d Commands

Context

[Tree] (config>router>bgp>path-selection d-path-length-ignore)

[Tree] (config>service>vprn d-path-length-ignore)

[Tree] (config>service>vprn>bgp>path-selection d-path-length-ignore)

Full Context

configure router bgp best-path-selection d-path-length-ignore

configure service vprn d-path-length-ignore

configure service vprn bgp best-path-selection d-path-length-ignore

Description

This command enables and disables the ability of the router to ignore D-PATH domain segment length during best-path selection. At the base router level (or vprn>bgp level for PE-CE routers), this command allows BGP to ignore the D-PATH domain segment length for best-path selection purposes. The D-PATH length is ignored when comparing two VPN routes or two IFL routes within the same RD. However, these VPN/IFL routes are processed in Main-BGP instance.

At the VPRN router level, this command allows the VPRN RTM to ignore the D-PATH domain segment length for best path selection purposes (for routes in VPRN). The user can control whether the D-PATH length is considered when two VPN routes with different RDs are compared.

Best-path selection for EVPN-IFF routes against other owners (for example, EVPN-IFL or IPVPN) still relies on RTM preference. When EVPN-IFF RTM preference matches the RTM preference of another BGP owner, the existing RTM selection applies and D-PATH is not considered, irrespective of the d-path-length-ignore configuration.

The no form of this command disables the ability to ignore the D-PATH domain segment length.

Default

no d-path-length-ignore

Platforms

All

Context

[Tree] (config>app-assure>group>tcp-optimizer dack-timeout)

Full Context

configure application-assurance group tcp-optimizer dack-timeout

Description

This command configures a delayed ACK (DACK) timeout for the TCP optimizer. By entering this command a default of 200 ms timeout is enabled for delayed acknowledgment. This value is not configurable.

The no form of this command disables the delayed acknowledgment timeout.

Default

no dack-timeout

Parameters

dack-timeout

Specifies the delayed acknowledgment timeout in ms.

Default

200

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>ipv6 dad-disable)

[Tree] (config>service>vprn>if>ipv6 dad-disable)

[Tree] (config>router>if>ipv6 dad-disable)

Full Context

configure service ies interface ipv6 dad-disable

configure service vprn interface ipv6 dad-disable

configure router interface ipv6 dad-disable

Description

This command disables duplicate address detection (DAD) on a per-interface basis. This prevents the router from performing a DAD check on the interface. All IPv6 addresses of an interface with DAD disabled, immediately enter a preferred state, without checking for uniqueness on the interface. This is useful for interfaces which enter a looped state during troubleshooting and operationally disable themselves when the loop is detected, requiring manual intervention to clear the DAD violation.

The no form of this command turns off dad-disable on the interface.

Default

no dad-disable

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>nd dad-snooping)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>nd dad-snooping)

Full Context

configure service ies subscriber-interface group-interface ipv6 nd dad-snooping

configure service vprn subscriber-interface group-interface ipv6 nd dad-snooping

Description

This command allows the router to populate the neighbor discovery table through snooping subscribers’ duplicate address detection messages.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>group>neighbor damp-peer-oscillations)

[Tree] (config>service>vprn>bgp>group damp-peer-oscillations)

[Tree] (config>service>vprn>bgp damp-peer-oscillations)

Full Context

configure service vprn bgp group neighbor damp-peer-oscillations

configure service vprn bgp group damp-peer-oscillations

configure service vprn bgp damp-peer-oscillations

Description

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default

no damp-peer-oscillations

Parameters

initial-wait

Specifies the amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.

Values

0 to 2048

Default

0

second-wait

Specifies the period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.

Values

0 to 2048

Default

5

max-wait

Specifies the maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.

Values

0 to 2048

Default

60

minutes

Specifies the interval of time, in minutes after a session reset, during which the session must be error-free in to reset the penalty counter and return to idle-hold-time to initial-wait.

Values

0 to 2048

Default

30

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor damp-peer-oscillations)

[Tree] (config>router>bgp>group damp-peer-oscillations)

[Tree] (config>router>bgp damp-peer-oscillations)

Full Context

configure router bgp group neighbor damp-peer-oscillations

configure router bgp group damp-peer-oscillations

configure router bgp damp-peer-oscillations

Description

This command controls how long a BGP peer session remains in the idle-state after some type of error causes the session to reset. In the idle state, BGP does not initiate or respond to attempts to establish a new session. Repeated errors that occur a short while after each session reset cause longer and longer hold times in the idle state. This command supports the DampPeerOscillations FSM behavior described in section 8.1 of RFC 4271, A Border Gateway Protocol 4 (BGP-4).

The default behavior, which applies when no damp-peer-oscillations is configured, is to immediately transition out of the idle-state after every reset.

Default

no damp-peer-oscillations

Parameters

initial-wait

The amount of time, in minutes, that a session remains in the idle-state after it has been stable for a while.

Values

0 to 2048

Default

0

second-wait

A period of time, in minutes, that is doubled after each repeated session failure that occurs within a relatively short span of time.

Values

1 to 2048

Default

5

max-wait

The maximum amount of time, in minutes, that a session remains in the idle-state after it has experienced repeated instability.

Values

1 to 2048

Default

60

minutes

The interval of time, in minutes after a session reset, during which the session must be error-free in order to reset the penalty counter and return from idle-hold-time to initial-wait.

Values

0 to 2048

Default

30

Platforms

All

Context

[Tree] (config>port>ethernet dampening)

Full Context

configure port ethernet dampening

Description

Commands in this context configure exponential port dampening for an Ethernet port.

Exponential Port Dampening (EPD) reduces the number of physical link transitions reported to upper layer protocols, potentially reducing upper layer protocol churn caused by a faulty link. Penalties are added against a port whenever the port’s physical link state transitions from a link up state to a link down state. When the penalties exceed a configurable threshold, port-up and port-down transitions are no longer advertised to upper layers and the port’s operational state will remain down until the penalty amount drops below a configurable reuse threshold. Each transition of link up state to link down state increments the accumulated penalty value by 1000. The accumulated penalties for a port are reduced at an exponential decay rate according to a configurable half-life parameter.

Platforms

All

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy damping)

Full Context

configure subscriber-mgmt bgp-peering-policy damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route the policy definition.

The no form of this command used at the global level disables route damping.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp damping)

[Tree] (config>service>vprn>bgp>group>neighbor damping)

[Tree] (config>service>vprn>bgp>group damping)

Full Context

configure service vprn bgp damping

configure service vprn bgp group neighbor damping

configure service vprn bgp group damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level disables route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

Half-life: 15 minutes

Max-suppress: 60 minutes

Suppress-threshold: 3000

Reuse-threshold: 750

Default

no damping — Learned route damping is disabled.

Platforms

All

Context

[Tree] (config>router>bgp>group damping)

[Tree] (config>router>bgp>group>neighbor damping)

[Tree] (config>router>bgp damping)

Full Context

configure router bgp group damping

configure router bgp group neighbor damping

configure router bgp damping

Description

This command enables BGP route damping for learned routes which are defined within the route policy. Use damping to reduce the number of update messages sent between BGP peers and reduce the load on peers without affecting the route convergence time for stable routes. Damping parameters are set via route policy definition.

The no form of this command used at the global level reverts route damping.

The no form of this command used at the group level reverts to the value defined at the global level.

The no form of this command used at the neighbor level reverts to the value defined at the group level.

When damping is enabled and the route policy does not specify a damping profile, the default damping profile is used. This profile is always present and consists of the following parameters:

• Half-life: 15 minutes

• Max-suppress: 60 minutes

• Suppress-threshold: 3000

• Reuse-threshold: 750

Default

no damping

Platforms

All

Context

[Tree] (config>router>policy-options damping)

Full Context

configure router policy-options damping

Description

This command creates a context to configure a route damping profile to use in route policy entries.

The no form of this command deletes the named route damping profile.

Default

no damping

Parameters

name

Specifies the damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement>entry>action damping)

[Tree] (config>router>policy-options>policy-statement>default-action damping)

Full Context

configure router policy-options policy-statement entry action damping

configure router policy-options policy-statement default-action damping

Description

This command configures a damping profile used for routes matching the route policy statement entry.

If no damping criteria is specified, the default damping profile is used.

The no form of this command removes the damping profile associated with the route policy entry.

Default

no damping

Parameters

name

The damping profile name. Allowed values are any string up to 32 characters long composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes. Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end"," @variable@end", or "start@variable@".

The name specified must already be defined.

none

Disables route damping for the route policy.

Platforms

All

Context

[Tree] (debug>router>pim data)

Full Context

debug router pim data

Description

This command enables debugging for PIM data exception.

The no form of this command disables PIM data exception debugging.

Parameters

grp-ip-address

Debugs information associated with the specified data exception.

Values

multicast group address (ipv4, ipv6)

ip-address

Debugs information associated with the specified data exception.

Values

source address (ipv4, ipv6)

detail

Debugs detailed IP data exception information.

Platforms

All

Context

[Tree] (config>service>vpls>provider-tunnel>selective data-delay-interval)

[Tree] (config>service>vpls>provider-tunnel>inclusive data-delay-interval)

Full Context

configure service vpls provider-tunnel selective data-delay-interval

configure service vpls provider-tunnel inclusive data-delay-interval

Description

This command configures the I-PMSI or S-PMSI data delay timer.

When used in I-PMSI trees, this delay timer allows time for the RSVP control plane to signal and bring up the S2L sub-LSP to each destination PE participating in the VPLS or B-VPLS service. The delay timer starts as soon as the P2MP LSP instance becomes operationally up under the inclusive node, for example, as soon as the first S2L sub-LSP is up. This occurs after configuring the following commands:

• MD-CLI

  configure service vpls provider-tunnel inclusive admin-state enable
  

• classic CLI

  configure service vpls provider-tunnel inclusive no shutdown

In general, it is started when the P2MP LSP instance transitions from the operationally down state to the up state.

configure router interface ldp-sync-timer

This is because the mLDP P2MP LSP may move to a different interface at the expiry of this timer since the routing upstream of the LDP Label Mapping message may change when this timer expires and the interface metric is restored.

At the expiry of this timer, the VPLS or B-VPLS begins forwarding of BUM packets over the P2MP LSP instance even if not all the S2L paths are up.

When used for EVPN S-PMSI trees, the data delay interval determines the time the router takes to switch over the traffic from the Ingress Replication binds to the wildcard S-PMSI or from the wildcard S-PMSI to the S-PMSI, after the S-PMSI is created. This time should account for the time it takes for BGP to propagate the S-PMSI A-D route to the downstream PEs and the time it takes the downstream PEs to join the tree all the way up to the root.

The no form of this command reinstates the default value for this delay timer.

Parameters

seconds

Specifies the delay time value in seconds

Values

3 to 180

Default

15 (inclusive)

3 (selective)

Platforms

All

Context

[Tree] (config>service>vprn>mvpn>pt>selective data-delay-interval)

Full Context

configure service vprn mvpn provider-tunnel selective data-delay-interval

Description

This command specifies the interval, in seconds, before a PE router connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSI.

The no form of this command reverts the value to the default.

Default

data-delay-interval 3

Parameters

value

Specifies the data delay interval, in seconds.

Values

3 to 180

Platforms

All

Context

[Tree] (config>router>gtm>provider-tunnel>selective data-delay-interval)

Full Context

configure router gtm provider-tunnel selective data-delay-interval

Description

This command specifies the interval, in seconds, before a PBR connected to the source switches traffic from the inclusive provider tunnel to the selective provider tunnel.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command reverts the value to the default.

Default

data-delay-interval 3

Parameters

value

Specifies the data delay interval, in seconds.

Values

3 to 180

Default

3

Platforms

All

Context

[Tree] (config>service>vprn>msdp data-encapsulation)

Full Context

configure service vprn msdp data-encapsulation

Description

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default

data-encapsulation

Platforms

All

Context

[Tree] (config>router>msdp data-encapsulation)

Full Context

configure router msdp data-encapsulation

Description

This command configures a rendezvous point (RP) using Multicast Source Discovery Protocol (MSDP) to encapsulate multicast data received in MSDP register messages inside forwarded MSDP source-active messages.

Default

data-encapsulation

Platforms

All

Context

[Tree] (config>service>vprn>mvpn>pt>selective data-threshold)

[Tree] (config>service>vpls>provider-tunnel>selective data-threshold)

Full Context

configure service vprn mvpn provider-tunnel selective data-threshold

configure service vpls provider-tunnel selective data-threshold

Description

When used along with MVPN, this command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PE thresholds to create or delete ng-MVPN S-PMSI may also be specified. Omitting the PE thresholds, preserves the currently set value (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSI.

This command for S-PMSI trees can also be used in EVPN services. The data-threshold command options are used in the same way as in MVPN when applied to EVPN, in particular the rate and PE thresholds.

The no form of this command removes the values from the configuration.

