d Commands

d-path-length-ignore

d-path-length-ignore

Syntax

[no] d-path-length-ignore

Context

[Tree] (config>router>bgp>path-selection d-path-length-ignore)

[Tree] (config>service>vprn d-path-length-ignore)

[Tree] (config>service>vprn>bgp>path-selection d-path-length-ignore)

Full Context

configure router bgp best-path-selection d-path-length-ignore

configure service vprn d-path-length-ignore

configure service vprn bgp best-path-selection d-path-length-ignore

Description

This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.

At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.

Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.

The no form of this command disables the ability to ignore the D-PATH domain segment length.

Default

no d-path-length-ignore

Platforms

All

dack-timeout

dack-timeout

Syntax

dack-timeout dack-timeout

no dack-timeout

Context

[Tree] (config>app-assure>group>tcp-optimizer dack-timeout)

Full Context

configure application-assurance group tcp-optimizer dack-timeout

Description

This command configures a delayed ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.

The no form of this command disables the delayed acknowledgment timeout.

Default

no dack-timeout

Parameters

dack-timeout

Specifies the delayed acknowledgment timeout in ms.

Default

200

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dad-disable

dad-disable

Syntax

[no] dad-disable

Context

[Tree] (config>service>ies>if>ipv6 dad-disable)

[Tree] (config>service>vprn>if>ipv6 dad-disable)

[Tree] (config>router>if>ipv6 dad-disable)

Full Context

configure service ies interface ipv6 dad-disable

configure service vprn interface ipv6 dad-disable

configure router interface ipv6 dad-disable

Description

This command disables duplicate address detection (DAD) on a per-interface basis. This prevents the router from performing a DAD check on the interface. All IPv6 addresses of an interface with DAD disabled, immediately enter a preferred state, without checking for uniqueness on the interface. This is useful for interfaces which enter a looped state during troubleshooting and operationally disable themselves when the loop is detected, requiring manual intervention to clear the DAD violation.

The no form of this command turns off dad-disable on the interface.

Default

no dad-disable

Platforms

All

dad-snooping

dad-snooping

Syntax

[no] dad-snooping

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>nd dad-snooping)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>nd dad-snooping)

Full Context

configure service ies subscriber-interface group-interface ipv6 nd dad-snooping

configure service vprn subscriber-interface group-interface ipv6 nd dad-snooping

Description

This command allows the router to populate the neighbor discovery table through snooping subscribers’ duplicate address detection messages.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

damp-peer-oscillations

damp-peer-oscillations

Syntax

damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]

Context

[Tree] (config>service>vprn>bgp>group>neighbor damp-peer-oscillations)

[Tree] (config>service>vprn>bgp>group damp-peer-oscillations)

[Tree] (config>service>vprn>bgp damp-peer-oscillations)

Full Context

configure service vprn bgp group neighbor damp-peer-oscillations

configure service vprn bgp group damp-peer-oscillations

configure service vprn bgp damp-peer-oscillations

Description

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default

no damp-peer-oscillations

Parameters

initial-wait

Specifies the amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.

Values

0 to 2048

Default

0

second-wait

Specifies the period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.

Values

0 to 2048

Default

5

max-wait

Specifies the maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.

Values

0 to 2048

Default

60

minutes

Specifies the interval of time, in minutes after a session reset, during which the session must be error-free in to reset the penalty counter and return to idle-hold-time to initial-wait.

Values

0 to 2048

Default

30

Platforms

All

damp-peer-oscillations

Syntax

damp-peer-oscillations [idle-hold-time initial-wait second-wait max-wait] [error-interval minutes]

Context

[Tree] (config>router>bgp>group>neighbor damp-peer-oscillations)

[Tree] (config>router>bgp>group damp-peer-oscillations)

[Tree] (config>router>bgp damp-peer-oscillations)

Full Context

configure router bgp group neighbor damp-peer-oscillations

configure router bgp group damp-peer-oscillations

configure router bgp damp-peer-oscillations

Description

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default

no damp-peer-oscillations

Parameters

initial-wait

The amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.

Values

0 to 2048

Default

0

second-wait

A period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.

Values

1 to 2048

Default

5

max-wait

The maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.

Values

1 to 2048

Default

60

minutes

The interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return from idle-hold-time to initial-wait.

Values

0 to 2048

Default

30

Platforms

All

dampening

dampening

Syntax

dampening

Context

[Tree] (config>port>ethernet dampening)

Full Context

configure port ethernet dampening

Description

Commands in this context configure exponential port dampening for an Ethernet port.

Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.

Platforms

All

damping

damping

Syntax

[no] damping

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy damping)

Full Context

configure subscriber-mgmt bgp-peering-policy damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route the policy definition.

The no form of this command used at the global level disables route damping.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Half-life:

15 minutes

Max-suppress:

60 minutes

Suppress-threshold:

3000

Reuse-threshold

750

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

damping

Syntax

[no] damping

Context

[Tree] (config>service>vprn>bgp damping)

[Tree] (config>service>vprn>bgp>group>neighbor damping)

[Tree] (config>service>vprn>bgp>group damping)

Full Context

configure service vprn bgp damping

configure service vprn bgp group neighbor damping

configure service vprn bgp group damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level disables route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Half-life: 15 minutes

Max-suppress: 60 minutes

Suppress-threshold: 3000

Reuse-threshold: 750

Default

no damping — Learned route damping is disabled.

Platforms

All

damping

Syntax

[no] damping

Context

[Tree] (config>router>bgp>group damping)

[Tree] (config>router>bgp>group>neighbor damping)

[Tree] (config>router>bgp damping)

Full Context

configure router bgp group damping

configure router bgp group neighbor damping

configure router bgp damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level reverts route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

  • Half-life: 15 minutes

  • Max-suppress: 60 minutes

  • Suppress-threshold: 3000

  • Reuse-threshold: 750

Default

no damping

Platforms

All

damping

Syntax

[no] damping name

Context

[Tree] (config>router>policy-options damping)

Full Context

configure router policy-options damping

Description

This command creates a context to configure a route damping profile to use in route policy entries.

The no form of this command deletes the named route damping profile.

Default

no damping

Parameters

name

Specifies the damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

damping

Syntax

damping {name | none}

no damping

Context

[Tree] (config>router>policy-options>policy-statement>entry>action damping)

[Tree] (config>router>policy-options>policy-statement>default-action damping)

Full Context

configure router policy-options policy-statement entry action damping

configure router policy-options policy-statement default-action damping

Description

This command configures a damping profile used for routes matching the route policy statement entry.

If no damping criteria is specified, the default damping profile is used.

The no form of this command removes the damping profile associated with the route policy entry.

Default

no damping

Parameters

name

The damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end"," @variable@end", or "start@variable@".

The name specified must already be defined.

none

Disables route damping for the route policy.

Platforms

All

data

data

Syntax

data [group grp-ip-address] [source ip-address] [detail]

no data

Context

[Tree] (debug>router>pim data)

Full Context

debug router pim data

Description

This command enables debugging for PIM data exception.

The no form of this command disables PIM data exception debugging.

Parameters

grp-ip-address

Debugs information associated with the specified data exception.

Values

multicast group address (ipv4, ipv6)

ip-address

Debugs information associated with the specified data exception.

Values

source address (ipv4, ipv6)

detail

Debugs detailed IP data exception information.

Platforms

All

data-delay-interval

data-delay-interval

Syntax

data-delay-interval seconds

no data-delay-interval

Context

[Tree] (config>service>vpls>provider-tunnel>selective data-delay-interval)

[Tree] (config>service>vpls>provider-tunnel>inclusive data-delay-interval)

Full Context

configure service vpls provider-tunnel selective data-delay-interval

configure service vpls provider-tunnel inclusive data-delay-interval

Description

This command configures the I-PMSI or S-PMSI data delay timer.

When used in I-PMSI trees, this delay timer allows time for the RSVP control plane to signal and bring up the S2L sub-LSP to each destination PE participating in the VPLS or B-VPLS service. The delay timer starts as soon as the P2MP LSP instance becomes operationally up under the inclusive node, for example, as soon as the first S2L sub-LSP is up. This occurs after configuring the following commands:

  • MD-CLI
    configure service vpls provider-tunnel inclusive admin-state enable
    
  • classic CLI
    configure service vpls provider-tunnel inclusive no shutdown

In general, it is started when the P2MP LSP instance transitions from the operationally down state to the up state.

For a mLDP P2MP LSP, the delay timer is started as soon as the P2MP FEC corresponding to the I-PMSI is resolved and installed at the root node. The user must factor in the value configured in the data-delay-interval at the root node any delay configured in IGP-LDP sync timer on interfaces over the network.
configure router interface ldp-sync-timer

This is because the mLDP P2MP LSP may move to a different interface at the expiry of this timer since the routing upstream of the LDP Label Mapping message may change when this timer expires and the interface metric is restored.

At the expiry of this timer, the VPLS or B-VPLS begins forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up.

When used for EVPN S-PMSI trees, the data delay interval determines the time the router takes to switch over the traffic from the Ingress Replication binds to the wildcard S-PMSI or from the wildcard S-PMSI to the S-PMSI, after the S-PMSI is created. This time should account for the time it takes for BGP to propagate the S-PMSI A-D route to the downstream PEs and the time it takes the downstream PEs to join the tree all the way up to the root.

The no form of this command reinstates the default value for this delay timer.

Parameters

seconds

Specifies the delay time value in seconds

Values

3 to 180

Default

15 (inclusive)

3 (selective)

Platforms

All

data-delay-interval

Syntax

data-delay-interval value

no data-delay-interval

Context

[Tree] (config>service>vprn>mvpn>pt>selective data-delay-interval)

Full Context

configure service vprn mvpn provider-tunnel selective data-delay-interval

Description

This command specifies the interval, in seconds, before a PE router connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSI.

The no form of this command reverts the value to the default.

Default

data-delay-interval 3

Parameters

value

Specifies the data delay interval, in seconds.

Values

3 to 180

Platforms

All

data-delay-interval

Syntax

data-delay-interval value

no data-delay-interval

Context

[Tree] (config>router>gtm>provider-tunnel>selective data-delay-interval)

Full Context

configure router gtm provider-tunnel selective data-delay-interval

Description

This command specifies the interval, in seconds, before a PBR connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command reverts the value to the default.

Default

data-delay-interval 3

Parameters

value

Specifies the data delay interval, in seconds.

Values

3 to 180

Default

3

Platforms

All

data-encapsulation

data-encapsulation

Syntax

[no] data-encapsulation

Context

[Tree] (config>service>vprn>msdp data-encapsulation)

Full Context

configure service vprn msdp data-encapsulation

Description

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default

data-encapsulation

Platforms

All

data-encapsulation

Syntax

[no] data-encapsulation

Context

[Tree] (config>router>msdp data-encapsulation)

Full Context

configure router msdp data-encapsulation

Description

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default

data-encapsulation

Platforms

All

data-threshold

data-threshold

Syntax

data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]

data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]

no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}

no data-threshold c-grp-ipv6-addr/prefix-length

Context

[Tree] (config>service>vprn>mvpn>pt>selective data-threshold)

[Tree] (config>service>vpls>provider-tunnel>selective data-threshold)

Full Context

configure service vprn mvpn provider-tunnel selective data-threshold

configure service vpls provider-tunnel selective data-threshold

Description

When used along with MVPN, this command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PE thresholds to create or delete ng-MVPN S-PMSI may also be specified. Omitting the PE thresholds, preserves the currently set value (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSI.

This command for S-PMSI trees can also be used in EVPN services. The data-threshold command options are used in the same way as in MVPN when applied to EVPN, in particular the rate and PE thresholds.

The no form of this command removes the values from the configuration.

Default

no data-threshold

Parameters

group-address/mask

Specifies a multicast group address and netmask length.

c-grp-ip-addr/mask | c-grp-ip-addr netmask

Specifies an IPv4 multicast group address and netmask length or network mask.

c-grp-ipv6-addr/prefix-length

Specifies an IPv6 multicast group address and prefix length.

s-pmsi-threshold

Specifies the rate, in kb/s. If the rate for a (C-S, C-G)) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel. Threshold 0 is supported. When threshold 0 is configured, the (C-S, C-G) switches to S-PMSI as soon as it is learned in the MVPN and without traffic flowing for that (C-S, C-G).

s-pmsi-threshold-add

Specifies the number of receiver PEs for creating S-PMSI. When the number of receiver PEs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.

s-pmsi-threshold-delete

Specifies the number of receiver PEs for deleting S-PMSI. When the number of receiver PEs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold, to avoid re-signaling of S-PMSI as the receiver PE count fluctuates.

Values

c-grp-ip-addr

: multicast group address a.b.c.d

mask

[4 to 32]

netmask

: a.b.c.d (network bits all 1 and host bits all 0)

s-pmsi-threshold

: [0 to 4294967294] (threshold in kb/s)

c-grp-ipv6-addr

: multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

prefix-length [1 to 128]

pe-threshold-add

: [1 to 65535], if never specified, 65535 is used (add threshold always met)

pe-threshold-delete

: [2 to 65535], if never specified, 65535 is used (delete threshold never met)

Platforms

All

data-threshold

Syntax

data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask} s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]

data-threshold c-grp-ipv6-addr/prefix-length s-pmsi-threshold [pe-threshold-add pe-threshold-add] [pe-threshold-delete pe-threshold-delete]

no data-threshold {c-grp-ip-addr/mask | c-grp-ip-addr netmask}

no data-threshold c-grp-ipv6-addr/prefix-length

Context

[Tree] (config>router>gtm>provider-tunnel>selective data-threshold)

Full Context

configure router gtm provider-tunnel selective data-threshold

Description

This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PBR thresholds for creating or deleting NG-MVPN S-PMSI may also be specified. Omitting the PBR thresholds preserves currently set values (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command removes the values from the configuration.

Default

no data-threshold

Parameters

c-grp-ip-addr/mask | c-grp-ip-addr netmask

Specifies an IPv4 multicast group address and netmask length or network mask.

Values

mask: 4 to 32

c-grp-ipv6-addr/prefix-length

Specifies an IPv6 multicast group address and prefix length.

s-pmsi-threshold

Specifies the rate, in kb/s. If the rate for a (C-S, C-G) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel.

s-pmsi-threshold-add

Specifies the number of receiver PBRs for creating S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.

s-pmsi-threshold-delete

Specifies the number of receiver PBRs for deleting S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold to avoid re-signaling of S-PMSI as the receiver PBR count fluctuates.

Values

c-grp-ip-addr

multicast group address a.b.c.d

mask

4 to 32

netmask

a.b.c.d (network bits all 1 and host bits all 0)

s-pmsi-threshold

1 to 4294967294 (threshold in kb/s)

c-grp-ipv6-addr

multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

prefix-length [1 to 128]

pe-threshold-add

1 to 65535 Default: 65535 (delete threshold always met)

pe-threshold-delete

2 to 65535 Default: 65535:(delete threshold always met)

Platforms

All

data-tlv-size

data-tlv-size

Syntax

data-tlv-size octets

no data-tlv-size

Context

[Tree] (config>oam-pm>session>ethernet>dmm data-tlv-size)

[Tree] (config>oam-pm>session>ethernet>slm data-tlv-size)

Full Context

configure oam-pm session ethernet dmm data-tlv-size

configure oam-pm session ethernet slm data-tlv-size

Description

This command allows the operator to add an optional Data TLV to PDU and increase the frame on the wire by the specified amount. Note that this command only configures the size of the padding added to the PDU, and does not configure the total size of the frame on the wire.

The no form of this command removes the optional TLV.

Parameters

octets

Specifies the size, in octets, of the optional Data TLV.

Values

0, 3 to 2000

Default

0

Platforms

All

data-trigger

data-trigger

Syntax

data-trigger

Context

[Tree] (config>service>ies>sub-if>grp-if data-trigger)

[Tree] (config>service>vprn>sub-if>grp-if data-trigger)

Full Context

configure service ies subscriber-interface group-interface data-trigger

configure service vprn subscriber-interface group-interface data-trigger

Description

Commands in this context configure data-triggered subscriber management entities.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

data-triggered

data-triggered

Syntax

[no] data-triggered

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)

Full Context

configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered

configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered

Description

This command enables learning of MAC addresses from data packets.

The no form of this command disables learning of MAC addresses from data packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

data-triggered

Syntax

[no] data-triggered

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state data-triggered)

Full Context

configure subscriber-mgmt wlan-gw ue-query state data-triggered

Description

This command enables matching on UEs currently in a data-triggered state. This query only filters UEs that are currently authenticating due to a data trigger, not UEs that were originally authenticated due to data trigger, such as those in an ESM, DSM, or portal state.

The no form of this command disables matching on UEs in a data-triggered state, unless all state matching is disabled.

Default

no data-triggered

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

data-triggered-ue-creation

data-triggered-ue-creation

Syntax

data-triggered-ue-creation [arp]

no data-triggered-ue-creation

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation

Description

This command enables data-triggered subscriber creation for Wi-Fi subscribers. Data- triggered UE creation is currently only supported for UDP and TCP packets.

The no form of this command disables the data-triggered subscriber creation for Wi-Fi subscribers.

Default

no data-triggered-ue-creation

Parameters

arp

Keyword to enable the router to authenticate ARP packets from an unknown UE.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

data-triggers

data-triggers

Syntax

[no] data-triggers

Context

[Tree] (debug>dynsvc data-triggers)

Full Context

debug dynamic-services data-triggers

Description

Commands in this context configure dynamic services data trigger capture SAP debugging. The no form of this command removes all dynamic services data trigger capture SAP debug configurations.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

database

database

Syntax

database [group grp-ip-address] [source ip-address] [detail]

no database

Context

[Tree] (debug>service>id>pim-snooping database)

Full Context

debug service id pim-snooping database

Description

This command enables or disables debugging for the PIM database.

Parameters

grp-ip-address

Debugs information associated with all PIM modules

Values

multicast group address (IPv4 or IPv6) or zero

ip-address

Debugs information associated with the specified database

Platforms

All

database-export

database-export

Syntax

database-export [identifier id] [bgp-ls-identifier bgp-ls-id]

no database-export

Context

[Tree] (config>router>isis database-export)

Full Context

configure router isis database-export

Description

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Parameters

identifier

This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. However, given that the concept of instance ID defined in IS-IS (RFC 6822) is unique within a routing domain while the one specified for OSPF is local subnet significant (RFC 6549), the user can remove any overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.

id

Specifies an entry ID to export.

Values

0 to 18446744073709551615

bgp-ls-identifier

This parameter is used, along with the Autonomous System Number (ASN) to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id

Specifies a BGP LS ID to export.

Values

0 to 4294967295

Platforms

All

database-export

Syntax

database-export [identifier id] [bgp-ls-identifier bgp-ls-id]

no database-export

Context

[Tree] (config>router>ospf3 database-export)

[Tree] (config>router>ospf database-export)

Full Context

configure router ospf3 database-export

configure router ospf database-export

Description

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Default

no database-export

Parameters

identifier

Identifies the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. The concept of instance ID specified for OSPF is local subnet significant (RFC 6549). The user can remove router specific overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.

id

Specifies an entry ID to export.

Values

0 to 18446744073709551615

bgp-ls-identifier

This parameter is used, along with the Autonomous System Number (ASN), to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id

Specifies a BGP LS ID to export.

Values

0 to 4294967295

Platforms

All

database-export-exclude

database-export-exclude

Syntax

[no] database-export-exclude

Context

[Tree] (config>router>isis>level database-export-exclude)

Full Context

configure router isis level database-export-exclude

Description

This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.

The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.

Default

no database-export-exclude

Platforms

All

database-export-exclude

Syntax

[no] database-export-exclude

Context

[Tree] (config>router>ospf>area database-export-exclude)

[Tree] (config>router>ospf3>area database-export-exclude)

Full Context

configure router ospf area database-export-exclude

configure router ospf3 area database-export-exclude

Description

This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the OSPF or OSPF3 instance level.

Default

no database-export-exclude

Platforms

All

datapath-cpu-high-wmark

datapath-cpu-high-wmark

Syntax

datapath-cpu-high-wmark high-watermark

datapath-cpu-high-wmark max

Context

[Tree] (config>app-assure datapath-cpu-high-wmark)

Full Context

configure application-assurance datapath-cpu-high-wmark

Description

This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default

datapath-cpu-high-wmark 95

Parameters

high-watermark

Specifies the high watermark for datapath CPU usage alarms.

Values

1 to 100

max

Disables the high watermark for datapath CPU usage alarms

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

datapath-cpu-low-wmark

datapath-cpu-low-wmark

Syntax

datapath-cpu-low-wmark low-watermark

Context

[Tree] (config>app-assure datapath-cpu-low-wmark)

Full Context

configure application-assurance datapath-cpu-low-wmark

Description

This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default

datapath-cpu-low-wmark 90

Parameters

low-watermark

Specifies the low watermark for datapath CPU usage alarms.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

day-of-month

day-of-month

Syntax

day-of-month {day-number [..day-number] all}

no day-of-month

Context

[Tree] (config>system>cron>sched day-of-month)

Full Context

configure system cron schedule day-of-month

Description

This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.

Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).

The no form of this command removes the specified day-of-month from the list.

Default

no day-of-month

Parameters

day-number

Specifies the positive integers specify the day of the month counting from the first of the month. The negative integers specify the day of the month counting from the last day of the month. For example, configuring day-of-month -5, 5 in a month that has 31 days will specify the schedule to occur on the 27th and 5th of that month.

Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.

Values

1 to 31, -31 to -1 (maximum 62 day-numbers)

all

Specifies all days of the month.

Platforms

All

db

db

Syntax

db [group grp-ip-address] [source ip-address] [detail]

no db

Context

[Tree] (debug>router>pim db)

Full Context

debug router pim db

Description

This command enables debugging for PIM database.

The no form of this command disables PIM database debugging.

Parameters

grp-ip-address

Debugs information associated with the specified database.

Values

multicast group address (ipv4, ipv6) or zero

ip-address

Debugs information associated with the specified database.

Values

source address (ipv4, ipv6)

detail

Debugs detailed IP database information.

Platforms

All

dbw-accounting

dbw-accounting

Syntax

[no] dbw-accounting

Context

[Tree] (config>router>rsvp dbw-accounting)

Full Context

configure router rsvp dbw-accounting

Description

This command enables dark bandwidth accounting and enters the context to configure the associated parameters. When dark bandwidth accounting is enabled, the system polls the dark bandwidth counters, performs sample and average rate computations, and generates IGP-TE updates if required. To enable dark bandwidth accounting, auxiliary MPLS statistics must first be enabled using the command config>router>mpls>aux-stats.

The no form of this command disables dark bandwidth accounting, resets all global parameters to their default values, and results in an immediate IGP-TE update for which dark bandwidth is null.

Default

no dbw-accounting

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

dbw-down-threshold

dbw-down-threshold

Syntax

dbw-down-threshold percent-change [bw absolute-change]

no dbw-down-threshold

Context

[Tree] (config>router>rsvp>interface dbw-down-threshold)

Full Context

configure router rsvp interface dbw-down-threshold

Description

This command sets the minimum change (in percent of the latest advertised value) above which an decrease in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent-change

Specifies the minimum decrease in MRLB/MRB, expressed in percent.

Values

0 to 100

absolute-change

Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.

Values

0 to 1000000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

dbw-multiplier

dbw-multiplier

Syntax

dbw-multiplier percent

Context

[Tree] (config>router>rsvp>dbw-accounting dbw-multiplier)

Full Context

configure router rsvp dbw-accounting dbw-multiplier

Description

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

Default

dbw-multiplier 100

Parameters

percent

Specifies the multiplier, expressed in percent.

Values

0 to 1000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

dbw-multiplier

Syntax

dbw-multiplier percent

no dbw-multiplier

Context

[Tree] (config>router>rsvp>interface dbw-multiplier)

Full Context

configure router rsvp interface dbw-multiplier

Description

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent

Specifies the multiplier, expressed in percent.

Values

0 to 1000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

dbw-up-threshold

dbw-up-threshold

Syntax

dbw-up-threshold percent-change [bw absolute-change]

no dbw-up-threshold

Context

[Tree] (config>router>rsvp>interface dbw-up-threshold)

Full Context

configure router rsvp interface dbw-up-threshold

Description

This command sets the minimum change (in percent of the latest advertised value) above which an increase in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change uses the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent-change

Specifies the minimum increase in MRLB/MRB, expressed in percent.

Values

0 to 100

absolute-change

Specifies the minimum increase in MRLB/MRB, expressed in Mb/s.

Values

0 to 1000000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

ddm-events

ddm-events

Syntax

[no] ddm-events

Context

[Tree] (config>port ddm-events)

Full Context

configure port ddm-events

Description

This command enables Digital Diagnostic Monitoring (DDM) events for the port.

The no form of this command disables DDM events.

Platforms

All

de-1-out-profile

de-1-out-profile

Syntax

[no] de-1-out-profile

Context

[Tree] (config>qos>sap-ingress>fc de-1-out-profile)

Full Context

configure qos sap-ingress fc de-1-out-profile

Description

This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.

When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the "< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.

All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.

The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.

All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into "out-of-profile” at ingress SAP.

This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.

The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.

Default

no de-1-out-profile

Platforms

All

de-mark

de-mark

Syntax

de-mark [force de-value]

no demark

Context

[Tree] (config>qos>sap-egress>fc de-mark)

Full Context

configure qos sap-egress fc de-mark

Description

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.

If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.

The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

de-mark

Syntax

de-mark [force de-value]

no de-mark

Context

[Tree] (config>qos>network>egress>fc de-mark)

Full Context

configure qos network egress fc de-mark

Description

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).

Parameters

de-value

Specifies that this value is to be used for all the packets of this forwarding class regardless of their profile status.

If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, use the following rules for a network port (B-SDP):

  • the outer VID follows the rules for regular SDP

  • for packets originating from a local I-VPLS/PBB-Epipe, this command dictates the marking of the DE bit for both the outer (link level) BVID and ITAG; if the command is not used, the DE bit is set to zero.

  • for transit packets (B-SAP/B-SDP to B-SDP), the related ITAG bits are preserved, the same as for BVID.

Values

0, 1

Platforms

All

de-mark-inner

de-mark-inner

Syntax

de-mark-inner [force de-value]

no de-mark-inner

Context

[Tree] (config>qos>sap-egress>fc de-mark-inner)

Full Context

configure qos sap-egress fc de-mark-inner

Description

This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).

If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.

Remarking the inner DE bit is not supported based on the profile result of egress policing.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

de-mark-outer

de-mark-outer

Syntax

de-mark-outer [force de-value]

no de-mark-outer

Context

[Tree] (config>qos>sap-egress>fc de-mark-outer)

Full Context

configure qos sap-egress fc de-mark-outer

Description

This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

dead-interval

dead-interval

Syntax

dead-interval seconds

no dead-interval

Context

[Tree] (config>service>vprn>ospf>area>virtual-link dead-interval)

[Tree] (config>service>vprn>ospf>area>if dead-interval)

[Tree] (config>service>vprn>ospf3>area>if dead-interval)

[Tree] (config>service>vprn>ospf3>area>virtual-link dead-interval)

[Tree] (config>service>vprn>ospf>area>sham-link dead-interval)

Full Context

configure service vprn ospf area virtual-link dead-interval

configure service vprn ospf area interface dead-interval

configure service vprn ospf3 area interface dead-interval

configure service vprn ospf3 area virtual-link dead-interval

configure service vprn ospf area sham-link dead-interval

Description

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.

The no form of this command reverts to the default value.

Default

dead-interval 40

Parameters

seconds

The dead interval expressed as a decimal integer.

Values

2 to 65535 seconds

Platforms

All

dead-interval

Syntax

dead-interval seconds

no dead-interval

Context

[Tree] (config>router>ospf3>area>virtual-link dead-interval)

[Tree] (config>router>ospf>area>virtual-link dead-interval)

[Tree] (config>router>ospf3>area>interface dead-interval)

[Tree] (config>router>ospf>area>interface dead-interval)

Full Context

configure router ospf3 area virtual-link dead-interval

configure router ospf area virtual-link dead-interval

configure router ospf3 area interface dead-interval

configure router ospf area interface dead-interval

Description

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.

The no form of this command reverts to the default value.

Default

dead-interval 40

Parameters

seconds

The dead interval expressed in seconds.

Values

2 to 65535

Platforms

All

dead-timer

dead-timer

Syntax

dead-timer seconds

no dead-timer

Context

[Tree] (config>router>pcep>pce dead-timer)

[Tree] (config>router>pcep>pcc dead-timer)

Full Context

configure router pcep pce dead-timer

configure router pcep pcc dead-timer

Description

This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.

The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.

The no form of the command returns the dead timer to the default value.

Default

dead-timer 120

Parameters

seconds

the dead timer value, in seconds

Values

1 to 255

Platforms

VSR-NRC

  • configure router pcep pce dead-timer

All

  • configure router pcep pcc dead-timer

debounce

debounce

Syntax

[no] debounce

Context

[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path debounce)

[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path debounce)

Full Context

configure redundancy multi-chassis peer mc-ring ring in-band-control-path debounce

configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path debounce

Description

This command enables the inband control path debouncing. The no form of this command disables inband control path debouncing.

The no form of this command reverts to the default.

Default

debounce

Platforms

All

debounce

Syntax

debounce occurrences [within seconds]

no debounce

Context

[Tree] (config>log>event-trigger>event>trigger-entry debounce)

Full Context

configure log event-trigger event trigger-entry debounce

Description

This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.

The no form of this command removes the debounce configuration.

Parameters

occurrences

Specifies the number of times an event must occur for EHS to trigger a response.

Values

2 to 15

within seconds

Specifies the time window within which a specific event must occur a number of times equivalent to the specified occurrences for EHS to trigger a response.

Values

1 to 604800

Platforms

All

debug

debug

Syntax

debug

Context

[Tree] ( debug)

Full Context

debug

Description

Commands in this context specify debugging options.

Platforms

All

debug-output

debug-output

Syntax

[no] debug-output

Context

[Tree] (config>call-trace>trace-profile debug-output)

Full Context

configure call-trace trace-profile debug-output

Description

This command enables output to the debug log. Traced messages are decoded as text and sent to debug logging. This allows for real-time debugging but is not recommended on live systems because of the decode overhead.

This command disables logging to the compact flash. The debug-output and live-output commands are mutually exclusive.

The no form of this command disables output to the debug log.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

debug-save

debug-save

Syntax

debug-save [file-url]

Context

[Tree] (admin debug-save)

Full Context

admin debug-save

Description

This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.

Parameters

file-url

Specifies the file URL location to save the debug configuration. If no file-url is specified then the debug configuration is saved at the same location as the standard configuration file (bof>primary-config/bof>secondary-config/bof>tertiary-config) with the same file name as the standard configuration file but with a .dbg suffix.

Note:

IPv6-address applies only to 7750 SR and 7950 XRS.

Values

file url

local-url | remote-url: 255 chars max

local-url

[cflash-id/][file-path] 200 chars max, including cflash-id file-path 199 chars max

remote-url

[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]

255 chars max

directory length 99 chars max each

remote-locn

{hostname | ipv4-address | [ipv6-address]}

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - 32 chars max, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

decrypt-key

decrypt-key

Syntax

decrypt-key key | hash-key | hash2-key [hash | hash2 | custom]

no decrypt-key

Context

[Tree] (config>app-assure>group>url-list decrypt-key)

Full Context

configure application-assurance group url-list decrypt-key

Description

In case the file is encrypted this command is used to configure the decryption key used to read the file.

The no form of this command removes the url-list object.

Default

no decrypt-key

Parameters

key | hash-key | hash2-key

Specifies the Application-Assurance url-list decryption key.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

def-app-profile

def-app-profile

Syntax

def-app-profile app-profile-name

no def-app-profile

Context

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-app-profile)

[Tree] (config>subscriber-mgmt>msap-policy>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)

Full Context

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

configure service vpls sap sub-sla-mgmt def-app-profile

configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

Description

This command specifies the default application profile to be used by a subscriber host.

The no form of this command removes the application profile name from the configuration.

Parameters

app-profile-name

Specifies an existing application profile to be mapped to the subscriber profile by default up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
  • configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile
  • configure service vpls sap sub-sla-mgmt def-app-profile
  • configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
  • configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

def-app-profile

Syntax

def-app-profile profile-name

no def-app-profile

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile

Description

This command configures the default application profile.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

def-app-profile

Syntax

def-app-profile app-profile-name

no def-app-profile

Context

[Tree] (config>app-assure>group>transit-ip-policy def-app-profile)

Full Context

configure application-assurance group transit-ip-policy def-app-profile

Description

This command configures a default application profile.

Default

no def-app-profile

Parameters

app-profile-name

Specifies the application profile name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

def-instance-sharing

def-instance-sharing

Syntax

def-instance-sharing {per-sap | per-session}

Context

[Tree] (config>subscr-mgmt>sla-prof def-instance-sharing)

Full Context

configure subscriber-mgmt sla-profile def-instance-sharing

Description

This command configures the default SPI sharing method for IPoE or PPPoE sessions from the same subscriber, having the same SLA profile associated, that are active on the same SAP. SPI sharing can be per-SAP or a dedicated SPI per-session.

Default

def-instance-sharing per-sap

Parameters

per-sap

Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP share an SPI.

per-session

Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP obtain a dedicated SPI per session.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-inter-dest-id

def-inter-dest-id

Syntax

def-inter-dest-id string string

def-inter-dest-id {use-top-q}

no def-inter-dest-id

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-inter-dest-id)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)

Full Context

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id

configure subscriber-mgmt msap-policy sub-sla-mgmt def-inter-dest-id

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id

Description

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

Parameters

string

A RADIUS VSA (Alc-Int-Dest-Id-Str, type 28) obtained during the subscriber authentication phase contains the destination string name that is matched against the string defined under the Vport. In this fashion the subscriber host is associated with the corresponding Vport.

Alternatively, the destination string can be defined in LUDB.

use-top-q

This is applicable only to Ethernet ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-inter-dest-id

Syntax

def-inter-dest-id {string string | use-top-q}

no def-inter-dest-id

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-inter-dest-id)

Full Context

configure service vpls sap sub-sla-mgmt def-inter-dest-id

Description

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

no def-sub-id

Default

no def-inter-dest-id

Parameters

use-top-q

Specifies to derive the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation

string string

Specifies the subscriber identification applicable for a subscriber host.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-recv-evpn-encap

def-recv-evpn-encap

Syntax

def-recv-evpn-encap {mpls | vxlan}

no def-recv-evpn-encap

Context

[Tree] (config>router>bgp>group def-recv-evpn-encap)

[Tree] (config>router>bgp>group>neighbor def-recv-evpn-encap)

Full Context

configure router bgp group def-recv-evpn-encap

configure router bgp group neighbor def-recv-evpn-encap

Description

This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.

Default

no def-recv-evpn-encap

Parameters

mpls

Specifies that mpls is the default encapsulation value in the case where no RFC5512 extended community is received in the incoming BGP-EVPN route.

vxlan

Specifies that vxlan is the default encapsulation value.

Platforms

All

def-sla-profile

def-sla-profile

Syntax

def-sla-profile default-sla-profile-name

no def-sla-profile

Context

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sla-profile)

Full Context

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

configure service vpls sap sub-sla-mgmt def-sla-profile

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile

Description

This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context.

If a subscriber is not explicitly associated with an SLA profile during the authentication phase, a default profile will be assigned to it.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sla-profile-name

Specifies a default SLA profile for this SAP.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
  • configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
  • configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
  • configure service vpls sap sub-sla-mgmt def-sla-profile
  • configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

def-sub-id

def-sub-id

Syntax

def-sub-id use-auto-id

def-sub-id use-sap-id

def-sub-id string sub-id

no def-sub-id

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-id)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-id)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)

Full Context

configure service vpls sap sub-sla-mgmt def-sub-id

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sub-id

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-id

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-id

Description

This command specifies the explicit default sub-id for dynamic subscriber hosts (including ARP hosts) in case that the sub-id string is not supplied through RADIUS or LUDB.

The sub-id is assigned to a new subscriber host in the following order of priority:

  • RADIUS

  • LUDB

  • Explicit default – The def-sub-id command is used to explicitly set the sub-id name of the host as one of the following:

    • The SAP ID to which the new host is associated

    • An explicit string

    • An auto-generated string consisting of the concatenated subscriber identification fields defined under the subscr-mgmt>auto-sub-id-key node. The fields are taken in the order in which they are configured and are separated by a '|'character. The subscriber host identification fields are separately defined for IPoE and PPPoE host types.

  • Implicit default – If the sub-id string is not returned via RADIUS or LUDB and there is no def-sub-id configured, the sub-id name is generated as a random 10 character encoded string based on the auto-sub-id-keys. This 10 characters encoded string is unique per chassis as well as in dual-homed environment. It is generated based on auto-sub-id-keys. If auto-sub-id-keys are not explicitly configured, the default ones are:

    • mac, sap-id, or session-id for PPP type hosts

    • mac or sap-id for IPoE type hosts.

This command does not apply to static subscribers.

The no form of this command reverts to the default.

Parameters

use-sap-id

Specifies the sub-id name-id on which the original request for host creation arrived (DHCP Discover, or PADI or ARP Request).

sub-id

Explicitly configured sub-id name up to 32 characters.

use-auto-id

Specifies the concatenated string of auto-sub-id-keys separated by a "| ” character.

Default

no def-sub-id

Implicit default If the sub-id string is not supplied through RADIUS, LUDB, or def-sub-id configuration, then a random 10 character encoded sub-id name is generated. This random sub-id name is based on the subscriber identification keys defined under the subscr-mgmt>auto-sub-id-key node. In case that the auto-sub-id-keys are not defined explicitly, the default ones are:

  • mac, sap-id, or session-id for PPPoE type hosts

  • mac or sap-id for IPoE type hosts

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-sub-id

Syntax

def-sub-id string sub-id

def-sub-id use-auto-id

no def-sub-id

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)

Full Context

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id

Description

This command configures the default subscriber ID. The default is used if no other source (like RADIUS) provides a subscriber identification string.

Parameters

sub-id

Specifies the default subscriber identification up to 32 characters.

use-auto-id

Specifies that the auto-generated subscriber identification string, is used as the default subscriber identification string.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

def-sub-profile

def-sub-profile

Syntax

def-sub-profile default-subscriber-profile-name

Context

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-profile)

Full Context

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for an MSAP.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

def-sub-profile

Syntax

def-sub-profile default-subscriber-profile-name

Context

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>ies>if>sap>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-profile)

Full Context

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

configure service ies interface sap sub-sla-mgmt def-sub-profile

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
  • configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile

def-sub-profile

Syntax

def-sub-profile default-subscriber-profile-name

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-profile)

Full Context

configure service vpls sap sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default

default

Syntax

[no] default

Context

[Tree] (config>log>accounting-policy default)

Full Context

configure log accounting-policy default

Description

This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.

If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.

If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.

Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.

The record name must be specified prior to assigning an accounting policy as default.

If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.

The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.

Platforms

All

default-accounting-server-policy

default-accounting-server-policy

Syntax

default-accounting-server-policy policy-name

no default-accounting-server-policy

Context

[Tree] (config>service>vprn>radius-proxy>server default-accounting-server-policy)

[Tree] (config>router>radius-proxy>server default-accounting-server-policy)

Full Context

configure service vprn radius-proxy server default-accounting-server-policy

configure router radius-proxy server default-accounting-server-policy

Description

This command specifies the default radius-server-policy for RADIUS accounting. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the name of the default RADIUS server policy associated with this RADIUS Proxy server for accounting purposes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-action

default-action

Syntax

default-action {bypass-host-creation | drop}

no default-action

Context

[Tree] (config>filter>dhcp-filter default-action)

Full Context

configure filter dhcp-filter default-action

Description

This command specifies the default action for DHCP filters when no entries match.

The no form of this command reverts to the default.

Parameters

bypass-host-creation

Specifies to bypass ESM host creation options.

drop

Specifies to drop and not process the DHCP message.

Platforms

All

default-action

Syntax

default-action bypass-host-creation [na] [pd]

default-action drop

no default-action

Context

[Tree] (config>filter>dhcp6-filter default-action)

Full Context

configure filter dhcp6-filter default-action

Description

This command specifies the default action for DHCP6 filters when no entries match.

The no form of this command reverts to the default.

Parameters

bypass-host-creation

Specifies to bypass ESM host creation options.

Values

na — Bypasses the DHCP NA hosts creation.

pd — Bypasses the DHCP PD hosts creation.

drop

Specifies to drop and not process the DHCP6 message.

Platforms

All

default-action

Syntax

default-action {drop | forward}

no default-action

Context

[Tree] (config>subscr-mgmt>isa-filter default-action)

[Tree] (config>subscr-mgmt>isa-filter>ipv6 default-action)

Full Context

configure subscriber-mgmt isa-filter default-action

configure subscriber-mgmt isa-filter ipv6 default-action

Description

This command specifies what should happen to packets that do not match any of the configured entries.

The no form of this command reverts to the default value.

Default

default-action drop

Parameters

drop

Specifies that packets matching the filter entry are dropped.

forward

Specifies that packets matching the filter entry are forwarded.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {block | allow}

Context

[Tree] (config>service>mrp>mrp-policy default-action)

Full Context

configure service mrp mrp-policy default-action

Description

This command specifies the action to be applied to the MMRP attributes (Group B-MACs) whose ISIDs do not match the specified criteria in all of the entries of the mrp-policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default

default-action allow

Parameters

block

Specifies that all MMRP attributes will not be declared or registered unless there is a specific mrp-policy entry which causes them to be allowed on this SAP or SDP.

allow

Specifies that all MMRP attributes will be declared and registered unless there is a specific mrp-policy entry which causes them to be blocked on this SAP or SDP.

Platforms

All

default-action

Syntax

default-action {drop | forward}

no default-action

Context

[Tree] (config>service>vprn>log>filter default-action)

Full Context

configure service vprn log filter default-action

Description

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default

default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.

Parameters

drop

The events which are not explicitly forwarded by an event filter match are dropped.

forward

The events which are not explicitly dropped by an event filter match are forwarded.

Platforms

All

default-action

Syntax

default-action {permit | deny} [event-log event-log-name]

Context

[Tree] (config>app-assure>group>sess-fltr default-action)

Full Context

configure application-assurance group session-filter default-action

Description

This command specifies the default action to take for packets that do not match any filter entries.

The no form of this command reverts the default action to the default value (forward).

Default

default-action deny

Parameters

deny

Indicates that packets matching the criteria are denied.

permit

Indicates that packets matching the criteria are permitted.

event-log-name

Specifies the event log name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action direction direction [create]

no default-action direction direction

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type default-action

Description

This command configures a TCA for the counter capturing hits for the specified GTP filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action direction direction [create]

no default-action direction direction

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg-gtpv2 default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type-gtpv2 default-action

Description

This command configures a TCA for the counter capturing hits due to the default action specified for the GTPv2 message type filter. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action direction direction [create]

no default-action direction direction

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>imsi-apn default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter imsi-apn default-action

Description

This command configures a TCA for the counter capturing hits for the specified GTP IMSI-APN filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

default-action

Syntax

default-action direction direction [create]

Context

[Tree] (config>app-assure>group>statistics>tca>sctp-fltr>ppid default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert sctp-filter ppid default-action

Description

This command configures a TCA for the counter capturing hits for the specified SCTP filter default PPID. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action direction direction [create]

no default-action direction direction

Context

[Tree] (config>app-assure>group>statistics>tca>session-filter default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert session-filter default-action

Description

This command configures a TCA for the counter capturing hits for the specified session filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {permit | deny}

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>imsi-apn-fltr default-action)

Full Context

configure application-assurance group gtp gtp-filter imsi-apn-filter default-action

Description

This command configures the default action for the IMSI-APN filter.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any message entries.

deny

Specifies to deny packets that do not match any message entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {permit | deny}

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>msg-gtpv2 default-action)

[Tree] (config>app-assure>group>gtp>gtp-fltr>msg default-action)

Full Context

configure application-assurance group gtp gtp-filter message-type-gtpv2 default-action

configure application-assurance group gtp gtp-filter message-type default-action

Description

This command configures the default action for all GTP message types.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any message entries.

deny

Specifies to deny packets that do not match any message entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {permit | deny}

Context

[Tree] (config>app-assure>group>sctp-fltr>ppid default-action)

Full Context

configure application-assurance group sctp-filter ppid default-action

Description

This command configures the default action for all SCTP PPIDs.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any PPID entries.

deny

Specifies to deny packets that do not match any PPID entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action allow

default-action block-all

default-action block-http-redirect http-redirect-name

no default-action

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter default-action)

Full Context

configure application-assurance group policy app-qos-policy entry action url-filter default-action

Description

This command configures the default action to take when the ICAP server is unreachable.

Default

no default-action

Parameters

allow

Allows all requests.

block-all

Blocks all requests.

block-http-redirect http-redirect-name

Blocks and redirects requests.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {dnat | forward} [ip-address ip-address]

Context

[Tree] (config>service>nat>nat-classifier default-action)

Full Context

configure service nat nat-classifier default-action

Description

This command specifies the default action to take for packets in this nat-classifier. The default-action will apply to packet that do not match any configured criteria within nat-classifier. The no form of this command equals action forward.

Default

default-action forward

Parameters

dnat

Performs the DNAT function. The destination IP address of the packet traversing the router in the direction from inside to outside is replaced by the configured IP address. Destination port is not translated. In the opposite direction (from outside to inside), the source address in the returning packet is restored to the original value.

forward

The forward action will ensure that the packet is transparently passed through the nat-classifier.

ip-address ip-address

The destination IP address that will replace the original IP address in the packet traveling from inside to outside.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-action

Syntax

default-action {accept | discard}

Context

[Tree] (config>router>mcac>policy default-action)

Full Context

configure router mcac policy default-action

Description

This command specifies the action to be applied to multicast streams (channels) when the streams do not match any of the multicast addresses defined in the MCAC policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default

default-action discard

Parameters

accept

Specifies multicast streams (channels) not defined in the MCAC policy will be accepted.

discard

Specifies multicast streams (channels) not defined in the MCAC policy will be dropped.

Platforms

All

default-action

Syntax

default-action fc fc-name profile {in | out}

Context

[Tree] (config>qos>network>ingress default-action)

Full Context

configure qos network ingress default-action

Description

This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.

Multiple default-action commands will overwrite each previous default-action command.

Default

default-action fc be profile out

Parameters

fc-name

Specifies the forwarding class name. All packets with DSCP value or MPLS EXP or dot1p bits that are not defined will be placed in this forwarding class.

Values

be, l2, af, l1, h2, ef, h1, nc

profile {in | out}

All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command. In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.

Values

in, out

Platforms

All

default-action

Syntax

default-action {drop | forward}

Context

[Tree] (config>filter>ipv6-filter default-action)

[Tree] (config>filter>mac-filter default-action)

[Tree] (config>filter>ip-filter default-action)

Full Context

configure filter ipv6-filter default-action

configure filter mac-filter default-action

configure filter ip-filter default-action

Description

This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.

Default

default-action drop

Parameters

drop

Specifies the default action is to drop a packet.

forward

Specifies the default action is to forward a packet.

Platforms

All

default-action

Syntax

default-action {drop | forward}

no default-action

Context

[Tree] (config>log>filter default-action)

Full Context

configure log filter default-action

Description

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default

default-action forward

Parameters

drop

The events which are not explicitly forwarded by an event filter match are dropped.

forward

The events which are not explicitly dropped by an event filter match are forwarded.

Platforms

All

default-action

Syntax

default-action {permit | deny | deny-host-unreachable}

Context

[Tree] (config>system>security>mgmt-access-filter>mac-filter default-action)

[Tree] (config>system>security>mgmt-access-filter>ip-filter default-action)

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter default-action)

Full Context

configure system security management-access-filter mac-filter default-action

configure system security management-access-filter ip-filter default-action

configure system security management-access-filter ipv6-filter default-action

Description

This command creates the default action for management access in the absence of a specific management access filter match.

The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.

Parameters

permit

Specifies that packets not matching the configured selection criteria in any of the filter entries will be permitted.

deny

Specifies that packets not matching the selection criteria be denied and that an ICMP host unreachable message will not be issued.

deny-host-unreachable

Specifies that packets not matching the selection criteria be denied access and that an ICMP host unreachable message will be issued.

The deny-host-unreachable only applies to ip-filter and ipv6filter.

Platforms

All

default-action

Syntax

default-action {accept | drop}

Context

[Tree] (config>system>security>cpm-filter default-action)

Full Context

configure system security cpm-filter default-action

Description

This command specifies the action to take on the traffic when there are no filter entry matches. If there are no filter entries defined, the packets received are either dropped or forwarded based on that default action.

Default

default-action accept

Parameters

accept

Specifies that packets matching the filter entry are forwarded.

drop

Specifies that packets matching the filter entry are dropped.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

default-action

Syntax

default-action {deny-all | permit-all | none | read-only-all}

Context

[Tree] (config>system>security>profile default-action)

Full Context

configure system security profile default-action

Description

This command specifies the default action to be applied when no match conditions are met.

Parameters

deny-all

Sets the default of the profile to deny access to all commands.

permit-all

Sets the default of the profile to permit access to all commands.

Note:

In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated "administrative” profile contains rules to access security commands.

none

Sets the default of the profile to no-action. This option is useful to assign multiple profiles to a user.

read-only-all

Sets the default of the profile to allow read-only access to all commands.

Platforms

All

default-action

Syntax

default-action {accept | next-entry | next-policy | drop | reject}

no default-action

Context

[Tree] (config>router>policy-options>policy-statement default-action)

Full Context

configure router policy-options policy-statement default-action

Description

Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.

The no form of this command deletes the default-action context for the policy statement.

Default

no default-action

Parameters

accept

Specifies that routes not matched by any entry should be allowed or accepted. This parameter provides a context for modifying route properties.

next-entry

Specifies that routes not matched by any entry should be evaluated by the next sequential entry in the policy chain, after route properties are possibly modified by the default action of the current policy.

next-policy

Specifies that routes not matched by any entry should be evaluated by the next sequential policy in the policy chain, after route properties are possibly modified by the default action of the current policy.

drop

Specifies that routes not matched by any entry should be disallowed or rejected. This parameter provides a context for modifying route properties.

reject

Specifies that routes not matched by any entry should be disallowed or rejected. This parameter does not provide a context for modifying route properties.

Platforms

All

default-action

Syntax

default-action allow

default-action block-all

default-action block-http-redirect http-redirect-name

no default-action

Context

[Tree] (config>app-assure>group>url-filter>web-service default-action)

[Tree] (config>app-assure>group>url-filter>local-filtering default-action)

[Tree] (config>app-assure>group>url-filter>icap default-action)

Full Context

configure application-assurance group url-filter web-service default-action

configure application-assurance group url-filter local-filtering default-action

configure application-assurance group url-filter icap default-action

Description

This command configures a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the following scenarios.

  • In the case of a local URL list, when the URL list is shutdown or the file is not loaded due to an error.

  • In the case of ICAP or web filtering, when all TCP connections are busy or down.

The no form of this command removes the default-action for the URL filter.

Default

no default-action

Parameters

allow

Specifies to allows traffic.

block-all

Specifies to block traffic.

block-http-redirect http-redirect-name

Specifies to block traffic and redirect the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the config>aa>group>url-filter>http-redirect command.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-authentication-server-policy

default-authentication-server-policy

Syntax

default-authentication-server-policy policy-name

no default-authentication-server-policy

Context

[Tree] (config>router>radius-proxy>server default-authentication-server-policy)

[Tree] (config>service>vprn>radius-proxy>server default-authentication-server-policy)

Full Context

configure router radius-proxy server default-authentication-server-policy

configure service vprn radius-proxy server default-authentication-server-policy

Description

This command specifies the default radius-server-policy for RADIUS authentication. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the name of the default RADIUS server policy associated with this RADIUS proxy server for authentication purposes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-brg-profile

default-brg-profile

Syntax

default-brg-profile profile-name

no default-brg-profile

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>brg default-brg-profile)

[Tree] (config>service>vprn>sub-if>grp-if>brg default-brg-profile)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile

configure service ies subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile

configure service ies subscriber-interface group-interface brg default-brg-profile

configure service vprn subscriber-interface group-interface brg default-brg-profile

configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile

configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile

Description

This command indicates that the default BRG profile must be used for new BRGs. This profile can be overridden by RADIUS.

Parameters

profile-name

Specifies the name of the brg-profile to be applied.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-category-map

default-category-map

Syntax

default-category-map category-map-name

no default-category-map

Context

[Tree] (config>subscr-mgmt>credit-control-policy default-category-map)

Full Context

configure subscriber-mgmt credit-control-policy default-category-map

Description

This command configures the default category map.

The no form of this command reverts to the default.

Parameters

category-map-name

Specifies the category map name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-charging-group

default-charging-group

Syntax

default-charging-group charging-group-name

no default-charging-group

Context

[Tree] (config>app-assure>group>policy default-charging-group)

Full Context

configure application-assurance group policy default-charging-group

Description

This command associates a charging group to any applications or app-groups that are not explicitly assigned to a charging group, for an application assurance policy.

The no form of this command deletes the default charging group from the configuration.

Default

no default-charging-group

Parameters

charging-group-name

A string of up to 32 characters uniquely identifying an existing charging group in the system.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-credit

default-credit

Syntax

default-credit volume credits [bytes | kilobytes | megabytes | gigabytes]

default-credit time seconds

no default-credit

Context

[Tree] (config>subscr-mgmt>cat-map>category default-credit)

Full Context

configure subscriber-mgmt category-map category default-credit

Description

This command configures the default credit values for RADIUS credit control and Diameter Gy application credit control.

For RADIUS credit control, this command configures the default time or volume credit for this category. The default credit is used during initial setup when no quota is received from the RADIUS server.

For Diameter Gy credit control, this command specifies the interim credit assigned to this category (rating group) when Extended Failure Handling (EFH) is enabled. This command is ignored when EFH is disabled.

The no form of this command reverts to the default.

Parameters

volume credits[bytes | kilobytes | megabytes | gigabytes]

Specifies the default value for the volume credit and the unit in which the default value is expressed.

Values

1 to 4294967295 (minimum 1 byte)

time seconds

Specifies the default value for the time credit, in seconds.

Values

1 to 4294967295 (minimum 1 second)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-dnat-ip-address

default-dnat-ip-address

Syntax

default-dnat-ip-address ip-address

no default-dnat-ip-address

Context

[Tree] (config>service>nat>nat-classifier default-dnat-ip-address)

Full Context

configure service nat nat-classifier default-dnat-ip-address

Description

This command configures the IP address to substitute for the destination IP address of the packets

Default

no default-dnat-ip-address

Parameters

ip-address

Specifies the default DNAP IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-dns

default-dns

Syntax

default-dns ip-address [secondary ip-address]

no default-dns

Context

[Tree] (config>service>vprn>sub-if default-dns)

[Tree] (config>service>ies>sub-if default-dns)

Full Context

configure service vprn subscriber-interface default-dns

configure service ies subscriber-interface default-dns

Description

This command configures last resort IP DNS addresses that can be used for name resolution by IPoE hosts (IA_NA, IA_PD and SLAAC) and PPPoE hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters

ip-address

Specifies the IP address of the primary DNS server.

secondary ip-address

Specifies the IP address of the secondary DNS server (optional).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-dns

Syntax

default-dns ipv6-address [secondary ipv6-address]

no default-dns

Context

[Tree] (config>service>vprn>sub-if>ipv6 default-dns)

[Tree] (config>service>ies>sub-if>ipv6 default-dns)

Full Context

configure service vprn subscriber-interface ipv6 default-dns

configure service ies subscriber-interface ipv6 default-dns

Description

This command configures last resort IPv6 DNS addresses that can be used for name resolution by IPoEv6 hosts (IA_NA, IA_PD and SLAAC) and PPPoEv6 hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters

ipv6-address

Specifies the IPv6 address of the primary DNS server.

secondary ipv6-address

Specifies the IPv6 address of the secondary DNS server (optional).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-domain

default-domain

Syntax

default-domain dns-name

no default-domain

Context

[Tree] (config>service>vprn>dns default-domain)

Full Context

configure service vprn dns default-domain

Description

This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.

The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.

Parameters

dns-name

Specifies the name of the default domain, up to 255 characters. Allowed values for characters are alphabetical (A-Z), numeric (0-9), the minus sign (-), and the period (.). For example, "3gpp-network.org”.

Platforms

All

default-domain

Syntax

default-domain

Context

[Tree] (config>eth-cfm default-domain)

Full Context

configure eth-cfm default-domain

Description

Commands in this context configure MIP creation parameters per index (bridge-identifier bridge-id vlan vlan-id) if the MIP creation statement exists as part of the service connection. The mip creation statement must be present on the connection before any configuration can occur for a MIP under this context. The determining factor for MIP creation is based on the authoritative properties of the eth-cfm domain association configuration. The individual indexes in this table are used for MIP creation only when the association context is not authoritative; this includes the lack of association for a matching index.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

default-fc

default-fc

Syntax

default-fc fc-name

no default-fc

Context

[Tree] (config>qos>sap-ingress default-fc)

Full Context

configure qos sap-ingress default-fc

Description

This command configures the default forwarding class for the policy. If an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass if associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy are classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.

The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.

Default

default-fc "be”

Parameters

fc-name

Specify the forwarding class name for the queue. The value specified for fc-name must be one of the predefined forwarding classes in the system.

The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.

Values

fc:

class[.subclass]

class: be, l2, af, l1, h2, ef, h1, nc

subclass: 29 characters max

Platforms

All

default-filter-action

default-filter-action

Syntax

default-filter-action default-action

Context

[Tree] (debug>app-assure>group>http-host>filter default-filter-action)

Full Context

debug application-assurance group http-host-recorder filter default-filter-action

Description

This command configures the recorder filter default action to either record or no-record. This parameter applies to http-host values not matching any expressions defined in the filter context.

Parameters

default-action

Specifies the default action.

Values

record, no-record

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-group-interface

default-group-interface

Syntax

default-group-interface ip-int-name service-id service-id

default-group-interface ip-int-name service-name svc-name

no default-group-interface

Context

[Tree] (config>router>l2tp>group>ppp default-group-interface)

[Tree] (config>router>l2tp>group>tunnel>ppp default-group-interface)

[Tree] (config>service>vprn>l2tp>group>tunnel>ppp default-group-interface)

[Tree] (config>service>vprn>l2tp>group>ppp default-group-interface)

Full Context

configure router l2tp group ppp default-group-interface

configure router l2tp group tunnel ppp default-group-interface

configure service vprn l2tp group tunnel ppp default-group-interface

configure service vprn l2tp group ppp default-group-interface

Description

This command configures the group interface where the PPP sessions are established when the authentication server does not specify the group interface.

