter specifies the outside IPv4 address. If the outside IPv4 address is specified, then all other optional parameters become mandatory.
- outside-port port
-
This optional parameter specifies the outside port.
- nat-policy policy-name
-
If multiple NAT policies are used inside the routing context, then the NAT policy should be specified in the SPF request so the SPF is created in the correct NAT pool. Otherwise, the default NAT policy from the inside routing context will be used.
- member member-id
-
This optional parameter should not be used by the operator. It is used only if the command is replayed via the exec command or at boot-config. The member ID indicates the identifier of the NAT ISA group member associated with this NAT subscriber.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware-ip-address
l2-aware-ip-address
Syntax
l2-aware-ip-address ip-address
l2-aware-ip-address from-pool
no l2-aware-ip-address
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dhcp l2-aware-ip-address)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dhcp l2-aware-ip-address)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp l2-aware-ip-address
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dhcp l2-aware-ip-address
Description
This command configures the Layer2-Aware NAT inside IP address to be assigned via DHCP on the WLAN-GW ISA.
If the from-pool parameter is specified instead of an IPv4 address, a unique address is allocated to each UE. The pool used is managed by the dhcpv4-nat pool manager, configured under the same subscriber interface. This option is only available when auth-on-dhcp is also configured.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the Layer2-Aware NAT inside IP address.
- from-pool
-
Specifies that the Layer2-Aware IP address is allocated from a pool.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware-nat-bypass
l2-aware-nat-bypass
Syntax
[no] l2-aware-nat-bypass
Context
[Tree] (config>filter>ip-filter>entry>action l2-aware-nat-bypass)
Full Context
configure filter ip-filter entry action l2-aware-nat-bypass
Description
This command enables bypassing NAT for packets pertaining to L2-Aware hosts and matching this entry. This action is only applicable to L2-Aware NAT subscribers and it must be configured together with action forward. Traffic identified in the match condition bypasses L2-Aware NAT. A common use case is to bypass NAT for on-net destinations (within the customer network).
Traffic that is not classified for bypass is automatically diverted to L2-Aware NAT, unless it is explicitly configured in the IP filter to be dropped.
For selective NAT bypass to take effect, in addition to the IP filter configuration, the L2-Aware NAT subscriber must be specifically enabled for selective bypass via the nat-allow-bypass configuration option in the NAT CLI node in the SLA profile.
The no form of this command automatically diverts traffic to L2-Aware NAT, unless it is explicitly configured in the IP filter to be dropped.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-aware-sub
l2-aware-sub
Syntax
[no] l2-aware-sub sub-ident-string
Context
[Tree] (config>li>li-source>nat l2-aware-sub)
Full Context
configure li li-source nat l2-aware-sub
Description
This command configures a Layer-2-Aware subscriber source.
The no form of this command removes the values from the configuration.
Parameters
- sub-ident-string
-
Specifies a source name.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-inner-vlan
l2-inner-vlan
Syntax
l2-inner-vlan q-tag
no l2-inner-vlan
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query l2-inner-vlan)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query l2-inner-vlan
Description
This command enables matching on a Layer 2 access point with a specified C-VLAN.
The no form of this command disables matching on a C-VLAN.
Default
no l2-inner-vlan
Parameters
- q-tag
-
Specifies the q-tag for the C-VLAN.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-ip
l2-ip
Syntax
[no] l2-ip
Context
[Tree] (config>cflowd>collector>export-filter>family l2-ip)
Full Context
configure cflowd collector export-filter family l2-ip
Description
This command filters Layer 2 IP flow data from being sent to the associated collector.
The no form of this command removes the filter, allowing Layer 2 IP flow data to be sent to the associated collector.
Default
no l2-ip
Platforms
All
l2-outer-vlan
l2-outer-vlan
Syntax
l2-outer-vlan q-tag
no l2-outer-vlan
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query l2-outer-vlan)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query l2-outer-vlan
Description
This command enables matching on a Layer 2 access point with a specified S-VLAN.
The no form of this command disables matching on an S-VLAN.
Default
no l2-outer-vlan
Parameters
- q-tag
-
Specifies the q-tag for the S-VLAN.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-outside
l2-outside
Syntax
l2-outside
no l2-outside
Context
[Tree] (config>service>nat>firewall-policy l2-outside)
[Tree] (config>service>nat>nat-policy l2-outside)
Full Context
configure service nat firewall-policy l2-outside
configure service nat nat-policy l2-outside
Description
This command configures a NAT policy to be used with a Layer 2 outside service instead of a Layer 3 outside service. This command and the pool command are mutually exclusive.
Default
no l2-outside
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat firewall-policy l2-outside
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service nat nat-policy l2-outside
l2-sap
l2-sap
Syntax
l2-sap sap-id
no l2-sap
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query l2-sap)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query l2-sap
Description
This command enables matching on Layer 2 access points active on the specified SAP.
The no form of this command disables matching on the SAP.
Default
no l2-sap
Parameters
- sap-id
-
Specifies the SAP ID. For details on SAP ID parameter values, refer to section Monitor CLI Commands in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Basic System Configuration Guide.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2-service
l2-service
Syntax
l2-service service-id
no l2-service
Context
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range l2-service)
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range l2-service)
Full Context
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range l2-service
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range l2-service
Description
This command specifies the VPLS service used for L2 wholesale. When such a service is configured no other configuration is allowed under the vlan-range.
The no form of this command removes the L2 wholesale service, this is only allowed if the l2-service node is shut down.
Parameters
- service-id
-
Specifies the VPLS service ID to use for Layer 2 wholesale.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2pt-termination
l2pt-termination
Syntax
l2pt-termination [cdp] [dtp] [pagp] [stp] [udld] [vtp]
no l2pt-termination
Context
[Tree] (config>service>vpls>sap l2pt-termination)
[Tree] (config>service>template>vpls-sap-template l2pt-termination)
[Tree] (config>service>vpls>spoke-sdp l2pt-termination)
Full Context
configure service vpls sap l2pt-termination
configure service template vpls-sap-template l2pt-termination
configure service vpls spoke-sdp l2pt-termination
Description
This command enables Layer 2 Protocol Tunneling (L2PT) termination on a specified SAP or spoke-SDP. L2PT termination is supported only for STP BPDUs. PDUs of other protocols are discarded.
This feature can be enabled only if STP is disabled in the context of the specified VPLS service.
The no form of this command reverts to the default.
Default
no l2pt-termination
Parameters
- cdp
-
Specifies the Cisco discovery protocol
- dtp
-
Specifies the dynamic trunking protocol
- pagp
-
Specifies the port aggregation protocol
- stp
-
Specifies all spanning tree protocols: stp, rstp, mstp, pvst (default)
- udld
-
Specifies unidirectional link detection
- vtp
-
Specifies the virtual trunk protocol
Platforms
All
l2pt-termination
Syntax
l2pt-termination [cdp] [dtp] [pagp] [stp] [udld] [vtp]
no l2pt-termination
Context
[Tree] (config>service>pw-template l2pt-termination)
Full Context
configure service pw-template l2pt-termination
Description
This command enables Layer 2 Protocol Tunneling (L2PT) termination on a given SAP or spoke SDP. L2PT termination will be supported only for STP BPDUs. PDUs of other protocols will be discarded.
This feature can be enabled only if STP is disabled in the context of the given VPLS service.
Default
no l2pt-termination
Parameters
- cdp
-
Specifies the Cisco discovery protocol.
- dtp
-
Specifies the dynamic trunking protocol.
- pagp
-
Specifies the port aggregation protocol.
- stp
-
Specifies all spanning tree protocols: stp, rstp, mstp, pvst (default).
- udld
-
Specifies unidirectional link detection.
- vtp
-
Specifies the virtual trunk protocol.
Platforms
All
l2tp
l2tp
Syntax
l2tp
Context
[Tree] (config>subscr-mgmt>loc-user-db>ppp>host l2tp)
Full Context
configure subscriber-mgmt local-user-db ppp host l2tp
Description
Commands in this context configure L2TP parameters for the host.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
l2tp
Context
[Tree] (config>router l2tp)
Full Context
configure router l2tp
Description
Commands in this context configure L2TP parameters. L2TP extends the PPP model by allowing Layer 2 and PPP endpoints to reside on different devices interconnected by a packet-switched network.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
[no] l2tp
Context
[Tree] (debug>router>l2tp>group>packet l2tp)
[Tree] (debug>router l2tp)
[Tree] (debug>router>l2tp>assignment-id>packet l2tp)
[Tree] (debug>router>l2tp>packet l2tp)
[Tree] (debug>router>l2tp>peer>packet l2tp)
Full Context
debug router l2tp group packet l2tp
debug router l2tp
debug router l2tp assignment-id packet l2tp
debug router l2tp packet l2tp
debug router l2tp peer packet l2tp
Description
This command sets debugging for L2TP packets.
The no form of this command removes the settings of debugging for L2TP packet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
[no] l2tp
Context
[Tree] (config>redundancy>multi-chassis>peer>sync l2tp)
Full Context
configure redundancy multi-chassis peer sync l2tp
Description
This command enables L2TP.
The no form of this command disables L2TP.
Platforms
All
l2tp
Syntax
l2tp [terminate-only]
no l2tp
Context
[Tree] (debug>service>id>ppp>event l2tp)
Full Context
debug service id ppp event l2tp
Description
This command enables PPP L2TP event debug.
Parameters
- terminate-only
-
Enables debug for local terminated PPP session.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
[no] l2tp
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>type l2tp)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query type l2tp
Description
This command enables matching on L2TP tunnels.
The no form of this command disables matching on L2TP tunnels, unless no other tunnel type specifier is configured.
Default
no l2tp
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
[no] l2tp
Context
[Tree] (config>service>vprn l2tp)
Full Context
configure service vprn l2tp
Description
Commands in this context configure L2TP parameters. L2TP extends the PPP model by allowing Layer 2 and PPP endpoints to reside on different devices interconnected by a packet-switched network.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp
Syntax
l2tp
Context
[Tree] (debug>oam>build-packet>packet>field-override>header l2tp)
[Tree] (config>test-oam>build-packet>header l2tp)
Full Context
debug oam build-packet packet field-override header l2tp
configure test-oam build-packet header l2tp
Description
This command causes the associated header to be defined as an L2TP header template and enables the context to define the L2TP parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
l2tp-accounting-policy
l2tp-accounting-policy
Syntax
l2tp-accounting-policy policy-name [create]
no l2tp-accounting-policy policy-name
Context
[Tree] (config>aaa l2tp-accounting-policy)
Full Context
configure aaa l2tp-accounting-policy
Description
This command configures an L2TP accounting policy.
The no form of this command removes the policy-name from the configuration.
Parameters
- policy-name
-
Specifies a policy name.
- create
-
This keyword is required when first creating the configuration context. Once the context is created, it is possible to navigate into the context without the create keyword.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp-lns
l2tp-lns
Syntax
l2tp-lns max-nr-of-sessions
no l2tp-lns
Context
[Tree] (config>subscr-mgmt>sla-profile>session-limits l2tp-lns)
[Tree] (config>subscr-mgmt>sub-profile>session-limits l2tp-lns)
Full Context
configure subscriber-mgmt sla-profile session-limits l2tp-lns
configure subscriber-mgmt sub-profile session-limits l2tp-lns
Description
This command configures the maximum number of L2TP LNS sessions per SLA profile instance or per subscriber.
The no form of this command removes the maximum number of L2TP LNS sessions limit.
Parameters
- max-nr-of-sessions
-
Specifies the maximum number of L2TP LNS sessions.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp-load-balancing
l2tp-load-balancing
Syntax
[no] l2tp-load-balancing
Context
[Tree] (config>system>load-balancing l2tp-load-balancing)
Full Context
configure system load-balancing l2tp-load-balancing
Description
This command enables the inclusion of the L2TPv2 session ID into the load-balancing hash algorithm to induce more variation and better load distribution over available links and next-hops.
The no form of this command disables the inclusion of the session-id.
Platforms
All
l2tp-lts
l2tp-lts
Syntax
l2tp-lts max-nr-of-sessions
no l2tp-lts
Context
[Tree] (config>subscr-mgmt>sub-profile>session-limits l2tp-lts)
[Tree] (config>subscr-mgmt>sla-profile>session-limits l2tp-lts)
Full Context
configure subscriber-mgmt sub-profile session-limits l2tp-lts
configure subscriber-mgmt sla-profile session-limits l2tp-lts
Description
This command configures the maximum number of L2TP LTS sessions per SLA profile instance or per subscriber.
The no form of this command removes the maximum number of L2TP LTS sessions limit.
Parameters
- max-nr-of-sessions
-
Specifies the maximum number of L2TP LTS sessions.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp-overall
l2tp-overall
Syntax
l2tp-overall max-nr-of-sessions
no l2tp-overall
Context
[Tree] (config>subscr-mgmt>sub-profile>session-limits l2tp-overall)
[Tree] (config>subscr-mgmt>sla-profile>session-limits l2tp-overall)
Full Context
configure subscriber-mgmt sub-profile session-limits l2tp-overall
configure subscriber-mgmt sla-profile session-limits l2tp-overall
Description
This command configures the maximum number of L2TP sessions per SLA profile instance or per subscriber.
The no form of this command removes the maximum number of L2TP sessions limit.
Parameters
- max-nr-of-sessions
-
Specifies the maximum number of L2TP sessions.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tp-tunnel-id-range
l2tp-tunnel-id-range
Syntax
l2tp-tunnel-id-range start l2tp-tunnel-id end l2tp-tunnel-id
no l2tp-tunnel-id-range
Context
[Tree] (config>redundancy>multi-chassis>peer>sync>track-srrp-instances>track-srrp l2tp-tunnel-id-range)
Full Context
configure redundancy multi-chassis peer sync track-srrp-instances track-srrp l2tp-tunnel-id-range
Description
This command sets the tunnel-id range that is used to allocate a new tunnel-id for a tunnel for which multi-chassis redundancy is configured to this MCS peer.
The no form of this command reverts to the default.
Parameters
- start l2tp-tunnel-id
-
Specifies the start of the range of L2TP tunnel identifiers that can be allocated by L2TP on this system, to be synchronized with Multi Chassis Redundancy Synchronization (MCS).
- end l2tp-tunnel-id
-
Specifies the end of the range of L2TP tunnel identifiers that can be allocated by L2TP on this system, to be synchronized with Multi Chassis Redundancy Synchronization (MCS).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tpv3
l2tpv3
Syntax
l2tpv3
Context
[Tree] (config>router>l2tp l2tpv3)
[Tree] (config>service>vprn>l2tp>group>tunnel l2tpv3)
[Tree] (config>router>l2tp>group>tunnel l2tpv3)
[Tree] (config>service>vprn>l2tp>group l2tpv3)
[Tree] (config>router>l2tp>group l2tpv3)
[Tree] (config>service>vprn>l2tp l2tpv3)
Full Context
configure router l2tp l2tpv3
configure service vprn l2tp group tunnel l2tpv3
configure router l2tp group tunnel l2tpv3
configure service vprn l2tp group l2tpv3
configure router l2tp group l2tpv3
configure service vprn l2tp l2tpv3
Description
Commands in this context configure L2TPv3 parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
l2tpv3
Syntax
l2tpv3
Context
[Tree] (config>service>epipe>spoke-sdp>ingress l2tpv3)
[Tree] (config>service>epipe>spoke-sdp>egress l2tpv3)
Full Context
configure service epipe spoke-sdp ingress l2tpv3
configure service epipe spoke-sdp egress l2tpv3
Description
Commands in this context configure L2TPv3 spoke SDPs for Epipe services.
Platforms
All
l2tpv3
Syntax
l2tpv3
Context
[Tree] (config>mirror>mirror-dest>spoke-sdp>ingress l2tpv3)
[Tree] (config>mirror>mirror-dest>spoke-sdp>egress l2tpv3)
[Tree] (config>mirror>mirror-dest>remote-src>spoke-sdp>ingress l2tpv3)
Full Context
configure mirror mirror-dest spoke-sdp ingress l2tpv3
configure mirror mirror-dest spoke-sdp egress l2tpv3
configure mirror mirror-dest remote-source spoke-sdp ingress l2tpv3
Description
Commands in this context configure an RX/TX cookie for L2TPv3 egress spoke SDP or for the remote-source ingress spoke SDP.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure mirror mirror-dest spoke-sdp ingress l2tpv3
All
- configure mirror mirror-dest spoke-sdp egress l2tpv3
- configure mirror mirror-dest remote-source spoke-sdp ingress l2tpv3
l2tpv3-session
l2tpv3-session
Syntax
l2tpv3-session [create]
no l2tpv3-session
Context
[Tree] (config>service>vpls>sap l2tpv3-session)
[Tree] (config>service>epipe>sap l2tpv3-session)
Full Context
configure service vpls sap l2tpv3-session
configure service epipe sap l2tpv3-session
Description
This command creates the configuration context to define the L2TPv3 tunnel parameters.
The no form of this command deletes the L2TPv3 configuration context.
Parameters
- create
-
This keyword is mandatory while creating a L2TPv3 session.
Platforms
All
l2w
l2w
Syntax
[no] l2w
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>ue-state l2w)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query ue-state l2w
Description
This command enables matching on tunnels with L2W UEs.
The no form of this command disables matching on L2W UEs, unless UE state matching is disabled altogether.
Default
no l2w
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
l3-ring
l3-ring
Syntax
l3-ring name [create]
no l3-ring name
Context
[Tree] (config>redundancy>mc>peer>mcr l3-ring)
Full Context
configure redundancy multi-chassis peer mc-ring l3-ring
Description
This command configures a Layer 3 multi-chassis ring.
The no form of this command reverts to the default.
Platforms
All
l4-load-balancing
l4-load-balancing
Syntax
[no] l4-load-balancing
Context
[Tree] (config>system>load-balancing l4-load-balancing)
Full Context
configure system load-balancing l4-load-balancing
Description
This command configures system-wide Layer 4 load balancing. The configuration at the system level can enable or disable load balancing based on Layer 4 fields. If enabled, the Layer 4 source and destination port fields will be included in hashing calculation for TCP/UDP packets.
The hashing algorithm addresses finer spraying granularity where many hosts are connected to the network.
To address more efficient traffic distribution between network links (forming a LAG group), a hashing algorithm extension takes into account L4 information (that is, src/dst L4-protocol port).
The hashing index can be calculated according to the following algorithm:
- Example:
-
— If [(TCP or UDP traffic) & enabled]
— hash (TCP/UDP ports, IP addresses)
— else if (IP traffic)
— hash (IP addresses)
— else
— hash (MAC addresses)
— endif
This algorithm will be used in all cases where IP information in per-packet hashing is included (refer to "Traffic Load Balancing Options" in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Interface Configuration Guide). However, the Layer 4 information (TCP/UDP ports) will not be used for fragmented packets.
Default
no l4-load-balancing
Platforms
All
l4-src-port
l4-src-port
Syntax
l4-src-port port [mask]
no l4-src-port
Context
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry l4-src-port)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry l4-src-port)
Full Context
configure system security management-access-filter ip-filter entry l4-src-port
configure system security management-access-filter ipv6-filter entry l4-src-port
Description
This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.
The no form of this command reverts to the default values.
Default
no l4-src-port
Parameters
- port
-
Specifies the destination TCP or UDP port number as a match criterion.
- mask
-
Specifies the mask used to select a range of source port numbers. Format Styles to Configure Mask lists the format styles to configure the 16-bit mask.
Table 1. Format Styles to Configure Mask Format Style
Format Syntax
Example
Decimal
DDDDD
63488
Hexadecimal
0xHHHH
0xF800
Binary
0bBBBBBBBBBBBBBBBB
0b1111100000000000
To select a range from 1024 up to 2047, specify 1024 and 0xFC00 for port and maskrespectively.
Platforms
All
label
label
Syntax
label [detail]
no label
Context
[Tree] (debug>router>ldp>peer>packet label)
Full Context
debug router ldp peer packet label
Description
This command enables debugging for LDP Label packets.
The no form of the command disables the debugging output.
Parameters
- detail
-
Displays detailed information.
Platforms
All
label
Syntax
label label
no label
Context
[Tree] (config>test-oam>build-packet>header>mpls label)
[Tree] (debug>oam>build-packet>packet>field-override>header>mpls label)
Full Context
configure test-oam build-packet header mpls label
debug oam build-packet packet field-override header mpls label
Description
This command defines the MPLS value to be used in the MPLS header.
The no form of this command removes the label value.
Default
label 0
Parameters
- label
-
Specifies the MPLS label to be used in the MPLS header.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
label
Syntax
[no] label label
Context
[Tree] (debug>router>rib-api label)
Full Context
debug router rib-api label
Description
This command enables debugging for the specified RIB-API label.
Parameters
- label
-
Specifies the label of the specified RIB-API entry.
Platforms
All
label-allocation
label-allocation
Syntax
label-allocation
Context
[Tree] (config>router>bgp label-allocation)
Full Context
configure router bgp label-allocation
Description
This commands enables the context to configure the allocation of MPLS labels to specific BGP routes.
Platforms
All
label-block
label-block
Syntax
label-block name
no label-block
Context
[Tree] (conf>router>segment-routing>srv6>loc>static-function label-block)
Full Context
configure router segment-routing segment-routing-v6 locator static-function label-block
Description
This command configures a reserved label block name to be used in the termination of services on the SRv6 FPE.
Static values of the service SID function are mapped to label values drawn from this reserved label block. A static function value of 1 maps to the first label in this label block and so on.
Dynamic values of service SID function are mapped to label values drawn from the dynamic label range.
An End or End.X function does not map to a label value.
The no form of this command removes the label block name from the configuration.
Default
no label-block
Parameters
- name
-
Specifies a reserved label block name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
label-block
Syntax
label-block name
no label-block
Context
[Tree] (config>router>segment-routing>srv6>locator label-block)
Full Context
configure router segment-routing segment-routing-v6 locator label-block
Description
This command configures a reserved label block name for the termination of services on the SRv6 FPE.
When an operator configures this block, the router maps both static and dynamic values of the service SID functions to label values drawn from the reserved label block. This reserved block and the block defined under static-function are mutually exclusive. The configuration of this block does not constrain the configuration of a particular function length.
An End or End.X function does not map to a label value.
The no form of this command removes the label block name from the configuration.
Default
no label-block
Parameters
- name
-
Specifies a reserved label block name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
label-block
Syntax
label-block name
no label-block
Context
[Tree] (conf>router>sr>srv6>ms>block label-block)
Full Context
configure router segment-routing segment-routing-v6 micro-segment block label-block
Description
This command associates a pre-configured reserved label block with the micro-SID block.
The no form of this command disassociates the reserved label block.
Default
no label-block
Parameters
- name
-
Specifies a reserved label block name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
label-ipv4
label-ipv4
Syntax
label-ipv4 max-paths [ebgp ebgp-max-paths] [ibgp ibgp-max-paths] [restrict {same-neighbor-as | exact-as-path}] [unequal-cost]
no label-ipv4
Context
[Tree] (config>service>vprn>bgp>multi-path label-ipv4)
Full Context
configure service vprn bgp multi-path label-ipv4
Description
This command sets ECMP multipath parameters that apply only to the label unicast IPv4 address family.
When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The distribution of traffic over the multiple paths may or may not be equal. The distribution is based on weights derived from the Link Bandwidth Extended Community.
For more information about the criteria a non-best route must meet to qualify as a multipath, see "BGP route installation in the route table” in the 7450 ESS 7750 SR 7950 XRS VSR Unicast Routing Protocols User Guide.
The no form of this command removes label-IPv4-specific overrides.
Default
no label-ipv4
Parameters
- max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI. Setting this value to 1 disables multipath. This limit only applies if neither the ebgp-max-paths limit nor the ibgp-max-paths limit apply.
- ebgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route. If the ebgp option is configured, this value overrides the max-paths limit. If the best path is an EBGP learned route and this value is set to 1, multipath is disabled.
- ibgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route. If the ibgp option is configured, this value overrides the max-paths limit. If the best path is an IBGP learned route and this value is set to 1, multipath is disabled.
- restrict same-neighbor-as
-
Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.
- restrict exact-as-path-as
-
Specifies that the non-best path must have the same AS path as the best path.
- unequal-cost
-
Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.
Platforms
All
label-ipv4
Syntax
label-ipv4 send send-limit
label-ipv4 send send-limit receive [none]
no label-ipv4
Context
[Tree] (config>router>bgp>group>neighbor>add-paths label-ipv4)
[Tree] (config>router>bgp>group>add-paths label-ipv4)
[Tree] (config>router>bgp>add-paths label-ipv4)
Full Context
configure router bgp group neighbor add-paths label-ipv4
configure router bgp group add-paths label-ipv4
configure router bgp add-paths label-ipv4
Description
This command configures the add-paths capability for labeled-unicast IPv4 routes. By default, add-paths is not enabled for labeled-unicast IPv4 routes.
The maximum number of labeled-unicast paths per IPv4 prefix to send is the configured send-limit, which is a mandatory parameter. The capability to receive multiple labeled-unicast paths per prefix from a peer is configurable using the receive keyword, which is optional. If the receive keyword is not included in the command, receive capability is enabled by default.
The no form of this command disables add-paths support for labeled-unicast IPv4 routes, causing sessions established using add-paths for labeled-unicast IPv4 to go down and come back up without the add-paths capability.
Default
no label-ipv4
Parameters
- send-limit
-
Specifies the maximum number of paths per labeled-unicast IPv4 prefix that are allowed to be advertised to add-paths peers. (The actual number of advertised routes may be less.) If the value is none, the router does not negotiate the send capability with respect to label-IPv4 AFI/SAFI. If the value is multipaths, then BGP advertises all the used BGP multipaths for each IPv4 NLRI if the peer has signaled support to receive multiple add paths.
- receive
-
Specifies the router negotiates to receive multiple labeled-unicast routes per IPv4 prefix.
- none
-
Specifies that the router does not negotiate to receive multiple labeled-unicast routes per IPv4 prefix.
Platforms
All
label-ipv4
Syntax
label-ipv4 max-paths [ebgp ebgp-max-paths] [ibgp ibgp-max-paths] [restrict {same-neighbor-as | exact-as-path}] [unequal-cost]
no label-ipv4
Context
[Tree] (config>router>bgp>multi-path label-ipv4)
Full Context
configure router bgp multi-path label-ipv4
Description
This command sets ECMP multipath parameters that apply only to the label IPv4 unicast address family. These settings override the values set by the maximum-paths command.
When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).
The no form of this command removes label-IPv4-specific overrides.
Default
no label-ipv4
Parameters
- max-paths
-
Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.
- ebgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.
- ibgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.
- restrict same-neighbor-as
-
Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.
- restrict exact-as-path
-
Specifies that the non-best path must have the same AS path as the best path.
- unequal-cost
-
Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.
Platforms
All
label-ipv6
label-ipv6
Syntax
label-ipv6 max-paths [ebgp ebgp-max-paths] [ibgp ibgp-max-paths] [restrict {same-neighbor-as | exact-as-path}] [unequal-cost]
no label-ipv6
Context
[Tree] (config>service>vprn>bgp>multi-path label-ipv6)
Full Context
configure service vprn bgp multi-path label-ipv6
Description
This command sets ECMP multipath parameters that apply only to the label unicast IPv6 address family.
When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The distribution of traffic over the multiple paths may or may not be equal. The distribution is based on weights derived from the Link Bandwidth Extended Community.
For more information about the criteria a non-best route must meet to qualify as a multipath, see "BGP route installation in the route table” in the 7450 ESS 7750 SR 7950 XRS VSR Unicast Routing Protocols User Guide.
The no form of this command removes label-IPv6-specific overrides.
Default
no label-ipv6
Parameters
- max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI. Setting this value to 1 disables multipath. This limit only applies if neither the ebgp-max-paths limit nor the ibgp-max-paths limit apply.
- ebgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route. If the ebgp option is configured, this value overrides the max-paths limit. If the best path is an EBGP learned route and this value is set to 1, multipath is disabled.
- ibgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route. If the ibgp option is configured, this value overrides the max-paths limit. If the best path is an IBGP learned route and this value is set to 1, multipath is disabled.
- restrict same-neighbor-as
-
Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.
- restrict exact-as-path-as
-
Specifies that the non-best path must have the same AS path as the best path.
- unequal-cost
-
Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.
Platforms
All
label-ipv6
Syntax
label-ipv6 send send-limit
label-ipv6 send send-limit receive [none]
no label-ipv6
Context
[Tree] (config>router>bgp>group>neighbor>add-paths label-ipv6)
[Tree] (config>router>bgp>group>add-paths label-ipv6)
[Tree] (config>router>bgp>add-paths label-ipv6)
Full Context
configure router bgp group neighbor add-paths label-ipv6
configure router bgp group add-paths label-ipv6
configure router bgp add-paths label-ipv6
Description
This command configures the add-paths capability for labeled-unicast IPv6 routes. By default, add-paths is not enabled for labeled-unicast IPv6 routes.
The maximum number of labeled-unicast paths per IPv6 prefix to send is the configured send-limit, which is a mandatory parameter. The capability to receive multiple labeled-unicast paths per prefix from a peer is configurable using the receive keyword, which is optional. If the receive keyword is not included in the command, receive capability is enabled by default.
The no form of this command disables add-paths support for labeled-unicast IPv6 routes, causing sessions established using add-paths for labeled-unicast IPv6 to go down and come back up without the add-paths capability.
Default
no label-ipv6
Parameters
- send-limit
-
Specifies the maximum number of paths per labeled-unicast IPv6 prefix that are allowed to be advertised to add-paths peers. (The actual number of advertised routes may be less.) If the value is none, the router does not negotiate the send capability with respect to label-IPv6 AFI/SAFI. If the value is multipaths, then BGP advertises all the used BGP multipaths for each IPv6 NLRI if the peer has signaled support to receive multiple add paths.
- receive
-
Specifies that the router negotiates to receive multiple labeled-unicast routes per IPv6 prefix.
- none
-
Specifies that the router does not negotiate to receive multiple labeled-unicast routes per IPv6 prefix.
Platforms
All
label-ipv6
Syntax
label-ipv6 max-paths [ebgp ebgp-max-paths] [ibgp ibgp-max-paths] [restrict {same-neighbor-as | exact-as-path}] [unequal-cost]
no label-ipv6
Context
[Tree] (config>router>bgp>multi-path label-ipv6)
Full Context
configure router bgp multi-path label-ipv6
Description
This command sets ECMP multipath parameters that apply only to the label unicast IPv6 address family. These settings override the values set by the maximum-paths command.
When multipath is enabled, traffic to the destination is load-shared across a set of paths (BGP routes) that the BGP decision process considers equal to the best path. The actual distribution of traffic over the multiple paths may be equal or unequal (that is, based on weights derived from the Link Bandwidth Extended Community).
The no form of this command removes label-IPv6-specific overrides.
Default
no label-ipv6
Parameters
- max-paths
-
Specifies the maximum number of multipaths per prefix/NLRI if ebgp-max-paths or ibgp-max-paths does not apply.
- ebgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an EBGP learned route.
- ibgp-max-paths
-
Specifies the maximum number of multipaths per prefix or NLRI when the best path is an IBGP learned route.
- restrict same-neighbor-as
-
Specifies that the non-best path must have the same neighbor AS in its AS path as the best path.
- restrict exact-as-path
-
Specifies that the non-best path must have the same AS path as the best path.
- unequal-cost
-
Instructs BGP to ignore differences in the next-hop cost only when determining eligible multipaths.
Platforms
All
label-ipv6
Syntax
label-ipv6
Context
[Tree] (config>router>bgp>label-allocation label-ipv6)
Full Context
configure router bgp label-allocation label-ipv6
Description
Commands in this context configure advertised label IPv6 programming rules.
Platforms
All
label-ipv6
Syntax
label-ipv6
Context
[Tree] (config>service>vprn>bgp>rib-management label-ipv6)
Full Context
configure service vprn bgp rib-management label-ipv6
Description
Commands in this context configure labeled IPv6 RIB.
Platforms
All
label-ipv6-explicit-null
label-ipv6-explicit-null
Syntax
[no] label-ipv6-explicit-null
Context
[Tree] (config>router>bgp>next-hop-res>lbl-routes>use-bgp-routes label-ipv6-explicit-null)
Full Context
configure router bgp next-hop-resolution labeled-routes use-bgp-routes label-ipv6-explicit-null
Description
This command allows a labelled IPv6 route with the explicit-null label to be resolved by other labelled IPv6 routes with the explicit-null label, and also by unlabeled IPv4 routes and unlabeled IPv6 routes that are resolved by static routes, interface routes, or tunnels. Up to four levels of recursive resolution are supported when the top route is a labelled IPv6 route with an explicit-null label.
Regardless of setting, a labelled IPv6 route with a regular label (other than explicit-null) is never resolved by other labelled IPv6 routes.
The no form of this command disables the label-ipv6-explicit-null functionality. When disabled, a labeled IPv6 route cannot be resolved by other labeled IPv6 routes.
Default
no label-ipv6-explicit-null
Platforms
All
label-map
label-map
Syntax
[no] label-map in-label
Context
[Tree] (config>router>mpls>interface label-map)
Full Context
configure router mpls interface label-map
Description
This command is used on transit routers when a static LSP is defined. The static LSP on the ingress router is initiated using the config router mpls static-lsp lsp-name command. An in-label can be associated with either a pop or a swap action, but not both. If both actions are specified, the last action specified takes effect.
The no form of this command deletes the static LSP configuration associated with the in-label.
Parameters
- in-label
-
Specifies the incoming MPLS label on which to match.
Platforms
All
label-mode
label-mode
Syntax
label-mode {vrf | next-hop}
no label-mode
Context
[Tree] (config>service>vprn label-mode)
Full Context
configure service vprn label-mode
Description
This command controls the method by which service labels are allocated to routes exported by the VPRN as BGP-VPN routes. The vrf option selects service label per VRF mode while the next-hop option selects service label per next-hop mode.
The no form of this command sets the mode to the default mode of service label per VRF.
Default
no label-mode
Parameters
- vrf
-
Selects service label per VRF mode.
- next-hop
-
Selects service label per next-hop mode.
Platforms
All
label-preference
label-preference
Syntax
label-preference value
no label-preference
Context
[Tree] (config>service>vprn>bgp>group label-preference)
[Tree] (config>service>vprn>bgp>group>neighbor label-preference)
[Tree] (config>service>vprn>bgp label-preference)
Full Context
configure service vprn bgp group label-preference
configure service vprn bgp group neighbor label-preference
configure service vprn bgp label-preference
Description
This command configures the route preference for routes learned from labeled-unicast peers.
This command can be configured at three levels:
-
Global level — applies to all peers
-
Group level — applies to all peers in the peer-group
-
Neighbor level — applies only to the specified peer
The most specific value is used.
The lower the preference, the higher the chance of the route being the active route.
The no form of this command used at the global level reverts to the default value of 170.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no label-preference
Parameters
- value
-
Specifies the route preference value.
Platforms
All
label-preference
Syntax
label-preference value
no label-preference
Context
[Tree] (config>router>bgp label-preference)
[Tree] (config>router>bgp>group>neighbor label-preference)
[Tree] (config>router>bgp>group label-preference)
Full Context
configure router bgp label-preference
configure router bgp group neighbor label-preference
configure router bgp group label-preference
Description
This command configures the route preference for routes learned from labeled-unicast peers.
This command can be configured at three levels:
-
Global level — applies to all peers
-
Group level — applies to all peers in the peer-group
-
Neighbor level — applies only to the specified peer
The most specific value is used.
The lower the preference, the higher the chance of the route being the active route.
The no form of this command used at the global level reverts to the default value of 170.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no label-preference
Parameters
- value
-
Specifies the route preference value.
Platforms
All
label-route-local
label-route-local
Syntax
label-route-local [{none | all}]
Context
[Tree] (config>router>ttl-propagate label-route-local)
Full Context
configure router ttl-propagate label-route-local
Description
This command configures the TTL propagation for locally generated packets which are forwarded over a BGP label route in the Global Routing Table (GRT) context.
For IPv4 and IPv6 packets forwarded using an RFC 8277 label route in the global routing instance, including 6PE, the all value of the command enables TTL propagation from the IP header into all labels in the transport label stack. The none value reverts to the default mode which disables TTL propagation from the IP header to the labels in the transport label stack. This command does not have a no version.
The TTL of the IP packet is always propagated into the RFC 8277 label itself, and this command only controls the propagation into the transport labels, for example, labels of the RSVP or LDP LSP to which the BGP label route resolves and which are pushed on top of the BGP label.
If the BGP peer advertised the implicit-null label value for the BGP label route, the TTL propagation will not follow the configuration described, but will follow the configuration to which the BGP label route resolves:
RSVP LSP shortcut:
-
configure router mpls shortcut-local-ttl-propagate
LDP LSP shortcut:
-
configure router ldp shortcut-local-ttl-propagate
This feature does not impact packets forwarded over BGP shortcuts. The ingress LER operates in uniform mode by default and can be changed into pipe mode using the configuration of TTL propagation for RSVP or LDP LSP shortcut listed.
Default
label-route-local none
Parameters
- none
-
Specifies that the TTL of the IP packet is not propagated into the transport label stack.
- all
-
Specifies that the TTL of the IP packet is propagated into all labels of the transport label stack.
Platforms
All
label-route-transit
label-route-transit
Syntax
label-route-transit [{none | all}]
Context
[Tree] (config>router>ttl-propagate label-route-transit)
Full Context
configure router ttl-propagate label-route-transit
Description
This command configures the TTL propagation for transit packets which are forwarded over a BGP label route in the Global Routing Table (GRT) context.
For IPv4 and IPv6 packets forwarded using a RFC 8277 label route in the global routing instance, including 6PE, the all value of the command enables TTL propagation from the IP header into all labels in the transport label stack. The none value reverts to the default mode which disables TTL propagation from the IP header to the labels in the transport label stack. This command does not have a no version.
The TTL of the IP packet is always propagated into the RFC 8277 label itself, and this command only controls the propagation into the transport labels, for example, labels of the RSVP or LDP LSP to which the BGP label route resolves and which are pushed on top of the BGP label.
If the BGP peer advertised the implicit-null label value for the BGP label route, the TTL propagation will not follow the configuration described, but will follow the configuration to which the BGP label route resolves.
RSVP LSP shortcut:
-
configure router mpls shortcut-transit-ttl-propagate
LDP LSP shortcut:
-
configure router ldp shortcut-transit-ttl-propagate
This feature does not impact packets forwarded over BGP shortcuts. The ingress LER operates in uniform mode by default and can be changed into pipe mode using the configuration of TTL propagation for the listed RSVP or LDP LSP shortcut.
Default
label-route-transit none
Parameters
- none
-
Specifies that the TTL of the IP packet is not propagated into the transport label stack.
- all
-
Specifies that the TTL of the IP packet is propagated into all labels of the transport label stack.
Platforms
All
label-stack-reduction
label-stack-reduction
Syntax
[no] label-stack-reduction
Context
[Tree] (config>router>mpls>lsp label-stack-reduction)
[Tree] (config>router>mpls>lsp-template label-stack-reduction)
Full Context
configure router mpls lsp label-stack-reduction
configure router mpls lsp-template label-stack-reduction
Description
This command enables the label stack size reduction for a SR-TE LSP or SR-TE LSP template.
At a high level, the label stack reduction algorithm attempts to replace a segment of a computed SR-TE LSP path with the farthest node SID on that path that results in using ECMP paths with links which still comply to the TE constraints of the LSP path.
The no form of this command returns the command to its default value.
Default
no label-stack-reduction
Platforms
All
label-stack-statistics-count
label-stack-statistics-count
Syntax
label-stack-statistics-count label-stack-statistics-count
no label-stack-statistics-count
Context
[Tree] (config>system>ip>mpls label-stack-statistics-count)
Full Context
configure system ip mpls label-stack-statistics-count
Description
This command enables the system to collect traffic statistics on the specified number of labels of the MPLS label stack.
The no form of this command disables the collecting of traffic statistics.
Default
label-stack-statistics-count 1
Parameters
- label-stack-statistics-count
-
Specifies the number of labels on which the system can collect statistics.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
label-withdrawal-delay
label-withdrawal-delay
Syntax
label-withdrawal-delay seconds
no label-withdrawal-delay
Context
[Tree] (config>router>ldp label-withdrawal-delay)
Full Context
configure router ldp label-withdrawal-delay
Description
This command specifies configures the time interval (in s), LDP will delay for the withdrawal of FEC-label binding it distributed to its neighbors when FEC is de-activated. When the timer expires, LDP then sends a label withdrawal for the FEC to all its neighbors. This is applicable only to LDP IPv4 prefix FECs and is not applicable to pseudowires (service FECs).
When there is an upper layer (user of LDP) which depends of LDP control plane for failover detection then label withdrawal delay and tunnel-down-damp-time options must be set to 0.
An example is PW redundancy where the primary PW doesn’t have its own fast failover detection mechanism and the node depends on LDP tunnel down event to activate the standby PW.
Default
no label-withdrawal-delay
Parameters
- seconds
-
Specifies the time that LDP delays the withdrawal of FEC-label binding it distributed to its neighbors when FEC is de-activated.
Platforms
All
labeled-routes
labeled-routes
Syntax
labeled-routes
Context
[Tree] (config>router>bgp>next-hop-res labeled-routes)
Full Context
configure router bgp next-hop-resolution labeled-routes
Description
Commands in this context configure labeled route options for next-hop resolution.
Platforms
All
lac-overall
lac-overall
Syntax
lac-overall max-nr-of-hosts
no lac-overall
Context
[Tree] (config>subscr-mgmt>sub-profile>host-limits lac-overall)
[Tree] (config>subscr-mgmt>sla-profile>host-limits lac-overall)
Full Context
configure subscriber-mgmt sub-profile host-limits lac-overall
configure subscriber-mgmt sla-profile host-limits lac-overall
Description
This command configures the maximum number of L2TP LAC hosts per SLA profile instance or per subscriber.
The no form of this command removes the maximum number of L2TP LAC hosts limit.
Parameters
- max-nr-of-hosts
-
Specifies the maximum number of L2TP LAC hosts.
Note:The operational maximum value may be smaller due to equipped hardware dependencies.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lacp
lacp
Syntax
lacp [mode] [administrative-key admin-key] [system-id system-id] [system-priority priority]
no lacp
Context
[Tree] (config>lag lacp)
Full Context
configure lag lacp
Description
This command enables the LACP protocol. Per the IEEE 802.1ax standard, the Link Aggregation Control Protocol (LACP) provides a standardized means for exchanging information between Partner Systems on a link to allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs, move the link to that Link Aggregation Group, and enable its transmission and reception functions in an orderly manner.
If any of the parameters are omitted, the existing configuration is preserved. The default parameter values are used if a parameter is never explicitly configured.
Default
no lacp
Parameters
- mode
-
Specifies the mode in which LACP will operate.
- admin-key
-
Specifies an administrative key value to identify the channel group on each port configured to use LACP. A random key is assigned by default if a value is not specified when using classic CLI only.
- system-id
-
Specifies the 48-bit system ID in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
- priority
-
Specifies the system priority.
Platforms
All
lacp-mux-control
lacp-mux-control
Syntax
lacp-mux-control {coupled | independent}
no lacp-mux-control
Context
[Tree] (config>lag lacp-mux-control)
Full Context
configure lag lacp-mux-control
Description
This command configures the type of multiplexing machine control to be used in a LAG with LACP in active/passive modes.
The no form of this command disables multiplexing machine control.
Default
lacp-mux-control coupled
Parameters
- coupled
-
Specifies that TX and RX activate together.
- independent
-
Specifies that RX activates independent of TX.
Platforms
All
lacp-system-priority
lacp-system-priority
Syntax
lacp-system-priority lacp-system-priority
no lacp-system-priority
Context
[Tree] (config>system lacp-system-priority)
Full Context
configure system lacp-system-priority
Description
This command configures the Link Aggregation Control Protocol (LACP) system priority on aggregated Ethernet interfaces. LACP allows the operator to aggregate multiple physical interfaces to form one logical interface.
Default
lacp-system-priority 32768
Parameters
- lacp-system-priority
-
Specifies the LACP system priority.
Platforms
All
lacp-tunnel
lacp-tunnel
Syntax
[no] lacp-tunnel
Context
[Tree] (config>port>ethernet lacp-tunnel)
Full Context
configure port ethernet lacp-tunnel
Description
This command enables LACP packet tunneling for the Ethernet port. When tunneling is enabled, the port does not process any LACP packets but tunnels them instead. The port cannot be added as a member to a LAG group.
In this context, the lacp-tunnel command is supported for Epipe and VPLS services only.
The no form of this command disables LACP packet tunneling for the Ethernet port.
Default
no lacp-tunnel
Platforms
All
lacp-xmit-interval
lacp-xmit-interval
Syntax
lacp-xmit-interval {slow | fast}
no lacp-xmit-interval
Context
[Tree] (config>lag lacp-xmit-interval)
Full Context
configure lag lacp-xmit-interval
Description
This command specifies the interval signaled to the peer and tells the peer at which rate it should transmit.
Default
lacp-xmit-interval fast
Parameters
- slow
-
Transmits packets every 30 seconds.
- fast
-
Transmits packets every second.
Platforms
All
lacp-xmit-stdby
lacp-xmit-stdby
Syntax
[no] lacp-xmit-stdby
Context
[Tree] (config>lag lacp-xmit-stdby)
Full Context
configure lag lacp-xmit-stdby
Description
This command enables LACP message transmission on standby links.
The no form of this command disables LACP message transmission. This command should be disabled for compatibility when using active/standby groups. This forces a timeout of the standby links by the peer. Use the no form if the peer does not implement the correct behavior regarding the lacp sync bit.
Default
lacp-xmit-stdby
Platforms
All
lag
lag
Syntax
lag lag-id lacp-key admin-key system-id system-id [remote-lag remote-lag-id] system-priority system-priority source-bmac-lsb use-lacp-key
lag lag-id lacp-key admin-key system-id system-id [remote-lag remote-lag-id] system-priority system-priority source-bmac-lsb MAC-Lsb
lag lag-id lacp-key admin-key system-id system-id [remote-lag remote-lag-id] system-priority system-priority
lag lag-id [remote-lag remote-lag-id]
no lag lag-id
Context
[Tree] (config>redundancy>multi-chassis>peer>mc-lag lag)
Full Context
configure redundancy multi-chassis peer mc-lag lag
Description
This command defines a LAG which is forming a redundant-pair for MC-LAG with a LAG configured on the given peer. The same LAG group can be defined only in the scope of 1 peer. In order MC-LAG to become operational, all parameters (lacp-key, system-id, system-priority) must be configured the same on both nodes of the same redundant pair.
The partner system (the system connected to all links forming MC-LAG) will consider all ports using the same lacp-key, system-id, system-priority as the part of the same LAG. In order to achieve this in MC operation, both redundant-pair nodes have to be configured with the same values. In case of the mismatch, MC-LAG is kept in oper-down status.
Note that the correct CLI command to enable MC LAG for a LAG in standby-signaling power-off mode is lag lag-id [remote-lag remote-lag-id]. In the CLI help output, the first three forms are used to enable MC LAG for a LAG in LACP mode. MC LAG is disabled (regardless of the mode) for a given LAG with no lag lag-id.
Parameters
- lag-id
-
The LAG identifier, expressed as an integer. Specifying the lag-id allows the mismatch between lag-id on redundant-pair. If no lag-id is specified it is assumed that neighbor system uses the same lag-id as a part of the specific MC-LAG. If no matching MC-LAG group can be found between neighbor systems, the individual LAGs operates as usual (no MC-LAG operation is established).
- admin-key
-
Specifies a 16 bit key that needs to be configured in the same manner on both sides of the MC-LAG in order for the MC-LAG to come up.
- system-id
-
Specifies a 6 byte value expressed in the same notation as MAC address.
- remote-lag-id
-
Specifies the LAG ID on the remote system.
- system-priority
-
Specifies the system priority to be used in the context of the MC-LAG. The partner system will consider all ports using the same lacp-key, system-id, and system-priority as part of the same LAG.
- MAC-Lsb
-
Configures the last 16 bit of the MAC address to be used for all traffic ingressing the MC-LAG link(s) or if use-lacp-key option is used, it will only copy the value of lacp-key (redundancy multi-chassis mc-lag lag lacp-key admin-key). The command will fail if the value is the same with any of the following configured attributes:
-
Source-bmac-lsb assigned to other MC-LAG ports.
-
lsb 16 bits value for the source-bmac configured at chassis or BVPLS level
The first 32 bits will be copied from the source B-MAC of the BVPLS associated with the IVPLS for a specific IVPLS SAP mapped to the MC-LAG. The BVPLS source B-MAC can be provisioned for each BVPLS or can be inherited from the chassis PBB configuration.
-
Platforms
All
lag
Syntax
lag lag-id [name lag-name]
no lag lag-id
Context
[Tree] (config lag)
Full Context
configure lag
Description
Commands in this context configure Link Aggregation Group (LAG) attributes.
A LAG is used to group multiple ports into one logical link. The aggregation of multiple physical links allows for load sharing and offers seamless redundancy. If one link fails, traffic is redistributed over the remaining links.
For all ports in a LAG group, autonegotiation must be set to "limited” or "off”.
There are three possible settings for autonegotiation, as follows:
-
"on” or enabled with full port capabilities advertised
-
"off” or disabled where there is no autonegotiation advertisements
-
"limited” where a single speed/duplex is advertised.
When autonegotiation is enabled on a port, the link attempts to automatically negotiate the link speed and duplex parameters; the configured duplex and speed parameters are ignored.
When autonegotiation is disabled on a port, the port does not attempt to autonegotiate and will only operate at the speed and duplex settings configured for the port.
Disabling autonegotiation on gigabit ports is not allowed. This is in accordance with the IEEE 802.3 specification for gigabit Ethernet, which requires gigabyte to be enabled for far end fault indication.
If the config>port>ethernet autonegotiate limited keyword option is specified, the port will autonegotiate but only advertise the speed and duplex settings configured for the port. Use the limited mode on multi-speed gigabit ports to force gigabit operation while keeping autonegotiation is enabled for compliance with IEEE 801.3.
The system requires autonegotiation to be disabled or limited for ports in a LAG to guarantee a specific port speed.
The no form of this command deletes the LAG from the configuration. A LAG can only be deleted while the LAG is administratively shut down. Any dependencies, such as IP-Interface configurations, must be removed from the configuration before the no lag command is issued.
Parameters
- lag-id
-
Specifies the LAG identifier, expressed as an integer.
The LAG ID ranging from 1 to 64 supports up to 64 LAG members and LAG ID above 64 supports 32 LAG members.
- lag-name
-
Specifies an optional LAG name, up to 27 characters.
In model-driven interfaces, the LAG name is used for configuration references and show commands. A service provider or administrator can use the defined LAG name to identify and manage LAGs within the SR OS platforms.
In the classic CLI interface, the user must assign a LAG ID to create the LAG. The LAG name is optional and, if specified, must always start with "lag-”. If a name is not specified, SR OS automatically assigns a string version of the LAG ID as "lag-<lag-id>”.
Platforms
All
lag
Syntax
lag [lag-id lag-id [port port-id]] [all]
lag [lag-id lag-id [port port-id]] [sm] [pkt] [cfg] [red] [iom-upd] [port-state] [timers] [sel-logic] [mc] [mc-pkt]
no lag [lag-id lag-id]
Context
[Tree] (debug lag)
Full Context
debug lag
Description
This command enables debugging for LAG.
Parameters
- lag-id
-
Specifies the link aggregation group ID.
- port-id
-
Specifies the physical port ID.
- all
-
Specifies to display all LAG information.
- sm
-
Specifies to display trace LACP state machine.
- pkt
-
Specifies to display trace LACP packets.
- cfg
-
Specifies to display trace LAG configuration.
- red
-
Specifies to display trace LAG high availability.
- iom-upd
-
Specifies to display trace LAG IOM updates.
- port-state
-
Specifies to display trace LAG port state transitions.
- timers
-
Specifies to display trace LAG timers.
- sel-logic
-
Specifies to display trace LACP selection logic.
- mc
-
Specifies to display multi-chassis parameters.
- mc-packet
-
Specifies to display the MC-LAG control packets with valid authentication were received on this system.
Platforms
All
lag
Syntax
lag lag-id
no lag
Context
[Tree] (config>service>system>bgp-evpn>eth-seg lag)
Full Context
configure service system bgp-evpn ethernet-segment lag
Description
This command configures a LAG ID associated with the Ethernet-Segment. When the Ethernet-Segment is configured as all-active, then only a lag or PW port can be associated with the Ethernet-Segment. When the Ethernet-Segment is configured as single-active, then a lag, port or sdp can be associated to the Ethernet-Segment. In either case, only one of the four objects can be configured in the Ethernet-Segment. A specified lag can be part of only one Ethernet-Segment.
Default
no lag
Parameters
- lag-id
-
Specifies the lag-id associated with the Ethernet-Segment.
Platforms
All
lag
Syntax
lag lag-id[:encap-val]
no lag
Context
[Tree] (config>service>vprn>nw-if lag)
Full Context
configure service vprn network-interface lag
Description
This command binds the interface to a Link Aggregation Group (LAG)
The no form of this command removes the LAG id from the configuration.
Parameters
- lag-id[:encap-val]
-
Specifies the LAG ID.
Platforms
All
lag-emulation
lag-emulation
Syntax
lag-emulation
Context
[Tree] (config>eth-tunnel lag-emulation)
Full Context
configure eth-tunnel lag-emulation
Description
Commands in this context configure eth-tunnel loadsharing parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lag-link-map-profile
lag-link-map-profile
Syntax
lag-link-map-profile link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config service vprn sub-if grp-if sap lag-link-map-profile)
[Tree] (config subscr-mgmt msap-policy lag-link-map-profile)
Full Context
configure service vprn subscriber-interface group-interface sap lag-link-map-profile
configure subscriber-mgmt msap-policy lag-link-map-profile
Description
This command assigns a pre-configured lag link map profile to a SAP or network interface configured on a LAG or a PW port that exists on a LAG. Once assigned or de-assigned, the SAP or network interface egress traffic is re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP/network interface to use per-flow, service or link hash as configured for the service/LAG.
Parameters
- link-map-profile-id
-
Defines a unique LAG link map profile on which the LAG the SAP/network interface exist.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lag-link-map-profile
Syntax
lag-link-map-profile link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config service ipipe sap lag-link-map-profile)
[Tree] (config service epipe sap lag-link-map-profile)
Full Context
configure service ipipe sap lag-link-map-profile
configure service epipe sap lag-link-map-profile
Description
This command assigns a pre-configured lag link map profile to a SAP/network interface configured on a LAG or a PW port that exists on a LAG. Once assigned/de-assigned, the SAP’s/network interface’s egress traffic will be re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP/network interface to use per-flow, service or link hash as configured for the service/LAG.
Default
no lag-link-map-profile
Parameters
- link-map-profile-id
-
An integer from 1 to 64 that defines a unique lag link map profile on the LAG the SAP/network interface exists on.
Platforms
All
lag-link-map-profile
Syntax
lag-link-map-profile link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config service vpls sap lag-link-map-profile)
Full Context
configure service vpls sap lag-link-map-profile
Description
This command assigns a pre-configured lag link map profile to a SAP/network interface configured on a LAG or a PW port that exists on a LAG. Once assigned/unassigned, the SAP/network interface egress traffic will be re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP/network interface to use per-flow, service or link hash as configured for the service/LAG.
Default
no lag-link-map-profile
Parameters
- link-map-profile-id
-
An integer from 1 to 64 that defines a unique lag link map profile on which the LAG the SAP/network interface exist.
Platforms
All
lag-link-map-profile
Syntax
lag-link-map-profile lag-link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config service ies if sap lag-link-map-profile)
[Tree] (config service ies sub-if grp-if sap lag-link-map-profile)
Full Context
configure service ies interface sap lag-link-map-profile
configure service ies subscriber-interface group-interface sap lag-link-map-profile
Description
This command assigns a pre-configured lag link map profile to a SAP/network interface configured on a LAG or a PW port that exists on a LAG. Once assigned/de-assigned, the SAP/network interface egress traffic will be re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP/network interface to use per-flow, service or link hash as configured for the service/LAG.
Default
no lag-link-map-profile
Parameters
- lag-link-map-profile-id
-
An integer from 1 to 64 that defines a unique lag link map profile on which the LAG the SAP/network interface exist.
Platforms
All
- configure service ies interface sap lag-link-map-profile
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap lag-link-map-profile
lag-link-map-profile
Syntax
lag-link-map-profile link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config service vprn if sap lag-link-map-profile)
Full Context
configure service vprn interface sap lag-link-map-profile
Description
This command assigns a pre-configured LAG link map profile to a SAP or network interface configured on a LAG or a PW port that exists on a LAG. Once assigned, the SAP or network interface egress traffic will be re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP or network interface to use per-flow, service or link hash as configured for the service or LAG.
Default
no lag-link-map-profile
Parameters
- link-map-profile-id
-
An integer from 1 to 64 that defines a unique LAG link map profile on which the LAG the SAP or network interface exist.
Platforms
All
lag-link-map-profile
Syntax
lag-link-map-profile link-map-profile-id
no lag-link-map-profile
Context
[Tree] (config router if lag-link-map-profile)
Full Context
configure router interface lag-link-map-profile
Description
This command assigns a preconfigured lag link map profile to a SAP/network interface configured on a LAG or a PW port that exists on a LAG. Once assigned/unassigned, the SAP/network interface egress traffic will be re-hashed over LAG as required by the new configuration.
The no form of this command reverts the SAP/network interface to use per-flow, service or link hash as configured for the service/LAG.
Default
no lag-link-map-profile
Parameters
- link-map-profile-id
-
An integer from 1 to 32 that defines a unique lag link map profile on which the LAG the SAP/network interface exist.
Platforms
All
lag-per-link-hash
lag-per-link-hash
Syntax
lag-per-link-hash class {class} weight weight
no lag-per-link-hash
Context
[Tree] (config>subscr-mgmt>sub-profile>egress lag-per-link-hash)
Full Context
configure subscriber-mgmt sub-profile egress lag-per-link-hash
Description
This command configures weight and class to be used on LAG egress when the LAG uses weighted per-link-hash by subscribers with the profile assigned. Subscribers using profile with lag-per-link-hash default configuration, inherit weight and class from the SAP configuration (1 and 1 respectively if none configured under SAP).
The no form of this command restores default configuration.
Parameters
- class
-
Specifies the class to be used to select a LAG link.
- weight
-
Specifies the weight to be associated with this SAP when selecting a LAG link.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lag-per-link-hash
Syntax
lag-per-link-hash class {1 | 2 | 3} weight [weight]
no lag-per-link-hash
Context
[Tree] (config>service>ipipe>sap lag-per-link-hash)
[Tree] (config>service>vpls>sap lag-per-link-hash)
[Tree] (config>service>epipe>sap lag-per-link-hash)
Full Context
configure service ipipe sap lag-per-link-hash
configure service vpls sap lag-per-link-hash
configure service epipe sap lag-per-link-hash
Description
This command configures weight and class to this SAP to be used on LAG egress when the LAG uses weighted per-link-hash.
The no form of this command restores default configuration.
Default
no lag-per-link-hash (equivalent to weight 1 class 1)
Platforms
All
lag-per-link-hash
Syntax
lag-per-link-hash class {1 | 2 | 3} weight weight
no lag-per-link-hash
Context
[Tree] (config>service>ies>if>sap lag-per-link-hash)
[Tree] (config>service>ies>sub-if>grp-if>sap lag-per-link-hash)
Full Context
configure service ies interface sap lag-per-link-hash
configure service ies subscriber-interface group-interface sap lag-per-link-hash
Description
This command configures weight and class to this SAP to be used on LAG egress when the LAG uses weighted per-link-hash.
The no form of this command restores default configuration.
Default
no lag-per-link-hash (equivalent to weight 1 class 1)
Parameters
- class
-
Specifies the class.
- weight
-
Specifies the weight.
Platforms
All
- configure service ies interface sap lag-per-link-hash
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface sap lag-per-link-hash
lag-per-link-hash
Syntax
lag-per-link-hash class {1 | 2 | 3} weight [1 to 1024]
no per-link-hash
Context
[Tree] (config>service>vprn>nw-if lag-per-link-hash)
[Tree] (config>service>vprn>if>sap lag-per-link-hash)
Full Context
configure service vprn network-interface lag-per-link-hash
configure service vprn interface sap lag-per-link-hash
Description
This command configures weight and class to this SAP to be used on LAG egress when the LAG uses weighted per-link-hash.
The no form of this command restores the default configuration.
Default
no lag-per-link-hash (equivalent to weight 1 class 1)
Platforms
All
lag-per-link-hash
Syntax
lag-per-link-hash class class weight [weight]
no lag-per-link-hash
Context
[Tree] (config>router>if lag-per-link-hash)
Full Context
configure router interface lag-per-link-hash
Description
This command configures weight and class to this interface to be used on LAG egress when the LAG uses weighted per-link-hash.
The no form of this command restores the default configuration (weight 1 class 1).
Default
no lag-per-link-hash
Parameters
- class
-
Specifies the class.
- weight
-
Specifies the weight.
Platforms
All
lag-port-down
lag-port-down
Syntax
lag-port-down lag-id number-down number-lag-port-down level level-id
no lag-port-down lag-id number-down number-lag-port-down
Context
[Tree] (config>router>mcac>policy>bundle>mc-constraints lag-port-down)
Full Context
configure router mcac policy bundle mc-constraints lag-port-down
Description
This command configures the bandwidth available both at the interface and bundle level when a specific number of ports in a LAG group fail.
The no form of this command removes the values from the configuration.
Parameters
- lag-id
-
Specifies the LAG ID. When the number of ports available in the LAG link is reduced by the number of ports configured in this context then the level-id specified here must be applied.
- number-lag-port-down
-
If the number of ports available in the LAG is reduced by the number of ports configured in this command here then bandwidth allowed for bundle and/or interface will be as per the levels configured in this context.
- level-id
-
Specifies the amount of bandwidth available within a given bundle for MC traffic for a specified level.
Platforms
All
lag-port-down
Syntax
[no] lag-port-down lag-id
Context
[Tree] (config>vrrp>policy>priority-event lag-port-down)
Full Context
configure vrrp policy priority-event lag-port-down
Description
This command creates the context to configure Link Aggregation Group (LAG) priority control events that monitor the operational state of the links in the LAG.
The lag-port-down command configures a priority control event. The event monitors the operational state of each port in the specified LAG. When one or more of the ports enter the operational down state, the event is considered to be set. When all the ports enter the operational up state, the event is considered to be clear. As ports enter the operational up state, any previous set threshold that represents more down ports is considered cleared, while the event is considered to be set.
