o Commands

Context

[Tree] (oam)

Full Context

oam

Description

Commands in this context use the OAM test suite.

Platforms

All

Context

[Tree] (config>service>vpls>gsmp>group>ancp oam)

[Tree] (config>service>vprn>gsmp>group>ancp oam)

Full Context

configure service vpls gsmp group ancp oam

configure service vprn gsmp group ancp oam

Description

This command enables the GSMP ANCP OAM capability to be negotiated at startup of the GSMP connection.

The no form of this command disables the feature.

Platforms

All

Context

[Tree] (debug oam)

Full Context

debug oam

Description

This command enables OAM debugging.

Platforms

All

Context

[Tree] (oam oam-pm)

Full Context

oam oam-pm

Description

This command allows the operator to start and stop on-demand OAM-PM sessions.

Parameters

session-name

Identifies the session name, up to 32 characters, that the test is associated with.

dm

Specifies the MPLS delay measurement test that is affected by the command.

dmm

Specifies the DMM test that is affected by the command.

lmm

Specifies the LMM test that is affected by the command.

slm

Specifies the SLM test that is affected by the command.

twamp-light

Specifies the TWAMP-light test that is affected by the command.

start

Manually starts the test.

stop

Manually stops the test.

Platforms

All

Context

[Tree] (config oam-pm)

Full Context

configure oam-pm

Description

This is the top level context that contains the configuration parameters that defines storage parameters (including binning structures), availability/resiliency and the individual proactive, and on-demand tests used to gather the performance/statistical information.

Platforms

All

Context

[Tree] (config>router>mpls>mpls-tp oam-template)

Full Context

configure router mpls mpls-tp oam-template

Description

This command creates or edits an OAM template Generally applicable proactive OAM parameters are configured using templates. The top-level template is the OAM template.

Generic MPLS-TP OAM and fault management parameters are configured in the OAM Template.

Proactive CC/CV uses BFD and parameters such as Tx/Rx timer intervals, multiplier and other session/fault management parameters specific to BFD are configured using a BFD Template, which is referenced from the OAM template.

Default

no oam-template

Parameters

name

Specifies a text string name for the template of up to 32 characters in printable 7-bit ASCII, enclosed in double quotes. Named OAM templates are referenced from the MPLS-TP path MEP configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>mpls>lsp>working-tp-path>mep oam-template)

[Tree] (config>router>mpls>lsp>protect-tp-path>mep oam-template)

Full Context

configure router mpls lsp working-tp-path mep oam-template

configure router mpls lsp protect-tp-path mep oam-template

Description

This command applies an OAM template to an MPLS-TP working or protect path. It contains configuration parameters for proactive OAM mechanisms that can be enabled on the path; for example, BFD. Configuration of an OAM template is optional.

The no form of this command removes the OAM template from the path.

Default

no oam-template

Parameters

name

Specifies a text string name for the template up to 32 characters in printable 7-bit ASCII, enclosed in double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (debug>certificate ocsp)

Full Context

debug certificate ocsp

Description

This command enables debug output of the OCSP protocol for a CA profile.

The no form of this command disables the debug output.

Platforms

All

Context

[Tree] (config>system>security>pki>ca-profile ocsp)

Full Context

configure system security pki ca-profile ocsp

Description

Commands in this context configure OCSP parameters.

Platforms

All

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes octet-counters)

Full Context

configure aaa isa-radius-policy acct-include-attributes octet-counters

Description

This command enables the inclusion of the octet-counters attributes.

The no form of the command excludes octet-counters attributes.

Default

no octet-counters

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>aa>aa-from-sub-cntr octets-admitted-count)

[Tree] (config>log>acct-policy>cr>aa>aa-to-sub-cntr octets-admitted-count)

Full Context

configure log accounting-policy custom-record aa-specific from-aa-sub-counters octets-admitted-count

configure log accounting-policy custom-record aa-specific to-aa-sub-counters octets-admitted-count

Description

This command includes the admitted octet count in the AA subscriber's custom record and only applies to the 7750 SR.

The no form of this command excludes the admitted octet count.

Default

no octets-admitted-count

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>aa>aa-from-sub-cntr octets-denied-count)

[Tree] (config>log>acct-policy>cr>aa>aa-to-sub-cntr octets-denied-count)

Full Context

configure log accounting-policy custom-record aa-specific from-aa-sub-counters octets-denied-count

configure log accounting-policy custom-record aa-specific to-aa-sub-counters octets-denied-count

Description

This command includes the denied octet count in the AA subscriber's custom record and only applies to the 7750 SR.

The no form of this command excludes the denied octet count.

Default

no octets-denied-count

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>open-flow>of-switch of-controller)

Full Context

configure open-flow of-switch of-controller

Description

This command configures the OpenFlow controller for this OpenFlow switch and creates a context for the configuration of additional OpenFlow control channel parameters. Up to two controllers can be configured per OpenFlow switch instance.

The no form of this command deletes the controller for this OpenFlow switch instance.

Parameters

ip-address:port

Specifies the IP address and TCP port for the OpenFlow channel to the controller.

Values

ipv4-address	a.b.c.d:port
ipv6-address	[x:x:x:x:x:x:x:x]:port (eight 16-bit pieces)
	x: [0..FFFF]H
port	1 to 65535

Platforms

All

Context

[Tree] (config>open-flow of-switch)

Full Context

configure open-flow of-switch

Description

This command creates an OpenFlow switch instance.

The no form of the command deletes the OpenFlow switch instance from the context.

Default

no of-switch

Parameters

ofs-name

specifies the name of the OpenFlow switch instance, a string up to 32 characters.

ofs-id

Specifies the ID of the switch. This is used together with the chassis MAC address to generate the Datapath ID of the OpenFlow switch instance. If it is not configured, an automatically generated Datapath ID is assigned to the switch according to the order in which the OFS instance came up relative to other OFS instances on the node. The configuration should be saved after configuring the OFS ID. If the user originally configures the OFS without an OFS ID, and subsequently adds an OFS ID without saving the new configuration, the OFS may not get the same Datapath ID (which is allocated on a first-come, first-served basis in the absence of an OFS ID).

Values

1 to 8

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if>dhcp offer-selection)

[Tree] (config>service>vprn>sub-if>dhcp offer-selection)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp offer-selection)

Full Context

configure service ies subscriber-interface group-interface dhcp offer-selection

configure service vprn subscriber-interface dhcp offer-selection

configure service vprn subscriber-interface group-interface dhcp offer-selection

Description

Commands in this context configure a discover delay to influence the offer selection of DHCPv4 clients.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>dhcp>server>pool offer-time)

[Tree] (config>router>dhcp>server>pool offer-time)

Full Context

configure service vprn dhcp local-dhcp-server pool offer-time

configure router dhcp local-dhcp-server pool offer-time

Description

This command configures the time interval during which a DHCP offer is valid.

The no form of this command reverts to the default.

Default

offer-time min 1

Parameters

time

Specifies the offer time.

Values

min minutes	0 to 10
sec seconds	0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>qos>adv-config-policy>child-control offered-measurement)

Full Context

configure qos adv-config-policy child-control offered-measurement

Description

This command modifies the offered rate measurement used to determine the bandwidth the queue or policer is requesting from its parent virtual scheduling context.

This command modifies the parameters that control the child requested bandwidth for all policers and queues associated with the policy.

Platforms

All

Context

[Tree] (config>system>time>dst-zone offset)

Full Context

configure system time dst-zone offset

Description

This command specifies the number of minutes that will be added to the time when summer time takes effect. The same number of minutes will be subtracted from the time when the summer time ends.

Default

offset 60

Parameters

offset

Specifies the number of minutes added to the time at the beginning of summer time and subtracted at the end of summer time, expressed as an integer.

Values

0 to 60

Default

60

Platforms

All

Context

[Tree] (config>router>rsvp>te-threshold-update on-cac-failure)

Full Context

configure router rsvp te-threshold-update on-cac-failure

Description

This command is used to enable a CAC failure-triggered IGP update.

The no form of this command should reset on-cac-failure to the default value and disable the CAC failure-triggered IGP update.

Default

no on-cac-failure

Platforms

All

Context

[Tree] (debug>diameter>node on-error)

Full Context

debug diameter node on-error

Description

This command debugs Diameter node errors. Only errors raised before the peer is determined. For example, there is no route for this message in the realm routing table, and therefore the peer cannot be determined.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>diam>node>peer on-error)

Full Context

debug diameter node peer on-error

Description

This command reports only peer error conditions.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>diam>application>policy on-error)

[Tree] (debug>diam>application on-error)

Full Context

debug diameter application policy on-error

debug diameter application on-error

Description

This command debugs Diameter application errors and reports only peer error conditions, for example, an unknown session-id.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy on-failure)

Full Context

configure subscriber-mgmt diameter-application-policy on-failure

Description

This command is applicable only to the R16.0R4 or later implementation of Diameter base in the SR OS.

This command configures session failure handling. The behavior of a Diameter application (Gx, Gy, or NASREQ) that fails to receive a response (an answer message CCA) to a transmitted request message (CCR) for a session, can be controlled by the Diameter server through two AVPs carried in CCA messages that are defined in RFC 4006, Diameter Credit-Control Application:

• CC-Session-Failover AVP

  • FAILOVER_NOT_SUPPORTED

  • FAILOVER_SUPPORTED

• Credit-Control-Failure-Handling AVP

  • TERMINATE

  • CONTINUE

  • RETRY_AND_TERMINATE

If those AVPs are not provided by the Diameter server, the local configuration provided by this command takes effect. This command defines the following:

• Retransmission behavior of the application in case that the response to a transmitted request message is not received. The Diameter base notifies the application after the lifetime of the transmitted request message expires (tx timeout) or the route to the destination-realm is unavailable. Depending on the configuration option, the application can then retransmit the message, or suppress retransmission.

• Handling behavior defines whether the session is terminated or continues to exist in absence of the response from the Diameter server.

Default

on-failure failover enabled handling terminate

Parameters

failover enabled

Specifies that application session is allowed to retransmit the request message (CCR).

failover disabled

Specifies that the application session is not allowed to retransmit the request message (CCR).

handling continue

Specifies that the sessions continues to exist if the response to a transmitted CCR message is not received. Whether the transmitted message is re-transmitted depends on the failover configuration. In case of session initiation procedure in the Gx case (CCR-I timeout), the subscriber host is nonetheless instantiated with the default parameters, assuming that they are provided. If the default parameter is not provided, the subscriber host initiation fails.

handling retry-and-terminate

Specifies that the message is re-transmitted in case that the failover is enabled. If the response to the retransmitted request message is not received (re-transmission times out), the application session is terminated.

handling terminate

Specifies that the session is terminated if the response to the original request message is not received. No re-transmissions is attempted, regardless of whether or not the failover is enabled.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy on-failure)

Full Context

configure subscriber-mgmt diameter-application-policy on-failure

Description

This command is applicable to both legacy (pre-Release 16.0.R4) and new (Release 16.0.R4 and later) implementations of Diameter base in the SR OS.

• Legacy Diameter base description:

  This command configures session failure handling. The behavior of the application’s session in case of a peer failure can be controlled by the Diameter server through two AVPs carried in CCA messages that are defined in RFC 4006, Diameter Credit-Control Application:

  • CC-Session-Failover AVP

    • FAILOVER_NOT_SUPPORTED

    • FAILOVER_SUPPORTED

  • Credit-Control-Failure-Handling AVP

    • TERMINATE

    • CONTINUE

    • RETRY_AND_TERMINATE

  If those AVPs are not provided by the Diameter server, the local configuration provided by this command will take effect. This command defines the following:

  • The peer-failover behavior to a secondary peer if the primary peer is unresponsive. From the application point of view, the primary peer is considered unresponsive if the request message that was sent to it, times out. The time out of the message is determined by the tx-timer command.

    The peer-failover action based on the request message timeout is defined per session. In other words, a request message timeout for one session cannot cause the failover for some other session.

    The maximum number of transmissions per session is hard-coded to 2 and the same message is never re-transmitted to the same TCP socket (a TCP socket is defined as a current peering connection defined by the TCP source/destination IP addresses/ports; closing and then reopening a connection to the same peer will result in creation of a new TCP socket). Once the original message for the session times out on the primary peer, the message is re-transmitted to the secondary peer, provided that the secondary peer is available and the failover is enabled with the corresponding handling mechanism. In case that the secondary peer is unavailable, the original message is not be re-transmitted to the same primary peer again.

    Once the reply from a peer is received, the session is tied to that peer until the next timeout. In other words, the session always sticks to the peer from which it received the last response.

  • The handling behavior if the response from the peer is not received or the peers are not available at all (all peering connections are closed). If the response to a session initiation message is not received, the fate of the session will depend on the configuration (the session can be terminated or continue to exist with default parameters).

• New Diameter base description:

  This command configures session failure handling. The behavior of a Diameter application (Gx, Gy, or NASREQ) that fails to receive a response (an answer message CCA) to a transmitted request message (CCR) for a session, can be controlled by the Diameter server through two AVPs carried in CCA messages that are defined in RFC 4006, Diameter Credit-Control Application:

  • CC-Session-Failover AVP

    • FAILOVER_NOT_SUPPORTED

    • FAILOVER_SUPPORTED

  • Credit-Control-Failure-Handling AVP

    • TERMINATE

    • CONTINUE

    • RETRY_AND_TERMINATE

  If those AVPs are not provided by the Diameter server, the local configuration provided by this command takes effect. This command defines the following:

  • Retransmission behavior of the application in case that the response to a transmitted request message is not received. The Diameter base notifies the application after the lifetime of the transmitted request message expires (tx timeout) or the route to the destination-realm is unavailable. Depending on the configuration option, the application can then retransmit the message, or suppress retransmission.

  • Handling behavior defines whether the session is terminated or continues to exist in absence of the response from the Diameter server.