Default

no data-threshold

Parameters

group-address/mask

Specifies a multicast group address and netmask length.

c-grp-ip-addr/mask | c-grp-ip-addr netmask

Specifies an IPv4 multicast group address and netmask length or network mask.

c-grp-ipv6-addr/prefix-length

Specifies an IPv6 multicast group address and prefix length.

s-pmsi-threshold

Specifies the rate, in kb/s. If the rate for a (C-S, C-G)) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel. Threshold 0 is supported. When threshold 0 is configured, the (C-S, C-G) switches to S-PMSI as soon as it is learned in the MVPN and without traffic flowing for that (C-S, C-G).

s-pmsi-threshold-add

Specifies the number of receiver PEs for creating S-PMSI. When the number of receiver PEs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.

s-pmsi-threshold-delete

Specifies the number of receiver PEs for deleting S-PMSI. When the number of receiver PEs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold, to avoid re-signaling of S-PMSI as the receiver PE count fluctuates.

Values

c-grp-ip-addr	: multicast group address a.b.c.d
mask	[4 to 32]
netmask	: a.b.c.d (network bits all 1 and host bits all 0)
s-pmsi-threshold	: [0 to 4294967294] (threshold in kb/s)
c-grp-ipv6-addr	: multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)
		x:x:x:x:x:x:d.d.d.d
		x [0 to FFFF]H
		d [0 to 255]D
		prefix-length [1 to 128]
pe-threshold-add	: [1 to 65535], if never specified, 65535 is used (add threshold always met)
pe-threshold-delete	: [2 to 65535], if never specified, 65535 is used (delete threshold never met)

Platforms

All

Context

[Tree] (config>router>gtm>provider-tunnel>selective data-threshold)

Full Context

configure router gtm provider-tunnel selective data-threshold

Description

This command specifies the data rate threshold that triggers the switch from the inclusive provider tunnel to the selective provider tunnel for (C-S, C-G) within the group range. Optionally, PBR thresholds for creating or deleting NG-MVPN S-PMSI may also be specified. Omitting the PBR thresholds preserves currently set values (or defaults if never set). Multiple statements (one per a unique group) are allowed in the configuration.

This command is not applicable to multi-stream S-PMSIs.

The no form of this command removes the values from the configuration.

Default

no data-threshold

Parameters

c-grp-ip-addr/mask | c-grp-ip-addr netmask

Specifies an IPv4 multicast group address and netmask length or network mask.

Values

mask: 4 to 32

c-grp-ipv6-addr/prefix-length

Specifies an IPv6 multicast group address and prefix length.

s-pmsi-threshold

Specifies the rate, in kb/s. If the rate for a (C-S, C-G) within the specified group range exceeds the threshold, traffic for the (C-S, C-G) is switched to the selective provider tunnel.

s-pmsi-threshold-add

Specifies the number of receiver PBRs for creating S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is non-zero and below the threshold and BW threshold is satisfied, S-PMSI is created.

s-pmsi-threshold-delete

Specifies the number of receiver PBRs for deleting S-PMSI. When the number of receiver PBRs for a specified multicast group configuration is above the threshold, S-PMSI is deleted and the multicast group is moved to I-PMSI or a wildcard S-PMSI. It is recommended that the delete threshold be significantly larger than the add threshold to avoid re-signaling of S-PMSI as the receiver PBR count fluctuates.

Values

c-grp-ip-addr	multicast group address a.b.c.d
mask	4 to 32
netmask	a.b.c.d (network bits all 1 and host bits all 0)
s-pmsi-threshold	1 to 4294967294 (threshold in kb/s)
c-grp-ipv6-addr	multicast ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)
		x:x:x:x:x:x:d.d.d.d
		x [0 to FFFF]H
		d [0 to 255]D
		prefix-length [1 to 128]
pe-threshold-add	1 to 65535 Default: 65535 (delete threshold always met)
pe-threshold-delete	2 to 65535 Default: 65535:(delete threshold always met)

Platforms

All

Context

[Tree] (config>oam-pm>session>ethernet>dmm data-tlv-size)

[Tree] (config>oam-pm>session>ethernet>slm data-tlv-size)

Full Context

configure oam-pm session ethernet dmm data-tlv-size

configure oam-pm session ethernet slm data-tlv-size

Description

This command allows the operator to add an optional Data TLV to PDU and increase the frame on the wire by the specified amount. Note that this command only configures the size of the padding added to the PDU, and does not configure the total size of the frame on the wire.

The no form of this command removes the optional TLV.

Parameters

octets

Specifies the size, in octets, of the optional Data TLV.

Values

0, 3 to 2000

Default

0

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if data-trigger)

[Tree] (config>service>vprn>sub-if>grp-if data-trigger)

Full Context

configure service ies subscriber-interface group-interface data-trigger

configure service vprn subscriber-interface group-interface data-trigger

Description

Commands in this context configure data-triggered subscriber management entities.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)

[Tree] (config>service>ies>sub-if>grp-if>sap>static-host-mgmt>mac-learning-options data-triggered)

Full Context

configure service vprn subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered

configure service ies subscriber-interface group-interface sap static-host-mgmt mac-learning-options data-triggered

Description

This command enables learning of MAC addresses from data packets.

The no form of this command disables learning of MAC addresses from data packets.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>wlan-gw>ue-query>state data-triggered)

Full Context

configure subscriber-mgmt wlan-gw ue-query state data-triggered

Description

This command enables matching on UEs currently in a data-triggered state. This query only filters UEs that are currently authenticating due to a data trigger, not UEs that were originally authenticated due to data trigger, such as those in an ESM, DSM, or portal state.

The no form of this command disables matching on UEs in a data-triggered state, unless all state matching is disabled.

Default

no data-triggered

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range data-triggered-ue-creation)

Full Context

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range data-triggered-ue-creation

Description

This command enables data-triggered subscriber creation for Wi-Fi subscribers. Data- triggered UE creation is currently only supported for UDP and TCP packets.

The no form of this command disables the data-triggered subscriber creation for Wi-Fi subscribers.

Default

no data-triggered-ue-creation

Parameters

arp

Keyword to enable the router to authenticate ARP packets from an unknown UE.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>dynsvc data-triggers)

Full Context

debug dynamic-services data-triggers

Description

Commands in this context configure dynamic services data trigger capture SAP debugging. The no form of this command removes all dynamic services data trigger capture SAP debug configurations.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>pim-snooping database)

Full Context

debug service id pim-snooping database

Description

This command enables or disables debugging for the PIM database.

Parameters

grp-ip-address

Debugs information associated with all PIM modules

Values

multicast group address (IPv4 or IPv6) or zero

ip-address

Debugs information associated with the specified database

Platforms

All

Context

[Tree] (config>router>isis database-export)

Full Context

configure router isis database-export

Description

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Parameters

identifier

This parameter is used to uniquely identify the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. However, given that the concept of instance ID defined in IS-IS (RFC 6822) is unique within a routing domain while the one specified for OSPF is local subnet significant (RFC 6549), the user can remove any overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.

id

Specifies an entry ID to export.

Values

0 to 18446744073709551615

bgp-ls-identifier

This parameter is used, along with the Autonomous System Number (ASN) to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id

Specifies a BGP LS ID to export.

Values

0 to 4294967295

Platforms

All

Context

[Tree] (config>router>ospf3 database-export)

[Tree] (config>router>ospf database-export)

Full Context

configure router ospf3 database-export

configure router ospf database-export

Description

This command enables the population of the extended TE Database (TE-DB) with the link-state information from a given IGP instance.

The extended TE-DB is used as a central point for importing all link-state information, link, node, and prefix, from IGP instances on the router or the vSROS controller of the NSP and to exporting it to BGP-LS on the router and to Java-VM proxy on the vSROS controller. This information includes the IGP, TE, and the SR information, prefix SID sub-TLV, adjacency SID sub-TLV, and router SR capability TLV.

The no form of this command disables database exportation.

Default

no database-export

Parameters

identifier

Identifies the IGP instance in the BGP-LS NLRI when a router has interfaces participating in multiple IGP instances. This parameter defaults to the IGP instance ID assigned by SR OS. The concept of instance ID specified for OSPF is local subnet significant (RFC 6549). The user can remove router specific overlap by configuring the new identifier value to be unique within a given IGP domain when this router sends the IGP link-state information using BGP-LS.

id

Specifies an entry ID to export.

Values

0 to 18446744073709551615

bgp-ls-identifier

This parameter is used, along with the Autonomous System Number (ASN), to correlate the BGP-LS NLRI advertisements of multiples BGP-LS speakers of the same IGP domain. If an NRC-P network domain has multiple IGP domains, BGP-LS speakers within each IGP domain must be configured with the same unique {bgp-ls-identifier, asn} tuple.

The BGP-LS identifier is optional and is only sent in a BGP-LS NLRI if configured in the IGP instance of an IGP domain.

Note that if this IGP instance participates in traffic engineering with RSVP-TE or SR-TE, the traffic-engineering option is not strictly required because enabling the extended TE-DB populates this information automatically. It is, however, recommended to enable it to make the configuration consistent with other routers in the network that do not require the enabling of the extended TE-DB.

bgp-ls-id

Specifies a BGP LS ID to export.

Values

0 to 4294967295

Platforms

All

Context

[Tree] (config>router>isis>level database-export-exclude)

Full Context

configure router isis level database-export-exclude

Description

This command allows the user to prune the IGP link-state information of a specific IS-IS level from being exported into the extended TE-DB.

The no form of this command returns to the default behavior inherited from the database-export command at the IS-IS instance level.

Default

no database-export-exclude

Platforms

All

Context

[Tree] (config>router>ospf>area database-export-exclude)

[Tree] (config>router>ospf3>area database-export-exclude)

Full Context

configure router ospf area database-export-exclude

configure router ospf3 area database-export-exclude

Description

This command allows the user to prune the IGP link-state information of a specific OSPF level or OSPF area from being exported into the extended TE-DB. The no form of this command returns to the default behavior inherited from the database-export command at the OSPF or OSPF3 instance level.

Default

no database-export-exclude

Platforms

All

Context

[Tree] (config>app-assure datapath-cpu-high-wmark)

Full Context

configure application-assurance datapath-cpu-high-wmark

Description

This command configures the system-wide high watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default

datapath-cpu-high-wmark 95

Parameters

high-watermark

Specifies the high watermark for datapath CPU usage alarms.

Values

1 to 100

max

Disables the high watermark for datapath CPU usage alarms

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure datapath-cpu-low-wmark)

Full Context

configure application-assurance datapath-cpu-low-wmark

Description

This command configures the system-wide low watermark threshold as a percentage of the per-ISA datapath core CPU utilization, where an alarm will be raised by the agent. CPU usage is the average usage across all datapath cores.

Default

datapath-cpu-low-wmark 90

Parameters

low-watermark

Specifies the low watermark for datapath CPU usage alarms.

Values

1 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>cron>sched day-of-month)

Full Context

configure system cron schedule day-of-month

Description

This command specifies which days of the month that the schedule will occur. Multiple days of the month can be specified. When multiple days are configured, each of them will cause the schedule to trigger. If a day-of-month is configured without configuring month, weekday, hour, and minute, the event will not execute.

Using the weekday command as well as the day-of-month command will cause the script to run twice. For example, consider that today is Monday January 1. If Tuesday January 5 is configured, the script will run on Tuesday (tomorrow) as well as January 5 (Friday).

The no form of this command removes the specified day-of-month from the list.

Default

no day-of-month

Parameters

day-number

Specifies the positive integers specify the day of the month counting from the first of the month. The negative integers specify the day of the month counting from the last day of the month. For example, configuring day-of-month -5, 5 in a month that has 31 days will specify the schedule to occur on the 27th and 5th of that month.

Integer values must map to a valid day for the month in question. For example, February 30 is not a valid date.

Values

1 to 31, -31 to -1 (maximum 62 day-numbers)

all

Specifies all days of the month.

Platforms

All

Context

[Tree] (debug>router>pim db)

Full Context

debug router pim db

Description

This command enables debugging for PIM database.

The no form of this command disables PIM database debugging.

Parameters

grp-ip-address

Debugs information associated with the specified database.

Values

multicast group address (ipv4, ipv6) or zero

ip-address

Debugs information associated with the specified database.

Values

source address (ipv4, ipv6)

detail

Debugs detailed IP database information.

Platforms

All

Context

[Tree] (config>router>rsvp dbw-accounting)

Full Context

configure router rsvp dbw-accounting

Description

This command enables dark bandwidth accounting and enters the context to configure the associated parameters. When dark bandwidth accounting is enabled, the system polls the dark bandwidth counters, performs sample and average rate computations, and generates IGP-TE updates if required. To enable dark bandwidth accounting, auxiliary MPLS statistics must first be enabled using the command config>router>mpls>aux-stats.

The no form of this command disables dark bandwidth accounting, resets all global parameters to their default values, and results in an immediate IGP-TE update for which dark bandwidth is null.