Multiple unique lag-port-down event nodes can be configured within the priority-event node up to the maximum of 32 events.
The lag-port-down command can reference an arbitrary LAG. The lag-id does have to already exist within the system. The operational state of the lag-port-down event will indicate:
-
Set – non-existent
-
Set – one port down
-
Set – two ports down
-
Set – three ports down
-
Set – four ports down
-
Set – five ports down
-
Set – six ports down
-
Set – seven ports down
-
Set – eight ports down
-
Cleared – all ports up
When the lag-id is created, or a port in lag-id becomes operationally up or down, the event operational state must be updated appropriately.
When one or more of the LAG composite ports enters the operationally down state or the lag-id is deleted or does not exist, the event is considered to be set. When an event transitions from clear to set, the set is processed immediately and must be reflected in the associated virtual router instances in-use priority value. As the event transitions from clear to set, a hold-set timer is loaded with the value configured by the events hold-set command. This timer prevents the event from clearing until it expires, damping the effect of event flapping. If the event clears and becomes set again before the hold-set timer expires, the timer is reset to the hold-set value, extending the time before another clear can take effect.
The lag-port-down event is considered to have a tiered event set state. While the priority impact per number of ports down is totally configurable, as more ports go down, the effect on the associated virtual router instances in-use priority is expected to increase (lowering the priority). When each configured threshold is crossed, any higher thresholds are considered further event sets and are processed immediately with the hold-set timer reset to the configured value of the hold-set command. As the thresholds are crossed in the opposite direction (fewer ports down then previously), the priority effect of the event is not processed until the hold-set timer expires. If the number of ports down threshold again increases before the hold-set timer expires, the timer is only reset to the hold-setvalue if the number of ports down is equal to or greater than the threshold that set the timer.
The event contains number-down nodes that define the priority delta or explicit value to be used based on the number of LAG composite ports that are in the operationally down state. These nodes represent the event set thresholds. Not all port down thresholds must be configured. As the number of down ports increase, the number-down ports-down node that expresses a value equal to or less than the number of down ports describes the delta or explicit priority value to be applied.
The no form of the command deletes the specific LAG monitoring event. The event can be removed at anytime. When the event is removed, the in-use priority of all associated virtual router instances must be reevaluated. The events hold-set timer has no effect on the removal procedure.
Default
no lag-port-down — No LAG priority control events are created.
Parameters
- lag-id
-
The LAG ID that the specific event is to monitor expressed as a decimal integer. The lag-id can only be monitored by a single event in this policy. The LAG may be monitored by multiple VRRP priority control policies. A port within the LAG and the LAG ID itself are considered to be separate entities. A composite port may be monitored with the port-down event while the lag-id the port is in is monitored by a lag-port-down event in the same policy.
Platforms
All
lag-usage-optimization
lag-usage-optimization
Syntax
[no] lag-usage-optimization
Context
[Tree] (config>router>pim lag-usage-optimization)
Full Context
configure router pim lag-usage-optimization
Description
This command enables the router’s usage of the LAG so traffic for a given multicast stream destined to an IP interface using the LAG is sent only to the forwarding complex that owns the LAG link on which it will actually be forwarded.
Changing the value causes the PIM protocol to be restarted.
If this optimization is disabled, the traffic is sent to all forwarding complexes that own at least one link in the LAG.
The no form of this command causes the traffic to be sent to all the forwarding complexes that own at least one link in the LAG.
Changes made for multicast hashing cause Layer 4 multicast traffic to not be hashed. This is independent of if lag-usage-optimization is enabled or disabled.
Using this command and the mc-ecmp-hashing-enabled command on mixed port speed LAGs is not recommended, because some groups may be forwarded incorrectly.
Default
no lag-usage-optimization
Platforms
All
lanext
lanext
Syntax
[no] lanext
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw lanext)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw lanext)
Full Context
configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range vrgw lanext
configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range vrgw lanext
Description
Commands in this context configure HLE parameters.
The no form of this command disables the vRGW parameters enabled in this context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext
Syntax
[no] lanext
Context
[Tree] (config>router>vrgw lanext)
Full Context
configure router vrgw lanext
Description
Commands in this context configure HLE parameters.
The no form of this command disables the context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext
Syntax
[no] lanext
Context
[Tree] (config>subscr-mgmt>vrgw lanext)
Full Context
configure subscriber-mgmt vrgw lanext
Description
Commands in this context configure subscriber management vRGW home HLE parameters.
The no form of this command disables the context.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext-bridge-id
lanext-bridge-id
Syntax
[no] lanext-bridge-id
Context
[Tree] (config>subscr-mgmt>acct-plcy>include lanext-bridge-id)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute lanext-bridge-id
Description
This command enables the system to include the HLE service’s bridge ID (Alc-Bridge-Id) in RADIUS accounting packets.
The no form of this command excludes the HLE service’s bridge ID (Alc-Bridge-Id) from RADIUS accounting packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext-device-type
lanext-device-type
Syntax
[no] lanext-device-type
Context
[Tree] (config>subscr-mgmt>acct-plcy>include lanext-device-type)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute lanext-device-type
Description
This command enables the system to include the HLE host’s device type (Alc-HLE-Device-Type) in RADIUS accounting packets.
The no form of this command excludes the HLE host’s device type (Alc-HLE-Device-Type) from RADIUS accounting packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext-route-distinguisher
lanext-route-distinguisher
Syntax
[no] lanext-route-distinguisher
Context
[Tree] (config>subscr-mgmt>acct-plcy>include lanext-route-distinguisher)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute lanext-route-distinguisher
Description
This command enables the system to include the HLE service’s EVPN route distinguisher (Alc-RD) in RADIUS accounting packets.
The no form of this command excludes the HLE service’s EVPN route distinguisher (Alc-RD) from RADIUS accounting packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext-route-target
lanext-route-target
Syntax
[no] lanext-route-target
Context
[Tree] (config>subscr-mgmt>acct-plcy>include lanext-route-target)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute lanext-route-target
Description
This command enables the system to include the HLE service’s EVPN route target (Alc-RT) in RADIUS accounting packets.
The no form of this command excludes the HLE service’s EVPN route target (Alc-RT) from RADIUS accounting packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lanext-vni
lanext-vni
Syntax
[no] lanext-vni
Context
[Tree] (config>subscr-mgmt>acct-plcy>include lanext-vni)
Full Context
configure subscriber-mgmt radius-accounting-policy include-radius-attribute lanext-vni
Description
This command enables the system to include the HLE service’s EVPN VXLAN VNI (Alc-Vxlan-VNI) in RADIUS accounting packets.
The no form of this command excludes the HLE service’s EVPN VXLAN VNI (Alc-Vxlan-VNI) from RADIUS accounting packets.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
last-member-query-interval
last-member-query-interval
Syntax
last-member-query-interval tenths-of-seconds
no last-member-query-interval
Context
[Tree] (config>service>vpls>mesh-sdp>mld-snooping last-member-query-interval)
[Tree] (config>service>vpls>mesh-sdp>igmp-snooping last-member-query-interval)
[Tree] (config>service>vpls>sap>igmp-snooping last-member-query-interval)
[Tree] (config>service>vpls>spoke-sdp>igmp-snooping last-member-query-interval)
[Tree] (config>service>vpls>sap>mld-snooping last-member-query-interval)
[Tree] (config>service>vpls>spoke-sdp>mld-snooping last-member-query-interval)
Full Context
configure service vpls mesh-sdp mld-snooping last-member-query-interval
configure service vpls mesh-sdp igmp-snooping last-member-query-interval
configure service vpls sap igmp-snooping last-member-query-interval
configure service vpls spoke-sdp igmp-snooping last-member-query-interval
configure service vpls sap mld-snooping last-member-query-interval
configure service vpls spoke-sdp mld-snooping last-member-query-interval
Description
This command configures the maximum response time used in group-specific queries sent in response to 'leave' messages, and is also the amount of time between two consecutive group-specific queries. This value may be tuned to modify the leave latency of the network. A reduced value results in reduced time to detect the loss of the last member of a group.
The configured last-member-query-interval is ignored when fast leave is enabled on the SAP or SDP.
The no form of this command reverts to the default value.
Default
last-member-query-interval 10
Parameters
- tenths-of-seconds
-
Specifies the frequency, in tenths of a second, at which query messages are sent.
Platforms
All
last-member-query-interval
Syntax
last-member-query-interval tenths-of-seconds
no last-member-query-interval
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>igmp-snp last-member-query-interval)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters igmp-snooping last-member-query-interval
Description
This command configures the maximum response time used in group-specific queries sent in response to leave messages, and is also the amount of time between two consecutive group-specific queries. This value may be tuned to modify the leave latency of the network. A reduced value results in reduced time to detect the loss of the last member of a group.
The configured interval is ignored when fast-leave is enabled on the SAP or SDP.
The no form of this command reverts to the default.
Default
last-member-query-interval 10
Parameters
- seconds
-
Specifies the frequency, in tenths of seconds, at which query messages are sent.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
last-member-query-interval
Syntax
last-member-query-interval interval
no last-member-query-interval
Context
[Tree] (config>service>pw-template>igmp-snooping last-member-query-interval)
Full Context
configure service pw-template igmp-snooping last-member-query-interval
Description
This command configures the maximum response time used in group-specific queries sent in response to 'leave’ messages, and is also the amount of time between 2 consecutive group-specific queries. This value may be tuned to modify the leave latency of the network. A reduced value results in reduced time to detect the loss of the last member of a group.
The configured last-member-query-interval is ignored when fast-leave is enabled on the SAP or SDP.
Default
last-member-query-interval 10
Parameters
- interval
-
Specifies the frequency, in tenths of seconds, at which query messages are sent.
Platforms
All
last-reported-delay-hold
last-reported-delay-hold
Syntax
last-reported-delay-hold seconds
no last-reported-delay-hold
Context
[Tree] (config>test-oam>link-meas>template last-reported-delay-hold)
Full Context
configure test-oam link-measurement measurement-template last-reported-delay-hold
Description
This command configures the timer that specifies the wait time before the last reported delay measurement is flushed after a link measurement test enters the operationally down state. The aging timer delays the flushing of the last reported delay metric to the routing engine.
This timer starts a countdown to zero when an administrative function causes the operational state of the test on that specific interface to transition from up to down. If the timer expires before the operational state transitions to up, the previously reported value is flushed. The Delay Measurement Last Reported indicates "Cleared”. The timestamp indicates the time of the clear event. The Triggered By indicates "Expired”. If the administrative state recovers to operationally up before the expiration of the timer, the previous reported value is not flushed.
The aging timer does not apply to failure conditions that do not affect the administrative state of the interface, for example interface failure or routing changes.
The no form of this command reverts to the default value.
Default
last-reported-delay-hold 86400
Parameters
- seconds
-
Specifies the delay measurement retention time, in seconds, after the interface on which it was collected is administratively disabled. If the configured value is reached, the last reported measurement is cleared.
A configured value of 0 indicates that the previous reported value is cleared without additional wait time.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
latency-event
latency-event
Syntax
latency-event rising-threshold threshold [falling-threshold threshold] [direction]
no latency-event
Context
[Tree] (config>saa>test latency-event)
Full Context
configure saa test latency-event
Description
Specifies that at the termination of an SAA test probe, the calculated latency event value is evaluated against the configured rising and falling latency event thresholds. SAA threshold events are generated as required.
Once the threshold (rising/falling) is crossed, it is disabled from generating additional events until the opposite threshold is crossed. If a falling-threshold is not supplied, the rising- threshold is re-enabled when it falls below the threshold after the initial crossing that generated the event.
The configuration of latency event thresholds is optional.
The no form of this command disables the latency event.
Parameters
- rising-threshold threshold
-
Specifies a rising threshold latency value, in milliseconds. When the test run is completed, the calculated latency value is compared to the configured latency rising threshold. If the test run latency value is greater than the configured rising threshold value then an SAA threshold event is generated. The SAA threshold event is tmnxOamSaaThreshold, logger application OAM, event #2101.
- falling-threshold threshold
-
Specifies a falling threshold latency value, in milliseconds. When the test run is completed, the calculated latency value is compared to the configured latency falling threshold. If the test run latency value is greater than the configured falling threshold value then an SAA threshold event is generated. The SAA threshold event is tmnxOamSaaThreshold, logger application OAM, event #2101.
- direction
-
Specifies the direction for OAM ping responses received for an OAM ping test run.
Platforms
All
layer-3
layer-3
Syntax
layer-3
Context
[Tree] (config>subscr-mgmt>shcv-policy layer-3)
Full Context
configure subscriber-mgmt shcv-policy layer-3
Description
Commands in this context configure SHCV behavior parameters for IES and VPRN services.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
layer-3-encap
layer-3-encap
Syntax
layer-3-encap [{ip-udp-shim | ip-gre | ip-udp-shim-sampled}] [create]
no layer-3-encap
Context
[Tree] (config>mirror>mirror-dest>encap layer-3-encap)
Full Context
configure mirror mirror-dest encap layer-3-encap
Description
This command specifies the format of the routable encapsulation to add to each copied packet. Layer 3 encapsulation takes precedence over Ethernet encapsulation configuration in an LI source. No changes are allowed to the Layer 3 encapsulation once a gateway is configured.
The no form of this command removes the routable encapsulation.
Default
no layer-3-encap
Parameters
- ip-udp-shim
-
Specifies that the type of Layer 3 encapsulation is an IPv4 header, UDP header, and LI shim header added to the mirrored packets.
- ip-gre
-
Specifies that the type of Layer 3 encapsulation is an IPv4 header and GRE header added to the mirrored packets. This encapsulation type is only supported with mirror-type ip-only.
- ip-udp-shim-sampled
-
Specifies that the type of Layer 3 encapsulation is an IPv4 header, UDP header, and a mirror shim header added to the mirrored packets providing direction, mirror type, filter action, interface type, and interface value.
- create
-
Creates a Layer 3 encapsulation.
Platforms
All
layer-3-encap
Syntax
layer-3-encap [ip-udp-shim | ip-gre]
no layer-3-encap
Context
[Tree] (config>li>mirror-dest-template layer-3-encap)
Full Context
configure li mirror-dest-template layer-3-encap
Description
This command specifies the format of the routable encapsulation to add to each copied packet. Layer 3 encapsulation takes precedence over Ethernet encapsulation configuration in an LI source. No changes are allowed to the Layer 3 encapsulation after a gateway is configured.
The no form of this command disables Layer 3 encapsulation.
Parameters
- ip-udp-shim
-
Specifies that the type of Layer 3 encapsulation is an IPv4 header, UDP header, and LI-Shim.
- ip-gre
-
Specifies that the type of Layer 3 encapsulation is an IPv4 GRE.
Platforms
All
lbl-eth-or-ip-l4-teid
lbl-eth-or-ip-l4-teid
Syntax
lbl-eth-or-ip-l4-teid
no lbl-eth-or-ip-l4-teid
Context
[Tree] (config>service>vpls>load-balancing lbl-eth-or-ip-l4-teid)
[Tree] (config>service>epipe>load-balancing lbl-eth-or-ip-l4-teid)
Full Context
configure service vpls load-balancing lbl-eth-or-ip-l4-teid
configure service epipe load-balancing lbl-eth-or-ip-l4-teid
Description
This command enables hashing of MPLS Ethernet and MPLS IP packets received on the Epipe and VPLS service SAP using the MPLS labels, the inner IP addresses, the port numbers, and the GTP TEID field, if read by the system. This capability is supported on FP4- and FP5-based line cards.
The no form of this command disables hashing.
Default
no lbl-eth-or-ip-l4-teid
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lbm-svc-act-responder
lbm-svc-act-responder
Syntax
[no] lbm-svc-act-responder
Context
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep lbm-svc-act-responder)
[Tree] (config>service>epipe>sap>eth-cfm>mep lbm-svc-act-responder)
Full Context
configure service epipe spoke-sdp eth-cfm mep lbm-svc-act-responder
configure service epipe sap eth-cfm mep lbm-svc-act-responder
Description
This command enables the MEP to process service activation streams encapsulated in ETH-CFM LBM frames that are directed to the MEP. The MEP will be allocated additional resources to rapidly respond to a high-speed stream of LBM messages.
A MEP created with this option will not validate any TLVs, will not validate the ETH-LBM MAC Address, and will not increment or compute any loopback statistics. Statistical computation and reporting is the responsibility of the test head-end. The ETH-CFM level of the high speed ETH-LBM stream must match the level of a MEP configured with this command. The high-speed stream must not target an ETH-CFM level that is not explicitly configured with this option. MEPs act as boundaries for lower levels, below the configured MEP level values. Those boundary levels do not inherit this function.
When the service activation test is complete, the MEP may be returned to standard processing by removing this command. If there is available bandwidth, the MEP will respond to other ETH-CFM PDUs, such as ETH-DMM marker packets, using standard processing.
The interaction between this command and the tools perform service id service-id loopback eth command must be carefully considered. It is recommended that either the lbm-svc-act-responder or the tools perform service id service-id loopback eth command be used at any given time within a service. If both commands must be configured, and the target reflection point is the MAC Swap Loopback function, the inbound stream of data must not include ETH-CFM traffic that is equal to or lower than the domain level of any configured MEP which would otherwise extract and process the ETH-CFM message. If the reflection target is a MEP configured with the lbm-svc-act-responder option, the mode (ingress or egress) of the SAP or SDP specified with this tools command and the MEP direction (up or down) must match when the functions are enabled on the same reflection point, and the domain level of the inbound ETH-LBM must be the same as that of the MEP configured with the lbm-svc-act-responder option. At no time should the two functions be conflicting with each other along the path of the stream. This conflict would lead to unpredictable and possibly destabilizing situations.
The no form of this command reverts to MEP LBM standard processing.
Default
no lbm-svc-act-responder
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lbm-svc-act-responder
Syntax
[no] lbm-svc-act-responder
Context
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep lbm-svc-act-responder)
[Tree] (config>service>vpls>sap>eth-cfm>mep lbm-svc-act-responder)
[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep lbm-svc-act-responder)
Full Context
configure service vpls spoke-sdp eth-cfm mep lbm-svc-act-responder
configure service vpls sap eth-cfm mep lbm-svc-act-responder
configure service vpls mesh-sdp eth-cfm mep lbm-svc-act-responder
Description
This command enables the MEP to process service activation streams encapsulated in ETH-CFM LBM frames that are directed to the MEP. The MEP will be allocated additional resources to rapidly respond to a high-speed stream of LBM messages. A MEP created with this option will not validate any TLVs, will not validate the ETH-LBM MAC Address, and will not increment or compute any loopback statistics. Statistical computation and reporting is the responsibility of the test head-end. The ETH-CFM level of the high speed ETH-LBM stream must match the level of a MEP configured with this command. It must not target any lower ETH-CFM level the MEP will terminate. When the service activation test is complete, the MEP may be returned to standard processing by removing this command. If there is available bandwidth, the MEP will respond to other ETH-CFM PDUs, such as ETH-DMM marker packets, using standard processing.
The interaction between this command and the tools perform service id service-id loopback eth command must be carefully considered. It is recommended that either the lbm-svc-act-responder or the tools perform service id service-id loopback eth command be used at any given time within a service. If both commands must be configured, and the target reflection point is the MAC Swap Loopback function, the inbound stream of data must not include ETH-CFM traffic that is equal to or lower than the domain level of any configured MEP which would otherwise extract and process the ETH-CFM message. If the reflection target is a MEP configured with the lbm-svc-act-responder option, the mode (ingress or egress) of the SAP or SDP specified with this tools command and the MEP direction (up or down) must match when the functions are enabled on the same reflection point, and the domain level of the inbound ETH-LBM must be the same as that of the MEP configured with the lbm-svc-act-responder option. At no time should the two functions be conflicting with each other along the path of the stream. This conflict would lead to unpredictable and possibly destabilizing situations.
The no form of this command reverts to MEP LBM standard processing.
Default
no lbm-svc-act-responder
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lbm-svc-act-responder
Syntax
[no] lbm-svc-act-responder
Context
[Tree] (config>router>if>eth-cfm>mep lbm-svc-act-responder)
Full Context
configure router interface eth-cfm mep lbm-svc-act-responder
Description
This command enables the MEP to process service activation streams encapsulated in ETH-CFM LBM frames that are directed to the MEP. The MEP will be allocated additional resources to rapidly respond to a high-speed stream of LBM messages. A MEP created with this option will not validate any TLVs, will not validate the ETH-LBM MAC Address, and will not increment or compute any loopback statistics. Statistical computation and reporting is the responsibility of the test head-end. The ETH-CFM level of the high speed ETH-LBM stream must match the level of a MEP configured with this command. It must not target any lower ETH-CFM level the MEP will terminate. When the service activation test is complete, the MEP may be returned to standard processing by removing this command. If there is available bandwidth, the MEP will respond to other ETH-CFM PDUs, such as ETH-DMM marker packets, using standard processing.
The interaction between this command and the tools perform service id service-id loopback eth command must be carefully considered. It is recommended that either the lbm-svc-act-responder or the tools perform service id service-id loopback eth command be used at any given time within a service. If both commands must be configured, and the target reflection point is the MAC Swap Loopback function, the inbound stream of data must not include ETH-CFM traffic that is equal to or lower than the domain level of any configured MEP which would otherwise extract and process the ETH-CFM message. If the reflection target is a MEP configured with the lbm-svc-act-responder option, the mode (ingress or egress) of the SAP or SDP specified with this tools command and the MEP direction (up or down) must match when the functions are enabled on the same reflection point, and the domain level of the inbound ETH-LBM must be the same as that of the MEP configured with the lbm-svc-act-responder option. At no time should the two functions be conflicting with each other along the path of the stream. This conflict would lead to unpredictable and possibly destabilizing situations.
The no form of this command reverts to MEP LBM standard processing.
Default
no lbm-svc-act-responder
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lbo
lbo
Syntax
lbo [0dB | -7.5dB | -15.0dB | -22.5dB]
Context
[Tree] (config>port>tdm lbo)
Full Context
configure port tdm lbo
Description
This command applies only to a DS-1 port configured with a 'long' buildout (see the buildout command). Specify the number of decibels the transmission signal decreases over the line.
For 'short' buildout the following values are valid:
lboNotApplicable — Not applicable
For 'long' buildout the following values are valid:
lbo0dB |
For 0 dB |
lboNeg7p5dB |
For -7.5 dB |
lboNeg15p0dB |
For -15.0 dB |
lboNeg22p5dB |
For -22.5 dB |
The default for 'short' build out is 'NotApplicable' while the default for 'long' buildout is 'lbo0dB'.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
lcp-force-ack-accm
lcp-force-ack-accm
Syntax
lcp-force-ack-accm {always | never}
no lcp-force-ack-accm
Context
[Tree] (config>service>vprn>l2tp>group>ppp lcp-force-ack-accm)
[Tree] (config>router>l2tp>group>ppp lcp-force-ack-accm)
[Tree] (config>router>l2tp>group>tunnel>ppp lcp-force-ack-accm)
[Tree] (config>service>vprn>l2tp>group>tunnel>ppp lcp-force-ack-accm)
Full Context
configure service vprn l2tp group ppp lcp-force-ack-accm
configure router l2tp group ppp lcp-force-ack-accm
configure router l2tp group tunnel ppp lcp-force-ack-accm
configure service vprn l2tp group tunnel ppp lcp-force-ack-accm
Description
This command enables the LCP Asynchronous Control Character Map (ACCM) configuration option. When enabled, the LCP ACCM configuration option is acknowledged during LCP negotiation between the LNS and the PPP client. The option is then ignored and no ACCM mapping is done.
By default, an L2TP tunnel inherits the configuration from the L2TP group CLI context.
The no form of this command disables the LCP ACCM configuration option.
Parameters
- always
-
Specifies to acknowledge the LCP ACCM configuration option, but not to perform ACCM mapping. This option overrides the group level configuration.
- never
-
Specifies to reject the LCP ACCM configuration option. This option overrides the group level configuration.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lcp-ignore-identifier
lcp-ignore-identifier
Syntax
[no] lcp-ignore-identifier
Context
[Tree] (config>subscr-mgmt>ppp-policy lcp-ignore-identifier)
Full Context
configure subscriber-mgmt ppp-policy lcp-ignore-identifier
Description
This command instructs BNG to ignore identifier values in Link Control Protocol (LCP) Echo Reply packets and keep the PPP session up.
The no form of this command instructs BNG not to ignore the identifier values, in which case, incorrect messages are discarded and the PPP session terminates because of echo timeout.
Default
lcp-ignore-identifier
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lcp-ignore-magic-numbers
lcp-ignore-magic-numbers
Syntax
lcp-ignore-magic-numbers {always | never}
no lcp-ignore-magic-numbers
Context
[Tree] (config>service>vprn>l2tp>group>ppp lcp-ignore-magic-numbers)
[Tree] (config>router>l2tp>group>tunnel>ppp lcp-ignore-magic-numbers)
[Tree] (config>router>l2tp>group>ppp lcp-ignore-magic-numbers)
[Tree] (config>service>vprn>l2tp>group>tunnel>ppp lcp-ignore-magic-numbers)
Full Context
configure service vprn l2tp group ppp lcp-ignore-magic-numbers
configure router l2tp group tunnel ppp lcp-ignore-magic-numbers
configure router l2tp group ppp lcp-ignore-magic-numbers
configure service vprn l2tp group tunnel ppp lcp-ignore-magic-numbers
Description
This command configures checking the magic number field in LCP Echo-Request and LCP Echo-Reply messages.
The no form of this command reverts to the default value.
Default
no lcp-ignore-magic-numbers
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lcp-ignore-magic-numbers
Syntax
[no] lcp-ignore-magic-numbers
Context
[Tree] (config>subscr-mgmt>ppp-policy lcp-ignore-magic-numbers)
Full Context
configure subscriber-mgmt ppp-policy lcp-ignore-magic-numbers
Description
This command enables the PPP session to stay established when an LCP peer magic number mismatch is detected.
By default, the PPP session is terminated when an LCP peer magic number mismatch is detected.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
ldap
ldap
Syntax
[no] ldap
Context
[Tree] (config>system>security ldap)
Full Context
configure system security ldap
Description
This command configures LDAP authentication parameters for the system.
The no form of this command de-configures the LDAP client from the SR OS.
Platforms
All
ldap-server
ldap-server
Syntax
ldap-server server-name
no ldap-server
Context
[Tree] (config>system>security>ldap>server ldap-server)
Full Context
configure system security ldap server ldap-server
Description
This command enables the LDAP server name or description.
The no form of this command disables the LDAP server name.
Parameters
- server-name
-
Specifies the name of the server, up to 32 characters.
Platforms
All
ldp
ldp
Syntax
[no] ldp
Context
[Tree] (config>service>vpls>bgp-evpn>mpls>auto-bind-tunnel>resolution-filter ldp)
[Tree] (config>service>vprn>bgp-ipvpn>mpls>auto-bind-tunnel>resolution-filter ldp)
[Tree] (config>service>vprn>bgp-evpn>mpls>auto-bind-tunnel>resolution-filter ldp)
[Tree] (config>service>epipe>bgp-evpn>mpls>auto-bind-tunnel>resolution-filter ldp)
Full Context
configure service vpls bgp-evpn mpls auto-bind-tunnel resolution-filter ldp
configure service vprn bgp-ipvpn mpls auto-bind-tunnel resolution-filter ldp
configure service vprn bgp-evpn mpls auto-bind-tunnel resolution-filter ldp
configure service epipe bgp-evpn mpls auto-bind-tunnel resolution-filter ldp
Description
This command enables LDP for the auto-bind tunnel resolution filter.
This command instructs BGP to search for an LDP LSP with a FEC prefix corresponding to the address of the BGP next hop.
The no form of this command removes the configuration.
Default
no ldp
Platforms
All
ldp
Syntax
[no] ldp
Context
[Tree] (config>router ldp)
Full Context
configure router ldp
Description
Commands in this context configure an LDP parameters.
To suspend the LDP protocol, use the shutdown command. Configuration parameters are not affected.
The no form of the command deletes the LDP protocol instance, removing all associated configuration parameters. The LDP instance must first be disabled with the shutdown command before being deleted.
Platforms
All
ldp
Syntax
[no] ldp
Context
[Tree] (debug>router ldp)
Full Context
debug router ldp
Description
Use this command to configure LDP debugging.
Platforms
All
ldp
Syntax
[no] ldp
Context
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop>resolution-filter ldp)
Full Context
configure router static-route-entry indirect tunnel-next-hop resolution-filter ldp
Description
This command enables the use of LDP-sourced tunnel entries in the TTM to resolve the associated static route next-hop.
The no form of this command disables the use of LDP-sourced tunnel entries to resolve static route next hops.
Default
no ldp
Platforms
All
ldp
Syntax
[no] ldp
Context
[Tree] (config>service>sdp ldp)
Full Context
configure service sdp ldp
Description
This command enables LDP-signaled LSPs on MPLS-encapsulated SDPs.
In MPLS SDP configurations either one or more LSP names can be specified or LDP can be enabled. The SDP ldp and lsp commands are mutually exclusive except if the mixed-lsp-mode option is also enabled. If an LSP is specified on an MPLS SDP, then LDP cannot be enabled on the SDP. To enable LDP on the SDP when an LSP is already specified, the LSP must be removed from the configuration using the no lsp lsp-name command or the mixed-lsp-mode option is also enabled.
Alternatively, if LDP is already enabled on an MPLS SDP, then an LSP cannot be specified on the SDP. To specify an LSP on the SDP, the LDP must be disabled. The LSP must have already been created in the config>router>mpls context with a valid far-end IP address. The above rules are relaxed when the mixed-lsp option is enabled on the SDP.
Default
no ldp (disabled)
Platforms
All
ldp
Syntax
[no] ldp
Context
[Tree] (config>router>bgp>next-hop-resolution>labeled-routes>transport-tunnel>family>resolution-filter ldp)
[Tree] (config>router>bgp>next-hop-resolution>shortcut-tunn>family>resolution-filter ldp)
Full Context
configure router bgp next-hop-resolution labeled-routes transport-tunnel family resolution-filter ldp
configure router bgp next-hop-resolution shortcut-tunnel family resolution-filter ldp
Description
This command enables LDP tunneling for next-hop resolution and specifies the LDP tunnels in the tunnel table corresponding to /32 IPv4 FECs and /128 IPv6 FECs.
The no form of this command disables LDP tunneling for next-hop resolution.
Platforms
All
ldp
Syntax
ldp
Context
[Tree] (config>service>vprn>auto-bind-tunnel>res-filter ldp)
Full Context
configure service vprn auto-bind-tunnel resolution-filter ldp
Description
Platforms
All
ldp-over-rsvp
ldp-over-rsvp
Syntax
ldp-over-rsvp [include | exclude]
Context
[Tree] (config>router>mpls>lsp ldp-over-rsvp)
[Tree] (config>router>mpls>lsp-template ldp-over-rsvp)
Full Context
configure router mpls lsp ldp-over-rsvp
configure router mpls lsp-template ldp-over-rsvp
Description
This command configures an LSP so that it can be used by the IGP to calculate its SPF tree.
When the ldp-over-rsvp option is also enabled in ISIS or OSPF, the IGP provides LDP with all ECMP IP next-hops and tunnel endpoints that it considers to be the lowest cost path to its destination.
IGP provides only the endpoints which are the closest to the destination in terms of IGP cost for each IP next-hop of a prefix. If this results in more endpoints than the ECMP value configured on the router, it will further prune the endpoints based on the lowest router-id and for the same router-id, it will select lowest interface-index first.
LDP then looks up the tunnel table to select the actual tunnels to the endpoint provided by IGP and further limits the endpoint selection to the ones which are the closest to destination across all the IP next-hops provided by IGP for a prefix. For each remaining endpoint, LDP selects a tunnel in a round-robin fashion until the router ECMP value is reached. For each endpoint, only tunnels with the same lowest metric are candidates. If more than one tunnel qualifies, the selection begins with the lowest tunnel-id.
Default
ldp-over-rsvp include
Platforms
All
ldp-over-rsvp
Syntax
[no] ldp-over-rsvp
Context
[Tree] (config>router>isis ldp-over-rsvp)
Full Context
configure router isis ldp-over-rsvp
Description
This command allows LDP over RSVP processing in IS-IS.
The no form of this command disables LDP over RSVP processing.
Default
no ldp-over-rsvp
Platforms
All
ldp-over-rsvp
Syntax
[no] ldp-over-rsvp
Context
[Tree] (config>router>ospf ldp-over-rsvp)
Full Context
configure router ospf ldp-over-rsvp
Description
This command allows LDP-over-RSVP processing in this OSPF instance.
Default
no ldp-over-rsvp
Platforms
All
ldp-shortcut
ldp-shortcut
Syntax
[no] ldp-shortcut
Context
[Tree] (config>router ldp-shortcut)
Full Context
configure router ldp-shortcut
Description
This command enables the resolution of IGP routes using LDP LSP across all network interfaces participating in the IS-IS and OSPF routing protocol in the system.
When LDP shortcut is enabled, LDP populates the routing table with next-hop entries corresponding to all prefixes for which it activated an LDP FEC. For a given prefix, two route entries are populated in the system routing table. One corresponds to the LDP shortcut next-hop and has an owner of LDP. The other one is the regular IP next-hop. The LDP shortcut next-hop always has preference over the regular IP next-hop for forwarding user packets and specified control packets over a given outgoing interface to the route next-hop.
All user and specified control packets for which the longest prefix match in RTM yields the FEC prefix will be forwarded over the LDP LSP.
When an IPv4 packet is received on an ingress network interface, a subscriber IES interface, or a regular IES interface, the lookup of the packet by the ingress forwarding engine will result in the packet being sent labeled with the label stack corresponding to the NHLFE of the LDP LSP when the preferred RTM entry corresponds to an LDP shortcut.
If the preferred RTM entry corresponds to an IP next-hop, the IPv4 packet is forwarded without a label.
When ECMP is enabled and multiple equal-cost next-hops exit for the IGP route, the ingress forwarding engine will spray the packets for this route based on hashing routine currently supported for IPv4 packets. When the preferred RTM entry corresponds to an LDP shortcut route, spraying will be performed across the multiple next-hops for the LDP FEC. The FEC next-hops can either be direct link LDP neighbors or T-LDP neighbors reachable over RSVP LSPs in the case of LDP-over-RSVP but not both.
When the preferred RTM entry corresponds to a regular IP route, spraying will be performed across regular IP next-hops for the prefix.
The no form of this command disables the resolution of IGP routes using LDP shortcuts.
Default
no ldp-shortcut
Platforms
All
ldp-sync
ldp-sync
Syntax
[no] ldp-sync
Context
[Tree] (config>service>vprn>static-route-entry>indirect ldp-sync)
Full Context
configure service vprn static-route-entry indirect ldp-sync
Description
This command extends the LDP synchronization feature to a static route. When an interface comes back up, it is possible that a preferred static route using the interface as next-hop for a given prefix is enabled before the LDP adjacency to the peer LSR comes up on this interface. In this case, traffic on an SDP that uses the static route for the far-end address would be black-holed until the LDP session comes up and the FECs exchanged.
This option when enabled delays the activation of the static route until the LDP session comes up over the interface and the ldp-sync-timer configured on that interface has expired
Default
no ldp-sync
Platforms
All
ldp-sync
Syntax
[no] ldp-sync
Context
[Tree] (config>router>static-route-entry>next-hop ldp-sync)
Full Context
configure router static-route-entry next-hop ldp-sync
Description
This command extends the LDP synchronization feature to a static route. When an interface comes back up, it is possible that a preferred static route using the interface as next-hop for a given prefix is enabled before the LDP adjacency to the peer LSR comes up on this interface. In this case, traffic on an SDP that uses the static route for the far-end address would be black-holed until the LDP session comes up and the FECs exchanged.
This option when enabled delays the activation of the static route until the LDP session comes up over the interface and the ldp-sync-timer configured on that interface has expired
Default
no ldp-sync
Platforms
All
ldp-sync-timer
ldp-sync-timer
Syntax
ldp-sync-timer seconds [end-of-lib]
no ldp-sync-timer
Context
[Tree] (config>router>if ldp-sync-timer)
Full Context
configure router interface ldp-sync-timer
Description
This command enables synchronization of an IGP and LDP. When a link is restored after a failure, the IGP sets the link cost to infinity and advertises it. The actual value advertised in OSPF is 0xFFFF (65535). The actual value advertised in IS-IS regular metric is 0x3F (63) and in IS-IS wide-metric is 0xFFFFFE (16777214). This feature is not supported on RIP interfaces.
If an interface belongs to both IS-IS and OSPF, a physical failure will cause both IGPs to advertise an infinite metric and to follow the IGP-LDP synchronization procedures. If only one IGP bounces on this interface or on the system, then only the affected IGP advertises the infinite metric and follows the IGP-LDP synchronization procedures.
Next, an LDP Hello adjacency is brought up with the neighbor. The LDP synchronization timer is started by the IGP when the LDP session to the neighbor is up over the interface. This is to allow time for the label-FEC bindings to be exchanged.
When the LDP synchronization timer expires, the link cost is restored and is readvertised. The IGP will announce a new best next hop and LDP will use it if the label binding for the neighbor’s FEC is available.
If the user changes the cost of an interface, the new value is advertised at the next flooding of link attributes by the IGP. However, if the LDP synchronization timer is still running, the new cost value will only be advertised after the timer expires. The new cost value will also be advertised after the user executes any of the following commands:
-
tools>perform>router>isis>ldp-sync-exit
-
tools>perform>router>ospf>ldp-sync-exit
-
config>router>if>no ldp-sync-timer
-
config>router>ospf>disable-ldp-sync
-
router>isis>disable-ldp-sync
If the user changes the value of the LDP synchronization timer parameter, the new value will take effect at the next synchronization event. If the timer is still running, it will continue to use the previous value.
If parallel links exist to the same neighbor, then the bindings and services should remain up as long as there is one interface that is up. However, the user-configured LDP synchronization timer still applies on the interface that failed and was restored. In this case, the router will only consider this interface for forwarding after the IGP re-advertises its actual cost value.
The LDP Sync Timer State is not always synchronized across to the standby CPM. Therefore, after an activity switch, the timer state might not be same as it was on the previously active CPM.
If the end-of-lib option is configured, then the system will start the LDP synchronization timer as usual. If the LDP End of LIB Typed Wildcard FEC messages are received for every FEC type negotiated for a given session to an LDP peer for that IGP interface, the ldp-sync-timer is terminated early and the IGP link cost is restored. If the ldp-sync-timer expires before the LDP End of LIB messages are received for every negotiated FEC type, then the system will restore the IGP link cost. The end-of-lib option is disabled by default.
The no form of this command disables IGP-LDP synchronization and deletes the configuration.
Default
no ldp-sync-timer
Parameters
- seconds
-
Specifies the time interval for the IGP-LDP synchronization timer.
- end-of-lib
-
Specifies that the system should terminate the ldp-sync-timer early if the LDP End of LIB Typed Wildcard FEC messages are received for every FEC type negotiated for a given session to an LDP peer for that IGP interface.
Platforms
All
ldp-treetrace
ldp-treetrace
Syntax
ldp-treetrace {prefix ip-prefix/mask} [ downstream-map-tlv {dsmap | ddmap}] [fc fc-name [profile {in | out}]] [max-path max-paths] [max-ttl ttl-value] [retry-count retry-count] [timeout timeout]
Context
[Tree] (oam ldp-treetrace)
Full Context
oam ldp-treetrace
Description
This command allows the user to perform a single run of the LDP ECMP OAM tree trace to discover all ECMP paths of an LDP FEC.
Parameters
- ip-prefix/mask
-
Specifies the address prefix and subnet mask of the target BGP IPv4 label route.
- downstream-map-tlv {dsmap | ddmap}
-
Specifies which format of the downstream mapping TLV to use in the LSP trace packet. The DSMAP TLV is the original format in RFC 4379 (obsoleted by RFC 8029). The DDMAP is the new enhanced format specified in RFC 6424 and RFC 8029.
- fc-name
-
Specifies the FC and profile parameters are used to indicate the forwarding class and profile of the MPLS echo request packet.
When an MPLS echo request packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the specified FC and profile parameter values. The marking of the packet's EXP is dictated by the LSP-EXP mappings on the outgoing interface.
When the MPLS echo request packet is received on the responding node, The FC and profile parameter values are dictated by the LSP-EXP mappings of the incoming interface.
When an MPLS echo reply packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the FC and profile parameter values determined by the classification of the echo request packet, which is being replied to, at the incoming interface. The marking of the packet's EXP is dictated by the LSP-EXP mappings on the outgoing interface. The ToS byte is not modified. ldp-treetrace Request Packet and Behavior summarizes this behavior.
Table 2. ldp-treetrace Request Packet and Behavior CPM (sender node)
Echo request packet:
-
packet {tos=1, fc1, profile1}
-
fc1 and profile1 are as entered by user in OAM command or default values
-
tos1 as per mapping of {fc1, profile1} to IP precedence in network egress QoS policy of outgoing interface
Outgoing interface (sender node)
Echo request packet:
-
pkt queued as {fc1, profile1}
-
ToS field=tos1 not remarked
-
EXP=exp1, as per mapping of {fc1, profile1} to EXP in network egress QoS policy of outgoing interface
Incoming interface (responder node)
Echo request packet:
-
packet {tos1, exp1}
-
exp1 mapped to {fc2, profile2} as per classification in network QoS policy of incoming interface
CPM (responder node)
Echo reply packet:
-
packet {tos=1, fc2, profile2}
Outgoing interface (responder node)
Echo reply packet:
-
pkt queued as {fc2, profile2}
-
ToS filed= tos1 not remarked (reply inband or out-of-band)
-
EXP=exp2, if reply is inband, remarked as per mapping of {fc2, profile2} to EXP in network egress QoS policy of outgoing interface
Incoming interface (sender node)
Echo reply packet:
-
packet {tos1, exp2}
-
exp2 mapped to {fc1, profile1} as per classification in network QoS policy of incoming interface
-
- profile {in | out}
-
Specifies the profile state of the MPLS echo request packet.
- max-paths
-
Specifies the maximum number of paths for a ldp-treetrace test, expressed as a decimal integer.
- ttl-value
-
Specifies the maximum TTL value in the MPLS label for the LSP trace test, expressed as a decimal integer.
- retry-count
-
Specifies the maximum number of consecutive MPLS echo requests, expressed as a decimal integer that do not receive a reply before the trace operation fails for a given TTL.
- timeout
-
Specifies the time, in seconds, used to override the default time out value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.
Platforms
All
Output
The following output is an example of treetrace prefix information.
Output Example*A:Dut-A# oam ldp-treetrace prefix 10.20.1.6/32
ldp-treetrace for Prefix 10.20.1.6/32:
127.0.0.1, ttl = 3 dst = 127.1.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
127.0.0.1, ttl = 3 dst = 127.2.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
ldp-treetrace discovery state: Done
ldp-treetrace discovery status: ' OK '
Total number of discovered paths: 2
Total number of failed traces: 0
ldp-treetrace
Syntax
[no] ldp-treetrace
Context
[Tree] (config>test-oam ldp-treetrace)
Full Context
configure test-oam ldp-treetrace
Description
This command creates the context to configure the LDP ECMP OAM tree trace which consists of an LDP ECMP path discovery and an LDP ECMP path probing features.
The no form of this command deletes the configuration for the LDP ECMP OAM tree discovery and path probing under this context.
Platforms
All
Output
The following is an example LDP treetrace information.
Output Example Over a Numbered IP Interface*A:Dut-B# oam ldp-treetrace prefix 10.20.1.5/32
ldp-treetrace for Prefix 10.20.1.5/32:
10.10.131.2, ttl = 2 dst = 127.1.0.253 rc = EgressRtr status = Done
Hops: 11.1.0.2
10.10.132.2, ttl = 2 dst = 127.1.0.255 rc = EgressRtr status = Done
Hops: 11.1.0.2
10.10.131.2, ttl = 2 dst = 127.2.0.255 rc = EgressRtr status = Done
Hops: 11.2.0.2
10.10.132.2, ttl = 2 dst = 127.2.0.253 rc = EgressRtr status = Done
Hops: 11.2.0.2
ldp-treetrace discovery state: Done
ldp-treetrace discovery status: ' OK '
Total number of discovered paths: 4
Total number of failed traces: 0
Output Example Over an Unnumbered IP Interface
*A:Dut-A# oam ldp-treetrace prefix 10.20.1.6/32 downstream-map-tlv dsmap
ldp-treetrace for Prefix 10.20.1.6/32:
127.0.0.1, ttl = 3 dst = 127.1.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
127.0.0.1, ttl = 3 dst = 127.2.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
ldp-treetrace discovery state: Done
ldp-treetrace discovery status: ' OK '
Total number of discovered paths: 2
Total number of failed traces: 0
ldp-treetrace
Syntax
[no] ldp-treetrace
Context
[Tree] (debug>oam ldp-treetrace)
Full Context
debug oam ldp-treetrace
Description
This command enables debugging for OAM LDP treetrace.
The no form of this command disables the debugging.
Platforms
All
ldra
ldra
Syntax
ldra
no ldra
Context
[Tree] (config>service>vpls>sap>dhcp6 ldra)
Full Context
configure service vpls sap dhcp6 ldra
Description
This command enables LDRA.
The no form of this command disables LDRA.
Default
no ldra
Platforms
All
leak
leak
Syntax
leak [ip-address]
no leak
Context
[Tree] (debug>router>isis leak)
Full Context
debug router isis leak
Description
This command enables debugging for IS-IS leaks.
The no form of the command disables debugging.
Parameters
- ip-address
-
When specified, only the specified address is debugged for IS-IS leaks.
Platforms
All
leak
Syntax
leak [ip-address]
no leak
Context
[Tree] (debug>router>ospf leak)
[Tree] (debug>router>ospf3 leak)
Full Context
debug router ospf leak
debug router ospf3 leak
Description
This command enables debugging for OSPF leaks.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address to debug OSPF leaks.
Platforms
All
leak-export
leak-export
Syntax
leak-export plcy-or-long-expr [plcy-or-expr [plcy-or-expr]]
no leak-export
Context
[Tree] (config>router leak-export)
Full Context
configure router leak-export
Description
This command associates up to four policies to control the leaking of GRT routes into the associated VPRN.
If a route is evaluated and the action is accepted, that route is subject leaking into an associated VPRN instance, assuming the route is fully resolved and active.
This process creates the pool of routes that can be leaked. Within each VPRN, a corresponding import-grt policy must be configured to import select routes into that specific VPRN instance.
The no form of this command removes all route leaking policy associations and effectively disables the leaking of GRT routes into associated VPRNs.
Parameters
- plcy-or-long-expr
-
Specifies the route policy name, up to 64 characters or a policy logical expression, up to 255 characters.
- plcy-or-expr
-
Specifies the route policy name, up to 64 characters or a policy logical expression, up to 64 characters long. A maximum of four policy names or policy logical expressions can be specified in a single statement.
Platforms
All
leak-export-limit
leak-export-limit
Syntax
[no] leak-export-limit [value]
Context
[Tree] (config>router leak-export-limit)
Full Context
configure router leak-export-limit
Description
This command sets a maximum limit on the number of GRT routes that can be leaked into VPRN instances.
The no form of this command resets the leak-export-limit to its default value of 5.
Default
leak-export-limit 5
Parameters
- value
-
Specifies the maximum number of eligible GRT routes that can be leaked into VPRN instances.
Platforms
All
leak-import
leak-import
Syntax
leak-import plcy-or-long-expr [plcy-or-expr]
no leak-import
Context
[Tree] (config>service>vprn>bgp>rib-management>label-ipv6 leak-import)
[Tree] (config>service>vprn>bgp>rib-management>ipv4 leak-import)
[Tree] (config>service>vprn>bgp>rib-management>label-ipv4 leak-import)
[Tree] (config>service>vprn>bgp>rib-management>ipv6 leak-import)
Full Context
configure service vprn bgp rib-management label-ipv6 leak-import
configure service vprn bgp rib-management ipv4 leak-import
configure service vprn bgp rib-management label-ipv4 leak-import
configure service vprn bgp rib-management ipv6 leak-import
Description
This command configures route policies that control the importation of leak-eligible routes from the BGP RIB of another routing instance into the unlabeled-IPv4, unlabeled-IPv6, labeled-IPv4, or labeled-IPv6 RIB of the VPRN instance. To leak a route from one routing instance to another, the origin and destination RIB types must be the same; for example, it is not possible to leak a route from an unlabeled-IPv4 RIB of a VPRN into the labeled-IPv4 RIB of the base router.
The leak-import command can reference up to 15 objects, where each object is either a policy logical expression or the name of a single policy. The objects are evaluated in the specified order to determine the final action to accept or reject the route.
Only one of the 15 objects referenced by the leak-import command can be a policy logical expression consisting of policy names (enclosed in square brackets) and logical operators (AND, OR, NOT). The first of the 15 objects has a maximum length of 255 characters while the remaining 14 objects have a maximum length of 64 characters each.
When a leak-import policy is not specified, no BGP routes from other routing instances are leaked into the VPRN BGP RIB.
The no form of this command removes the policy association.
Default
no leak-import
Parameters
- plcy-or-long-expr
-
Specifies the route policy name (up to 64 characters) or a policy logical expression (up to 255 characters). Allowed values are any string of characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
- plcy-or-expr
-
Specifies the route policy name (up to 64 characters) or a policy logical expression (up to 255 characters). Allowed values are any string of characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
leak-import
Syntax
leak-import plcy-or-long-expr [plcy-or-expr]
no leak-import
Context
[Tree] (config>router>bgp>rib-management>ipv6 leak-import)
[Tree] (config>router>bgp>rib-management>label-ipv4 leak-import)
[Tree] (config>router>bgp>rib-management>ipv4 leak-import)
Full Context
configure router bgp rib-management ipv6 leak-import
configure router bgp rib-management label-ipv4 leak-import
configure router bgp rib-management ipv4 leak-import
Description
This command configures the router to specify route policies that control the importation of leak-eligible routes from the BGP RIB of another routing instance into the unlabeled-IPv4, unlabeled-IPv6, or labeled-IPv4 RIB of the base router. To leak a route from one routing instance to another, the origin and destination RIB types must be the same; for example, it is not possible to leak a route from an unlabeled-IPv4 RIB of a VPRN into the labeled-IPv4 RIB of the base router.
The leak-import command can reference up to 15 objects, where each object is either a policy logical expression or the name of a single policy. The objects are evaluated in the specified order to determine final action to accept or reject the route.
Only one of the 15 objects referenced by the leak-import command can be a policy logical expression consisting of policy names (enclosed in square brackets) and logical operators (AND, OR, NOT). The first of the 15 objects has a maximum length of 255 characters while the remaining 14 objects have a maximum length of 64 characters each.
When a leak-import policy is not specified, no BGP routes from other routing instances are leaked into the base router BGP RIB.
The no form of this command removes the policy association.
Default
no leak-import
Parameters
- plcy-or-long-expr
-
Specifies up to 14 route policy names (up to 64 characters long) or a policy logical expression (up to 255 characters long). Allowed values are any string of characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
- plcy-or-expr
-
The route policy name (up to 64 characters long) or a policy logical expression (up to 64 characters long). Allowed values are any string of characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
learn-ap-mac
learn-ap-mac
Syntax
learn-ap-mac [delay-auth]
no learn-ap-mac
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw learn-ap-mac)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw learn-ap-mac)
Full Context
configure service ies subscriber-interface group-interface wlan-gw learn-ap-mac
configure service vprn subscriber-interface group-interface wlan-gw learn-ap-mac
Description
This command enables the sending of ARP or ND packets on the WLAN-GW GRE tunnel for certain events. The target IP address in the ARP/ND packet is the endpoint IP address of the AP. The ARP/ND response from the AP should contain the AP MAC, which subsequently can be reported in a called-station-id message. When enabled, a message will be sent for following events:
-
CPM: Mobility to an AP for which the AP-MAC is not yet known
-
CPM: RS-triggered authentication on an AP for which the AP-MAC is not yet known
-
ISA: Any mobility event
-
ISA: Any authentication where the AP-MAC is not yet known (for example, from a RADIUS proxy cache or a DHCP circuit-id). If the optional keyword delay-auth is configured, then the authentication will be delayed until the ARP/ND is answered or timed out, after which the AP-MAC can be included in the authentication.
This configuration is ignored for L2-AP and L2TPv3 access.
Parameters
- delay-auth
-
Specifies that authentication will be delayed until the ARP/ND is answered or timed out, after which the AP-MAC can be included in the authentication.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
learn-dynamic
learn-dynamic
Syntax
[no] learn-dynamic
Context
[Tree] (config>service>vprn>if>vpls>evpn>arp learn-dynamic)
[Tree] (config>service>ies>if>vpls>evpn>nd learn-dynamic)
[Tree] (config>service>vprn>if>vpls>evpn>nd learn-dynamic)
[Tree] (config>service>ies>if>vpls>evpn>arp learn-dynamic)
Full Context
configure service vprn interface vpls evpn arp learn-dynamic
configure service ies interface vpls evpn nd learn-dynamic
configure service vprn interface vpls evpn nd learn-dynamic
configure service ies interface vpls evpn arp learn-dynamic
Description
This command controls whether the ARP or ND frames received on EVPN binds are used to learn dynamic ARP and ND entries in the ARP/ND table.
The no form of the command reverts to the default.
Default
learn-dynamic
Platforms
All
learn-l2tp-cookie
learn-l2tp-cookie
Syntax
learn-l2tp-cookie {if-match | never | always} [cookie hex string]
no learn-l2tp-cookie
Context
[Tree] (config>service>ies>sub-if>grp-if>wlan-gw learn-l2tp-cookie)
[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw learn-l2tp-cookie)
Full Context
configure service ies subscriber-interface group-interface wlan-gw learn-l2tp-cookie
configure service vprn subscriber-interface group-interface wlan-gw learn-l2tp-cookie
Description
This command specifies when this system will learn the cookie from L2TP tunnels terminating on this interface. Learning the cookie means that the value of the octets 3-8 of the cookie is interpreted as an access point’s MAC address, and used as such, for example in the Called-Station-Id attribute of RADIUS Interim-Update messages.
Parameters
- if-match
-
Specifies that the cookie is interpreted only if the value of the first two octets of the cookie is equal to the value of the object tmnxWlanGwSoftGreIfL2tpCookie.
- cookie hex string
-
Specifies the value used to compare the first two bytes of the cookie. This parameter is only valid if if-match is configured.
- never
-
Specifies that the cookie value will always be ignored.
- always
-
Always learn the AP-MAC from the cookie, regardless of the value of the first two bytes.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lease-hold-time
lease-hold-time
Syntax
lease-hold-time [days days] [hrs hours] [min minutes] [sec seconds]
no lease-hold-time
Context
[Tree] (config>service>vprn>dhcp>server lease-hold-time)
[Tree] (config>router>dhcp>server lease-hold-time)
[Tree] (config>router>dhcp6>server lease-hold-time)
[Tree] (config>service>vprn>dhcp6>server lease-hold-time)
Full Context
configure service vprn dhcp local-dhcp-server lease-hold-time
configure router dhcp local-dhcp-server lease-hold-time
configure router dhcp6 local-dhcp-server lease-hold-time
configure service vprn dhcp6 local-dhcp-server lease-hold-time
Description
This command configures the time to remember this lease and is applicable for unsolicited release conditions such as lease timeout if the lease-hold-time-for command is set to the default value no solicited-release and is additionally applicable for normal solicited releases from DHCP clients if the lease-hold-time-for command is set to solicited-release.
The no form of this command reverts to the default.
Default
lease-hold-time sec 0
Parameters
- lease-hold-time
-
Specifies the amount of time to remember the lease.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-hold-time-for
lease-hold-time-for
Syntax
[no] lease-hold-time-for
Context
[Tree] (config>service>vprn>dhcp>server lease-hold-time-for)
[Tree] (config>router>dhcp>server lease-hold-time-for)
[Tree] (config>service>vprn>dhcp6>server lease-hold-time-for)
[Tree] (config>router>dhcp6>server lease-hold-time-for)
Full Context
configure service vprn dhcp local-dhcp-server lease-hold-time-for
configure router dhcp local-dhcp-server lease-hold-time-for
configure service vprn dhcp6 local-dhcp-server lease-hold-time-for
configure router dhcp6 local-dhcp-server lease-hold-time-for
Description
Commands in this context configure lease-hold-time-for parameters which define additional types of lease or triggers that cause system to hold up leases.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-populate
lease-populate
Syntax
lease-populate [nbr-of-leases]
lease-populate [nbr-of-leases] l2-header [mac ieee-address]
no lease-populate
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp lease-populate)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp lease-populate)
[Tree] (config>service>ies>sub-if>grp-if>dhcp lease-populate)
[Tree] (config>service>vprn>if>dhcp lease-populate)
[Tree] (config>service>vpls>sap>dhcp lease-populate)
[Tree] (config>service>vprn>sub-if>dhcp lease-populate)
[Tree] (config>service>ies>if>dhcp lease-populate)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp lease-populate
configure service vprn subscriber-interface group-interface dhcp lease-populate
configure service ies subscriber-interface group-interface dhcp lease-populate
configure service vprn interface dhcp lease-populate
configure service vpls sap dhcp lease-populate
configure service vprn subscriber-interface dhcp lease-populate
configure service ies interface dhcp lease-populate
Description
Commands in this context configure IPoE host parameters.
For VPLS, DHCP snooping must be explicitly enabled (using the snoop command) at all points where DHCP messages requiring snooping enter the VPLS instance (both from the DHCP server and from the subscribers). Lease state information is extracted from snooped DHCP ACK messages to populate lease state table entries for the SAP.
The optional nbr-of-leases parameter defines the number lease state table entries allowed.
-
for this SAP in case of a VPLS service
-
for this interface in case of an IES or VPRN interface
-
for each SAP in case of an IES or VPRN group-interface
-
for this interface in case of an IES or VPRN retail subscriber-interface
If the nbr-of-leases parameter is omitted, only a single entry is allowed. Once the maximum number of entries has been reached, subsequent lease state entries are not allowed and subsequent DHCP ACK messages are discarded.
The retained lease state information representing dynamic hosts may be used to:
-
Populate a SAP based anti-spoof filter table to provide dynamic anti-spoof filtering. If the system is unable to populate the dynamic host information in the anti-spoof filter table on the SAP, the DHCP ACK message must be discarded without adding new lease state entry or updating an existing lease state entry.
-
Populate the system’s ARP cache based on the arp-populate configuration. Applicable to IES and VPRN interfaces or group-interfaces.
-
Populate managed entries into a VPLS forwarding database. VPLS forwarding database population is an implicit feature that automatically places the dynamic host’s MAC address into the VPLS FDB. When a dynamic host’s MAC address is placed in the lease state table, it will automatically be populated into the VPLS forwarding database associated with the SAP on which the host is learned. The dynamic host MAC address will override any static MAC entries using the same MAC and prevent dynamic learning of the MAC on another interface. Existing static MAC entries with the same MAC address as the dynamic host are marked as inactive but not deleted. If all entries in the lease state table associated with the MAC address are removed, the static MAC may be populated. New static MAC definitions for the VPLS instance may be created while a dynamic host exists associated with the static MAC address.
-
Generate dynamic ARP replies if arp-reply-agent is enabled. Applicable to VPLS service SAPs
The no form of this command reverts to the default.
Parameters
- nbr-of-leases
-
Specifies the number of DHCPv4 leases allowed.
- l2-header
-
Indicates a mode of operation where anti-spoof entry associated with the given DHCP state is created based on the src-mac address from the Layer 2 header of the DHCP request message. The Layer 2 header flag is not set by default. This parameter is only applicable for group interfaces.
- mac
-
Specifies that the provisioned ieee-address is used in the anti-spoofing entries for this SAP. The parameter may be changed mid-session. Existing sessions will not be re-programmed unless a tools>perform>subscriber-mgmt>remap-lease-state command is issued for the lease. This parameter is only applicable for group interfaces.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface dhcp lease-populate
- configure service ies subscriber-interface group-interface dhcp lease-populate
- configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp lease-populate
- configure service vprn subscriber-interface dhcp lease-populate
All
- configure service ies interface dhcp lease-populate
- configure service vpls sap dhcp lease-populate
- configure service vprn interface dhcp lease-populate
lease-populate
Syntax
lease-populate [nbr-of-leases]
lease-populate [nbr-of-leases] route-populate [pd] na [ta]
lease-populate [nbr-of-leases] route-populate pd [na] [ta] [exclude]
lease-populate [nbr-of-leases] route-populate [pd] [na] ta
no lease-populate
Context
[Tree] (config>service>ies>if>ipv6>dhcp6-relay lease-populate)
Full Context
configure service ies interface ipv6 dhcp6-relay lease-populate
Description
This command specifies the maximum number of DHCPv6 lease states allocated by the DHCPv6 relay function, allowed on this interface.
Optionally, by specifying route-populate parameter, system could:
-
Create routes based on the IA_PD/IA_NA/IA_TA prefix option in relay-reply message.
-
Create black hole routes based on OPTION_PD_EXCLUDE in IA_PD in relay-reply message.
These routes could be redistributed into IGP/BGP by using route-policy, following protocol types that could be used in "from protocol”:
-
dhcpv6-pd
-
dhcpv6-na
-
dhcpv6-ta
-
dhcpv6-pd-excl
Parameters
- nbr-of-leases
-
Defines the number lease state table entries allowed for this interface. If this parameter is omitted, only a single entry is allowed. Once the maximum number of entries has been reached, subsequent lease state entries are not allowed and subsequent DHCPv6 REPLY messages are discarded.
- route-populate
-
Specifies the route populate parameter.
Platforms
All
lease-populate
Syntax
lease-populate [nbr-of-leases]
lease-populate [nbr-of-leases] route-populate [pd] na [ta]
lease-populate [nbr-of-leases] route-populate pd [na] [ta] [exclude]
lease-populate [nbr-of-leases] route-populate [pd] [na] ta
no lease-populate
Context
[Tree] (config>service>ies>if>ipv6>dhcp-relay lease-populate)
Full Context
configure service ies interface ipv6 dhcp-relay lease-populate
Description
This command specifies the maximum number of DHCPv6 lease states allocated by the DHCPv6 relay function, allowed on this interface.
Optionally, by specifying "route-populate” parameter, system could:
-
Create routes based on the IA_PD/IA_NA/IA_TA prefix option in relay-reply message.