Default

on-failure failover enabled handling terminate

Parameters

failover enabled

Specifies that application session is allowed to switch to the secondary peer (for legacy Diameter base). For new Diameter base, this keyword specifies that application session is allowed to retransmit the request message (CCR).

failover disabled

Specifies that the application session is not allowed to switch to the secondary peer (for legacy Diameter base). For new Diameter base, this keyword specifies that the application session is not allowed to retransmit the request message (CCR).

handling continue

Specifies that the sessions continue to exist if the response to a transmitted CCR message is not received. Whether the transmitted message is re-transmitted depends on the failover configuration. In case of session initiation procedure in the Gx case (CCR-I timeout), the subscriber host is nonetheless instantiated with the default parameters, assuming that they are provided. If the default parameter are not provided, the subscriber host initiation fails.

handling retry-and-terminate

Specifies that the message is re-transmitted if the peer-failover is enabled and the secondary peer is available. Once the retransmitted request message is timed out, the application session is terminated (for legacy Diameter base). For new Diameter base, this keyword specifies that the message is re-transmitted if the failover is enabled. If the response to the retransmitted request message is not received (re-transmission times out), the application session is terminated.

handling terminate

Specifies that the session is terminated if the response to the original request message is not received. No re-transmissions is attempted, regardless if the failover is enabled.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>rtr-adv>pfx-opt on-link)

[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv>pfx-opt on-link)

[Tree] (config>service>ies>sub-if>ipv6>rtr-adv>pfx-opt on-link)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv>pfx-opt on-link)

[Tree] (config>service>vprn>router-advert>if on-link)

Full Context

configure service vprn subscriber-interface group-interface ipv6 router-advertisements prefix-options on-link

configure service vprn subscriber-interface ipv6 router-advertisements prefix-options on-link

configure service ies subscriber-interface ipv6 router-advertisements prefix-options on-link

configure service ies subscriber-interface group-interface ipv6 router-advertisements prefix-options on-link

configure service vprn router-advert interface on-link

Description

This command specifies whether the prefix is assigned to an interface on the specified link.

The no form of this command reverts to the default.

Default

on-link

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>rtr-adv>pfx-opt>stateless on-link)

[Tree] (config>subscr-mgmt>rtr-adv>pfx-opt>stateful on-link)

Full Context

configure subscriber-mgmt router-advertisement-policy prefix-options stateless on-link

configure subscriber-mgmt router-advertisement-policy prefix-options stateful on-link

Description

This command specifies whether the prefix is to be assigned to an interface on the specified link.

The no form of this command reverts to the default.

Default

on-link

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>router-advert>if>prefix on-link)

Full Context

configure service vprn router-advertisement interface prefix on-link

Description

This command specifies whether the prefix can be used for onlink determination.

Default

on-link

Platforms

All

Context

[Tree] (config>router>router-advert>if>prefix on-link)

Full Context

configure router router-advertisement interface prefix on-link

Description

This command specifies whether the prefix can be used for on link determination.

Default

on link

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if>srrp one-garp-per-sap)

[Tree] (config>service>ies>sub-if>grp-if>srrp one-garp-per-sap)

Full Context

configure service vprn subscriber-interface group-interface srrp one-garp-per-sap

configure service ies subscriber-interface group-interface srrp one-garp-per-sap

Description

This command enables the sending of one gratuitous ARP to each SAP and is applicable to PPPoE only deployments in which there are multiple subnets under the subscriber interface. In such case, if the switchover occurs, it is sufficient to send a single Gratuitous ARP on every VLAN to update the Layer 2 forwarding path in the access aggregation network. This single gratuitous ARP will contain the IP address of the first GW address found under the subscriber interface address.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-prof one-time-http-redirection)

Full Context

configure subscriber-mgmt sla-profile one-time-http-redirection

Description

This command specify the one-time http redirection filter id. This filter will apply to the host when host is created, and is replaced by the sla-profile ingress filter (configured in the config>subscr-mgmt>sla-prof>ingress context) after first HTTP request from host has been redirected.

If 7750 SR receives filter insertion via CoA or access-accept when one-time redirection filter is still active then the received filter entries will only be applied to the sla-profile ingress filter. And after 1st http redirection, the original sla-profile ingress filter + received filter will replace the redirection filter.

The no form of this command reverts to the default.

Parameters

filter-id

Specifies the ID of filter that is used for HTTP redirection.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id one-time-http-redirection)

Full Context

debug service id one-time-http-redirection

Description

This command produces one-time HTTP redirection debug output.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm one-time-redirect)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm one-time-redirect)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt one-time-redirect

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt one-time-redirect

Description

This command enables one-time http-redirect to specify redirect URL for traffic matching the specified destination port.

The no form of this command reverts to the default.

Parameters

url rdr-url-string

Specifies the HTTP web address that is sent to the user’s browser.

port port-num

Specifies the destination port number as a decimal hex or binary.

Values

1 to 65535

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (oam>eth-cfm one-way-delay-test)

Full Context

oam eth-cfm one-way-delay-test

Description

This command issues an ETH-CFM one-way delay test.

Parameters

mac-address

Specifies a unicast destination MAC address.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

remote-mepid mep-id

Specifies the remote MEP ID of the peer within the association. The domain and association information are derived from the source mep for the session. The Layer 2 IEEE MAC address is resolved from previously-learned remote MAC addressing, derived from the reception and processing of the ETH-CC PDU. The local MEP must be administratively enabled.

Values

1 to 8191

mep mep-id

Specifies the local MEP ID.

Values

1 to 8191

md-index

Specifies the MD index.

Values

1 to 4294967295

ma-index

Specifies the MA index.

Values

1 to 4294967295

priority

Specifies the priority.

Values

0 to 7

Default

7

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>ethernet>eth-cfm>mep one-way-delay-threshold)

[Tree] (config>eth-tunnel>path>eth-cfm>mep one-way-delay-threshold)

[Tree] (config>lag>eth-cfm>mep one-way-delay-threshold)

Full Context

configure port ethernet eth-cfm mep one-way-delay-threshold

configure eth-tunnel path eth-cfm mep one-way-delay-threshold

configure lag eth-cfm mep one-way-delay-threshold

Description

This command enables one way delay threshold time limit.

Default

one-way-delay-threshold 3

Parameters

seconds

Specifies the value, in seconds, for the threshold.

Values

0 to 600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>epipe>sap>eth-cfm>mep one-way-delay-threshold)

Full Context

configure service epipe sap eth-cfm mep one-way-delay-threshold

Description

This command enables/disables eth-test functionality on MEP.

Parameters

seconds

Specifies the one way-delay threshold in seconds.

Values

0 to 600

Default

3

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vpls>sap>eth-cfm>mep one-way-delay-threshold)

[Tree] (config>service>vpls>spoke-sdp>eth-cfm>mep one-way-delay-threshold)

Full Context

configure service vpls sap eth-cfm mep one-way-delay-threshold

configure service vpls spoke-sdp eth-cfm mep one-way-delay-threshold

Description

This command enables/disables eth-test functionality on MEP.

Parameters

seconds

Specifies the one way delay threshold, in seconds.

Values

0 to 600

Default

3

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep one-way-delay-threshold)

[Tree] (config>service>ies>if>sap>mep one-way-delay-threshold)

[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep one-way-delay-threshold)

Full Context

configure service ies interface spoke-sdp eth-cfm mep one-way-delay-threshold

configure service ies interface sap mep one-way-delay-threshold

configure service ies subscriber-interface group-interface sap eth-cfm mep one-way-delay-threshold

Description

This command enables one way delay threshold time limit.

Default

one-way-delay-threshold 3

Parameters

seconds

Specifies the value for the threshold.

Values

0 to 600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service ies interface spoke-sdp eth-cfm mep one-way-delay-threshold

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

• configure service ies subscriber-interface group-interface sap eth-cfm mep one-way-delay-threshold

Context

[Tree] (config>service>vprn>if>spoke-sdp>eth-cfm one-way-delay-threshold)

[Tree] (config>service>vprn>sub-if>grp-if>sap>eth-cfm one-way-delay-threshold)

[Tree] (config>service>vprn>if>sap>eth-cfm one-way-delay-threshold)

Full Context

configure service vprn interface spoke-sdp eth-cfm one-way-delay-threshold

configure service vprn subscriber-interface group-interface sap eth-cfm one-way-delay-threshold

configure service vprn interface sap eth-cfm one-way-delay-threshold

Description

This command enables one way delay threshold time limit.

Default

3 seconds

Parameters

priority

Specifies the value for the threshold.

Values

0 to 600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service vprn interface spoke-sdp eth-cfm one-way-delay-threshold
• configure service vprn interface sap eth-cfm one-way-delay-threshold

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

• configure service vprn subscriber-interface group-interface sap eth-cfm one-way-delay-threshold

Context

[Tree] (config>router>if>eth-cfm>mep one-way-delay-threshold)

Full Context

configure router interface eth-cfm mep one-way-delay-threshold

Description

This command enables a one-way delay threshold time limit.

Default

one-way-delay-threshold 3

Parameters

seconds

Specifies the value, in seconds, for the threshold.

Values

0 to 600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>eth-ring>path>eth-cfm>mep one-way-delay-threshold)

Full Context

configure eth-ring path eth-cfm mep one-way-delay-threshold

Description

This command configures a one way delay threshold time limit.

Default

one-way-delay-threshold 3

Parameters

seconds

Specifies the value, in seconds, for the threshold.

Values

0 to 600

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter>entry>action>insert-nsh>meta-data opaque-data)

Full Context

configure subscriber-mgmt isa-service-chaining vas-filter entry action insert-nsh meta-data opaque-data

Description

This command specifies 16-byte opaque data HEX string to be inserted in NSH meta-data (with MD-Type set to 1). The opaque data can also be provided (overridden) by AAA server. AAA server has precedence over static configuration. The opaque-data and insert-subscriber-id commands are mutually exclusive.

The no form of this command removes the HEX string from the configuration.

Parameters

hex-string

Specifies the HEX string up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>pcp-server-policy opcode)

Full Context

configure service nat pcp-server-policy opcode

Description

This command specifies the PCP opcodes supported by the PCP servers using this PCP policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>router>bgp open)

Full Context

debug router bgp open

Description

This command decodes and logs all sent and received open messages in the debug log.

The no form of this command disables debugging.

Parameters

neighbor ip-address

Debugs only events affecting the specified BGP neighbor.

Values

ipv4-address:

• a.b.c.d (host bits must be 0)

ipv6-address:

• x:x:x:x:x:x:x:x [-interface] (eight 16-bit pieces)

• x:x:x:x:x:x:d.d.d.d [-interface]

• x: [0 to FFFF]H

• d: [0 to 255]D

• interface: up to 32 characters for link local addresses

group name

Debugs only events affecting the specified peer group name, up to 64 characters, and associated neighbors.

Platforms

All

Context

[Tree] (config open-flow)

Full Context

configure open-flow

Description

This command enables configuration content for OpenFlow Hybrid Switch compatibility.

The no form of the command removes the OpenFlow configuration from the context.

Platforms

All

Context

[Tree] (config>router>if>extref openconfig)

[Tree] (config>service>vprn>if>extref openconfig)

Full Context

configure router interface external-reference openconfig

configure service vprn interface external-reference openconfig

Description

Commands in this context configure the OpenConfig reference key used to map a Nokia vendor-specific configuration and the OpenConfig state.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw oper-down-on-group-degrade)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw oper-down-on-group-degrade)

Full Context

configure service ies subscriber-interface group-interface wlan-gw oper-down-on-group-degrade

configure service vprn subscriber-interface group-interface wlan-gw oper-down-on-group-degrade

Description

This command operationally brings down the WLAN-GW group if the total number of operational WLAN-GW IOMs in the WLAN-GW group fall below the configured number of active WLAN-GW IOMs. This triggers withdrawal of the route to tunnel endpoint and subscriber subnets in routing.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>epipe oper-group)

Full Context

configure service epipe oper-group

Description

This command associates an operational group to the status of the Epipe. When this oper-group is used in Epipes with static VXLAN or BGP-EVPN, the oper-group behaves as follows:

• The Epipe (and the oper-group) goes down if a SAP or spoke SDP go oper-down due to admin shutdown, service shutdown, or non-DF status as a result of EVPN multi-homing single-active election.

• The Epipe (and oper-group) will go down if the Epipe's EVPN destination is removed (due to an EVPN AD per-EVI route withdrawal, for instance).

• The Epipe (and oper-group) will not go down if a static VXLAN destination exists and the egress VTEP is not in the global route-table.

The operational group must be monitored in a different service and not in the service where it is defined.

The no version of this command removes the oper-group association.

Parameters

name

Specifies the name of the oper-group, up to 32 characters.

Platforms

All

Context

[Tree] (config>service>vpls>bgp-evpn>vxlan oper-group)

[Tree] (config>service>vpls>bgp-evpn>srv6 oper-group)

[Tree] (config>service>system>bgp-evpn>eth-seg oper-group)

[Tree] (config>service>epipe>bgp-evpn>srv6 oper-group)

[Tree] (config>service>epipe>bgp-evpn>mpls oper-group)

[Tree] (config>service>vpls>bgp-evpn>mpls oper-group)

Full Context

configure service vpls bgp-evpn vxlan oper-group

configure service vpls bgp-evpn segment-routing-v6 oper-group

configure service system bgp-evpn ethernet-segment oper-group

configure service epipe bgp-evpn segment-routing-v6 oper-group

configure service epipe bgp-evpn mpls oper-group

configure service vpls bgp-evpn mpls oper-group

Description

This command adds the BGP EVPN MPLS, SRv6, or VXLAN instance or Ethernet Segment (ES) as a member of the operational group.

When configured on an ES, the state of the operational group depends on the state of the SAPs contained in the ES. The operational group transitions to up if at least one SAP in the ES is up. The operational group goes down when all the associated SAPs are operationally down. The ES operational group should be monitored on the LAG associated to the ES, along with single-active multi-homing, so that the NDF state can be signaled to the CE by LAG standby signaling.

When configured on a BGP EVPN instance, the operational group is up when it is either empty (meaning that the operational group has no members) or at least an EVPN destination is created under the EVPN instance added as member. When configured, no other SAP, SDP binding, or BGP EVPN instance can be added to the same operational group within the same or a different service.

The operational group is down when the following apply:

• on a BGP EVPN instance

• the service is disabled

• the BGP EVPN MPLS, VXLAN or SRv6 instance are disabled

• all the EVPN destinations in the instance are removed

Default

no oper-group

Parameters

name

Specifies the name of the operational group, up to 32 characters.

Platforms

All

• configure service system bgp-evpn ethernet-segment oper-group
• configure service epipe bgp-evpn mpls oper-group
• configure service vpls bgp-evpn vxlan oper-group
• configure service vpls bgp-evpn mpls oper-group

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

• configure service vpls bgp-evpn segment-routing-v6 oper-group
• configure service epipe bgp-evpn segment-routing-v6 oper-group

Context

[Tree] (config>service>epipe>vxlan>egr-vtep oper-group)

Full Context

configure service epipe vxlan egr-vtep oper-group

Description

This command associates an operational group to the VXLAN static egress VTEP. If the egress VTEP IP disappears from the routing table, the oper-group status will become operationally down.