The no form of this command removes the interface name or service ID from the configuration.

Parameters

ip-int-name

Specifies an IP interface name, up to 32 characters.

service-id service-id

Specifies an existing service identification number.

This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The default-group-interface ip-int-name service-name svc-name variant can be used in all configuration modes.

Values

{id | svc-name}

id:

1 to 2147483647

svc-name:

up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration).

service-name svc-name

Specifies an existing service name up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-gtp-tunnel-endpoint-limit

default-gtp-tunnel-endpoint-limit

Syntax

default-gtp-tunnel-endpoint-limit direction direction [create]

no default-gtp-tunnel-endpoint-limit direction direction

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-filter default-gtp-tunnel-endpoint-limit)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter default-gtp-tunnel-endpoint-limit

Description

This command configures a TCA for the counter capturing drops because the GTP endpoint limits create requests exceeding the configured allowed limit (set by the default-tunnel-endpoint-limit command). A default-gtp-tunnel-endpoint-limit drop TCA can be created for traffic generated from the subscriber side of AA (from-sub). The create keyword is mandatory when creating a TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-host

default-host

Syntax

default-host ipv4-prefix/mask | ipv6-prefix/prefix-length next-hop ipv4-address | ipv6-address

no default-host ipv4-prefix/mask | ipv6-prefix/prefix-length

Context

[Tree] (config>service>ies>sub-if>grp-if>sap default-host)

[Tree] (config>service>vprn>sub-if>grp-if>sap default-host)

Full Context

configure service ies subscriber-interface group-interface sap default-host

configure service vprn subscriber-interface group-interface sap default-host

Description

This command configures the default-host. More than one default host can be configured per SAP.

The no form of this command removes the values from the configuration.

Parameters

ipv4prefix/prefix-length

Specifies an IPv4 prefix and prefix length.

Values

ipv4-prefix

a.b.c.d (host bits must be 0

prefix-length 0 to 32

ipv6-prefix/prefix-length

Specifies an IPv6 prefix and prefix length.

Values

ipv6-prefix

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

prefix-length - [0 to 128]

next-hop

Assigns the next hop IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-instance

default-instance

Syntax

[no] default-instance

Context

[Tree] (config>service>vprn>isis>if default-instance)

Full Context

configure service vprn isis interface default-instance

Description

This command enables a non-MI capable router to establish an adjacency and operate with an SR OS in a non-zero instance. If the router does not receive IID-TLVs, it establishes an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router establishes an adjacency in the configured non-zero instance. The router then operates in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default

no default-instance

Platforms

All

default-instance

Syntax

[no] default-instance

Context

[Tree] (config>router>isis>interface default-instance)

Full Context

configure router isis interface default-instance

Description

This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default

no default-instance

Platforms

All

default-ipv4-multicast-metric

default-ipv4-multicast-metric

Syntax

default-ipv4-multicast-metric metric

no default-ipv4-multicast-metric

Context

[Tree] (config>service>vprn>isis>level default-ipv4-multicast-metric)

Full Context

configure service vprn isis level default-ipv4-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv4-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).

Values

1 to 16777215

Platforms

All

default-ipv4-multicast-metric

Syntax

default-ipv4-multicast-metric metric

no default-ipv4-multicast-metric

Context

[Tree] (config>router>isis>level default-ipv4-multicast-metric)

Full Context

configure router isis level default-ipv4-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv4-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).

Values

1 to 16777215

Platforms

All

default-ipv6-multicast-metric

default-ipv6-multicast-metric

Syntax

default-ipv6-multicast-metric metric

no default-ipv6-multicast-metric

Context

[Tree] (config>service>vprn>isis>level default-ipv6-multicast-metric)

Full Context

configure service vprn isis level default-ipv6-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv6-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

Platforms

All

default-ipv6-multicast-metric

Syntax

default-ipv6-multicast-metric metric

no default-ipv6-multicast-metric

Context

[Tree] (config>router>isis>level default-ipv6-multicast-metric)

Full Context

configure router isis level default-ipv6-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv6-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

Platforms

All

default-ipv6-unicast-metric

default-ipv6-unicast-metric

Syntax

default-ipv6-unicast-metric ipv6 metric

no default-ipv6-unicast-metric

Context

[Tree] (config>service>vprn>isis>level default-ipv6-unicast-metric)

Full Context

configure service vprn isis level default-ipv6-unicast-metric

Description

This command specifies the default metric for IPv6 unicast.

Default

default-ipv6-unicast-metric 10

Parameters

ipv6-metric

Specifies the default metric for IPv6 unicast.

Values

1 to 16777215

Platforms

All

default-ipv6-unicast-metric

Syntax

default-ipv6-unicast-metric ipv6 metric

no default-ipv6-unicast-metric

Context

[Tree] (config>router>isis>level default-ipv6-unicast-metric)

Full Context

configure router isis level default-ipv6-unicast-metric

Description

This command specifies the default metric for IPv6 unicast.

The no form of this command reverts to the default value.

Default

default-ipv6-unicast-metric 10

Parameters

ipv6-metric

Specifies the default metric for IPv6 unicast.

Values

1 to 16777215

Platforms

All

default-label-preference

default-label-preference

Syntax

default-label-preference [ebgp ebgp label preference] [ibgp ibgp label preference]

no default-label-preference

Context

[Tree] (config>router>bgp>group>neighbor default-label-preference)

[Tree] (config>router>bgp default-label-preference)

[Tree] (config>router>bgp>group default-label-preference)

Full Context

configure router bgp group neighbor default-label-preference

configure router bgp default-label-preference

configure router bgp group default-label-preference

Description

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.

Note:

The preference value assigned by the default-label-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.

The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.

Default

no default-label-preference

Parameters

ebgp label preference

Specifies the EBGP default preference label value.

Values

0 to 255

ibgp label preference

Specifies the IBGP default preference label value.

Values

0 to 255

Platforms

All

default-metric

default-metric

Syntax

default-metric metric

no default-metric

Context

[Tree] (config>aaa>route-downloader default-metric)

Full Context

configure aaa route-downloader default-metric

Description

This command sets the default metric that routes imported by the RTM acquires.

The no form of this command removes the metric.

Default

default-metric 2

Parameters

metric

Specifies the default metric of the routes imported.

Values

0 to 254

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-metric

Syntax

default-metric ipv4 metric

no default-metric

Context

[Tree] (config>service>vprn>isis>level default-metric)

Full Context

configure service vprn isis level default-metric

Description

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

Default

default-metric 10

Parameters

ipv4 metric

Specifies the default metric for IPv4 unicast.

Values

1 to 16777214

Platforms

All

default-metric

Syntax

default-metric metric

no default-metric

Context

[Tree] (config>service>vprn>ospf>area>stub default-metric)

[Tree] (config>service>vprn>ospf3>area>stub default-metric)

Full Context

configure service vprn ospf area stub default-metric

configure service vprn ospf3 area stub default-metric

Description

This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default

default-metric 1

Parameters

metric

The metric expressed as a decimal integer for the default route cost to be advertised into the stub area.

Values

1 to 16777214

Platforms

All

default-metric

Syntax

default-metric ipv4 metric

no default-metric

Context

[Tree] (config>router>isis>level default-metric)

Full Context

configure router isis level default-metric

Description

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

The no form of this command reverts to the default value.

Default

default-metric 10

Parameters

ipv4 metric

Specifies the default metric for IPv4 unicast.

Values

1 to 16777214

Platforms

All

default-metric

Syntax

default-metric metric

no default-metric

Context

[Tree] (config>router>ospf>area>stub default-metric)

[Tree] (config>router>ospf3>area>stub default-metric)

Full Context

configure router ospf area stub default-metric

configure router ospf3 area stub default-metric

Description

This command configures the metric used by the area border router (ABR) for the default route into a stub area.

The default metric should only be configured on an ABR of a stub area.

An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default

default-metric 1

Parameters

metric

Specifies the metric expressed as a decimal integer for the default route cost to be advertised into the stub area.

Values

1 to 16777214

Platforms

All

default-msap-policy

default-msap-policy

Syntax

default-msap-policy policy-name

no default-msap-policy

Context

[Tree] (config>service>vpls>sap default-msap-policy)

Full Context

configure service vpls sap default-msap-policy

Description

This command specifies the default managed SAP policy to use to create MSAPs when the response from the RADIUS server does not specify a managed SAP policy.

The policy-name parameter is only valid for a SAP with the keywords capture-sap specified in the SAP’s configuration. The capture-sap keyword in the SAP configuration captures the SAP where triggering packets is sent to the CPM. Non-triggering packets captured by the capture SAP is dropped.

The managed SAP policy must already be defined in the config>subscr-mgmt>msap-policy context.

The no form of this command removes the policy-name from the configuration.

Parameters

policy-name

Specifies an existing default managed SAP policy.

Platforms

All

default-pap-password

default-pap-password

Syntax

default-pap-password password [hash | hash2 | custom]

no default-pap-password

Context

[Tree] (config>subscr-mgmt>ppp-policy default-pap-password)

Full Context

configure subscriber-mgmt ppp-policy default-pap-password

Description

This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.

RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.

Parameters

password

Specifies a default PAP password up to 64 characters.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-path

default-path

Syntax

default-path path-name

Context

[Tree] (config>router>mpls>lsp-template default-path)

Full Context

configure router mpls lsp-template default-path

Description

A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.

Parameters

path-name

Configures the default path binding

Platforms

All

default-peer

default-peer

Syntax

[no] default-peer

Context

[Tree] (config>aaa>diam>node>peer default-peer)

Full Context

configure aaa diameter node peer default-peer

Description

This command designates a peer as a default peer. Traffic that is destined to realms that are not associated with locally configured peers, is sent to the default-peer. In effect, the default peer becomes a default route for Diameter realms.

This command is mandatory in multi-chassis redundancy where the inter-chassis peer is designated as default peer. Then, the SR with no open connections towards agents or servers, forwards all traffic to the inter-peer which maintains, as part of MCS, open connections with agents and servers.

The no form of this command reverts to the default.

Default

no default-peer

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-peer

Syntax

default-peer

no default-peer

Context

[Tree] (config>service>vprn>msdp>group>peer default-peer)

[Tree] (config>service>vprn>msdp>peer default-peer)

Full Context

configure service vprn msdp group peer default-peer

configure service vprn msdp peer default-peer

Description

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

  • If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.

  • If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.

  • If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.

  • If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

  • If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

  • If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.

Default

no default-peer

Platforms

All

default-peer

Syntax

[no] default-peer

Context

[Tree] (config>router>msdp>group>peer default-peer)

[Tree] (config>router>msdp>peer default-peer)

Full Context

configure router msdp group peer default-peer

configure router msdp peer default-peer

Description

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer is accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check stops source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

  • If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.

  • If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.

  • If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.

  • If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

  • If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

  • If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.

Default

no default-peer (No default peer is established and all active source messages must be RPF checked)

Platforms

All

default-pool

default-pool

Syntax

default-pool pool-name

no default-pool

Context

[Tree] (config>service>ies>sub-if>local-address-assignment default-pool)

[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment default-pool)

[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment default-pool)

[Tree] (config>service>vprn>sub-if>local-address-assignment default-pool)

Full Context

configure service ies subscriber-interface local-address-assignment default-pool

configure service vprn subscriber-interface group-interface local-address-assignment default-pool

configure service ies subscriber-interface group-interface local-address-assignment default-pool

configure service vprn subscriber-interface local-address-assignment default-pool

Description

This command references a default DHCP address pool for local PPPoX pool management in case that the pool-name is not returned via Radius or LUDB.

Parameters

pool-name

Specifies the name of the local DHCP server pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-preference

default-preference

Syntax

default-preference [ebgp ebgp preference] [ibgp ibgp preference]

no default-preference

Context

[Tree] (config>router>bgp>group>neighbor default-preference)

[Tree] (config>router>bgp default-preference)

[Tree] (config>router>bgp>group default-preference)

Full Context

configure router bgp group neighbor default-preference

configure router bgp default-preference

configure router bgp group default-preference

Description

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.

Note:

The preference value assigned by the default-preference command can always be overwritten by a route policy entry that accepts the route with a preference command in the action.

The no form of the command lets BGP route-table preference to be controlled by other means.

Default

no default-preference

Parameters

ebgp preference

Specifies the EBGP default preference value.

Values

0 to 255

ibgp preference

Specifies the IBGP default preference value.

Values

0 to 255

Platforms

All

default-priority

default-priority

Syntax

default-priority {high | low}

no default-priority

Context

[Tree] (config>qos>sap-ingress default-priority)

Full Context

configure qos sap-ingress default-priority

Description

This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.

Default

default-priority low

Parameters

high

Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

low

Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

Platforms

All

default-profile

default-profile

Syntax

default-profile profile-name

no default-profile

Context

[Tree] (config>app-assure>group>url-filter>web-service default-profile)

Full Context

configure application-assurance group url-filter web-service default-profile

Description

This command configures the default category profile to use when no category profile is explicitly selected for the subscriber.

The no form of this command removes the selected default profile configuration.

Default

no default-profile

Parameters

profile-name

Specifies a configured category profile to use as the default profile name, up to 256 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-result

default-result

Syntax

default-result {revoked | good}

no default-result

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw>cert>status-verify default-result)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)

[Tree] (config>router>if>ipsec>ipsec-tun>dyn>cert>status-verify default-result)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)

[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn>cert>status-verify default-result)

[Tree] (config>ipsec>trans-mode-prof>dyn>cert>status-verify default-result)

[Tree] (config>service>ies>if>sap>ipsec-gw>cert>status-verify default-result)

Full Context

configure service vprn interface sap ipsec-gw cert status-verify default-result

configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result

configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result

configure service ies interface sap ipsec-gw cert status-verify default-result

Description

This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.

Default

default-result revoked

Parameters

good

Specifies that the certificate is considered as acceptable.

revoked

Specifies that the certificate is considered as revoked.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
  • configure service ies interface sap ipsec-gw cert status-verify default-result
  • configure service vprn interface sap ipsec-gw cert status-verify default-result
  • configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result

VSR

  • configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
  • configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
  • configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

default-retail-svc-id

default-retail-svc-id

Syntax

default-retail-svc-id service-id

no default-retail-svc-id

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id

Description

This command specifies the id of default retail service if there is no match found in VLAN to retail map configuration (specified by the vlan command). For DSM and migrant, this command is only applicable for non-NAT stacks.

Parameters

service-id

Specifies the identifier of the retail service to be used by default of a value in the retail service map of this interface.

Values

1 to 2147483650

svc-name: up to 64 characters

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-retail-svc-id

Syntax

default-retail-svc-id service-id

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)

Full Context

configure service ies subscriber-interface group-interface wlan-gw ranges default-retail-svc-id

configure service vprn subscriber-interface group-interface wlan-gw ranges default-retail-svc-id

Description

This command configures the default retailer service for WIFI users.

default-route-tag

default-route-tag

Syntax

default-route-tag tag

no default-route-tag

Context

[Tree] (config>service>epipe>bgp-evpn>mpls default-route-tag)

[Tree] (config>service>epipe>bgp-evpn>vxlan default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>srv6 default-route-tag)

[Tree] (config>service>epipe>bgp-evpn>srv6 default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>vxlan default-route-tag)

[Tree] (config>service>vprn>bgp-ipvpn>srv6 default-route-tag)

[Tree] (config>service>vprn>bgp-evpn>mpls default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>mpls default-route-tag)

Full Context

configure service epipe bgp-evpn mpls default-route-tag

configure service epipe bgp-evpn vxlan default-route-tag

configure service vpls bgp-evpn segment-routing-v6 default-route-tag

configure service epipe bgp-evpn segment-routing-v6 default-route-tag

configure service vpls bgp-evpn vxlan default-route-tag

configure service vprn bgp-ivpn segment-routing-v6 default-route-tag

configure service vprn bgp-evpn mpls default-route-tag

configure service vpls bgp-evpn mpls default-route-tag

Description

This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.

The following are examples of the conflict priority handling:

  • If a service is configured with both default-route-tag X and proxy-arp>evpn-route-tag Y, EVPN uses route tag Y when sending EVPN proxy-arp routes to the BGP RIB for advertisement.

  • If a given IP-prefix route is tagged in the route-table with tag A and the R-VPLS, in which the route is advertised, uses B as the default-route-tag, then EVPN keeps tag A when sending the route to the BGP RIB.

The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.

The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).

Default

no default-route-tag

Parameters

tag

Specifies the route tag.

Values

1 to 255

Platforms

All

  • configure service vpls bgp-evpn vxlan default-route-tag
  • configure service epipe bgp-evpn mpls default-route-tag
  • configure service vpls bgp-evpn mpls default-route-tag
  • configure service vprn bgp-evpn mpls default-route-tag
  • configure service epipe bgp-evpn vxlan default-route-tag

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

  • configure service vpls bgp-evpn segment-routing-v6 default-route-tag
  • configure service epipe bgp-evpn segment-routing-v6 default-route-tag

default-route-tag

Syntax

default-route-tag tag

no default-route-tag

Context

[Tree] (config>service>vprn>isis default-route-tag)

Full Context

configure service vprn isis default-route-tag

Description

This command configures the route tag for default route for the router or VPRN service.

Parameters

tag

Assigns a default tag.

Values

1 — 4294967295

Platforms

All

default-route-tag

Syntax

default-route-tag tag

no default-route-tag

Context

[Tree] (config>router>isis default-route-tag)

Full Context

configure router isis default-route-tag

Description

This command configures the route tag for default route.

Parameters

tag

Assigns a default tag.

Values

1 to 4294967295

Platforms

All

default-route-target

default-route-target

Syntax

[no] default-route-target

Context

[Tree] (config>router>bgp>group>neighbor default-route-target)

[Tree] (config>router>bgp>group default-route-target)

Full Context

configure router bgp group neighbor default-route-target

configure router bgp group default-route-target

Description

This command originates the default RTC route (zero prefix length) towards the selected peers.

Default

no default-route-target

Platforms

All

default-router

default-router

Syntax

default-router ip-address [ip-address]

no default-router

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options default-router)

[Tree] (config>service>vprn>dhcp6>server>pool>subnet default-router)

[Tree] (config>router>dhcp>server>pool>subnet>options default-router)

Full Context

configure subscriber-mgmt local-user-db ipoe host options default-router

configure service vprn dhcp6 server pool subnet default-router

configure router dhcp local-dhcp-server pool subnet options default-router

Description

This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.

The no form of this command removes the address(es) from the configuration.

Parameters

ip-address

Specifies up to four default router IP addresses. Each address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).

Values

a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-sap

default-sap

Syntax

[no] default-sap

Context

[Tree] (config>service>vpls>sap>managed-vlan-list default-sap)

Full Context

configure service vpls sap managed-vlan-list default-sap

Description

This command adds a default SAP to the managed VLAN list.

The no form of this command removes the default SAP to the managed VLAN list.

Platforms

All

default-secure-service

default-secure-service

Syntax

default-secure-service service-id interface ip-int-name

no default-secure-service

Context

[Tree] (config>service>ies>if>sap>ipsec-gateway default-secure-service)

[Tree] (config>service>vprn>if>sap>ipsec-gateway default-secure-service)

Full Context

configure service ies interface sap ipsec-gateway default-secure-service

configure service vprn interface sap ipsec-gateway default-secure-service

Description

This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.

Parameters

service-id

Specifies a default secure service.

Values

service-id: 1 to 2147483647svc-name: An existing service name up to 64 characters.

ip-int-name

The name of private IPsec tunnel interface.

default-set

default-set

Syntax

default-set set-id

no default-set

Context

[Tree] (config>router>mpls>class-forwarding-policy default-set)

Full Context

configure router mpls class-forwarding-policy default-set

Description

This command configures the default forwarding set.

Parameters

set-id

Specifies the class forwarding set.

Values

1 to 4 (in system profile None/A)

1 to 6 (in system profile B)

Platforms

All

default-size

default-size

Syntax

default-size

Context

[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets default-size)

Full Context

configure qos fp-resource-policy aggregate-shapers queue-sets default-size

Description

Commands in this context configure the default queue-set size for individual object types.

Platforms

7750 SR-1, 7750 SR-s

default-tag

default-tag

Syntax

default-tag tag

no default-tag

Context

[Tree] (config>aaa>route-downloader default-tag)

Full Context

configure aaa route-downloader default-tag

Description

This command sets the default tag that routes processed by the AAA route downloader will take.

Note:

Any route received with a specific tag retains the specific tag. The tag value is passed to the Route Table Manager and is available as match condition on the export statement of other routing protocols.

The no form of this command reverts to the default.

Default

default-tag 0

Parameters

tag

Specifies the default tag of the routes imported.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-tunnel-endpoint-limit

default-tunnel-endpoint-limit

Syntax

default-tunnel-endpoint-limit default-endpoint

no default-tunnel-endpoint-limit

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>gtp-tunnel-database default-tunnel-endpoint-limit)

Full Context

configure application-assurance group gtp gtp-filter gtp-tunnel-database default-tunnel-endpoint-limit

Description

This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type.

The validate-gtp-tunnels command must be enabled before using this command.

The no form of this command sets the limit to 4294967295 (the maximum number of GTP endpoints supported by AA FW minus one).

Default

no default-tunnel-endpoint-limit

Parameters

default-endpoint

Specifies the limit.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

default-tunnel-template

default-tunnel-template

Syntax

default-tunnel-template ipsec-template-identifier

no default-tunnel-template

Context

[Tree] (config>service>vprn>if>sap>ipsec-gateway default-tunnel-template)

[Tree] (config>service>ies>if>sap>ipsec-gateway default-tunnel-template)

Full Context

configure service vprn interface sap ipsec-gateway default-tunnel-template

configure service ies interface sap ipsec-gateway default-tunnel-template

Description

This command configures a default tunnel policy template for the gateway.

default-user-name

default-user-name

Syntax

default-user-name ppp-username

no default-user-name

Context

[Tree] (config>subscr-mgmt>ppp-policy default-user-name)

Full Context

configure subscriber-mgmt ppp-policy default-user-name

Description

This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).

The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.

Parameters

ppp-username

Specifies a default username up to 253 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

default-value

default-value

Syntax

default-value value-name

no default-value

Context

[Tree] (config>app-assure>group>policy>aso>char default-value)

Full Context

configure application-assurance group policy app-service-options characteristic default-value

Description

This command assigns one of the characteristic values as default.

When a default value is specified, app-profile entries that do not explicitly include this characteristic inherit the default value and use it as part of the AQP match criteria based on that app-profile.

A default-value is required for each characteristic. This is evaluated at commit time.

The no form of this command removes the default value for the characteristic.

Parameters

value-name

Specifies the name of an existing characteristic value.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

defaults

defaults

Syntax

defaults

Context

[Tree] (config>router>dhcp6>server defaults)

Full Context

configure router dhcp6 local-dhcp-server defaults

Description

Commands in this context configure server default timer and option parameters. These can be overridden on a per-pool and per-prefix basis.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

defaults

Syntax

defaults

Context

[Tree] (config>subscr-mgmt>gtp>apn-policy>apn defaults)

Full Context

configure subscriber-mgmt gtp apn-policy apn defaults

Description

Commands in this context configure default parameters for the GTP connection that can be used when the parameters are not returned in authentication.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

delay

delay

Syntax

delay

Context

[Tree] (config>router>if>if-attribute delay)

Full Context

configure router interface if-attribute delay

Description

Commands in this context configure or apply delay interface attributes such as static delay.

Platforms

All

delay

Syntax

delay interval

Context

[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator delay)

Full Context

configure system management-interface cli md-cli environment progress-indicator delay

Description

This command sets the delay before the progress indicator is displayed in the MD-CLI.

Default

delay 500

Parameters

interval

Specifies the delay interval, in milliseconds.

Values

1 to 10000

Platforms

All

delay

Syntax

delay delay-measurement-type

Context

[Tree] (config>test-oam>link-meas>template delay)

Full Context

configure test-oam link-measurement measurement-template delay

Description

This command configures the type of delay measurement statistic used in both the sample window and aggregate sample window.

The no form of this command reverts to the default value.

Default

delay min

Parameters

delay-measurement-type

Specifies the type of delay measurement that is used for comparison and reporting.

Values

min — Keyword to take the minimum of a series of measurements for comparison and reporting.

max — Keyword to take the maximum of a series of measurements for comparison and reporting.

avg — Keyword to compute the average of a series of measurements for comparison and reporting.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-event

delay-event

Syntax

delay-event {forward | backward | round-trip} lowest-bin bin-number thresholdraise-threshold [clear clear-threshold]

no delay-event {forward | backward | round-trip}

Context

[Tree] (config>oam-pm>bin-group>bin-type delay-event)

Full Context

configure oam-pm bin-group bin-type delay-event

Description

This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.

The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.

Parameters

forward

Specifies the threshold is applied to the forward direction bin.

backward

Specifies the threshold is applied to the backward direction bin.

round-trip

Specifies the threshold is applied to the roundtrip direction bin.

bin-number

Specifies the number of the bin that the threshold is applied to. This bin and all higher bins are monitored to determine if the sum total results in these bins have reached or crossed the configured threshold.

Values

0 to 9

raise-threshold

Specifies the rising numerical value in the range that determines when the event is to be generated, when value reached.

Values

1 to 864000

clear-threshold

Specifies an optional numerical value in the range threshold used to indicate stateful behavior that allows the operator to configure a lower value than the rising threshold that determines when the clear event should be generated. Clear is generated when the end of measurement interval count is less than or equal to the configured value. If this option is not configured the behavior is stateless. Zero means no results can exist in the lower bin or any higher.

Values

0 to 863999

Default

Clear threshold disabled

Platforms

All

delay-event-exclusion

delay-event-exclusion

Syntax

delay-event-exclusion {forward | backward | round-trip} lowest-bin bin-number

no delay-event-exclusion {forward | backward | round-trip}

Context

[Tree] (config>oam-pm>bin-group>bin-type delay-event-exclusion)

Full Context

configure oam-pm bin-group bin-type delay-event-exclusion

Description

This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.

The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.

The no form of this command does not exclude any values from the configured TCA threshold.

Default

no delay-event-exclusion forward

no delay-event-exclusion backward

no delay-event-exclusion round-trip

Parameters

forward

Specifies the forward direction bin.

backward

Specifies the backward direction bin.

round-trip

Specifies the round-trip direction bin.

bin-number

Specifies the number of the lowest bin that the exclusion is applied to. This bin and all higher bins are excluded from the delay-event (TCA) count. If no bin numbers are configured, this command is ignored.

Values

1 to 9

Platforms

All

delay-events

delay-events

Syntax

[no] delay-events

Context

[Tree] (config>oam-pm>session>measurement-interval>event-mon delay-events)

Full Context

configure oam-pm session measurement-interval event-mon delay-events

Description

This enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shutdown all the tests in the session.

The no form of this command disables the monitoring of all configured delay events.

delay-selection

delay-selection

Syntax

delay-selection {static | dynamic | static-preferred | dynamic-preferred}

no delay-selection

Context

[Tree] (config>router>if>if-attr>delay delay-selection)

Full Context

configure router interface if-attribute delay delay-selection

Description

This command selects the delay source to be advertised by the IGP for this interface.

The no form of this command reverts to the default value.

Default

delay-selection static-preferred

Parameters

static

Keyword to use only statically configured delay and ignore dynamic delay measurements generated by link-measurement.

dynamic

Keyword to use only dynamic delay measurements generated by link-measurement and ignore statically configured delay.

static-preferred

Keyword to prefer the configured static delay over the dynamic delay. If static delay is not configured, the delay reported using link-measurement is used.

dynamic-preferred

Keyword to prefer the dynamic reported delay over the statically configured delay. If no dynamic delay has been reported using link-measurement, the statically configured delay is used.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-start-time

delay-start-time

Syntax

delay-start-time delay

no delay-start-time

Context

[Tree] (config>subscr-mgmt>acct-plcy delay-start-time)

Full Context

configure subscriber-mgmt radius-accounting-policy delay-start-time

Description

It is recommended to only use this command when session-accounting is used. By default, a dual stack subscriber generates a RADIUS accounting interim message for each new host update (IPv4, IPv6 WAN, and IPv6 PD). This command delays the trigger of a RADIUS accounting start message and allows all hosts to connect first. When the delay timer expires, a single RADIUS accounting start message containing all the host currently connected to the BNG is sent to the server. Subsequent host connections will trigger interim-updates if host-update is enabled on session-accounting. For all other accounting modes, this command will delay the trigger of an accounting start when a host connects.

The no form of this command reverts to the default.

Default

no delay-start-time

Parameters

delay

Specifies the accounting start delay, in seconds.

Values

1 to 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

delay-template

delay-template

Syntax

delay-template delay-template-name

no delay-template

Context

[Tree] (config>oam-pm>session>ethernet>dmm delay-template)

Full Context

configure oam-pm session ethernet dmm delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the Ethernet DMM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, the streaming of the results is not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax

delay-template delay-template-name

no delay-template

Context

[Tree] (config>oam-pm>session>ip>twamp-light delay-template)

Full Context

configure oam-pm session ip twamp-light delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the IP TWAMP LIGHT test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax

delay-template delay-template-name

no delay-template

Context

[Tree] (config>oam-pm>session>mpls>dm delay-template)

Full Context

configure oam-pm session mpls dm delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the MPLS DM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delay-template

Syntax

delay-template template-name [create]

no delay-template template-name

Context

[Tree] (config>oam-pm>streaming delay-template)

Full Context

configure oam-pm streaming delay-template

Description

This command specifies a template for streaming delay metrics that can be referenced under the oam-pm>session technology delay style test.

The delay-template must be configured under the technology delay test oam-pm>session to allow the delay specific test to stream results using the configured template attributes.

The no form of this command deletes the specified delay template.

Parameters

template-name

Specifies the template name, up to 64 characters.

create

Creates the template.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delegated-ipv6-prefix

delegated-ipv6-prefix

Syntax

[no] delegated-ipv6-prefix

Context

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute delegated-ipv6-prefix)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute delegated-ipv6-prefix

Description

This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.

The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

delegated-prefix-length

delegated-prefix-length

Syntax

delegated-prefix-length [minimum prefix-length] [maximum prefix-length]

no delegated-prefix-length

Context

[Tree] (config>service>vprn>dhcp6>server>pool delegated-prefix-length)

[Tree] (config>router>dhcp6>server>pool delegated-prefix-length)

Full Context

configure service vprn dhcp6 local-dhcp-server pool delegated-prefix-length

configure router dhcp6 local-dhcp-server pool delegated-prefix-length

Description

This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.

The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.

The no form of this command reverts to the default.

Default

delegated-prefix-length 64 minimum 48 maximum 64

Parameters

prefix-length

Specifies the minimum or maximum allowed prefix length, in bits.

Values

48 to 127

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

delegated-prefix-length

Syntax

delegated-prefix-length bits

delegated-prefix-length variable

no delegated-prefix-length

Context

[Tree] (config>service>ies>sub-if>ipv6 delegated-prefix-length)

[Tree] (config>service>vprn>sub-if>ipv6 delegated-prefix-length)

Full Context

configure service ies subscriber-interface ipv6 delegated-prefix-length

configure service vprn subscriber-interface ipv6 delegated-prefix-length

Description

This command configures the subscriber interface level setting for delegated prefix length. The delegated prefix length for a subscriber- interface can be either set to a fixed value that is explicitly configured under the subscriber interface CLI hierarchy or a variable value that can be obtained from various sources. This command can be changed only when no IPv6 prefixes are configured under the subscriber-interface context.

The no form of this command reverts to the default.

Default

no delegated-prefix-length (the delegated prefix length is 64)

Parameters

bits

Specifies the delegated prefix length in bits. This value is applicable to the entire subscriber interface. In case that the delegated prefix length is also supplied via other means (LUDB, RADIUS or DHCP Server), such supplied value must match the value configured under the subscriber-interface context. Otherwise, the prefix instantiation in the router fails.

Values

48 to 64

variable

Specifies that the delegated prefix value can be of any length between 48 to 64. The value itself can vary between the prefixes and is provided at the time of prefix instantiation. The order of priority for the source of the delegated prefix length is:

  • LUDB

  • RADIUS

  • DHCPv6 server

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

delete

delete

Syntax

delete file-url [force] [no-redirect] [client-tls-profile profile] [proxy proxy-url]

Context

[Tree] (file delete)

Full Context

file delete

Description

This command deletes the specified file.

The optional wildcard (*) can be used to delete multiple files that share a common (partial) prefix and/or (partial) suffix. When the wildcard is entered, the following prompt displays for each file that matches the wildcard:

"Delete file <filename> (y/n)?”

Parameters

file-url

Specifies the file name to delete.

Values

local-url

[cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each

remote-url

[{ftp:// | tftp:// | http:// | https://}login:pswd@remote-locn/][file-path]

up to 247 characters

directory length up to 99 characters each

remote-locn

[hostname | ipv4-address | [ipv6-address]]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - up to 32 characters, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

force

Forces an immediate deletion of the specified file(s). The command file delete * force deletes all the wildcard matching files without displaying a user prompt message. This command also automatically accepts HTTP redirects unless overridden by the no-redirect parameter.

profile

Specifies the TLS client profile configured under config>system>security>tls>client-tls-profile to use.

proxy-url

Specifies the URL of an HTTP proxy. For example, http://proxy.mydomain.com:8000. This URL must be an HTTP URL and not an HTTPS URL.

no-redirect

Specifies to automatically refuse any HTTP redirects without prompting the user.

Platforms

All

delete

Syntax

delete [line]

Context

[Tree] (candidate delete)

Full Context

candidate delete

Description

This command deletes the selected CLI node (which includes all sub-branches). The deleted lines are also copied into a temporary buffer that can be used for a subsequent insert.

Parameters

line

Indicates which line to delete.

Values

line, offset, first, edit-point, last

line

absolute line number

offset

relative line number to current edit point. Prefixed with '+' or '-'

first

keyword - first line

edit-point

keyword - current edit point

last

keyword - last line that is not 'exit'

Platforms

All

delete

Syntax

delete [{checkpoint-id | rescue | latest-rb}]

Context

[Tree] (admin>rollback delete)

Full Context

admin rollback delete

Description

This command deletes a rollback checkpoint and causes the suffixes to be adjusted (decremented) for all checkpoints older that the one that was deleted (to close the hole in the list of checkpoint files and create room to create another checkpoint).

If config redundancy rollback-sync is enabled, a rollback delete will also delete the equivalent checkpoint on the standby CF and shuffle the suffixes on the standby CF.

It is not advised to manually delete a rollback checkpoint (for example, using a file delete command). If a rollback checkpoint file is manually deleted without using the admin rollback delete command then the suffixes of the checkpoint files are not shuffled, nor is the equivalent checkpoint file deleted from the standby CF. This manual deletion creates a hole in the checkpoint file list until enough new checkpoints have been created to roll the hole off the end of the list.

Parameters

checkpoint-id

An ID indicating a specific rollback checkpoint. A checkpoint-id of 1 indicates the rollback checkpoint file (at the configured rollback location) with *.rb.1 as the suffix, 2 for file *.rb.2, and so on.

Values

1 to 9

latest-rb

Specifies the most recently created rollback checkpoint (corresponds to the file-url.rb rollback checkpoint file).

rescue

Deletes the rescue checkpoint. No checkpoint suffix numbers are changed.

Platforms

All

delete-config

delete-config

Syntax

[no] delete-config

Context

[Tree] (configure>system>security>profile>netconf>base-op-authorization delete-config)

Full Context

configure system security profile netconf base-op-authorization delete-config

Description

This command enables the NETCONF delete-config operation.

The no form of this command disables the operation.

Default

no delete-config

Note:

The operation is enabled by default in the built-in system-generated administrative profile.

Platforms

All

delete-pending

delete-pending

Syntax

[no] delete-pending

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state delete-pending)

Full Context

configure subscriber-mgmt wlan-gw ue-query state delete-pending

Description

This command enables matching on UEs that are in a delete-pending state.

The no form of this command disables matching on UEs in a delete pending-state, unless all state matching is disabled.

Default

no delete-pending

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

delivery-service

delivery-service

Syntax

delivery-service service-id

delivery-service name service-name

no delivery-service

Context

[Tree] (config>service>ies>if>sap>ip-tunnel delivery-service)

[Tree] (config>service>vprn>if>sap>ip-tunnel delivery-service)

Full Context

configure service ies interface sap ip-tunnel delivery-service

configure service vprn interface sap ip-tunnel delivery-service

Description

This command sets the delivery service for GRE encapsulated packets associated with a particular GRE tunnel. This is the IES or VPRN service where the GRE encapsulated packets are injected and terminated. The delivery service may be the same service that owns the private tunnel SAP associated with the GRE tunnel. The GRE tunnel does not come up until a valid delivery service is configured.

The no form of this command deletes the delivery-service from the GRE tunnel configuration.

Parameters

service-id

Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.

This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The delivery-service name service-name variant can be used in all configuration modes.

Values

{id | svc-name}

id:

1 to 2147483647

svc-name:

up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration).

service-name

Identifies the service used to originate and terminate the GRE encapsulated packets belonging to the GRE tunnel.

Values

1 to 64 characters

Platforms

All

delta-consumed-agg-rate

delta-consumed-agg-rate

Syntax

delta-consumed-agg-rate percent percent-of-delta-consumed-agg-rate

no delta-consumed-agg-rate

Context

[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-agg-rate)

Full Context

configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-agg-rate

Description

This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the aggregate rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.

The no form of this command reverts the delta-consumed-agg-rate percent to its default value.

Default

delta-consumed-agg-rate 20.00

Parameters

percent-of-delta-consumed-agg-rate

Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed aggregate rate that can be given to a queue.

Values

0.00 to 100.00

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delta-consumed-higher-tier-rate

delta-consumed-higher-tier-rate

Syntax

delta-consumed-higher-tier-rate percent percent-of-delta-consumed-high-tier-rate

no delta-consumed-higher-tier-rate

Context

[Tree] (config>qos>adv-config-policy>child-control>bandwidth-distribution>above-offered-allowance delta-consumed-higher-tier-rate)

Full Context

configure qos adv-config-policy child-control bandwidth-distribution above-offered-allowance delta-consumed-higher-tier-rate

Description

This command configures the percentage of the delta (from the beginning to the end of the current H-QoS below CIR or above CIR pass) of the higher tier rate consumed by its other members that can be given to a queue at the end of an H-QoS below CIR pass and above CIR pass. Higher tier refers to the Vport aggregate rate and port scheduler level, group, and maximum rates.

This command is only applicable when the port scheduler is configured to use the above-offered-allowance-control algorithm, otherwise it is ignored.

The no form of this command reverts the delta-consumed-higher-tier-rate percent to its default value.

Default

delta-consumed-higher-tier-rate 5.00

Parameters

percent-of-delta-consumed-high-tier-rate

Specifies the percentage of the delta (over the current H-QoS below CIR or above CIR pass) consumed higher tier rate that can be given to a queue.

Values

0.00 to 100.00

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

delta-in-use-limit

delta-in-use-limit

Syntax

delta-in-use-limit limit

no delta-in-use-limit

Context

[Tree] (config>vrrp>policy delta-in-use-limit)

Full Context

configure vrrp policy delta-in-use-limit

Description

This command sets a lower limit on the virtual router in-use priority that can be derived from the delta priority control events.

Each vrrp-priority-id places limits on the delta priority control events to define the in-use priority of the virtual router instance. Setting this limit prevents the sum of the delta priority events from lowering the in-use priority value of the associated virtual router instances below the configured value.

The limit has no effect on explicit priority control events. Explicit priority control events are controlled by setting the in-use priority to any value between 1 and 254.

Only non-owner virtual router instances can be associated with VRRP priority control policies and their priority control events.

Once the total sum of all delta events is calculated and subtracted from the base priority of the virtual router instance, the result is compared to the delta-in-use-limit value. If the result is less than the limit, the delta-in-use-limit value is used as the virtual router in-use priority value. If an explicit priority control event overrides the delta priority control events, the delta-in-use-limit has no effect.

Setting the limit to a higher value than the default of 1 limits the effect of the delta priority control events on the virtual router instance base priority value. This allows for multiple priority control events while minimizing the overall effect on the in-use priority.

Changing the in-use-priority-limit causes an immediate re-evaluation of the in-use priority values for all virtual router instances associated with this vrrp-policy-id based on the current sum of all active delta control policy events.

The no form of the command reverts to the default value.

Default

delta-in-use-limit 1 — Specifies the lower limit of 1 for the in-use priority, as modified, by delta priority control events.

Parameters

limit

Specifies the lower limit of the in-use priority base, as modified by priority control policies. The in-use-priority-limit has the same range as the non-owner virtual router instance base-priority parameter. If the result of the total delta priority control events minus the virtual router instances base-priority, is less than the in-use-priority-limit, the in-use-priority-limit value is used as the virtual router instances in-use priority value.

Setting the in-use-priority-limit to a value equal to or larger than the virtual router instance base-priority prevents the delta priority control events from having any effect on the virtual router instance in-use priority value.

Values

1 to 254

Platforms

All

dent-threshold

dent-threshold

Syntax

dent-threshold threshold

no dent-threshold

Context

[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>pip dent-threshold)

[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>sd dent-threshold)

[Tree] (config>mcast-mgmt>mcast-info-plcy>video-policy>video-if>hd dent-threshold)

Full Context

configure mcast-management multicast-info-policy video-policy video-interface pip dent-threshold

configure mcast-management multicast-info-policy video-policy video-interface sd dent-threshold

configure mcast-management multicast-info-policy video-policy video-interface hd dent-threshold

Description

This command sets the threshold value below which the FCC server will dent/drop unicast data sent to the FCC client during a fast channel change. Within the RTP extension header, the packet priority (PRI) (2 bits) and the fine-grained priority (FPRI) (3 bits) indicate the "importance” of the frame as to how essential it is to the video stream.

This parameter is only applicable if the FCC server mode is dent.

The no form of the command returns the parameter to the default value.

Default

dent-threshold 16 (only B frames are dropped)

Parameters

threshold

Specifies the threshold value is used by the FCC server to compare with the concatenation of the PRI and FPRI to determine whether to send the packet to the FCC client. If the PRI and FPRI expressed as a decimal integer is greater than or equal to the threshold value, the packet will be sent.

Values

1 to 31

Platforms

7450 ESS, 7750 SR-1, 7750 SR-7/12/12e, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s

deny-list

deny-list

Syntax

[no] deny-list deny-list-name

Context

[Tree] (config>app-assure>group>url-filter>local-filtering deny-list)

Full Context

configure application-assurance group url-filter local-filtering deny-list

Description

This command adds a deny-list URL list to the local URL filter policy.

The no form of this command removes the URL list object.

Default

no deny-list

Parameters

deny-list-name

Specifies the URL list name.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

depleted-event

depleted-event

Syntax

[no] depleted-event

Context

[Tree] (config>service>vprn>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)

[Tree] (config>router>dhcp6>server>pool>prefix>thresholds>minimum-free depleted-event)

Full Context

configure service vprn dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event

configure router dhcp6 local-dhcp-server pool prefix thresholds minimum-free depleted-event

Description

This command enables the system to send out a warning when the prefix with a configured length is no longer available in the provisioned prefix.

For example:

prefix 2001:0:0:ffe0::/50 pd wan-host create
   thresholds
       minimum-free prefix-length 64
           depleted-event

With the above configuration, the system will send out a warning when there is no available /64 that can be allocated out of 2001:0:0:ffe0::/50.

The no form of this command disables the warnings.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

depleted-event

Syntax

[no] depleted-event

Context

[Tree] (config>service>vprn>dhcp6>server>pool>thresholds>minimum-free depleted-event)

[Tree] (config>router>dhcp6>server>pool>thresholds>minimum-free depleted-event)

Full Context

configure service vprn dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event

configure router dhcp6 local-dhcp-server pool thresholds minimum-free depleted-event

Description

This command enables the system to send out warnings when the prefix with the configured length is no longer available in the pool.

The no form of this command disables the warnings.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

derived-id

derived-id

Syntax

derived-id derived-id-string

no derived-id

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident derived-id)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident derived-id)

Full Context

configure subscriber-mgmt local-user-db ppp host host-identification derived-id

configure subscriber-mgmt local-user-db ipoe host host-identification derived-id

Description

This command configures an ASCII string that uniquely identifies a host and is derived by a Python script from packet content available during a DHCP transaction or PPPoE session establishment.

Note:

This command is only used when derived-id is configured as one of the match-list parameters.

The no form of this command removes the derived-id from the configuration.

Parameters

derived-id-string

Specifies the host ID to be derived by a python script from DHCP or PPPoE packets, up to 255 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

description

description

Syntax

description tiny-description-string

no description

Context

[Tree] (config>ipsec>static-sa description)

Full Context

configure ipsec static-sa description

Description

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters

tiny-description-string

Specifies the description character string. Allowed values are any string, up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

description

Syntax

description short-description-string

no description

Context

[Tree] (config>service>ies description)

[Tree] (config>system>satellite>port-template description)

[Tree] (config>service>ies>sub-if>grp-if>sap>eth-cfm>mep description)

[Tree] (config>subscr-mgmt>git description)

[Tree] (config>router>rip>group>neighbor description)

[Tree] (config>service>vprn>if>dhcp description)

[Tree] (config>subscr-mgmt>acct-plcy description)

[Tree] (config>subscr-mgmt>loc-user-db description)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel description)

[Tree] (config>router>if>dhcp description)

[Tree] (config>system>persistence>dhcp-server description)

[Tree] (config>service>vprn>static-route-entry>indirect description)

[Tree] (config>redundancy>multi-chassis>peer description)

[Tree] (config>filter>mac-filter>entry description)

[Tree] (config>port>ethernet>access>ing>qgrp description)

[Tree] (config>router>dhcp6>server>pool description)

[Tree] (config>service>vprn>aarp-interface>spoke-sdp description)

[Tree] (config>service>vprn>rip>group description)

[Tree] (config>service>vpls>endpoint description)

[Tree] (config>service>vprn>spoke-sdp description)

[Tree] (config>service>vprn>static-route-entry>grt description)

[Tree] (config>filter>ip-filter>entry description)

[Tree] (config>service>vprn>rip description)

[Tree] (config>service>ies>sub-if>grp-if>srrp description)

[Tree] (config>router>ripng description)

[Tree] (config>system>satellite>local-forward>sap description)

[Tree] (config>port>ethernet>access>egr>qgrp description)

[Tree] (config>router>origin-validation>rpki-session description)

[Tree] (config>filter>match-list>port-list description)

[Tree] (config>system>persistence>nat-fwd description)

[Tree] (config>isa>ipsec-group description)

[Tree] (config>filter>dhcp-filter description)

[Tree] (config>bmp>station description)

[Tree] (config>qos>match-list>ipv6-prefix-list description)

[Tree] (config>ipsec>client-db>client description)

[Tree] (config>ipsec>client-db description)

[Tree] (config>qos>network-queue description)

[Tree] (config>fwd-path-ext>fpe description)

[Tree] (config>service>vprn>ripng description)

[Tree] (config>filter>ipv6-exception>entry description)

[Tree] (config>qos>match-list>ip-prefix-list description)

[Tree] (config>port>ethernet>access>egr>vport description)

[Tree] (config>system>script-control>script description)

[Tree] (config>system>bluetooth>device description)

[Tree] (config>subscr-mgmt>sap-template description)

[Tree] (config>router>if>eth-cfm>mep description)

[Tree] (config>router>mcac>policy>bundle description)

[Tree] (config>filter>ipv6-exception description)

[Tree] (config>filter>match-list>protocol-list description)

[Tree] (config>filter>gre-tun-tmp description)

[Tree] (config>router>static-route-entry>indirect description)

[Tree] (config>filter>redirect-policy>destination description)

[Tree] (config>router>bgp>group>neighbor description)

[Tree] (config>qos>hw-agg-shap-sched-plcy description)

[Tree] (config>ipsec>tnl-temp description)

[Tree] (config>router>pcp-server>server description)

[Tree] (config>service>ipipe description)

[Tree] (config>service>ies>sub-if>dhcp description)

[Tree] (config>system>grpc-tunnel>tunnel description)

[Tree] (config>router>bgp description)

[Tree] (config>service>ies>if>sap>ip-tunnel description)

[Tree] (config>filter>ip-exception>entry description)

[Tree] (config>service>ipipe>spoke-sdp description)

[Tree] (config>router>static-route-entry>black-hole description)

[Tree] (config>system>software-repository description)

[Tree] (config>service>vprn>if>sap>ip-tunnel description)

[Tree] (config>system>satellite>eth-sat description)

[Tree] (config>router>network-domains>network-domain description)

[Tree] (config>router>fad>flex-algo description)

[Tree] (config>system>satellite>local-forward description)

[Tree] (config>router>dhcp>server description)

[Tree] (config>isa>tunnel-group description)

[Tree] (config>service>ipipe>endpoint description)

[Tree] (config>service>vprn>ripng>group description)

[Tree] (config>lag>link-map-profile description)

[Tree] (config>service>vprn>bgp>group>neighbor description)

[Tree] (config>service>epipe description)

[Tree] (config>port-xc>pxc description)

[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel description)

[Tree] (config>filter>redirect-policy description)

[Tree] (config>filter>log description)

[Tree] (config>system>persistence>sub-mgmt description)

[Tree] (config>filter>match-list>ipv6-prefix-list description)

[Tree] (config>port>ethernet>network>egr>qgrp description)

[Tree] (config>router>route-next-hop-policy>template description)

[Tree] (config>router>mcac>policy description)

[Tree] (config>filter>ipv6-filter>entry description)

[Tree] (config>router>static-route-entry>next-hop description)

[Tree] (config>service>vprn>rip>group>neighbor description)

[Tree] (config>qos>fp-resource-policy description)

[Tree] (config>service>vprn>bgp description)

[Tree] (config>qos>policer-control-policy description)

[Tree] (config>filter>ipv6-filter description)

[Tree] (config>port>ethernet>eth-cfm>mep description)

[Tree] (config>system>management-interface>remote-management>manager description)

[Tree] (config>service>cpipe description)

[Tree] (config>service>epipe>spoke-sdp description)

[Tree] (config>service>ies>if>ipv6>dhcp6-relay description)

[Tree] (config>service>vprn>static-route-entry>black-hole description)

[Tree] (config>service>vprn>bgp>group description)

[Tree] (config>port>ethernet>egress>hs-sec-shaper description)

[Tree] (config>subscr-mgmt>rip-plcy description)

[Tree] (config>service>ies>aarp-interface>spoke-sdp description)

[Tree] (config>router>if>vrrp description)

[Tree] (config>service>vprn>red-if>spoke-sdp description)

[Tree] (config>eth-tunnel>path>eth-cfm>mep description)

[Tree] (config>service>ies>if>spoke-sdp description)

[Tree] (config>service>ies>sub-if>grp-if>pppoe description)

[Tree] (config>service>vprn>sub-if>grp-if>pppoe description)

[Tree] (config>service>vprn>ripng>group>neighbor description)

[Tree] (config>service>ies>if>sap>eth-cfm>mep description)

[Tree] (config>qos>match-list>port-list description)

[Tree] (config>router>ripng>group>neighbor description)

[Tree] (config>router>ripng>group description)

[Tree] (config>qos>policer-control-policy>tier>arbiter description)

[Tree] (config>card>fp>ingress>network>queue-group description)

[Tree] (config>filter>match-list>ip-prefix-list description)

[Tree] (config>service>vpls>sap>ipoe-session description)

[Tree] (config>isa>tunnel-mem-pool description)

[Tree] (config>system>cron>sched description)

[Tree] (config>service>vprn>sub-if>ipv6>dhcp6>relay description)

[Tree] (config>system>grpc-tunnel>destination-group description)

[Tree] (config>eth-tunnel>path description)

[Tree] (config>router>rip>group description)

[Tree] (config>filter>ip-exception description)

[Tree] (config>ipsec>trans-mode-prof description)

[Tree] (config>subscr-mgmt>gtp>peer-profile description)

[Tree] (config>filter>ip-filter description)

[Tree] (config>system>satellite>tdm-sat description)

[Tree] (config>service>vprn>l2tp description)

[Tree] (config>ipsec>ike-policy description)

[Tree] (config>router>rip description)

[Tree] (config>qos>post-policer-mapping description)

[Tree] (config>system>persistence>python-policy-cache description)

[Tree] (config>router>bgp>group description)

[Tree] (config>system>persistence>ancp description)

[Tree] (config>router>dhcp6>server description)

[Tree] (config>card>fp>ingress>access>queue-group description)

[Tree] (config>service>ies>sub-if>grp-if>dhcp description)

[Tree] (config>filter>mac-filter description)

[Tree] (config>service>vprn>static-route-entry>next-hop description)

[Tree] (config>service>cpipe>endpoint description)

[Tree] (config>service>ies>if>dhcp description)

[Tree] (config>app-assure>group>policy>chrg-fltr>entry description)

[Tree] (config>service>epipe>endpoint description)

[Tree] (config>service>vprn>if>sap description)

[Tree] (config>router>mcac>if-policy description)

[Tree] (config>service>ies>sub-if>ipv6>dhcp6>relay description)

[Tree] (config>subscr-mgmt>pfcp-association description)

[Tree] (config>subscr-mgmt>ppp-policy description)

[Tree] (config>service>sdp>binding>pw-port description)

[Tree] (config>service>ies>if>spoke-sdp>eth-cfm>mep description)

[Tree] (config>router>dhcp>server>pool description)

Full Context

configure service ies description

configure system satellite port-template description

configure service ies subscriber-interface group-interface sap eth-cfm mep description

configure subscriber-mgmt group-interface-template description

configure router rip group neighbor description

configure service vprn interface dhcp description

configure subscriber-mgmt radius-accounting-policy description

configure subscriber-mgmt local-user-db description

configure service vprn interface sap ipsec-tunnel description

configure router interface dhcp description

configure system persistence dhcp-server description

configure service vprn static-route-entry indirect description

configure redundancy multi-chassis peer description

configure filter mac-filter entry description

configure port ethernet access ingress queue-group description

configure router dhcp6 local-dhcp-server pool description

configure service vprn aarp-interface spoke-sdp description

configure service vprn rip group description

configure service vpls endpoint description

configure service vprn spoke-sdp description

configure service vprn static-route-entry grt description

configure filter ip-filter entry description

configure service vprn rip description

configure service ies subscriber-interface group-interface srrp description

configure router ripng description

configure system satellite local-forward sap description

configure port ethernet access egress queue-group description

configure router origin-validation rpki-session description

configure filter match-list port-list description

configure system persistence nat-port-forwarding description

configure isa ipsec-group description

configure filter dhcp-filter description

configure bmp station description

configure qos match-list ipv6-prefix-list description

configure ipsec client-db client description

configure ipsec client-db description

configure qos network-queue description

configure fwd-path-ext fpe description

configure service vprn ripng description

configure filter ipv6-exception entry description

configure qos match-list ip-prefix-list description

configure port ethernet access egress vport description

configure system script-control script description

configure system bluetooth device description

configure subscriber-mgmt sap-template description

configure router interface eth-cfm mep description

configure router mcac policy bundle description

configure filter ipv6-exception description

configure filter match-list protocol-list description

configure filter gre-tunnel-template description

configure router static-route-entry indirect description

configure filter redirect-policy destination description

configure router bgp group neighbor description

configure qos hw-agg-shaper-scheduler-policy description

configure ipsec tunnel-template description

configure router pcp-server server description

configure service ipipe description

configure service ies subscriber-interface dhcp description

configure system grpc-tunnel tunnel description

configure router bgp description

configure service ies interface sap ip-tunnel description

configure filter ip-exception entry description

configure service ipipe spoke-sdp description

configure router static-route-entry black-hole description

configure system software-repository description

configure service vprn interface sap ip-tunnel description

configure system satellite eth-sat description

configure router network-domains network-domain description

configure router flexible-algorithm-definitions flex-algo description

configure system satellite local-forward description

configure router dhcp local-dhcp-server description

configure isa tunnel-group description

configure service ipipe endpoint description

configure service vprn ripng group description

configure lag link-map-profile description

configure service vprn bgp group neighbor description

configure service epipe description

configure port-xc pxc description

configure service vprn static-route-entry ipsec-tunnel description

configure filter redirect-policy description

configure filter log description

configure system persistence subscriber-mgmt description

configure filter match-list ipv6-prefix-list description

configure port ethernet network egress queue-group description

configure router route-next-hop-policy template description

configure router mcac policy description

configure filter ipv6-filter entry description

configure router static-route-entry next-hop description

configure service vprn rip group neighbor description

configure qos fp-resource-policy description

configure service vprn bgp description

configure qos policer-control-policy description

configure filter ipv6-filter description

configure port ethernet eth-cfm mep description

configure system management-interface remote-management manager description

configure service cpipe description

configure service epipe spoke-sdp description

configure service ies interface ipv6 dhcp6-relay description

configure service vprn static-route-entry black-hole description

configure service vprn bgp group description

configure port ethernet egress hs-secondary-shaper description

configure subscriber-mgmt rip-policy description

configure service ies aarp-interface spoke-sdp description

configure router interface vrrp description

configure service vprn redundant-interface spoke-sdp description

configure eth-tunnel path eth-cfm mep description

configure service ies interface spoke-sdp description

configure service ies subscriber-interface group-interface pppoe description

configure service vprn subscriber-interface group-interface pppoe description

configure service vprn ripng group neighbor description

configure service ies interface sap eth-cfm mep description

configure qos match-list port-list description

configure router ripng group neighbor description

configure router ripng group description

configure qos policer-control-policy tier arbiter description

configure card fp ingress network queue-group description

configure filter match-list ip-prefix-list description

configure service vpls sap ipoe-session description

configure isa tunnel-member-pool description

configure system cron schedule description

configure service vprn subscriber-interface ipv6 dhcp6 relay description

configure system grpc-tunnel destination-group description

configure eth-tunnel path description

configure router rip group description

configure filter ip-exception description

configure ipsec ipsec-transport-mode-profile description

configure subscriber-mgmt gtp peer-profile description

configure filter ip-filter description

configure system satellite tdm-sat description

configure service vprn l2tp description

configure ipsec ike-policy description

configure router rip description

configure qos post-policer-mapping description

configure system persistence python-policy-cache description

configure router bgp group description

configure system persistence ancp description

configure router dhcp6 local-dhcp-server description

configure card fp ingress access queue-group description

configure service ies subscriber-interface group-interface dhcp description

configure filter mac-filter description

configure service vprn static-route-entry next-hop description

configure service cpipe endpoint description

configure service ies interface dhcp description

configure application-assurance group policy charging-filter entry description

configure service epipe endpoint description

configure service vprn interface sap description

configure router mcac if-policy description

configure service ies subscriber-interface ipv6 dhcp6 relay description

configure subscriber-mgmt pfcp-association description

configure subscriber-mgmt ppp-policy description

configure service sdp binding pw-port description

configure service ies interface spoke-sdp eth-cfm mep description

configure router dhcp local-dhcp-server pool description

Description

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default

no description

Parameters

short-description-string

Specifies the description entered as a character string up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