-
Create black hole routes based on OPTION_PD_EXCLUDE in IA_PD in relay-reply message.
These routes could be redistributed into IGP/BGP by using route-policy, following protocol types that could be used in "from protocol”:
-
dhcpv6-pd
-
dhcpv6-na
-
dhcpv6-ta
-
dhcpv6-pd-excl
Parameters
- nbr-of-entries
-
Defines the number lease state table entries allowed for this interface. If this parameter is omitted, only a single entry is allowed. Once the maximum number of entries has been reached, subsequent lease state entries are not allowed and subsequent DHCPv6 ACK messages are discarded.
- route-populate
-
Specifies the route populate parameter.
lease-query
lease-query
Syntax
lease-query [max-retry Max nbr of retries]
no lease-query
Context
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client lease-query)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client lease-query)
Full Context
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client lease-query
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client lease-query
Description
This command enables lease-query. If this is specified the dhcp6-client will retrieve any existing addresses when becoming active. The lease-query is performed for all of the configured servers
The no form of this command disables lease-query.
Parameters
- Max nbr of retries
-
Specifies the maximum number of retries before the lease query assumes no existing subnets were allocated.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lease-rebind-time
lease-rebind-time
Syntax
lease-rebind-time [days days] [hrs hours] [min minutes] [sec seconds]
no lease-rebind-time
Context
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options lease-rebind-time)
[Tree] (config>router>dhcp>server>pool>options lease-rebind-time)
[Tree] (config>service>vprn>dhcp>server>pool>options lease-rebind-time)
Full Context
configure subscriber-mgmt local-user-db ipoe host options lease-rebind-time
configure router dhcp local-dhcp-server pool options lease-rebind-time
configure service vprn dhcp local-dhcp-server pool options lease-rebind-time
Description
This command configures the time the client transitions to a rebinding state for a DHCP client.
The no form of this command removes the time from the configuration.
Parameters
- lease-rebind-time
-
Specifies the lease rebind time.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-renew-time
lease-renew-time
Syntax
lease-renew-time [days days] [hrs hours] [min minutes] [sec seconds]
no lease-renew-time
Context
[Tree] (config>service>vprn>dhcp>server>pool>options lease-renew-time)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options lease-renew-time)
[Tree] (config>router>dhcp>server>pool>options lease-renew-time)
Full Context
configure service vprn dhcp local-dhcp-server pool options lease-renew-time
configure subscriber-mgmt local-user-db ipoe host options lease-renew-time
configure router dhcp local-dhcp-server pool options lease-renew-time
Description
This command configures the time the client transitions to a renew state for a DHCP client.
The no form of this command removes the time from the configuration.
Parameters
- lease-renew-time
-
Specifies the lease renew time.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-time
lease-time
Syntax
lease-time [days days] [hrs hours] [min minutes] [sec seconds]
no lease-time
Context
[Tree] (config>service>vprn>dhcp>server>pool>options lease-time)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options lease-time)
[Tree] (config>router>dhcp>server>pool>options lease-time)
Full Context
configure service vprn dhcp local-dhcp-server pool options lease-time
configure subscriber-mgmt local-user-db ipoe host options lease-time
configure router dhcp local-dhcp-server pool options lease-time
Description
This command configures the amount of time that the DHCP server grants to the DHCP client permission to use a specific IP address.
The no form of this command removes the lease time parameters from the configuration.
Parameters
- days
-
Specifies the number of days that the given IP address is valid.
- hours
-
Specifies the number of hours that the given IP address is valid.
- minutes
-
Specifies the number of minutes that the given IP address is valid.
- seconds
-
Specifies the number of seconds that the given IP address is valid.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-time
Syntax
lease-time [days days] [hrs hours] [min minutes] [sec seconds] [override]
no lease-time
Context
[Tree] (config>service>ies>if>dhcp>proxy-server lease-time)
[Tree] (config>service>ies>sub-if>grp-if>dhcp>proxy-server lease-time)
[Tree] (config>service>vprn>if>dhcp>proxy lease-time)
[Tree] (config>service>vprn>sub-if>grp-if>dhcp>proxy-server lease-time)
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>proxy lease-time)
[Tree] (config>service>vpls>sap>dhcp>proxy-server lease-time)
Full Context
configure service ies interface dhcp proxy-server lease-time
configure service ies subscriber-interface group-interface dhcp proxy-server lease-time
configure service vprn interface dhcp proxy-server lease-time
configure service vprn subscriber-interface group-interface dhcp proxy-server lease-time
configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp proxy-server lease-time
configure service vpls sap dhcp proxy-server lease-time
Description
This command defines the length of lease-time that is provided to DHCP clients. By default, the local-proxy-server always makes use of the lease time information provide by either a RADIUS or DHCP server.
The no form of this command disables the use of the lease-time command. The local-proxy-server will use the lease-time offered by either a RADIUS or DHCP server.
Default
lease-time days 7
Parameters
- override
-
Specifies that the local-proxy-server will use the configured lease-time information to provide DHCP clients
- days
-
Specifies the number of days that the given IP address is valid.
- hours
-
Specifies the number of hours that the given IP address is valid.
- minutes
-
Specifies the number of minutes that the given IP address is valid.
- seconds
-
Specifies the number of seconds that the given IP address is valid.
Platforms
All
- configure service ies interface dhcp proxy-server lease-time
- configure service vpls sap dhcp proxy-server lease-time
- configure service vprn interface dhcp proxy-server lease-time
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface group-interface dhcp proxy-server lease-time
- configure service vprn subscriber-interface group-interface dhcp proxy-server lease-time
- configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp proxy-server lease-time
lease-time
Syntax
lease-time [lease-time]
no lease-time
Context
[Tree] (config>service>ies>sub-if>grp-if>wpp lease-time)
[Tree] (config>service>vprn>sub-if>grp-if>wpp lease-time)
Full Context
configure service ies subscriber-interface group-interface wpp lease-time
configure service vprn subscriber-interface group-interface wpp lease-time
Description
This command configures the amount of time that the DHCP server grants to the DHCP client permission to use a particular IP address.
The no form of this command removes the lease time parameters from the configuration.
Parameters
- lease-time
-
Specifies the lease time.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lease-time
Syntax
lease-time seconds
lease-time [days <days>] [hrs <hrs>] [min <min>] [sec <sec>]
no lease-time
Context
[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile>dhcp-pool lease-time)
Full Context
configure subscriber-mgmt vrgw brg brg-profile dhcp-pool lease-time
Description
This command configures the lease time, in seconds, to be used when allocating addresses from the pool. This time value should always be longer than the renew/rebind time.
The no form of this command reverts to the default.
Default
lease-time hrs 6
Parameters
- seconds
-
Specifies the lease time in seconds.
- days
-
Specifies the lease time in days.
- hrs
-
Specifies the lease time in hours.
- min
-
Specifies the lease time in minutes.
- sec
-
Specifies the lease time in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
least-fill
least-fill
Syntax
[no] least-fill
Context
[Tree] (config>router>mpls>lsp-template least-fill)
[Tree] (config>router>mpls>lsp least-fill)
Full Context
configure router mpls lsp-template least-fill
configure router mpls lsp least-fill
Description
This command enables the use of the least-fill path selection method for the computation of the path of this LSP.
When MPLS requests the computation of a path for this LSP, CSPF will find all equal cost shortest paths which satisfy the constraints of this path. Then, CSPF identifies the single link in each of these paths which has the least available bandwidth as a percentage of its maximum reservable bandwidth. It then selects the path which has the largest value of this percentage least available bandwidth figure. CSPF identifies the least available bandwidth link in each equal cost path after it has accounted for the bandwidth of the new requested path of this LSP.
CSPF applies the least-fill path selection method to all requests for a path, primary and secondary, of an LSP for which this option is enabled. The bandwidth of the path can be any value, including zero.
CSPF applies the least-fill criterion separately to each preemption priority in the base TE. A higher setup priority path can preemptively lower holding priority paths.
CSPF also applies the least-fill criterion separately to each Diff-Serv TE class if Diff-Serv TE is enabled on this node. A higher setup priority path can preemptively lower holding priority paths within a Class Type.
MPLS will re-signal and move the LSP to the new path in the following cases:
-
Initial LSP path signaling.
-
Re-try of an LSP path after failure.
-
Make-before-break (MBB) due to pending soft preemption of the LSP path.
-
MBB due to LSP path configuration change, that is, a user change to bandwidth parameter of primary or secondary path, or a user enabling of fast-reroute option for the LSP.
-
MBB of secondary path due to an update to primary path SRLG.
-
MBB due to FRR Global Revertive procedures on the primary path.
-
Manual re-signaling of an LSP path or of all LSP paths by the user.
During a manual re-signaling of an LSP path, MPLS will always re-signal the path regardless of whether the new path is exactly the same or different than the current path and regardless of whether the metric of the new path is different or not from that of the current path.
During a timer-based re-signaling of an LSP path which has the least-fill option enabled, MPLS will only re-signal the path if the metric of the new path is different than the one of the current path.
The no form of this command deletes a specific node entry in this database.
Default
no least-fill. The path of an LSP is randomly chosen among a set of equal cost paths.
Platforms
All
least-fill-min-thd
least-fill-min-thd
Syntax
least-fill-min-thd percent
no least-fill-min-thd
Context
[Tree] (config>router>mpls least-fill-min-thd)
Full Context
configure router mpls least-fill-min-thd
Description
This parameter is used in the least-fill path selection process. When comparing the percentage of least available link bandwidth across the sorted paths, whenever two percentages differ by less than the value configured as the least-fill-min-thresh, CSPF will consider them equal and will apply a random number generator to select the path among these paths
The no form of this command resets this parameter to its default value.
Default
least-fill-min-thd 5
Parameters
- percentage
-
Specifies the least fill minimum threshold value as a percentage.
Platforms
All
least-fill-reoptim-thd
least-fill-reoptim-thd
Syntax
least-fill-reoptim-thd percent
no least-fill-reoptim-thd
Context
[Tree] (config>router>mpls least-fill-reoptim-thd)
Full Context
configure router mpls least-fill-reoptim-thd
Description
This parameter is used in the least-fill path selection method. During a timer-based re-signaling of an LSP path which has the least-fill option enabled, CSPF will first update the least-available bandwidth figure for the current path of this LSP. It then applies the least-fill path selection method to select a new path for this LSP. If the new computed path has the same cost as the current path, it will compare the least-available bandwidth figures of the two paths and if the difference exceeds the user configured optimization threshold, MPLS will generate a trap to indicate that a better least-fill path is available for this LSP. This trap can be used by an external SNMP based device to trigger a manual re-signaling of the LSP path since the timer-based re-signaling will not re-signal the path in this case. MPLS will generate a path update trap at the first MBB event which results in the re-signaling of the LSP path. This should clear the eligibility status of the path at the SNMP device.
The no form of this command resets this parameter to its default value.
Default
least-fill-reoptim-thd 10
Parameters
- percentage
-
Specifies the least fill reoptimization threshold value as a percentage.
Platforms
All
leave-all-sm
leave-all-sm
Syntax
[no] leave-all-sm
Context
[Tree] (debug>service>id>mrp leave-all-sm)
Full Context
debug service id mrp leave-all-sm
Description
This command enables debugging of the leave all state machine.
The no form of this command disables debugging of the leave all state machine.
Platforms
All
leave-all-time
leave-all-time
Syntax
leave-all-time value
no leave-all-time
Context
[Tree] (config>service>vpls>mesh-sdp>mrp leave-all-time)
[Tree] (config>service>vpls>spoke-sdp>mrp leave-all-time)
[Tree] (config>service>vpls>sap>mrp leave-all-time)
Full Context
configure service vpls mesh-sdp mrp leave-all-time
configure service vpls spoke-sdp mrp leave-all-time
configure service vpls sap mrp leave-all-time
Description
This command controls the frequency with which the LeaveAll state machine generates LeaveAll PDUs. The timer is required on a per-Port, per-MRP Participant basis. The Leave All Period Timer is set to a random value, T, in the range LeaveAllTime<T<1.5*leave-all-time when it is started. Refer to IEEE 802.1ak-2007 section 10.7.4.3.
Default
leave-all-time 100
Parameters
- value
-
The frequency with which the LeaveAll state machine generates LeaveAll PDUs, in tenths of a second.
Platforms
All
leave-time
leave-time
Syntax
leave-time value
no leave-time
Context
[Tree] (config>service>vpls>mesh-sdp>mrp leave-time)
[Tree] (config>service>vpls>sap>mrp leave-time)
[Tree] (config>service>vpls>spoke-sdp>mrp leave-time)
Full Context
configure service vpls mesh-sdp mrp leave-time
configure service vpls sap mrp leave-time
configure service vpls spoke-sdp mrp leave-time
Description
This command controls the period of time that the Registrar state machine will wait in the leave state before transitioning to the MT (Empty) state when it is removed. An instance of the timer is required for each state machine that is in the leave state. The leave period timer is set to the value specified for leave-time when it is started.
A registration is normally in an "in” state where there is an MFIB entry and traffic is being forwarded. When a "leave all” is performed (periodically around every 10-15 seconds per SAP/SDP binding - see leave-all-time-below), a node sends a message to its peer indicating a leave all is occurring and puts all of its registrations in leave state.
The peer refreshes its registrations based on the leave all PDU it receives and sends a PDU back to the originating node with the state of all its declarations.
Refer to IEEE 802.1ak-2007 section 10.7.4.2.
Default
leave-time 30
Parameters
- value
-
The period of time that the Registrar state machine waits in the leave state before transitioning to the MT state, in tenths of a second.
Platforms
All
legacy
legacy
Syntax
[no] legacy
Context
[Tree] (config>router>isis>te>application-link-attributes legacy)
Full Context
configure router isis traffic-engineering-options application-link-attributes legacy
Description
This command enables legacy mode of advertising TE attributes.
The no form of this command disables legacy mode, but enables the per-application TE attribute advertisement for RSVP-TE.
Default
legacy
Platforms
All
legacy-dns-nbns
legacy-dns-nbns
Syntax
[no] legacy-dns-nbns
Context
[Tree] (config>subscr-mgmt>sys-bhv legacy-dns-nbns)
Full Context
configure subscriber-mgmt system-behavior legacy-dns-nbns
Description
This command enables legacy DNS NBNS behavior, which restricts the supported default extended authentication origins for DNS and NBNS name servers. The main differences include:
-
only support DHCP server as origin for DHCP relay: IPoE DHCPv4/DHCPv6 and PPPoE DHCPv6
-
Local Address Assignment (LAA) is highest priority origin: IPoE and PPPoE SLAAC DNSv6 and PPPoE DNSv4
-
no default DNS for IPoE DHCPv4 proxy
The no form of this command reverts to the recommended default extended DNS and NBNS name server origin priorities.
Default
no legacy-dns-nbns
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
legacy-ipv4-lsr-interop
legacy-ipv4-lsr-interop
Syntax
[no] legacy-ipv4-lsr-interop
Context
[Tree] (config>router>ldp legacy-ipv4-lsr-interop)
Full Context
configure router ldp legacy-ipv4-lsr-interop
Description
This command provides for a global LDP knob to allow interoperability with legacy IPv4 LSR implementations which do not comply with the processing of Hello TLVs with the U-bit set. Specifically, this feature disables the following Hello TLVs:
-
The Nokia proprietary Interface Info TLV (0x3E05) in the Hello message sent to the peer. This also results in the non-generation of the Nokia proprietary Hello Adjacency Status TLV (0x3E06) since the Interface Info TLV is not sent.
This is performed in SR OS releases 12 and higher.
-
The RFC 7552 standard dual-stack capability TLV (0x701) and the Nokia proprietary Adjacency capability TLV (0x3E07) in SR OS releases 13 and higher.
Platforms
All
length
length
Syntax
length {133 | 266 | 399 | 533 | 655}
Context
[Tree] (config>port>tdm length)
Full Context
configure port tdm length
Description
This command applies only to a DS-1 port configured with a 'short' buildout. The length command configures the length of the line (in feet). For line lengths longer than 655 feet, configure the DS-1 port buildout as 'long'.
For 'long' buildout the following values are valid:
NotApplicable — Not applicable
For 'short' buildout the following values are valid:
-
0 to 133 For line length from 0 to 133 feet
-
134 to 266 For line length from 134 to 266 feet
-
267 to 399 For line length from 267 to 399 feet
-
400 to 533 For line length from 400 to 533 feet
-
534 to 655 For line length from 534 to 655 feet
The default for 'long' buildout is 'NotApplicable' while the default for 'short' buildout is '0 to 133'.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
length
Syntax
length lines
Context
[Tree] (environment>terminal length)
Full Context
environment terminal length
Description
This command sets the number of lines on a screen.
Parameters
- lines
-
Specifies the number of lines for the terminal screen length, expressed as a decimal integer.
Platforms
All
length
Syntax
length lines
Context
[Tree] (config>system>management-interface>cli>md-cli>environment>console length)
Full Context
configure system management-interface cli md-cli environment console length
Description
This command configures the set number of lines displayed on the console.
Default
length 24
Parameters
- lines
-
Specifies the number of lines displayed in the console window.
Platforms
All
length-field
length-field
Syntax
[no] length-field
Context
[Tree] (config>test-oam>icmp>ipv6 length-field)
Full Context
configure test-oam icmp ipv6 length-field
Description
This command enables the setting of the length field when building an RFC 4884, Extended ICMP to Support Multi-Part Messages, ICMPv6 Destination Unreachable message or ICMPv6 Time Exceeded message.
The no form of this command disables the length field modification.
Default
no length-field
Platforms
All
ler-use-dscp
ler-use-dscp
Syntax
[no] ler-use-dscp
Context
[Tree] (config>qos>network>ingress ler-use-dscp)
Full Context
configure qos network ingress ler-use-dscp
Description
This command is used to enable tunnel QoS mapping on all ingress network IP interfaces that the network-qos-policy-id is associated with. The command may be defined at any time after the network QoS policy has been created. Any network IP interfaces currently associated with the policy will immediately start to use the internal IP ToS field of any tunnel terminated IP routed packet received on the interface, ignoring any QoS markings in the tunnel portion of the packet.
This attribute provides the ability to ignore the network ingress QoS mapping of a terminated tunnel containing an IP packet that is to be routed to a base router or VPRN destination. This is advantageous when the mapping for the tunnel QoS marking does not accurately or completely reflect the required QoS handling for the IP routed packet. When the mechanism is enabled on an ingress network IP interface, the IP interface will ignore the tunnel’s QoS mapping and derive the internal forwarding class and profile based on the precedence or DiffServ Code Point (DSCP) values within the routed IP header ToS field compared to the Network QoS policy defined on the IP interface.
The default state is not to enforce tunnel termination IP routed QoS override within the network QoS policy.
The no form of this command removes tunnel termination IP routed QoS override from the network QoS policy and all ingress network IP interfaces associated with the policy.
Default
no ler-use-dscp
Platforms
All
less-specific
less-specific
Syntax
less-specific [allow-default]
no less-specific
Context
[Tree] (config>vrrp>policy>priority-event>route-unknown less-specific)
Full Context
configure vrrp policy priority-event route-unknown less-specific
Description
This command allows a CIDR shortest match hit on a route prefix that contains the IP route prefix associated with the route unknown priority event.
The less-specific command modifies the search parameters for the IP route prefix specified in the route-unknown priority event. Specifying less-specific allows a CIDR shortest match hit on a route prefix that contains the IP route prefix.
The less-specific command eases the RTM lookup criteria when searching for the prefix/mask-length. When the route-unknown priority event sends the prefix to the RTM (as if it was a destination lookup), the result route table prefix (if a result is found) is checked to see if it is an exact match or a less specific match. The less-specific command enables a less specific route table prefix to match the configured prefix. When less-specific is not specified, a less specific route table prefix fails to match the configured prefix. The allow-default optional parameter extends the less-specific match to include the default route (0.0.0.0).
The no form of the command prevents RTM lookup results that are less specific than the route prefix from matching.
Default
no less-specific — The route unknown priority events requires an exact prefix/mask match.
Parameters
- allow-default
-
When the allow-default parameter is specified with the less-specific command, an RTM return of 0.0.0.0 matches the IP prefix. If less-specific is entered without the allow-default parameter, a return of 0.0.0.0 will not match the IP prefix. To disable allow-default, but continue to allow less-specific match operation, only enter the less-specific command (without the allow-default parameter).
Platforms
All
level
level
Syntax
level level-id bw bandwidth
no level level-id
Context
[Tree] (config>subscr-mgmt>msap-policy>vpls-only>igmp-snp>mcac>mc-constraints level)
Full Context
configure subscriber-mgmt msap-policy vpls-only-sap-parameters igmp-snooping mcac mc-constraints level
Description
This command configures levels and their associated bandwidth for multicast CAC policy on an interface.
The no form of this command reverts to the default.
Parameters
- level-id
-
Specifies has an entry for each multicast CAC policy constraint level configured on a system.
- bandwidth
-
Specifies the bandwidth in kilobits per second (kb/s) for the level.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
level
Syntax
level priority-level rate pir-rate [cir cir-rate]
level priority-level percent-rate pir-percent [percent-cir cir-percent]
no level priority-level
Context
[Tree] (config>port>tdm>e3>egr-scheduler-override level)
[Tree] (config>port>tdm>ds1>channel-group>egr-scheduler-override level)
[Tree] (config>port>sonet-sdh>path>egr-scheduler-override level)
[Tree] (config>port>ethernet>egr-scheduler-override level)
[Tree] (config>port>tdm>e1>egr-scheduler-override level)
[Tree] (config>port>tdm>ds3>egr-scheduler-override level)
Full Context
configure port tdm e3 egress-scheduler-override level
configure port tdm ds1 channel-group egress-scheduler-override level
configure port sonet-sdh path egress-scheduler-override level
configure port ethernet egress-scheduler-override level
configure port tdm e1 egress-scheduler-override level
configure port tdm ds3 egress-scheduler-override level
Description
This command overrides the maximum and CIR rate parameters for a specific priority level on the port or channel’s port scheduler instance. When the level command is executed for a priority level, the corresponding priority level command in the port-scheduler-policy associated with the port is ignored.
The override level command supports the keyword max for the rate and cir parameter. When executing the level override command, at least the rate or cir keywords and associated parameters must be specified for the command to succeed.
The no form of this command removes the local port priority level rate overrides. Once removed, the port priority level will use the port scheduler policies level command for that priority level.
Parameters
- priority-level
-
Identifies which of the eight port priority levels are being overridden.
- pir-rate
-
Overrides the port scheduler policy’s maximum level rate and requires either the max keyword or a rate defined in kilobits per second to follow.
- cir-rate
-
Overrides the port scheduler policy’s within-cir level rate and requires either the max keyword or a rate defined in kilobits per second to follow.
- pir-percent
-
Specifies the PIR as a percentage.
- cir-percent
-
Specifies the CIR as a percentage.
- max
-
removes any existing rate limit imposed by the port scheduler policy for the priority level allowing it to use as much total bandwidth as possible.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure port tdm ds1 channel-group egress-scheduler-override level
- configure port tdm ds3 egress-scheduler-override level
- configure port tdm e3 egress-scheduler-override level
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure port sonet-sdh path egress-scheduler-override level
All
- configure port ethernet egress-scheduler-override level
level
Syntax
level level-number
Context
[Tree] (config>service>vpls>spb level)
Full Context
configure service vpls spb level
Description
This command creates the context to configure SPB Level 1 or Level 2 area attributes. This is IS-IS levels. Only Level 1 can be configured.
A Level 1 adjacency can be established only with other Level 1 B-VPLS. A Level 2 adjacency can be established only with other Level 2 B-VPLS. Currently there is no support for level 1 and level 2 in the same instance of SPB.
Default
level 1
Parameters
- level-number
-
The SPB level number.
Platforms
All
level
Syntax
level [1 to 1]
Context
[Tree] (config>service>vpls>spoke-sdp>spb level)
[Tree] (config>service>vpls>spb level)
[Tree] (config>service>vpls>sap>spb level)
Full Context
configure service vpls spoke-sdp spb level
configure service vpls spb level
configure service vpls sap spb level
Description
Commands in this context configure SPB level information.
Platforms
All
level
Syntax
level level-id bw bandwidth
no level level-id
Context
[Tree] (config>service>vpls>sap>igmp-snooping>mcac>mc-constraints level)
[Tree] (config>service>vpls>sap>mld-snooping>mcac>mc-constraints level)
Full Context
configure service vpls sap igmp-snooping mcac mc-constraints level
configure service vpls sap mld-snooping mcac mc-constraints level
Description
This command configures levels and their associated bandwidth for multicast CAC policy on this interface.
Parameters
- level-id
-
Specifies has an entry for each multicast CAC policy constraint level configured on this system
- bandwidth
-
Specifies the bandwidth in kilobits per second (kb/s) for the level.
Platforms
All
level
Syntax
level level-id bw bandwidth
no level level-id
Context
[Tree] (config>service>vprn>mld>if>mcac>mc-constraints level)
[Tree] (config>service>vprn>igmp>if>mcac>mc-constraints level)
[Tree] (config>service>vprn>pim>if>mcac>mc-constraints level)
Full Context
configure service vprn mld interface mcac mc-constraints level
configure service vprn igmp interface mcac mc-constraints level
configure service vprn pim interface mcac mc-constraints level
Description
This command configures interface levels and associated bandwidth for multicast CAC policy.
The no form of this command removes the values from the configuration.
Parameters
- level-id
-
Specifies an entry for the multicast CAC policy constraint level configured on this system.
- bandwidth
-
Specifies the bandwidth in kb/s for the level.
Platforms
All
level
Syntax
level level-number
Context
[Tree] (config>service>vprn>isis level)
[Tree] (config>service>vprn>isis>if level)
[Tree] (config>service>vprn>isis>link-group level)
Full Context
configure service vprn isis level
configure service vprn isis interface level
configure service vprn isis link-group level
Description
This command creates the context to configure IS-IS Level 1 or Level 2 area attributes.
A router can be configured as a Level 1, Level 2, or Level 1/2 system. A Level 1 adjacency can be established if there is at least one area address shared by this router and a neighbor. A Level 2 adjacency cannot be established over this interface.
Level 1/2 adjacency is created if the neighbor is also configured as Level 1/2 router and has at least one area address in common. A Level 2 adjacency is established if there are no common area IDs.
A Level 2 adjacency is established if another router is configured as Level 2 or a Level 1/2 router with interfaces configured as Level 1/2 or Level 2. Level 1 adjacencies are not established over this interface.
To reset global and/or interface level parameters to the default, the following commands must be entered independently:
-
level>no hello-authentication-key
-
level>no hello-authentication-type
-
level>no hello-interval
-
level>no hello-multiplier
-
level>no metric
-
level>no passive
-
level>no priority
Default
level 1 or level 2
Parameters
- level-number
-
The IS-IS level number.
Platforms
All
level
Syntax
level syslog-level
Context
[Tree] (config>service>vprn>log>syslog level)
Full Context
configure service vprn log syslog level
Description
This command configures the syslog message severity level threshold. All messages with severity level equal to or higher than the threshold are sent to the syslog target host.
Only a single threshold level can be specified. If multiple levels are entered, the last level entered will overwrite the previously entered commands.
Default
level info
Parameters
- syslog-level
-
The threshold severity level name.
Platforms
All
level
Syntax
level level bw bandwidth
no level level
Context
[Tree] (config>router>igmp>interface>mcac>mc-constraints level)
[Tree] (config>router>mld>interface>mcac>mc-constraints level)
[Tree] (config>router>pim>interface>mcac>mc-constraints level)
[Tree] (config>router>mcac>policy>bundle>mc-constraints level)
Full Context
configure router igmp interface mcac mc-constraints level
configure router mld interface mcac mc-constraints level
configure router pim interface mcac mc-constraints level
configure router mcac policy bundle mc-constraints level
Description
This command configures the amount of bandwidth available within a given bundle for MC traffic for a specified level. The amount of allowable BW for the specified level is expressed in kb/s and this can be defined for up to eight different levels.
If no bandwidth is defined for a given level then no limit is applied.
The no form of this command removes the level from the configuration.
Parameters
- level
-
Specifies the bandwidth for a given level. Level 1 has the highest priority. Level 8 has the lowest priority.
- bw bandwidth
-
Specifies the bandwidth, in kb/s, for the level.
Platforms
All
level
Syntax
level priority-level rate pir-rate [cir cir-rate] group name [weight weight] [monitor-threshold percent]
level priority-level percent-rate pir-percent [percent-cir cir-percent] group name [weight weight] [monitor-threshold percent]
level priority-level rate pir-rate [cir cir-rate] [monitor-threshold percent]
level priority-level percent-rate pir-percent [percent-cir cir-percent] [monitor-threshold percent]
no level priority-level
Context
[Tree] (config>qos>port-scheduler-policy level)
Full Context
configure qos port-scheduler-policy level
Description
This command configures an explicit within-CIR bandwidth limit and a total bandwidth limit for each port scheduler’s priority level. To understand how to set the level rate and CIR parameters, a basic understanding of the port-level scheduler bandwidth allocation mechanism is required. The port scheduler takes all available bandwidth for the port or channel (after the max-rate and any port egress-rate limits have been accounted for) and offers it to each of the eight priority levels twice.
The first pass is called the within-CIR pass and consists of providing the available port bandwidth to each of the 8 priority levels, starting with level 8 and moving down to level 1. Each level takes the offered load and distributes it to all child members that have a port-parent cir-level equal to the current priority level. (Any child with a cir-weight equal to 0 is skipped in this pass.) Each child may consume bandwidth up to the child’s frame-based within-CIR offered load. The remaining available port bandwidth is then offered to the next lower priority level until level 1 is reached.
The second pass is called the above-CIR pass and consists of providing the remaining available port bandwidth to each of the eight priority levels a second time. Again, each level takes the offered load and distributes it to all child members that have a port-parent level equal to the current priority level. Each child may consume bandwidth up to the remainder of the child’s frame-based offered load (some of the offered load may have been serviced during the within-CIR pass). The remaining available port bandwidth is then offered to the next priority level until level 1 is again reached.
If the port scheduling policy is using the default orphan behavior (orphan-override has not been configured on the policy), the system then takes any remaining port bandwidth and allocates it to the orphan queues and scheduler on priority level 1. In a non-override orphan state, all orphans are attached to priority level 1 using a weight of 0. The zero weight value causes the system to allocate bandwidth equally to all orphans based on each orphan queue or scheduler’s ability to use the bandwidth. If the policy has an orphan-override configured, the orphans are handled based on the override commands parameters in a similar fashion to properly parented queues and schedulers.
The port scheduler priority level command rate keyword is used to optionally limit the total amount of bandwidth that is allocated to a priority level (total for the within-CIR and above-CIR passes). The cir keyword optionally limits the first pass bandwidth allocated to the priority level during the within-CIR pass.
When executing the level command, at least one of the optional keywords, rate or cir, must be specified. If neither keyword is included, the command will fail.
If a previous explicit value for rate or cir exists when the level command is executed, and either rate or cir is omitted, the previous value for the parameter is overwritten by the default value and the previous value is lost.
The configured priority level rate limits may be overridden at the egress port or channel using the egress-scheduler-override level priority-level command. When a scheduler instance has an override defined for a priority level, both the rate and cir values are overridden even when one of them is not explicitly expressed in the override command. For instance, if the cir kilobits per second portion of the override is not expressed, the scheduler instance defaults to not having a CIR rate limit for the priority level even when the port scheduler policy has an explicit CIR limit defined.
The no form of this command returns the level to its default value.
Default
no level priority-level
Parameters
- priority-level
-
Specifies to which priority level the level command pertains. Each of the eight levels is represented by an integer value of 1 to 8, with 8 being the highest priority level.
- pir-rate
-
Specifies the total bandwidth limits allocated to priority-level, in kilobits per second.
- pir-percent
-
Specifies the percent bandwidth limits allocated to priority-level.
- cir-rate
-
The cir specified limits the total bandwidth allocated in the within-CIR distribution pass to priority-level. When cir is not specified, all the available port or channel bandwidth may be allocated to the specified priority level during the within-CIR pass.
- cir-percent
-
Specifies the percent bandwidth limits allocated to priority-level.
- group name
-
specifies the existing group that the weighted scheduler group this level maps to, up to 32 characters.
- weight
-
Specifies the weight of the level within this weighted scheduler group.
- monitor-threshold percent
-
Specifies the percent of the configured rate. If the offered rate exceeds the configured threshold, a counter monitoring the threshold will be increased.
Platforms
All
level
Syntax
level syslog-level
no level
Context
[Tree] (config>log>syslog level)
Full Context
configure log syslog level
Description
This command configures the syslog message severity level threshold. All messages with severity level equal to or higher than the threshold are sent to the syslog target host.
Only a single threshold level can be specified. If multiple levels are entered, the last level entered will overwrite the previously entered commands.
The no form of this command reverts to the default value.
Default
level info
Parameters
- value
-
Specifies the threshold severity level name.
Platforms
All
level
Syntax
level {1 | 2}
Context
[Tree] (config>router>isis level)
[Tree] (config>router>isis>interface level)
Full Context
configure router isis level
configure router isis interface level
Description
This command creates the context to configure IS-IS Level 1 or Level 2 area attributes.
A router can be configured as a Level 1, Level 2, or Level 1/2 system. A Level 1 adjacency can be established if there is at least one area address shared by this router and a neighbor. A Level 2 adjacency cannot be established over this interface.
Level 1/2 adjacency is created if the neighbor is also configured as Level 1/2 router and has at least one area address in common. A Level 2 adjacency is established if there are no common area IDs.
A Level 2 adjacency is established if another router is configured as Level 2 or a Level 1/2 router with interfaces configured as Level 1/2 or Level 2. Level 1 adjacencies are not established over this interface.
To reset global and/or interface level parameters to the default, the following commands must be entered independently:
— level>no hello-authentication-key
— level>no hello-authentication-type
— level>no hello-interval
— level>no hello-multiplier
— level>no metric
— level>no passive
— level>no priority
Default
level 1 or level 2
Parameters
- 1
-
Specifies the IS-IS operational characteristics of the interface at level 1.
- 2
-
Specifies the IS-IS operational characteristics of the interface at level 2.
Platforms
All
level
Syntax
level level-number
Context
[Tree] (config>router>isis>srv6>locator level)
Full Context
configure router isis segment-routing-v6 locator level
Description
Commands in this context configure the ISIS level attributes of the SRv6 locator.
Parameters
- level-number
-
Specifies the IS-IS level number.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
level
Syntax
level level-number
Context
[Tree] (config>router>isis>srv6>msloc level)
Full Context
configure router isis segment-routing-v6 micro-segment-locator level
Description
Commands in this context configure the IS-IS level attributes of the SRv6 micro-segment locator.
Parameters
- level-number
-
Specifies the IS-IS level number.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
level
Syntax
level {1 | 2}
no level
Context
[Tree] (config>router>policy-options>policy-statement>entry>from level)
[Tree] (config>router>policy-options>policy-statement>entry>to level)
Full Context
configure router policy-options policy-statement entry from level
configure router policy-options policy-statement entry to level
Description
This command specifies the ISIS route level as a match criterion for the entry.
Default
no level
Parameters
- 1 | 2
-
Matches the IS-IS route learned from level 1 or level 2.
Platforms
All
level-capability
level-capability
Syntax
level-capability {level-1 | level-2 | level-1/2}
no level-capability
Context
[Tree] (config>service>vprn>isis>if level-capability)
[Tree] (config>service>vprn>isis level-capability)
Full Context
configure service vprn isis interface level-capability
configure service vprn isis level-capability
Description
This command configures the routing level for an instance of the IS-IS routing process.
An IS-IS router and an IS-IS interface can operate at Level 1, Level 2 or both Level 1 and 2.
Potential Adjacency Capabilities displays configuration combinations and the potential adjacencies that can be formed.
Global Level |
Interface Level |
Potential Adjacency |
---|---|---|
L 1/2 |
L 1/2 |
Level 1 and/or Level 2 |
L 1/2 |
L 1 |
Level 1 only |
L 1/2 |
L 2 |
Level 2 only |
L 2 |
L 1/2 |
Level 2 only |
L 2 |
L 2 |
Level 2 only |
L 2 |
L 1 |
none |
L 1 |
L 1/2 |
Level 1 only |
L 1 |
L 2 |
none |
L 1 |
L 1 |
Level 1 only |
The no form of this command removes the level capability from the configuration.
Default
level-capability level-1/2
Parameters
- level-1
-
Specifies the router/interface can operate at Level 1 only.
- level-2
-
Specifies the router/interface can operate at Level 2 only.
- level-1/2
-
Specifies the router/interface can operate at both Level 1 and Level 2.
Platforms
All
level-capability
Syntax
level-capability {level-1 | level-2 | level-1/2}
no level-capability
Context
[Tree] (config>router>isis level-capability)
[Tree] (config>router>isis>interface level-capability)
Full Context
configure router isis level-capability
configure router isis interface level-capability
Description
This command configures the routing level for an instance of the IS-IS routing process.
An IS-IS router and an IS-IS interface can operate at Level 1, Level 2 or both Level 1 and 2.
Potential Adjacency displays configuration combinations and the potential adjacencies that can be formed.
Global Level |
Interface Level |
Potential Adjacency |
---|---|---|
L 1/2 |
L 1/2 |
Level 1 and/or Level 2 |
L 1/2 |
L 1 |
Level 1 only |
L 1/2 |
L 2 |
Level 2 only |
L 2 |
L 1/2 |
Level 2 only |
L 2 |
L 2 |
Level 2 only |
L 2 |
L 1 |
— |
L 1 |
L 1/2 |
Level 1 only |
L 1 |
L 2 |
— |
L 1 |
L 1 |
Level 1 only |
The no form of this command removes the level capability from the configuration.
Default
level-capability level-1/2
Parameters
- level-1
-
Specifies the router/interface can operate at Level 1only.
- level-2
-
Specifies the router/interface can operate at Level 2 only.
- level-1/2
-
Specifies the router/interface can operate at both Level 1 and Level 2.
Platforms
All
level-capability
Syntax
level-capability {level-1 | level-2 | level-1/2}
no level-capability
Context
[Tree] (config>router>isis>srv6>locator level-capability)
Full Context
configure router isis segment-routing-v6 locator level-capability
Description
This command configures the ISIS routing level scope of a SRv6 locator. An SRv6 locator can be advertised at level 1 only, level 2 only, or both level 1 and level 2.
The no form of this command reverts to the default value.
Default
level-capability level-1/2
Parameters
- level-1
-
Specifies the SRv6 locator is advertised at level 1 only.
- level-2
-
Specifies the SRv6 locator is advertised at level 2 only.
- level-1/2
-
Specifies the SRv6 locator is advertised at both level 1 and level 2.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
level-capability
Syntax
level-capability {level-1 | level-2 | level-1/2}
no level-capability
Context
[Tree] (config>router>isis>srv6>msloc level-capability)
Full Context
configure router isis segment-routing-v6 micro-segment-locator level-capability
Description
This command configures the ISIS routing level scope of a SRv6 locator. An SRv6 micro-segment locator can be advertised at level 1 only, level 2 only, or both level 1 and level 2.
The no form of this command reverts to the default value.
Default
level-capability level-1/2
Parameters
- level-1
-
Specifies the SRv6 micro-segment locator is advertised at level 1 only.
- level-2
-
Specifies the SRv6 micro-segment locator is advertised at level 2 only.
- level-1/2
-
Specifies the SRv6 micro-segment locator is advertised at both level 1 and level 2.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
lfa-policy-map
lfa-policy-map
Syntax
lfa-policy-map route-nh-template template-name
no lfa-policy-map
Context
[Tree] (config>service>vprn>isis>if lfa-policy-map)
Full Context
configure service vprn isis interface lfa-policy-map
Description
This command applies a route next-hop policy template to the IS-IS interface for the VPRN instance.
When a route next-hop policy template is applied to an interface in IS-IS, it is applied in both level 1 and level 2. When a route next-hop policy template is applied to an interface in OSPF, it is applied in all areas. However, the command in an OSPF interface context can only be executed under the area in which the specified interface is primary and then applied in that area and in all other areas where the interface is secondary. If the user attempts to apply it to an area where the interface is secondary, the command fails.
If the user excluded the interface from LFA using the command loopfree-alternate-exclude, the LFA policy, if applied to the interface, has no effect.
Finally, if the user applied a route next-hop policy template to a loopback interface or to the system interface, the command will not be rejected, but it will result in no action being taken.
The no form deletes the mapping of a route next-hop policy template to an OSPF or IS-IS interface.
Parameters
- template-name
-
Specifies the name of the template, up to 32 characters.
Platforms
All
lfa-policy-map
Syntax
lfa-policy-map route-nh-template template-name
no lfa-policy-map
Context
[Tree] (config>router>ospf3>area>if lfa-policy-map)
[Tree] (config>router>ospf>area>if lfa-policy-map)
[Tree] (config>router>isis>if lfa-policy-map)
[Tree] (config>service>vprn>ospf>area>if lfa-policy-map)
[Tree] (config>service>vprn>ospf3>area>if lfa-policy-map)
Full Context
configure router ospf3 area interface lfa-policy-map
configure router ospf area interface lfa-policy-map
configure router isis interface lfa-policy-map
configure service vprn ospf area interface lfa-policy-map
configure service vprn ospf3 area interface lfa-policy-map
Description
This command applies a route next-hop policy template to an OSPF or IS-IS interface.
When a route next-hop policy template is applied to an interface in IS-IS, it is applied in both level 1 and level 2. When a route next-hop policy template is applied to an interface in OSPF, it is applied in all areas. However, the command in an OSPF interface context can only be executed under the area in which the specified interface is primary and then applied in that area and in all other areas where the interface is secondary. If the user attempts to apply it to an area where the interface is secondary, the command fails.
If the user excluded the interface from LFA using the command loopfree-alternate-exclude, the LFA policy, if applied to the interface, has no effect.
Finally, if the user applied a route next-hop policy template to a loopback interface or to the system interface, the command will not be rejected, but it results in no action being taken.
The no form deletes the mapping of a route next-hop policy template to an OSPF or IS-IS interface.
Default
no lfa-policy-map
Parameters
- template-name
-
Specifies the name of the template, up to 32 characters.
Platforms
All
li
li
Syntax
li
Context
[Tree] (config li)
Full Context
configure li
Description
Commands in this context configure lawful intercept (LI) parameters.
Platforms
All
li
Syntax
[no] li
Context
[Tree] (config>system>security>profile li)
Full Context
configure system security profile li
Description
This command enables the Lawful Intercept (LI) profile identifier.
The no form of this command disables the LI profile identifier.
Platforms
All
li-filter
li-filter
Syntax
li-filter
Context
[Tree] (config>li li-filter)
Full Context
configure li li-filter
Description
Commands in this context configure the li-filter branch to create LI filter lists and entries.
Platforms
All
li-filter-associations
li-filter-associations
Syntax
li-filter-associations
Context
[Tree] (config>li li-filter-associations)
Full Context
configure li li-filter-associations
Description
Commands in this context configure the LI filter associations entries that are inserted into normal filters.
Platforms
All
li-filter-block-reservation
li-filter-block-reservation
Syntax
li-filter-block-reservation
Context
[Tree] (config>li li-filter-block-reservation)
Full Context
configure li li-filter-block-reservation
Description
This command enable the LI filter block reservation branch to configure lawful intercept filter reservations.
Platforms
All
li-filter-lock-state
li-filter-lock-state
Syntax
li-filter-lock-state {locked | unlocked-for-li-users | unlocked-for-all-users}
no li-filter-lock-state
Context
[Tree] (config>li li-filter-lock-state)
Full Context
configure li li-filter-lock-state
Description
This command configures the lock state of the filters used by LI. With the configurable filter lock for LI feature an LI user can control the behavior of filters when they are used for LI.
Prior to Release 12.0.R1, when a filter entry was used as a Lawful Intercept (LI) mirror source criteria, all subsequent attempts to modify the filter were then blocked to avoid having the LI session impacted by a non-LI user.
The no form of this command reverts to the default.
Default
li-filter-lock-state locked
Parameters
- locked
-
When an li-source criteria is configured that references any entry of filter Y, then filter Y can no longer be changed (until there are no longer any li-source references to entries of filter Y).
- unlocked-for-li-users
-
Filters can continue to be edited by LI users only even when an li-source references an entry in that filter.
- unlocked-for-all-users
-
Filters can continue to be edited by all users even when an li-source references an entry in that filter.
Platforms
All
li-group
li-group
Syntax
li-group isa-group-id
no li-group
Context
[Tree] (config>li>x-interfaces>x3 li-group)
Full Context
configure li x-interfaces x3 li-group
Description
This command configures the ISA group used for the X3 interface.
The no form of this command reverts to the default.
Parameters
- isa-group-id
-
Specifies the ISA group ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
li-ip-filter
li-ip-filter
Syntax
li-ip-filter li-filter-name [create]
no li-ip-filter li-filter-name
Context
[Tree] (config>li>li-filter li-ip-filter)
Full Context
configure li li-filter li-ip-filter
Description
This command creates a Lawful Interception (LI) IPv4 filter list, or enters the CLI context for a LI IPv4 filter list. LI IPv4 filters are used as a manner to create confidential IPv4 filter based li-source entries. The LI IPv4 filter entries are inserted/merged into normal IPv4 filters as configured with the li-filter-associations and li-filter-block-reservation commands, but the LI IPv4 filter entries are not visible to users without LI permissions.
The no form of this command removes the LI IPv4 filter name from the configuration.
Parameters
- li-filter-name
-
Specifies the name of the IPv4 address filter. Filter names cannot start with an underscore character (for example, "_my-filter”) and cannot use the name "default”.
Platforms
All
li-ip-filter
Syntax
[no] li-ip-filter li-filter-name
Context
[Tree] (config>li>li-filter-assoc li-ip-filter)
Full Context
configure li li-filter-associations li-ip-filter
Description
Specifies the li-ip-filter that will have its entries inserted into a list of normal IP filters.
The no form of this command removes the LI filter name from the configuration.
Parameters
- li-filter-name
-
Specifies an existing li-ip-filter, up to 32 characters.
Platforms
All
li-ip-filter
Syntax
li-ip-filter li-filter-name entry li-entry-id [li-entry-id] [intercept-id intercept-id [intercept-id]] [session-id session-id [session-id]]
no li-ip-filter li-filter-name [entry li-entry-id [li-entry-id]]
Context
[Tree] (config>li>li-source li-ip-filter)
Full Context
configure li li-source li-ip-filter
Description
This command enables lawful interception (LI) of packets that match specific entries in an existing LI IP filter that has been associated with a normal IP filter. The specification of an li-ip-filter entry as an li-source means that packets matching the li-ip-filter entry will be intercepted on all interfaces/saps/and so on where the associated normal ip-filter(s) are applied.
Parameters
- li-filter-name
-
Specifies the name of the li-ip-filter, up to 32 characters.
- li-entry-id
-
Specifies the entry ID in the li-ip-filter that is to be used as an li-source criteria.
- intercept-id
-
Specifies the intercept-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This intercept ID can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs. For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, an intercept-id field (as part of the routable encap) is always present in the mirrored packets. If there is no intercept-id configured for an li-source entry, then the default value will be inserted. When the mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no intercept ID is inserted and none can be specified against the li-source entries.
- session-id
-
Specifies the session-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This session-id can be used (for example by a downstream LI Gateway) to identify the particular LI session to which the packet belongs. The session-id is only valid and used for mirror services that are configured with ip-udp-shim routable encap (config>mirror>mirror-dest>encap>ip-udp-shim). For all types of li-source entries (filter, nat, sap, or subscriber), when the mirror service is configured with ip-udp-shim routable encap, a session-id field (as part of the routable encap) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value will be inserted. When a mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no session-id is inserted and none can be specified against the li-source entries.
Platforms
All
li-ipv6-filter
li-ipv6-filter
Syntax
li-ipv6-filter li-filter-name [create]
no li-ipv6-filter li-filter-name
Context
[Tree] (config>li>li-filter li-ipv6-filter)
Full Context
configure li li-filter li-ipv6-filter
Description
This command creates a Lawful Interception (LI) IPv6 filter list, or enters the CLI context for a LI IPv6 filter list. LI IPv6 filters are used as a manner to create confidential IPv6 filter based li-source entries. The LI IPv6 filter entries are inserted or merged into normal IPv6 filters as configured with the li-filter-associations and li-filter-block-reservation commands, but the LI IPv6 filter entries are not visible to users without LI permissions.
The no form of this command removes the LI IPv6 filter name from the configuration.
Parameters
- li-filter-name
-
Specifies the name of the IPv6 address filter. Filter names cannot start with an underscore character (for example, "_my-filter”) and cannot use the name "default”.
- create
-
creates a LI IPv6 filter.
Platforms
All
li-ipv6-filter
Syntax
[no] li-ipv6-filter li-filter-name
Context
[Tree] (config>li>li-filter-assoc li-ipv6-filter)
Full Context
configure li li-filter-associations li-ipv6-filter
Description
This command specifies the li-ipv6-filter that will have its entries inserted into a list of normal IPv6 filters.
The no form of this command removes the filter name from the configuration.
Parameters
- li-filter-name
-
Specifies an existing li-ipv6-filter up to 32 characters.
Platforms
All
li-ipv6-filter
Syntax
li-ipv6-filter li-filter-name entry li-entry-id [li-entry-id] [intercept-id intercept-id [intercept-id]] [session-id session-id [session-id]]
no li-ipv6-filter li-filter-name [entry li-entry-id [li-entry-id]]
Context
[Tree] (config>li>li-source li-ipv6-filter)
Full Context
configure li li-source li-ipv6-filter
Description
This command enables lawful interception (LI) of packets that match specific entries in an existing LI IPv6 filter that has been associated with a normal IPv6 filter. The specification of an li-ipv6-filter entry as an li-source means that packets matching the li-ipv6-filter entry will be intercepted on all interfaces/saps/and so on, where the associated normal ip-filter(s) are applied.
Parameters
- li-filter-name
-
Specifies the name of the li-ipv6-filter up to 32 characters.
- li-entry-id
-
Specifies the entry ID in the li-ipv6-filter that is to be used as an LI source criteria.
- intercept-id
-
Specifies the intercept ID that is inserted into the packet header for all mirrored packets of the associated li-source entry. This intercept-id can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs. For all types of li-source entries (filter, nat, sap, or subscriber), when the mirror service is configured with ip-udp-shim routable encap, an intercept-id field (as part of the routable encapsulation) is always present in the mirrored packets. If there is no intercept-id configured for an li-source entry, then the default value will be inserted. When the mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no intercept ID is inserted and none can be specified against the LI source entries.
- session-id
-
Specifies the session ID that is inserted into the packet header for all mirrored packets of the associated li-source entry. This session-id can be used (for example, by a downstream LI gateway) to identify the particular LI session to which the packet belongs. The session-id is only valid and used for mirror services that are configured with ip-udp-shim routable encap (config>mirror>mirror-dest>encap>ip-udp-shim). For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, a session-id field (as part of the routable encap) is always present in the mirrored packets. If there is no session ID configured for an li-source entry, then the default value is inserted. When a mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no session ID is inserted and none can be specified against the li-source entries.
Platforms
All
li-local-save
li-local-save
Syntax
[no] li-local-save
Context
[Tree] (bof li-local-save)
Full Context
bof li-local-save
Description
This command specifies whether or not lawful intercept (LI) configuration is allowed to be saved to a local file. Modifying this command will not take effect until the system is rebooted.
Default
li-local-save
Platforms
All
li-mac-filter
li-mac-filter
Syntax
li-mac-filter li-filter-name [create]
no li-mac-filter li-filter-name
Context
[Tree] (config>li>li-filter li-mac-filter)
Full Context
configure li li-filter li-mac-filter
Description
This command creates a Lawful Interception (LI) MAC filter list, or enters the CLI context for a LI MAC filter list. LI MAC filters are used as a manner to create confidential MAC filter based li-source entries. The LI MAC filter entries are inserted/merged into normal MAC filters as configured via the li-filter-associations and li-filter-block-reservation commands, but the LI MAC filter entries are not visible to users without LI permissions.
The no form of this command removes the MAC LI filter name from the configuration.
Parameters
- li-filter-name
-
Specifies the name of the MAC filter. Filter names cannot start with an underscore character (for example, "_my-filter”) and cannot use the name "default”.
Platforms
All
li-mac-filter
Syntax
[no] li-mac-filter li-filter-name
Context
[Tree] (config>li>li-filter-assoc li-mac-filter)
Full Context
configure li li-filter-associations li-mac-filter
Description
Specifies the li-mac-filter that will have its entries inserted into a list of normal mac filters.
Parameters
- li-filter-name
-
Specifies the name of the LI MAC filter, up to 32 characters. Filter names cannot start with an underscore character (for example, "_my-filter”) and cannot use the name "default”.
Platforms
All
li-mac-filter
Syntax
li-mac-filter li-filter-name entry li-entry-id [li-entry-id] [intercept-id intercept-id [intercept-id]] [session-id session-id [session-id]]
no li-mac-filter li-filter-name [entry li-entry-id [li-entry-id]]
Context
[Tree] (config>li>li-source li-mac-filter)
Full Context
configure li li-source li-mac-filter
Description
This command enables lawful interception (LI) of packets that match specific entries in an existing LI MAC filter that has been associated with a normal MAC filter. The specification of an li-mac-filter entry as an li-source means that packets matching the li-mac-filter entry will be intercepted on all interfaces, saps and so on where the associated normal mac-filter(s) are applied.
Parameters
- li-filter-name
-
Specifies the name of the li-mac-filter, up to 32 characters.
- li-entry-id
-
Specifies the entry id in the li-mac-filter that is to be used as an li-source criteria.
- intercept-id
-
Specifies the intercept ID that is inserted into the packet header for all mirrored packets of the associated li-source entry. This intercept ID can be used (for example, by a downstream LI gateway) to identify the particular LI session to which the packet belongs. For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, an intercept-id field (as part of the routable encap) is always present in the mirrored packets. If there is no intercept-id configured for an li-source entry, then the default value will be inserted. When the mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no intercept-id is inserted and none can be specified against the li-source entries.
- session-id
-
Specifies the session-id that is inserted into the packet header for all mirrored packets of the associated li-source entry. This session-id can be used (for example by a downstream LI gateway) to identify the particular LI session to which the packet belongs. The session-id is only valid and used for mirror services that are configured with ip-udp-shim routable encap (config>mirror>mirror-dest>encap>ip-udp-shim). For all types of li-source entries (filter, nat, sap, subscriber), when the mirror service is configured with ip-udp-shim routable encap, a session-id field (as part of the routable encap) is always present in the mirrored packets. If there is no session-id configured for an li-source entry, then the default value will be inserted. When a mirror service is configured with ip-gre or ip-udp-shim-sampled routable encap, no session-id is inserted and none can be specified against the li-source entries.
Platforms
All
li-reserved-block
li-reserved-block
Syntax
li-reserved-block block-name [create]
no li-reserved-block block-name
Context
[Tree] (config>li>li-filter-block-reservation li-reserved-block)
Full Context
configure li li-filter-block-reservation li-reserved-block
Description
This command creates or edits an LI reserved block. An LI reserved block allows an operator to define where entries from an LI filter should be inserted into a normal filter. The block reserves a configurable number of entries in the normal filter that can only be used for entries inserted from associated LI filters. The LI filter entries that get inserted into the reserved block in each normal filter are not visible to non-LI operators. The block also defines to which normal filters the reservation is applied.
The no form of this command removes the block name from the configuration.
Parameters
- block-name
-
Specifies the name of the MAC filter. Block names cannot start with an underscore character (for example, "_my-filter”) and cannot use the name "default”.
Platforms
All
li-separate
li-separate
Syntax
[no] li-separate
Context
[Tree] (bof li-separate)
Full Context
bof li-separate
Description
This command specifies whether or not a non-LI user has access to lawful intercept (LI) information. When this command is enabled, a user who does not have LI access will not be allowed to access CLI or SNMP objects in the li context. Modifying this command will not take effect until the system is rebooted.
When the no li-separate command is set (the default mode), those who are allowed access to the config>system>security>profile context and user command nodes are allowed to modify the configuration of the LI parameters. In this mode, a user that has a profile allowing access to the config>li and/or show>li command contexts can enter and use the commands under those nodes.
When the li-separate command is configured, only users that have the LI access capabilities set in the config>system>security>user>access li context are allowed to access the config>li and/or show>li command contexts. A user who does not have LI access is not allowed to enter the config>li and show>li contexts even though they have a profile that allows access to these nodes. When in the li-separate mode, only users with config>system>security>user>access li set in their user account have the ability modify the setting LI parameters in either their own or other profiles and user configurations.
Default
no li-separate
Platforms
All
li-source
li-source
Syntax
[no] li-source mirror-service-id [name mirror-service-name]
Context
[Tree] (config>li li-source)
Full Context
configure li li-source
Description
This command configures a lawful intercept (LI) mirror source.
Parameters
- mirror-service-id
-
Specifies the service ID in the service domain. This ID is unique to this service and cannot be used by any other service, regardless of service type. The same service ID must be configured on every router that this particular service is defined on.
Platforms
All
lic
lic
Syntax
lic lic-name [create]
no lic lic-name
Context
[Tree] (config>li>x-interfaces>lics lic)
Full Context
configure li x-interfaces lics lic
Description
This command configures the parameters to communicate with a specific LIC.
The no form of this command removes the LIC name.
Parameters
- lic-name
-
Specifies the LIC name to be used as a reference, up to 32 characters.
- create
-
Mandatory keyword to create this entry.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lic-identifier
lic-identifier
Syntax
lic-identifier identifier
no lic-identifier
Context
[Tree] (config>li>x-interfaces>lics>lic lic-identifier)
Full Context
configure li x-interfaces lics lic lic-identifier
Description
This command configures the string that identifies this LIC.
The no form of this command reverts to the default.
Parameters
- identifier
-
Specifies the LIC identifying string, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
license
license
Syntax
license
Context
[Tree] (admin>system license)
Full Context
admin system license
Description
Enters a context for administrative commands related to licensing.
Platforms
All
license-file
license-file
Syntax
license-file file-url
no license-file
Context
[Tree] (bof license-file)
Full Context
bof license-file
Description
This command configures the license location and file name.
The no form of this command removes the file URL from the configuration.
Parameters
- file-url
-
Specifies the file-url.
Platforms
All
lics
lics
Syntax
lics
Context
[Tree] (config>li>x-interfaces lics)
Full Context
configure li x-interfaces lics
Description
Commands in this context configure the Network Element to communicate with LI Centers (LICs).
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lifetime
lifetime
Syntax
lifetime minimum minimum maximum maximum
no lifetime
Context
[Tree] (config>service>nat>pcp-server-policy lifetime)
Full Context
configure service nat pcp-server-policy lifetime
Description
This command configures the lifetime of explicit mappings made by the PCP servers.
Default
lifetime minimum 120 maximum 86400
Parameters
- minimum
-
Specifies the minimum lifetime of explicit mappings made by the PCP servers using this PCP policy, in seconds.
- maximum
-
Specifies the maximum lifetime of explicit mappings made by the PCP servers using this PCP policy, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
lifetime
Syntax
lifetime {seconds | forever}
Context
[Tree] (config>system>script-control>script-policy lifetime)
Full Context
configure system script-control script-policy lifetime
Description
This command is used to configure the maximum amount of time that a script may run.
Default
lifetime 3600
Parameters
- seconds
-
Specifies the maximum amount of time that a script may run, in seconds.
- forever
-
Specifies to allow a script to run indefinitely.
Platforms
All
limit
limit
Syntax
limit {all-packet-matches | first-session-match}
Context
[Tree] (debug>app-assure>group>traffic-capture>record limit)
Full Context
debug application-assurance group traffic-capture record limit
Description
This command records limit conditions.
Parameters
- all-packet-matches
-
Records all the packets matching the condition.
- first-session-match
-
Records only the first session matching the condition.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
limit-init-exchange
limit-init-exchange
Syntax
limit-init-exchange [reduced-max-exchange-timeout seconds]
no limit-init-exchange
Context
[Tree] (config>ipsec>ike-policy limit-init-exchange)
Full Context
configure ipsec ike-policy limit-init-exchange
Description
This command limits the number of ongoing IKEv2 initial exchanges per tunnel to 1. When the system receives a new IKEv2 IKE_SA_INIT request when there is an ongoing IKEv2 initial exchange from same peer, then system reduces the timeout value of the existing exchange to the specified reduced-max-exchange-timeout. If the reduced-max-exchange-timeout is disabled, then the system does not reduce the timeout value.
The no form of this command reverts to the default value.
Default
limit-init-exchange reduced-max-exchange-timeout 2
Parameters
- seconds
-
Specifies the maximum timeout for the in-progress initial IKE exchange.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
limit-mac-move
limit-mac-move
Syntax
limit-mac-move [blockable | non-blockable]
no limit-mac-move
Context
[Tree] (config>service>vpls>spoke-sdp limit-mac-move)
[Tree] (config>service>vpls>sap limit-mac-move)
Full Context
configure service vpls spoke-sdp limit-mac-move
configure service vpls sap limit-mac-move
Description
This command indicates whether or not the mac-move agent, when enabled using config>service>vpls>mac-move or config>service>epipe>mac-move, limits the MAC re-learn (move) rate on this SAP.
Default
limit-mac-move blockable
Parameters
- blockable
-
Specifies that the agent monitors the MAC re-learn rate on the SAP, and it blocks it when the re-learn rate is exceeded.
- non-blockable
-
Specifies that this SAP is not blocked, and another blockable SAP is blocked instead.
Platforms
All
limit-mac-move
Syntax
limit-mac-move [blockable | non-blockable]
no limit-mac-move
Context
[Tree] (config>service>pw-template limit-mac-move)
Full Context
configure service pw-template limit-mac-move
Description
This command indicates whether or not the mac-move agent will limit the MAC re-learn (move) rate.
Default
limit-mac-move blockable
Parameters
- blockable
-
The agent will monitor the MAC re-learn rate, and it will block it when the re-learn rate is exceeded.
- non-blockable
-
When specified, a SAP will not be blocked, and another blockable SAP will be blocked instead.
Platforms
All
limit-pir-zero-drain
limit-pir-zero-drain
Syntax
[no] limit-pir-zero-drain
Context
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution limit-pir-zero-drain)
Full Context
configure qos adv-config-policy child-control bandwidth-distribution limit-pir-zero-drain
Description
This command is used to configure the system to use the minimum configurable PIR instead of an H-QoS derived zero operational PIR. The default behavior is to allow the operational PIR of the queue to remain the last configured value while setting the queue MBS to zero (preventing queuing of newly arriving packets). Retaining the previous PIR value may cause a momentary burst above an aggregate rate associated with the queue as it drains. Using the limit-pir-zero-drain command causes the queue to drain at the lowest rate possible (typically 1 kb/s) that limits overrun situations.