The operational group must be monitored in a different service and not in the service where it is defined.

The no version of this command removes the oper-group association.

Parameters

name

Specifies the name of the oper-group, up to a maximum of 32 characters.

Platforms

All

Context

[Tree] (config>service>epipe>sap oper-group)

Full Context

configure service epipe sap oper-group

Description

This command configures the operational group identifier.

The no form of this command removes the group name from the configuration.

Parameters

group-name

Specifies the Operational-Group identifier up to 32 characters in length.

Platforms

All

Context

[Tree] (config>service>vpls>sap oper-group)

[Tree] (config>service>vpls>bgp>pw-template-binding oper-group)

[Tree] (config>service>vpls>spoke-sdp oper-group)

Full Context

configure service vpls sap oper-group

configure service vpls bgp pw-template-binding oper-group

configure service vpls spoke-sdp oper-group

Description

This command associates the context to which it is configured to the operational group specified in the group-name. The oper-group oper-name must be already configured under config>service context before its name is referenced in this command.

The no form of this command removes the association.

Default

no oper-group

Parameters

group-name

Specifies a character string of maximum 32 ASCII characters identifying the group instance.

Platforms

All

Context

[Tree] (config>service>ies>if>vrrp oper-group)

Full Context

configure service ies interface vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up and is down for all other VRRP states.

The no form of this command removes the association.

Default

no oper-group

Parameters

group-name

Specifies the operational group identifier up to 32 characters in length.

Platforms

All

Context

[Tree] (config>service>vprn>if>ipv6>vrrp oper-group)

[Tree] (config>service>vprn>if>vrrp oper-group)

Full Context

configure service vprn interface ipv6 vrrp oper-group

configure service vprn interface vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up and is down for all other VRRP states.

The no form of this command removes the association.

Default

no oper-group — No operational group is configured.

Parameters

group-name

Specifies the operational group identifier, up to 32 characters in length.

Platforms

All

Context

[Tree] (config>router>if>vrrp oper-group)

[Tree] (config>router>if>ipv6>vrrp oper-group)

Full Context

configure router interface vrrp oper-group

configure router interface ipv6 vrrp oper-group

Description

This command configures VRRP to associate with an operational group. When associated, VRRP notifies the operational group of its state changes so that other protocols can monitor it to provide a redundancy mechanism. When VRRP is the master router (MR), the operational group is up; the operational group is down for all other VRRP states.

The no form of the command removes the association.

Default

no oper-group — No operational group is configured.

Parameters

group-name

Specifies the operational group identifier, up to 32 characters.

Platforms

All

Context

[Tree] (config>service oper-group)

Full Context

configure service oper-group

Description

This command creates a system-wide group (operational group) name which can be used to associate a number of service objects (for example, SAPs or pseudowires). The status of the group is derived from the status of its members. The status of the group can then be used to influence the status of non-member objects. For example, when a group status is marked as down, the object(s) that monitor the group change their status accordingly.

The no form of the command removes the group. All the object associations need to be removed before the no form of the command can be executed.

Default

no oper-group

Parameters

group-name

Specifies the operational group identifier up to 32 characters in length.

create

This keyword is required when first creating the configuration context. Once the context is created, it is possible to navigate into the context without the create keyword.

Platforms

All

Context

[Tree] (config>service>vprn>isis>link-group>level oper-members)

Full Context

configure service vprn isis link-group level oper-members

Description

This command sets the threshold for the minimum number of operational links for the associated link-group. If the number of operational links drops below this threshold, the configured offsets are applied. For example, oper-members=3. The metric of the member interfaces is increased when the number of interfaces is lower than 3.

The no form of this command reverts the oper-members limit to 1.

Default

no oper-members

Parameters

oper-members

Specifies the number of operational members.

Values

0 to 8

Platforms

All

Context

[Tree] (config>router>isis>link-group>level oper-members)

Full Context

configure router isis link-group level oper-members

Description

This command sets the threshold for the minimum number of operational links for the associated link-group. If the number of operational links drops below this threshold, the configured offsets are applied. For example, oper-members=3. The metric of the member interfaces is increased when the number of interfaces is lower than 3.

The no form of this command reverts the oper-members limit to 1.

Default

oper-members 1

Parameters

value

Specifies the threshold for operational members.

Values

1 to 8

Platforms

All

Context

[Tree] (config>service>epipe>pw-port oper-up-on-mhstandby)

Full Context

configure service epipe pw-port oper-up-on-mhstandby

Description

This command causes the PW port to remain operationally up on the non-DF PE as well as all the PW SAPs contained in the PW port.

The PW port status shows an operationally up status with a flag MH Standby.

The no form of this command causes the PW port to remain operationally down on the non-DF PE as well as all the PW SAPs contained in the PW port.

Default

no oper-up-on-mhstandby

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if oper-up-while-empty)

[Tree] (config>service>ies>sub-if>grp-if oper-up-while-empty)

Full Context

configure service vprn subscriber-interface group-interface oper-up-while-empty

configure service ies subscriber-interface group-interface oper-up-while-empty

Description

This command allows the subscriber interface to treat this group interface to be operationally enabled without any active SAPs.

This command is typically used with MSAPs where advertising the subnet prior to having a MSAP dynamically created is needed.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>management-interface operations)

Full Context

configure system management-interface operations

Description

Commands in this context configure parameters associated with operational commands in model-driven interfaces.

Platforms

All

Context

[Tree] (config>subscr-mgmt>igmp-policy>mcast-reporting opt-reporting-fields)

Full Context

configure subscriber-mgmt igmp-policy mcast-reporting opt-reporting-fields

Description

This command specifies optional data relevant to the IGMP event that can be exported. This optional data includes:

• Host MAC address

• PPPoE session-ID

• Service ID

• SAP

The no form of this command reverts to the default value.

Parameters

host-mac

Specifies that the host-mac optional field should be included into the multicast reporting messages.

pppoe-session-id

Specifies that the pppoe-session-id optional field should be included into the multicast reporting messages.

svc-id

Specifies that the svc-id optional field should be included into the multicast reporting messages.

sap-id

Specifies that the sap-id optional field should be included into the multicast reporting messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>transceiver optical-line-system)

Full Context

configure port transceiver optical-line-system

Description

This command enables the QSFP-LS pluggable optical line system, used in conjunction with 400G ZR/ZR+ coherent pluggable modules.

The no form of this command reverts to the default.

Default

no optical-line-system

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>bgp optimal-route-reflection)

Full Context

configure router bgp optimal-route-reflection

Description

This command creates the optimal route reflection context.

Platforms

All

Context

[Tree] (config>system>cpm-http-redirect optimized-mode)

Full Context

configure system cpm-http-redirect optimized-mode

Description

This command enables the cpm-http-redirect optimized-mode. The optimized-mode improves the scale of HTTP redirect sessions supported system wide.

Default

optimized-mode

Platforms

All

Context

[Tree] (config>filter>dhcp-filter>entry option)

Full Context

configure filter dhcp-filter entry option

Description

This command configures match criteria for the DHCP filter policy entry.

The no form of this command reverts to the default.

Parameters

dhcp-option-number

Specifies the DHCP option number.

Values

0 to 255

present

Specifies that the related DHCP option must be present.

absent

Specifies that the related DHCP option must be absent.

hex-string

Specifies that the option must partially match a specified hex string.

Values

0x0 to 0xFFFFFFFF (up to 254 hex nibbles)

ascii-string

Specifies that the option must partially match a specified ASCII string, up to 127 characters.

exact

Specifies that this option requires an exact match of a hex or ASCII string.

invert-match

Requires the option not to partially match.

Platforms

All

Context

[Tree] (config>filter>dhcp6-filter>entry option)

Full Context

configure filter dhcp6-filter entry option

Description

This command configures match criteria for the DHCP6 filter policy entry.

The no form of this command reverts to the default.

Parameters

dhcp-option-number

Specifies the DHCP6 option number.

Values

0 to 255

present

Specifies that the related DHCP6 option must be present.

absent

Specifies that the related DHCP6 option must be absent.

match hex hex-string

Specifies that the option must (partially) match a specified hex string.

Values

0x0 to 0xFFFFFFFF (up to 254 hex nibbles)

match string ascii-string

Specifies that the option must partially match a specified ASCII string, up to 127 characters.

exact

Specifies that this option requires an exact match of a hex or ASCII string.

invert-match

Requires the option not to partially match.

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>to-client-options>ipv4 option)

Full Context

configure subscriber-mgmt local-user-db ipoe host to-client-options ipv4 option

Description

This command configures DHCPv4 options via LUDB that are passed in all DHCP messages to the client. The options are blindly appended to any options already present in the DHCP message. In other words, there is no intelligent merging of the options where overlapping options from different sources are further evaluated to determine whether only one option or multiple options should be returned to the client.

Multiple DHCP options can be configured at the same time although each option requires its own option statement. Those options are equivalent to RADIUS VSAs Alc-ToCLient-Dhcp4-Options.

DHCPv4 options can be provided via DHCPv4 server in the relay case. In addition, DHCPv4 options provided via LUDB or RADIUS can be supplied and consequently appended to the already existing options. If DHCPv4 options are provided simultaneously via LUDB and RADIUS, the RADIUS as a source of DHCPv4 option is blocked and the options supplied via LUDB are passed to the client. This is valid for the relay and proxy case.

Any DHCP option may be encoded in the option statement. An example of the option statement for DHCPv4 default-gateway is given below:

option 3 192.168.1.254

DHCPv4 options may be fixed length or variable length. They are appended at the end of DHCPv4 messages. All options begin with a tag octet, which uniquely identifies the option. Fixed-length options without data consist of only a tag octet. Only options 0 and 255 are fixed length. All other options are variable-length.

The no form of the removes the option from the configuration.

Parameters

option-number

Specifies up to four option numbers. This can be a well-known or an anonymous option.

Values

1 to 254

ipv4-address

Specifies an IPv4 address as an option.

Values

a.b.c.d

hex-string

Specifies options coded as hex characters.

Values

0x0..0xFFFFFFFF, up to 254 hex nibbles

ascii-string

Specifies options coded as an ASCII string, up to 27 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (ipoe>host>to-server-options>ipv6 option)

Full Context

configure subscriber-mgmt local-user-db ipoe host to-server-options ipv6 option

Description

This command specifies the DHCPv6 options to send to the server.

The no form of this command removes the option parameters from the configuration.

Parameters

option-number

Specifies the option number and the identification string that is inserted in the DHCP client message to the server.

Values

1 to 65535

ip-address

Specifies the IPv6 address.

Values

ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

hex-string

Specifies the hex value of the option.

Values

0x0 to 0xFFFFFFFF, up to 254 hex nibbles

ascii-string

Specifies the string value of the option.

Values

up to 127 characters

domain-name

Specifies the domain as in RFC 1035, Domain Names - Implementation and Specification, section 3.1.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (ipoe>host>to-client-options>ipv6 option)

[Tree] (ppp>host>to-client-options>ipv6 option)

Full Context

configure subscriber-mgmt local-user-db ipoe host to-client-options ipv6 option

configure subscriber-mgmt local-user-db ppp host to-client-options ipv6 option

Description

This command specifies the DHCPv6 options to send to the client.

The no form of this command removes the option parameters from the configuration.

Parameters

option-number

Specifies the option number and the identification string that is inserted in the DHCP client message to the client.

Values

1 to 65535

ip-address

Specifies the IPv6 address. Up to four addresses can be specified.

Values

ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

hex-string

Specifies the hex value of the option.

Values

0x0 to 0xFFFFFFFF, up to 254 hex nibbles

ascii-string

Specifies the string value of the option.

Values

up to 127 characters

domain-name

Specifies the domain as in RFC 1035, Domain Names - Implementation and Specification, section 3.1.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>ipv6>dhcp6-relay option)

[Tree] (config>service>vprn>if>ipv6>dhcp6-relay option)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 option)

Full Context

configure service ies interface ipv6 dhcp6-relay option

configure service vprn interface ipv6 dhcp6-relay option

configure service vprn subscriber-interface group-interface ipv6 option

Description

Commands in this context configure DHCPv6 relay information options.

The no form of this command disables DHCPv6 relay information options.

Platforms

All

• configure service ies interface ipv6 dhcp6-relay option
• configure service vprn interface ipv6 dhcp6-relay option

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface ipv6 option

Context

[Tree] (config>service>vpls>sap>dhcp option)

[Tree] (config>service>ies>if>dhcp option)

[Tree] (config>service>vprn>sub-if>dhcp option)

[Tree] (config>subscr-mgmt>msap-policy>vpls-only-sap-parameters>dhcp option)

[Tree] (config>service>ies>sub-if>grp-if>dhcp option)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6 option)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6 option)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp option)

[Tree] (config>service>vprn>if>dhcp option)

[Tree] (config>router>if>dhcp option)

Full Context

configure service vpls sap dhcp option

configure service ies interface dhcp option

configure service vprn subscriber-interface dhcp option

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option

configure service ies subscriber-interface group-interface dhcp option

configure service ies subscriber-interface group-interface ipv6 dhcp6 option

configure service vprn subscriber-interface group-interface ipv6 dhcp6 option

configure service vprn subscriber-interface group-interface dhcp option

configure service vprn interface dhcp option

configure router interface dhcp option

Description

This command enables DHCP Option 82 (Relay Agent Information Option) parameters processing and enters the context for configuring Option 82 sub-options.

The no form of this command reverts to the default.

Default

no option

Platforms

All

• configure service vpls sap dhcp option
• configure service vprn interface dhcp option
• configure router interface dhcp option
• configure service ies interface dhcp option

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface dhcp option
• configure service ies subscriber-interface group-interface ipv6 dhcp6 option
• configure service vprn subscriber-interface group-interface ipv6 dhcp6 option
• configure service ies subscriber-interface group-interface dhcp option
• configure service vprn subscriber-interface dhcp option
• configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option

Context

[Tree] (config>service>nat>pcp-server-policy option)

Full Context

configure service nat pcp-server-policy option

Description

This command configures the PCP options supported by the PCP servers using this PCP policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>security>keychain>direction>bi>entry option)

Full Context

configure system security keychain direction bi entry option

Description

This command configures allows options to be associated with the authentication key.

Parameters

basic

Specifies that IS-IS should use RFC 5304 encoding of the authentication information. It is only applicable if used with the IS-IS protocol. All other protocols should ignore this configuration command.

isis-enhanced

Specifies that IS-IS should use RFC 5310 encoding of the authentication information. It is only applicable if used with the IS-IS protocol. All other protocols should ignore this configuration command.