  • configure service ies interface sap ip-tunnel description
  • configure system cron schedule description
  • configure router static-route-entry black-hole description
  • configure router ripng description
  • configure router rip group neighbor description
  • configure service vprn bgp group neighbor description
  • configure filter match-list ipv6-prefix-list description
  • configure system grpc-tunnel destination-group description
  • configure filter mac-filter entry description
  • configure router origin-validation rpki-session description
  • configure service vprn interface sap description
  • configure filter ipv6-filter description
  • configure service epipe endpoint description
  • configure port ethernet network egress queue-group description
  • configure service vprn rip group description
  • configure filter match-list port-list description
  • configure lag link-map-profile description
  • configure router mcac policy bundle description
  • configure service vprn interface sap ip-tunnel description
  • configure service epipe description
  • configure router flexible-algorithm-definitions flex-algo description
  • configure filter match-list protocol-list description
  • configure service sdp binding pw-port description
  • configure router network-domains network-domain description
  • configure system management-interface remote-management manager description
  • configure router mcac if-policy description
  • configure bmp station description
  • configure router ripng group neighbor description
  • configure port ethernet access egress queue-group description
  • configure router static-route-entry next-hop description
  • configure filter redirect-policy destination description
  • configure port ethernet access ingress queue-group description
  • configure service vprn ripng group neighbor description
  • configure service vprn ripng group description
  • configure service ipipe spoke-sdp description
  • configure router bgp group neighbor description
  • configure service ipipe endpoint description
  • configure filter ip-filter description
  • configure qos match-list ipv6-prefix-list description
  • configure router static-route-entry indirect description
  • configure service ipipe description
  • configure system persistence python-policy-cache description
  • configure service ies interface ipv6 dhcp6-relay description
  • configure router bgp description
  • configure fwd-path-ext fpe description
  • configure filter dhcp-filter description
  • configure service ies interface spoke-sdp description
  • configure service ies interface dhcp description
  • configure service vpls endpoint description
  • configure service vprn static-route-entry grt description
  • configure service vprn ripng description
  • configure service vprn bgp description
  • configure service vprn static-route-entry indirect description
  • configure port ethernet access egress vport description
  • configure filter redirect-policy description
  • configure service vprn rip description
  • configure qos match-list ip-prefix-list description
  • configure service vprn interface dhcp description
  • configure filter gre-tunnel-template description
  • configure port-xc pxc description
  • configure filter ip-filter entry description
  • configure service epipe spoke-sdp description
  • configure service vprn bgp group description
  • configure system persistence ancp description
  • configure router route-next-hop-policy template description
  • configure qos network-queue description
  • configure redundancy multi-chassis peer description
  • configure service ies description
  • configure router interface dhcp description
  • configure service vprn spoke-sdp description
  • configure router interface vrrp description
  • configure system script-control script description
  • configure service vprn static-route-entry next-hop description
  • configure filter ipv6-filter entry description
  • configure router rip group description
  • configure service vprn static-route-entry ipsec-tunnel description
  • configure router rip description
  • configure filter log description
  • configure system grpc-tunnel tunnel description
  • configure filter mac-filter description
  • configure service vprn static-route-entry black-hole description
  • configure router ripng group description
  • configure filter match-list ip-prefix-list description
  • configure service vprn rip group neighbor description
  • configure router bgp group description
  • configure router mcac policy description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure system satellite local-forward sap description
  • configure system satellite local-forward description
  • configure service ies interface sap eth-cfm mep description
  • configure qos match-list port-list description
  • configure system satellite port-template description
  • configure port ethernet eth-cfm mep description
  • configure eth-tunnel path eth-cfm mep description
  • configure eth-tunnel path description
  • configure router interface eth-cfm mep description
  • configure service ies interface spoke-sdp eth-cfm mep description
  • configure service cpipe description
  • configure system software-repository description
  • configure service cpipe endpoint description
  • configure system satellite eth-sat description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

  • configure service ies subscriber-interface group-interface sap eth-cfm mep description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface ipv6 dhcp6 relay description
  • configure service vprn subscriber-interface group-interface pppoe description
  • configure subscriber-mgmt pfcp-association description
  • configure service ies subscriber-interface group-interface dhcp description
  • configure subscriber-mgmt sap-template description
  • configure router dhcp6 local-dhcp-server description
  • configure service vprn redundant-interface spoke-sdp description
  • configure subscriber-mgmt local-user-db description
  • configure subscriber-mgmt rip-policy description
  • configure router dhcp local-dhcp-server description
  • configure service vpls sap ipoe-session description
  • configure router dhcp local-dhcp-server pool description
  • configure service vprn subscriber-interface ipv6 dhcp6 relay description
  • configure service ies subscriber-interface dhcp description
  • configure subscriber-mgmt group-interface-template description
  • configure system persistence subscriber-mgmt description
  • configure router dhcp6 local-dhcp-server pool description
  • configure service vprn l2tp description
  • configure service ies subscriber-interface group-interface pppoe description
  • configure system persistence dhcp-server description
  • configure subscriber-mgmt ppp-policy description
  • configure service ies subscriber-interface group-interface srrp description
  • configure subscriber-mgmt radius-accounting-policy description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure ipsec tunnel-template description
  • configure router pcp-server server description
  • configure service vprn aarp-interface spoke-sdp description
  • configure ipsec client-db client description
  • configure service ies aarp-interface spoke-sdp description
  • configure isa tunnel-group description
  • configure ipsec ike-policy description
  • configure application-assurance group policy charging-filter entry description
  • configure ipsec ipsec-transport-mode-profile description
  • configure service vprn interface sap ipsec-tunnel description
  • configure system persistence nat-port-forwarding description
  • configure ipsec client-db description
  • configure isa tunnel-member-pool description

VSR

  • configure filter ipv6-exception description
  • configure filter ipv6-exception entry description
  • configure filter ip-exception description
  • configure filter ip-exception entry description

7750 SR-1, 7750 SR-s, 7950 XRS-20e

  • configure system bluetooth device description

7750 SR-1, 7750 SR-s

  • configure qos hw-agg-shaper-scheduler-policy description

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

  • configure qos fp-resource-policy description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR

  • configure card fp ingress network queue-group description
  • configure card fp ingress access queue-group description
  • configure qos policer-control-policy description
  • configure qos post-policer-mapping description
  • configure qos policer-control-policy tier arbiter description

7750 SR-7/12/12e

  • configure port ethernet egress hs-secondary-shaper description

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure subscriber-mgmt gtp peer-profile description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  • configure system satellite tdm-sat description

description

Syntax

description short-description-string

no description

Context

[Tree] (config>aaa>l2tp-acct-plcy description)

[Tree] (config>subscr-mgmt>host-tracking description)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)

[Tree] (config>app-assure>group>http-error-redirect description)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw description)

[Tree] (config>service>vprn>sub-if>grp-if>srrp description)

[Tree] (config>aaa>diam>node description)

[Tree] (config>app-assure>group>port-list description)

[Tree] (config>subscr-mgmt>steering-profile description)

[Tree] (config>app-assure>group>policy>custom-protocol description)

[Tree] (config>qos>sap-ingress>mac-criteria>entry description)

[Tree] (config>aaa>acct-on-off-grp description)

[Tree] (config>app-assure>group>statistics>aa-sub description)

[Tree] (config>service>vpls description)

[Tree] (config>subscr-mgmt>sla-profile description)

[Tree] (config>service>nat>nat-classifier>entry description)

[Tree] (config>service>dynsvc>ladb>user description)

[Tree] (config>macsec>connectivity-association description)

[Tree] (config>app-assure>group>tcp-validate description)

[Tree] (config>app-assure>group>policy>transit-ip-policy description)

[Tree] (config>mcast-mgmt>mcast-rprt-dest description)

[Tree] (config>service>vpls>sap description)

[Tree] (config>li>li-filter>li-mac-filter>entry description)

[Tree] (config>app-assure>group>ip-prefix-list description)

[Tree] (config>subscr-mgmt>mld-policy description)

[Tree] (config>li>li-filter>li-ip-filter description)

[Tree] (config>service>vprn>twamp-light>reflector description)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle description)

[Tree] (config>qos>sap-egress>ipv6-criteria>entry description)

[Tree] (config>qos>sap-egress description)

[Tree] (config>subscr-mgmt>isa-svc-chain>evpn description)

[Tree] (config>app-assure>group>policy>app-group description)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext>network description)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters description)

[Tree] (config>qos>network>ingress>ip-criteria>entry description)

[Tree] (config>li>li-filter>li-ip-filter>entry description)

[Tree] (config>isa>nat-group description)

[Tree] (config>oam-pm>streaming>delay-template description)

[Tree] (config>qos>sap-ingress description)

[Tree] (config>service>nat>nat-classifier description)

[Tree] (config>service>vpls>spoke-sdp description)

[Tree] (config>qos>network>egress>ip-criteria>entry description)

[Tree] (config>esa description)

[Tree] (config>app-assure>group>session-filter>entry description)

[Tree] (config>app-assure>group>policy>charging-group description)

[Tree] (config>subscr-mgmt>credit-cntrl-plcy description)

[Tree] (config>python>py-policy description)

[Tree] (config>app-assure>group>gtp>gtp-filter description)

[Tree] (config>app-assure>group>cflowd>collector description)

[Tree] (config>card>fp>ingress>mcast-mgmt description)

[Tree] (config>test-oam>link-meas>template description)

[Tree] (config>qos>sap-ingress>ipv6-criteria>entry description)

[Tree] (config>app-assure>group>cflowd>direct-export>collector description)

[Tree] (config>app-assure>group>policy>app-filter>entry description)

[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile description)

[Tree] (config>subscr-mgmt>sub-profile description)

[Tree] (config>app-assure>aarp description)

[Tree] (config>mcast-mgmt>bandwidth-policy description)

[Tree] (config>service>vprn>gsmp>group>neighbor description)

[Tree] (config>app-assure>group>url-list description)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)

[Tree] (config>router>nat>inside>subscriber-id description)

[Tree] (config>vrrp>policy description)

[Tree] (config>subscr-mgmt>accu-stats-policy description)

[Tree] (config>service>vprn>sub-if>grp-if>ipoe-session description)

[Tree] (config>subscr-mgmt>authentication-policy description)

[Tree] (config>app-assure>group>policer description)

[Tree] (config>router>policy-options>policy-statement description)

[Tree] (config>router>radius-proxy>server description)

[Tree] (config>service>nat>up-nat-policy description)

[Tree] (config>service>vpls>wlan-gw description)

[Tree] (config>li>li-filter-block-reservation>li-reserved-block description)

[Tree] (config>isa description)

[Tree] (config>app-assure>protocol description)

[Tree] (config>subscr-mgmt>sub-mcac-policy description)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt description)

[Tree] (config>app-assure>group>sctp-filter description)

[Tree] (config>app-assure>group>http-notification description)

[Tree] (config>app-assure>group>url-filter>icap>server description)

[Tree] (config>service>vprn>sub-if>grp-if>sap description)

[Tree] (config>service>vprn>if>sap>ip-tunnel description)

[Tree] (config>li>x-interfaces>lics>lic description)

[Tree] (config>app-assure>group>policy>app-qos-policy>entry description)

[Tree] (config>subscr-mgmt>diam-appl-plcy description)

[Tree] (config>service>dynsvc>ladb description)

[Tree] (config>app-assure>group>url-filter description)

[Tree] (config>isa>aa-group description)

[Tree] (config>service>vprn>nat>outside>pool description)

[Tree] (config>mirror>mirror-dest description)

[Tree] (config>app-assure>rad-acct-plcy description)

[Tree] (config>subscr-mgmt>isa-policer description)

[Tree] (config>aaa>radius-script-policy description)

[Tree] (config>aaa>radius-srv-plcy description)

[Tree] (config>service>vpls>gsmp>group>neighbor description)

[Tree] (config>service>vprn>twamp-light>reflector>prefix description)

[Tree] (config>service>vprn>radius-proxy>server description)

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters description)

[Tree] (config>call-trace>trace-profile description)

[Tree] (config>service>ipfix>ipfix-export-policy description)

[Tree] (config>mcast-mgmt>multicast-info-policy description)

[Tree] (config>aaa>isa-radius-plcy description)

[Tree] (config>app-assure>group>policer>tod-override description)

[Tree] (config>app-assure>group>http-enrich description)

[Tree] (config>subscr-mgmt>cat-map description)

[Tree] (config>service>nat>firewall-policy description)

[Tree] (config>subscr-mgmt>ipoe-session-policy description)

[Tree] (config>qos>sap-ingress>policer description)

[Tree] (config>li>li-filter>li-ipv6-filter description)

[Tree] (config>service>vpls>split-horizon-group description)

[Tree] (config>service>vpls>gsmp>group description)

[Tree] (config>subscr-mgmt>cat-map>category description)

[Tree] (config>service>vprn description)

[Tree] (config>subscr-mgmt>isa-filter description)

[Tree] (config>mirror>mirror-dest>endpoint description)

[Tree] (config>esa>vm description)

[Tree] (config>service>nat>map-domain>mapping-rule description)

[Tree] (config>service>nat>pcp-server-policy description)

[Tree] (config>app-assure>group>http-redirect description)

[Tree] (cfg>qos>qgrps>ing>qgrp description)

[Tree] (config>router>radius-server>server description)

[Tree] (config>aaa>route-downloader description)

[Tree] (config>app-assure>group>policy>application description)

[Tree] (cfg>qos>qgrps>ing>qgrp>policer description)

[Tree] (config>service>dynsvc>policy description)

[Tree] (config>service>vpls>mesh-sdp description)

[Tree] (config>app-assure>group>policy>app-profile description)

[Tree] (config>qos>sap-egress>policer description)

[Tree] (config>system>persistence>application-assurance description)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry description)

[Tree] (config>router>policy-options>policy-statement>entry description)

[Tree] (cfg>qos>qgrps>egr>qgrp description)

[Tree] (config>service>mac-list description)

[Tree] (config>service>vpls>igmp-snooping>mvr description)

[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry description)

[Tree] (config>app-assure>group>url-filter>web-service>profile description)

[Tree] (config>service>vprn>radius-server>server description)

[Tree] (config>pw-port description)

[Tree] (config>service>vprn>gsmp>group description)

[Tree] (config>subscr-mgmt>isa-svc-chain>vas-filter description)

[Tree] (config>service>vprn>firewall>domain>prefix description)

[Tree] (cfg>qos>qgrps>egr>qgrp>policer description)

[Tree] (config>python>python-script description)

[Tree] (config>subscr-mgmt>isa-filter>entry description)

[Tree] (config>oam-pm>session description)

[Tree] (config>router>nat>outside>pool description)

[Tree] (config>service>vprn>ip-mirror-interface>spoke-sdp description)

[Tree] (config>oam-pm>bin-group description)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw description)

[Tree] (config>app-assure>group>session-filter description)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>vrgw>lanext description)

[Tree] (config>li>log>log-id description)

[Tree] (config>qos>network description)

[Tree] (config>subscr-mgmt>pppoe-client-policy description)

[Tree] (config>service>vpls>sap>dhcp description)

[Tree] (config>saa>test description)

[Tree] (config>router>twamp-light>reflector description)

[Tree] (config>router>nat>outside>pool>address-range description)

[Tree] (config>service>vprn>nat>outside>pool>address-range description)

[Tree] (config>aaa>wpp>portal-groups>portal-group description)

[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter description)

[Tree] (config>subscr-mgmt>sub-ident-pol description)

[Tree] (config>test-oam>twamp>server>prefix description)

[Tree] (config>service>vprn>sub-if>grp-if>arp-host description)

[Tree] (config>app-assure>group>certificate-profile description)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry description)

[Tree] (config>qos>sap-egress>ip-criteria>entry description)

[Tree] (config>qos>sap-ingress>ip-criteria>entry description)

[Tree] (config>subscr-mgmt>host-lockout-plcy description)

[Tree] (config>li>li-filter>li-ipv6-filter>entry description)

[Tree] (config>router>twamp-light>reflector>prefix description)

[Tree] (config>app-assure>group>transit-prefix-policy description)

[Tree] (config>subscr-mgmt>pim-policy description)

[Tree] (config>service>upnp>upnp-policy description)

[Tree] (config>service>vpls>mld-snooping>mvr description)

[Tree] (config>service>vprn>sub-if>grp-if>wpp description)

[Tree] (config>app-assure>group description)

[Tree] (config>cflowd>collector description)

[Tree] (config>isa>wlan-gw-group description)

[Tree] (config>qos>network>egress>ipv6-criteria>entry description)

[Tree] (config>li>li-filter>li-mac-filter description)

[Tree] (config>router>firewall>domain>prefix description)

[Tree] (config>app-assure>group>event-log>syslog description)

[Tree] (config>port>ethernet>access>egress description)

[Tree] (config>app-assure>group>dns-ip-cache description)

[Tree] (config>router>vrgw>lanext description)

[Tree] (config>qos>network>ingress>ipv6-criteria>entry description)

[Tree] (config>service>nat>nat-policy description)

Full Context

configure aaa l2tp-accounting-policy description

configure subscriber-mgmt host-tracking description

configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description

configure application-assurance group http-error-redirect description

configure service ies subscriber-interface group-interface wlan-gw description

configure service vprn subscriber-interface group-interface srrp description

configure aaa diameter node description

configure application-assurance group port-list description

configure subscriber-mgmt steering-profile description

configure application-assurance group policy custom-protocol description

configure qos sap-ingress mac-criteria entry description

configure aaa acct-on-off-group description

configure application-assurance group statistics aa-sub description

configure service vpls description

configure subscriber-mgmt sla-profile description

configure service nat nat-classifier entry description

configure service dynamic-services local-auth-db user-name description

configure macsec connectivity-association description

configure application-assurance group tcp-validate description

configure application-assurance group policy transit-ip-policy description

configure mcast-management mcast-reporting-dest description

configure service vpls sap description

configure li li-filter li-mac-filter entry description

configure application-assurance group ip-prefix-list description

configure subscriber-mgmt mld-policy description

configure li li-filter li-ip-filter description

configure service vprn twamp-light reflector description

configure mcast-management multicast-info-policy bundle description

configure qos sap-egress ipv6-criteria entry description

configure qos sap-egress description

configure subscriber-mgmt isa-service-chaining evpn description

configure application-assurance group policy app-group description

configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext network description

configure service vprn subscriber-interface group-interface sap-parameters description

configure qos network ingress ip-criteria entry description

configure li li-filter li-ip-filter entry description

configure isa nat-group description

configure oam-pm streaming delay-template description

configure qos sap-ingress description

configure service nat nat-classifier description

configure service vpls spoke-sdp description

configure qos network egress ip-criteria entry description

configure esa description

configure application-assurance group session-filter entry description

configure application-assurance group policy charging-group description

configure subscriber-mgmt credit-control-policy description

configure python python-policy description

configure application-assurance group gtp gtp-filter description

configure application-assurance group cflowd collector description

configure card fp ingress mcast-management description

configure test-oam link-measurement measurement-template description

configure qos sap-ingress ipv6-criteria entry description

configure application-assurance group cflowd direct-export collector description

configure application-assurance group policy app-filter entry description

configure subscriber-mgmt vrgw brg brg-profile description

configure subscriber-mgmt sub-profile description

configure application-assurance aarp description

configure mcast-management bandwidth-policy description

configure service vprn gsmp group neighbor description

configure application-assurance group url-list description

configure service ies subscriber-interface group-interface wlan-gw ranges range vrgw lanext description

configure router nat inside subscriber-id description

configure vrrp policy description

configure subscriber-mgmt accu-stats-policy description

configure service vprn subscriber-interface group-interface ipoe-session description

configure subscriber-mgmt authentication-policy description

configure application-assurance group policer description

configure router policy-options policy-statement description

configure router radius-proxy server description

configure service nat up-nat-policy description

configure service vpls wlan-gw description

configure li li-filter-block-reservation li-reserved-block description

configure isa description

configure application-assurance protocol description

configure subscriber-mgmt sub-mcac-policy description

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt description

configure application-assurance group sctp-filter description

configure application-assurance group http-notification description

configure application-assurance group url-filter icap server description

configure service vprn subscriber-interface group-interface sap description

configure service vprn interface sap ip-tunnel description

configure li x-interfaces lics lic description

configure application-assurance group policy app-qos-policy entry description

configure subscriber-mgmt diameter-application-policy description

configure service dynamic-services local-auth-db description

configure application-assurance group url-filter description

configure isa aa-group description

configure service vprn nat outside pool description

configure mirror mirror-dest description

configure application-assurance radius-accounting-policy description

configure subscriber-mgmt isa-policer description

configure aaa radius-script-policy description

configure aaa radius-server-policy description

configure service vpls gsmp group neighbor description

configure service vprn twamp-light reflector prefix description

configure service vprn radius-proxy server description

configure service ies subscriber-interface group-interface sap-parameters description

configure call-trace trace-profile description

configure service ipfix ipfix-export-policy description

configure mcast-management multicast-info-policy description

configure aaa isa-radius-policy description

configure application-assurance group policer tod-override description

configure application-assurance group http-enrich description

configure subscriber-mgmt category-map description

configure service nat firewall-policy description

configure subscriber-mgmt ipoe-session-policy description

configure qos sap-ingress policer description

configure li li-filter li-ipv6-filter description

configure service vpls split-horizon-group description

configure service vpls gsmp group description

configure subscriber-mgmt category-map category description

configure service vprn description

configure subscriber-mgmt isa-filter description

configure mirror mirror-dest endpoint description

configure esa vm description

configure service nat map-domain mapping-rule description

configure service nat pcp-server-policy description

configure application-assurance group http-redirect description

configure qos queue-group-templates ingress queue-group description

configure router radius-server server description

configure aaa route-downloader description

configure application-assurance group policy application description

configure qos queue-group-templates ingress queue-group policer description

configure service dynamic-services dynamic-services-policy description

configure service vpls mesh-sdp description

configure application-assurance group policy app-profile description

configure qos sap-egress policer description

configure system persistence application-assurance description

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description

configure router policy-options policy-statement entry description

configure qos queue-group-templates egress queue-group description

configure service mac-list description

configure service vpls igmp-snooping mvr description

configure subscriber-mgmt isa-filter ipv6 entry description

configure application-assurance group url-filter web-service profile description

configure service vprn radius-server server description

configure pw-port description

configure service vprn gsmp group description

configure subscriber-mgmt isa-service-chaining vas-filter description

configure service vprn firewall domain prefix description

configure qos queue-group-templates egress queue-group policer description

configure python python-script description

configure subscriber-mgmt isa-filter entry description

configure oam-pm session description

configure router nat outside pool description

configure service vprn ip-mirror-interface spoke-sdp description

configure oam-pm bin-group description

configure service vprn subscriber-interface group-interface wlan-gw description

configure application-assurance group session-filter description

configure service vprn subscriber-interface group-interface wlan-gw ranges range vrgw lanext description

configure li log log-id description

configure qos network description

configure subscriber-mgmt pppoe-client-policy description

configure service vpls sap dhcp description

configure saa test description

configure router twamp-light reflector description

configure router nat outside pool address-range description

configure service vprn nat outside pool address-range description

configure aaa wpp portal-groups portal-group description

configure application-assurance group policy app-qos-policy entry action url-filter description

configure subscriber-mgmt sub-ident-policy description

configure test-oam twamp server prefix description

configure service vprn subscriber-interface group-interface arp-host description

configure application-assurance group certificate-profile description

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description

configure qos sap-egress ip-criteria entry description

configure qos sap-ingress ip-criteria entry description

configure subscriber-mgmt host-lockout-policy description

configure li li-filter li-ipv6-filter entry description

configure router twamp-light reflector prefix description

configure application-assurance group transit-prefix-policy description

configure subscriber-mgmt pim-policy description

configure service upnp upnp-policy description

configure service vpls mld-snooping mvr description

configure service vprn subscriber-interface group-interface wpp description

configure application-assurance group description

configure cflowd collector description

configure isa wlan-gw-group description

configure qos network egress ipv6-criteria entry description

configure li li-filter li-mac-filter description

configure router firewall domain prefix description

configure application-assurance group event-log syslog description

configure port ethernet access egress description

configure application-assurance group dns-ip-cache description

configure router vrgw lanext description

configure qos network ingress ipv6-criteria entry description

configure service nat nat-policy description

Description

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters

short-description-string

Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn subscriber-interface group-interface ipoe-session description
  • configure subscriber-mgmt ipoe-session-policy description
  • configure subscriber-mgmt isa-filter description
  • configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry description
  • configure aaa wpp portal-groups portal-group description
  • configure subscriber-mgmt sla-profile description
  • configure service vprn subscriber-interface group-interface wpp description
  • configure call-trace trace-profile description
  • configure service vprn radius-proxy server description
  • configure aaa acct-on-off-group description
  • configure service dynamic-services local-auth-db user-name description
  • configure subscriber-mgmt category-map category description
  • configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry description
  • configure subscriber-mgmt isa-filter entry description
  • configure subscriber-mgmt sub-ident-policy description
  • configure aaa route-downloader description
  • configure subscriber-mgmt isa-policer description
  • configure aaa diameter node description
  • configure subscriber-mgmt pppoe-client-policy description
  • configure subscriber-mgmt host-lockout-policy description
  • configure subscriber-mgmt category-map description
  • configure subscriber-mgmt diameter-application-policy description
  • configure aaa radius-script-policy description
  • configure router radius-proxy server description
  • configure subscriber-mgmt isa-filter ipv6 entry description
  • configure subscriber-mgmt accu-stats-policy description
  • configure router radius-server server description
  • configure subscriber-mgmt vrgw brg brg-profile description
  • configure subscriber-mgmt sub-profile description
  • configure subscriber-mgmt pim-policy description
  • configure subscriber-mgmt authentication-policy description
  • configure subscriber-mgmt mld-policy description
  • configure service vprn radius-server server description
  • configure aaa l2tp-accounting-policy description
  • configure service vprn subscriber-interface group-interface arp-host description
  • configure service vprn subscriber-interface group-interface sap description
  • configure service vprn subscriber-interface group-interface sap sub-sla-mgmt description
  • configure subscriber-mgmt credit-control-policy description
  • configure subscriber-mgmt steering-profile description
  • configure service dynamic-services local-auth-db description
  • configure aaa radius-server-policy description
  • configure service vprn subscriber-interface group-interface srrp description
  • configure service dynamic-services dynamic-services-policy description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure application-assurance group policy app-filter entry description
  • configure service vprn nat outside pool description
  • configure service nat nat-classifier description
  • configure router nat outside pool address-range description
  • configure application-assurance group gtp gtp-filter description
  • configure application-assurance group tcp-validate description
  • configure isa nat-group description
  • configure application-assurance group policer tod-override description
  • configure service vprn nat outside pool address-range description
  • configure application-assurance group dns-ip-cache description
  • configure application-assurance group policy app-qos-policy entry action url-filter description
  • configure service nat nat-policy description
  • configure application-assurance protocol description
  • configure application-assurance group sctp-filter description
  • configure application-assurance group http-redirect description
  • configure application-assurance group http-notification description
  • configure service nat nat-classifier entry description
  • configure application-assurance group policy app-qos-policy entry description
  • configure application-assurance group url-filter description
  • configure application-assurance group http-enrich description
  • configure application-assurance group url-filter web-service profile description
  • configure aaa isa-radius-policy description
  • configure service nat up-nat-policy description
  • configure application-assurance radius-accounting-policy description
  • configure application-assurance group url-filter icap server description
  • configure application-assurance group policy application description
  • configure application-assurance group policy app-profile description
  • configure application-assurance group cflowd direct-export collector description
  • configure application-assurance group url-list description
  • configure application-assurance group statistics aa-sub description
  • configure application-assurance aarp description
  • configure service nat pcp-server-policy description
  • configure router nat outside pool description
  • configure service upnp upnp-policy description
  • configure isa description
  • configure application-assurance group port-list description
  • configure application-assurance group ip-prefix-list description
  • configure subscriber-mgmt isa-service-chaining evpn description
  • configure application-assurance group event-log syslog description
  • configure application-assurance group session-filter description
  • configure application-assurance group certificate-profile description
  • configure subscriber-mgmt isa-service-chaining vas-filter description
  • configure application-assurance group policy custom-protocol description
  • configure system persistence application-assurance description
  • configure application-assurance group cflowd collector description
  • configure application-assurance group description
  • configure application-assurance group policer description
  • configure application-assurance group policy charging-group description
  • configure application-assurance group transit-prefix-policy description
  • configure application-assurance group http-error-redirect description
  • configure application-assurance group session-filter entry description
  • configure application-assurance group policy app-group description

7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface wlan-gw description
  • configure service vprn subscriber-interface group-interface sap-parameters description
  • configure service nat firewall-policy description
  • configure isa wlan-gw-group description
  • configure service ies subscriber-interface group-interface sap-parameters description
  • configure router firewall domain prefix description
  • configure service vprn subscriber-interface group-interface wlan-gw description
  • configure router vrgw lanext description
  • configure service vprn firewall domain prefix description
  • configure service vpls wlan-gw description

All

  • configure router policy-options policy-statement description
  • configure service vpls sap dhcp description
  • configure qos queue-group-templates ingress queue-group description
  • configure service vpls gsmp group neighbor description
  • configure service vpls sap description
  • configure saa test description
  • configure service vpls igmp-snooping mvr description
  • configure service vprn gsmp group neighbor description
  • configure vrrp policy description
  • configure service vpls split-horizon-group description
  • configure service vpls gsmp group description
  • configure li li-filter li-mac-filter entry description
  • configure mcast-management multicast-info-policy description
  • configure qos sap-egress ipv6-criteria entry description
  • configure service vpls description
  • configure oam-pm session description
  • configure service ipfix ipfix-export-policy description
  • configure qos sap-egress ip-criteria entry description
  • configure mcast-management mcast-reporting-dest description
  • configure qos sap-egress description
  • configure qos sap-ingress description
  • configure service vprn ip-mirror-interface spoke-sdp description
  • configure qos network egress ipv6-criteria entry description
  • configure li li-filter li-mac-filter description
  • configure li li-filter li-ipv6-filter description
  • configure qos sap-ingress ipv6-criteria entry description
  • configure li li-filter-block-reservation li-reserved-block description
  • configure python python-policy description
  • configure li li-filter li-ipv6-filter entry description
  • configure service vpls mld-snooping mvr description
  • configure qos network ingress ipv6-criteria entry description
  • configure qos network ingress ip-criteria entry description
  • configure port ethernet access egress description
  • configure router policy-options policy-statement entry description
  • configure service vpls spoke-sdp description
  • configure li log log-id description
  • configure macsec connectivity-association description
  • configure qos sap-ingress ip-criteria entry description
  • configure service vprn gsmp group description
  • configure oam-pm bin-group description
  • configure mirror mirror-dest endpoint description
  • configure li li-filter li-ip-filter entry description
  • configure cflowd collector description
  • configure qos queue-group-templates egress queue-group description
  • configure li li-filter li-ip-filter description
  • configure pw-port description
  • configure qos network description
  • configure service vprn description
  • configure python python-script description
  • configure mcast-management multicast-info-policy bundle description
  • configure mirror mirror-dest description
  • configure service vprn interface sap ip-tunnel description
  • configure service mac-list description
  • configure qos sap-ingress mac-criteria entry description
  • configure service vpls mesh-sdp description
  • configure qos network egress ip-criteria entry description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure test-oam twamp server prefix description
  • configure li x-interfaces lics lic description
  • configure oam-pm streaming delay-template description
  • configure test-oam link-measurement measurement-template description
  • configure service vprn twamp-light reflector prefix description
  • configure router twamp-light reflector description
  • configure service vprn twamp-light reflector description
  • configure router twamp-light reflector prefix description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s

  • configure esa vm description
  • configure esa description

7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

  • configure mcast-management bandwidth-policy description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s

  • configure subscriber-mgmt sub-mcac-policy description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, 7950 XRS, VSR

  • configure qos sap-egress policer description
  • configure qos queue-group-templates ingress queue-group policer description
  • configure qos queue-group-templates egress queue-group policer description
  • configure qos sap-ingress policer description

VSR

  • configure service nat map-domain mapping-rule description

description

Syntax

description short-description-string

no description

Context

[Tree] (config>service>ies>video-interface>channel description)

[Tree] (config>system>security>keychain description)

[Tree] (config>system>telemetry>sensor-groups>sensor-group description)

[Tree] (config>system>security>user>public-keys>rsa>rsa-key description)

[Tree] (config>log>file-id description)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video description)

[Tree] (config>log>event-handling>handler description)

[Tree] (config>qos>hs-attachment-policy description)

[Tree] (config>service>cust>multi-service-site description)

[Tree] (config>system>security>dist-cpu-protection>policy description)

[Tree] (config>service>mrp>mrp-policy description)

[Tree] (config>service>ies>video-interface description)

[Tree] (config>log>event-trigger>event description)

[Tree] (config>log>log-id description)

[Tree] (config>sys>security>cpu-protection>policy description)

[Tree] (config>qos>shared-queue description)

[Tree] (config>eth-ring>path>eth-cfm>mep description)

[Tree] (config>system>security>keychain>direction>uni>send>entry description)

[Tree] (config>log>filter>entry description)

[Tree] (cfg>sys>sec>cpm>mac-filter>entry description)

[Tree] (config>service>sdp description)

[Tree] (config>qos>adv-config-policy description)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video>analyzer description)

[Tree] (config>service>vprn>video-interface description)

[Tree] (config>log>event-handling>handler>action-list>entry description)

[Tree] (config>log>event-trigger>event>trigger-entry description)

[Tree] (config>system>telemetry>persistent-subscriptions>subscription description)

[Tree] (config>eth-ring>path description)

[Tree] (config>system>security>keychain>direction>bi>entry description)

[Tree] (config>qos>slope-policy description)

[Tree] (config>system>security>pki>ca-profile description)

[Tree] (config>qos>hs-pool-policy description)

[Tree] (config>system>security>user>public-keys>ecdsa>ecdsa-key description)

[Tree] (config>isa>video-group description)

[Tree] (config>log>filter description)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video description)

[Tree] (config>log>snmp-trap-group description)

[Tree] (config>service>pw-template>split-horizon-group description)

[Tree] (config>log>syslog description)

[Tree] (config>grp-encryp>encryp-keygrp description)

[Tree] (config>qos>scheduler-policy description)

[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry description)

[Tree] (config>system>security>keychain>direction>uni>receive>entry description)

[Tree] (config>service>cust description)

[Tree] (config>qos>scheduler-policy>tier>scheduler description)

[Tree] (config>connection-profile-vlan description)

[Tree] (config>service>vprn>video-interface>channel description)

[Tree] (config>service>mrp>mrp-policy>entry description)

[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry description)

[Tree] (config>service>pw-template description)

[Tree] (config>eth-ring description)

[Tree] (config>qos>hs-port-pool-policy description)

[Tree] (config>sys>security>cpm-filter>ipv6-filter>entry description)

[Tree] (config>system>telemetry>destination-group description)

[Tree] (config>qos>port-scheduler-policy description)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video description)

[Tree] (config>sys>security>cpm-filter>ip-filter>entry description)

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry description)

[Tree] (config>qos>hs-scheduler-policy description)

[Tree] (config>log>accounting-policy description)

Full Context

configure service ies video-interface channel description

configure system security keychain description

configure system telemetry sensor-groups sensor-group description

configure system security user public-keys rsa rsa-key description

configure log file-id description

configure mcast-management multicast-info-policy bundle channel video description

configure log event-handling handler description

configure qos hs-attachment-policy description

configure service customer multi-service-site description

configure system security dist-cpu-protection policy description

configure service mrp mrp-policy description

configure service ies video-interface description

configure log event-trigger event description

configure log log-id description

configure system security cpu-protection policy description

configure qos shared-queue description

configure eth-ring path eth-cfm mep description

configure system security keychain direction uni send entry description

configure log filter entry description

configure system security cpm-filter mac-filter entry description

configure service sdp description

configure qos adv-config-policy description

configure mcast-management multicast-info-policy bundle channel video analyzer description

configure service vprn video-interface description

configure log event-handling handler action-list entry description

configure log event-trigger event trigger-entry description

configure system telemetry persistent-subscriptions subscription description

configure eth-ring path description

configure system security keychain direction bi entry description

configure qos slope-policy description

configure system security pki ca-profile description

configure qos hs-pool-policy description

configure system security user public-keys ecdsa ecdsa-key description

configure isa video-group description

configure log filter description

configure mcast-management multicast-info-policy bundle video description

configure log snmp-trap-group description

configure service pw-template split-horizon-group description

configure log syslog description

configure group-encryption encryption-keygroup description

configure qos scheduler-policy description

configure system security management-access-filter mac-filter entry description

configure system security keychain direction uni receive entry description

configure service customer description

configure qos scheduler-policy tier scheduler description

configure connection-profile-vlan description

configure service vprn video-interface channel description

configure service mrp mrp-policy entry description

configure system security management-access-filter ip-filter entry description

configure service pw-template description

configure eth-ring description

configure qos hs-port-pool-policy description

configure system security cpm-filter ipv6-filter entry description

configure system telemetry destination-group description

configure qos port-scheduler-policy description

configure mcast-management multicast-info-policy bundle channel source-override video description

configure system security cpm-filter ip-filter entry description

configure system security management-access-filter ipv6-filter entry description

configure qos hs-scheduler-policy description

configure log accounting-policy description

Description

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default

No description is associated with the configuration context.

Parameters

short-description-string

Specifies the description character string. Allowed values are any string, up to 80 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR-1, 7750 SR-7/12/12e, 7750 SR-1s, 7750 SR-2s, 7750 SR-7s, 7750 SR-14s

  • configure mcast-management multicast-info-policy bundle channel source-override video description
  • configure service vprn video-interface channel description
  • configure mcast-management multicast-info-policy bundle channel video description
  • configure mcast-management multicast-info-policy bundle video description
  • configure service vprn video-interface description
  • configure service ies video-interface channel description
  • configure service ies video-interface description
  • configure isa video-group description
  • configure mcast-management multicast-info-policy bundle channel video analyzer description

All

  • configure system security management-access-filter mac-filter entry description
  • configure log log-id description
  • configure system telemetry sensor-groups sensor-group description
  • configure system security management-access-filter ip-filter entry description
  • configure system security keychain direction bi entry description
  • configure system security keychain direction uni receive entry description
  • configure service customer description
  • configure log filter entry description
  • configure service customer multi-service-site description
  • configure qos scheduler-policy tier scheduler description
  • configure log syslog description
  • configure log event-trigger event description
  • configure service sdp description
  • configure system security dist-cpu-protection policy description
  • configure system security user public-keys rsa rsa-key description
  • configure service pw-template split-horizon-group description
  • configure log accounting-policy description
  • configure service pw-template description
  • configure qos shared-queue description
  • configure service mrp mrp-policy entry description
  • configure system security keychain direction uni send entry description
  • configure qos port-scheduler-policy description
  • configure service mrp mrp-policy description
  • configure connection-profile-vlan description
  • configure log event-handling handler action-list entry description
  • configure qos slope-policy description
  • configure qos scheduler-policy description
  • configure system telemetry destination-group description
  • configure log filter description
  • configure log event-handling handler description
  • configure system security keychain description
  • configure qos adv-config-policy description
  • configure system security user public-keys ecdsa ecdsa-key description
  • configure system security management-access-filter ipv6-filter entry description
  • configure log event-trigger event trigger-entry description
  • configure log snmp-trap-group description
  • configure log file-id description
  • configure system telemetry persistent-subscriptions subscription description
  • configure system security pki ca-profile description

7750 SR-7/12/12e

  • configure qos hs-pool-policy description
  • configure qos hs-attachment-policy description
  • configure qos hs-port-pool-policy description
  • configure qos hs-scheduler-policy description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

  • configure system security cpu-protection policy description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure eth-ring path eth-cfm mep description
  • configure eth-ring description
  • configure eth-ring path description
  • configure system security cpm-filter mac-filter entry description
  • configure system security cpm-filter ipv6-filter entry description
  • configure system security cpm-filter ip-filter entry description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure group-encryption encryption-keygroup description

description

Syntax

description medium-description-string

no description

Context

[Tree] (config>service>ies>aarp-interface description)

[Tree] (config>port>tdm>ds1>channel-group description)

[Tree] (config>port>tdm>e3 description)

[Tree] (config>service>ies>sub-if>grp-if>sap description)

[Tree] (config>port>tdm>e1>channel-group description)

[Tree] (config>service>ies>interface>sap description)

[Tree] (config>service>ipipe>sap description)

[Tree] (config>service>cpipe>sap description)

[Tree] (config>port>sonet-sdh>path description)

[Tree] (config>port>tdm>ds3 description)

[Tree] (config>service>epipe>sap description)

Full Context

configure service ies aarp-interface description

configure port tdm ds1 channel-group description

configure port tdm e3 description

configure service ies subscriber-interface group-interface sap description

configure port tdm e1 channel-group description

configure service ies interface sap description

configure service ipipe sap description

configure service cpipe sap description

configure port sonet-sdh path description

configure port tdm ds3 description

configure service epipe sap description

Description

This command configures a text description that is stored in the configuration file. The text string is associated with a configuration context to identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default

no description

Parameters

medium-description-string

Specifies the description character string. Allowed values are any string, up to 160 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies aarp-interface description

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

  • configure port tdm e3 description
  • configure port tdm e1 channel-group description
  • configure port tdm ds3 description
  • configure port tdm ds1 channel-group description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap description

All

  • configure service ies interface sap description
  • configure service ipipe sap description
  • configure service epipe sap description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure port sonet-sdh path description
  • configure service cpipe sap description

description

Syntax

description medium-description-string

no description

Context

[Tree] (config>service>vprn>aa-interface>sap description)

[Tree] (config>service>ies>aa-interface>sap description)

Full Context

configure service vprn aa-interface sap description

configure service ies aa-interface sap description

Description

This command creates a text description which is stored in the configuration file to help identify the content of the entity.

The no form of this command removes the string from the configuration.

Parameters

medium-description-string

Specifies the text string to describe the entity, up to 160 characters. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description

Syntax

description long-description-string

no description

Context

[Tree] (config>open-flow>of-switch description)

[Tree] (config>router>isis>link-group description)

[Tree] (config>service>vprn>isis>link-group description)

Full Context

configure open-flow of-switch description

configure router isis link-group description

configure service vprn isis link-group description

Description

This command creates a text description stored in the configuration file for a configuration context.

The description command associates a text string with a configuration context to help identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Default

no description

Parameters

long-description-string

Specifies the description character string. Allowed values are any string, up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

description

Syntax

description long-description-string

no description

Context

[Tree] (config>service>vpls>interface description)

[Tree] (config>service>vprn>subscriber-interface description)

[Tree] (config>service>ies>sub-if description)

[Tree] (config>router>if description)

[Tree] (config>service>ies>aa-interface description)

[Tree] (config>service>vprn>red-if description)

[Tree] (config>lag description)

[Tree] (config>service>vprn>if description)

[Tree] (config>service>vprn>ip-mirror-interface description)

[Tree] (config>port description)

[Tree] (config>service>ies>sub-if>grp-if description)

[Tree] (config>service>vprn>aarp-interface description)

[Tree] (config>service>vprn>aa-interface description)

[Tree] (config>service>ies>interface description)

[Tree] (config>service>vprn>sub-if>grp-if description)

[Tree] (config>service>vprn>nw-if description)

[Tree] (config>service>ies>redundant-interface description)

Full Context

configure service vpls interface description

configure service vprn subscriber-interface description

configure service ies subscriber-interface description

configure router interface description

configure service ies aa-interface description

configure service vprn redundant-interface description

configure lag description

configure service vprn interface description

configure service vprn ip-mirror-interface description

configure port description

configure service ies subscriber-interface group-interface description

configure service vprn aarp-interface description

configure service vprn aa-interface description

configure service ies interface description

configure service vprn subscriber-interface group-interface description

configure service vprn network-interface description

configure service ies redundant-interface description

Description

This command creates a text description stored in the configuration file for a configuration context.

The description command associates a text string with a configuration context to help identify the content in the configuration file.

The no form of this command removes the string from the configuration.

Parameters

long-description-string

Specifies the description character string. Allowed values are any string up to 255-256 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

  • configure service vprn interface description
  • configure router interface description
  • configure service ies interface description
  • configure service vpls interface description
  • configure service vprn ip-mirror-interface description
  • configure lag description
  • configure service vprn network-interface description
  • configure port description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn redundant-interface description
  • configure service vprn subscriber-interface description
  • configure service ies redundant-interface description
  • configure service ies subscriber-interface group-interface description
  • configure service vprn subscriber-interface group-interface description
  • configure service ies subscriber-interface description

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies aa-interface description
  • configure service vprn aa-interface description
  • configure service vprn aarp-interface description

description

Syntax

description medium-description-string

no description

Context

[Tree] (config>eth-tunnel description)

Full Context

configure eth-tunnel description

Description

This command adds a text description for the eth-tunnel.

The no form of this command removes the text description.

Default

Eth-tunnel

Parameters

medium-description-string

Specifies the text description up to 160 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

description

Syntax

description description-string

no description

Context

[Tree] (config>port-policy description)

[Tree] (config>isa>lns-group description)

[Tree] (config>subscr-mgmt>up-resiliency>fsg-template description)

Full Context

configure port-policy description

configure isa lns-group description

configure subscriber-mgmt up-resiliency fate-sharing-group-template description

Description

This command creates a text description which is stored in the configuration file to help identify the content of the entity.

The no form of the command removes the string from the configuration.

Parameters

string

Specifies the description character string. Allowed values are any string composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on.), the entire string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure isa lns-group description
  • configure port-policy description

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure subscriber-mgmt up-resiliency fate-sharing-group-template description

description

Syntax

[no] description

Context

[Tree] (config>service>nat>pcp-server-policy>option description)

Full Context

configure service nat pcp-server-policy option description

Description

This command enables/disables support for the description option.

Default

no description

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

description

Syntax

description description-string

no description

Context

[Tree] (config>bfd>seamless-bfd>reflector description)

Full Context

configure bfd seamless-bfd reflector description

Description

This command specifies a description of a S-BFD reflector.

Parameters

description-string

Specifies the S-BFD reflector description.

Platforms

All

description

Syntax

description description-string

no description

Context

[Tree] (config>system>alarm-contact-input description)

Full Context

configure system alarm-contact-input description

Description

This command configures a text description of an alarm contact input pin. The description is stored in the CLI configuration file. It indicates the usage or attribute of the pin, and helps the user to identify the purpose of the pin. The description is included in the log event when the pin changes state.

The no form of this command reverts the description string to the default.

Parameters

description-string

Specifies a printable character string, up to 80 characters.

Default

"Pin x”, where x is the alarm contact input pin number.

Platforms

7750 SR-a

designated-role

designated-role

Syntax

designated-role {standby | active}

no designated-role

Context

[Tree] (config>redundancy>multi-chassis>ipsec-domain designated-role)

Full Context

configure redundancy multi-chassis ipsec-domain designated-role

Description

This command sets the designated role for the tunnel group in the IPsec domain.

The no form of this command reverts to the default value.

Default

designated-role standby

Parameters

standby

Sets the designated role to standby.

active

Sets the designated role to active.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dest-class

dest-class

Syntax

dest-class dest-class

no dest-class

Context

[Tree] (config>router>policy-options>policy-statement>entry dest-class)

[Tree] (config>router>policy-options>policy-statement>default-action dest-class)

Full Context

configure router policy-options policy-statement entry dest-class

configure router policy-options policy-statement default-action dest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Default

no dest-class

Parameters

dest-class

Specifies the destination class.

Values

1 to 255

Platforms

All

  • configure router policy-options policy-statement entry dest-class

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

  • configure router policy-options policy-statement default-action dest-class

dest-global-id

dest-global-id

Syntax

dest-global-id dest-global-id

no dest-global-id

Context

[Tree] (config>router>mpls>lsp dest-global-id)

Full Context

configure router mpls lsp dest-global-id

Description

This optional command configures the MPLS-TP Global ID of the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. Global ID values of 0 indicate that the local node’s configured global ID is used. If the local global-id is 0, then the dest-global-id must also be 0. The dest-global-id cannot be changed if an LSP is in use by an SDP.

Default

dest-global-id 0

Parameters

dest-global-id

Specifies the destination global ID.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dest-ip

dest-ip

Syntax

[no] dest-ip ip-address

Context

[Tree] (config>service>ies>if>sap>ip-tunnel dest-ip)

[Tree] (config>service>vprn>if>sap>ip-tunnel dest-ip)

[Tree] (config>service>vprn>sap>ipsec-tunnel dest-ip)

Full Context

configure service ies interface sap ip-tunnel dest-ip

configure service vprn interface sap ip-tunnel dest-ip

configure service vprn sap ipsec-tunnel dest-ip

Description

This command configures a private IPv4 or IPv6 address of the remote tunnel endpoint. A tunnel can have up to 16 dest-ip commands. At least one dest-ip address is required in the configuration of a tunnel. A tunnel does not come up operationally unless all dest-ip addresses are reachable (part of a local subnet).

Unnumbered interfaces are not supported.

The no form of this command deletes the destination IP of the tunnel.

Parameters

ip-address

Specifies the private IPv4 or IPv6 address of the remote IP tunnel endpoint. If this remote IP address is not within the subnet of the IP interface associated with the tunnel then the tunnel will not come up.

Values

<ip-address>

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dest-ip-addr

dest-ip-addr

Syntax

dest-ip-addr ip-address

no dest-ip-addr

Context

[Tree] (config>mcast-mgmt>mcast-rprt-dest dest-ip-addr)

Full Context

configure mcast-management mcast-reporting-dest dest-ip-addr

Description

This command specifies the IP address of the external node to which IGMP events are exported. The destination IP address can only be reachable from the global routing table (no vrf access).

The no form of this command removes the destination address from the configuration.

Parameters

ip-addr

Specifies the IP address of the multicast reporting destination.

Platforms

All

dest-mac

dest-mac

Syntax

dest-mac {nearest-bridge | nearest-non-tpmr | nearest-customer}

Context

[Tree] (config>port>ethernet>lldp dest-mac)

Full Context

configure port ethernet lldp dest-mac

Description

This command configures destination MAC address parameters.

Default

dest-mac nearest-bridge

Parameters

nearest-bridge

Specifies to use the nearest bridge.

nearest-non-tpmr

Specifies to use the nearest non-Two-Port MAC Relay (TPMR).

nearest-customer

Specifies to use the nearest customer.

Platforms

All

dest-mac

Syntax

dest-mac ieee-address

no dest-mac

Context

[Tree] (config>oam-pm>session>ethernet dest-mac)

Full Context

configure oam-pm session ethernet dest-mac

Description

This command defines the destination MAC address of the peer MEP and sets the destination MAC address in the layer two header to match. This must be a unicast address.

The no form of this command removes session parameter.

Parameters

ieee-address

Specifies the Layer 2 unicast MAC address of the destination MEP.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Platforms

All

dest-mac-address

dest-mac-address

Syntax

dest-mac-address mac-address [create]

no dest-mac-address mac-address

Context

[Tree] (config>macsec>mac-policy dest-mac-address)

Full Context

configure macsec mac-policy dest-mac-address

Description

This command specifies the destination MAC address.

The no form of this command removes the MAC address.

Parameters

mac-address

Specifies the value of the MAC address policy.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

create

Mandatory to create the configuration.

Platforms

All

dest-mac-rewrite

dest-mac-rewrite

Syntax

dest-mac-rewrite ieee-address

no dest-mac-rewrite

Context

[Tree] (config>service>vpls>sap>egress dest-mac-rewrite)

Full Context

configure service vpls sap egress dest-mac-rewrite

Description

This commands enables the overwriting of a destination MAC address to an operator-configured value for all unicast packets egressing the specified SAP. The command is intended to be deployed with L2 PBF SAP redirect when a remote end of the SAP interface is an L3 interface with a MAC address different from the MAC address of the non-PBF-ed L3 interface. See Filter Policy in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Router Configuration Guide for more details.

The no form disables the option.

Default

no dest-mac-rewrite

Parameters

ieee-address

Specifies the MAC address

Values

1xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Cannot be all zeros

Platforms

All

dest-realm-learning

dest-realm-learning

Syntax

[no] dest-realm-learning

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx dest-realm-learning)

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy dest-realm-learning)

Full Context

configure subscriber-mgmt diameter-application-policy gx dest-realm-learning

configure subscriber-mgmt diameter-application-policy gy dest-realm-learning

Description

This command configures destination realm learning that is used in outgoing Gx and Gy Credit Control Request (CCR) messages. Destination realm is a mandatory configuration parameter.

The configured destination realm is always used in the initial CCR-I message. The consecutive request message of a Gx or Gy session can use the destination realm as learned from replies within a DIAMETER session (if learning is enabled), or they can ignore the realm from the reply and always use the configured destination realm in Gx and Gy request messages (learning is disabled).

The no form of this command ignores the realm from the reply.

Default

dest-realm-learning

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dest-tunnel-number

dest-tunnel-number

Syntax

dest-tunnel-number dest-tunnel-number

no dest-tunnel-number

Context

[Tree] (config>router>mpls>lsp dest-tunnel-number)

Full Context

configure router mpls lsp dest-tunnel-number

Description

This optional command configures the MPLS-TP tunnel number of the LSP at the far end node of the MPLS-TP LSP. This command is only allowed for MPLS-TP LSPs. If it is not entered, then the system will take the dest-tunnel-number to be the same as the src-tunnel-num for the LSP.

Default

The default value is the configured src-tunnel-num.

Parameters

dest-tunnel-number

Specifies the destination tunnel number.

Values

1 to 61440

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dest-udp-port

dest-udp-port

Syntax

dest-udp-port udp-port-number

no dest-udp-port

Context

[Tree] (config>oam-pm>session>ip dest-udp-port)

Full Context

configure oam-pm session ip dest-udp-port

Description

This command defines the destination UDP port on outbound TWAMP Light packets sent from the session controller. The destination UDP port must match the UDP port value configured on the TWAMP Light reflector that is responding to this specific TWAMP Light test.

The no form of this command removes the destination UDP port setting.

Parameters

udp-port-number

Specifies the UDP source port.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dest-udp-port

Syntax

dest-udp-port port-number

Context

[Tree] (config>test-oam>link-meas>template>twl dest-udp-port)

Full Context

configure test-oam link-measurement measurement-template twamp-light dest-udp-port

Description

This command configures the destination UDP port used by the link measurement tests.

Default

dest-udp-port 862

Parameters

port-number

Specifies the destination UDP port copied into the UDP header of each Echo request packet launched for each link measurement test belonging to the specified template.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination

destination

Syntax

destination ip-address

no destination

Context

[Tree] (config>oam-pm>session>ip destination)

Full Context

configure oam-pm session ip destination

Description

This command defines the destination IP address that is assigned to the TWAMP Light packets. The destination address must be included in the prefix list on the session reflector within the configured context in order to allow the reflector to process the inbound TWAMP Light packets.

The no form of this command removes the destination parameters.

Parameters

ip-address

Specifies the IP address of the IP peer to which the packet is directed.

Values

ipv4-address:

a.b.c.d

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

[0 to FFFF]H

d:

[0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination

Syntax

destination ip-address [create]

no destination ip-address

Context

[Tree] (config>filter>redirect-policy destination)

Full Context

configure filter redirect-policy destination

Description

This command defines a destination in a redirect policy. More than one destination can be configured. Whether a destination IPv4/IPv6 address will receive redirected packets depends on the effective priority value after evaluation.

The most preferred destination is programmed in hardware as action forward next-hop. If all destinations are down (as determined by the supported tests), action forward is programmed in hardware. All destinations within a given policy must be either IPv4 or (exclusive) IPv6. The redirect policy with IPv4 destinations configured can only be used by IPv4 filter policies. The redirect policy with IPv6 destinations configured can only be used by IPv6 filter policies.

Default

no destination

Parameters

ip-address

Specifies the IPv4 address (in dotted decimal notation) or IPv6 address to send the redirected traffic to.

Values

IPv4 address: ip-address: a.b.c.d

IPv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

Platforms

All

destination

Syntax

destination memory num-entries

destination syslog syslog-id

no destination

Context

[Tree] (config>filter>log destination)

Full Context

configure filter log destination

Description

This command configures the destination for filter log entries for the filter log ID.

Filter logs can be sent to either memory (memory) or to an existing Syslog server definition (syslog).

If the filter log destination is memory, the maximum number of entries in the log must be specified.

The no form of the command deletes the filter log association.

Default

destination memory 1000

Parameters

memory num-entries

Specifies the destination of the filter log ID is a memory log. The num-entries value is the maximum number of entries in the filter log expressed as a decimal integer.

Values

10 to 50000

syslog syslog-id

Specifies the destination of the filter log ID is a Syslog server. The syslog-id parameter is the number of the Syslog server definition.

Values

1 to 10

Platforms

All

destination

Syntax

destination {ip-address | fqdn} port port [create]

no destination {ip-address | fqdn} port port

Context

[Tree] (config>system>grpc-tunnel>destination-group destination)

[Tree] (config>system>telemetry>destination-group destination)

Full Context

configure system grpc-tunnel destination-group destination

configure system telemetry destination-group destination

Description

This command configures a destination IP address and port for a specific destination within a destination group. Up to two destinations can be defined within a destination group. Each destination is an IPv4 address, an IPv6 address, or the Fully Qualified Domain Name (FQDN).

The no form of this command removes the destination from the destination group.

Parameters

ip-address

Specifies the IPv4 address (in dotted decimal notation) or IPv6 address.

Values

IPv4 address: ip-address: a.b.c.d

IPv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

fqdn

Specifies the FQDN.

port

Specifies the TCP destination port number.

Values

1 to 65535

create

Keyword used to create a destination.

