policy-options commands

configure 
   —  policy-options 
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  as-path string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  expression string
      —  as-path-group string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  entry number 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  expression string
      —  community string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  expression 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  exact boolean
            —  expr string
         —  member string 
      —  damping string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  half-life number
         —  max-suppress number
         —  reuse number
         —  suppress number
      —  global-variables 
         —  name string 
            —  address (ipv4-address-no-zone | ipv6-address-no-zone)
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  decimal decimal-number
            —  number number
            —  prefix (ipv4-prefix | ipv6-prefix)
            —  value string
      —  policy-statement string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  default-action 
            —  action-type keyword
            —  add-paths-send-limit (number | keyword)
            —  admin-tag-policy (param-midstring-64 | string)
            —  advertise-label keyword
            —  aigp-metric 
               —  add (number | string)
               —  set (keyword | number | string)
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  as-path 
               —  add (param-midstring | string)
               —  replace (param-midstring | string)
            —  as-path-prepend 
               —  as-path (number | string | keyword)
               —  repeat (number | string)
            —  bgp-high-priority boolean
            —  bgp-leak boolean
            —  bgp-med 
               —  adjust string
               —  set (keyword | number | string)
            —  bgp-tunnel-metric 
               —  prefer-aigp boolean
               —  prefer-med boolean
               —  value (string | number)
            —  community 
               —  add (param-midstring-64 | string)
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  remove (param-midstring-64 | string)
               —  replace (param-midstring-64 | string)
            —  create-mpls-tunnel boolean
            —  create-udp-tunnel boolean
            —  damping (keyword | param-midstring | string)
            —  dest-class number
            —  egress-statistics boolean
            —  flex-algo (string | number)
            —  ingress-statistics boolean
            —  install-backup-path boolean
            —  local-preference (number | string)
            —  metric 
               —  add (number | string)
               —  set (number | string)
               —  subtract (number | string)
            —  multicast-redirection 
               —  fwd-service string
               —  ip-int-name string
            —  nat-policy (param-midstring | string)
            —  next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
            —  origin (keyword | string)
            —  origin-validation-state (keyword | string)
            —  preference (number | string)
            —  resolve-static boolean
            —  route-table-install boolean
            —  source-class number
            —  sr-label-index 
               —  prefer-igp boolean
               —  value (string | number)
            —  sr-maintenance-policy (param-midstring | string)
            —  srv6-locator (param-midstring-64 | string)
            —  srv6-micro-segment-locator (param-midstring-64 | string)
            —  srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
            —  sticky-ecmp boolean
            —  tag (number | string)
            —  type (number | string)
         —  description string
         —  entry number 
            —  action 
               —  action-type keyword
               —  add-paths-send-limit (number | keyword)
               —  admin-tag-policy (param-midstring-64 | string)
               —  advertise-label keyword
               —  aigp-metric 
                  —  add (number | string)
                  —  set (keyword | number | string)
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  as-path 
                  —  add (param-midstring | string)
                  —  replace (param-midstring | string)
               —  as-path-prepend 
                  —  as-path (number | string | keyword)
                  —  repeat (number | string)
               —  bgp-high-priority boolean
               —  bgp-leak boolean
               —  bgp-med 
                  —  adjust string
                  —  set (keyword | number | string)
               —  bgp-tunnel-metric 
                  —  prefer-aigp boolean
                  —  prefer-med boolean
                  —  value (string | number)
               —  community 
                  —  add (param-midstring-64 | string)
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  remove (param-midstring-64 | string)
                  —  replace (param-midstring-64 | string)
               —  create-mpls-tunnel boolean
               —  create-udp-tunnel boolean
               —  damping (keyword | param-midstring | string)
               —  dest-class number
               —  egress-statistics boolean
               —  flex-algo (string | number)
               —  forwarding-class 
                  —  fc keyword
                  —  priority keyword
               —  ingress-statistics boolean
               —  install-backup-path boolean
               —  local-preference (number | string)
               —  metric 
                  —  add (number | string)
                  —  set (number | string)
                  —  subtract (number | string)
               —  multicast-redirection 
                  —  fwd-service string
                  —  ip-int-name string
               —  nat-policy (param-midstring | string)
               —  next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
               —  origin (keyword | string)
               —  origin-validation-state (keyword | string)
               —  preference (number | string)
               —  resolve-static boolean
               —  route-table-install boolean
               —  source-class number
               —  sr-label-index 
                  —  prefer-igp boolean
                  —  value (string | number)
               —  sr-maintenance-policy (param-midstring | string)
               —  srv6-locator (param-midstring-64 | string)
               —  srv6-micro-segment-locator (param-midstring-64 | string)
               —  srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
               —  sticky-ecmp boolean
               —  tag (number | string)
               —  type (number | string)
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  conditional-expression 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  route-exists string
            —  description string
            —  from 
               —  aggregate-contributor boolean
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  area string
               —  as-path 
                  —  group (param-midstring | string)
                  —  length 
                     —  qualifier keyword
                     —  unique boolean
                     —  value (number | string)
                  —  name (param-midstring | string)
               —  cluster-id 
                  —  ip-address string
                  —  none-cluster-list boolean
               —  color number
               —  community 
                  —  count 
                     —  qualifier keyword
                     —  type keyword
                     —  value (number | string)
                  —  expression string
                  —  name (param-midstring-64 | string)
               —  distinguisher number
               —  endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
               —  evpn-type keyword
               —  external boolean
               —  family keyword
               —  flowspec 
                  —  dest (param-midstring | string)
                  —  source (param-midstring | string)
               —  group-address (param-midstring | string)
               —  host-ip (param-midstring | string)
               —  interface (named-item | interface-name | interface-name | interface-name)
               —  interface-subnets 
                  —  ip-int-name string
                  —  service string
               —  level number
               —  local-preference 
                  —  qualifier keyword
                  —  value (number | string)
               —  metric 
                  —  qualifier keyword
                  —  value (number | string)
               —  mvpn-type keyword
               —  neighbor 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
                  —  prefix-list (param-midstring | string)
               —  next-hop 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  prefix-list (param-midstring | string)
               —  origin keyword
               —  origin-validation-state keyword
               —  ospf-type number
               —  path-type keyword
               —  policy (string | string)
               —  policy-variables 
                  —  name string 
                     —  address (ipv4-address-no-zone | ipv6-address-no-zone)
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  decimal decimal-number
                     —  number number
                     —  prefix (ipv4-prefix | ipv6-prefix)
                     —  value string
               —  prefix-list (param-midstring-64 | string)
               —  protocol 
                  —  instance (keyword | number)
                  —  name keyword
               —  route-distinguisher-list (param-midstring-64 | string)
               —  source-address 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  prefix-list (param-midstring | string)
               —  srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
               —  srv6-tlv keyword
               —  state keyword
               —  tag (number | keyword)
            —  to 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  level number
               —  neighbor 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
                  —  prefix-list (param-midstring | string)
               —  prefix-list (param-midstring-64 | string)
               —  protocol 
                  —  instance (keyword | number)
                  —  name keyword
         —  entry-type keyword
         —  named-entry string 
            —  action 
               —  action-type keyword
               —  add-paths-send-limit (number | keyword)
               —  admin-tag-policy (param-midstring-64 | string)
               —  advertise-label keyword
               —  aigp-metric 
                  —  add (number | string)
                  —  set (keyword | number | string)
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  as-path 
                  —  add (param-midstring | string)
                  —  replace (param-midstring | string)
               —  as-path-prepend 
                  —  as-path (number | string | keyword)
                  —  repeat (number | string)
               —  bgp-high-priority boolean
               —  bgp-leak boolean
               —  bgp-med 
                  —  adjust string
                  —  set (keyword | number | string)
               —  bgp-tunnel-metric 
                  —  prefer-aigp boolean
                  —  prefer-med boolean
                  —  value (string | number)
               —  community 
                  —  add (param-midstring-64 | string)
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  remove (param-midstring-64 | string)
                  —  replace (param-midstring-64 | string)
               —  create-mpls-tunnel boolean
               —  create-udp-tunnel boolean
               —  damping (keyword | param-midstring | string)
               —  dest-class number
               —  egress-statistics boolean
               —  flex-algo (string | number)
               —  forwarding-class 
                  —  fc keyword
                  —  priority keyword
               —  ingress-statistics boolean
               —  install-backup-path boolean
               —  local-preference (number | string)
               —  metric 
                  —  add (number | string)
                  —  set (number | string)
                  —  subtract (number | string)
               —  multicast-redirection 
                  —  fwd-service string
                  —  ip-int-name string
               —  nat-policy (param-midstring | string)
               —  next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
               —  origin (keyword | string)
               —  origin-validation-state (keyword | string)
               —  preference (number | string)
               —  resolve-static boolean
               —  route-table-install boolean
               —  source-class number
               —  sr-label-index 
                  —  prefer-igp boolean
                  —  value (string | number)
               —  sr-maintenance-policy (param-midstring | string)
               —  srv6-locator (param-midstring-64 | string)
               —  srv6-micro-segment-locator (param-midstring-64 | string)
               —  srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
               —  sticky-ecmp boolean
               —  tag (number | string)
               —  type (number | string)
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  conditional-expression 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  route-exists string
            —  description string
            —  from 
               —  aggregate-contributor boolean
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  area string
               —  as-path 
                  —  group (param-midstring | string)
                  —  length 
                     —  qualifier keyword
                     —  unique boolean
                     —  value (number | string)
                  —  name (param-midstring | string)
               —  cluster-id 
                  —  ip-address string
                  —  none-cluster-list boolean
               —  color number
               —  community 
                  —  count 
                     —  qualifier keyword
                     —  type keyword
                     —  value (number | string)
                  —  expression string
                  —  name (param-midstring-64 | string)
               —  distinguisher number
               —  endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
               —  evpn-type keyword
               —  external boolean
               —  family keyword
               —  flowspec 
                  —  dest (param-midstring | string)
                  —  source (param-midstring | string)
               —  group-address (param-midstring | string)
               —  host-ip (param-midstring | string)
               —  interface (named-item | interface-name | interface-name | interface-name)
               —  interface-subnets 
                  —  ip-int-name string
                  —  service string
               —  level number
               —  local-preference 
                  —  qualifier keyword
                  —  value (number | string)
               —  metric 
                  —  qualifier keyword
                  —  value (number | string)
               —  mvpn-type keyword
               —  neighbor 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
                  —  prefix-list (param-midstring | string)
               —  next-hop 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  prefix-list (param-midstring | string)
               —  origin keyword
               —  origin-validation-state keyword
               —  ospf-type number
               —  path-type keyword
               —  policy (string | string)
               —  policy-variables 
                  —  name string 
                     —  address (ipv4-address-no-zone | ipv6-address-no-zone)
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  decimal decimal-number
                     —  number number
                     —  prefix (ipv4-prefix | ipv6-prefix)
                     —  value string
               —  prefix-list (param-midstring-64 | string)
               —  protocol 
                  —  instance (keyword | number)
                  —  name keyword
               —  route-distinguisher-list (param-midstring-64 | string)
               —  source-address 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  prefix-list (param-midstring | string)
               —  srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
               —  srv6-tlv keyword
               —  state keyword
               —  tag (number | keyword)
            —  to 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  level number
               —  neighbor 
                  —  ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
                  —  prefix-list (param-midstring | string)
               —  prefix-list (param-midstring-64 | string)
               —  protocol 
                  —  instance (keyword | number)
                  —  name keyword
      —  prefix-list string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  prefix (ipv4-prefix | ipv6-prefix) type keyword 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  end-length number
            —  mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone) 
            —  start-length number
            —  through-length number
            —  to-prefix (ipv4-prefix | ipv6-prefix) 
      —  route-distinguisher-list string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  rd-entry string