Platforms

All

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match option-present)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match option-present)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match option-present

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match option-present

Description

This command configures the option-present match condition.

The no form of this command reverts to the default.

Parameters

true

Enables checking for the presence of IP options in the IP header.

false

Disables checking for the presence of IP options in the IP header.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>filter>ip-filter>entry>match option-present)

Full Context

configure filter ip-filter entry match option-present

Description

This command configures matching packets that contain any IP options in the IP header as an IP filter match criterion.

The no form of the command removes the checking of IP options in the IP header as a match criterion.

Default

no option-present

Parameters

true

Specifies matching on all IP packets that contain any IP options in the IP header. A match will occur for all packets that have any IP option present. An option field of zero is considered as no option present.

false

Specifies matching on IP packets that do not have any IP option present in the IP header. (an option field of zero). An option field of zero is considered as no option present.

Platforms

All

Context

[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match option-present)

Full Context

configure system security cpm-filter ip-filter entry match option-present

Description

This command configures matching packets that contain the option field or have an option field of zero in the IP header as an IP filter match criterion.

The no form of this command removes the checking of the option field in the IP header as a match criterion.

Default

no option-present

Parameters

true

Specifies matching on all IP packets that contain the option field in the header. A match will occur for all packets that have the option field present. An option field of zero is considered as no option present.

false

Specifies matching on IP packets that do not have any option field present in the IP header (an option field of zero). An option field of zero is considered as no option present.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident option60)

Full Context

configure subscriber-mgmt local-user-db ipoe host host-identification option60

Description

This command specifies the Vendor-Identifying Vendor Option to match. Option 60 is encoded as Type-Length-Value (TLV). The hex-string portion of Option 60 in the received DHCP request is used for matching. Only the first 32 bytes can be defined here. If Option 60 from the message is longer, those bytes are ignored.

The no form of this command removes option60 from the configuration.

Parameters

hex-string

Specifies the hexadecimal format for this option.

Values

0x0 to 0xFFFFFFFF(maximum 64 hex nibbles)

ascii-string

Specifies the string format for this option, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>dhcp6>server>pool>prefix options)

[Tree] (config>service>vprn>dhcp>server>pool options)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host options)

[Tree] (config>service>vprn>dhcp6>server>pool options)

[Tree] (config>router>dhcp6>server>defaults options)

[Tree] (config>service>vprn>dhcp6>server>pool>prefix options)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host options)

[Tree] (config>router>dhcp6>server>pool options)

[Tree] (config>router>dhcp>server>pool>subnet options)

[Tree] (config>router>dhcp>server>pool options)

Full Context

configure router dhcp6 local-dhcp-server pool prefix options

configure service vprn dhcp local-dhcp-server pool options

configure subscriber-mgmt local-user-db ipoe host options

configure service vprn dhcp6 local-dhcp-server pool options

configure router dhcp6 local-dhcp-server defaults options

configure service vprn dhcp6 local-dhcp-server pool prefix options

configure subscriber-mgmt local-user-db ppp host options

configure router dhcp6 local-dhcp-server pool options

configure router dhcp local-dhcp-server pool subnet options

configure router dhcp local-dhcp-server pool options

Description

Commands in this context configure pool options. The options defined here can be overruled by defining the same option in the local user database.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure router dhcp local-dhcp-server pool subnet options
• configure service vprn dhcp local-dhcp-server pool options
• configure router dhcp local-dhcp-server pool options
• configure service vprn dhcp6 local-dhcp-server pool options
• configure router dhcp6 local-dhcp-server pool options
• configure router dhcp6 local-dhcp-server pool prefix options
• configure service vprn dhcp6 local-dhcp-server pool prefix options
• configure subscriber-mgmt local-user-db ipoe host options
• configure subscriber-mgmt local-user-db ppp host options

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure router dhcp6 local-dhcp-server defaults options

Context

[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile>dhcp-pool options)

Full Context

configure subscriber-mgmt vrgw brg brg-profile dhcp-pool options

Description

Commands in this context configure options that are reflected in DHCP.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>redundancy>multi-chassis options)

Full Context

configure redundancy multi-chassis options

Description

This command enables the CLI context to configure multi-chassis options parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>persistence options)

Full Context

configure system persistence options

Description

This command enables the CLI context to configure persistence options parameters.

Platforms

All

Context

[Tree] (config>service>vpls>sap>dhcp6>ldra options)

Full Context

configure service vpls sap dhcp6 ldra options

Description

Commands in this context configure forwarding path options.

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host options6)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host options6)

Full Context

configure subscriber-mgmt local-user-db ppp host options6

configure subscriber-mgmt local-user-db ipoe host options6

Description

Commands in this context configure IPv6 DNS server information in the local user database.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>policy-options>policy-statement>entry>from origin)

Full Context

configure router policy-options policy-statement entry from origin

Description

This command configures the match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes.

• Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with the aaa, dynamic, or static options, depending on the address assignment method. For CUPS hosts, the pfcp option is used for the origin attribute. Host routes can also be distinguished using the sub-mgmt option for the protocol command.

• Dynamically provisioned prefixes or loopback addresses carry the origin attribute with the aaa or pfcp options, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

• Statically configured prefixes under the subscriber interface do not have an origin attribute.These routes can be distinguished using the direct option for the protocol command.

• Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use the pfcp option for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

These values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Default

no origin

Parameters

igp

Specifies path-matching information that originates within the local AS.

egp

Specifies path-matching information that originates in another AS.

incomplete

Configures path-matching information learned by another method.

any

Specifies to ignore this criteria.

aaa

Specifies to use the subscriber-host address that originates from AAA.

Values

IPv4 — subscriber-management /32 host routes that originate from the RADIUS framed-ip-address VSA other than 255.255.255.254. The 255.255.255.254 returned by the RADIUS indicates that the BNG (NAS) should assign an IP address from its own pool.

IPv6 — subscriber-management routes that originate through framed-ipv6-prefix (SLAAC), delegated-ipv6-prefix (IA_PD) or alc-ipv6-address (IA_NA) RADIUS attributes. It is also applicable to VSA Alc-IPv6-Sub-If-Prefix, where the subscriber interface prefix can originate from RADIUS. This is valid for IPoE and PPPoE type hosts.

dynamic

Specifies to use the subscriber host address that originates from DHCP, DHCPv6, or the local address server.

Values

IPv4 — subscriber-management /32 host routes that originate from the DHCP server (local or remote) or RADIUS framed-ip-address=255.255.255.254 (RFC 2865).

IPv6 — subscriber-management routes that are assigned via local DHCPv6 server pools whose name is obtained through the Alc-Delegated-IPv6-Pool (PD pool) and Framed-IPv6-Pool (NA pool) RADIUS attributes, or the local address server whose name is obtained through the Alc-SLAAC-IPv6-Pool (SLAAC pool) RADIUS attribute. This is valid for IPoE and PPPoE type hosts.

For IPoEv6 only, the pool name can also be obtained from ipv6-delegated-prefix-pool (PD pool) and ipv6-wan-address-pool (NA pool) from the LUDB.

static

Specifies to use the subscriber-host address that originates from the local user database.

Values

IPv4 — subscriber-management /32 host routes that originate from the LUDB and also covers the RADIUS fallback category (RADIUS falls back to system defaults or to the LUDB).

IPv6 — subscriber-management routes that originate from the LUDB from ipv6-address (IA_NA) or ipv6-prefix (IA_PD), or ipv6-slaac-prefix (SLAAC).

bonding

Specifies to use bonding.

pfcp

Specifies to use routes learned using the PFCP protocol.

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement>default-action origin)

[Tree] (config>router>policy-options>policy-statement>entry>action origin)

Full Context

configure router policy-options policy-statement default-action origin

configure router policy-options policy-statement entry action origin

Description

This command sets the BGP origin assigned to routes exported into BGP.

If the routes are exported into protocols other than BGP, this option is ignored.

The no form of this command disables setting the BGP origin for the route policy entry.

Default

no origin

Parameters

igp

Sets the path information as originating within the local AS.

egp

Sets the path information as originating in another AS.

incomplete

Sets the path information as learned by some other means.

param-name

The origin parameter variable name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must start and end with at-signs (@); for example, "@variable@”.

Platforms

All

Context

[Tree] (config>service>vprn>bgp>best-path-selection origin-invalid-unusable)

Full Context

configure service vprn bgp best-path-selection origin-invalid-unusable

Description

When this command is configured, all VPRN BGP routes that have an origin validation state of "Invalid” are considered unusable by the best path selection algorithm, meaning they are not used for forwarding, not advertised to BGP peers, and not eligible for export as a VPN-IP route.

With the default value, VPRN BGP routes with an origin validation state of "Invalid” are usable if they are selected.

Default

no origin-invalid-unusable

Platforms

All

Context

[Tree] (config>router>bgp>best-path-selection origin-invalid-unusable)

Full Context

configure router bgp best-path-selection origin-invalid-unusable

Description

When origin-invalid-unusable is configured, all routes that have an RPKI origin validation state of 'Invalid’ are considered unusable by the best path selection algorithm, meaning they are not used for forwarding and not advertised to BGP peers.

With the default of no origin-invalid-unusable, routes with an RPKI origin validation state of 'Invalid’ are compared to other 'usable’ routes for the same prefix according to the BGP decision process.

Default

no origin-invalid-unusable

Platforms

All

Context

[Tree] (config>router origin-validation)

Full Context

configure router origin-validation

Description

Commands in this context display origin validation information.

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement>entry>from origin-validation-state)

Full Context

configure router policy-options policy-statement entry from origin-validation-state

Description

This command is used to match BGP routes on the basis of origin validation state:

• Valid (0)

• Not-Found (1)

• Invalid (2)

Default

no origin-validation-state

Parameters

valid

Marks the route as having an origin validation state of valid.

notFound

Marks the route as having an origin validation state of Not Found.

invalid

Marks the route as having an origin validation state of invalid.

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement>default-action origin-validation-state)

[Tree] (config>router>policy-options>policy-statement>entry>action origin-validation-state)

Full Context

configure router policy-options policy-statement default-action origin-validation-state

configure router policy-options policy-statement entry action origin-validation-state

Description

This command is used to mark BGP IPv4 and IPv6 routes matching the default-action or a specific entry of a route policy with one of the 3 following origin validation states:

• Valid (0)

• Not-Found (1)

• Invalid (2)

Default

no origin-validation-state

Parameters

state

Specifies the default operational origin validation state for this policy statement.

Values

valid — Marks the route as having an origin validation state of valid.

notFound — Marks the route as having an origin validation state of Not Found.

invalid — Marks the route as having an origin validation state of invalid.

param-name

Specifies the origin parameter variable name. Allowed values are any string up to 32 characters, composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must start and end with at-signs (@); for example, "@variable@”.

Platforms

All

Context

[Tree] (config>service>vprn>ospf3>area>nssa originate-default-route)

[Tree] (config>service>vprn>ospf>area>nssa originate-default-route)

Full Context

configure service vprn ospf3 area nssa originate-default-route

configure service vprn ospf area nssa originate-default-route

Description

This command specifies whether when configuring an NSSA with no summaries, the Area Border Router (ABR) injects a type-7 LSA default route into the NSSA area. The default behavior is to inject a type-3 LSA default route, but some older implementations expect a type-7 LSA default route.

When configuring an NSSA with no summaries, the ABR will inject a type 3 LSA default route into the NSSA area. Some older implementations expect a type 7 LSA default route.

The no form of this command disables origination of a default route.

Default

no originate-default-route — A default route is not originated.

Parameters

type-nssa

Specifies that a type 7 LSA should be used for the default route.

Configure this parameter to inject a type 7 LSA default route into an NSSA configured with no summaries, instead of a type 3 LSA.

To revert to a type 3 LSA, execute the originate-default-route command without the type-nssa parameter.

Default

type 3 LSA default route

adjacency-check

Specifies whether adjacency checks are performed before originating a default route. If this parameter is configured, then no area 0 adjacency is required for the ABR to advertise the default route.

Default

Adjacency checks are performed, and an area 0 adjacency is required for the ABR to advertise the default route

Platforms

All

Context

[Tree] (config>router>ospf3>area>nssa originate-default-route)

[Tree] (config>router>ospf>area>nssa originate-default-route)

Full Context

configure router ospf3 area nssa originate-default-route

configure router ospf area nssa originate-default-route

Description

This command enables the generation of a default route and its LSA type (3 or 7) into a Not So Stubby Area (NSSA) by an NSSA Area Border Router (ABR).

When configuring an NSSA with no summaries, the ABR will inject a type 3 LSA default route into the NSSA area. Some older implementations expect a type 7 LSA default route.

The no form of this command disables origination of a default route.

Default

no originate-default-route

Parameters

type-7

Specifies a type 7 LSA should be used for the default route in the config>router> ospf>area>nssa context.

Configure this parameter to inject a type-7 LSA default route instead the type 3 LSA into the NSSA configured with no summaries.

To revert to a type 3 LSA, enter originate-default-route without the type-7 parameter.

Default

Type 3 LSA default route.

type-nssa

Specifies an NSSA-LSA type should be used for the default route in the config>router> ospf3>area>nssa context.

no-adjacency-check

Specifies whether or not adjacency checks are performed before originating a default route. If this parameter is configured, then no area 0 adjacency is required for the ABR to advertise the default route.

Default

Adjacency checks are performed, and an area 0 adjacency is required for the ABR to advertise the default route.

Platforms

All

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription originated-qos-marking)

Full Context

configure system telemetry persistent-subscriptions subscription originated-qos-marking

Description

This command configures the QoS marking used for packets carrying telemetry notifications.

The no form of this command removes the QoS marking.

Parameters

dscp-name

Specifies the QoS marking name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names in the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

Context

[Tree] (config>system>grpc-tunnel>destination-group>destination originated-qos-marking)

Full Context

configure system grpc-tunnel destination-group destination originated-qos-marking

Description

This command configures the QoS marking used for packets carrying gRPC tunnel packets.

The no form of this command removes the QoS marking.

Default

no originated-qos-marking

Parameters

dscp-name

Specifies the QoS marking name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names in the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

Context

[Tree] (config>router>segment-routing>srv6 origination-fpe)

Full Context

configure router segment-routing segment-routing-v6 origination-fpe

Description

This command configures the SRv6 FPE ID for origination of SRv6 tunnels on local services. A single FPE can be configured for SRv6 origination.

The no form of this command removes the origination FPE from the configuration.