The no form of this command reverts to default behavior.
Platforms
All
limit-unused-bandwidth
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>port>ethernet>access>egr>qgrp>agg-rate limit-unused-bandwidth)
[Tree] (config>port>ethernet>access>egress>vport limit-unused-bandwidth)
[Tree] (config>service>vprn>sub-if>grp-if>sap>egress limit-unused-bandwidth)
[Tree] (config>port>ethernet>network>egr>qgrp>agg-rate limit-unused-bandwidth)
Full Context
configure port ethernet access egress queue-group agg-rate limit-unused-bandwidth
configure port ethernet access egress vport limit-unused-bandwidth
configure service vprn subscriber-interface group-interface sap egress limit-unused-bandwidth
configure port ethernet network egress queue-group agg-rate limit-unused-bandwidth
Description
This command specifies to limit the unused bandwidth and allow a tighter control in allocation of bandwidth by HQoS. When enabled, HQoS algorithm distributes any unused aggregate bandwidth between queues operating below their fair share rates. This allows a simplified aggregate rate protection while allocating bandwidth by HQoS.
The no form of this command reverts to the default.
Platforms
All
- configure port ethernet network egress queue-group agg-rate limit-unused-bandwidth
- configure port ethernet access egress vport limit-unused-bandwidth
- configure port ethernet access egress queue-group agg-rate limit-unused-bandwidth
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface sap egress limit-unused-bandwidth
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap>egress>agg-rate limit-unused-bandwidth)
[Tree] (config>service>ies>if>sap>egress>agg-rate limit-unused-bandwidth)
[Tree] (config>service>ies>sub-if>grp-if>sap>egress>agg-rate limit-unused-bandwidth)
Full Context
configure service vprn subscriber-interface group-interface sap egress agg-rate limit-unused-bandwidth
configure service ies interface sap egress agg-rate limit-unused-bandwidth
configure service ies subscriber-interface group-interface sap egress agg-rate limit-unused-bandwidth
Description
This command enables aggregate rate overrun protection.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface sap egress agg-rate limit-unused-bandwidth
- configure service ies subscriber-interface group-interface sap egress agg-rate limit-unused-bandwidth
All
- configure service ies interface sap egress agg-rate limit-unused-bandwidth
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>service>cpipe>sap>egress>agg-rate limit-unused-bandwidth)
[Tree] (config>service>ipipe>sap>egress>agg-rate limit-unused-bandwidth)
[Tree] (config>service>epipe>sap>egress>agg-rate limit-unused-bandwidth)
Full Context
configure service cpipe sap egress agg-rate limit-unused-bandwidth
configure service ipipe sap egress agg-rate limit-unused-bandwidth
configure service epipe sap egress agg-rate limit-unused-bandwidth
Description
This command is used to enable (or disable) aggregate rate overrun protection on the agg-rate context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap egress agg-rate limit-unused-bandwidth
All
- configure service ipipe sap egress agg-rate limit-unused-bandwidth
- configure service epipe sap egress agg-rate limit-unused-bandwidth
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>service>vpls>sap>egress>encap-defined-qos>encap-group>agg-rate limit-unused-bandwidth)
[Tree] (config>service>vpls>sap>egress>agg-rate limit-unused-bandwidth)
[Tree] (config>service>template>vpls-sap-template>egress>agg-rate limit-unused-bandwidth)
Full Context
configure service vpls sap egress encap-defined-qos encap-group agg-rate limit-unused-bandwidth
configure service vpls sap egress agg-rate limit-unused-bandwidth
configure service template vpls-sap-template egress agg-rate limit-unused-bandwidth
Description
This command is used to enable aggregate rate overrun protection on the agg-rate context.
The no form of this command disables the overrun protection.
Platforms
All
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>service>vprn>if>sap>egress>agg-rate limit-unused-bandwidth)
Full Context
configure service vprn interface sap egress agg-rate limit-unused-bandwidth
Description
This command is used to enable (or disable) aggregate rate overrun protection on the agg-rate context.
Platforms
All
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>qos>scheduler-policy>tier>scheduler limit-unused-bandwidth)
Full Context
configure qos scheduler-policy tier scheduler limit-unused-bandwidth
Description
This command is used to enable (or disable) aggregate rate overrun protection on the agg-rate context.
Platforms
All
limit-unused-bandwidth
Syntax
[no] limit-unused-bandwidth
Context
[Tree] (config>service>cust>multi-service-site>egress>agg-rate limit-unused-bandwidth)
Full Context
configure service customer multi-service-site egress agg-rate limit-unused-bandwidth
Description
This command is used to enable aggregate rate overrun protection.
The no form of the command disables aggregate rate overrun protection.
Default
no limit-unused-bandwidth
Platforms
All
line-length
line-length
Syntax
line-length {110 | 220 | 330 | 440 | 550 | 660}
Context
[Tree] (config>system>sync-if-timing>bits>output line-length)
Full Context
configure system sync-if-timing bits output line-length
Description
This command configures the line-length parameter of the BITS output, This is the distance in feet between the network element and the office clock (BITS/SSU). There are two possible BITS-out interfaces, one for each CPM. They are configured together, but they are displayed separately in the show command. This command is only applicable when the interface-type is DS1.
Default
line-length 110
Parameters
- 110
-
Specifies that the distance is from 0 to 110 feet.
- 220
-
Specifies that the distance is from 110 to 220 feet.
- 330
-
Specifies that the distance is from 220 to 330 feet.
- 440
-
Specifies that the distance is from 330 to 440 feet.
- 550
-
Specifies that the distance is from 440 to 550 feet.
- 660
-
Specifies that the distance is from 550 to 660 feet.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
link
link
Syntax
link port-id {primary | secondary}
no link port-id
Context
[Tree] (config>lag>link-map-profile link)
Full Context
configure lag link-map-profile link
Description
This command designates one of the configured ports of the LAG to be used on egress as either a primary or secondary link (based on the option selected) by all SAPs and network interfaces that use this LAG link map profile.
Links are part of a profile When a link is added or deleted, all SAPs and network interfaces that use this link-map-profile may be re-hashed if required.
The no form of this command deletes the link from this LAG link mapping profile. A port must be deleted from all LAG link profiles if it is to be deleted from the LAG.
Parameters
- port-id
-
Specifies a physical port ID that is an existing member of this LAG.
port-id
slot/mda/port[.channel]
eth-sat-id
esat-id/slot/port
esat
keyword
id
1 to 20
pxc-id
pxc-id.sub-port
pxc
keyword
id
1 to 64
sub-port
a, b
- primary
-
Designates one of the configured ports of the LAG to be used on egress as a primary link by SAPs/network interfaces that use this LAG link map profile.
- secondary
-
Designates one of the configured ports of the LAG to be used on egress as a secondary link by SAPs/network interfaces that use this LAG link map profile.
Platforms
All
link
Syntax
[no] link
Context
[Tree] (config>test-oam>link-meas>template>ret-path link)
Full Context
configure test-oam link-measurement measurement-template twamp-light return-path link
Description
This command includes a return path sub-TLV link. The link sub-tlv instructs a Session-Reflector configured for type stamp to use the receiving logical IP interface for the transmission of the response packet from the reflector to the session-sender. The destination of the reflected packet must be installed in the forwarding table and reachable out the IP interface or the packet is dropped by the Session-Reflector. When there are parallel non-equal cost return paths between the Session-Reflector and the Session-Sender the response packet can only be returned on the lowest cost path.
Default
no link
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
link-addr
link-addr
Syntax
link-addr ipv6-address
no link-addr
Context
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client>ia-na link-addr)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client>slaac link-addr)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client>ia-na link-addr)
[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client>dhcpv4-nat link-addr)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client>slaac link-addr)
[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client>dhcpv4-nat link-addr)
Full Context
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client ia-na link-addr
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client slaac link-addr
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client ia-na link-addr
configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat link-addr
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client slaac link-addr
configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat link-addr
Description
This command specifies the ipv6-address that should be included in the link-address field of the relay header. This can be used for pool selection by the DHCPv6 server.
The no form of this command falls back to the default.
Parameters
- ipv6-address
-
Specifies the IPv6 address up to 32 characters.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
link-address
link-address
Syntax
link-address ipv6-address
no link-address
Context
[Tree] (config>service>ies>if>ipv6>dhcp6-relay link-address)
[Tree] (config>service>vprn>if>ipv6>dhcp6-relay link-address)
[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host link-address)
[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>relay link-address)
[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>relay link-address)
[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay link-address)
[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay link-address)
Full Context
configure service ies interface ipv6 dhcp6-relay link-address
configure service vprn interface ipv6 dhcp6-relay link-address
configure subscriber-mgmt local-user-db ipoe host link-address
configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay link-address
configure service ies subscriber-interface group-interface ipv6 dhcp6 relay link-address
configure service ies subscriber-interface ipv6 dhcp6 relay link-address
configure service vprn subscriber-interface ipv6 dhcp6 relay link-address
Description
This command configures the link address used for prefix selection at the DHCP server.
The link-address is a field in DHCP6 Relay-Forward message that is used in DHCP6 server to select the IPv6 address (IA-NA) or IPv6 prefix (IA-PD) from a pool with configured prefix range covering the link-address. The selection scope is the pool or a prefix range within the pool.
The no form of this command reverts to the default.
Default
no link-address
Parameters
- ipv6-address
-
Specifies the link-address.
Platforms
All
- configure service ies interface ipv6 dhcp6-relay link-address
- configure service vprn interface ipv6 dhcp6-relay link-address
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure subscriber-mgmt local-user-db ipoe host link-address
- configure service ies subscriber-interface ipv6 dhcp6 relay link-address
- configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay link-address
- configure service ies subscriber-interface group-interface ipv6 dhcp6 relay link-address
- configure service vprn subscriber-interface ipv6 dhcp6 relay link-address
link-address
Syntax
link-address ipv6-address
no link-address
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw>dhcp6 link-address)
[Tree] (config>service>ies>if>sap>ipsec-gw>dhcp6 link-address)
Full Context
configure service vprn interface sap ipsec-gw dhcp6 link-address
configure service ies interface sap ipsec-gw dhcp6 link-address
Description
This command specifies the link address of the relayed DHCPv6 packets sent by the system.
Default
no link-address
Parameters
- ipv6-address
-
Specifies a global unicast IPv6 address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
link-bandwidth
link-bandwidth
Syntax
link-bandwidth
Context
[Tree] (config>service>vprn>bgp>group>neighbor link-bandwidth)
[Tree] (config>service>vprn>bgp>group link-bandwidth)
Full Context
configure service vprn bgp group neighbor link-bandwidth
configure service vprn bgp group link-bandwidth
Description
This command enables the configuration context for handling the link-bandwidth extended community attached to specific BGP routes.
When all used multipaths of an IP prefix correspond to BGP routes with a link-bandwidth extended community, the datapath is programmed to do weighted ECMP across the BGP next-hops in proportion to the bandwidth values.
Platforms
All
link-bandwidth
Syntax
link-bandwidth
Context
[Tree] (config>router>bgp>group link-bandwidth)
[Tree] (config>router>bgp>group>neighbor link-bandwidth)
Full Context
configure router bgp group link-bandwidth
configure router bgp group neighbor link-bandwidth
Description
This command enables the configuration context for handling the link-bandwidth extended community attached to specific BGP routes.
When all used multipaths of an IP prefix correspond to BGP routes with a link-bandwidth extended community, the datapath is programmed to do weighted ECMP across the BGP next-hops in proportion to the bandwidth values.
Platforms
All
link-fault
link-fault
Syntax
link-fault local-port-action {log-only | out-of-service}
Context
[Tree] (config>port>ethernet>efm-oam>peer-rdi-rx link-fault)
Full Context
configure port ethernet efm-oam peer-rdi-rx link-fault
Description
This command defines how to react to the reception of a link fault flag set in the informational PDU from a peer.
Default
link-fault local-port-action out-of-service
Parameters
- local-port-action
-
Defines whether or not the local port will be affected when a link fault is received from a peer.
- log-only
-
Keyword that prevents the port from being affected when the local peer receives a link fault. The dying gasp will be logged but the port will remain operational.
- out-of-service
-
Keyword that causes the port to enter a non-operation down state with a port state of link up. The error will be logged upon reception of link fault event. The port will not be available to service data but will continue to carry Link OAM traffic to ensure the link is monitored.
Platforms
All
link-group
link-group
Syntax
[no] link-group link-group-name
Context
[Tree] (config>service>vprn>isis link-group)
Full Context
configure service vprn isis link-group
Description
This command configures a link-group for the router or VPRN instance.
The no form of this command removes the specified link-group.
Parameters
- link-group-name
-
Name of the link-group to be added or removed from the router or VPRN service.
Platforms
All
link-group
Syntax
link-group link-group-name
no link-group
Context
[Tree] (config>router>isis link-group)
Full Context
configure router isis link-group
Description
This command specifies the IS-IS link group associated with this particular level of the interface.
Default
no link-group
Parameters
- link-group-name
-
Specifies an IS-IS link group name, up to 32 characters in length, on the system.
Platforms
All
link-local-address
link-local-address
Syntax
link-local-address ipv6-address [dad-disable]
no link-local-address
Context
[Tree] (config>service>ies>sub-if>ipv6 link-local-address)
[Tree] (config>service>vprn>if>ipv6 link-local-address)
[Tree] (config>service>ies>if>ipv6 link-local-address)
[Tree] (config>service>vprn>sub-if>ipv6 link-local-address)
[Tree] (config>router>if>ipv6 link-local-address)
Full Context
configure service ies subscriber-interface ipv6 link-local-address
configure service vprn interface ipv6 link-local-address
configure service ies interface ipv6 link-local-address
configure service vprn subscriber-interface ipv6 link-local-address
configure router interface ipv6 link-local-address
Description
This command configures the IPv6 Link Local address that is used as a virtual SRRP IPv6 address by the Master SRRP node. This address is sent in the Router Advertisements initiated by the Master SRRP node. Clients use this address as IPv6 default-gateway. Both SRRP nodes, Master and Backup, must be configured with the same Link Local address.
Only one link-local-address is allowed per interface.
Removing a manually configured link local address may impact routing protocols or static routes that have a dependency on that address. It is not recommended to remove a link local address when there are active IPv6 subscriber hosts on an IES or VPRN interface.
The no form of this command reverts to the default.
Parameters
- ipv6-address
-
Specifies the IPv6 address in the form:
- dad-disable
-
Disables Duplicate Address Detection (DAD) and sets the address to preferred, even if there is a duplicated address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service ies subscriber-interface ipv6 link-local-address
- configure service vprn subscriber-interface ipv6 link-local-address
All
- configure service vprn interface ipv6 link-local-address
- configure router interface ipv6 link-local-address
- configure service ies interface ipv6 link-local-address
link-local-modifier
link-local-modifier
Syntax
link-local-modifier modifier
no link-local-modifier
Context
[Tree] (config>service>ies>if>ipv6>secure-nd link-local-modifier)
Full Context
configure service ies interface ipv6 secure-nd link-local-modifier
Description
This command configures the Cryptographically Generated Address (CGA) modifier for link-local addresses.
Parameters
- modifier
-
Specifies the modifier in 32 hexadecimal nibbles.
Platforms
All
link-local-modifier
Syntax
link-local-modifier modifier
[no] link-local-modifier
Context
[Tree] (config>service>vprn>if>secure-nd link-local-modifier)
Full Context
configure service vprn interface secure-nd link-local-modifier
Description
This command configures the Cryptographically Generated Address (CGA) modifier for link-local addresses.
Parameters
- modifier
-
Specifies the modifier in 32 hexadecimal nibbles.
link-local-modifier
Syntax
link-local-modifier modifier
no link-local-modifier
Context
[Tree] (config>router>if>ipv6>secure-nd link-local-modifier)
Full Context
configure router interface ipv6 secure-nd link-local-modifier
Description
This command configures the Cryptographically Generated Address (CGA) modifier for link-local addresses.
Parameters
- modifier
-
Specifies the modifier in 32 hexadecimal nibbles.
Platforms
All
link-map-profile
link-map-profile
Syntax
link-map-profile link-map-profile-id [create]
no link-map-profile link-map-profile-id
Context
[Tree] (config lag link-map-profile)
Full Context
configure lag link-map-profile
Description
This command creates the link map profile that can to control which LAG ports are to be used on egress or enables the configuration context for previously created link map profile. link map profiles are not created by default.
The no form of this command, deletes the specified link map profile.
Parameters
- link-map-profile-id
-
An integer from 1 to 64 that defines a unique LAG link map profile on this LAG.
Platforms
All
link-measurement
link-measurement
Syntax
link-measurement
Context
[Tree] (config>test-oam link-measurement)
Full Context
configure test-oam link-measurement
Description
Commands in this context configure various link measurement template attributes that are inherited on associated IP interfaces for delay reporting to the routing engine.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
link-monitoring
link-monitoring
Syntax
[no] link-monitoring
Context
[Tree] (config>port>ethernet>efm-oam>discovery>advertise-capabilities link-monitoring)
Full Context
configure port ethernet efm-oam discovery advertise-capabilities link-monitoring
Description
When the link monitoring function is in a no shutdown state, the Link Monitoring capability (EV) is advertised to the peer through the EFM OAM protocol. This may not be desired if the remote peer does not support the Link Monitoring functionality.
The no version of this command suppresses the advertisement of capabilities.
Default
link-monitoring
Platforms
All
link-monitoring
Syntax
link-monitoring
Context
[Tree] (config>port>ethernet>efm-oam link-monitoring)
Full Context
configure port ethernet efm-oam link-monitoring
Description
This context contains link monitoring specific options defining the various local thresholds, port interaction and peer notification methods. In order to activate Link monitoring function, this context must be configured with the no shutdown option. Shutting down link monitoring will clear all historical link monitoring counters. If the port was removed from service and placed in a non-operational down state and a port state of link up because a signal failure threshold was crossed and link monitoring is shutdown, the port will be returned to service assuming no underlying conditions prevent this return to service.
When the link monitoring function is in a no shutdown state, the Link Monitoring capability (EV) is advertised to the peer through the EFM OAM protocol. This may not be desired if the remote peer does not support the Link Monitoring functionality.
Platforms
All
link-specific-rate
link-specific-rate
Syntax
link-specific-rate packet-rate-limit
no link-specific-rate
Context
[Tree] (config>sys>security>cpu-protection link-specific-rate)
Full Context
configure system security cpu-protection link-specific-rate
Description
This command configures a link-specific rate for CPU protection. This limit is applied to all ports within the system. The CPU will receive no more than the configured packet rate for all link level protocols such as LACP from any one port. The measurement is cleared each second and is based on the ingress port.
Default
link-specific-rate 15000
Parameters
- packet-rate-limit
-
Specifies a packet arrival rate limit, in packets per second, for link level protocols.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS
link-state-export-enable
link-state-export-enable
Syntax
[no] link-state-export-enable
Context
[Tree] (config>router>bgp link-state-export-enable)
Full Context
configure router bgp link-state-export-enable
Description
This command enables the export of link-state information from the BGP-LS address family into the local Traffic Engineering Database (TED).
The no form of this command disables the export of link state information into the TED.
Default
no link-state-export-enable
Platforms
All
link-state-import-enable
link-state-import-enable
Syntax
[no] link-state-import-enable
Context
[Tree] (config>router>bgp link-state-import-enable)
Full Context
configure router bgp link-state-import-enable
Description
This command enables the import of link-state information into the BGP-LS address family for advertisement to other BGP neighbors.
The no form of this command disables the import of link state information into the BGP-LS address family.
Default
no link-state-import-enable
Platforms
All
link-type
link-type
Syntax
link-type {pt-pt | shared}
no link-type [pt-pt | shared]
Context
[Tree] (config>service>template>vpls-sap-template>stp link-type)
[Tree] (config>service>vpls>spoke-sdp>stp link-type)
[Tree] (config>service>vpls>sap>stp link-type)
Full Context
configure service template vpls-sap-template stp link-type
configure service vpls spoke-sdp stp link-type
configure service vpls sap stp link-type
Description
This command instructs STP on the maximum number of bridges behind this SAP or spoke-SDP. If there is only a single bridge, transitioning to forwarding state will be based on handshaking (fast transitions). If more than two bridges are connected via a shared media, their SAP or spoke-SDPs should all be configured as shared, and timer-based transitions are used.
The no form of this command returns the link type to the default value.
Default
link-type pt-pt
Platforms
All
link-type
Syntax
link-type {pt-pt | shared}
no link-type
Context
[Tree] (config>service>pw-template>stp link-type)
Full Context
configure service pw-template stp link-type
Description
This command instructs STP on the maximum number of bridges behind this SAP or spoke SDP. If there is only a single bridge, transitioning to forwarding state will be based on handshaking (fast transitions). If more than two bridges are connected via a shared media, their SAP or spoke SDPs should all be configured as shared, and timer-based transitions are used.
The no form of this command returns the link type to the default value.
Default
link-type pt-pt
Platforms
All
linktrace
linktrace
Syntax
linktrace {mac-address | remote-mepid mep-id} mep mep-id domain md-index association ma-index [ttl ttl-value]
Context
[Tree] (oam>eth-cfm linktrace)
Full Context
oam eth-cfm linktrace
Description
The command initiates a linktrace test.
Parameters
- mac-address
-
Specifies a unicast MAC address destination.
- remote-mepid mep-id
-
Specifies the remote MEP ID of the peer within the association. The domain and association information are derived from the source mep for the session. The Layer 2 IEEE MAC address is resolved from previously-learned remote MAC addressing, derived from the reception and processing of the ETH-CC PDU. The local MEP must be administratively enabled.
- mep mep-id
-
Specifies the local MEP ID.
- md-index
-
Specifies the MD index.
- ma-index
-
Specifies the MA index.
- ttl-value
-
Specifies the TTL for a returned linktrace.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
listening-port
listening-port
Syntax
listening-port port
no listening-port
Context
[Tree] (config>system>grpc listening-port)
Full Context
configure system grpc listening-port
Description
This command configures the listening port for the gRPC server.
The no form of this command reverts to the default.
Default
listening-port 57400
Parameters
- port
-
Specifies the port number.
Platforms
All
live-output
live-output
Syntax
live-output {ip-address | fqdn} [port port] [router {router-instance | service-name service-name}]
no live-output
Context
[Tree] (config>call-trace>trace-profile live-output)
Full Context
configure call-trace trace-profile live-output
Description
This command specifies a live output destination for this trace. When configured, captures will not be stored locally but sent (over UDP) to the server in the specified routing context. The destination can be specified as either an IP address or a DNS FQDN. The live-output and debug-output commands are mutually exclusive.
The no form of this command disables live output streaming.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address of the server to stream to.
- fqdn
-
Specifies the FQDN that represents the server in DNS, up to 255 characters.
- port
-
Specifies the UDP port on which the server is listening.
- router-instance
-
Specifies the router instance in which the live output is forwarded.
- service-name
-
Specifies the name of the Layer 3 service in which the live output is forwarded.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lldp
lldp
Syntax
lldp
Context
[Tree] (config>port>ethernet lldp)
Full Context
configure port ethernet lldp
Description
Commands in this context configure Link Layer Discovery Protocol (LLDP) parameters on the specified port.
Platforms
All
lldp
Syntax
lldp
Context
[Tree] (config>port>ethernet lldp)
Full Context
configure port ethernet lldp
Description
Commands in this context configure Link Layer Discovery Protocol (LLDP) parameters on the specified port.
Platforms
All
lldp
Syntax
lldp
Context
[Tree] (config>system lldp)
Full Context
configure system lldp
Description
Commands in this context configure system-wide Link Layer Discovery Protocol parameters.
Platforms
All
llf
llf
Syntax
[no] llf
Context
[Tree] (config>service>epipe>sap>ethernet llf)
Full Context
configure service epipe sap ethernet llf
Description
This command enables Link Loss Forwarding (LLF) on an Ethernet port. This feature provides an end-to-end OAM fault notification for Ethernet VLL service. It brings down the Ethernet port (Ethernet LLF) or sends a SONET/SDH Path AIS (ATM LLF) toward the attached CE when there is a local fault on the Pseudowire or service, or a remote fault on the SAP or pseudowire, signaled with label withdrawal or T-LDP status bits. It ceases when the fault disappears.
The Ethernet port must be configured for null encapsulation.
This feature is also supported in Epipes with BGP-EVPN enabled. In this case, upon removal of the EVPN destination, the port is brought oper-down with flag LinkLossFwd, however the AD per-EVI route for the SAP is still advertised (the SAP is kept oper-up).
The no form of this command disables LLF on an Ethernet port.
Default
no llf
Platforms
All
lmm
lmm
Syntax
lmm [test-id test-id] [create]
no lmm
Context
[Tree] (config>oam-pm>session>ethernet lmm)
Full Context
configure oam-pm session ethernet lmm
Description
This command configures the LMM test ID to be assigned to the Tx and Rx counter-based loss test and creates the individual test. LMM does not carry this test ID in the PDU; the value is of local significance.
The no form of this command removes the LMM test function from the PM Session.
Parameters
- test-id
-
Specifies the value to be placed in the 4-byte test ID field of an ETH-DMM PDU.
- create
-
Creates the test.
Platforms
All
lns-group
lns-group
Syntax
lns-group lns-group-id
no lns-group
Context
[Tree] (config>router>l2tp>group lns-group)
[Tree] (config>router>l2tp>group>tunnel lns-group)
[Tree] (config>service>vprn>l2tp>group lns-group)
[Tree] (config>service>vprn>l2tp>group>tunnel lns-group)
Full Context
configure router l2tp group lns-group
configure router l2tp group tunnel lns-group
configure service vprn l2tp group lns-group
configure service vprn l2tp group tunnel lns-group
Description
This command configures the ISA LNS group for the L2TP group.
The no form of this command removes the LNS group ID from the configuration.
Default
no lns-group
Parameters
- lns-group-id
-
Specifies the LNS group ID.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lns-group
Syntax
lns-group lns-group-id [create]
no lns-group lns-group-id
Context
[Tree] (config>isa lns-group)
Full Context
configure isa lns-group
Description
This command configures an LNS group.
The no form of the command removes the LNS group ID from the configuration.
Parameters
- lns-group-id
-
Specifies the LNS group identifier.
- create
-
Mandatory keyword used when creating tunnel group in the ISA context. The create keyword requirement can be enabled/disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
load
load
Syntax
load file-url [overwrite | insert | append]
Context
[Tree] (candidate load)
Full Context
candidate load
Description
This command loads a previously saved candidate configuration into the current candidate. The edit point will be set to the end of the loaded configuration lines. The candidate configuration cannot be modified while a load is in progress.
Default
If the candidate is empty then a load without any of the optional parameters (such as overwrite, and so on) will load the file-url into the candidate. If the candidate is not empty then one of the options, such as overwrite, insert, and so on, must be specified.
Parameters
- file-url
-
Specifies the directory and filename to load.
- overwrite
-
Discards the contents of the current candidate and replace it with the contents of the file.
- insert
-
Inserts the contents of the file at the current edit point.
- append
-
Inserts the contents of the file at the end of the current candidate.
Platforms
All
load-balance-key
load-balance-key
Syntax
load-balance-key [vendor vendor-id [vendor-id]] attribute-type attribute-type [attribute-type]
load-balance-key source-ip-udp
no load-balance-key
Context
[Tree] (config>service>vprn>radius-proxy>server load-balance-key)
[Tree] (config>router>radius-proxy>server load-balance-key)
Full Context
configure service vprn radius-proxy server load-balance-key
configure router radius-proxy server load-balance-key
Description
This command specifies the key used in calculating a hash to select an external RADIUS server from the pool of configured servers.
The key can be the source IP and source UDP port tuple, or the specified RADIUS attribute in RADIUS packets.
The no form of this command removes the parameters from the configuration.
Parameters
- vendor-id
-
Specifies the vendor-id of vendor-specific attribute.
- attribute-type
-
Specifies that the key is constructed with the attributes in the RADIUS message.
- source-ip-udp
-
Specifies that the key consists of the source IP address and source UDP port of the RADIUS message.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
load-balance-method
load-balance-method
Syntax
load-balance-method {per-session | per-tunnel}
no load-balance-method
Context
[Tree] (config>router>l2tp>group load-balance-method)
[Tree] (config>service>vprn>l2tp>group>tunnel load-balance-method)
[Tree] (config>service>vprn>l2tp>group load-balance-method)
[Tree] (config>router>l2tp>group>tunnel load-balance-method)
Full Context
configure router l2tp group load-balance-method
configure service vprn l2tp group tunnel load-balance-method
configure service vprn l2tp group load-balance-method
configure router l2tp group tunnel load-balance-method
Description
This command is applicable only to LNS. By default traffic load balancing between the BB-ISAs is based on sessions. Each session is individually assigned to an BB-ISA during session establishment phase.
By introducing MLPPPoX, all sessions of a bundle must be terminated on the same LNS BB-ISA. This is necessary for two reasons:
-
QoS in the carrier IOM has a uniform view of the subscriber
-
a single BB-ISA is responsible for MLPPPoX encapsulation/fragmentation for a given bundle.
Therefore, if fragmentation is enabled, load-balancing per tunnel must be configured. In the per tunnel load-balancing mode, all sessions within the same tunnel are terminated on the same LNS BB-ISA.
In the case that we have MLPPPoX sessions with a single member link, both load-balancing methods are valid.
The no form of this command reverts to the default.
Default
load-balance-method per-session
Parameters
- per-session
-
Specifies that the traffic load balancing between the LNS BB-ISAs is based on individual PPPoE sessions.
- per-tunnel
-
Specifies that the traffic load balancing between the LNS BB-ISAs is based on tunnels.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
load-balancing
load-balancing
Syntax
load-balancing
Context
[Tree] (config>service>epipe load-balancing)
Full Context
configure service epipe load-balancing
Description
This command enables the load-balancing context to configure interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load-balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Default
not applicable
Platforms
All
load-balancing
Syntax
load-balancing
Context
[Tree] (config>service>template>vpls-template load-balancing)
[Tree] (config>service>vpls load-balancing)
Full Context
configure service template vpls-template load-balancing
configure service vpls load-balancing
Description
This command enables the load-balancing context to configure interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load-balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Platforms
All
load-balancing
Syntax
load-balancing
Context
[Tree] (config>service>ies>if load-balancing)
Full Context
configure service ies interface load-balancing
Description
This command enables the load-balancing context to configure interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Platforms
All
load-balancing
Syntax
load-balancing
Context
[Tree] (config>service>vprn>nw-if load-balancing)
Full Context
configure service vprn network-interface load-balancing
Description
This command enables the load-balancing context to configure interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load-balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Platforms
All
load-balancing
Syntax
load-balancing
Context
[Tree] (config>router>if load-balancing)
Full Context
configure router interface load-balancing
Description
This command enables the load-balancing context to configure interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load-balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Platforms
All
load-balancing
Syntax
load-balancing
Context
[Tree] (config>system load-balancing)
Full Context
configure system load-balancing
Description
This command enables the load-balancing context to configure the interface per-flow load balancing options that will apply to traffic entering this interface and egressing over a LAG/ECMP on system-egress. This is a per interface setting. For load-balancing options that can also be enabled on the system level, the options enabled on the interface level overwrite system level configurations.
Platforms
All
load-balancing-algorithm
load-balancing-algorithm
Syntax
load-balancing-algorithm option
no load-balancing-algorithm
Context
[Tree] (config>port>tdm>ds1>channel-group load-balancing-algorithm)
[Tree] (config>port>tdm>ds3 load-balancing-algorithm)
[Tree] (config>port>tdm>e1>channel-group load-balancing-algorithm)
[Tree] (config>port>tdm>e3 load-balancing-algorithm)
[Tree] (config>port>ethernet load-balancing-algorithm)
[Tree] (config>port>sonet-sdh>path load-balancing-algorithm)
Full Context
configure port tdm ds1 channel-group load-balancing-algorithm
configure port tdm ds3 load-balancing-algorithm
configure port tdm e1 channel-group load-balancing-algorithm
configure port tdm e3 load-balancing-algorithm
configure port ethernet load-balancing-algorithm
configure port sonet-sdh path load-balancing-algorithm
Description
This command specifies the load balancing algorithm to be used on this port.
In the default mode, no load-balancing-algorithm, the port inherits the global settings. The value is not applicable for ports that do not pass any traffic.
The configuration of load-balancing-algorithm at logical port level has three possible values:
-
include-l4 — Enables inherits system-wide settings including Layer 4 source and destination port value in hashing algorithm.
-
exclude-l4 — Layer 4 source and destination port value will not be included in hashing.
-
no load-balancing-algorithm — Inherits system-wide settings.
The hashing algorithm addresses finer spraying granularity where many hosts are connected to the network. To address more efficient traffic distribution between network links (forming a LAG group), a hashing algorithm extension takes into account Layer 4 information (src/dst L4-protocol port). The hashing index can be calculated according to the following algorithm:
If [(TCP or UDP traffic) & enabled]
hash (<TCP/UDP ports>, <IP addresses>)
else if (IP traffic)
hash (<IP addresses>)
else
hash (<MAC addresses>)
endif
This algorithm will be used in all cases where IP information in per-packet hashing is included (refer to "Traffic Load Balancing Options” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Interface Configuration Guide). However the Layer 4 information (TCP/UDP ports) will not be used in the following cases:
-
fragmented packets
Default
no load-balancing-algorithm
Parameters
- option
-
Specifies the load balancing algorithm to be used on this port.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
- configure port tdm ds1 channel-group load-balancing-algorithm
- configure port tdm e1 channel-group load-balancing-algorithm
- configure port tdm ds3 load-balancing-algorithm
- configure port tdm e3 load-balancing-algorithm
All
- configure port ethernet load-balancing-algorithm
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure port sonet-sdh path load-balancing-algorithm
load-balancing-weight
load-balancing-weight
Syntax
load-balancing-weight value
no load-balancing-weight [value]
Context
[Tree] (config>service>vprn>static-route-entry>next-hop load-balancing-weight)
Full Context
configure service vprn static-route-entry next-hop load-balancing-weight
Description
This command configures a weighted ECMP load-balancing weight for a static route next-hop.
If all of the ECMP next-hops of a static route have a configured load-balancing-weight then packets matching the route are sprayed according to the relative weights. In other words, the next-hop interface with the largest load-balancing weight should receive the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface and effectively disables weighted ECMP for the entire static route.
Parameters
- value
-
Specifies the cost metric value.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight [weight]
no load-balancing-weight
Context
[Tree] (config>service>vprn>ospf>area>if load-balancing-weight)
[Tree] (config>service>vprn>ospf3>area>if load-balancing-weight)
Full Context
configure service vprn ospf area interface load-balancing-weight
configure service vprn ospf3 area interface load-balancing-weight
Description
This command configures the weighted ECMP load-balancing weight for an IS-IS, OSPF, and OSPF3 interface. If the interface becomes an ECMP next hop for an IPv4 or IPv6 route, and all the other ECMP next hops are interfaces with configured (non-zero) load-balancing weights, then the traffic distribution over the ECMP interfaces is proportional to the weights. This means that the interface with the largest load-balancing weight receives the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface which effectively disables weighted ECMP for any IP prefix that has this interface as a next hop.
Default
no load-balancing-weight
Parameters
- weight
-
Specifies the load balancing weight.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight weight
no load-balancing-weight
Context
[Tree] (config>service>vprn>isis>if load-balancing-weight)
Full Context
configure service vprn isis interface load-balancing-weight
Description
This command configures the weighted ECMP load-balancing weight for an IS-IS interface of the VPRN. If the interface becomes an ECMP next-hop for IPv4 or IPv6 route and all the other ECMP next-hops are interfaces with configured (non-zero) load-balancing weights, then the traffic distribution over the ECMP interfaces is proportional to the weights. In other words, the interface with the largest load-balancing-weight should receive the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface and, therefore, effectively disables weighted ECMP for any IP prefix that has this interface as a next-hop.
Default
no load-balancing-weight
Parameters
- weight
-
Specifies the load balancing weight.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight weight
no load-balancing-weight
Context
[Tree] (config>router>ldp>if-params>if load-balancing-weight)
Full Context
configure router ldp interface-parameters interface load-balancing-weight
Description
This command configures the load balancing weight for the LDP interface. The load balancing weight, normalized to 64, is used for weighted ECMP of LDP labeled packets over direct network IP interfaces.
If the interface becomes an ECMP next hop for an LDP FEC, and all the other ECMP next hops are interfaces with configured (non-zero) load-balancing weights, then the traffic distribution over the ECMP interfaces is proportional to the normalized weight with a granularity of 64.
If one or more of the LDP interfaces in the ECMP set does not have a configured load-balancing weight, then the system falls back to ECMP.
The no form of this command removes the load balancing weight for the LDP interface.
Parameters
- weight
-
Specifies the load balancing weight value.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight weight
no load-balancing-weight
Context
[Tree] (config>router>mpls>lsp load-balancing-weight)
Full Context
configure router mpls lsp load-balancing-weight
Description
This command assigns a weight to an MPLS LSP for use in the weighted load-balancing, or weighted ECMP, over MPLS feature.
Parameters
- weight
-
Specifies a 32-bit integer representing the weight of the LSP.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight weight
no load-balancing-weight
Context
[Tree] (config>router>mpls>fwd-policies>fwd-policy>nh-grp load-balancing-weight)
Full Context
configure router mpls forwarding-policies forwarding-policy next-hop-group load-balancing-weight
Description
This command configures the load balancing weight of an NHG entry in a forwarding policy.
A weight for each NHG of a policy must be assigned to the weighted ECMP forwarding to operate over the set of NHGs of the policy.
The no form of this command removes the load balancing weight from an NHG entry in a forwarding policy.
Parameters
- weight
-
Specifies the load balancing weight value.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight value
no load-balancing-weight [value]
Context
[Tree] (config>router>static-route-entry>next-hop load-balancing-weight)
Full Context
configure router static-route-entry next-hop load-balancing-weight
Description
This command configures a weighted ECMP load-balancing weight for a static route next-hop.
If all of the ECMP next-hops of a static route have a configured load-balancing-weight then packets matching the route are sprayed according to the relative weights. In other words, the next-hop interface with the largest load-balancing weight should receive the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface and effectively disables weighted ECMP for the entire static route.
Parameters
- value
-
Specifies the load balancing weight value.
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight [value]
no load-balancing-weight
Context
[Tree] (config>router>isis>interface load-balancing-weight)
Full Context
configure router isis interface load-balancing-weight
Description
This command configures the weighted ECMP load-balancing weight for an IS-IS interface. If the interface becomes an ECMP next hop for an IPv4 or IPv6 route, and all the other ECMP next hops are interfaces with configured (non-zero) load-balancing weights, then the traffic distribution over the ECMP interfaces is proportional to the weights. In other words, the interface with the largest load-balancing weight should receive the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface and therefore effectively disables weighted ECMP for any IP prefix that has this interface as a next hop.
Default
no load-balancing-weight
Parameters
- value
-
0 to 4294967295
Platforms
All
load-balancing-weight
Syntax
load-balancing-weight [weight]
no load-balancing-weight
Context
[Tree] (config>router>ospf>area>if load-balancing-weight)
[Tree] (config>router>ospf3>area>if load-balancing-weight)
Full Context
configure router ospf area interface load-balancing-weight
configure router ospf3 area interface load-balancing-weight
Description
This command configures the weighted ECMP load-balancing weight for an OSPF or OSPF3 interface. If the interface becomes an ECMP next hop for an IPv4 or IPv6 route, and all the other ECMP next hops are interfaces with configured (non-zero) load-balancing weights, then the traffic distribution over the ECMP interfaces is proportional to the weights. This means that the interface with the largest load-balancing weight receives the most forwarded traffic if weighted ECMP is applicable.
The no form of this command disables weighted ECMP for the interface which effectively disables weighted ECMP for any IP prefix that has this interface as a next hop.
Default
no load-balancing-weight
Parameters
- weight
-
Specifies the load balancing weight.
Platforms
All
local
local
Syntax
[no] local
Context
[Tree] (config>subscr-mgmt>sla-profile>control local)
Full Context
configure subscriber-mgmt sla-profile control local
Description
This command enables a session that is set up with local control plane handling to use this SLA profile. This command cannot be disabled.
Default
local
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local
Syntax
[no] local
Context
[Tree] (config>subscr-mgmt>sub-profile>control local)
Full Context
configure subscriber-mgmt sub-profile control local
Description
This command enables a session that is set up with local control plane handling to use this subscriber profile. This command cannot be disabled.
Default
local
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local
Syntax
local [inherit | all | vc-only | none]
Context
[Tree] (config>service>vprn>ttl-propagate local)
Full Context
configure service vprn ttl-propagate local
Description
This command overrides the global configuration of the TTL propagation for locally generated packets which are forwarded over a MPLS LSPs in a given VPRN service context.
The global configuration is performed under config>router>ttl-propagate>vprn-local.
The default behavior for a given VPRN instance is to inherit the global configuration for the same command. The user can explicitly set the default behavior by configuring the inherit value
Default
local inherit
Parameters
- inherit
-
Specifies the TTL propagation behavior is inherited from the global configuration under config>router>ttl-propagate>vprn-local.
- none
-
Specifies the TTL of the IP packet is not propagated into the VC label or labels in the transport label stack.
- vc-only
-
Specifies the TTL of the IP packet is propagated into the VC label and not into the labels in the transport label stack.
- all
-
Specifies the TTL of the IP packet is propagated into the VC label and all labels in the transport label stack.
Platforms
All
local
Syntax
local
Context
[Tree] (config>ipsec>ts-list local)
Full Context
configure ipsec ts-list local
Description
Commands in this context configure local TS-list parameters. The TS-list is the traffic selector of the local system, such as TSr, when the system acts as an IKEv2 responder.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-address
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>router>l2tp local-address)
[Tree] (config>service>vprn>l2tp>group local-address)
[Tree] (config>service>vprn>l2tp>group>tunnel local-address)
[Tree] (config>service>vprn>l2tp local-address)
[Tree] (config>router>l2tp>group local-address)
[Tree] (config>router>l2tp>group>tunnel local-address)
Full Context
configure router l2tp local-address
configure service vprn l2tp group local-address
configure service vprn l2tp group tunnel local-address
configure service vprn l2tp local-address
configure router l2tp group local-address
configure router l2tp group tunnel local-address
Description
This command configures the local address.
The no form of this command removes the local IP address from the configuration.
Default
no local-address
Parameters
- ip-address
-
Specifies the IP address used during L2TP authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy local-address)
Full Context
configure subscriber-mgmt bgp-peering-policy local-address
Description
This command configures the local IP address used by the group or neighbor when communicating with BGP peers.
Outgoing connections use the local-address as the source of the TCP connection when initiating connections with a peer.
When a local address is not specified, the 7750 SR OS uses the system IP address when communicating with IBGP peers and uses the interface address for directly connected EBGP peers. This command is used at the neighbor level to revert to the value defined under the group level.
The no form of this command removes the configured local-address for BGP.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address of the local address.
For IPv4, the local address is expressed in dotted decimal notation. Allowed values are a valid routable IP address on the router, either an interface or system IP address.
For IPv6, the local address is expressed in semi-colon hexadecimal notation. Allowed values is an interface or a system IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>service>vprn>gsmp>group>neighbor local-address)
[Tree] (config>service>vpls>gsmp>group>neighbor local-address)
Full Context
configure service vprn gsmp group neighbor local-address
configure service vpls gsmp group neighbor local-address
Description
This command configures the source ip-address used in the connection towards the neighbor. The local address is optional. If specified the node will accept connections only for that address in the service running ANCP. The address may be created after the reference but connections will not be accepted until it is created. If the local address is not used, the system accepts connections on any interface within the routing context.
The no form of this command reverts to the default.
Parameters
- ip-address
-
Specifies the source IP address to be used in the connection toward the neighbor.
Platforms
All
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query local-address)
Full Context
configure subscriber-mgmt wlan-gw tunnel-query local-address
Description
This command enables matching on tunnels that are terminated by the specified IP address on the WLAN-GW.
The no form of this command disables matching on the local IP address.
Default
no local-address
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>service>vprn>bgp>group>neighbor local-address)
[Tree] (config>service>vprn>bgp>group local-address)
Full Context
configure service vprn bgp group neighbor local-address
configure service vprn bgp group local-address
Description
Configures the local IP address used by the group or neighbor when communicating with BGP peers.
Outgoing connections use the local-address as the source of the TCP connection when initiating connections with a peer.
When a local address is not specified, the OS uses the system IP address when communicating with IBGP peers and uses the interface address for directly connected EBGP peers. This command is used at the neighbor level to revert to the value defined under the group level.
The no form of this command removes the configured local-address for BGP.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Parameters
- no local-address
-
The router ID is used when communicating with IBGP peers and the interface address is used for directly connected EBGP peers.
- ip-address
-
The local address expressed in dotted decimal notation. Allowed values are a valid routable IP address on the router, either an interface or system IP address.
Platforms
All
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>service>vprn>msdp>peer local-address)
[Tree] (config>service>vprn>msdp>group local-address)
[Tree] (config>service>vprn>msdp>group>peer local-address)
[Tree] (config>service>vprn>msdp local-address)
Full Context
configure service vprn msdp peer local-address
configure service vprn msdp group local-address
configure service vprn msdp group peer local-address
configure service vprn msdp local-address
Description
This command configures the local end of a Multicast Source Discovery Protocol (MSDP) session. For MSDP to function, at least one peer must be configured. When configuring a peer, you must include this local-address command to configure the local end of the MSDP session. This address must be present on the node and is used to validate incoming connections to the peer and to establish connections to the remote peer.
If the user enters this command, then the address provided is validated and will be used as the local address for MSDP peers from that point. If a subsequent local-address command is entered, it will replace the existing configuration and existing sessions will be terminated.
Similarly, when the no form of this command is entered, the existing local address will be removed from the configuration and the existing sessions will be terminated.
Whenever a session is terminated, all information pertaining to and learned from that peer will be removed.
Whenever a new peering session is created or a peering session is lost, an event message should be generated.
The no form of this command removes the local address from the configuration.
Default
no local-address
Parameters
- ip-address
-
Specifies an existing address on the node.
Platforms
All
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>router>pcep>pcc local-address)
[Tree] (config>router>pcep>pce local-address)
Full Context
configure router pcep pcc local-address
configure router pcep pce local-address
Description
This command configures the local IPv4 address of the PCEP speaker.
The PCEP protocol operates over TCP using destination TCP port 4189. The PCE client (PCC) always initiates the connection. After the user configures the PCEP local IPv4 address and the peer IPv4 address on the PCC, the latter initiates a TCP connection to the PCE. If both a local IPv4 and a local IPv6 address are configured, the connection uses the local address that is the same family as the peer address. When the connection is established, the PCC and PCE exchange OPEN messages, which initializes the PCEP session and exchanges the session parameters to be negotiated.
By default, the PCC attempts to reach the remote PCE address out of band using the management port. If it cannot, it attempts to reach the remote PCE address in band. The user can change the configuration of the peer to attempt connecting in band only or out of band only. When the session comes up out of band, the management IP address is used as the local address. The local IPv4 address configured by the user is only used for in-band sessions and is otherwise ignored.
The no form of the command removes the configured local address of the PCEP speaker.
Parameters
- ip-address
-
Specifies the IP address of the PCEP speaker to be used for in-band sessions.
Platforms
All
- configure router pcep pcc local-address
VSR-NRC
- configure router pcep pce local-address
local-address
Syntax
local-address address
no local-address
Context
[Tree] (config>router>msdp>group>peer local-address)
[Tree] (config>router>msdp>group local-address)
[Tree] (config>router>msdp>peer local-address)
[Tree] (config>router>msdp local-address)
Full Context
configure router msdp group peer local-address
configure router msdp group local-address
configure router msdp peer local-address
configure router msdp local-address
Description
This command configures the local end of a Multicast Source Discovery Protocol (MSDP) session. For MSDP to function, at least one peer must be configured. When configuring a peer, you must include this local-address command to configure the local end of the MSDP session. This address must be present on the node and is used to validate incoming connections to the peer and to establish connections to the remote peer.
If the user enters this command, the address provided is validated and will be used as the local address for MSDP peers from that point. If a subsequent local-address command is entered, it will replace the existing configuration and existing sessions will be terminated.
Similarly, when the no form of this command is entered, the existing local address will be removed from the configuration and the existing sessions will be terminated.
Whenever a session is terminated, all information pertaining to and learned from that peer will be removed.
Whenever a new peering session is created or a peering session is lost, an event message should be generated.
The no form of this command removes the local address from the configuration.
Default
no local-address
Parameters
- address
-
Specifies an existing address on the node.
Platforms
All
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>router>origin-validation>rpki-session local-address)
Full Context
configure router origin-validation rpki-session local-address
Description
This command configures the local address to use for setting up the TCP connection used by an RPKI-Router session. The default local-address is the outgoing interface IPv4 or IPv6 address. The local-address cannot be changed without first shutting down the session.
Default
no local-address
Parameters
- ip-address
-
Specifies an IPv4 address or an IPv6 address.
Platforms
All
local-address
Syntax
local-address [ip-int-name | ip-address | ipv6-address]
no local-address
Context
[Tree] (config>router>bgp>group>neighbor local-address)
[Tree] (config>router>bgp>group local-address)
Full Context
configure router bgp group neighbor local-address
configure router bgp group local-address
Description
This command configures the local IP address used by the group or neighbor when communicating with BGP peers.
Outgoing connections use the local-address as the source of the TCP connection when initiating connections with a peer.
When a local address is not specified, the router uses the system IP address when communicating with IBGP peers and uses the interface address for directly connected EBGP peers. This command is used at the neighbor level to revert to the value defined under the group level.
When set to a router interface, the local-address inherits the primary IPv4 or IPv6 address of the router interface depending on whether BGP is configured for IPv4 or IPv6. If the corresponding IPv4 or IPv6 address is not configured on the router interface, the BGP sessions that have this interface set as the local-address are kept down until an interface address is configured on the router interface.
The no form of this command removes the configured local-address for BGP.
The no form of this command used at the group level returns the configuration to the value defined at the global level.
The no form of this command used at the neighbor level returns the configuration to the value defined at the group level.
Default
no local-address
Parameters
- ip-address
-
Specifies the local address expressed in dotted decimal notation. Allowed value is a valid routable IP address on the router, either an interface or system IP address.
- ipv6-address
-
Specifies the local address expressed in dotted decimal notation. Allowed value is a valid routable IPv6 address on the router, either an interface or system IPv6 address.
- ip-int-name
-
Specifies the IP interface name whose address the local address will inherit. The interface can be any network interface configured on the system.
Platforms
All
local-address
Syntax
local-address ip-address | ipv6-address
no local-address
Context
[Tree] (config>bmp>station>connection local-address)
Full Context
configure bmp station connection local-address
Description
This command configures the local IP address used by the local router when communicating with the BMP monitoring station. This configuration is optional.
Outgoing connections use the local-address as the source of the TCP connection when initiating connections with a monitoring station.
The BMP session may flap when this parameter is changed. Shut down the BMP session before changing the values.
The no form of this command removes the configured local-address for the BMP session. The default is to use the system IP address.
Default
local-address ip-address (system IP address)
Parameters
- ip-address
-
Specifies the local address expressed in dotted decimal notation. Allowed value is a valid routable IP address on the router, either an interface or system IP address.
- ipv6-address
-
Specifies the local address expressed in dotted decimal notation. Allowed value is a valid routable IPv6 address on the router, either an interface or system IPv6 address.
Platforms
All
local-address
Syntax
local-address ip-address
no local-address
Context
[Tree] (config>anysec>tnl-enc>sec-term-pol local-address)
Full Context
configure anysec tunnel-encryption security-termination-policy local-address
Description
This command configures the local IPv4 or IPv6 address for the system IP or loopback node SID. This is used to program the FP5 label stack to match the incoming ANYsec tunnel and decryption of the tunnel.
The no form of this command removes the IP address that is associated with ANYsec decryption.
Parameters
- ip-address
-
Specifies the IPv4 or IPv6 address of the local address.
Platforms
7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se
local-address-assignment
local-address-assignment
Syntax
local-address-assignment
Context
[Tree] (config>service>ies>sub-if local-address-assignment)
[Tree] (config>service>vprn>sub-if>grp-if local-address-assignment)
[Tree] (config>service>vprn>sub-if local-address-assignment)
[Tree] (config>service>ies>sub-if>grp-if local-address-assignment)
Full Context
configure service ies subscriber-interface local-address-assignment
configure service vprn subscriber-interface group-interface local-address-assignment
configure service vprn subscriber-interface local-address-assignment
configure service ies subscriber-interface group-interface local-address-assignment
Description
Commands in this context configure local address assignment parameters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address-assignment
Syntax
local-address-assignment [terminate-only]
no local-address-assignment
Context
[Tree] (debug>service>id>ppp>event local-address-assignment)
Full Context
debug service id ppp event local-address-assignment
Description
This command enables debugging for local-address-assignment events.
The no form of this command disables debugging.
Parameters
- terminate-only
-
Enables debugging for local address assignment.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-address-assignment
Syntax
[no] local-address-assignment
Context
[Tree] (config>service>ies>if>sap>ipsec-gw local-address-assignment)
[Tree] (config>service>vprn>if>sap>ipsec-gw local-address-assignment)
Full Context
configure service ies interface sap ipsec-gw local-address-assignment
configure service vprn interface sap ipsec-gw local-address-assignment
Description
Commands in this context configure local address assignments for the IPsec gateway.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-address-ipv6
local-address-ipv6
Syntax
local-address-ipv6 ipv6-address
no local-address-ipv6
Context
[Tree] (config>router>pcep>pce local-address-ipv6)
[Tree] (config>router>pcep>pcc local-address-ipv6)
Full Context
configure router pcep pce local-address-ipv6
configure router pcep pcc local-address-ipv6
Description
This command configures the local IPv6 address of the PCEP speaker.
The PCEP protocol operates over TCP using destination TCP port 4189. The PCE client (PCC) always initiates the connection. After the user configures the PCEP local IPv6 address and the peer IPv6 address on the PCC, the latter initiates a TCP connection to the PCE. If both a local IPv4 and a local IPv6 address are configured, the connection uses the local address that is the same family as the peer address. When the connection is established, the PCC and PCE exchange OPEN messages, which initializes the PCEP session and exchanges the session parameters to be negotiated.
By default, the PCC attempts to reach the remote PCE address out of band using the management port. If it cannot, it attempts to reach the remote PCE address in-band. The user can change the configuration of the peer to attempt connecting in band only or out of band only. When the session comes up out of band, the management IP address is used as the local address. The local IPv6 address configured by the user is only used for in-band sessions and is otherwise ignored.
The no form of the command removes the configured local address of the PCEP speaker.
Parameters
- ipv6-address
-
Specifies the IP address of the PCEP speaker to be used for in-band sessions.
Platforms
VSR-NRC
- configure router pcep pce local-address-ipv6
All
- configure router pcep pcc local-address-ipv6
local-age
local-age
Syntax
local-age aging-timer
no local-age [aging-timer]
Context
[Tree] (config>service>template>vpls-template local-age)
[Tree] (config>service>vpls local-age)
Full Context
configure service template vpls-template local-age
configure service vpls local-age
Description
Specifies the aging time for locally learned MAC addresses in the forwarding database (FDB) for the Virtual Private LAN Service (VPLS) instance. In a VPLS service, MAC addresses are associated with a Service Access Point (SAP) or with a Service Distribution Point (SDP). MACs associated with a SAP are classified as local MACs, and MACs associated with an SDP are remote MACs.
Like in a Layer 2 switch, learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (the aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the FDB. The local-age timer specifies the aging time for local learned MAC addresses.
The no form of this command returns the local aging timer to the default value.
Default
local age 300 — Local MACs aged after 300 seconds.
Parameters
- aging-timer
-
Specifies the aging time for local MACs expressed in seconds
Platforms
All
local-as
local-as
Syntax
local-as as-number [private]
no local-as
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy local-as)
Full Context
configure subscriber-mgmt bgp-peering-policy local-as
Description
This command configures a BGP virtual autonomous system (AS) number.
In addition to the AS number configured for BGP in the config>router>autonomous-system context, a virtual (local) AS number is configured. The virtual AS number is added to the as-path message before the router’s AS number makes the virtual AS the second AS in the as-path.
This configuration parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). Thus, by specifying this at each neighbor level, it is possible to have a separate as-number per EBGP session.
When a command is entered multiple times for the same AS, the last command entered is used in the configuration. The private attribute can be added or removed dynamically by reissuing the command.
Changing the local AS at the global level in an active BGP instance causes the BGP instance to restart with the new local AS number. Changing the local AS at the global level in an active BGP instance causes BGP to re-establish the peer relationships with all peers in the group with the new local AS number. Changing the local AS at the neighbor level in an active BGP instance causes BGP to re-establish the peer relationship with the new local AS number.
This is an optional command and can be used in the following circumstance:
Provider router P is moved from AS1 to AS2. The customer router that is connected to P, however, is configured to belong to AS1. To avoid reconfiguring the customer router, the local-as value on router P can be set to AS1. Thus, router P adds AS1 to the as-path message for routes it advertises to the customer router.
The no form of this command used at the global level will remove any virtual AS number configured.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Parameters
- as-number
-
Specifies the virtual autonomous system number, expressed as a decimal integer.
- private
-
Specifies that the local-as number is hidden in paths learned from the peering.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-as
Syntax
local-as as-number [private] [no-prepend-global-as]
no local-as
Context
[Tree] (config>service>vprn>bgp>group>neighbor local-as)
[Tree] (config>service>vprn>bgp>group local-as)
[Tree] (config>service>vprn>bgp local-as)
Full Context
configure service vprn bgp group neighbor local-as
configure service vprn bgp group local-as
configure service vprn bgp local-as
Description
This command configures a BGP virtual autonomous system (AS) number.
In addition to the global AS number configured for BGP in the config>router>autonomous-system context, a virtual (local) AS number can be configured to support various AS number migration scenarios. The local AS number is added to the to the beginning the as-path attribute ahead of the router’s AS number.
This configuration parameter can be set at three levels: global level (applies to all EBGP peers), group level (applies to all EBGP peers in peer-group) or neighbor level (only applies to EBGP specified peer). Thus, by specifying this at each neighbor level, it is possible to have a separate local-as per EBGP session. The local-as command is not supported for IBGP sessions. When the optional private keyword is specified in the command the local-as number is not added to inbound routes from the EBGP peer that has local-as in effect.
When a command is entered multiple times for the same AS, the last command entered is used in the configuration. The private attribute can be added or removed dynamically by reissuing the command.
Changing the local AS at the global level in an active BGP instance causes the BGP instance to restart with the new local AS number. Changing the local AS at the global level in an active BGP instance causes BGP to re-establish the peer relationships with all peers in the group with the new local AS number. Changing the local AS at the neighbor level in an active BGP instance causes BGP to re-establish the peer relationship with the new local AS number.
This is an optional command and can be used in the following circumstance:
Provider router P is moved from AS1 to AS2. The customer router that is connected to P, however, is configured to belong to AS1. To avoid reconfiguring the customer router, the local-as value on router P can be set to AS1. Thus, router P adds AS1 to the as-path message for routes it advertises to the customer router.
The no form of this command used at the global level removes any virtual AS number configured.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no local-as
Parameters
- as-number
-
The virtual autonomous system number, expressed as a decimal integer.
- private
-
Specifies the local-as is hidden in paths learned from the peering.
- no-prepend-global-as
-
Specifies that the global-as is hidden in paths announced to the EBGP peer.
Platforms
All
local-as
Syntax
local-as as-number [private] [no-prepend-global-as]
no local-as
Context
[Tree] (config>router>bgp>group>neighbor local-as)
[Tree] (config>router>bgp local-as)
[Tree] (config>router>bgp>group local-as)
Full Context
configure router bgp group neighbor local-as
configure router bgp local-as
configure router bgp group local-as
Description
This command configures a BGP local autonomous system (AS) number. In addition to the global AS number configured for BGP using the autonomous-system command, a local AS number can be configured to support various AS number migration scenarios.
When the local-as command is applied to a BGP neighbor and the local-as is different from the peer-as, the session comes up as EBGP and by default the global-AS number and then (in that order) the local-as number are prepended to the AS_PATH attribute in outbound routes sent to the peer. In received routes from the EBGP peer, the local AS is prepended to the AS path by default, but this can be disabled with the private option.
When the local-as command is applied to a BGP neighbor and the local-as is the same as the peer-as, the session comes up as IBGP, and by default, the global-AS number is prepended to the AS_PATH attribute in outbound routes sent to the peer.
This configuration parameter can be set at three levels: global level (applies to all BGP peers), group level (applies to all BGP peers in group) or neighbor level (only applies to one specific BGP neighbor). By specifying this at the neighbor level, it is possible to have a separate local-as for each BGP session.
When the optional no-prepend-global-as command is configured, the global-as number is not added in outbound routes sent to an IBGP or EBGP peer.
When a command is entered multiple times for the same AS, the last command entered is used in the configuration. The private option can be added or removed dynamically by reissuing the command. Changing the local AS at the global level in an active BGP instance causes the BGP instance to restart with the new local AS number. Changing the local AS at the global level in an active BGP instance causes BGP to re-establish the peer relationships with all peers in the group with the new local AS number. Changing the local AS at the neighbor level in an active BGP instance causes BGP to re-establish the peer relationship with the new local AS number.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no local-as
Parameters
- as-number
-
Specifies the virtual autonomous system number expressed as a decimal integer.
- private
-
Specifies the local-as is hidden in paths learned from the peering.
- no-prepend-global-as
-
Specifies that the global-as is hidden in paths announced to the BGP peer.
Platforms
All
local-attachment-circuit
local-attachment-circuit
Syntax
local-attachment-circuit ac-name [endpoint endpoint-name] [bgp bgp-instance] [create]
no local-attachment-circuit ac-name
Context
[Tree] (config>service>epipe>bgp-evpn local-attachment-circuit)
Full Context
configure service epipe bgp-evpn local-attachment-circuit
Description
This command configures a local attachment circuit (AC) in which the local Ethernet tag can be configured.
The no form of this command disables the context.
Default
no local-attachment-circuit
Parameters
- ac-name
-
Specifies the name of the local attachment circuit, up to 32 characters.
- endpoint-name
-
Specifies the name of the endpoint, up to 32 characters.