policy-options command descriptions

policy-options

Synopsis Enter the policy-options context
Contextconfigure policy-options
Treepolicy-options
Introduced16.0.R1

Platforms

All

as-path [name] string

Synopsis Enter the as-path list instance
Contextconfigure policy-options as-path string
Treeas-path
Introduced16.0.R1

Platforms

All

[name] string
Synopsis AS path name
Contextconfigure policy-options as-path string
Treeas-path
String Length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression string
Synopsis Regular expression string
Context configure policy-options as-path string expression string
Treeexpression

Description

This command configures a route policy AS path regular expression statement to use in route policy entries.

An AS path in a BGP route matches an AS path regular expression, if the path matches the pattern of the regular expression. A regular expression incorporates terms and operators that use the terms. An individual AS number is an elementary term in the AS path regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String Length1 to 255
Introduced16.0.R1

Platforms

All

as-path-group [name] string

Synopsis Enter the as-path-group list instance
Contextconfigure policy-options as-path-group string
Treeas-path-group
Introduced16.0.R1

Platforms

All

[name] string
Synopsis AS path group name
Context configure policy-options as-path-group string
Treeas-path-group
String Length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

entry [entry] number
Synopsis Enter the entry list instance
Context configure policy-options as-path-group string entry number
Treeentry
Introduced16.0.R1

Platforms

All

[entry] number
Synopsis AS path entry ID
Context configure policy-options as-path-group string entry number
Treeentry
Range1 to 128

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression string
Synopsis Regular expression string
Context configure policy-options as-path-group string entry number expression string
Treeexpression

Description

This command configures an AS path group regular expression.

An AS path in a BGP route matches an AS path group, if the pattern of the path matches the concatenation of all regular expressions in the group. A regular expression incorporates terms and operators that use the terms. An individual AS number is an elementary term in the AS path regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String Length1 to 255

Notes

This element is mandatory.

Introduced16.0.R1

Platforms

All

community [name] string

Synopsis Enter the community list instance
Contextconfigure policy-options community string
Treecommunity
Introduced16.0.R1

Platforms

All

[name] string
Synopsis Community name
Contextconfigure policy-options community string
Treecommunity

Description

This command configures a route policy community name.

String values must be composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

String Length1 to 64

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

expression
Synopsis Enable the expression context
Context configure policy-options community string expression
Treeexpression
Introduced16.0.R1

Platforms

All

expr string
Synopsis Community expression value
Context configure policy-options community string expression expr string
Treeexpr
String Length1 to 900

Notes

This element is mandatory.

Introduced16.0.R1

Platforms

All

member [member] string
Synopsis Add a list entry for member
Context configure policy-options community string member string
Treemember
Introduced16.0.R1

Platforms

All

[member] string
Synopsis Community member value
Context configure policy-options community string member string
Treemember

Description

This command configures a BGP community value.

Each member of a community list is a standard, extended, or large community value or a regular expression that potentially matches many community values. A regular expression incorporates terms and operators that use the terms. An individual numerical digit is an elementary term in the community regular expression. More complex terms can be built from elementary terms. The following are key operators supported by SR OS:

  • .

  • *

  • ?

  • {n}

  • {m,n}

  • {m, }

To reverse the match criteria when specifying a list of ranges or single values using square brackets, use the non-match operator (^) before the elements within the square brackets.

String Length1 to 72

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

damping [name] string

Synopsis Enter the damping list instance
Contextconfigure policy-options damping string
Treedamping
Introduced16.0.R1

Platforms

All

[name] string
Synopsis Damping profile name
Context configure policy-options damping string
Treedamping
String Length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

half-life number
Synopsis Time after the FOM value is halved
Context configure policy-options damping string half-life number
Treehalf-life
Range1 to 45
Unitsminutes
Introduced 16.0.R1

Platforms

All

reuse number
Synopsis Value below which a suppressed route can be used again
Contextconfigure policy-options damping string reuse number
Treereuse
Range1 to 20000
Introduced16.0.R1

Platforms

All

suppress number
Synopsis Value above which a route is suppressed
Contextconfigure policy-options damping string suppress number
Treesuppress
Range1 to 20000
Introduced16.0.R1

Platforms

All

global-variables

Synopsis Enter the global-variables context
Contextconfigure policy-options global-variables
Treeglobal-variables
Introduced16.0.R4

Platforms

All

name [variable-name] string
Synopsis Enter the name list instance
Context configure policy-options global-variables name string
Treename
Max. Instances1000
Introduced16.0.R4

Platforms

All

[variable-name] string
Synopsis Global variable name used to reference policy functions
Contextconfigure policy-options global-variables name string
Treename
String Length1 to 32

Notes

This element is part of a list key.

Introduced16.0.R4

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options global-variables name string address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

decimal decimal-number
Synopsis Attribute decimal to which variable name is resolved
Contextconfigure policy-options global-variables name string decimal decimal-number
Treedecimal
Range0.000 to 4294967295.000

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.7.R1

Platforms

All

number number
Synopsis Numerical value of the policy variable
Contextconfigure policy-options global-variables name string number number
Treenumber
Range0 to 4294967295

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options global-variables name string prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

value string
Synopsis Policy variable value
Context configure policy-options global-variables name string value string
Treevalue
String Length1 to 32

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R4

Platforms

All

policy-statement [name] string

Synopsis Enter the policy-statement list instance
Contextconfigure policy-options policy-statement string
Treepolicy-statement
Max. Instances65535
Introduced16.0.R1

Platforms

All

default-action
Synopsis Enable the default-action context
Contextconfigure policy-options policy-statement string default-action
Treedefault-action
Introduced16.0.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement string default-action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced16.0.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement string default-action aigp-metric
Treeaigp-metric
Introduced16.0.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement string default-action aigp-metric set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement string default-action as-path
Treeas-path
Introduced16.0.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement string default-action as-path add (param-midstring | string)
Treeadd
String Length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement string default-action as-path-prepend
Treeas-path-prepend
Introduced16.0.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement string default-action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement string default-action bgp-med
Treebgp-med
Introduced19.7.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement string default-action bgp-med set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.7.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement string default-action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string default-action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string default-action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement string default-action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String Length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement string default-action community
Treecommunity
Introduced16.0.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement string default-action community add (param-midstring-64 | string)
Treeadd
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement string default-action community remove (param-midstring-64 | string)
Treeremove
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement string default-action community replace (param-midstring-64 | string)
Treereplace
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement string default-action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement string default-action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string default-action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement string default-action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String Length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string default-action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement string default-action metric
Treemetric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement string default-action metric add (number | string)
Treeadd
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement string default-action metric set (number | string)
Treeset
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement string default-action multicast-redirection
Treemulticast-redirection
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement string default-action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String Length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement string default-action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String Length1 to 32
Optionspeer-address, self
Introduced 16.0.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement string default-action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement string default-action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement string default-action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement string default-action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String Length1 to 32
Range0 to 524287
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement string default-action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String Length1 to 32
Introduced20.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement string default-action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement string default-action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement string default-action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String Length1 to 32
Introduced23.3.R1