Default

no origination-fpe

Parameters

origination-fpe

Specifies the FPE ID for origination of SRv6 tunnels on local services.

Values

1 to 64

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>qos>port-scheduler-policy orphan-override)

Full Context

configure qos port-scheduler-policy orphan-override

Description

This command overrides the default orphan behavior for port schedulers created using the port scheduler policy. The default orphan behavior is to give all orphan queues and schedulers bandwidth after all other properly parented queues and schedulers. Orphans by default do not receive any within-CIR bandwidth and receive above-CIR bandwidth after priority levels 8 through 1 have been allocated. The orphan-override command accepts the same parameters as the port-parent command in the SAP egress and network queue policy contexts. The defined parameters are used as a default port-parent association for any queue or scheduler on the port that the port scheduler policy is applied.

Orphan queues and schedulers are identified as:

• Any queue or scheduler that does not have a port-parent or parent command applied

• Any queue that has a parent command applied, but the specified scheduler name does not exist on the queue’s SAP, MSS, or SLA Profile instance.

A queue or scheduler may be properly parented to an upper level scheduler, but that scheduler may be orphaned. In this case, the queue or scheduler receives bandwidth from its parent scheduler based on the parent schedulers ability to receive bandwidth as an orphan.

Within-CIR Priority Level Parameters

The within-CIR parameters define which port priority level the orphan queues and schedulers should be associated with when receiving bandwidth for the queue or schedulers within-CIR offered load. The within-CIR offered load is the amount of bandwidth the queue or schedulers could use that is equal to or less than its defined or summed CIR value. The summed value is only valid on schedulers and is the sum of the within-CIR offered loads of the children attached to the scheduler. The parameters that control within-CIR bandwidth allocation for orphans are the orphan-override commands cir-level and cir-weight keywords. The cir-level keyword defines the port priority level that the scheduler or queue uses to receive bandwidth for its within-CIR offered load. The cir-weight is used when multiple queues or schedulers exist at the same port priority level for within-CIR bandwidth. The weight value defines the relative ratio that is used to distribute bandwidth at the priority level when more within-CIR offered load exists than the port priority level has bandwidth.

A cir-weight equal to zero (the default value) has special meaning and informs the system that the orphan queues and schedulers do not receive bandwidth from the within-CIR distribution. Instead, all bandwidth for the orphan queues and schedulers must be allocated from the port scheduler’s above-CIR pass.

Above-CIR Priority Level Parameters

The above-CIR parameters define which port priority level the orphan queues and schedulers should be associated with when receiving bandwidth for the queue or schedulers above-CIR offered load. The above-CIR offered load is the amount of bandwidth the queue or schedulers could use that is equal to or less than its defined PIR value (based on the queue or schedulers rate command) less any bandwidth that was given to the queue or scheduler during the above-CIR scheduler pass. The parameters that control above-CIR bandwidth allocation for orphans are the orphan-override commands level and weight keywords. The level keyword defines the port priority level that the scheduler or queue uses to receive bandwidth for its above-CIR offered load. The weight is used when multiple queues or schedulers exist at the same port priority level for above-CIR bandwidth. The weight value defines the relative ratio that is used to distribute bandwidth at the priority level when more above-CIR offered load exists than the port priority level has bandwidth.

The no form of this command removes the orphan override port parent association for the orphan queues and schedulers on port schedulers created with the port scheduler policy. Any orphan queues and schedulers on a port associated with the port scheduler policy will revert to default orphan behavior.

Parameters

level priority-level

Defines the port priority the orphan queues and schedulers will use to receive bandwidth for their above-CIR offered-load.

Values

1 to 8 (8 is the highest priority)

Default

1

weight weight

Defines the weight the orphan queues and schedulers will use in the above-CIR port priority level (defined by the level parameter).

Values

1 to 100

Default

1

cir-level cir-level

Defines the port priority the orphan queues and schedulers will use to receive bandwidth for their within-CIR offered-load. If the cir-weight parameter is set to a value of 0 (the default value), the orphan queues and schedulers do not receive bandwidth during the port scheduler’s within-CIR pass and the cir-level parameter is ignored. If the cir-weight parameter is 1 or greater, the cir-level parameter comes into play.

Values

1 to 8 (8 is the highest level)

cir-weight cir-weight

Defines the weight the orphan queues and schedulers will use in the within-CIR port priority level (defined by the cir-level parameter). When the cir-weight parameter is set to a value of 0 (the default value), the orphan queues and schedulers do not receive bandwidth during the port scheduler’s within-CIR pass and the cir-level parameter is ignored. If the cir-weight parameter is 1 or greater, the cir-level parameter comes into play.

Values

1 to 100 (100 is the highest weight)

Platforms

All

Context

[Tree] (config>service>vprn ospf)

Full Context

configure service vprn ospf

Description

This command enables access to the context to enable an OSPF protocol instance.

OSPF instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command deletes the OSPF protocol instance removing all associated configuration parameters.

Default

no ospf

Parameters

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. The router-id must be given a dot decimal notation format.

Values

a.b.c.d

Platforms

All

Context

[Tree] (config>router ospf)

Full Context

configure router ospf

Description

This command creates an OSPF routing instance and then enters the associated context to configure the associated protocol parameters.

Additionally, the router ID can be specified as another parameter of the OSPF command. This parameter is required for all non-base OSPF instances.

The default value for the base instance is inherited from the configuration in the config>router context. When that is not configured, the following apply:

1. the system uses the system interface address (which is also the loopback address)

2. if a system interface address is not configured, it uses the last 32 bits of the chassis MAC address

This is a required command when configuring multiple instances and the instance being configured is not the base instance. When configuring multiple instances of OSPF, there is a risk of loops because networks are advertised by multiple domains configured with multiple interconnections to one another. To prevent this from happening, all routers in a domain should be configured with the same domain ID. Each domain (OSPF-instance) should be assigned a specific bit value in the 32-bit tag mask.

The default value for non-base instances is 0.0.0.0 and is invalid; in this case, the instance of OSPF will not start. When configuring a new router ID, the instance is not automatically restarted with the new router ID. The next time the instance is initialized, the new router ID is used.

Issue the shutdown and no shutdown commands for the instance for the new router ID to be used, or reboot the entire router.

OSPF instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command to reverts to the default value.

Default

no ospf

Parameters

ospf-instance

Specifies a unique integer that identifies a specific instance of a version of the OSPF protocol running in the router instance specified by the router ID.

Values

1 to 31

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. This IP address must be given a dot decimal notation format.

Platforms

All

Context

[Tree] (debug>router ospf)

Full Context

debug router ospf

Description

Indicates the OSPF instance for debugging purposes.

Parameters

ospf-instance

Debugs the specified OSPF instance.

Values

0 to 31

Platforms

All

Context

[Tree] (config>system ospf-dynamic-hostnames)

Full Context

configure system ospf-dynamic-hostnames

Description

This command enables OSPF dynamic hostnames.

The router receiving the new Dynamic Hostname within the OSPF Router Information (RI) LSA is instructed to process the received dynamic hostname information.

The no form of this command disables OSPF dynamic hostnames.

Default

no ospf-dynamic-hostnames

Platforms

All

Context

[Tree] (config>service>vprn ospf3)

Full Context

configure service vprn ospf3

Description

This command creates an OSPFv3 routing instance and then enters the associated context to configure associated protocol parameters.

OSPF instances are shutdown when created, so that all parameters can be configured before the instance is enabled.

The no form of this command deletes the OSPFv3 protocol instance, removing all associated configuration parameters.

Default

no ospf3

Parameters

instance-id

Specifies the instance ID for the OSPFv3 instance being created or modified. The instance ID must match the specified range based on the address family.

Values

0 to 31: IPv6 unicast

64 to 95: IPv4 unicast

router-id

Specifies the IP address.

Platforms

All

Context

[Tree] (config>router ospf3)

Full Context

configure router ospf3

Description

This command creates an OSPFv3 routing instance and then enters the associated context to configure associated protocol parameters.

OSPFv3 instances are shutdown when created, so that all parameters can be configured prior to the instance being enabled.

The no form of this command deletes the OSPFv3 protocol instance, removing all associated configuration parameters.

Parameters

ospf-instance

Specifies the instance ID for the OSPFv3 instance being created or modified. The instance ID must match the specified range based on the address family.

Values

0 to 31: IPV6 unicast

64 to 95: IPV4 unicast

router-id

Specifies the OSPF router ID to be used with the associated OSPF instance. This IP address must be given a dot decimal notation format.

Platforms

All

Context

[Tree] (debug>router ospf3)

Full Context

debug router ospf3

Description

Indicates the OSPF3 instance for debugging purposes.

Parameters

ospf-instance

Debugs the specified OSPF3 instance.

Values

0 to 31 | 64 to 95

0 to 31 — IPv6-unicast address-family

64 to 95 — IPv4-unicast address-family

Platforms

All

Context

[Tree] (config>subscr-mgmt>rtr-adv-plcy other-stateful-configuration)

[Tree] (config>service>ies>sub-if>ipv6>rtr-adv other-stateful-configuration)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 other-stateful-configuration)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv other-stateful-configuration)

[Tree] (config>service>ies>sub-if>grp-if>ipv6 other-stateful-configuration)

[Tree] (config>service>vprn>router-advert>if other-stateful-configuration)

[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv other-stateful-configuration)

Full Context

configure subscriber-mgmt router-advertisement-policy other-stateful-configuration

configure service ies subscriber-interface ipv6 router-advertisements other-stateful-configuration

configure service vprn subscriber-interface group-interface ipv6 other-stateful-configuration

configure service ies subscriber-interface group-interface ipv6 router-advertisements other-stateful-configuration

configure service ies subscriber-interface group-interface ipv6 other-stateful-configuration

configure service vprn router-advertisement interface other-stateful-configuration

configure service vprn subscriber-interface ipv6 router-advertisements other-stateful-configuration

Description

This command sets the "other configuration" flag. This flag indicates that DHCPv6 is available for auto-configuration of other (non-address) information such as DNS-related information or information on other servers in the network. See RFC 3736, Stateless Dynamic Host Configuration Protocol (DHCP) for IPv6.

The no form of this command removes the flag.

Default

no other-stateful-configuration

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface ipv6 other-stateful-configuration
• configure service ies subscriber-interface ipv6 router-advertisements other-stateful-configuration
• configure service ies subscriber-interface group-interface ipv6 router-advertisements other-stateful-configuration
• configure service vprn subscriber-interface ipv6 router-advertisements other-stateful-configuration
• configure service vprn subscriber-interface group-interface ipv6 other-stateful-configuration
• configure subscriber-mgmt router-advertisement-policy other-stateful-configuration

All

• configure service vprn router-advertisement interface other-stateful-configuration

Context

[Tree] (config>router>router-advert>if other-stateful-configuration)

Full Context

configure router router-advertisement interface other-stateful-configuration

Description

This command sets the "Other configuration" flag. This flag indicates that DHCPv6lite is available for autoconfiguration of other (non-address) information such as DNS-related information or information about other servers in the network. See RFC 3736, Stateless Dynamic Host Configuration Protocol (DHCP) for IPv6.

Default

no other-stateful-configuration

Platforms

All

Context

[Tree] (config>port otu)

Full Context

configure port otu

Description

This command specifies whether or not to enable OTU encapsulation. The port must be shut down before OTU is enabled. This command is valid only for ports on assemblies that support this encapsulation mode. Refer to the appropriate Installation Guide for ports assembly to determine if OTU encapsulation is supported.

Note that OTU cannot be disabled on OTU3 encapsulated OC768 or 40-Gigabit Ethernet.by the no otu command. Therefore, the default depends on the port type. The default for OTU3 encapsulated OC768 or 40-Gigabit Ethernet is otu.

The no form of this command disables OTU (clear channel 10GE-LAN/WAN or OC192).

Default

no otu

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>otu otu2-lan-data-rate)

Full Context

configure port otu otu2-lan-data-rate

Description

This command specifies the data rate to use when configured for an OTU encapsulated 10GE-LAN signal. The port must be shut down before changing the 10GE LAN OTU2 data rate.

Default

otu2-lan-data-rate 11.049

Parameters

11.049

Configures the port to transmit and receive an 11.049 Gb/s synchronous OTU encapsulated 10GE-LAN signal (No fixed stuffing bytes in the OTU2 frame).

11.096

Configures the port to transmit and receive an 11.096 Gb/s synchronous OTU encapsulated 10GE-LAN signal (with fixed stuffing bytes in the OTU2 frame).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>mpls>lsp>working-tp-path out-label)

[Tree] (config>router>mpls>lsp>protect-tp-path out-label)

Full Context

configure router mpls lsp working-tp-path out-label

configure router mpls lsp protect-tp-path out-label

Description

This command configures the outgoing label value to use for an MPLS-TP working or protect path. The out-link is the outgoing interface on the node that this path will use, and must be specified. If the out-link refers to a numbered IP interface, the user may optionally configure the next-hop parameter and the system will determine the interface to use to reach the configured next-hop, but will check that the user-entered value for the out-link corresponds to the link returned by the system. If they do not correspond, then the path will not come up.

Default

no out-label

Parameters

out-label

Specifies the out label.

Values

32 to 16415

if-name

Specifies the interface name.

ip-address

Specifies the IPv4 address in a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>credit-control-policy out-of-credit-action)

Full Context

configure subscriber-mgmt credit-control-policy out-of-credit-action

Description

This command configures the action to be performed when out of credit is reached.

The no form of this command reverts to the default.

Default

out-of-credit-action continue

Parameters

action

Specifies the action to be taken when out of credit is out reached.

Values

continue, disconnect-host, block-category, change-service-level

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>cat-map>category out-of-credit-action-override)

Full Context

configure subscriber-mgmt category-map category out-of-credit-action-override

Description

This command specifies the action to be taken if the credit is exhausted.

Parameters

continue

Specifies to continue when running out of credit.

block-category

Specifies to block the category when running out of credit.

change-service-level

Specifies to change the service level when running out of credit.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy out-of-credit-reporting)

Full Context

configure subscriber-mgmt diameter-application-policy gy out-of-credit-reporting

Description

This command changes the reporting reason in an intermediate interrogation when the final granted units have been consumed and a corresponding out-of-credit-action different from disconnect-host is started.

The no form of this command reverts to the default value.