- bgp-instance
-
Specifies the BGP instance ID.
- create
-
Keyword used to create the local AC.
Platforms
All
local-auth-db
local-auth-db
Syntax
local-auth-db name
no local-auth-db
Context
[Tree] (config>service>dynsvc>policy>auth local-auth-db)
Full Context
configure service dynamic-services dynamic-services-policy authentication local-auth-db
Description
This command configures the local authentication database to be used for local authentication of data-triggered dynamic services.
Local authentication and RADIUS authentication are mutually exclusive.
The no form of this command removes the local authentication database from the configuration and disables local authentication.
Parameters
- name
-
local authentication database name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-auth-db
Syntax
local-auth-db name [create]
no local-auth-db name
Context
[Tree] (config>service>dynsvc local-auth-db)
Full Context
configure service dynamic-services local-auth-db
Description
This command creates a local authentication database that can be used for local authentication of data-triggered dynamic services.
The no form of this command removes the local authentication database from the configuration.
Parameters
- name
-
Specifies a local authentication database name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-dhcp-server
local-dhcp-server
Syntax
local-dhcp-server server-name [create]
no local-dhcp-server server-name
Context
[Tree] (config>service>vprn>dhcp local-dhcp-server)
[Tree] (config>router>dhcp local-dhcp-server)
Full Context
configure service vprn dhcp local-dhcp-server
configure router dhcp local-dhcp-server
Description
This command instantiates a local DHCP server. A local DHCP server can serve multiple interfaces but is limited to the routing context it was which it was created.
The no form of this command reverts to the default.
Parameters
- server-name
-
Specifies the name of local DHCP server, up to 32 characters.
- create
-
Keyword used to create the local DHCP server. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-dhcp-server
Syntax
local-dhcp-server server-name [create] [auto-provisioned]
no local-dhcp-server server-name
Context
[Tree] (config>router>dhcp6 local-dhcp-server)
Full Context
configure router dhcp6 local-dhcp-server
Description
This command instantiates a DHCP6 server. A local DHCP6 server can serve multiple interfaces but is limited to the routing context it was which it was created.
The no form of this command reverts to the default.
Parameters
- server-name
-
Specifies the name of local DHCP6 server, up to 32 characters.
- create
-
Keyword used to create the local DHCP or DHCP6 server. The create keyword requirement can be enabled or disabled in the environment>create context.
- auto-provisioned
-
Specifies the auto provisioning mode. This parameter only applies to DHCP6 creation to configure DHCP6 default values.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-dhcp-server
Syntax
[no] local-dhcp-server server-name [lease-address ip-prefix[prefix-length]]
[no] local-dhcp-server server-name [mac ieee-address]
[no] local-dhcp-server server-name [link-local-address ipv6z-address]
Context
[Tree] (debug>router local-dhcp-server)
Full Context
debug router local-dhcp-server
Description
This command enables, disables or configures debugging for a local DHCP server.
Parameters
- server-name
-
Specifies an existing local DHCP server name.
- ip-prefix[/prefix-length]
-
Specifies the IP prefix and prefix length of the subnet.
- ieee-address
-
Specifies that the provisioned MAC address for the local DHCP server.
- ipv6z-address
-
Specifies the IPv6z address.
ipv6-address:
x:x:x:x:x:x:x:x [-interface]
x:x:x:x:x:x:d.d.d.d [-interface]
x: [0 to FFFF]H
d: [0 to 255]D
interface
up to 32 characters, mandatory for link local addresses
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-dhcp-server
Syntax
[no] local-dhcp-server
Context
[Tree] (config>redundancy>multi-chassis>peer>sync local-dhcp-server)
Full Context
configure redundancy multi-chassis peer sync local-dhcp-server
Description
This command synchronizes DHCP server information.
Default
no local-dhcp-server
Platforms
All
local-dhcp-server
Syntax
local-dhcp-server local-server-name
no local-dhcp-server
Context
[Tree] (config>service>vprn>if>ipv6 local-dhcp-server)
[Tree] (config>service>ies>if local-dhcp-server)
Full Context
configure service vprn interface ipv6 local-dhcp-server
configure service ies interface local-dhcp-server
Description
This command assigns a DHCP server to the interface.
Parameters
- local-server-name
-
Specifies an existing local server name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-dhcp-server
Syntax
local-dhcp-server local-server-name
no local-dhcp-server
Context
[Tree] (config>router>if>ipv6 local-dhcp-server)
[Tree] (config>router>if local-dhcp-server)
Full Context
configure router interface ipv6 local-dhcp-server
configure router interface local-dhcp-server
Description
This command instantiates a local DHCP server. A local DHCP server can serve multiple interfaces but is limited to the routing context in which it was created.
The no form of this command reverts to the default value.
Default
no local-dhcp-server
Parameters
- local-server-name
-
Specifies the name of local DHCP server, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-ecid
local-ecid
Syntax
local-ecid emulated circuit identifier
no local-ecid
Context
[Tree] (config>service>epipe>sap>cem local-ecid)
Full Context
configure service epipe sap cem local-ecid
Description
This command defines the Emulated Circuit Identifiers (ECID) to be used for the local (source) end of the circuit emulation service.
The no form of this command removes the ECID from the configuration.
Default
local-ecid 65535
Parameters
- emulated circuit identifier
-
Specifies the value to be used as the local (source) ECID for the circuit emulation service. On CES packet reception, the ECID in the packet will be compared to the configured local-ecid value. These must match for the packet payload to be used for the TDM circuit. The remote-ecid value is inserted into the MEF-8 CES packet to be transmitted.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
local-end
local-end
Syntax
local-end {ip-address | ipv6-address}
no local-end
Context
[Tree] (config>service>sdp local-end)
Full Context
configure service sdp local-end
Description
This command configures the local-end address of the following SDP encapsulation types:
-
IPv6 address of the termination point of a SDP of encapsulation l2tpv3 (L2TP v3 tunnel).
-
IPv4/IPv6 source address of a SDP of encapsulation eth-gre-bridged (L2oGRE SDP).
-
IPv4 source address of a SDP of encapsulation gre (GRE SDP).
A change to the value of the local-end parameter requires that the SDP be shut down.
When used as the source address of a SDP of encapsulation gre (GRE SDP), the primary IPv4 address of any local network IP interface, loopback or otherwise, may be used.
The address of the following interfaces are not supported:
-
unnumbered network IP interface
-
IES interface
-
VPRN interface
-
CSC VPRN interface
The local-end parameter value adheres to the following rules:
-
A maximum of 15 distinct address values can be configured for all GRE SDPs under the config>service>sdp>local-end context, and all L2oGRE SDPs under the config>service>system>gre-eth-bridged>tunnel-termination context.
-
The same source address cannot be used in both contexts since an address configured for a L2oGRE SDP matches an internally created interface that is not available to other applications.
-
The local-end address of a GRE SDP, when different from system, need not match the primary address of an interface that has the MPLS-over-GRE termination subnet configured, unless a GRE SDP or tunnel from the far-end router terminates on this address.
The no form of the command removes the address from the local-end configuration.
Parameters
- ip-address | ipv6-address
-
Specifies a IPv4 or IPv6 address for local-end of an SDP in dotted decimal notation.
Platforms
All
local-fcc-port
local-fcc-port
Syntax
local-fcc-port port
no local-fcc-port
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video local-fcc-port)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video local-fcc-port)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video local-fcc-port)
Full Context
configure mcast-management multicast-info-policy bundle video local-fcc-port
configure mcast-management multicast-info-policy bundle channel video local-fcc-port
configure mcast-management multicast-info-policy bundle channel source-override video local-fcc-port
Description
This command configures the local port on which Fast Channel Change (FCC) requests are received. The value of this object can only be set for the default bundle and will be used by all bundles and channels.
The local-fcc-port port value is the only configuration parameter in the bundle "default” context.
The no form of the command removes the port from the video configuration.
Parameters
- port
-
Specifies a local port for FCC requests.
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
local-filtering
local-filtering
Syntax
local-filtering
Context
[Tree] (config>app-assure>group>url-filter local-filtering)
Full Context
configure application-assurance group url-filter local-filtering
Description
This command configures a URL filter policy for local filtering in order to filter traffic based on a list of URLs located on a file stored in the router compact flash.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-forward
local-forward
Syntax
local-forward local-forward-id [create]
no local-forward local-forward-id
Context
[Tree] (config>system>satellite local-forward)
Full Context
configure system satellite local-forward
Description
This command creates a local-forward instance.
A local-forward instance creates a traffic bypass within the Ethernet satellite, which allows traffic to be forwarded between satellite client ports.
The no form of this command deletes the specified local-forward instance.
Parameters
- local-forward-id
-
Specifies the ID number for the local-forward instance.
- create
-
Creates a new local-forward instance.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
local-gateway-address
local-gateway-address
Syntax
local-gateway-address [ip-address | ipv6-address]
no local-gateway-address
Context
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel local-gateway-address)
[Tree] (config>router>if>ipsec>ipsec-tunnel local-gateway-address)
Full Context
configure service ies interface ipsec ipsec-tunnel local-gateway-address
configure router interface ipsec ipsec-tunnel local-gateway-address
Description
This command configures local gateway address of the IPsec gateway.
Parameters
- ip-address
-
Specifies a unicast IPv4 address, up to 64 characters.
- ipv6-address
-
Specifies a unicast global unicast IPv6 address, up to 64 characters.
Platforms
VSR
local-gateway-address
Syntax
local-gateway-address ip-address
no local-gateway-address
Context
[Tree] (config>service>vprn>if>sap>ipsec-gw local-gateway-address)
[Tree] (config>service>ies>if>sap>ipsec-gw local-gateway-address)
Full Context
configure service vprn interface sap ipsec-gw local-gateway-address
configure service ies interface sap ipsec-gw local-gateway-address
Description
This command configures local gateway address of the IPsec gateway.
Parameters
- ip-address
-
Specifies a unicast IPv4 address or a global unicast IPv6 address. This address must be within the subnet of the public interface.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-gateway-address
Syntax
local-gateway-address ip-address peer ip-address delivery-service service-id
no local-gateway-address
Context
[Tree] (config>service>vprn>if>sap>ipsec-tunnel local-gateway-address)
Full Context
configure service vprn interface sap ipsec-tunnel local-gateway-address
Description
This command specifies the local gateway address used for the tunnel and the address of the remote security gateway at the other end of the tunnel remote peer IP address to use.
Default
no local-gateway-address
Parameters
- ip-address
-
IP address of the local end of the tunnel.
- delivery-service service-id
-
The ID of the IES or VPRN (front-door) delivery service of this tunnel. Use this service-id to find the VPRN used for delivery.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-id
local-id
Syntax
local-id type [value value]
no local-id
Context
[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn local-id)
[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn local-id)
[Tree] (config>service>vprn>if>sap>ipsec-gw local-id)
[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn local-id)
[Tree] (config>service>ies>if>sap>ipsec-gw local-id)
[Tree] (config>router>if>ipsec>ipsec-tunnel>dyn local-id)
[Tree] (config>ipsec>trans-mode-prof>dyn local-id)
Full Context
configure service vprn interface ipsec ipsec-tunnel dynamic-keying local-id
configure service vprn interface sap ipsec-tunnel dynamic-keying local-id
configure service vprn interface sap ipsec-gw local-id
configure service ies interface ipsec ipsec-tunnel dynamic-keying local-id
configure service ies interface sap ipsec-gw local-id
configure router interface ipsec ipsec-tunnel dynamic-keying local-id
configure ipsec ipsec-transport-mode-profile dynamic-keying local-id
Description
This command specifies the local ID used for IDi or IDr for IKEv2 negotiation.
The default behavior depends on the local-auth-method as follows:
-
Psk: local tunnel IP address
-
Cert-auth: subject of the local certificate
The no form of this command removes the parameters from the configuration.
Default
no local-id
Parameters
- type
-
Specifies the type of local ID payload, which could be IPv4 or IPv6 address or FQDN domain name or distinguish the name of the subject in the X.509 certificate.
- value
-
Specifies the data type as an enumerated integer that describes the local identifier type used for IDi or IDr for IKEv2, up to 255 characters.
Platforms
VSR
- configure router interface ipsec ipsec-tunnel dynamic-keying local-id
- configure service vprn interface ipsec ipsec-tunnel dynamic-keying local-id
- configure service ies interface ipsec ipsec-tunnel dynamic-keying local-id
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service ies interface sap ipsec-gw local-id
- configure service vprn interface sap ipsec-gw local-id
- configure ipsec ipsec-transport-mode-profile dynamic-keying local-id
- configure service vprn interface sap ipsec-tunnel dynamic-keying local-id
local-ip
local-ip
Syntax
local-ip {ip-prefix/prefix-length | ip-prefix netmask | any}
Context
[Tree] (config>router>ipsec>sec-plcy>entry local-ip)
[Tree] (config>service>vprn>ipsec>sec-plcy>entry local-ip)
Full Context
configure router ipsec security-policy entry local-ip
configure service vprn ipsec security-policy entry local-ip
Description
This command configures the local (from the VPN) IP prefix/mask for the policy parameter entry.
Only one entry is necessary to describe a potential flow. The local-ip and remote-ip commands can be defined only once. The system evaluates:
-
the local IP as the source IP when traffic is examined in the direction of the flows from private to public and as the destination IP when traffic flows from public to private
-
the remote IP as the source IP when traffic flows public to private and as the destination IP when traffic flows from private to public
Parameters
- ip-prefix
-
The destination address of the aggregate route in dotted decimal notation
- netmask
-
The subnet mask in dotted decimal notation
- any
-
keyword to specify that it can be any address
Platforms
VSR
- configure router ipsec security-policy entry local-ip
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn ipsec security-policy entry local-ip
local-ip-address
local-ip-address
Syntax
local-ip-address ip-address
no local-ip-address
Context
[Tree] (config>lag>bfd>family local-ip-address)
Full Context
configure lag bfd family local-ip-address
Description
This command is used to specify the IPv4 or IPv6 address of the BFD source.
The no form of this command removes this address from the configuration.
Default
no local-ip-address
Parameters
- ip-address
-
Specifies the IP address.
Platforms
All
local-ip-range-start
local-ip-range-start
Syntax
local-ip-range-start ip-address
no local-ip-range-start
Context
[Tree] (config>isa>nat-group>inter-chassis-redundancy local-ip-range-start)
Full Context
configure isa nat-group inter-chassis-redundancy local-ip-range-start
Description
This command configures the first IP address that is assigned to a first member ISA in the nat-group. The remaining member ISAs in the nat-group are automatically assigned the consecutive IP addresses, starting from the first IP address. These IP addresses are used to communicate between the ISAs on redundant nodes for the purpose of flow synchronization. Traffic from the first local IP address (member ISA), is sent to the first IP address from the remote IP range.
The no form of this command reverts to the default.
Default
no local-ip-range-start
Parameters
- ip-address
-
Specifies the first IP address from the range assigned to the first member ISA in the form of a.b.c.d
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
local-lsr-id
local-lsr-id
Syntax
local-lsr-id {system | interface} [32bit-format]
local-lsr-id interface-name [32bit-format]
no local-lsr-id
Context
[Tree] (config>router>ldp>if-params>if>ipv6 local-lsr-id)
[Tree] (config>router>ldp>if-params>if>ipv4 local-lsr-id)
Full Context
configure router ldp interface-parameters interface ipv6 local-lsr-id
configure router ldp interface-parameters interface ipv4 local-lsr-id
Description
This command enables the use of the address of the local LDP interface, or any other network interface configured on the system, as the LSR-ID to establish link LDP Hello adjacency and LDP session with directly connected LDP peers. The network interface can be a loopback or not.
Link LDP sessions to all peers discovered over a given LDP interface share the same local LSR-ID. However, LDP sessions on different LDP interfaces can use different network interface addresses as their local LSR-ID.
By default, the LDP session to a peer uses the system interface address as the LSR-ID unless explicitly configured using this command. The system interface must always be configured on the router, or the LDP protocol will not come up on the node. There is no requirement to include the system interface in any routing protocol.
At initial configuration, the LDP session to a peer will remain down while the network interface used as LSR-ID is down. LDP will not try to bring it up using the system interface.
If the network IP interface used as LSR-ID goes down, the LDP sessions to all discovered peers using this LSR-ID go down.
When an interface other than the system is used as the LSR-ID, the transport connection (TCP) for the link LDP session will also use the address of that interface as the transport address. If the system or interface value is configured in the config>router>ldp>if-params>if>ipv4 or config>router>ldp>if-params>if>ipv6> transport-address context, it will be overridden with the address of the LSR-ID interface.
When the local-lsr-id command is enabled with the 32bit-format option, an SR OS LSR will be able to establish an LDP IPv6 Hello adjacency and an LDP IPv6 session with an RFC 7552 compliant peer LSR. The LSR uses a 32-bit LSR-ID set to the value of the IPv4 address of the specified local LSR-ID interface and a 128-bit transport address set to the value of the IPv6 address of the specified local LSR-ID interface.
The system interface cannot be used as a local LSR-ID with the 32bit-format option enabled because the system interface is the default LSR-ID and transport address for all LDP sessions to peers on this LSR. This configuration is blocked in the CLI.
If the user enables the 32bit-format option in the IPv6 context of a running LDP interface, the already established LDP IPv6 Hello adjacency and LDP IPv6 session will be brought down and re-established with the new 32-bit LSR-ID value.
If the user changes the LSR-ID value between system, interface, and interface-name, or enables the 32bit-format option while the LDP session is up, LDP will immediately tear down all sessions using this LSR-ID and will attempt to re-establish them using the new LSR-ID.
The no form of this command returns to the default behavior, in which case the system interface address is used as the LSR-ID.
Default
no local-lsr-id
Parameters
- system
-
Specifies the use of the address of the system interface as the value of the LSR-ID of this LDP LSR.
- interface
-
Specifies the use of the address of the local LDP interface as the value of the LSR-ID of this LDP LSR.
- interface-name interface-name
-
Specifies the name, up to 32 character, of the network IP interface (which address is used as the LSR-ID of this LDP LSP). An interface name cannot be in the form of an IP address. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
- 32bit-format
-
Specifies the use of the IPv4 address of the local LSR-ID interface as the LSR-ID of this LDP LSR.
Platforms
All
local-lsr-id
Syntax
local-lsr-id interface-name [32bit-format]
no local-lsr-id
Context
[Tree] (config>router>ldp>targ-session>peer local-lsr-id)
[Tree] (config>router>ldp>targ-session>peer-template local-lsr-id)
Full Context
configure router ldp targeted-session peer local-lsr-id
configure router ldp targeted-session peer-template local-lsr-id
Description
This command enables the use of the address of any network interface configured on the system, as the LSR-ID to establish a targeted LDP Hello adjacency and a targeted LDP session with an LDP peer. The network interface can be a loopback or not.
By default, the targeted LDP session to a peer uses the system interface address as the LSR-ID and as the transport address, unless explicitly configured using this command. The system interface must always be configured on the router, or the LDP protocol will not come up on the node. There is no requirement to include the system interface in any routing protocol.
When the local-lsr-id command is enabled with the 32bit-format option, an SR OS LSR will be able to establish a targeted LDP IPv6 Hello adjacency and a targeted LDP IPv6 session with an RFC 7552 compliant peer LSR. The LSR uses a 32-bit LSR-ID set to the value of the IPv4 address of the specified local LSR-ID interface and a 128-bit transport address set to the value of the IPv6 address of the specified local LSR-ID interface.
The system interface cannot be used as a local LSR-ID with the 32bit-format option enabled because the system interface is the default LSR-ID and transport address for all targeted LDP sessions to peers on this LSR. This configuration is blocked in the CLI.
If the user enables the 32bit-format option in the IPv6 context of a running targeted LDP peer, the already established targeted LDP IPv6 Hello adjacency and targeted LDP IPv6 session will be brought down and re-established with the new 32-bit LSR-ID value.
If the user changes the local LSR-ID value or enables/disables the 32bit-format option, while the targeted LDP session is up, LDP will immediately tear down the targeted session using this LSR-ID and will attempt to re-establish it using the new LSR-ID.
The no form of this command returns to the default behavior, in which case the system interface address is used as the LSR-ID.
Default
no local-lsr-id
Parameters
- interface-name
-
Specifies the name, up to 32 characters, of the network IP interface (which address is used as the LSR-ID of this LDP LSP). An interface name cannot be in the form of an IP address. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
- 32bit-format
-
Specifies the use of the IPv4 address of the local LSR-ID interface as the LSR-ID of this LDP LSR.
Platforms
All
local-max-checkpoints
local-max-checkpoints
Syntax
local-max-checkpoints [number-of-files]
no local-max-checkpoints
Context
[Tree] (config>system>rollback local-max-checkpoints)
Full Context
configure system rollback local-max-checkpoints
Description
This command configures the maximum number of rollback checkpoint files when the rollback-location is on local compact flash.
Default
no local-max-checkpoints
Parameters
- number of files
-
Specifies the maximum rollback files on a compact flash.
Platforms
All
local-monitoring-policer
local-monitoring-policer
Syntax
[no] local-monitoring-policer policer-name [create]
Context
[Tree] (config>sys>security>dist-cpu-protection>policy local-monitoring-policer)
Full Context
configure system security dist-cpu-protection policy local-monitoring-policer
Description
This command configures a monitoring policer that is used to monitor the aggregate rate of several protocols arriving on an object (for example, SAP). When the local-monitoring-policer is determined to be in a nonconforming state (at the end of a minimum monitoring time of 60 seconds) then the system will attempt to allocate dynamic policers for the particular object for any protocols associated with the local monitor (for example, using the protocol name enforcement dynamic policer-name CLI command).
If the system cannot allocate all the dynamic policers within 150 seconds, it will stop attempting to allocate dynamic policers, raise a LocMonExcdAllDynAlloc log event, and go back to using the local monitor. The local monitor may then detect exceeded packets again and make another attempt at allocating dynamic policers.
Once this policer-name is referenced by a protocol then this policer will be instantiated for each "object” that is created and references this DDoS policy. If there is no policer free then the object will be blocked from being created.
Parameters
- policy-name
-
Specifies name of the policy, up to 32 characters.
Platforms
All
local-name
local-name
Syntax
local-name host-name
no local-name
Context
[Tree] (config>service>vprn>l2tp>group>tunnel local-name)
[Tree] (config>router>l2tp>group local-name)
[Tree] (config>router>l2tp>group>tunnel local-name)
[Tree] (config>service>vprn>l2tp>group local-name)
[Tree] (config>router>l2tp local-name)
[Tree] (config>service>vprn>l2tp local-name)
Full Context
configure service vprn l2tp group tunnel local-name
configure router l2tp group local-name
configure router l2tp group tunnel local-name
configure service vprn l2tp group local-name
configure router l2tp local-name
configure service vprn l2tp local-name
Description
This command creates the local host name used by this system for the tunnels in this L2TP group during the authentication phase of tunnel establishment. It can be used to distinguish tunnels.
The no form of this command removes the host name from the configuration.
Default
no local-name
Parameters
- host-name
-
Specifies the host name, up to 64 characters in length, that the router will use to identify itself during L2TP authentication.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-port-action
local-port-action
Syntax
local-port-action {log-only | out-of-service}
Context
[Tree] (config>port>ethernet>efm-oam>link-mon>local-sf-action local-port-action)
Full Context
configure port ethernet efm-oam link-monitoring local-sf-action local-port-action
Description
This command configures the parameters that define if and how the local port will be affected when the local signal failure threshold (sf-threshold) has been reached within the configured window.
Interactions: The signal failure threshold will trigger these actions.
Default
local-port-action out-of-service
Parameters
- log-only
-
Keyword that prevents the port from being affected when the configured signal failure threshold is reach within the window. The event will be logged but the port will remain operational.
- out-of-service
-
Keyword that causes the port to enter a non-operation down state with a port state of link up. The error will be logged when the configured signal failure threshold (sf-threshold) is reached within the window. The port will not be available to service data but will continue to carry Link OAM traffic to ensure the link is monitored.
Platforms
All
local-preference
local-preference
Syntax
local-preference local-preference
no local-preference
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy local-preference)
Full Context
configure subscriber-mgmt bgp-peering-policy local-preference
Description
This command enables setting the BGP local-preference attribute in incoming routes if not specified and configures the default value for the attribute. This value is used if the BGP route arrives from a BGP peer without the local-preference integer set.
The specified value can be overridden by any value set via a route policy.
The no form of this command at the global level specifies that incoming routes with local-preference set are not overridden and routes arriving without local-preference set are interpreted as if the route had local-preference value of 100.
Parameters
- local-preference
-
The local preference value to be used as the override value, expressed as a decimal integer.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-preference
Syntax
local-preference local-preference
no local-preference
Context
[Tree] (config>service>vprn>bgp>group local-preference)
[Tree] (config>service>vprn>bgp>group>neighbor local-preference)
[Tree] (config>service>vprn>bgp local-preference)
Full Context
configure service vprn bgp group local-preference
configure service vprn bgp group neighbor local-preference
configure service vprn bgp local-preference
Description
This command enables setting the BGP local-preference attribute in incoming routes if not specified and configures the default value for the attribute. This value is used if the BGP route arrives from a BGP peer without the local-preference integer set.
The specified value can be overridden by any value set via a route policy. This configuration parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). The most specific value is used.
The no form of this command at the global level specifies that incoming routes with local-preference set are not overridden and routes arriving without local-preference set are interpreted as if the route had local-preference value of 100.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no local-preference - Does not override the local-preference value set in arriving routes and analyze routes without local preference with value of 100.
Parameters
- local-preference
-
The local preference value to be used as the override value, expressed as a decimal integer.
Platforms
All
local-preference
Syntax
local-preference local-preference
no local-preference
Context
[Tree] (config>router>bgp>group>neighbor local-preference)
[Tree] (config>router>bgp>group local-preference)
[Tree] (config>router>bgp local-preference)
Full Context
configure router bgp group neighbor local-preference
configure router bgp group local-preference
configure router bgp local-preference
Description
This command enables setting the BGP local-preference attribute in incoming routes if not specified and configures the default value for the attribute.
This value is used if the BGP route arrives from a BGP peer without the local-preference integer set.
The specified value can be overridden by any value set via a route policy. This configuration parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to the specified peer). The most specific value is used.
The no form of this command at the global level specifies that incoming routes with local-preference set are not overridden and routes arriving without local-preference set are interpreted as if the route had local-preference value of 100.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
no local-preference
Parameters
- local-preference
-
Specifies the local preference value to be used as the override value expressed as a decimal integer.
Platforms
All
local-preference
Syntax
local-preference preference [equal | or-higher | or-lower]
no local-preference
Context
[Tree] (config>router>policy-options>policy-statement>entry>from local-preference)
Full Context
configure router policy-options policy-statement entry from local-preference
Description
This command matches BGP routes based on local preference (the value in the LOCAL_PREF attribute).
If no comparison qualifiers are present (equal, or-higher, or-lower), then equal is the implied default.
A non-BGP route does not match a policy entry if it contains the local-preference command.
Default
no local-preference
Parameters
- preference
-
Specifies the local preference value.
- equal
-
Specifies that matched routes should have the same local preference as the value specified.
- or-higher
-
Specifies that matched routes should have the same or a greater local preference as the value specified.
- or-lower
-
Specifies that matched routes should have the same or a lower local preference as the value specified.
Platforms
All
local-preference
Syntax
local-preference preference
no local-preference
Context
[Tree] (config>router>policy-options>policy-statement>entry local-preference)
[Tree] (config>router>policy-options>policy-statement>default-action local-preference)
Full Context
configure router policy-options policy-statement entry local-preference
configure router policy-options policy-statement default-action local-preference
Description
This command assigns a BGP local preference to routes matching a route policy statement entry.
If no local preference is specified, the BGP configured local preference is used.
The no form of this command disables assigning a local preference in the route policy entry.
Default
no local-preference
Parameters
- preference
-
Specifies the local preference expressed as a decimal integer.
Platforms
All
local-prefix
local-prefix
Syntax
local-prefix local-prefix [create]
no local-prefix local-prefix
Context
[Tree] (config>service>pw-routing local-prefix)
Full Context
configure service pw-routing local-prefix
Description
This command configures one or more node prefix values to be used for MS-PW routing. At least one prefix must be configured on each node that is an S-PE or a T-PE.
The no form of this command removes a previously configured prefix, and will cause the corresponding route to be withdrawn if it has been advertised in BGP.
Default
no local-prefix
Parameters
- local-prefix
-
Specifies a 32 bit prefix for the AII. One or more prefix values, up to a maximum of 16, may be assigned to the 7450 ESS, 7750 SR, or 7950 XRS node. The global ID can contain the 2-octet or 4-octet value of the provider's Autonomous System Number (ASN). The presence of a global ID based on the provider's ASN ensures that the AII for spoke-SDPs configured on the node will be globally unique.
Platforms
All
local-priority
local-priority
Syntax
local-priority local-priority
Context
[Tree] (config>service>vprn>ptp>peer local-priority)
Full Context
configure service vprn ptp peer local-priority
Description
This command configures the local priority used to choose between PTP TimeTransmitters in the best TimeTransmitter clock algorithm (BTCA).
The value 1 is the highest priority and 255 is the lowest priority.
If the PTP profile is ieee1588-2008, the priority of a peer cannot be configured.
If the PTP profile is g8265dot1-2010, this parameter configures the priority used to choose between TimeTransmitter clocks with the same quality. Refer to the G.8265.1 standard for more information
If the PTP profile is g8275dot1-2014 or g8275dot2-2016, this parameter sets the value of the localPriority associated with the Announce messages received from the external clocks (ptp>peer or ptp>port), or the local clock (PTP). Refer to the ITU-T G.8275.1/G.8275.2 standard for detailed information
Default
local-priority 128
Parameters
- local-priority
-
Specifies the value of the local priority.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
local-priority
Syntax
local-priority priority
Context
[Tree] (config>system>ptp>port local-priority)
[Tree] (config>system>ptp>peer local-priority)
[Tree] (config>system>ptp local-priority)
Full Context
configure system ptp port local-priority
configure system ptp peer local-priority
configure system ptp local-priority
Description
This command configures the local priority used to choose between PTP TimeTransmitters in the best TimeTransmitter clock algorithm (BTCA).
The value 1 is the highest priority and 255 is the lowest priority.
If the PTP profile is ieee1588-2008, the priority of a peer cannot be configured.
If the PTP profile is g8265dot1-2010, this parameter configures the priority used to choose between TimeTransmitter clocks with the same quality. Refer to the G.8265.1 standard for more information
If the PTP profile is g8275dot1-2014 or g8275dot2-2016, this parameter sets the value of the localPriority associated with the Announce messages received from the external clocks (ptp>peer or ptp>port), or the local clock (PTP). Refer to the ITU-T G.8275.1/G.8275.2 standard for detailed information
Default
local-priority 128
Parameters
- priority
-
Specifies the value of the local priority.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
local-proxy-arp
local-proxy-arp
Syntax
[no] local-proxy-arp
Context
[Tree] (config>service>ies>sub-if>grp-if local-proxy-arp)
[Tree] (config>service>vprn>if local-proxy-arp)
[Tree] (config>service>vprn>sub-if>grp-if local-proxy-arp)
[Tree] (config>service>ies>if local-proxy-arp)
Full Context
configure service ies subscriber-interface group-interface local-proxy-arp
configure service vprn interface local-proxy-arp
configure service vprn subscriber-interface group-interface local-proxy-arp
configure service ies interface local-proxy-arp
Description
This command enables local proxy ARP. When local proxy ARP is enabled on an IP interface, the system responds to all ARP requests for IP addresses belonging to the subnet with its own MAC address, and thus becomes the forwarding point for all traffic between hosts in that subnet.
When local-proxy-arp is enabled, ICMP redirects on the ports associated with the service are automatically blocked.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn subscriber-interface group-interface local-proxy-arp
- configure service ies subscriber-interface group-interface local-proxy-arp
All
- configure service vprn interface local-proxy-arp
- configure service ies interface local-proxy-arp
local-proxy-arp
Syntax
[no] local-proxy-arp
Context
[Tree] (config>router>if local-proxy-arp)
Full Context
configure router interface local-proxy-arp
Description
This command enables local proxy ARP on the interface.
Default
no local-proxy-arp
Platforms
All
local-proxy-nd
local-proxy-nd
Syntax
[no] local-proxy-nd
Context
[Tree] (config>service>ies>if>ipv6 local-proxy-nd)
[Tree] (config>service>vprn>if>ipv6 local-proxy-nd)
Full Context
configure service ies interface ipv6 local-proxy-nd
configure service vprn interface ipv6 local-proxy-nd
Description
This command enables local proxy neighbor discovery on the interface.
When this command is enabled, the interface replies to neighbor solicitation requests when both the hosts are on the same subnet. In this case, ICMP redirects are disabled. When this command is disabled, the interface does not reply to neighbor solicitation requests if both the hosts are on the same subnet.
The no form of this command reverts to the default.
Platforms
All
local-proxy-nd
Syntax
[no] local-proxy-nd
Context
[Tree] (config>router>if>ipv6 local-proxy-nd)
Full Context
configure router interface ipv6 local-proxy-nd
Description
This command enables local proxy neighbor discovery on the interface.
The no form of this command disables local proxy neighbor discovery.
Platforms
All
local-routes-domain-id
local-routes-domain-id
Syntax
local-routes-domain-id [global-field:local-field]
no local-routes-domain-id
Context
[Tree] (config>service>vprn local-routes-domain-id)
Full Context
configure service vprn local-routes-domain-id
Description
This command specifies the domain ID that is used in the D-PATH attribute for local routes before those routes are exported to a BGP neighbor using BGP-IPVPN, EVPN-IFF, EVPN-IFL or PE-CE BGP. A local route is a non-BGP route installed in the VPRN route table and learned using static route or an IGP.
The domain IDs are used in the D-PATH attribute, in accordance with draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN).
The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best path selection decisions based on the D-PATH length (shorter D-PATH is preferred).
The no form of this command removes the domain ID for local routes.
Default
no local-routes-domain-id
Parameters
- global-field:local-field
-
Specifies the domain ID for local routes.
Platforms
All
local-rt-port
local-rt-port
Syntax
local-rt-port port
no local-rt-port
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video local-rt-port)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video local-rt-port)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video local-rt-port)
Full Context
configure mcast-management multicast-info-policy bundle channel video local-rt-port
configure mcast-management multicast-info-policy bundle video local-rt-port
configure mcast-management multicast-info-policy bundle channel source-override video local-rt-port
Description
This command configures the local port on which retransmission (RET) requests are received. The value of this object can only be set for the default bundle and will be used by all channels.
The local-rt-port port value is the only configuration parameter in the bundle "default” context.
The no form of the command removes the port from the video configuration.
Parameters
- port
-
Specifies a local port for RT requests.
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
local-rt-server
local-rt-server
Syntax
[no] local-rt-server
Context
[Tree] (config>isa>video-group local-rt-server)
Full Context
configure isa video-group local-rt-server
Description
This command enables the local RET server for the group. A local RET server cannot be enabled if an FCC server or ad insertion is enabled.
The no form of the command disables the server.
Default
no local-rt-server
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
local-rt-server
Syntax
[no] local-rt-server
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>sd local-rt-server)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>pip local-rt-server)
[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>hd local-rt-server)
Full Context
configure mcast-management multicast-info-policy video-policy video-interface sd local-rt-server
configure mcast-management multicast-info-policy video-policy video-interface pip local-rt-server
configure mcast-management multicast-info-policy video-policy video-interface hd local-rt-server
Description
This command enables the local retransmission server function for requests directed to the IP address.
The no form of the command disables the retransmission server.
Default
no local-rt-server
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
local-rt-server
Syntax
local-rt-server [disable]
no local-rt-server
Context
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video local-rt-server)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video local-rt-server)
[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video local-rt-server)
Full Context
configure mcast-management multicast-info-policy bundle channel video local-rt-server
configure mcast-management multicast-info-policy bundle channel source-override video local-rt-server
configure mcast-management multicast-info-policy bundle video local-rt-server
Description
This command enables the local retransmission server capability on the ISA video group.
RET server parameters can be configured in a multicast information policy or a service, but the parameters will have no effect if the RET server is disabled or if the video group is administratively disabled (shutdown).
The no form of the command returns the parameter to the default value where the RET server is disabled on the video group.
Default
no local-rt-server
Parameters
- disable
-
Specifies to disable the RET server.
Platforms
7450 ESS, 7750 SR, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s
local-sf-action
local-sf-action
Syntax
local-sf-action
Context
[Tree] (config>port>ethernet>efm-oam>link-monitoring local-sf-action)
Full Context
configure port ethernet efm-oam link-monitoring local-sf-action
Description
This command defines how crossing the local signal failure threshold (sf-threshold) will be handled. This includes local actions and if and how to notify the peer that the threshold has been crossed.
Platforms
All
local-source-address
local-source-address
Syntax
local-source-address {ip-int-name | ip-address}
no local-source-address
Context
[Tree] (config>system>telemetry>persistent-subscriptions>subscription>local-ip-address local-source-address)
Full Context
configure system telemetry persistent-subscriptions subscription local-ip-address local-source-address
Description
This command is used to assign a source IP address in the respective persistent subscription context for use when packets are sent out.
The no form of this command removes this address from the configuration.
Parameters
- ip-int-name
-
Specifies the source IP address name, up to 64 characters.
- ip-address
-
Specifies the source IP address.
local-source-address
Syntax
local-source-address {ip-int-name | ip-address}
no local-source-address
Context
[Tree] (config>system>grpc-tunnel>destination-group>destination local-source-address)
Full Context
configure system grpc-tunnel destination-group destination local-source-address
Description
This command configures a local source IP address in the destination group context for use when packets are sent out.
The no form of this command removes this address from the configuration.
Default
no local-source-address
Parameters
- ip-int-name
-
Specifies the source IP address name, up to 64 characters.
- ip-address
-
Specifies the source IPv4 address (in dotted decimal notation) or IPv6 address.
Platforms
All
local-sr-protection
local-sr-protection
Syntax
local-sr-protection local-sr-protection
no local-sr-protection
Context
[Tree] (config>router>mpls>lsp-template local-sr-protection)
[Tree] (config>router>mpls>lsp local-sr-protection)
Full Context
configure router mpls lsp-template local-sr-protection
configure router mpls lsp local-sr-protection
Description
This command configures the SR LFA protection needed for the adjacencies used in the path computation of an SR-TE LSP by the local CSPF.
The default value of the command is preferred. The local CSPF will prefer a protected adjacency over an unprotected adjacency whenever both exist for a TE link. However, the entire computed path can combine both types of adjacencies.
When the user enables the mandatory value, CSPF uses it as an additional path constraint and selects protected adjacencies exclusively in computing the path of the SR-TE LSP. CSPF will return no path if all candidate paths that otherwise satisfy all other LSP path constraints do not have an unprotected SID for each of their TE links.
Similarly, if the user enables the value none, CSPF uses it as an additional path constraint and selects unprotected adjacencies exclusively in computing the path of the SR-TE LSP. CSPF will return no path if all candidate paths that otherwise satisfy all other LSP path constraints do not have a protected SID for each of their TE links.
The no form of this command returns the command to its default value.
Default
no local-sr-protection
Parameters
- local-sr-protection
-
Specifies the local-sr-protection for LSPs.
Platforms
All
local-state
local-state
Syntax
local-state {admin-down | up}
no local-state
Context
[Tree] (config>bfd>seamless-bfd>reflector local-state)
Full Context
configure bfd seamless-bfd reflector local-state
Description
This command specifies the setting of the local state field in reflected seamless BFD control packets.
The no form of this command means that the field is not explicitly set by the reflector.
Default
local-state up
Parameters
- admin-down
-
Specifies that the local state of the reflected seamless BFD control packets is administratively down.
- up
-
Specifies that the local state of the reflected seamless BFD control packets is up.
Platforms
All
local-switching-service-state
local-switching-service-state
Syntax
local-switching-service-state {pbb-tunnel | sap}
Context
[Tree] (config>service>epipe>pbb local-switching-service-state)
Full Context
configure service epipe pbb local-switching-service-state
Description
In a PBB Epipe with two SAPs and a PBB tunnel, this command controls whether the operational status of the PBB-Epipe service depends on the status of the PBB tunnel only.
Default
local-switching-service-state sap
Parameters
- pbb-tunnel
-
Specifies that the operational state of the PBB-Epipe service is up if the PBB tunnel is operationally up, irrespective of the operational state of the two SAPs.
- sap
-
Specifies that the operational state of the PBB-Epipe service is up, if two of the three endpoints (PBB tunnel and two SAPs) are up. This option implies that at least one of the SAPs must be up for the PBB-Epipe service to be operationally up.
Platforms
All
local-user-db
local-user-db
Syntax
local-user-db local-user-db-name [create]
no local-user-db local-user-db-name
Context
[Tree] (config>subscr-mgmt local-user-db)
Full Context
configure subscriber-mgmt local-user-db
Description
Commands in this context configure a local user database.
The no form of this command reverts to the default.
Parameters
- local-user-db-name
-
Specifies the name of a local user database, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
local-v6-ip
local-v6-ip
Syntax
local-v6-ip ipv6-prefix/prefix-length
local-v6-ip any
no local-v6-ip
Context
[Tree] (config>router>ipsec>sec-plcy>entry local-v6-ip)
[Tree] (config>service>vprn>ipsec>sec-plcy>entry local-v6-ip)
Full Context
configure router ipsec security-policy entry local-v6-ip
configure service vprn ipsec security-policy entry local-v6-ip
Description
This command specifies the local v6 prefix for the security-policy entry.
Parameters
- ipv6-prefix/prefix-length
-
Specifies the local v6 prefix and length
- any
-
keyword to specify that it can be any address.
Platforms
VSR
- configure router ipsec security-policy entry local-v6-ip
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure service vprn ipsec security-policy entry local-v6-ip
location
location
Syntax
location cflash-id
no location
Context
[Tree] (config>system>persistence>subscriber-mgmt location)
[Tree] (config>system>persistence>ancp location)
[Tree] (config>system>persistence>dhcp-server location)
[Tree] (config>system>persistence>python location)
[Tree] (config>system>persistence>nat-fwd location)
Full Context
configure system persistence subscriber-mgmt location
configure system persistence ancp location
configure system persistence dhcp-server location
configure system persistence python-policy-cache location
configure system persistence nat-port-forwarding location
Description
This command instructs the system where to write the persistency files for the corresponding application. Each application creates two files on the flash card, one with suffix .i<version>, referencing an index file, and the other with suffix .0<version>, where <version> is a 2-digit number reflecting the file version. These versions are not related to the SR OS release running on the node. The <version> can remain the same over two major releases, for example, when no format change is made to the persistency file. On boot, the system scans the file systems looking for the corresponding persistency files, and the load begins.
For example, in the subscriber management context, the location specifies the flash device on a CPM card where the data for handling subscriber management persistency is stored.
The no form of this command returns the system to the default. If there is a change in file location while persistence is running, a new file will be written on the new flash, and then the old file will be removed.
Default
no location
Parameters
- cflash-id
-
Specifies the compact flash device name.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
- configure system persistence subscriber-mgmt location
- configure system persistence dhcp-server location
All
- configure system persistence ancp location
- configure system persistence python-policy-cache location
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
- configure system persistence nat-port-forwarding location
location
Syntax
location {cf1 | cf2}
Context
[Tree] (config>call-trace location)
Full Context
configure call-trace location
Description
This command specifies the compact flash (CF) configuration to store call trace files.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
location
Syntax
location cflash-id
no location
Context
[Tree] (config>system>persistence>application-assurance location)
Full Context
configure system persistence application-assurance location
Description
This command instructs the system where to write the file. The name of the file is: appassure.db. On boot the system scans the file systems looking for appassure.db, if it finds it, it starts to load it.
The no form of this command returns the system to the default. If there is a change in file location while persistence is running, a new file will be written on the new flash, and then the old file will be removed.
Default
no location
Parameters
- cflash-id
-
Specifies the compact flash type.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
location
Syntax
location remote-url
no location
Context
[Tree] (config>service>nat>deterministic-script location)
Full Context
configure service nat deterministic-script location
Description
This command configures the remote location where the Python script will be exported. The Python script is then used off-line to perform reverse query. If this command is configured, the Python script generation is triggered by any modification of the deterministic NAT configuration. The new script reflects the change in mappings caused by configuration change. However, the script must be manually exported to the outside location with the admin nat save-deterministic-nat command. The script cannot be stored locally on the system.
The script allows two forms of queries:
-
Forward – input is NAT inside parameters, output is NAT outside parameters.
-
Backward – input is NAT outside parameters, output is NAT inside parameters.
Forward Query:
user@external-server:/home/ftp/pub/det-nat-script$ ./det-nat.py -f -s 10 -a 10.0.5.10
output:
subscriber has public ip address 198.51.100.1 from service 0 and is using ports [1324 - 1353]
Reverse Query:
user@external-server:/home/ftp/pub/det-nat-script$./det-nat.py -b -s 0 -a 198.51.100.1 -p 3020
output:
subscriber has private ip address 10.0.5.66 from service 10
Default
no location
Parameters
- remote-url
-
A remote location where the script is stored:
[{ftp:// | tftp://}<login>:<pswd>@ <remote-locn>/][<file-path>]
Maximum length is 180 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
location
Syntax
location location
no location
Context
[Tree] (config>system location)
Full Context
configure system location
Description
This command creates a text string that identifies the system location for the device.
Only one location can be configured. If multiple locations are configured, the last one entered overwrites the previous entry.
The no form of the command reverts to the default value.
Parameters
- location
-
Specifies the location as a character string. The string may be up to 80 characters. Any printable, seven-bit ASCII characters can be used within the string. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.
Platforms
All
location
Syntax
location file-url
no location
Context
[Tree] (config>system>script-control>script location)
Full Context
configure system script-control script location
Description
This command is used to identify the location of a script to be scheduled.
The no form of the command removes the location.
Default
no location
Parameters
- file-url
-
Specifies the location to search for scripts.
Platforms
All
location
Syntax
location cflash-id [backup-cflash-id]
no location
Context
[Tree] (config>log>file>file-id location)
Full Context
configure log file file-id location
Description
This command specifies the primary and optional backup location where the log or billing file will be created.
The location command is optional. If the location command not explicitly configured, log files will be created on cf1: and accounting files will be created on cf2: without overflow onto other devices. Generally, cf3: is reserved for system files (configurations, images, and so on).
When multiple location commands are entered in a single file ID context, the last command overwrites the previous command.
When the location of a file ID that is associated with an active log ID is changed, the log events are not immediately written to the new location. The new location does not take effect until the log is rolled over either because the rollover period has expired or a clear log log-id command is entered to manually rollover the log file.
When creating files, the primary location is used as long as there is available space. If no space is available, an attempt is made to delete unnecessary files that are past their retention date.
If sufficient space is not available an attempt is made to remove the oldest to newest closed log or accounting files. After each file is deleted, the system attempts to create the new file.
A medium severity trap is issued to indicate that a compact flash is either not available or that no space is available on the specified flash and that the backup location is being used.
A high priority alarm condition is raised if none of the configured compact flash devices for this file ID are present or if there is insufficient space available. If space does becomes available, then the alarm condition will be cleared.
Log files are created on cf1: and accounting files are created on cf2.
Use the no form of this command to revert to default settings.
Default
no location
Parameters
- cflash-id
-
Specify the primary location.
- backup-cflash-id
-
Specify the secondary location.
location
Syntax
location location-id [primary-ip-address ipv4-address] [secondary-ip-address ipv4-address] [tertiary-ip-address ipv4-address]
Context
[Tree] (config>router>bgp>optimal-route-reflection location)
Full Context
configure router bgp optimal-route-reflection location
Description
This command configures the location ID for the for the route reflector. A BGP neighbor can be associated with a location if it is a route-reflector client.
Parameters
- location-id
-
Specifies an optimal-route-reflection location.
- ipv4-address
-
Specifies the primary, secondary, or tertiary IP address.
Platforms
All
locator
locator
Syntax
locator name function end-b6-encaps-red [function-value function-value]
no locator
Context
[Tree] (conf>router>segment-routing>sr-policies>policy>srv6>binding-sid locator)
Full Context
configure router segment-routing sr-policies static-policy segment-routing-v6 binding-sid locator
Description
This command configures binding SID locator parameters for a local SRv6 policy. This command and the ip-address command in the conf>router>segment-routing>sr-policies>policy>srv6>binding-sid context for a remote SRv6 policy are mutually exclusive.
The no form of the command removes the configuration.
Parameters
- name
-
Specifies the name of the locator, up to 64 characters. A corresponding locator name must exist in the config>router>segment-routing>srv6 context.
- end-b6-encaps-red
-
Keyword to configure End.B6.Encaps.Red as the End.B6 function that must be implemented by the datapath.
- function-value
-
Specifies the optional function value. If a function value is configured, the router checks whether this function value is available for the named locator. If no function value is configured, the router dynamically allocates a value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
locator
Syntax
[no] locator locator-name
Context
[Tree] (config>router>segment-routing>srv6 locator)
Full Context
configure router segment-routing segment-routing-v6 locator
Description
This command configures the name of an SRv6 locator to be used by the routing protocols and services. This also creates the context to configure the locator block, locator node, function and argument lengths.
A limit of 16 locators per system is enforced.
The no form of this command removes the specified locator name.
Parameters
- locator-name
-
Specifies a locator name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
locator
Syntax
[no] locator locator-name
Context
[Tree] (config>router>segment-routing>srv6>inst locator)
Full Context
configure router segment-routing segment-routing-v6 base-routing-instance locator
Description
This command refers to a locator name defined under the config>router>segment-routing>srv6 context. This command assigns a locator to BGP for use with base router routes.
The no form of this command removes the reference to a locator name locator.
Parameters
- locator-name
-
Specifies a locator name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
locator
Syntax
[no] locator locator-name
Context
[Tree] (config>router>isis>srv6 locator)
Full Context
configure router isis segment-routing-v6 locator
Description
This command refers to a locator name defined under the config>router>segment-routing>srv6 context.
This command assigns a locator to each algorithm in an IS-IS instance. The same locator of a specific algorithm number can be shared with other IGP instances and BGP instances in IP-VPN or EVPN.
The locator block, locator node, function and argument lengths are defined under the config>router>segment-routing>srv6 context.
The no form of this command removes the reference to a locator name.
Parameters
- locator-name
-
Specifies a locator name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
locator
Syntax
[no] locator locator-name
Context
[Tree] (config>service>epipe>srv6 locator)
[Tree] (config>service>vpls>srv6 locator)
[Tree] (config>service>vprn>srv6 locator)
Full Context
configure service epipe segment-routing-v6 locator
configure service vpls segment-routing-v6 locator
configure service vprn segment-routing-v6 locator
Description
This command refers to a locator name defined under the config>router>segment-routing>srv6 context.
This command assigns a locator to the SRv6 instance in the service. The same locator can be referenced in multiple BGP instances used by IPVPN or EVPN.
The locator block, locator node, function and argument lengths are defined under the config>router>segment-routing>srv6 context.
The no form of this command removes the reference to a locator name.
Parameters
- locator-name
-
Specifies a locator name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR
lock
lock
Syntax
[no] lock
Context
[Tree] (configure>system>security>profile>netconf>base-op-authorization lock)
Full Context
configure system security profile netconf base-op-authorization lock
Description
This command authorizes a user associated with the profile to send a NETCONF <lock> operation. This lock operation allows a NETCONF client to lock a configuration datastore.
The no form of the command denies the user from requesting a lock.
Default
no lock
Platforms
All
lock-override
lock-override
Syntax
[no] lock-override
Context
[Tree] (config>system>script-control>script-policy lock-override)
Full Context
configure system script-control script-policy lock-override
Description
This command allows a triggered EHS/CRON script to execute while there is a datastore lock, started by an MD interface, in place.
A triggered EHS/CRON script queues until an ongoing commit (or confirmed-commit) is done. When an EHS/CRON script is triggered while the lock-override CLI knob is on, SR OS behaves as follows.
When an exclusive session is in place:
-
Keep if it is an MD-CLI session. Disconnect if it is a NETCONF session
-
Lose the exclusive lock
-
Lose any uncommitted configuration changes
When a global session is in place:
-
Keep the MD-CLI or NETCONF session
-
Keep the uncommitted configuration changes
-
An update may be required after committing the EHS/CRON script configuration changes
The no form of this command does not allow the script to execute while there is a datastore lock in place.
Default
lock-override
Platforms
All
lockout
lockout
Syntax
lockout failed-attempts count duration duration-minutes block block-minutes [max-port-per-ip number-of-ports]
no lockout
Context
[Tree] (config>ipsec>ike-policy lockout)
Full Context
configure ipsec ike-policy lockout
Description
This command enables the lockout mechanism for the IPsec tunnel. The system will lock out an IPsec client for the configured time interval if the number of failed authentications exceeds the configured value within the specified duration. This command only applies when the system acts as a tunnel responder.
A client is defined as the tunnel IP address plus the port.
Optionally, the max-port-per-ip parameter can be configured as the maximum number of ports allowed behind the same IP address. If this threshold is exceeded, then all ports behind the IP address are blocked.
The no form of this command disables the lockout mechanism.
Default
no lockout
Parameters
- count
-
Specifies the maximum number of failed authentications allowed during the duration-minutes interval.
- duration-minutes
-
Specifies the interval of time, in minutes, during which the configured failed authentication count must be exceeded in order to trigger a lockout.
- block-minutes
-
Specifies the number of minutes that the client is blocked if the configured failed authentication count is exceeded.
- number-of-ports
-
Specifies the maximum number of ports allowed behind the same IP address.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
lockout
Syntax
clear lockout {user user-name | all}
Context
[Tree] (admin>clear lockout)
Full Context
admin clear lockout
Description
This command is used to clear any lockouts for a specific user, or for all users.
Parameters
- user-name
-
Clears the locked username.
- all
-
Clears all locked usernames.
Platforms
All
lockout-reset-time
lockout-reset-time
Syntax
lockout-reset-time seconds
no lockout-reset-time
Context
[Tree] (config>subscr-mgmt>host-lockout-plcy lockout-reset-time)
Full Context
configure subscriber-mgmt host-lockout-policy lockout-reset-time
Description
This command configures the time that needs to elapse from the point a client enters lockout to when the client’s lockout time can be reset to the configured minimum value. The range is 1 second.
The no form of this command reverts to the default value.
Default
lockout-reset-time 60
Parameters
- seconds
-
Specifies the lockout reset time, in seconds.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
lockout-time
lockout-time
Syntax
lockout-time [min seconds] [max seconds]
no lockout-time
Context
[Tree] (config>subscr-mgmt>host-lockout-plcy lockout-time)
Full Context
configure subscriber-mgmt host-lockout-policy lockout-time
Description
This command configures the time for which a client stays in the lockout state during which authentication and ESM host creation is suppressed.
The no form of this command reverts to the default value.
Default
lockout-time min 10 max 3600
Parameters
- min seconds
-
Specifies the minimum lockout-time for this host lockout policy.
- max seconds
-
Specifies the maximum lockout-time for this host lockout policy.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
log
log
Syntax
log
Context
[Tree] (config log)
Full Context
configure log
Description
Commands in this context are used to configure both event logs and accounting logs. Event logs control the generation, dissemination and recording of system events for monitoring status and troubleshooting faults within the system. Event logging configuration includes syslog, snmp notifications (traps), NETCONF notifications and other types of event log outputs. Accounting logs collect comprehensive accounting statistics and write them to XML files on the compact flash in order to support a variety of billing models.
Platforms
All
log
Syntax
[no] log
Context
[Tree] (config>service>vprn>static-route-entry>indirect>cpe-check log)
[Tree] (config>service>vprn>static-route-entry>next-hop>cpe-check log)
Full Context
configure service vprn static-route-entry indirect cpe-check log
configure service vprn static-route-entry next-hop cpe-check log
Description
This optional parameter enables the ability to log transitions between active and in-active based on the CPE connectivity check. Events will be sent to the system log, syslog and SNMP traps.
Default
no log
Platforms
All
log
Syntax
[no] log
Context
[Tree] (config>service>ies>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check log)
[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check log)
Full Context
configure service ies subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check log
configure service vprn subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check log
Description
This command configures the ability to log transitions between active and inactive based on the CPE connectivity check.
Default
no log
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
log
Syntax
log
Context
[Tree] (config>service>vprn log)
[Tree] (config>service>vprn>log-id log)
Full Context
configure service vprn log
configure service vprn log-id log
Description
Commands in this context configure event logging within a specific VPRN.
By default, the log events in a VPRN log are a subset of the complete set of possible log events in SR OS. See the config>log>services-all-events command for more details.
Platforms
All
log
Syntax
log
Context
[Tree] (config>li log)
Full Context
configure li log
Description
Commands in this context configure an event log for LI.
Platforms
All
log
Syntax
log log-id
no log
Context
[Tree] (config>filter>mac-filter>entry log)
[Tree] (config>filter>ipv6-filter>entry log)
[Tree] (config>filter>ip-filter>entry log)
Full Context
configure filter mac-filter entry log
configure filter ipv6-filter entry log
configure filter ip-filter entry log
Description
This command associates a filter log to the current filter policy entry and therefore enables logging for that filter entry.
The filter log must exist before a filter entry can be enabled to use the filter log.
The no form of the command disables logging for the filter entry.
Default
no log
Parameters
- log-id
-
Specifies the filter log ID expressed as a decimal integer.
Platforms
All
log
Syntax
log log-id [create]
no log log-id
Context
[Tree] (config>filter log)
Full Context
configure filter log
Description
This command, creates a configuration context for the specified filter log if it does not exist, and enables the context to configure the specified filter log.
The no form of the command deletes the filter log. The log cannot be deleted if there are filter entries configured to write to the log. All filter entry logging associations need to be removed before the log can be deleted.
Default
log 101
Parameters
- log-id
-
Specifies the filter log ID expressed as a decimal integer.
- create
-
This keyword is required to create the configuration context. After it is created, the context can be enabled with or without the create keyword.
Platforms
All
log
Syntax
[no] log
Context
[Tree] (config>router>static-route-entry>next-hop>cpe-check log)
[Tree] (config>router>static-route-entry>indirect>cpe-check log)
Full Context
configure router static-route-entry next-hop cpe-check log
configure router static-route-entry indirect cpe-check log
Description
This optional parameter enables the ability to log transitions between active and in-active based on the CPE connectivity check. Events will be sent to the system log, syslog and SNMP traps.
Default
no log
Platforms
All
log
Syntax
[no] log
Context
[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry log)
[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry log)
[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry log)
Full Context
configure system security management-access-filter mac-filter entry log
configure system security management-access-filter ipv6-filter entry log
configure system security management-access-filter ip-filter entry log
Description
This command enables match logging. When enabled, matches on this entry will cause the Security event mafEntryMatch to be raised.
Default
no log
Platforms
All
log
Syntax
log log-id
Context
[Tree] (config>sys>security>cpm-filter>ip-filter>entry log)
[Tree] (config>sys>security>cpm-filter>mac-filter>entry log)
[Tree] (config>sys>security>cpm-filter>ipv6-filter>entry log)
Full Context
configure system security cpm-filter ip-filter entry log
configure system security cpm-filter mac-filter entry log
configure system security cpm-filter ipv6-filter entry log
Description
This command specifies the log in which packets matching this entry should be entered. The value zero indicates that logging is disabled.
The no form of this command deletes the log ID.
Parameters
- log-id
-
Specifies the log ID where packets matching this entry should be entered.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-anno-interval
log-anno-interval
Syntax
log-anno-interval log-interval
no log-anno-interval
Context
[Tree] (config>system>ptp log-anno-interval)
Full Context
configure system ptp log-anno-interval
Description
This command configures the announce message interval used for both unicast and multicast messages.
For unicast messages, it defines the announce message interval that is requested during unicast negotiation to any peer. This controls the announce message rate sent from remote peers to the local node. It does not affect the announce message rate that may be sent from the local node to remote peers. Remote peers may request an announce message rate anywhere within the acceptable grant range.
For multicast messages, used on PTP Ethernet ports, this configures the message interval used for Announce messages transmitted by the local node.
This value also defines the interval between executions of the BTCA within the node.
The announce-interval cannot be changed unless the PTP is shut down.
In order to minimize BTCA driven reconfigurations, the IEEE recommends that the announce-interval should be consistent across the entire 1588 network.
The no form of this command reverts the configuration to the default value. The default value varies depending on the configuration of the profile command.
Default
log-anno-interval 1 (1 packet every 2 seconds) for ieee1588-2008
log-anno-interval 1 (1 packet every 2 seconds) for g8265dot1-2010
log-anno-interval -3 (8 packets per second) for g8275dot1-2014
log-anno-interval 1 (1 packet every 2 seconds) for g8275dot2-2016
Parameters
- log-interval
-
Specifies the announce packet interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-anno-interval
Syntax
log-anno-interval log-interval
no log-anno-interval
Context
[Tree] (config>system>ptp>alternate-profile log-anno-interval)
Full Context
configure system ptp alternate-profile log-anno-interval
Description
This command configures the announce message interval used for multicast messages within the alternate profile.
For multicast messages used on PTP Ethernet ports, this command configures the message interval used for announce messages transmitted by the local node
This value has no impact on the interval used for the BTCA, which is controlled by the value defined for the primary profile.
This value can only be changed when the alternate profile is shut down.
The no form of this command reverts to the default value.
Default
log-anno-interval -3 (eight packets per second)
Parameters
- log-interval
-
Specifies the announce packet interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-delay-interval
log-delay-interval
Syntax
log-delay-interval log-interval
no log-delay-interval
Context
[Tree] (config>system>ptp>port log-delay-interval)
Full Context
configure system ptp port log-delay-interval
Description
This command configures the minimum interval used for multicast Delay_Req messages. This parameter is applied on a per-port basis. For ports in a timeReceiver state, it shall be the interval used, unless the parent port indicates a longer interval. For a port in timeTransmitter state, it shall be the interval advertised to external timeReceiver ports as the minimum acceptable interval for Delay_Req messages from those timeReceiver ports.
It is a requirement of the 1588 standard that a port in timeReceiver state shall check the logMessageInterval field of received multicast Delay_Resp messages. If the value of the logMessageInterval field of those messages is greater than the value programmed locally for the generation of Delay_Req messages, then the timeReceiver must change to use the greater value (i.e. longer interval) for the generation of Delay_Req messages. This requirement is supported in the router.
The parameter is only applicable to ports and not to peers.
The no form of this command reverts the configuration to the default value. The default value varies depending on the configuration of the profile command.