Platforms

All

entry [entry-id] number
Synopsis Enter the entry list instance
Context configure policy-options policy-statement string entry number
Treeentry
Introduced16.0.R1

Platforms

All

[entry-id] number
Synopsis Entry ID for a route policy entry
Context configure policy-options policy-statement string entry number
Treeentry
Range1 to 4294967295

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

action
Synopsis Enable the action context
Context configure policy-options policy-statement string entry number action
Treeaction
Introduced16.0.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement string entry number action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced16.0.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement string entry number action aigp-metric
Treeaigp-metric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis AIGP metric to add
Context configure policy-options policy-statement string entry number action aigp-metric add (number | string)
Treeadd
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement string entry number action aigp-metric set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced16.0.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement string entry number action as-path
Treeas-path
Introduced16.0.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement string entry number action as-path add (param-midstring | string)
Treeadd
String Length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

replace (param-midstring | string)
Synopsis AS path to replace
Context configure policy-options policy-statement string entry number action as-path replace (param-midstring | string)
Treereplace
String Length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced16.0.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement string entry number action as-path-prepend
Treeas-path-prepend
Introduced16.0.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement string entry number action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement string entry number action bgp-med
Treebgp-med
Introduced19.7.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement string entry number action bgp-med set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.7.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement string entry number action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string entry number action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string entry number action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement string entry number action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String Length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement string entry number action community
Treecommunity
Introduced16.0.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement string entry number action community add (param-midstring-64 | string)
Treeadd
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement string entry number action community remove (param-midstring-64 | string)
Treeremove
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement string entry number action community replace (param-midstring-64 | string)
Treereplace
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement string entry number action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

damping (keyword | param-midstring | string)
Synopsis Damping profile used for routes
Context configure policy-options policy-statement string entry number action damping (keyword | param-midstring | string)
Treedamping
String Length1 to 32
Optionsnone
Introduced16.0.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement string entry number action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string entry number action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement string entry number action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String Length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

forwarding-class
Synopsis Enter the forwarding-class context
Contextconfigure policy-options policy-statement string entry number action forwarding-class
Treeforwarding-class
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string entry number action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement string entry number action metric
Treemetric
Introduced16.0.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement string entry number action metric add (number | string)
Treeadd
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement string entry number action metric set (number | string)
Treeset
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

subtract (number | string)
Synopsis Metric to subtract
Context configure policy-options policy-statement string entry number action metric subtract (number | string)
Treesubtract
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced16.0.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement string entry number action multicast-redirection
Treemulticast-redirection
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement string entry number action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String Length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement string entry number action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String Length1 to 32
Optionspeer-address, self
Introduced 16.0.R1

Platforms

All

origin (keyword | string)
Synopsis BGP origin for routes that are exported into BGP
Contextconfigure policy-options policy-statement string entry number action origin (keyword | string)
Treeorigin
String Length1 to 32
Optionsigp, egp, incomplete
Introduced16.0.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement string entry number action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement string entry number action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement string entry number action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement string entry number action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String Length1 to 32
Range0 to 524287
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement string entry number action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String Length1 to 32
Introduced20.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement string entry number action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement string entry number action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement string entry number action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String Length1 to 32
Introduced23.3.R1

Platforms

All

tag (number | string)
Synopsis OSPF RIP or IS-IS tag applied to routes
Contextconfigure policy-options policy-statement string entry number action tag (number | string)
Treetag
String Length1 to 32
Range1 to 4294967295
Introduced16.0.R1

Platforms

All

from
Synopsis Enable the from context
Context configure policy-options policy-statement string entry number from
Treefrom

Description

Commands in this context configure policy match criteria based on the route’s source or the protocol from which it is received. If conditions are not specified, all route sources are considered to match.

Introduced16.0.R1

Platforms

All

aggregate-contributor boolean
Synopsis Enable aggregate route match criterion
Contextconfigure policy-options policy-statement string entry number from aggregate-contributor boolean
Treeaggregate-contributor

Description

When configured to true, matches all routes (BGP and non-BGP) that have contributed to an active aggregate route. If the prefix tree above a particular route includes no active aggregate routes or the most specific active aggregate route in the prefix tree above this route has a policy that rejects the route, then it is not considered as an aggregate-contributor.

This match condition is only supported when used in a BGP export policy. If it is used in an entry of a BGP import policy, vrf-export policy or vrf-import policy, no routes are matched by that entry.

When configured to false, no routes (BGP and non-BGP) that have contributed to an active aggregate route are matched.

Defaultfalse
Introduced20.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement string entry number from as-path
Treeas-path
Introduced16.0.R1

Platforms

All

group (param-midstring | string)
Synopsis AS path group as a match criterion
Context configure policy-options policy-statement string entry number from as-path group (param-midstring | string)
Treegroup
String Length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced16.0.R1

Platforms

All

length
Synopsis Enter the length context
Context configure policy-options policy-statement string entry number from as-path length
Treelength
Introduced16.0.R1

Platforms

All

name (param-midstring | string)
Synopsis AS path name to match
Context configure policy-options policy-statement string entry number from as-path name (param-midstring | string)
Treename

Description

This command specifies an AS path regular expression name for the route policy entry.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end", "@variable@end", or "start@variable@".

String Length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced16.0.R1

Platforms

All

cluster-id
Synopsis Enter the cluster-id context
Context configure policy-options policy-statement string entry number from cluster-id
Treecluster-id
Introduced16.0.R1

Platforms

All

ip-address string
Synopsis Cluster list attribute IP addresses for route matching
Contextconfigure policy-options policy-statement string entry number from cluster-id ip-address string
Treeip-address
Max. Instances5

Notes

The following elements are part of a choice: ip-address or none-cluster-list.

This element is ordered by the user.

Introduced 16.0.R1

Platforms

All

color number
Synopsis Color ID as a match criterion
Context configure policy-options policy-statement string entry number from color number
Treecolor

Description

This command configures an SR Policy color ID as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement string entry number from community
Treecommunity
Introduced16.0.R1

Platforms

All

count
Synopsis Enter the count context
Context configure policy-options policy-statement string entry number from community count
Treecount
Introduced16.0.R1

Platforms

All

name (param-midstring-64 | string)
Synopsis Community list name
Context configure policy-options policy-statement string entry number from community name (param-midstring-64 | string)
Treename
String Length1 to 64

Notes

The following elements are part of a choice: expression or name.

Introduced16.0.R1

Platforms

All

distinguisher number
Synopsis SR policy distinguisher as a match criterion
Contextconfigure policy-options policy-statement string entry number from distinguisher number
Treedistinguisher

Description

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis SR policy endpoint address as a match criterion
Contextconfigure policy-options policy-statement string entry number from endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Treeendpoint

Description

This command configures an SR Policy endpoint address as a route policy match criterion. This match criterion is only used in import policies.

Introduced20.10.R1

Platforms

All

evpn-type keyword
Synopsis EVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement string entry number from evpn-type keyword
Treeevpn-type
Optionsethernet-auto-discovery, mac-ip-advertisement, inclusive-multicast, ethernet-segment, ip-prefix, selective-multicast, multicast-join-sync, multicast-leave-sync, selective-pmsi-auto-discovery
Introduced16.0.R4

Platforms

All

family keyword
Synopsis Address family as the match condition
Contextconfigure policy-options policy-statement string entry number from family keyword
Treefamily
Optionsipv4, vpn-ipv4, ipv6, mcast-ipv4, vpn-ipv6, l2-vpn, mvpn-ipv4, mdt-safi, ms-pw, flow-ipv4, route-target, mcast-vpn-ipv4, mvpn-ipv6, flow-ipv6, evpn, mcast-ipv6, label-ipv4, label-ipv6, bgp-ls, mcast-vpn-ipv6, sr-policy-ipv4, sr-policy-ipv6, flow-vpn-ipv4, flow-vpn-ipv6
Max. Instances20
Introduced 16.0.R1

Platforms

All

flowspec
Synopsis Enter the flowspec context
Context configure policy-options policy-statement string entry number from flowspec
Treeflowspec
Introduced16.0.R4

Platforms

All

host-ip (param-midstring | string)
Synopsis Prefix list of IGMP host IP addresses for matching
Contextconfigure policy-options policy-statement string entry number from host-ip (param-midstring | string)
Treehost-ip
String Length1 to 32
Introduced16.0.R1

Platforms

All

interface (named-item | interface-name | interface-name | interface-name)
Synopsis Interface name as match criterion
Context configure policy-options policy-statement string entry number from interface (named-item | interface-name | interface-name | interface-name)
Treeinterface
String Length1 to 32
Max. Instances1

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

interface-subnets
Synopsis Enter the interface-subnets context
Contextconfigure policy-options policy-statement string entry number from interface-subnets
Treeinterface-subnets

Description

Commands in this context configure the applied router instance and interfaces that are used as the matching condition within each policy statement entry when exporting the IP address of the associated interface to a routing protocol.