Default

out-of-credit-reporting final

Parameters

final

Specifies the reporting reason in an intermediate interrogation when the final granted units have been consumed and a corresponding out-of-credit-action different from disconnect-host is started.

quota-exhausted

Specifies the reporting reason in an intermediate interrogation when the final granted units have been consumed and a corresponding out-of-credit-action different from disconnect-host is started.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>e-counters out-profile-octets-discarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>e-counters out-profile-octets-discarded-count)

Full Context

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue e-counters out-profile-octets-discarded-count

configure subscriber-mgmt radius-accounting-policy custom-record queue e-counters out-profile-octets-discarded-count

Description

This command includes the out of profile packets discarded count.

For queues with stat-mode v4-v6, this command includes the IPv6 octets discarded count instead.

The no form of this command excludes the out of profile packets discarded count.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-octets-discarded-count)

Full Context

configure log accounting-policy custom-record policer e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record ref-queue e-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record queue e-counters out-profile-octets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-octets-discarded-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-discarded-count)

Full Context

configure log accounting-policy custom-record policer i-counters out-profile-octets-discarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-discarded-count

Description

This command includes the out of profile octets discarded count.

The no form of this command excludes the out of profile octets discarded count.

Default

no out-profile-octets-discarded-count

Platforms

All

Context

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>e-counters out-profile-octets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>e-counters out-profile-octets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters out-profile-octets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters out-profile-octets-forwarded-count)

Full Context

configure subscriber-mgmt radius-accounting-policy custom-record queue e-counters out-profile-octets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue e-counters out-profile-octets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters out-profile-octets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters out-profile-octets-forwarded-count

Description

This command includes the out of profile octets forwarded count.

For queues with stat-mode v4-v6, this command includes the IPv6 octets forwarded count instead.

The no form of this command excludes the out of profile octets forwarded count.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-forwarded-count)

Full Context

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record queue e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-queue e-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record policer e-counters out-profile-octets-forwarded-count

Description

This command includes the out of profile octets forwarded count.

The no form of this command excludes the out of profile octets forwarded count.

Default

no out-profile-octets-forwarded-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>queue>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>i-counters out-profile-octets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-forwarded-count)

Full Context

configure log accounting-policy custom-record queue i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record policer i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-queue i-counters out-profile-octets-forwarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-forwarded-count

Description

This command includes the out of profile octets forwarded count.

The no form of this command excludes the out of profile octets forwarded count.

Default

no out-profile-octets-forwarded-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-octets-offered-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-octets-offered-count)

Full Context

configure log accounting-policy custom-record policer e-counters out-profile-octets-offered-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-octets-offered-count

Description

This command includes the out of profile octets offered count.

The no form of this command excludes the out of profile octets offered count.

Default

no out-profile-octets-offered-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-octets-offered-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-octets-offered-count)

Full Context

configure log accounting-policy custom-record ref-policer i-counters out-profile-octets-offered-count

configure log accounting-policy custom-record policer i-counters out-profile-octets-offered-count

Description

This command includes the out of profile octets offered count.

The no form of this command excludes the out of profile octets offered count.

Default

no out-profile-octets-offered-count

Platforms

All

Context

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>e-counters out-profile-packets-discarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>e-counters out-profile-packets-discarded-count)

Full Context

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue e-counters out-profile-packets-discarded-count

configure subscriber-mgmt radius-accounting-policy custom-record queue e-counters out-profile-packets-discarded-count

Description

This command includes the out of profile packets discarded count.

For queues with stat-mode v4-v6, this command includes the IPv6 packets discarded count instead.

The no form of this command excludes the out of profile packets discarded count.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-discarded-count)

Full Context

configure log accounting-policy custom-record ref-queue e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record queue e-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record policer e-counters out-profile-packets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-packets-discarded-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-discarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-discarded-count)

Full Context

configure log accounting-policy custom-record policer i-counters out-profile-packets-discarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-discarded-count

Description

This command includes the out of profile packets discarded count.

The no form of this command excludes the out of profile packets discarded count.

Default

no out-profile-packets-discarded-count

Platforms

All

Context

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>e-counters out-profile-packets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>i-counters out-profile-packets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>queue>e-counters out-profile-packets-forwarded-count)

[Tree] (config>subscr-mgmt>acct-plcy>cr>ref-queue>i-counters out-profile-packets-forwarded-count)

Full Context

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue e-counters out-profile-packets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record queue i-counters out-profile-packets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record queue e-counters out-profile-packets-forwarded-count

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue i-counters out-profile-packets-forwarded-count

Description

This command includes the out of profile packets forwarded count.

For queues with stat-mode v4-v6, this command includes the IPv6 packets forwarded count instead.

The no form of this command excludes the out of profile packets forwarded count.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr>ref-queue>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>queue>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-forwarded-count)

Full Context

configure log accounting-policy custom-record ref-queue e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record queue e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record policer e-counters out-profile-packets-forwarded-count

Description

This command includes the out of profile packets forwarded count.

The no form of this command excludes the out of profile packets forwarded count.

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>queue>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-forwarded-count)

[Tree] (config>log>acct-policy>cr>ref-queue>i-counters out-profile-packets-forwarded-count)

Full Context

configure log accounting-policy custom-record queue i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record policer i-counters out-profile-packets-forwarded-count

configure log accounting-policy custom-record ref-queue i-counters out-profile-packets-forwarded-count

Description

This command includes the out of profile packets forwarded count.

The no form of this command excludes the out of profile packets forwarded count.

Default

no out-profile-packets-forwarded-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>ref-policer>e-counters out-profile-packets-offered-count)

[Tree] (config>log>acct-policy>cr>policer>e-counters out-profile-packets-offered-count)

Full Context

configure log accounting-policy custom-record ref-policer e-counters out-profile-packets-offered-count

configure log accounting-policy custom-record policer e-counters out-profile-packets-offered-count

Description

This command includes the out of profile packets offered count.

The no form of this command excludes the out of profile packets offered count.

Default

no out-profile-packets-offered-count

Platforms

All

Context

[Tree] (config>log>acct-policy>cr>ref-policer>i-counters out-profile-packets-offered-count)

[Tree] (config>log>acct-policy>cr>policer>i-counters out-profile-packets-offered-count)

Full Context

configure log accounting-policy custom-record ref-policer i-counters out-profile-packets-offered-count

configure log accounting-policy custom-record policer i-counters out-profile-packets-offered-count

Description

This command includes the out of profile packets offered count.

The no form of this command excludes the out of profile packets offered count.

Default

no out-profile-packets-offered-count

Platforms

All

Context

[Tree] (config>sys>security>cpu-protection>policy out-profile-rate)

Full Context

configure system security cpu-protection policy out-profile-rate

Description

This command applies a packet arrival rate limit for the entire SAP/interface, above which packets will be market as discard eligible, in other words, out-profile/low-priority/yellow. The rate defined is a global rate limit for the interface regardless of the number of traffic flows. It is a per-SAP/interface rate.

The no form of this command sets out-profile-rate parameter back to the default value.

Default

out-profile-rate 3000 for cpu-protection-policy-id 1-253

out-profile-rate 6000 for cpu-protection-policy-id 254 (default access interface policy)

out-profile-rate 3000 for cpu-protection-policy-id 255 (default network interface policy)

Parameters

packet-rate-limit

Specifies a packet arrival rate limit in packets per second.

Values

1 to 65535, max (max indicates no limit)

log-events

Issues a tmnxCpmProtViolSapOutProf, tmnxCpmProtViolIfOutProf, or tmnxCpmProtViolSdpBindOutProf log event and tracks violating interfaces when the out-profile-rate is exceeded. Supported on CPM3 and above only.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

Context

[Tree] (config>qos>sap-ingress>fc out-remark)

Full Context

configure qos sap-ingress fc out-remark

Description

This command is used in a SAP ingress QoS policy to define an explicit out-of-profile remark action for a forwarding class or subclass. While the SAP ingress QoS policy may be applied to any SAP, the remarking functions are only enforced when the SAP is associated with an IP or subscriber interface (in an IES or VPRN). When the policy is applied to a Layer 2 SAP (for example, Epipe or VPLS), the remarking definitions are silently ignored.

In the case where the policy is applied to a Layer 3 SAP, the out-of-profile remarking definition will be applied to packets that have been classified to the forwarding class or subclass. It is possible for a packet to match a classification command that maps the packet to a particular forwarding class or subclass, only to have a more explicit (higher priority match) override the association. Only the highest priority match forwarding class or subclass association will drive the out-of-profile marking.

The out-remark command is only applicable to ingress IP routed packets that are considered out-of-profile. The profile of a SAP ingress packet is affected by either the explicit in-profile/out-of-profile definitions or the ingress policing function applied to the packet. Out-remark Command Effect describes the effect of the out-remark command on received SAP ingress packets. Within the out-of-profile IP packet’s ToS field, either the six DSCP bits or the three precedence bits are remarked.

A packet that is explicitly remarked at ingress will not be affected by any egress remarking decision. Explicit ingress remarking has highest priority.

An explicit dscp name or precedence value must be specified for out-of-profile remarking to be applied.

The no form of this command disables ingress remarking of out-of-profile packets classified to the forwarding class or subclass.

Default

no out-remark

Parameters

dscp dscp-name

Specifies that the matching packet’s DSCP bits should be overridden with the value represented by dscp-name.

The dscp-name parameter is a 6-bit value. It must be one of the predefined DSCP names defined on the system.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, e f, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

prec ip-prec-value

Specifies that the matching packet’s precedence bits should be overridden with the value represented by ip-prec-value.

The value specified by ip-prec-value is used to overwrite the precedence bits within a matching routed packets IP header ToS field.

Values

0 to 7

Platforms

All

Context

[Tree] (config>system>security>vprn-aaa-server outband)

Full Context

configure system security vprn-aaa-server outband

Description

This command configures TACACS+ and RADIUS servers in a VPRN to be used for AAA by that VPRN and by sessions on the console or out-of-band (OOB) Ethernet ports.

The no form of this command disables the use of servers in out-of-band management.

Default

no outband

Parameters

service-id

Specifies the VPRN server for AAA to use for OOB sessions.

Values

service-id: 1 to 2147483648

svc-name: 64 characters maximum

Platforms

All

Context

[Tree] (config>system>login-control>telnet outbound-max-sessions)

[Tree] (config>system>login-control>ssh outbound-max-sessions)

Full Context

configure system login-control telnet outbound-max-sessions

configure system login-control ssh outbound-max-sessions

Description

This parameter limits the number of outbound Telnet and SSH sessions. A maximum of 15 Telnet and SSH connections can be established from the router. The local serial port cannot be disabled.

The no form of this command reverts to the default value.

Default

outbound-max-sessions 5

Parameters

value

Specifies the maximum number of concurrent outbound Telnet sessions, expressed as an integer.

Values

0 to 15

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor outbound-route-filtering)

[Tree] (config>router>bgp>group outbound-route-filtering)

[Tree] (config>router>bgp outbound-route-filtering)

Full Context

configure router bgp group neighbor outbound-route-filtering

configure router bgp group outbound-route-filtering

configure router bgp outbound-route-filtering

Description

This command opens the configuration tree for sending or accepting BGP filter lists from peers (outbound route filtering).

Default

no outbound-route-filtering

Platforms

All

Context

[Tree] (debug>router>bgp outbound-route-filtering)

Full Context

debug router bgp outbound-route-filtering

Description

This command enables debugging for all BGP outbound route filtering (ORF) packets. ORF is used to inform a neighbor of targets (using target-list) that it is willing to receive.

Platforms

All

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry>match outer-tag)

Full Context

configure qos sap-ingress mac-criteria entry match outer-tag

Description

This command configures the matching of the first tag that is carried transparently through the service. Service delimiting tags are stripped from the frame and the outer tag on ingress is the first tag after any service delimiting tags. The outer tag is the first tag before any service delimiting tags on egress. This allows matching VLAN tags for explicit filtering or QoS setting when using default or null encapsulations.

On dot1Q SAPs, the outer tag is the only tag that can be matched. On dot1Q SAPs with exact match (sap 2/1/1:50), the outer tag will be populated with the next tag that is carried transparently through the service or 0 if there is no additional VLAN tags on the frame.

On QinQ SAPs that strip a single service delimiting tag, the outer tag will contain the next tag (which is still the first tag carried transparently through the service.) On SAPs with two service delimiting tags (two tags stripped), the outer-tag will contain 0 even if there are more than two tags on the frame.

The optional vid_mask is defaulted to 4095 (exact match) but may be specified to allow pattern matching. The masking operation is ((value & vid-mask) = = (tag & vid-mask)). A value of 6 and a mask of 7 would match all VIDs with the lower 3 bits set to 6.

For QoS, the VID type cannot be specified on the default QoS policy.

The default vid-mask is set to 4095 for exact match.

Platforms

All

Context

[Tree] (config>filter>mac-filter>entry>match outer-tag)

Full Context

configure filter mac-filter entry match outer-tag

Description

This command configures the matching of the first tag that is carried transparently through the service. Service delimiting tags are stripped from the frame and outer tag on ingress is the first tag after any service delimiting tags. Outer tag is the first tag before any service delimiting tags on egress. This allows matching VLAN tags for explicit filtering or QoS setting when using default or null encapsulations.

On dot1Q SAPs outer-tag is the only tag that can be matched. On dot1Q SAPs with exact match (sap 2/1/1:50) the outer-tag will be populated with the next tag that is carried transparently through the service or 0 if there is no additional VLAN tags on the frame.

On QinQ SAPs that strip a single service delimiting tag, outer-tag will contain the next tag (which is still the first tag carried transparently through the service.) On SAPs with two service delimiting tags (two tags stripped) outer-tag will contain 0 even if there are more than 2 tags on the frame.

The optional vid-mask is defaulted to 4095 (exact match) but may be specified to allow pattern matching. The masking operation is ((value & vid-mask) = = (tag & vid-mask)). A value of 6 and a mask of 7 would match all VIDs with the lower 3 bits set to 6.

For QoS the VID type cannot be specified on the default QoS policy.

The default vid-mask is set to 4095 for exact match.

Default

no outer-tag

Platforms

All

Context

[Tree] (config>li>li-fltr>li-mac-fltr>entry>match outer-tag)

Full Context

configure li li-filter li-mac-filter entry match outer-tag

Description

This command configures the outer-tag to match on and must be used in conjunction with the match criteria SAP for the entry match to activate.

The match criteria SAP must be an exact match with the QinQ configured on the Epipe or VPLS service. An associated outer-tag must be provisioned. For example, SAP 1/1/1:1.*, where the outer-tag is “*”, and an outer-tag of 1 would perform LI on 1/1/1:1.1 on a 1/1/1:1.* SAP.

The no form of this command removes the outer-tag as the match criterion.