Default

no dbw-accounting

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>router>rsvp>interface dbw-down-threshold)

Full Context

configure router rsvp interface dbw-down-threshold

Description

This command sets the minimum change (in percent of the latest advertised value) above which an decrease in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change is made using the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent-change

Specifies the minimum decrease in MRLB/MRB, expressed in percent.

Values

0 to 100

absolute-change

Specifies the minimum decrease in MRLB/MRB, expressed in Mb/s.

Values

0 to 1000000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>router>rsvp>dbw-accounting dbw-multiplier)

Full Context

configure router rsvp dbw-accounting dbw-multiplier

Description

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

Default

dbw-multiplier 100

Parameters

percent

Specifies the multiplier, expressed in percent.

Values

0 to 1000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>router>rsvp>interface dbw-multiplier)

Full Context

configure router rsvp interface dbw-multiplier

Description

This command sets the dark bandwidth multiplier to the specified value. Choosing 0% will lead to no IGP-TE updates based on dark bandwidth evolution being sent. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent

Specifies the multiplier, expressed in percent.

Values

0 to 1000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>router>rsvp>interface dbw-up-threshold)

Full Context

configure router rsvp interface dbw-up-threshold

Description

This command sets the minimum change (in percent of the latest advertised value) above which an increase in MRLB (IS-IS TE sub-TLV 10) or MRB (OSPF TE sub-TLV 7) triggers an IGP-TE update. This configuration only applies to a change in MRLB or MRB caused by dark bandwidth. Other events affecting MRLB/MRB (such as the change of the subscription factor or the loss of link in a LAG over which the RSVP interface is defined) trigger an immediate TE update, regardless of the importance of the impact.

Optionally, the threshold can also be expressed as an absolute value. In this case, the evaluation of the change uses the percent change and the absolute change. An IGP-TE update is sent if both thresholds are crossed. Changing this parameter in the course of dark bandwidth accounting does not affect the accounting cycle.

By default, the multiplier inherits the global value, unless it is specifically set using this command. The no form of this command sets this parameter to inherit the value of the corresponding global parameter.

Parameters

percent-change

Specifies the minimum increase in MRLB/MRB, expressed in percent.

Values

0 to 100

absolute-change

Specifies the minimum increase in MRLB/MRB, expressed in Mb/s.

Values

0 to 1000000

Platforms

7750 SR, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>port ddm-events)

Full Context

configure port ddm-events

Description

This command enables Digital Diagnostic Monitoring (DDM) events for the port.

The no form of this command disables DDM events.

Platforms

All

Context

[Tree] (config>qos>sap-ingress>fc de-1-out-profile)

Full Context

configure qos sap-ingress fc de-1-out-profile

Description

This command, when enabled on a parent forwarding class, applies a color profile mode to the packets stored in the queue associated with this forwarding class. The queue associated with the parent forwarding class must be of type profile-mode.

When this QoS policy is applied to the ingress of a Frame Relay VLL SAP, the system will treat the received FR frames with DE bit set as out-of-profile, regardless of their previous marking as the result of the default classification or on a match with an IP filter. It also adjusts the CIR of the ingress SAP queue to consider out-of-profile frames that were sent while the SAP queue was in the "< CIR” state of the bucket. This makes sure that the CIR of the SAP is achieved.

All received DE = 0 frames that are classified into this parent forwarding class or any of its subclasses have their profile unchanged by enabling this option. That is, the DE = 0 frame profile could be undetermined (default), in-profile, or out-of-profile as per previous classification. The DE = 0 frames that have a profile of undetermined will be evaluated by the system CIR marking algorithm and will be marked appropriately.

The priority option, if used, has no effect. All FR VLL DE = 1 frames have their priority automatically set to low while DE = 0 frames have their priority set to high. Furthermore, DE = 1 frames have the drop-preference bit set in the internal header. The internal settings of the priority bit and of the drop-preference bit of the frame is independent of the use of the profile mode.

All other capabilities of the Fpipe service are maintained. This includes remarking of the DE bit on egress SAP, and FR PW control word on egress network port for the packets that were classified into "out-of-profile” at ingress SAP.

This de-1-out-profile keyword has an effect when applied to the ingress of a SAP that is part of an Fpipe service. It can also be used on the ingress of an Epipe or VPLS SAP.

The no form of this command disables the color profile mode of operation on all SAPs to which this ingress QoS policy is applied.

Default

no de-1-out-profile

Platforms

All

Context

[Tree] (config>qos>sap-egress>fc de-mark)

Full Context

configure qos sap-egress fc de-mark

Description

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile/in-profile or out-of-profile/exceed-profile status of the packet (fc-name may be used to identify the dot1p-value).

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

If this command is not used, the DE bit should be preserved if an ingress TAG exist; otherwise, set to zero.

If the DE value is included in the command line, this value is to be used for all the packets of this forwarding class regardless of their profile status.

The commands de-mark-inner and de-mark-outer take precedence over the de-mark command if both are specified in the same policy.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

Context

[Tree] (config>qos>network>egress>fc de-mark)

Full Context

configure qos network egress fc de-mark

Description

This command is used to explicitly define the marking of the DE bit for fc fc-name according to the inplus-profile or in-profile and out-of-profile or exceed-profile status of the packet (fc-name may be used to identify the dot1p value).

Parameters

de-value

Specifies that this value is to be used for all the packets of this forwarding class regardless of their profile status.

If no DE value is present, the default values are used for the marking of the DE bit; that is, 0 for inplus-profile and in-profile packets, 1 for out-of-profile and exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

In the PBB case, use the following rules for a network port (B-SDP):

• the outer VID follows the rules for regular SDP

• for packets originating from a local I-VPLS/PBB-Epipe, this command dictates the marking of the DE bit for both the outer (link level) BVID and ITAG; if the command is not used, the DE bit is set to zero.

• for transit packets (B-SAP/B-SDP to B-SDP), the related ITAG bits are preserved, the same as for BVID.

Values

0, 1

Platforms

All

Context

[Tree] (config>qos>sap-egress>fc de-mark-inner)

Full Context

configure qos sap-egress fc de-mark-inner

Description

This command is used to explicitly define the marking of the DE bit in the inner VLAN tag for fc fc-name on a QinQ SAP, according to the in- and out-of-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile or in-profile packets, 1 for out-of-profile or exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the inner tags of packets of this forwarding class, regardless of their profile status.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

The configuration of qinq-mark-top-only under the SAP egress takes precedence over the use of the de-mark-inner in the policy. That is, the inner VLAN tag is not remarked when qinq-mark-top-only is configured (the marking used for the inner VLAN tag is based on the current default, which is governed by the marking of the packet received at the ingress to the system).

If no de-mark commands are used, the DE bit is preserved if an ingress inner tag exists; otherwise, set to 0.

Remarking the inner DE bit is not supported based on the profile result of egress policing.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

Context

[Tree] (config>qos>sap-egress>fc de-mark-outer)

Full Context

configure qos sap-egress fc de-mark-outer

Description

This command is used to explicitly define the marking of the DE bit in the outer or single VLAN tag on a qinq or dot1q SAP, respectively, according to the in, out, or exceed-profile status of the packet.

If no DE value is present, the default values are used for the marking of the DE bit; for example, 0 for inplus-profile/in-profile packets, 1 for out-of-profile/exceed-profile packets. For more information, refer to the IEEE 802.1ad-2005 standard.

If the DE value is included in the command line, this value is used for all the outer or single tags of packets of this forwarding class, regardless of their profile status.

In the PBB case, for a Backbone SAP (B-SAP) and for packets originated from a local I-VPLS/PBB-Epipe, the command dictates the marking of the DE bit for both the BVID and ITAG.

This command takes precedence over the de-mark command if both are specified in the same policy and over the default action.

If no de-mark commands are used, the DE bit is preserved if an ingress outer or single tag exists; otherwise, set to 0.

Parameters

de-value

Specifies the DE marking value.

Values

0 or 1

Platforms

All

Context

[Tree] (config>service>vprn>ospf>area>virtual-link dead-interval)

[Tree] (config>service>vprn>ospf>area>if dead-interval)

[Tree] (config>service>vprn>ospf3>area>if dead-interval)

[Tree] (config>service>vprn>ospf3>area>virtual-link dead-interval)

[Tree] (config>service>vprn>ospf>area>sham-link dead-interval)

Full Context

configure service vprn ospf area virtual-link dead-interval

configure service vprn ospf area interface dead-interval

configure service vprn ospf3 area interface dead-interval

configure service vprn ospf3 area virtual-link dead-interval

configure service vprn ospf area sham-link dead-interval

Description

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no Hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the Hello interval.

The no form of this command reverts to the default value.

Default

dead-interval 40

Parameters

seconds

The dead interval expressed as a decimal integer.

Values

2 to 65535 seconds

Platforms

All

Context

[Tree] (config>router>ospf3>area>virtual-link dead-interval)

[Tree] (config>router>ospf>area>virtual-link dead-interval)

[Tree] (config>router>ospf3>area>interface dead-interval)

[Tree] (config>router>ospf>area>interface dead-interval)

Full Context

configure router ospf3 area virtual-link dead-interval

configure router ospf area virtual-link dead-interval

configure router ospf3 area interface dead-interval

configure router ospf area interface dead-interval

Description

This command configures the time, in seconds, that OSPF waits before declaring a neighbor router down. If no hello packets are received from a neighbor for the duration of the dead interval, the router is assumed to be down. The minimum interval must be two times the hello interval.

The no form of this command reverts to the default value.

Default

dead-interval 40

Parameters

seconds

The dead interval expressed in seconds.

Values

2 to 65535

Platforms

All

Context

[Tree] (config>router>pcep>pce dead-timer)

[Tree] (config>router>pcep>pcc dead-timer)

Full Context

configure router pcep pce dead-timer

configure router pcep pcc dead-timer

Description

This command configures the PCEP session dead timer value, which is the amount of time a PCEP speaker (PCC or PCE) will wait after the receipt of the last PCEP message before declaring its peer down.

The keep-alive mechanism is asymmetric, meaning that each PCEP speaker can propose a different dead timer value to its peer to use to detect session timeout.

The no form of the command returns the dead timer to the default value.

Default

dead-timer 120

Parameters

seconds

the dead timer value, in seconds

Values

1 to 255

Platforms

VSR-NRC

• configure router pcep pce dead-timer

All

• configure router pcep pcc dead-timer

Context

[Tree] (config>redundancy>mc>peer>mcr>ring>in-band-control-path debounce)

[Tree] (config>redundancy>mc>peer>mc>l3-ring>in-band-control-path debounce)

Full Context

configure redundancy multi-chassis peer mc-ring ring in-band-control-path debounce

configure redundancy multi-chassis peer multi-chassis l3-ring in-band-control-path debounce

Description

This command enables the inband control path debouncing. The no form of this command disables inband control path debouncing.

The no form of this command reverts to the default.

Default

debounce

Platforms

All

Context

[Tree] (config>log>event-trigger>event>trigger-entry debounce)

Full Context

configure log event-trigger event trigger-entry debounce

Description

This command configures when to trigger, for example after one or more event occurrences. The number of occurrences of an event can be bounded by a time window or left open.

The no form of this command removes the debounce configuration.

Parameters

occurrences

Specifies the number of times an event must occur for EHS to trigger a response.

Values

2 to 15

within seconds

Specifies the time window within which a specific event must occur a number of times equivalent to the specified occurrences for EHS to trigger a response.

Values

1 to 604800

Platforms

All

Context

[Tree] ( debug)

Full Context

debug

Description

Commands in this context specify debugging options.

Platforms

All

Context

[Tree] (config>call-trace>trace-profile debug-output)

Full Context

configure call-trace trace-profile debug-output

Description

This command enables output to the debug log. Traced messages are decoded as text and sent to debug logging. This allows for real-time debugging but is not recommended on live systems because of the decode overhead.

This command disables logging to the compact flash. The debug-output and live-output commands are mutually exclusive.

The no form of this command disables output to the debug log.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (admin debug-save)

Full Context

admin debug-save

Description

This command saves existing debug configuration (configuration done under the debug branch of CLI). Debug configurations are not saved by the admin save command and not preserved across a node reboot or CPM switchover. The debug-save command makes the debug configuration available for the operator to execute after a reboot by using the exec command or after a CPM switchover by using the switchover-exec command, if desired.

Parameters

file-url

Specifies the file URL location to save the debug configuration. If no file-url is specified then the debug configuration is saved at the same location as the standard configuration file (bof>primary-config/bof>secondary-config/bof>tertiary-config) with the same file name as the standard configuration file but with a .dbg suffix.

Note:

IPv6-address applies only to 7750 SR and 7950 XRS.

Values

file url	local-url | remote-url: 255 chars max
local-url	[cflash-id/][file-path] 200 chars max, including cflash-id file-path 199 chars max
remote-url	[{ftp:// | tftp://}login:pswd@remote-locn/][file-path]
	255 chars max
	directory length 99 chars max each
remote-locn	{hostname | ipv4-address | [ipv6-address]}
ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x[-interface]
	x:x:x:x:x:x:d.d.d.d[-interface]
	x - [0 to FFFF]H
	d - [0 to 255]D
	interface - 32 chars max, for link local addresses 255
cflash-id	cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Platforms

All

Context

[Tree] (config>app-assure>group>url-list decrypt-key)

Full Context

configure application-assurance group url-list decrypt-key

Description

In case the file is encrypted this command is used to configure the decryption key used to read the file.