The interface subnet policy statement match criterion is applied to the following unicast use case contexts:

  • export, when used with OSPFv2, OSPFv3, IS-IS, RIP, RIPng, and BGP

  • route-table-import, when used with BGP

  • vrf-export, when used with MP-BGP

Introduced21.2.R1

Platforms

All

ip-int-name string
Synopsis Interface name as the match criterion
Contextconfigure policy-options policy-statement string entry number from interface-subnets ip-int-name string
Treeip-int-name

Description

This command specifies the interface name to match when exporting the IP address of the associated interface to a routing protocol.

String Length1 to 32
Max. Instances10

Notes

This element is ordered by the user.

Introduced21.2.R1

Platforms

All

local-preference
Synopsis Enter the local-preference context
Contextconfigure policy-options policy-statement string entry number from local-preference
Treelocal-preference
Introduced16.0.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement string entry number from metric
Treemetric
Introduced16.0.R1

Platforms

All

mvpn-type keyword
Synopsis MVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement string entry number from mvpn-type keyword
Treemvpn-type
Optionsintra-as-ipmsi-auto-discovery, inter-as-ipmsi-auto-discovery, s-pmsi-auto-discovery, intra-as-segment-leaf-auto-discovery, source-active-auto-discovery, shared-tree-join, source-tree-join
Introduced16.0.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement string entry number from neighbor
Treeneighbor
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement string entry number from neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement string entry number from neighbor prefix-list (param-midstring | string)
Treeprefix-list
String Length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

next-hop
Synopsis Enter the next-hop context
Context configure policy-options policy-statement string entry number from next-hop
Treenext-hop
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the next hop to match
Context configure policy-options policy-statement string entry number from next-hop ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name of a next hop prefix list to match
Contextconfigure policy-options policy-statement string entry number from next-hop prefix-list (param-midstring | string)
Treeprefix-list
String Length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

origin keyword
Synopsis Route origin match criteria
Context configure policy-options policy-statement string entry number from origin keyword
Treeorigin

Description

This command configures a match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes:

Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with AAA, dynamic, or static values, depending on the address assignment method. For CUPS hosts, the origin attribute is always PFCP. Host routes can also be distinguished using the sub-mgmt option for the protocol command. 

Dynamically provisioned prefixes or loopback addresses use AAA or PFCP origin values, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

Statically configured prefixes under the subscriber interface do not have an origin attribute. These routes can be distinguished using the direct option for the protocol command.

Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use PFCP for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

The values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Optionsigp, egp, incomplete, any, aaa, dynamic, static, bonding, pfcp
Introduced16.0.R1

Platforms

All

policy-variables
Synopsis Enter the policy-variables context
Contextconfigure policy-options policy-statement string entry number from policy-variables
Treepolicy-variables
Introduced16.0.R1

Platforms

All

name [variable-name] string
Synopsis Enter the name list instance
Context configure policy-options policy-statement string entry number from policy-variables name string
Treename
Max. Instances10
Introduced16.0.R1

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options policy-statement string entry number from policy-variables name string address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced16.0.R1

Platforms

All

decimal decimal-number
Synopsis Attribute decimal to which variable name is resolved
Contextconfigure policy-options policy-statement string entry number from policy-variables name string decimal decimal-number
Treedecimal
Range0.000 to 4294967295.000

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.7.R1

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options policy-statement string entry number from policy-variables name string prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement string entry number from prefix-list (param-midstring-64 | string)
Treeprefix-list
String Length1 to 64
Max. Instances28

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement string entry number from protocol
Treeprotocol

Description

Commands in this context configure the match criterion based on protocols for a route policy statement entry and may be used for both import and export policies.

Introduced16.0.R1

Platforms

All

instance (keyword | number)
Synopsis Instance for protocol IS-IS, OSPF, or OSPFv3 to match
Contextconfigure policy-options policy-statement string entry number from protocol instance (keyword | number)
Treeinstance

Description

This command specifies the OSPF, OSPFv3, or IS-IS instance to be used as the match criterion.

When this command is explicitly configured, the name command must be configured to identify the protocol (OSPF, OSPFv3, or IS-IS).

Range0 to 127
Optionsall
Default0
Introduced 16.0.R1

Platforms

All

name keyword
Synopsis List of protocol names as the match criterion
Contextconfigure policy-options policy-statement string entry number from protocol name keyword
Treename

Description

This command specifies a protocol list for the match criterion.  If multiple protocols are specified, the protocol names must belong to the following protocol set:

  • direct

  • static

  • isis

  • aggregate

  • bgp

  • bgp-label

  • direct-interface

If multiple protocols are specified, the instance command cannot be explicitly configured.

The protocol direct-interface route type matches the specific direct interface host IPv4 /32 and IPv6 /128 routes.

Optionsdirect, static, bgp, isis, ospf, rip, aggregate, bgp-vpn, igmp, pim, ospf3, ldp, sub-mgmt, mld, managed, vpn-leak, nat, periodic, ipsec, dhcpv6-pd, dhcpv6-na, dhcpv6-ta, dhcpv6-pd-excl, ripng, bgp-label, direct-interface, arp-nd, rib-api, dhcp-client, evpn-ifl, srv6, video
Max. Instances 5
Introduced16.0.R1

Platforms

All

route-distinguisher-list (param-midstring-64 | string)
Synopsis Route distinguisher list as a match criterion
Contextconfigure policy-options policy-statement string entry number from route-distinguisher-list (param-midstring-64 | string)
Treeroute-distinguisher-list

Description

This command specifies the (possibly parameterized) name of a route distinguisher (RD) list.

This match condition is supported by policies applied as VRF-import or BGP peer import policies. A BGP route can match a policy entry with this match criterion if the NLRI field contains an RD that is matched by at least one of the entries in the RD list.

BGP routes belonging to address families other than VPN-IPv4, VPN-IPv6, MCAST-VPN-IPv4, MCAST-VPN-IPv6, EVPN, FlowSpec-VPN IPv4, FlowSpec-VPN IPv6, MVPN-IPv4, or MVPN-IPv6 route do not match policy entries with this match criterion.

String Length1 to 64
Introduced23.3.R1

Platforms

All

source-address
Synopsis Enter the source-address context
Contextconfigure policy-options policy-statement string entry number from source-address
Treesource-address
Introduced16.0.R1

Platforms

All

srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Synopsis SRv6 SID value as the match criterion for the BGP route
Contextconfigure policy-options policy-statement string entry number from srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Treesrv6-sid-prefix

Description

This command configures either the name of a prefix policy variable or an IPv6 prefix and prefix length, as a match criterion for a BGP route.

Note: If the name of a prefix policy variable is the match criterion, the name must start and end with an at sign (@).

A BGP route matches this condition if it has an SRv6 TLV, and the SID value in that TLV is matched by the bits of the IPv6 prefix (up to the specified prefix length).

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

The SID value used as the match criterion can also be a micro-segment (uSID) value.

String Length1 to 32
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-tlv keyword
Synopsis SRv6 TLV presence as match criterion for BGP route
Contextconfigure policy-options policy-statement string entry number from srv6-tlv keyword
Treesrv6-tlv

Description

This command configures whether the entry matches a BGP route with a prefix SID attribute containing an SRv6 TLV.

If this command is not configured, a BGP route can match the entry, regardless of whether it has a prefix SID attribute or whether that prefix SID attribute has SRv6 TLVs.

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

If the present option is configured, a BGP route only matches this entry if it has a prefix SID attribute containing an SRv6 TLV.

If the not-present option is configured, a BGP route only matches this entry if it does not have a prefix SID attribute containing an SRv6 TLV.

Optionspresent, not-present
Introduced 23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

state keyword
Synopsis State used as a match criterion
Context configure policy-options policy-statement string entry number from state keyword
Treestate

Description

This command configures a criterion that identifies in resilient gateways which routes are associated with an active context and which routes are associated with a standby context.