Default

no outer-tag

Parameters

number

Specifies the outer-tag value.

Values

1 to 4094 in decimal

0x1 to 0xFFFE in hexadecimal

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>sync-if-timing>bits output)

Full Context

configure system sync-if-timing bits output

Description

This command provides a context to configure and enable or disable the external BITS timing reference output to the central clock of the router. On redundant systems, there are two possible BITS-out interfaces, one for each CPM or CCM.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>security>management-interface output-authorization)

Full Context

configure system security management-interface output-authorization

Description

This command configures the authorization of the configuration and state output in model-driven interfaces and telemetry. When enabled, commands that display configuration or state output authorize every element in the output. If a remote AAA server is configured, this can cause delays in displaying output while it is authorized. If a large amount of output is displayed, for example, when displaying the system configuration, the remote AAA server receives a large number of authorization requests.

Input to edit the configuration is not affected by this command, and is always authorized.

Platforms

All

Context

[Tree] (config>service>vprn>nat outside)

[Tree] (config>router>nat outside)

Full Context

configure service vprn nat outside

configure router nat outside

Description

Commands in this context configure the outside NAT instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes outside-ip)

Full Context

configure aaa isa-radius-policy acct-include-attributes outside-ip

Description

This command enables the inclusion of the outside IP attributes.

The no form of the command excludes outside IP attributes.

Default

no outside-ip

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes outside-service-id)

Full Context

configure aaa isa-radius-policy acct-include-attributes outside-service-id

Description

This command enables the inclusion of the NAT outside service ID attributes.

The no form of the command excludes NAT outside service ID attributes.

Default

no outside-service-id

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-profile>host-limits overall)

[Tree] (config>subscr-mgmt>sub-profile>host-limits overall)

Full Context

configure subscriber-mgmt sla-profile host-limits overall

configure subscriber-mgmt sub-profile host-limits overall

Description

This command configures the maximum number of subscriber hosts per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of subscriber hosts limit.

Parameters

max-nr-of-hosts

Specifies the maximum number of subscriber hosts.

Values

1 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-profile>session-limits overall)

[Tree] (config>subscr-mgmt>sub-profile>session-limits overall)

Full Context

configure subscriber-mgmt sla-profile session-limits overall

configure subscriber-mgmt sub-profile session-limits overall

Description

This command configures the maximum number of subscriber sessions per SLA profile instance or per subscriber.

The no form of this command removes the maximum number of subscriber sessions limit.

Parameters

max-nr-of-sessions

Specifies the maximum number of subscriber sessions.

Values

0 to 131071

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>sys>security>cpu-protection>policy overall-rate)

Full Context

configure system security cpu-protection policy overall-rate

Description

This command applies a maximum packet arrival rate limit (applied per SAP/interface) for the entire SAP/interface, above which packets will be discarded immediately. The rate defined is a global rate limit for the interface regardless of how many traffic flows are present on the SAP/interface. It is a per-SAP/interface rate.

The no form of this command sets overall-rate parameter back to the default value.

Default

overall max for cpu-protection-policy-id 1 to 253

overall 6000 for cpu-protection-policy-id 254 (default access interface policy)

overall max for cpu-protection-policy-id 255 (default network interface policy)

Parameters

packet-rate-limit

Specifies a packet arrival rate limit in packets per second.

Values

1 to 65535, max (the max indicates no limit)

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

Context

[Tree] (config>cflowd overflow)

Full Context

configure cflowd overflow

Description

This command specifies the percentage of the flow cache entries removed when the maximum number of entries is exceeded. The entries removed are the entries that have not been updated for the longest amount of time.

The no form of this command resets the number of entries cleared from the flow cache on overflow to the default value.

Default

overflow 1

Parameters

percent

Specifies the percentage of the flow cache entries removed when the maximum number of entries is exceeded.

Values

1 to 50 percent

Platforms

All

Context

[Tree] (config>router>mpls>lsp>auto-bandwidth overflow-limit)

[Tree] (config>router>mpls>lsp-template>auto-bandwidth overflow-limit)

Full Context

configure router mpls lsp auto-bandwidth overflow-limit

configure router mpls lsp-template auto-bandwidth overflow-limit

Description

This command configures overflow-triggered auto-bandwidth adjustment. It sets the threshold at which bandwidth adjustment is initiated from the configured number of overflow samples having been reached, regardless of how much time remains until the adjust interval ends.

A sample interval is counted as an overflow if the average data rate during the sample interval is higher than the currently reserved bandwidth by at least the thresholds configured as part of this command.

If overflow-triggered auto-bandwidth adjustment is successful the overflow count, maximum average data rate and adjust count are reset. If overflow-triggered auto-bandwidth adjustment fails then the overflow count is reset but the maximum average data rate and adjust count maintain current values.

The no form of this command disables overflow-triggered automatic bandwidth adjustment.

Default

no overflow-limit

Parameters

number

Specifies the number of overflow samples that triggers an overflow auto-bandwidth adjustment attempt.

Values

1 to 10

percent

Specifies the minimum difference between the current bandwidth of the LSP and the sampled data rate, expressed as a percentage of the current bandwidth, for counting an overflow sample.

Values

1 to 100

bandwidth-in-mbps

Specifies the minimum difference between the current bandwidth of the LSP and the sampled data rate, expressed as an absolute bandwidth (Mb/s) relative to the current bandwidth, for counting an overflow sample.

Values

1 to 6400000

Platforms

All

Context

[Tree] (config>service>vpls>spb overload)

Full Context

configure service vpls spb overload

Description

This command administratively sets the SPB to operate in the overload state for a specific time period, in seconds, or indefinitely. During normal operation, the router may be forced to enter an overload state due to a lack of resources. When in the overload state, the router is only used if the destination is reachable by SPB and is not used for other transit traffic.

If a time period is specified, the overload state persists for the configured length of time. If no time is specified, the overload state operation is maintained indefinitely.

The overload command can be useful in circumstances where SPB is overloaded or used prior to executing a shutdown command to divert traffic around the switch.

The no form of this command causes the router to exit the overload state.

Default

no overload

Parameters

seconds

The time, in seconds, that this router must operate in overload state.

Values

60 to 1800

Default

Infinity (overload state maintained indefinitely)

Platforms

All

Context

[Tree] (config>service>vprn>isis overload)

Full Context

configure service vprn isis overload

Description

This command administratively sets the IS-IS router to operate in the overload state for a specific time period, in seconds, or indefinitely.

During normal operation, the router may be forced to enter an overload state due to a lack of resources. When in the overload state, the router is only used if the destination is reachable by the router and will not be used for other transit traffic.

If a time period is specified, the overload state persists for the configured length of time. If no time is specified, the overload state operation is maintained indefinitely.

The overload command can be useful in circumstances where the router is overloaded or used prior to executing a shutdown command to divert traffic around the router.

The max-metric parameter can be set to advertise transit links with the maximum metric of 0xffffffe (wide metrics) or 0x3f (regular metrics), instead of setting the overload bit when placing the router in overload.

The no form of this command causes the router to exit the overload state.

Default

no overload

Parameters

seconds

Specifies the time, in seconds, that this router must operate in overload state.

Values

60 to 1800

Default

infinity (overload state maintained indefinitely)

max-metric

Set the maximum metric instead of overload.

Platforms

All

Context

[Tree] (config>service>vprn>ospf overload)

[Tree] (config>service>vprn>ospf3 overload)

Full Context

configure service vprn ospf overload

configure service vprn ospf3 overload

Description

This command changes the overload state of the local router so that it appears to be overloaded. When overload is enabled, the router can participate in OSPF routing, but is not used for transit traffic. Traffic destined to directly attached interfaces continue to reach the router.

To put the IGP in an overload state, enter a timeout value. The IGP will enter the overload state until the timeout timer expires or a no overload command is executed.

If the overload command is performed during the execution of an overload-on-boot command, the overload command takes precedence. This could occur as a result of a saved configuration file in which both parameters are saved. When the file is saved by the system, the overload-on-boot command is saved after the overload command.

Use the no form of this command to return to the default. When the no overload command is executed, the overload state is terminated, regardless the reason the protocol entered overload state.

Default

no overload

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

60 to1800

Default

60

Platforms

All

Context

[Tree] (config>router>isis overload)

Full Context

configure router isis overload

Description

This command administratively sets the IS-IS router to operate in the overload state for a specific time period, in seconds, or indefinitely.

During normal operation, the router may be forced to enter an overload state due to a lack of resources. When in the overload state, the router is only used if the destination is reachable by the router and will not be used for other transit traffic.

If a time period is specified, the overload state persists for the configured length of time. If no time is specified, the overload state operation is maintained indefinitely.

The overload command is cleared from the configuration after a reboot if overload-on-boot is configured with or without a timeout value. To keep the IS-IS router in the overload state indefinitely after rebooting, configure overload-on-boot with no timeout value or configure the overload command with no overload-on-boot command.

The overload command can be useful in circumstances where the router is overloaded or used prior to executing a shutdown command to divert traffic around the router.

The max-metric parameter can be set to advertise transit links with the maximum metric of 0xffffffe (wide metrics) or 0x3f (regular metrics), instead of setting the overload bit when placing the router in overload.

The no form of this command causes the router to exit the overload state.

Default

no overload

Parameters

seconds

Specifies the time, in seconds, that this router must operate in overload state.

Default

infinity (overload state maintained indefinitely)

Values

60 to 1800

max-metric

Sets the maximum metric instead of overload.

Platforms

All

Context

[Tree] (config>router>ospf3 overload)

[Tree] (config>router>ospf overload)

Full Context

configure router ospf3 overload

configure router ospf overload

Description

This command changes the overload state of the local router so that it appears to be overloaded. When overload is enabled, the router can participate in OSPF routing, but is not used for transit traffic. Traffic destined to directly attached interfaces continues to reach the router.

To put the IGP in an overload state enter a timeout value. The IGP will enter the overload state until the timeout timer expires or a no overload command is executed.

If the overload command is encountered during the execution of an overload-on-boot command then this command takes precedence. This could occur as a result of a saved configuration file where both parameters are saved. When the file is saved by the system the overload-on-boot command is saved after the overload command. However, when overload-on-boot is configured under OSPF with no timeout value configured, the router will remain in overload state indefinitely after a reboot.

The no form of this command reverts to the default. When the no overload command is executed, the overload state is terminated regardless of the reason the protocol entered overload state.

Default

no overload

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

1 to 1800 in the following context.

configure router ospf

60 to 1800 in the following context.

configure router ospf3

Platforms

All

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action overload-drop)

Full Context

configure application-assurance group policy app-qos-policy entry action overload-drop

Description

This command configures a drop action for cases where flow records are not created (overload).

Parameters

event-log-name

Specifies the event log name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca overload-drop)

Full Context

configure application-assurance group statistics threshold-crossing-alert overload-drop

Description

This command configures a TCA for the counter capturing drops due to the overload-drop AQP command. An overload-drop TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating an overload-drop TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>isis overload-export-external)

Full Context

configure service vprn isis overload-export-external

Description

This command enables external routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes external routes to be withdrawn when the router is in overload.

Default

no overload-export-external

Platforms

All

Context

[Tree] (config>router>isis overload-export-external)

Full Context

configure router isis overload-export-external

Description

This command enables external routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes external routes to be withdrawn when the router is in overload.

Default

no overload-export-external

Platforms

All

Context

[Tree] (config>service>vprn>isis overload-export-interlevel)

Full Context

configure service vprn isis overload-export-interlevel

Description

This command enables inter-level routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes inter-level routes to be withdrawn when the router is in overload.

Default

no overload-export-interlevel

Platforms

All

Context

[Tree] (config>router>isis overload-export-interlevel)

Full Context

configure router isis overload-export-interlevel

Description

This command enables inter-level routes that are exported with an IS-IS export policy to continue to be advertised when the router is in overload.

The no form of this command causes inter-level routes to be withdrawn when the router is in overload.

Default

no overload-export-interlevel

Platforms

All

Context

[Tree] (config>service>vprn>isis overload-fib-error-notify-only)

[Tree] (config>router>isis overload-fib-error-notify-only)

Full Context

configure service vprn isis overload-fib-error-notify-only

configure router isis overload-fib-error-notify-only

Description

This command configures the IS-IS router to send a notification when an overload condition occurs when programming the FIB, instead of advertising the overload condition of the router in the IS-IS LSP.

When this command is configured, the IS-IS router enters a suboptimal state where it only sends a notification trap; the router can still be used by transit traffic in this state. The IS-IS router tracks the segment routing prefix SIDs where FIB programming failed. With the retry parameter configured, the router retries programming the segment routing prefix SIDs in the FIB using this tracked information.

When this command is not configured, during normal operation, the system may force the router to enter an overload state because of a lack of FIB resources. In this state, the router is used to terminate traffic and is not used to transit traffic.

The removal of the overload-fib-error-notify-only command configuration causes the system to program the failed entries in the FIB by triggering an immediate SPF.

The no form of this command causes the router to enter the full overload state.

Default

no overload-fib-error-notify-only

Parameters

seconds

Specifies the time, in seconds, this router uses to retry programming the failed entries in the FIB when overload-fib-error-notify-only is configured. The overload-fib-error-notify-only command must be configured to use the retry timer.

Values

10 to 1800

Default

10

Platforms

All

Context

[Tree] (config>service>vprn>ospf overload-include-ext-1)

[Tree] (config>service>vprn>ospf3 overload-include-ext-1)

Full Context

configure service vprn ospf overload-include-ext-1

configure service vprn ospf3 overload-include-ext-1

Description

This command controls whether routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-1 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-1

Platforms

All

Context

[Tree] (config>router>ospf3 overload-include-ext-1)

[Tree] (config>router>ospf overload-include-ext-1)

Full Context

configure router ospf3 overload-include-ext-1

configure router ospf overload-include-ext-1

Description

This command controls whether external type-1 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-1 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-1

Platforms

All

Context

[Tree] (config>service>vprn>ospf3 overload-include-ext-2)

[Tree] (config>service>vprn>ospf overload-include-ext-2)

Full Context

configure service vprn ospf3 overload-include-ext-2

configure service vprn ospf overload-include-ext-2

Description

This command controls whether external type-2 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-2 routes is advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-2

Platforms

All

Context

[Tree] (config>router>ospf3 overload-include-ext-2)

[Tree] (config>router>ospf overload-include-ext-2)

Full Context

configure router ospf3 overload-include-ext-2

configure router ospf overload-include-ext-2

Description

This command controls whether external type-2 routes should be readvertised with a maximum metric value when the system goes into overload state for any reason. When this command is enabled and the router is in overload, all external type-2 routes are advertised with the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-ext-2

Platforms

All

Context

[Tree] (config>router>isis overload-include-locators)

Full Context

configure router isis overload-include-locators

Description

This command configures the router to include SRv6 locators when advertising links and prefixes with max-metric if the IS-IS instance goes into overload because of resource depletion or manual configuration.