Default
log-delay-interval -6 (64 packets per second) for ieee1588-2008
log-delay-interval -6 (64 packets per second) for g8265dot1-2010
log-delay-interval -4 (16 packets per second) for g8275dot1-2014
log-delay-interval -6 (64 packets per second) for g8275dot2-2016
Parameters
- log-interval
-
Specifies the Delay_Req message interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-events
log-events
Syntax
log-events [verbose]
no log-events
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>local-monitoring-policer log-events)
Full Context
configure system security dist-cpu-protection policy local-monitoring-policer log-events
Description
This command controls the creation of log events related to local-monitoring-policer status and activity.
Default
log-events
Parameters
- verbose
-
Sends the same events as just "log-events” plus DcpLocMonExcd, DcpLocMonExcdAllDynAlloc, and DcpLocMonExcdAllDynFreed. The optional "verbose” includes some events that are more likely used during debug/tuning/investigations
Platforms
All
log-events
Syntax
[no] log-events [verbose]
no log-events
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dyn-para log-events)
Full Context
configure system security dist-cpu-protection policy protocol dynamic-parameters log-events
Description
This command controls the creation of log events related to dynamic enforcement policer status and activity.
Default
log-events
Parameters
- verbose
-
This parameter sends the same events as just "log-events” plus Hold Down Start, Hold Down End, DcpDynamicEnforceAlloc and DcpDynamicEnforceFreed events. This includes the allocation/de-allocation events (typically used for debug/tuning only – could be very noisy even when there is nothing much of concern).
Platforms
All
log-events
Syntax
log-events [verbose]
no log-events
Context
[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer log-events)
Full Context
configure system security dist-cpu-protection policy static-policer log-events
Description
This command controls the creation of log events related to static-policer status and activity.
Default
log-events
Parameters
- verbose
-
Sends the same events as just "log-events” plus Hold Down Start and Down End events. The optional "verbose” includes some events that are more likely used during debug/tuning/investigations.
Platforms
All
log-files-total-size
log-files-total-size
Syntax
log-files-total-size megabytes
no log-files-total-size
Context
[Tree] (config>log>storage log-files-total-size)
Full Context
configure log file-storage-control log-files-total-size
Description
This command configures the limit for the total space that all log files can occupy on each storage device on the active CPM.
When this threshold is reached, log events are no longer written to the files in the \log directory until SR OS removes older log files and the occupancy is below the limit.
When unconfigured, there is no specific limit for the total size of all log files.
Only log files in the \log directory with system generated names (including no file extension) are applicable toward the total size limit.
If a user manually adds or deletes log files from the \log directory, the size of the files is not taken into account for up to 1 hour.
The configured total size limit is not validated against the actual size of the installed storage devices. If the configured limit is larger than the installed CF device, the limit is never reached.
Default
no log-files-total-size
Parameters
- megabytes
-
Specifies the total size limit for log files, in MB.
Platforms
All
log-filter
log-filter
Syntax
log-filter filter-id
no log-filter
Context
[Tree] (config>log>event-trigger>event>trigger-entry log-filter)
Full Context
configure log event-trigger event trigger-entry log-filter
Description
This command configures the log filter to be used for this trigger entry. The log filter defines the matching criteria that must be met in order for the log event to trigger the handler execution. The log filter is applied to the log event and, if the filtering decision results in a forward action, then the handler is triggered.
It is typically unnecessary to configure match criteria for the application or number in the log filter used for EHS since the particular filter is only applied for a specific log event application and number, as configured under the config>log>event-trigger context.
The no form of this command removes the log filter configuration.
Parameters
- filter-id
-
Specifies the identifier of the filter.
Platforms
All
log-id
log-id
Syntax
log-id log-id [name log-name]
no log-id log-id
Context
[Tree] (config>service>vprn>log log-id)
Full Context
configure service vprn log log-id
Description
This command creates a context to configure destinations for event streams.
The log-id context is used to direct events, alarms or traps, and debug information to respective destinations.
A maximum of 30 logs can be configured.
Before an event can be associated with this log-id, the from command identifying the source of the event must be configured.
Only one destination can be specified for a log-id. The destination of an event stream can be an in-memory buffer, console, session, snmp-trap-group, Syslog, or file.
Use the event-control command to suppress the generation of events, alarms, and traps for all log destinations.
An event filter policy can be applied in the log-id context to limit which events, alarms, and traps are sent to the specified log-id.
By default, the log events in a VPRN log are a subset of the complete set of possible log events in SR OS. See the config>log>services-all-events command for more details.
The no form of this command deletes the log destination ID from the configuration.
Default
No log destinations are defined.
Parameters
- log-id
-
Specifies the log ID number, expressed as a decimal integer.
- name log-name
-
Configures an optional log name, up to 64 characters, that can be used to refer to the log destination after it is created.
Platforms
All
log-id
Syntax
log-id log-id [name li-log-name]
no log-id log-id
Context
[Tree] (config>li>log log-id)
Full Context
configure li log log-id
Description
This command configures an LI event log destination. The log-id is used to direct events, alarms or traps, and debug information for specific destinations.
Parameters
- log-id
-
Specifies the log ID, expressed as a decimal number.
- name li-log-name
-
Configures an optional log name, up to 64 characters, that can be used to refer to the log destination after it is created.
Platforms
All
log-id
Syntax
log-id log-id [name log-name]
no log-id log-id
Context
[Tree] (config>log log-id)
Full Context
configure log log-id
Description
This command creates a context to configure destinations for event streams.
The log-id context is used to direct events, alarms or traps, and debug information for specific destinations.
A maximum of 30 logs can be configured.
Before an event can be associated with this log ID, the from command identifying the source of the event must be configured.
Only one destination can be specified for a log-id. The destination of an event stream can be an in-memory buffer, console, session, snmp-trap-group, syslog, or file.
Use the event-control command to suppress the generation of events, alarms, and traps for all log destinations.
An event filter policy can be applied in the log-id context to limit which events, alarms, and traps are sent to the specified log-id.
Log-IDs 99 and 100 are created by the agent. Log-ID 99 captures all log messages. Log-ID 100 captures log messages with a severity level of major and above.
Log-ID 99 provides valuable information for the admin-tech file. Removing or changing the log configuration may hinder debugging capabilities. It is strongly recommended not to alter the configuration for Log-ID 99.
The no form of this command deletes the log destination ID from the configuration.
Parameters
- log-id
-
Specifies the log ID, expressed as a decimal integer.
- name log-name
-
Configures an optional log name, up to 64 characters, that can be used to refer to the log destination after it is created.
Platforms
All
log-prefix
log-prefix
Syntax
log-prefix log-prefix-string
no log-prefix
Context
[Tree] (config>service>vprn>log>syslog log-prefix)
Full Context
configure service vprn log syslog log-prefix
Description
This command adds the string prepended to every syslog message sent to the syslog host.
RFC3164, The BSD syslog Protocol, allows an alphanumeric string (tag) to be prepended to the content of every log message sent to the syslog host. This alphanumeric string can, for example, be used to identify the node that generates the log entry. The software appends a colon (:) and a space to the string and it is inserted in the syslog message after the date stamp and before the syslog message content.
Only one string can be entered. If multiple strings are entered, the last string overwrites the previous string. The alphanumeric string can contain lowercase (a-z), uppercase (A-Z) and numeric (0-9) characters.
The no form of this command removes the log prefix string.
Default
log-prefix "TMNX".
Parameters
- log-prefix-string
-
Specifies the alphanumeric string of up to 32 characters. Spaces and colons ( : ) cannot be used in the string.
Platforms
All
log-prefix
Syntax
log-prefix prefix-text
Context
[Tree] (config>service>nat>syslog>syslog-export-policy log-prefix)
Full Context
configure service nat syslog syslog-export-policy log-prefix
Description
This command configures the syslog log prefix. For more information, refer to the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide. The config>log>syslog>level hierarchy also applies to this context.
Default
log-prefix "TMNX”
Parameters
- prefix-text
-
Specifies an alphanumeric string, up to 32 characters. Spaces and colons ( : ) cannot be used in the string.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
log-prefix
Syntax
log-prefix log-prefix-string
no log-prefix
Context
[Tree] (config>log>syslog log-prefix)
Full Context
configure log syslog log-prefix
Description
This command adds the string prepended to every syslog message sent to the syslog host.
RFC 3164, allows an alphanumeric string (tag) to be prepended to the content of every log message sent to the syslog host. This alphanumeric string can, for example, be used to identify the node that generates the log entry. The software appends a colon (:) and a space to the string and it is inserted in the syslog message after the date stamp and before the syslog message content.
Only one string can be entered. If multiple strings are entered, the last string overwrites the previous string. The alphanumeric string can contain lowercase (a-z), uppercase (A-Z) and numeric (0 to 9) characters.
The no form of this command removes the log prefix string.
Default
no log-prefix
Parameters
- log-prefix-string
-
Specifies an alphanumeric string up to 32 characters in length. Spaces and colons ( : ) cannot be used in the string.
Platforms
All
log-sync-interval
log-sync-interval
Syntax
log-sync-interval log-interval
no log-sync-interval
Context
[Tree] (config>service>vprn>ptp>peer log-sync-interval)
Full Context
configure service vprn ptp peer log-sync-interval
Description
This command configures the message interval used for unicast event messages. It defines the message interval for both Sync and Delay_Resp messages that are requested during unicast negotiation to the specific peer. This controls the Sync and Delay_Resp message rate sent from remote peers to the local node. It does not affect the Sync or Delay_Resp packet rate that may be sent from the local node to remote peers. Remote peers may request a Sync or Delay_Resp packet rate anywhere within the acceptable grant range.
The log-sync-interval cannot be changed unless the peer is shutdown.
This command only applies to the 7450 ESS and 7750 SR.
The no form of this command reverts the value to the profile default.
Default
log-sync-interval -6 (64 packets per second) for ieee1588-2008
log-sync-interval -6 (64 packets per second) for g8265dot1-2010
log-sync-interval -4 (16 packets per second) for g8275dot1-2014
log-sync-interval -6 (64 packets per second) for g8275dot2-2016
Parameters
- log-interval
-
Specifies the sync message interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-sync-interval
Syntax
log-sync-interval log-interval
no log-sync-interval
Context
[Tree] (config>system>ptp>peer log-sync-interval)
Full Context
configure system ptp peer log-sync-interval
Description
This command configures the message interval used for unicast event messages. It defines the message interval for both Sync and Delay_Resp messages that are requested during unicast negotiation to the specific peer. This controls the Sync and Delay_Resp message rate sent from remote peers to the local node. It does not affect the Sync or Delay_Resp packet rate that may be sent from the local node to remote peers. Remote peers may request a Sync or Delay_Resp packet rate anywhere within the acceptable grant range.
The log-sync-interval cannot be changed unless the peer is shutdown.
The no form of this command reverts the value to the profile default.
Default
log-sync-interval -6 (64 packets per second) for ieee1588-2008
log-sync-interval -6 (64 packets per second) for g8265dot1-2010
log-sync-interval -4 (16 packets per second) for g8275dot1-2014
log-sync-interval -6 (64 packets per second) for g8275dot2-2016
Parameters
- log-interval
-
Specifies the sync message interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
log-sync-interval
Syntax
log-sync-interval log-interval
no log-sync-interval
Context
[Tree] (config>system>ptp>port log-sync-interval)
Full Context
configure system ptp port log-sync-interval
Description
This command configures the message interval used for transmission of multicast Sync messages.
For multicast messages used on PTP Ethernet ports, this configures the message interval used for Sync messages transmitted by the local node when the port is in Master state.
The no form of this command reverts the value to the profile default.
Default
log-sync-interval -6 (64 packets per second) for ieee1588-2008
log-sync-interval -6 (64 packets per second) for g8265dot1-2010
log-sync-interval -4 (16 packets per second) for g8275dot1-2014
log-sync-interval -6 (64 packets per second) for g8275dot2-2016
Parameters
- log-interval
-
Specifies the message interval, in log form.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
logger-event-bundling
logger-event-bundling
Syntax
[no] logger-event-bundling
Context
[Tree] (config>router>mpls logger-event-bundling)
Full Context
configure router mpls logger-event-bundling
Description
This feature merges two of the most commonly generated MPLS traps, vRtrMplsXCCreate and vRtrMplsXCDelete, which can be generated at both LER and LSR into a new specific trap vRtrMplsSessionsModified. In addition, this feature perform bundling of traps of multiple RSVP sessions, that is LSPs, into this new specific trap.
The intent is to provide a tool for the user to minimize trap generation in an MPLS network. Note that the MPLS trap throttling will not be applied to this new trap.
The no version of this command disables the merging and bundling of the above MPLS traps.
Platforms
All
logical-access-id
logical-access-id
Syntax
[no] logical-access-id
Context
[Tree] (config>subscr-mgmt>diam-appl-plcy>gx>include-avp logical-access-id)
Full Context
configure subscriber-mgmt diameter-application-policy gx include-avp logical-access-id
Description
This command includes the logical-access-id.
The no form of this command reverts to the default.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
logical-port-status
logical-port-status
Syntax
logical-port-status {rsvp-te | mpls-tp | sr-te}
no logical-port-status [{rsvp-te | mpls-tp | sr-te}]
Context
[Tree] (config>open-flow>of-switch logical-port-status)
Full Context
configure open-flow of-switch logical-port-status
Description
This command enables status change reporting to the OpenFlow controller for the specified logical port type. To report on multiple logical port types, the command needs to be executed multiple times with different logical port specified as required.
The no form of this command disables status reporting for specified or all (no argument) logical ports.
Default
no logical-port-status
Parameters
- rsvp-te
-
Enables reporting on RSVP-TE LSP logical ports.
- mpls-te
-
Enables reporting on MPLS-TE logical ports.
- sr-te
-
Enables reporting on SR-TE logical ports.
Platforms
All
login-banner
login-banner
Syntax
[no] login-banner
Context
[Tree] (config>system>login-control login-banner)
Full Context
configure system login-control login-banner
Description
This command enables or disables the display of a login banner. The login banner contains the SR OS copyright and build date information for a console login attempt.
The no form of this command causes only the configured pre-login-message and a generic login prompt to display.
Platforms
All
login-control
login-control
Syntax
login-control
Context
[Tree] (config>system login-control)
Full Context
configure system login-control
Description
This command creates the context to configure the session control for console, Telnet, SSH, and FTP sessions.
Platforms
All
login-exec
login-exec
Syntax
login-exec url-prefix: source-url
no login-exec
Context
[Tree] (config>system>security>user>console login-exec)
[Tree] (config>system>security>user-template>console login-exec)
Full Context
configure system security user console login-exec
configure system security user-template console login-exec
Description
This command configures a user’s login exec file which executes whenever the user successfully logs in to a console session.
Only one exec file can be configured. If multiple login-exec commands are entered for the same user, each subsequent entry overwrites the previous entry.
The no form of this command disables the login exec file for the user.
Default
no login-exec
Parameters
- url-prefix: source-url
-
Specifies either a local or remote URL, up to 200 characters, that identifies the exec file that is executed after the user successfully logs in.
Platforms
All
login-scripts
login-scripts
Syntax
login-scripts
Context
[Tree] (config>system>login-control login-scripts)
Full Context
configure system login-control login-scripts
Description
Commands in this context configure CLI scripts that execute when a user (authenticated via any method including local user database, TACACS+, or RADIUS) first logs into a CLI session.
Platforms
All
logout
logout
Syntax
logout
Context
[Tree] (logout)
Full Context
logout
Description
This command logs out of the router session.
When the logout command is issued from the console, the login prompt is displayed, and any log IDs directed to the console are discarded. When the console session resumes (regardless of the user), the log output to the console resumes.
When a Telnet session is terminated from a logout command, all log IDs directed to the session are removed. When a user logs back in, the log IDs must be re-created.
Platforms
All
long-duration-flow-count
long-duration-flow-count
Syntax
[no] long-duration-flow-count
Context
[Tree] (config>log>acct-policy>cr>aa>aa-sub-cntr long-duration-flow-count)
Full Context
configure log accounting-policy custom-record aa-specific aa-sub-counters long-duration-flow-count
Description
This command includes the long duration flow count. This command only applies to the 7750 SR.
The no form of this command excludes the long duration flow count in the AA subscriber's custom record.
Default
no long-duration-flow-count
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
long-lived
long-lived
Syntax
[no] long-lived
Context
[Tree] (config>service>vprn>bgp>graceful-restart long-lived)
[Tree] (config>service>vprn>bgp>group>neighbor>graceful-restart long-lived)
[Tree] (config>service>vprn>bgp>group>graceful-restart long-lived)
Full Context
configure service vprn bgp graceful-restart long-lived
configure service vprn bgp group neighbor graceful-restart long-lived
configure service vprn bgp group graceful-restart long-lived
Description
Commands in this context configure BGP Long-Lived Graceful-Restart (LLGR) procedures.
LLGR, known informally as BGP persistence, is an extension of BGP graceful restart that allows a session to stay down for a longer period of time. During this time, learned routes are marked and re-advertised as stale but they can continue to be used as routes of last resort.
The LLGR handling of a session failure can be invoked immediately or it can be delayed until the end of the traditional GR restart window.
Default
no long-lived
Platforms
All
long-lived
Syntax
[no] long-lived
Context
[Tree] (config>router>bgp>group>neighbor>graceful-restart long-lived)
[Tree] (config>router>bgp>group>graceful-restart long-lived)
[Tree] (config>router>bgp>graceful-restart long-lived)
Full Context
configure router bgp group neighbor graceful-restart long-lived
configure router bgp group graceful-restart long-lived
configure router bgp graceful-restart long-lived
Description
Commands in this context enter commands related to BGP Long-Lived Graceful-Restart (LLGR) procedures.
LLGR, known informally as BGP persistence, is an extension of BGP GR that allows a session to stay down for a longer period of time. During this time, learned routes are marked and re-advertised as stale but they can continue to be used as routes of last resort.
The LLGR handling of a session failure can be invoked immediately or it can be delayed until the end of the traditional GR restart window.
Default
no long-lived
Platforms
All
loop-detect
loop-detect
Syntax
loop-detect {drop-peer | discard-route | ignore-loop | off}
no loop-detect
Context
[Tree] (config>subscr-mgmt>bgp-prng-plcy loop-detect)
Full Context
configure subscriber-mgmt bgp-peering-policy loop-detect
Description
This command configures how the BGP peer session handles loop detection in the AS path.
Dynamic configuration changes of loop-detect are not recognized.
The no form of this command used at the global level reverts to default, which is loop-detect ignore-loop.
Parameters
- drop-peer
-
Sends a notification to the remote peer and drops the session.
- discard-route
-
Discards routes received with loops in the AS path.
- ignore-loop
-
Ignores routes with loops in the AS path but maintains peering.
- off
-
Disables loop detection.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
loop-detect
Syntax
loop-detect {drop-peer | discard-route | ignore-loop | off}
no loop-detect
Context
[Tree] (config>service>vprn>bgp loop-detect)
[Tree] (config>service>vprn>bgp>group>neighbor loop-detect)
[Tree] (config>service>vprn>bgp>group loop-detect)
Full Context
configure service vprn bgp loop-detect
configure service vprn bgp group neighbor loop-detect
configure service vprn bgp group loop-detect
Description
This command configures how the BGP peer session handles loop detection in the AS path.
This configuration parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). The most specific value is used.
Dynamic configuration changes of loop-detect are not recognized.
The no form of this command used at the global level reverts to default, which is loop-detect ignore-loop.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
loop-detect ignore-loop
Parameters
- drop-peer
-
Sends a notification to the remote peer and drops the session.
- discard-route
-
Discards routes received with loops in the AS path.
- ignore-loop
-
ignores routes with loops in the AS path but maintains peering.
- off
-
Disables loop detection.
Platforms
All
loop-detect
Syntax
loop-detect {drop-peer | discard-route | ignore-loop | off}
no loop-detect
Context
[Tree] (config>router>bgp loop-detect)
[Tree] (config>router>bgp>group loop-detect)
[Tree] (config>router>bgp>group>neighbor loop-detect)
Full Context
configure router bgp loop-detect
configure router bgp group loop-detect
configure router bgp group neighbor loop-detect
Description
This command configures how the BGP peer session handles loop detection in the AS path.
This configuration parameter can be set at three levels: global level (applies to all peers), group level (applies to all peers in peer-group) or neighbor level (only applies to specified peer). The most specific value is used.
Dynamic configuration changes of loop-detect are not recognized.
The no form of this command used at the global level reverts to default, which is loop-detect ignore-loop.
The no form of this command used at the group level reverts to the value defined at the global level.
The no form of this command used at the neighbor level reverts to the value defined at the group level.
Default
loop-detect ignore-loop
Parameters
- drop-peer
-
Sends a notification to the remote peer and drops the session.
- discard-route
-
Discards routes received from a peer with the same AS number as the router itself. This option prevents routes looped back to the router from being added to the routing information base and consuming memory. When this option is changed, the change will not be active for an established peer until the connection is re-established for the peer.
- ignore-loop
-
Ignores routes with loops in the AS path but maintains peering.
- off
-
Disables loop detection.
Platforms
All
loop-detect-threshold
loop-detect-threshold
Syntax
loop-detect-threshold loop-detect-threshold
no loop-detect-threshold
Context
[Tree] (config>service>vprn>bgp loop-detect-threshold)
[Tree] (config>service>vprn>bgp>group>neighbor loop-detect-threshold)
[Tree] (config>service>vprn>bgp>group loop-detect-threshold)
Full Context
configure service vprn bgp loop-detect-threshold
configure service vprn bgp group neighbor loop-detect-threshold
configure service vprn bgp group loop-detect-threshold
Description
This command provides additional control over the behavior enabled by the loop-detect command. If this command specifies a threshold value of n, then a route received by the local BGP speaker with an AS path that contains up to n occurrences of the local speaker's AS number is considered valid and not treated as an AS path loop. An AS loop is considered to occur only when the received AS path has more than n occurrences of the local speaker's AS number.
The no form of this command removes the configuration and sets the value to 0. One or more occurrence of the local speaker's AS number in the received AS path triggers the loop-detect behavior.
Default
no loop-detect-threshold
Parameters
- loop-detect-threshold
-
The maximum number of occurrences of the local speaker's AS number in the received AS path before the AS path is considered to be a loop.
Platforms
All
loop-detect-threshold
Syntax
loop-detect-threshold loop-detect-threshold
no loop-detect-threshold
Context
[Tree] (config>router>bgp loop-detect-threshold)
[Tree] (config>router>bgp>group>neighbor loop-detect-threshold)
[Tree] (config>router>bgp>group loop-detect-threshold)
Full Context
configure router bgp loop-detect-threshold
configure router bgp group neighbor loop-detect-threshold
configure router bgp group loop-detect-threshold
Description
This command provides additional control over the behavior enabled by the loop-detect command. If this command specifies a threshold value of n, then a route received by the local BGP speaker with an AS path that contains up to n occurrences of the local speaker's AS number is considered valid and not treated as an AS path loop. An AS loop is considered to occur only when the received AS path has more than n occurrences of the local speaker's AS number.
The no form of this command removes the configuration and sets the value to 0. One or more occurrence of the local speaker's AS number in the received AS path triggers the loop-detect behavior.
Default
no loop-detect-threshold
Parameters
- loop-detect-threshold
-
The maximum number of occurrences of the local speaker's AS number in the received AS path before the AS path is considered to be a loop.
Platforms
All
loopback
loopback
Syntax
[no] loopback
Context
[Tree] (config>service>vprn>if loopback)
[Tree] (config>service>ies>if loopback)
Full Context
configure service vprn interface loopback
configure service ies interface loopback
Description
This command specifies that the associated interface is a loopback interface that has no associated physical interface. As a result, the associated IES/VPRN interface cannot be bound to a SAP.
Configure an IES interface as a loopback interface by issuing the loopback command instead of the sap sap-id command. The loopback flag cannot be set on an interface where a SAP is already defined and a SAP cannot be defined on a loopback interface.
The no form of this command reverts to the default.
Platforms
All
loopback
Syntax
[no] loopback
Context
[Tree] (config>service>vprn>nw-if loopback)
Full Context
configure service vprn network-interface loopback
Description
This command specifies that the associated interface is a loopback interface that has no associated physical interface. As a result, the associated interface cannot be bound to a SAP.
When using mtrace/mstat in a Layer 3 VPN context then the configuration for the VPRN should have a loopback address configured which has the same address as the core instance's system address (BGP next-hop).
Default
no loopback
Platforms
All
loopback
Syntax
loopback {line | internal}
no loopback
Context
[Tree] (config>port>sonet-sdh loopback)
Full Context
configure port sonet-sdh loopback
Description
This command activates a loopback on the SONET/SDH port.
The SONET port must be in a shut down state to activate any type of loopback. The loopback setting is never saved to the generated/saved configuration file.
Note that loopback mode changes on a SONET/SDH port can affect traffic on the remaining ports.
This command is supported by TDM satellite.
Default
no loopback
Parameters
- line
-
Set the port into line loopback state.
- internal
-
Set the port into internal loopback state.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
loopback
Syntax
loopback {line | internal | fdl-ansi | fdl-bellcore | payload-ansi | inband-ansi | inband-bellcore}
no loopback
Context
[Tree] (config>port>tdm>ds1 loopback)
Full Context
configure port tdm ds1 loopback
Description
This command puts the specified port or channel into a loopback mode.
The corresponding port or channel must be in a shutdown state in order for the loopback mode to be enabled. The upper level port or channel or parallel channels should not be affected by the loopback mode.
Note that this command is not saved in the router configuration between boots.
The no form of this command disables the specified type of loopback.
Default
no loopback
Parameters
- line
-
Places the associated port or channel into a line loopback mode. A line loopback loops frames received on the corresponding port or channels back to the remote router.
- internal
-
Places the associated port or channel into an internal loopback mode. An internal loopback loops the frames from the local router back at the framer.
- fdl-ansi
-
Requests FDL line loopback according to ANSI T1.403.
- fdl-bellcore
-
Requests FDL line loopback according to Bellcore TR-TSY-000312.
- payload-ansi
-
Requests payload loopback using ANSI signaling.
- inband-ansi
-
Requests inband line loopback according to ANSI T1.403.
- inband-bellcore
-
Requests inband line loopback according to Bellcore signaling.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
loopback
Syntax
loopback {line | internal | remote}
no loopback
Context
[Tree] (config>port>tdm>ds3 loopback)
Full Context
configure port tdm ds3 loopback
Description
This command puts the specified port or channel into a loopback mode.
The corresponding port or channel must be in a shutdown state in order for the loopback mode to be enabled. The upper level port or channel or parallel channels should not be affected by the loopback mode.
Note that this command is not saved in the router configuration between boots.
The no form of this command disables the specified type of loopback.
Default
no loopback
Parameters
- line
-
Places the associated port or channel into a line loopback mode. A line loopback loops frames received on the corresponding port or channels back to the remote router.
- internal
-
Places the associated port or channel into an internal loopback mode. A internal loopback loops the frames from the local router back at the framer.
- remote
-
Sends a signal to the remote device to provide a line loopback.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
loopback
Syntax
loopback {line | internal}
no loopback
Context
[Tree] (config>port>tdm>e1 loopback)
[Tree] (config>port>tdm>e3 loopback)
Full Context
configure port tdm e1 loopback
configure port tdm e3 loopback
Description
This command puts the specified port or channel into a loopback mode.
The corresponding port or channel must be in a shutdown state in order for the loopback mode to be enabled. The upper level port or channel or parallel channels should not be affected by the loopback mode
Note that this command is not saved in the router configuration between boots.
The no form of this command disables the specified type of loopback.
Default
no loopback
Parameters
- line
-
Places the associated port or channel into a line loopback mode. A line loopback loops frames received on the corresponding port or channels back to the remote router.
- internal
-
Places the associated port or channel into an internal loopback mode. An internal loopback loops the frames from the local router back at the framer.
Platforms
7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e
loopback
Syntax
loopback {mac-address | multicast | remote-mepid mep-id} mep mep-id domain md-index association ma-index [send-count send-count] [size data-size] [priority priority] [lbm-padding padding-size] [timeout timeout-time] [interval interval-time]
Context
[Tree] (oam>eth-cfm loopback)
Full Context
oam eth-cfm loopback
Description
The command initiates a loopback test.
Parameters
- mac-address
-
Specifies a unicast MAC address or multicast MAC address. The last nibble of the multicast address must match the level of the local MEP, or the command fails and the test is not instantiated.
- multicast
-
Builds the class one destination multicast address based on the level of the local MEP. The last nibble of the multicast address must match the level of the local MEP or the command fails and the test is not instantiated.
- remote-mepid mep-id
-
Specifies the remote MEP ID of the peer within the association. The domain and association information are derived from the source mep for the session. The Layer 2 IEEE MAC address is resolved from previously-learned remote MAC addressing, derived from the reception and processing of the ETH-CC PDU. The local MEP must be administratively enabled.
- mep mep-id
-
Specifies the local MEP ID.
- md-index
-
Specifies the MD index.
- ma-index
-
Specifies the MA index.
- send-count
-
Specifies the number of messages to send, expressed as a decimal integer. Loopback messages are sent back-to-back, with no delay between the transmissions.
- data-size
-
Specifies the size of the variable data pattern only of the data TLV. This value does not include the 1 Byte Type, 2 Byte Length. This means that the total size of the data TLV is the configured value plus the 3 addition bytes to accommodate the type and length fields. If 0 is specified, no data TLV is added to the packet. This parameter and lbm-padding are mutually exclusive.
- priority
-
Specifies a 3-bit value to be used in the VLAN tag, if present, in the transmitted frame.
- padding-size
-
Specifies the complete size of the data TLV, which includes the 1 Byte Type, 2 Byte Length, and the variable data pad. If 0 is specified, no data TLV is added to the packet. MSDU is not processed when lbm-padding is in use. This parameter and size are mutually exclusive.
- timeout-time
-
Specifies the time, in seconds, used to override the default timeout-time value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.
- interval-time
-
Specifies the time, in deciseconds (100 ms), to configure the spacing between probes within the test run. A value of 0 means probes are sent with no enforced delay. This value is only applicable to tests where the send-count is 5 or less.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
loopback
Syntax
[no] loopback
Context
[Tree] (config>router>if loopback)
Full Context
configure router interface loopback
Description
This command configures the interface as a loopback interface. The vas-if-type and loopback commands are mutually exclusive.
Default
Not enabled
Platforms
All
loopback
Syntax
loopback loopback-id [create]
no loopback loopback-id
Context
[Tree] (config>card>xiom>mda>xcon>mac loopback)
[Tree] (config>card>mda>xconnect>mac loopback)
Full Context
configure card xiom mda xconnect mac loopback
configure card mda xconnect mac loopback
Description
This command configures a MAC loopback on a MAC chip. The system and services can start using the loopback only when a port is associated with it (for example, port 1/1/m1/1, where m1 represents the MAC ID).
The no form of this command removes the loopback ID from the configuration.
Parameters
- loopback-id
-
Specifies the loopback ID for the MDA cross-connect.
- create
-
Keyword used to create a new loopback. The create keyword requirement can be enabled or disabled in the environment>create context.
Platforms
7750 SR-1s, 7750 SR-2s, 7750 SR-2se, 7750 SR-7s, 7750 SR-14s
- configure card xiom mda xconnect mac loopback
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
- configure card mda xconnect mac loopback
loopfree-alternate-exclude
loopfree-alternate-exclude
Syntax
[no] loopfree-alternate-exclude
Context
[Tree] (config>service>vprn>isis>interface loopfree-alternate-exclude)
[Tree] (config>router>isis>interface loopfree-alternate-exclude)
[Tree] (config>router>isis>level loopfree-alternate-exclude)
[Tree] (config>service>vprn>isis>level loopfree-alternate-exclude)
Full Context
configure service vprn isis interface loopfree-alternate-exclude
configure router isis interface loopfree-alternate-exclude
configure router isis level loopfree-alternate-exclude
configure service vprn isis level loopfree-alternate-exclude
Description
This command instructs IGP to not include a specific interface or all interfaces participating in a specific IS-IS level or OSPF area in the SPF LFA computation. This provides a way of reducing the LFA SPF calculation where it is not needed.
When an interface is excluded from the LFA SPF in IS-IS, it is excluded in both level 1 and level 2. When it is excluded from the LFA SPF in OSPF, it is excluded in all areas. However, the above OSPF command can only be executed under the area in which the specified interface is primary and once enabled, the interface is excluded in that area and in all other areas where the interface is secondary. If the user attempts to apply it to an area where the interface is secondary, the command will fail.
The no form of this command re-instates the default value for this command.
Default
no loopfree-alternate-exclude
Platforms
All
loopfree-alternate-exclude
Syntax
[no] loopfree-alternate-exclude
Context
[Tree] (config>service>vprn>ospf>area>if loopfree-alternate-exclude)
[Tree] (config>service>vprn>ospf>area loopfree-alternate-exclude)
[Tree] (config>service>vprn>ospf3>area loopfree-alternate-exclude)
[Tree] (config>service>vprn>ospf3>area>if loopfree-alternate-exclude)
Full Context
configure service vprn ospf area interface loopfree-alternate-exclude
configure service vprn ospf area loopfree-alternate-exclude
configure service vprn ospf3 area loopfree-alternate-exclude
configure service vprn ospf3 area interface loopfree-alternate-exclude
Description
This command instructs IGP to not include a specific interface or all interfaces participating in a specific IS-IS level or OSPF area in the SPF LFA computation. This provides a way of reducing the LFA SPF calculation where it is not needed.
When an interface is excluded from the LFA SPF in IS-IS, it is excluded in both level 1 and level 2. When it is excluded from the LFA SPF in OSPF, it is excluded in all areas. However, the above OSPF command can only be executed under the area in which the specified interface is primary and once enabled, the interface is excluded in that area and in all other areas where the interface is secondary. If the user attempts to apply it to an area where the interface is secondary, the command fails.
The no form of this command re-instates the default value for this command.
Default
no loopfree-alternate-exclude
Platforms
All
loopfree-alternate-exclude
Syntax
loopfree-alternate-exclude prefix-policy prefix-policy [prefix-policy)]
no loopfree-alternate-exclude
Context
[Tree] (config>router>ospf3 loopfree-alternate-exclude)
[Tree] (config>router>ospf loopfree-alternate-exclude)
Full Context
configure router ospf3 loopfree-alternate-exclude
configure router ospf loopfree-alternate-exclude
Description
This command excludes from the LFA SPF calculation those prefixes that match a prefix entry or a tag entry in a prefix policy. If a prefix is excluded from LFA, it is not included in LFA calculations regardless of its priority. The prefix tag will, however, be used in the main SPF.
The implementation also allows the user to exclude a specific interface in IS-IS or OSPF, a or all interfaces in an OSPF area or IS-IS level from the LFA SPF.
Prefix tags are defined for the IS-IS protocol but not for the OSPF protocol.
The default action of the loopfree-alternate-exclude command, when not explicitly specified by the user in the prefix policy, is "reject”. Therefore, regardless of whether the user explicitly added the statement "default-action reject” to the prefix policy, a prefix that does not match any entry in the policy will be accepted into LFA SPF.
The no form of this command deletes the exclude prefix policy.
Default
no loopfree-alternate-exclude
Parameters
- prefix-policy
-
Specifies up to five policy prefix names. The specified policy name must already be defined. Prefix policies are created with the command config>router>policy-options>prefix-list; for information on prefix lists, refer to "Route Policies” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Unicast Routing Protocols Guide.
Platforms
All
loopfree-alternate-exclude
Syntax
[no] loopfree-alternate-exclude
Context
[Tree] (config>router>ospf>area>interface loopfree-alternate-exclude)
[Tree] (config>router>ospf3>area>interface loopfree-alternate-exclude)
[Tree] (config>router>ospf>area loopfree-alternate-exclude)
[Tree] (config>router>ospf3>area loopfree-alternate-exclude)
Full Context
configure router ospf area interface loopfree-alternate-exclude
configure router ospf3 area interface loopfree-alternate-exclude
configure router ospf area loopfree-alternate-exclude
configure router ospf3 area loopfree-alternate-exclude
Description
This command instructs IGP to not include a specific interface or all interfaces participating in a specific IS-IS level or OSPF area in the SPF LFA computation. This provides a way of reducing the LFA SPF calculation where it is not needed.
When an interface is excluded from the LFA SPF in IS-IS, it is excluded in both level 1 and level 2. When it is excluded from the LFA SPF in OSPF, it is excluded in all areas. However, the above OSPF command can only be executed under the area in which the specified interface is primary and once enabled, the interface is excluded in that area and in all other areas where the interface is secondary. If the user attempts to apply it to an area where the interface is secondary, the command will fail.
The no form of this command re-instates the default value for this command.
Default
no loopfree-alternate-exclude
Platforms
All
loopfree-alternates
loopfree-alternates
Syntax
[no] loopfree-alternates
Context
[Tree] (config>service>vprn>isis loopfree-alternates)
Full Context
configure service vprn isis loopfree-alternates
Description
This command enables Loop-Free Alternate (LFA) computation by SPF under the IS-IS routing protocol level or under the OSPF routing protocol instance level.
When this command is enabled, it instructs the IGP SPF to attempt to pre-compute both a primary next-hop and an LFA next-hop for every learned prefix. When found, the LFA next-hop is populated into the routing table along with the primary next-hop for the prefix.
The no form of this command disables the LFA computation by IGP SPF.
Default
no loopfree-alternates
Platforms
All
loopfree-alternates
Syntax
[no] loopfree-alternates
Context
[Tree] (config>service>vprn>ospf loopfree-alternates)
[Tree] (config>service>vprn>ospf3 loopfree-alternates)
Full Context
configure service vprn ospf loopfree-alternates
configure service vprn ospf3 loopfree-alternates
Description
This command enables Loop-Free Alternate (LFA) computation by SPF under the IS-IS routing protocol level, or under the OSPF routing protocol instance level.
When this command is enabled, it instructs the IGP SPF to attempt to pre-compute both a primary next-hop and an LFA next-hop for every learned prefix. IS-IS computes the primary SPF first and then computes the LFA SPF. The LFA backup next-hop is only available after the LFA SPF is completed. When found, the LFA next-hop is populated into the routing table along with the primary next-hop for the prefix.
The no form of this command disables the LFA computation by IGP SPF.
Default
no loopfree-alternates
Platforms
All
loopfree-alternates
Syntax
[no] loopfree-alternates
Context
[Tree] (config>router>isis>flex-algos>flex-algo loopfree-alternates)
[Tree] (config>router>ospf>flex-algos>flex-algo loopfree-alternates)
Full Context
configure router isis flexible-algorithms flex-algo loopfree-alternates
configure router ospf flexible-algorithms flex-algo loopfree-alternates
Description
This command enables the advertisement of flexible-algorithm aware loop free alternates (LFAs).
The flexible algorithm LFA configuration (for example, LFA, remote-LFA or TI-LFA) inherits the LFA configuration for base SPF algorithm 0.
LFAs are administratively disabled for flexible algorithms in which IS-IS is participating. LFAs must be explicitly enabled using the loopfree-alternates command.
The no form of this command disables LFAs for the specific flexible algorithm in which the router is participating.
Default
no loopfree-alternates
Platforms
All
loopfree-alternates
Syntax
[no] loopfree-alternates
Context
[Tree] (config>router>isis loopfree-alternates)
Full Context
configure router isis loopfree-alternates
Description
This command enables Loop-Free Alternate (LFA) computation by SPF for the IS-IS routing protocol.
When this command is enabled, it instructs the IGP SPF to attempt to pre-compute both a primary nexthop and an LFA next-hop for every learned prefix. When found, the LFA next-hop is populated into the routing table along with the primary next-hop for the prefix.
The user enables the remote LFA next-hop calculation by the IGP LFA SPF by appending the remote-lfa option. When this option is enabled in an IGP instance, SPF performs the remote LFA additional computation following the regular LFA next-hop calculation when the latter resulted in no protection for one or more prefixes which are resolved to a given interface.
Remote LFA extends the protection coverage of LFA-FRR to any topology by automatically computing and establishing/tearing-down shortcut tunnels, also referred to as repair tunnels, to a remote LFA node which puts the packets back into the shortest without looping them back to the node which forwarded them over the repair tunnel. The remote LFA node is referred to as PQ node. A repair tunnel can in theory be an RSVP LSP, a LDP-in-LDP tunnel, or a SR tunnel. In this feature, it is restricted to use SR repair tunnel to the remote LFA node.
The remote LFA algorithm is a per-link LFA SPF calculation and not a per-prefix like the regular LFA one. So, it provides protection for all destination prefixes which share the protected link by using the neighbor on the other side of the protected link as a proxy for all these destinations.
The Topology-Independent LFA (TI-LFA) further improves the protection coverage of a network topology by computing and automatically instantiating a repair tunnel to a Q node which is not in shortest path from the computing node. The repair tunnel uses shortest path to the P node and a source routed path from the P node to the Q node.
In addition, the TI-LFA algorithm selects the backup path which matches the post-convergence path. This helps the capacity planning in the network since traffic will always flow on the same path when transitioning to the FRR next-hop and then onto the new primary next-hop.
At a high level, the TI-LFA protection algorithm is searching for a candidate P-Q set separated with a number of hops such that the label stack size does not exceed the value of ti-lfa max-sr-frr-labels, on each of the post-convergence paths to each destination node or prefix D.
When the ti-lfa option is enabled in IS-IS, it provides TI-LFA node-protect or link-protect backup path in IS-IS MT=0 for an SR-ISIS IPV4/IPv6 tunnel (node SID and adjacency SID), for an IPv4 SR-TE LSP, and for LDP IPv4 FEC when the LDP fast-reroute backup-sr-tunnel option is enabled.
The max-sr-frr-labels parameter is used to limit the search for the TI-LFA backup next-hop:
-
0 — The IGP LFA SPF restricts the search to TI-LFA backup next-hop which does not require a repair tunnel, meaning that P node and Q node are the same and match a neighbor. This is also the case when both P and Q node match the advertising router for a prefix.
-
1 to 3 — The IGP LFA SPF will widen the search to include a repair tunnel to a P node which itself is connected to the Q nodes with a 0-to-2 hops for a total of maximum of three labels: one node SID to P node and two adjacency SIDs from P node to the Q node. If the P node is a neighbor of the computing node, its node SID is compressed and meaning that up to three adjacency SIDs can separate the P and Q nodes.
-
2 (default) — Corresponds to a repair tunnel to a non-adjacent P which is adjacent to the Q node. If the P node is a neighbor of the computing node, then the node SID of the P node is compressed and the default value of two labels corresponds to two adjacency SIDs between the P and Q nodes.
When the node-protect command is enabled, the router will prefer a node-protect over a link-protect repair tunnel for a given prefix if both are found in the Remote LFA or TI-LFA SPF computations. The SPF computations may only find a link-protect repair tunnel for prefixes owned by the protected node. This node-protect backup protects against the failure of a downstream node in the path of the prefix of a node SID except for the node owner of the node SID.
The parameter max-pq-nodes in Remote LFA controls the maximum number of PQ nodes found in the LFA SPFs for which the node protection check is performed. The node-protect condition means the router must run the original Remote LFA algorithm plus one extra forward SPF on behalf of each PQ node found, potentially after applying the max-pq-cost parameter, to check if the path from the PQ node to the destination does not traverse the protected node. Setting this parameter to a lower value means the LFA SPFs will use less computation time and resources but may result in not finding a node-protect repair tunnel.
The no form of this command disables the LFA computation by IGP SPF.
Default
no loopfree-alternates
Platforms
All
loopfree-alternates
Syntax
[no] loopfree-alternates
Context
[Tree] (config>router>ospf loopfree-alternates)
[Tree] (config>router>ospf3 loopfree-alternates)
Full Context
configure router ospf loopfree-alternates
configure router ospf3 loopfree-alternates
Description
This command enables Loop-Free Alternate (LFA) computation by SPF under the OSPF or OSPFv3 routing protocol instance.
When this command is enabled, it instructs the IGP SPF to attempt to precalculate both a primary next hop and an LFA next hop for every learned prefix. When found, the LFA next hop is populated into the routing table along with the primary next hop for the prefix.
The user enables the remote LFA next hop calculation by the IGP LFA SPF by appending the remote-lfa option. When this option is enabled in an IGP instance, SPF performs the remote LFA additional computation following the regular LFA next hop calculation when the latter resulted in no protection for one or more prefixes which are resolved to a particular interface.
Remote LFA extends the protection coverage of LFA-FRR to any topology by automatically computing and establishing or tearing down shortcut tunnels, also referred to as repair tunnels, to a remote LFA node that puts the packets back into the shortest path without looping them back to the node that forwarded them over the repair tunnel. The remote LFA node is referred to as a PQ node. A repair tunnel can, in theory, be an RSVP-TE LSP, an LDP-in-LDP tunnel, or a segment routing (SR) tunnel. In this command, remote-lfa is restricted to using an SR repair tunnel to the remote LFA node.
The remote LFA algorithm is a per-link LFA SPF calculation and not a per-prefix calculation like the regular LFA algorithm. The remote LFA algorithm provides protection for all destination prefixes that share the protected link by using the neighbor on the other side of the protected link as a proxy for all the destinations.
The Topology-Independent LFA (TI-LFA) further improves the protection coverage of a network topology by computing and automatically instantiating a repair tunnel to a Q node which is not in shortest path from the computing node. The repair tunnel uses shortest path to the P node and a source routed path from the P node to the Q node.
In addition, the TI-LFA algorithm selects the backup path which matches the post-convergence path. This helps the capacity planning in the network since traffic will always flow on the same path when transitioning to the FRR next hop and then onto the new primary next hop.
At a high level, the TI-LFA protection algorithm is searching for a candidate P-Q set separated with a number of hops such that the label stack size does not exceed the value of ti-lfa max-sr-frr-labels, on each of the post-convergence paths to each destination node or prefix D.
When the ti-lfa option is enabled in OSPF, it provides TI-LFA node-protect or link-protect backup path for a SR-OSPF IPV4 tunnel (node SID and adjacency SID), and for a IPv4 SR-TE LSP.
The max-sr-frr-labels parameter is used to limit the search for the TI-LFA backup next hop:
-
0 — The IGP LFA SPF restricts the search to TI-LFA backup next hop which does not require a repair tunnel, meaning that P node and Q node are the same and match a neighbor. This is also the case when both P and Q node match the advertising router for a prefix.
-
1 to 3 — The IGP LFA SPF will widen the search to include a repair tunnel to a P node which itself is connected to the Q nodes with a 0-to-2 hops for a total of maximum of three labels: one node SID to P node and two adjacency SIDs from P node to the Q node. If the P node is a neighbor of the computing node, its node SID is compressed and meaning that up to three adjacency SIDs can separate the P and Q nodes.
-
2 (default) — Corresponds to a repair tunnel to a non-adjacent P which is adjacent to the Q node. If the P node is a neighbor of the computing node, then the node SID of the P node is compressed and the default value of two labels corresponds to two adjacency SIDs between the P and Q nodes.
The TI-LFA repair tunnel can have a maximum of three labels pushed in addition to the label of the destination node or prefix. The user can set a lower maximum value for the additional FRR labels by configuring the CLI option max-sr-frr-labels labels. The default value is 2.
When the node-protect command is enabled, the router will prefer a node-protect over a link-protect repair tunnel for a given prefix if both are found in the Remote LFA or TI-LFA SPF computations. The SPF computations may only find a link-protect repair tunnel for prefixes owned by the protected node. This node-protect backup protects against the failure of a downstream node in the path of the prefix of a node SID except for the node owner of the node SID.
The parameter max-pq-nodes in Remote LFA controls the maximum number of PQ nodes found in the LFA SPFs for which the node protection check is performed. The node-protect condition means the router must run the original Remote LFA algorithm plus one extra forward SPF on behalf of each PQ node found, potentially after applying the max-pq-cost parameter, to check if the path from the PQ node to the destination does not traverse the protected node. Setting this parameter to a lower value means the LFA SPFs will use less computation time and resources but may result in not finding a node-protect repair tunnel.
The no form of this command disables the LFA computation by the IGP SPF.
Default
no loopfree-alternates
Platforms
All
loss
loss
Syntax
loss
Context
[Tree] (config>oam-pm>session>ip>twamp-light loss)
Full Context
configure oam-pm session ip twamp-light loss
Description
Commands in this context configure loss parameters for the TWAMP-Light test.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
loss-event
loss-event
Syntax
loss-event rising-threshold threshold [falling-threshold threshold] [direction]
no loss-event
Context
[Tree] (config>saa>test loss-event)
Full Context
configure saa test loss-event
Description
Specifies that at the termination of an SAA test run, the calculated loss event value is evaluated against the configured rising and falling loss event thresholds. SAA threshold events are generated as required.
The configuration of loss event thresholds is optional.
The no form of this command disables the loss-event test run.
Parameters
- rising-threshold threshold
-
Specifies a rising threshold loss event value, in packets. When the test run is completed, the calculated loss event value is compared to the configured loss event rising threshold. If the test run loss event value is greater than the configured rising threshold value then an SAA threshold event is generated. The SAA threshold event is tmnxOamSaaThreshold, logger application OAM, event #2101.
- falling-threshold threshold
-
Specifies a falling threshold loss event value, in packets. When the test run is completed, the calculated loss event value is compared to the configured loss event falling threshold. If the test run loss event value is greater than the configured falling threshold value then an SAA threshold event is generated. The SAA threshold event is tmnxOamSaaThreshold, logger application OAM, event #2101.
- direction
-
Specifies the direction for OAM ping responses received for an OAM ping test run.
Platforms
All
loss-events
loss-events
Syntax
[no] loss-events
Context
[Tree] (config>oam-pm>session>measurement-interval>event-mon loss-events)
Full Context
configure oam-pm session measurement-interval event-mon loss-events
Description
This enables the monitoring of all configured loss events. Adding this functionality starts the monitoring of the configured loss events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured loss events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shut down all the tests in the session.
The no form of this command disables the monitoring of all configured loss events.
loss-events
Syntax
loss-events
Context
[Tree] (config>oam-pm>session>ethernet>slm loss-events)
[Tree] (config>oam-pm>session>ip>twamp-light loss-events)
[Tree] (config>oam-pm>session>ethernet>lmm loss-events)
Full Context
configure oam-pm session ethernet slm loss-events
configure oam-pm session ip twamp-light loss-events
configure oam-pm session ethernet lmm loss-events
Description
This context allows the operator to define the loss events and thresholds that are to be tracked.
Platforms
All
- configure oam-pm session ethernet lmm loss-events
- configure oam-pm session ethernet slm loss-events
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure oam-pm session ip twamp-light loss-events
loss-threshold
loss-threshold
Syntax
loss-threshold percent
no loss-threshold
Context
[Tree] (config>test-oam>sath>accept-crit-tmpl loss-threshold)
Full Context
configure test-oam service-activation-testhead acceptance-criteria-template loss-threshold
Description
This command configures a frame loss ratio (FLR) value that is compared to the measured FLR at the end of the test to determine the test result. If the measured value is greater than the configured value, the test fails; otherwise, it passes. Thresholds must be explicitly configured to use them for the comparison.
The FLR is computed as a ratio of the difference of the number of received frames to the number of injected or sent frames divided by the number of sent frames.
The no form of this command disables the comparison of the parameter with the measured value so that the threshold value is ignored for declaring the test result.
Default
no loss-threshold
Parameters
- percent
-
Specifies the loss percentage threshold value for comparison with the measured value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
loss-threshold-policing
loss-threshold-policing
Syntax
loss-threshold-policing percent
no loss-threshold-policing
Context
[Tree] (config>test-oam>sath>accept-crit-tmpl loss-threshold-policing)
Full Context
configure test-oam service-activation-testhead acceptance-criteria-template loss-threshold-policing
Description
This command configures a frame loss ratio (FLR) value for a policing test. The value is compared to the measured FLR at the end of the test to determine the test result. If the measured value is greater than the configured value, the test fails; otherwise, it passes. Thresholds must be explicitly configured before they can be used for comparison.
The FLR is computed as a ratio of the difference of the number of received frames to the number of injected or sent frames divided by the number of sent frames.
The no form of this command disables the comparison of the parameter with the measured value, and the threshold value is ignored in the test result declaration.
Default
no loss-threshold-policing
Parameters
- percent
-
Specifies the loss percentage threshold value for comparison with the measured value.
Platforms
7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS
low
low
Syntax
low
Context
[Tree] (config>mcast-mgmt>bw-plcy>t2>prim-path>queue>drop-tail low)
[Tree] (config>mcast-mgmt>bw-plcy>t2>sec-path>queue>drop-tail low)
Full Context
configure mcast-management bandwidth-policy t2-paths primary-path queue-parameters drop-tail low
configure mcast-management bandwidth-policy t2-paths secondary-path queue-parameters drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop-tail defines the queue depth beyond which out-of-profile packets are not accepted into the queue and are discarded.
Platforms
7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR
low
Syntax
low
Context
[Tree] (config>service>ies>if>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>vpls>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>ies>if>sap>ingress>queue-override>queue>drop-tail low)
[Tree] (config>service>vpls>sap>ingress>queue-override>queue>drop-tail low)
Full Context
configure service ies interface sap egress queue-override queue drop-tail low
configure service vpls sap egress queue-override queue drop-tail low
configure service ies interface sap ingress queue-override queue drop-tail low
configure service vpls sap ingress queue-override queue drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets are not accepted into the queue and are discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>port>eth>access>ing>qgrp>qover>q>drop-tail low)
[Tree] (config>port>ethernet>network>egr>qgrp>qover>q>drop-tail low)
[Tree] (config>port>eth>access>egr>qgrp>qover>q>drop-tail low)
Full Context
configure port ethernet access ingress queue-group queue-overrides queue drop-tail low
configure port ethernet network egress queue-group queue-overrides queue drop-tail low
configure port ethernet access egress queue-group queue-overrides queue drop-tail low
Description
Commands in this context configure the queue low drop tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets will not be accepted into the queue and will be discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>service>cpipe>sap>ingress>queue-override>queue>drop-tail low)
[Tree] (config>service>ipipe>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>ipipe>sap>ingress>queue-override>queue>drop-tail low)
[Tree] (config>service>cpipe>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>epipe>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>epipe>sap>ingress>queue-override>queue>drop-tail low)
Full Context
configure service cpipe sap ingress queue-override queue drop-tail low
configure service ipipe sap egress queue-override queue drop-tail low
configure service ipipe sap ingress queue-override queue drop-tail low
configure service cpipe sap egress queue-override queue drop-tail low
configure service epipe sap egress queue-override queue drop-tail low
configure service epipe sap ingress queue-override queue drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets are not accepted into the queue and will be discarded.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service cpipe sap ingress queue-override queue drop-tail low
- configure service cpipe sap egress queue-override queue drop-tail low
All
- configure service ipipe sap egress queue-override queue drop-tail low
- configure service ipipe sap ingress queue-override queue drop-tail low
- configure service epipe sap ingress queue-override queue drop-tail low
- configure service epipe sap egress queue-override queue drop-tail low
low
Syntax
low
Context
[Tree] (config>service>vprn>if>sap>egress>queue-override>queue>drop-tail low)
[Tree] (config>service>vprn>if>sap>ingress>queue-override>queue>drop-tail low)
Full Context
configure service vprn interface sap egress queue-override queue drop-tail low
configure service vprn interface sap ingress queue-override queue drop-tail low
Description
Commands in this context configure the queue low drop tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets are not accepted into the queue and will be discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>qos>sap-ingress>queue>drop-tail low)
[Tree] (config>qos>sap-egress>queue>drop-tail low)
Full Context
configure qos sap-ingress queue drop-tail low
configure qos sap-egress queue drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets will not be accepted into the queue and will be discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>qos>network-queue>queue>drop-tail low)
Full Context
configure qos network-queue queue drop-tail low
Description
Commands in this context configure the queue low drop tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets will not be accepted into the queue and will be discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>qos>qgrps>egr>qgrp>queue>drop-tail low)
[Tree] (config>qos>qgrps>ing>qgrp>queue>drop-tail low)
Full Context
configure qos queue-group-templates egress queue-group queue drop-tail low
configure qos queue-group-templates ingress queue-group queue drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop tail defines the queue depth beyond which out-of-profile packets will not be accepted into the queue and will be discarded.
Platforms
All
low
Syntax
low
Context
[Tree] (config>qos>shared-queue>queue>drop-tail low)
Full Context
configure qos shared-queue queue drop-tail low
Description
Commands in this context configure the queue low drop-tail parameters. The low drop-tail defines the queue depth beyond which out-of-profile packets will not be accepted into the queue and will be discarded.
Platforms
All
low-burst-max-class
low-burst-max-class
Syntax
low-burst-max-class class
no low-burst-max-class
Context
[Tree] (config>port>ethernet>egress>hs-sec-shaper>agg low-burst-max-class)
Full Context
configure port ethernet egress hs-secondary-shaper aggregate low-burst-max-class
Description
This command specifies which scheduling classes map to the low burst-limit threshold of an egress HS secondary shaper. Egress SAPs can be configured to use an HS secondary shaper that manages their maximum burst limit over a specified aggregate shaping rate. Each HS secondary shaper supports two thresholds, a low burst limit threshold and a high burst limit threshold.
By default, all scheduling classes are mapped to the low burst limit threshold. It is important to note that when mapping scheduling classes to the high burst limit threshold an adequate value for the card>fp>egress>hs-fixed-high-thresh-delta must be specified. This is due to the fact that the queues associated with the lower classes may burst over the lower threshold in normal operation due to the scheduler forwarding whole packets. The hs-fixed-high-thresh-delta value should be set to at least two times the maximum frame size to prevent lower threshold class forwarding from also affecting the higher threshold classes when forwarding larger packet sizes. An insufficient high threshold delta defeats the intended purpose of mapping classes to the higher threshold.
The system utilizes the lowest value attainable for each low threshold aggregate burst limit without causing shaper underrun conditions. The high burst limit threshold is determined by adding the hs-fixed-high-thresh-delta value configured in the config>card>fp>egress context to the aggregate’s low burst limit threshold value.
The low-burst-max-class value can be changed at any time for an HS secondary shaper.
The no form of this command restores the HS secondary shaper’s aggregate low burst limit threshold maximum scheduling class mapping to the default value. This causes all sets of queues associated with the hs-secondary-shaper secondary-shaper-name to have all scheduling classes mapped to the low burst limit threshold.
Default
low-burst-max-class 6
Parameters
- class
-
Specifies the low burst maximum class. This parameter is required when executing the low-burst-max-class command. The parameter reflects the highest scheduling class that will be associated with the low burst limit threshold associated with the HS secondary aggregate shaper. Scheduling classes higher than scheduling class ID will be associated with the high burst limit threshold.
Platforms
7750 SR-7/12/12e
low-burst-max-class
Syntax
low-burst-max-class class
no low-burst-max-class
Context
[Tree] (config>qos>hs-attachment-policy low-burst-max-class)
Full Context
configure qos hs-attachment-policy low-burst-max-class
Description
This command specifies which scheduling classes map to the low burst-limit threshold of the queue-level aggregate shaper. Each egress SAP or subscriber SLA profile instance (SPI), per port set of network interface queues and egress queue group template instance has an aggregate shaper that manages the maximum burst limit over a specified shaping rate. Each aggregate shaper supports two thresholds. As the scheduling rate for the set of queues increases, eventually the aggregate rate exceeds the rate limit and the aggregate burst limit starts to be consumed. If this continues, the low burst limit threshold is exceeded and the queues mapped to the scheduling classes associated with low threshold are removed from the scheduler. If the remaining aggregate rate (from the higher scheduling classes) continues to exceed the shaping rate, then the burst limit continues to be consumed and eventually the high burst limit threshold is exceeded. This causes the queues for all scheduling classes to be removed from the scheduler.
The second (high) threshold exists to allow the higher priority classes to continue to forward, thereby mitigating the effects of low priority bursts beyond the aggregate shaping rate. Typically, the higher scheduling class queues are either individually rate-limited so their aggregate allowed throughput is less than the aggregate rate or the expected aggregate unshaped traffic from the individual higher scheduling classes does not exceed the aggregate shaping rate. Determining the value of low-burst-max-class class involves anticipating the proper dividing line between the low and high scheduling classes by evaluating the forwarding behavior and SLA enforcement of each class.
By default, all scheduling classes are mapped to the low burst limit threshold. When mapping scheduling classes to the high burst limit threshold, an adequate value for the card>fp>egress>hs-fixed-high-thresh-delta must be specified. This is due to the fact that the queues associated with the lower classes may burst over the lower threshold in normal operation due to the scheduler forwarding whole packets. Set the hs-fixed-highthresh- delta value to at least two times the maximum frame size to prevent lower threshold class forwarding from also affecting the higher threshold classes when forwarding larger packet sizes. An insufficient high threshold delta defeats the intended purpose of mapping classes to the higher threshold.
The system utilizes the lowest value attainable for each low threshold aggregate burst limit without causing shaper underrun conditions. The high burst limit threshold is determined by adding the hs-fixed-high-thresh-delta value configured in the config>card>fp>egress CLI context to the aggregate’s low burst limit threshold value.
The low-burst-max-class value can be changed at any time in the HS attachment policy. Modifying the setting causes all queue aggregate shapers to reconfigure the scheduling class mappings to the low and high burst limit thresholds to reflect the new value for scheduling class ID.
Scheduling Classes — As described in the queue and wrr-group attachment commands, each queue is either directly or indirectly (through a WRR group) mapped to a scheduling class. Each scheduling class has an inherent priority at the port scheduler. The inherent descending priority is as follows:
-
Scheduling Class 6 (Highest)
-
Scheduling Class 5
-
Scheduling Class 4
-
Scheduling Class 3
-
Scheduling Class 2
-
Scheduling Class 1 (lowest)
Placing scheduling classes into the port level WRR group causes those classes to compete for scheduling opportunities based on their associated weights instead of inherent priority. If higher weights are given to higher scheduling class IDs, then the relative proportional scheduling priority may continue to exhibit the priority level indicated by the class ID.
Setting Low and High Burst Limit Threshold Association — Low and High Burst Limit Threshold Association demonstrates the effect of the low-burst-max-class command parameters on scheduling class mappings to the low and high burst limit thresholds.
low-burst-max-class sched-class |
Scheduling Classes on Low Threshold |
Scheduling Classes on High Threshold |
---|---|---|
1 |
1 |
2, 3, 4, 5, and 6 |
2 |
1 and 2 |
3, 4, 5, and 6 |
3 |
1, 2, and 3 |
4, 5, and 6 |
4 |
1, 2, 3, and 4 |
5 and 6 |
5 |
1, 2, 3, 4, and 5 |
6 |
6 |
1, 2, 3, 4, 5, and 6 |
— |
The no form of the command restores the queue aggregate low burst limit threshold maximum scheduling class mapping to the default value. This causes all sets of queues associated with the specified hs-attachment-policy policy-name to have all scheduling classes mapped to the low burst limit threshold.