Platforms

All

destination

Syntax

destination ip-address

no destination

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv4 destination)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv4 destination

Description

This command configures the unicast IPv4 destination address for the TWAMP Light test packet. When this command is not configured, the destination IPv4 address is auto-assigned for interfaces configured with a prefix length of 30 and 31. All other interface prefix lengths and unnumbered interfaces are unable to auto- assign the destination IPv4 address. If the interface does not use a prefix length of 30 or 31, the destination must be configured.

Deleting a configured destination removes the specified address and causes the source address to be auto-assigned for prefix length of 30 and 31.

Configuration modifications are allowed without administratively disabling the IPv4 protocol.

The no form of this command removes the IPv4 address from the configuration.

Default

no destination

Parameters

ip-address

Specifies the IPv4 destination address.

Values

a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination

Syntax

destination ipv6-address

no destination

Context

[Tree] (config>router>if>if-attr>delay>dyn>twamp>ipv6 destination)

Full Context

configure router interface if-attribute delay dynamic twamp-light ipv6 destination

Description

This command configures the IPv6 destination address of the TWAMP Light test packet. When this command is not configured, no destination address is present and an error is raised to prevent the transmission of the test packet.

The IPv6 protocol can be enabled without addressing. However, the test does not transmit packets.

The link local address must be in the form fe80::/60 in accordance with RFC 4291, IP Version 6 Addressing Architecture.

The no form of this command removes the IPv6 address from the configuration.

Default

no destination

Parameters

ipv6-address

Specifies the TWAMP Light IPv6 destination address

Values

ipv6-address:

x:x:x:x:x:x:x:x

x - [0 to FFFF]H

unicast and link local IPv6 address only

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination-address

destination-address

Syntax

[no] destination-address ip-address

Context

[Tree] (config>filter>gre-tun-tmp>ipv4 destination-address)

Full Context

configure filter gre-tunnel-template ipv4 destination-address

Description

This command defines one or more destinations for the GRE IP header used to encapsulate the matching IPv4/IPv6 packet.

Traffic matching the associated IPv4 or IPv6 filter are hashed across all available destination address. If no destination address is available, then matching traffic follows the configured pbr-down-action-override action, if configured.

The no form of this command removes the specified destination IP address configuration from the associated GRE tunnel template.

Parameters

ip-address

Specifies up to 16 IPv4 addresses to be used as the destination address.

Platforms

All

destination-address

Syntax

destination-address ip-address

no destination-address

Context

[Tree] (config>service>ies>if>ping-template destination-address)

[Tree] (config>service>vprn>if>ping-template destination-address)

Full Context

configure service ies interface ping-template destination-address

configure service vprn interface ping-template destination-address

Description

This command configures the address to where the ICMP echo requests are directed to test connectivity. The source of the ICMP echo request is the primary IPv4 address of the interface under which the ping-template is configured. The destination address must be on the same subnet as the source IP address. A configuration warning message displays if the primary IPv4 address and the destination are not on the same subnet, INFO: PIP #2092 Ping template misconfiguration - destination-address and primary IP address should fall in the same subnet. Unnumbered interfaces and loopback addresses are not supported.

The config>service>ies|vprn>interface>ping-template must be in the no shutdown state to remove or change the destination-address ip-address.

The no form of this command removes the destination address from the configuration.

Parameters

ip-address

Specifies the destination address to where the ICMP echo requests are directed to test connectivity, in a.b.c.d format.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

destination-class

destination-class

Syntax

destination-class index

no destination-class index

no destination-class all

Context

[Tree] (config>router>policy-acct-template destination-class)

Full Context

configure router policy-acct-template destination-class

Description

Commands in this context create a destination class index for the template.

The no form of this command removes the index from the configuration.

Parameters

index

Specifies the destination index value.

Values

1 to 255

all

Deletes all destination class indexes from this configuration.

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

destination-class

Syntax

destination-class dest-index

no destination-class [dest-index]

Context

[Tree] (config>service>vprn>static-route-entry>indirect destination-class)

[Tree] (config>service>vprn>static-route-entry>ipsec-tunnel destination-class)

Full Context

configure service vprn static-route-entry indirect destination-class

configure service vprn static-route-entry ipsec-tunnel destination-class

Description

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route nexthop.

Default

no destination-class

Parameters

dest-index

The destination index integer value.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

destination-class

Syntax

destination-class dest-index

no destination-class

Context

[Tree] (config>filter>ip-filter>entry>match destination-class)

[Tree] (config>filter>ipv6-filter>entry>match destination-class)

Full Context

configure filter ip-filter entry match destination-class

configure filter ipv6-filter entry match destination-class

Description

This command configures the BGP destination-class value match criterion. Filtering egress traffic on destination-class requires the destination-class-lookup command to be enabled on the interface that the packet ingresses on.

The no form of the command removes the destination-class value match criterion.

Default

no destination-class

Parameters

dest-index

Specifies the destination index integer value.

Values

1 to 255

Platforms

All

destination-class

Syntax

destination-class dest-index

no destination-class [dest-index]

Context

[Tree] (config>router>static-route-entry>indirect destination-class)

[Tree] (config>router>static-route-entry>next-hop destination-class)

Full Context

configure router static-route-entry indirect destination-class

configure router static-route-entry next-hop destination-class

Description

This command configures the policy accounting destination-class index to be used when incrementing accounting statistic for traffic matching the associated static route.

The no form of this command removes the associated destination-class from the associated static route next hop.

Default

no destination-class

Parameters

dest-index

Specifies the destination index integer value.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

destination-class-lookup

destination-class-lookup

Syntax

[no] destination-class-lookup

Context

[Tree] (config>service>ies>if>ingress destination-class-lookup)

Full Context

configure service ies interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

Default

no destination-class-lookup

Platforms

All

destination-class-lookup

Syntax

[no] destination-class-lookup

Context

[Tree] (config>service>vprn>if>ingress destination-class-lookup)

Full Context

configure service vprn interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress and is supported on FP3-based cards and later. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces and VPRN network interfaces.

Default

no destination-class-lookup

Platforms

All

destination-class-lookup

Syntax

[no] destination-class-lookup

Context

[Tree] (config>router>if>ingress destination-class-lookup)

Full Context

configure router interface ingress destination-class-lookup

Description

This command enables BGP destination-class lookup for packets on this interface ingress. It is used in combination with an IP filter or IPv6 filter destination-class to filter traffic egress of the router based on BGP destination classes.

The command is supported on network, IES, VPRN and R-VPLS interfaces. It is not supported on subscriber interfaces, tunnel interfaces or VPRN network interfaces.

The no form of this command reverts to the default value.

Default

no destination-class-lookup

Platforms

All

destination-group

destination-group

Syntax

destination-group name [create]

no destination-group name

Context

[Tree] (config>system>grpc-tunnel destination-group)

[Tree] (config>system>telemetry destination-group)

Full Context

configure system grpc-tunnel destination-group

configure system telemetry destination-group

Description

Commands in this context configure commands for destination groups.

The no form of this command removes the destination group name.

Parameters

name

Specifies the destination group name, up to 32 characters.

create

Keyword used to create a destination group.

Platforms

All

destination-group

Syntax

destination-group name

no destination-group

Context

[Tree] (config>system>grpc-tunnel>tunnel destination-group)

Full Context

configure system grpc-tunnel tunnel destination-group

Description

This command assigns the specified destination group to a gRPC tunnel.

The no form of this command removes the specified destionation group from the gRPC tunnel.

Default

no destination-group

Parameters

name

Specifies the destination group name, up to 32 characters

Platforms

All

destination-group

Syntax

destination-group name

no destination-group

Context

[Tree] (config>system>telemetry>persistent-subscriptions>subscription destination-group)

Full Context

configure system telemetry persistent-subscriptions subscription destination-group

Description

This command assigns an existing destination group to the specified persistent subscription. The assigned destination-group must already exist before the configured persistent subscription can be activated.

The no form of this command removes the destination group name from the persistent subscription.

Parameters

name

Specifies the destination group name, up to 32 characters.

Platforms

All

destination-ip

destination-ip

Syntax

[no] destination-ip

Context

[Tree] (config>service>nat>syslog>syslog-export-policy>include destination-ip)

Full Context

configure service nat syslog syslog-export-policy include destination-ip

Description

This command includes the destination IP address in the flow log. The destination-ip is significant in Destination Based NAT (DNAT) where the foreign IP address is translated. A foreign IP address is the original IP address toward the destination node and in DNAT it is replaced by the destination-ip. More clearly, on the inside (private side), the IP address of the destination node is referred to as foreign IP (original destination IP), and once this address is translated by DNAT, it is referred to as destination IP (translated destination IP) on the outside (public side).

The no form of the command disables the feature.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

destination-port

destination-port

Syntax

destination-port [destination-port]

Context

[Tree] (config>service>nat>syslog>syslog-export-policy>collector destination-port)

Full Context

configure service nat syslog syslog-export-policy collector destination-port

Description

This command configures the destination port (collector port) to which UDP stream containing the syslog flow records are sent.

Default

destination-port 514

Parameters

destination-port

Specifies the destination port to which UDP streams are sent.

Values

1 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

destination-prefix

destination-prefix

Syntax

destination-prefix ip-prefix/length [nat-policy nat-policy-name]

no destination-prefix ip-prefix/length

Context

[Tree] (config>service>vprn>nat>inside destination-prefix)

[Tree] (config>router>nat>inside destination-prefix)

Full Context

configure service vprn nat inside destination-prefix

configure router nat inside destination-prefix

Description

This command configures a destination prefix. An (internal) static route will be created for this prefix. All traffic that hits this route will be subject to NAT. The system will not allow a destination-prefix to be configured if the configured nat-policy refers to an IP pool that resides in the same service (as this would result in a routing loop).

Parameters

ip-prefix

Specifies the IP prefix; host bits must be zero (0).

Values

a.b.c.d

length

Specifies the prefix length.

Values

0 to 32

nat-policy-name

Specifies the NAT policy name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

destination-prefix

Syntax

[no] destination-prefix

Context

[Tree] (config>cflowd>collector>aggregation destination-prefix)

Full Context

configure cflowd collector aggregation destination-prefix

Description

This command specifies that the aggregation data is based on destination prefix information.

The no form removes this type of aggregation from the collector configuration.

Platforms

All

detail-level

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>router>ip>dhcp6 detail-level)

[Tree] (debug>router>local-dhcp-server detail-level)

[Tree] (debug>router>ip>dhcp detail-level)

Full Context

debug router ip dhcp6 detail-level

debug router local-dhcp-server detail-level

debug router ip dhcp detail-level

Description

This command debugs the DHCP tracing detail level.

Parameters

low

Displays a low detail level for DHCP debugging.

medium

Displays a medium detail level for DHCP debugging.

high

Displays a high detail level for DHCP debugging.

Platforms

All

  • debug router ip dhcp6 detail-level
  • debug router ip dhcp detail-level

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • debug router local-dhcp-server detail-level

detail-level

Syntax

detail-level detail-level

Context

[Tree] (debug>router>l2tp>assignment-id>packet detail-level)

[Tree] (debug>router>l2tp>group>packet detail-level)

[Tree] (debug>router>l2tp>packet detail-level)

Full Context

debug router l2tp assignment-id packet detail-level

debug router l2tp group packet detail-level

debug router l2tp packet detail-level

Description

This command configures the L2TP packet debugging level of detail.

Parameters

detail-level

Specifies the detail level.

Values

low, high

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>service>id>ppp>packet detail-level)

Full Context

debug service id ppp packet detail-level

Description

This command specify the detail level of PPP packet debug output.

The no form of this command disables debugging.

Parameters

low | medium | high

Specifies the detail level of PPP packet debug output.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>router>radius detail-level)

Full Context

debug router radius detail-level

Description

This command specifies the output detail level of command debug router radius.

Default

detail-level medium

Parameters

low

Specifies that the output includes packet type, server address, length, radius-server-policy name.

medium

Specifies all output in low level including the RADIUS attributes in the packet.

high

Specifies all output in medium level including the hex packet dump.

Platforms

All

detail-level

Syntax

detail-level detail-level

Context

[Tree] (debug>router>wpp>packet detail-level)

[Tree] (debug>router>wpp>portal>packet detail-level)

[Tree] (debug>router>wpp detail-level)

Full Context

debug router wpp packet detail-level

debug router wpp portal packet detail-level

debug router wpp detail-level

Description

This command specifies the detail level of WPP packet debugging.

Parameters

detail-level

specifies the detail level of WPP packet debugging.

Values

high — Specifies a high detail level for WPP packet debugging

low — Specifies a low detail for WPP packet debugging

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax

detail-level {low | medium | high}

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id detail-level)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id detail-level

Description

This command specifies the amount of detail present in debugging the specified PPPoE client.

Default

detail-level high

Parameters

low

Specifies a low level of detail during debugging.

medium

Specifies a medium level of detail during debugging.

high

Specifies a high level of detail during debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>service>id>igmp-snooping detail-level)

Full Context

debug service id igmp-snooping detail-level

Description

This command enables and configures the IGMP tracing detail level.

The no form of this command disables the IGMP tracing detail level.

Platforms

All

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>service>id>mld detail-level)

Full Context

debug service id mld-snooping detail-level

Description

This command enables and configures the MLD tracing detail level.

The no form of this command disables the MLD tracing detail level.

Platforms

All

detail-level

Syntax

detail-level {low | medium | high}

no detail-level

Context

[Tree] (debug>service>id>dhcp detail-level)

Full Context

debug service id dhcp detail-level

Description

This command configures the DHCP tracing detail level.

The no form of the command disables debugging.

Parameters

low

Displays a low detail level for DHCP debugging.

medium

Displays a medium detail level for DHCP debugging.

high

Displays a high detail level for DHCP debugging.

Platforms

All

detail-level

Syntax

detail-level detail-level

Context

[Tree] (debug>router>pcp>pcp-server>packet detail-level)

Full Context

debug router pcp pcp-server packet detail-level

Description

This command configures the packet debugging level of detail.

Parameters

detail-level

Specifies the detail level.

Values

low, high

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

detailed-acct-attributes

detailed-acct-attributes

Syntax

[no] detailed-acct-attributes

Context

[Tree] (config>subscr-mgmt>acct-plcy>include detailed-acct-attributes)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute detailed-acct-attributes

Description

This command enables detailed reporting of per queue and per policer octet and packet counters using RADIUS VSAs. Enabled by default. It can be enabled simultaneously with aggregate counters (std-acct-attributes).

The no form of this command excludes the detailed counter VSAs from the RADIUS accounting messages.

Default

detailed-acct-attributes

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

detect

detect

Syntax

detect num-moves num-moves window minutes

Context

[Tree] (config>service>vpls>bgp-evpn>mac-duplication detect)

Full Context

configure service vpls bgp-evpn mac-duplication detect

Description

The mac-duplication featured is always enabled by default. This command modifies the default behavior. mac-duplication monitors the number of moves of a MAC address for a period of time (window).

Default

detect num-moves 5 window 3

Parameters

num-moves

Identifies the number of MAC moves in a VPLS service. The counter is incremented when a specified MAC is locally relearned in the FDB or flushed from the FDB due to the reception of a better remote EVPN route for that MAC.

Values

3 to 10

Default

5

minutes

Specifies the length of the window in minutes.

Values

1 to 15

Default

3

Platforms

All

detect-seen-ip

detect-seen-ip

Syntax

[no] detect-seen-ip

Context

[Tree] (config>app-assure>group>transit-ip-policy detect-seen-ip)

Full Context

configure application-assurance group transit-ip-policy detect-seen-ip

Description

This command enables the detection of transit subscribers based on the IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

detection-time

detection-time

Syntax

detection-time seconds

no detection-time

Context

[Tree] (config>sys>security>dist-cpu-protection>policy>protocol>dynamic-parameters detection-time)

Full Context

configure system security dist-cpu-protection policy protocol dynamic-parameters detection-time

Description

When a dynamic enforcing policer is instantiated, it remains allocated until at least a contiguous conforming period of detection-time passes.

Default

detection-time 30

Parameters

seconds

Specifies the detection time.

Values

1 to 128000

Platforms

All

detection-time

Syntax

detection-time seconds

Context

[Tree] (config>sys>security>dist-cpu-protection>policy>static-policer detection-time)

Full Context

configure system security dist-cpu-protection policy static-policer detection-time

Description

When a policer is declared as in an "exceed” state, it remains as exceeding until a contiguous conforming period of detection-time passes. The detection-time only starts after the exceed-action hold-down is complete. If the policer detects another exceed during the detection count down then a hold-down is once again triggered before the policer re-enters the detection time (that is, the countdown timer starts again at the configured value). During the hold-down (and the detection-time), the policer is considered as in an "exceed” state.

Default

detection-time 30

Parameters

seconds

Specifies the detection time.

Values

1 to 128000

Platforms

All

deterministic

deterministic

Syntax

deterministic

Context

[Tree] (config>router>nat>inside deterministic)

[Tree] (config>service>vprn>nat>inside deterministic)

Full Context

configure router nat inside deterministic

configure service vprn nat inside deterministic

Description

Commands in this context configure deterministic NAT.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deterministic

Syntax

deterministic

Context

[Tree] (config>service>vprn>nat>outside>pool deterministic)

Full Context

configure service vprn nat outside pool deterministic

Description

This command configures deterministic NAT for this pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

deterministic-med

deterministic-med

Syntax

[no] deterministic-med

Context

[Tree] (config>service>vprn>bgp>best-path-selection deterministic-med)

Full Context

configure service vprn bgp best-path-selection deterministic-med

Description

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default

no deterministic-med

Platforms

All

deterministic-med

Syntax

[no] deterministic-med

Context

[Tree] (config>router>bgp>best-path-selection deterministic-med)

Full Context

configure router bgp best-path-selection deterministic-med

Description

This command controls how the BGP decision process compares routes on the basis of MED. When deterministic-med is configured, BGP groups paths that are equal up to the MED comparison step based on neighbor AS, and then compares the best path from each group to arrive at the overall best path. This change to the BGP decision process makes best path selection completely deterministic in all cases. Without deterministic-med, the overall best path selection is sometimes dependent on the order of the route arrival because of the rule that MED cannot be compared in routes from different neighbor AS.

Default

no deterministic-med

Platforms

All

deterministic-script

deterministic-script

Syntax

deterministic-script

Context

[Tree] (config>service>nat deterministic-script)

Full Context

configure service nat deterministic-script

Description

This command configures the script generated for deterministic NAT.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

device

device

Syntax

device ieee-address [create]

no device ieee-address

Context

[Tree] (config>system>bluetooth device)

Full Context

configure system bluetooth device

Description

This command is used to add and remove devices from the Bluetooth allowlist or to enter the context to configure the MAC. The router only accepts pairing requests with devices that are in the allowlist. The devices are identified through their IEEE 802 MAC addresses. Up to six devices can be defined in the allowlist.

The create keyword must be used to add a new device.

The no form of this command removes the indicated device from the allowlist.

Parameters

ieee-address

Specifies the MAC address of the external Bluetooth device.

Values

6-byte unicast MAC address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx)

Platforms

7750 SR-1, 7750 SR-s, 7950 XRS-20e

device-label

device-label

Syntax

device-label name

no device-label

Context

[Tree] (config>system>management-interface>remote-management device-label)

Full Context

configure system management-interface remote-management device-label

Description

This command configures the metadata label that is supplied to all remote managers. This label can be used to group devices (network-nodes) that serve a common purpose or role.

If this command is also configured for a specific remote manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.

The no form of this command causes an empty string to be used.

Parameters

name

Specifies the device-label name, up to 64 characters.

Platforms

All

device-label

Syntax

device-label name

no device-label

Context

[Tree] (config>system>management-interface>remote-management>manager device-label)

Full Context

configure system management-interface remote-management manager device-label

Description

This command configures the metadata label that is supplied to this remote manager. This label can be used to group devices (network-nodes) with a common purpose/role.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device-label name to be inherited from the global context (config>system>management-interface>remote-management).

Parameters

name

Specifies the device-label name, up to 64 characters.

Platforms

All

device-name

device-name

Syntax

device-name name

no device-name

Context

[Tree] (config>system>management-interface>remote-management device-name)

Full Context

configure system management-interface remote-management device-name

Description

This command configures a device name that is supplied to all remote managers. This name identifies the specified SR OS node in the network.

If this command is also configured for a specific manager in the config>system> management-interface>remote-management>manager context, that configuration takes precedence.

The no form of this command causes the system to use the default device name (system-name).

Default

system-name

Parameters

name

Specifies the device name, up to 64 characters.

Platforms

All

device-name

Syntax

device-name name

no device-name

Context

[Tree] (config>system>management-interface>remote-management>manager device-name)

Full Context

configure system management-interface remote-management manager device-name

Description

This command configures a device name that is supplied to the specific manager. This name identifies the specified SR OS node in the network.

This command takes precedence over the same command configured in the global context (config>system>management-interface>remote-management).

The no form of this command causes the device name to be inherited from the global context (config>system>management-interface>remote-management).

Default

system-name

Parameters

name

Specifies the device name, up to 64 characters.

Platforms

All

df-bit-lac

df-bit-lac

Syntax

df-bit-lac {always | never}

no df-bit-lac

Context

[Tree] (config>service>vprn>l2tp df-bit-lac)

[Tree] (config>router>l2tp df-bit-lac)

Full Context

configure service vprn l2tp df-bit-lac

configure router l2tp df-bit-lac

Description

By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped.

The no form of this command reverts to the default.

Default

df-bit-lac always

Parameters

always

Specifies that the LAC sends all L2TP packets with the DF bit set to 1.

never

Specifies that the LAC sends all L2TP packets with the DF bit set to 0.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

df-bit-lac

Syntax

df-bit-lac {always | never | default}

no df-bit-lac

Context

[Tree] (config>service>vprn>l2tp>group>tunnel df-bit-lac)

[Tree] (config>service>vprn>l2tp>group df-bit-lac)

[Tree] (config>router>l2tp>group df-bit-lac)

[Tree] (config>router>l2tp>group>tunnel df-bit-lac)

Full Context

configure service vprn l2tp group tunnel df-bit-lac

configure service vprn l2tp group df-bit-lac

configure router l2tp group df-bit-lac

configure router l2tp group tunnel df-bit-lac

Description

By default, the LAC df-bit-lac is set to default and sends all L2TP packets with the DF bit set to 1. The DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC will not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports allows are dropped. The configuration of the df-bit can be overridden at different levels: l2tp, tunnel, and group. The configuration at the tunnel level overrides the configuration on both the group and l2tp levels. The configuration at the group level overrides the configuration on l2tp.

The no form of this command reverts to the default.

Default

df-bit-lac default

Parameters

always

Specifies that the LAC sends all L2TP packets with the DF bit set to 1.

never

Specifies that the LAC sends all L2TP packets with the DF bit set to 0.

default

Follows the DF-bit configuration specified on upper levels.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dh-group

dh-group

Syntax

dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}

Context

[Tree] (config>ipsec>ike-transform dh-group)

Full Context

configure ipsec ike-transform dh-group

Description

This command specifies the Diffie-Hellman group to be used in this IKE transform instance.

Default

dh-group 2 (1024-bit — More Modular Exponential (MODP))

Parameters

dh-group {1 | 2 | 5 | 14 | 15 | 19 | 20 | 21}

Specifies which Diffie-Hellman group to use for calculating session keys. More bits provide a higher level of security, but require more processing. Three groups are supported with IKE-v1:

Group 1: 768 bits

Group 2: 1024 bits

Group 5: 1536 bits

Group 14: 2048 bits

Group 15: 3072 bits

Group 19: P-256 ECC Curve, 256 bits

Group 20: P-384 ECC Curve, 384 bits

Group 21: P-512 ECC Curve, 512 bits

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp

dhcp

Syntax

dhcp

Context

[Tree] (config>subscr-mgmt>msap-policy>vpls-only-sap-parameters dhcp)

Full Context

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp

Syntax

dhcp

Context

[Tree] (config>service>vpls>mesh-sdp dhcp)

[Tree] (config>service>vpls>sap dhcp)

[Tree] (config>service>ies>sub-if>grp-if dhcp)

[Tree] (config>service>ies>if dhcp)

[Tree] (config>service>vprn>if dhcp)

[Tree] (config>service>ies>sub-if dhcp)

[Tree] (config>service>vpls>spoke-sdp dhcp)

[Tree] (config>service>vprn>sub-if>grp-if dhcp)

[Tree] (config>service>vprn dhcp)

[Tree] (config>service>vprn>sub-if dhcp)

Full Context

configure service vpls mesh-sdp dhcp

configure service vpls sap dhcp

configure service ies subscriber-interface group-interface dhcp

configure service ies interface dhcp

configure service vprn interface dhcp

configure service ies subscriber-interface dhcp

configure service vpls spoke-sdp dhcp

configure service vprn subscriber-interface group-interface dhcp

configure service vprn dhcp

configure service vprn subscriber-interface dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

All

  • configure service vprn interface dhcp
  • configure service vpls mesh-sdp dhcp
  • configure service vpls sap dhcp
  • configure service vpls spoke-sdp dhcp
  • configure service ies interface dhcp

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn dhcp
  • configure service ies subscriber-interface group-interface dhcp
  • configure service ies subscriber-interface dhcp
  • configure service vprn subscriber-interface dhcp
  • configure service vprn subscriber-interface group-interface dhcp

dhcp

Syntax

[no] dhcp [interface ip-int-name]

[no] dhcp mac ieee-address

[no] dhcp sap sap-id

Context

[Tree] (debug>router>ip dhcp)

Full Context

debug router ip dhcp

Description

This command enables DHCP debugging.

The no form of this command disables debugging.

Parameters

ip-int-name

Specifies the name of the IP interface, up to 32 characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

ieee-address

Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee, and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

sap-id

Specifies the physical port identifier portion of the SAP definition.

Platforms

All

dhcp

Syntax

dhcp type direction {ingress | egress} script script

no dhcp type direction {ingress | egress}

Context

[Tree] (config>python>py-policy dhcp)

Full Context

configure python python-policy dhcp

Description

This command specifies the Python script for the specified DHCPv4 packet type in the specified direction.

Multiple dhcp command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type of the event.

Values

discover, offer, request, decline, ack, nak, release, inform, force-renew, lease-query, lease-unassigned, lease-unknown, lease-active

direction {ingress | egress}

Specifies whether the packet is being received by the system or being sent by the system.

script script

Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.

Platforms

All

dhcp

Syntax

dhcp

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp

configure service ies subscriber-interface group-interface wlan-gw ranges dhcp

Description

Commands in this context create DHCP configuration for WLAN-GW ISA subscribers (such as migrant subscribers).

dhcp

Syntax

[no] dhcp

Context

[Tree] (debug>service>id dhcp)

Full Context

debug service id dhcp

Description

Commands in this context perform DHCP debugging.

The no form of the command disables DHCP debugging.

Platforms

All

dhcp

Syntax

dhcp

Context

[Tree] (config>app-assure>group>transit-ip-policy dhcp)

Full Context

configure application-assurance group transit-ip-policy dhcp

Description

This command enables dynamic DHCP-based management of transit aa-subs for the transit-ip-policy. This is mutually exclusive to other types management of transit subs for a given transit-ip-policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp

Syntax

[no] dhcp

Context

[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp)

[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp)

Full Context

configure service vprn interface sap ipsec-gateway dhcp

configure service ies interface sap ipsec-gateway dhcp

Description

Commands in this context configure DHCPv4-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv4 client on behalf of the IPsec client, and also a relay agent to relay DHCPv4 packets to the DHCPv4 server.

DHCPv4 DORA(Discovery/Offer/Request/Ack) exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

In order to use this feature, the relay-proxy must be enabled on the corresponding interface (either the private interface or the interface that has the gi-address as the interface address).

Default

no dhcp

dhcp

Syntax

dhcp

Context

[Tree] (config>router>if dhcp)

Full Context

configure router interface dhcp

Description

Commands in this context configure DHCP parameters.

Platforms

All

dhcp

Syntax

dhcp [include-user-class] [timeout timeout]

dhcp client-id [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]

no dhcp

Context

[Tree] (bof>autoconfigure>ipv4 dhcp)

Full Context

bof autoconfigure ipv4 dhcp

Description

This command configures the IPv4 DHCP client for OOB management. The OOB management IPv4 can be set using a DHCP server offer.

The no form of this command disables IPv4 DHCP OOB management.

Default

no dhcp

Parameters

include-user-class

Specifies to include Option 77 user class data in the offer.

client-id

Specifies to include the client ID for IPv4 Option 61 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.

timeout

Specifies the DHCP offer timeout, in seconds.

Values

1 to 65535

Default

30

ascii-string

Specifies the string format for this option, up to 127 characters.

hex-string

Specifies the hexadecimal format for this option, up to 254 hex nibbles.

Values

0x0 to 0xFFFFFFFF

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

dhcp

Syntax

dhcp [include-user-class] [timeout timeout]

dhcp client-id duid-type [string ascii-string] [hex hex-string] [include-user-class] [timeout timeout]

no dhcp

Context

[Tree] (bof>autoconfigure>ipv6 dhcp)

Full Context

bof autoconfigure ipv6 dhcp

Description

This command configures the IPv6 DHCP client for out-of-band (OOB) management. The OOB management IPv6 can be set using a DHCP server offer.

The no form of this command disables IPv6 DHCP client OOB management.

Default

no dhcp

Parameters

include-user-class

Specifies to include Option 15 user class data in the offer.

client-id

Specifies to include the client ID for IPv6 DHCP Option 1 for auto-discovery. The identifier is opaque and is in string format. By default, this is the chassis serial number.

seconds

Specifies the DHCP client ID timeout, in seconds.

Values

1 to 65535

duid-type

Specifies the type code of the server DUID.

Values

duid-link-local, duid-enterprise

ascii-string

Specifies the string format for this option, up to 124 characters.

hex-string

Specifies the hexadecimal format for this option, up to 248 hex nibbles.

Values

0x0 to 0xFFFFFFFF

timeout

Specifies the DHCP offer timeout, in seconds.

Values

1 to 65535

Default

30

Platforms

7450 ESS-7, 7750 SR-1, 7750 SR-7, 7750 SR-1e, 7750 SR-2e, 7750 SR-s

dhcp

Syntax

[no] dhcp

Context

[Tree] (config>sys>security>cpu-protection>ip>included-protocols dhcp)

Full Context

configure system security cpu-protection ip-src-monitoring included-protocols dhcp

Description

This command includes the extracted IPv4 DHCP packets for ip-src-monitoring. IPv4 DHCP packets will be subject to the per-source-rate of CPU protection policies.

Default

dhcp (Note this is different from the other protocols)

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-7s, 7750 SR-14s, 7950 XRS

dhcp-client

dhcp-client

Syntax

[no] dhcp-client

Context

[Tree] (debug>router>l2tp>assignment-id>packet dhcp-client)

[Tree] (debug>router>l2tp>group>packet dhcp-client)

[Tree] (debug>router>l2tp>packet dhcp-client)

[Tree] (debug>router>l2tp>peer>packet dhcp-client)

Full Context

debug router l2tp assignment-id packet dhcp-client

debug router l2tp group packet dhcp-client

debug router l2tp packet dhcp-client

debug router l2tp peer packet dhcp-client

Description

This command enables debugging for DHCP client packet.

The no form of this command disables debugging for DHCP client packet.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax

dhcp-client [terminate-only]

no dhcp-client

Context

[Tree] (debug>service>id>ppp>event dhcp-client)

Full Context

debug service id ppp event dhcp-client

Description

This command enable PPP event debug for DHCP client.

The no form of this command disables PPP event debugging for the DHCP client.

Parameters

terminate-only

Enables debug for local terminated PPP session.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax

[no] dhcp-client

Context

[Tree] (debug>service>id>ppp>packet dhcp-client)

Full Context

debug service id ppp packet dhcp-client

Description

This command enables debugging for specific DHCP client packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-client

Syntax

dhcp-client

Context

[Tree] (config>service>vprn>sub-if>grp-if>pppoe dhcp-client)

[Tree] (config>service>ies>sub-if>grp-if>pppoe dhcp-client)

Full Context

configure service vprn subscriber-interface group-interface pppoe dhcp-client

configure service ies subscriber-interface group-interface pppoe dhcp-client

Description

Commands in this context configure the PPPoE-to-DHCP options.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-filter

dhcp-filter

Syntax

dhcp-filter filter-id [create]

no dhcp-filter

Context

[Tree] (config>filter dhcp-filter)

Full Context

configure filter dhcp-filter

Description

Commands in this context create and configure the specified DHCP filter policy.

Parameters

filter-id

Specifies the DHCP filter policy ID expressed as a decimal integer.

Values

1 to 65535

create

Keyword required to create the configuration context.

Platforms

All

dhcp-leasetime-threshold

dhcp-leasetime-threshold

Syntax

dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]

no dhcp-leasetime-threshold

Context

[Tree] (config>system>persistence>options dhcp-leasetime-threshold)

Full Context

configure system persistence options dhcp-leasetime-threshold

Description

This command configures Dynamic Data Persistence (DDP) compact flash access optimization for DHCP leases.

The DHCP lease-time threshold controls the eligibility of a DHCP lease for persistency updates when no data other than the lease expiry time is to be updated. When the offered lease time of the DHCP lease is less than the configured threshold, the lease is flagged to skip persistency updates and will be installed with its full lease time upon a persistency recovery after a reboot.

The dhcp-leasetime-threshold command controls persistency updates for DHCPv4 and DHCPv6 leases for a DHCP relay or proxy and DHCPv4 leases for DHCP snooping (enabled with subscriber-mgmt) and a DHCP server (enabled with dhcp-server).

The no form of the command disables the DHCP lease time threshold.

Default

no dhcp-leasetime-threshold

Parameters

days

Specifies the threshold in days.

Values

0 to 7305

hours

Specifies the threshold in hours.

Values

0 to 23

minutes

Specifies the threshold in minutes.

Values

0 to 59

seconds

Specifies the threshold in seconds.

Values

0 to 59

Platforms

All

dhcp-leasetime-threshold

Syntax

dhcp-leasetime-threshold [days days] [hrs hours] [min minutes] [sec seconds]

no dhcp-leasetime-threshold

Context

[Tree] (config>redundancy>multi-chassis>options>sub-mgmt dhcp-leasetime-threshold)

Full Context

configure redundancy multi-chassis options sub-mgmt dhcp-leasetime-threshold

Description

This command configures the DHCP lease time threshold to be eligible for MCS synchronization.

DHCP leases for the sub-mgmt MCS applications are eligible to skip synchronization if the committed lease time is less than the active threshold on a multi-chassis peer. The active threshold is the minimum value of the thresholds configured on the nodes at each end of a multi-chassis peer. The threshold is inactive when it is unconfigured on at least one end of the multi-chassis peer.

The no form of the command disables the DHCP lease time threshold.

Default

no dhcp-leasetime-threshold

No threshold is active and all sub-mgmt DHCP leases are synchronized.

Parameters

days

Specifies the threshold in days.

Values

0 to 1

hours

Specifies the threshold in hours.

Values

0 to 23

minutes

Specifies the threshold in minutes.

Values

0 to 59

seconds

Specifies the threshold in seconds.

Values

0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-options

dhcp-options

Syntax

[no] dhcp-options

Context

[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-options)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-options

Description

This command enables insertion of RADIUS VSA containing all DHCP options from DHCP discover (or DHCP request) message. The VSA contains all DHCP options in a form of the string. If required (the total length of all DHCP options exceeds 255B), multiple VSAs are included.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-options

Syntax

[no] dhcp-options

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-options)

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-options)

Full Context

configure aaa isa-radius-policy acct-include-attributes dhcp-options

configure aaa isa-radius-policy auth-include-attributes dhcp-options

Description

This command enables insertion of RADIUS VSA containing all dhcp-options from dhcp-discover (or dhcp-request) message. The VSA contains all dhcp-options in a form of the string. If required (the total length of all dhcp-options exceeds 255B), multiple VSAs are included.

Default

no dhcp-options

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp-pool

dhcp-pool

Syntax

dhcp-pool

Context

[Tree] (config>subscr-mgmt>vrgw>brg>brg-profile dhcp-pool)

Full Context

configure subscriber-mgmt vrgw brg brg-profile dhcp-pool

Description

Commands in this context configure per-subscriber IPv4 address pool parameters to be used for address allocation. Pools for different subscribers can overlap. Specific pool parameters can be overridden by RADIUS.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-python-policy

dhcp-python-policy

Syntax

dhcp-python-policy policy-name

no dhcp-python-policy

Context

[Tree] (config>service>vpls>sap dhcp-python-policy)

Full Context

configure service vpls sap dhcp-python-policy

Description

This command specifies the name of the Python policy. The Python policy is created in the config>python>python-policy name context.

The no form of this command reverts to the default.

Parameters

policy-name

Specifies a Python policy name, up to 32 characters.

Platforms

All

dhcp-server

dhcp-server

Syntax

dhcp-server

Context

[Tree] (config>system>persistence dhcp-server)

Full Context

configure system persistence dhcp-server

Description

This command configures DHCP server persistence parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-triggered

dhcp-triggered

Syntax

[no] dhcp-triggered

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dhcp-triggered)

Full Context

configure subscriber-mgmt wlan-gw ue-query state dhcp-triggered

Description

This command enables matching on UEs currently in a DHCP-triggered state. This query only filters UEs that are currently authenticating due to a DHCP, DHCPv6, or RS trigger, not RADIUS-authenticated UEs in an ESM, DSM, or portal state that were originally authenticated due to a DHCP, DHCPv6, or RS trigger.

The no form of this command disables matching on UEs in a DHCP-triggered state, unless all state matching is disabled.

Default

no dhcp-triggered

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp-user-db

dhcp-user-db

Syntax

dhcp-user-db local-user-db-name

no dhcp-user-db

Context

[Tree] (config>service>vpls>sap dhcp-user-db)

Full Context

configure service vpls sap dhcp-user-db

Description

This command enabled access to LUDB for DHCPv4 hosts under the capture SAP. The name of this local user database must match the name of local user database configured under the config>service>vprn/ies>sub-if>group-if>dhcp context.

Parameters

local-user-db

Specifies the name of the local user database name up to 32 characters.

Platforms

All

dhcp-vendor-class-id

dhcp-vendor-class-id

Syntax

[no] dhcp-vendor-class-id

Context

[Tree] (config>subscr-mgmt>auth-plcy>include-radius-attribute dhcp-vendor-class-id)

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute dhcp-vendor-class-id)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp-vendor-class-id

configure subscriber-mgmt radius-accounting-policy include-radius-attribute dhcp-vendor-class-id

Description

This command includes the [26-6527-36] Alc-DHCP-Vendor-Class-Id attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp-vendor-class-id

Syntax

[no] dhcp-vendor-class-id

Context

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp-vendor-class-id)

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp-vendor-class-id)

Full Context

configure aaa isa-radius-policy auth-include-attributes dhcp-vendor-class-id

configure aaa isa-radius-policy acct-include-attributes dhcp-vendor-class-id

Description

This command includes the "[26-6527-36] Alc-DHCP-Vendor-Class-Id” attribute in authentication or RADIUS accounting messages. The content of the DHCP Vendor-Class-Identifier option (60) is mapped in this attribute.

Default

no dhcp-vendor-class-id

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp6

dhcp6

Syntax

dhcp6

Context

[Tree] (config>service>vpls>mesh-sdp dhcp6)

[Tree] (config>service>ies>sub-if dhcp6)

[Tree] (config>service>vprn>sub-if dhcp6)

[Tree] (config>service>vprn>interface dhcp6)

[Tree] (config>service>vprn dhcp6)

[Tree] (config>service>vprn>sub-if>grp-if dhcp6)

[Tree] (config>service>ies>if dhcp6)

[Tree] (config>service>ies>sub-if>grp-if dhcp6)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6 dhcp6)

[Tree] (config>service>vpls>sap dhcp6)

[Tree] (config>service>vpls>spoke-sdp dhcp6)

[Tree] (config>service>ies>sub-if>grp-if>ipv6 dhcp6)

Full Context

configure service vpls mesh-sdp dhcp6

configure service ies subscriber-interface dhcp6

configure service vprn subscriber-interface dhcp6

configure service vprn interface dhcp6

configure service vprn dhcp6

configure service vprn subscriber-interface group-interface dhcp6

configure service ies interface dhcp6

configure service ies subscriber-interface group-interface dhcp6

configure service vprn subscriber-interface group-interface ipv6 dhcp6

configure service vpls sap dhcp6

configure service vpls spoke-sdp dhcp6

configure service ies subscriber-interface group-interface ipv6 dhcp6

Description

Commands in this context configure DHCPv6 parameters.

Platforms

All

  • configure service vprn interface dhcp6
  • configure service vpls sap dhcp6
  • configure service ies interface dhcp6
  • configure service vpls spoke-sdp dhcp6
  • configure service vpls mesh-sdp dhcp6

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface dhcp6
  • configure service vprn dhcp6
  • configure service ies subscriber-interface group-interface dhcp6
  • configure service vprn subscriber-interface group-interface dhcp6
  • configure service vprn subscriber-interface group-interface ipv6 dhcp6
  • configure service ies subscriber-interface group-interface ipv6 dhcp6
  • configure service vprn subscriber-interface dhcp6

dhcp6

Syntax

dhcp6

Context

[Tree] (config>system dhcp6)

Full Context

configure system dhcp6

Description

Commands in this context configure system-wide DHCPv6 parameters.

Platforms

All

dhcp6

Syntax

[no] dhcp6 [ip-int-name]

[no] dhcp6 client-identifier duid duid-hex-string [mask mask-hex-string]

[no] dhcp6 client-identifier link-layer-address lla-hex-string

[no] dhcp6 interface ip-int-name

[no] dhcp6 sap sap-id

Context

[Tree] (debug>router>ip dhcp6)

Full Context

debug router ip dhcp6

Description

This command enables DHCPv6 debugging with optional interface, SAP, and client-identifier match criteria to filter the debug output.

The no form of this command disables debugging.

Parameters

ip-int-name

Specifies the name of an existing IP interface, up to 32 characters. Up to four DHCPv6 interface match criteria can be specified per routing instance.

client-identifier

Specifies a client identifier option match criteria.

duid duid-hex-string

Specifies a hexadecimal value for an opaque match on the client DUID in the client identifier option. When the actual length of the client DUID is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.

Values

0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

mask mask-hex-string

Specifies an optional substring match criteria. When a mask is specified, both hex-string lengths must be equal.

Values

0x0 to 0xFFFFFFFF (maximum 260 hex nibbles)

link-layer-address lla-hex-string

Specifies a hexadecimal value for a link layer address field match of a type 1 (DUID-LLT) or type 3 (DUID-LL) client DUID in the client identifier option. When the actual length of the link layer address field is longer than the length of the specified hex-string, only the left most octets are matched. Up to four DHCPv6 client-identifier match criteria can be specified per routing instance.

Values

0x0 to 0xFFFFFFFF (maximum 252 hex nibbles)

sap-id

Specifies an existing SAP identifier. Up to four DHCPv6 SAP match criteria can be specified per routing instance.

Platforms

All

dhcp6

Syntax

dhcp6 type direction {ingress | egress} script script

no dhcp6 type direction {ingress | egress}

Context

[Tree] (config>python>py-policy dhcp6)

Full Context

configure python python-policy dhcp6

Description

This command specifies the Python script for the specified DHCPv6 packet type in the specified direction.

Multiple dhcps command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type of the event.

Values

solicit, advertise, request, confirm, renew, rebind, reply, release, decline, reconfigure, info-request, relay-forward, relay-reply

direction {ingress | egress}

Specifies whether the event is incoming or outgoing.

script

Specifies the name of the Python script, up to 32 characters, that will be used to handle the specified message.

Platforms

All

dhcp6

Syntax

dhcp6

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges dhcp6)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges dhcp6)

Full Context

configure service ies subscriber-interface group-interface wlan-gw ranges dhcp6

configure service vprn subscriber-interface group-interface wlan-gw ranges dhcp6

Description

Commands in this context create DHCPv6 configuration for WLAN-GW ISA subscribers.

dhcp6

Syntax

[no] dhcp6

Context

[Tree] (config>service>ies>if>sap>ipsec-gateway dhcp6)

[Tree] (config>service>vprn>if>sap>ipsec-gateway dhcp6)

Full Context

configure service ies interface sap ipsec-gateway dhcp6

configure service vprn interface sap ipsec-gateway dhcp6

Description

Commands in this context configure DHCPv6-based address assignment for IKEv2 remote-access tunnels.

The system acts as a DHCPv6 client on behalf of the IPsec client, and also acts as a relay agent to relay DHCPv6 packets to the DHCPv6 server.

DHCPv6 exchange happens during IKEv2 remote-access tunnel setup. The system also supports standard renew.

Default

no dhcp6

dhcp6-address

dhcp6-address

Syntax

dhcp6-address ipv6-address

no dhcp6-address

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query dhcp6-address)

Full Context

configure subscriber-mgmt wlan-gw ue-query dhcp6-address

Description

This command enables matching on UEs with the specified DHCPv6 IA-NA address.

The no form of this command disables matching on the IA-NA address.

Default

no dhcp6-address

Parameters

ipv6-address

Specifies the IA-NA address.

Values

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp6-filter

dhcp6-filter

Syntax

dhcp6-filter filter-id [create]

no dhcp6-filter

Context

[Tree] (config>filter dhcp6-filter)

Full Context

configure filter dhcp6-filter

Description

Commands in this context create and configure the specified DHCPv6 filter policy.

The no form of this command reverts to the default.

Parameters

filter-id

Specifies the DHCPv6 filter policy ID expressed as a decimal integer.

Values

1 to 65535

create

Keyword required to create the configuration context.

Platforms

All

dhcp6-options

dhcp6-options

Syntax

[no] dhcp6-options

Context

[Tree] (config>subscr-mgmt>auth-plcy>include dhcp6-options)

Full Context

configure subscriber-mgmt authentication-policy include-radius-attribute dhcp6-options

Description

This command copies DHCPv6 options from received DHCPv6 messages on ingress access and pass them to the RADIUS server in Accept-Request. The messages is carried in the RADIUS VSA Alc-ToServer-Dhcp6-Options.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcp6-options

Syntax

[no] dhcp6-options

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes dhcp6-options)

Full Context

configure aaa isa-radius-policy acct-include-attributes dhcp6-options

Description

If a DHCPv6 stack is active for a UE, this attribute defines if options received in the last DHCPv6 message should be reflected.

Default

no dhcp6-options

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp6-options

Syntax

[no] dhcp6-options

Context

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes dhcp6-options)

Full Context

configure aaa isa-radius-policy auth-include-attributes dhcp6-options

Description

If authentication was triggered by DHCPv6, this knob defines if options received in that DHCPv6 message should be reflected in the radius Access-Request.

Default

no dhcp6-options

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcp6-python-policy

dhcp6-python-policy

Syntax

dhcp6-python-policy policy-name

no dhcp6-python-policy

Context

[Tree] (config>service>vpls>sap dhcp6-python-policy)

Full Context

configure service vpls sap dhcp6-python-policy

Description

This command specified the Python policy for DHCPv6 packets sent/received on the capture SAP.

The no form of this command removes the policy name from the configuration.

Parameters

policy name

Specifies an existing Python policy name, up to 256 characters.

Platforms

All

dhcp6-relay

dhcp6-relay

Syntax

[no] dhcp6-relay

Context

[Tree] (config>service>vprn>if>ipv6 dhcp6-relay)

[Tree] (config>service>ies>if>ipv6 dhcp6-relay)

Full Context

configure service vprn interface ipv6 dhcp6-relay

configure service ies interface ipv6 dhcp6-relay

Description

Commands in this context configure DHCPv6 relay parameters for the interface.

The no form of this command disables DHCPv6 relay.

Platforms

All

dhcp6-server

dhcp6-server

Syntax

[no] dhcp6-server

Context

[Tree] (config>service>vprn>if>ipv6 dhcp6-server)

[Tree] (config>service>ies>if>ipv6 dhcp6-server)

Full Context

configure service vprn interface ipv6 dhcp6-server

configure service ies interface ipv6 dhcp6-server

Description

Commands in this context configure DHCPv6 server parameters for the interface.

The no form of this command disables the DHCP6 server.

Platforms

All

dhcp6-user-db

dhcp6-user-db

Syntax

dhcp6-user-db local-user-db

no dhcp6-user-db

Context

[Tree] (config>service>vpls>sap dhcp6-user-db)

Full Context

configure service vpls sap dhcp6-user-db

Description

This command enabled access to LUDB for DHCPv6 hosts under the capture SAP. The name of this LUDB must match the name of the LUDB configured under the config>service>vprn/ies>sub-if>grp-if>dhcp hierarchy.

The no form of this command reverts to the default.

Parameters

local-user-db

Specifies the name of the local-user-database, up to 32 characters.

Platforms

All

dhcpv4

dhcpv4

Syntax

dhcpv4

Context

[Tree] (config>service>vprn>subscriber-mgmt dhcpv4)

[Tree] (config>router>subscriber-mgmt dhcpv4)

Full Context

configure service vprn subscriber-mgmt dhcpv4

configure router subscriber-mgmt dhcpv4

Description

Commands in this context configure DHCPv4 parameters that apply to this routing instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dhcpv4-nat

dhcpv4-nat

Syntax

dhcpv4-nat

Context

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager>dhcp6-client dhcpv4-nat)

Full Context

configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat

configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client dhcpv4-nat

Description

This node enables address pools for DHCPv4 NAT inside addresses. This configuration is only available in wholesale interfaces.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dhcpv6-client

dhcpv6-client

Syntax

dhcpv6-client

Context

[Tree] (config>service>vprn>sub-if>wlan-gw>pool-manager dhcpv6-client)

[Tree] (config>service>ies>sub-if>wlan-gw>pool-manager dhcpv6-client)

Full Context

configure service vprn subscriber-interface wlan-gw pool-manager dhcpv6-client

configure service ies subscriber-interface wlan-gw pool-manager dhcpv6-client

Description

This command configures the DHCPv6 client for the pool manager.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter

diameter

Syntax

diameter type direction {ingress | egress} script script

no diameter type direction {ingress | egress}

Context

[Tree] (config>python>py-policy diameter)

Full Context

configure python python-policy diameter

Description

This command specifies the Python script to use for the specified Diameter message type in the specified direction.

Multiple diameter command configurations are allowed in the same Python policy.

The no form of this command reverts to the default.

Parameters

type

Specifies the message type.

Message type

Application

Direction

aaa – AA Answer

Nasreq

ingress

aar – AA Request

Nasreq

egress

asa – Abort Session Answer

Gx, Gy

egress

asr – Abort Session Request

Gx, Gy

ingress

cca – Credit Control Answer

Gx, Gy

ingress

ccr – Credit Control Request

Gx, Gy

egress

cea – Capabilities Exchange Answer

Base

ingress

cer – Capabilities Exchange Request

Base

egress

dpa – Disconnect Peer Answer

Base

ingress/egress

dpr – Disconnect Peer Request

Base

ingress/egress

dwa – Device Watchdog Answer

Base

ingress/egress

dwr – Device Watchdog Request

Base

ingress/egress

raa – Re-Authentication Answer

Gx, Gy

egress

rar – Re-Authentication Request

Gx, Gy

ingress

direction {ingress | egress}

Specifies if the message is incoming or outgoing.

script

Specifies the name of the Python script, up to 32 characters, that is used to handle the specified message.

Platforms

All

diameter

Syntax

diameter

Context

[Tree] (config>aaa diameter)

Full Context

configure aaa diameter

Description

Commands in this context configure Diameter parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter

Syntax

[no] diameter

Context

[Tree] (debug diameter)

Full Context

debug diameter

Description

This command enables debugging for diameter.

The no form of this command disables debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter

Syntax

diameter

Context

[Tree] (config>app-assure>group>transit-ip diameter)

Full Context

configure application-assurance group transit-ip-policy diameter

Description

Commands in this context configure dynamic Diameter-based management of transit AA subs for the transit IP policy. This is mutually exclusive to other types of management of transit subs for a given transit IP policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter-application-policy

diameter-application-policy

Syntax

diameter-application-policy policy-name

no diameter-application-policy

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-application-policy)

[Tree] (config>service>vpls>sap diameter-application-policy)

[Tree] (config>service>ies>sub-if>grp-if diameter-application-policy)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-application-policy)

[Tree] (config>service>vprn>sub-if>grp-if diameter-application-policy)

Full Context

configure subscriber-mgmt local-user-db ppp host diameter-application-policy

configure service vpls sap diameter-application-policy

configure service ies subscriber-interface group-interface diameter-application-policy

configure subscriber-mgmt local-user-db ipoe host diameter-application-policy

configure service vprn subscriber-interface group-interface diameter-application-policy

Description

This command applies the diameter-application-policy to the processing of the host attachment requests.

The no form of this command reverts to the default value.

Parameters

policy-name

Specifies the name of the diameter policy, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure subscriber-mgmt local-user-db ipoe host diameter-application-policy
  • configure subscriber-mgmt local-user-db ppp host diameter-application-policy
  • configure service vprn subscriber-interface group-interface diameter-application-policy
  • configure service ies subscriber-interface group-interface diameter-application-policy

All

  • configure service vpls sap diameter-application-policy

diameter-application-policy

Syntax

diameter-application-policy application-policy-name [create]

no diameter-application-policy application-policy-name

Context

[Tree] (config>subscr-mgmt diameter-application-policy)

Full Context

configure subscriber-mgmt diameter-application-policy

Description

Commands in this context create and configure diameter application policy.

The no form of this command reverts to the default.

Parameters

application-policy-name

Specifies the name of the diameter policy, up to 32 characters.

create

Specifies the keyword used to create a diameter application policy. The create keyword requirement can be enabled or disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

diameter-auth-policy

Syntax

diameter-auth-policy name

no diameter-auth-policy

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host diameter-auth-policy)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host diameter-auth-policy)

Full Context

configure subscriber-mgmt local-user-db ppp host diameter-auth-policy

configure subscriber-mgmt local-user-db ipoe host diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax

diameter-auth-policy diameter-authentication-policy-name

no diameter-auth-policy

Context

[Tree] (config>subscr-mgmt>gtp>apn-policy>apn diameter-auth-policy)

Full Context

configure subscriber-mgmt gtp apn-policy apn diameter-auth-policy

Description

This command configures the Diameter authentication policy with which the GTP connection is authenticated.

The no form of this command removes the authentication policy. Only new session setups are affected.

Default

no diameter-auth-policy

Parameters

diameter-authentication-policy-name

Specifies the name of the authentication policy to be used, up to 32 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax

diameter-auth-policy name

no diameter-auth-policy

Context

[Tree] (config>service>vpls>sap diameter-auth-policy)

Full Context

configure service vpls sap diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default value.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-auth-policy

Syntax

diameter-auth-policy name

no diameter-auth-policy

Context

[Tree] (config>service>ies>sub-if>grp-if diameter-auth-policy)

[Tree] (config>service>vprn>sub-if>grp-if diameter-auth-policy)

Full Context

configure service ies subscriber-interface group-interface diameter-auth-policy

configure service vprn subscriber-interface group-interface diameter-auth-policy

Description

This command is used to configure the Diameter NASREQ application policy to use for authentication.

The no form of this command reverts to the default.

Parameters

name

Specifies the name of the Diameter NASREQ application policy, up to 32 characters, to use for authentication.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diameter-node

diameter-node

Syntax

diameter-node origin-host-string destination-realm destination-realm-string

no diameter-node

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy diameter-node)

Full Context

configure subscriber-mgmt diameter-application-policy diameter-node

Description

This command configures the Diameter node for this Diameter application policy.

Parameters

origin-host-string

Specifies the Origin-Host AVP used by this Diameter policy, up to 80 characters.

destination-realm-string

Specifies the Destination-Realm AVP used by this Diameter policy peer, up to 80 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

diff

diff

Syntax

diff

Context

[Tree] (config>app-assure>group>policy diff)

Full Context

configure application-assurance group policy diff

Description

This command compares the newly configured policy against the operational policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

diffserv-te

diffserv-te

Syntax

diffserv-te [mam | rdm]

no diffserv-te

Context

[Tree] (config>router>rsvp diffserv-te)

Full Context

configure router rsvp diffserv-te

Description

This command enabled Diff-Serv TE on the node.

When this command is enabled, IS-IS and OSPF will start advertising available bandwidth for each TE class configured under the diffserv-te node. This command will only have effect if the operator has already enabled TE at the IS-IS and/or OSPF routing protocol levels:

config>router>isis>traffic-engineering

and/or:

config>router>ospf>traffic-engineering

IGP will advertise for each RSVP interface in the system the available bandwidth in each TE class in the unreserved bandwidth TE parameter for that class. In addition, IGP will continue to advertise the existing Maximum Reservable Link Bandwidth TE parameter to mean the maximum bandwidth that can be booked on a given interface by all classes. The value advertised is adjusted with the link subscription percentage factor configured in the config>router>rsvp>interface context.

The user configures the following parameters for the operation of Diff-Serv:

  • Definition of TE classes, TE Class = {Class Type (CT), LSP priority}.

  • Mapping of the system forwarding classes to the Diff-Serv Class Type (CT).

  • Configuration of the percentage of RSVP interface bandwidth each CT shares, that is, the Bandwidth Constraint (BC).

When Diff-Serv TE is enabled, the system will automatically enable the Max Allocation Model (MAM) Admission Control Policy. MAM represents the bandwidth constraint model for the admission control of an LSP reservation to a link. This is the only Admission Control Policy supported in this release.

Each CT shares a percentage of the Maximum Reservable Link Bandwidth through the user-configured Bandwidth Constraint (BC) for this CT. The Maximum Reservable Link Bandwidth is the link bandwidth multiplied by the RSVP interface subscription factor.

The sum of all BC values across all CTs will not exceed the Maximum Reservable Link Bandwidth. In other words, the following rule is enforced:

SUM (BCc) =< Max-Reservable-Bandwidth, 0 <= c <= 7

An LSP of class-type CTc, setup priority p, holding priority h (h=<p), and bandwidth B is admitted into a link if the following condition is satisfied:

B <= Unreserved Bandwidth for TE-Class[i]

where TE-Class [i] maps to < CTc , p > in the definition of the TE classes on the node. The bandwidth reservation is effected at the holding priority, that is, in TE-class [j] = <CTc, h>. Thus, the reserved bandwidth for CTc and the unreserved bandwidth for the TE classes using CTc are updated as follows:

Reserved(CTc) = Reserved(CTc) + B

Unreserved TE-Class [j] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= h

Unreserved TE-Class [i] = BCc - SUM (Reserved(CTc,q)) for 0<= q <= p

The same is done to update the unreserved bandwidth for any other TE class making use of the same CTc. These new values are advertised to the rest of the network at the next IGP-TE flooding.