Optionssrrp-master, srrp-non-master, ipsec-master-with-peer, ipsec-master-without-peer, ipsec-non-master, fsg-active, fsg-standby
Introduced16.0.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

tag (number | keyword)
Synopsis Route tag used as a match criterion
Context configure policy-options policy-statement string entry number from tag (number | keyword)
Treetag
Range1 to 4294967295
Optionsno-tag
Introduced16.0.R1

Platforms

All

to
Synopsis Enable the to context
Context configure policy-options policy-statement string entry number to
Treeto
Introduced16.0.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement string entry number to neighbor
Treeneighbor
Introduced16.0.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement string entry number to neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring | string)
Synopsis Name to match the neighbor prefix list
Contextconfigure policy-options policy-statement string entry number to neighbor prefix-list (param-midstring | string)
Treeprefix-list
String Length1 to 32

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced16.0.R1

Platforms

All

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement string entry number to prefix-list (param-midstring-64 | string)
Treeprefix-list
String Length1 to 64
Max. Instances28

Notes

This element is ordered by the user.

Introduced16.0.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement string entry number to protocol
Treeprotocol
Introduced16.0.R1

Platforms

All

name keyword
Synopsis Protocol name to match
Context configure policy-options policy-statement string entry number to protocol name keyword
Treename
Optionsbgp, isis, ospf, rip, bgp-vpn, ospf3, ldp, vpn-leak, ripng, bgp-label, evpn-ifl
Max. Instances2
Introduced16.0.R1

Platforms

All

named-entry [entry-name] string
Synopsis Enter the named-entry list instance
Contextconfigure policy-options policy-statement string named-entry string
Treenamed-entry
Max. Instances16384

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

action
Synopsis Enable the action context
Context configure policy-options policy-statement string named-entry string action
Treeaction
Introduced19.10.R1

Platforms

All

advertise-label keyword
Synopsis Label allocation for matched BGP routes
Contextconfigure policy-options policy-statement string named-entry string action advertise-label keyword
Treeadvertise-label

Description

This command configures the label allocation method for advertised routes. The effect of this command depends on the context where the associated policy is applied. 

Optionsper-prefix, pop, pop-and-forward
Introduced19.10.R1

Platforms

All

aigp-metric
Synopsis Enter the aigp-metric context
Context configure policy-options policy-statement string named-entry string action aigp-metric
Treeaigp-metric
Introduced19.10.R1

Platforms

All

set (keyword | number | string)
Synopsis AIGP metric
Contextconfigure policy-options policy-statement string named-entry string action aigp-metric set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp

Notes

The following elements are part of a choice: add or set.

Introduced19.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement string named-entry string action as-path
Treeas-path
Introduced19.10.R1

Platforms

All

add (param-midstring | string)
Synopsis AS path to add
Contextconfigure policy-options policy-statement string named-entry string action as-path add (param-midstring | string)
Treeadd
String Length1 to 32

Notes

The following elements are part of a choice: add or replace.

Introduced19.10.R1

Platforms

All

as-path-prepend
Synopsis Enter the as-path-prepend context
Contextconfigure policy-options policy-statement string named-entry string action as-path-prepend
Treeas-path-prepend
Introduced19.10.R1

Platforms

All

bgp-high-priority boolean
Synopsis Tag routes as high priority for fast table updates
Contextconfigure policy-options policy-statement string named-entry string action bgp-high-priority boolean
Treebgp-high-priority

Description

When configured to true, eligible BGP routes matched by the policy entry or policy default-action are tagged as needing faster route table updates.

This action applies only when the policy is applied as a BGP import policy to a base router BGP peer or VPRN BGP peer and applies only to the following route types:

  •    IPv4

  •    label-IPv4

  •    IPv6

  •    label-IPv6

This command is useful when the BGP RIB contains a large number of routes and quick routing table updates are needed for a small subset of these routes. The effectiveness of this command decreases as the subset becomes a larger proportion of the total RIB.

When configured to false, no routes are tagged for faster route table updates.

Defaultfalse
Introduced20.5.R1

Platforms

All

bgp-med
Synopsis Enter the bgp-med context
Context configure policy-options policy-statement string named-entry string action bgp-med
Treebgp-med
Introduced19.10.R1

Platforms

All

set (keyword | number | string)
Synopsis BGP-MED assignment
Context configure policy-options policy-statement string named-entry string action bgp-med set (keyword | number | string)
Treeset
String Length1 to 32
Range0 to 4294967295
Optionsigp, min-igp

Notes

The following elements are part of a choice: adjust or set.

Introduced19.10.R1

Platforms

All

bgp-tunnel-metric
Synopsis Enter the bgp-tunnel-metric context
Contextconfigure policy-options policy-statement string named-entry string action bgp-tunnel-metric
Treebgp-tunnel-metric

Description

Commands in this context configure the tunnel-table metrics associated with BGP label unicast routes that pass through to the default action of the policy.

Introduced20.5.R1

Platforms

All

prefer-aigp boolean
Synopsis Use AIGP attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string named-entry string action bgp-tunnel-metric prefer-aigp boolean
Treeprefer-aigp

Description

When configured to true, and a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy. The TTM metric of the tunnel is set to the AIGP metric value of the BGP-LU route plus the IGP cost to reach the BGP next-hop if it has the AIGP path attribute, otherwise it is set to the value implied by the value leaf.

When configured to false, the AIGP attribute is removed from the advertised routes and is ignored if present in the received routes.

Defaultfalse
Introduced20.5.R1

Platforms

All

prefer-med boolean
Synopsis Use MED attribute as tunnel metric when present
Contextconfigure policy-options policy-statement string named-entry string action bgp-tunnel-metric prefer-med boolean
Treeprefer-med

Description

When configured to true, if a BGP-LU route is selected for installation in the TTM and is matched by this action in a BGP import policy, the TTM metric of the tunnel is set to the MED metric value of the BGP-LU route with the IGP cost to reach the BGP next hop added to it.

When configured to false, the BGP tunnel metric associated with the BGP-LU route accepted by this policy action is not determined using the MED attribute.

Defaultfalse
Introduced23.3.R1

Platforms

All

value (string | number)
Synopsis BGP tunnel table metric value
Context configure policy-options policy-statement string named-entry string action bgp-tunnel-metric value (string | number)
Treevalue

Description

This command configures a BGP tunnel metric is assigned to routes that do not match any entry.

If a BGP-LU route is selected for installation in TTM and it is matched by this action in a BGP import policy, the TTM metric of the associated tunnel is set to this value (or the value associated with the parameter name) if either:

  • the prefer-aigp option is set to false

  • the prefer-aigp option is set to true but the BGP-LU route does not have an AIGP attribute

String Length1 to 32
Range0 to 4294967295
Introduced20.5.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement string named-entry string action community
Treecommunity
Introduced19.10.R1

Platforms

All

add (param-midstring-64 | string)
Synopsis List of community names to add
Context configure policy-options policy-statement string named-entry string action community add (param-midstring-64 | string)
Treeadd
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

remove (param-midstring-64 | string)
Synopsis List of community names to remove
Context configure policy-options policy-statement string named-entry string action community remove (param-midstring-64 | string)
Treeremove
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

replace (param-midstring-64 | string)
Synopsis List of community names to replace
Context configure policy-options policy-statement string named-entry string action community replace (param-midstring-64 | string)
Treereplace
String Length1 to 64
Max. Instances28

Notes

The following elements are part of a choice: (add and remove) or replace.

This element is ordered by the user.

Introduced 19.10.R1

Platforms

All

create-mpls-tunnel boolean
Synopsis Create an MPLS tunnel
Context configure policy-options policy-statement string named-entry string action create-mpls-tunnel boolean
Treecreate-mpls-tunnel

Description

When configured to true, the router creates an MPLS tunnel.

This command is supported for only the following address families:

  • evpn

  • ipv4

  • ipv6

  • label-ipv4

  • label-ipv6

  • vpn-ipv4

  • vpn-ipv6

Defaultfalse
Introduced 21.10.R1

Platforms

All

dest-class number
Synopsis Default destination class for the policy statement
Contextconfigure policy-options policy-statement string named-entry string action dest-class number
Treedest-class

Description

This command specifies the policy accounting destination class index to associate with matched routes.

Range1 to 255
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

egress-statistics boolean
Synopsis Enable egress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string named-entry string action egress-statistics boolean
Treeegress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on egress data paths.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

flex-algo (string | number)
Synopsis Flexible algorithm for BGP next-hop autobind operation
Contextconfigure policy-options policy-statement string named-entry string action flex-algo (string | number)
Treeflex-algo

Description

This command configures the Flex-Algorithm for use in the BGP next-hop automatic bind operation in a BGP import policy. A Flex-Algorithm aware autobind of the BGP next-hop is enabled when the route is matched by the policy statement entry.

Flex-Algorithm aware next-hop lookup is supported for unicast BGP, VPRN, and BGP-LU.

This command is not supported for multicast address families.

String Length1 to 32
Range128 to 255
Introduced20.10.R1

Platforms

All

forwarding-class
Synopsis Enter the forwarding-class context
Contextconfigure policy-options policy-statement string named-entry string action forwarding-class
Treeforwarding-class
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

ingress-statistics boolean
Synopsis Enable ingress statistics for BGP-LU routes
Contextconfigure policy-options policy-statement string named-entry string action ingress-statistics boolean
Treeingress-statistics

Description

When configured to true, this command enables the allocation of statistical indexes to BGP labeled unicast route entries that are programmed on ingress data paths. For effective operation, a prefix must be advertised with a label per prefix for ILM statistics.

When configured to false, this command disables the allocation of statistical indexes to BGP-LU route entries.

Defaultfalse
Introduced20.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement string named-entry string action metric
Treemetric
Introduced19.10.R1

Platforms

All

add (number | string)
Synopsis Metric to add
Contextconfigure policy-options policy-statement string named-entry string action metric add (number | string)
Treeadd
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced19.10.R1

Platforms

All

set (number | string)
Synopsis Metric to assign
Context configure policy-options policy-statement string named-entry string action metric set (number | string)
Treeset
String Length1 to 32
Range0 to 4294967295

Notes

The following elements are part of a choice: add, set, or subtract.

Introduced19.10.R1

Platforms

All

multicast-redirection
Synopsis Enter the multicast-redirection context
Contextconfigure policy-options policy-statement string named-entry string action multicast-redirection
Treemulticast-redirection
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

nat-policy (param-midstring | string)
Synopsis BGP-VPN imported route and a NAT policy association
Contextconfigure policy-options policy-statement string named-entry string action nat-policy (param-midstring | string)
Treenat-policy

Description

This command assigns a NAT policy to the matched routes that do not have a more specific NAT policy configured under action.

A dynamic route obtained by BGP-VPN can be imported into an inside (private side) routing context in NAT environment. This route must be associated with a NAT policy that maps traffic into a NAT pool and outside routing context. If the NAT policy is not specified within the route policy entry, the imported NAT route is, by default, associated with the default NAT policy defined in the NAT inside routing context.

All BGP-VPN routes that are destined to be imported into the NAT inside routing context must have action-type accept regardless of whether the NAT policy is configured in the action. 

String Length1 to 32
Introduced21.5.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Synopsis Next-hop IP address applied to routes
Contextconfigure policy-options policy-statement string named-entry string action next-hop (keyword | ipv4-address-no-zone | ipv6-address-no-zone | string)
Treenext-hop
String Length1 to 32
Optionspeer-address, self
Introduced 19.10.R1

Platforms

All

source-class number
Synopsis Default source class for the policy statement
Contextconfigure policy-options policy-statement string named-entry string action source-class number
Treesource-class

Description

This command specifies the policy accounting source class index to associate with matched routes.

Range1 to 255
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

sr-label-index
Synopsis Enter the sr-label-index context
Contextconfigure policy-options policy-statement string named-entry string action sr-label-index
Treesr-label-index

Description

Commands in this context configure the policy action to associate a BGP segment-routing label index value with all /32 BGP labeled IPv4 routes.

The use of this action in a policy entry that matches more than one /32 labeled IPv4 route may create SID conflicts.

This action only takes effect in BGP peer import policies (and only on received /32 labeled IPv4 routes) and in route table import policies associated with the labeled IPv4 RIB.

When this action occurs in a policy applied as a peer import policy, a prefix SID attribute can be added to a received /32 labeled IPv4 route that was not sent with this attribute, or the received prefix SID attribute can be replaced with a new one.

Introduced19.10.R1

Platforms

All

prefer-igp boolean
Synopsis Use the SR label index from the IGP route when present
Contextconfigure policy-options policy-statement string named-entry string action sr-label-index prefer-igp boolean
Treeprefer-igp

Description

When configured to true, BGP obtains the SID index from the IGP route (if a SID index is present) and the configure router bgp segment-routing prefix-sid-range global command is set to true.

This command applies only to route table import policies.

When configured to false, or the SID index is not present in the IGP route, or the configure router bgp segment-routing prefix-sid-range global command is not set to true, BGP obtains the label index value from the value command.

Defaultfalse
Introduced19.10.R1

Platforms

All

value (string | number)
Synopsis BGP SR label index associated with routes
Contextconfigure policy-options policy-statement string named-entry string action sr-label-index value (string | number)
Treevalue

Description

This command specifies the BGP SR label index value to be associated with a route or routes.

If this command specifies an index value that causes a SID conflict with another BGP route, all conflicting BGP routes are re-advertised with label values based on dynamic allocation rather than SID-based allocation.

If this command specifies an index value that causes a SID conflict with an IGP route, the BGP route is re-advertised with a label value based on dynamic allocation rather than SID-based allocation.

String Length1 to 32
Range0 to 524287
Introduced19.10.R1

Platforms

All

sr-maintenance-policy (param-midstring | string)
Synopsis SR maintenance policy as an action
Context configure policy-options policy-statement string named-entry string action sr-maintenance-policy (param-midstring | string)
Treesr-maintenance-policy

Description

This command applies a named segment routing maintenance policy as an action for route policies. It is only used for SR policy routes.

String Length1 to 32
Introduced20.10.R1

Platforms

All

srv6-locator (param-midstring-64 | string)
Synopsis Locator for SRv6 TLV to use
Context configure policy-options policy-statement string named-entry string action srv6-locator (param-midstring-64 | string)
Treesrv6-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named locator for the SRv6 TLV to use.

For a VRF export policy, the referenced locator must already be configured using the commands in the configure service vprn segment-routing-v6 locator context.

For a BGP export policy, the referenced locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-micro-segment-locator (param-midstring-64 | string)
Synopsis Micro-segment locator for SRv6 TLV to use
Contextconfigure policy-options policy-statement string named-entry string action srv6-micro-segment-locator (param-midstring-64 | string)
Treesrv6-micro-segment-locator

Description

This command configures either a string encoding a midstring parameter delimited by at signs (@), or a reference to a named micro-segment locator for the SRv6 TLV to use.

For a VRF export policy, the referenced micro-segment locator must already be configured using the commands in the configure service vprn segment-routing-v6 micro-segment-locator context.

For a BGP export policy, the referenced micro-SID locator must already be configured using the commands in the configure router segment-routing segment-routing-v6 base-routing-instance micro-segment-locator context.

String Length1 to 64
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Synopsis SRv6 return path BFD SID applied to SRv6 policy routes
Contextconfigure policy-options policy-statement string named-entry string action srv6-return-path-bfd-sid (policy-var-name | ipv6-address)
Treesrv6-return-path-bfd-sid

Description

This command configures the S-BFD session to echo mode and pushes an additional SRv6 SID in the SRH only for S-BFD packets sent on the imported SRv6 policy.

String Length1 to 32
Introduced23.3.R1

Platforms

All

from
Synopsis Enable the from context
Context configure policy-options policy-statement string named-entry string from
Treefrom
Introduced19.10.R1

Platforms

All

aggregate-contributor boolean
Synopsis Enable aggregate route match criterion
Contextconfigure policy-options policy-statement string named-entry string from aggregate-contributor boolean
Treeaggregate-contributor

Description

When configured to true, matches all routes (BGP and non-BGP) that have contributed to an active aggregate route. If the prefix tree above a particular route includes no active aggregate routes or the most specific active aggregate route in the prefix tree above this route has a policy that rejects the route, then it is not considered as an aggregate-contributor.

This match condition is only supported when used in a BGP export policy. If it is used in an entry of a BGP import policy, vrf-export policy or vrf-import policy, no routes are matched by that entry.

When configured to false, no routes (BGP and non-BGP) that have contributed to an active aggregate route are matched.

Defaultfalse
Introduced20.10.R1

Platforms

All

as-path
Synopsis Enter the as-path context
Context configure policy-options policy-statement string named-entry string from as-path
Treeas-path
Introduced19.10.R1

Platforms

All

group (param-midstring | string)
Synopsis AS path group as a match criterion
Context configure policy-options policy-statement string named-entry string from as-path group (param-midstring | string)
Treegroup
String Length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced19.10.R1

Platforms

All

length
Synopsis Enter the length context
Context configure policy-options policy-statement string named-entry string from as-path length
Treelength
Introduced19.10.R1

Platforms

All

name (param-midstring | string)
Synopsis AS path name to match
Context configure policy-options policy-statement string named-entry string from as-path name (param-midstring | string)
Treename

Description

This command specifies an AS path regular expression name for the route policy entry.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@," "start@variable@end", "@variable@end", or "start@variable@".

String Length1 to 32

Notes

The following elements are part of a choice: group or name.

Introduced19.10.R1

Platforms

All

cluster-id
Synopsis Enter the cluster-id context
Context configure policy-options policy-statement string named-entry string from cluster-id
Treecluster-id
Introduced19.10.R1

Platforms

All

color number
Synopsis Color ID as a match criterion
Context configure policy-options policy-statement string named-entry string from color number
Treecolor

Description

This command configures an SR Policy color ID as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

community
Synopsis Enter the community context
Context configure policy-options policy-statement string named-entry string from community
Treecommunity
Introduced19.10.R1

Platforms

All

count
Synopsis Enter the count context
Context configure policy-options policy-statement string named-entry string from community count
Treecount
Introduced19.10.R1

Platforms

All

name (param-midstring-64 | string)
Synopsis Community list name
Context configure policy-options policy-statement string named-entry string from community name (param-midstring-64 | string)
Treename
String Length1 to 64

Notes

The following elements are part of a choice: expression or name.

Introduced19.10.R1

Platforms

All

distinguisher number
Synopsis SR policy distinguisher as a match criterion
Contextconfigure policy-options policy-statement string named-entry string from distinguisher number
Treedistinguisher

Description

This command configures an SR Policy distinguisher as a route policy match criterion. This match criterion is only used in import policies.

Range0 to 4294967295
Introduced20.10.R1

Platforms

All

endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis SR policy endpoint address as a match criterion
Contextconfigure policy-options policy-statement string named-entry string from endpoint (ipv4-address-no-zone | ipv6-address-no-zone)
Treeendpoint

Description

This command configures an SR Policy endpoint address as a route policy match criterion. This match criterion is only used in import policies.

Introduced20.10.R1

Platforms

All

evpn-type keyword
Synopsis EVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement string named-entry string from evpn-type keyword
Treeevpn-type
Optionsethernet-auto-discovery, mac-ip-advertisement, inclusive-multicast, ethernet-segment, ip-prefix, selective-multicast, multicast-join-sync, multicast-leave-sync, selective-pmsi-auto-discovery
Introduced19.10.R1

Platforms

All

family keyword
Synopsis Address family as the match condition
Contextconfigure policy-options policy-statement string named-entry string from family keyword
Treefamily
Optionsipv4, vpn-ipv4, ipv6, mcast-ipv4, vpn-ipv6, l2-vpn, mvpn-ipv4, mdt-safi, ms-pw, flow-ipv4, route-target, mcast-vpn-ipv4, mvpn-ipv6, flow-ipv6, evpn, mcast-ipv6, label-ipv4, label-ipv6, bgp-ls, mcast-vpn-ipv6, sr-policy-ipv4, sr-policy-ipv6, flow-vpn-ipv4, flow-vpn-ipv6
Max. Instances20
Introduced 19.10.R1

Platforms

All

flowspec
Synopsis Enter the flowspec context
Context configure policy-options policy-statement string named-entry string from flowspec
Treeflowspec
Introduced19.10.R1

Platforms

All

interface (named-item | interface-name | interface-name | interface-name)
Synopsis Interface name as match criterion
Context configure policy-options policy-statement string named-entry string from interface (named-item | interface-name | interface-name | interface-name)
Treeinterface
String Length1 to 32
Max. Instances1

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

interface-subnets
Synopsis Enter the interface-subnets context
Contextconfigure policy-options policy-statement string named-entry string from interface-subnets
Treeinterface-subnets

Description

Commands in this context configure the applied router instance and interfaces that are used as the matching condition within each policy statement entry when exporting the IP address of the associated interface to a routing protocol.

The interface subnet policy statement match criterion is applied to the following unicast use case contexts:

  • export, when used with OSPFv2, OSPFv3, IS-IS, RIP, RIPng, and BGP

  • route-table-import, when used with BGP

  • vrf-export, when used with MP-BGP

Introduced21.2.R1

Platforms

All

ip-int-name string
Synopsis Interface name as the match criterion
Contextconfigure policy-options policy-statement string named-entry string from interface-subnets ip-int-name string
Treeip-int-name

Description

This command specifies the interface name to match when exporting the IP address of the associated interface to a routing protocol.

String Length1 to 32
Max. Instances10

Notes

This element is ordered by the user.

Introduced21.2.R1

Platforms

All

local-preference
Synopsis Enter the local-preference context
Contextconfigure policy-options policy-statement string named-entry string from local-preference
Treelocal-preference
Introduced19.10.R1

Platforms

All

metric
Synopsis Enter the metric context
Context configure policy-options policy-statement string named-entry string from metric
Treemetric
Introduced19.10.R1

Platforms

All

mvpn-type keyword
Synopsis MVPN type as a match criterion for the entry
Contextconfigure policy-options policy-statement string named-entry string from mvpn-type keyword
Treemvpn-type
Optionsintra-as-ipmsi-auto-discovery, inter-as-ipmsi-auto-discovery, s-pmsi-auto-discovery, intra-as-segment-leaf-auto-discovery, source-active-auto-discovery, shared-tree-join, source-tree-join
Introduced19.10.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement string named-entry string from neighbor
Treeneighbor
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement string named-entry string from neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

next-hop
Synopsis Enter the next-hop context
Context configure policy-options policy-statement string named-entry string from next-hop
Treenext-hop
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the next hop to match
Context configure policy-options policy-statement string named-entry string from next-hop ip-address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

origin keyword
Synopsis Route origin match criteria
Context configure policy-options policy-statement string named-entry string from origin keyword
Treeorigin

Description

This command configures a match criteria for the origin attribute of the route. The origin attribute is applicable to BGP routes and to the following subscriber-management routes:

Host routes (for example, IPv4 /32 address, or IPv6 SLAAC prefix) carry the origin attribute with AAA, dynamic, or static values, depending on the address assignment method. For CUPS hosts, the origin attribute is always PFCP. Host routes can also be distinguished using the sub-mgmt option for the protocol command. 

Dynamically provisioned prefixes or loopback addresses use AAA or PFCP origin values, depending on the protocol that provides the prefix and address. Dynamic routes can also be distinguished using the direct option for the protocol command.

Statically configured prefixes under the subscriber interface do not have an origin attribute. These routes can be distinguished using the direct option for the protocol command.

Framed routes for non-CUPS hosts do not have an origin attribute. Framed routes for CUPS hosts use PFCP for the origin attribute. Alternatively, framed routes can be distinguished using the managed option for the protocol command.

The values that are specific to subscriber-management routes are never carried in BGP updates as part of the BGP origin attribute and are not visible within the BGP process.

Optionsigp, egp, incomplete, any, aaa, dynamic, static, bonding, pfcp
Introduced19.10.R1

Platforms

All

policy-variables
Synopsis Enter the policy-variables context
Contextconfigure policy-options policy-statement string named-entry string from policy-variables
Treepolicy-variables
Introduced19.10.R1

Platforms

All

name [variable-name] string
Synopsis Enter the name list instance
Context configure policy-options policy-statement string named-entry string from policy-variables name string
Treename

Description

Commands in this context configure global variables for use across BGP peers of a common type (transit, peer, customer, and so on).

Max. Instances10
Introduced19.10.R1

Platforms

All

address (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis IP address of the policy variable
Context configure policy-options policy-statement string named-entry string from policy-variables name string address (ipv4-address-no-zone | ipv6-address-no-zone)
Treeaddress

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced19.10.R1

Platforms

All

prefix (ipv4-prefix | ipv6-prefix)
Synopsis Prefix value associated with the variable name
Contextconfigure policy-options policy-statement string named-entry string from policy-variables name string prefix (ipv4-prefix | ipv6-prefix)
Treeprefix

Notes

The following elements are part of a mandatory choice: address, decimal, number, prefix, or value.

Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement string named-entry string from protocol
Treeprotocol

Description

Commands in this context configure the match criterion based on protocols for a route policy statement entry and may be used for both import and export policies.

Introduced19.10.R1

Platforms

All

instance (keyword | number)
Synopsis Instance for protocol IS-IS, OSPF, or OSPFv3 to match
Contextconfigure policy-options policy-statement string named-entry string from protocol instance (keyword | number)
Treeinstance

Description

This command specifies the OSPF, OSPFv3, or IS-IS instance to be used as the match criterion.

When this command is explicitly configured, the name command must be configured to identify the protocol (OSPF, OSPFv3, or IS-IS).

Range0 to 127
Optionsall
Default0
Introduced 19.10.R1

Platforms

All

name keyword
Synopsis List of protocol names as the match criterion
Contextconfigure policy-options policy-statement string named-entry string from protocol name keyword
Treename

Description

This command specifies a protocol list for the match criterion.  If multiple protocols are specified, the protocol names must belong to the following protocol set:

  • direct

  • static

  • isis

  • aggregate

  • bgp

  • bgp-label

  • direct-interface

If multiple protocols are specified, the instance command cannot be explicitly configured.

The protocol direct-interface route type matches the specific direct interface host IPv4 /32 and IPv6 /128 routes.

Optionsdirect, static, bgp, isis, ospf, rip, aggregate, bgp-vpn, igmp, pim, ospf3, ldp, sub-mgmt, mld, managed, vpn-leak, nat, periodic, ipsec, dhcpv6-pd, dhcpv6-na, dhcpv6-ta, dhcpv6-pd-excl, ripng, bgp-label, direct-interface, arp-nd, rib-api, dhcp-client, evpn-ifl, srv6, video
Max. Instances 5
Introduced19.10.R1

Platforms

All

route-distinguisher-list (param-midstring-64 | string)
Synopsis Route distinguisher list as a match criterion
Contextconfigure policy-options policy-statement string named-entry string from route-distinguisher-list (param-midstring-64 | string)
Treeroute-distinguisher-list

Description

This command specifies the (possibly parameterized) name of a route distinguisher (RD) list.

This match condition is supported by policies applied as VRF-import or BGP peer import policies. A BGP route can match a policy entry with this match criterion if the NLRI field contains an RD that is matched by at least one of the entries in the RD list.

BGP routes belonging to address families other than VPN-IPv4, VPN-IPv6, MCAST-VPN-IPv4, MCAST-VPN-IPv6, EVPN, FlowSpec-VPN IPv4, FlowSpec-VPN IPv6, MVPN-IPv4, or MVPN-IPv6 route do not match policy entries with this match criterion.

String Length1 to 64
Introduced23.3.R1

Platforms

All

source-address
Synopsis Enter the source-address context
Contextconfigure policy-options policy-statement string named-entry string from source-address
Treesource-address
Introduced19.10.R1

Platforms

All

srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Synopsis SRv6 SID value as the match criterion for the BGP route
Contextconfigure policy-options policy-statement string named-entry string from srv6-sid-prefix (policy-var-name | ipv6-unicast-prefix)
Treesrv6-sid-prefix

Description

This command configures either the name of a prefix policy variable or an IPv6 prefix and prefix length, as a match criterion for a BGP route.

Note: If the name of a prefix policy variable is the match criterion, the name must start and end with an at sign (@).

A BGP route matches this condition if it has an SRv6 TLV, and the SID value in that TLV is matched by the bits of the IPv6 prefix (up to the specified prefix length).

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

The SID value used as the match criterion can aslo be a micro-segment (uSID) value.

String Length1 to 32
Introduced23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

srv6-tlv keyword
Synopsis SRv6 TLV presence as match criterion for BGP route
Contextconfigure policy-options policy-statement string named-entry string from srv6-tlv keyword
Treesrv6-tlv

Description

This command configures whether the entry matches a BGP route with a prefix SID attribute containing an SRv6 TLV.

If this command is not configured, a BGP route can match the entry, regardless of whether it has a prefix SID attribute or whether that prefix SID attribute has SRv6 TLVs.

This match condition is supported in BGP import policies, BGP export policies, and VRF or VSI import policies.

If the present option is configured, a BGP route only matches this entry if it has a prefix SID attribute containing an SRv6 TLV.

If the not-present option is configured, a BGP route only matches this entry if it does not have a prefix SID attribute containing an SRv6 TLV.

Optionspresent, not-present
Introduced 23.7.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS, VSR

state keyword
Synopsis State used as a match criterion
Context configure policy-options policy-statement string named-entry string from state keyword
Treestate

Description

This command configures a criterion that identifies in resilient gateways which routes are associated with an active context and which routes are associated with a standby context.

Optionssrrp-master, srrp-non-master, ipsec-master-with-peer, ipsec-master-without-peer, ipsec-non-master, fsg-active, fsg-standby
Introduced19.10.R1

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

to
Synopsis Enable the to context
Context configure policy-options policy-statement string named-entry string to
Treeto
Introduced19.10.R1

Platforms

All

neighbor
Synopsis Enter the neighbor context
Context configure policy-options policy-statement string named-entry string to neighbor
Treeneighbor
Introduced19.10.R1

Platforms

All

ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Synopsis IP address to match the neighbor
Context configure policy-options policy-statement string named-entry string to neighbor ip-address (ipv4-address-no-zone | ipv6-address-no-zone | ipv4-address-with-zone | ipv6-address-with-zone)
Treeip-address

Notes

The following elements are part of a choice: ip-address or prefix-list.

Introduced19.10.R1

Platforms

All

prefix-list (param-midstring-64 | string)
Synopsis Prefix list as match criterion
Context configure policy-options policy-statement string named-entry string to prefix-list (param-midstring-64 | string)
Treeprefix-list
String Length1 to 64
Max. Instances28

Notes

This element is ordered by the user.

Introduced19.10.R1

Platforms

All

protocol
Synopsis Enter the protocol context
Context configure policy-options policy-statement string named-entry string to protocol
Treeprotocol
Introduced19.10.R1

Platforms

All

prefix-list [name] string

Synopsis Enter the prefix-list list instance
Contextconfigure policy-options prefix-list string
Treeprefix-list
Introduced16.0.R1

Platforms

All

[name] string
Synopsis Prefix list name
Context configure policy-options prefix-list string
Treeprefix-list

Description

This command specifies the name for a prefix list.

Policy parameters must be enclosed by at-signs (@) and may be midstring; for example, "@variable@", "start@variable@end", "@variable@end", or "start@variable@".

String Length1 to 64

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

prefix [ip-prefix] (ipv4-prefix | ipv6-prefix) type keyword
Synopsis Enter the prefix list instance
Contextconfigure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix
Introduced16.0.R1

Platforms

All

[ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis IP prefix associated with the prefix length
Contextconfigure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

type keyword
Synopsis Prefix list match type
Context configure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword
Treeprefix
Optionsexact, longer, through, range, to, address-mask

Notes

This element is part of a list key.

Introduced16.0.R1

Platforms

All

end-length number
Synopsis Prefix range end length
Context configure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword end-length number
Treeend-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

mask-pattern [address] (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis Add a list entry for mask-pattern
Contextconfigure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone)
Treemask-pattern

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced20.7.R1

Platforms

All

[address] (ipv4-address-no-zone | ipv6-address-no-zone)
Synopsis Address mask for matching routes to the prefix entry
Contextconfigure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword mask-pattern (ipv4-address-no-zone | ipv6-address-no-zone)
Treemask-pattern

Description

This command specifies the address mask to compare against the prefix entry to determine whether the route is considered a match.

A route matches the prefix entry if the following conditions are met.

  • The bitwise logical AND of the prefix address and its mask matches the bitwise logical AND of the route address and its mask.

  • The prefix length of the prefix entry matches the prefix length of the route.

For example, for a prefix entry of 17.1.0.0/32, routes with an address 17.1.x.0 (where x can be 0 through 255) and a prefix length of 32 match the entry.

Notes

This element is part of a list key.

Introduced20.7.R1

Platforms

All

start-length number
Synopsis Start in the prefix range length
Context configure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword start-length number
Treestart-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

through-length number
Synopsis Prefix through length
Context configure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword through-length number
Treethrough-length
Range0 to 128

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced16.0.R1

Platforms

All

to-prefix [ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis Add a list entry for to-prefix
Contextconfigure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword to-prefix (ipv4-prefix | ipv6-prefix)
Treeto-prefix

Notes

The following elements are part of a choice: mask-pattern, (end-length and start-length), through-length, or to-prefix.

Introduced20.7.R1

Platforms

All

[ip-prefix] (ipv4-prefix | ipv6-prefix)
Synopsis IP prefix for "to" match type
Context configure policy-options prefix-list string prefix (ipv4-prefix | ipv6-prefix) type keyword to-prefix (ipv4-prefix | ipv6-prefix)
Treeto-prefix

Description

This command configures an IP prefix to use in a route policy prefix list for the to match type. If the prefix entry is in the format prefix1/length1, and this command is configured in the format prefix2/length2, a route matches the prefix entry if the following conditions are met.

  • The route shares the same most-significant bits (specified by length1) with the prefix entry

  • The route shares the same most-significant bits (specified by length2) with this IP prefix value

  • The prefix length of the route is in the range of length1 to length2 (inclusive)

For example, for a prefix entry of 10.0.0.8 with a to IP prefix value of 10.0.0.0/32, routes 10.0.0.0/8, 10.0.0.0/9, 10.0.0.0.0/10, and so on, to 10.0.0.0/32 are considered matches for the prefix entry.

Notes

This element is part of a list key.

Introduced20.7.R1

Platforms

All

route-distinguisher-list [name] string

Synopsis Enter the route-distinguisher-list list instance
Contextconfigure policy-options route-distinguisher-list string
Treeroute-distinguisher-list
Introduced23.3.R1

Platforms

All

[name] string
Synopsis Route distinguisher list name
Context configure policy-options route-distinguisher-list string
Treeroute-distinguisher-list

Description

This command creates a list of entries used to match the RD in BGP routes of specific address families.

String Length1 to 64

Notes

This element is part of a list key.

Introduced23.3.R1

Platforms

All

rd-entry [rd] string
Synopsis Add a list entry for rd-entry
Context configure policy-options route-distinguisher-list string rd-entry string
Treerd-entry
Max. Instances128
Introduced23.3.R1

Platforms

All

[rd] string
Synopsis Route distinguisher
Context configure policy-options route-distinguisher-list string rd-entry string
Treerd-entry

Description

This command creates an RD matching entry containing an IPv4 address or ASN and the assigned number. The following formats are supported:

  • a.b.c.d/m:* – RD in IPv4 format with a wildcard character (such as 10.0.0.0/16:*)

  • a.b.c.d/m:n – RD in IPv4 format with a specific number (such as 10.0.0.2/32:535)

  • asn:* – RD in ASN format with a wildcard character (such as 65000:*)

  • asn:n – RD in ASN format with a specific number (such as 65000:535)

See the "Route distinguishers" section of the 7450 ESS, 7750 SR, 7950 XRS, and VSR Layer 3 Services Guide: IES and VPRN for information about Type values.

String Length3 to 28

Notes

This element is part of a list key.

Introduced23.3.R1

Platforms

All