Default
low-burst-max-class 6
Parameters
- class
-
Specifies the low burst maximum class. This parameter is required when executing the low-burst max-class command. The parameter reflects the highest scheduling class that is associated with the low burst limit threshold associated with the queue aggregate shaper. Scheduling classes higher than the scheduling class ID are associated with the high burst limit threshold.
Platforms
7750 SR-7/12/12e
low-octets-discarded-count
low-octets-discarded-count
Syntax
[no] low-octets-discarded-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters low-octets-discarded-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters low-octets-discarded-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters low-octets-discarded-count
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters low-octets-discarded-count
Description
This command includes the low octets discarded count.
For queues with stat-mode v4-v6, this command includes the IPv6 octets discarded count instead.
The no form of this command excludes the low octets discarded count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
low-octets-discarded-count
Syntax
[no] low-octets-discarded-count
Context
[Tree] (config>log>acct-policy>cr>queue>i-counters low-octets-discarded-count)
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters low-octets-discarded-count)
Full Context
configure log accounting-policy custom-record queue i-counters low-octets-discarded-count
configure log accounting-policy custom-record ref-queue i-counters low-octets-discarded-count
Description
This command includes the low octets discarded count.
The no form of this command excludes the low octets discarded count.
Default
no low-octets-discarded-count
Platforms
All
low-octets-offered-count
low-octets-offered-count
Syntax
[no] low-octets-offered-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-count low-octets-offered-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-count low-octets-offered-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters low-octets-offered-count
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters low-octets-offered-count
Description
This command includes the low octets discarded count.
The no form of this command excludes the low octets discarded count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
low-octets-offered-count
Syntax
[no] low-octets-offered-count
Context
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters low-octets-offered-count)
[Tree] (config>log>acct-policy>cr>queue>i-counters low-octets-offered-count)
Full Context
configure log accounting-policy custom-record ref-queue i-counters low-octets-offered-count
configure log accounting-policy custom-record queue i-counters low-octets-offered-count
Description
This command includes the low octets discarded count.
The no form of this command excludes the low octets discarded count.
Default
no low-octets-offered-count
Platforms
All
low-packets-discarded-count
low-packets-discarded-count
Syntax
[no] low-packets-discarded-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters low-packets-discarded-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters low-packets-discarded-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters low-packets-discarded-count
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters low-packets-discarded-count
Description
This command includes the low packets discarded count.
For queues with stat-mode v4-v6, this command includes the IPv6 packets discarded count instead.
The no form of this command excludes the low packets discarded count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
low-packets-discarded-count
Syntax
[no] low-packets-discarded-count
Context
[Tree] (config>log>acct-policy>cr>queue>i-counters low-packets-discarded-count)
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters low-packets-discarded-count)
Full Context
configure log accounting-policy custom-record queue i-counters low-packets-discarded-count
configure log accounting-policy custom-record ref-queue i-counters low-packets-discarded-count
Description
This command includes the low packets discarded count.
The no form of this command excludes the low packets discarded count.
Default
no low-packets-discarded-count
Platforms
All
low-packets-offered-count
low-packets-offered-count
Syntax
[no] low-packets-offered-count
Context
[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-count low-packets-offered-count)
[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-count low-packets-offered-count)
Full Context
configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters low-packets-offered-count
configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters low-packets-offered-count
Description
This command includes the low packets discarded count.
The no form of this command excludes the low packets discarded count.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR
low-packets-offered-count
Syntax
[no] low-packets-offered-count
Context
[Tree] (config>log>acct-policy>cr>ref-queue>i-counters low-packets-offered-count)
[Tree] (config>log>acct-policy>cr>queue>i-counters low-packets-offered-count)
Full Context
configure log accounting-policy custom-record ref-queue i-counters low-packets-offered-count
configure log accounting-policy custom-record queue i-counters low-packets-offered-count
Description
This command includes the low packets discarded count.
The no form of this command excludes the low packets discarded count.
Default
no low-packets-offered-count
Platforms
All
low-priority-defect
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>eth-tunnel>path>eth-cfm>mep low-priority-defect)
[Tree] (config>eth-ring>path>eth-cfm>mep low-priority-defect)
Full Context
configure eth-tunnel path eth-cfm mep low-priority-defect
configure eth-ring path eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect remErrXcon
Parameters
- low-priority-defect
-
Specifies the lowest priority defect using the following:
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon}
Context
[Tree] (config>lag>eth-cfm>mep>ais low-priority-defect)
Full Context
configure lag eth-cfm mep ais-enable low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect remErrXcon
Parameters
- allDef | macRemErrXcon
-
Specifies the lowest priority defect.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>lag>eth-cfm>mep>eth-test low-priority-defect)
[Tree] (config>port>ethernet>eth-cfm>mep>eth-test low-priority-defect)
Full Context
configure lag eth-cfm mep eth-test low-priority-defect
configure port ethernet eth-cfm mep eth-test low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm. This setting is also used to determine the fault state of the MEP which, when enabled to do so, causes a network reaction.
Default
low-priority-defect macRemErrXcon
Parameters
- allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon
-
Specifies the lowest priority defect.
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon}
Context
[Tree] (cfg>service>vpls>mesh-sdp>eth-cfm>mep>ais low-priority-defect)
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep>ais low-priority-defect)
[Tree] (config>service>epipe>sap>eth-cfm>mep>ais low-priority-defect)
[Tree] (config>port>ethernet>eth-cfm>mep>ais low-priority-defect)
Full Context
configure service vpls mesh-sdp eth-cfm mep ais-enable low-priority-defect
configure service epipe spoke-sdp eth-cfm mep ais-enable low-priority-defect
configure service epipe sap eth-cfm mep ais-enable low-priority-defect
configure port ethernet eth-cfm mep ais-enable low-priority-defect
Description
This command allows the operator to include all CCM Defect conditions or exclude the Remote Defect Indication CCM (DefRDICCM) as a trigger for generating AIS. AIS generation can only occur when the client-meg-level configuration option has been included. Changing this parameter will evaluate the MEP for AIS triggers based on the new criteria.
Parameters
- allDef
-
Keyword that includes any CCM defect condition to trigger AIS generation.
- macRemErrXcon
-
Keyword that excludes RDI CCM Defect condition to trigger AIS generation.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>service>ipipe>sap>eth-cfm>mep low-priority-defect)
[Tree] (config>service>epipe>spoke-sdp>eth-cfm>mep low-priority-defect)
[Tree] (config>service>epipe>sap>eth-cfm>mep low-priority-defect)
Full Context
configure service ipipe sap eth-cfm mep low-priority-defect
configure service epipe spoke-sdp eth-cfm mep low-priority-defect
configure service epipe sap eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect macRemErrXcon
Parameters
- low-priority-defect
-
The low priority defect values are defined as follows:
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon}
Context
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep>ais-enable low-priority-defect)
Full Context
configure service vpls spoke-sdp eth-cfm mep ais-enable low-priority-defect
Description
This command allows the operator to include all CCM Defect conditions or exclude the Remote Defect Indication CCM (DefRDICCM) as a trigger for generating AIS. AIS generation can only occur when the client-meg-level configuration option has been included. Changing this parameter will evaluate the MEP for AIS triggers based on the new criteria.
Parameters
- allDef
-
Keyword that includes any CCM defect condition to trigger AIS generation.
- macRemErrXcon
-
Keyword that excludes RDI CCM Defect condition to trigger AIS generation.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep low-priority-defect)
[Tree] (config>service>vpls>mesh-sdp>eth-cfm>mep low-priority-defect)
Full Context
configure service vpls spoke-sdp eth-cfm mep low-priority-defect
configure service vpls mesh-sdp eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect macRemErrXcon
Parameters
- low-priority-defect
-
The low priority defect values are defined below.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>service>ies>if>sap>eth-cfm>mep low-priority-defect)
[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep low-priority-defect)
[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep low-priority-defect)
Full Context
configure service ies interface sap eth-cfm mep low-priority-defect
configure service ies subscriber-interface group-interface sap eth-cfm mep low-priority-defect
configure service ies interface spoke-sdp eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect macRemErrXcon
Parameters
- low-priority-defect
-
The following values are used to specify the lowest priority defect that is allowed to generate a fault alarm.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service ies interface spoke-sdp eth-cfm mep low-priority-defect
- configure service ies interface sap eth-cfm mep low-priority-defect
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service ies subscriber-interface group-interface sap eth-cfm mep low-priority-defect
low-priority-defect
Syntax
low-priority-defect {allDef | macRemErrXcon | remErrXcon | errXcon | xcon | noXcon}
Context
[Tree] (config>service>vprn>sub-if>grp-if>sap>eth-cfm low-priority-defect)
[Tree] (config>service>vprn>if>spoke-sdp>eth-cfm>mep low-priority-defect)
[Tree] (config>service>vprn>if>sap>eth-cfm>mep low-priority-defect)
Full Context
configure service vprn subscriber-interface group-interface sap eth-cfm low-priority-defect
configure service vprn interface spoke-sdp eth-cfm mep low-priority-defect
configure service vprn interface sap eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that is allowed to generate a fault alarm.
Default
low-priority-defect macRemErrXcon
Parameters
- parameters
-
Specifies the lowest priority defect.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s
- configure service vprn subscriber-interface group-interface sap eth-cfm low-priority-defect
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure service vprn interface sap eth-cfm mep low-priority-defect
- configure service vprn interface spoke-sdp eth-cfm mep low-priority-defect
low-priority-defect
Syntax
low-priority-defect low-priority-defect
Context
[Tree] (config>router>if>eth-cfm>mep low-priority-defect)
Full Context
configure router interface eth-cfm mep low-priority-defect
Description
This command specifies the lowest priority defect that generates a fault alarm. This setting is also used to determine the fault state of the MEP which, when enabled to do so, causes a network reaction.
Default
low-priority-defect macRemErrXcon
Parameters
- low-priority-defect
-
Specifies the lowest priority defect.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
low-slope
low-slope
Syntax
[no] low-slope
Context
[Tree] (config>qos>slope-policy low-slope)
Full Context
configure qos slope-policy low-slope
Description
The low-slope context contains the commands and parameters for defining the low Random Early Detection (RED) slope graph. Each buffer pool supports a low RED slope for managing access to the shared portion of the buffer pool for low out-of-profile packets.
The low-slope parameters can be changed at any time and the affected buffer pool low RED slopes must be adjusted appropriately.
The no form of this command restores the low slope configuration commands to the default values. If the leaf commands within low-slope are set to the default parameters, the low-slope node will not appear in save config and show config output unless the detail parameter is present.
Platforms
All
low-wmark
low-wmark
Syntax
low-wmark percent
Context
[Tree] (config>app-assure>group>dns-ip-cache>ip-cache low-wmark)
Full Context
configure application-assurance group dns-ip-cache ip-cache low-wmark
Description
This command configures the low watermark value for the dns-ip-cache. If the dns-ip-cache has previously crossed the high-watermark value, the system will clear the trap in case the number of IP addresses stored in the cache crosses below the low watermark value.
Default
low-wmark 80
Parameters
- percent
-
Specifies the low watermark value, in percent.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
lower-bound
lower-bound
Syntax
lower-bound microseconds
no lower-bound
Context
[Tree] (config>oam-pm>bin-group>bin-type>bin lower-bound)
Full Context
configure oam-pm bin-group bin-type bin lower-bound
Description
This command allows the operator specify the individual floors thresholds for the bins. The operator does not have to specific a lower threshold for every bin that was previously defined by the bin-count for the specific type. By default, each bin is the bin-number times 5000 microseconds. Lower thresholds in the previous adjacent bin must be lower than the threshold of the next higher bin threshold. A separate line per bin is required to configure an operator-specific threshold. An error prevents the bin from entering the active state if this is not maintained, at the time the no shutdown is issued. Bin 0 is the result of the difference between 0 and the configured lower-threshold of bin 1. The highest bin in the bin-count captures every result above the threshold. Any negative delay metric result is treated as zero and placed in bin 0.
The no form of this command removes the user configured threshold value and applies the default for the bin.
Parameters
- microseconds
-
Specifies the threshold that defines the floor of the bin. The bin range is the difference between its configured threshold and the threshold of the next higher bin in microsecond threshold value.
Platforms
All
lsa-accumulate
lsa-accumulate
Syntax
lsa-accumulate lsa-accumulate
no lsa-accumulate
Context
[Tree] (config>router>ospf3>timers lsa-accumulate)
[Tree] (config>router>ospf>timers lsa-accumulate)
Full Context
configure router ospf3 timers lsa-accumulate
configure router ospf timers lsa-accumulate
Description
This command sets the internal OSPF delay to allow for the accumulation of multiple LSA so OSPF messages can be sent as efficiently as possible. The lsa-accumulate timer applies to all LSAs except Type 1 and Type 2 LSAs, which are sent immediately. LSAs are accumulated and then sent when:
-
its size reaches the MTU size of the interface
-
a new LSA is received on the interface
-
the lsa-accumulate timer expires
Shorting this delay can speed up the advertisement of LSAs to OSPF neighbors but may increase the number of OSPF messages sent.
The no form of this command reverts to the default value.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is greater than or equal to 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsa-accumulate 1000
Parameters
- lsa-accumulate
-
Specifies the LSA accumulation delay in milliseconds.
Platforms
All
lsa-arrival
lsa-arrival
Syntax
lsa-arrival lsa-arrival-time
no lsa-arrival
Context
[Tree] (config>service>vprn>ospf3>timers lsa-arrival)
[Tree] (config>service>vprn>ospf>timers lsa-arrival)
Full Context
configure service vprn ospf3 timers lsa-arrival
configure service vprn ospf timers lsa-arrival
Description
This parameter defines the minimum delay that must pass between receipt of the same Link State Advertisements (LSAs) arriving from neighbors.
It is recommended that the neighbor’s configured lsa-generate lsa-second-wait interval is equal to or greater than the lsa-arrival timer configured here.
Use the no form of this command to return to the default.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is ≥ 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsa-arrival 1000
Parameters
- lsa-arrival-time
-
Specifies the timer in milliseconds.
Platforms
All
lsa-arrival
Syntax
lsa-arrival lsa-arrival-time
no lsa-arrival
Context
[Tree] (config>router>ospf>timers lsa-arrival)
[Tree] (config>router>ospf3>timers lsa-arrival)
Full Context
configure router ospf timers lsa-arrival
configure router ospf3 timers lsa-arrival
Description
This parameter defines the minimum delay that must pass between receipt of the same Link State Advertisements (LSAs) arriving from neighbors.
It is recommended that the neighbors configured lsa-generate lsa-second-wait interval is equal or greater than the lsa-arrival timer configured here.
The no form of this command reverts to the default.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is greater than or equal to 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsa-arrival 1000
Parameters
- lsa-arrival-time
-
Specifies the timer, in milliseconds.
Platforms
All
lsa-filter-out
lsa-filter-out
Syntax
lsa-filter-out [all | except-own-rtrlsa | except-own-rtrlsa-and-defaults]
no lsa-filter-out
Context
[Tree] (config>service>vprn>ospf>area>if lsa-filter-out)
[Tree] (config>service>vprn>ospf3>area>if lsa-filter-out)
[Tree] (config>router>ospf>area>if lsa-filter-out)
[Tree] (config>router>ospf3>area>if lsa-filter-out)
Full Context
configure service vprn ospf area interface lsa-filter-out
configure service vprn ospf3 area interface lsa-filter-out
configure router ospf area interface lsa-filter-out
configure router ospf3 area interface lsa-filter-out
Description
This command enables filtering of outgoing OSPF LSAs on the selected OSPFv2 or OSPFv3 interface. Three filtering options are provided:
-
Do not flood any LSAs out the interface. This option is suitable if the neighbor is simply-connected and has a statically configured default route with the address of this interface as next-hop.
-
Flood the router’s own router-LSA out the interface and suppress all other flooded LSAs. This option is suitable if the neighbor is simply-connected and has a statically configured default route with a loopback or system interface address (contained in the router-LSA) as next-hop.
-
Flood the router’s own router-LSA and all self-generated type-3, type-5 and type-7 LSAs advertising a default route (0/0) out the interface; suppress all other flooded LSAs. This option is suitable if the neighbor is simply-connected and does not have a statically configured default route.
The no form of this command disables OSPF LSA filtering (normal operation).
Default
no lsa-filter-out
Platforms
All
lsa-generate
lsa-generate
Syntax
lsa-generate max-lsa-wait [lsa-initial-wait lsa-initial-wait [lsa-second-wait lsa-second-wait]]
no lsa-generate-interval
Context
[Tree] (config>service>vprn>ospf3>timers lsa-generate)
[Tree] (config>service>vprn>ospf>timers lsa-generate)
Full Context
configure service vprn ospf3 timers lsa-generate
configure service vprn ospf timers lsa-generate
Description
This parameter customizes the throttling of OSPF LSA-generation. Timers that determine when to generate the first, second, and subsequent LSAs can be controlled with this command. Subsequent LSAs are generated at increasing intervals of the lsa-second-wait timer until a maximum value is reached.
Configuring the lsa-arrival interval to equal or less than the lsa-second-wait interval configured in the lsa-generate command is recommended.
The no form of this command reverts to the default.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is ≥ 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Parameters
- max-lsa-wait
-
Specifies the maximum interval, in milliseconds, between two consecutive occurrences of an LSA being generated.
- lsa-initial-wait
-
Specifies the first waiting period between link-state advertisements (LSA) originate(s), in milliseconds. When the LSA exceeds the lsa-initial-wait timer value and the topology changes, there is no wait period and the LSA is immediately generated.
When an LSA is generated, the initial wait period commences. If, within the specified lsa-initial-wait period and another topology change occurs, then the lsa-initial-wait timer applies.
- lsa-second-wait
-
Specifies the hold time in milliseconds between the first and second LSA generation. The next topology change is subject to this second wait period. With each subsequent topology change, the wait time doubles (this is 2x the previous wait time). This assumes that each failure occurs within the relevant wait period.
Platforms
All
lsa-generate
Syntax
lsa-generate max-lsa-wait [lsa-initial-wait lsa-initial-wait [lsa-second-wait lsa-second-wait]]
no lsa-generate
Context
[Tree] (config>router>ospf3>timers lsa-generate)
[Tree] (config>router>ospf>timers lsa-generate)
Full Context
configure router ospf3 timers lsa-generate
configure router ospf timers lsa-generate
Description
This parameter customizes the throttling of OSPF LSA-generation. Timers that determine when to generate the first, second, and subsequent LSAs can be controlled with this command. Subsequent LSAs are generated at increasing intervals of the lsa-second-wait timer until a maximum value is reached.
Configuring the lsa-arrival interval to equal or less than the lsa-second-wait interval configured in the lsa-generate command is recommended.
The no form of this command reverts to the default.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is greater than or equal to 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsa-generate 5000
Parameters
- max-lsa-wait
-
Specifies the maximum interval in milliseconds between two consecutive occurrences of an LSA being generated.
- lsa-initial-wait
-
Specifies the first waiting period between link-state advertisements (LSA) originate(s), in milliseconds. When the LSA exceeds the lsa-initial-wait timer value and the topology changes, there is no wait period and the LSA is immediately generated.
When an LSA is generated, the initial wait period commences. If, within the specified lsa-initial-wait period and another topology change occurs, then the lsa-initial-wait timer applies.
- lsa-second-wait
-
Specifies the hold time in milliseconds between the first and second LSA generation. The next topology change is subject to this second wait period. With each subsequent topology change, the wait time doubles (this is 2x the previous wait time). This assumes that each failure occurs within the relevant wait period.
Platforms
All
lsdb
lsdb
Syntax
[no] lsdb [level-number] [system-id | lsp-id]
Context
[Tree] (debug>router>isis lsdb)
Full Context
debug router isis lsdb
Description
This command enables debugging for Link State DataBase (LSDB).
The no form of the command disables debugging.
Parameters
- system-id
-
When specified, only the specified system-id is debugged. Host name up to 38 characters.
- lsp-id
-
When specified, only the specified lsp-id is debugged. Hostname up to 38 characters.
- level-number
-
Specifies the interface level (1, 2, or 1 and 2).
Platforms
All
lsdb
Syntax
lsdb [type] [ls-id] [adv-rtr-id] [area area-id]
no lsdb
Context
[Tree] (debug>router>ospf3 lsdb)
[Tree] (debug>router>ospf lsdb)
Full Context
debug router ospf3 lsdb
debug router ospf lsdb
Description
This command enables debugging for an OSPF link-state database (LSDB).
Parameters
- type
-
Specifies the OSPF link-state database (LSDB) type.
- ls-id
-
Specifies an LSA type specific field containing either a router ID or an IP address. It identifies the piece of the routing domain being described by the advertisement.
- adv-rtr-id
-
Specifies the router identifier of the router advertising the LSA.
- area area-id
-
Specifies a 32-bit integer uniquely identifying an area.
Platforms
All
lsn
lsn
Syntax
[no] lsn
Context
[Tree] (config>isa>wlan-gw-group>nat lsn)
Full Context
configure isa wlan-gw-group nat lsn
Description
This command enables Large Scale NAT (LSN).
The no form of this command disables LSN.
Platforms
7750 SR, 7750 SR-e, 7750 SR-s, VSR
lsn
Syntax
lsn router router-instance [b4 ipv6-address] [aftr ipv6-address] ip ip-address protocol {tcp | udp} [port port] [outside-ip ipv4-address] [outside-port port] [nat-policy nat-policy-name] [force]
no lsn router router-instance [b4 ipv6-address] ip ip-address protocol {tcp | udp} port port [nat-policy nat-policy-name]
Context
[Tree] (config>service>nat>fwd lsn)
Full Context
configure service nat port-forwarding lsn
Description
This command creates NAT static port forwards for LSN44, Ds-Lite and NAT64. Static port forwards (SPF) are static mappings created so that certain applications on the inside (private side) can be reached from host that are on the outside of the NAT. SPF statically map the subscriber (inside IP address in LSN44, CPE IPv6 address/prefix in DS-Lite and IPv6 prefix in NAT64), inside port and protocol to an outside IPv4 address, port and the same protocol.
If only the inside router, the inside IPv4/v6 address/prefix and the protocol are configured as parameters in the SPF request, the remaining fields in the mapping (outside port and outside IPv4 address) will be selected automatically by the node and reported in CLI once the command execution is completed.
Specifying the outside IPv4 address in the SPF request, mandates that all other, otherwise optional, parameters be also specified in the request (inside port and outside port). This creates a fully specified SPF request. Fully specified SPF request can be used in multi-chassis NAT redundancy deployments where the SPF is manually replicated between the SR OS nodes. In single chassis NAT deployments, fully specified SPF request is guaranteed to work only in the system with a single MS-ISA in it. Otherwise (multiple MS-ISAs in the system) a conflict may arise where two distinct inside IP addresses that may reside on separate MS-ISAs are requested to be mapped to the same outside IPv4 address. This will not be possible since the outside IPv4 address cannot be split across the MS-ISAs (each IP address, inside or outside, is tied to a single MS-ISA).
In non-fully specified SPF requests (missing the inside port and/or outside port and the outside IPv4 address within the SPF request), the outside IPv4 address selection will depend on the configuration of the outside port in the SPF request:
-
If the outside port is not specified or is specified from the configured port-forwarding-range [1024..port-forwarding-range], then the outside IPv4 address will be the same as the outside IPv4 address in an existing dynamic mapping for the same subscriber. If the subscriber does not exist (no dynamic mappings exist at the time of SPF creation request), then the subscriber will be automatically created and an outside IPv4 address will be assigned. In case that the outside ports are not available from the outside IPv4 address of the corresponding dynamic mapping, then the SPF request will fail. In other words, the dynamic and static mappings (created in this manner) for the same subscriber must use the same outside IPv4 address.
-
If the outside port from the well-known port range [0 to 1023] is requested, then the outside IPv4 address does not have to match the outside IPv4 address of an existing dynamic mapping for the same subscriber, but can instead be any outside IPv4 address.
If multiple NAT policies per inside routing context are used, then the NAT policy must be specified in the SPF creation request. This is needed so the SPF be created in the correct pool.
SPFs are disabled by default and they must be explicitly enabled by the port-limits forwarding command within the NAT policy.
Configured SPFs, unlike SPFs created with the tools commands, are preserved across reboots without having to configure persistency (config>system>persistence>nat-port-forwarding) since they are part of the configuration. When the pool is shutdown the SPFs are deactivated. When the pool is enabled (no shutdown), the SPFs (as created by the tools command or by configuration) are activated.
To avoid possible persistency related conflicts, SPFs can only be created using one method on a given node: either as configuration (the CLI configure branch) or using the tools command. For example: if a first SPF entry is created via CLI tools commands, the node prevents SPF creation via configuration (the CLI configure branch) and vice versa.
The no form of the command deletes NAT static port forwards for LSN44, Ds-Lite and NAT64.
Parameters
- router router-instance
-
This mandatory parameter specifies the inside routing instance; router name or service-id.
- b4 ipv6-address
-
This optional parameter specifies the IPv6 address of the B4 element in DS-Lite.
- aftr ipv6-address
-
This optional parameter specifies IPv6 address of the AFTR element in DS-Lite.
- protocol {tcp | udp}
-
This mandatory parameter specifies the protocol to use, either TCP or UDP.
- port port
-
This optional parameter specifies a source port.
- outside-ip ipv4-address
-
This mandatory parameter specifies the outside IPv4 address. If the outside IPv4 address is specified, then all other optional parameters become mandatory.
- outside-port port
-
This optional parameter specifies the outside port.
- nat-policy policy-name
-
If multiple NAT policies are used inside the routing context, then the NAT policy should be specified in the SPF request so the SPF is created in the correct NAT pool. Otherwise, the default NAT policy from the inside routing context will be used.
- force
-
Force allocation of static port forwards.
This command is only applicable to a LSN44 pool with flexible port allocations. Such pools allow interleaving of static port forwards with other dynamically allocated ports triggered by traffic flow.
If the requested outside port in the static port forward command is already occupied by a dynamically allocated port, using the force keyword preempts the dynamically allocated port and reassigns it as a port forwarding port.
During preemption, all the flows associated with the dynamically allocated port are terminated.
When the requested port forward is occupied by another static port and not a dynamic port, the command fails even if the force keyword is configured.
When a static port forwarding command requests an arbitrary outside port that is not specified in the command, the force keyword has an effect if the entire port space is already occupied. In this case, one of the dynamic ports is preempted.
Platforms
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
lsp
lsp
Syntax
[no] lsp lsp-name
Context
[Tree] (config>router>ldp>targ-session>peer>tunneling lsp)
Full Context
configure router ldp targeted-session peer tunneling lsp
Description
This command configures a specific LSP destined to this peer and to be used for tunneling of LDP FEC over RSVP. A maximum of 4 RSVP LSPs can be explicitly used for tunneling LDP FECs to the T-LDP peer.
It is not necessary to specify any RSVP LSP in this context unless there is a need to restrict the tunneling to selected LSPs. All RSVP LSPs with a to address matching that of the T-LDP peer are eligible by default. The user can also exclude specific LSP names by using the ldp-over-rsvp exclude command in the config>router>mpls>lsp context.
Platforms
All
lsp
Syntax
[no] lsp lsp-name
Context
[Tree] (config>router>ldp>targ-session>peer>mcast-tunneling lsp)
Full Context
configure router ldp targeted-session peer mcast-tunneling lsp
Description
This command configures a specific LSP destined to this peer and to be used for tunneling of multicast LDP FEC over RSVP.
Parameters
- lsp-name
-
Specifies the LSP name, up to 64 characters in length.
Platforms
All
lsp
Syntax
[no] lsp lsp-name sender sender-address
Context
[Tree] (config>router>mpls>ingress-statistics lsp)
Full Context
configure router mpls ingress-statistics lsp
Description
This command configures statistics in the ingress data path of a terminating RSVP LSP at an egress LER. The LSP name must correspond to the name configured by the operator at the ingress LER. It must not contain the special character ":” which is used as a field separator by the ingress LER for encoding the LSP and path names into the RSVP session name field in the session_attribute object. The operator must execute the no shutdown for this command to effectively enable statistics.
The same set of counters is updated for packets received over any path of this LSP and over the lifetime of the LSP. In steady-state, the counters are updated for packets received over the active path of the LSP. The active path can be the primary path, one of the secondary paths, the FRR detour path, or the FRR bypass path when the tail-end node is also the MP.
When a hierarchy of LSPs is in use, statistics collection on the outermost label corresponding to the tunneling LSP and on the inner labels, corresponding to the tunneled LSPs are mutually exclusive. A consequence of this is that when the operator enables statistics collection on an RSVP LSP which is also used for tunneling LDP FECs with the LDP over RSVP feature, then statistics will be collected on the RSVP LSP only. There will be no statistics collected for an LDP FEC tunneled over this RSVP LSP and also egressing on the same node regardless if the operator enabled statistics collection on this FEC. When, the operator disables statistics collection on the RSVP LSP, then statistics collection, if enabled, will be performed on a tunneled LDP FEC.
The operator can enable statistics collection on a manual bypass terminating on the egress LER. However all LSPs which primary path is protected by the manual bypass will not collect statistics when they activate forwarding over the manual bypass. When, the operator disables statistics collection on the manual bypass LSP, then statistics collection on the protected LSP, if enabled, will continue when the bypass LSP is activated.
The no form of this command disables statistics for this RSVP LSP in the ingress data path and removes the accounting policy association from the LSP.
Parameters
- sender-address ip-address
-
Specifies a string of 15 characters representing the IP address of the ingress LER for the LSP.
- lsp-name
-
Specifies the LSP name, up to 64 characters in length, as configured at the ingress LER.
Platforms
All
lsp
Syntax
[no] lsp lsp-name [bypass-only | p2mp-lsp | mpls-tp src-tunnel-num | sr-te]
Context
[Tree] (config>router>mpls lsp)
Full Context
configure router mpls lsp
Description
This command creates an LSP that is either signaled dynamically by the router, or a statically provisioned MPLS-TP LSP.
When the LSP is created, the egress router must be specified using the to command and at least one primary or secondary path must be specified for signaled LSPs, or at least one working path for MPLS-TP LSPs. All other statements under the LSP hierarchy are optional.
LSPs are created in the administratively down (shutdown) state.
The no form of this command deletes the LSP. All configuration information associated with this LSP is lost. The LSP must be administratively shutdown before it can be deleted. The LSP must also be unbound from all SDPs before it can be deleted.
Parameters
- lsp-name
-
Specifies the name that identifies the LSP. The LSP name can be up to 64 characters long and must be unique.
- bypass-only
-
Defines an LSP as a manual bypass LSP exclusively. When a path message for a new LSP requests bypass protection, the PLR first checks if a manual bypass tunnel satisfying the path constraints exists. If one if found, the router selects it. If no manual bypass tunnel is found, the router dynamically signals a bypass LSP in the default behavior. The CLI for this feature includes a knob that provides the user with the option to disable dynamic bypass creation on a per node basis.
- p2mp-lsp
-
Defines an LSP as a point-to-multipoint LSP. The following parameters can be used with a P2MP LSP: adaptive, adspec, cspf, exclude, fast-reroute, from, hop-limit, include, metric, retry-limit, retry-timer, resignal-timer. The following parameters cannot be used with a P2MP LSP: primary, secondary, to, dest-global-id, dest-tunnel-number, working-tp-path, protect-tp-path.
This option is not supported on the 7450 ESS.
- mpls-tp src-tunnel-num
-
Defines an LSP as an MPLS-TP LSP. The src-tunnel-num is a mandatory create time parameter for mpls-tp LSPs, and has to be assigned by the user based on the configured range of tunnel IDs. The following parameters can only be used with an MPLS-TP LSP: to, dest-global-id, dest-tunnel-number, working-tp-path, protect-tp-path. Other parameters defined for the above LSP types cannot be used.
- sr-te
-
Defines an LSP of type Segment Routing Traffic Engineering (SR-TE) LSP. The user can associate an empty path or a path with strict or loose explicit hops with the primary path of the SR-TE LSP. A hop which corresponds to an adjacency SID must be identified with its far-end host IP address (next-hop) on the subnet. If the local end host IP address is provided, this hop is ignored since this router can have multiple adjacencies (next-hops) on the same subnet. A hop which corresponds to a node SID is identified by the prefix address. The user is only allowed to configure a primary path for the SR-TE LSP.
Platforms
All
lsp
Syntax
[no] lsp
Context
[Tree] (config>oam-pm>session>mpls lsp)
Full Context
configure oam-pm session mpls lsp
Description
Commands in this context define the type of label switched path and the identification of the LSP for which packets traverse. Only a single LSP can be configured per session. Once an LSP has been configured, other LSP types under this context is blocked.
The no form of this command deletes the configured LSP under the context, when there are no active tests are executing under this session.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp
Syntax
lsp lsp-name
no lsp
Context
[Tree] (config>oam-pm>session>mpls>lsp>mpls-tp lsp)
[Tree] (config>oam-pm>session>mpls>lsp>rsvp lsp)
Full Context
configure oam-pm session mpls lsp mpls-tp-static lsp
configure oam-pm session mpls lsp rsvp lsp
Description
This command specifies the MPLS LSP to be tested.
Parameters
- lsp-name
-
Specifies the LSP name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp
Syntax
[no] lsp lsp-name
Context
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop>resolution-filter>sr-te lsp)
[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop>resolution-filter>rsvp-te lsp)
Full Context
configure router static-route-entry indirect tunnel-next-hop resolution-filter sr-te lsp
configure router static-route-entry indirect tunnel-next-hop resolution-filter rsvp-te lsp
Description
This command restricts the search for a resolving LSP to a specific set of named LSPs. Only those LSPs named in the associated name list will be searched for a match to resolve the associated static route.
Parameters
- lsp-name
-
Specifies the name of the LSP to be searched for a valid resolving tunnel for the static route's next-hop.
Platforms
All
lsp
Syntax
[no] lsp lsp-name
Context
[Tree] (config>service>sdp lsp)
Full Context
configure service sdp lsp
Description
This command creates associations between one or more label switched paths (LSPs) and an Multi-Protocol Label Switching (MPLS) Service Distribution Point (SDP). This command is implemented only on MPLS-type encapsulated SDPs.
In MPLS SDP configurations either one or more LSP names can be specified or LDP can be enabled. The SDP ldp and lsp commands are mutually exclusive except if the mixed-lsp-mode option is also enabled. If an LSP is specified on an MPLS SDP, then LDP cannot be enabled on the SDP. To enable LDP on the SDP when an LSP is already specified, the LSP must be removed from the configuration using the no lsp lsp-name command.
Alternatively, if LDP is already enabled on an MPLS SDP, then an LSP cannot be specified on the SDP. To specify an LSP on the SDP, the LDP must be disabled or the mixed-lsp-mode option is also enabled. The LSP must have already been created in the config>router>mpls context. with a valid far-end IP address. RSVP must be enabled.
If no LSP is associated with an MPLS SDP, the SDP cannot enter the operationally up state. The SDP can be administratively enabled (no shutdown) with no LSP associations. The lsp-name may be shutdown, causing the association with the SDP to be operationally down (the LSP will not be used by the SDP).
Up to 16 LSP names can be entered on a single command line.
The no form of this command deletes one or more LSP associations from an SDP. If the lsp-name does not exist as an association or as a configured LSP, no error is returned. An lsp-name must be removed from all SDP associations before the lsp-name can be deleted from the system. The SDP must be administratively disabled (shutdown) before the last lsp-name association with the SDP is deleted.
Parameters
- lsp-name
-
Specifies the name of the LSP to associate with the SDP. An LSP name is case sensitive and is limited to 32 ASCII 7-bit printable characters with no spaces. If an exact match of lsp-name does not already exist as a defined LSP, an error message is generated. If the lsp-name does exist and the LSP to IP address matches the SDP far-end IP address, the association is created.
Platforms
All
lsp
Syntax
lsp lsp-name
[no] lsp
Context
[Tree] (config>oam-pm>session>ip>tunnel>mpls>rsvp-te lsp)
Full Context
configure oam-pm session ip tunnel mpls rsvp-te lsp
Description
This command configures the name of the RSVP-TE LSP to transport the test packets.
The no form of this command removes the lsp-name from the configuration.
Parameters
- lsp-name
-
Specifies the LSP name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp
Syntax
no lsp
Context
[Tree] (config>oam-pm>session>ip>tunnel>mpls>sr-te lsp)
Full Context
configure oam-pm session ip tunnel mpls sr-te lsp
Description
This command configures specification of SR-TE specific tunnel information that is used to transport the test packets. Entering this context removes all other tunnel type options configured under the configure oam-pm session ip tunnel mpls context. Only a single mpls type can be configured for an OAM-PM session.
The no form of this command removes the SR-TE LSP name from the configuration.
Default
Parameters
- lsp-name
- Specifies the SR-TE LSP name, up to 64 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp-bfd
lsp-bfd
Syntax
lsp-bfd prefix-list-name
no lsp-bfd prefix-list-name
Context
[Tree] (config>router>ldp lsp-bfd)
Full Context
configure router ldp lsp-bfd
Description
Commands in this context configure LSP BFD for a set of LDP LSPs with FECs matching those defined in the specified prefix list.
Up to 16 LSP BFD instances can be configured for LDP.
If a prefix corresponding to an LDP FEC appears in more than one prefix list, then the system will apply the LSP BFD configuration to the LSP only once. A prefix list may contain a longest match corresponding to one or more LDP FECs, in which case the BFD configuration is applied to all of those LDP LSPs.
The no form of the command removes LSP BFD. Specifying a prefix list name will remove LSP BFD for all LDP FECs that match the specified prefix list, except those LDP FECs that also match another LSP BFD prefix list.
Default
no lsp-bfd
Parameters
- prefix-list-name
-
Specifies the name of the prefix list configured using the configure router policy-options prefix-list name command, up to 32 characters maximum. The prefix list name can be specified by the lsp-bfd command prior to the prefix list being defined in the config>router>policy-options context.
Platforms
All
lsp-bfd
Syntax
lsp-bfd
Context
[Tree] (config>router lsp-bfd)
Full Context
configure router lsp-bfd
Description
This command creates a context for the configuration of LSP BFD parameters.
Platforms
All
lsp-bsid-block
lsp-bsid-block
Syntax
lsp-bsid-block name
no lsp-bsid-block
Context
[Tree] (config>router>mpls lsp-bsid-block)
Full Context
configure router mpls lsp-bsid-block
Description
This command configures a reference to a pre-existing reserved label block for statically configured binding SIDs.
The no form of this command removes the use of the label block as a pool of binding SIDs.
Parameters
- name
-
Specifies an existing reserved label block name, up to 64 characters.
Platforms
All
lsp-exp
lsp-exp
Syntax
lsp-exp lsp-exp-value [fc fc-name] [priority {low | high}]
no lsp-exp lsp-exp-value
Context
[Tree] (config>qos>sap-ingress lsp-exp)
Full Context
configure qos sap-ingress lsp-exp
Description
This command explicitly sets the forwarding class or subclass enqueuing priority when a packet is marked with a MPLS EXP bits specified. Adding a lsp-exp rule on the policy forces packets that match the MPLS LSP EXP specified to override the forwarding class and enqueuing priority based on the parameters included in the lsp-exp rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.
The lsp-exp-value is derived from the MPLS LSP EXP bits of the top label.
Multiple commands can be entered to define the association of some or all eight LSP EX bit values to the forwarding class.
The no form of this command removes the explicit lsp-exp classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.
This command applies to Ethernet Layer 2 SAPs only.
Parameters
- lsp-exp-value
-
This value is a required parameter that specifies the unique MPLS LSP EXP value that will match the lsp-exp rule. If the command is executed multiple times with the same lsp-exp-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.
A maximum of eight lsp-exp rules are allowed on a single policy.
- fc fc-name
-
The value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.
The subclass-name parameter is optional and used with the fc-name parameter to define a pre-existing subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur.
- priority
-
The priority parameter is used to override the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.
- high
-
The high parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
- low
-
The low parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.
Platforms
All
lsp-exp
Syntax
lsp-exp lsp-exp-value fc fc-name profile {in | out}
no lsp-exp
Context
[Tree] (config>qos>network>ingress lsp-exp)
Full Context
configure qos network ingress lsp-exp
Description
This command creates a mapping between the LSP EXP bits of the network ingress traffic and the forwarding class.
Ingress traffic that matches the specified LSP EXP bits will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all eight LSP EXP bit values to the forwarding class. For undefined values, packets are assigned to the forwarding class specified under the default-action command.
The no form of this command removes the association of the LSP EXP bit value to the forwarding class. The default-action then applies to that LSP EXP bit pattern.
Default
no lsp-exp
Parameters
- lsp-exp-value
-
Specify the LSP EXP values to be associated with the forwarding class.
- fc fc-name
-
Enter this required parameter to specify the fc-name that the EXP bit pattern will be associated with.
- profile {in | out}
-
Enter this required parameter to indicate whether the LSP EXP value is the in-profile or out-of-profile value.
Platforms
All
lsp-exp-in-profile
lsp-exp-in-profile
Syntax
lsp-exp-in-profile lsp-exp-value
no lsp-exp-in-profile
Context
[Tree] (config qos network egress fc lsp-exp-in-profile)
Full Context
configure qos network egress fc lsp-exp-in-profile
Description
This command specifies the in-profile LSP EXP value for the forwarding class. The EXP value will be used for all LSP labeled packets requiring marking that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.
When multiple EXP values are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default in-profile EXP setting.
Default
Policy-id 1: |
Factory setting |
Policy-id 2 to 65535: |
Policy-id setting |
Parameters
- lsp-exp-value
-
Specifies the 3-bit LSP EXP bit value, expressed as a decimal integer.
Platforms
All
lsp-exp-out-profile
lsp-exp-out-profile
Syntax
lsp-exp-out-profile lsp-exp-value
no lsp-exp-out-profile
Context
[Tree] (config qos network egress fc lsp-exp-out-profile)
Full Context
configure qos network egress fc lsp-exp-out-profile
Description
This command specifies the out-of-profile LSP EXP value for the forwarding class. The EXP value will be used for all LSP labeled packets that require marking at egress on this forwarding class queue, and that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.
When multiple EXP values are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.
The no form of this command resets the configuration to the factory default out-of-profile EXP setting.
Default
Policy-id 1: |
Factory setting |
Policy-id 2 to 65535: |
Policy-id setting |
Parameters
- mpls-exp-value
-
Specifies the 3-bit MPLS EXP bit value, expressed as a decimal integer.
Platforms
All
lsp-history
lsp-history
Syntax
[no] lsp-history
Context
[Tree] (config>router>mpls lsp-history)
Full Context
configure router mpls lsp-history
Description
This command allocates memory which may be used to store up to the last 100 significant events for each point-to-point RSVP-TE LSP.
The no version of this command deallocates any memory for storing LSP history events and any event history is deleted.
Platforms
All
lsp-init-retry-timeout
lsp-init-retry-timeout
Syntax
lsp-init-retry-timeout seconds
no lsp-init-retry-timeout
Context
[Tree] (config>router>mpls lsp-init-retry-timeout)
Full Context
configure router mpls lsp-init-retry-timeout
Description
This command configures the initial LSP path retry-timer.
The new LSP path initial retry-timer is used instead of the retry-timer to abort the retry cycle when no RESV is received. The retry-timer exclusively governs the time between two retry cycles and to handle retrying of an LSP path in a failure case with PATH errors or RESVTear.
The intent is that the user can now control how many refreshes of the pending PATH state can be performed before starting a new retry-cycle with a new LSP ID. This is all done without affecting the ability to react faster to failures of the LSP path, which will continue to be governed by the retry-timer.
The no form of this command returns the timer to the default value.
Default
lsp-init-retry-timeout 30
Parameters
- seconds
-
Specifies the value (in s), used as the fast retry timer for a secondary path.
Platforms
All
lsp-lifetime
lsp-lifetime
Syntax
lsp-lifetime seconds
no lsp-lifetime
Context
[Tree] (config>service>vpls>spb lsp-lifetime)
Full Context
configure service vpls spb lsp-lifetime
Description
This command sets the time, in seconds, SPB wants the LSPs it originates to be considered valid by other routers in the domain. This is a control B-VPLS command.
Each LSP received is maintained in an LSP database until the lsp-lifetime expires unless the originating router refreshes the LSP. By default, each router refreshes its LSPs every 20 minutes (1200 seconds) so other routers will not age out the LSP.
The LSP refresh timer is derived from this formula: lsp-lifetime/2.
LSPs originated by SPB should be valid for 1200 seconds (20 minutes).
The no form of this command reverts to the default value.
Default
lsp-lifetime 1200
Parameters
- seconds
-
The time, in seconds, that SPB wants the LSPs it originates to be considered valid by other routers in the domain.
Platforms
All
lsp-lifetime
Syntax
lsp-lifetime seconds
no lsp-lifetime
Context
[Tree] (config>service>vprn>isis lsp-lifetime)
Full Context
configure service vprn isis lsp-lifetime
Description
This command sets the time, in seconds, the router wants the LSPs it originates to be considered valid by other routers in the domain.
Each LSP received is maintained in an LSP database until the lsp-lifetime expires unless the originating router refreshes the LSP. By default, each router refreshes its LSPs every 20 minutes (1200 seconds) so other routers will not age out the LSP.
The LSP refresh timer is derived from this formula: lsp-lifetime/2
LSPs originated by the router should be valid for 1200 seconds (20 minutes).
The no form of this command reverts to the default value.
Default
lsp-lifetime 1200
Parameters
- seconds
-
Specifies the time, in seconds, that the router wants the LSPs it originates to be considered valid by other routers in the domain.
Platforms
All
lsp-lifetime
Syntax
lsp-lifetime seconds
no lsp-lifetime
Context
[Tree] (config>router>isis lsp-lifetime)
Full Context
configure router isis lsp-lifetime
Description
This command sets the time, in seconds, the router wants the LSPs it originates to be considered valid by other routers in the domain.
Each LSP received is maintained in an LSP database until the lsp-lifetime expires unless the originating router refreshes the LSP. By default, each router refreshes its LSPs every 20 minutes (1200 seconds) so other routers will not age out the LSP.
The LSP refresh timer is derived from this formula: lsp-lifetime/2
The no form of this command reverts to the default value.
Default
lsp-lifetime 1200
Parameters
- seconds
-
Specifies the time, in seconds, that the router wants the LSPs it originates to be considered valid by other routers in the domain.
Platforms
All
lsp-minimum-remaining-lifetime
lsp-minimum-remaining-lifetime
Syntax
lsp-minimum-remaining-lifetime seconds
no lsp-minimum-remaining-lifetime
Context
[Tree] (config>service>vprn>isis lsp-minimum-remaining-lifetime)
Full Context
configure service vprn isis lsp-minimum-remaining-lifetime
Description
This command configures the minimum value to which the remaining lifetime of the LSP is set. The value is a counter that decrements, in seconds, starting from the value in the received LSP (if not self-originated) or from lsp-lifetime seconds (if self-originated). When the remaining lifetime becomes zero, the contents of the LSP is purged. The remaining lifetime of an LSP is not changed when there is no lsp-minimum-remaining-lifetime value configured.
The configured value must be greater than or equal to the lsp-lifetime value.
The no form of this command removes the seconds value from the configuration.
Default
no lsp-minimum-remaining-lifetime
Parameters
- seconds
-
Specifies the decrementing counter, in seconds. The configured value must be greater than or equal to the locally configured value of lsp-lifetime (MaxAge).
Platforms
All
lsp-minimum-remaining-lifetime
Syntax
lsp-minimum-remaining-lifetime seconds
no lsp-minimum-remaining-lifetime
Context
[Tree] (config>router>isis lsp-minimum-remaining-lifetime)
Full Context
configure router isis lsp-minimum-remaining-lifetime
Description
This command configures the minimum value to which the remaining lifetime of the LSP is set. The value is a counter that decrements, in seconds, starting from the value in the received LSP (if not self-originated) or from lsp-lifetime seconds (if self-originated). When the remaining lifetime becomes zero, the contents of the LSP is purged. The remaining lifetime of an LSP is not changed when there is no lsp-minimum-remaining-lifetime value configured.
The configured value must be greater than or equal to the lsp-lifetime value.
The no form of this command removes the seconds value from the configuration.
Parameters
- seconds
-
Specifies the decrementing counter, in seconds. The configured value must be greater than or equal to the locally configured value of lsp-lifetime (MaxAge).
Platforms
All
lsp-mtu-size
lsp-mtu-size
Syntax
lsp-mtu-size size
no lsp-mtu-size
Context
[Tree] (config>service>vprn>isis lsp-mtu-size)
[Tree] (config>service>vprn>isis>level lsp-mtu-size)
Full Context
configure service vprn isis lsp-mtu-size
configure service vprn isis level lsp-mtu-size
Description
This command configures the LSP MTU size. If the size value is changed from the default using CLI or SNMP, then ISIS must be restarted for the change to take effect. This can be done by performing a shutdown command and then a no shutdown command in the config>router>isis context.
Using the exec command to execute a configuration file to change the LSP MTU size from its default value will automatically restart IS-IS for the change to take effect.
The no form of this command reverts to the default value.
Default
lsp-mtu-size 1492
Parameters
- size
-
Specifies the LSP MTU size.
Platforms
All
lsp-mtu-size
Syntax
lsp-mtu-size size
no lsp-mtu-size
Context
[Tree] (config>router>isis lsp-mtu-size)
[Tree] (config>router>isis>level lsp-mtu-size)
Full Context
configure router isis lsp-mtu-size
configure router isis level lsp-mtu-size
Description
This command configures the LSP MTU size. If the size value is changed from the default using CLI or SNMP, then IS-IS must be restarted in order for the change to take effect. This can be done by performing a shutdown command and then a no shutdown command in the config>router>isis context.
Using the exec command to execute a configuration file to change the LSP MTU-size from its default value automatically restarts IS-IS for the change to take effect.
The no form of this command reverts to the default value.
Default
lsp-mtu-size 1492
Parameters
- size
-
Specifies the LSP MTU size.
Platforms
All
lsp-num
lsp-num
Syntax
lsp-num lsp-num
no lsp-num
Context
[Tree] (config>router>mpls>lsp>working-tp-path lsp-num)
[Tree] (config>router>mpls>lsp>protect-tp-path lsp-num)
Full Context
configure router mpls lsp working-tp-path lsp-num
configure router mpls lsp protect-tp-path lsp-num
Description
This command configures the MPLS-TP LSP Number for the working TP path or the Protect TP Path.
Default
lsp-num 1 (for a working path), lsp-num 2 (for a protect path)
Parameters
- lsp-num
-
Specifies the LSP number.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp-pacing-interval
lsp-pacing-interval
Syntax
lsp-pacing-interval milli-seconds
no lsp-pacing-interval
Context
[Tree] (config>service>vpls>spoke-sdp>spb lsp-pacing-interval)
[Tree] (config>service>vpls>sap>spb lsp-pacing-interval)
Full Context
configure service vpls spoke-sdp spb lsp-pacing-interval
configure service vpls sap spb lsp-pacing-interval
Description
This command configures the interval during which LSPs are sent from the interface.
To avoid overwhelming neighbors that have less CPU processing power with LSPs, the pacing interval can be configured to limit how many LSPs are sent during an interval. LSPs may be sent in bursts during the interval up to the configured limit. If a value of 0 is configured, no LSPs are sent from the interface.
If configured to the default LSP pacing interval of 100, LSPs are sent in 100 millisecond intervals.
The no form of this command reverts to the default value.
The IS-IS timer granularity is 100 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsp-pacing-interval 100
Parameters
- milli-seconds
-
The interval in milliseconds during which IS-IS LSPs are sent from the interface, expressed as a decimal integer.
0 to 65535
Platforms
All
lsp-pacing-interval
Syntax
lsp-pacing-interval milliseconds
no lsp-pacing-interval
Context
[Tree] (config>service>vprn>isis>if lsp-pacing-interval)
Full Context
configure service vprn isis interface lsp-pacing-interval
Description
This command configures the interval at which LSPs are sent from the interface.
To avoid overwhelming neighbors that have less CPU processing power with LSPs, the pacing interval can be configured to limit how many LSPs are sent at the interval. LSPs are sent in bursts at the interval up to the configured limit. If a value of 0 is configured, no LSPs are sent from the interface.
If configured to the default LSP pacing interval of 100, LSPs are sent in 100 millisecond intervals.
The no form of this command reverts to the default value.
The IS-IS LSP pacing interval is 100 milliseconds for values < 100 milliseconds, and 1 second for values ≥ 100 milliseconds. For example, a pacing interval of 2 milliseconds means that a maximum of 50 LSPs are sent in a burst at 100 millisecond intervals. The default pacing interval of 100 milliseconds means that a maximum of 10 LSPs are sent in a burst at 1 second intervals.
Default
lsp-pacing-interval 100
Parameters
- milliseconds
-
Specifies the pacing interval in milliseconds at which IS-IS LSPs are sent from the interface at each interval expressed as a decimal integer.
Platforms
All
lsp-pacing-interval
Syntax
lsp-pacing-interval milliseconds
no lsp-pacing-interval
Context
[Tree] (config>router>isis>interface lsp-pacing-interval)
Full Context
configure router isis interface lsp-pacing-interval
Description
This command configures the interval at which LSPs are sent from the interface.
To avoid overwhelming neighbors that have less CPU processing power with LSPs, the pacing interval can be configured to limit how many LSPs are sent at the interval. LSPs are sent in bursts at the interval up to the configured limit. If a value of 0 is configured, no LSPs are sent from the interface. The interval applies to all LSPs: LSPs generated by the router, and LSPs received from other routers.
If configured to the default LSP pacing interval of 100, LSPs are sent in 100 millisecond intervals.
The no form of this command reverts to the default value.
The IS-IS LSP pacing interval is 100 milliseconds for values < 100 milliseconds, and 1 second for values ≥ 100 milliseconds. For example, a pacing interval of 2 milliseconds means that a maximum of 50 LSPs are sent in a burst at 100 millisecond intervals. The default pacing interval of 100 milliseconds means that a maximum of 10 LSPs are sent in a burst at 1 second intervals.
Default
lsp-pacing-interval 100
Parameters
- milli-seconds
-
Specifies the interval in milliseconds during which IS-IS LSPs are sent from the interface expressed as a decimal integer.
Platforms
All
lsp-ping
lsp-ping
Syntax
lsp-ping lsp-name [path path-name]
lsp-ping bgp-label prefix ip-prefix/prefix-length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-ping ldp prefix ip-prefix/prefix-length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-ping prefix ip-prefix/prefix-length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-ping rsvp-te lsp-name [path path-name]
lsp-trace sr-isis prefix ip-prefix/prefix-length [igp-instance igp-instance] [detail] [downstream-map-tlv downstream-map-tlv] [fc fc-name [profile {in | out}]] [flex-algo flex-algo-num] [interval interval] [max-fail no-response-count] [min-ttl min-label-ttl] [max-ttl max-label-ttl] [path-destination ip-address [interface if-name | next-hop ip-address]] [probe-count probes-per-hop] [size octets] [src-ip-address ip-address] [timeout timeout]
lsp-trace sr-ospf prefix ip-prefix/prefix-length [igp-instance igp-instance] [detail] [downstream-map-tlv downstream-map-tlv] [fc fc-name [profile {in | out}]] [flex-algo flex-algo-num] [interval interval] [max-fail no-response-count] [min-ttl min-label-ttl] [max-ttl max-label-ttl] [path-destination ip-address [interface if-name | next-hop ip-address]] [probe-count probes-per-hop] [size octets] [src-ip-address ip-address] [timeout timeout]
lsp-ping sr-ospf3 prefix ip-prefix/prefix-length [ igp-instance igp-instance] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-ping sr-policy color color-id endpoint ip-address [segment-list segment-list-id] [detail] [ path-destination ip-address [{ interface if-name | next-hop ip-address}]]
lsp-ping sr-te lsp-name [path path-name] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-ping static lsp-name [assoc-channel {ipv4 | non-ip | none}] [dest-global-id global-id dest-node-id node-id] [force] [path-type {active | working | protect}]
NOTE: Options common to all lsp-ping cases: [detail] [fc fc-name [profile {in | out}]] [flex-algo flex-algo-num] [interval interval] [send-count send-count] [size octets] [src-ip-address ip-address] [timeout timeout] [ttl label-ttl]
Context
[Tree] (config>saa>test>type lsp-ping)
[Tree] (oam lsp-ping)
Full Context
configure saa test type lsp-ping
oam lsp-ping
Description
This command performs in-band LSP connectivity tests.
This command performs an LSP ping using the protocol and data structures defined in the RFC 8029, Detecting Multi-Protocol Label Switched (MPLS) Data Plane Failures.
The LSP ping operation is modeled after the IP ping utility which uses ICMP echo request and reply packets to determine IP connectivity.
In an LSP ping, the originating device creates an MPLS echo request packet for the LSP and path to be tested. The MPLS echo request packet is sent through the data plane and awaits an MPLS echo reply packet from the device terminating the LSP. The status of the LSP is displayed when the MPLS echo reply packet is received.
This command, when used with the static option, performs in-band on-demand LSP connectivity verification tests for static MPLS-TP LSPs. For other LSP types, the static option should be excluded and these are described elsewhere in this user guide.
The lsp-ping static command performs an LSP ping using the protocol and data structures defined in the RFC 8029, Detecting Multi-Protocol Label Switched (MPLS) Data Plane Failures, as extended by RFC 6426, MPLS On-Demand Connectivity Verification and Route Tracing.
In MPLS-TP, the echo request and echo reply messages are always sent in-band over the LSP, either in a G-ACh channel or encapsulated as an IP packet below the LSP label.
The timestamp format to be sent, and to be expected when received in a PDU, is as configured by the config>test-oam>mpls-time-stamp-format command. If RFC 4379 (obsoleted by RFC 8029) is selected, then the timestamp is in seconds and microseconds since 1900, otherwise it is in seconds and microseconds since 1970.
Default
The active LSP path
Values: Any path name associated with the LSP
Parameters
- lsp-name
-
Specifies the name of the target RSVP-TE LSP, up to 64 characters.
- rsvp-te lsp-name
-
Specifies the name of the target RSVP-TE LSP, up to 64 characters.
Note:The rsvp-te explicit target FEC type is not supported under the SAA context.
- path-name
-
Specifies the LSP path name, up to 32 characters, to which to send the LSP ping request.
- bgp-label prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target BGP IPv4 /32 label route or the target BGP IPv6 /128 label route.
- path-destination ip-address
-
Specifies the IP address of the path destination from the range 127/8. When the LDP FEC prefix is IPv6, the user must enter a 127/8 IPv4 mapped IPv6 address, that is, in the range ::ffff:127/104.
ipv4-address:
a.b.c.d
ipv6-address:
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x:
[0 to FFFF]H
d:
[0 to 255]D
- flex-algo flex-algo-num
-
Specifies the Segment Routing Flexible Algorithm for the test.
- interface if-name
-
Specifies the name of an IP interface, up to 32 characters, to send the MPLS echo request message to. The name must already exist in the config>router>interface context.
- next-hop ip-address
-
Specifies the next-hop address to send the MPLS echo request message to.
- prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target LDP FEC.
- ldp prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target LDP FEC.
- sr-isis prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-IS-IS tunnel.
- igp-instance
-
Specifies the IGP instance of the node SID prefix.
- sr-ospf prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-OSPF tunnel.
- sr-ospf3 prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-OSPF3 tunnel. Note that only IPv6 prefixes in OSPFv3 instance ID 0-31 are supported.
- sr-policy color color-id endpoint ip-address segment-list segment-list-id
-
Specifies the name of the target IPv4 or IPv6 SR policy.
Note:The sr-policy target FEC type is supported under the OAM context and under type-multi-line node in the SAA context.
color color-id — Specifies the color ID.
Values 0 to 4294967295
endpoint ip-address — Specifies the endpoint address.
Values
ipv4-address:
a.b.c.d
ipv6-address:
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x:
[0 to FFFF]H
d:
[0 to 255]D
segment-list segment-list-id — Specifies the segment list ID.
Values 1 to 32
- detail
-
Displays detailed information.
- sr-te lsp-name
-
Specifies the name of the target SR-TE LSP, up to 64 characters.
- static
-
Specifies the target FEC stack sub-type "Static LSP”.
- assoc-channel {ipv4 | non-ip | none}
-
Specifies the launched echo request’s usage of the Associated Channel (ACH) mechanism, when testing an MPLS-TP LSP.
- global-id
-
Specifies the MPLS-TP global ID for the far end node of the LSP under test. If this is not entered, then the dest-global-id is taken from the LSP context.
- node-id
-
Specifies the MPLS-TP global ID for the far end node of the LSP under test. If this is not entered, then the dest-global-id is taken from the LSP context.
- force
-
Allows LSP ping to test a path that is operationally down, including cases where MPLS-TP BFD CC/V is enabled and has taken a path down. This parameter is only allowed in the OAM context; it is not allowed for a test configured as a part of an SAA.
- path-type {active | working | protect}
-
The LSP path to test.
- fc-name
-
Specifies the FC and profile parameters that are used to indicate the forwarding class and profile of the MPLS echo request packet.
When an MPLS echo request packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the specified fc and profile parameter values. The marking of the packet's EXP is dictated by the LSP-EXP mappings on the outgoing interface.
When the MPLS echo request packet is received on the responding node, The FC and profile parameter values are dictated by the LSP-EXP mappings of the incoming interface.
When an MPLS echo reply packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the FC and profile parameter values determined by the classification of the echo request packet, which is being replied to, at the incoming interface. The marking of the packet's EXP is dictated by the LSP-EXP mappings on the outgoing interface. The ToS byte is not modified. lsp-ping Request Packet and Behavior summarizes this behavior.