The Russian Doll Model (RDM) LSP admission control policy allows bandwidth sharing across Class Types. It provides a hierarchical model by which the reserved bandwidth of a CT is the sum of the reserved bandwidths of the numerically equal and higher CTs.

The RDM model is defined using the following equations:

SUM (Reserved (CTc)) <= BCb,

where the SUM is across all values of c in the range b <= c <= (MaxCT - 1), and BCb is the bandwidth constraint of CTb.

BC0= Max-Reservable-Bandwidth, so that

SUM (Reserved(CTc)) <= Max-Reservable-Bandwidth,

where the SUM is across all values of c in the range 0 <= c <= (MaxCT - 1).

When Diff-Serv is disabled on the node, this model degenerates into a single default CT internally with eight preemption priorities and a non-configurable BC equal to the Maximum Reservable Link Bandwidth. This would behave exactly like CT0 with eight preemption priorities and BC= Maximum Reservable Link Bandwidth if Diff-Serv was enabled.

The enabling or disabling of Diff-Serv TE on the system requires the RSVP and MPLS protocol be shutdown.

The no form of this command reverts to the default value.

Default

no diffserv-te

Parameters

mam

Defines the default admission control policy for Diff-Serv LSPs.

rdm

Defines Russian doll model for the admission control policy of Diff-Serv LSPs.

Platforms

All

digest-type

digest-type

Syntax

digest-type {default | none | md5 | sha1}

no digest-type

Context

[Tree] (config>service>vprn>l2tp>l2tpv3 digest-type)

[Tree] (config>service>vprn>l2tp>group>l2tpv3 digest-type)

Full Context

configure service vprn l2tp l2tpv3 digest-type

configure service vprn l2tp group l2tpv3 digest-type

Description

This command configures the hashing algorithm used to calculate the message digest.

The no form of this command returns the digest-type to none.

Default

no digest-type

Parameters

none

Specifies that no digest should be used.

md5

Specifies that the MD5 algorithm should be used.

sha1

Specifies that the SHA1 algorithm should be used.

default

When specified within the config>service>vprn>l2tp>group>l2tpv3 context, this is referencing to the digest-type configuration within the config>service>vprn>l2tp>l2tpv3 context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

digital-coherent-optics

digital-coherent-optics

Syntax

[no] digital-coherent-optics

Context

[Tree] (config>port>transceiver digital-coherent-optics)

Full Context

configure port transceiver digital-coherent-optics

Description

This command specifies if a digital coherent optics module is used for this port.

The no form of this command specifies that the optical module used in this port is not a digital coherent optics module.

Default

no digital-coherent-optics

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dir

dir

Syntax

dir [file-url] [sort-order { d | n | s}] [reverse]

Context

[Tree] (file dir)

Full Context

file dir

Description

This command displays a list of files and subdirectories in a directory.

Parameters

file-url

Specifies the path or directory name.

Use the file-url with the optional wildcard (*) to reduce the number of files to list.

sort-order {d | n | s}

Specifies the sort order.

Values

d — date

n — name

s — size

reverse

Reverses the sort order.

Default

Lists all files in the current working directory.

local-url

[cflash-id/][file-path] up to 200 characters, including cflash-id directory length up to 99 each

remote-url

[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]

up to 247 characters

directory length up to 99 characters each

remote-locn

[hostname | ipv4-address | [ipv6-address]]

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x[-interface]

x:x:x:x:x:x:d.d.d.d[-interface]

x - [0 to FFFF]H

d - [0 to 255]D

interface - up to 32 characters, for link local addresses 255

cflash-id

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

Output

The following output is an example of directory information.

Sample Output
A:cses-E12>file cf3:\ # dir
  - dir [<file-url>] [sort-order { d | n | s}] [reverse]
 
 <file-url>           : <local-url> | <remote-url>
                        local-url      - [<cflash-id>/][<file-path>]
                                         200 chars max, including cflash-id
                                         directory length 99 chars max each
                        remote-url     - [ftp://<login>:<pswd>@<remote-locn>/
                                         ][<file-path>]
                                         255 chars max
                                         directory length 99 chars max each
                        remote-locn    - [ <hostname> | <ipv4-address> |
                                         [<ipv6-address>]]
                        ipv4-address   - a.b.c.d
                        ipv6-address   - x:x:x:x:x:x:x:x[-interface]
                                         x:x:x:x:x:x:d.d.d.d[-interface]
                                         x - [0..FFFF]H
                                         d - [0..255]D
                                         interface - 32 chars max, for link
                                         local addresses
                        cflash-id      - cf1:|cf1-A:|cf1-B:|cf2:|cf2-A:|
                                         cf2-B:|cf3:|cf3-A:|cf3-B:
 < d | n | s>         : Sort order: d - date, n - name, s - size
 <reverse>            : keyword - reverse order
A:cses-E12>file cf3:\ # dir

direction

direction

Syntax

direction direction

Context

[Tree] (debug>router>l2tp>packet direction)

[Tree] (debug>router>l2tp>assignment-id>packet direction)

[Tree] (debug>router>l2tp>group>packet direction)

[Tree] (debug>router>l2tp>peer>packet direction)

Full Context

debug router l2tp packet direction

debug router l2tp assignment-id packet direction

debug router l2tp group packet direction

debug router l2tp peer packet direction

Description

This command enables debugging for packet direction.

Parameters

direction

Specifies the packet direction.

Values

ingress, egress, both

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax

direction {ingress | egress | both}

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id direction)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id direction

Description

This command specifies if debugging should only include ingress, egress or all messages.

Default

direction both

Parameters

ingress

Specifies that debugging only includes ingress messages.

egress

Specifies that debugging only includes egress messages.

both

Specifies that debugging includes both ingress and egress messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax

direction ipsec-direction

no direction

Context

[Tree] (config>ipsec>static-sa direction)

Full Context

configure ipsec static-sa direction

Description

This command configures the direction for an IPsec manual SA.

The no form of this command reverts to the default value.

Default

direction bidirectional

Parameters

ipsec-direction

Identifies the direction to which this static SA entry can be applied.

Values

inbound, outbound, bidirectional

Platforms

All

direction

Syntax

direction direction

Context

[Tree] (debug>router>pcp>pcp-server>packet direction)

Full Context

debug router pcp pcp-server packet direction

Description

This command enables debugging for packet direction.

Parameters

direction

Specifies the packet direction.

Values

ingress, egress, both

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

direction

Syntax

direction

Context

[Tree] (config>system>security>keychain direction)

Full Context

configure system security keychain direction

Description

This command specifies the data type that indicates the TCP stream direction to apply the keychain.

Platforms

All

direction-bit

direction-bit

Syntax

[no] direction-bit

Context

[Tree] (config>mirror>mirror-dest>encap>layer-3-encap direction-bit)

Full Context

configure mirror mirror-dest encap layer-3-encap direction-bit

Description

This command is used to steal one bit from the intercept-id in the LI-Shim and use it to indicate the direction of traffic flow for an LI session. Using a direction bit may be used by a LI Mediation Gateway to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror-dest, intercept-id and session-id. If the direction bit is enabled then the Mirror Header Version (2 bit mhv) in the LI-Shim will be set to binary 01, and the next bit after the mhv is set to 0 for ingress traffic and 1 for egress traffic.

For NAT based LI, ingress means the traffic is arriving at the node from the subscriber host (applies to the 7450 ESS and 7750 SR).

No changes are allowed to the direction-bit configuration once a gateway is configured.

Platforms

All

direction-bit

Syntax

[no] direction-bit

Context

[Tree] (config>li>mirror-dest-template>layer-3-encap direction-bit)

Full Context

configure li mirror-dest-template layer-3-encap direction-bit

Description

This command enables and disables the use of one bit from the interception ID field in the LI-Shim header to be used to indicate the direction of mirrored traffic flow for an LI session. An LI Mediation Gateway can use a direction bit to distinguish between the two directions of traffic flow for an LI session when both directions share a common mirror destination, interception ID, and session ID. If the direction bit is enabled, the Mirror Header Version (2-bit MHV) in the LI-Shim header will be set to binary 01, and the next bit after the MHV is set to 0 for ingress traffic and 1 for egress traffic.

For NAT-based LI, ingress traffic arrives at the node from the subscriber host. No changes are allowed to the direction bit configuration after a gateway is configured.

The no form of this command disables the use of the bit as a direction indicator.

Platforms

All

disable

disable

Syntax

[no] disable

Context

[Tree] (config>call-trace>location disable)

Full Context

configure call-trace location disable

Description

When configured, the specified compact flash will not be used by call-trace. The no form of this command enables the compact flash for use by call-trace.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-4byte-asn

disable-4byte-asn

Syntax

[no] disable-4byte-asn

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-4byte-asn)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-4byte-asn

Description

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer.

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-4byte-asn

Syntax

[no] disable-4byte-asn

Context

[Tree] (config>service>vprn>bgp disable-4byte-asn)

[Tree] (config>service>vprn>bgp>group disable-4byte-asn)

[Tree] (config>service>vprn>bgp>group>neighbor disable-4byte-asn)

Full Context

configure service vprn bgp disable-4byte-asn

configure service vprn bgp group disable-4byte-asn

configure service vprn bgp group neighbor disable-4byte-asn

Description

This command disables the use of 4-byte ASNs. It can be configured at all 3 level of the hierarchy so it can be specified down to the per peer basis.

If this command is enabled 4-byte ASN support should not be negotiated with the associated remote peer(s).

The no form of this command resets the behavior to the default which is to enable the use of 4-byte ASN.

Platforms

All

disable-4byte-asn

Syntax

[no] disable-4byte-asn

Context

[Tree] (config>router>bgp>group>neighbor disable-4byte-asn)

[Tree] (config>router>bgp disable-4byte-asn)

[Tree] (config>router>bgp>group disable-4byte-asn)

Full Context

configure router bgp group neighbor disable-4byte-asn

configure router bgp disable-4byte-asn

configure router bgp group disable-4byte-asn

Description

This command disables the support of 4-byte ASNs. It can be configured at all three levels of the hierarchy so it can be specified down to the per-peer basis.

If this command is enabled, 4-byte ASN support should not be negotiated with the associated remote peers.

The no form of this command resets the behavior to the default which is to enable the support of 4-byte ASN.

Default

no disable-4byte-asn

Platforms

All

disable-aging

disable-aging

Syntax

[no] disable-aging

Context

[Tree] (config>service>vpls>vxlan disable-aging)

[Tree] (config>service>vpls>spoke-sdp disable-aging)

[Tree] (config>service>template>vpls-template disable-aging)

[Tree] (config>service>vpls disable-aging)

[Tree] (config>service>vpls>sap disable-aging)

Full Context

configure service vpls vxlan disable-aging

configure service vpls spoke-sdp disable-aging

configure service template vpls-template disable-aging

configure service vpls disable-aging

configure service vpls sap disable-aging

Description

This command disables MAC address aging across a VPLS service, on a VPLS service SAP or spoke-SDP, or VXLAN instance with static binds. Learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the VPLS forwarding database (FDB).

The disable-aging command turns off aging for local and remote learned MAC addresses. When no disable-aging is specified for a VPLS, aging can be disabled for specific SAPs, spoke-SDPs, and VXLAN instances (or any combination) by entering the disable-aging command at the appropriate level.

When the disable-aging command is entered at the VPLS level, the aging state of individual SAPs or SDPs or VXLAN instance is ignored.

The no form of this command enables aging on the VPLS service.

Default

no disable-aging

Except for VXLAN instances, where the disable-aging is the default mode

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service vpls vxlan disable-aging

All

  • configure service vpls spoke-sdp disable-aging
  • configure service vpls sap disable-aging
  • configure service template vpls-template disable-aging
  • configure service vpls disable-aging

disable-aging

Syntax

[no] disable-aging

Context

[Tree] (config>service>pw-template disable-aging)

Full Context

configure service pw-template disable-aging

Description

This command disables MAC address aging across a service.

The no form of this command enables aging.

Default

no disable-aging

Platforms

All

disable-capability-negotiation

disable-capability-negotiation

Syntax

[no] disable-capability-negotiation

Context

[Tree] (config>service>vprn>bgp>group>neighbor disable-capability-negotiation)

[Tree] (config>service>vprn>bgp>group disable-capability-negotiation)

Full Context

configure service vprn bgp group neighbor disable-capability-negotiation

configure service vprn bgp group disable-capability-negotiation

Description

This command disables the exchange of capabilities. When command is enabled and after the peering is flapped, any new capabilities are not negotiated and strictly supports IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default

no disable-capability-negotiation

Platforms

All

disable-capability-negotiation

Syntax

[no] disable-capability-negotiation

Context

[Tree] (config>router>bgp>group>neighbor disable-capability-negotiation)

[Tree] (config>router>bgp>group disable-capability-negotiation)

Full Context

configure router bgp group neighbor disable-capability-negotiation

configure router bgp group disable-capability-negotiation

Description

This command disables capability negotiation. When the command is enabled and after the peering is flapped, any new capabilities are not negotiated and will strictly support IPv4 routing exchanges with that peer.

The no form of this command removes this command from the configuration and restores the normal behavior.

Default

no disable-capability-negotiation

Platforms

All

disable-client-reflect

disable-client-reflect

Syntax

[no] disable-client-reflect

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-client-reflect)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-client-reflect

Description

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes to all client peers.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-client-reflect

Syntax

[no] disable-client-reflect

Context

[Tree] (config>service>vprn>bgp>group>neighbor disable-client-reflect)

[Tree] (config>service>vprn>bgp>group disable-client-reflect)

[Tree] (config>service>vprn>bgp disable-client-reflect)

Full Context

configure service vprn bgp group neighbor disable-client-reflect

configure service vprn bgp group disable-client-reflect

configure service vprn bgp disable-client-reflect

Description

This command disables the reflection of routes by the route reflector to the group or neighbor. This only disables the reflection of routes from other client peers. Routes learned from non-client peers are still reflected to all clients.

The no form re-enables client reflection of routes.

Default

no disable-client-reflect

Platforms

All

disable-client-reflect

Syntax

[no] disable-client-reflect

Context

[Tree] (config>router>bgp disable-client-reflect)

[Tree] (config>router>bgp>group>neighbor disable-client-reflect)

[Tree] (config>router>bgp>group disable-client-reflect)

Full Context

configure router bgp disable-client-reflect

configure router bgp group neighbor disable-client-reflect

configure router bgp group disable-client-reflect

Description

This command determines whether routes received from neighbors considered to be RR clients are reflected to other clients.

The no form enables client reflection of routes.

Default

no disable-client-reflect

Platforms

All

disable-communities

disable-communities

Syntax

disable-communities [standard] [extended]

no disable-communities

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-communities)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-communities

Description

This command configures BGP to disable sending communities.

The no form of this command reverts to the default.

Parameters

standard

Specifies standard communities that existed before VPRNs or 2547.

extended

Specifies BGP communities used were expanded after the concept of 2547 was introduced, to include handling the VRF target.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-communities

Syntax

disable-communities [standard] [extended] [ large]

no disable-communities

Context

[Tree] (config>service>vprn>bgp>group disable-communities)

[Tree] (config>service>vprn>bgp>group>neighbor disable-communities)

[Tree] (config>service>vprn>bgp disable-communities)

Full Context

configure service vprn bgp group disable-communities

configure service vprn bgp group neighbor disable-communities

configure service vprn bgp disable-communities

Description

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP or confed-EBGP.

Default

no disable-communities

Parameters

standard

Specifies that standard 4-byte communities should be removed.

extended

Specifies that 8-byte extended communities (of all types) should be removed.

large

Specifies that 12-byte large communities should be removed.

Platforms

All

disable-communities

Syntax

disable-communities [standard] [extended] [large]

no disable-communities

Context

[Tree] (config>router>bgp disable-communities)

[Tree] (config>router>bgp>group disable-communities)

[Tree] (config>router>bgp>group>neighbor disable-communities)

Full Context

configure router bgp disable-communities

configure router bgp group disable-communities

configure router bgp group neighbor disable-communities

Description

This command configures BGP to disable sending standard, extended, or large communities to specific peers.

By default, all communities that are attached to a BGP route (any address family) are not stripped from the route when it is advertised to any type of peer: IBGP, EBGP, or confed-EBGP.

Default

no disable-communities

Parameters

standard

Advertise the Communities attribute to peers.

extended

Advertise the Extended Communities attribute to peers.

large

Advertise the Large Communities attribute to peers.

Platforms

All

disable-cookies

disable-cookies

Syntax

[no] disable-cookies

Context

[Tree] (config>subscr-mgmt>ppp-policy disable-cookies)

Full Context

configure subscriber-mgmt ppp-policy disable-cookies

Description

This command disables the use of cookies.

The no form of this command enables cookies.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-explicit-null

disable-explicit-null

Syntax

[no] disable-explicit-null

Context

[Tree] (config>router>bgp>label-allocation>label-ipv6 disable-explicit-null)

Full Context

configure router bgp label-allocation label-ipv6 disable-explicit-null

Description

This command controls the allocation and use of explicit null MPLS labels with labeled-unicast ipv6 routes.

When this command is enabled (no disable-explicit-null), the following behaviors apply:

  • during the times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to IPv6 explicit null (value 2), forcing a POP behavior for received packets.

  • received label-unicast IPv6 routes never create tunnels in TTM that can be used to resolve other BGP routes (with an IPv6 next-hop).

  • a received label-unicast IPv6 route can be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)

When this command is disabled (disable-explicit-null), the following behaviors apply:

  • during those times when the router is required to act as the BGP next-hop of a label-unicast IPv6 route that it is advertising, it sets the BGP label value to a proper value in the dynamic label range and programs a POP or SWAP operation for that label, depending on the origin of the route and various import policy actions that could apply to the route

  • received label-unicast IPv6 routes that have a prefix length of 128 bits are automatically installed in TTM so that they can be used to resolve other (non-labeled-unicast) BGP routes (with an IPv6 next-hop)

  • a received label-unicast ipv6 route cannot be resolved by a label-ipv4 BGP tunnel that is transported over a stacked tunnel (SR-TE LSP or LDPoRSVP LSP)

  • the label-ipv6 routes used for ECMP towards an IPv6 destination cannot be a mix of routes with regular label values and routes with special (IPv6 explicit null) label values

Changes in the operational status do not cause the BGP sessions of the base router to reset.

Platforms

All

disable-fast-external-failover

disable-fast-external-failover

Syntax

[no] disable-fast-external-failover

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy disable-fast-external-failover)

Full Context

configure subscriber-mgmt bgp-peering-policy disable-fast-external-failover

Description

This command configures BGP fast external failover.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-fast-external-failover

Syntax

[no] disable-fast-external-failover

Context

[Tree] (config>service>vprn>bgp>group disable-fast-external-failover)

[Tree] (config>service>vprn>bgp>group>neighbor disable-fast-external-failover)

[Tree] (config>service>vprn>bgp disable-fast-external-failover)

Full Context

configure service vprn bgp group disable-fast-external-failover

configure service vprn bgp group neighbor disable-fast-external-failover

configure service vprn bgp disable-fast-external-failover

Description

This command configures BGP fast external failover.

Platforms

All

disable-fast-external-failover

Syntax

[no] disable-fast-external-failover

Context

[Tree] (config>router>bgp>group>neighbor disable-fast-external-failover)

[Tree] (config>router>bgp disable-fast-external-failover)

[Tree] (config>router>bgp>group disable-fast-external-failover)

Full Context

configure router bgp group neighbor disable-fast-external-failover

configure router bgp disable-fast-external-failover

configure router bgp group disable-fast-external-failover

Description

This command configures BGP fast external failover.

Default

no disable-fast-external-failover

Platforms

All

disable-graceful-shutdown

disable-graceful-shutdown

Syntax

[no] disable-graceful-shutdown

Context

[Tree] (config>system>login-control>ssh disable-graceful-shutdown)

Full Context

configure system login-control ssh disable-graceful-shutdown

Description

This command enables graceful shutdown of SSH sessions.

The no form of this command disables graceful shutdown of SSH sessions.

Platforms

All

disable-ldp-sync

disable-ldp-sync

Syntax

[no] disable-ldp-sync

Context

[Tree] (config>router>isis disable-ldp-sync)

Full Context

configure router isis disable-ldp-sync

Description

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF or IS-IS routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default

no disable-ldp-sync

Platforms

All

disable-ldp-sync

Syntax

[no] disable-ldp-sync

Context

[Tree] (config>router>ospf disable-ldp-sync)

[Tree] (config>router>ospf3 disable-ldp-sync)

Full Context

configure router ospf disable-ldp-sync

configure router ospf3 disable-ldp-sync

Description

This command disables the IGP-LDP synchronization feature on all interfaces participating in the OSPF routing protocol. When this command is executed, IGP immediately advertises the actual value of the link cost for all interfaces which have the IGP-LDP synchronization enabled if the currently advertised cost is different. It will then disable IGP-LDP synchronization for all interfaces. This command does not delete the interface configuration. The no form of this command has to be entered to re-enable IGP-LDP synchronization for this routing protocol.

The no form of this command restores the default settings and re-enables IGP-LDP synchronization on all interfaces participating in the OSPF or IS-IS routing protocol and for which the ldp-sync-timer is configured.

Default

no disable-ldp-sync

Platforms

All

disable-learning

disable-learning

Syntax

[no] disable-learning

Context

[Tree] (config>service>vpls>spoke-sdp disable-learning)

[Tree] (config>service>vpls>sap disable-learning)

[Tree] (config>service>vpls>vxlan disable-learning)

[Tree] (config>service>vpls disable-learning)

[Tree] (config>service>template>vpls-template disable-learning)

Full Context

configure service vpls spoke-sdp disable-learning

configure service vpls sap disable-learning

configure service vpls vxlan disable-learning

configure service vpls disable-learning

configure service template vpls-template disable-learning

Description

This command disables learning of new MAC addresses in the VPLS forwarding database (FDB) for the service instance, SAP instance, spoke-SDP instance, or VXLAN instance.

When disable-learning is enabled, new source MAC addresses are not entered in the VPLS service forwarding database. This applies for both local and remote MAC addresses.

When no disable-learning is specified for a VPLS on a 7450 ESS, it is possible to disable learning for specific SAPs and/or spoke SDPs by entering the disable-learning command at the appropriate level.

When disable-learning is disabled, new source MAC addresses are learned and entered into the VPLS forwarding database.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default

no disable-learning

Normal MAC learning is enabled. The default mode for VXLAN instances is disable-learning.

Platforms

All

  • configure service template vpls-template disable-learning
  • configure service vpls disable-learning
  • configure service vpls spoke-sdp disable-learning
  • configure service vpls sap disable-learning

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service vpls vxlan disable-learning

disable-learning

Syntax

[no] disable-learning

Context

[Tree] (config>service>pw-template disable-learning)

Full Context

configure service pw-template disable-learning

Description

This command enables learning of new MAC addresses.

This parameter is mainly used in conjunction with the discard-unknown command.

The no form of this command enables learning of MAC addresses.

Default

no disable-learning (Normal MAC learning is enabled)

Platforms

All

disable-route-table-install

disable-route-table-install

Syntax

[no] disable-route-table-install

Context

[Tree] (config>router>bgp disable-route-table-install)

Full Context

configure router bgp disable-route-table-install

Description

This command disables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Configuring this command prevents the advertisement of all IPv4, label-ipv4, IPv6 and label-ipv6 routes if there is a change of the BGP next-hop to one of the router’s own addresses. Typically, this is only useful on a router that is a control-plane route reflector (not in the datapath).

The no form of the command enables the installation of all IPv4, label-ipv4, IPv6 and label-ipv6 routes into the route table and tunnel table associated with the BGP instance.

Default

no disable-route-table-install

Platforms

All

disable-route-table-install

Syntax

[no] disable-route-table-install

Context

[Tree] (config>router>policy-options>policy-statement>entry>action disable-route-table-install)

[Tree] (config>router>policy-options>policy-statement>default-action disable-route-table-install)

Full Context

configure router policy-options policy-statement entry action disable-route-table-install

configure router policy-options policy-statement default-action disable-route-table-install

Description

This command specifies that BGP routes (IPv4, IPv6, label-ipv4, label-ipv6) matching the policy entry (or, depending on the context, the policy’s default-action) should not be installed in the route table, tunnel table (in the case of label-ipv4 routes), or IP FIB table.

This policy action has an effect only in BGP peer import policies. This policy action does not prevent the matched routes from contributing toward aggregate routes and does not prevent the matched routes from being advertised, even if next-hop-self has been applied. This means that incorrect use of this feature can blackhole traffic.

Marking label-ipv4 routes with this action does not prevent label-swap (ILM) entries from being programmed when such routes are re-advertised with a new BGP next-hop and label.

The no form of this command provides the default behavior of installing routes that are selected as the best path, ECMP path or backup path, depending on the circumstances.

Default

no disable-route-table-install

Platforms

All

disable-router-alert-check

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>service>vprn>mld>group-interface disable-router-alert-check)

[Tree] (config>router>igmp>if disable-router-alert-check)

[Tree] (config>router>mld>group-interface disable-router-alert-check)

[Tree] (config>service>vprn>igmp>group-interface disable-router-alert-check)

[Tree] (config>router>igmp>group-interface disable-router-alert-check)

Full Context

configure service vprn mld group-interface disable-router-alert-check

configure router igmp interface disable-router-alert-check

configure router mld group-interface disable-router-alert-check

configure service vprn igmp group-interface disable-router-alert-check

configure router igmp group-interface disable-router-alert-check

Description

This command disables router alert checking for IGMP/MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn mld group-interface disable-router-alert-check
  • configure service vprn igmp group-interface disable-router-alert-check
  • configure router mld group-interface disable-router-alert-check
  • configure router igmp group-interface disable-router-alert-check

All

  • configure router igmp interface disable-router-alert-check

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>router>mld>if disable-router-alert-check)

Full Context

configure router mld interface disable-router-alert-check

Description

This command enables router alert checking for MLD messages received on this interface.

The no form of this command disables router alert checking.

Platforms

All

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>subscr-mgmt>igmp-policy disable-router-alert-check)

Full Context

configure subscriber-mgmt igmp-policy disable-router-alert-check

Description

This command disables router alert checking for IGMP messages received on this interface.

The no form of this command reverts to the default value.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)

Full Context

configure service vprn subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

Description

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>subscr-mgmt>mld-policy disable-router-alert-check)

Full Context

configure subscriber-mgmt mld-policy disable-router-alert-check

Description

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables router alert checking.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>service>vpls>sap>igmp-snooping disable-router-alert-check)

[Tree] (config>service>vpls>sap>igmp-host-tracking disable-router-alert-check)

[Tree] (config>service>vpls>sap>mld-snooping disable-router-alert-check)

[Tree] (config>service>vpls>spoke-sdp>mld-snooping disable-router-alert-check)

[Tree] (config>service>vpls>spoke-sdp>igmp-snooping disable-router-alert-check)

[Tree] (config>service>vpls>mesh-sdp>mld-snooping disable-router-alert-check)

[Tree] (config>service>vpls>mesh-sdp>igmp-snooping disable-router-alert-check)

Full Context

configure service vpls sap igmp-snooping disable-router-alert-check

configure service vpls sap igmp-host-tracking disable-router-alert-check

configure service vpls sap mld-snooping disable-router-alert-check

configure service vpls spoke-sdp mld-snooping disable-router-alert-check

configure service vpls spoke-sdp igmp-snooping disable-router-alert-check

configure service vpls mesh-sdp mld-snooping disable-router-alert-check

configure service vpls mesh-sdp igmp-snooping disable-router-alert-check

Description

This command disables the IGMP or MLD router alert check option.

The no form of this command enables the router alert check.

Default

no disable-router-alert-check

Platforms

All

  • configure service vpls sap mld-snooping disable-router-alert-check
  • configure service vpls mesh-sdp mld-snooping disable-router-alert-check
  • configure service vpls spoke-sdp mld-snooping disable-router-alert-check
  • configure service vpls sap igmp-snooping disable-router-alert-check
  • configure service vpls mesh-sdp igmp-snooping disable-router-alert-check
  • configure service vpls spoke-sdp igmp-snooping disable-router-alert-check

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vpls sap igmp-host-tracking disable-router-alert-check

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>service>ies>sub-if>grp-if>sap>igmp-host-tracking disable-router-alert-check)

[Tree] (config>service>vprn>igmp>if disable-router-alert-check)

Full Context

configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

configure service vprn igmp interface disable-router-alert-check

Description

This command disables the IGMP router alert check option.

The no form of this command enables the router alert check.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap igmp-host-tracking disable-router-alert-check

All

  • configure service vprn igmp interface disable-router-alert-check

disable-router-alert-check

Syntax

[no] disable-router-alert-check

Context

[Tree] (config>service>vprn>mld>if disable-router-alert-check)

Full Context

configure service vprn mld interface disable-router-alert-check

Description

This command disables router alert checking for MLD messages received on this interface.

The no form of this command enables the router alert checking.

Platforms

All

disable-selective-fib

disable-selective-fib

Syntax

[no] disable-selective-fib

Context

[Tree] (config>service>vprn disable-selective-fib)

Full Context

configure service vprn disable-selective-fib

Description

This command specifies whether the system level selective FIB setting is overridden on this instance.

The no form of this command enables the selective FIB.

Default

no disable-selective-fib

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

disable-selective-fib

Syntax

[no] disable-selective-fib

Context

[Tree] (config>router disable-selective-fib)

Full Context

configure router disable-selective-fib

Description

This command disables the selective FIB.

The no form of this command enables the selective FIB.

Default

no disable-selective-fib

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

disable-send-bvpls-evpn-flush

disable-send-bvpls-evpn-flush

Syntax

[no] disable-send-bvpls-evpn-flush

Context

[Tree] (config>service>vpls>sap disable-send-bvpls-evpn-flush)

[Tree] (config>service>vpls>spoke-sdp disable-send-bvpls-evpn-flush)

Full Context

configure service vpls sap disable-send-bvpls-evpn-flush

configure service vpls spoke-sdp disable-send-bvpls-evpn-flush

Description

This command disables the ISID-based C-MAC flush indication when the corresponding SAP or spoke-SDP enters the operationally down state.

If the send-bvpls-evpn-flush is properly enabled, the no version of the command enables B-MAC/ISID route updates to be sent when the SAP or spoke-SDP is operationally down.

Default

no disable-send-bvpls-evpn-flush

Platforms

All

disable-shcv

disable-shcv

Syntax

[no] disable-shcv [alarm] [hold-time seconds]

Context

[Tree] (config>subscr-mgmt>ancp>policy>port-dwn disable-shcv)

Full Context

configure subscriber-mgmt ancp ancp-policy port-down disable-shcv

Description

When this command is configured, the node suspends SHCV for the hosts defined with this ANCP policy until the access node sends a port-up message. When the hold-time parameter is used, the node suspends SHCV for the period of time defined. If the hold-time parameter is not defined the node will suspend SHCV until a port-up message is received.

If the optional alarm flag is used, the node sends a SHCV alarm before suspending.

The no form of this command reverts to the default.

Parameters

alarm

Specifies that the node sends an alarm before suspending SHCV.

seconds

Specifies the time that the node suspends SHCV.

Values

0 to 7200

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-soft-reset-extension

disable-soft-reset-extension

Syntax

[no] disable-soft-reset-extension

Context

[Tree] (config>lag>bfd disable-soft-reset-extension)

Full Context

configure lag bfd disable-soft-reset-extension

Description

This command disables the automatic extension of BFD timers during an IOM/IMM soft-reset. Normally, BFD session timers are automatically extended during a soft-reset operation on the IOMs and IMMs to avoid BFD sessions timing out and causing protocol events. However, in some cases this behavior is not desired as it could delay fast re-route transitions if the timers are in place. The disable-soft-reset-extension command controls this behavior.

Default

no disable-soft-reset-extension

Platforms

All

disable-stickiness

disable-stickiness

Syntax

[no] disable-stickiness

Context

[Tree] (config>aaa>radius-srv-plcy>servers disable-stickiness)

Full Context

configure aaa radius-server-policy servers disable-stickiness

Description

This command disables a subscriber RADIUS accounting session from sticking with a single server under normal working conditions. If a direct algorithm is used, all subscriber RADIUS sessions will go directly to the server with the lowest configured index. If a failure occurs, a new in-service server with the next lowest index is used. When the original server recovers, if stickiness is not disabled, all existing sessions will continue to use the new server. This command disables stickiness, and as a result, the recovered original RADIUS server will again service every subscriber. If a round-robin algorithm is used and stickiness is not disabled, an accounting session for a particular subscriber (or host, depending on the accounting mode) will stay with the same server. This command removes the stickiness and all subscriber accounting messages will go through the list of servers in a round-robin manner.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

disable-targeted-session

disable-targeted-session

Syntax

[no] disable-targeted-session

Context

[Tree] (config>router>ldp>targ-session disable-targeted-session)

Full Context

configure router ldp targeted-session disable-targeted-session

Description

This command disables support for SDP triggered automatic generated targeted sessions. Targeted sessions are LDP sessions between non-directly connected peers. The discovery messages for an indirect LDP session are addressed to the specified peer and not to the multicast address.

The no form of this command enables the set up of any targeted sessions.

Default

no disable-targeted-session

Platforms

All

disallow-igp

disallow-igp

Syntax

[no] disallow-igp

Context

[Tree] (config>router>static-route-entry>indirect>tunnel-next-hop disallow-igp)

Full Context

configure router static-route-entry indirect tunnel-next-hop disallow-igp

Description

This optional command determines if the associated static route can be resolved via an IGP next-hop in the RTM if no tunnel next-hops are found in TTM.

When configured, the associated static route will not be resolved to an available IGP route in the RTM.

The no form of this command returns the behavior to the default, which allows the static route to be resolved via an IGP route in the RTM if no tunnel next-hop can be found in the TTM.

Default

no disallow-igp

Platforms

All

discard

discard

Syntax

discard [now]

Context

[Tree] (candidate discard)

Full Context

candidate discard

Description

This command deletes the entire contents of the candidate configuration and exits the edit-cfg mode. Undo cannot be used to recover a candidate that has been discarded with candidate discard.

Parameters

now

Avoids a confirmation prompt for the discard.

Platforms

All

discard-changes

discard-changes

Syntax

[no] discard-changes

Context

[Tree] (configure>system>security>profile>netconf>base-op-authorization discard-changes)

Full Context

configure system security profile netconf base-op-authorization discard-changes

Description

This command enables the NETCONF discard-changes operation.

The no form of this command disables the operation.

Default

no discard-changes

Note:

The operation is enabled by default in the built-in system-generated administrative profile.

Platforms

All

discard-rx-pause-frames

discard-rx-pause-frames

Syntax

[no] discard-rx-pause-frames

Context

[Tree] (config>port>ethernet discard-rx-pause-frames)

Full Context

configure port ethernet discard-rx-pause-frames

Description

This command discards received pause frames. Pause frames are used for local link flow control.

The no form of this command processes pause frames upon reception and the transmit side of the receiving port pauses in its transmissions.

Default

no discard-rx-pause-frames

Platforms

All

discard-unknown

discard-unknown

Syntax

[no] discard-unknown

Context

[Tree] (config>service>template>vpls-template discard-unknown)

[Tree] (config>service>vpls discard-unknown)

Full Context

configure service template vpls-template discard-unknown

configure service vpls discard-unknown

Description

By default, packets with unknown destination MAC addresses are flooded. If discard-unknown is enabled at the VPLS level, packets with unknown destination MAC address will be dropped instead (even when configured FDB size limits for VPLS or SAP are not yet reached).

The no form of this command allows flooding of packets with unknown destination MAC addresses in the VPLS.

Default

no discard-unknown

Platforms

All

discard-unknown-source

discard-unknown-source

Syntax

[no] discard-unknown-source

Context

[Tree] (config>service>vpls>vxlan discard-unknown-source)

[Tree] (config>service>template>vpls-sap-template discard-unknown-source)

[Tree] (config>service>vpls>spoke-sdp discard-unknown-source)

[Tree] (config>service>vpls>sap discard-unknown-source)

[Tree] (config>service>template>vpls-template discard-unknown-source)

Full Context

configure service vpls vxlan discard-unknown-source

configure service template vpls-sap-template discard-unknown-source

configure service vpls spoke-sdp discard-unknown-source

configure service vpls sap discard-unknown-source

configure service template vpls-template discard-unknown-source

Description

When this command is enabled, packets received on a SAP, a spoke-SDP, or a static VXLAN instance with an unknown source MAC address will be dropped only if the maximum number of MAC addresses for that SAP or spoke-SDP (see max-nbr-mac-addr [config>service>vpls>sap max-nbr-mac-addr, config>service>vpls>spoke-sdp max-nbr-mac-addr]) has been reached. If max-nbr-mac-addr has not been set for the SAP or spoke-SDP, enabling discard-unknown-source has no effect.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses in VPLS.

Default

no discard-unknown-source

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service vpls vxlan discard-unknown-source

All

  • configure service vpls spoke-sdp discard-unknown-source
  • configure service vpls sap discard-unknown-source
  • configure service template vpls-sap-template discard-unknown-source
  • configure service template vpls-template discard-unknown-source

discard-unknown-source

Syntax

[no] discard-unknown-source

Context

[Tree] (config>service>pw-template discard-unknown-source)

Full Context

configure service pw-template discard-unknown-source

Description

When this command is enabled, packets received with an unknown source MAC address will be dropped only if the maximum number of MAC addresses have been reached.

When disabled, the packets are forwarded based on the destination MAC addresses.

The no form of this command causes packets with an unknown source MAC addresses to be forwarded by destination MAC addresses.

Default

no discard-unknown-source

Platforms

All

disconnect

disconnect

Syntax

disconnect [address ip-address | session-id session-id | username user-name | {console | bluetooth | telnet | ftp | ssh | netconf | grpc}]

Context

[Tree] (admin disconnect)

Full Context

admin disconnect

Description

This command disconnects a user from a session.

Issuing the disconnect command without any parameters will disconnect the session in which the command was executed.

If any of the session type options (for example, console, bluetooth, telnet, FTP, SSH) are specified, then only the respective sessions are affected.

If no session type options are specified, then all sessions from the IP address or from the specified user are disconnected.

Any task that the user is executing is terminated. FTP files accessed by the user will not be removed.

A major severity security log event is created specifying what was terminated and by whom.

Parameters

ip-address

Specifies the IP address to disconnect, specified in dotted decimal notation.

Note:

IPv6 is supported on the 7750 SR and 7950 XRS.

Values

ipv4-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

session-id

The model-driven session ID. Can be obtained using the show system management-interface datastore-locks [detail] command.

user-name

Specifies the name of the user. The name can be up to 32 characters.

console

Disconnects the console session.

bluetooth

Disconnects the bluetooth session.

telnet

Disconnects the Telnet session.

ftp

Disconnects the FTP session.

ssh

Disconnects the SSH session.

netconf

Disconnects the NETCONF session.

grpc

Disconnects the GRPC session.

Platforms

All

discover-delay

discover-delay

Syntax

discover-delay delay

no discover-delay

Context

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel discover-delay)

[Tree] (config>service>vprn>sub-if>dhcp>osel discover-delay)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel discover-delay)

Full Context

configure service vprn subscriber-interface group-interface dhcp offer-selection discover-delay

configure service vprn subscriber-interface dhcp offer-selection discover-delay

configure service ies subscriber-interface group-interface dhcp offer-selection discover-delay

Description

This command configures the default time to delay DHCP Discover messages. The delay is applied to all DHCP Discover messages for which no per DHCP server or per client MAC delay is configured.

The no form of this command removes the delay.

Parameters

delay

Specifies the default time to delay DHCP Discover messages, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discover-delay

Syntax

discover-delay delay

no discover-delay

Context

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>clnt-mac discover-delay)

[Tree] (config>service>vprn>sub-if>dhcp>osel>clnt-mac discover-delay)

Full Context

configure service vprn subscriber-interface group-interface dhcp offer-selection client-mac discover-delay

configure service ies subscriber-interface group-interface dhcp offer-selection client-mac discover-delay

configure service vprn subscriber-interface dhcp offer-selection client-mac discover-delay

Description

This command configures the amount of time to delay DHCP Discover messages from odd or even source MAC addresses.

The no form of this command removes the delay.

Parameters

delay

Specifies the amount of time to delay DHCP Discover messages from odd or even source MAC addresses, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discover-delay

Syntax

discover-delay delay

no discover-delay

Context

[Tree] (config>service>ies>sub-if>grp-if>dhcp>osel>srvr discover-delay)

[Tree] (config>service>vprn>sub-if>dhcp>osel>srvr discover-delay)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>osel>srvr discover-delay)

Full Context

configure service ies subscriber-interface group-interface dhcp offer-selection server discover-delay

configure service vprn subscriber-interface dhcp offer-selection server discover-delay

configure service vprn subscriber-interface group-interface dhcp offer-selection server discover-delay

Description

This command configures the amount of time to delay DHCP Discover messages relayed to the server.

The no form of this command removes the delay.

Parameters

delay

Specifies the amount of time to delay DHCP Discover messages relayed to the server, in deciseconds.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discovery

discovery

Syntax

discovery [padi] [pado] [padr] [pads] [padt]

no discovery

Context

[Tree] (debug>service>id>ppp>packet discovery)

Full Context

debug service id ppp packet discovery

Description

This command enables debugging for specific PPP discovery packets.

Parameters

padi

Enables debugging for PADI PPP discovery packets.

pado

Enables debugging for PADO PPP discovery packets.

padr

Enables debugging for PADR PPP discovery packets.

pads

Enables debugging for PADS PPP discovery packets.

padt

Enables debugging for PADT PPP discovery packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discovery

Syntax

discovery [padi] [pado] [padr] [pads] [ padt]

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id discovery)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id discovery

Description

This command, limits debugging only to the specified messages in the discovery phase.

Parameters

padi

Limits debugging only to padi messages.

pado

Limits debugging only to pado messages.

padr

Limits debugging only to padr messages.

pads

Limits debugging only to pads messages.

padt

Limits debugging only to padt messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

discovery

Syntax

discovery

Context

[Tree] (config>port>ethernet>efm-oam discovery)

Full Context

configure port ethernet efm-oam discovery

Description

This is the top level of the hierarchy containing various discovery parameters that allow the operator to control certain aspects of the negotiation process as well as what action to take when there is a mismatch in peer capabilities.

Platforms

All

discovery-interval

discovery-interval

Syntax

discovery-interval interval-secs [boot interval-secs]

no discovery-interval

Context

[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec discovery-interval)

Full Context

configure redundancy multi-chassis peer mc-ipsec discovery-interval

Description

This command specifies the time interval of tunnel-group stays in the Discovery state. Interval-1 is used as discovery-interval when a new tunnel-group is added to multi-chassis redundancy (mp-ipsec); interval-2 is used as discovery-interval when the system boots up, it is optional, when it is not specified, the interval-1 will be used.

Default

discovery-interval 300 boot 300

Parameters

interval-secs

Specifies the maximum duration, in seconds, of the discovery interval during which a newly activated multi- chassis IPsec tunnel-group will remain dormant while trying to contact its redundant peer. Groups held dormant in this manner will neither pass traffic nor negotiate security keys. This interval ends when either the redundant peer is contacted and a master election occurs, or when the maximum duration expires.

Values

1 to 1800

boot interval-secs

Specifies the maximum duration of an interval immediately following system startup. When the normal discovery interval for a group would expire while the post-boot discovery interval is still active, then the group's discovery interval is extended until the post-boot discovery interval expires. This allows an extension to the normal discovery stage of groups following a chassis reboot, to account for the larger variance in routing.

Values

1 to 1800

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

discovery-interval

Syntax

discovery-interval seconds

Context

[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-interval)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-interval

Description

This command configures the frequency at which IPv6 peer discovery packets are transmitted when the discovery-timer is active.

The no form of the command reverts to the default value.

Default

discovery-interval 10

Parameters

seconds

Specifies transmission frequency of the discovery packet.

Values

1 to 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

discovery-timer

discovery-timer

Syntax

discovery-timer seconds

Context

[Tree] (config>test-oam>link-meas>template>twl>ipv6-dest-disc discovery-timer)

Full Context

configure test-oam link-measurement measurement-template twamp-light ipv6-destination-discovery discovery-timer

Description

This command configures the amount of time to transmit peer discovery packets at the discovery-interval. The timer starts when the IPv6 protocols is enabled under the config>router>if>if-attribute>delay>dynamic> twamp-light>ipv6 context. At the expiration of the discovery-interval or when a peer is discovered, the probe interval changes to the value configured for the update-interval.

The no form of the command reverts to the default value.

Default

discovery-interval 60

Parameters

seconds

Specifies transmission frequency of the discovery packet.

Values

1 to 1800

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

discriminator

discriminator

Syntax

discriminator discriminator

no discriminator

Context

[Tree] (config>bfd>seamless-bfd>reflector discriminator)

Full Context

configure bfd seamless-bfd reflector discriminator

Description

This command specifies the S-BFD discriminator.

The no form of this command removes the discriminator.

Parameters

discriminator

Specifies the discriminator value.

Values

524288 to 526335

Platforms

All

discriminator

Syntax

discriminator discriminator

no discriminator

Context

[Tree] (config>router>bfd>seamless-bfd>peer discriminator)

Full Context

configure router bfd seamless-bfd peer discriminator

Description

This command specifies the seamless BFD reflector discriminator for the remote peer node in the mapping table used by seamless BFD sessions initiated on the router.

The no form of this command removes the discriminator.

Parameters

discriminator

Specifies the discriminator of the remote node.

Values

1 to 4294967295

Platforms

All

disjointness-reference

disjointness-reference

Syntax

[no] disjointness-reference

Context

[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-reference)

Full Context

configure router pcep pcc pce-associations diversity disjointness-reference

Description

This command configures the value conveyed in the P-flag of the DISJOINTNESS-CONFIGURATION TLV. When enabled, it indicates that this LSP path is the reference path for the disjoint set of paths. The PCE must first compute the path of this LSP and then apply the requested disjointness type to compute the path of all other paths in the same diversity association ID.

The no form of this command sets the P-flag to false.

Default

P-flag to false

Platforms

All

disjointness-type

disjointness-type

Syntax

disjointness-type {loose | strict}

no disjointness-type

Context

[Tree] (config>router>pcep>pcc>pce-assoc>div disjointness-type)

Full Context

configure router pcep pcc pce-associations diversity disjointness-type

Description

This command configures the disjointness type for the association group.

The no form of this command reverts to the default value.

Default

disjointness-type loose

Parameters

loose

Keyword to specify the loose disjointness type.

strict

Keyword to specify the strict disjointness type.

Platforms

All

dispersion

dispersion

Syntax

dispersion dispersion

Context

[Tree] (config>port>dwdm>coherent dispersion)

Full Context

configure port dwdm coherent dispersion

Description

This command configures the residual chromatic dispersion to be compensated when the coherent receiver is operating in manual dispersion control mode.

Default

0

Parameters

dispersion

Specifies the dispersion compensation.

Values

-50000 to 50000

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

display

display

Syntax

display type {type} url-string format {format} [password [32 chars max]]

Context

[Tree] (admin>certificate display)

Full Context

admin certificate display

Description

This command displays the content of an input file in plain text.

Note:

When displaying the key file content, only the key size and type are displayed.

The following list summarizes the formats supported by this command:

  • System

    • system format

    • PKCS #12

    • PKCS #7 PEM encoded

    • PKCS #7 DER encoded

    • RFC4945

  • Certificate Request

    • PKCS #10

  • Key

    • system format

    • PKCS #12

  • CRL

    • system format

    • PKCS #7 PEM encoded

    • PKCS #7 DER encoded

    • RFC4945

Parameters

url-string

Specifies the local CF card url of the input file.

Values

url-string

<local-url> [up to 99 characters]

local-url

<cflash-id>/<file-path>

cflash-id

cf1: | cf2: | cf3:

type

Specifies the type of input file.

Values

cert, key, crl, cert-request

format

Specifies the format of input file.

Values

pkcs10, pkcs12, pkcs7-der, pkcs7-pem, pem, der

password

Specifies the password to decrypt the input file in case that it is an encrypted PKCS#12 file, up to 99 characters.

Platforms

All

display-config

display-config

Syntax

display-config [detail | index]

Context

[Tree] (admin display-config)

Full Context

admin display-config

Description

This command displays the system’s running configuration.

By default, only non-default settings are displayed.

Specifying the detail option displays all default and non-default configuration parameters.

Parameters

detail

Displays default and non-default configuration parameters.

index

Displays only persistent-indices.

Platforms

All

display-key

display-key

Syntax

display-key type {ike | esp} gateway name name dynamic-tunnel ip-address: port

display-key type {ike | esp} tunnel ipsec-tunnel-name

Context

[Tree] (admin>ipsec display-key)

Full Context

admin ipsec display-key

Description

This command displays existing IKE-SA or CHILD-SA keys..

Note:

This command does not work if config>ipsec>no show-ipsec-keys or no max-history-{esp|ike}-key-records is configured under corresponding ipsec-gw or ipsec-tunnel.

Parameters

name

The name, up to 32 characters.

ip-address

The IP address of the remote client.

Values

<ip-address>

ip-address

a.b.c.d

ipv6-address

x:x:x:x:x:x:x:x

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

port

The port of the remote client.

Values

0 to 65535

ipsec-tunnel-name

The IPsec tunnel name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Output

The following outputs are examples of the admin ipsec display-key command.

Sample Output
admin ipsec display-key type ike gateway name "rw" dynamic-tunnel 11.1.1.100:500  
===============================================================================
IKE-SA history: max-num-records 3 current-num-saved-records 1
                local: 172.16.100.1 remote: 11.1.1.100 
record [0]: established time: 01/25/2018 20:51:55
  Initiator-SPI: d67ac71d73656496 Responder-SPI: d67ac71d73656496  Ike Version: 2
  SK_er: aes128, len: 16, val: a5da1c57f09a7eb7dbe9526cd52e2189
  SK_ar: sha1, len: 20, val: c11797bb8ebe5a1fadf46363bf5e763552bb45d0
  SK_ei: aes128, len: 16, val: 467124009cc577a8b23882a81ab9df70
  SK_ai: sha1, len: 20, val: 7dfef89bad31cb72d1ca8da2c04a9521993c7f9
Sample Output
admin ipsec display-key type esp gateway name "rw" dynamic-tunnel 11.1.1.100:500                              
ESP-SA history: max-num-records 48 current-num-saved-records 2ynamic-tunnel 11.1.1.100:500 
                local: 172.16.100.1 remote: 11.1.1.100 
record [0]: established time: 01/25/2018 20:54:56
  InSpi:  154532(0x00025ba4)
          encr-alg: aes128 len: 16 val: 0xd26aa32d8bd328b1e8332fa5c7b5eeaa
          auth-alg: sha1 len: 20 val: 0x0b37ddb824a43921d3b0ee81a6910eed065a9845
  OutSpi: 3286259439(0xc3e056ef)
          encr-alg: aes128 len: 16 val: 0x3acd95376ce04fcded2e0c80cc4289cf
          alg: sha1 len: 20 val: 0x9f5a46b5cdc572972b44cdbd36b5f824ab060634
record [1]: established time: 01/25/2018 20:51:55
  InSpi:  261186(0x0003fc42)
          encr-alg: aes128 len: 16 val: 0x8bf97675d37de3e3f6e634e3e11fc3aa
          auth-alg: sha1 len: 20 val: 0xf10c0f0821488cc14f8715cc323441fc967a79dd
  OutSpi: 3246917342(0xc18806de)
          encr-alg: aes128 len: 16 val: 0xf36aaaa7a3a09734fe4fc6cd0ac9043e
          alg: sha1 len: 20 val: 0x40c13a444e4fb1d42a13812f70b17041ed0f56ee

dist-cpu-protection

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap dist-cpu-protection)

[Tree] (config>subscr-mgmt>msap-policy dist-cpu-protection)

Full Context

configure service vprn subscriber-interface group-interface sap dist-cpu-protection

configure subscriber-mgmt msap-policy dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to an MSAP policy. The DCP policy is automatically assigned to MSAPs created with this policy. A non-existent DCP policy can be assigned to an msap-policy because an MSAP policy is similar to a template that is applied in the MSAP creation. The DCP policy is validated at the time that the MSAP is created, and the MSAP creation is blocked (and an appropriate log event created) if the DCP policy does not exist.

Note:

For other types of objects (for example, normal non-MSAP SAPs and network interfaces) the DCP policy must exist before it can be assigned to the SAP.

The no form of this command removes the policy name from the configuration.

If no dist-cpu-protection policy is assigned to an MSAP policy, then the default access DCP policy (_default-access-policy) is used.

If no DCP functionality is required on the MSAP policy, then an empty DCP policy can be created and explicitly assigned to the MSAP policy.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>subscr-mgmt>sap-template dist-cpu-protection)

Full Context

configure subscriber-mgmt sap-template dist-cpu-protection

Description

This command assigns a DCP policy to a SAP template. The policy is automatically assigned to SAPs that are autocreated with this SAP template. The dist-cpu-protection policy must exit before it is assigned to a SAP template.

The no form of this command removes the policy name from the configuration.

If a DCP policy is not assigned to an SAP template, the default access DCP policy (_defaultaccess-policy) is used.

If no DCP functionality is required on the autocreated SAPs, an empty DCP policy can be created and explicitly assigned to the SAP template.

Default

no dist-cpu-protection

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>epipe>sap dist-cpu-protection)

[Tree] (config>service>ipipe>sap dist-cpu-protection)

[Tree] (config>service>cpipe>sap dist-cpu-protection)

Full Context

configure service epipe sap dist-cpu-protection

configure service ipipe sap dist-cpu-protection

configure service cpipe sap dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).

If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used.

If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

  • configure service ipipe sap dist-cpu-protection
  • configure service epipe sap dist-cpu-protection

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap dist-cpu-protection

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>vpls>sap dist-cpu-protection)

Full Context

configure service vpls sap dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid existing DCP policy can be assigned to a SAP or a network interface (this rule does not apply to templates, such as an msap-policy template).

Default

If no dist-cpu-protection policy is assigned to a SAP, then the default access DCP policy (_default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>ies>if>sap dist-cpu-protection)

[Tree] (config>service>ies>sub-if>grp-if>sap dist-cpu-protection)

Full Context

configure service ies interface sap dist-cpu-protection

configure service ies subscriber-interface group-interface sap dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid DCP policy can be assigned to a SAP or a network interface. This rule does not apply to templates such as an msap-policy.

Default

If no dist-cpu-protection policy is assigned to an SAP, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP, then an empty DCP policy can be created and explicitly assigned to the SAP policy.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

  • configure service ies interface sap dist-cpu-protection

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies subscriber-interface group-interface sap dist-cpu-protection

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>vprn>nw-if dist-cpu-protection)

Full Context

configure service vprn network-interface dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the network interface. Only a valid created DCP policy can be assigned to a network interface (this rule does not apply to templates such as an msap-policy).

Default

If no dist-cpu-protection policy is assigned to the VPRN network interface, then the default network DCP policy (_default-network-policy) is used.

If no DCP functionality is required on the VPRN network interface then an empty DCP policy can be created and explicitly assigned to the VPRN network interface.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>service>vprn>if>sap dist-cpu-protection)

Full Context

configure service vprn interface sap dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (This rule does not apply to templates such as an msap-policy).

Default

If no dist-cpu-protection policy is assigned to an SAP policy, then the default access DCP policy (default-access-policy) is used. If no DCP functionality is required on the SAP policy, then an empty DCP policy can be created and explicitly assigned to the SAP policy.

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

dist-cpu-protection

Syntax

dist-cpu-protection policy-name

no dist-cpu-protection

Context

[Tree] (config>router>if dist-cpu-protection)

Full Context

configure router interface dist-cpu-protection

Description

This command assigns a Distributed CPU Protection (DCP) policy to the SAP. Only a valid created DCP policy can be assigned to a SAP or a network interface (note that this rule does not apply to templates such as an msap-policy).

If the user does not assign a DCP policy to a router interface, the system uses the default network DCP policy.

Default

no dist-cpu-protection

Parameters

policy-name

Specifies the name of the DCP policy, up to 32 characters in length

Platforms

All

dist-cpu-protection

Syntax

dist-cpu-protection

Context

[Tree] (config>system>security dist-cpu-protection)

Full Context

configure system security dist-cpu-protection

Description

Commands in this context configure the Distributed CPU Protection (DCP) feature.

Platforms

All

dist-lag-rate-shared

dist-lag-rate-shared

Syntax

[no] dist-lag-rate-shared

Context

[Tree] (config>qos>port-scheduler-policy dist-lag-rate-shared)

Full Context

configure qos port-scheduler-policy dist-lag-rate-shared

Description

This command enables sharing of rates when the port on which this port-scheduler-policy is configured is part of a LAG configured in distribute mode.

When enabled, the absolute rate values configured as part of the max-rate, PIR/CIR group rates and PIR/CIR level rates are shared across the member ports of the LAG when configured in distribute mode.

This command does not have any effect when the port on which this port-scheduler-policy is configured is part of a LAG in link or port-fair mode. Similarly, when rates are configured as a percent-rate, this parameter is ignored.

Platforms

All

distinguisher

distinguisher

Syntax

distinguisher id

no distinguisher

Context

[Tree] (conf>router>segment-routing>sr-policies>policy distinguisher)

Full Context

configure router segment-routing sr-policies static-policy distinguisher

Description

This command associates a distinguisher value with a statically defined segment routing policy. This is a mandatory parameter and configuration command for non-local segment routing policies (for which the head-end parameter is set to a value other than "local”). Every non-local segment routing policy must have a unique distinguisher value. When a non-local static segment routing policy is imported into BGP and originated as a BGP route, the configured distinguisher value is copied into the NLRI of the route.

The no form of this command removes the distinguisher association.

Default

no distinguisher

Parameters

id

Specifies the distinguisher ID.

Values

1 to 4294967295

Platforms

All

distinguisher

Syntax

distinguisher distinguisher-id

no distinguisher

Context

[Tree] (config>router>policy-options>policy-statement>entry>from distinguisher)

Full Context

configure router policy-options policy-statement entry from distinguisher

Description

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

The no form of this command removes the distinguisher ID match criterion from the configuration.

Parameters

distinguisher-id

Specifies the SR policy distinguisher ID.