The no form of this command removes the url-list object.

Default

no decrypt-key

Parameters

key | hash-key | hash2-key

Specifies the Application-Assurance url-list decryption key.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-app-profile)

[Tree] (config>subscriber-mgmt>msap-policy>sub-sla-mgmt def-app-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-app-profile)

Full Context

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

configure service vpls sap sub-sla-mgmt def-app-profile

configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

Description

This command specifies the default application profile to be used by a subscriber host.

The no form of this command removes the application profile name from the configuration.

Parameters

app-profile-name

Specifies an existing application profile to be mapped to the subscriber profile by default up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-app-profile
• configure subscriber-mgmt msap-policy sub-sla-mgmt def-app-profile
• configure service vpls sap sub-sla-mgmt def-app-profile
• configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-app-profile

7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile
• configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-app-profile

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>dsm def-app-profile)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges range distributed-sub-mgmt def-app-profile

Description

This command configures the default application profile.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>transit-ip-policy def-app-profile)

Full Context

configure application-assurance group transit-ip-policy def-app-profile

Description

This command configures a default application profile.

Default

no def-app-profile

Parameters

app-profile-name

Specifies the application profile name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>sla-prof def-instance-sharing)

Full Context

configure subscriber-mgmt sla-profile def-instance-sharing

Description

This command configures the default SPI sharing method for IPoE or PPPoE sessions from the same subscriber, having the same SLA profile associated, that are active on the same SAP. SPI sharing can be per-SAP or a dedicated SPI per-session.

Default

def-instance-sharing per-sap

Parameters

per-sap

Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP share an SPI.

per-session

Specifies that IPoE or PPP sessions from the same subscriber, having the same SLA profile associated, and active on the same SAP obtain a dedicated SPI per session.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-inter-dest-id)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-inter-dest-id)

Full Context

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id

configure subscriber-mgmt msap-policy sub-sla-mgmt def-inter-dest-id

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-inter-dest-id

Description

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

Parameters

string

A RADIUS VSA (Alc-Int-Dest-Id-Str, type 28) obtained during the subscriber authentication phase contains the destination string name that is matched against the string defined under the Vport. In this fashion the subscriber host is associated with the corresponding Vport.

Alternatively, the destination string can be defined in LUDB.

use-top-q

This is applicable only to Ethernet ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-inter-dest-id)

Full Context

configure service vpls sap sub-sla-mgmt def-inter-dest-id

Description

This command specifies a default destination string for all subscribers associated with the SAP. The command also accepts the use-top-q flag that automatically derives the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation.

The no form of this command removes the default subscriber identification string from the configuration.

no def-sub-id

Default

no def-inter-dest-id

Parameters

use-top-q

Specifies to derive the string based on the top most delineating Dot1Q tag from the SAP’s encapsulation

string string

Specifies the subscriber identification applicable for a subscriber host.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>bgp>group def-recv-evpn-encap)

[Tree] (config>router>bgp>group>neighbor def-recv-evpn-encap)

Full Context

configure router bgp group def-recv-evpn-encap

configure router bgp group neighbor def-recv-evpn-encap

Description

This command defines how the BGP will treat a received EVPN route without RC5512 BGP encapsulation extended community. If no encapsulation is received, BGP will validate the route as MPLS or VXLAN depending on how this command is configured.

Default

no def-recv-evpn-encap

Parameters

mpls

Specifies that mpls is the default encapsulation value in the case where no RFC5512 extended community is received in the incoming BGP-EVPN route.

vxlan

Specifies that vxlan is the default encapsulation value.

Platforms

All

Context

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sla-profile)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sla-profile)

Full Context

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

configure service vpls sap sub-sla-mgmt def-sla-profile

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile

Description

This command specifies a default SLA profile for this SAP. The SLA profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sla-profile context.

If a subscriber is not explicitly associated with an SLA profile during the authentication phase, a default profile will be assigned to it.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sla-profile-name

Specifies a default SLA profile for this SAP.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile
• configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sla-profile

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile
• configure subscriber-mgmt msap-policy sub-sla-mgmt def-sla-profile
• configure service vpls sap sub-sla-mgmt def-sla-profile
• configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sla-profile

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-id)

[Tree] (config>service>vprn>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-id)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-id)

Full Context

configure service vpls sap sub-sla-mgmt def-sub-id

configure service vprn subscriber-interface group-interface sap sub-sla-mgmt def-sub-id

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-id

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-id

Description

This command specifies the explicit default sub-id for dynamic subscriber hosts (including ARP hosts) in case that the sub-id string is not supplied through RADIUS or LUDB.

The sub-id is assigned to a new subscriber host in the following order of priority:

• RADIUS

• LUDB

• Explicit default – The def-sub-id command is used to explicitly set the sub-id name of the host as one of the following:

  • The SAP ID to which the new host is associated

  • An explicit string

  • An auto-generated string consisting of the concatenated subscriber identification fields defined under the subscr-mgmt>auto-sub-id-key node. The fields are taken in the order in which they are configured and are separated by a '|'character. The subscriber host identification fields are separately defined for IPoE and PPPoE host types.

• Implicit default – If the sub-id string is not returned via RADIUS or LUDB and there is no def-sub-id configured, the sub-id name is generated as a random 10 character encoded string based on the auto-sub-id-keys. This 10 characters encoded string is unique per chassis as well as in dual-homed environment. It is generated based on auto-sub-id-keys. If auto-sub-id-keys are not explicitly configured, the default ones are:

  • mac, sap-id, or session-id for PPP type hosts

  • mac or sap-id for IPoE type hosts.

This command does not apply to static subscribers.

The no form of this command reverts to the default.

Parameters

use-sap-id

Specifies the sub-id name-id on which the original request for host creation arrived (DHCP Discover, or PADI or ARP Request).

sub-id

Explicitly configured sub-id name up to 32 characters.

use-auto-id

Specifies the concatenated string of auto-sub-id-keys separated by a "| ” character.

Default

no def-sub-id

Implicit default If the sub-id string is not supplied through RADIUS, LUDB, or def-sub-id configuration, then a random 10 character encoded sub-id name is generated. This random sub-id name is based on the subscriber identification keys defined under the subscr-mgmt>auto-sub-id-key node. In case that the auto-sub-id-keys are not defined explicitly, the default ones are:

• mac, sap-id, or session-id for PPPoE type hosts

• mac or sap-id for IPoE type hosts

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-id)

Full Context

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-id

Description

This command configures the default subscriber ID. The default is used if no other source (like RADIUS) provides a subscriber identification string.

Parameters

sub-id

Specifies the default subscriber identification up to 32 characters.

use-auto-id

Specifies that the auto-generated subscriber identification string, is used as the default subscriber identification string.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>msap-policy>sub-sla-mgmt def-sub-profile)

Full Context

configure subscriber-mgmt msap-policy sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for an MSAP.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>vprn>sub-if>grp-if>sap-parameters>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>ies>if>sap>sub-sla-mgmt def-sub-profile)

[Tree] (config>service>ies>sub-if>grp-if>sap>sub-sla-mgmt def-sub-profile)

Full Context

configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

configure service ies interface sap sub-sla-mgmt def-sub-profile

configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile
• configure service ies subscriber-interface group-interface sap-parameters sub-sla-mgmt def-sub-profile

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface sap sub-sla-mgmt def-sub-profile

Context

[Tree] (config>service>vpls>sap>sub-sla-mgmt def-sub-profile)

Full Context

configure service vpls sap sub-sla-mgmt def-sub-profile

Description

This command specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

A subscriber profile defines the aggregate QoS for all hosts within a subscriber context. This is done through the definition of the egress and ingress scheduler policies that govern the aggregate SLA for subscriber using the subscriber profile. Subscriber profiles also allow for specific SLA profile definitions when the default definitions from the subscriber identification policy must be overridden.

The no form of this command removes the default SLA profile from the SAP configuration.

Parameters

default-sub-profile

Specifies a default subscriber profile for this SAP. The subscriber profile must be defined prior to associating the profile with a SAP in the config>subscr-mgmt>sub-profile context.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>accounting-policy default)

Full Context

configure log accounting-policy default

Description

This command configures the default accounting policy to be used with all SAPs that do not have an accounting policy.

If no access accounting policy is defined on a SAP, accounting records are produced in accordance with the default access policy. If no default access policy is created, then no accounting records will be collected other than the records for the accounting policies that are explicitly configured.

If no network accounting policy is defined on a network port, accounting records will be produced in accordance with the default network policy. If no network default policy is created, then no accounting records will be collected other than the records for the accounting policies explicitly configured.

Only one access accounting policy ID can be designated as the default access policy. Likewise, only one network accounting policy ID can be designated as the default network accounting policy.

The record name must be specified prior to assigning an accounting policy as default.

If a policy is configured as the default policy, then a no default command must be issued before a new default policy can be configured.

The no form of this command removes the default policy designation from the policy ID. The accounting policy will be removed from all SAPs or network ports that do not have this policy explicitly defined.

Platforms

All

Context

[Tree] (config>service>vprn>radius-proxy>server default-accounting-server-policy)

[Tree] (config>router>radius-proxy>server default-accounting-server-policy)

Full Context

configure service vprn radius-proxy server default-accounting-server-policy

configure router radius-proxy server default-accounting-server-policy

Description

This command specifies the default radius-server-policy for RADIUS accounting. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the name of the default RADIUS server policy associated with this RADIUS Proxy server for accounting purposes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>filter>dhcp-filter default-action)

Full Context

configure filter dhcp-filter default-action

Description

This command specifies the default action for DHCP filters when no entries match.

The no form of this command reverts to the default.

Parameters

bypass-host-creation

Specifies to bypass ESM host creation options.

drop

Specifies to drop and not process the DHCP message.

Platforms

All

Context

[Tree] (config>filter>dhcp6-filter default-action)

Full Context

configure filter dhcp6-filter default-action

Description

This command specifies the default action for DHCP6 filters when no entries match.

The no form of this command reverts to the default.

Parameters

bypass-host-creation

Specifies to bypass ESM host creation options.

Values

na — Bypasses the DHCP NA hosts creation.

pd — Bypasses the DHCP PD hosts creation.

drop

Specifies to drop and not process the DHCP6 message.

Platforms

All

Context

[Tree] (config>subscr-mgmt>isa-filter default-action)

[Tree] (config>subscr-mgmt>isa-filter>ipv6 default-action)

Full Context

configure subscriber-mgmt isa-filter default-action

configure subscriber-mgmt isa-filter ipv6 default-action

Description

This command specifies what should happen to packets that do not match any of the configured entries.

The no form of this command reverts to the default value.

Default

default-action drop

Parameters

drop

Specifies that packets matching the filter entry are dropped.

forward

Specifies that packets matching the filter entry are forwarded.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>mrp>mrp-policy default-action)

Full Context

configure service mrp mrp-policy default-action

Description

This command specifies the action to be applied to the MMRP attributes (Group B-MACs) whose ISIDs do not match the specified criteria in all of the entries of the mrp-policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default

default-action allow

Parameters

block

Specifies that all MMRP attributes will not be declared or registered unless there is a specific mrp-policy entry which causes them to be allowed on this SAP or SDP.

allow

Specifies that all MMRP attributes will be declared and registered unless there is a specific mrp-policy entry which causes them to be blocked on this SAP or SDP.

Platforms

All

Context

[Tree] (config>service>vprn>log>filter default-action)

Full Context

configure service vprn log filter default-action

Description

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default

default-action forward — The events which are not explicitly dropped by an event filter match are forwarded.

Parameters

drop

The events which are not explicitly forwarded by an event filter match are dropped.

forward

The events which are not explicitly dropped by an event filter match are forwarded.

Platforms

All

Context

[Tree] (config>app-assure>group>sess-fltr default-action)

Full Context

configure application-assurance group session-filter default-action

Description

This command specifies the default action to take for packets that do not match any filter entries.

The no form of this command reverts the default action to the default value (forward).

Default

default-action deny

Parameters

deny

Indicates that packets matching the criteria are denied.

permit

Indicates that packets matching the criteria are permitted.

event-log-name

Specifies the event log name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type default-action

Description

This command configures a TCA for the counter capturing hits for the specified GTP filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>msg-gtpv2 default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter message-type-gtpv2 default-action

Description

This command configures a TCA for the counter capturing hits due to the default action specified for the GTPv2 message type filter. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-fltr>imsi-apn default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter imsi-apn default-action

Description

This command configures a TCA for the counter capturing hits for the specified GTP IMSI-APN filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Context

[Tree] (config>app-assure>group>statistics>tca>sctp-fltr>ppid default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert sctp-filter ppid default-action

Description

This command configures a TCA for the counter capturing hits for the specified SCTP filter default PPID. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca>session-filter default-action)

Full Context

configure application-assurance group statistics threshold-crossing-alert session-filter default-action

Description

This command configures a TCA for the counter capturing hits for the specified session filter default action. A default action TCA can be created for traffic generated from the subscriber side of AA (from-sub) or for traffic generated from the network toward the AA subscriber (to-sub). The create keyword is mandatory when creating a default action TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub, to-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>imsi-apn-fltr default-action)

Full Context

configure application-assurance group gtp gtp-filter imsi-apn-filter default-action

Description

This command configures the default action for the IMSI-APN filter.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any message entries.

deny

Specifies to deny packets that do not match any message entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>msg-gtpv2 default-action)

[Tree] (config>app-assure>group>gtp>gtp-fltr>msg default-action)

Full Context

configure application-assurance group gtp gtp-filter message-type-gtpv2 default-action

configure application-assurance group gtp gtp-filter message-type default-action

Description

This command configures the default action for all GTP message types.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any message entries.

deny

Specifies to deny packets that do not match any message entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>sctp-fltr>ppid default-action)

Full Context

configure application-assurance group sctp-filter ppid default-action

Description

This command configures the default action for all SCTP PPIDs.

Default

default-action permit

Parameters

permit

Specifies to permit packets that do not match any PPID entries.

deny

Specifies to deny packets that do not match any PPID entries.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action>url-filter default-action)

Full Context

configure application-assurance group policy app-qos-policy entry action url-filter default-action

Description

This command configures the default action to take when the ICAP server is unreachable.

Default

no default-action

Parameters

allow

Allows all requests.

block-all

Blocks all requests.

block-http-redirect http-redirect-name

Blocks and redirects requests.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>nat-classifier default-action)

Full Context

configure service nat nat-classifier default-action

Description

This command specifies the default action to take for packets in this nat-classifier. The default-action will apply to packet that do not match any configured criteria within nat-classifier. The no form of this command equals action forward.

Default

default-action forward

Parameters

dnat

Performs the DNAT function. The destination IP address of the packet traversing the router in the direction from inside to outside is replaced by the configured IP address. Destination port is not translated. In the opposite direction (from outside to inside), the source address in the returning packet is restored to the original value.

forward

The forward action will ensure that the packet is transparently passed through the nat-classifier.

ip-address ip-address

The destination IP address that will replace the original IP address in the packet traveling from inside to outside.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>mcac>policy default-action)

Full Context

configure router mcac policy default-action

Description

This command specifies the action to be applied to multicast streams (channels) when the streams do not match any of the multicast addresses defined in the MCAC policy.

When multiple default-action commands are entered, the last command will overwrite the previous command.

Default

default-action discard

Parameters

accept

Specifies multicast streams (channels) not defined in the MCAC policy will be accepted.

discard

Specifies multicast streams (channels) not defined in the MCAC policy will be dropped.

Platforms

All

Context

[Tree] (config>qos>network>ingress default-action)

Full Context

configure qos network ingress default-action

Description

This command defines or edits the default action to be taken for packets that have an undefined DSCP or MPLS EXP bit set. The default-action command specifies the forwarding class to which such packets are assigned.

Multiple default-action commands will overwrite each previous default-action command.

Default

default-action fc be profile out

Parameters

fc-name

Specifies the forwarding class name. All packets with DSCP value or MPLS EXP or dot1p bits that are not defined will be placed in this forwarding class.

Values

be, l2, af, l1, h2, ef, h1, nc

profile {in | out}

All packets that are assigned to this forwarding class will be considered in-profile or out-of-profile based on this command. In case of congestion, the in-profile packets are preferentially queued over the out-of-profile packets.

Values

in, out

Platforms

All

Context

[Tree] (config>filter>ipv6-filter default-action)

[Tree] (config>filter>mac-filter default-action)

[Tree] (config>filter>ip-filter default-action)

Full Context

configure filter ipv6-filter default-action

configure filter mac-filter default-action

configure filter ip-filter default-action

Description

This command defines the default action to be applied to packets not matching any entry in this ACL filter policy or to packets for that match a PBF/PBR filter entry for which the PBF/PBR target is down and pbr-down-action-override per-entry is set to filter-default-action.

Default

default-action drop

Parameters

drop

Specifies the default action is to drop a packet.

forward

Specifies the default action is to forward a packet.

Platforms

All

Context

[Tree] (config>log>filter default-action)

Full Context

configure log filter default-action

Description

The default action specifies the action that is applied to events when no action is specified in the event filter entries or when an event does not match the specified criteria.

When multiple default-action commands are entered, the last command overwrites the previous command.

The no form of this command reverts the default action to the default value (forward).

Default

default-action forward

Parameters

drop

The events which are not explicitly forwarded by an event filter match are dropped.

forward

The events which are not explicitly dropped by an event filter match are forwarded.

Platforms

All

Context

[Tree] (config>system>security>mgmt-access-filter>mac-filter default-action)

[Tree] (config>system>security>mgmt-access-filter>ip-filter default-action)

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter default-action)

Full Context

configure system security management-access-filter mac-filter default-action

configure system security management-access-filter ip-filter default-action

configure system security management-access-filter ipv6-filter default-action

Description

This command creates the default action for management access in the absence of a specific management access filter match.

The default-action is applied to a packet that does not satisfy any match criteria in any of the management access filters. Whenever management access filters are configured, the default-action must be defined.

Parameters

permit

Specifies that packets not matching the configured selection criteria in any of the filter entries will be permitted.

deny

Specifies that packets not matching the selection criteria be denied and that an ICMP host unreachable message will not be issued.

deny-host-unreachable

Specifies that packets not matching the selection criteria be denied access and that an ICMP host unreachable message will be issued.

The deny-host-unreachable only applies to ip-filter and ipv6filter.

Platforms

All

Context

[Tree] (config>system>security>cpm-filter default-action)

Full Context

configure system security cpm-filter default-action

Description

This command specifies the action to take on the traffic when there are no filter entry matches. If there are no filter entries defined, the packets received are either dropped or forwarded based on that default action.

Default

default-action accept

Parameters

accept

Specifies that packets matching the filter entry are forwarded.

drop

Specifies that packets matching the filter entry are dropped.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>security>profile default-action)

Full Context

configure system security profile default-action

Description

This command specifies the default action to be applied when no match conditions are met.

Parameters

deny-all

Sets the default of the profile to deny access to all commands.

permit-all

Sets the default of the profile to permit access to all commands.

Note:

In classic CLI but not in MD-CLI the permit-all parameter does not change access to security commands. Specific entries must be created in a command authorization profile in order to give access to security commands. The system populated "administrative” profile contains rules to access security commands.

none

Sets the default of the profile to no-action. This option is useful to assign multiple profiles to a user.

read-only-all

Sets the default of the profile to allow read-only access to all commands.

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement default-action)

Full Context

configure router policy-options policy-statement default-action

Description

Commands in this context configure actions to apply to routes that do not match any entries of a route policy statement.

The no form of this command deletes the default-action context for the policy statement.

Default

no default-action

Parameters

accept

Specifies that routes not matched by any entry should be allowed or accepted. This parameter provides a context for modifying route properties.

next-entry

Specifies that routes not matched by any entry should be evaluated by the next sequential entry in the policy chain, after route properties are possibly modified by the default action of the current policy.

next-policy

Specifies that routes not matched by any entry should be evaluated by the next sequential policy in the policy chain, after route properties are possibly modified by the default action of the current policy.

drop

Specifies that routes not matched by any entry should be disallowed or rejected. This parameter provides a context for modifying route properties.

reject

Specifies that routes not matched by any entry should be disallowed or rejected. This parameter does not provide a context for modifying route properties.

Platforms

All

Context

[Tree] (config>app-assure>group>url-filter>web-service default-action)

[Tree] (config>app-assure>group>url-filter>local-filtering default-action)

[Tree] (config>app-assure>group>url-filter>icap default-action)

Full Context

configure application-assurance group url-filter web-service default-action

configure application-assurance group url-filter local-filtering default-action

configure application-assurance group url-filter icap default-action

Description

This command configures a default action for the URL filter. The default action takes effect when the URL filter cannot be used. This may happen in the following scenarios.

• In the case of a local URL list, when the URL list is shutdown or the file is not loaded due to an error.

• In the case of ICAP or web filtering, when all TCP connections are busy or down.

The no form of this command removes the default-action for the URL filter.

Default

no default-action

Parameters

allow

Specifies to allows traffic.

block-all

Specifies to block traffic.

block-http-redirect http-redirect-name

Specifies to block traffic and redirect the user to an information page, which can be different than the page the user is redirected to when the site they attempted to access was found in the URL filter; this page is configured using the config>aa>group>url-filter>http-redirect command.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>radius-proxy>server default-authentication-server-policy)

[Tree] (config>service>vprn>radius-proxy>server default-authentication-server-policy)

Full Context

configure router radius-proxy server default-authentication-server-policy

configure service vprn radius-proxy server default-authentication-server-policy

Description

This command specifies the default radius-server-policy for RADIUS authentication. This policy is used when there is no specific match based on username.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the name of the default RADIUS server policy associated with this RADIUS proxy server for authentication purposes.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges>range>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>brg default-brg-profile)

[Tree] (config>service>vprn>sub-if>grp-if>brg default-brg-profile)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-ranges>range>vrgw>brg default-brg-profile)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile

configure service ies subscriber-interface group-interface wlan-gw ranges range brg default-brg-profile

configure service ies subscriber-interface group-interface brg default-brg-profile

configure service vprn subscriber-interface group-interface brg default-brg-profile

configure service vprn subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile

configure service ies subscriber-interface group-interface wlan-gw vlan-ranges range vrgw brg default-brg-profile

Description

This command indicates that the default BRG profile must be used for new BRGs. This profile can be overridden by RADIUS.

Parameters

profile-name

Specifies the name of the brg-profile to be applied.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>credit-control-policy default-category-map)

Full Context

configure subscriber-mgmt credit-control-policy default-category-map

Description

This command configures the default category map.

The no form of this command reverts to the default.

Parameters

category-map-name

Specifies the category map name, up to 32 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy default-charging-group)

Full Context

configure application-assurance group policy default-charging-group

Description

This command associates a charging group to any applications or app-groups that are not explicitly assigned to a charging group, for an application assurance policy.

The no form of this command deletes the default charging group from the configuration.

Default

no default-charging-group

Parameters

charging-group-name

A string of up to 32 characters uniquely identifying an existing charging group in the system.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>cat-map>category default-credit)

Full Context

configure subscriber-mgmt category-map category default-credit

Description

This command configures the default credit values for RADIUS credit control and Diameter Gy application credit control.

For RADIUS credit control, this command configures the default time or volume credit for this category. The default credit is used during initial setup when no quota is received from the RADIUS server.

For Diameter Gy credit control, this command specifies the interim credit assigned to this category (rating group) when Extended Failure Handling (EFH) is enabled. This command is ignored when EFH is disabled.

The no form of this command reverts to the default.

Parameters

volume credits[bytes | kilobytes | megabytes | gigabytes]

Specifies the default value for the volume credit and the unit in which the default value is expressed.

Values

1 to 4294967295 (minimum 1 byte)

time seconds

Specifies the default value for the time credit, in seconds.

Values

1 to 4294967295 (minimum 1 second)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>nat>nat-classifier default-dnat-ip-address)

Full Context

configure service nat nat-classifier default-dnat-ip-address

Description

This command configures the IP address to substitute for the destination IP address of the packets

Default

no default-dnat-ip-address

Parameters

ip-address

Specifies the default DNAP IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if default-dns)

[Tree] (config>service>ies>sub-if default-dns)

Full Context

configure service vprn subscriber-interface default-dns

configure service ies subscriber-interface default-dns

Description

This command configures last resort IP DNS addresses that can be used for name resolution by IPoE hosts (IA_NA, IA_PD and SLAAC) and PPPoE hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters

ip-address

Specifies the IP address of the primary DNS server.

secondary ip-address

Specifies the IP address of the secondary DNS server (optional).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>sub-if>ipv6 default-dns)

[Tree] (config>service>ies>sub-if>ipv6 default-dns)

Full Context

configure service vprn subscriber-interface ipv6 default-dns

configure service ies subscriber-interface ipv6 default-dns

Description

This command configures last resort IPv6 DNS addresses that can be used for name resolution by IPoEv6 hosts (IA_NA, IA_PD and SLAAC) and PPPoEv6 hosts (IA_NA, IA_PD and SLAAC).

The no form of this command reverts to the default.

Parameters

ipv6-address

Specifies the IPv6 address of the primary DNS server.

secondary ipv6-address

Specifies the IPv6 address of the secondary DNS server (optional).

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>dns default-domain)

Full Context

configure service vprn dns default-domain

Description

This command configures the DNS domain name to be added in DNS retries when a DNS query is not replied or an empty DNS reply is received.

The no form of this command prevents DNS retries when the DNS query is not replied or an empty DNS reply is received.

Parameters

dns-name

Specifies the name of the default domain, up to 255 characters. Allowed values for characters are alphabetical (A-Z), numeric (0-9), the minus sign (-), and the period (.). For example, "3gpp-network.org”.

Platforms

All

Context

[Tree] (config>eth-cfm default-domain)

Full Context

configure eth-cfm default-domain

Description

Commands in this context configure MIP creation parameters per index (bridge-identifier bridge-id vlan vlan-id) if the MIP creation statement exists as part of the service connection. The mip creation statement must be present on the connection before any configuration can occur for a MIP under this context. The determining factor for MIP creation is based on the authoritative properties of the eth-cfm domain association configuration. The individual indexes in this table are used for MIP creation only when the association context is not authoritative; this includes the lack of association for a matching index.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>qos>sap-ingress default-fc)

Full Context

configure qos sap-ingress default-fc

Description

This command configures the default forwarding class for the policy. If an ingress packet does not match a higher priority (more explicit) classification command, the default forwarding class or subclass if associated with the packet. Unless overridden by an explicit forwarding class classification rule, all packets received on an ingress SAP using this ingress QoS policy are classified to the default forwarding class. Optionally, the default ingress enqueuing priority for the traffic can be overridden as well.

The default forwarding class is best effort (be). The default-fc settings are displayed in the show configuration and save output regardless of inclusion of the detail keyword.

Default

default-fc "be”

Parameters

fc-name

Specify the forwarding class name for the queue. The value specified for fc-name must be one of the predefined forwarding classes in the system.

The subclass-name parameter is optional and used with the fc-name parameter to define a preexisting subclass. The fc-name and subclass-name parameters must be separated by a period (dot). If subclass-name does not exist in the context of fc -name, an error will occur. If subclass-name is removed using the no fc fc-name.subclass-name force command, the default-fc command will automatically drop the subclass-name and only use fc-name (the parent forwarding class for the subclass) as the forwarding class.

Values

fc:	class[.subclass]
		class: be, l2, af, l1, h2, ef, h1, nc
		subclass: 29 characters max

Platforms

All

Context

[Tree] (debug>app-assure>group>http-host>filter default-filter-action)

Full Context

debug application-assurance group http-host-recorder filter default-filter-action

Description

This command configures the recorder filter default action to either record or no-record. This parameter applies to http-host values not matching any expressions defined in the filter context.

Parameters

default-action

Specifies the default action.

Values

record, no-record

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>l2tp>group>ppp default-group-interface)

[Tree] (config>router>l2tp>group>tunnel>ppp default-group-interface)

[Tree] (config>service>vprn>l2tp>group>tunnel>ppp default-group-interface)

[Tree] (config>service>vprn>l2tp>group>ppp default-group-interface)

Full Context

configure router l2tp group ppp default-group-interface

configure router l2tp group tunnel ppp default-group-interface

configure service vprn l2tp group tunnel ppp default-group-interface

configure service vprn l2tp group ppp default-group-interface

Description

This command configures the group interface where the PPP sessions are established when the authentication server does not specify the group interface.

The no form of this command removes the interface name or service ID from the configuration.

Parameters

ip-int-name

Specifies an IP interface name, up to 32 characters.

service-id service-id

Specifies an existing service identification number.

This variant of the command is only supported in 'classic' configuration-mode (configure system management-interface configuration-mode classic). The default-group-interface ip-int-name service-name svc-name variant can be used in all configuration modes.

Values

{id | svc-name}

id:	1 to 2147483647
svc-name:	up to 64 characters (svc-name is an alias for input only. The svc-name gets replaced with an id automatically by SR OS in the configuration).

service-name svc-name

Specifies an existing service name up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>statistics>tca>gtp-filter default-gtp-tunnel-endpoint-limit)

Full Context

configure application-assurance group statistics threshold-crossing-alert gtp-filter default-gtp-tunnel-endpoint-limit

Description

This command configures a TCA for the counter capturing drops because the GTP endpoint limits create requests exceeding the configured allowed limit (set by the default-tunnel-endpoint-limit command). A default-gtp-tunnel-endpoint-limit drop TCA can be created for traffic generated from the subscriber side of AA (from-sub). The create keyword is mandatory when creating a TCA.

Parameters

direction

Specifies the traffic direction.

Values

from-sub

create

Keyword used to create the TCA.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>sap default-host)

[Tree] (config>service>vprn>sub-if>grp-if>sap default-host)

Full Context

configure service ies subscriber-interface group-interface sap default-host

configure service vprn subscriber-interface group-interface sap default-host

Description

This command configures the default-host. More than one default host can be configured per SAP.

The no form of this command removes the values from the configuration.

Parameters

ipv4prefix/prefix-length

Specifies an IPv4 prefix and prefix length.

Values

ipv4-prefix	a.b.c.d (host bits must be 0
prefix-length 0 to 32

ipv6-prefix/prefix-length

Specifies an IPv6 prefix and prefix length.

Values

ipv6-prefix	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x - [0 to FFFF]H
	d - [0 to 255]D
prefix-length - [0 to 128]

next-hop

Assigns the next hop IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>isis>if default-instance)

Full Context

configure service vprn isis interface default-instance

Description

This command enables a non-MI capable router to establish an adjacency and operate with an SR OS in a non-zero instance. If the router does not receive IID-TLVs, it establishes an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router establishes an adjacency in the configured non-zero instance. The router then operates in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default

no default-instance

Platforms

All

Context

[Tree] (config>router>isis>interface default-instance)

Full Context

configure router isis interface default-instance

Description

This command enables a non-MI capable router to establish an adjacency and operate with a router in a non-zero instance. If the router does not receive IID-TLVs, it will establish an adjacency in a single instance. Instead of establishing an adjacency in the standard instance 0, the router will establish an adjacency in the configured non-zero instance. The router will then operate in the configured non-zero instance so that it appears to be in the standard instance 0 to its neighbor. This feature is supported on point-to-point interfaces, broadcast interfaces are not supported.

This feature must be configured on the router connected to non-MI capable routers and on all other SR OS routers in the area, so that they receive non-MI LSPs in the correct instance and not in the base instance.

The no form of this command disables the functionality so that the router can only establish adjacencies in the standard instance 0.

Default

no default-instance

Platforms

All

Context

[Tree] (config>service>vprn>isis>level default-ipv4-multicast-metric)

Full Context

configure service vprn isis level default-ipv4-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv4-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>router>isis>level default-ipv4-multicast-metric)

Full Context

configure router isis level default-ipv4-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv4 multicast topology (MT3).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv4-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT3).

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>service>vprn>isis>level default-ipv6-multicast-metric)

Full Context

configure service vprn isis level default-ipv6-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv6-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

Platforms

All

Context

[Tree] (config>router>isis>level default-ipv6-multicast-metric)

Full Context

configure router isis level default-ipv6-multicast-metric

Description

This command configures the default metric to be used for the IS-IS interface in the IPv6 multicast topology (MT4).

The no form of this command deletes the specified default metric and reverts to using the system default of 10.

Default

default-ipv6-multicast-metric 10

Parameters

metric

Specifies the default metric for interfaces in the IPv4 multicast topology (MT4).

1 to 16777215

Platforms

All

Context

[Tree] (config>service>vprn>isis>level default-ipv6-unicast-metric)

Full Context

configure service vprn isis level default-ipv6-unicast-metric

Description

This command specifies the default metric for IPv6 unicast.

Default

default-ipv6-unicast-metric 10

Parameters

ipv6-metric

Specifies the default metric for IPv6 unicast.

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>router>isis>level default-ipv6-unicast-metric)

Full Context

configure router isis level default-ipv6-unicast-metric

Description

This command specifies the default metric for IPv6 unicast.

The no form of this command reverts to the default value.

Default

default-ipv6-unicast-metric 10

Parameters

ipv6-metric

Specifies the default metric for IPv6 unicast.

Values

1 to 16777215

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor default-label-preference)

[Tree] (config>router>bgp default-label-preference)

[Tree] (config>router>bgp>group default-label-preference)

Full Context

configure router bgp group neighbor default-label-preference

configure router bgp default-label-preference

configure router bgp group default-label-preference

Description

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying labeled-unicast prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the label-preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-label-preference value is inherited from a higher level of configuration and competes with an explicitly configured label-preference value at a lower level of configuration in the BGP hierarchy.

The no form of the command lets BGP route-table preference for labeled-unicast routes to be controlled by other means.

Default

no default-label-preference

Parameters

ebgp label preference

Specifies the EBGP default preference label value.

Values

0 to 255

ibgp label preference

Specifies the IBGP default preference label value.

Values

0 to 255

Platforms

All

Context

[Tree] (config>aaa>route-downloader default-metric)

Full Context

configure aaa route-downloader default-metric

Description

This command sets the default metric that routes imported by the RTM acquires.

The no form of this command removes the metric.

Default

default-metric 2

Parameters

metric

Specifies the default metric of the routes imported.

Values

0 to 254

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>isis>level default-metric)

Full Context

configure service vprn isis level default-metric

Description

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

Default

default-metric 10

Parameters

ipv4 metric

Specifies the default metric for IPv4 unicast.

Values

1 to 16777214

Platforms

All

Context

[Tree] (config>service>vprn>ospf>area>stub default-metric)

[Tree] (config>service>vprn>ospf3>area>stub default-metric)

Full Context

configure service vprn ospf area stub default-metric

configure service vprn ospf3 area stub default-metric

Description

This command configures the metric used by the area border router (ABR) for the default route into a stub area. The default metric should only be configured on an ABR of a stub area. An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default

default-metric 1

Parameters

metric

The metric expressed as a decimal integer for the default route cost to be advertised into the stub area.

Values

1 to 16777214

Platforms

All

Context

[Tree] (config>router>isis>level default-metric)

Full Context

configure router isis level default-metric

Description

This command specifies the configurable default metric used for all IS-IS interfaces on this level. This value is not used if a metric is configured for an interface.

The no form of this command reverts to the default value.

Default

default-metric 10

Parameters

ipv4 metric

Specifies the default metric for IPv4 unicast.

Values

1 to 16777214

Platforms

All

Context

[Tree] (config>router>ospf>area>stub default-metric)

[Tree] (config>router>ospf3>area>stub default-metric)

Full Context

configure router ospf area stub default-metric

configure router ospf3 area stub default-metric

Description

This command configures the metric used by the area border router (ABR) for the default route into a stub area.

The default metric should only be configured on an ABR of a stub area.

An ABR generates a default route if the area is a stub area.

The no form of this command reverts to the default value.

Default

default-metric 1

Parameters

metric

Specifies the metric expressed as a decimal integer for the default route cost to be advertised into the stub area.

Values

1 to 16777214

Platforms

All

Context

[Tree] (config>service>vpls>sap default-msap-policy)

Full Context

configure service vpls sap default-msap-policy

Description

This command specifies the default managed SAP policy to use to create MSAPs when the response from the RADIUS server does not specify a managed SAP policy.

The policy-name parameter is only valid for a SAP with the keywords capture-sap specified in the SAP’s configuration. The capture-sap keyword in the SAP configuration captures the SAP where triggering packets is sent to the CPM. Non-triggering packets captured by the capture SAP is dropped.

The managed SAP policy must already be defined in the config>subscr-mgmt>msap-policy context.

The no form of this command removes the policy-name from the configuration.

Parameters

policy-name

Specifies an existing default managed SAP policy.

Platforms

All

Context

[Tree] (config>subscr-mgmt>ppp-policy default-pap-password)

Full Context

configure subscriber-mgmt ppp-policy default-pap-password

Description

This command configures the default PAP password for RADIUS authentication when the Password-Length=0 in the PAP Authenticate-Request.

RADIUS authentication cannot be initiated when the Password-Length=0 in the PAP Authenticate-Request and no default-pap-password is configured. The PPP session terminates in this case.

Parameters

password

Specifies a default PAP password up to 64 characters.

hash

Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies the key is entered in a more complex encrypted form that involves more variables than the key value alone, meaning that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

custom

Specifies the custom encryption to management interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>mpls>lsp-template default-path)

Full Context

configure router mpls lsp-template default-path

Description

A default path binding must be provided before the LSP template can be used for signaling LSP. The LSP template must be shutdown to modify default-path binding.

Parameters

path-name

Configures the default path binding

Platforms

All

Context

[Tree] (config>aaa>diam>node>peer default-peer)

Full Context

configure aaa diameter node peer default-peer

Description

This command designates a peer as a default peer. Traffic that is destined to realms that are not associated with locally configured peers, is sent to the default-peer. In effect, the default peer becomes a default route for Diameter realms.

This command is mandatory in multi-chassis redundancy where the inter-chassis peer is designated as default peer. Then, the SR with no open connections towards agents or servers, forwards all traffic to the inter-peer which maintains, as part of MCS, open connections with agents and servers.

The no form of this command reverts to the default.

Default

no default-peer

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>msdp>group>peer default-peer)

[Tree] (config>service>vprn>msdp>peer default-peer)

Full Context

configure service vprn msdp group peer default-peer

configure service vprn msdp peer default-peer

Description

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer will be accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check is used to stop source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

• If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.

• If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.

• If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.

• If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

• If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

• If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.

Default

no default-peer

Platforms

All

Context

[Tree] (config>router>msdp>group>peer default-peer)

[Tree] (config>router>msdp>peer default-peer)

Full Context

configure router msdp group peer default-peer

configure router msdp peer default-peer

Description

Using the default peer mechanism, a peer can be selected as the default Multicast Source Discovery Protocol (MSDP) peer. As a result, all source-active messages from the peer is accepted without the usual peer-reverse-path-forwarding (RPF) check.

The MSDP peer-RPF check is different from the normal multicast RPF checks. The peer-RPF check stops source-active messages from looping. A router validates source-active messages originated from other routers in a deterministic fashion.

A set of rules is applied in order to validate received source-active messages, and the first rule that applies determines the peer-RPF neighbor. All source-active messages from other routers are rejected. The rules applied to source-active messages originating at Router S received at Router R from Router N are as follows:

• If Router N and router S are one and the same, then the message is originated by a direct peer-RPF neighbor and will be accepted.

• If Router N is a configured peer, or a member of the Router R mesh group then its source-active messages are accepted.

• If Router N is the Border Gateway Protocol (BGP) next hop of the active multicast RPF route toward Router S then Router N is the peer-RPF neighbor and its source-active messages are accepted.

• If Router N is an external BGP peer of Router R and the last autonomous system (AS) number in the BGP AS-path to Router S is the same as Router N’s AS number, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

• If Router N uses the same next hop as the next hop to Router S, then Router N is the peer-RPF neighbor, and its source-active messages are accepted.

• If Router N fits none of the above rules, then Router N is not a peer-RPF neighbor, and its source-active messages are rejected.

Default

no default-peer (No default peer is established and all active source messages must be RPF checked)

Platforms

All

Context

[Tree] (config>service>ies>sub-if>local-address-assignment default-pool)

[Tree] (config>service>vprn>sub-if>grp-if>local-address-assignment default-pool)

[Tree] (config>service>ies>sub-if>grp-if>local-address-assignment default-pool)

[Tree] (config>service>vprn>sub-if>local-address-assignment default-pool)

Full Context

configure service ies subscriber-interface local-address-assignment default-pool

configure service vprn subscriber-interface group-interface local-address-assignment default-pool

configure service ies subscriber-interface group-interface local-address-assignment default-pool

configure service vprn subscriber-interface local-address-assignment default-pool

Description

This command references a default DHCP address pool for local PPPoX pool management in case that the pool-name is not returned via Radius or LUDB.

Parameters

pool-name

Specifies the name of the local DHCP server pool.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>bgp>group>neighbor default-preference)

[Tree] (config>router>bgp default-preference)

[Tree] (config>router>bgp>group default-preference)

Full Context

configure router bgp group neighbor default-preference

configure router bgp default-preference

configure router bgp group default-preference

Description

This command specifies a route-table preference value to use for EBGP or IBGP routes carrying unlabeled prefixes and received from peers covered by the context of the command. Route-table preference comes into play when the route-table has multiple routes for the same IP prefix. In this case, the route with the numerically lowest preference value is usually the route that is activated and installed into the IP FIB. By default all BGP routes have a route-table preference value of 170.

This command overrides the preference value assigned by the preference command; that other command does not distinguish between EBGP and IBGP routes. Overriding happens even when the default-preference value is inherited from a higher level of configuration and competes with an explicitly configured preference value at a lower level of configuration in the BGP hierarchy.

The no form of the command lets BGP route-table preference to be controlled by other means.

Default

no default-preference

Parameters

ebgp preference

Specifies the EBGP default preference value.

Values

0 to 255

ibgp preference

Specifies the IBGP default preference value.

Values

0 to 255

Platforms

All

Context

[Tree] (config>qos>sap-ingress default-priority)

Full Context

configure qos sap-ingress default-priority

Description

This command configures the default enqueuing priority for all packets received on an ingress SAP using this policy. To change the default priority for the policy, the fc-name must be defined whether it is being changed or not.

Default

default-priority low

Parameters

high

Setting the enqueuing parameter to high for a packet increases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

low

Setting the enqueuing parameter to low for a packet decreases the likelihood of enqueuing the packet when the ingress queue is congested. Ingress enqueuing priority only affects ingress SAP queuing. When the packet is placed in a buffer on the ingress queue, the significance of the enqueuing priority is lost.

Platforms

All

Context

[Tree] (config>app-assure>group>url-filter>web-service default-profile)

Full Context

configure application-assurance group url-filter web-service default-profile

Description

This command configures the default category profile to use when no category profile is explicitly selected for the subscriber.

The no form of this command removes the selected default profile configuration.

Default

no default-profile

Parameters

profile-name

Specifies a configured category profile to use as the default profile name, up to 256 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>sap>ipsec-gw>cert>status-verify default-result)

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)

[Tree] (config>router>if>ipsec>ipsec-tun>dyn>cert>status-verify default-result)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel>dyn>cert>status-verify default-result)

[Tree] (config>service>vprn>if>sap>ipsec-tun>dyn>cert>status-verify default-result)

[Tree] (config>ipsec>trans-mode-prof>dyn>cert>status-verify default-result)

[Tree] (config>service>ies>if>sap>ipsec-gw>cert>status-verify default-result)

Full Context

configure service vprn interface sap ipsec-gw cert status-verify default-result

configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result

configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result

configure service ies interface sap ipsec-gw cert status-verify default-result

Description

This command specifies the default certificate revocation status that is used result when both the primary and secondary CSV methods fail to verify the status.

Default

default-result revoked

Parameters

good

Specifies that the certificate is considered as acceptable.

revoked

Specifies that the certificate is considered as revoked.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn interface sap ipsec-tunnel dynamic-keying cert status-verify default-result
• configure service ies interface sap ipsec-gw cert status-verify default-result
• configure service vprn interface sap ipsec-gw cert status-verify default-result
• configure ipsec ipsec-transport-mode-profile dynamic-keying cert default-result

VSR

• configure router interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
• configure service vprn interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result
• configure service ies interface ipsec ipsec-tunnel dynamic-keying cert status-verify default-result

Context

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>vlan-tag-ranges default-retail-svc-id)

Full Context

configure service vprn subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id

configure service ies subscriber-interface group-interface wlan-gw vlan-tag-ranges default-retail-svc-id

Description

This command specifies the id of default retail service if there is no match found in VLAN to retail map configuration (specified by the vlan command). For DSM and migrant, this command is only applicable for non-NAT stacks.

Parameters

service-id

Specifies the identifier of the retail service to be used by default of a value in the retail service map of this interface.

Values

1 to 2147483650

svc-name: up to 64 characters

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)

[Tree] (config>service>vprn>sub-if>grp-if>wlan-gw>ranges default-retail-svc-id)

Full Context

configure service ies subscriber-interface group-interface wlan-gw ranges default-retail-svc-id

configure service vprn subscriber-interface group-interface wlan-gw ranges default-retail-svc-id

Description

This command configures the default retailer service for WIFI users.

Context

[Tree] (config>service>epipe>bgp-evpn>mpls default-route-tag)

[Tree] (config>service>epipe>bgp-evpn>vxlan default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>srv6 default-route-tag)

[Tree] (config>service>epipe>bgp-evpn>srv6 default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>vxlan default-route-tag)

[Tree] (config>service>vprn>bgp-ipvpn>srv6 default-route-tag)

[Tree] (config>service>vprn>bgp-evpn>mpls default-route-tag)

[Tree] (config>service>vpls>bgp-evpn>mpls default-route-tag)

Full Context

configure service epipe bgp-evpn mpls default-route-tag

configure service epipe bgp-evpn vxlan default-route-tag

configure service vpls bgp-evpn segment-routing-v6 default-route-tag

configure service epipe bgp-evpn segment-routing-v6 default-route-tag

configure service vpls bgp-evpn vxlan default-route-tag

configure service vprn bgp-ivpn segment-routing-v6 default-route-tag

configure service vprn bgp-evpn mpls default-route-tag

configure service vpls bgp-evpn mpls default-route-tag

Description

This command configures a route tag that EVPN and IP-VPN use when sending a route to the BGP application (for the corresponding service and BGP instance). If the corresponding BGP EVPN instance is enabled, the command cannot be changed. Additionally, EVPN services can add tags to routes with proxy-arp/nd>evpn-route-tag or the route table tag (added using the import policy). Only one tag is passed from EVPN to the BGP for matching on export policies. In case of a conflict with other route tags pushed by EVPN, the default route tag has the least priority.

The following are examples of the conflict priority handling:

• If a service is configured with both default-route-tag X and proxy-arp>evpn-route-tag Y, EVPN uses route tag Y when sending EVPN proxy-arp routes to the BGP RIB for advertisement.

• If a given IP-prefix route is tagged in the route-table with tag A and the R-VPLS, in which the route is advertised, uses B as the default-route-tag, then EVPN keeps tag A when sending the route to the BGP RIB.

The default-route-tag configuration is only supported on EVPN and IP-VPN service routes. The route tag for ES and AD per-ES routes is always zero.

The no form of this command removes the default-route-tag (that is, it sets the route tag to zero).

Default

no default-route-tag

Parameters

tag

Specifies the route tag.

Values

1 to 255

Platforms

All

• configure service vpls bgp-evpn vxlan default-route-tag
• configure service epipe bgp-evpn mpls default-route-tag
• configure service vpls bgp-evpn mpls default-route-tag
• configure service vprn bgp-evpn mpls default-route-tag
• configure service epipe bgp-evpn vxlan default-route-tag

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

• configure service vpls bgp-evpn segment-routing-v6 default-route-tag
• configure service epipe bgp-evpn segment-routing-v6 default-route-tag

Context

[Tree] (config>service>vprn>isis default-route-tag)

Full Context

configure service vprn isis default-route-tag

Description

This command configures the route tag for default route for the router or VPRN service.

Parameters

tag

Assigns a default tag.

Values

1 — 4294967295

Platforms

All

Context

[Tree] (config>router>isis default-route-tag)

Full Context

configure router isis default-route-tag

Description

This command configures the route tag for default route.

Parameters

tag

Assigns a default tag.

Values

1 to 4294967295

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor default-route-target)

[Tree] (config>router>bgp>group default-route-target)

Full Context

configure router bgp group neighbor default-route-target

configure router bgp group default-route-target

Description

This command originates the default RTC route (zero prefix length) towards the selected peers.

Default

no default-route-target

Platforms

All

Context

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>options default-router)

[Tree] (config>service>vprn>dhcp6>server>pool>subnet default-router)

[Tree] (config>router>dhcp>server>pool>subnet>options default-router)

Full Context

configure subscriber-mgmt local-user-db ipoe host options default-router

configure service vprn dhcp6 server pool subnet default-router

configure router dhcp local-dhcp-server pool subnet options default-router

Description

This command configures the IP address of the default router for a DHCP client. Up to four IP addresses can be specified.

The no form of this command removes the address(es) from the configuration.

Parameters

ip-address

Specifies up to four default router IP addresses. Each address must be unique within the subnet and specified in dotted decimal notation. Allowed values are IP addresses in the range 1.0.0.0 – 223.255.255.255 (with support of /31 subnets).

Values

a.b.c.d

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>sap>managed-vlan-list default-sap)

Full Context

configure service vpls sap managed-vlan-list default-sap

Description

This command adds a default SAP to the managed VLAN list.

The no form of this command removes the default SAP to the managed VLAN list.

Platforms

All

Context

[Tree] (config>service>ies>if>sap>ipsec-gateway default-secure-service)

[Tree] (config>service>vprn>if>sap>ipsec-gateway default-secure-service)

Full Context

configure service ies interface sap ipsec-gateway default-secure-service

configure service vprn interface sap ipsec-gateway default-secure-service

Description

This command specifies a service ID or service name of the default security service used by this SAP IPsec gateway.

Parameters

service-id

Specifies a default secure service.

Values

service-id: 1 to 2147483647svc-name: An existing service name up to 64 characters.

ip-int-name

The name of private IPsec tunnel interface.

Context

[Tree] (config>router>mpls>class-forwarding-policy default-set)

Full Context

configure router mpls class-forwarding-policy default-set

Description

This command configures the default forwarding set.

Parameters

set-id

Specifies the class forwarding set.

Values

1 to 4 (in system profile None/A)

1 to 6 (in system profile B)

Platforms

All

Context

[Tree] (config>qos>fp-resource-policy>aggregate-shapers>queue-sets default-size)

Full Context

configure qos fp-resource-policy aggregate-shapers queue-sets default-size

Description

Commands in this context configure the default queue-set size for individual object types.

Platforms

7750 SR-1, 7750 SR-s

Context

[Tree] (config>aaa>route-downloader default-tag)

Full Context

configure aaa route-downloader default-tag

Description

This command sets the default tag that routes processed by the AAA route downloader will take.

The no form of this command reverts to the default.

Default

default-tag 0

Parameters

tag

Specifies the default tag of the routes imported.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>gtp>gtp-fltr>gtp-tunnel-database default-tunnel-endpoint-limit)

Full Context

configure application-assurance group gtp gtp-filter gtp-tunnel-database default-tunnel-endpoint-limit

Description

This command configures the maximum number of GTP endpoints requested in GTP-C messages by using, for example, the PDP Context Create message type.

The validate-gtp-tunnels command must be enabled before using this command.

The no form of this command sets the limit to 4294967295 (the maximum number of GTP endpoints supported by AA FW minus one).

Default

no default-tunnel-endpoint-limit

Parameters

default-endpoint

Specifies the limit.

Values

1 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>sap>ipsec-gateway default-tunnel-template)

[Tree] (config>service>ies>if>sap>ipsec-gateway default-tunnel-template)

Full Context

configure service vprn interface sap ipsec-gateway default-tunnel-template

configure service ies interface sap ipsec-gateway default-tunnel-template

Description

This command configures a default tunnel policy template for the gateway.

Context

[Tree] (config>subscr-mgmt>ppp-policy default-user-name)

Full Context

configure subscriber-mgmt ppp-policy default-user-name

Description

This command configures the default username for authentication when not provided in PAP/CHAP authentication (no Name field in CHAP Response message or Peer-Id-Length=0 in PAP Authenticate-Request).

The PPP session terminates when no username is provided in PAP/CHAP authentication and no default-user-name is configured.

Parameters

ppp-username

Specifies a default username up to 253 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy>aso>char default-value)

Full Context

configure application-assurance group policy app-service-options characteristic default-value

Description

This command assigns one of the characteristic values as default.

When a default value is specified, app-profile entries that do not explicitly include this characteristic inherit the default value and use it as part of the AQP match criteria based on that app-profile.

A default-value is required for each characteristic. This is evaluated at commit time.

The no form of this command removes the default value for the characteristic.

Parameters

value-name

Specifies the name of an existing characteristic value.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>dhcp6>server defaults)

Full Context

configure router dhcp6 local-dhcp-server defaults

Description

Commands in this context configure server default timer and option parameters. These can be overridden on a per-pool and per-prefix basis.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>gtp>apn-policy>apn defaults)

Full Context

configure subscriber-mgmt gtp apn-policy apn defaults

Description

Commands in this context configure default parameters for the GTP connection that can be used when the parameters are not returned in authentication.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if>if-attribute delay)

Full Context

configure router interface if-attribute delay

Description

Commands in this context configure or apply delay interface attributes such as static delay.

Platforms

All

Context

[Tree] (config>system>management-interface>cli>md-cli>environment>progress-indicator delay)

Full Context

configure system management-interface cli md-cli environment progress-indicator delay

Description

This command sets the delay before the progress indicator is displayed in the MD-CLI.

Default

delay 500

Parameters

interval

Specifies the delay interval, in milliseconds.

Values

1 to 10000

Platforms

All

Context

[Tree] (config>test-oam>link-meas>template delay)

Full Context

configure test-oam link-measurement measurement-template delay

Description

This command configures the type of delay measurement statistic used in both the sample window and aggregate sample window.

The no form of this command reverts to the default value.

Default

delay min

Parameters

delay-measurement-type

Specifies the type of delay measurement that is used for comparison and reporting.

Values

min — Keyword to take the minimum of a series of measurements for comparison and reporting.

max — Keyword to take the maximum of a series of measurements for comparison and reporting.

avg — Keyword to compute the average of a series of measurements for comparison and reporting.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>bin-group>bin-type delay-event)

Full Context

configure oam-pm bin-group bin-type delay-event

Description

This command sets the bin number, the threshold and the direction that is monitored to determine if a delay metric threshold crossing event has occurred or has cleared. It requires a bin number, a rising threshold value and a direction. If the clear-threshold value is not specified, the traffic crossing alarm is stateless. Stateless means the state is not carried forward to other measurement intervals. Each measurement interval is analyzed independently and without regard to any previous window. When a raise threshold is reached, the log event is generated. Each unique threshold can only be raised once for the threshold within measurement interval. If the optional clear threshold is specified, the traffic crossing alarm uses stateful behavior. Stateful means each unique previous event state is carried forward to following measurement intervals. If a threshold crossing event is raised another is not raised until a measurement interval completes, and the clear threshold has not been exceeded. A clear event is raised under that condition. In general, alarms are generated when there is a state change. The thresholds configured are applied to the count in specified bin and all higher number bins.

The no form of this command removes thresholding for this delay metric. The complete command must be configured in order to remove the specific threshold.

Parameters

forward

Specifies the threshold is applied to the forward direction bin.

backward

Specifies the threshold is applied to the backward direction bin.

round-trip

Specifies the threshold is applied to the roundtrip direction bin.

bin-number

Specifies the number of the bin that the threshold is applied to. This bin and all higher bins are monitored to determine if the sum total results in these bins have reached or crossed the configured threshold.

Values

0 to 9

raise-threshold

Specifies the rising numerical value in the range that determines when the event is to be generated, when value reached.

Values

1 to 864000

clear-threshold

Specifies an optional numerical value in the range threshold used to indicate stateful behavior that allows the operator to configure a lower value than the rising threshold that determines when the clear event should be generated. Clear is generated when the end of measurement interval count is less than or equal to the configured value. If this option is not configured the behavior is stateless. Zero means no results can exist in the lower bin or any higher.

Values

0 to 863999

Default

Clear threshold disabled

Platforms

All

Context

[Tree] (config>oam-pm>bin-group>bin-type delay-event-exclusion)

Full Context

configure oam-pm bin-group bin-type delay-event-exclusion

Description

This optional command allows results from probes that map to the specified bin and higher bins to be excluded from the TCA count. The TCA count is used to determine if a threshold has been reached by the event monitoring function. Individual counters are incremented in the bin, but the counts in the specified bin and higher bins are not included in the TCA threshold computation. A delay-event must be configured in the same direction, and the lowest-bin configured as part of the delay-event-exclusion command must be higher than the lowest bin specified by the corresponding delay-event command.

The bin group allows this optional command to be added, modified, or deleted while tests are actively referencing the bin group. The bin group does not need to be shut down during delay-event-exclusion configuration. If the values are modified while the active tests are executing, all configured TCAs for the specified direction within the bin group enters a pending (p) state until the start of the next measurement interval. Any existing stateful TCAs that were raised are cleared without creating a log event, and no further processing for the affected TCAs occur in the active window. Depending on timing, the pending state may continue past the adjacent measurement interval until the start of the following measurement interval.

The no form of this command does not exclude any values from the configured TCA threshold.

Default

no delay-event-exclusion forward

no delay-event-exclusion backward

no delay-event-exclusion round-trip

Parameters

forward

Specifies the forward direction bin.

backward

Specifies the backward direction bin.

round-trip

Specifies the round-trip direction bin.

bin-number

Specifies the number of the lowest bin that the exclusion is applied to. This bin and all higher bins are excluded from the delay-event (TCA) count. If no bin numbers are configured, this command is ignored.

Values

1 to 9

Platforms

All

Context

[Tree] (config>oam-pm>session>measurement-interval>event-mon delay-events)

Full Context

configure oam-pm session measurement-interval event-mon delay-events

Description

This enables the monitoring of all configured delay events. Adding this functionality starts the monitoring of the configured delay events at the start of the next measurement interval. If the function is removed using the no command, all monitoring of configured delay events, logging, and recording of new events for that session are suspended. Any existing events at the time of the shut down are maintained until the active measurement window in which the removal was performed has completed. The state of this monitoring function can be changed without having to shutdown all the tests in the session.

The no form of this command disables the monitoring of all configured delay events.

Context

[Tree] (config>router>if>if-attr>delay delay-selection)

Full Context

configure router interface if-attribute delay delay-selection

Description

This command selects the delay source to be advertised by the IGP for this interface.

The no form of this command reverts to the default value.

Default

delay-selection static-preferred

Parameters

static

Keyword to use only statically configured delay and ignore dynamic delay measurements generated by link-measurement.

dynamic

Keyword to use only dynamic delay measurements generated by link-measurement and ignore statically configured delay.

static-preferred

Keyword to prefer the configured static delay over the dynamic delay. If static delay is not configured, the delay reported using link-measurement is used.

dynamic-preferred

Keyword to prefer the dynamic reported delay over the statically configured delay. If no dynamic delay has been reported using link-measurement, the statically configured delay is used.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>acct-plcy delay-start-time)

Full Context

configure subscriber-mgmt radius-accounting-policy delay-start-time

Description

It is recommended to only use this command when session-accounting is used. By default, a dual stack subscriber generates a RADIUS accounting interim message for each new host update (IPv4, IPv6 WAN, and IPv6 PD). This command delays the trigger of a RADIUS accounting start message and allows all hosts to connect first. When the delay timer expires, a single RADIUS accounting start message containing all the host currently connected to the BNG is sent to the server. Subsequent host connections will trigger interim-updates if host-update is enabled on session-accounting. For all other accounting modes, this command will delay the trigger of an accounting start when a host connects.

The no form of this command reverts to the default.

Default

no delay-start-time

Parameters

delay

Specifies the accounting start delay, in seconds.

Values

1 to 10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>oam-pm>session>ethernet>dmm delay-template)

Full Context

configure oam-pm session ethernet dmm delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the Ethernet DMM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, the streaming of the results is not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>session>ip>twamp-light delay-template)

Full Context

configure oam-pm session ip twamp-light delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the IP TWAMP LIGHT test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>session>mpls>dm delay-template)

Full Context

configure oam-pm session mpls dm delay-template

Description

This command specifies a reference to a config>oam-pm>streaming delay-template for the MPLS DM test. It is possible to include a delay template reference that is not configured under config>oam-pm>streaming. In this case, streaming of results are not in effect. Refer to the config>oam-pm>streaming delay-template command for session to template interaction behaviors.

The no form of this command deletes the delay template from the test.

Default

no delay-template

Parameters

delay-template-name

Specifies the delay template name, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>streaming delay-template)

Full Context

configure oam-pm streaming delay-template

Description

This command specifies a template for streaming delay metrics that can be referenced under the oam-pm>session technology delay style test.

The delay-template must be configured under the technology delay test oam-pm>session to allow the delay specific test to stream results using the configured template attributes.

The no form of this command deletes the specified delay template.

Parameters

template-name

Specifies the template name, up to 64 characters.

create

Creates the template.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute delegated-ipv6-prefix)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute delegated-ipv6-prefix

Description

This command enables the generation of the delegated-ipv6-prefix RADIUS attribute.

The no form of this command disables the generation of the delegated-ipv6-prefix RADIUS attribute.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>dhcp6>server>pool delegated-prefix-length)

[Tree] (config>router>dhcp6>server>pool delegated-prefix-length)

Full Context

configure service vprn dhcp6 local-dhcp-server pool delegated-prefix-length

configure router dhcp6 local-dhcp-server pool delegated-prefix-length

Description

This command configures the delegated prefix length that is used if the DHCPv6 client does not specify a prefix length hint.

The DHCPv6 client prefix length hint is limited by the range specified by the minimum and maximum parameters. If the hint is smaller than the minimum, the allocated prefix length is equal to the minimum length. If the hint is larger than the maximum, the allocated prefix length is equal to the maximum length.

The no form of this command reverts to the default.

Default

delegated-prefix-length 64 minimum 48 maximum 64

Parameters

prefix-length

Specifies the minimum or maximum allowed prefix length, in bits.

Values

48 to 127

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>sub-if>ipv6 delegated-prefix-length)

[Tree] (config>service>vprn>sub-if>ipv6 delegated-prefix-length)

Full Context

configure service ies subscriber-interface ipv6 delegated-prefix-length

configure service vprn subscriber-interface ipv6 delegated-prefix-length

Description

This command configures the subscriber interface level setting for delegated prefix length. The delegated prefix length for a subscriber- interface can be either set to a fixed value that is explicitly configured under the subscriber interface CLI hierarchy or a variable value that can be obtained from various sources. This command can be changed only when no IPv6 prefixes are configured under the subscriber-interface context.

The no form of this command reverts to the default.

Default

no delegated-prefix-length (the delegated prefix length is 64)

Parameters

bits

Specifies the delegated prefix length in bits. This value is applicable to the entire subscriber interface. In case that the delegated prefix length is also supplied via other means (LUDB, RADIUS or DHCP Server), such supplied value must match the value configured under the subscriber-interface context. Otherwise, the prefix instantiation in the router fails.

Values

48 to 64

variable

Specifies that the delegated prefix value can be of any length between 48 to 64. The value itself can vary between the prefixes and is provided at the time of prefix instantiation. The order of priority for the source of the delegated prefix length is:

• LUDB

• RADIUS

• DHCPv6 server

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (file delete)