Table 7. lsp-ping Request Packet and Behavior CPM (sender node)
Echo request packet:
-
packet {tos=1, fc1, profile1}
-
fc1 and profile1 are as entered by user in OAM command or default values
-
tos1 as per mapping of {fc1, profile1} to IP precedence in network egress QoS policy of outgoing interface
Outgoing interface (sender node)
Echo request packet:
-
packet queued as {fc1, profile1}
-
ToS field=tos1 not remarked
-
EXP=exp1, as per mapping of {fc1, profile1} to EXP in network egress QoS policy of outgoing interface
Incoming interface (responder node)
Echo request packet:
-
packet {tos1, exp1}
-
exp1 mapped to {fc2, profile2} as per classification in network QoS policy of incoming interface
CPM (responder node)
Echo reply packet:
-
packet{tos=1, fc2, profile2}
Outgoing interface (responder node)
Echo reply packet:
-
packet queued as {fc2, profile2}
-
ToS filed= tos1 not remarked (reply inband or out-of-band)
-
EXP=exp2, if reply is inband, remarked as per mapping of {fc2, profile2} to EXP in network egress QoS policy of outgoing interface
Incoming interface (sender node)
Echo reply packet:
-
packet {tos1, exp2}
-
exp2 mapped to {fc1, profile1} as per classification in network QoS policy of incoming interface
The LSP-EXP mappings on the receive network interface controls the mapping of the message reply at the originating router.
-
- profile {in | out}
-
Specifies the profile state of the MPLS echo request packet.
- flex-algo flex-algo-num
-
Specifies the Segment Routing Flexible Algorithm for the test. This option is only supported for oam lsp-ping sr-isis and oam lsp-ping sr-ospf. This option is not supported for SAA. If this option is not set, then the system looks up the prefix without flex-algo awareness.
- interval
-
Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.
- send-count
-
Specifies the number of messages to send, expressed as a decimal integer. The send-count parameter is used to override the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must be expired before the next message request is sent.
- octets
-
Specifies the MPLS echo request packet size in octets, expressed as a decimal integer. The request payload is padded with zeros to the specified size.
- src-ip-address ip-address
-
Specifies the source IP address. This option is used when an OAM packet must be generated from a different address than the node’s system interface address. An example is when the OAM packet is sent over an LDP LSP and the LDP LSR-ID of the corresponding LDP session to the next-hop is set to an address other than the system interface address.
- timeout
-
Specifies number, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the last probe for a specific test. Upon the expiration of the time out, the test is marked complete and no more packets are processed for any of those request probes.
- label-ttl
-
Specifies the TTL value for the MPLS label, expressed as a decimal integer.
Platforms
All
Output
Output ExampleThe following output is an example of LDP IPv4 and IPv6 prefix FECs.
A:Dut-C# oam lsp-ping prefix 4.4.4.4/32 detail
LSP-PING 4.4.4.4/32: 80 bytes MPLS payload
Seq=1, send from intf dut1_to_dut3, reply from 4.4.4.4
udp-data-len=32 ttl=255 rtt=5.23ms rc=3 (EgressRtr)
---- LSP 4.4.4.4/32 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 5.23ms, avg = 5.23ms, max = 5.23ms, stddev = 0.000ms
===============================================================================
LDP LSR ID: 1.1.1.1
===============================================================================
Legend: U - Label In Use, N - Label Not In Use, W - Label Withdrawn
WP - Label Withdraw Pending, BU - Alternate For Fast Re-Route
===============================================================================
LDP Prefix Bindings
===============================================================================
Prefix IngLbl EgrLbl EgrIntf/ EgrNextHop
Peer LspId
-------------------------------------------------------------------------------
4.4.4.4/32 131069N 131067 1/1/1 1.3.1.2
3.3.3.3
4.4.4.4/32 131069U 131064 -- --
6.6.6.6
-------------------------------------------------------------------------------
No. of Prefix Bindings: 2
===============================================================================
A:Dut-C#
*A:Dut-A# oam lsp-ping prefix fc00::a14:106/128
LSP-PING fc00::a14:106/128: 116 bytes MPLS payload
Seq=1, send from intf A_to_B, reply from fc00::a14:106
udp-data-len=32 ttl=255 rtt=7.16ms rc=3 (EgressRtr)
---- LSP fc00::a14:106/128 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 7.16ms, avg = 7.16ms, max = 7.16ms, stddev = 0.000ms
*A:Dut-A#
lsp-ping over SR-ISIS
*A:Dut-A# oam lsp-ping sr-isis prefix 10.20.1.6/32 igp-instance 0 detail
LSP-PING 10.20.1.6/32: 80 bytes MPLS payload
Seq=1, send from intf int_to_B, reply from 10.20.1.6
udp-data-len=32 ttl=255 rtt=1220324ms rc=3 (EgressRtr)
---- LSP 10.20.1.6/32 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 1220324ms, avg = 1220324ms, max = 1220324ms, stddev = 0.000ms
lsp-ping with SR-TE
*A:Dut-A# oam lsp-ping sr-te "srteABCEDF" detail
LSP-PING srteABCEDF: 96 bytes MPLS payload
Seq=1, send from intf int_to_B, reply from 10.20.1.6
udp-data-len=32 ttl=255 rtt=1220325ms rc=3 (EgressRtr)
---- LSP srteABCEDF PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 1220325ms, avg = 1220325ms, max = 1220325ms, stddev = 0.000ms
*A:Dut-A# oam lsp-ping sr-te "srteABCE_loose" detail
LSP-PING srteABCE_loose: 80 bytes MPLS payload
Seq=1, send from intf int_to_B, reply from 10.20.1.5
udp-data-len=32 ttl=255 rtt=1220324ms rc=3 (EgressRtr)
---- LSP srteABCE_loose PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 1220324ms, avg = 1220324ms, max = 1220324ms, stddev = 0.000ms
*A:Dut-F# oam lsp-ping sr-te "srteFECBA_eth" detail
LSP-PING srteFECBA_eth: 116 bytes MPLS payload
Seq=1, send from intf int_to_E, reply from fc00::a14:101
udp-data-len=32 ttl=255 rtt=1220326ms rc=3 (EgressRtr)
---- LSP srteFECBA_eth PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss
round-trip min = 1220326ms, avg = 1220326ms, max = 1220326ms, stddev = 0.000ms
lsp-ping with SR-Policy
*A:Dut-A#
# ipv4 sr-policy lsp-ping
*A:Dut-A# oam lsp-ping sr-policy color 200 endpoint 10.20.1.6 LSP-PING color 200 endpoint 10.20.1.6: 76 bytes MPLS payload Seq=1, send from intf int_to_C, reply from 10.20.1.6
udp-data-len=32 ttl=255 rtt=1220325ms rc=3 (EgressRtr)
---- LSP color 200 endpoint 10.20.1.6 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss round-trip min = 1220325ms, avg = 1220325ms, max = 1220325ms, stddev = 0.000ms
# ipv6 sr-policy lsp-ping
*A:Dut-A# oam lsp-ping sr-policy color 200 endpoint fc00::a14:106 LSP-PING color 200 endpoint fc00::a14:106: 76 bytes MPLS payload Seq=1, send from intf int_to_C, reply from 10.20.1.6
udp-data-len=32 ttl=255 rtt=1220324ms rc=3 (EgressRtr)
---- LSP color 200 endpoint fc00::a14:106 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss round-trip min = 1220324ms, avg = 1220324ms, max = 1220324ms, stddev = 0.000ms
lsp-ping with sr-ospf3
# sr-ospf3 lsp-ping
*A:Dut-A# oam lsp-ping sr-ospf3 prefix fc00::a14:106/128 LSP-PING fc00::a14:106/128: 116 bytes MPLS payload Seq=1, send from intf int_to_B, reply from fc00::a14:106
udp-data-len=32 ttl=255 rtt=3.17ms rc=3 (EgressRtr)
---- LSP fc00::a14:106/128 PING Statistics ----
1 packets sent, 1 packets received, 0.00% packet loss round-trip min = 3.17ms, avg = 3.17ms, max = 3.17ms, stddev = 0.000ms *A:Dut-A#
lsp-ping
Syntax
lsp-ping
Context
[Tree] (config>saa>test>type-multi-line lsp-ping)
Full Context
configure saa test type-multi-line lsp-ping
Description
Commands in this context configure the lsp-ping OAM probe type.
Platforms
All
lsp-ping-interval
lsp-ping-interval
Syntax
lsp-ping-interval seconds
no lsp-ping-interval
Context
[Tree] (config>router>ldp>lsp-bfd lsp-ping-interval)
Full Context
configure router ldp lsp-bfd lsp-ping-interval
Description
This command configures the interval between periodic LSP ping messages for LSPs on which bfd-enable is configured. The LSP ping messages are used to bootstrap and maintain the LSP BFD session.
Configuring an interval of 0 seconds disables periodic LSP ping. An LSP ping message containing a bootstrap TLV will only be sent when the BFD session is first initialized.
In scaled environments, LSP BFD sessions should use longer intervals to reduce congestion and common resource loading. Unless required, the interval should not be set lower than 300 s.
The no form of this command restores the default interval.
Default
lsp-ping-interval 60
Parameters
- seconds
-
Specifies the interval between periodic LSP ping messages, in seconds.
Platforms
All
lsp-ping-interval
Syntax
lsp-ping-interval seconds
no lsp-ping-interval
Context
[Tree] (config>router>mpls>lsp>primary>bfd lsp-ping-interval)
[Tree] (config>router>mpls>lsp-template>bfd lsp-ping-interval)
[Tree] (config>router>mpls>lsp>bfd lsp-ping-interval)
[Tree] (config>router>mpls>lsp>secondary>bfd lsp-ping-interval)
Full Context
configure router mpls lsp primary bfd lsp-ping-interval
configure router mpls lsp-template bfd lsp-ping-interval
configure router mpls lsp bfd lsp-ping-interval
configure router mpls lsp secondary bfd lsp-ping-interval
Description
This command configures the interval for the periodic LSP ping for RSVP LSPs on which bfd-enable has been configured. This interval is used to bootstrap and maintain the LSP BFD session. A value of 0 disables periodic LSP Ping, such that an LSP Ping containing a bootstrap TLV is only sent when the BFD session is first initialized.
In scaled environments, LSP BFD sessions should use longer timers to reduce the chance of congestion and loading of common resources. Unless required, the lsp-ping-interval should not be set lower than 300 seconds.
The no form of this command reverts to the default value.
Default
no lsp-ping-interval
Parameters
- seconds
-
Sets the periodic LSP Ping interval in seconds.
Platforms
All
lsp-ping-trace
lsp-ping-trace
Syntax
lsp-ping-trace [{tx | rx | both}] [{raw | detail}]
no lsp-ping-trace
Context
[Tree] (debug>oam lsp-ping-trace)
Full Context
debug oam lsp-ping-trace
Description
This command enables debugging for lsp-ping.
Parameters
- tx | rx | both
-
Specifies to enable LSP ping debugging for TX, RX, or both RX and TX for the for debug direction.
- raw | detail
-
Displays output for the for debug mode.
Platforms
All
lsp-refresh-interval
lsp-refresh-interval
Syntax
lsp-refresh-interval [seconds] [half-lifetime [enable | disable]
no lsp-refresh-interval
Context
[Tree] (config>service>vpls>spb lsp-refresh-interval)
Full Context
configure service vpls spb lsp-refresh-interval
Description
This command configures the LSP refresh timer interval. When configuring the LSP refresh interval, the value that is specified for lsp-lifetime must also be considered. The LSP refresh interval cannot be greater than 90% of the LSP lifetime.
The no form of this command reverts to the default (600 seconds), unless this value is greater than 90% of the LSP lifetime. For example, if the LSP lifetime is 400, then the no lsp-refresh-interval command will be rejected.
Default
lsp-refresh-interval 600 half-lifetime enable
Parameters
- seconds
-
Specifies the refresh interval.
- half-lifetime
-
Sets the refresh interval to always be half the lsp-lifetime value. When this parameter is set to enable, the configured refresh interval is ignored.
Platforms
All
lsp-refresh-interval
Syntax
lsp-refresh-interval [seconds] [half-lifetime {enable | disable}]
no lsp-refresh-interval
Context
[Tree] (config>service>vprn>isis lsp-refresh-interval)
Full Context
configure service vprn isis lsp-refresh-interval
Description
This command configures the IS-IS LSP refresh timer interval for the VPRN instance. When configuring the LSP refresh interval, the value that is specified for lsp-lifetime must also be considered. The LSP refresh interval cannot be greater than 90% of the LSP lifetime.
The no form of this command reverts to the default (600 seconds), unless this value is greater than 90% of the LSP lifetime. For example, if the LSP lifetime is 400, then the no lsp-refresh-interval command will be rejected.
Default
lsp-refresh-interval 600 half-lifetime enable
Parameters
- seconds
-
Specifies the refresh interval.
- half-lifetime
-
Sets the refresh interval to always be half the lsp-lifetime value. When this parameter is set to enable, the configured refresh interval is ignored.
Platforms
All
lsp-refresh-interval
Syntax
lsp-refresh-interval [seconds] [half-lifetime {enable | disable}
no lsp-refresh-interval
Context
[Tree] (config>router>isis lsp-refresh-interval)
Full Context
configure router isis lsp-refresh-interval
Description
This command configures the IS-IS LSP refresh timer interval. When configuring the LSP refresh interval, the value that is specified for lsp-lifetime must also be considered. The LSP refresh interval cannot be greater than 90% of the LSP lifetime.
The no form of this command reverts to the default (600 seconds), unless this value is greater than 90% of the LSP lifetime. For example, if the LSP lifetime is 400, then the no lsp-refresh-interval command will be rejected.
Default
lsp-refresh-interval 600 half-lifetime enable
Parameters
- seconds
-
Specifies the refresh interval.
- half-lifetime
-
Sets the refresh interval to always be half the lsp-lifetime value. When this parameter is set to enable, the configured refresh interval is ignored.
Platforms
All
lsp-self-ping
lsp-self-ping
Syntax
[no] lsp-self-ping
Context
[Tree] (config>router>mpls lsp-self-ping)
Full Context
configure router mpls lsp-self-ping
Description
Commands in this context configure LSP self-ping parameters.
LSP Self-ping checks that the datapath of an RSVP LSP has been programmed by all LSRs along its path before switching the traffic to it. If enabled, LSP Self-ping packets are sent periodically at a configurable interval following the receipt of the RESV message for an RSVP LSP path following an MBB or other event where the active path changes while the previous active path stayed up. The router will not switch traffic to the new path until an LSP Self-ping reply is received from the far-end LER.
When configured under the MPLS context, LSP Self-ping is enabled for all RSVP LSPs, unless it is explicitly disabled for a given LSP.
The no form of this command disables the system check for LSP Self-ping.
Default
no lsp-self-ping
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp-self-ping
Syntax
lsp-self-ping {enable | disable | inherit}
no lsp-self-ping
Context
[Tree] (config>router>mpls>lsp-template lsp-self-ping)
[Tree] (config>router>mpls>lsp lsp-self-ping)
Full Context
configure router mpls lsp-template lsp-self-ping
configure router mpls lsp lsp-self-ping
Description
This command enables LSP Self-ping on a given RSVP-TE LSP or LSP template. If set to disable, then LSP Self-ping is disabled irrespective of the setting of lsp-self-ping>rsvp-te under the mpls context. By default, each LSP and LSP template inherits this value.
The no form of this command reverts to the default.
Default
lsp-self-ping inherit
Parameters
- enable
-
Enables LSP Self-ping on this RSVP LSP or RSVP LSPs (one-hop-p2p or mesh-p2p) using this LSP template.
- disable
-
Disables LSP Self-ping on this RSVP LSP or RSVP LSPs using this LSP template.
- inherit
-
Inherits the value configured under config>router>mpls>lsp-self-ping>rsvp-te.
Platforms
All
- configure router mpls lsp-template lsp-self-ping
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
- configure router mpls lsp lsp-self-ping
lsp-setup
lsp-setup
Syntax
lsp-setup [detail]
no lsp-setup
Context
[Tree] (debug>router>mpls>event lsp-setup)
Full Context
debug router mpls event lsp-setup
Description
This command debugs LSP setup events.
The no form of the command disables the debugging.
Parameters
- detail
-
Displays detailed information about LSP setup events.
Platforms
All
lsp-template
lsp-template
Syntax
lsp-template p2mp-lsp-template-name
no lsp-template
Context
[Tree] (config>service>vpls>provider-tunnel>inclusive>rsvp lsp-template)
Full Context
configure service vpls provider-tunnel inclusive rsvp lsp-template
Description
This command specifies the template name of the RSVP P2MP LSP instance to be used by the leaf node or the root-and-leaf node that participates in BGP-AD VPLS. The P2MP LSP is referred to as the Inclusive Provider Multicast Service Interface (I-PMSI).
After the user performs a no shutdown under the context of the inclusive node and the delay timer expires, BUM packets will be forwarded over an automatically signaled instance of the RSVP P2MP LSP specified in the LSP template.
The no version of this command removes the P2MP LSP template from the I-PMSI configuration.
Parameters
- p2mp-lsp-template-name
-
Specifies the name of the P2MP LSP template up to 32 characters in length.
Platforms
All
lsp-template
Syntax
lsp-template
no lsp-template
Context
[Tree] (config>service>vprn>mvpn>pt>inclusive>rsvp lsp-template)
Full Context
configure service vprn mvpn provider-tunnel inclusive rsvp lsp-template
Description
This command specifies the use of automatically created P2MP LSP as the provider tunnel. The P2MP LSP will be signaled using the parameters specified in the template, such as bandwidth constraints, and so on.
Default
no lsp-template
Platforms
All
lsp-template
Syntax
lsp-template name
no lsp-template
Context
[Tree] (config>service>vprn>mvpn>pt>selective>multistream-spmsi lsp-template)
Full Context
configure service vprn mvpn provider-tunnel selective multistream-spmsi lsp-template
Description
This command creates a RSVP-TE LSP template for S-PMSI. Multi-stream S-PMSIs can share a single template or can each use their own template.
Parameters
- name
-
Specifies the LSP template name, up to 32 characters.
Platforms
All
lsp-template
Syntax
lsp-template lsp-template
no lsp-template
Context
[Tree] (config>service>vprn>mvpn>pt>selective>rsvp lsp-template)
[Tree] (config>service>vprn>mvpn>pt>inclusive lsp-template)
Full Context
configure service vprn mvpn provider-tunnel selective rsvp lsp-template
configure service vprn mvpn pt inclusive lsp-template
Description
This command specifies the use of automatically created P2MP LSP as the inclusive or selective provider tunnel. The P2MP LSP will be signaled using the parameters specified in the template, such as bandwidth constraints, and so on.
Default
no lsp-template
Parameters
- lsp-template
-
Specifies the LSP template name, up to 32 characters.
Platforms
All
lsp-template
Syntax
lsp-template template-name [mesh-p2p | mesh-p2p-srte | one-hop-p2p | on-demand-p2p-srte | one-hop-p2p-srte | p2mp | pce-init-p2p-srte template-id {default | template-id}]
no lsp-template template-name
Context
[Tree] (config>router>mpls lsp-template)
Full Context
configure router mpls lsp-template
Description
This command creates a template that can be referenced by a client application where dynamic LSP creation is required. The LSP template type (p2mp, one-hop-p2p, mesh-p2p, one-hop-p2p-srte, mesh-p2p-srte, pce-init-p2p-srte, or on-demand-p2p-srte) is mandatory.
The no form of this command deletes the LSP template. An LSP template cannot be deleted if a client application is using it.
Parameters
- template-name
-
Specifies the name of the LSP template, up to 32 characters. An LSP template name and LSP name must not be the same.
- mesh-p2p | mesh-p2p-srte | one-hop-p2p | one-hop-p2p-srte | p2mp | pce-init-p2p-srte | on-demand-p2p-srte
-
Identifies the type of LSP this template will signal.
The p2mp option is supported on the 7750 SR, 7950 XRS, and with VPLS only on the 7450 ESS.
- default
-
Sets the template to be the default LSP template for PCE-initiated SR-TE LSPs.
- template-id
-
Specifies the value that is signaled in the PCE to identify the LSP template.
Platforms
All
lsp-template
Syntax
lsp-template lsp-template
no lsp-template
Context
[Tree] (config>router>gtm>provider-tunnel>inclusive>rsvp lsp-template)
[Tree] (config>router>gtm>provider-tunnel>selective>rsvp lsp-template)
Full Context
configure router gtm provider-tunnel inclusive rsvp lsp-template
configure router gtm provider-tunnel selective rsvp lsp-template
Description
This command specifies the use of automatically created P2MP LSP as the provider tunnel. The P2MP LSP will be signaled using the parameters specified in the template, such as bandwidth constraints.
The no form of this command removes the lsp-template name from this configuration.
Default
no lsp-template
Parameters
- lsp-template
-
Specifies the name of the LSP template, up to 32 characters.
Platforms
All
lsp-template
Syntax
lsp-template template-name
no lsp-template
Context
[Tree] (config>oam-pm>session>mpls>lsp>rsvp-auto lsp-template)
Full Context
configure oam-pm session mpls lsp rsvp-auto lsp-template
Description
This command specifies the LSP template used to identify the LSP for testing.
One of three mandatory configuration statements that are required to identify automatically created RSVP LSPs, created using config>router>mpls>lsp-template. The config>router>mpls>auto-lsp>lsp-template links three distinct functions.
The lsp-template template-name must match the name of config>router>mpls>lsp-template used to dynamically create the RSVP LSP. This is a lose reference and does not impede the manipulation of the config>router>mpls>lsp-template. The required identifiers are from, lsp-template and to, all under this node.
The no form of this command deletes the template-name reference from the configuration.
Parameters
- template-name
-
Specifies the name of the LSP template, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp-template
Syntax
lsp-template template-name
no lsp-template
Context
[Tree] (config>oam-pm>session>ip>tunnel>mpls>rsvp-te-auto lsp-template)
Full Context
configure oam-pm session ip tunnel mpls rsvp-te-auto lsp-template
Description
This command configures the name of the LSP template used to identify the unique LSP. Configure the following three commands to identify an RSVP-TE Auto LSP: from, to, and lsp-template. When all three of these values are configured, the specific RSVP LSP can be identified and the test packets can be carried across the tunnel
The no form of this command removes the LSP template name from the configuration.
Parameters
- template-name
-
Specifies the LSP template name, up to 32 characters.
Platforms
7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS
lsp-trace
lsp-trace
Syntax
lsp-trace lsp-name [path path-name] [detail]
lsp-trace bgp-label prefix ip-prefix/prefix-length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace ldp prefix ip-prefix/length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace prefix ip-prefix/length [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace rsvp-te lsp-name [path path-name]
lsp-trace sr-isis prefix ip-prefix/prefix-length [igp-instance igp-instance] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace sr-ospf prefix ip-prefix/prefix-length [ igp-instance igp-instance] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace sr-ospf3 prefix ip-prefix/prefix-length [ igp-instance igp-instance] [path-destination ip-address [{interface if-name| next-hop ip-address}]]
lsp-trace sr-policy color color-id endpoint ip-address [segment-list segment-list-id] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace sr-te lsp-name [path path-name] [path-destination ip-address [{interface if-name | next-hop ip-address}]]
lsp-trace static lsp-name [assoc-channel {ipv4 | non-ip | none}] [path-type {active | working | protect}]
NOTE: Options common to all lsp-trace cases: [detail] [downstream-map-tlv downstream-map-tlv] [fc fc-name [profile {in | out}]] [flex-algo flex-algo-num] [interval interval] [max-fail no-response-count] [max-ttl max-label-ttl] [min-ttl min-label-ttl] [probe-count probes-per-hop] [size octets] [src-ip-address ip-address] [timeout timeout]
Context
[Tree] (oam lsp-trace)
[Tree] (config>saa>test>type lsp-trace)
Full Context
oam lsp-trace
configure saa test type lsp-trace
Description
This command performs an LSP traceroute using the protocol and data structures defined in IETF RFC 8029.
The LSP trace operation is modeled after the IP traceroute utility, which uses ICMP echo request and reply packets with increasing TTL values to determine the hop-by-hop route to a destination IP.
In an LSP trace, the originating device creates an MPLS echo request packet for the LSP to be tested with increasing values of the TTL in the outermost label. The MPLS echo request packet is sent through the data plane and awaits a TTL exceeded response or the MPLS echo reply packet from the device terminating the LSP. The devices that reply to the MPLS echo request packets with the TTL exceeded and the MPLS echo reply are displayed.
The downstream mapping TLV is used in lsp-trace to provide a mechanism for the sender and responder nodes to exchange and validate interface and label stack information for each downstream hop in the path of the LDP FEC an RSVP LSP, or a BGP IPv4 label route.
Two downstream mapping TLVs are supported. The original Downstream Mapping (DSMAP) TLV defined in RFC 4379 (obsoleted by RFC 8029) and the new Downstream Detailed Mapping (DDMAP) TLV defined in RFC 6424 AND RFC 8029. More details are provided in the DDMAP TLV sub-section below.
In addition, when the responder node has multiple equal cost next hops for an LDP FEC, a BGP label IPv4 prefix, an SR-ISIS node SID, an SR-OSPF node SID, or an SR-TE LSP, it replies in the Downstream Mapping TLV with the downstream information for each outgoing interface which is part of the ECMP next-hop set for the prefix. The downstream mapping TLV can further be used to exercise a specific path of the ECMP set using the path-destination option.
This command, when used with the static option, performs in-band on-demand LSP traceroute tests for static MPLS-TP LSPs. For other LSP types, the static option should be excluded and these are described elsewhere in this user guide.
The lsp-trace static command performs an LSP trace using the protocol and data structures defined in the RFC 8029, Detecting Multi-Protocol Label Switched (MPLS) Data Plane Failures, as extended by RFC 6426, MPLS On-Demand Connectivity Verification and Route Tracing.
In MPLS-TP, the echo request and echo reply messages are always sent in-band over the LSP, either in a G-ACh channel or encapsulated as an IP packet below the LSP label.
The timestamp format to be sent, and to be expected when received in a PDU, is as configured by the configure test-oam mpls-time-stamp-format command. If RFC 4379 (obsoleted by RFC 8029) is selected, the timestamp is in seconds and microseconds since 1900, otherwise it is in seconds and microseconds since 1970.
Parameters
- lsp-name
-
Specifies the name of the target RSVP-TE LSP, up to 64 characters.
- rsvp-te lsp-name
-
Specifies the name of the target RSVP-TE LSP, up to 64 characters.
Note:The rsvp-te explicit target FEC type is not supported under the SAA context.
- path-name
-
Specifies the LSP path name along which to send the LSP trace request.
- bgp-label prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target BGP IPv4 /32 label route or the target IPv6 /128 label route.
- path-destination ip-address
-
Specifies the IP address of the path destination from the range 127/8. When the LDP FEC prefix is IPv6, the user must enter a 127/8 IPv4 mapped IPv6 address, that is, in the range ::ffff:127/104.
- if-name
-
Specifies the name of an IP interface, up 32 characters, to send the MPLS echo request to. The name must already exist in the config>router>interface context.
- next-hop ip-address
-
Specifies the next hop to send the MPLS echo request message to.
- prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target LDP FEC.
- ldp prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target LDP FEC.
- sr-isis prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-ISIS tunnel.
- igp-instance
-
Specifies the IGP instance of the node SID prefix.
- sr-ospf prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-OSPF tunnel.
- sr-ospf3 prefix ip-prefix/prefix-length
-
Specifies the address prefix and subnet mask of the target node SID of the SR-OSPF3 tunnel. Only IPv6 prefixes in OSPFv3 instance ID 0-31 are supported.
- sr-policy color color-id endpoint ip-address segment-list segment-list-id
-
Specifies the name of the target IPv4 or IPv6 SR policy.
Note:The sr-policy target FEC type is supported under the OAM context and under type-multi-line node in the SAA context.
color color-id — Specifies the color ID.
- detail
-
Displays detailed information and allows the user to display hop 0 (that is, ingress) information. When this parameter is applied to static LSPs, the next hop 0 information is not displayed. This information is also not displayed if the min-ttl min-label-ttl value is greater than 1.
- sr-te lsp-name
-
Specifies the name of the target SR-TE LSP, up to 64 characters.
- static
-
Specifies the selection of the target FEC Stack sub-type "Static LSP”.
- assoc-channel {ipv4 | non-ip | none}
-
Specifies the launched echo request’s usage of the Associated Channel (ACH) mechanism, when testing an MPLS-TP LSP.
- path-type {active | working | protect}
-
Specifies the LSP path to test.
- downstream-map-tlv
-
Specifies which format of the downstream mapping TLV to use in the LSP trace packet. The DSMAP TLV is the original format in RFC 4379 (obsoleted by RFC 8029). The DDMAP is the new enhanced format specified in RFC 6424 and RFC 8029. The user can also choose not to include the downstream mapping TLV by entering the value none. When lsp-trace is used on a MPLS-TP LSP (static option), it can only be executed if the control-channel is set to none. In addition, the DSMAP/DDMAP TLV is only included in the echo request message if the egress interface is either a numbered IP interface, or an unnumbered IP interface. The TLV is not included if the egress interface is of type unnumbered-mpls-tp.
- fc-name
-
Specifies the FC and profile parameters are used to indicate the forwarding class and profile of the MPLS echo request packet.
When an MPLS echo request packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the specified FC and profile parameter values. The marking of the packet EXP is dictated by the LSP-EXP mappings on the outgoing interface.
When the MPLS echo request packet is received on the responding node, The FC and profile parameter values are dictated by the LSP-EXP mappings of the incoming interface.
When an MPLS echo reply packet is generated in CPM and is forwarded to the outgoing interface, the packet is queued in the egress network queue corresponding to the fc and profile parameter values determined by the classification of the echo request packet, which is being replied to, at the incoming interface. The marking of the packet's EXP is dictated by the LSP-EXP mappings on the outgoing interface. The ToS byte is not modified. lsp-trace Request Packet and Behavior summarizes this behavior.
Table 8. lsp-trace Request Packet and Behavior CPM (sender node)
Echo request packet:
-
packet {tos=1, fc1, profile1}
-
fc1 and profile1 are as entered by user in OAM command or default values
-
tos1 as per mapping of {fc1, profile1} to IP precedence in network egress QoS policy of outgoing interface
Outgoing interface (sender node)
Echo request packet:
-
pkt queued as {fc1, profile1}
-
ToS field=tos1 not remarked
-
EXP=exp1, as per mapping of {fc1, profile1} to EXP in network egress QoS policy of outgoing interface
Incoming interface (responder node)
Echo request packet:
-
packet {tos1, exp1}
-
exp1 mapped to {fc2, profile2} as per classification in network QoS policy of incoming interface
CPM (responder node)
Echo reply packet:
-
packet {tos=1, fc2, profile2}
Outgoing interface (responder node)
Echo reply packet:
-
pkt queued as {fc2, profile2}
-
ToS filed= tos1 not remarked (reply inband or out-of-band)
-
EXP=exp2, if reply is inband, remarked as per mapping of {fc2, profile2} to EXP in network egress QoS policy of outgoing interface
Incoming interface (sender node)
Echo reply packet:
-
packet {tos1, exp2}
-
exp2 mapped to {fc1, profile1} as per classification in network QoS policy of incoming interface
-
- profile {in | out}
-
Specifies the profile state of the MPLS echo request packet.
- interval
-
Specifies the number of seconds to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.
If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message reply corresponding to the outstanding message request.
- no-response-count
-
Specifies the maximum number of consecutive MPLS echo requests, expressed as a decimal integer that do not receive a reply before the trace operation fails for a given TTL.
- max-label-ttl
-
Specifies the maximum TTL value in the MPLS label for the LDP treetrace test, expressed as a decimal integer.
- min-label-ttl
-
Specifies the minimum TTL value in the MPLS label for the LSP trace test, expressed as a decimal integer.
- probes-per-hop
-
Specifies the probes per hop.
- octets
-
Specifies the size in octets, expressed as a decimal integer, of the MPLS echo request packet, including the IP header but not the label stack. The request payload is padded with zeros to the specified size. Note that an OAM command is not failed if the user entered a size lower than the minimum required to build the packet for the echo request message. The payload is automatically padded to meet the minimum size.
- src-ip-address ip-address
-
Specifies the source IP address. This option is used when an OAM packet must be generated from a different address than the node’s system interface address. An example is when the OAM packet is sent over an LDP LSP and the LDP LSR-ID of the corresponding LDP session to the next-hop is set to an address other than the system interface address.
- timeout
-
Specifies the time, in seconds, used to override the default timeout value and is the amount of time that the router waits for a message reply after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. A request timeout message is displayed by the CLI for each message request sent that expires. Any response received after the request times out is silently discarded.
Platforms
All
Output
Output Example*A:Dut-A# oam lsp-trace prefix 10.20.1.6/32 downstream-map-tlv ddmap path-
destination 127.0.0.1 detail lsp-trace to 10.20.1.6/
32: 0 hops min, 0 hops max, 152 byte packets
1 10.20.1.2 rtt=3.44ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=127.0.0.1 ifaddr=0 iftype=ipv4Unnumbered MRU=1500
label[1]=131070 protocol=3(LDP)
2 10.20.1.4 rtt=4.65ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=127.0.0.1 ifaddr=0 iftype=ipv4Unnumbered MRU=1500
label[1]=131071 protocol=3(LDP)
3 10.20.1.6 rtt=7.63ms rc=3(EgressRtr) rsc=1 *A:Dut-A#
*A:Dut-C# oam lsp-trace "p_1" detail
lsp-trace to p_1: 0 hops min, 0 hops max, 116 byte packets
1 10.20.1.2 rtt=3.46ms rc=8(DSRtrMatchLabel)
DS 1: ipaddr 10.20.1.4 ifaddr 3 iftype 'ipv4Unnumbered' MRU=1500 label=131071
proto=4(RSVP-TE)
2 10.20.1.4 rtt=3.76ms rc=8(DSRtrMatchLabel)
DS 1: ipaddr 10.20.1.6 ifaddr 3 iftype 'ipv4Unnumbered' MRU=1500 label=131071
proto=4(RSVP-TE)
3 10.20.1.6 rtt=5.68ms rc=3(EgressRtr)
*A:Dut-C#
lsp-trace over a numbered IP interface
A:Dut-C#
A:Dut-C# oam lsp-trace prefix 5.5.5.5/32 detail
lsp-trace to 5.5.5.5/32: 0 hops min, 0 hops max, 104 byte packets
1 6.6.6.6 rtt=2.45ms rc=8(DSRtrMatchLabel)
DS 1: ipaddr=5.6.5.1 ifaddr=5.6.5.1 iftype=ipv4Numbered MRU=1564 label=131071
proto=3(LDP)
2 5.5.5.5 rtt=4.77ms rc=3(EgressRtr)
A:Dut-C#
lsp-trace over an unnumbered IP interface
*A:Dut-A# oam lsp-trace prefix 10.20.1.6/32 downstream-map-tlv ddmap path-
destination 127.0.0.1 detail lsp-trace to 10.20.1.6/
32: 0 hops min, 0 hops max, 152 byte packets
1 10.20.1.2 rtt=3.44ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=127.0.0.1 ifaddr=0 iftype=ipv4Unnumbered MRU=1500
label[1]=131070 protocol=3(LDP)
2 10.20.1.4 rtt=4.65ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=127.0.0.1 ifaddr=0 iftype=ipv4Unnumbered MRU=1500
label[1]=131071 protocol=3(LDP)
3 10.20.1.6 rtt=7.63ms rc=3(EgressRtr) rsc=1 *A:Dut-A#
*A:Dut-A# oam ldp-treetrace prefix 10.20.1.6/32
ldp-treetrace for Prefix 10.20.1.6/32:
127.0.0.1, ttl = 3 dst = 127.1.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
127.0.0.1, ttl = 3 dst = 127.2.0.255 rc = EgressRtr status = Done
Hops: 127.0.0.1 127.0.0.1
ldp-treetrace discovery state: Done
ldp-treetrace discovery status: ' OK '
Total number of discovered paths: 2
Total number of failed traces: 0
lsp-trace of a LDP IPv6 prefix FEC
*A:Dut-A# oam lsp-trace prefix fc00::a14:106/128 path-destination ::ffff:127.0.0.1
lsp-trace to fc00::a14:106/128: 0 hops min, 0 hops max, 224 byte packets
1 fc00::a14:102 rtt=1.61ms rc=8(DSRtrMatchLabel) rsc=1
2 fc00::a14:103 rtt=3.51ms rc=8(DSRtrMatchLabel) rsc=1
3 fc00::a14:104 rtt=4.65ms rc=8(DSRtrMatchLabel) rsc=1
4 fc00::a14:106 rtt=7.02ms rc=3(EgressRtr) rsc=1
*A:Dut-A# oam lsp-trace prefix fc00::a14:106/128 path-destination ::ffff:127.0.0.2
lsp-trace to fc00::a14:106/128: 0 hops min, 0 hops max, 224 byte packets
1 fc00::a14:102 rtt=1.90ms rc=8(DSRtrMatchLabel) rsc=1
2 fc00::a14:103 rtt=3.10ms rc=8(DSRtrMatchLabel) rsc=1
3 fc00::a14:105 rtt=4.61ms rc=8(DSRtrMatchLabel) rsc=1
4 fc00::a14:106 rtt=6.45ms rc=3(EgressRtr) rsc=1
lsp-trace over SR-ISIS
*A:Dut-A# oam lsp-trace sr-isis prefix 10.20.1.6/32 igp-instance 0 detail
lsp-trace to 10.20.1.6/32: 0 hops min, 0 hops max, 108 byte packets
1 10.20.1.2 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=10.10.4.4 ifaddr=10.10.4.4 iftype=ipv4Numbered MRU=1496
label[1]=26406 protocol=6(ISIS)
2 10.20.1.4 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=10.10.9.6 ifaddr=10.10.9.6 iftype=ipv4Numbered MRU=1496
label[1]=26606 protocol=6(ISIS)
3 10.20.1.6 rtt=1220324ms rc=3(EgressRtr) rsc=1
*A:Dut-E# oam lsp-trace prefix 10.20.1.2/32 detail downstream-map-tlv ddmap
lsp-trace to 10.20.1.2/32: 0 hops min, 0 hops max, 108 byte packets
1 10.20.1.3 rtt=3.25ms rc=15(LabelSwitchedWithFecChange) rsc=1
DS 1: ipaddr=10.10.3.2 ifaddr=10.10.3.2 iftype=ipv4Numbered MRU=1496
label[1]=26202 protocol=6(ISIS)
fecchange[1]=POP fectype=LDP IPv4 prefix=10.20.1.2 remotepeer=0.0.0.0 (Unknown)
fecchange[2]=PUSH fectype=SR Ipv4 Prefix prefix=10.20.1.2 remotepeer=10.10.3.2
2 10.20.1.2 rtt=4.32ms rc=3(EgressRtr) rsc=1
*A:Dut-E#
*A:Dut-B# oam lsp-trace prefix 10.20.1.5/32 detail downstream-map-tlv ddmap sr-isis
lsp-trace to 10.20.1.5/32: 0 hops min, 0 hops max, 108 byte packets
1 10.20.1.3 rtt=2.72ms rc=15(LabelSwitchedWithFecChange) rsc=1
DS 1: ipaddr=10.11.5.5 ifaddr=10.11.5.5 iftype=ipv4Numbered MRU=1496
label[1]=262143 protocol=3(LDP)
fecchange[1]=POP fectype=SR Ipv4 Prefix prefix=10.20.1.5 remotepeer=0.0.0.0 (Unknown)
fecchange[2]=PUSH fectype=LDP IPv4 prefix=10.20.1.5 remotepeer=10.11.5.5
2 10.20.1.5 rtt=4.43ms rc=3(EgressRtr) rsc=1
lsp-trace over SR policy
# ipv4 sr-policy lsp-trace
*A:Dut-A# oam lsp-trace sr-policy color 2 endpoint 10.20.1.6 downstream-map-tlv ddmap path-destination 127.1.1.1 detail lsp-trace to color 2 endpoint 10.20.1.6: 0 hops min, 0 hops max, 188 byte packets
1 10.20.1.2 rtt=1220323ms rc=3(EgressRtr) rsc=4
1 10.20.1.2 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
DS 1: ipaddr=10.10.3.3 ifaddr=10.10.3.3 iftype=ipv4Numbered MRU=1496
label[1]=28303 protocol=6(ISIS)
label[2]=28305 protocol=0(Unknown)
label[3]=28506 protocol=0(Unknown)
DS 2: ipaddr=10.10.12.3 ifaddr=10.10.12.3 iftype=ipv4Numbered MRU=1496
label[1]=28303 protocol=6(ISIS)
label[2]=28305 protocol=0(Unknown)
label[3]=28506 protocol=0(Unknown)
2 10.20.1.3 rtt=1220323ms rc=3(EgressRtr) rsc=3
2 10.20.1.3 rtt=1220324ms rc=8(DSRtrMatchLabel) rsc=2
DS 1: ipaddr=10.10.5.5 ifaddr=10.10.5.5 iftype=ipv4Numbered MRU=1496
label[1]=28505 protocol=6(ISIS)
label[2]=28506 protocol=0(Unknown)
DS 2: ipaddr=10.10.11.5 ifaddr=10.10.11.5 iftype=ipv4Numbered MRU=1496
label[1]=28505 protocol=6(ISIS)
label[2]=28506 protocol=0(Unknown)
3 10.20.1.5 rtt=1220325ms rc=3(EgressRtr) rsc=2
3 10.20.1.5 rtt=1220325ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=10.10.10.6 ifaddr=10.10.10.6 iftype=ipv4Numbered MRU=1496
label[1]=28606 protocol=6(ISIS)
4 10.20.1.6 rtt=1220325ms rc=3(EgressRtr) rsc=1
# ipv6 sr-policy lsp-trace
*A:Dut-A# oam lsp-trace sr-policy color 500 endpoint fc00::a14:106 lsp-trace to color 500 endpoint fc00::a14:106: 0 hops min, 0 hops max, 204 byte packets
1 fc00::a14:102 rtt=1220323ms rc=3(EgressRtr) rsc=4
1 fc00::a14:102 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
2 fc00::a14:103 rtt=1220323ms rc=3(EgressRtr) rsc=3 ^C *A:Dut-A# oam lsp-trace sr-policy color 500 endpoint fc00::a14:106 downstream-map-tlv ddmap path-destination ::ffff:127.1.1.1 detail lsp-trace to color 500 endpoint fc00::a14:106: 0 hops min, 0 hops max, 260 byte packets
1 fc00::a14:102 rtt=1220323ms rc=3(EgressRtr) rsc=4
1 fc00::a14:102 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
DS 1: ipaddr=fe80::c617:1ff:fe01:2 ifaddr=fe80::c617:1ff:fe01:2 iftype=ipv6Numbered MRU=1496
label[1]=28363 protocol=6(ISIS)
label[2]=28365 protocol=0(Unknown)
label[3]=28566 protocol=0(Unknown)
DS 2: ipaddr=fe80::c415:ffff:fe00:141 ifaddr=fe80::c415:ffff:fe00:141 iftype=ipv6Numbered MRU=1496
label[1]=28363 protocol=6(ISIS)
label[2]=28365 protocol=0(Unknown)
label[3]=28566 protocol=0(Unknown)
2 fc00::a14:103 rtt=1220323ms rc=3(EgressRtr) rsc=3
2 fc00::a14:103 rtt=1220324ms rc=8(DSRtrMatchLabel) rsc=2
DS 1: ipaddr=fe80::c61e:1ff:fe01:1 ifaddr=fe80::c61e:1ff:fe01:1 iftype=ipv6Numbered MRU=1496
label[1]=28565 protocol=6(ISIS)
label[2]=28566 protocol=0(Unknown)
DS 2: ipaddr=fe80::c61e:1ff:fe01:5 ifaddr=fe80::c61e:1ff:fe01:5 iftype=ipv6Numbered MRU=1496
label[1]=28565 protocol=6(ISIS)
label[2]=28566 protocol=0(Unknown)
3 fc00::a14:105 rtt=1220325ms rc=3(EgressRtr) rsc=2
3 fc00::a14:105 rtt=1220325ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=fe80::c420:1ff:fe01:2 ifaddr=fe80::c420:1ff:fe01:2 iftype=ipv6Numbered MRU=1496
label[1]=28666 protocol=6(ISIS)
4 fc00::a14:106 rtt=1220326ms rc=3(EgressRtr) rsc=1 *A:Dut-A#
lsp-trace over SR-TE
*A:Dut-A# oam lsp-trace sr-te "srteABCEDF" downstream-map-tlv ddmap detail
lsp-trace to srteABCEDF: 0 hops min, 0 hops max, 252 byte packets
1 10.20.1.2 rtt=1220323ms rc=3(EgressRtr) rsc=5
1 10.20.1.2 rtt=1220322ms rc=8(DSRtrMatchLabel) rsc=4
DS 1: ipaddr=10.10.33.3 ifaddr=10.10.33.3 iftype=ipv4Numbered MRU=1520
label[1]=3 protocol=6(ISIS)
label[2]=262135 protocol=6(ISIS)
label[3]=262134 protocol=6(ISIS)
label[4]=262137 protocol=6(ISIS)
2 10.20.1.3 rtt=1220323ms rc=3(EgressRtr) rsc=4
2 10.20.1.3 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
DS 1: ipaddr=10.10.5.5 ifaddr=10.10.5.5 iftype=ipv4Numbered MRU=1496
label[1]=3 protocol=6(ISIS)
label[2]=262134 protocol=6(ISIS)
label[3]=262137 protocol=6(ISIS)
3 10.20.1.5 rtt=1220325ms rc=3(EgressRtr) rsc=3
3 10.20.1.5 rtt=1220325ms rc=8(DSRtrMatchLabel) rsc=2
DS 1: ipaddr=10.10.11.4 ifaddr=10.10.11.4 iftype=ipv4Numbered MRU=1496
label[1]=3 protocol=6(ISIS)
label[2]=262137 protocol=6(ISIS)
4 10.20.1.4 rtt=1220324ms rc=3(EgressRtr) rsc=2
4 10.20.1.4 rtt=1220325ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=10.10.9.6 ifaddr=10.10.9.6 iftype=ipv4Numbered MRU=1496
label[1]=3 protocol=6(ISIS)
5 10.20.1.6 rtt=1220325ms rc=3(EgressRtr) rsc=1
*A:Dut-A# oam lsp-trace sr-te "srteABCE_loose" downstream-map-tlv ddmap detail
lsp-trace to srteABCE_loose: 0 hops min, 0 hops max, 140 byte packets
1 10.20.1.2 rtt=1220323ms rc=3(EgressRtr) rsc=3
1 10.20.1.2 rtt=1220322ms rc=8(DSRtrMatchLabel) rsc=2
DS 1: ipaddr=10.10.3.3 ifaddr=10.10.3.3 iftype=ipv4Numbered MRU=1496
label[1]=26303 protocol=6(ISIS)
label[2]=26305 protocol=6(ISIS)
DS 2: ipaddr=10.10.12.3 ifaddr=10.10.12.3 iftype=ipv4Numbered MRU=1496
label[1]=26303 protocol=6(ISIS)
label[2]=26305 protocol=6(ISIS)
DS 3: ipaddr=10.10.33.3 ifaddr=10.10.33.3 iftype=ipv4Numbered MRU=1496
label[1]=26303 protocol=6(ISIS)
label[2]=26305 protocol=6(ISIS)
2 10.20.1.3 rtt=1220323ms rc=3(EgressRtr) rsc=2
2 10.20.1.3 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=10.10.5.5 ifaddr=10.10.5.5 iftype=ipv4Numbered MRU=1496
label[1]=26505 protocol=6(ISIS)
DS 2: ipaddr=10.10.11.5 ifaddr=10.10.11.5 iftype=ipv4Numbered MRU=1496
label[1]=26505 protocol=6(ISIS)
3 10.20.1.5 rtt=1220324ms rc=3(EgressRtr) rsc=1
*A:Dut-F# oam lsp-trace sr-te "srteFECBA_eth" path-destination ::ffff:127.1.1.1 detail
lsp-trace to srteFECBA_eth: 0 hops min, 0 hops max, 336 byte packets
1 fc00::a14:105 rtt=1220323ms rc=3(EgressRtr) rsc=4
1 fc00::a14:105 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
DS 1: ipaddr=fe80::c618:2ff:fe01:1 ifaddr=fe80::c618:2ff:fe01:1 iftype=ipv6Numbered MRU=1496
label[1]=28363 protocol=6(ISIS)
label[2]=74032 protocol=6(ISIS)
label[3]=28261 protocol=6(ISIS)
DS 2: ipaddr=fe80::c618:2ff:fe01:2 ifaddr=fe80::c618:2ff:fe01:2 iftype=ipv6Numbered MRU=1496
label[1]=28363 protocol=6(ISIS)
label[2]=74032 protocol=6(ISIS)
label[3]=28261 protocol=6(ISIS)
2 fc00::a14:103 rtt=1220324ms rc=3(EgressRtr) rsc=3
2 fc00::a14:103 rtt=1220324ms rc=8(DSRtrMatchLabel) rsc=2
DS 1: ipaddr=fe80::c613:1ff:fe01:3 ifaddr=fe80::c613:1ff:fe01:3 iftype=ipv6Numbered MRU=1496
label[1]=3 protocol=6(ISIS)
label[2]=28261 protocol=6(ISIS)
3 fc00::a14:102 rtt=1220325ms rc=3(EgressRtr) rsc=2
3 fc00::a14:102 rtt=1220325ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=fe80::c0ea:1ff:fe01:1 ifaddr=fe80::c0ea:1ff:fe01:1 iftype=ipv6Numbered MRU=1496
label[1]=28161 protocol=6(ISIS)
4 fc00::a14:101 rtt=1220325ms rc=3(EgressRtr) rsc=1
lsp-trace with sr-ospf3
# sr-ospf3 lsp-trace
*A:Dut-A# oam lsp-trace sr-ospf3 prefix fc00::a14:106/128 detail lsp-trace to fc00::a14:106/128: 0 hops min, 0 hops max, 164 byte packets
1 fc00::a14:102 rtt=1.33ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=fe80::c61c:1ff:fe01:1 ifaddr=fe80::c61c:1ff:fe01:1 iftype=ipv6Numbered MRU=1496
label[1]=29466 protocol=5(OSPF)
2 fc00::a14:104 rtt=2.27ms rc=8(DSRtrMatchLabel) rsc=1
DS 1: ipaddr=fe80::c420:1ff:fe01:1 ifaddr=fe80::c420:1ff:fe01:1 iftype=ipv6Numbered MRU=1496
label[1]=29666 protocol=5(OSPF)
3 fc00::a14:106 rtt=2.50ms rc=3(EgressRtr) rsc=1
First egress label with lsp-trace
lsp-trace to srteABCEDF_loose: 0 hops min, 0 hops max, 216 byte packets 0 10.20.1.1
DS 1: ipaddr=10.101.1.2 ifaddr=10.101.1.2 iftype=ipv4Numbered MRU=1496
label[1]=26202 protocol=6(ISIS)
label[2]=26203 protocol=6(ISIS)
label[3]=26305 protocol=6(ISIS)
label[4]=26504 protocol=6(ISIS)
label[5]=26406 protocol=6(ISIS)
1 10.20.1.2 rtt=1220323ms rc=3(EgressRtr) rsc=5
1 10.20.1.2 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=4
DS 1: ipaddr=10.10.3.3 ifaddr=10.10.3.3 iftype=ipv4Numbered MRU=1496
label[1]=26303 protocol=6(ISIS)
label[2]=26305 protocol=6(ISIS)
label[3]=26504 protocol=6(ISIS)
label[4]=26406 protocol=6(ISIS)
DS 2: ipaddr=10.10.12.3 ifaddr=10.10.12.3 iftype=ipv4Numbered MRU=1496
label[1]=26303 protocol=6(ISIS)
label[2]=26305 protocol=6(ISIS)
label[3]=26504 protocol=6(ISIS)
label[4]=26406 protocol=6(ISIS)
2 10.20.1.3 rtt=1220323ms rc=3(EgressRtr) rsc=4
2 10.20.1.3 rtt=1220323ms rc=8(DSRtrMatchLabel) rsc=3
DS 1: ipaddr=10.10.5.5 ifaddr=10.10.5.5 iftype=ipv4Numbered MRU=1496
label[1]=26505 protocol=6(ISIS)
label[2]=26504 protocol=6(ISIS)
label[3]=26406 protocol=6(ISIS)
DS 2: ipaddr=10.10.11.5 ifaddr=10.10.11.5 iftype=ipv4Numbered MRU=1496
label[1]=26505 protocol=6(ISIS)
label[2]=26504 protocol=6(ISIS)
label[3]=26406 protocol=6(ISIS)
lsp-trace
Syntax
lsp-trace
Context
[Tree] (config>saa>test>type-multi-line lsp-trace)
Full Context
configure saa test type-multi-line lsp-trace
Description
This command creates the context to perform an LSP traceroute using the protocol and data structures defined in IETF RFC 4379 (obsoleted by RFC 8029).
Platforms
All
lsp-wait
lsp-wait
Syntax
lsp-wait lsp-wait [lsp-initial-wait lsp-initial-wait] [lsp-second-wait lsp-second-wait]
no lsp-wait
Context
[Tree] (config>service>vpls>spb>timers lsp-wait)
Full Context
configure service vpls spb timers lsp-wait
Description
This command is used to customize LSP generation throttling. Timers that determine when to generate the first, second and subsequent LSPs can be controlled with this command. Subsequent LSPs are generated at increasing intervals of the second lsp-wait timer until a maximum value is reached.
The IS-IS timer granularity is 100 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Parameters
- lsp-wait
-
Specifies the maximum interval in milliseconds between two consecutive occurrences of an LSP being generated.
- lsp-initial-wait
-
Specifies the initial LSP generation delay in milliseconds. Values < 100 ms are internally rounded down to 0, so that there is no added initial LSP generation delay.
- lsp-second-wait
-
Specifies the hold time in milliseconds between the first and second LSP generation.
Platforms
All
lsp-wait
Syntax
lsp-wait lsp-waitlsp-initial-wait [initial-wait] [lsp-second-wait second-wait]
Context
[Tree] (config>service>vprn>isis>timers lsp-wait)
Full Context
configure service vprn isis timers lsp-wait
Description
This command is used to customize LSP generation throttling. Timers that determine when to generate the first, second, and subsequent LSPs can be controlled with this command. Subsequent LSPs are generated at increasing intervals of the second lsp-wait timer until a maximum value is reached.
The timer granularity is 10 ms if the value is < 500 ms, and 100 ms if the value is ≥ 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Parameters
- lsp-wait
-
Specifies the maximum interval, in milliseconds, between two consecutive occurrences of an LSP being generated.
- initial-wait
-
Specifies the initial LSP generation delay, in milliseconds. Values less than 100 ms are internally rounded down to 0, so that there is no added initial LSP generation delay.
- second-wait
-
Specifies the hold time, in milliseconds, between the first and second LSP generation.
Platforms
All
lsp-wait
Syntax
lsp-wait lsp-wait [lsp-initial-wait initial-wait] [lsp-second-wait second-wait]
Context
[Tree] (config>router>isis>timers lsp-wait)
Full Context
configure router isis timers lsp-wait
Description
This command customizes LSP generation throttling. Timers that determine when to generate the first, second and subsequent LSPs can be controlled with this command. Subsequent LSPs are generated at increasing intervals of the second lsp-wait timer until a maximum value is reached.
The timer granularity is 10 ms if the value is less than 500 ms, and 100 ms if the value is greater than or equal to 500 ms. Timer values are rounded down to the nearest granularity, for example a configured value of 550 ms is internally rounded down to 500 ms.
Default
lsp-wait 5000 lsp-initial-wait 10 lsp-second-wait 1000
Parameters
- lsp-max-wait
-
Specifies the maximum interval in milliseconds between two consecutive occurrences of an LSP being generated.
- initial-wait
-
Specifies the initial LSP generation delay in milliseconds. Values less than 100 ms are internally rounded down to 0, so that there is no added initial LSP generation delay.
- second-wait
-
Specifies the hold time in milliseconds between the first and second LSP generation.
Platforms
All
lsr-label-route
lsr-label-route
Syntax
lsr-label-route [{none | all}]
Context
[Tree] (config>router>ttl-propagate lsr-label-route)
Full Context
configure router ttl-propagate lsr-label-route
Description
This command configures the TTL propagation for transit packets at a router acting as an LSR for a BGP label route.
When an LSR swaps the BGP label for a ipv4 prefix packet, therefore acting as a ABR, ASBR, or data-path Route-Reflector (RR) in the base routing instance, or swaps the BGP label for a vpn-ipv4 or vpn-ipv6 prefix packet, therefore acting as an inter-AS Option B VPRN ASBR or VPRN data path Route-Reflector (RR), the all value of this command enables TTL propagation of the decremented TTL of the swapped BGP label into all outgoing LDP or RSVP transport labels.
When an LSR swaps a label or stitches a label, it always writes the decremented TTL value into the outgoing swapped or stitched label. What this feature controls is whether this decremented TTL value is also propagated to the transport label stack pushed on top of the swapped or stitched label.
The none value reverts to the default mode which disables TTL propagation. This changes the existing default behavior which propagates the TTL to the transport label stack. When a customer upgrades, the new default becomes in effect. This command does not have a no version.
This feature also controls the TTL propagation at an LDP-BGP stitching LSR in the LDP to BGP stitching direction. It also controls the TTL propagation in Carrier Supporting Carrier (CsC) VPRN at both the CsC CE and CsC PE.
SR OS does not support ASBR or data path RR functionality for labeled IPv6 routes in the global routing instance (6PE). As such the CLI command of this feature has no impact on prefix packets forwarded in this context.
Default
lsr-label-route none
Parameters
- none
-
Specifies that the TTL of the swapped label is not propagated into the transport label stack.
- all
-
Specifies that the TTL of the swapped label is propagated into all labels of the transport label stack.
Platforms
All
lsr-load-balancing
lsr-load-balancing
Syntax
lsr-load-balancing hashing-algorithm
no lsr-load-balancing
Context
[Tree] (config>service>vprn>nw-if>load-balancing lsr-load-balancing)
Full Context
configure service vprn network-interface load-balancing lsr-load-balancing
Description
This command specifies whether the IP header is used in the LAG and ECMP LSR hashing algorithm. This is the per interface setting.
Default
no lsr-load-balancing
Parameters
- lbl-only
-
Only the label is used in the hashing algorithm.
- lbl-ip
-
The IP header is included in the hashing algorithm.
- ip-only
-
The IP header is used exclusively in the hashing algorithm.
- eth-encap-ip
-
The hash algorithm parses down the label stack and once it hits the bottom, the stack assumes Ethernet II non-tagged/dot1q or qinq header follows. At the expected Ethertype offset location, algorithm checks whether the value present is IPv4/v6 (0x0800 or 0x86DD). If the check passes, the hash algorithm checks the first nibble at the expected IP header location for IPv4/IPv6 (0x0100/0x0110). If the secondary check passes, the hash is performed using IP SA/DA fields in the expected IP header; otherwise (if any of the checks failed) label-stack hash is performed.
Platforms
All
lsr-load-balancing
Syntax
lsr-load-balancing {lbl-only | lbl-ip | ip-only | eth-encap-ip | lbl-ip-l4-teid}
no lsr-load-balancing
Context
[Tree] (config>router>if>load-balancing lsr-load-balancing)
Full Context
configure router interface load-balancing lsr-load-balancing
Description
This command specifies whether the IP header is used in the LAG and ECMP LSR hashing algorithm. This is the per interface setting.
Default
no lsr-load-balancing
Parameters
- lbl-only
-
Specifies that only the label is used in the hashing algorithm
- lbl-ip
-
Specifies that only the IP header is included in the hashing algorithm.
- ip-only
-
Specifies that only the IP header is used exclusively in the hashing algorithm
- eth-encap-ip
-
Specifies that the hash algorithm parses down the label stack and once it hits the bottom, the stack assumes Ethernet II non-tagged/dot1q or qinq header follows. At the expected Ethertype offset location, algorithm checks whether the value present is IPv4/v6 (0x0800 or0x86DD). If the check passes, the hash algorithm checks the first nibble at the expected IP header location for IPv4/IPv6 (0x0100/0x0110). If the secondary check passes, the hash is performed using IP SA/DA fields in the expected IP header; otherwise (any of the check failed) label-stack hash is performed.
- lbl-ip-l4-teid
-
Specifies that this hashing algorithm hashes based on label, IP header, Layer 4 header and GTP header (TEID) in order. The algorithm uses all the supported headers that are found in the header fragment of incoming traffic.
Platforms
All
lsr-load-balancing
Syntax
lsr-load-balancing hashing-algorithm
no lsr-load-balancing
Context
[Tree] (config>system>load-balancing lsr-load-balancing)
Full Context
configure system load-balancing lsr-load-balancing
Description
This command configures system-wide LSR load balancing. Hashing can be enabled on the label stack and/or IP header at an LSR for spraying labeled IP packets over multiple equal cost paths and/or over multiple links of a LAG group.
The LSR hash routine operates on the label stack and the IP header if a packet is IPv4. An LSR will consider a packet to be IPv4 if the first nibble following the bottom of the label stack is 4. The hash on label and IPv4 and IPv6 headers can be enabled or disabled at the system level or incoming network IP interface level.
Default
no lsr-load-balancing
Parameters
- lbl-only
-
Specifies that only the label is used in the hashing algorithm
- lbl-ip
-
Specifies that the IP header is included in the hashing algorithm
- ip-only
-
Specifies that the IP header is used exclusively in the hashing algorithm
- eth-encap-ip
-
Specifies that the hash algorithm parses down the label stack and once it hits the bottom, the stack assumes Ethernet II non-tagged/dot1q or qinq header follows. At the expected Ethertype offset location, the algorithm checks whether the value present is IPv4/v6 (0x0800 or 0x86DD). If the check passes, the hash algorithm checks the first nibble at the expected IP header location for IPv4/IPv6 (0x0100/0x0110). If the secondary check passes, the hash is performed using IP SA/DA fields in the expected IP header; if any of the checks fail, the label-stack hash is performed.
- lbl-ip-l4-teid
-
Specifies that this hashing algorithm hashes based on label, IP header, Layer 4 header and GTP header (TEID) in order. The algorithm uses all the supported headers that are found in the header fragment of incoming traffic.
Platforms
All
lub-init-min-pir
lub-init-min-pir
Syntax
[no] lub-init-min-pir
Context
[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution lub-init-min-pir)
Full Context
configure qos adv-config-policy child-control bandwidth-distribution lub-init-min-pir
Description
This command enables new queues associated with a LUB context to use a minimum PIR similar to the effect of the limit-pir-zero-drain command. When a queue is initially created in a LUB context, it defaults to a zero value PIR until H-QoS has an opportunity to configure an offered rate based operational PIR. Enabling this command forces a minimum rate operational PIR to be applied to the queue for use by enqueued packets prior to an H-QoS iteration.
The no form of this command reverts to default behavior.
Default
no lub-init-min-pir
Platforms
All