Values

0 to 4294967295

Platforms

All

distributed-sub-mgmt

distributed-sub-mgmt

Syntax

distributed-sub-mgmt

Context

[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)

Full Context

configure service vprn wlan-gw distributed-sub-mgmt

Description

Commands in this context configure Distributed Subscriber Management (DSM) for soft GRE group interface and for ranges of IEEE 802.1q VLAN tags in soft GRE group interfaces.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax

distributed-sub-mgmt

Context

[Tree] (config>subscr-mgmt>wlan-gw distributed-sub-mgmt)

[Tree] (config>service>vprn>wlan-gw distributed-sub-mgmt)

[Tree] (config>router>wlan-gw distributed-sub-mgmt)

Full Context

configure subscriber-mgmt wlan-gw distributed-sub-mgmt

configure service vprn wlan-gw distributed-sub-mgmt

configure router wlan-gw distributed-sub-mgmt

Description

Commands in this context configure profiles, templates and policies that can be applied to DSM subscribers.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax

[no] distributed-sub-mgmt

Context

[Tree] (config>isa>wlan-gw-group distributed-sub-mgmt)

Full Context

configure isa wlan-gw-group distributed-sub-mgmt

Description

This command configures the WLAN gateway distributed subscriber management.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

distributed-sub-mgmt

Syntax

distributed-sub-mgmt

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range distributed-sub-mgmt)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt

Description

Commands in this context configure distributed-sub-mgmt configuration per vlan-range. This also includes vlan-range default, which makes this configuration applicable to the wlan-gw group-interface.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

diversity

diversity

Syntax

[no] diversity association-name

Context

[Tree] (config>router>pcep>pcc>pce-assoc diversity)

Full Context

configure router pcep pcc pce-associations diversity

Description

This command creates a named diversity association from which the parameters for the specified diversity association are configured.

The no form of the command deletes the specified diversity association.

Parameters

association-name

Specifies the name of the diversity association, up to 32 characters.

Platforms

All

diversity

Syntax

[no] diversity diversity-assoc-name

Context

[Tree] (config>router>mpls>lsp-template>pce-assoc diversity)

[Tree] (config>router>mpls>lsp>pce-assoc diversity)

Full Context

configure router mpls lsp-template pce-associations diversity

configure router mpls lsp pce-associations diversity

Description

This command binds the LSP to a named diversity association. The diversity association must exist under the PCC. Up to five diversity associations can be configured per LSP.

The no form of the command removes the LSP binding from the specified diversity association.

Parameters

diversity-assoc-name

Specifies the name of an existing diversity association, up to 32 characters.

Platforms

All

diversity-type

diversity-type

Syntax

diversity-type {link | node | srlg-link | srlg-node}

no diversity-type

Context

[Tree] (config>router>pcep>pcc>pce-assoc>div diversity-type)

Full Context

configure router pcep pcc pce-associations diversity diversity-type

Description

This command configures the diversity type for the association group. This command is mandatory. If the command is not configured, the system does not validate the association configuration.

The no form of the command reverts to the default value.

Default

no diversity-type

Parameters

link

Keyword to specify the link diversity type.

node

Keyword to specify the node diversity type.

srlg-link

Keyword to specify the SRLG-link diversity type.

srlg-node

Keyword to specify the SRLG-node diversity type.

Platforms

All

divert

divert

Syntax

[no] divert

Context

[Tree] (config>app-assure>group>policy>app-profile divert)

Full Context

configure application-assurance group policy app-profile divert

Description

This command enables the redirection of traffic to AA ISA for the system-wide forwarding classes diverted to application assurance (divert-fc) for AA subscribers using this application profile.

The no form of this command stops redirect of traffic to AA ISAs for the AA subscribers using this application profile.

Default

no divert

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

divert-fc

divert-fc

Syntax

[no] divert-fc fc-name

Context

[Tree] (config>isa>aa-grp divert-fc)

Full Context

configure isa application-assurance-group divert-fc

Description

This command selects a forwarding class in the system to be diverted to an application assurance engine for this application assurance group. Only traffic to/from subscribers with application assurance enabled is diverted.

To divert multiple forwarding classes, the command needs to be executed multiple times specifying each forwarding class to be diverted at a time.

The no form of this command stops diverting of the traffic to an application assurance engine for this application assurance group.

Parameters

fc-name

Creates a class instance of the forwarding class fc-name.

Values

be, l2, af, l1, h2, ef, h1, nc

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dm

dm

Syntax

dm [test-id test-id] [create]

no dm

Context

[Tree] (config>oam-pm>session>mpls dm)

Full Context

configure oam-pm session mpls dm

Description

This command assigns an identifier to the DM test and creates the individual test.

The no form of this command removes the DM test function from the OAM-PM session.

Parameters

test-id

Specifies the value of the 26-bit test identifier sent as session identifier in the DM PDU.

Values

0 to 67108863

create

Creates the DM test. The create keyword requirement can be enabled/disabled in the environment>create context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dmm

dmm

Syntax

dmm [test-id test-id] [create]

no dmm

Context

[Tree] (config>oam-pm>session>ethernet dmm)

Full Context

configure oam-pm session ethernet dmm

Description

This command defines the test ID to be assigned to the delay test and creates the container to allow the individual test parameters to be configured.

The no form of this command removes the DMM test function from the PM Session.

Parameters

test-id

Specifies the value to be placed in the 4-byte test ID field of an ETH-DMM PDU.

Values

0 to 2147483647

create

Creates the test.

Platforms

All

dmr-prefix

dmr-prefix

Syntax

dmr-prefix dmr-prefix

no dmr-prefix

Context

[Tree] (config>service>nat>map-domain dmr-prefix)

Full Context

configure service nat map-domain dmr-prefix

Description

This command configures the IPv6 prefix of the BR (dmr-prefix), which is used as a default MAP rule (route) in the CEs. Each MAP domain in the VSR has a unique dmr-prefix.

Parameters

dmr-prefix

Specifies the IPv6 prefix associated with a MAP domain in the BR. The prefix represents a dmr-rule in the CE.

Values

<ipv6-prefix/prefix-length> :

ipv6-prefix —— x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x—[0 to FFFF]H

d—[0 to 255]D

prefix-length—[0 to 96]

Platforms

VSR

dnat

dnat

Syntax

[no] dnat

Context

[Tree] (config>service>nat>nat-policy dnat)

Full Context

configure service nat nat-policy dnat

Description

This command defines context for destination NAT (DNAT) specific configuration under the nat-policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dnat-only

dnat-only

Syntax

dnat-only router router-instance nat-group nat-group-id

no dnat-only

Context

[Tree] (config>service>nat>nat-policy>dnat dnat-only)

Full Context

configure service nat nat-policy dnat dnat-only

Description

This command configures outside routing context and nat-group in which DNAT translation shout take place. This command is mutually exclusive with the pool command in nat-policy. When DNAT-only is enabled, no source and port NAT (SNAPT) is performed. In other words, only the destination IP address (going from inside to outside) is translated while the source IP address and port are not translated.

Parameters

router router-instance

Specifies the routing context on the outside (public side).

nat-group nat-group-id

Specifies the NAT group IP.

Values

1 to 4

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dnat-only

Syntax

dnat-only

Context

[Tree] (config>router>nat>inside dnat-only)

[Tree] (config>service>vprn>nat>outside dnat-only)

[Tree] (config>service>vprn>nat>inside dnat-only)

[Tree] (config>router>nat>outside dnat-only)

Full Context

configure router nat inside dnat-only

configure service vprn nat outside dnat-only

configure service vprn nat inside dnat-only

configure router nat outside dnat-only

Description

Commands in this context configure the dnat-only parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns

dns

Syntax

[no] dns

Context

[Tree] (config>service>vprn dns)

Full Context

configure service vprn dns

Description

Commands in this context configure domain name servers.

The no form of this command disables DNS for this service.

Platforms

All

dns

Syntax

dns target-addr dns-name name-server ip-address [source ip-address] [count send-count] [timeout timeout] [interval interval] [record-type {ipv4-a-record | ipv6-aaaa-record}] [router-instance router-instance]

Context

[Tree] (oam dns)

[Tree] (config>saa>test>type dns)

Full Context

oam dns

configure saa test type dns

Description

This command performs DNS name resolution. If ipv4-a-record is specified, DNS target addresses are queried for A records only. If ipv6-aaaa-record is specified, AAAA records are queried first, and if a successful response is not received, the DNS server is queried for A records (applies to the 7750 SR and 7950 XRS).

Parameters

dns-name

Specifies the DNS domain name, up to 255 characters.

interval

Specifies the time, in seconds, used to override the default request message send interval and defines the minimum amount of time that must expire before the next message request is sent.

If the interval is set to 1 second, and the timeout value is set to 10 seconds, then the maximum time between message requests is 10 seconds and the minimum is 1 second. This depends upon the receipt of a message response corresponding to the outstanding message request.

Values

1 to 10

Default

1

ip-address

Specifies the IP address of the primary DNS server.

ipv4-address:

a.b.c.d

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

0 to FFFF]H

d:

[0 to 255]D

record-type

Specifies a record type (applies to the 7750 SR and 7950 XRS only).

Values

ipv4-a-record — A record-specific mapping of a host name to an IPv4 address.

ipv6-aaaa-record — A record-specific mapping to the Internet class that stores a single IPv6 address.

send-count

Specifies the number of messages to send. The send-count parameter overrides the default number of message requests sent. Each message request must either time out or receive a reply before the next message request is sent. The message interval value must have expired before the next message request is sent.

Values

1 to 100

Default

1

timeout

Specifies the time, in seconds, to override the default timeout value and is the amount of time that the router waits for a message response after sending the message request. Upon the expiration of the message time out, the requesting router assumes that the message response is not received. Any response received after the request times out is silently discarded.

Values

1 to 120

Default

5

router-instance

Specifies the preferred method to enter a service name or routing instance from which to launch the DNS query. This value is stored as the service name. This is the only service-linking function allowed for both mixed-mode and model-driven configuration modes.

Values

router-name

Base

Specifies a base routing instance

management

Specifies a management routing instance

_Base_and_management

Specifies a base routing instance and a management routing instance: if no response is received from the base, a management routing instance is used.

vprn-svc-name

Specifies a service name, up to 64 characters

Default

_Base_and_management

Platforms

All

dns

Syntax

dns

Context

[Tree] (config>router dns)

Full Context

configure router dns

Description

This command configures the DNS.

Default

dns

Platforms

All

dns

Syntax

dns

Context

[Tree] (config>system dns)

Full Context

configure system dns

Description

This command configures DNS settings.

Platforms

All

dns-domain

dns-domain

Syntax

dns-domain dns-name

no dns-domain

Context

[Tree] (bof dns-domain)

Full Context

bof dns-domain

Description

This command configures the domain name used when performing DNS address resolution. This is a required parameter if DNS address resolution is required. Only a single domain name can be configured. If multiple domain statements are configured, the last one encountered is used.

The no form of this command removes the domain name from the configuration.

Default

no dns-domain

Parameters

dns-name

Specifies the DNS domain name, up to 178 characters.

Platforms

All

dns-ip-cache

dns-ip-cache

Syntax

dns-ip-cache dns-ip-cache-name [create]

no dns-ip-cache dns-ip-cache-name

Context

[Tree] (config>app-assure>group dns-ip-cache)

Full Context

configure application-assurance group dns-ip-cache

Description

This command configures a DNS IP cache used to snoop DNS requests generated by subscribers to populate a cache of IP addresses matching a specified list of domain names. In the context of URL content charging strengthening, it is also mandatory to specify a list of trusted DNS servers to populate the DNS IP cache.

Parameters

dns-ip-cache-name

Specifies the Application Assurance DNS IP cache name, up to 32 characters.

create

Specifies a keyword used to create the DNS IP cache.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-ip-cache

Syntax

dns-ip-cache dns-ip-cache-name

Context

[Tree] (config>app-assure>group>sess-fltr>entry>match dns-ip-cache)

Full Context

configure application-assurance group session-filter entry match dns-ip-cache

Description

This command configures a DNS IP cache using session filter DST IP match criteria. It is typically combine with an allow action in the context of captive-redirect.

Parameters

dns-ip-cache-name

Specifies the name of the DNS IP cache name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-match

dns-match

Syntax

dns-match

Context

[Tree] (config>app-assure>group>dns-ip-cache dns-match)

Full Context

configure application-assurance group dns-ip-cache dns-match

Description

Commands in this context configure match parameters in the DNS IP cache.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dns-options

dns-options

Syntax

[no] dns-options

Context

[Tree] (config>subscr-mgmt>rtr-adv-plcy dns-options)

Full Context

configure subscriber-mgmt router-advertisement-policy dns-options

Description

Commands in this context configure IPv6 DNS options for SLAAC hosts.

The no form of this command returns the command to the default setting.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dns-options

Syntax

[no] dns-options

Context

[Tree] (config>service>ies>sub-if>ipv6>rtr-adv dns-options)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>rtr-adv dns-options)

[Tree] (config>service>vprn>router-advert>if dns-options)

[Tree] (config>service>vprn>sub-if>ipv6>rtr-adv dns-options)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>rtr-adv dns-options)

[Tree] (config>service>vprn>router-advert dns-options)

Full Context

configure service ies subscriber-interface ipv6 router-advertisements dns-options

configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options

configure service vprn router-advertisement interface dns-options

configure service vprn subscriber-interface ipv6 router-advertisements dns-options

configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options

configure service vprn router-advertisement dns-options

Description

Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>service>vprn>router-advert>if>dns-options>include-dns command.

The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn subscriber-interface ipv6 router-advertisements dns-options
  • configure service vprn subscriber-interface group-interface ipv6 router-advertisements dns-options
  • configure service ies subscriber-interface group-interface ipv6 router-advertisements dns-options
  • configure service ies subscriber-interface ipv6 router-advertisements dns-options

All

  • configure service vprn router-advertisement dns-options
  • configure service vprn router-advertisement interface dns-options

dns-options

Syntax

[no] dns-options

Context

[Tree] (config>router>router-advert dns-options)

[Tree] (config>router>router-advert>if dns-options)

Full Context

configure router router-advertisement dns-options

configure router router-advertisement interface dns-options

Description

Commands in this context configure DNS information for Stateless Address Auto-Configuration (SLAAC) hosts. When specified at the router-advertisement level in the routing context, this command allows configuration of service-wide parameters. These can then be inherited at the interface level by specifying the config>router>router-advert>if>dns-options>include-dns command.

The no form of this command disables configuration of DNS information for Stateless Address Auto-Configuration (SLAAC) hosts.

Platforms

All

dns-server

dns-server

Syntax

dns-server ip-address [ip-address]

no dns-server

Context

[Tree] (config>router>dhcp>server>pool>options dns-server)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options dns-server)

[Tree] (config>service>vprn>dhcp>server>pool>options dns-server)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options dns-server)

Full Context

configure router dhcp local-dhcp-server pool options dns-server

configure subscriber-mgmt local-user-db ipoe host options dns-server

configure service vprn dhcp local-dhcp-server pool options dns-server

configure subscriber-mgmt local-user-db ppp host options dns-server

Description

This command configures the IPv4 address of the DNS server.

The no form of this command removes the IPv4 address of the DNS server from the configuration.

Parameters

ip-address

Specifies up to four DNS server IP addresses.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dns-server

Syntax

dns-server ipv6-address [ipv6-address]

no dns-server

Context

[Tree] (config>router>dhcp6>server>pool>options dns-server)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>options6 dns-server)

[Tree] (config>router>dhcp6>server>defaults>options dns-server)

[Tree] (config>router>dhcp6>server>pool>prefix>options dns-server)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options6 dns-server)

[Tree] (config>service>vprn>dhcp6>server>pool>options dns-server)

[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options dns-server)

[Tree] (config>service>vprn>dhcp6>server>defaults>options dns-server)

Full Context

configure router dhcp6 local-dhcp-server pool options dns-server

configure subscriber-mgmt local-user-db ppp host options6 dns-server

configure router dhcp6 local-dhcp-server defaults options dns-server

configure router dhcp6 local-dhcp-server pool prefix options dns-server

configure subscriber-mgmt local-user-db ipoe host options6 dns-server

configure service vprn dhcp6 local-dhcp-server pool options dns-server

configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server

configure service vprn dhcp6 local-dhcp-server defaults options dns-server

Description

This command configures IPv6 DNS server addresses that can be used for name resolution.

The no form of this command removes the IPv6 address of the DNS server from the configuration.

Parameters

ipv6-address

Specifies up to four IPv6 DNS server addresses.

Values

ipv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure subscriber-mgmt local-user-db ipoe host options6 dns-server
  • configure service vprn dhcp6 local-dhcp-server pool prefix options dns-server
  • configure subscriber-mgmt local-user-db ppp host options6 dns-server
  • configure router dhcp6 local-dhcp-server pool options dns-server
  • configure router dhcp6 local-dhcp-server pool prefix options dns-server
  • configure service vprn dhcp6 local-dhcp-server pool options dns-server

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure router dhcp6 local-dhcp-server defaults options dns-server
  • configure service vprn dhcp6 local-dhcp-server defaults options dns-server

dns-server

Syntax

dns-server ip-address

no dns-server

Context

[Tree] (config>app-assure>group>url-filter>web-service dns-server)

Full Context

configure application-assurance group url-filter web-service dns-server

Description

This command configures the DNS server that is used to resolve the web service host name.

The no form of this command removes the DNS server configuration.

Default

no dns-server

Parameters

ip-address

Specifies the IP address of the DNS server to use.

Values

a.b.c.d[/mask] (IPv4),

x:x:x:x:x:x:x:x/prefix-length (IPv6)

x:x:x:x:x:x:d.d.d.d

x - [0..FFFF] H

d - [0..255] D

prefix-length [0..128]

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dnssec

dnssec

Syntax

dnssec

Context

[Tree] (config>system>dns dnssec)

Full Context

configure system dns dnssec

Description

This command configures system Domain Name System Security Extensions (DNSSEC) settings.

Platforms

All

do-not-fragment

do-not-fragment

Syntax

[no] do-not-fragment

Context

[Tree] (config>oam-pm>session>ip do-not-fragment)

Full Context

configure oam-pm session ip do-not-fragment

Description

This command configures the Do Not Fragment (DF) bit in the IPv4 header of the TWAMP Light test packet in order to prevent packet fragmentation. This is only applicable to IPv4. IPv6 does not include the bit as part of the specification. This parameter is ignored but not blocked when the address is IPv6.

The no form of this command allows packet fragmentation.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dod-label-distribution

dod-label-distribution

Syntax

[no] dod-label-distribution

Context

[Tree] (config>router>ldp>session-params>peer dod-label-distribution)

Full Context

configure router ldp session-parameters peer dod-label-distribution

Description

This command enables the use of the LDP Downstream-on-Demand (DoD) label distribution procedures.

When this option is enabled, LDP will set the A-bit in the Label Initialization message when the LDP session to the peer is established. When both peers set the A-bit, they will both use the DoD label distribution method over the LDP session (RFC 5036).

This feature can only be enabled on a link-level LDP session and therefore will apply to prefix labels only, not service labels.

As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.

Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router will immediately send a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages.

However, the router will not advertise any <FEC, label> bindings, including the FEC of its own LSR-id, unless the DoD peer requested it using a Label Request Message.

When the DoD peer sends a label request for any FEC prefix, the router will reply with a <FEC, label> binding for that prefix if the FEC was already activated on the router. If not, the router replies with a notification message containing the status code of "no route.” The router will not attempt in the latter case to send a label request to the next-hop for the FEC prefix when the LDP session to this next-hop uses the DoD label distribution mode. Hence the reference to single-hop LDP DoD procedures.

As soon as the link LDP session comes up, the router will send a label request to its DoD peer for the FEC prefix corresponding to the peer’s LSR-id. The DoD peer LSR-id is found in the basic Hello discovery messages the peer used to establish the Hello adjacency with the router.

Similarly if the router and the directly attached DoD peer entered into extended discovery and established a targeted LDP session, the router immediately sends a label request for the FEC prefix corresponding to the peer’s LSR-id found in the extended discovery messages. Peer address has to be the peer LSR-ID address.

The no form of this command disables the DoD label distribution with an LDP neighbor.

Default

no dod-label-distribution

Platforms

All

domain

domain

Syntax

domain domain-name expression expression

no domain domain-name

Context

[Tree] (config>app-assure>group>dns-ip-cache>dns-match domain)

Full Context

configure application-assurance group dns-ip-cache dns-match domain

Description

This command configures a domain expression to populate the DNS IP cache. Up to 32 domains can be configured.

Parameters

domain-name

Specifies the name of the domain expression entry.

expression

Specifies a domain name expression string, up to 64 characters, used to define a pattern match. This domain expression uses the same syntax as the expressions used in app-filters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax

domain domain-name [nat-group nat-group-id] [create]

no domain domain-name

Context

[Tree] (config>router>firewall domain)

[Tree] (config>service>vprn>firewall domain)

Full Context

configure router firewall domain

configure service vprn firewall domain

Description

This command configures a domain to contain firewall parameters. Each domain must be assigned to a NAT group where firewall functionality will be performed.

The no form of the command removes the domain.

Parameters

create

Mandatory keyword used when creating the domain.

domain-name

Specifies the name of the domain, up to 32 characters maximum.

nat-group-id

Specifies the ID of the NAT group where the firewall functionality will be performed.

Values

1 to 4

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax

domain router router-name name domain-name

no domain

Context

[Tree] (config>service>nat>firewall-policy domain)

Full Context

configure service nat firewall-policy domain

Description

This command specifies a router and domain to which the firewall policy will be applied. All associated traffic must be part of the prefixes specified by this domain.

The no form of the command removes the domain association from the firewall policy.

Default

no domain

Parameters

domain-name

Specifies the name of the firewall domain in the specified router instance. 32 characters maximum.

router-name

Specifies the name of the router instance to use.

Values

router-name | vprn-svc-id

router-name — "Base”, "management”

vprn-svc-id — 1 to 2147483647

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain

Syntax

domain md-index [format {format}] [name md-name] level level [admin-name admin-name]

domain md-index

no domain md-index

Context

[Tree] (config>eth-cfm domain)

Full Context

configure eth-cfm domain

Description

This command configures Connectivity Fault Management domain parameters.

The no form of the command removes the MD index parameters from the configuration.

Parameters

md-index

Specifies the Maintenance Domain (MD) index value.

Values

1 to 4294967295

format format

Specifies a value that represents the type (format).

Values

dns, mac, none, string

dns:

Specifies the DNS name format.

mac:

X:X:X:X:X:X-u

X: [0..FF]h

u: [0..65535]d

none:

Specifies a Y.1731 domain format and the only format allowed to execute Y.1731 specific functions.

string

Specifies an ASCII string.

Default

string

name md-name

Specifies a generic Maintenance Domain (MD) name.

Values

1 to 43 characters

level level

Specifies the integer identifying the maintenance domain level (MD Level). Higher numbers correspond to higher maintenance domains, those with the greatest physical reach, with the highest values for customers' CFM packets. Lower numbers correspond to lower maintenance domains, those with more limited physical reach, with the lowest values for single bridges or physical links.

Values

0 to 7

admin-name admin-name

Specifies a creation time required parameter that allows the operator to assign a name value to the domain container. This is used for information and migration purposes. This value cannot be modified without destroying the domain. If no admin-name exists, the configured md-index value will be converted into a character string to become the admin-name reference. When upgrading from a release that does not include the admin-name configuration option, the md-index will be converted into a character string. Once a value is assigned to this admin-name value it cannot be modified.

Values

1 to 64 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

domain

Syntax

domain domain

no domain

Context

[Tree] (config>system>ptp domain)

Full Context

configure system ptp domain

Description

This command configures the PTP domain.

Note:

Some profiles may require a domain number in a restricted range. The operator must ensure that the value aligns with the expected range for the profile.

The domain cannot be changed unless PTP is shutdown. If the PTP profile setting is changed, the domain is changed to the default domain for the new PTP profile.

The no form of this command reverts to the default configuration. The default value is dependent upon the configured profile, as detailed below.

Default

domain 0 — profile ieee1588-2008

domain 4 — profile g8265dot1-2010

domain 24 — profile g8275dot1-2014

domain 44 — profile g8275dot2-2016

Parameters

domain

Specifies the PTP domain.

Values

0 to 255 for ieee1588-2008

0 to 255 for g8265dot1-2010

24 to 43 for g8275dot1-2014

0 to 255 for g8275dot2-2016

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

domain

Syntax

domain domain-value

no domain

Context

[Tree] (config>system>ptp>alternate-profile domain)

Full Context

configure system ptp alternate-profile domain

Description

This command configures the domain number of the alternate profile. This value can only be changed when the alternate profile is shut down.

To configure this command, the specified domain number for the alternate profile must be different from the domain number configured for the primary or other alternate profiles.

The no form of this command reverts to the default value. The default value is not dependent on the configured profile.

Default

domain 24

Parameters

domain-value

Specifies the PTP domain.

Values

0 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

domain

Syntax

domain [value] [create]

no domain [value]

Context

[Tree] (config>redundancy>multi-chassis>peer>mc-ipsec domain)

Full Context

configure redundancy multi-chassis peer mc-ipsec domain

Description

This command configures domain information. This command is mutually exclusive to the tunnel-group command.

The no form of this command removes the multi-chassis IPsec domain value.

Parameters

value

Specifies the domain multi-chassis IPsec domain, up to 255 characters.

create

Keyword used to create the command instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

domain-id

domain-id

Syntax

domain-id global-field:local-field

no domain-id

Context

[Tree] (config>service>vprn>bgp-ipvpn>mpls domain-id)

[Tree] (config>service>vprn>bgp-ipvpn>srv6 domain-id)

[Tree] (config>service>vprn>bgp domain-id)

[Tree] (config>service>vprn>bgp-evpn>srv6 domain-id)

[Tree] (config>service>vprn>bgp-evpn>mpls domain-id)

Full Context

configure service vprn bgp-ipvpn mpls domain-id

configure service vprn bgp-ipvpn segment-routing-v6 domain-id

configure service vprn bgp domain-id

configure service vprn bgp-evpn segment-routing-v6 domain-id

configure service vprn bgp-evpn mpls domain-id

Description

This command specifies the domain ID that identifies the network from which a BGP route was received before that route is exported to a different neighbor. The domain ID is part of a domain, represented as domain-id:isf_safi_type in the D-PATH attribute, as described in draft-ietf-bess-evpn-ipvpn-interworking. The D-PATH attribute is modified by gateway routers, where a gateway is defined as a PE where a VPRN is instantiated, and that VPRN advertises or receives routes from multiple BGP owners (for example, EVPN-IFL and BGP-IPVPN) or multiple instances of the same owner (for example, VPRN with two BGP-IPVPN instances).

In the following example, consider that a gateway receives prefix P in an EVPN-IFL instance with the following D-PATH from neighbor N:

Seg Len=1 / 65000:1:128

If the router imports the route in VPRN-1, BGP-EVPN SRv6 instance with domain 65000:2, it readvertises it to its BGP-IPVPN MPLS instance as follows:

Seg Len=2 / 65000:2:70 / 65000:1:128

That is, the gateway prepends the local domain ID and family to the D-PATH before readvertising the route into a different instance.

The D-PATH attribute is used on gateways to detect loops (for received routes where the D-PATH contains a local domain ID) and to make BGP best-path selection decisions based on the D-PATH length (shorter D-PATH is preferred).

The no form of this command removes the configured domain ID.

Default

no domain-id

Parameters

global-field:local-field

Specifies the domain ID.

Values

4byte-GlobalAdminValue:2byte-LocalAdminValue

4byte-GlobalAdminValue:

0 to 4294967295

2byte-LocalAdminValue

0 to 65535

Platforms

All

  • configure service vprn bgp-ipvpn mpls domain-id
  • configure service vprn bgp domain-id
  • configure service vprn bgp-evpn mpls domain-id

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

  • configure service vprn bgp-evpn segment-routing-v6 domain-id
  • configure service vprn bgp-ipvpn segment-routing-v6 domain-id

domain-name

domain-name

Syntax

domain-name domain-name

no domain-name

Context

[Tree] (config>service>vprn>dhcp6>server>pool>options domain-name)

[Tree] (config>service>vprn>dhcp6>server>pool>prefix>options domain-name)

[Tree] (config>router>dhcp6>server>pool>prefix>options domain-name)

[Tree] (config>router>dhcp>server>pool>options domain-name)

[Tree] (config>service>vprn>dhcp>server>pool>options domain-name)

[Tree] (config>router>dhcp6>server>pool>options domain-name)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options domain-name)

[Tree] (config>router>dhcp6>server>defaults>options domain-name)

Full Context

configure service vprn dhcp6 local-dhcp-server pool options domain-name

configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name

configure router dhcp6 local-dhcp-server pool prefix options domain-name

configure router dhcp local-dhcp-server pool options domain-name

configure service vprn dhcp local-dhcp-server pool options domain-name

configure router dhcp6 local-dhcp-server pool options domain-name

configure subscriber-mgmt local-user-db ipoe host options domain-name

configure router dhcp6 local-dhcp-server defaults options domain-name

Description

This command configures the default domain for a DHCP client that the router uses to complete unqualified host names (without a dotted-decimal domain name).

The no form of this command removes the name from the configuration.

Parameters

domain-name

Specifies the domain name for the client, up to 127 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service vprn dhcp local-dhcp-server pool options domain-name
  • configure service vprn dhcp6 local-dhcp-server pool prefix options domain-name
  • configure subscriber-mgmt local-user-db ipoe host options domain-name
  • configure router dhcp6 local-dhcp-server pool options domain-name
  • configure router dhcp local-dhcp-server pool options domain-name
  • configure router dhcp6 local-dhcp-server pool prefix options domain-name
  • configure service vprn dhcp6 local-dhcp-server pool options domain-name

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure router dhcp6 local-dhcp-server defaults options domain-name

dot1p

dot1p

Syntax

dot1p dot1p-priority [fc fc-name] [priority {low | high}]

no dot1p dot1p-priority

Context

[Tree] (config>qos>sap-ingress dot1p)

Full Context

configure qos sap-ingress dot1p

Description

This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override the forwarding class and enqueuing priority based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.

The no form of this command removes the explicit dot1p classification rule from the SAP ingress policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.

Parameters

dot1p-priority

This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values

0 to 7

fc fc-name

Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.

priority

This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.

Default

Inherits the priority defined by the default-priority statement.

high

This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

low

This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

Platforms

All

dot1p

Syntax

dot1p dot1p-value [dot1p-mask]

no dot1p

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dot1p)

Full Context

configure qos sap-ingress mac-criteria entry match dot1p

Description

The IEEE 802.1p value to be used as the match criterion.

Use the no form of this command to remove the dot1p value as the match criterion.

Default

no dot1p

Parameters

dot1p-value

Specifies the IEEE 802.1p value in decimal.

Values

0 to 7

dot1pmask

This 3-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7, specify p-value of 4 and a mask of 0b100 for value and mask.

Values

0 to 7 (decimal hex or binary)

Default

7

Platforms

All

dot1p

Syntax

dot1p dot1p-value [fc fc-name] [profile {in | out | use-de | exceed | inplus}]

no dot1p dot1p-value

Context

[Tree] (config>qos>sap-egress dot1p)

Full Context

configure qos sap-egress dot1p

Description

This command defines a specific dot1p value that must be matched to perform the associated reclassification actions. If an egress packet on the SAP matches the specified dot1p value, the forwarding class or profile may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions.

The dot1p priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior.

The reclassification actions from a dot1p reclassification rule may be overridden by a DSCP, IP precedence, or IP flow matching event.

The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new FC, the FC from the dot1p match will be used.

The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If a DSCP, IP precedence, IPv6 criteria, or IP criteria match occurs after the dot1p match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the dot1p match will be used.

The no form of this command removes the reclassification rule from the SAP egress QoS policy.

Parameters

dot1p-value

This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values

0 to 7

fc fc-name

Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the FC name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.

profile {in | out | use-de | exceed | inplus}

Specifies the profile reclassification action is optional. When specified, packets matching the dot1p value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by a DSCP, IP precedence, IPv6 criteria, or IP criteria reclassification match. To remove the profile reclassification action for the specified dotp1 value, the dot1p command must be re-executed without the profile reclassification action defined.

Values

in — Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.

out — Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.

use-de — Specifies that the DE bit is used to determine the profile of the packet (in-profile is used when DE = 0 and out-of-profile is used when DE = 1).

exceed — Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.

inplus — Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.

Platforms

All

dot1p

Syntax

dot1p {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}

no dot1p

Context

[Tree] (config>qos>sap-egress>fc dot1p)

Full Context

configure qos sap-egress fc dot1p

Description

This command explicitly defines the egress IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an IEEE 802.1q or IEEE 802.1p encapsulation use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, the dot1p command has no effect.

The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters added to the existing dot1p command adds the capability to mark on an egress SAP the in, out, and exceed-profile status via a certain dot1p combination, similarly with the DE options. All inplus-profile traffic is marked with the same value as in-profile traffic.

When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic.

The command with the additional structure may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a tag exists. If a new tag is added, the related DE bit is set to 0.

When the previous command (dot1p dot1p-value) is used without the new structure, it means that the dot1p value is used for the entire forwarding class, as it did before. The two versions of the command are mutually exclusive.

The in-profile or out-of-profile/exceed-profile status may be indicated via the DE bit setting if the de-mark command is used. The DE value used for exceed-profile is the same as that used for out-of-profile.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.

The commands dot1p-inner and dot1p-outer take precedence over the dot1p command if both are specified in the same policy.

The no form of this command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.

Default

no dot1p

Parameters

in-profile dot1p-value

Specifies the 802.1p value to set for in-profile frames in this forwarding class.

Values

0 to 7

out-profile dot1p-value

Specifies the 802.1p value to set for out-profile frames in this forwarding class.

Values

0 to 7

exceed-profile dot1p-value

Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.

Values

0 to 7

Platforms

All

dot1p

Syntax

dot1p dot1p-priority fc fc-name profile {in | out | use-de}

no dot1p

Context

[Tree] (config>qos>network>ingress dot1p)

Full Context

configure qos network ingress dot1p

Description

This command explicitly sets the forwarding class or enqueuing priority and profile of the packet when a packet is marked with a dot1p-priority specified. Adding a dot1p rule on the policy forces packets that match the dot1p-priority specified to override and be assigned to the forwarding class and enqueuing priority and profile of the packet, based on the parameters included in the dot1p rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The dot1p-priority is derived from the most significant three bits in the IEEE 802.1q or IEEE 802.1p header. The three dot1p bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop Quality of Service (QoS) behavior.

The no form of this command removes the explicit dot1p classification rule from the policy. Removing the rule on the policy immediately removes the rule on all ingress SAPs using the policy.

Parameters

dot1p-priority

This value is a required parameter that specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values

0 to 7

fc-name

Specifies the value given for the fc-name parameter must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.

Values

be, l2, af, l1, h2, ef, h1, nc

profile {in | out | use-de}

All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command or will use the DE bit to determine the profile of the packets (in-profile is used when DE = 0 and out-of-profile is used when DE = 1). In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.

Platforms

All

dot1p

Syntax

dot1p dot1p-priority

no dot1p

Context

[Tree] (config>qos>network>egress>fc dot1p)

Full Context

configure qos network egress fc dot1p

Description

This command is used whenever the dot1p bits are set to a common value regardless of the internal profile of the packets. Although it is not mandatory, this command should be used in combination with the de-mark command to enable the marking of the DE bit according to the internal profile of the packet.

This command acts as a shortcut for configuring the two existing commands with the same dot1p priority.

The dot1p dot1p-priority command is saved in the configuration as dot1p-in-profile dot1p-priority and dot1p-out-profile dot1p-priority. The inplus-profile traffic is marked with the same value as in-profile traffic. The exceed-profile traffic is marked with the same value as out-of-profile traffic.

Platforms

All

dot1p

Syntax

dot1p dot1p-value [ dot1p-mask]

no dot1p

Context

[Tree] (config>filter>mac-filter>entry>match dot1p)

Full Context

configure filter mac-filter entry match dot1p

Description

Configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.

When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.

The no form of the command removes the criterion from the match entry.

Egress dot1p value matching will only match if the customer payload contains the 802.1p bits. For example, if a packet ingresses on a null encapsulated SAP and the customer packet is IEEE 802.1Q or 802.1p tagged, the 802.1p bits will be present for a match evaluation. On the other hand, if a customer tagged frame is received on a dot1p encapsulated SAP, the tag will be stripped on ingress and there will be no 802.1p bits for a MAC filter match evaluation; in this case, any filter entry with a dot1p match criterion specified will fail.

Default

no dot1p

Parameters

dot1p-value

Specifies the IEEE 802.1p value in decimal.

Values

0 to 7

dot1p-mask

Specifies a 3-bit mask that can be configured using the decimal integer, hexadecimal or binary format.

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7 specify dot1p-value of 4 and a dot1p-mask of 0b100 for value and mask.

Default

7 (decimal)

Values

1 to 7 (decimal)

Platforms

All

dot1p

Syntax

dot1p dot1p-value [dot1p-mask]

Context

[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dot1p)

Full Context

configure system security management-access-filter mac-filter entry match dot1p

Description

This command configures Dot1p match conditions.

Table 1. Management Access Filter dot1p Mask Format

Format Style

Format Syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

Parameters

dot1p-value

Specifies the IEEE 802.1p value in decimal.

Values

0 to 7

mask

Specifies the 3-bit mask can be configured using the following formats.

Platforms

All

dot1p

Syntax

dot1p dot1p-name

no dot1p

Context

[Tree] (config>test-oam>icmp>ping-template dot1p)

Full Context

configure test-oam icmp ping-template dot1p

Description

This command specifies values of the outer and inner dot1p bits for the VLAN when dot1q or qinq encapsulation is used. This field is not exposed to egress QoS policies.

The no form of this command reverts to the default value.

Default

dot1p 7

Parameters

dot1p-name

Specifies the IEEE 802.1p value in decimal format.

Values

0 to 7

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dot1p-in-profile

dot1p-in-profile

Syntax

dot1p-in-profile dot1p-priority

no dot1p-in-profile

Context

[Tree] (config>qos>network>egress>fc dot1p-in-profile)

Full Context

configure qos network egress fc dot1p-in-profile

Description

This command specifies dot1p in-profile mappings. The inplus-profile traffic is marked with the same value as in-profile traffic.

The no form of this command resets the configuration to the default in-profile dot1p-priority setting for policy-id 1.

Parameters

dot1p-priority

Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values

0 to 7

Platforms

All

dot1p-inner

dot1p-inner

Syntax

dot1p-inner {dot1p-value | in-profile dot1p-value out-profile dot1p-value}

no dot1p-inner

Context

[Tree] (config>qos>sap-egress>fc dot1p-inner)

Full Context

configure qos sap-egress fc dot1p-inner

Description

This command explicitly defines the egress inner VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an inner IEEE 802.1q or IEEE 802.1p encapsulation on a qinq SAP will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p qinq encapsulated, this command has no effect.

The optional in-profile | dot1p-value out-profile dot1p-value parameters on the dot1p-inner command add the capability to mark the in-profile and out-of-profile status on an egress qinq SAP. The command with the additional parameters may be used on the SAP when the internal in-profile and out-of-profile status needs to be communicated to an access network or customer device that does not support the DE bit. When the in-profile keyword is added, the rest of the structure must be specified. All inplus-profile traffic is marked with the same value as in-profile traffic and all exceed-profile traffic is marked with the same value as out-of-profile traffic.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if an inner tag exists. If a new inner tag is added, the related DE bit is set to 0. The inplus/in or out/exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-inner) command is used.

The two versions of the command (with and without parameters) are mutually exclusive.

This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.

The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the dot1p-inner in the policy; that is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).

The no form of the command sets the inner IEEE 802.1p or IEEE 802.1q priority bits to 0.

Remarking the inner dot1p is not supported based on the profile result of egress policing.

Default

no dot1p-inner

Parameters

dot1p-value

Specifies the 802.1p value to set for in-profile frames in this forwarding class.

Values

0 to 7

in-profile dot1p-value

Specifies the 802.1p value to set for in-profile frames in this forwarding class.

Values

0 to 7

out-profile dot1p-value

Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.

Values

0 to 7

Platforms

All

dot1p-out-profile

dot1p-out-profile

Syntax

dot1p-out-profile dot1p-priority

no dot1p-out-profile

Context

[Tree] (config>qos>network>egress>fc dot1p-out-profile)

Full Context

configure qos network egress fc dot1p-out-profile

Description

This command specifies dot1p out-of-profile mappings.

The exceed-profile traffic is marked with the same value as out-of-profile traffic.

The no form of this command resets the configuration to the default out-profile dot1p-priority setting for policy-id 1.

Parameters

dot1p-priority

Specifies the unique IEEE 802.1p value that will match the dot1p rule. If the command is executed multiple times with the same dot1p-value, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of eight dot1p rules are allowed on a single policy.

Values

0 to 7

Platforms

All

dot1p-outer

dot1p-outer

Syntax

dot1p-outer {dot1p-value | in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value]}

no dot1p-outer

Context

[Tree] (config>qos>sap-egress>fc dot1p-outer)

Full Context

configure qos sap-egress fc dot1p-outer

Description

This command explicitly defines the egress outer or single VLAN tag IEEE 802.1p (dot1p) bits marking for fc-name. When the marking is set, all packets of fc-name that have either an outer or single IEEE 802.1q or IEEE 802.1p encapsulation on a qinq or a dot1p SAP, respectively, will use the explicitly defined dot1p-value. If the egress packets for fc-name are not IEEE 802.1q or IEEE 802.1p encapsulated, this command has no effect.

The optional in-profile dot1p-value out-profile dot1p-value [exceed-profile dot1p-value] parameters on the dot1p-outer command add the capability to mark the in, out, and exceed-profile status on an egress qinq or dot1p SAP. The command with the additional parameters may be used on the SAP when the internal in, out, and exceed-profile status needs to be communicated to an access network or customer device that does not support the DE bit.

When the in-profile keyword is added, the out-profile keyword must be specified; however, exceed-profile is optional. If the optional exceed-profile dot1p-value is not included, any exceed-profile traffic will be marked with the same dot1p value as configured for the out-of-profile traffic. All inplus-profile traffic is marked with the same value as in-profile traffic.

When these commands are used, the DE bit or the equivalent field is left unchanged by the egress processing if a single or outer tag exists. If a new tag is added, the related DE bit is set to 0. The in, out, or exceed-profile status may be indicated via the setting of the DE bit setting if the de-mark(-outer) command is used. The DE value used for inplus is the same as that used for in-profile and the one used for exceed-profile is the same as that used for out of profile.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the dot1p bits for both the BVID and ITAG.

The two versions of the command (with and without parameters) are mutually exclusive.

This command takes precedence over the dot1p command if both are specified in the same policy, and over the default action where the marking is taken from a packet received at ingress.

The no form of the command sets the IEEE 802.1p or IEEE 802.1q priority bits to 0.

Default

no dot1p-outer

Parameters

dot1p-value

Specifies the 802.1p value to set for in-profile frames in this forwarding class.

Values

0 to 7

in-profile dot1p-value

Specifies the 802.1p value to set for in-profile frames in this forwarding class.

Values

0 to 7

out-profile dot1p-value

Specifies the 802.1p value to set for out-of-profile frames in this forwarding class.

Values

0 to 7

exceed-profile dot1p-value

Specifies the 802.1p value to set for exceed-profile frames in this forwarding class.

Values

0 to 7

Platforms

All

dot1q

dot1q

Syntax

dot1q

Context

[Tree] (config>service>system>bgp-evpn>eth-seg dot1q)

Full Context

configure service system bgp-evpn ethernet-segment dot1q

Description

This command creates the dot1q context for q-tag additions to the port or LAG virtual ES.

Platforms

All

dot1q

Syntax

dot1q

Context

[Tree] (debug>oam>build-packet>packet>field-override>header dot1q)

[Tree] (config>test-oam>build-packet>header dot1q)

Full Context

debug oam build-packet packet field-override header dot1q

configure test-oam build-packet header dot1q

Description

This command creates a Dot1Q header and enables the context to define the associated parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dot1q-etype

dot1q-etype

Syntax

dot1q-etype value

no dot1q-etype

Context

[Tree] (config>port>ethernet dot1q-etype)

Full Context

configure port ethernet dot1q-etype

Description

This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.

The no form of this command reverts to the default value.

Parameters

value

Specifies the Ethertype to expect, in either decimal or hex.

Values

1536 to 65535 (0x0600 to 0xffff)

Default

If the encap-type is dot1p, then the default is 0x8100. If the encap-type is qinq, then the default is 0x8100.

Platforms

All

dot1q-etype

Syntax

dot1q-etype dot1q-etype

no dot1q-etype

Context

[Tree] (config>pw-port dot1q-etype)

Full Context

configure pw-port dot1q-etype

Description

This command configures the Dot1q Ethertype on the PW port. The PW port is used to extract a customer's Ethernet traffic that is transported in a tunnel over an IP/MPLS network. The Dot1q-etype represents the first two bytes (TPID) in the 802.1Q header of a single-tagged Ethernet frame or the inner 802.1Q header of the double-tagged Ethernet frame inside the tunnel.

The no form of this command removes the configuration.

Parameters

dot1q-etype

The value for the dot1q-etype field, in hexadecimal format.

Values

0x0600..0xFFFF

Default

0x8100

Platforms

All

dot1x

dot1x

Syntax

dot1x

Context

[Tree] (config>port>ethernet dot1x)

Full Context

configure port ethernet dot1x

Description

This command enables access to the context to configure port-specific 802.1x authentication attributes. This context can only be used when configuring a Fast Ethernet, Gigabit or 10-Gb Ethernet LAN ports on an appropriate MDA.

Platforms

All

dot1x

Syntax

[no] dot1x

Context

[Tree] (config>system>security dot1x)

Full Context

configure system security dot1x

Description

This command creates the context to configure 802.1x network access control on the router.

The no form of this command removes the 802.1x configuration.

Platforms

All

down

down

Syntax

down ip seconds [init-only]

no down ip

down ipv6 seconds [init-only]

no down ipv6

Context

[Tree] (config>service>vprn>red-if>hold-time down)

[Tree] (config>service>vpls>if>hold-time down)

[Tree] (config>service>ies>sub-if>hold-time down)

[Tree] (config>router>if>hold-time down)

[Tree] (config>service>vprn>nw-if>hold-time down)

[Tree] (config>service>vprn>if>hold-time down)

[Tree] (config>service>ies>red-if>hold-time down)

[Tree] (config>service>vprn>sub-if>hold-time down)

[Tree] (config>service>ies>if>hold-time down)

Full Context

configure service vprn redundant-interface hold-time down

configure service vpls interface hold-time down

configure service ies subscriber-interface hold-time down

configure router interface hold-time down

configure service vprn network-interface hold-time down

configure service vprn interface hold-time down

configure service ies redundant-interface hold-time down

configure service vprn subscriber-interface hold-time down

configure service ies interface hold-time down

Description

This command causes a delay in the activation of the associated IP interface by the specified number of seconds. The delay is invoked whenever the system attempts to bring the associated IP interface up, unless the init-only option is configured. If the init-only option is configured, the delay is only applied when the IP interface is first configured or after a system reboot.

The no form of this command removes the command from the active configuration and removes the delay in activating the associated IP interface. If the configuration is removed during a delay period, the currently running delay will continue until it completes.

Default

no down ip

Parameters

seconds

The time delay, in seconds, to make the interface operational.

Values

1 to 1200

init-only

Specifies that the down delay is only applied when the interface is configured or after a reboot.

Values

1 to 1200

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

  • configure service ies redundant-interface hold-time down
  • configure service ies subscriber-interface hold-time down
  • configure service vprn subscriber-interface hold-time down
  • configure service vprn redundant-interface hold-time down

All

  • configure router interface hold-time down
  • configure service vpls interface hold-time down
  • configure service vprn network-interface hold-time down
  • configure service vprn interface hold-time down
  • configure service ies interface hold-time down

down-link

down-link

Syntax

down-link gbr rate mbr rate

no down-link

Context

[Tree] (config>subscr-mgmt>gtp>peer-profile>ggsn>qos down-link)

[Tree] (config>subscr-mgmt>gtp>peer-profile>pgw>qos down-link)

[Tree] (config>subscr-mgmt>gtp>peer-profile>mme>qos down-link)

Full Context

configure subscriber-mgmt gtp peer-profile ggsn qos down-link

configure subscriber-mgmt gtp peer-profile pgw qos down-link

configure subscriber-mgmt gtp peer-profile mme qos down-link

Description

This command configures the down-link bitrate in kb/s to be used in the GTP messages.

The no form of this command reverts to the default.

Default

down-link gbr 2000 mbr 2000

down-link gbr 2000 mbr 2000 - for ggsn

down-link gbr 0 mbr 0 - for mme and pgw

Parameters

gbr rate

Specifies the downlink Guaranteed Bit Rate (GBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).

mbr rate

Specifies the downlink Maximum Bit Rate (MBR) to be used in the GTP messages as QOS IE (GTPv1) or Bearer QOS (GTPv2).

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

down-on-internal-error

down-on-internal-error

Syntax

down-on-internal-error [tx-disable]

no down-on-internal-error

Context

[Tree] (config>port>ethernet down-on-internal-error)

Full Context

configure port ethernet down-on-internal-error

Description

This command configures the system to bring a port operationally down in the event the system has detected internal MAC transmit errors (Int MAC Tx Errs).

Default

no down-on-internal-error

Parameters

tx-disable

Specifies that the laser should be disabled if an internal MAC transmit error is encountered. When used, this option requires that the operator explicitly cycle the admin state of the port to clear the error and re-enable the laser.

Platforms

All

down-on-peer-tldp-pw-status-faults

down-on-peer-tldp-pw-status-faults

Syntax

down-on-peer-tldp-pw-status-faults

no down-on-peer-tldp-pw-status-faults

Context

[Tree] (config>service>epipe>pw-port down-on-peer-tldp-pw-status-faults)

Full Context

configure service epipe pw-port down-on-peer-tldp-pw-status-faults

Description

This command enables the PW port configured on an Epipe to go locally operationally down if any of the following status bits are received on a mate spoke-SDP across an FPE:

  • 0x00000001 - Pseudowire Not Forwarding

  • 0x00000002 - Local Attachment Circuit (ingress) Receive Fault

  • 0x00000004 - Local Attachment Circuit (egress) Transmit Fault

  • 0x00000008 - Local PSN-facing PW (ingress) Receive Fault

  • 0x00000010 - Local PSN-facing PW (egress) Transmit Fault

The no form of the command specifies that the mate PW status fault bits are not taken into account in the operational state of the PW port.

Default

no down-on-peer-tldp-pw-status-faults

Platforms

All

down-threshold

down-threshold

Syntax

down-threshold percent-change [bw absolute-change]

Context

[Tree] (config>router>rsvp>dbw-accounting down-threshold)

Full Context

configure router rsvp dbw-accounting down-threshold

Description

This command sets the minimum change (in percent of the latest advertised value) above which a decrease in Maximum Reservable Link Bandwidth (MRLB) (IS-IS TE sub-TLV 10) or Maximum Reservable Bandwidth (MRB) (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both of these thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

Default

down-threshold 0

Parameters

percent-change

Specifies the minimum decrease in MRLB/MRB, expressed in percent.

Values

0 to 100

absolute-change

Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.

Values

0 to 1000000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

down-timeout

down-timeout

Syntax

[no] down-timeout

Context

[Tree] (config>aaa>radius-srv-plcy>servers>health-check down-timeout)

Full Context

configure aaa radius-server-policy servers health-check down-timeout

Description

This command determines the interval to wait for a RADIUS reply message from the RADIUS server before a RADIUS server is declared out-of-service. By default, the value of the down-timeout is the number of retries multiplied by the timeout interval. Each host will use the configured timeout and retry value under the AAA RADIUS server policy.

timeout refers to the waiting period before the next retry attempt.

retry refers the number of times the host will attempt to contact the RADIUS server.

If a RADIUS server is declared out-of-service, the host pending retry attempts will move on to the next RADIUS server.

The no form of this command reverts to the default.

Parameters

minutes

Specifies the timer to wait, in minutes, before declaring the RADIUS server that is down.

Values

1 to 5

seconds

Specifies the timer to wait, in seconds, before declaring the RADIUS server that is down.

Values

1 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

down-when-looped

down-when-looped

Syntax

down-when-looped

Context

[Tree] (config>port>ethernet down-when-looped)

Full Context

configure port ethernet down-when-looped

Description

This command configures Ethernet loop detection attributes.

Platforms

All

downlink

downlink

Syntax

downlink aggregate-rate

downlink arbiter arbiter-name

downlink policer policer-id

downlink queue queue-id

downlink scheduler scheduler-name

no downlink

Context

[Tree] (config>subscr-mgmt>gtp>apn-policy>apn>ambr-qos-mapping downlink)

Full Context

configure subscriber-mgmt gtp apn-policy apn ambr-qos-mapping downlink

Description

When enabled, the downlink rate in the APN-AMBR IE in an incoming GTP message is interpreted as a rate override for the specified egress QoS object. For queues and policers, the PIR is overridden.

This override uses standard SR OS QoS overrides. Therefore, a subsequent Gx/RADIUS-based override removes this override.

The no form of this command disables the override mechanism.

Default

no downlink

Parameters

aggregate-rate

Specifies the aggregate rate.

arbiter-name

Specifies the name of the arbiter to be overridden, up to 32 characters.

policer-id

Specifies the ID of the policer to be overridden.

Values

1 to 63

queue-id

Specifies the ID of the queue to be overridden.

Values

1 to 8

scheduler-name

Specifies the name of the scheduler to be overridden, up to 32 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

downlink-mbr-gbr

downlink-mbr-gbr

Syntax

downlink-mbr-gbr aggregate-rate

downlink-mbr-gbr arbiter arbiter-name

downlink-mbr-gbr policer policer-id

downlink-mbr-gbr queue queue-id

downlink-mbr-gbr scheduler scheduler-name

no downlink-mbr-gbr

Context

[Tree] (config>subscr-mgmt>sla-prof>pfcp>seq downlink-mbr-gbr)

Full Context

configure subscriber-mgmt sla-profile pfcp-mappings session-qer downlink-mbr-gbr

Description

This command configures the downlink MBR/GBR to QoS override mapping.

The no form of the command disables the downlink MBR/GBR mapping.

Default

no downlink-mbr-gbr

Parameters

aggregate-rate

Maps the MBR/GBR to a rate override for the aggregate rate.

arbiter-name

Specifies the arbiter target of the MBR/GBR override. The arbiter name can be up to 32 characters.

policer-id

Specifies the policer ID target of the MBR/GBR override.

Values

1 to 63

queue-id

Specifies the queue ID target of the MBR/GBR override.

Values

1 to 8

scheduler-name

Specifies the scheduler name target of the MBR/GBR override. The scheduler name can be up to 32 characters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

download-interval

download-interval

Syntax

download-interval minutes

no download-interval

Context

[Tree] (config>aaa>route-downloader download-interval)

Full Context

configure aaa route-downloader download-interval

Description

This command sets the time interval, in minutes, that the system waits for between two consecutive runs of the route-download process. The time is counted from the start-time of the run, thus, if an route-download process is still ongoing by the time the timer expires, the process will restart from count=1.

The no form of this command reverts to the default value.

Default

download-interval 720

Parameters

minutes

Specifies the time interval, in minutes, between the start of the last route downloader run and the start of the next route downloader run.

Values

1 to 1440

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

downstream-ip-filter

downstream-ip-filter

Syntax

downstream-ip-filter filter-id

no downstream-ip-filter

Context

[Tree] (config>service>vprn>nat>inside downstream-ip-filter)

Full Context

configure service vprn nat inside downstream-ip-filter

Description

This command assigns an IPv4 filter policy to the downstream NAT interface. This filter is applied to downstream traffic after the NAT function is applied but before it enters the inside VPRN instance.

The no form of the command removes the filter from the configuration.

Default

no downstream-ip-filter

Parameters

filter-id

Specifies an existing IPv4 filter policy. Values can be expressed either as a decimal integer or as an ASCII string of up to 64 characters.

Values

1 to 65535, or ASCII string of up to 64 characters

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

downstream-ip-filter

Syntax

downstream-ip-filter filter-id

no downstream-ip-filter

Context

[Tree] (config>router>nat>outside downstream-ip-filter)

[Tree] (config>service>vprn>nat>outside downstream-ip-filter)

Full Context

configure router nat outside downstream-ip-filter

configure service vprn nat outside downstream-ip-filter

Description

This command specifies a filter to apply to the downstream traffic after routing in the outside virtual router instance and before the NAT function; it is useful for traffic that bypasses the egress filters applied in the inside virtual router instance, such as DS-Lite traffic.

The no form of the command removes the filter from the configuration.

Default

no downstream-ip-filter

Parameters

filter-id

Specifies a filter up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

downstream-ipv6-filter

downstream-ipv6-filter

Syntax

downstream-ipv6-filter filter-id

no downstream-ipv6-filter

Context

[Tree] (config>router>nat>outside downstream-ipv6-filter)

[Tree] (config>service>vprn>nat>outside downstream-ipv6-filter)

Full Context

configure router nat outside downstream-ipv6-filter

configure service vprn nat outside downstream-ipv6-filter

Description

This command configures the ipv6-filter for downstream traffic. This filter is applied to downstream traffic after it leaves the outside virtual router instance but before the NAT function is applied. This is useful for shared v6 filters that apply to all v6 DSM hosts.

The no form of the command removes the filter from the configuration.

Default

no downstream-ipv6-filter

Parameters

filter-id

Specifies an IPv6 filter up to 64 characters in length.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

downstream-map-tlv

downstream-map-tlv

Syntax

downstream-map-tlv downstream-map-tlv

no downstream-map-tlv

Context

[Tree] (config>saa>test>type-multi-line>lsp-trace>sr-policy downstream-map-tlv)

Full Context

configure saa test type-multi-line lsp-trace sr-policy downstream-map-tlv

Description

This command configures the downstream mapping TLV that provides a mechanism for the sender and responder nodes to exchange and validate interface and label stack information for each downstream hop in the path of the LDP FEC an RSVP LSP, or a BGP IPv4 or IPv6 label route.

The following downstream mapping TLVs are supported: the original Downstream Mapping (DSMAP) TLV defined in RFC 4379 (obsoleted by RFC 8029) and the Downstream Detailed Mapping (DDMAP) TLV defined in RFC 6424.

The no form of this command removes the configuration.

Parameters

downstream-map-tlv

Specifies which format of the downstream mapping TLV to use in the LSP trace packet. The DSMAP TLV is the original format in RFC 4379 (obsoleted by RFC 8029). The DDMAP is the new enhanced format specified in RFC 6424. The user can also choose not to include the downstream mapping TLV by entering the value none. When lsp-trace is used on a MPLS-TP LSP (static option), it can only be executed if the control-channel is set to none. In addition, the DSMAP/DDMAP TLV is only included in the echo request message if the egress interface is either a numbered IP interface or an unnumbered IP interface. The TLV is not included if the egress interface is of type unnumbered-mpls-tp.