The no form of this command causes the router to stop including the SRv6 locators when advertising links and prefixes with max-metric.

Default

no overload-include-locators

Platforms

All

Context

[Tree] (config>service>vprn>ospf overload-include-stub)

[Tree] (config>service>vprn>ospf3 overload-include-stub)

Full Context

configure service vprn ospf overload-include-stub

configure service vprn ospf3 overload-include-stub

Description

This command controls whether the OSPF stub networks should be advertised with a maximum metric value when the system goes into overload state for any reason. When enabled, the system uses the maximum metric value. When this command is enabled and the router is in overload, all stub interfaces, including loopback and system interfaces, are advertised at the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-stub

Platforms

All

Context

[Tree] (config>router>ospf overload-include-stub)

[Tree] (config>router>ospf3 overload-include-stub)

Full Context

configure router ospf overload-include-stub

configure router ospf3 overload-include-stub

Description

This command controls whether the OSPF stub networks should be advertised with a maximum metric value when the system goes into overload state for any reason. When enabled, the system uses the maximum metric value. When this command is enabled and the router is in overload, all stub interfaces, including loopback and system interfaces, are advertised at the maximum metric.

The no form of this command reverts to the default value.

Default

no overload-include-stub

Platforms

All

Context

[Tree] (config>service>vpls>spb overload-on-boot)

Full Context

configure service vpls spb overload-on-boot

Description

When the router is in an overload state, SPB the B-VPLS is used only if there is no other SPB B-VPLS to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• The timeout timer expires.

• A manual override of the current overload state is entered with the no form of the config>service>vpls>spb overload command.

The no form of this command does not affect the overload-on-boot function.

If no timeout is specified, SPB IS-IS goes into overload indefinitely after a reboot. After the reboot, the SPB IS-IS status displays a permanent overload state:

L1 LSDB Overload: Manual on boot (Indefinitely in overload)

This state can be cleared with the config>service>vpls>spb> no overload command.

When specifying a timeout value, SPB IS-IS goes into overload for the configured timeout after a reboot. After the reboot, SPB IS-IS status displays the remaining time the system stays in overload:

L1 LSDB Overload: Manual on boot (Overload Time Left: 17)

The overload state can be cleared before the timeout expires with the no form of the config> service>vpls>spb overload command.

The no form of this command removes the overload-on-boot functionality from the configuration.

Default

no overload-on-boot

Parameters

seconds

Specifies the time, in seconds, that this router must operate in overload state.

Values

60 to 1800

Default

Infinity (overload state maintained indefinitely)

Platforms

All

Context

[Tree] (config>service>vprn>isis overload-on-boot)

Full Context

configure service vprn isis overload-on-boot

Description

When the router is in an overload state, it is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• The timeout timer expires.

• A manual override of the current overload state is entered with the config>router>isis>no overload command.

  The no overload command does not affect the overload-on-boot function.

If no timeout is specified, IS-IS will go into overload indefinitely after a reboot. After the reboot, the IS-IS status will display a permanent overload state:

• L1 LSDB Overload : Manual on boot (Indefinitely in overload)

• L2 LSDB Overload : Manual on boot (Indefinitely in overload)

This state can be cleared with the config>router>isis>no overload command.

When specifying a timeout value, IS-IS will go into overload for the configured timeout after a reboot. After the reboot, the IS-IS status will display the remaining time the system stays in overload:

• L1 LSDB Overload : Manual on boot (Overload Time Left : 17)

• L2 LSDB Overload : Manual on boot (Overload Time Left : 17)

The overload state can be cleared before the timeout expires with the config>router>isis>no overload command.

The no form of this command removes the overload-on-boot functionality from the configuration.

Use the show router isis status command to display the administrative and operational state as well as all timers.

Default

no overload-on-boot

Parameters

timeout seconds

Configure the timeout timer for overload-on-boot in seconds.

Values

60 to 1800

max-metric

Set the maximum metric instead of overload.

Platforms

All

Context

[Tree] (config>service>vprn>ospf overload-on-boot)

[Tree] (config>service>vprn>ospf3 overload-on-boot)

Full Context

configure service vprn ospf overload-on-boot

configure service vprn ospf3 overload-on-boot

Description

When the router is in an overload state, it is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• The timeout timer expires.

• A manual override of the current overload state is entered with the no overload command.

The no overload command does not affect the overload-on-boot function.

The no form of this command removes the overload-on-boot functionality from the configuration.

Default

no overload-on-boot

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

60 to1800

Default

60

Platforms

All

Context

[Tree] (config>router>isis overload-on-boot)

Full Context

configure router isis overload-on-boot

Description

When the router is in an overload state, the router is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

1. The timeout timer expires.

2. A manual override of the current overload state is entered with the config>router>isis>no overload command.

The no overload command does not affect the overload-on-boot function.

If no timeout is specified, IS-IS will go into overload indefinitely after a reboot. After the reboot, the IS-IS status will display a permanent overload state:

• L1 LSDB Overload : Manual on boot (Indefinitely in overload)

• L2 LSDB Overload : Manual on boot (Indefinitely in overload)

This state can be cleared with the config>router>isis>no overload command.

When specifying a timeout value, IS-IS will go into overload for the configured timeout after a reboot. After the reboot, the IS-IS status will display the remaining time the system stays in overload:

• L1 LSDB Overload : Manual on boot (Overload Time Left : 17)

• L2 LSDB Overload : Manual on boot (Overload Time Left : 17)

The overload state can be cleared before the timeout expires with the config>router>isis>no overload command.

The no form of this command removes the overload-on-boot functionality from the configuration.

Use the show router isis status command to display the administrative and operational state as well as all timers.

Default

no overload-on-boot

Parameters

seconds

Specifies the timeout timer for overload-on-boot, in seconds.

Values

60 to 1800

max-metric

Sets the maximum metric instead of overload.

Platforms

All

Context

[Tree] (config>router>ospf overload-on-boot)

[Tree] (config>router>ospf3 overload-on-boot)

Full Context

configure router ospf overload-on-boot

configure router ospf3 overload-on-boot

Description

When the router is in an overload state, the router is used only if there is no other router to reach the destination. This command configures the IGP upon bootup in the overload state until one of the following events occur:

• the timeout timer expires

• a manual override of the current overload state is entered with the no overload command

The no overload command does not affect the overload-on-boot function.

The no form of this command removes the overload-on-boot functionality from the configuration.

The default timeout value is 60 seconds, which means after 60 seconds overload status the SR will recover (change back to non-overload status). However, when overload-on-boot is configured under OSPF with no timeout value the router will remain in overload state indefinitely after a reboot.

Default

no overload-on-boot

Parameters

timeout seconds

Specifies the number of seconds to reset overloading.

Values

1 to 1800 in the config>router> ospf context

60 to 1800 in the config>router>ospf3 context

Platforms

All

Context

[Tree] (config>isa>aa-grp overload-sub-quarantine)

Full Context

configure isa application-assurance-group overload-sub-quarantine

Description

Commands in this context configure overload subscriber detection for this application assurance group.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>pim>rp>static override)

Full Context

configure service vprn pim rp static override

Description

This command changes the precedence of static RP over dynamically learned Rendezvous Point (RP).

When enabled, the static group-to-RP mappings take precedence over the dynamically learned mappings.

Default

no override

Platforms

All

Context

[Tree] (config>router>pim>rp>ipv6>static>address override)

[Tree] (config>router>pim>rp>static>address override)

Full Context

configure router pim rp ipv6 static address override

configure router pim rp static address override

Description

This command changes the precedence of static RP over dynamically-learned Rendezvous Points (RPs).

When enabled, the static group-to-RP mappings take precedence over the dynamically learned mappings.

The no form of this command reverts to the default.

Default

no override

Platforms

All

Context

[Tree] (config>router>isis>segm-rtng>msd override-bmi)

Full Context

configure router isis segment-routing maximum-sid-depth override-bmi

Description

This command provides the ability to override the announced MSD node Base MPLS Imposition (BMI). The MSD-BMI value announced by a router can be used by recipients to understand the number of MPLS labels that can be imposed inclusive of all service, transport, or special labels.

When override-bmi is not configured, the router announces the node maximum supported BMI assuming the most simple services and Layer 2 encapsulation.

The no form of this command reverts to the default.

Default

no override-bmi

Parameters

values

Specifies the override BMI.

Values

0 to 12

Platforms

All

Context

[Tree] (config>router>ospf>segm-rtng>msd override-bmi)

Full Context

configure router ospf segment-routing maximum-sid-depth override-bmi

Description

This command provides the ability to override the announced MSD node Base MPLS Imposition (BMI). The MSD-BMI value announced by a router can be used by recipients to understand the number of MPLS labels that can be imposed inclusive of all service, transport, or special labels.

When override-bmi is not configured, the router announces the node maximum supported BMI assuming the most simple services and Layer 2 encapsulation.

The no form of this command reverts to the default.

Default

no override-bmi

Parameters

values

Specifies the override BMI. The upper limit depends on the FP chipset used.

Values

0 to 12

Platforms

All

Context

[Tree] (config>router>isis>segm-rtng>msd override-erld)

Full Context

configure router isis segment-routing maximum-sid-depth override-erld

Description

This command provides the ability to override the announced MSD node Entropy Readable Label Depth (ERLD). It is useful for ingress LSRs to know each intermediate LSR's capability of reading the maximum label stack depth and performing EL-based load balancing.

When override-erld is not configured, then the router announces the node maximum supported ERLD assuming the most simple Layer 2 encapsulation.

The no form of this command reverts to the default.

Default

no override-erld

Parameters

values

Specifies the override ERLD.

Values

0 to 15

Platforms

All

Context

[Tree] (config>router>ospf>segm-rtng>msd override-erld)

Full Context

configure router ospf segment-routing maximum-sid-depth override-erld

Description

This command provides the ability to override the announced MSD node Entropy Readable Label Depth (ERLD). It is useful for ingress LSRs to know each intermediate LSR's capability of reading the maximum label stack depth and performing EL-based load balancing.

When override-erld is not configured, then the router announces the node maximum supported ERLD assuming the most simple Layer 2 encapsulation.

Default

no override-erld

Parameters

values

Specifies the override ERLD. The upper limit depends on the FP chipset used.

Values

0 to 15

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6 override-slaac)

[Tree] (config>service>vprn>sub-if>ipv6>dhcp6 override-slaac)

[Tree] (config>service>ies>sub-if>ipv6>dhcp6 override-slaac)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6 override-slaac)

Full Context

configure service vprn subscriber-interface group-interface ipv6 dhcp6 override-slaac

configure service vprn subscriber-interface ipv6 dhcp6 override-slaac

configure service ies subscriber-interface ipv6 dhcp6 override-slaac

configure service ies subscriber-interface group-interface ipv6 dhcp6 override-slaac

Description

This command allows a DHCP IA_NA address to override and replace a host existing SLAAC address. When this feature is enabled, a subscriber SLAAC address is removed once the DHCP IA_NA address assignment is completed. If used with conjunction with the allow-multiple-wan-address command, the DHCP IA_NA address will also override the SLAAC address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>bgp override-tunnel-elc)

Full Context

configure router bgp override-tunnel-elc

Description

This command enables or disables entropy label capability (ELC) on BGP tunnels.

When this command is enabled, the system assumes that all far ends for BGP tunnels are entropy-label-capable, regardless of any received capability signaling. This ensures that the entropy label will be inserted on BGP tunnels in the absence of capability signaling support by the far end.

This is a system-wide configuration, since efficient entropy label operation requires that all LSRs in a network support entropy labels. This command should be used with care, particularly in inter-AS use cases, since entropy label capability may differ between domains.

Default

no override-tunnel-elc

Platforms

All

Context

[Tree] (config>router>ospf>entropy-label override-tunnel-elc)

[Tree] (config>router>isis>entropy-label override-tunnel-elc)

Full Context

configure router ospf entropy-label override-tunnel-elc

configure router isis entropy-label override-tunnel-elc

Description

This command configures the ability to override any received entropy label capability advertisement. When enabled, the system assumes that all nodes for an IGP domain are capable of receiving and processing the entropy label on segment routed tunnels. This command can only be configured if entropy-label is enabled via the config>router>isis>segment-routing> entropy-label or config>router>ospf>segment-routing> entropy-label command.

The no form of this command disables the override. The system assumes entropy label capability for other nodes in the IGP instance if capability advertisements are received.

Default

no override-tunnel-elc

Platforms

All

Context

[Tree] (config>router>mpls>lsp-template override-tunnel-elc)

[Tree] (config>router>mpls>lsp override-tunnel-elc)

Full Context

configure router mpls lsp-template override-tunnel-elc

configure router mpls lsp override-tunnel-elc

Description

This command allows the system to override any received entropy label capability advertisement.

This command is enabled under the LSP context or in LSP templates of type pce-init-p2p-srte and on-demand-p2p-srte, the system assumes that all nodes along the path of the SR-TE LSP are capable of receiving and processing the entropy label. This includes SR-TE LSPs that have a PCE-computed path, PCE-initiated SR-TE LSPs, and on-demand SR-TE LSPs.

The no form of this command disables the override.

Default

no override-tunnel-elc

Platforms

All

Context

[Tree] (config>ipsec>ike-policy own-auth-method)

Full Context

configure ipsec ike-policy own-auth-method

Description

This command configures the authentication method used with this IKE policy on its own side.

Default

no own-auth-method

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>provider-tunnel>inclusive owner)

Full Context

configure service vpls provider-tunnel inclusive owner

Description

This command selects the owner protocol of the inclusive PMSI tunnel in the service. Only one of the protocols will support the provider tunnel.

The bgp-vpls and bgp-evpn-mpls parameters cannot be configured together in the same service. Although bgp-ad and bgp-evpn can coexist in the same service, bgp-ad cannot be configured as the owner of the provider-tunnel. In addition, the following applies to this configuration:

• The owner must be explicitly set before the provider-tunnel can be no shutdown.

• If the owner is bgp-ad, then BGP-EVPN MPLS and BGP-EVPN VXLAN will fail to no shutdown.

• The provider-tunnel must be shutdown to change the owner; on the fly change is not allowed.