Values

ddmap: Sends a detailed downstream mapping TLV.

dsmap: Sends a downstream mapping TLV.

none: No mapping TLV is sent.

Default

Inherited from global configuration of downstream mapping TLV in option mpls-echo-request-downstream-map {dsmap | ddmap}.

Platforms

All

dpd

dpd

Syntax

dpd [interval interval] [max-retries max-retries] [reply-only]

no dpd

Context

[Tree] (config>ipsec>ike-policy dpd)

Full Context

configure ipsec ike-policy dpd

Description

This command controls the dead peer detection mechanism.

The no form of this command removes the parameters from the configuration.

Default

no dpd

Parameters

interval

Specifies the DPD interval, in seconds. Since more time is necessary to determine if there is incoming traffic, the actual time needed to bring down the tunnel is larger than the DPD interval multiplied by max-retries.

Values

10 to 300

Default

30

max-retries

Specifies the maximum number of retries before the tunnel is removed.

Values

2 to 5

Default

3

reply-only

Specifies whether to initiate a DPD request if there is an incoming ESP or IKE packet. Issuing the command without the reply-only keyword does not initiate a DPD request if there is an incoming ESP packet.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dr-activation-timer

dr-activation-timer

Syntax

dr-activation-timer seconds

Context

[Tree] (config>service>vpls>bind>evpn-mcast-gateway dr-activation-timer)

Full Context

configure service vpls allow-ip-int-bind evpn-mcast-gateway dr-activation-timer

Description

This command configures the designated router (DR) activation timer for the EVPN gateway.

After the DR activation timer expires, each provider edge router (PE) runs the MEG or PEG DR election. The timer allows the PE to collect Inclusive Multicast Ethernet Tag routes from other MEG/PEG gateways and avoid running the DR election multiple times. The DR triggers the MEG/PEG first-hop and last-hop router actions on the router.

Default

dr-activation-timer 3

Parameters

seconds

Specifies DR election wait time, in seconds.

Values

0 to 100

Platforms

All

drain

drain

Syntax

[no] drain

Context

[Tree] (config>service>vprn>dhcp>server>pool>subnet drain)

Full Context

configure service vprn dhcp local-dhcp-server pool subnet drain

Description

This command means no new leases can be assigned from this subnet and existing leases are cleaned up upon renew/rebind.

The no form of this command means the subnet is active and new leases can be assigned from it.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

drain

Syntax

[no] drain

Context

[Tree] (config>service>vprn>nat>outside>pool>address-range drain)

[Tree] (config>router>nat>outside>pool>address-range drain)

Full Context

configure service vprn nat outside pool address-range drain

configure router nat outside pool address-range drain

Description

This command starts or stops draining this NAT address range. When an address-range is being drained, it will not be used to serve new hosts. Existing hosts, however, will still be able to use the address that was assigned to them even if it is being drained. An address-range can only be deleted if the parent pool is shut down or if the range itself is effectively drained (hosts are no longer using the addresses).

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop

drop

Syntax

[no] drop

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action drop)

Full Context

configure application-assurance group policy app-qos-policy entry action drop

Description

This command configures the drop action on flows matching this AQP entry. When enabled, all flow traffic matching this AQP entry will be dropped. When drop action is part of a set of multiple actions to be applied to a single flow as result of one or more AQP entry match, drop action will be performed first and no other action will be invoked on that flow.

The no form of this command disables the drop action on flows matching this AQP entry.

Default

no drop

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop

Syntax

drop

drop packet-length {lt | gt | eq} packet-length-value

drop packet-length range packet-length-value packet-length-value

drop pattern expression expression mask mask offset-type offset-type offset-value offset-value

drop ttl {lt | gt | eq} ttl-value

drop ttl range ttl-value ttl-value

Context

[Tree] (config>filter>ip-filter>entry>action drop)

Full Context

configure filter ip-filter entry action drop

Description

This command configures the drop action for the traffic that matches this filter entry.

Traffic can, also, be dropped based on pkt-length, packet-length range, ttl, ttl range, or a pattern of conditional match criteria.

Packets that match the filter entry match criteria, and not the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.

For pattern match:

  • the expression is left-aligned for odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card

  • the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria.

Parameters

packet-length

Specifies drop packets matching both the filter entry match criteria and the packet-length value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the packet-length value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.

Values

lt — Specifies "less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.

gt — Specifies "greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.

eq — Specifies "equal to”.

packet-length-value

Specifies the packet length value for the rate limit action.

Values

0 to 65535

range

Specifies an inclusive range. When range is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).

expression

Specifies the hexadecimal pattern to match; up to eight bytes.

Values

0x0000000000000001 to 0xffffffffffffffff

mask

Specifies the mask for the pattern expression, up to eight bytes.

Values

0x0000000000000001 to 0xffffffffffffffff

offset-type

Specifies the starting point reference for the offset-value of this pattern.

Values

layer-3, layer-4, data, dns-qtype

offset-value

Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.

Values

0 to 255

ttl-value

Specifies drop packets matching both the filter entry match criteria and the TTL value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the TTL value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.

Values

0 to 255

Platforms

All

drop

Syntax

drop

drop hop-limit {lt | gt | eq} hop-limit-value

drop hop-limit range hop-limit-value hop-limit-value

drop pattern expression expression mask mask offset-type offset-type offset-value offset-value

drop payload-length {lt | gt | eq} payload-length-value

drop payload-length range payload-length-value payload-length-value

Context

[Tree] (config>filter>ipv6-filter>entry>action drop)

Full Context

configure filter ipv6-filter entry action drop

Description

This command configures the drop action for the traffic that matches this filter entry.

Traffic can, also, be dropped based on payload-length, payload-length range, hop-limit, hop-limit range, or a pattern of conditional match criteria.

Packets that match the filter entry match criteria, but do not match the conditional match criteria value, are implicitly forwarded with no further match in the following filter entries.

For pattern match:

  • the expression is left-aligned for the odd number bytes, for example, the expression 0xABC is programmed 0x0ABC in the line card

  • the 'data' offset requires protocol UDP or TCP to be selected in the filter entry match criteria

Parameters

hop-limit

Specifies the hop-limit value for the drop action.

Values

lt — Specifies "less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.

eq — Specifies "equal to”.

gt — Specifies "greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.

hop-limit-value

Specifies the hop-limit value for the drop action.

Values

0 to 255

range

Specifies an inclusive range. When the range parameter is used, the start of the range (the first value entered) must be smaller than the end of the range (the second value entered).

expression

Specifies the hexadecimal pattern to match; up to eight bytes.

Values

0x0000000000000001 to 0xffffffffffffffff

mask

Specifies the mask for the pattern expression, up to eight bytes.

Values

0x0000000000000001 to 0xffffffffffffffff

offset-type

Specifies the starting point reference for the offset-value of this pattern.

Values

layer-3, layer-4, data, dns-qtype

offset-value

Specifies the offset value for the pattern expression. Dns-qtype supports offset value of 0.

Values

0 to 255

payload-length

Specifies drop packets matching both the filter entry match criteria and the payload-length-value defined in the drop action statement. Packets matching the filter entry match criteria and not matching the payload-length-value, as defined in the drop action statement, are implicitly forwarded with no further match in the following filter entries.

Values

lt — Specifies "less than”. The lt parameter cannot be used with the lowest possible numerical value for the parameter.

gt — Specifies "greater than”. The gt parameter cannot be used with the highest possible numerical value for the parameter.

eq — Specifies "equal to”.

payload-length-value

Specifies the payload length value for the drop action.

Values

0 to 65535

Platforms

All

drop

Syntax

drop

Context

[Tree] (config>filter>mac-filter>entry>action drop)

Full Context

configure filter mac-filter entry action drop

Description

This command sets the MAC filter entry action to drop.

Platforms

All

drop-count

drop-count

Syntax

drop-count count

no drop-count

Context

[Tree] (config>service>vprn>static-route-entry>next-hop>cpe-check drop-count)

[Tree] (config>service>vprn>static-route-entry>indirect>cpe-check drop-count)

Full Context

configure service vprn static-route-entry next-hop cpe-check drop-count

configure service vprn static-route-entry indirect cpe-check drop-count

Description

This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.

Default

drop-count 3

Parameters

count

An integer count value.

Values

1 to 255

Platforms

All

drop-count

Syntax

drop-count consecutive-failures [hold-down seconds]

no drop-count

Context

[Tree] (config>filter>redirect-policy>dest>ping-test drop-count)

Full Context

configure filter redirect-policy destination ping-test drop-count

Description

This command specifies the number of consecutive requests that must fail for the destination to be declared unreachable and the time to hold destination unreachable before repeating tests.

Default

drop-count 3 hold-down 0

Parameters

consecutive-failures

Specifies the number of consecutive ping test failures before declaring the destination down.

Values

1 to 60

hold-down seconds

Specifies the amount of time, in seconds, that the system should be held down if any of the test has marked it unreachable.

Values

0 to 86400

Platforms

All

drop-count

Syntax

drop-count count

no drop-count

Context

[Tree] (config>router>static-route-entry>next-hop>cpe-check drop-count)

[Tree] (config>router>static-route-entry>indirect>cpe-check drop-count)

Full Context

configure router static-route-entry next-hop cpe-check drop-count

configure router static-route-entry indirect cpe-check drop-count

Description

This optional parameter specifies the number of consecutive ping-replies that must be missed to declare the CPE down and to deactivate the associated static route.

Default

drop-count 3

Parameters

count

Specifies the integer count value.

Values

1 to 255

Platforms

All

drop-count

Syntax

drop-count count

no drop-count

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check drop-count)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host>managed-routes>route-entry>cpe-check drop-count)

Full Context

configure service vprn subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check drop-count

configure service ies subscriber-interface group-interface sap static-host managed-routes route-entry cpe-check drop-count

Description

This command configures the number of consecutive ping replies that must be missed to declare the CPE down.

Default

drop-count 3

Parameters

count

Specifies the count value.

Values

1 to 255

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

drop-count

Syntax

drop-count count

no drop-count

Context

[Tree] (config>vrrp>policy>priority-event>host-unreachable drop-count)

Full Context

configure vrrp policy priority-event host-unreachable drop-count

Description

This command configures the number of consecutively sent ICMP echo request messages that must fail before the host unreachable priority control event is set.

The drop-count command is used to define the number of consecutive message send attempts that must fail for the host-unreachable priority event to enter the set state. Each unsuccessful attempt increments the event’s consecutive message drop counter. With each successful attempt, the event’s consecutive message drop counter resets to zero.

If the event’s consecutive message drop counter reaches the drop-count value, the host-unreachable priority event enters the set state.

The event’s hold-set value defines how long the event must stay in the set state even when a successful message attempt clears the consecutive drop counter. The event is not cleared until the consecutive drop counter is less than the drop-count value and the hold-set timer has a value of zero (expired).

The no form of the command reverts to the default value.

Default

drop-count 3 — 3 consecutive ICMP echo request failures are required before the host unreachable priority control event is set.

Parameters

count

The number of ICMP echo request message attempts that must fail for the event to enter the set state. It also defines the threshold so a lower consecutive number of failures can clear the event state.

Values

1 to 60

Platforms

All

drop-extracted-traffic

drop-extracted-traffic

Syntax

drop-extracted-traffic

Context

[Tree] (config>filter>ip-filter>entry>action drop-extracted-traffic)

[Tree] (config>filter>ipv6-filter>entry>action drop-extracted-traffic)

Full Context

configure filter ip-filter entry action drop-extracted-traffic

configure filter ipv6-filter entry action drop-extracted-traffic

Description

This command specifies that a packet matching this filter entry is dropped if extracted to the CPM. Packets matching the filter entry match criteria and not extracted to the CPM are forwarded with no further match in the following filter entries.

Platforms

All

drop-routes-with-srv6-tlvs

drop-routes-with-srv6-tlvs

Syntax

[no] drop-routes-with-srv6-tlvs

Context

[Tree] (config>router>bgp>group>neighbor>srv6>route drop-routes-with-srv6-tlvs)

[Tree] (config>router>bgp>group>srv6>route drop-routes-with-srv6-tlvs)

Full Context

configure router bgp group neighbor segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs

configure router bgp group segment-routing-v6 route-advertisement drop-routes-with-srv6-tlvs

Description

This command configures the router to drop and not advertise BGP routes (that belong to any address family) with SRv6 TLVs.

The no form of this command configures the router to advertise BGP routes with SRv6 TLVs.

Default

no drop-routes-with-srv6-tlvs

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

drop-tail

drop-tail

Syntax

drop-tail

Context

[Tree] (config>mcast-mgmt>bw-plcy>t2>sec-path>queue drop-tail)

[Tree] (config>mcast-mgmt>bw-plcy>t2>prim-path>queue drop-tail)

Full Context

configure mcast-management bandwidth-policy t2-paths secondary-path queue-parameters drop-tail

configure mcast-management bandwidth-policy t2-paths primary-path queue-parameters drop-tail

Description

Commands in this context configure queue drop-tail parameters.

Platforms

7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

drop-tail

Syntax

drop-tail

Context

[Tree] (config>service>ies>if>sap>ingress>queue-override>queue drop-tail)

[Tree] (config>service>ies>if>sap>egress>queue-override>queue drop-tail)

[Tree] (config>service>vpls>sap>ingress>queue-override>queue drop-tail)

[Tree] (config>service>vpls>sap>egress>queue-override>queue drop-tail)

Full Context

configure service ies interface sap ingress queue-override queue drop-tail

configure service ies interface sap egress queue-override queue drop-tail

configure service vpls sap ingress queue-override queue drop-tail

configure service vpls sap egress queue-override queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>port>eth>access>ing>qgrp>qover>q drop-tail)

[Tree] (config>port>ethernet>network>egr>qgrp>qover>q drop-tail)

[Tree] (config>port>eth>access>egr>qgrp>qover>q drop-tail)

Full Context

configure port ethernet access ingress queue-group queue-overrides queue drop-tail

configure port ethernet network egress queue-group queue-overrides queue drop-tail

configure port ethernet access egress queue-group queue-overrides queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>service>ipipe>sap>ingress>queue-override>queue drop-tail)

[Tree] (config>service>ipipe>sap>egress>queue-override>queue drop-tail)

[Tree] (config>service>cpipe>sap>egress>queue-override>queue drop-tail)

[Tree] (config>service>epipe>sap>egress>queue-override>queue drop-tail)

[Tree] (config>service>epipe>sap>ingress>queue-override>queue drop-tail)

[Tree] (config>service>cpipe>sap>ingress>queue-override>queue drop-tail)

Full Context

configure service ipipe sap ingress queue-override queue drop-tail

configure service ipipe sap egress queue-override queue drop-tail

configure service cpipe sap egress queue-override queue drop-tail

configure service epipe sap egress queue-override queue drop-tail

configure service epipe sap ingress queue-override queue drop-tail

configure service cpipe sap ingress queue-override queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

  • configure service ipipe sap ingress queue-override queue drop-tail
  • configure service ipipe sap egress queue-override queue drop-tail
  • configure service epipe sap egress queue-override queue drop-tail
  • configure service epipe sap ingress queue-override queue drop-tail

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

  • configure service cpipe sap ingress queue-override queue drop-tail
  • configure service cpipe sap egress queue-override queue drop-tail

drop-tail

Syntax

drop-tail

Context

[Tree] (config>service>vprn>if>sap>ingress>queue-override>queue drop-tail)

[Tree] (config>service>vprn>if>sap>egress>queue-override>queue drop-tail)

Full Context

configure service vprn interface sap ingress queue-override queue drop-tail

configure service vprn interface sap egress queue-override queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>qos>sap-ingress>queue drop-tail)

[Tree] (config>qos>sap-egress>queue drop-tail)

Full Context

configure qos sap-ingress queue drop-tail

configure qos sap-egress queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>qos>network-queue>queue drop-tail)

Full Context

configure qos network-queue queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>qos>qgrps>egr>qgrp>queue drop-tail)

[Tree] (config>qos>qgrps>ing>qgrp>queue drop-tail)

Full Context

configure qos queue-group-templates egress queue-group queue drop-tail

configure qos queue-group-templates ingress queue-group queue drop-tail

Description

Commands in this context configure queue drop-tail parameters.

Platforms

All

drop-tail

Syntax

drop-tail

Context

[Tree] (config>qos>shared-queue>queue drop-tail)

Full Context

configure qos shared-queue queue drop-tail

Description

Commands in this context configure queue drop tail parameters.

Platforms

All

drop-unidentified-traffic

drop-unidentified-traffic

Syntax

[no] drop-unidentified-traffic

Context

[Tree] (config>service>vprn>nat>inside>subscriber-identification drop-unidentified-traffic)

[Tree] (config>router>nat>inside>subscriber-identification drop-unidentified-traffic)

Full Context

configure service vprn nat inside subscriber-identification drop-unidentified-traffic

configure router nat inside subscriber-identification drop-unidentified-traffic

Description

When this command denies address translation to subscribers that have not been identified via accounting messages sent by BNG and received by Radius accounting proxy. This command has effect only in Subscriber Aware Application.

Default

no drop-unidentified-traffic

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop-zero-ipv4-checksum

drop-zero-ipv4-checksum

Syntax

[no] drop-zero-ipv4-checksum

Context

[Tree] (config>service>vprn>nat>inside>nat64 drop-zero-ipv4-checksum)

Full Context

configure service vprn nat inside nat64 drop-zero-ipv4-checksum

Description

This command specifies if UDP datagrams with zero IPv4 checksum are dropped.

If this command is disabled, the system calculates the IPv6 checksum for each such datagram.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

drop-zero-ipv4-checksum

Syntax

[no] drop-zero-ipv4-checksum

Context

[Tree] (config>service>vprn>nat>inside>nat64 drop-zero-ipv4-checksum)

[Tree] (config>router>nat>inside>nat64 drop-zero-ipv4-checksum)

Full Context

configure service vprn nat inside nat64 drop-zero-ipv4-checksum

configure router nat inside nat64 drop-zero-ipv4-checksum

Description

This command enables the NAT64 node to drop received UDP datagrams with zero IPv4 checksum. By default, checksum is re-calculated for non-fragmented datagrams.

The no form of the command disables the command.

Default

disabled

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dropped-only

dropped-only

Syntax

[no] dropped-only

Context

[Tree] (debug>subscr-mgmt>vrgw>brg>pppoe-client>brg-id dropped-only)

Full Context

debug subscriber-mgmt vrgw brg pppoe-client brg-id dropped-only

Description

This command specifies that only packets that are dropped by the vRGW will be shown in debugging.

Default

dropped-only

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

ds1

ds1

Syntax

[no] ds1 ds1-id

Context

[Tree] (config>port>tdm ds1)

Full Context

configure port tdm ds1

Description

Commands in this context configure digital signal level 1 (DS-1) frame parameters. The T-Carrier system was the first successful system that supported digitized voice transmission. The original transmission rate (1.544 Mb/s) in the T-1 (DS-1) line is commonly used by Internet service providers (ISPs) to connect to the Internet.

North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS- system. Digital signals are carried inside the carrier systems.

T-1 transmits DS-1-formatted data at 1.544 Mb/s through the network. The corresponding European carrier is E-1 with a data rate of 2.048 Mb/s. E-1 and T-1 (DS-1) can be interconnected for international use.

The no form of this command disables DS-1 capabilities.

Parameters

ds1-id

Identifies the DS-1 channel being created.

Values

DS1: 1 to 28, ds1-sonet-sdh-index

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

ds3

ds3

Syntax

[no] ds3 [sonet-sdh-index]

Context

[Tree] (config>port>tdm ds3)

Full Context

configure port tdm ds3

Description

Commands in this context configure DS-3 parameters. DS-3 lines provide a speed of 44.736 Mb/s and is also frequently used by service providers. DS-3 lines carry 28 DS-1 signals and a 44.736 Mb/s data rate.

A DS-3 connection typically supports data rates of about 43 Mb/s. A T-3 line actually consists of 672 individual channels, each supporting 64 kb/s. T-3 lines are used mainly by Service Providers to connect to the Internet backbone and for the backbone itself.

Depending on the MDA type, the DS-3 parameters must be disabled if clear channel is enabled by default (for example, on the m12-ds3 MDA). Clear channel is a channel that uses out-of-band signaling, not in-band signaling, so the channel's entire bit rate is available. Channelization must be explicitly specified. Note that if DS-3 nodes are provisioned on a channelized SONET/SDH MDA you must provision the parent STS-1 SONET/STM0 SDH path first.

North America uses the T-Carrier system while Europe uses the E-Carrier system of transmission, using multiples of the DS system. Digital signals are carried inside the carrier systems.

The no form of this command disables DS-3 capabilities.

Parameters

sonet-sdh-index

Specifies the components making up the specified SONET/SDH Path. Depending on the type of SONET/SDH port the sonet-sdh-index must specify more path indexes to specify the payload location of the path. The sonet-sdh-index differs for SONET and SDH ports.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

dsap

dsap

Syntax

dsap dsap-value [dsap-mask]

no dsap

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dsap)

Full Context

configure qos sap-ingress mac-criteria entry match dsap

Description

Configures an Ethernet 802.2 LLC DSAP value or range for an ingress SAP QoS policy match criterion.

This is a 1-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.

The snap-pid field, etype field, ssap, and dsap fields are mutually exclusive and cannot be part of the same match criteria.

Use the no form of this command to remove the dsap value as the match criterion.

Default

no dsap

Parameters

dsap-value

The 8-bit dsap match criteria value in hexadecimal.

Values

0x00 to 0xFF (hex)

dsap-mask

This is optional and can be used when specifying a range of dsap values to use as the match criteria.

This 8-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Values

0x00 to 0xFF (hex)

Default

FF

Platforms

All

dsap

Syntax

dsap dsap-value [dsap-mask]

no dsap

Context

[Tree] (config>filter>mac-filter>entry>match dsap)

Full Context

configure filter mac-filter entry match dsap

Description

Configures an Ethernet 802.2 LLC DSAP value or range for a MAC filter match criterion.

This is a one-byte field that is part of the 802.2 LLC header of the IEEE 802.3 Ethernet Frame.

The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the same match criteria.

Use the no form of the command to remove the dsap value as the match criterion.

Default

no dsap

Parameters

dsap-value

Specifies the 8-bit dsap match criteria value which can be expressed in decimal integer, hexadecimal or binary format.

Values

0 to 255

dsap-mask

Specifies an optional parameter that may be used when specifying a range of dsap values to use as the match criteria.

This 8 bit mask can be configured using the decimal integer, hexadecimal or binary formats described in the following table.

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Default

255 (exact match)

0x00 to 0xFF

Values

0 to 255

Platforms

All

dsap

Syntax

dsap dsap-value [dsap-mask]

Context

[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dsap)

Full Context

configure system security management-access-filter mac-filter entry match dsap

Description

This command configures DSAP match conditions.

Parameters

dsap-value

Specifies the 8-bit DSAP match criteria value in hexadecimal.

Values

0x00 to 0xFF (hex)

mask

Specifies a range of DSAP values to use as the match criteria.

This 8 bit mask can be configured using the formats described in Format Styles:

Table 2. Format Styles

Format Style

Format Syntax

Example

Decimal

DDD

240

Hexadecimal

0xHH

0xF0

Binary

0bBBBBBBBB

0b11110000

Default

FF (hex) (exact match)

Values

0x00 to 0xFF

Platforms

All

dscp

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dscp)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dscp)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dscp)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dscp)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dscp

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dscp

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dscp

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dscp

Description

This command configures DSCP match conditions.

The no form of this command reverts to the default.

Parameters

dscp-name

Specifies the DSCP name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>service>ies>if>sap>ip-tunnel dscp)

Full Context

configure service ies interface sap ip-tunnel dscp

Description

This command sets the DSCP code-point in the outer IP header of encapsulated packets associated with a particular tunnel.

The no form of this command copies the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.

Default

no dscp

Parameters

dscp

Specifies the DSCP code-point to be used.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax

dscp dscp-name fc fc-name

no dscp dscp-name

Context

[Tree] (config>service>vprn>sgt-qos dscp)

[Tree] (config>router>sgt-qos dscp)

Full Context

configure service vprn sgt-qos dscp

configure router sgt-qos dscp

Description

This command creates a mapping between the DiffServ Code Point (DSCP) of the self-generated traffic and the forwarding class.

Self-generated traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DSCPs to the forwarding class.

All DSCP names that define a DSCP value must be explicitly defined.

The no form of this command removes the DSCP-to-forwarding class association.

Parameters

dscp-name

Specifies the name of the DSCP to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

fc fc-name

Specifies the forwarding class name. All packets with a DSCP value or MPLS EXP bit that are not defined will be placed in this forwarding class.

Values

be, l2, af, l1, h2, ef, h1, nc

Platforms

All

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>service>vprn>if>sap>ip-tunnel dscp)

Full Context

configure service vprn interface sap ip-tunnel dscp

Description

This command sets the DSCP code-point in the outer IP header of GRE encapsulated packets associated with a particular GRE tunnel. The default, set using the no form of this command, is to copy the DSCP value from the inner IP header (after remarking by the private tunnel SAP egress qos policy) to the outer IP header.

Default

no dscp

Parameters

dscp

Specifies the DSCP code-point to be used.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax

dscp in-profile dscp-name out-profile dscp-name

no dscp

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action>remark dscp)

Full Context

configure application-assurance group policy app-qos-policy entry action remark dscp

Description

Commands in this context configure DSCP remark action or actions on flows matching this AQP entry. When enabled, all packets for all flows matching this AQP entry will be remarked to the configured DSCP name.

DSCP remark can only be applied when the entry remarks forwarding class or forwarding class and priority. In-profile and out-of profile of a given packet for DSCP remark is assessed after all AQP policing and priority remarking actions took place.

The no form of this command stops DSCP remarking action on flows matching this AQP entry.

Default

no dscp

Parameters

in-profile dscp-name

Specifies the DSCP name to use to remark in-profile flows that match this policy.

out-profile dscp-name

Specifies the DSCP name to use to remark out-of-profile flows that match this policy.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax

dscp {eq | neq} dscp-name

no dscp

Context

[Tree] (config>app-assure>group>policy>aqp>entry>match dscp)

[Tree] (config>app-assure>group>sess-fltr>entry>match dscp)

Full Context

configure application-assurance group policy app-qos-policy entry match dscp

configure application-assurance group session-filter entry match dscp

Description

This command adds a DSCP name to the match criteria used by this entry.

The no form of this command removes dscp from match criteria for this entry.

Default

no dscp

Parameters

eq

Specifies that the value configured and the value in the flow are equal.

neq

Specifies that the value configured differs from the value in the flow.

dscp-name

Specifies the DSCP name to be used in the match.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dscp)

[Tree] (config>test-oam>build-packet>header>ipv4 dscp)

Full Context

debug oam build-packet packet field-override header ipv4 dscp

configure test-oam build-packet header ipv4 dscp

Description

This command defines the DSCP value to be used in the IPv4 header.

The no form of this command reverts to the default.

Default

dscp be

Parameters

dscp-name

Specifies the DSCP value to be used in the IPv4 header.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dscp)

[Tree] (config>test-oam>build-packet>header>ipv6 dscp)

Full Context

debug oam build-packet packet field-override header ipv6 dscp

configure test-oam build-packet header ipv6 dscp

Description

This command defines the DSCP value to be used in the IPv6 header.

The no form of this command removes the DSCP name.

Parameters

dscp-name

Specifies the DSCP value to be used in the IPv6 header.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name

dscp resolve

Context

[Tree] (config>oam-pm>session>ip dscp)

Full Context

configure oam-pm session ip dscp

Description

This command can be used to explicitly configure the DSCP value to the specified dscp-name, or to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.

Default

dscp resolve

Parameters

dscp-name

Specifies the Diffserv code point name.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

resolve

Specifies to use the configured fc and profile values to derive the DSCP value from the egress network QoS policy 1.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>oam-pm>session>mpls dscp)

Full Context

configure oam-pm session mpls dscp

Description

This command can be used to explicitly configure the DSCP value that is carried in the DM PDU. This value is not used on the launch point or the reflector to influence the QoS behavior on the network elements. The frame itself has no IP information because it uses the General Associated Channel Header (G-Ach). The fc and profile values are used to influence QoS behavior on the launch point and the responder.

The no form of this command reverts the dscp carried in the DM PDU to default.

Default

dscp be

Parameters

dscp-name

Specifies the Diffserv code point name.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5,nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41,af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Values

be

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name [dscp-name] fc fc-name [priority {low | high}]

no dscp dscp-name [dscp-name]

Context

[Tree] (config>qos>sap-ingress dscp)

Full Context

configure qos sap-ingress dscp

Description

This command explicitly sets the forwarding class or subclass or enqueuing priority when a packet is marked with the DiffServ Code Point (DSCP) value contained in the dscp-name. A list of up to eight dscp-names can be entered on a single command. The lists of dscp-names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight dscp-names with the same parameters (fc, priority) will result in multiple lists being created. Conversely, multiple lists with the same parameters (fc, priority) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, then a new list will be created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.

Adding a DSCP rule on the policy forces packets that match the DSCP value specified to override the forwarding class and enqueuing priority based on the parameters included in the DSCP rule. When the forwarding class is not specified in the rule, a matching packet preserves (or inherits) the existing forwarding class derived from earlier matches in the classification hierarchy. When the enqueuing priority is not specified in the rule, a matching packet preserves (or inherits) the existing enqueuing priority derived from earlier matches in the classification hierarchy.

The DSCP value (referred to here by dscp-name) is derived from the most significant six bits in the IPv4 header ToS byte field (DSCP bits) or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed. The six DSCP bits define 64 DSCP values used to map packets to per-hop Quality of Service (QoS) behavior. The most significant three bits in the IP header ToS byte field are also commonly used in a more traditional manner to specify an IP precedence value, causing an overlap between the precedence space and the DSCP space. Both IP precedence and DSCP classification rules are supported.

DSCP rules have a higher match priority than IP precedence rules and where a dscp-name DSCP value overlaps an ip-prec-value, the DSCP rule takes precedence.

The no form of this command removes the specified the dscp-names from the explicit DSCP classification rule in the SAP ingress policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to eight per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, then the command is aborted at that point with an error message displayed; any DSCP names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.

Removing the dscp-name from the policy immediately removes the DSCP name on all ingress SAPs using the policy.

Parameters

dscp-name

The DSCP name is a required parameter that specifies the unique IP header ToS byte DSCP bits value that will match the DSCP rule. If the command is executed multiple times with the same dscp-name, the previous forwarding class and enqueuing priority is completely overridden by the new parameters or defined to be inherited when a forwarding class or enqueuing priority parameter is missing.

A maximum of 64 DSCP rules are allowed on a single policy and a maximum of eight dscp-names can be specified in a single statement.

The specified name must exist as a dscp-name. SR OS software provides names for the well-known code points; these can be shown using the show qos dscp-table command.

fc fc-name

The value given for fc-name must be one of the predefined forwarding classes in the system. Specifying the fc-name is optional. When a packet matches the rule, the forwarding class is only overridden when the fc fc-name parameter is defined on the rule. If the packet matches and the forwarding class is not explicitly defined in the rule, the forwarding class is inherited based on previous rule matches.

The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (.). If subclass-name does not exist in the context of fc-name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.

Values

fc:

class[.subclass]

class: be, l2, af, l1, h2, ef, h1, nc

subclass: 29 characters max

Default

Inherit (when fc fc-name is not defined, the rule preserves the previous forwarding class of the packet).

priority

This parameter overrides the default enqueuing priority for all packets received on an ingress SAP using this policy that match this rule. Specifying the priority is optional. When a packet matches the rule, the enqueuing priority is only overridden when the priority parameter is defined on the rule. If the packet matches and priority is not explicitly defined in the rule, the enqueuing priority is inherited based on previous rule matches.

Default

Inherits the priority defined by the default-priority statement.

high

This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

low

This parameter is used in conjunction with the priority parameter. Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

Platforms

All

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dscp)

[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dscp)

[Tree] (config>qos>sap-egress>ip-criteria>entry>match dscp)

[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dscp)

Full Context

configure qos sap-ingress ip-criteria entry match dscp

configure qos sap-egress ipv6-criteria entry match dscp

configure qos sap-egress ip-criteria entry match dscp

configure qos sap-ingress ipv6-criteria entry match dscp

Description

This command configures a DSCP code point to be used as a SAP QoS policy match criterion.

The no form of this command removes the DSCP match criterion.

Default

no dscp

Parameters

dscp-name

Specifies a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point can only be specified by its name.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

dscp

Syntax

dscp dscp-name [dscp-name] [fc fc-name] [profile {in | out | exceed | inplus}]

no dscp dscp-name [dscp-name]

Context

[Tree] (config>qos>sap-egress dscp)

Full Context

configure qos sap-egress dscp

Description

This command defines IP Differentiated Services Code Point (DSCP) names that must be matched to perform the associated reclassification actions. The specified name must exist as a DSCP name. SR OS software provides names for the well-known code points. A list of up to eight DSCP names can be entered on a single command. The lists of DSCP names within the configuration are managed by the system to ensure that each list does not exceed eight names. Entering more than eight DSCP names with the same parameters (fc and profile) results in multiple lists being created. Conversely, multiple lists with the same parameters (fc and profile) are merged and the lists repacked to a maximum of eight per list if DSCP names are removed or the parameters changed so the multiple lists use the same parameters. Also, if a subset of a list is entered with different parameters, a new list is created for the subset. When the list is stored in the configuration, the DSCP names are sorted by their DSCP value in ascending numerical order; consequently, the order in the configuration may not be exactly what the user entered.

If an egress packet on the SAP matches an IP DSCP value corresponding to a specified DSCP name, the forwarding class, profile egress queue accounting behavior may be overridden. By default, the forwarding class and profile of the packet is derived from ingress classification and profiling functions. Matching a DSCP-based reclassification rule will override all IP precedence-based reclassification rule actions.

The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the traffic class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.

The reclassification actions from a DSCP reclassification rule may be overridden by an IP flow match event.

The fc keyword is optional. When specified, the egress classification rule will overwrite the forwarding class derived from ingress. The new forwarding class is used for egress remarking and queue mapping decisions. If an IP criteria match occurs after the DSCP match, the new forwarding class may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new fc, the fc from the dscp match will be used.

The profile keyword is optional. When specified, the egress classification rule will overwrite the profile of the packet derived from ingress. The new profile value is used for egress remarking and queue congestion behavior. If an IP criteria match occurs after the DSCP match, the new profile may be overridden by the higher priority match actions. If the higher priority match actions do not specify a new profile, the profile from the DSCP match will be used.

The no form of this command removes the specified the dscp-names from the reclassification rule in the SAP egress QoS policy. As dscp-names are removed, the system repacks the lists of dscp-names with the same parameters (up to 8 per list). As the no command does not have any additional parameters, it is possible to remove multiple dscp-names from multiple DSCP statements having different parameters with one command. If a dscp-name specified in a no command does not exist in any DSCP statement, the command is aborted at that point with an error message displayed. Any dscp-names in the list before the failed entry will be processed as normal but the processing will stop at the failed entry so that the remainder of the list is not processed.

Parameters

dscp-name

The dscp-name parameter is required when defining a DSCP reclassification rule. The specified name must exist as a DSCP name. A maximum of eight DSCP names can be specified in a single statement. SR OS software provides names for the well-known code points, which can be shown using the show qos dscp-table command.

fc-name:

The fc reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the forwarding class specified as fc-name regardless of the ingress classification decision. The explicit forwarding class reclassification may be overwritten by an IP criteria reclassification match. The fc name defined must be one of the eight forwarding classes supported by the system. To remove the forwarding class reclassification action for the specified DSCP value, the dscp command must be re-executed without the fc reclassification action defined.

Values

be, l1, af, l2, h1, ef, h2 or nc

counter-id

Specifies the counter ID.

profile

The profile reclassification action is optional. When specified, packets matching the IP DSCP value corresponding to a specified dscp-name will be explicitly reclassified to the specified profile regardless of the ingress profiling decision. The explicit profile reclassification may be overwritten by an IPv6 criteria or IP criteria reclassification match. To remove the profile reclassification action for the specified dscp-name, the dscp command must be re-executed without the profile reclassification action defined.

in

Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.

out

Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.

exceed

Specifies that when exceed is specified, any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.

inplus

Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.

Platforms

All

dscp

Syntax

dscp {dscp-name | in-profile dscp-name out-profile dscp-name [exceed-profile dscp-name]}

no dscp

Context

[Tree] (config>qos>sap-egress>fc dscp)

Full Context

configure qos sap-egress fc dscp

Description

This command configures a DSCP to be used for remarking packets from the specified FC. If the optional exceed-profile, in-profile, or out-profile keyword is specified, the command will remark different DSCP depending on whether the packet was classified to be exceed, in-profile, or out-of-profile ingress to the node. All inplus-profile traffic is marked with the same value as in-profile traffic.

Default

no dscp

Parameters

dscp-name

Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

exceed-profile dscp-name

This optional parameter specifies the DSCP name to be used to remark the traffic that is exceed-profile. If not specified, this defaults to the same value configured for out-profile parameter.

in-profile dscp-name

Specifies the DSCP name to be used to remark the traffic that is in-profile.

out-profile dscp-name

Specifies the DSCP name to be used to remark the traffic that is out-of-profile.

Platforms

All

dscp

Syntax

dscp dscp-name fc fc-name profile {in | out}

no dscp

Context

[Tree] (config>qos>network>ingress dscp)

Full Context

configure qos network ingress dscp

Description

This command creates a mapping between the DiffServ Code Point (DSCP) of the network ingress traffic and the forwarding class.

Ingress traffic that matches the specified DSCP will be assigned to the corresponding forwarding class. Multiple commands can be entered to define the association of some or all 64 DiffServ code points to the forwarding class. For undefined code points, packets are assigned to the forwarding class specified under the default-action command.

The no form of this command removes the DiffServ code point-to-forwarding class association. The default-action then applies to that code point value.

Parameters

dscp-name

The name of the DiffServ code point to be associated with the forwarding class. DiffServ code point can only be specified by its name and only an existing DiffServ code point can be specified. The software provides names for the well-known code points.

The system-defined names available are as follows. The system-defined names must be referenced as all lowercase, exactly as shown in the first column in Default DSCP Names to DSCP Value Mapping and Default Class Selector Code Points to DSCP Value Mapping.

Additional names-to-code point value associations can be added using the 'dscp-name dscp-name dscp-value’ command.

The actual mapping is being done on the dscp-value, not the dscp-name that references the dscp-value. If a second dscp-name that references the same dscp-value is mapped within the policy, an error will occur. The second name will not be accepted until the first name is removed.

Table 3. Default DSCP Names to DSCP Value Mapping

DSCP Name

DSCP Value Decimal

DSCP Value

Hexadecimal

DSCP Value Binary

nc1

48

0x30

0b110000

nc2

56

0x38

0b111000

ef

46

0x2e

0b101110

af41

34

0x22

0b100010

af42

36

0x24

0b100100

af43

38

0x26

0b100110

af31

26

0x1a

0b011010

af32

28

0x1c

0b011100

af33

30

0x1d

0b011110

af21

18

0x12

0b010010

af22

20

0x14

0b010100

af23

22

0x16

0b010110

af11

10

0x0a

0b001010

af12

12

0x0c

0b001100

af13

14

0x0e

0b001110

default

0

0x00

0b000000

Table 4. Default Class Selector Code Points to DSCP Value Mapping

DSCP Name

DSCP Value Decimal

DSCP Value

Hexadecimal

DSCP Value Binary

cs7

56

0x38

0b111000

cs6

48

0X30

0b110000

cs5

40

0x28

0b101000

cs4

32

0x20

0b100000

cs3

24

0x18

0b011000

cs2

16

0x10

0b010000

cs1

08

0x8

0b001000

fc-name

Enter this required parameter to specify the fc-name with which the code point will be associated.

Values

be, l2, af, l1, h2, ef, h1, nc

profile {in | out}

Enter this required parameter to indicate whether the DiffServ code point value is the in-profile or out-of-profile value. For every DSCP value defined, the profile must be indicated. If a DSCP value is not mapped, the default-action forwarding class and profile state will be used for that value.

DSCP values mapping to forwarding classes Expedited (ef), High-1 (h1) and Network-Control (nc) can only be set to in-profile.

DSCP values mapping to forwarding class "be” can only be set to out-of-profile.

Values

in, out

Platforms

All

dscp

Syntax

dscp dscp-name fc fc-name profile {in | out | exceed | inplus}

no dscp dscp-name

Context

[Tree] (config>qos>network>egress dscp)

Full Context

configure qos network egress dscp

Description

This command configures an IP Differentiated Services Code Point (DSCP) value that must be matched to perform the associated reclassification actions. If an egress packet on an IES/VPRN interface spoke SDP, on a CSC network interface in a VPRN, or on a network interface that the network QoS policy is applied to, matches the specified IP DSCP value, the forwarding class and profile may be overridden.

By default, the forwarding class and profile of the packet are derived from ingress classification and profiling functions. Matching a DHCP-based reclassification rule will override all IP precedence-based reclassification rule actions.

The IP DSCP bits used to match against DSCP reclassification rules come from the Type of Service (ToS) field within the IPv4 header or the Traffic Class field from the IPv6 header. If the packet does not have an IP header, DSCP-based matching is not performed.

The configuration of egress DSCP classification and the configuration of an egress IP criteria or IPv6 criteria entry statement within a network QoS policy are mutually exclusive.

The IP precedence- and DSCP-based reclassification are supported on a network interface, on a CSC network interface in a VPRN, and on a PW used in an IES or VPRN spoke interface. The CLI will block the application of a network QoS policy with the egress reclassification commands to the spoke SDP part of a Layer 2 service.

Conversely, the CLI will not allow the user to add the egress reclassification commands to a network QoS policy if the policy is being used by a Layer 2 spoke SDP.

The egress reclassification commands will only take effect if the redirection of the spoke SDP or CSC interface to use an egress port queue group succeeds. For example, the following CLI command would be successful:

config>service>vprn>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id

config>service>ies>if>spoke-sdp>egress> qos network-policy-id port-redirect-group queue-group-name instance instance-id

config>service>vprn>nw-if>qos network-policy-id port-redirect-group queue-group-name instance instance-id

If the redirection command fails, the PW will use the network QoS policy assigned to the network IP interface, however any reclassification in the network QoS policy applied to the network interface will be ignored.

The no form of this command removes the egress reclassification rule.

Parameters

dscp-name

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

fc fc-name

be, l2, af, l1, h2, ef, h1, nc

profile {in | out | exceed | inplus}

The profile reclassification action is mandatory. When specified, packets matching the DSCP value will be explicitly reclassified to the profile specified regardless of the ingress profiling decision. To remove the profile reclassification action for the specified DSCP value, the no dscp command must be executed.

in - Specifies that any packets matching the reclassification rule will be treated as in-profile by the egress forwarding plane.

out - Specifies that any packets matching the reclassification rule will be treated as out-of-profile by the egress forwarding plane.

exceed - Specifies that any packets matching the reclassification rule will be treated as exceed-profile by the egress forwarding plane.

inplus - Specifies that any packets matching the reclassification rule will be treated as inplus-profile by the egress forwarding plane.

Platforms

All

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dscp)

[Tree] (config>qos>network>ingress>ip-criteria>entry>match dscp)

[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dscp)

[Tree] (config>qos>network>egress>ip-criteria>entry>match dscp)

Full Context

configure qos network egress ipv6-criteria entry match dscp

configure qos network ingress ip-criteria entry match dscp

configure qos network ingress ipv6-criteria entry match dscp

configure qos network egress ip-criteria entry match dscp

Description

This command configures a DSCP to be used as a network QoS policy match criterion.

The no form of this command removes the DSCP match criterion.

Parameters

dscp-name

Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>filter>ipv6-filter>entry>match dscp)

[Tree] (config>filter>ip-filter>entry>match dscp)

Full Context

configure filter ipv6-filter entry match dscp

configure filter ip-filter entry match dscp

Description

This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.

The no form of the command removes the DSCP match criterion.

Default

no dscp

Parameters

dscp-name

Configures a DSCP name. The DiffServ code point may only be specified by its name.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dscp)

[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dscp)

Full Context

configure system security cpm-filter ipv6-filter entry match dscp

configure system security cpm-filter ip-filter entry match dscp

Description

This command configures a DiffServ Code Point (DSCP) name to be used as an IP filter match criterion.

The no form of this command removes the DSCP match criterion.

Default

no dscp

Parameters

dscp-name

Configures a dscp name that has been previously mapped to a value using the dscp-name command. The DiffServ code point may only be specified by its name.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name

no dscp

Context

[Tree] (config>test-oam>icmp>ping-template dscp)

Full Context

configure test-oam icmp ping-template dscp

Description

This command specifies the DSCP to be carried in the IP header. This value is not exposed to egress QoS policies. This command uses well-known DSCP names.

The no form of this command reverts to the default value.

Default

dscp nc1

Parameters

dscp-name

Specifies the DSCP name, up to 32 characters.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp

Syntax

dscp dscp-name

Context

[Tree] (config>test-oam>link-meas>template>twl dscp)

Full Context

configure test-oam link-measurement measurement-template twamp-light dscp

Description

This command configures the DSCP to be copied into the IP header of each TWAMP Light echo request packet launched for the test.

Default

dscp nc1

Parameters

dscp-name

Specifies the DSCP code point to be used.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dscp-in-profile

dscp-in-profile

Syntax

dscp-in-profile dscp-name

no dscp-in-profile

Context

[Tree] (config>qos>network>egress>fc dscp-in-profile)

Full Context

configure qos network egress fc dscp-in-profile

Description

This command specifies the in-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets that require marking at egress on this forwarding class queue, and that are in-profile. The inplus-profile traffic is marked with the same value as in-profile traffic.

When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.

The no form of this command resets the configuration to the factory default in-profile DSCP name setting for policy-id 1.

Parameters

dscp-name

Specifies the system- or user-defined, case-sensitive dscp-name.

Values

Any defined system- or user-defined dscp-name

Platforms

All

dscp-out-profile

dscp-out-profile

Syntax

dscp-out-profile dscp-name

no dscp-out-profile

Context

[Tree] (config>qos>network>egress>fc dscp-out-profile)

Full Context

configure qos network egress fc dscp-out-profile

Description

This command specifies the out-of-profile DSCP name for the forwarding class. The corresponding DSCP value will be used for all IP packets requiring marking the egress on this forwarding class queue that are out-of-profile. The exceed-profile traffic is marked with the same value as out-of-profile traffic.

When multiple DSCP names are associated with the forwarding class at network egress, the last name entered will overwrite the previous value.

The no form of this command resets the configuration to the factory default out-of-profile DSCP name setting for policy-id 1.

Default

Policy-id 1:

Factory setting

Policy-id 2 to 65535:

Policy-id setting

Parameters

dscp-name

Specifies the system- or user-defined, case-sensitive dscp-name.

Values

Any defined system- or user-defined dscp-name

Platforms

All

dslite-lsn-sub

dslite-lsn-sub

Syntax

[no] dslite-lsn-sub router router-instance b4 ipv6-prefix

Context

[Tree] (config>li>li-source>nat dslite-lsn-sub)

Full Context

configure li li-source nat dslite-lsn-sub

Description

This command configures the Dual-Stack Lite LSN subscriber source.

The no form of this command removes the value from the configuration.

Parameters

router-instance

Specifies the router instance the pool belongs to, either by router name or service ID.

Values

router-name: "Base” or "management”

Default

Base

ipv6-prefix

Specifies the IPv6 address.

Values

ipv6-prefix:

<prefix>/<length>

prefix

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x to [0 to FFFF]H

d to [0 to 255]D

<length>

[0 to 128]

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dslite-max-subscriber-limit

dslite-max-subscriber-limit

Syntax

dslite-max-subscriber-limit max

no dslite-max-subscriber-limit

Context

[Tree] (config>service>vprn>nat>inside dslite-max-subscriber-limit)

[Tree] (config>router>nat>inside>dslite dslite-max-subscriber-limit)

Full Context

configure service vprn nat inside dslite-max-subscriber-limit

configure router nat inside dslite dslite-max-subscriber-limit

Description

This command sets the value for the number of high order bits of the source IPv6 address that will be considered as DS-Lite subscriber. The remaining bits of the source IPv6 address will be masked off, effectively aggregation all IPv6 source addresses under the configured prefix length into a single DS-Lite subscriber. Source IPv4 addresses/ports of the traffic carried within the DS-Lite subscriber will be translated into a single outside IPv4 address and the corresponding deterministic port-block (port-blocks can be extended).

The range of values for subscriber-prefix-length in non-deterministic DS-Lite is limited from 32 to 64 (a prefix will be considered as a DS-Lite subscriber) or it can be set to a value of 128 (the source IPv6 address is considered as a DS-Lite subscriber).

In cases where deterministic DS-Lite is enabled in a giver inside routing context, the range of values of the subscriber-prefix-length depends on the value of dslite-max-subscriber-limit parameter as follows:

subscriber-prefix-length – n = [32..64,128]

where n = log2(dslite-max-subscriber-limit)

[or in an alternate form: dslite-max-subscriber-limit = 2^n.]

In other words the largest prefix length for the deterministic DS-Lite subscriber will be 32+n, where n = log2(dslite-max-subscriber-limit). The subscriber prefix length can extend up to 64 bits. Beyond 64 bits for the subscriber prefix length, there only one value is allowed: 128. In the case n must be 0, which means that the mapping between B4 elements (or IPv6 address) and the IPv4 outside addresses is in 1:1 ratio (no sharing of outside IPv4 addresses).

This parameter can be changed only when there are no deterministic prefixes configured in the same routing context.

Default

128

Parameters

max

In non-deterministic DS-Lite this value can be 32 to 64,128, assuming that the deterministic DS-Lite is not concurrently enabled in the same inside routing context.

In case that deterministic DS-Lite is enabled, this value can be within the range [(32+n)..64,128] where n = log2(dslite-max-subscriber-limit). The value of 128 is allowed only when n=0 (each subscriber is mapped to a single outside IPv4 IP address).

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsm

dsm

Syntax

[no] dsm

Context

[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query>ue-state dsm)

Full Context

configure subscriber-mgmt wlan-gw tunnel-query ue-state dsm

Description

This command enables matching on DSM UEs.

The no form of this command disables matching on DSM UEs, unless UE state matching is disabled altogether.

Default

no dsm

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsm

Syntax

[no] dsm

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state dsm)

Full Context

configure subscriber-mgmt wlan-gw ue-query state dsm

Description

This command enables matching on UEs in a DSM state.

The no form of this command disables matching on UEs in a DSM state, unless all state matching is disabled.

Default

no dsm

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsm-ip-filter

dsm-ip-filter

Syntax

dsm-ip-filter dsm-ip-filter-name

no dsm-ip-filter

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm dsm-ip-filter)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt dsm-ip-filter

Description

This command configures an IP filter that is distributed on ISA cards.

This command specifies the IP filter applied to all UEs corresponding to default vlan-range (such as a group-interface) or the specified vlan-range. The IP filter can be created in the config>subscr-mgmt>isa-filter context, and can contain up to 1024 match entries. The IP filter can be overridden per UE from RADIUS via access-accept or COA.

The no form of this command reverts to the default.

Parameters

dsm-ip-filter-name

Specifies the identifier of the distributed-sub-mgmt IP filter.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsm-subscriber

dsm-subscriber

Syntax

[no] dsm-subscriber mac mac-address

Context

[Tree] (config>li>li-source>wlan-gw dsm-subscriber)

Full Context

configure li li-source wlan-gw dsm-subscriber

Description

This command configures the DSM UE source.

Parameters

mac-address

Specifies the MAC address.

Values

mac-addr: xx:xx:xx:xx:xx:xx example: 00:0c:f1:99:85:b8

or XX:XX:XX:XX:XX:XX example: 00-0C-F1-99-85-B8

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dsmap

dsmap

Syntax

dsmap if-num

no dsmap

Context

[Tree] (config>router>mpls>lsp>protect-tp-path>mep dsmap)

[Tree] (config>router>mpls>lsp>transit-path>forward-path>mip dsmap)

[Tree] (config>router>mpls>lsp>transit-path>reverse-path>mip dsmap)

[Tree] (config>router>mpls>lsp>working-tp-path>mep dsmap)

Full Context

configure router mpls lsp protect-tp-path mep dsmap

configure router mpls lsp transit-path forward-path mip dsmap

configure router mpls lsp transit-path reverse-path mip dsmap

configure router mpls lsp working-tp-path mep dsmap

Description

This command is used to configure the values to use in the DSMAP TLV sent by a node in an LSP Trace echo request for a static MPLS-TP LSP. A node sending a DSMAP TLV will include the in-if-num and out-if-num values. Additionally, it will include the out-label for the LSP in the Label TLV for the DSMAP in the echo request message.

The no form of this command equals to a value 0 (this means no interface validation will be performed).

Default

no dsmap

Parameters

if-num

This is a 32-bit value corresponding to the expected ingress interface if-num used by an MPLS-TP LSP for the next hop downstream.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ip

dst-ip

Syntax

dst-ip {ipv6-address | prefix-length}

dst-ip {ip-address/mask | ip-address netmask

no dst-ip

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-ip)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-ip)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-ip

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-ip

Description

This command configures the destination IP match condition.

The no form of this command reverts to the default.

Parameters

ip-address/mask

Specifies the IPv4 address and mask.

Values

ip-address

a.b.c.d

mask

0 to 32

netmask

Specifies the mask, expressed as a dotted quad.

Values

a.b.c.d

ipv6-address

Specifies the IPv6 address (applies only to the 7750 SR).

Values

ipv6-address

x:x:x:x:x:x:x:x (where x is [0 to FFFF]H)

:x:x:x:x:x:d.d.d.d (where d is [0 to 255]D)

prefix-length

Specifies the prefix length (applies only to the 7750 SR).

Values

1 to 128

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip ip-address

no dst-ip

Context

[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path dst-ip)

[Tree] (config>redundancy>mc>peer>mcr>node>cv dst-ip)

[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path dst-ip)

Full Context

configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path dst-ip

configure redundancy multi-chassis peer mc-ring ring ring-node connectivity-verify dst-ip

configure redundancy multi-chassis peer mc-ring ring in-band-control-path dst-ip

Description

This command specifies the destination IP address used in the inband control connection. If the address is not configured, the ring cannot become operational.

Default

no dst-ip

Parameters

ip-address

Specifies the destination IP address.

Values

a.b.c.d (no multicast address)

Platforms

All

dst-ip

Syntax

dst-ip ip-prefix/length

no dst-ip

Context

[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-ip)

[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-ip)

Full Context

configure subscriber-mgmt isa-filter ipv6 entry match dst-ip

configure subscriber-mgmt isa-filter entry match dst-ip

Description

This command specifies that the packet’s destination IP address must match the specified IP prefix and mask.

The no form of this command disables the match on the destination IP.

Parameters

ip-prefix/length

Specifies the IP prefix to match.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip ip-address protocol ip-protocol dst-port port-number

dst-ip ip-address protocol ip-protocol dst-port port-number prefix-length prefix-length

no dst-ip ip-address protocol ip-protocol dst-port port-number

Context

[Tree] (config>subscr-mgmt>http-rdr-plcy>fwd-entries dst-ip)

Full Context

configure subscriber-mgmt http-redirect-policy forward-entries dst-ip

Description

This command configures traffic flow to be forwarded via match in the redirect policy.

Parameters

ip-address

Specifies the IPv4 or IPv6 address to match the destination address in the IP header of the traffic received from the subscriber.

prefix-length

Specifies the length of the prefix specified by the ip-address.

Values

1 to 128 for IPv6

1 to 32 for IPv4

ip-protocol

Specifies the protocol to match the IP protocol in the IP header of the traffic received from the subscriber.

Values

tcp, udp

port-number

Specifies the port to match the destination port in the HTTP request.

Values

1 to 65535

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip {eq | neq} ip-address

dst-ip {eq | neq} ip-prefix-list ip-prefix-list-name

no dst-ip

Context

[Tree] (config>app-assure>group>policy>aqp>entry>match dst-ip)

Full Context

configure application-assurance group policy app-qos-policy entry match dst-ip

Description

This command specifies a destination IP address to use as match criteria.

Default

no dst-ip

Parameters

eq

Specifies that a successful match occurs when the flow matches the specified address or prefix.

neq

Specifies that a successful match occurs when the flow does not match the specified address or prefix.

ip-address

Specifies a valid unicast address.

Values

ipv4-address

a.b.c.d[/mask]

mask - [1..32]

ipv6-address

x:x:x:x:x:x:x:x/prefix-length

x:x:x:x:x:x:d.d.d.d

x - [0..FFFF]H

d - [0..255]D

prefix-length [1..128]

ip-prefix-list-name

Specifies the name of an IP prefix list, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip ip-address

dst-ip dns-ip-cache dns-ip-cache-name

dst-ip ip-prefix-list ip-prefix-list-name

no dst-ip

Context

[Tree] (config>app-assure>group>sess-fltr>entry>match dst-ip)

Full Context

configure application-assurance group session-filter entry match dst-ip

Description

This command configures the destination IP address to match.

Default

no dst-ip

Parameters

ip-address

Specifies a valid unicast address.

Values

ipv4-address

a.b.c.d[/mask]

mask - [1..32]

ipv6-address

x:x:x:x:x:x:x:x/prefix-length

x:x:x:x:x:x:d.d.d.d

x - [0..FFFF]H

d - [0..255]D

prefix-length [1..128]

dns-ip-cache-name

Specifies the name of the dns-ip-cache policy.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip {eq | neq} ip-address

no dst-ip

Context

[Tree] (debug>app-assure>group>traffic-capture>match dst-ip)

Full Context

debug application-assurance group traffic-capture match dst-ip

Description

This command configures debugging on a destination IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-ip

Syntax

dst-ip {ip-address/mask | ip-address ipv4-address-mask}

Context

[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-ip)

Full Context

configure li li-filter li-ip-filter entry match dst-ip

Description

This command configures destination IP address LI filter match criterion.

The no form of this command removes any configured destination IP address. The match criterion is ignored.

Parameters

ip-address

Specifies any address specified as dotted quad.

Values

a.b.c.d

mask

Specifies eight 16-bit hexadecimal pieces representing bit match criteria.

Values

1 to 32

ipv4-address-mask

Specifies a mask expressed in dotted quad notation.

Values

0.0.0.0 to 255.255.255.255

Platforms

All

dst-ip

Syntax

dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask}

no dst-ip

Context

[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-ip)

Full Context

configure li li-filter li-ipv6-filter entry match dst-ip

Description

This command configures destination IPv6 address LI filter match criterion.

The no form of this command removes any configured destination IPv6 address. The match criterion is ignored.

Parameters

ipv6-address

Specifies any IPv6 address entered as:.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

prefix-length

Specifies the prefix length.

Values

1 to 128

ipv6-address-mask

Specifies any IPv6 address mask expressed as:

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - [0 to FFFF]H

d - [0 to 255]D

Platforms

All

dst-ip

Syntax

dst-ip {ip-address/mask | ip-address [ipv4-address-mask] | ip-prefix-list prefix-list-name}

no dst-ip

Context

[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-ip)

[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-ip)

Full Context

configure qos sap-ingress ip-criteria entry match dst-ip

configure qos sap-egress ip-criteria entry match dst-ip

Description

This command configures a destination address range to be used as a SAP QoS policy match criterion.

To match on the IPv4 destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.

The no form of this command removes the destination IPv4 address match criterion.

Default

no dst-ip

Parameters

ip-address

Specifies the destination IPv4 address specified in dotted decimal notation.

Values

ip-address: a.b.c.d

mask

Specifies the length in bits of the subnet mask.

Values

1 to 32

ipv4-address-mask

Specifies the subnet mask in dotted decimal notation.

Values

a.b.c.d (dotted quad equivalent of mask length)

prefix-list-name

Specifies the IPv4 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

dst-ip

Syntax

dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}

no dst-ip

Context

[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-ip)

[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-ip)

Full Context

configure qos sap-ingress ipv6-criteria entry match dst-ip

configure qos sap-egress ipv6-criteria entry match dst-ip

Description

This command configures a destination address range to be used as a SAP QoS policy match criterion.

To match on the IPv6 destination address, specify the address and its associated mask, e.g. 2001:db8:1000::/64.

The no form of this command removes the destination IPv6 address match criterion.

Default

no dst-ip

Parameters

ipv6-address

Specifies the IPv6 address for the IP match criterion in hexadecimal digits (applies to the 7750 SR and 7950 XRS).

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

prefix-length

Specifies the IPv6 prefix length for the IPv6 address expressed as a decimal integer (applies to the 7750 SR and 7950 XRS).

Values

1 to 128

ipv6-address-mask

Specifies the IPv6 address mask.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

ipv6-prefix-list-name

Specifies the IPv6 prefix list name, a string of up to 32 printable ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

dst-ip

Syntax

dst-ip {ip-address/mask | ip-address ipv4-address-mask}

dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask}

no dst-ip

Context

[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-ip)

[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-ip)

Full Context

configure qos network egress ip-criteria entry match dst-ip

configure qos network egress ipv6-criteria entry match dst-ip

Description

This command configures a destination address range to be used as a network QoS policy match criterion.

To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.

The no form of this command removes the destination IP address match criterion.

Parameters

ip-address

Specifies the source IPv4 address specified in dotted decimal notation.

Values

ip-address: a.b.c.d

mask

Specifies the length in bits of the subnet mask.

Values

1 to 32

ipv4-address-mask

Specifies the subnet mask in dotted decimal notation.

Values

a.b.c.d (dotted quad equivalent of mask length)

ipv6-address

Specifies the IPv6 prefix for the IP match criterion in hex digits.

Values

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

mask

Specifies the length of the IPv6 address expressed as a decimal integer.

Values

1 to 128

ipv6-address-mask

Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.

Values

x:x:x:x:x:x:x (eight 16-bit pieces)

Platforms

All

dst-ip

Syntax

dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list ip-prefix-list-name}

dst-ip {ipv6-address/mask | ipv6-address ipv6-address-mask | ipv6-prefix-list ipv6-prefix-list-name}

no dst-ip

Context

[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-ip)

[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-ip)

Full Context

configure qos network ingress ip-criteria entry match dst-ip

configure qos network ingress ipv6-criteria entry match dst-ip

Description

This command configures a destination address range to be used as a network QoS policy match criterion.

To match on the destination address, specify the address and its associated mask, for example, when specifying an IPv4 address, 10.1.0.0/16 or 10.1.0.0 255.255.0.0 can be used.

The no form of this command removes the destination IP address match criterion.

Parameters

ip-address

Specifies the source IPv4 address specified in dotted decimal notation.

Values

ip-address: a.b.c.d

mask

Specifies the length in bits of the subnet mask.

Values

1 to 32

ipv4-address-mask

Specifies the subnet mask in dotted decimal notation.

Values

a.b.c.d (dotted quad equivalent of mask length)

ip-prefix-list-name

Specifies an IPv4 prefix list which contains IPv4 address prefixes to be matched. IP prefix lists are only supported at a network ingress.

Values

A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

ipv6-address

Specifies the IPv6 prefix for the IP match criterion in hex digits.

Values

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

mask

Specifies the length of the IPv6 address expressed as a decimal integer.

Values

1 to 128

ipv6-address-mask

Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.

Values

x:x:x:x:x:x:x (eight 16-bit pieces)

ipv6-prefix-list-name

Specifies an IPv6 prefix list which contains IPv6 address prefixes to be matched. IPv6 prefix lists are only supported at a network ingress.

Values

A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

Platforms

All

dst-ip

Syntax

IPv4:

dst-ip {ip-address/mask | ip-address ipv4-address-mask | ip-prefix-list prefix-list-name}

IPv6:

dst-ip {ipv6-address/prefix-length | ipv6-address ipv6-address-mask | ipv6-prefix-list prefix-list-name}

no dst-ip

Context

[Tree] (config>filter>ipv6-filter>entry>match dst-ip)

[Tree] (config>filter>ip-filter>entry>match dst-ip)

[Tree] (config>filter>ip-exception>entry>match dst-ip)

[Tree] (config>filter>ipv6-exception>entry>match dst-ip)

Full Context

configure filter ipv6-filter entry match dst-ip

configure filter ip-filter entry match dst-ip

configure filter ip-exception entry match dst-ip

configure filter ipv6-exception entry match dst-ip

Description

This command configures a destination address range to be used as a filter policy match criterion.

To match on the destination address, specify the address and its associated mask, e.g., 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used for IPv4.

The no form of this command removes the destination IPv4 or IPv6 address match criterion.

Default

no dst-ip

Parameters

ip-address

Specifies the destination IPv4 address in dotted decimal notation.

Values

a.b.c.d

mask

Specifies the length in bits of the subnet mask.

Values

1 to 32

ipv4-address-mask

Specifies the subnet mask in dotted decimal notation.

Values

a.b.c.d (dotted quad equivalent of mask length)

ip-prefix-listor ipv6-prefix-list prefix-list-name

Specifies to use a list of IP prefixes referred to by prefix-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

ipv6-address

Specifies the IPv6 prefix for the IP match criterion in hex digits.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

prefix-length

Specifies the IPv6 prefix length for the ipv6-address as a decimal integer.

Values

1 to 128

ipv6-address-mask

Specifies the eight 16-bit hexadecimal pieces representing bit match criteria.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0..FFFF]H

d: [0..255]D

Platforms

All

  • configure filter ipv6-filter entry match dst-ip
  • configure filter ip-filter entry match dst-ip

VSR

  • configure filter ipv6-exception entry match dst-ip
  • configure filter ip-exception entry match dst-ip

dst-ip

Syntax

dst-ip ip-address/mask

dst-ip ip-address netmask

dst-ip ip-prefix-list ip-prefix-list-name

no dst-ip

Context

[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-ip)

Full Context

configure system security cpm-filter ip-filter entry match dst-ip

Description

This command configures a destination IP address range to be used as an IP filter match criterion.

To match on the destination IP address, specify the address and its associated mask, for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 may also be used.

The no form of this command removes the destination IP address match criterion.

Default

no dst-ip

Parameters

ip-address

Specifies the IP address for the IP match criterion in dotted decimal notation.

Values

0.0.0.0 to 255.255.255.255

ip-prefix-list

Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.

ip-prefix-list-name

A string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

mask

Specifies the subnet mask length expressed as a decimal integer.

Values

1 to 32

netmask

Specifies the dotted quad equivalent of the mask length.

Values

0.0.0.0 to 255.255.255.255

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ip

Syntax

dst-ip [ipv6-address /prefix-length] [ipv6-prefix-list ipv6-prefix-list-name]

no dst-ip

Context

[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-ip)

Full Context

configure system security cpm-filter ipv6-filter entry match dst-ip

Description

This command configures a destination IPv6 address range to be used as an IPv6 filter match criterion.

To match on the destination IPv6 address, specify the address.

The no form of this command removes the destination IP address match criterion.

This command only applies to the 7750 SR and 7950 XRS.

Default

no dst-ip

Parameters

ipv6-address/prefix-length

Specifies the IPv6 address for the IPv6 match criterion in dotted decimal notation. An IPv6 IP address is written as eight 4-digit (16-bit) hexadecimal numbers separated by colons. One string of zeros per address can be left out, so that 2001:db8::0:217A is the same as 2001:db8:0:0:0:0:0:217A.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

[0 to .FFFF]H

d:

[0 to 255]D

prefix-length:

1 to 128

ipv6-prefix-list

Creates a list of IPv4 prefixes for match criteria in IPv4 ACL and CPM filter policies.

ipv6-prefix-list-name

Specifies a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ipv4-address

dst-ipv4-address

Syntax

dst-ipv4-address a.b.c.d

no dst-ipv4-address

Context

[Tree] (config>test-oam>build-packet>header>ipv4 dst-ipv4-address)

[Tree] (debug>oam>build-packet>packet>field-override>header>ipv4 dst-ipv4-address)

Full Context

configure test-oam build-packet header ipv4 dst-ipv4-address

debug oam build-packet packet field-override header ipv4 dst-ipv4-address

Description

This command defines the destination IPv4 address to be used in the IPv4 header.

The no form of this command removes the destination IPv4 address value.

Default

dst-ipv4-address 0.0.0.0

Parameters

a.b.c.d

Specifies the IPv4 destination address to be used in the IPv4 header.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-ipv6-address

dst-ipv6-address

Syntax

dst-ipv6-address ipv6-address

no dst-ipv6-address

Context

[Tree] (config>test-oam>build-packet>header>ipv6 dst-ipv6-address)

[Tree] (debug>oam>build-packet>packet>field-override>header>ipv6 dst-ipv6-address)

Full Context

configure test-oam build-packet header ipv6 dst-ipv6-address

debug oam build-packet packet field-override header ipv6 dst-ipv6-address

Description

This command defines the destination IPv6 address to be used in the IPv6 header.

The no form of this command removes the IPv6 address.

Parameters

ipv6-address

Specifies the IPv6 destination address to be used in the IPv6 header.

Values

ipv6-address:

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x:

0 to FFFF]H

d:

[0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-mac

dst-mac

Syntax

dst-mac ieee-address [ieee-address-mask]

no dst-mac

Context

[Tree] (config>li>li-filter>li-mac-filter>entry>match dst-mac)

Full Context

configure li li-filter li-mac-filter entry match dst-mac

Description

This command configures a destination MAC address or range to be used as a MAC filter match criterion.

The no form of this command removes the destination mac address as the match criterion.

Parameters

ieee-address

Specifies the 48-bit IEEE mac address to be used as a match criterion.

Values

HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

ieee-address-mask

Specifies a 48-bit mask that can be configured using:

Format Style

Format Syntax

Example

Decimal

DDDDDDDDDDDDDD

281474959933440

Hexadecimal

0xHHHHHHHHHHHH

0x0FFFFF000000

Binary

0bBBBBBBB...B

0b11110000...B

To configure so that all packets with a destination MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000

Default

0xFFFFFFFFFFFF (exact match)

Values

0x00000000000000 — 0xFFFFFFFFFFFF

Platforms

All

dst-mac

Syntax

dst-mac ieee-address [ieee-address-mask]

no dst-mac

Context

[Tree] (config>qos>sap-ingress>mac-criteria>entry>match dst-mac)

Full Context

configure qos sap-ingress mac-criteria entry match dst-mac

Description

Configures a destination MAC address or range to be used as a Service Ingress QoS policy match criterion.

The no form of this command removes the destination MAC address as the match criterion.

Default

no dst-mac

Parameters

ieee-address

The MAC address to be used as a match criterion.

Values

HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

ieee-address-mask

A 48-bit mask to match a range of MAC address values.

This 48-bit mask can be configured using the following formats:

Format Style

Format Syntax

Example

Decimal

DDDDDDDDDDDDDD

281474959933440

Hexadecimal

0xHHHHHHHHHHHH

0xFFFFFF000000

Binary

0bBBBBBBB...B

0b11110000...B

All packets with a source MAC OUI value of 00-03-FA, subject to a match condition, should be specified as: 0003FA000000 0x0FFFFF000000

Values

0x00000000000000 to 0xFFFFFFFFFFFF (hex)

Default

0xFFFFFFFFFFFF

Platforms

All

dst-mac

Syntax

dst-mac ieee-address [ieee-address-mask]

no dst-mac

Context

[Tree] (config>filter>mac-filter>entry>match dst-mac)

Full Context

configure filter mac-filter entry match dst-mac

Description

Configures a destination MAC address or range to be used as a MAC filter match criterion.

The no form of the command removes the destination mac address as the match criterion.

Default

no dst-mac

Parameters

ieee-address

Specifies the MAC address to be used as a match criterion.

Values

HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit. Note that both upper and lower case are supported.

ieee-address-mask

Specifies a 48-bit mask to match a range of MAC address values.

To configure so that all packets with a destination MAC OUI value of 00:03:FA are subject to a match condition then the entry should be specified as: 00:03:FA:00:00:00 FF:FF:FF:00:00:00.

Default

ff:ff:ff:ff:ff:ff (exact match)

Values

HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH

where H is a hexadecimal digit. to 0xFFFFFFFFFFFF

Note that both upper and lower case are supported.

Platforms

All

dst-mac

Syntax

dst-mac ieee-address [ieee-address-mask]

no dst-mac

Context

[Tree] (config>system>security>mgmt-access-filter>mac-filter>entry>match dst-mac)

Full Context

configure system security management-access-filter mac-filter entry match dst-mac

Description

This command configures the destination MAC match condition.

Parameters

ieee-address

Specifies the MAC address to be used as a match criterion.

Values

HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal digit

mask

Specifies a 48-bit mask to match a range of MAC address values.

Platforms

All

dst-mac-address

dst-mac-address

Syntax

dst-mac-address ieee-address

no dst-mac-address

Context

[Tree] (config>test-oam>build-packet>header>ethernet dst-mac-address)

[Tree] (debug>oam>build-packet>packet>field-override>header>ethernet dst-mac-address)

Full Context

configure test-oam build-packet header ethernet dst-mac-address

debug oam build-packet packet field-override header ethernet dst-mac-address

Description

This command defines the destination MAC address for the Ethernet header.

The no form of this command deletes the configured MAC address.

Default

dst-mac-address 00:00:00:00:00:00

Parameters

ieee-address

Specifies the destination Ethernet MAC address to be used in the Ethernet header. Specifies the 48-bit MAC address.

Values

xx:xx:xx:xx:xx:xx

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-port

dst-port

Syntax

dst-port {lt | gt | eq} dst-port-number

dst-port range start end

no dst-port

Context

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ipv6>entry>match dst-port)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ipv6>entry>match dst-port)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>ingr-ip>entry>match dst-port)

[Tree] (config>subscr-mgmt>cat-map>category>exh-lvl>egr-ip>entry>match dst-port)

Full Context

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ipv6-filter-entries entry match dst-port

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ipv6-filter-entries entry match dst-port

configure subscriber-mgmt category-map category exhausted-credit-service-level ingress-ip-filter-entries entry match dst-port

configure subscriber-mgmt category-map category exhausted-credit-service-level egress-ip-filter-entries entry match dst-port

Description

This command configures the destination port match condition.

The no form of this command reverts to the default.

Parameters

lt | gt | eq

Specifies the operator.

dst-port-number

Specifies the destination port number as a decimal hex or binary.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port operator port-number

no dst-port

Context

[Tree] (config>subscr-mgmt>isa-filter>ipv6>entry>match dst-port)

[Tree] (config>subscr-mgmt>isa-filter>entry>match dst-port)

Full Context

configure subscriber-mgmt isa-filter ipv6 entry match dst-port

configure subscriber-mgmt isa-filter entry match dst-port

Description

This command specifies that the packet’s UDP/TCP dst-port must match a specific value. This command is not valid in a match context that is not specific to UDP or TCP.

The no form of this command removes matching of the layer-4 port.

Parameters

operator

Specifies that the only supported value is eq (equal to). The destination port value must be equal to the port-number value.

port-number

Specifies the number of the port to match.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port tcp-port

no dst-port

Context

[Tree] (config>subscr-mgmt>http-rdr-plcy dst-port)

Full Context

configure subscriber-mgmt http-redirect-policy dst-port

Description

This command specifies the port to match the destination port in the HTTP request.

HTTP traffic that does not match this port, is not redirected.

The no form of this command reverts to the default.

Default

dst-port 80

Parameters

tcp-port

Specifies the TCP port.

Values

1 to 65535

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port {eq | neq} port-num

dst-port {eq | neq} port-list port-list-name

dst-port {eq | neq} range start-port-num end-port-num

no dst-port

Context

[Tree] (config>app-assure>group>policy>aqp>entry>match dst-port)

Full Context

configure application-assurance group policy app-qos-policy entry match dst-port

Description

This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.

The no form of this command removes the parameters from the configuration.

Default

no dst-port

Parameters

eq

Specifies that a successful match occurs when the flow matches the specified port.

neq

Specifies that a successful match occurs when the flow does not match the specified port.

port-num

Specifies the destination port number.

Values

0 to 65535

start-port-num end-port-num

Specifies the start or end destination port number.

Values

0 to 65535

port-list-name

Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port {eq | gt | lt} port-num

dst-port port-list port-list-name

dst-port range start-port-num end-port-num

no dst-port

Context

[Tree] (config>app-assure>group>sess-fltr>entry>match dst-port)

Full Context

configure application-assurance group session-filter entry match dst-port

Description

This command specifies a destination TCP/UDP port, destination port list, or destination range to use as match criteria.

The no form of this command removes the parameters from the configuration.

Default

no dst-port

Parameters

eq

Specifies that a successful match occurs when the flow matches the specified port.

gt

Specifies all port numbers greater than the port-number match.

lt

Specifies all port numbers less than the port-number match.

port-num

Specifies the destination port number.

Values

0 to 65535

start-port-num end-port-num

Specifies the start or end destination port number.

Values

0 to 65535

port-list-name

Specifies a named port-list, up to 32 characters, containing a set of ports or ranges of ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port {eq | neq} port-num

no dst-port

Context

[Tree] (debug>app-assure>group>traffic-capture>match dst-port)

Full Context

debug application-assurance group traffic-capture match dst-port

Description

This command configures debugging on a destination port.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-port

Syntax

dst-port {lt | gt | eq} dst-port-number

dst-port range dst-port-number dst-port-number

no dst-port

Context

[Tree] (config>li>li-filter>li-ipv6-filter>entry>match dst-port)

[Tree] (config>li>li-filter>li-ip-filter>entry>match dst-port)

Full Context

configure li li-filter li-ipv6-filter entry match dst-port

configure li li-filter li-ip-filter entry match dst-port

Description

This command configures a destination TCP or UDP port number or port range for an IP LI filter match criterion. Note that an entry containing Layer 4 match criteria will not match non-initial (second, third, and so on) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of this command removes the destination port match criterion.

Parameters

lt

Specifies all port numbers less than dst-port-number match.

gt

Specifies all port numbers greater than dst-port-number match.

eq

Specifies that dst-port-number must be an exact match.

dst-port-number

Specifies an inclusive range of port numbers to be used as a match criteria. The destination port numbers start-port and end-port are expressed as decimal integers.

Values

[0..65535]D

[0x0..0xFFFF]H

[0b0..0b1111111111111111]B

Platforms

All

dst-port

Syntax

dst-port {lt | gt | eq} dst-port-number

dst-port range start end

no dst-port

Context

[Tree] (config>qos>sap-ingress>ipv6-criteria>entry>match dst-port)

[Tree] (config>qos>sap-ingress>ip-criteria>entry>match dst-port)

[Tree] (config>qos>sap-egress>ip-criteria>entry>match dst-port)

[Tree] (config>qos>sap-egress>ipv6-criteria>entry>match dst-port)

Full Context

configure qos sap-ingress ipv6-criteria entry match dst-port

configure qos sap-ingress ip-criteria entry match dst-port

configure qos sap-egress ip-criteria entry match dst-port

configure qos sap-egress ipv6-criteria entry match dst-port

Description

This command configures a destination TCP or UDP port number or port range for a SAP QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Default

no dst-port

Parameters

{lt | gt | eq} dst-port-number

The TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) to the destination port value, specified as a decimal integer.

Values

1 to 65535 (decimal)

range startend

The range of TCP or UDP port values to match, specified as between the start and end destination port values inclusive.

Values

1 to 65535 (decimal)

Platforms

All

dst-port

Syntax

dst-port {lt | gt | eq} dst-port-number

dst-port port-list port-list-name

dst-port range start end

no dst-port

Context

[Tree] (config>qos>network>ingress>ip-criteria>entry>match dst-port)

[Tree] (config>qos>network>ingress>ipv6-criteria>entry>match dst-port)

[Tree] (config>qos>network>egress>ipv6-criteria>entry>match dst-port)

[Tree] (config>qos>network>egress>ip-criteria>entry>match dst-port)

Full Context

configure qos network ingress ip-criteria entry match dst-port

configure qos network ingress ipv6-criteria entry match dst-port

configure qos network egress ipv6-criteria entry match dst-port

configure qos network egress ip-criteria entry match dst-port

Description

This command configures a destination TCP or UDP port number, port range, or a port list for a network QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Parameters

lt

Keyword used to specify TCP or UDP port numbers to match that are less than the destination port value.

gt

Keyword used to specify TCP or UDP port numbers to match that are greater than the destination port value.

eq

Keyword used to specify TCP or UDP port numbers to match that are equal to the destination port value.

dst-port-number

Specifies the TCP or UDP port numbers to match, specified as less than (lt), greater than (gt), or equal to (eq) the destination port value, specified as a decimal integer.

Values

1 to 65535

port-list-name

Specifies a port list name, up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

start

Specifies the starting range of TCP or UDP port values to match.

Values

1 to 65535

end

Specifies the end range of TCP or UDP port values to match.

Values

1 to 65535

Platforms

All

dst-port

Syntax

dst-port {lt | gt | eq} dst-port-number

dst-port port-list port-list-name

dst-port range dst-port-number dst-port-number

no dst-port

Context

[Tree] (config>filter>ip-exception>entry>match dst-port)

[Tree] (config>filter>ipv6-filter>entry>match dst-port)

[Tree] (config>filter>ipv6-exception>entry>match dst-port)

[Tree] (config>filter>ip-filter>entry>match dst-port)

Full Context

configure filter ip-exception entry match dst-port

configure filter ipv6-filter entry match dst-port

configure filter ipv6-exception entry match dst-port

configure filter ip-filter entry match dst-port

Description

This command configures a destination TCP, UDP, or SCTP port number or port range for an IP filter or IP exception match criterion. An entry containing Layer 4 non-zero match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information. Similarly an entry containing the "dst-port eq 0” match criterion, may match non-initial fragments when the destination port value is not present in a packet fragment and other match criteria are also met.

The no form of the command removes the destination port match criterion.

Default

no dst-port

Parameters

lt

Specifies that all port numbers less than the dst-port-number match.

gt

Specifies that all port numbers greater than the dst-port-number match.

eq

Specifies that the dst-port-number must be an exact match.

dst-port-number

Specifies the destination port number to be used as a match criteria expressed as a decimal integer, as well as in hexadecimal or binary format. The following value is for decimal integer format only.

Values

0 to 65535

port-list-name

Specifies to use a list of ports referred to by port-list-name, which is a string of up to 32 characters of printable ASCII characters. If special characters are used, the string must be enclosed within double quotes.

dst-port-number dst-port-number

Specifies inclusive port range between two dst-port-number values.

Platforms

VSR

  • configure filter ipv6-exception entry match dst-port
  • configure filter ip-exception entry match dst-port

All

  • configure filter ipv6-filter entry match dst-port
  • configure filter ip-filter entry match dst-port

dst-port

Syntax

dst-port value [mask]

no dst-port

Context

[Tree] (config>system>security>mgmt-access-filter>ip-filter>entry dst-port)

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter>entry dst-port)

Full Context

configure system security management-access-filter ip-filter entry dst-port

configure system security management-access-filter ipv6-filter entry dst-port

Description

This command configures a destination TCP or UDP port number or port range for a management access filter match criterion.

The no form of this command removes the destination port match criterion.

Parameters

value

Specifies the destination TCP or UDP port number as match criteria.

Values

1 to 65535 (decimal)

mask

Specifies the mask used to specify a range of destination port numbers as the match criterion.

This 16 bit mask can be configured using the formats described in Format Styles to Configure Mask:

Table 5. Format Styles to Configure Mask

Format Style

Format Syntax

Example

Decimal

DDDDD

63488

Hexadecimal

0xHHHH

0xF800

Binary

0bBBBBBBBBBBBBBBBB

0b1111100000000000

To select a range from 1024 up to 2047, specify 1024 0xFC00 for value and mask.

Default

65535 (exact match)

Values

1 to 65535 (decimal)

Platforms

All

dst-port

Syntax

dst-port [tcp/udp port-number] [mask]

dst-port port-list port-list-name

dst-port range tcp/udp port-number tcp/udp port-number

no dst-port

Context

[Tree] (cfg>sys>sec>cpm>ipv6-filter>entry>match dst-port)

[Tree] (cfg>sys>sec>cpm>ip-filter>entry>match dst-port)

Full Context

configure system security cpm-filter ipv6-filter entry match dst-port

configure system security cpm-filter ip-filter entry match dst-port

Description

This command specifies the TCP/UDP port or port name to match the destination-port of the packet.

Note:

An entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd, etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of this command removes the destination port match criterion.

Default

no dst-port

Parameters

tcp/udp port-number

Specifies the destination port number to be used as a match criteria expressed as a decimal integer.

Values

0 to 65535 (accepted in decimal hex or binary)

port-list-name

Specifies the port list name to be used as a match criteria for the destination port.

mask

Specifies the 16 bit mask to be applied when matching the destination port.

Values

[0x0000 to 0xFFFF] | [0 to 65535] | [0b0000000000000000 to 0b1111111111111111]

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-port-range

dst-port-range

Syntax

dst-port-range start port-number end port-number

no dst-port-range

Context

[Tree] (config>service>nat>nat-classifier>entry>match dst-port-range)

Full Context

configure service nat nat-classifier entry match dst-port-range

Description

This command configures a destination TCP or UDP port number or port range.

Note that an entry containing Layer 4 match criteria will not match non-initial (2nd, 3rd,etc) fragments of a fragmented packet since only the first fragment contains the Layer 4 information.

The no form of the command removes the destination port match criterion.

Default

dst-port-range start 0 end 65535

Parameters

start port-number

Specifies the start of the port range expressed as a decimal integer.

Values

0 to 65535

end port-number

Specifies the end of the port range expressed as a decimal integer.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dst-tcp-port

dst-tcp-port

Syntax

dst-tcp-port tcp-port

no dst-tcp-port

Context

[Tree] (config>test-oam>build-packet>header>tcp dst-tcp-port)

Full Context

configure test-oam build-packet header tcp dst-tcp-port

Description

This command defines the destination TCP port to be used in the test TCP header.

The no form of this command reverts to the default.

Default

dst-tcp-port 0

Parameters

tcp-port

Specifies the destination TCP port to be used in the test TCP header.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-tcp-port

Syntax

dst-tcp-port tcp-port

no dst-tcp-port

Context

[Tree] (debug>oam>build-packet>packet>field-override>header>tcp dst-tcp-port)

Full Context

debug oam build-packet packet field-override header tcp dst-tcp-port

Description

This command defines the destination TCP port to be used in the TCP header.

The no form of this command reverts to the default.

Default

no override

Parameters

tcp-port

Specifies the destination TCP port to be used in the TCP header.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-udp-port

dst-udp-port

Syntax

dst-udp-port udp-port

no dst-udp-port

Context

[Tree] (config>test-oam>build-packet>header>udp dst-udp-port)

Full Context

configure test-oam build-packet header udp dst-udp-port

Description

This command defines the destination TCP port to be used in the test TCP header.

The no form of this command reverts to the default.

Default

dst-udp-port 0

Parameters

udp-port

Specifies the destination UDP port to be used in the test UDP header.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-udp-port

Syntax

dst-udp-port udp-port

no dst-udp-port

Context

[Tree] (debug>oam>build-packet>packet>field-override>header>udp dst-udp-port)

Full Context

debug oam build-packet packet field-override header udp dst-udp-port

Description

This command defines the destination TCP port to be used in the TCP header.

The no form of this command reverts to the default.

Default

no override

Parameters

udp-port

Specifies the destination UDP port to be used in the UDP header.

Values

0 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dst-zone

dst-zone

Syntax

[no] dst-zone {std-zone-name | non-std-zone-name}

Context

[Tree] (config>system>time dst-zone)

Full Context

configure system time dst-zone

Description

This command configures the start and end dates and offset for summer time or daylight savings time to override system defaults or for user defined time zones.

When configured, the time is adjusted by adding the configured offset when summer time starts and subtracting the configured offset when summer time ends.

If the time zone configured is listed in the Time Zones section, then the starting and ending parameters and offset do not need to be configured with this command unless it is necessary to override the system defaults. The command returns an error if the start and ending dates and times are not available either the Time Zones section on or entered as optional parameters in this command.

Up to five summer time zones may be configured, for example, for five successive years or for five different time zones. Configuring a sixth entry will return an error message. If no summer (daylight savings) time is supplied, it is assumed no summer time adjustment is required.

The no form of the command removes a configured summer (daylight savings) time entry.

Parameters

std-zone-name

Specifies the standard time zone name. The standard name must be a system-defined zone in the Time Zones section. For zone names in the table that have an implicit summer time setting, for example MDT for Mountain Daylight Saving Time, the remaining start-date, end-date and offset parameters need to be provided unless it is necessary to override the system defaults for the time zone.

Values

ADT, NDT, AKDT, CDT, CEST, EDT, EEST, MDT, NZDT, PDT, WEST

non-std-zone-name

Specifies the non-standard time zone name. Create a user-defined name created using the zone. The name can be a maximum of 5 characters in length.

Platforms

All

dual-stack-lite

dual-stack-lite

Syntax

dual-stack-lite

Context

[Tree] (config>service>vprn>nat dual-stack-lite)

[Tree] (config>router>nat>inside dual-stack-lite)

Full Context

configure service vprn nat dual-stack-lite

configure router nat inside dual-stack-lite

Description

Commands in this context configure Dual-Stack Lite (DS-Lite) NAT parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dual-stack-lite-address

dual-stack-lite-address

Syntax

dual-stack-lite-address ipv6-address

no dual-stack-lite-address

Context

[Tree] (config>router>pcp-server>server dual-stack-lite-address)

Full Context

configure router pcp-server server dual-stack-lite-address

Description

This command configures the inside dual stack lite AFTR address.

The no form of this command reverts to the default value.

Default

no dual-stack-lite-address

Parameters

ipv6-address

Specifies the IPv6 address.

Values

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x [0 to FFFF]H

d [0 to 255]D

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

duid

duid

Syntax

duid duid [iaid iaid]

no duid

Context

[Tree] (config>service>ies>if>ipv6>dhcp6>pfx-delegate>prefix duid)

Full Context

configure service ies interface ipv6 dhcp6-server prefix-delegation prefix duid

Description

This command configures the DHCP Unique Identifier (DUID) of the DHCP client.

The no form of this command reverts to the default.

Default

duid 2

Parameters

duid

Specifies the ID of the requesting router, up to a maximum of 128 hex values. If set to a non-zero value the prefix defined will only be delegated to this router. If set to zero, the prefix is delegated to any requesting router.

iaid

Specifies the identity association identification (IAID) from the requesting router that needs to match to delegate the prefix defined in this row. If set to 0 no match on the received IAID is done.

Values

1 to 4294967295

Platforms

All

dup-detect

dup-detect

Syntax

dup-detect [anti-spoof-mac mac-address] window minutes num-moves count hold-down [minutes | max]

dup-detect anti-spoof-mac mac-address window minutes num-moves count hold-down [minutes | max] [static-black-hole]

Context

[Tree] (config>service>vpls>proxy-nd dup-detect)

[Tree] (config>service>vpls>proxy-arp dup-detect)

Full Context

configure service vpls proxy-nd dup-detect

configure service vpls proxy-arp dup-detect

Description

This command enables a mechanism that detects duplicate IPs and ARP/ND spoofing attacks. Attempts (relevant to dynamic and EVPN entry types) to add the same IP (different MAC) are monitored for window <minutes>. When <count> is reached within that window, the proxy-ARP/ND entry for the suspected IP is marked as duplicate. An alarm is also triggered. This condition is cleared when hold-down time expires (max does not expire) or a clear command is issued.

If the anti-spoof-mac is configured, the proxy-ARP/ND offending entry's MAC is replaced with this <mac-address> and advertised in an unsolicited GARP/NA for local SAP/SDP-bindings, and in EVPN to remote PEs. This mechanism assumes that the same anti-spoof-mac is configured in all the PEs for the same service and that traffic with destination anti-spoof-mac received on SAPs/SDP-bindings will be dropped. An ingress mac-filter may be configured to drop traffic to the anti-spoof-mac.

The anti-spoof-mac can also be combined with the static-black-hole option. To use a black-hole MAC entry for the anti-spoof-mac function in a proxy-ARP/ND service, the following must be configured:

  • static-black-hole option for the anti-spoof-mac

  • a static black-hole MAC using the same MAC address used for the anti-spoof-mac: static-mac mac <mac-address> create black-hole command.

When both anti-spoof-mac and static-black-hole commands are configured, the MAC is advertised in EVPN as Static. Locally, the MAC will be shown in the FDB as CStatic and associated with a black-hole.

The combination of the anti-spoof-mac and the static-black-hole options ensures that any frame arriving in the system with MAC DA=anti-spoof-mac will be discarded, regardless of the ingress endpoint type (SAP/SDP-binding or EVPN) and without the need for a filter.

If the user wants to redirect the traffic with MAC DA=anti-spoof-mac instead of discarding it, redirect filters should be configured on SAPs/SDP-bindings instead of the static-black-hole option.

If the static-black-hole option is not configured for the anti-spoof-mac, the behavior is as follows:

  • The anti-spoof-mac is not programmed in the FDB.

  • Any attempt to add a Static MAC (or any other MAC) with the anti-spoof-mac value will be rejected by the system.

  • A mac-filter is needed to discard traffic with MAC DA=anti-spoof-mac.

Any changes to the configuration of anti-spoof-mac require proxy-arp or proxy-nd to first be shut down. Refer to "ARP/ND Snooping and Proxy Support” in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 2 Services and EVPN Guide: VLL, VPLS, PBB, and EVPN for more information.

Default

dup-detect window 3 num-moves 5 hold-down 9

Parameters

window minutes

Specifies the window size in minutes.

Values

1 to 15

Default

3

count

Specifies the number of moves required so that an entry is declared duplicate.

Values

3 to 10

Default

5

hold-down minutes

Specifies the hold-down time for a duplicate entry.

Values

2 to 60

Default

9

hold-down max

Specifies permanent hold-down time for a duplicate entry.

mac-address

Specifies the optional anti-spoof-mac to use.

Platforms

All

duplex

duplex

Syntax

duplex {full | half}

Context

[Tree] (config>port>ethernet duplex)

Full Context

configure port ethernet duplex

Description

This command configures the duplex of a Fast Ethernet port when autonegotiation is disabled.

This configuration command allows for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate this parameter is ignored.

Default

duplex full

Parameters

full

Sets the link to full duplex mode.

half

Sets the link to half duplex mode.

Platforms

All

duplex

Syntax

duplex {full | half}

Context

[Tree] (bof duplex)

Full Context

bof duplex

Description

This command configures the duplex mode of the CPM management Ethernet port when autonegotiation is disabled in the running configuration and the Boot Option File (BOF). If the port is configured to autonegotiate this parameter will be ignored.

Parameters

full

Sets the link to full duplex mode.

half

Sets the link to half duplex mode.

Platforms

All

dwdm

dwdm

Syntax

dwdm

Context

[Tree] (config>port dwdm)

Full Context

configure port dwdm

Description

This command configures the Dense Wavelength Division Multiplexing (DWDM) parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dying-gasp

dying-gasp

Syntax

[no] dying-gasp

Context

[Tree] (config>port>ethernet>efm-oam>link-mon>local-sf-action>info-notification dying-gasp)

Full Context

configure port ethernet efm-oam link-monitoring local-sf-action info-notification dying-gasp

Description

This command sets the dying gasp Flag field in the Information OAM PDU when the local signal failure (sf-threshold) threshold is reached. This will be maintained in all subsequent Information OAM PDUs until the situation is cleared.

Interactions: The signal failure threshold will trigger these actions.

Default

no dying-gasp

Platforms

All

dying-gasp

Syntax

dying-gasp local-port-action {log-only | out-of-service}

Context

[Tree] (config>port>ethernet>efm-oam>peer-rdi-rx dying-gasp)

Full Context

configure port ethernet efm-oam peer-rdi-rx dying-gasp

Description

This command defines how to react to the reception of a dying gasp Flag field set in the informational OAMPDU.

Default

dying-gasp local-port-action out-of-service

Parameters

local-port-action

Defines whether or not the local port will be affected when a dying gasp event is received from a peer.

log-only

Keyword that prevents the port from being affected when the local peer receives a dying gasp. The dying gasp will be logged but the port will remain operational.

out-of-service

Keyword that causes the port to enter a non-operation down state with a port state of link up. The error will be logged upon reception of dying gasp. The port will not be available to service data but will continue to carry Link OAM traffic to ensure the link is monitored.

Platforms

All

dying-gasp-tx-on-reset

dying-gasp-tx-on-reset

Syntax

[no] dying-gasp-tx-on-reset

Context

[Tree] (config>system>ethernet>efm-oam dying-gasp-tx-on-reset)

[Tree] (config>port>ethernet>efm-oam dying-gasp-tx-on-reset)

Full Context

configure system ethernet efm-oam dying-gasp-tx-on-reset

configure port ethernet efm-oam dying-gasp-tx-on-reset

Description

This command enables generation of the Information OAM PDU off-cycle when the soft reset notification is received by the EFM application. The local port state remains under the control of the Soft Reset application and does not change based on this EFM function. If the port is operationally up then the local node will continue to consider the port as available for service data and forwarding. If the upstream node requires notification to route around the local node undergoing the soft reset, notification must be sent to those nodes. This is a disruptive function.

This command is disabled by default at the system level and enabled by default at the port level. The combination of the system-level and port-level configuration determines if the dying gasp on soft reset function is active on individual ports. Both the system-level and port-level commands must be enabled in order to support generation of the Information OAM PDU for soft reset. If either is disabled, dying gasp is not active on those ports. This functionality must be enabled prior to the soft reset.

When both grace-tx-enable and dying-gasp-tx-on-reset are active on the same port, grace-tx-enable takes precedence when a soft reset is invoked if the Peer Vendor OUI being received is 00:16:4d (ALU) or the configured config>port>ethernet>efm-oam grace-vendor-oui value. The grace-tx-enable command should not be configured if the Nokia Vendor Specific Grace TLV is not supported on the remote peer, including Nokia 7750 SR equipment prior to release 11.0 R4.

Default

config>system>ethernet>efm-oam>no dying-gasp-tx-on-reset

config>port>ethernet>efm-oam>dying-gasp-tx-on-reset

Platforms

All

dynamic

dynamic

Syntax

dynamic ip-address [create]

no dynamic ip-address

Context

[Tree] (config>service>vpls>proxy-arp dynamic)

[Tree] (config>service>vpls>proxy-nd dynamic)

Full Context

configure service vpls proxy-arp dynamic

configure service vpls proxy-nd dynamic

Description

This command creates a dynamic IP that can be associated to a MAC list. The configured dynamic IP is only converted to a dynamic entry when the resolve process for the IP has passed successfully.

A summary of the IP resolution process is as follows:

  • A resolve message is sent for the configured IP as soon as the dynamic IP is configured. The message is sent with a configurable frequency of 1 to 60 minutes (using the resolve command); the default value is 5 minutes. The actual resolve interval is a "tittered” value of the configured interval.

  • The resolve message is an ARP-request or NS message flooded to all the non-EVPN endpoints in the service, irrespective of the status of the unknown-arp-request-flood-evpn or unknown-ns-flood-evpn commands. The router sends resolve messages at the configured frequency until a dynamic entry for the IP is created in the proxy-ARP or proxy-ND table. The IP entry is created only if all of the following conditions are true.

    • An ARP, GARP, or NA message is received for the configured IP.

    • The associated MAC exists in the configured MAC list for the IP.

      If the MAC list is empty or not configured, the router does not create an entry for the IP.

  • After a dynamic entry is created in the proxy-ARP or proxy-ND table, the IP->MAC entry is advertised in the EVPN.

The no form of the command deletes the dynamic IP and the associated proxy-ARP or proxy-ND entry, if it exists.

Parameters

ip-address

Specifies the IPv4 or IPv6 address.

Values

ip-address: a.b.c.d

ipv6-address: x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

where:

x: [0 to FFFF]H

d: [0 to 255]D

Platforms

All

dynamic

Syntax

dynamic

Context

[Tree] (config>router>if>if-attr>delay dynamic)

Full Context

configure router interface if-attribute delay dynamic

Description

Commands in this context configure dynamic link measurement delay options for the IP interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

dynamic-arp-populate

dynamic-arp-populate

Syntax

[no] dynamic-arp-populate

Context

[Tree] (config>service>vpls>proxy-arp dynamic-arp-populate)

Full Context

configure service vpls proxy-arp dynamic-arp-populate

Description

This command enables the addition of dynamic entries to the proxy-ARP table (disabled by default). When executed, the system will populate proxy-ARP entries from snooped GARP/ARP messages on SAPs/SDP-bindings. These entries will be shown as dynamic.

When disabled, dynamic-arp entries will be flushed from the proxy-ARP table. Enabling dynamic-arp-populate is only recommended in networks with a consistent configuration of this command in all the PEs.

Default

no dynamic-arp-populate

Platforms

All

dynamic-bgp

dynamic-bgp

Syntax

[no] dynamic-bgp

Context

[Tree] (config>router>static-route-entry>black-hole dynamic-bgp)

Full Context

configure router static-route-entry black-hole dynamic-bgp

Description

This optional command controls the behavior of the associated static route so that if a matching BGP route to the same exact prefix is present in BGP, the static route's nexthop is set to the BGP’s nexthop value. If there is no matching active BGP route, the static route's nexthop is set to be a black-hole nexthop.

Default

no dynamic-bgp

Platforms

All

dynamic-bypass

dynamic-bypass

Syntax

dynamic-bypass [enable | disable]

no dynamic-bypass

Context

[Tree] (config>router>mpls dynamic-bypass)

Full Context

configure router mpls dynamic-bypass

Description

This command disables the creation of dynamic bypass LSPs in FRR. One or more manual bypass LSPs must be configured to protect the primary LSP path at the PLR nodes.

Default

dynamic-bypass enable

Platforms

All

dynamic-cost

dynamic-cost

Syntax

[no] dynamic-cost

Context

[Tree] (config>lag dynamic-cost)

Full Context

configure lag dynamic-cost

Description

This command enables OSPF or ISIS costing of a Link Aggregation Group (LAG) based on the available aggregated, operational bandwidth.

The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.

If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.

For example: Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.

If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.

If dynamic-cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

The no form of this command removes dynamic costing from the LAG.

Default

no dynamic-cost

Platforms

All

dynamic-egress-label-limit

dynamic-egress-label-limit

Syntax

[no] dynamic-egress-label-limit

Context

[Tree] (config>service>vprn>bgp-ipvpn>mpls dynamic-egress-label-limit)

[Tree] (config>service>epipe>bgp-evpn>mpls dynamic-egress-label-limit)

[Tree] (config>service>vpls>bgp-evpn>mpls dynamic-egress-label-limit)

[Tree] (config>service>vprn>bgp-evpn>mpls dynamic-egress-label-limit)

Full Context

configure service vprn bgp-ipvpn mpls dynamic-egress-label-limit

configure service epipe bgp-evpn mpls dynamic-egress-label-limit

configure service vpls bgp-evpn mpls dynamic-egress-label-limit

configure service vprn bgp-evpn mpls dynamic-egress-label-limit

Description

This command relaxes the egress MPLS label limit check when resolving BGP next hops in the tunnel table.

For VPRN services, the OAM label is never computed and, therefore, one more egress label is allowed.

For EVPN (Epipe and VPLS) services, the system only computes the control word and ESI label if they are used. For the control word, the system reduces the egress label limit by one label if the control word is configured in the service. When configured, the ESI label is not counted for Epipes or VPLS services without an ES.

The no form of this command, for EVPN, Epipe, and VPLS services, always accounts for the ESI label and control word.

Default

no dynamic-egress-label-limit

Platforms

All

dynamic-enforcement-policer-pool

dynamic-enforcement-policer-pool

Syntax

[no] dynamic-enforcement-policer-pool number-of-policers

Context

[Tree] (config>card>fp>ingress>dist-cpu-protection dynamic-enforcement-policer-pool)

Full Context

configure card fp ingress dist-cpu-protection dynamic-enforcement-policer-pool

Description

This command reserves a set of policers for use as dynamic enforcement policers for the Distributed CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a SAP or Network Interface). Any change to this configured value automatically clears the high water mark, timestamp, and failed allocation counts as seen under "show card x fp y dist-cpu-protection” and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this value to below the currently used/allocated number causes all dynamic policers to be returned to the free pool (and traffic returns to the local monitors).

Default

no dynamic-enforcement-policer-pool

Parameters

number-of-policers

specifies the number of policers to be reserved.

Values

1000 to 32000

Platforms

All

dynamic-fields

dynamic-fields

Syntax

[no] dynamic-fields

Context

[Tree] (config>app-assure>group>cflowd>rtp-perf>audio-template dynamic-fields)

[Tree] (config>app-assure>group>cflowd>rtp-perf>voice-template dynamic-fields)

[Tree] (config>app-assure>group>cflowd>rtp-perf>video-template dynamic-fields)

[Tree] (config>app-assure>group>cflowd>comp>template dynamic-fields)

[Tree] (config>app-assure>group>cflowd>tcp-perf>template dynamic-fields)

[Tree] (config>app-assure>group>cflowd>volume>template dynamic-fields)

Full Context

configure application-assurance group cflowd rtp-performance audio-template dynamic-fields

configure application-assurance group cflowd rtp-performance voice-template dynamic-fields

configure application-assurance group cflowd rtp-performance video-template dynamic-fields

configure application-assurance group cflowd comprehensive template dynamic-fields

configure application-assurance group cflowd tcp-performance template dynamic-fields

configure application-assurance group cflowd volume template dynamic-fields

Description

Commands in this context configure which fields are included in the exported cflowd template.

The no form of this command removes all configured dynamic fields from the template.

Note:

This command is only supported if the dynamic option is configured in the field-selection command.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-keying

dynamic-keying

Syntax

[no] dynamic-keying

Context

[Tree] (config>ipsec>trans-mode-prof dynamic-keying)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel dynamic-keying)

[Tree] (config>router>if>ipsec>ipsec-tunnel dynamic-keying)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel dynamic-keying)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel dynamic-keying)

Full Context

configure ipsec ipsec-transport-mode-profile dynamic-keying

configure service ies interface ipsec ipsec-tunnel dynamic-keying

configure router interface ipsec ipsec-tunnel dynamic-keying

configure service vprn interface ipsec ipsec-tunnel dynamic-keying

configure service vprn interface sap ipsec-tunnel dynamic-keying

Description

This command enables dynamic keying for the IPsec tunnel.

The no form of this command disables dynamic keying.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

  • configure ipsec ipsec-transport-mode-profile dynamic-keying
  • configure service vprn interface sap ipsec-tunnel dynamic-keying

VSR

  • configure service vprn interface ipsec ipsec-tunnel dynamic-keying
  • configure service ies interface ipsec ipsec-tunnel dynamic-keying
  • configure router interface ipsec ipsec-tunnel dynamic-keying

dynamic-mbs

dynamic-mbs

Syntax

[no] dynamic-mbs

Context

[Tree] (config>qos>qgrps>egr>qgrp>queue dynamic-mbs)

Full Context

configure qos queue-group-templates egress queue-group queue dynamic-mbs

Description

This command enables support for dynamically modifying the MBS size of a queue using HQoS in order to maintain the maximum latency for traffic in the queue based on the queue’s configured MBS and the ratio of its operational PIR to its administrative PIR. As the HQoS algorithm updates the operational PIR, by reducing or increasing it, the MBS of the queue is adjusted accordingly.

The configuration of dynamic MBS and the configuration of queue depth monitoring (monitor-queue-depth command) are mutually exclusive. Queue depth monitoring is an override on the queue where the queue group is applied.

The no form of this command disables dynamic MBS resizing.

Default

no dynamic-mbs

Platforms

All

dynamic-nd-populate

dynamic-nd-populate

Syntax

[no] dynamic-nd-populate

Context

[Tree] (config>service>vpls>proxy-nd dynamic-nd-populate)

Full Context

configure service vpls proxy-nd dynamic-nd-populate

Description

This command enables the addition of dynamic entries to the proxy-ND table. The command is disabled by default. When executed, the system will populate proxy-ND entries from snooped Neighbor Advertisement (NA) messages on SAPs/SDP-bindings, in addition to the entries coming from EVPN (if the EVPN is enabled). These entries will be shown as dynamic, as opposed to EVPN entries or static entries.

When disabled, dynamic-ND entries will be flushed from the proxy-ND table. Enabling dynamic-nd-populate is only recommended in networks with a consistent configuration of this command in all the PEs.

Default

no dynamic-nd-populate

Platforms

All

dynamic-neighbor

dynamic-neighbor

Syntax

dynamic-neighbor

Context

[Tree] (config>service>vprn>bgp>group dynamic-neighbor)

Full Context

configure service vprn bgp group dynamic-neighbor

Description

Commands in this context configure dynamic BGP sessions for a peer group.

Platforms

All

dynamic-neighbor

Syntax

dynamic-neighbor

Context

[Tree] (config>router>bgp>group dynamic-neighbor)

Full Context

configure router bgp group dynamic-neighbor

Description

Commands in this context configure dynamic BGP sessions for a peer group.

Platforms

All

dynamic-neighbor-limit

dynamic-neighbor-limit

Syntax

dynamic-neighbor-limit peers

no dynamic-neighbor-limit

Context

[Tree] (config>service>vprn>bgp>group dynamic-neighbor-limit)

[Tree] (config>service>vprn>bgp dynamic-neighbor-limit)

Full Context

configure service vprn bgp group dynamic-neighbor-limit

configure service vprn bgp dynamic-neighbor-limit

Description

This command configures the maximum number of dynamic BGP sessions that are accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.

The no form of this command removes the limit on the number of dynamic sessions.

Default

no dynamic-neighbor-limit

Parameters

peers

Specifies the maximum number of dynamic BGP sessions.

Values

1 to 8192

Platforms

All

dynamic-neighbor-limit

Syntax

dynamic-neighbor-limit peers

no dynamic-neighbor-limit

Context

[Tree] (config>router>bgp dynamic-neighbor-limit)

[Tree] (config>router>bgp>group dynamic-neighbor-limit)

Full Context

configure router bgp dynamic-neighbor-limit

configure router bgp group dynamic-neighbor-limit

Description

This command configures the maximum number of dynamic BGP sessions that will be accepted from remote peers associated with the entire BGP instance or a specific peer group. If accepting a new dynamic session would cause either the group limit or the instance limit to be exceeded, then the new session attempt is rejected and a Notification message is sent back to the remote peer.

The no form of this command removes the limit on the number of dynamic sessions.

Default

no dynamic-neighbor-limit

Parameters

peers

Specifies the maximum number of dynamic BGP sessions.

Values

1 to 8192

Platforms

All

dynamic-parameters

dynamic-parameters

Syntax

dynamic-parameters

Context

[Tree] (config>sys>security>dist-cpu-protection>policy>protocol dynamic-parameters)

Full Context

configure system security dist-cpu-protection policy protocol dynamic-parameters

Description

The dynamic-parameters are used to instantiate a dynamic enforcement policer for the protocol when the associated local-monitoring-policer is considered as exceeding its rate parameters (at the end of a minimum monitoring time of 60 seconds).

Platforms

All

dynamic-policer

dynamic-policer

Syntax

dynamic-policer

Context

[Tree] (config>qos>sap-ingress dynamic-policer)

[Tree] (config>qos>sap-egress dynamic-policer)

Full Context

configure qos sap-ingress dynamic-policer

configure qos sap-egress dynamic-policer

Description

Commands in this context configure common properties for dynamic-policers. Dynamic policers are instantiated and terminated on demand due to an action request submitted by the policy server (for example, using a Gx interface). The actions types behind dynamic policers are typically related to rate-limiting or volume monitoring. The dynamic-policers can be instantiated on demand at any time during the lifetime of the sla-profile instance.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-service

dynamic-service

Syntax

[no] dynamic-service

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range dynamic-service)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range dynamic-service)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range dynamic-service

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range dynamic-service

Description

This command configures the router to dynamically assign the WLAN-GW subscriber to a VPLS service, based on RADIUS authentication reply attributes. This feature is used in conjunction with the configure service vpls wlan-gw wlan-gw-group command.

The no form of the command disables the router from dynamically assigning the WLAN-GW subscriber to a VPLS service.

See "Dynamic VPLS service" in the 7450 ESS, 7750 SR, and VSR Triple Play Service Delivery Architecture Guide for more information about the dynamic VPLS service feature.

Default

no dynamic-service

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynamic-services

dynamic-services

Syntax

dynamic-services

Context

[Tree] (config>service>vpls>sap dynamic-services)

Full Context

configure service vpls sap dynamic-services

Description

Commands in this context configure dynamic services parameters on a capture SAP.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services

Syntax

dynamic-services

Context

[Tree] (config>service dynamic-services)

Full Context

configure service dynamic-services

Description

Commands in this context configure dynamic data services. Only available on systems with multi-core CPM (CPM3 or up).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services

Syntax

[no] dynamic-services

Context

[Tree] (debug dynamic-services)

Full Context

debug dynamic-services

Description

Commands in this context configure dynamic services debugging.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services-policy

dynamic-services-policy

Syntax

dynamic-services-policy dynsrv-policy-name [create]

no dynamic-services-policy dynsrv-policy-name

Context

[Tree] (config>service>dynsvc dynamic-services-policy)

Full Context

configure service dynamic-services dynamic-services-policy

Description

This command creates a new dynamic services policy that can be used to create dynamic data services.

The no form of this command removes the dynamic services policy from the configuration. This is only allowed when there are no active dynamic data services referencing this policy.

Parameters

dynsrv-policy-name

Specifies a unique name of a dynamic services policy up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-services-policy

Syntax

dynamic-services-policy name

no dynamic-services-policy

Context

[Tree] (config>service>dynsvc>ladb>user>idx dynamic-services-policy)

[Tree] (config>service>vpls>sap>dyn-svc dynamic-services-policy)

Full Context

configure service dynamic-services local-auth-db user-name index dynamic-services-policy

configure service vpls sap dynamic-services dynamic-services-policy

Description

This command specifies the local configured dynamic data service policy to use for provisioning (local authentication database context) or authentication (capture-sap context) of this dynamic service. If not specified, the dynamic services policy with the name default is used. If the default policy does not exist, then the dynamic data service setup or authentication fails.

The no form of this command removes the dynamic services policy from the configuration.

Parameters

name

Specifies a dynamic services policy name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

dynamic-topology-discover

dynamic-topology-discover

Syntax

[no] dynamic-topology-discover

Context

[Tree] (config>service>vpls>gsmp>group>ancp dynamic-topology-discover)

[Tree] (config>service>vprn>gsmp>group>ancp dynamic-topology-discover)

Full Context

configure service vpls gsmp group ancp dynamic-topology-discover

configure service vprn gsmp group ancp dynamic-topology-discover

Description

This command enables the ANCP dynamic topology discovery capability.

The no form of this command disables the feature.

Platforms

All

dynamic-tunnel-redundant-next-hop

dynamic-tunnel-redundant-next-hop

Syntax

dynamic-tunnel-redundant-next-hop ip-address

no dynamic-tunnel-redundant-next-hop

Context

[Tree] (config>service>ies>if dynamic-tunnel-redundant-next-hop)

[Tree] (config>service>vprn>if dynamic-tunnel-redundant-next-hop)

Full Context

configure service ies interface dynamic-tunnel-redundant-next-hop

configure service vprn interface dynamic-tunnel-redundant-next-hop

Description

This command specifies redundant next-hop address on a public or private IPsec interface (with public or private tunnel-sap) for dynamic IPsec tunnel. The specified next-hop address is used by a standby node to shunt traffic to master in case it receives the address.

The next-hop address is resolved in the routing table of a corresponding service.

Default

no dynamic-tunnel-redundant-next-hop

Parameters

ip-address

Specifies the dynamic ISA tunnel redundant next-hop address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

dynmldp

dynmldp

Syntax

dynmldp [detail]

no dynmldp

Context

[Tree] (debug>router>pim dynmldp)

Full Context

debug router pim dynmldp

Description

This command enables debugging for dynamic MLDP.

The no form of this command disables dynamic MLDP debugging.

Parameters

detail

Debugs detailed dynamic MLDP information.

Platforms

All

dynsvc-password

dynsvc-password

Syntax

dynsvc-password password [hash | hash2]

no dynsvc-password

Context

[Tree] (config>system>security>password dynsvc-password)

Full Context

configure system security password dynsvc-password

Description

Note:

See also the description for the enable-dynamic-services-config command.

This command allows a user with admin permissions to configure a system wide password which enables a user to enter a special dynamic services configuration mode.

The minimum length of the password is determined by the minimum-length command. The complexity requirements for the password are determined by the complexity command.

The no form of this command removes the dynsvc password from the configuration.

Parameters

password

Configures the password which enables a user to enter a special dynamic services configuration mode. The maximum length can be up to 20 characters if unhashed, 32 characters if hashed, 54 characters if the hash2 keyword is specified.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR